@thomasminh1995/depverdict 0.6.0-alpha.1

package/schemas/project-manifest.schema.json

@@ -0,0 +1,308 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/thomasMinh1995/UpgradeLens/main/schemas/project-manifest.schema.json",
+  "title": "UpgradeLens Project Manifest",
+  "description": "Portable output produced by UpgradeLens project discovery.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "generatedAt",
+    "generator",
+    "repository",
+    "summary",
+    "projects",
+    "warnings"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "2.0.0" },
+    "generatedAt": { "type": "string", "format": "date-time" },
+    "generator": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "version"],
+      "properties": {
+        "name": { "const": "UpgradeLens" },
+        "version": { "type": "string" }
+      }
+    },
+    "repository": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "root"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "root": { "const": "." },
+        "vcs": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["type"],
+          "properties": {
+            "type": { "const": "git" },
+            "branch": { "type": "string", "minLength": 1 }
+          }
+        }
+      }
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["projectCount", "ecosystems", "workspaceCount"],
+      "properties": {
+        "projectCount": { "type": "integer", "minimum": 0 },
+        "ecosystems": {
+          "type": "object",
+          "additionalProperties": { "type": "integer", "minimum": 1 }
+        },
+        "workspaceCount": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "projects": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/project" }
+    },
+    "warnings": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/warning" }
+    }
+  },
+  "$defs": {
+    "packageManager": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "version": { "type": "string", "minLength": 1 }
+      }
+    },
+    "dependencyByType": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["dependencies", "devDependencies", "peerDependencies", "optionalDependencies"],
+      "properties": {
+        "dependencies": { "type": "integer", "minimum": 0 },
+        "devDependencies": { "type": "integer", "minimum": 0 },
+        "peerDependencies": { "type": "integer", "minimum": 0 },
+        "optionalDependencies": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "installedVersionSource": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["type", "path", "lockfileVersion", "packagePath"],
+      "properties": {
+        "type": { "const": "package-lock" },
+        "path": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(?!/)(?![A-Za-z]:)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\\\]+$"
+        },
+        "lockfileVersion": { "enum": [1, 2, 3] },
+        "packagePath": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(?!/)(?![A-Za-z]:)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\\\]+$"
+        }
+      }
+    },
+    "installedVersionReason": {
+      "enum": [
+        "INVALID_LOCKFILE",
+        "LOCKFILE_NOT_FOUND",
+        "LOCKFILE_UNSUPPORTED",
+        "NON_REGISTRY_DEPENDENCY",
+        "PACKAGE_NOT_RESOLVED",
+        "RESOLVED_VERSION_UNAVAILABLE",
+        "WORKSPACE_RESOLUTION_AMBIGUOUS"
+      ]
+    },
+    "dependencySummary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status"],
+      "properties": {
+        "status": { "enum": ["parsed", "unsupported", "failed"] },
+        "declarationCount": { "type": "integer", "minimum": 0 },
+        "uniqueCount": { "type": "integer", "minimum": 0 },
+        "duplicateCount": { "type": "integer", "minimum": 0 },
+        "byType": { "$ref": "#/$defs/dependencyByType" }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": { "status": { "const": "parsed" } },
+            "required": ["status"]
+          },
+          "then": { "required": ["declarationCount", "uniqueCount", "duplicateCount"] },
+          "else": {
+            "not": {
+              "anyOf": [
+                { "required": ["declarationCount"] },
+                { "required": ["uniqueCount"] },
+                { "required": ["duplicateCount"] },
+                { "required": ["byType"] }
+              ]
+            }
+          }
+        }
+      ]
+    },
+    "dependency": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "normalizedName", "declaredVersion", "type", "manifest"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "normalizedName": { "type": "string", "minLength": 1 },
+        "declaredVersion": { "type": ["string", "null"] },
+        "installedVersion": { "type": ["string", "null"] },
+        "installedVersionStatus": { "enum": ["resolved", "unresolved"] },
+        "installedVersionSource": {
+          "anyOf": [
+            { "$ref": "#/$defs/installedVersionSource" },
+            { "type": "null" }
+          ]
+        },
+        "installedVersionReason": {
+          "anyOf": [
+            { "$ref": "#/$defs/installedVersionReason" },
+            { "type": "null" }
+          ]
+        },
+        "type": {
+          "enum": [
+            "constraint",
+            "dependency",
+            "devDependency",
+            "directReference",
+            "editable",
+            "optionalDependency",
+            "peerDependency",
+            "runtime"
+          ]
+        },
+        "manifest": { "type": "string", "minLength": 1 }
+      },
+      "allOf": [
+        {
+          "if": {
+            "anyOf": [
+              { "required": ["installedVersion"] },
+              { "required": ["installedVersionStatus"] },
+              { "required": ["installedVersionSource"] },
+              { "required": ["installedVersionReason"] }
+            ]
+          },
+          "then": {
+            "required": [
+              "installedVersion",
+              "installedVersionStatus",
+              "installedVersionSource",
+              "installedVersionReason"
+            ]
+          }
+        },
+        {
+          "if": {
+            "properties": { "installedVersionStatus": { "const": "resolved" } },
+            "required": ["installedVersionStatus"]
+          },
+          "then": {
+            "properties": {
+              "installedVersion": { "type": "string", "minLength": 1 },
+              "installedVersionSource": { "$ref": "#/$defs/installedVersionSource" },
+              "installedVersionReason": { "type": "null" }
+            }
+          }
+        },
+        {
+          "if": {
+            "properties": { "installedVersionStatus": { "const": "unresolved" } },
+            "required": ["installedVersionStatus"]
+          },
+          "then": {
+            "properties": {
+              "installedVersion": { "type": "null" },
+              "installedVersionSource": { "type": "null" },
+              "installedVersionReason": { "$ref": "#/$defs/installedVersionReason" }
+            }
+          }
+        }
+      ]
+    },
+    "project": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "name", "path", "ecosystem", "languages", "manifests", "dependencySummary", "dependencies"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "name": { "type": "string", "minLength": 1 },
+        "path": { "type": "string", "minLength": 1 },
+        "ecosystem": {
+          "enum": ["al", "dotnet", "go", "java", "node", "php", "python", "ruby", "rust"]
+        },
+        "languages": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "manifests": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "version": { "type": "string" },
+        "private": { "type": "boolean" },
+        "packageManager": { "$ref": "#/$defs/packageManager" },
+        "workspace": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["root", "role"],
+          "properties": {
+            "root": { "type": "string", "minLength": 1 },
+            "role": { "enum": ["root", "member"] }
+          }
+        },
+        "dependencySummary": { "$ref": "#/$defs/dependencySummary" },
+        "dependencies": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/dependency" }
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "dependencySummary": {
+                "type": "object",
+                "properties": { "status": { "const": "parsed" } },
+                "required": ["status"]
+              }
+            },
+            "required": ["dependencySummary"]
+          },
+          "else": { "properties": { "dependencies": { "type": "array", "maxItems": 0 } } }
+        }
+      ]
+    },
+    "warning": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "path", "message"],
+      "properties": {
+        "code": {
+          "enum": [
+            "DEPENDENCY_PARSE_FAILED",
+            "DIRECTORY_UNREADABLE",
+            "DUPLICATE_DEPENDENCY_DECLARATION",
+            "MANIFEST_INVALID",
+            "MANIFEST_UNREADABLE"
+          ]
+        },
+        "path": { "type": "string", "minLength": 1 },
+        "message": { "type": "string", "minLength": 1 }
+      }
+    }
+  }
+}

package/schemas/qualification-record.schema.json

@@ -0,0 +1,56 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/thomasMinh1995/UpgradeLens/main/schemas/qualification-record.schema.json",
+  "title": "UpgradeLens AI Runtime Qualification Record",
+  "description": "Portable task-scoped governance decision for one exact capability and deployment tuple.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "qualificationId",
+    "deploymentProfileDigest",
+    "capabilityProfileDigest",
+    "conformanceReportDigest",
+    "status",
+    "qualifiedFor"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "1.0.0" },
+    "qualificationId": { "$ref": "#/$defs/id" },
+    "deploymentProfileDigest": { "$ref": "#/$defs/digest" },
+    "capabilityProfileDigest": { "$ref": "#/$defs/digest" },
+    "conformanceReportDigest": {
+      "oneOf": [
+        { "$ref": "#/$defs/digest" },
+        { "type": "null" }
+      ]
+    },
+    "status": {
+      "enum": ["EXPERIMENTAL", "SUPPORTED", "CERTIFIED", "DEPRECATED", "RETIRED"]
+    },
+    "qualifiedFor": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/task" }
+    }
+  },
+  "$defs": {
+    "id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$"
+    },
+    "task": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$"
+    },
+    "digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    }
+  }
+}

package/schemas/repository-impact-evidence.schema.json

@@ -0,0 +1,232 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/thomasMinh1995/UpgradeLens/main/schemas/repository-impact-evidence.schema.json",
+  "title": "UpgradeLens Repository Impact Evidence",
+  "description": "Deterministic evidence explaining Repository Impact conclusions.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "generatedAt", "generator", "input", "analysis", "summary", "dependencies"],
+  "properties": {
+    "schemaVersion": { "const": "1.0.0" },
+    "generatedAt": { "type": "string", "format": "date-time" },
+    "generator": { "$ref": "#/$defs/generator" },
+    "input": { "$ref": "#/$defs/input" },
+    "analysis": { "$ref": "#/$defs/analysis" },
+    "summary": { "$ref": "#/$defs/summary" },
+    "dependencies": { "type": "array", "items": { "$ref": "#/$defs/dependencyEvidence" } }
+  },
+  "$defs": {
+    "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "relativePath": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^(?!/)(?![A-Za-z]:)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\\\]+$"
+    },
+    "generator": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "version"],
+      "properties": {
+        "name": { "const": "UpgradeLens" },
+        "version": { "type": "string", "minLength": 1 }
+      }
+    },
+    "projectManifest": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "artifact", "artifactDigest", "repository"],
+      "properties": {
+        "schemaVersion": { "const": "2.0.0" },
+        "artifact": { "$ref": "#/$defs/relativePath" },
+        "artifactDigest": { "$ref": "#/$defs/digest" },
+        "repository": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["name", "root"],
+          "properties": {
+            "name": { "type": "string", "minLength": 1 },
+            "root": { "const": "." }
+          }
+        }
+      }
+    },
+    "artifactLineage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "artifact", "artifactDigest"],
+      "properties": {
+        "schemaVersion": { "const": "1.0.0" },
+        "artifact": { "$ref": "#/$defs/relativePath" },
+        "artifactDigest": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "input": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["projectManifest", "versionAnalysis", "usageIndex", "repositoryImpact"],
+      "properties": {
+        "projectManifest": { "$ref": "#/$defs/projectManifest" },
+        "versionAnalysis": { "$ref": "#/$defs/artifactLineage" },
+        "usageIndex": { "$ref": "#/$defs/artifactLineage" },
+        "repositoryImpact": { "$ref": "#/$defs/artifactLineage" }
+      }
+    },
+    "evidenceGenerator": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "version"],
+      "properties": {
+        "id": { "const": "repository-impact-evidence" },
+        "version": { "const": "1.0.0" }
+      }
+    },
+    "analysis": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["evidenceGenerator", "resultCount"],
+      "properties": {
+        "evidenceGenerator": { "$ref": "#/$defs/evidenceGenerator" },
+        "resultCount": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "reasonCounts": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["DEPENDENCY_NOT_USED", "EXACT_SYMBOL_USAGE_FOUND", "NO_EXACT_SYMBOL_USAGE_FOUND", "NO_MATCHABLE_SYMBOL_FOUND"],
+      "properties": {
+        "DEPENDENCY_NOT_USED": { "type": "integer", "minimum": 0 },
+        "EXACT_SYMBOL_USAGE_FOUND": { "type": "integer", "minimum": 0 },
+        "NO_EXACT_SYMBOL_USAGE_FOUND": { "type": "integer", "minimum": 0 },
+        "NO_MATCHABLE_SYMBOL_FOUND": { "type": "integer", "minimum": 0 },
+        "USAGE_NOT_FOUND": { "type": "integer", "minimum": 0 },
+        "COVERAGE_UNAVAILABLE": { "type": "integer", "minimum": 0 },
+        "NOT_ANALYZED": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["impacted", "dependencyCount", "findingCount", "impactedFindingCount", "matchedSymbolCount", "usageRecordCount", "affectedFileCount", "reasonCounts"],
+      "properties": {
+        "impacted": { "type": "boolean" },
+        "dependencyCount": { "type": "integer", "minimum": 0 },
+        "findingCount": { "type": "integer", "minimum": 0 },
+        "impactedFindingCount": { "type": "integer", "minimum": 0 },
+        "matchedSymbolCount": { "type": "integer", "minimum": 0 },
+        "usageRecordCount": { "type": "integer", "minimum": 0 },
+        "affectedFileCount": { "type": "integer", "minimum": 0 },
+        "reasonCounts": { "$ref": "#/$defs/reasonCounts" }
+      }
+    },
+    "usageRecord": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["file"],
+      "properties": {
+        "file": { "$ref": "#/$defs/relativePath" }
+      }
+    },
+    "matchedSymbol": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["symbol", "usages"],
+      "properties": {
+        "symbol": { "type": "string", "minLength": 1 },
+        "usages": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/usageRecord" }
+        }
+      }
+    },
+    "findingEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "findingId", "kind", "summary", "impacted", "reasonCode", "matchedSymbols"],
+      "properties": {
+        "id": { "$ref": "#/$defs/digest" },
+        "findingId": { "type": "string", "minLength": 1 },
+        "kind": { "const": "breakingChange" },
+        "summary": { "type": "string", "minLength": 1 },
+        "impacted": { "type": "boolean" },
+        "status": {
+          "enum": ["IMPACTED", "NOT_IMPACTED", "USAGE_NOT_FOUND", "COVERAGE_UNAVAILABLE", "NOT_ANALYZED"]
+        },
+        "reasonCode": {
+          "enum": [
+            "DEPENDENCY_NOT_USED", "EXACT_SYMBOL_USAGE_FOUND", "NO_EXACT_SYMBOL_USAGE_FOUND",
+            "NO_MATCHABLE_SYMBOL_FOUND", "USAGE_NOT_FOUND", "COVERAGE_UNAVAILABLE", "NOT_ANALYZED",
+            "VERSION_ANALYSIS_SKIPPED", "VERSION_ANALYSIS_FAILED", "COVERAGE_COMPLETE",
+            "ANALYZER_UNAVAILABLE", "ANALYZER_AMBIGUOUS", "SOURCE_SCAN_INCOMPLETE",
+            "SOURCE_PARSE_FAILED", "FILE_UNREADABLE", "ANALYZER_FAILED",
+            "MULTIPLE_ANALYSIS_FAILURES", "COVERAGE_METADATA_MISSING"
+          ]
+        },
+        "matchedSymbols": { "type": "array", "items": { "$ref": "#/$defs/matchedSymbol" } }
+      }
+    },
+    "dependencyEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["analysisResultId", "projectId", "packageId", "name", "impacted", "findings"],
+      "properties": {
+        "analysisResultId": { "$ref": "#/$defs/digest" },
+        "projectId": { "type": "string", "minLength": 1 },
+        "packageId": { "type": "string", "minLength": 1 },
+        "name": { "type": "string", "minLength": 1 },
+        "impacted": { "type": "boolean" },
+        "status": {
+          "enum": ["IMPACTED", "NOT_IMPACTED", "USAGE_NOT_FOUND", "COVERAGE_UNAVAILABLE", "NOT_ANALYZED"]
+        },
+        "reasonCode": { "$ref": "#/$defs/impactReasonCode" },
+        "coverage": { "$ref": "#/$defs/usageCoverage" },
+        "findings": { "type": "array", "items": { "$ref": "#/$defs/findingEvidence" } }
+      }
+    },
+    "usageCoverage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "projectId", "projectPath", "ecosystem", "status", "analyzer",
+        "scannedFileCount", "analyzedFileCount", "parseFailureCount",
+        "analyzerFailureCount", "unreadableFileCount", "scanFailureCount", "reasonCode"
+      ],
+      "properties": {
+        "projectId": { "type": "string", "minLength": 1 },
+        "projectPath": { "type": ["string", "null"] },
+        "ecosystem": { "type": ["string", "null"] },
+        "status": { "enum": ["complete", "partial", "unavailable", "failed"] },
+        "analyzer": {
+          "oneOf": [
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["id", "version"],
+              "properties": {
+                "id": { "type": "string", "minLength": 1 },
+                "version": { "type": "string", "minLength": 1 }
+              }
+            },
+            { "type": "null" }
+          ]
+        },
+        "scannedFileCount": { "type": "integer", "minimum": 0 },
+        "analyzedFileCount": { "type": "integer", "minimum": 0 },
+        "parseFailureCount": { "type": "integer", "minimum": 0 },
+        "analyzerFailureCount": { "type": "integer", "minimum": 0 },
+        "unreadableFileCount": { "type": "integer", "minimum": 0 },
+        "scanFailureCount": { "type": "integer", "minimum": 0 },
+        "reasonCode": { "type": "string", "minLength": 1 }
+      }
+    },
+    "impactReasonCode": {
+      "enum": [
+        "EXACT_SYMBOL_USAGE_FOUND", "NO_EXACT_SYMBOL_USAGE_FOUND", "NO_MATCHABLE_SYMBOL_FOUND",
+        "USAGE_NOT_FOUND", "VERSION_ANALYSIS_SKIPPED", "VERSION_ANALYSIS_FAILED",
+        "COVERAGE_COMPLETE", "ANALYZER_UNAVAILABLE", "ANALYZER_AMBIGUOUS",
+        "SOURCE_SCAN_INCOMPLETE", "SOURCE_PARSE_FAILED", "FILE_UNREADABLE",
+        "ANALYZER_FAILED", "MULTIPLE_ANALYSIS_FAILURES", "COVERAGE_METADATA_MISSING"
+      ]
+    }
+  }
+}