@topy-ai/maggie 0.7.41 → 0.7.42

package/README-zh-TW.md

@@ -8,11 +8,14 @@ Codex、Claude Code 與相容的 coding agents。
 ## 安裝
 
 ```bash
-npx @topy-ai/maggie@0.7.41 init --agent all
-npx @topy-ai/maggie@0.7.41 doctor --project .
+npx @topy-ai/maggie@0.7.42 init --agent all
+npx @topy-ai/maggie@0.7.42 doctor --project .
 ```
 
-目前 release 是 `0.7.41`，完成 feedback batches 22、23：加入 declarative
+目前 release 是 `0.7.42`。新增 redacted Gemini video-provider evidence gate，
+驗證 provider acknowledgement、idempotency、moderation、object-storage
+readback、bounded retry 與 git provenance，並拒絕 raw provider payload 或
+input asset 欄位。0.7.41 完成 feedback batches 22、23：加入 declarative
 browser interaction evidence、design markup/style/content-key gate、compiler
 source anchoring、entity double-escape protection、`update --help` read-only，
 以及 noindex hypothetical indexability、可過期 baseline acknowledgement、
@@ -41,6 +44,8 @@ maggie provenance --project . --source src/content/post.md
 maggie scaffold --project . --framework astro --language typescript --write --confirm
 maggie brand-kit --project . --design DESIGN.md --write --confirm
 maggie npm11 --project . --smoke --confirm
+maggie media video-provider-evidence --evidence .maggie/video-provider-evidence.json \
+  --environment staging --model gemini-omni-1.1-flash --require-host
 maggie media video-playback --evidence .maggie/video-playback-evidence.json
 maggie booking-delivery --policy .maggie/booking-delivery-policy.json
 ```

package/README.md

@@ -60,7 +60,11 @@ Maggie keeps the existing project foundation and asks for decisions before
 shared routes, analytics, or publishing boundaries change. The current
 package ships 20 installable skills and a local-first MaggieDash foundation.
 
-The current release is `0.7.41`. It closes feedback batches 22 and 23 with
+The current release is `0.7.42`. It adds a redacted Gemini video-provider
+evidence gate for provider acknowledgement, idempotency, moderation,
+object-storage readback, bounded retry, and git provenance; unknown raw
+provider payload and input-asset fields fail validation. The 0.7.41 release
+closes feedback batches 22 and 23 with
 declarative browser interaction evidence, stable design markup/style/content-key
 gates, compiler source anchoring, entity double-escape protection, and a
 read-only `update --help` path. It also adds hypothetical indexability
@@ -86,6 +90,8 @@ maggie provenance --project . --source src/content/post.md
 maggie scaffold --project . --framework astro --language typescript --write --confirm
 maggie brand-kit --project . --design DESIGN.md --write --confirm
 maggie npm11 --project . --smoke --confirm
+maggie media video-provider-evidence --evidence .maggie/video-provider-evidence.json \
+  --environment staging --model gemini-omni-1.1-flash --require-host
 maggie media video-playback --evidence .maggie/video-playback-evidence.json
 maggie booking-delivery --policy .maggie/booking-delivery-policy.json
 ```

package/bin/maggie.js

@@ -135,7 +135,7 @@ Usage:
   maggie schedule PATH/.maggie/schedule.json --project PATH
   maggie analytics [traffic-audit|release-gate] --project PATH --environment staging
   maggie analytics gsc-readiness --gsc-evidence FILE
-  maggie media [image-policy|video-policy|video-job|video-playback] [--policy/--job/--evidence FILE]
+  maggie media [image-policy|video-policy|video-job|video-provider-evidence|video-playback] [--policy/--job/--evidence FILE]
   maggie provenance --project PATH [--source PATH] [--output FILE]
   maggie scaffold --project PATH --framework astro|nextjs|sveltekit|nuxt|vite-react|vite-vue [--write --confirm]
   maggie brand-kit --manifest FILE | --project PATH --design DESIGN.md [--write --confirm]

package/bundled-contracts/maggie-media/video-provider-evidence-v1.schema.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://maggie.noblox.app/contracts/maggie-media/video-provider-evidence-v1.schema.json",
+  "title": "Maggie video provider canary evidence v1",
+  "type": "object",
+  "required": ["schemaVersion", "environment", "provider", "model", "status", "hostVerified", "acknowledgement", "idempotency", "moderation", "storage", "retry", "rawProviderPayloadIncluded", "inputAssetDataIncluded", "sourceRevision"],
+  "properties": {
+    "schemaVersion": {"const": "maggie-video-provider-evidence.v1"},
+    "environment": {"enum": ["test", "staging", "production"]},
+    "provider": {"const": "google-gemini"},
+    "model": {"type": "string", "pattern": "^(gemini|veo)-"},
+    "status": {"const": "passed"},
+    "hostVerified": {"const": true},
+    "acknowledgement": {"type": "object", "required": ["accepted", "providerReferencePresent"], "properties": {"accepted": {"const": true}, "providerReferencePresent": {"const": true}}, "additionalProperties": false},
+    "idempotency": {"type": "object", "required": ["replayAccepted", "duplicateChargePrevented", "assetDeduplicated"], "properties": {"replayAccepted": {"const": true}, "duplicateChargePrevented": {"const": true}, "assetDeduplicated": {"const": true}}, "additionalProperties": false},
+    "moderation": {"type": "object", "required": ["preflightPassed", "postGenerationReviewPassed"], "properties": {"preflightPassed": {"const": true}, "postGenerationReviewPassed": {"const": true}}, "additionalProperties": false},
+    "storage": {"type": "object", "required": ["uploadAccepted", "metadataPersisted", "readbackPassed", "signedOrApprovedUrlPresent"], "properties": {"uploadAccepted": {"const": true}, "metadataPersisted": {"const": true}, "readbackPassed": {"const": true}, "signedOrApprovedUrlPresent": {"const": true}}, "additionalProperties": false},
+    "retry": {"type": "object", "required": ["transientFailureObserved", "bounded", "attempts"], "properties": {"transientFailureObserved": {"const": true}, "bounded": {"const": true}, "attempts": {"type": "integer", "minimum": 1, "maximum": 3}}, "additionalProperties": false},
+    "rawProviderPayloadIncluded": {"const": false},
+    "inputAssetDataIncluded": {"const": false},
+    "sourceRevision": {"type": "object", "required": ["commit", "branch", "dirty"], "properties": {"commit": {"type": "string"}, "branch": {"type": "string"}, "dirty": {"type": "boolean"}}, "additionalProperties": false},
+    "generatedAt": {"type": "string"}
+  },
+  "additionalProperties": false
+}

package/bundled-tools/clis/maggie_workflows.py

@@ -104,6 +104,57 @@ def validate_video_job(args: argparse.Namespace) -> int:
     return emit({"schemaVersion": "maggie-video-job.v1", "passed": not errors, "jobId": job.get("jobId"), "state": state, "errors": errors, "rawProviderPayloadIncluded": False}, args.output)
 
 
+def validate_video_provider_evidence(args: argparse.Namespace) -> int:
+    evidence = load(Path(args.evidence).expanduser().resolve())
+    errors: list[str] = []
+    allowed = {
+        "schemaVersion", "environment", "provider", "model", "status", "hostVerified",
+        "acknowledgement", "idempotency", "moderation", "storage", "retry",
+        "rawProviderPayloadIncluded", "inputAssetDataIncluded", "sourceRevision", "generatedAt",
+    }
+    for key in evidence:
+        if key not in allowed:
+            errors.append(f"evidence.{key} is not allowed")
+    nested_allowed = {
+        "acknowledgement": {"accepted", "providerReferencePresent"},
+        "idempotency": {"replayAccepted", "duplicateChargePrevented", "assetDeduplicated"},
+        "moderation": {"preflightPassed", "postGenerationReviewPassed"},
+        "storage": {"uploadAccepted", "metadataPersisted", "readbackPassed", "signedOrApprovedUrlPresent"},
+        "retry": {"transientFailureObserved", "bounded", "attempts"},
+        "sourceRevision": {"commit", "branch", "dirty"},
+    }
+    for parent, keys in nested_allowed.items():
+        value = evidence.get(parent)
+        if isinstance(value, dict):
+            for key in value:
+                if key not in keys:
+                    errors.append(f"{parent}.{key} is not allowed")
+    if evidence.get("schemaVersion") != "maggie-video-provider-evidence.v1": errors.append("schemaVersion must be maggie-video-provider-evidence.v1")
+    if evidence.get("environment") not in {"test", "staging", "production"}: errors.append("environment is unsupported")
+    if evidence.get("provider") != "google-gemini": errors.append("provider must be google-gemini")
+    if not str(evidence.get("model", "")).startswith(("gemini-", "veo-")): errors.append("model must be a Gemini or Veo model id")
+    if evidence.get("status") != "passed": errors.append("status must be passed")
+    if args.require_host and evidence.get("hostVerified") is not True: errors.append("hostVerified must be true")
+    acknowledgement = evidence.get("acknowledgement") if isinstance(evidence.get("acknowledgement"), dict) else {}
+    if acknowledgement.get("accepted") is not True or acknowledgement.get("providerReferencePresent") is not True: errors.append("provider acknowledgement is incomplete")
+    idempotency = evidence.get("idempotency") if isinstance(evidence.get("idempotency"), dict) else {}
+    if any(idempotency.get(key) is not True for key in ("replayAccepted", "duplicateChargePrevented", "assetDeduplicated")): errors.append("video idempotency evidence is incomplete")
+    moderation = evidence.get("moderation") if isinstance(evidence.get("moderation"), dict) else {}
+    if moderation.get("preflightPassed") is not True or moderation.get("postGenerationReviewPassed") is not True: errors.append("moderation evidence is incomplete")
+    storage = evidence.get("storage") if isinstance(evidence.get("storage"), dict) else {}
+    if any(storage.get(key) is not True for key in ("uploadAccepted", "metadataPersisted", "readbackPassed", "signedOrApprovedUrlPresent")): errors.append("storage readback evidence is incomplete")
+    retry = evidence.get("retry") if isinstance(evidence.get("retry"), dict) else {}
+    attempts = retry.get("attempts")
+    if retry.get("transientFailureObserved") is not True or retry.get("bounded") is not True or not isinstance(attempts, int) or attempts < 1 or attempts > 3: errors.append("retry evidence is incomplete")
+    if evidence.get("rawProviderPayloadIncluded") is not False: errors.append("raw provider payloads must be excluded")
+    if evidence.get("inputAssetDataIncluded") is not False: errors.append("input asset data must be excluded")
+    source = evidence.get("sourceRevision") if isinstance(evidence.get("sourceRevision"), dict) else {}
+    if not isinstance(source.get("commit"), str) or not isinstance(source.get("branch"), str) or not isinstance(source.get("dirty"), bool): errors.append("sourceRevision is incomplete")
+    if args.environment and evidence.get("environment") != args.environment: errors.append("environment does not match workflow input")
+    if args.model and evidence.get("model") != args.model: errors.append("model does not match workflow input")
+    return emit({"schemaVersion": "maggie-video-provider-evidence.v1", "passed": not errors, "environment": evidence.get("environment"), "provider": evidence.get("provider"), "model": evidence.get("model"), "errors": errors, "rawProviderPayloadIncluded": False, "redacted": True}, args.output)
+
+
 def git_value(project: Path, *args: str) -> str:
     result = subprocess.run(["git", "-C", str(project), *args], capture_output=True, text=True, check=False)
     if result.returncode:
@@ -369,6 +420,7 @@ def main() -> int:
     for kind, relative in (("image", "maggie-media/image-generation-policy-v1.json"), ("video", "maggie-media/video-generation-policy-v1.json")):
         command = media_sub.add_parser(f"{kind}-policy"); command.add_argument("--policy", default=str(contract_root() / relative)); command.add_argument("--output"); command.set_defaults(func=validate_media, kind=kind)
     job = media_sub.add_parser("video-job"); job.add_argument("--job", required=True); job.add_argument("--output"); job.set_defaults(func=validate_video_job)
+    video_provider = media_sub.add_parser("video-provider-evidence"); video_provider.add_argument("--evidence", required=True); video_provider.add_argument("--environment", choices=["test", "staging", "production"]); video_provider.add_argument("--model"); video_provider.add_argument("--require-host", action="store_true"); video_provider.add_argument("--output"); video_provider.set_defaults(func=validate_video_provider_evidence)
     provenance = sub.add_parser("provenance"); provenance.add_argument("--project", default="."); provenance.add_argument("--source"); provenance.add_argument("--boundary", choices=["git-source", "host-runtime", "generated-artifact"], default="git-source"); provenance.add_argument("--output"); provenance.set_defaults(func=capture_provenance)
     scaffold_parser = sub.add_parser("scaffold"); scaffold_parser.add_argument("--project", default="."); scaffold_parser.add_argument("--framework", choices=sorted(FRAMEWORK_PACKAGES), required=True); scaffold_parser.add_argument("--language", choices=["typescript", "javascript"], default="typescript"); scaffold_parser.add_argument("--package-manager", choices=["npm", "pnpm", "yarn", "bun"], default="npm"); scaffold_parser.add_argument("--install-dependencies", action="store_true"); scaffold_parser.add_argument("--write", action="store_true"); scaffold_parser.add_argument("--confirm", action="store_true"); scaffold_parser.add_argument("--force", action="store_true"); scaffold_parser.add_argument("--output"); scaffold_parser.set_defaults(func=scaffold)
     brand = sub.add_parser("brand-kit"); brand.add_argument("--manifest"); brand.add_argument("--project", default="."); brand.add_argument("--design"); brand.add_argument("--tokens"); brand.add_argument("--logo"); brand.add_argument("--font"); brand.add_argument("--icon-library", default="host-icon-library"); brand.add_argument("--assets"); brand.add_argument("--write", action="store_true"); brand.add_argument("--confirm", action="store_true"); brand.add_argument("--output"); brand.set_defaults(func=lambda args: validate_brand(args) if args.manifest else brand_kit(args))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topy-ai/maggie",
-  "version": "0.7.41",
+  "version": "0.7.42",
   "description": "Install and manage Maggie Skills for AI coding agents",
   "license": "MIT",
   "type": "module",