coding-agent-skills 0.2.8

package/schemas/archive-report.schema.json

@@ -0,0 +1,322 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://oneclickpostfactory.invalid/coding-agent-skills/archive-report.schema.json",
+  "title": "Coding Agent Evidence Archive Report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "reportVersion",
+    "bundleId",
+    "core",
+    "verification",
+    "retention",
+    "provenance",
+    "archive",
+    "changedState",
+    "recommendedNextAction"
+  ],
+  "properties": {
+    "reportVersion": {
+      "const": "1.1.0"
+    },
+    "bundleId": {
+      "type": "string",
+      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+    },
+    "core": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["currentVersion", "previousVersion"],
+      "properties": {
+        "currentVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+$"
+        },
+        "previousVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+$"
+        }
+      }
+    },
+    "verification": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "entryCount", "entryIds", "codes", "replayHash", "regression"],
+      "properties": {
+        "status": {
+          "enum": ["complete", "failed"]
+        },
+        "entryCount": {
+          "type": "integer"
+        },
+        "entryIds": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+          }
+        },
+        "codes": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "replayHash": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "regression": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["baselineVersion", "targetVersion", "codes"],
+          "properties": {
+            "baselineVersion": {
+              "type": "string",
+              "pattern": "^\\d+\\.\\d+\\.\\d+$"
+            },
+            "targetVersion": {
+              "type": "string",
+              "pattern": "^\\d+\\.\\d+\\.\\d+$"
+            },
+            "codes": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "retention": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "classification",
+        "minimumDays",
+        "retainUntil",
+        "disposition",
+        "storage",
+        "expiryAdvisory"
+      ],
+      "properties": {
+        "classification": {
+          "enum": ["synthetic-test-evidence", "maintainer-release-evidence"]
+        },
+        "minimumDays": {
+          "type": "integer"
+        },
+        "retainUntil": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "disposition": {
+          "enum": ["retain-then-review", "retain-until-superseded"]
+        },
+        "storage": {
+          "enum": ["repository-fixture", "local-artifact", "external-archive-deferred"]
+        },
+        "expiryAdvisory": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "status",
+            "daysUntilExpiry",
+            "reviewThresholdDays",
+            "advisoryOnly",
+            "deleteAutomatically",
+            "recommendedAction"
+          ],
+          "properties": {
+            "status": {
+              "enum": ["retained", "review-soon", "expired-review-required", "unknown"]
+            },
+            "daysUntilExpiry": {
+              "type": "integer"
+            },
+            "reviewThresholdDays": {
+              "type": "integer"
+            },
+            "advisoryOnly": {
+              "const": true
+            },
+            "deleteAutomatically": {
+              "const": false
+            },
+            "recommendedAction": {
+              "const": "manual-review-only"
+            }
+          }
+        }
+      }
+    },
+    "provenance": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["source", "producer", "sourceCommit", "sourceTag", "signature"],
+      "properties": {
+        "source": {
+          "enum": ["synthetic-fixture", "maintainer-loop"]
+        },
+        "producer": {
+          "type": "string",
+          "pattern": "^[a-z0-9]+(?:[-./][a-z0-9]+)*$"
+        },
+        "sourceCommit": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{40}$"
+        },
+        "sourceTag": {
+          "type": "string",
+          "pattern": "^v\\d+\\.\\d+\\.\\d+$"
+        },
+        "signature": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "mode",
+            "status",
+            "identityRef",
+            "canonicalization",
+            "digestAlgorithm",
+            "verificationPlan"
+          ],
+          "properties": {
+            "mode": {
+              "const": "detached-signature-design"
+            },
+            "status": {
+              "enum": ["unsigned-fixture", "verification-deferred", "detached-signature-present"]
+            },
+            "identityRef": {
+              "type": "string",
+              "pattern": "^[a-z0-9]+(?:[-./][a-z0-9]+)*$"
+            },
+            "canonicalization": {
+              "const": "canonical-json-v1"
+            },
+            "digestAlgorithm": {
+              "const": "sha256"
+            },
+            "verificationPlan": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "mode",
+                "status",
+                "requiredArtifacts",
+                "validatesSignatureNow",
+                "failClosedWithoutValidSignature"
+              ],
+              "properties": {
+                "mode": {
+                  "const": "detached-signature-verification-plan"
+                },
+                "status": {
+                  "enum": [
+                    "fixture-unsigned-not-required",
+                    "planned-not-run",
+                    "ready-artifacts-required"
+                  ]
+                },
+                "requiredArtifacts": {
+                  "type": "array",
+                  "minItems": 3,
+                  "uniqueItems": true,
+                  "items": {
+                    "enum": [
+                      "canonical-bundle-json",
+                      "detached-signature",
+                      "public-verification-identity"
+                    ]
+                  }
+                },
+                "validatesSignatureNow": {
+                  "const": false
+                },
+                "failClosedWithoutValidSignature": {
+                  "const": true
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "archive": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["format", "reportPath", "writePolicy", "maxReportBytes", "index"],
+      "properties": {
+        "format": {
+          "const": "sanitized-json-summary"
+        },
+        "reportPath": {
+          "type": "string",
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*(?:^|/)\\.env(?:\\.|/|$)).+\\.json$"
+        },
+        "writePolicy": {
+          "const": "no-write-without-approval"
+        },
+        "maxReportBytes": {
+          "type": "integer"
+        },
+        "index": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["status", "path", "format", "entryCount", "entryIds", "codes"],
+          "properties": {
+            "status": {
+              "enum": ["present", "missing", "failed"]
+            },
+            "path": {
+              "type": "string",
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*(?:^|/)\\.env(?:\\.|/|$)).+\\.json$"
+            },
+            "format": {
+              "const": "sanitized-json-index"
+            },
+            "entryCount": {
+              "type": "integer"
+            },
+            "entryIds": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+              }
+            },
+            "codes": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      }
+    },
+    "changedState": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["changed", "summary"],
+      "properties": {
+        "changed": {
+          "const": false
+        },
+        "summary": {
+          "type": "string",
+          "minLength": 1
+        }
+      }
+    },
+    "recommendedNextAction": {
+      "type": "string",
+      "minLength": 1
+    }
+  }
+}

package/schemas/command-policy.schema.json

@@ -0,0 +1,125 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://coding-agent-skills.local/schemas/command-policy.schema.json",
+  "title": "Coding Agent Command Policy",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "version",
+    "mode",
+    "parserPolicy",
+    "allowedFamilies",
+    "restrictedCategories"
+  ],
+  "properties": {
+    "version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+    "mode": {"type": "string", "enum": ["audit-only", "action-capable"]},
+    "parserPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "inspectEverySegment",
+        "inspectScriptBodies",
+        "rejectUnknownExecutables",
+        "rejectShellWrappers",
+        "rejectHeredocs",
+        "rejectRedirection",
+        "providerSpecificNpx",
+        "authenticatedCurlRequiresApproval",
+        "boundedReadsRequired",
+        "allowedComposition"
+      ],
+      "properties": {
+        "inspectEverySegment": {"type": "boolean", "const": true},
+        "inspectScriptBodies": {"type": "boolean", "const": true},
+        "rejectUnknownExecutables": {"type": "boolean", "const": true},
+        "rejectShellWrappers": {"type": "boolean", "const": true},
+        "rejectHeredocs": {"type": "boolean", "const": true},
+        "rejectRedirection": {"type": "boolean", "const": true},
+        "providerSpecificNpx": {"type": "boolean", "const": true},
+        "authenticatedCurlRequiresApproval": {"type": "boolean", "const": true},
+        "boundedReadsRequired": {"type": "boolean", "const": true},
+        "allowedComposition": {
+          "type": "string",
+          "enum": ["none", "read-only"]
+        }
+      }
+    },
+    "allowedFamilies": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "executables", "argumentPolicy", "constraints"],
+        "properties": {
+          "name": {"type": "string", "minLength": 1},
+          "executables": {
+            "type": "array",
+            "minItems": 1,
+            "uniqueItems": true,
+            "items": {
+              "type": "string",
+              "pattern": "^[a-z0-9][a-z0-9._-]*$"
+            }
+          },
+          "argumentPolicy": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["strategy", "allowedPatterns", "deniedPatterns"],
+            "properties": {
+              "strategy": {
+                "type": "string",
+                "enum": ["exact", "pattern", "discovered-script", "status-only"]
+              },
+              "allowedPatterns": {
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": {"type": "string", "minLength": 1}
+              },
+              "deniedPatterns": {
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": {"type": "string", "minLength": 1}
+              }
+            }
+          },
+          "constraints": {
+            "type": "array",
+            "minItems": 1,
+            "uniqueItems": true,
+            "items": {"type": "string", "minLength": 1}
+          }
+        }
+      }
+    },
+    "restrictedCategories": {
+      "type": "array",
+      "minItems": 10,
+      "uniqueItems": true,
+      "items": {
+        "type": "string",
+        "enum": [
+          "file-write",
+          "package-install",
+          "deployment",
+          "git-mutation",
+          "unrestricted-scan",
+          "secret-read",
+          "process-mutation",
+          "service-mutation",
+          "migration-apply",
+          "privileged-api"
+        ]
+      }
+    },
+    "approvalExceptions": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"type": "string", "minLength": 1}
+    }
+  }
+}