devcontour-harness 0.0.0-stage → 0.1.0-alpha.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (390) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +183 -2
  3. package/docs/architecture.md +473 -0
  4. package/docs/compatibility-versions.md +56 -0
  5. package/docs/compatibility.md +192 -0
  6. package/docs/connectors.md +323 -0
  7. package/docs/contracts.md +603 -0
  8. package/docs/integrations/hindsight.md +148 -0
  9. package/docs/quickstart.md +182 -0
  10. package/docs/release-notes/0.1.0-alpha.6.md +238 -0
  11. package/docs/review-probes.md +120 -0
  12. package/docs/review-protocol.md +251 -0
  13. package/docs/toolchains.md +167 -0
  14. package/docs/turbo-starter.md +269 -0
  15. package/docs/upgrade.md +202 -0
  16. package/examples/README.md +27 -0
  17. package/examples/external-connector/README.md +19 -0
  18. package/examples/external-connector/connector.mjs +55 -0
  19. package/examples/files-only/README.md +28 -0
  20. package/examples/files-only/context/norms/rules.md +4 -0
  21. package/examples/files-only/graph.json +23 -0
  22. package/examples/files-only/policy.json +30 -0
  23. package/examples/one-vendor/README.md +19 -0
  24. package/examples/one-vendor/policy.json +27 -0
  25. package/examples/single-task/README.md +18 -0
  26. package/examples/single-task/graph.json +27 -0
  27. package/examples/single-task/policy-same-vendor.json +55 -0
  28. package/examples/single-task/policy.json +52 -0
  29. package/examples/single-task/src/.gitkeep +0 -0
  30. package/examples/single-task/test/run.js +19 -0
  31. package/examples/toolchains/README.md +32 -0
  32. package/examples/toolchains/go/bad/label/label.go +9 -0
  33. package/examples/toolchains/go/good/label/label.go +9 -0
  34. package/examples/toolchains/go/policy.json +79 -0
  35. package/examples/toolchains/go/repo/REQUIREMENTS.md +9 -0
  36. package/examples/toolchains/go/repo/_gitignore +1 -0
  37. package/examples/toolchains/go/repo/go.mod +5 -0
  38. package/examples/toolchains/go/repo/go.sum +2 -0
  39. package/examples/toolchains/go/repo/label/label.go +9 -0
  40. package/examples/toolchains/go/repo/label/label_test.go +27 -0
  41. package/examples/toolchains/go/repo/label/version.go +9 -0
  42. package/examples/toolchains/go/task.json +25 -0
  43. package/examples/toolchains/mixed-go/bad/backend/label/label.go +9 -0
  44. package/examples/toolchains/mixed-go/bad/frontend/src/label.js +4 -0
  45. package/examples/toolchains/mixed-go/good/backend/label/label.go +9 -0
  46. package/examples/toolchains/mixed-go/good/frontend/src/label.js +4 -0
  47. package/examples/toolchains/mixed-go/policy.json +126 -0
  48. package/examples/toolchains/mixed-go/repo/REQUIREMENTS.md +9 -0
  49. package/examples/toolchains/mixed-go/repo/_gitignore +6 -0
  50. package/examples/toolchains/mixed-go/repo/backend/go.mod +3 -0
  51. package/examples/toolchains/mixed-go/repo/backend/label/label.go +9 -0
  52. package/examples/toolchains/mixed-go/repo/backend/label/label_test.go +30 -0
  53. package/examples/toolchains/mixed-go/repo/contract/check.mjs +17 -0
  54. package/examples/toolchains/mixed-go/repo/contract/label.json +9 -0
  55. package/examples/toolchains/mixed-go/repo/frontend/package.json +15 -0
  56. package/examples/toolchains/mixed-go/repo/frontend/pnpm-lock.yaml +22 -0
  57. package/examples/toolchains/mixed-go/repo/frontend/src/label.js +4 -0
  58. package/examples/toolchains/mixed-go/repo/frontend/test/label.test.js +11 -0
  59. package/examples/toolchains/mixed-go/task.json +25 -0
  60. package/examples/toolchains/mixed-python/bad/backend/src/fx_backend/__init__.py +6 -0
  61. package/examples/toolchains/mixed-python/bad/frontend/src/label.js +4 -0
  62. package/examples/toolchains/mixed-python/good/backend/src/fx_backend/__init__.py +6 -0
  63. package/examples/toolchains/mixed-python/good/frontend/src/label.js +4 -0
  64. package/examples/toolchains/mixed-python/policy.json +121 -0
  65. package/examples/toolchains/mixed-python/repo/REQUIREMENTS.md +9 -0
  66. package/examples/toolchains/mixed-python/repo/_gitignore +6 -0
  67. package/examples/toolchains/mixed-python/repo/backend/.python-version +1 -0
  68. package/examples/toolchains/mixed-python/repo/backend/pyproject.toml +19 -0
  69. package/examples/toolchains/mixed-python/repo/backend/src/fx_backend/__init__.py +6 -0
  70. package/examples/toolchains/mixed-python/repo/backend/tests/test_label.py +11 -0
  71. package/examples/toolchains/mixed-python/repo/backend/uv.lock +108 -0
  72. package/examples/toolchains/mixed-python/repo/contract/check.mjs +17 -0
  73. package/examples/toolchains/mixed-python/repo/contract/label.json +9 -0
  74. package/examples/toolchains/mixed-python/repo/frontend/package.json +15 -0
  75. package/examples/toolchains/mixed-python/repo/frontend/pnpm-lock.yaml +22 -0
  76. package/examples/toolchains/mixed-python/repo/frontend/src/label.js +4 -0
  77. package/examples/toolchains/mixed-python/repo/frontend/test/label.test.js +11 -0
  78. package/examples/toolchains/mixed-python/task.json +25 -0
  79. package/examples/toolchains/npm/bad/src/label.js +4 -0
  80. package/examples/toolchains/npm/good/src/label.js +4 -0
  81. package/examples/toolchains/npm/policy.json +82 -0
  82. package/examples/toolchains/npm/repo/REQUIREMENTS.md +9 -0
  83. package/examples/toolchains/npm/repo/_gitignore +4 -0
  84. package/examples/toolchains/npm/repo/package-lock.json +22 -0
  85. package/examples/toolchains/npm/repo/package.json +13 -0
  86. package/examples/toolchains/npm/repo/src/label.js +4 -0
  87. package/examples/toolchains/npm/repo/test/label.test.js +13 -0
  88. package/examples/toolchains/npm/task.json +25 -0
  89. package/examples/toolchains/pnpm/bad/packages/label/src/label.js +4 -0
  90. package/examples/toolchains/pnpm/good/packages/label/src/label.js +4 -0
  91. package/examples/toolchains/pnpm/policy.json +85 -0
  92. package/examples/toolchains/pnpm/repo/REQUIREMENTS.md +9 -0
  93. package/examples/toolchains/pnpm/repo/_gitignore +4 -0
  94. package/examples/toolchains/pnpm/repo/package.json +10 -0
  95. package/examples/toolchains/pnpm/repo/packages/checker/check.mjs +5 -0
  96. package/examples/toolchains/pnpm/repo/packages/checker/package.json +9 -0
  97. package/examples/toolchains/pnpm/repo/packages/label/package.json +14 -0
  98. package/examples/toolchains/pnpm/repo/packages/label/src/label.js +4 -0
  99. package/examples/toolchains/pnpm/repo/packages/label/test/label.test.js +13 -0
  100. package/examples/toolchains/pnpm/repo/pnpm-lock.yaml +29 -0
  101. package/examples/toolchains/pnpm/repo/pnpm-workspace.yaml +2 -0
  102. package/examples/toolchains/pnpm/task.json +25 -0
  103. package/examples/toolchains/python/bad/src/fx_label/__init__.py +6 -0
  104. package/examples/toolchains/python/good/src/fx_label/__init__.py +6 -0
  105. package/examples/toolchains/python/policy.json +80 -0
  106. package/examples/toolchains/python/repo/.python-version +1 -0
  107. package/examples/toolchains/python/repo/REQUIREMENTS.md +9 -0
  108. package/examples/toolchains/python/repo/_gitignore +5 -0
  109. package/examples/toolchains/python/repo/pyproject.toml +19 -0
  110. package/examples/toolchains/python/repo/src/fx_label/__init__.py +6 -0
  111. package/examples/toolchains/python/repo/tests/test_label.py +13 -0
  112. package/examples/toolchains/python/repo/uv.lock +108 -0
  113. package/examples/toolchains/python/task.json +25 -0
  114. package/examples/toolchains/turbo/bad/packages/label/src/label.js +4 -0
  115. package/examples/toolchains/turbo/good/packages/label/src/label.js +4 -0
  116. package/examples/toolchains/turbo/policy.json +110 -0
  117. package/examples/toolchains/turbo/repo/REQUIREMENTS.md +9 -0
  118. package/examples/toolchains/turbo/repo/_gitignore +4 -0
  119. package/examples/toolchains/turbo/repo/package.json +13 -0
  120. package/examples/toolchains/turbo/repo/packages/checker/check.mjs +5 -0
  121. package/examples/toolchains/turbo/repo/packages/checker/package.json +9 -0
  122. package/examples/toolchains/turbo/repo/packages/label/package.json +14 -0
  123. package/examples/toolchains/turbo/repo/packages/label/src/label.js +4 -0
  124. package/examples/toolchains/turbo/repo/packages/label/test/label.test.js +13 -0
  125. package/examples/toolchains/turbo/repo/pnpm-lock.yaml +94 -0
  126. package/examples/toolchains/turbo/repo/pnpm-workspace.yaml +2 -0
  127. package/examples/toolchains/turbo/repo/turbo.json +7 -0
  128. package/examples/toolchains/turbo/task.json +25 -0
  129. package/examples/turbo-starter/README.md +16 -0
  130. package/examples/turbo-starter/changes/issued-at-consumer-only.patch +12 -0
  131. package/examples/turbo-starter/changes/issued-at.patch +130 -0
  132. package/examples/turbo-starter/cleanup.mjs +58 -0
  133. package/examples/turbo-starter/graph.json +32 -0
  134. package/examples/turbo-starter/harness/acceptance/db-isolation.test.mjs +97 -0
  135. package/examples/turbo-starter/harness/acceptance/env-probe.test.mjs +75 -0
  136. package/examples/turbo-starter/harness/acceptance/generation.test.mjs +54 -0
  137. package/examples/turbo-starter/harness/acceptance/issued-at.test.mjs +43 -0
  138. package/examples/turbo-starter/harness/acceptance/lifecycle-probe.test.mjs +47 -0
  139. package/examples/turbo-starter/harness/compose-bridge.mjs +593 -0
  140. package/examples/turbo-starter/harness/compose.acceptance.yml +23 -0
  141. package/examples/turbo-starter/harness/env/backend.env.template +7 -0
  142. package/examples/turbo-starter/harness/env/compose.env.template +6 -0
  143. package/examples/turbo-starter/policy.json +109 -0
  144. package/examples/turbo-starter/policy.lifecycle.json +114 -0
  145. package/examples/turbo-starter/setup.mjs +352 -0
  146. package/examples/two-vendors/policy.json +30 -0
  147. package/lib/agents/cli-adapter.d.ts +48 -0
  148. package/lib/agents/cli-adapter.js +386 -0
  149. package/lib/agents/inspect.d.ts +6 -0
  150. package/lib/agents/inspect.js +46 -0
  151. package/lib/agents/probe-server.d.ts +2 -0
  152. package/lib/agents/probe-server.js +13 -0
  153. package/lib/agents/review-probe.d.ts +295 -0
  154. package/lib/agents/review-probe.js +872 -0
  155. package/lib/agents/runtime-events.d.ts +11 -0
  156. package/lib/agents/runtime-events.js +21 -0
  157. package/lib/agents/schemas.d.ts +217 -0
  158. package/lib/agents/schemas.js +124 -0
  159. package/lib/agents/usage.d.ts +8 -0
  160. package/lib/agents/usage.js +83 -0
  161. package/lib/cli.d.ts +2 -0
  162. package/lib/cli.js +491 -0
  163. package/lib/connectors/files.d.ts +108 -0
  164. package/lib/connectors/files.js +133 -0
  165. package/lib/contracts/checks.d.ts +307 -0
  166. package/lib/contracts/checks.js +181 -0
  167. package/lib/contracts/cli.d.ts +3895 -0
  168. package/lib/contracts/cli.js +664 -0
  169. package/lib/contracts/context.d.ts +135 -0
  170. package/lib/contracts/context.js +129 -0
  171. package/lib/contracts/digest.d.ts +9 -0
  172. package/lib/contracts/digest.js +22 -0
  173. package/lib/contracts/errors.d.ts +81 -0
  174. package/lib/contracts/errors.js +70 -0
  175. package/lib/contracts/events.d.ts +827 -0
  176. package/lib/contracts/events.js +258 -0
  177. package/lib/contracts/execution.d.ts +3216 -0
  178. package/lib/contracts/execution.js +872 -0
  179. package/lib/contracts/failure.d.ts +67 -0
  180. package/lib/contracts/failure.js +127 -0
  181. package/lib/contracts/index.d.ts +18 -0
  182. package/lib/contracts/index.js +18 -0
  183. package/lib/contracts/policy.d.ts +1080 -0
  184. package/lib/contracts/policy.js +544 -0
  185. package/lib/contracts/ports.d.ts +417 -0
  186. package/lib/contracts/ports.js +1 -0
  187. package/lib/contracts/primitives.d.ts +63 -0
  188. package/lib/contracts/primitives.js +73 -0
  189. package/lib/contracts/profiles.d.ts +336 -0
  190. package/lib/contracts/profiles.js +109 -0
  191. package/lib/contracts/published.d.ts +3237 -0
  192. package/lib/contracts/published.js +34 -0
  193. package/lib/contracts/result.d.ts +1280 -0
  194. package/lib/contracts/result.js +311 -0
  195. package/lib/contracts/review.d.ts +441 -0
  196. package/lib/contracts/review.js +477 -0
  197. package/lib/contracts/toolchain.d.ts +96 -0
  198. package/lib/contracts/toolchain.js +89 -0
  199. package/lib/contracts/version.d.ts +17 -0
  200. package/lib/contracts/version.js +17 -0
  201. package/lib/contracts/work.d.ts +173 -0
  202. package/lib/contracts/work.js +178 -0
  203. package/lib/control/base-move.d.ts +44 -0
  204. package/lib/control/base-move.js +90 -0
  205. package/lib/control/doctor.d.ts +50 -0
  206. package/lib/control/doctor.js +113 -0
  207. package/lib/control/harness.d.ts +1125 -0
  208. package/lib/control/harness.js +741 -0
  209. package/lib/control/provenance.d.ts +17 -0
  210. package/lib/control/provenance.js +25 -0
  211. package/lib/control/recovery.d.ts +237 -0
  212. package/lib/control/recovery.js +236 -0
  213. package/lib/control/review.d.ts +62 -0
  214. package/lib/control/review.js +178 -0
  215. package/lib/control/workflow.d.ts +247 -0
  216. package/lib/control/workflow.js +259 -0
  217. package/lib/engine/budget.d.ts +345 -0
  218. package/lib/engine/budget.js +278 -0
  219. package/lib/engine/classify.d.ts +8 -0
  220. package/lib/engine/classify.js +32 -0
  221. package/lib/engine/engine.d.ts +1527 -0
  222. package/lib/engine/engine.js +2259 -0
  223. package/lib/engine/failure.d.ts +1 -0
  224. package/lib/engine/failure.js +3 -0
  225. package/lib/engine/joint-runner.d.ts +257 -0
  226. package/lib/engine/joint-runner.js +254 -0
  227. package/lib/engine/measured.d.ts +15 -0
  228. package/lib/engine/measured.js +82 -0
  229. package/lib/engine/prompt.d.ts +66 -0
  230. package/lib/engine/prompt.js +131 -0
  231. package/lib/engine/property-recovery.d.ts +50 -0
  232. package/lib/engine/property-recovery.js +171 -0
  233. package/lib/engine/repair.d.ts +33 -0
  234. package/lib/engine/repair.js +82 -0
  235. package/lib/engine/result.d.ts +9 -0
  236. package/lib/engine/result.js +218 -0
  237. package/lib/engine/reuse.d.ts +80 -0
  238. package/lib/engine/reuse.js +102 -0
  239. package/lib/engine/runner.d.ts +360 -0
  240. package/lib/engine/runner.js +1836 -0
  241. package/lib/engine/standalone.d.ts +6 -0
  242. package/lib/engine/standalone.js +48 -0
  243. package/lib/engine/usage.d.ts +87 -0
  244. package/lib/engine/usage.js +165 -0
  245. package/lib/environment/isolation.d.ts +110 -0
  246. package/lib/environment/isolation.js +238 -0
  247. package/lib/environment/lifecycle.d.ts +40 -0
  248. package/lib/environment/lifecycle.js +197 -0
  249. package/lib/environment/live-calls.d.ts +14 -0
  250. package/lib/environment/live-calls.js +73 -0
  251. package/lib/environment/os-tools.d.ts +16 -0
  252. package/lib/environment/os-tools.js +35 -0
  253. package/lib/environment/process.d.ts +32 -0
  254. package/lib/environment/process.js +369 -0
  255. package/lib/environment/redaction.d.ts +22 -0
  256. package/lib/environment/redaction.js +102 -0
  257. package/lib/environment/resources.d.ts +31 -0
  258. package/lib/environment/resources.js +120 -0
  259. package/lib/index.d.ts +65 -0
  260. package/lib/index.js +67 -0
  261. package/lib/integrations/connector/commands.d.ts +358 -0
  262. package/lib/integrations/connector/commands.js +428 -0
  263. package/lib/integrations/connector/config.d.ts +215 -0
  264. package/lib/integrations/connector/config.js +214 -0
  265. package/lib/integrations/connector/delivery.d.ts +107 -0
  266. package/lib/integrations/connector/delivery.js +591 -0
  267. package/lib/integrations/connector/fake.d.ts +291 -0
  268. package/lib/integrations/connector/fake.js +786 -0
  269. package/lib/integrations/connector/history.d.ts +124 -0
  270. package/lib/integrations/connector/history.js +497 -0
  271. package/lib/integrations/connector/index.d.ts +16 -0
  272. package/lib/integrations/connector/index.js +16 -0
  273. package/lib/integrations/connector/redact.d.ts +19 -0
  274. package/lib/integrations/connector/redact.js +91 -0
  275. package/lib/integrations/connector/registry.d.ts +15 -0
  276. package/lib/integrations/connector/registry.js +43 -0
  277. package/lib/integrations/connector/snapshot.d.ts +131 -0
  278. package/lib/integrations/connector/snapshot.js +422 -0
  279. package/lib/integrations/connector/source.d.ts +37 -0
  280. package/lib/integrations/connector/source.js +73 -0
  281. package/lib/integrations/connector/steps.d.ts +71 -0
  282. package/lib/integrations/connector/steps.js +188 -0
  283. package/lib/integrations/connector/store.d.ts +140 -0
  284. package/lib/integrations/connector/store.js +277 -0
  285. package/lib/integrations/connector/summary.d.ts +38 -0
  286. package/lib/integrations/connector/summary.js +59 -0
  287. package/lib/integrations/connector/testing-worker.d.ts +1 -0
  288. package/lib/integrations/connector/testing-worker.js +81 -0
  289. package/lib/integrations/connector/testing.d.ts +205 -0
  290. package/lib/integrations/connector/testing.js +1615 -0
  291. package/lib/integrations/connector/transport.d.ts +240 -0
  292. package/lib/integrations/connector/transport.js +28 -0
  293. package/lib/integrations/memory/context.d.ts +120 -0
  294. package/lib/integrations/memory/context.js +239 -0
  295. package/lib/integrations/memory/index.d.ts +8 -0
  296. package/lib/integrations/memory/index.js +8 -0
  297. package/lib/integrations/memory/provider.d.ts +79 -0
  298. package/lib/integrations/memory/provider.js +22 -0
  299. package/lib/integrations/memory/sink.d.ts +56 -0
  300. package/lib/integrations/memory/sink.js +116 -0
  301. package/lib/integrations/memory/testing.d.ts +44 -0
  302. package/lib/integrations/memory/testing.js +61 -0
  303. package/lib/integrations/relay-v1/index.d.ts +122 -0
  304. package/lib/integrations/relay-v1/index.js +860 -0
  305. package/lib/integrations/relay-v2/index.d.ts +145 -0
  306. package/lib/integrations/relay-v2/index.js +752 -0
  307. package/lib/integrations/relay-v2/process.d.ts +32 -0
  308. package/lib/integrations/relay-v2/process.js +112 -0
  309. package/lib/integrations/relay-v2/protocol.d.ts +172 -0
  310. package/lib/integrations/relay-v2/protocol.js +142 -0
  311. package/lib/package.d.ts +2 -0
  312. package/lib/package.js +3 -0
  313. package/lib/profiles/resolve.d.ts +190 -0
  314. package/lib/profiles/resolve.js +273 -0
  315. package/lib/storage/document.d.ts +1234 -0
  316. package/lib/storage/document.js +80 -0
  317. package/lib/storage/sqlite.d.ts +35 -0
  318. package/lib/storage/sqlite.js +260 -0
  319. package/lib/testing/index.d.ts +5 -0
  320. package/lib/testing/index.js +5 -0
  321. package/lib/testing/store-contract.d.ts +8 -0
  322. package/lib/testing/store-contract.js +167 -0
  323. package/lib/toolchains/index.d.ts +9 -0
  324. package/lib/toolchains/index.js +9 -0
  325. package/lib/toolchains/inspect.d.ts +105 -0
  326. package/lib/toolchains/inspect.js +831 -0
  327. package/lib/toolchains/manifests.d.ts +67 -0
  328. package/lib/toolchains/manifests.js +238 -0
  329. package/lib/toolchains/probe.d.ts +28 -0
  330. package/lib/toolchains/probe.js +54 -0
  331. package/lib/toolchains/recipes.d.ts +33 -0
  332. package/lib/toolchains/recipes.js +51 -0
  333. package/lib/validate.d.ts +36 -0
  334. package/lib/validate.js +175 -0
  335. package/lib/verification/acceptance.d.ts +284 -0
  336. package/lib/verification/acceptance.js +670 -0
  337. package/lib/verification/checks.d.ts +72 -0
  338. package/lib/verification/checks.js +190 -0
  339. package/lib/verification/confirm.d.ts +125 -0
  340. package/lib/verification/confirm.js +411 -0
  341. package/lib/verification/corpus.d.ts +1303 -0
  342. package/lib/verification/corpus.js +744 -0
  343. package/lib/verification/dependencies.d.ts +66 -0
  344. package/lib/verification/dependencies.js +144 -0
  345. package/lib/verification/gates.d.ts +160 -0
  346. package/lib/verification/gates.js +600 -0
  347. package/lib/verification/joint.d.ts +63 -0
  348. package/lib/verification/joint.js +121 -0
  349. package/lib/verification/proof.d.ts +54 -0
  350. package/lib/verification/proof.js +96 -0
  351. package/lib/verification/property.d.ts +86 -0
  352. package/lib/verification/property.js +214 -0
  353. package/lib/verification/requirements.d.ts +25 -0
  354. package/lib/verification/requirements.js +69 -0
  355. package/lib/verification/self-check.d.ts +29 -0
  356. package/lib/verification/self-check.js +99 -0
  357. package/lib/verification/spike.d.ts +79 -0
  358. package/lib/verification/spike.js +124 -0
  359. package/package.json +100 -4
  360. package/profiles/expo-mobile.json +15 -0
  361. package/profiles/go-api.json +15 -0
  362. package/profiles/go-gotestsum.json +21 -0
  363. package/profiles/mobile-maestro.json +29 -0
  364. package/profiles/nest-api.json +26 -0
  365. package/profiles/next-product.json +72 -0
  366. package/profiles/node-checks.json +77 -0
  367. package/profiles/npm-ci.json +22 -0
  368. package/profiles/pnpm-frozen.json +24 -0
  369. package/profiles/python-api.json +32 -0
  370. package/profiles/python-uv.json +26 -0
  371. package/profiles/react-native.json +50 -0
  372. package/profiles/react-vite-admin.json +71 -0
  373. package/schemas/context-snapshot.schema.json +231 -0
  374. package/schemas/contract-document.schema.json +385 -0
  375. package/schemas/execution-document.schema.json +3695 -0
  376. package/schemas/execution-policy.schema.json +2196 -0
  377. package/schemas/joint-verification.schema.json +617 -0
  378. package/schemas/result-envelope.schema.json +1652 -0
  379. package/schemas/review-record.schema.json +177 -0
  380. package/schemas/run-event.schema.json +2458 -0
  381. package/schemas/run-result.schema.json +1570 -0
  382. package/schemas/stack-profile.schema.json +535 -0
  383. package/schemas/work-graph.schema.json +381 -0
  384. package/schemas/work-order.schema.json +256 -0
  385. package/skills/harness/SKILL.md +64 -0
  386. package/templates/AGENTS.md +13 -0
  387. package/templates/controller-mode/AGENTS.controller.md +58 -0
  388. package/templates/controller-mode/README.md +44 -0
  389. package/templates/graph.json +22 -0
  390. package/templates/policy.json +28 -0
package/schemas/result-envelope.schema.json ADDED
@@ -0,0 +1,1652 @@
1
+ {
2
+ "$id": "devcontour-harness/v1alpha1/result-envelope.schema.json",
3
+ "title": "result-envelope",
4
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
5
+ "type": "object",
6
+ "properties": {
7
+ "apiVersion": {
8
+ "type": "string",
9
+ "const": "devcontour-harness/v1alpha1"
10
+ },
11
+ "result": {
12
+ "oneOf": [
13
+ {
14
+ "type": "object",
15
+ "properties": {
16
+ "apiVersion": {
17
+ "type": "string",
18
+ "const": "devcontour-harness/v1alpha1"
19
+ },
20
+ "workOrderId": {
21
+ "type": "string",
22
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
23
+ },
24
+ "graphId": {
25
+ "type": "string",
26
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
27
+ },
28
+ "source": {
29
+ "type": "object",
30
+ "properties": {
31
+ "connector": {
32
+ "type": "string",
33
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
34
+ },
35
+ "ref": {
36
+ "type": "string",
37
+ "minLength": 1,
38
+ "maxLength": 300
39
+ },
40
+ "revision": {
41
+ "type": "string",
42
+ "minLength": 1,
43
+ "maxLength": 200
44
+ }
45
+ },
46
+ "required": [
47
+ "connector",
48
+ "ref",
49
+ "revision"
50
+ ],
51
+ "additionalProperties": false
52
+ },
53
+ "runId": {
54
+ "type": "string",
55
+ "minLength": 1,
56
+ "maxLength": 200
57
+ },
58
+ "attempt": {
59
+ "type": "integer",
60
+ "exclusiveMinimum": 0,
61
+ "maximum": 9007199254740991
62
+ },
63
+ "repositoryId": {
64
+ "type": "string",
65
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
66
+ },
67
+ "targetRef": {
68
+ "type": "string",
69
+ "pattern": "^refs\\/heads\\/(?!.*(?:\\.\\.|\\/\\/|@\\{|\\.lock(?:\\/|$)|\\/\\.|[.]$|\\/$))(?!\\.)[^\\x00-\\x20\\x7f~^:?*\\[\\\\]{1,200}$"
70
+ },
71
+ "inputs": {
72
+ "type": "object",
73
+ "properties": {
74
+ "harnessVersion": {
75
+ "type": "string",
76
+ "minLength": 1
77
+ },
78
+ "consumerVersion": {
79
+ "type": "string",
80
+ "minLength": 1
81
+ },
82
+ "stateVersion": {
83
+ "type": "number",
84
+ "const": 1
85
+ },
86
+ "workOrderDigest": {
87
+ "type": "string",
88
+ "pattern": "^[a-f0-9]{64}$"
89
+ },
90
+ "graphDigest": {
91
+ "type": "string",
92
+ "pattern": "^[a-f0-9]{64}$"
93
+ },
94
+ "policyDigest": {
95
+ "type": "string",
96
+ "pattern": "^[a-f0-9]{64}$"
97
+ },
98
+ "contextDigest": {
99
+ "type": "string",
100
+ "pattern": "^[a-f0-9]{64}$"
101
+ },
102
+ "checks": {
103
+ "type": "string",
104
+ "pattern": "^[a-f0-9]{64}$"
105
+ },
106
+ "corpus": {
107
+ "type": "object",
108
+ "properties": {
109
+ "suite": {
110
+ "type": "string",
111
+ "minLength": 1,
112
+ "maxLength": 200
113
+ },
114
+ "number": {
115
+ "type": "integer",
116
+ "minimum": 0,
117
+ "maximum": 9007199254740991
118
+ },
119
+ "digest": {
120
+ "type": "string",
121
+ "pattern": "^[a-f0-9]{64}$"
122
+ }
123
+ },
124
+ "required": [
125
+ "suite",
126
+ "number",
127
+ "digest"
128
+ ],
129
+ "additionalProperties": false
130
+ },
131
+ "requiredGates": {
132
+ "type": "array",
133
+ "items": {
134
+ "type": "string",
135
+ "minLength": 1,
136
+ "maxLength": 200
137
+ }
138
+ },
139
+ "writer": {
140
+ "type": "object",
141
+ "properties": {
142
+ "runtime": {
143
+ "type": "string",
144
+ "enum": [
145
+ "codex",
146
+ "claude",
147
+ "fixture"
148
+ ]
149
+ },
150
+ "model": {
151
+ "type": "string"
152
+ }
153
+ },
154
+ "required": [
155
+ "runtime"
156
+ ],
157
+ "additionalProperties": false
158
+ }
159
+ },
160
+ "required": [
161
+ "harnessVersion",
162
+ "stateVersion",
163
+ "workOrderDigest",
164
+ "graphDigest",
165
+ "policyDigest"
166
+ ],
167
+ "additionalProperties": false
168
+ },
169
+ "checked": {
170
+ "type": "object",
171
+ "properties": {
172
+ "dependencies": {
173
+ "type": "array",
174
+ "items": {
175
+ "type": "object",
176
+ "properties": {
177
+ "repositoryId": {
178
+ "type": "string",
179
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
180
+ },
181
+ "sha": {
182
+ "type": "string",
183
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
184
+ },
185
+ "tree": {
186
+ "type": "string",
187
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
188
+ },
189
+ "artifacts": {
190
+ "type": "array",
191
+ "items": {
192
+ "type": "object",
193
+ "properties": {
194
+ "path": {
195
+ "type": "string",
196
+ "minLength": 1
197
+ },
198
+ "digest": {
199
+ "type": "string",
200
+ "pattern": "^[a-f0-9]{64}$"
201
+ }
202
+ },
203
+ "required": [
204
+ "path",
205
+ "digest"
206
+ ],
207
+ "additionalProperties": false
208
+ }
209
+ }
210
+ },
211
+ "required": [
212
+ "repositoryId",
213
+ "sha",
214
+ "tree",
215
+ "artifacts"
216
+ ],
217
+ "additionalProperties": false
218
+ }
219
+ },
220
+ "freshness": {
221
+ "type": "array",
222
+ "items": {
223
+ "type": "object",
224
+ "properties": {
225
+ "repositoryId": {
226
+ "type": "string",
227
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
228
+ },
229
+ "snapshot": {
230
+ "type": "string",
231
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
232
+ },
233
+ "head": {
234
+ "type": "string",
235
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
236
+ },
237
+ "fresh": {
238
+ "type": "boolean"
239
+ }
240
+ },
241
+ "required": [
242
+ "repositoryId",
243
+ "snapshot",
244
+ "head",
245
+ "fresh"
246
+ ],
247
+ "additionalProperties": false
248
+ }
249
+ },
250
+ "consumers": {
251
+ "type": "array",
252
+ "items": {
253
+ "type": "object",
254
+ "properties": {
255
+ "repositoryId": {
256
+ "type": "string",
257
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
258
+ },
259
+ "gates": {
260
+ "type": "array",
261
+ "items": {
262
+ "type": "string",
263
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
264
+ }
265
+ },
266
+ "sha": {
267
+ "type": "string",
268
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
269
+ },
270
+ "tree": {
271
+ "type": "string",
272
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
273
+ },
274
+ "dependencies": {
275
+ "type": "array",
276
+ "items": {
277
+ "type": "object",
278
+ "properties": {
279
+ "repositoryId": {
280
+ "type": "string",
281
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
282
+ },
283
+ "sha": {
284
+ "type": "string",
285
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
286
+ },
287
+ "tree": {
288
+ "type": "string",
289
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
290
+ },
291
+ "artifacts": {
292
+ "type": "array",
293
+ "items": {
294
+ "type": "object",
295
+ "properties": {
296
+ "path": {
297
+ "type": "string",
298
+ "minLength": 1
299
+ },
300
+ "digest": {
301
+ "type": "string",
302
+ "pattern": "^[a-f0-9]{64}$"
303
+ }
304
+ },
305
+ "required": [
306
+ "path",
307
+ "digest"
308
+ ],
309
+ "additionalProperties": false
310
+ }
311
+ }
312
+ },
313
+ "required": [
314
+ "repositoryId",
315
+ "sha",
316
+ "tree",
317
+ "artifacts"
318
+ ],
319
+ "additionalProperties": false
320
+ }
321
+ },
322
+ "freshness": {
323
+ "type": "array",
324
+ "items": {
325
+ "type": "object",
326
+ "properties": {
327
+ "repositoryId": {
328
+ "type": "string",
329
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
330
+ },
331
+ "snapshot": {
332
+ "type": "string",
333
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
334
+ },
335
+ "head": {
336
+ "type": "string",
337
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
338
+ },
339
+ "fresh": {
340
+ "type": "boolean"
341
+ }
342
+ },
343
+ "required": [
344
+ "repositoryId",
345
+ "snapshot",
346
+ "head",
347
+ "fresh"
348
+ ],
349
+ "additionalProperties": false
350
+ }
351
+ }
352
+ },
353
+ "required": [
354
+ "repositoryId",
355
+ "gates",
356
+ "sha",
357
+ "tree",
358
+ "dependencies",
359
+ "freshness"
360
+ ],
361
+ "additionalProperties": false
362
+ }
363
+ }
364
+ },
365
+ "required": [
366
+ "dependencies",
367
+ "freshness",
368
+ "consumers"
369
+ ],
370
+ "additionalProperties": false
371
+ },
372
+ "evidence": {
373
+ "type": "array",
374
+ "items": {
375
+ "type": "object",
376
+ "properties": {
377
+ "id": {
378
+ "type": "string",
379
+ "minLength": 1,
380
+ "maxLength": 200
381
+ },
382
+ "kind": {
383
+ "type": "string",
384
+ "enum": [
385
+ "test",
386
+ "check",
387
+ "review",
388
+ "property",
389
+ "consumer"
390
+ ]
391
+ },
392
+ "phase": {
393
+ "type": "string",
394
+ "enum": [
395
+ "candidate",
396
+ "integration"
397
+ ]
398
+ },
399
+ "gate": {
400
+ "type": "string",
401
+ "minLength": 1,
402
+ "maxLength": 200
403
+ },
404
+ "sha": {
405
+ "type": "string",
406
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
407
+ },
408
+ "passed": {
409
+ "type": "boolean"
410
+ },
411
+ "digest": {
412
+ "type": "string",
413
+ "pattern": "^[a-f0-9]{64}$"
414
+ },
415
+ "summary": {
416
+ "type": "string",
417
+ "maxLength": 4000
418
+ },
419
+ "consumer": {
420
+ "type": "string",
421
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
422
+ },
423
+ "checks": {
424
+ "type": "string",
425
+ "pattern": "^[a-f0-9]{64}$"
426
+ },
427
+ "tests": {
428
+ "type": "array",
429
+ "items": {
430
+ "type": "object",
431
+ "properties": {
432
+ "id": {
433
+ "type": "string",
434
+ "minLength": 1
435
+ },
436
+ "status": {
437
+ "type": "string",
438
+ "enum": [
439
+ "passed",
440
+ "failed",
441
+ "skipped"
442
+ ]
443
+ },
444
+ "opaque": {
445
+ "type": "boolean",
446
+ "const": true
447
+ }
448
+ },
449
+ "required": [
450
+ "id",
451
+ "status"
452
+ ],
453
+ "additionalProperties": false
454
+ }
455
+ },
456
+ "testsTruncated": {
457
+ "type": "boolean"
458
+ },
459
+ "property": {
460
+ "type": "object",
461
+ "properties": {
462
+ "level": {
463
+ "type": "string",
464
+ "enum": [
465
+ "manifest",
466
+ "legacy"
467
+ ]
468
+ },
469
+ "manifest": {
470
+ "type": "object",
471
+ "properties": {
472
+ "digest": {
473
+ "type": "string",
474
+ "pattern": "^[a-f0-9]{64}$"
475
+ },
476
+ "properties": {
477
+ "type": "array",
478
+ "items": {
479
+ "type": "string",
480
+ "minLength": 1,
481
+ "maxLength": 200
482
+ }
483
+ },
484
+ "corpus": {
485
+ "type": "object",
486
+ "properties": {
487
+ "digest": {
488
+ "type": "string",
489
+ "pattern": "^[a-f0-9]{64}$"
490
+ },
491
+ "cases": {
492
+ "type": "integer",
493
+ "minimum": 0,
494
+ "maximum": 9007199254740991
495
+ }
496
+ },
497
+ "required": [
498
+ "digest",
499
+ "cases"
500
+ ],
501
+ "additionalProperties": false
502
+ }
503
+ },
504
+ "required": [
505
+ "digest",
506
+ "properties"
507
+ ],
508
+ "additionalProperties": false
509
+ }
510
+ },
511
+ "additionalProperties": false
512
+ },
513
+ "reviewer": {
514
+ "type": "object",
515
+ "properties": {
516
+ "runtime": {
517
+ "type": "string",
518
+ "enum": [
519
+ "codex",
520
+ "claude",
521
+ "fixture"
522
+ ]
523
+ },
524
+ "model": {
525
+ "type": "string"
526
+ },
527
+ "sameVendor": {
528
+ "type": "boolean"
529
+ }
530
+ },
531
+ "required": [
532
+ "runtime",
533
+ "sameVendor"
534
+ ],
535
+ "additionalProperties": false
536
+ },
537
+ "review": {
538
+ "type": "object",
539
+ "properties": {
540
+ "round": {
541
+ "type": "integer",
542
+ "exclusiveMinimum": 0,
543
+ "maximum": 9007199254740991
544
+ },
545
+ "call": {
546
+ "type": "integer",
547
+ "exclusiveMinimum": 0,
548
+ "maximum": 9007199254740991
549
+ },
550
+ "protocol": {
551
+ "type": "string",
552
+ "enum": [
553
+ "valid",
554
+ "invalid",
555
+ "unsafe"
556
+ ]
557
+ },
558
+ "issues": {
559
+ "maxItems": 50,
560
+ "type": "array",
561
+ "items": {
562
+ "type": "object",
563
+ "properties": {
564
+ "path": {
565
+ "type": "string",
566
+ "maxLength": 300
567
+ },
568
+ "reason": {
569
+ "type": "string",
570
+ "maxLength": 40
571
+ },
572
+ "message": {
573
+ "type": "string",
574
+ "maxLength": 1000
575
+ }
576
+ },
577
+ "required": [
578
+ "path",
579
+ "reason",
580
+ "message"
581
+ ],
582
+ "additionalProperties": false
583
+ }
584
+ },
585
+ "transitions": {
586
+ "maxItems": 500,
587
+ "type": "array",
588
+ "items": {
589
+ "type": "object",
590
+ "properties": {
591
+ "id": {
592
+ "type": "string",
593
+ "pattern": "^[a-f0-9]{64}$"
594
+ },
595
+ "from": {
596
+ "type": "string",
597
+ "enum": [
598
+ "open",
599
+ "closed",
600
+ "withdrawn"
601
+ ]
602
+ },
603
+ "to": {
604
+ "type": "string",
605
+ "enum": [
606
+ "open",
607
+ "closed",
608
+ "withdrawn"
609
+ ]
610
+ }
611
+ },
612
+ "required": [
613
+ "id",
614
+ "from",
615
+ "to"
616
+ ],
617
+ "additionalProperties": false
618
+ }
619
+ }
620
+ },
621
+ "required": [
622
+ "round",
623
+ "call",
624
+ "protocol"
625
+ ],
626
+ "additionalProperties": false
627
+ }
628
+ },
629
+ "required": [
630
+ "id",
631
+ "kind",
632
+ "phase",
633
+ "gate",
634
+ "sha",
635
+ "passed",
636
+ "digest",
637
+ "summary"
638
+ ],
639
+ "additionalProperties": false
640
+ }
641
+ },
642
+ "findings": {
643
+ "default": [],
644
+ "type": "array",
645
+ "items": {
646
+ "type": "object",
647
+ "properties": {
648
+ "severity": {
649
+ "type": "string",
650
+ "minLength": 1,
651
+ "maxLength": 40
652
+ },
653
+ "message": {
654
+ "type": "string",
655
+ "minLength": 1,
656
+ "maxLength": 4000
657
+ },
658
+ "path": {
659
+ "anyOf": [
660
+ {
661
+ "type": "string",
662
+ "maxLength": 500
663
+ },
664
+ {
665
+ "type": "null"
666
+ }
667
+ ]
668
+ },
669
+ "line": {
670
+ "anyOf": [
671
+ {
672
+ "type": "integer",
673
+ "exclusiveMinimum": 0,
674
+ "maximum": 9007199254740991
675
+ },
676
+ {
677
+ "type": "null"
678
+ }
679
+ ]
680
+ },
681
+ "rule": {
682
+ "type": "string",
683
+ "maxLength": 100
684
+ },
685
+ "id": {
686
+ "type": "string",
687
+ "pattern": "^[a-f0-9]{64}$"
688
+ },
689
+ "status": {
690
+ "type": "string",
691
+ "enum": [
692
+ "open",
693
+ "closed",
694
+ "withdrawn"
695
+ ]
696
+ }
697
+ },
698
+ "required": [
699
+ "severity",
700
+ "message"
701
+ ],
702
+ "additionalProperties": false
703
+ }
704
+ },
705
+ "limitations": {
706
+ "default": [],
707
+ "type": "array",
708
+ "items": {
709
+ "type": "string",
710
+ "minLength": 1,
711
+ "maxLength": 1000
712
+ }
713
+ },
714
+ "finishedAt": {
715
+ "type": "string",
716
+ "format": "date-time",
717
+ "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
718
+ },
719
+ "outcome": {
720
+ "type": "string",
721
+ "const": "accepted"
722
+ },
723
+ "shas": {
724
+ "type": "object",
725
+ "properties": {
726
+ "base": {
727
+ "type": "string",
728
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
729
+ },
730
+ "candidate": {
731
+ "type": "string",
732
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
733
+ },
734
+ "integration": {
735
+ "type": "string",
736
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
737
+ },
738
+ "result": {
739
+ "type": "string",
740
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
741
+ }
742
+ },
743
+ "required": [
744
+ "base",
745
+ "candidate",
746
+ "integration",
747
+ "result"
748
+ ],
749
+ "additionalProperties": false
750
+ }
751
+ },
752
+ "required": [
753
+ "apiVersion",
754
+ "workOrderId",
755
+ "graphId",
756
+ "source",
757
+ "runId",
758
+ "attempt",
759
+ "repositoryId",
760
+ "targetRef",
761
+ "inputs",
762
+ "checked",
763
+ "evidence",
764
+ "finishedAt",
765
+ "outcome",
766
+ "shas"
767
+ ],
768
+ "additionalProperties": false
769
+ },
770
+ {
771
+ "type": "object",
772
+ "properties": {
773
+ "apiVersion": {
774
+ "type": "string",
775
+ "const": "devcontour-harness/v1alpha1"
776
+ },
777
+ "workOrderId": {
778
+ "type": "string",
779
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
780
+ },
781
+ "graphId": {
782
+ "type": "string",
783
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
784
+ },
785
+ "source": {
786
+ "type": "object",
787
+ "properties": {
788
+ "connector": {
789
+ "type": "string",
790
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
791
+ },
792
+ "ref": {
793
+ "type": "string",
794
+ "minLength": 1,
795
+ "maxLength": 300
796
+ },
797
+ "revision": {
798
+ "type": "string",
799
+ "minLength": 1,
800
+ "maxLength": 200
801
+ }
802
+ },
803
+ "required": [
804
+ "connector",
805
+ "ref",
806
+ "revision"
807
+ ],
808
+ "additionalProperties": false
809
+ },
810
+ "runId": {
811
+ "type": "string",
812
+ "minLength": 1,
813
+ "maxLength": 200
814
+ },
815
+ "attempt": {
816
+ "type": "integer",
817
+ "exclusiveMinimum": 0,
818
+ "maximum": 9007199254740991
819
+ },
820
+ "repositoryId": {
821
+ "type": "string",
822
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
823
+ },
824
+ "targetRef": {
825
+ "type": "string",
826
+ "pattern": "^refs\\/heads\\/(?!.*(?:\\.\\.|\\/\\/|@\\{|\\.lock(?:\\/|$)|\\/\\.|[.]$|\\/$))(?!\\.)[^\\x00-\\x20\\x7f~^:?*\\[\\\\]{1,200}$"
827
+ },
828
+ "inputs": {
829
+ "type": "object",
830
+ "properties": {
831
+ "harnessVersion": {
832
+ "type": "string",
833
+ "minLength": 1
834
+ },
835
+ "consumerVersion": {
836
+ "type": "string",
837
+ "minLength": 1
838
+ },
839
+ "stateVersion": {
840
+ "type": "number",
841
+ "const": 1
842
+ },
843
+ "workOrderDigest": {
844
+ "type": "string",
845
+ "pattern": "^[a-f0-9]{64}$"
846
+ },
847
+ "graphDigest": {
848
+ "type": "string",
849
+ "pattern": "^[a-f0-9]{64}$"
850
+ },
851
+ "policyDigest": {
852
+ "type": "string",
853
+ "pattern": "^[a-f0-9]{64}$"
854
+ },
855
+ "contextDigest": {
856
+ "type": "string",
857
+ "pattern": "^[a-f0-9]{64}$"
858
+ },
859
+ "checks": {
860
+ "type": "string",
861
+ "pattern": "^[a-f0-9]{64}$"
862
+ },
863
+ "corpus": {
864
+ "type": "object",
865
+ "properties": {
866
+ "suite": {
867
+ "type": "string",
868
+ "minLength": 1,
869
+ "maxLength": 200
870
+ },
871
+ "number": {
872
+ "type": "integer",
873
+ "minimum": 0,
874
+ "maximum": 9007199254740991
875
+ },
876
+ "digest": {
877
+ "type": "string",
878
+ "pattern": "^[a-f0-9]{64}$"
879
+ }
880
+ },
881
+ "required": [
882
+ "suite",
883
+ "number",
884
+ "digest"
885
+ ],
886
+ "additionalProperties": false
887
+ },
888
+ "requiredGates": {
889
+ "type": "array",
890
+ "items": {
891
+ "type": "string",
892
+ "minLength": 1,
893
+ "maxLength": 200
894
+ }
895
+ },
896
+ "writer": {
897
+ "type": "object",
898
+ "properties": {
899
+ "runtime": {
900
+ "type": "string",
901
+ "enum": [
902
+ "codex",
903
+ "claude",
904
+ "fixture"
905
+ ]
906
+ },
907
+ "model": {
908
+ "type": "string"
909
+ }
910
+ },
911
+ "required": [
912
+ "runtime"
913
+ ],
914
+ "additionalProperties": false
915
+ }
916
+ },
917
+ "required": [
918
+ "harnessVersion",
919
+ "stateVersion",
920
+ "workOrderDigest",
921
+ "graphDigest",
922
+ "policyDigest"
923
+ ],
924
+ "additionalProperties": false
925
+ },
926
+ "checked": {
927
+ "type": "object",
928
+ "properties": {
929
+ "dependencies": {
930
+ "type": "array",
931
+ "items": {
932
+ "type": "object",
933
+ "properties": {
934
+ "repositoryId": {
935
+ "type": "string",
936
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
937
+ },
938
+ "sha": {
939
+ "type": "string",
940
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
941
+ },
942
+ "tree": {
943
+ "type": "string",
944
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
945
+ },
946
+ "artifacts": {
947
+ "type": "array",
948
+ "items": {
949
+ "type": "object",
950
+ "properties": {
951
+ "path": {
952
+ "type": "string",
953
+ "minLength": 1
954
+ },
955
+ "digest": {
956
+ "type": "string",
957
+ "pattern": "^[a-f0-9]{64}$"
958
+ }
959
+ },
960
+ "required": [
961
+ "path",
962
+ "digest"
963
+ ],
964
+ "additionalProperties": false
965
+ }
966
+ }
967
+ },
968
+ "required": [
969
+ "repositoryId",
970
+ "sha",
971
+ "tree",
972
+ "artifacts"
973
+ ],
974
+ "additionalProperties": false
975
+ }
976
+ },
977
+ "freshness": {
978
+ "type": "array",
979
+ "items": {
980
+ "type": "object",
981
+ "properties": {
982
+ "repositoryId": {
983
+ "type": "string",
984
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
985
+ },
986
+ "snapshot": {
987
+ "type": "string",
988
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
989
+ },
990
+ "head": {
991
+ "type": "string",
992
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
993
+ },
994
+ "fresh": {
995
+ "type": "boolean"
996
+ }
997
+ },
998
+ "required": [
999
+ "repositoryId",
1000
+ "snapshot",
1001
+ "head",
1002
+ "fresh"
1003
+ ],
1004
+ "additionalProperties": false
1005
+ }
1006
+ },
1007
+ "consumers": {
1008
+ "type": "array",
1009
+ "items": {
1010
+ "type": "object",
1011
+ "properties": {
1012
+ "repositoryId": {
1013
+ "type": "string",
1014
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
1015
+ },
1016
+ "gates": {
1017
+ "type": "array",
1018
+ "items": {
1019
+ "type": "string",
1020
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
1021
+ }
1022
+ },
1023
+ "sha": {
1024
+ "type": "string",
1025
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1026
+ },
1027
+ "tree": {
1028
+ "type": "string",
1029
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1030
+ },
1031
+ "dependencies": {
1032
+ "type": "array",
1033
+ "items": {
1034
+ "type": "object",
1035
+ "properties": {
1036
+ "repositoryId": {
1037
+ "type": "string",
1038
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
1039
+ },
1040
+ "sha": {
1041
+ "type": "string",
1042
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1043
+ },
1044
+ "tree": {
1045
+ "type": "string",
1046
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1047
+ },
1048
+ "artifacts": {
1049
+ "type": "array",
1050
+ "items": {
1051
+ "type": "object",
1052
+ "properties": {
1053
+ "path": {
1054
+ "type": "string",
1055
+ "minLength": 1
1056
+ },
1057
+ "digest": {
1058
+ "type": "string",
1059
+ "pattern": "^[a-f0-9]{64}$"
1060
+ }
1061
+ },
1062
+ "required": [
1063
+ "path",
1064
+ "digest"
1065
+ ],
1066
+ "additionalProperties": false
1067
+ }
1068
+ }
1069
+ },
1070
+ "required": [
1071
+ "repositoryId",
1072
+ "sha",
1073
+ "tree",
1074
+ "artifacts"
1075
+ ],
1076
+ "additionalProperties": false
1077
+ }
1078
+ },
1079
+ "freshness": {
1080
+ "type": "array",
1081
+ "items": {
1082
+ "type": "object",
1083
+ "properties": {
1084
+ "repositoryId": {
1085
+ "type": "string",
1086
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
1087
+ },
1088
+ "snapshot": {
1089
+ "type": "string",
1090
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1091
+ },
1092
+ "head": {
1093
+ "type": "string",
1094
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1095
+ },
1096
+ "fresh": {
1097
+ "type": "boolean"
1098
+ }
1099
+ },
1100
+ "required": [
1101
+ "repositoryId",
1102
+ "snapshot",
1103
+ "head",
1104
+ "fresh"
1105
+ ],
1106
+ "additionalProperties": false
1107
+ }
1108
+ }
1109
+ },
1110
+ "required": [
1111
+ "repositoryId",
1112
+ "gates",
1113
+ "sha",
1114
+ "tree",
1115
+ "dependencies",
1116
+ "freshness"
1117
+ ],
1118
+ "additionalProperties": false
1119
+ }
1120
+ }
1121
+ },
1122
+ "required": [
1123
+ "dependencies",
1124
+ "freshness",
1125
+ "consumers"
1126
+ ],
1127
+ "additionalProperties": false
1128
+ },
1129
+ "evidence": {
1130
+ "type": "array",
1131
+ "items": {
1132
+ "type": "object",
1133
+ "properties": {
1134
+ "id": {
1135
+ "type": "string",
1136
+ "minLength": 1,
1137
+ "maxLength": 200
1138
+ },
1139
+ "kind": {
1140
+ "type": "string",
1141
+ "enum": [
1142
+ "test",
1143
+ "check",
1144
+ "review",
1145
+ "property",
1146
+ "consumer"
1147
+ ]
1148
+ },
1149
+ "phase": {
1150
+ "type": "string",
1151
+ "enum": [
1152
+ "candidate",
1153
+ "integration"
1154
+ ]
1155
+ },
1156
+ "gate": {
1157
+ "type": "string",
1158
+ "minLength": 1,
1159
+ "maxLength": 200
1160
+ },
1161
+ "sha": {
1162
+ "type": "string",
1163
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1164
+ },
1165
+ "passed": {
1166
+ "type": "boolean"
1167
+ },
1168
+ "digest": {
1169
+ "type": "string",
1170
+ "pattern": "^[a-f0-9]{64}$"
1171
+ },
1172
+ "summary": {
1173
+ "type": "string",
1174
+ "maxLength": 4000
1175
+ },
1176
+ "consumer": {
1177
+ "type": "string",
1178
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
1179
+ },
1180
+ "checks": {
1181
+ "type": "string",
1182
+ "pattern": "^[a-f0-9]{64}$"
1183
+ },
1184
+ "tests": {
1185
+ "type": "array",
1186
+ "items": {
1187
+ "type": "object",
1188
+ "properties": {
1189
+ "id": {
1190
+ "type": "string",
1191
+ "minLength": 1
1192
+ },
1193
+ "status": {
1194
+ "type": "string",
1195
+ "enum": [
1196
+ "passed",
1197
+ "failed",
1198
+ "skipped"
1199
+ ]
1200
+ },
1201
+ "opaque": {
1202
+ "type": "boolean",
1203
+ "const": true
1204
+ }
1205
+ },
1206
+ "required": [
1207
+ "id",
1208
+ "status"
1209
+ ],
1210
+ "additionalProperties": false
1211
+ }
1212
+ },
1213
+ "testsTruncated": {
1214
+ "type": "boolean"
1215
+ },
1216
+ "property": {
1217
+ "type": "object",
1218
+ "properties": {
1219
+ "level": {
1220
+ "type": "string",
1221
+ "enum": [
1222
+ "manifest",
1223
+ "legacy"
1224
+ ]
1225
+ },
1226
+ "manifest": {
1227
+ "type": "object",
1228
+ "properties": {
1229
+ "digest": {
1230
+ "type": "string",
1231
+ "pattern": "^[a-f0-9]{64}$"
1232
+ },
1233
+ "properties": {
1234
+ "type": "array",
1235
+ "items": {
1236
+ "type": "string",
1237
+ "minLength": 1,
1238
+ "maxLength": 200
1239
+ }
1240
+ },
1241
+ "corpus": {
1242
+ "type": "object",
1243
+ "properties": {
1244
+ "digest": {
1245
+ "type": "string",
1246
+ "pattern": "^[a-f0-9]{64}$"
1247
+ },
1248
+ "cases": {
1249
+ "type": "integer",
1250
+ "minimum": 0,
1251
+ "maximum": 9007199254740991
1252
+ }
1253
+ },
1254
+ "required": [
1255
+ "digest",
1256
+ "cases"
1257
+ ],
1258
+ "additionalProperties": false
1259
+ }
1260
+ },
1261
+ "required": [
1262
+ "digest",
1263
+ "properties"
1264
+ ],
1265
+ "additionalProperties": false
1266
+ }
1267
+ },
1268
+ "additionalProperties": false
1269
+ },
1270
+ "reviewer": {
1271
+ "type": "object",
1272
+ "properties": {
1273
+ "runtime": {
1274
+ "type": "string",
1275
+ "enum": [
1276
+ "codex",
1277
+ "claude",
1278
+ "fixture"
1279
+ ]
1280
+ },
1281
+ "model": {
1282
+ "type": "string"
1283
+ },
1284
+ "sameVendor": {
1285
+ "type": "boolean"
1286
+ }
1287
+ },
1288
+ "required": [
1289
+ "runtime",
1290
+ "sameVendor"
1291
+ ],
1292
+ "additionalProperties": false
1293
+ },
1294
+ "review": {
1295
+ "type": "object",
1296
+ "properties": {
1297
+ "round": {
1298
+ "type": "integer",
1299
+ "exclusiveMinimum": 0,
1300
+ "maximum": 9007199254740991
1301
+ },
1302
+ "call": {
1303
+ "type": "integer",
1304
+ "exclusiveMinimum": 0,
1305
+ "maximum": 9007199254740991
1306
+ },
1307
+ "protocol": {
1308
+ "type": "string",
1309
+ "enum": [
1310
+ "valid",
1311
+ "invalid",
1312
+ "unsafe"
1313
+ ]
1314
+ },
1315
+ "issues": {
1316
+ "maxItems": 50,
1317
+ "type": "array",
1318
+ "items": {
1319
+ "type": "object",
1320
+ "properties": {
1321
+ "path": {
1322
+ "type": "string",
1323
+ "maxLength": 300
1324
+ },
1325
+ "reason": {
1326
+ "type": "string",
1327
+ "maxLength": 40
1328
+ },
1329
+ "message": {
1330
+ "type": "string",
1331
+ "maxLength": 1000
1332
+ }
1333
+ },
1334
+ "required": [
1335
+ "path",
1336
+ "reason",
1337
+ "message"
1338
+ ],
1339
+ "additionalProperties": false
1340
+ }
1341
+ },
1342
+ "transitions": {
1343
+ "maxItems": 500,
1344
+ "type": "array",
1345
+ "items": {
1346
+ "type": "object",
1347
+ "properties": {
1348
+ "id": {
1349
+ "type": "string",
1350
+ "pattern": "^[a-f0-9]{64}$"
1351
+ },
1352
+ "from": {
1353
+ "type": "string",
1354
+ "enum": [
1355
+ "open",
1356
+ "closed",
1357
+ "withdrawn"
1358
+ ]
1359
+ },
1360
+ "to": {
1361
+ "type": "string",
1362
+ "enum": [
1363
+ "open",
1364
+ "closed",
1365
+ "withdrawn"
1366
+ ]
1367
+ }
1368
+ },
1369
+ "required": [
1370
+ "id",
1371
+ "from",
1372
+ "to"
1373
+ ],
1374
+ "additionalProperties": false
1375
+ }
1376
+ }
1377
+ },
1378
+ "required": [
1379
+ "round",
1380
+ "call",
1381
+ "protocol"
1382
+ ],
1383
+ "additionalProperties": false
1384
+ }
1385
+ },
1386
+ "required": [
1387
+ "id",
1388
+ "kind",
1389
+ "phase",
1390
+ "gate",
1391
+ "sha",
1392
+ "passed",
1393
+ "digest",
1394
+ "summary"
1395
+ ],
1396
+ "additionalProperties": false
1397
+ }
1398
+ },
1399
+ "findings": {
1400
+ "default": [],
1401
+ "type": "array",
1402
+ "items": {
1403
+ "type": "object",
1404
+ "properties": {
1405
+ "severity": {
1406
+ "type": "string",
1407
+ "minLength": 1,
1408
+ "maxLength": 40
1409
+ },
1410
+ "message": {
1411
+ "type": "string",
1412
+ "minLength": 1,
1413
+ "maxLength": 4000
1414
+ },
1415
+ "path": {
1416
+ "anyOf": [
1417
+ {
1418
+ "type": "string",
1419
+ "maxLength": 500
1420
+ },
1421
+ {
1422
+ "type": "null"
1423
+ }
1424
+ ]
1425
+ },
1426
+ "line": {
1427
+ "anyOf": [
1428
+ {
1429
+ "type": "integer",
1430
+ "exclusiveMinimum": 0,
1431
+ "maximum": 9007199254740991
1432
+ },
1433
+ {
1434
+ "type": "null"
1435
+ }
1436
+ ]
1437
+ },
1438
+ "rule": {
1439
+ "type": "string",
1440
+ "maxLength": 100
1441
+ },
1442
+ "id": {
1443
+ "type": "string",
1444
+ "pattern": "^[a-f0-9]{64}$"
1445
+ },
1446
+ "status": {
1447
+ "type": "string",
1448
+ "enum": [
1449
+ "open",
1450
+ "closed",
1451
+ "withdrawn"
1452
+ ]
1453
+ }
1454
+ },
1455
+ "required": [
1456
+ "severity",
1457
+ "message"
1458
+ ],
1459
+ "additionalProperties": false
1460
+ }
1461
+ },
1462
+ "limitations": {
1463
+ "default": [],
1464
+ "type": "array",
1465
+ "items": {
1466
+ "type": "string",
1467
+ "minLength": 1,
1468
+ "maxLength": 1000
1469
+ }
1470
+ },
1471
+ "finishedAt": {
1472
+ "type": "string",
1473
+ "format": "date-time",
1474
+ "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
1475
+ },
1476
+ "outcome": {
1477
+ "type": "string",
1478
+ "enum": [
1479
+ "rejected",
1480
+ "blocked",
1481
+ "cancelled",
1482
+ "stopped"
1483
+ ]
1484
+ },
1485
+ "shas": {
1486
+ "type": "object",
1487
+ "properties": {
1488
+ "base": {
1489
+ "type": "string",
1490
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1491
+ },
1492
+ "candidate": {
1493
+ "type": "string",
1494
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1495
+ },
1496
+ "integration": {
1497
+ "type": "string",
1498
+ "pattern": "^[a-f0-9]{40}([a-f0-9]{24})?$"
1499
+ }
1500
+ },
1501
+ "additionalProperties": false
1502
+ },
1503
+ "stopReason": {
1504
+ "type": "object",
1505
+ "properties": {
1506
+ "code": {
1507
+ "type": "string",
1508
+ "enum": [
1509
+ "INVALID_INPUT",
1510
+ "UNSUPPORTED_COMMAND",
1511
+ "UNSUPPORTED_VERSION",
1512
+ "GRAPH_CYCLE",
1513
+ "GRAPH_UNKNOWN_DEPENDENCY",
1514
+ "GRAPH_DUPLICATE_ID",
1515
+ "GATE_UNKNOWN",
1516
+ "GATE_GROUP_CYCLE",
1517
+ "REVIEWER_SAME_VENDOR",
1518
+ "REVIEWER_MISSING",
1519
+ "APPROVAL_STALE",
1520
+ "APPROVAL_REQUIRED",
1521
+ "LEASE_STALE",
1522
+ "CONTROLLER_BUSY",
1523
+ "PAUSED",
1524
+ "NOT_READY",
1525
+ "SCOPE_VIOLATION",
1526
+ "GATE_FAILED",
1527
+ "REVIEW_REJECTED",
1528
+ "BUDGET_EXHAUSTED",
1529
+ "BUDGET_UNKNOWN",
1530
+ "ATTEMPTS_EXHAUSTED",
1531
+ "REVISION_CONFLICT",
1532
+ "CANCELLED",
1533
+ "NOT_FOUND",
1534
+ "STATE_VERSION_UNSUPPORTED",
1535
+ "RUNTIME_UNAVAILABLE",
1536
+ "REVIEW_PROTOCOL_INVALID",
1537
+ "SANDBOX_UNAVAILABLE",
1538
+ "GIT_FAILED",
1539
+ "STORAGE_FAILED",
1540
+ "DELIVERY_FAILED",
1541
+ "INTERNAL"
1542
+ ]
1543
+ },
1544
+ "message": {
1545
+ "type": "string",
1546
+ "minLength": 1,
1547
+ "maxLength": 4000
1548
+ }
1549
+ },
1550
+ "required": [
1551
+ "code",
1552
+ "message"
1553
+ ],
1554
+ "additionalProperties": false
1555
+ }
1556
+ },
1557
+ "required": [
1558
+ "apiVersion",
1559
+ "workOrderId",
1560
+ "graphId",
1561
+ "source",
1562
+ "runId",
1563
+ "attempt",
1564
+ "repositoryId",
1565
+ "targetRef",
1566
+ "inputs",
1567
+ "checked",
1568
+ "evidence",
1569
+ "finishedAt",
1570
+ "outcome",
1571
+ "shas",
1572
+ "stopReason"
1573
+ ],
1574
+ "additionalProperties": false
1575
+ }
1576
+ ]
1577
+ },
1578
+ "delivery": {
1579
+ "type": "array",
1580
+ "items": {
1581
+ "type": "object",
1582
+ "properties": {
1583
+ "sink": {
1584
+ "type": "string",
1585
+ "pattern": "^[A-Za-z0-9_-]{1,80}$"
1586
+ },
1587
+ "key": {
1588
+ "type": "string",
1589
+ "minLength": 1,
1590
+ "maxLength": 300
1591
+ },
1592
+ "revision": {
1593
+ "type": "string",
1594
+ "minLength": 1,
1595
+ "maxLength": 200
1596
+ },
1597
+ "status": {
1598
+ "type": "string",
1599
+ "enum": [
1600
+ "pending",
1601
+ "delivered",
1602
+ "failed",
1603
+ "conflict",
1604
+ "uncertain"
1605
+ ]
1606
+ },
1607
+ "attempts": {
1608
+ "type": "integer",
1609
+ "minimum": 0,
1610
+ "maximum": 9007199254740991
1611
+ },
1612
+ "lastError": {
1613
+ "type": "string",
1614
+ "maxLength": 4000
1615
+ },
1616
+ "operation": {
1617
+ "type": "string",
1618
+ "maxLength": 300
1619
+ },
1620
+ "currentRevision": {
1621
+ "type": "string",
1622
+ "maxLength": 200
1623
+ },
1624
+ "receipt": {
1625
+ "type": "string",
1626
+ "maxLength": 1000
1627
+ },
1628
+ "updatedAt": {
1629
+ "type": "string",
1630
+ "format": "date-time",
1631
+ "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
1632
+ }
1633
+ },
1634
+ "required": [
1635
+ "sink",
1636
+ "key",
1637
+ "revision",
1638
+ "status",
1639
+ "attempts",
1640
+ "updatedAt"
1641
+ ],
1642
+ "additionalProperties": false
1643
+ }
1644
+ }
1645
+ },
1646
+ "required": [
1647
+ "apiVersion",
1648
+ "result",
1649
+ "delivery"
1650
+ ],
1651
+ "additionalProperties": false
1652
+ }