knodin 0.8.3 → 0.8.5

package/docs/CLI.md

@@ -6,6 +6,27 @@ options, numeric parsing, unknown-option rejection, and root or command help.
 `bin/cli.ts` dispatches the validated invocation to the existing product
 handlers so JSON output contracts and established commands remain compatible.
 
+## Shared indexes
+
+`knodin shared status` reports reviewed configuration, active graph provenance,
+the last bounded restore outcome, cache state, and freshness strategy without
+network access. Add `--probe` only for an explicit S3 credential/object check.
+
+`knodin shared pull` discovers signed branch pointers, selects the nearest
+locally proven ancestor, downloads or reuses an immutable digest-addressed
+artifact, reconciles the current checkout in a candidate database, deep-audits,
+and atomically promotes it. `--json` returns one result; `--jsonl` also streams
+lossless phase records. A failed pull leaves the previous graph usable.
+
+`knodin shared configure` writes the reviewed `.knodin/shared-index.yaml` trust
+configuration from explicit repository, S3, branch, and public-key options. It
+never reads or writes AWS credentials. `--disable` prevents automatic S3 access
+without deleting local graph or cache state.
+
+Index Hub publishers run `knodin index --clean` followed by
+`knodin shared publisher-metadata --json`; the latter stamps and emits the exact
+compatibility fingerprint used by clients.
+
 Run `knodin --help` for the root command inventory or append `--help` to any
 declared command path, for example:
 
@@ -32,6 +53,23 @@ example repository existence, mutually exclusive configuration modes, and
 graph-query target rules), but syntax cannot reach a handler unless the shared
 declarative model accepts it first.
 
+Optional Claude lifecycle integration is explicit and user-global:
+
+```bash
+knodin agent-hooks install --client claude --dry-run
+knodin agent-hooks install --client claude
+knodin agent-hooks status --client claude
+knodin agent-hooks uninstall --client claude
+```
+
+Installation atomically merges knodin-owned `SessionStart`, turn, tool, and
+session-end handlers into the user's Claude settings. It preserves unrelated
+settings and hooks, including aidev-track, and uninstall removes only exact
+knodin entries. SessionStart emits at most 600 tokens, 8 KiB, and 12 bounded
+orientation items. Hooks fail open and no-op outside initialized repositories.
+The internal `agent-event` command is machine-facing and consumes bounded JSON
+from stdin; it is not a general event-ingestion API.
+
 `knodin query resource_reachability --limit 100` runs cached, on-demand static
 TS/JS source-to-sink analysis. It covers literal `process.env` and
 `fs.readFileSync` reads reaching `console.log`, `fetch`, or `db.query` through
@@ -42,6 +80,24 @@ dynamic names, reflection, computed aliases, and unsupported languages are
 reported rather than guessed. This is a static heuristic, not runtime reachability
 or an exploitability verdict.
 
+`knodin query file_metrics [--base <ref>] [--test-scope all|test|production]
+--format json` emits the versioned `schemas/file-metrics-v1.schema.json`
+contract. Each source file carries lexical line, import, route, and effect
+counts. With `--base`, knodin resolves the local merge-base and reads both trees
+directly from Git object storage; it does not check out or build a second graph.
+Added and removed files have null deltas, preventing consumers from mistaking
+either for an architectural improvement or regression. Output contains paths
+and integer counts only and supplies measurements, not thresholds or a verdict.
+
+```bash
+knodin query file_metrics --base origin/main --test-scope production --format json > metrics.json
+jq -e '[.files[] | select(.status == "changed") | .delta | to_entries[] | select(.value > 0)] | length == 0' metrics.json
+```
+
+An invalid ref or unresolvable merge-base fails non-zero. Binary and invalid
+UTF-8 files are skipped rather than reported as zero. The query is graph
+independent, so damaged graph state cannot become a misleading empty result.
+
 For support evidence, `knodin diagnostics enable|status|preview|archive|inspect|clear|disable`
 manages an explicit local failure journal and redacted gzip JSON bundles.
 Collection does not upload data. See `docs/DIAGNOSTICS.md` for retention,

package/docs/INSTALLATION.md

@@ -205,6 +205,17 @@ idempotent. Local fixtures use zero hosted spend, no credentials, and no source
 egress. Diagnostic archives remain governed by the privacy-safe preview and
 archive contract in [`DIAGNOSTICS.md`](DIAGNOSTICS.md).
 
+Claude users may explicitly install one user-global lifecycle adapter after
+previewing its settings merge:
+
+```bash
+knodin agent-hooks install --client claude --dry-run
+knodin agent-hooks install --client claude
+```
+
+This is independent of `knodin init` and telemetry persistence. Remove only
+knodin-owned entries with `knodin agent-hooks uninstall --client claude`.
+
 Upgrade with the manager that owns the executable:
 
 ```bash

package/docs/MCP.md

@@ -4,11 +4,23 @@ knodin exposes exactly one MCP tool named `knodin`. Capabilities such as
 context, explain, review, search, docs, doctor, repositories, and systems are
 operations of that gateway, not separate top-level tools.
 
+Shared-index support also stays inside that one gateway. Status, context,
+query, explain, review, map, and search responses include a bounded
+`sharedIndex` provenance object. `source: "shared-snapshot"` identifies origin;
+the independent freshness envelope says whether completed reconciliation and
+deep audit still match the checkout. AWS credentials, raw S3 exceptions, and
+source path lists are never returned.
+
 Use `operation: "query", pattern: "resource_reachability"` for the same bounded,
 cached, repo-wide TS/JS analysis as the CLI. It requires no symbol and retains
 the gateway's freshness refusal and response budgets; returned paths remain
 source-evidenced static heuristics with explicit coverage and omissions.
 
+Use `operation: "query", pattern: "file_metrics"`, optional `base`, and
+`testScope` for graph-independent, Git-backed file measurements. The versioned
+`fileMetrics` envelope contains paths and integer counts only—no source snippets,
+thresholds, or policy verdict.
+
 Use `operation: "evidence"` for deterministic `locate`, `outline`, `evidence`,
 and `expand` source delivery with a verified complete-file hash handshake and
 recoverable hard-budget continuations. See `docs/PROGRESSIVE-EVIDENCE.md`.

package/docs/SHARED-INDEX-CONTRACT.md

@@ -0,0 +1,132 @@
+# Shared-index contract v1
+
+This document freezes the wire and trust contract shared by the Knodin client
+and an Index Hub publisher. The normative machine schemas are:
+
+- `schemas/shared-index-config-v1.schema.json`
+- `schemas/shared-index-branch-pointer-v1.schema.json`
+- `schemas/shared-index-manifest-v1.schema.json`
+- `schemas/shared-index-provenance-v1.schema.json`
+
+The cross-implementation fixtures are in
+`src/__tests__/fixtures/shared-index-contract-v1.json`. Producers and consumers
+must validate the same fixtures before claiming v1 compatibility.
+
+## Trust and identity
+
+The reviewed `.knodin/shared-index.yaml` public key is the only trust root. A
+pointer, manifest, signature, object metadata, or S3 response cannot replace
+it. Configuration contains no credentials, role provisioning, endpoint
+override, portal data, Terraform data, or GitHub App data. `enabled: false`
+forbids automatic S3 access.
+
+Repository identity is canonicalized by removing an optional `https://` or
+`ssh://git@` transport prefix from a remote identity, removing one trailing
+dot from the host, lower-casing host/owner/name with the `en-US` locale,
+removing one `.git` suffix from the name, and NFC-normalizing every component.
+All three canonical components are compared. The S3 namespace is:
+
+`v1/<encoded-host>/<encoded-owner>/<encoded-repo>/`
+
+Each component and branch is encoded independently as UTF-8 RFC 3986 percent
+encoding with uppercase hex. `/`, spaces, Unicode, and `%` are therefore data,
+not separators. Branch patterns are either an exact Git ref name or a single
+terminal `/*` prefix pattern; matching is Unicode code-point exact after NFC
+normalization. A branch pointer never overrides local commit or ancestry truth.
+
+## Signed bytes
+
+Manifest JSON uses RFC 8785 JSON Canonicalization Scheme bytes: UTF-8, sorted
+object keys, no insignificant whitespace, and no trailing newline. The
+signature covers those raw manifest bytes, not a pre-hashed digest supplied by
+the caller. The algorithm is RSA-PSS with SHA-256, MGF1-SHA-256, and an exact
+32-byte salt. Public keys are PEM-encoded X.509 SubjectPublicKeyInfo. The
+`publicKeySha256` value is lower-case hex SHA-256 over its DER SPKI bytes.
+
+The pointer is untrusted discovery metadata. Before signature verification the
+client bounds and validates it, checks registration/repository identity,
+confines `manifestKey` beneath the canonical immutable prefix, downloads the
+manifest, and matches SHA-256 over the exact downloaded canonical bytes.
+The detached signature key is the manifest key with terminal `manifest.json`
+replaced by `manifest.sig`. Immutable snapshots use exactly
+`snapshots/<commit>/<inputFingerprint>/`; the graph key is exactly
+`graph.sqlite.zst` in that directory. Alternate filenames and nested paths are
+rejected even when they remain inside the repository prefix.
+
+## Compatibility
+
+V1 requires exact equality for database schema version, model ID and digest,
+parser bundle digest, index configuration digest, and prune-policy digest. The
+client's Knodin major version must equal the manifest major version and the
+client minor version must be greater than or equal to the manifest minor
+version. Pre-release versions are compatible only when the complete Knodin
+version is equal. Patch-version differences alone are compatible.
+
+`knodin shared publisher-metadata --json` is the single publisher/client
+implementation of these values. It also stamps `sharedIndexInputFingerprint`
+into the checkpointed publisher database so restore can bind SQLite metadata
+back to the signed manifest. In v1:
+
+- `modelDigest` hashes a canonical descriptor containing model ID, the pinned
+  immutable model revision, 384 dimensions, and the installed Transformers.js
+  version.
+- `parserBundleDigest` hashes parser policy version 1 and the installed
+  `web-tree-sitter`, `tree-sitter-wasms`, and `web-tree-sitter-sfapex`
+  versions.
+- `indexConfigDigest` hashes index-policy version 1, database schema, and
+  embedding dimensions.
+- `prunePolicyDigest` hashes prune-policy version 1, the sorted ignored
+  directory set, and the `.claude/worktrees` pattern.
+
+Any represented behavior change must increment its policy descriptor version.
+Publishers must not duplicate this logic in shell.
+
+## Bounds
+
+Limits include every byte received, not merely parsed content:
+
+| Object | Maximum bytes |
+| --- | ---: |
+| Branch pointer | 64 KiB |
+| Manifest | 256 KiB |
+| Detached signature | 16 KiB |
+| Compressed graph | 8 GiB |
+| Decompressed graph | 32 GiB |
+
+Compressed and decompressed sizes and SHA-256 digests must match the manifest
+exactly. The limits are ceilings; a deployment may configure stricter local
+bounds. Unknown schema versions and unknown fields fail closed. No failure
+before audited candidate promotion may modify the active graph.
+
+## Discovery, cache, and restore
+
+Discovery never fetches Git history. Exact local HEAD is preferred; otherwise
+only the nearest commit proven by the existing local object database to be an
+ancestor is usable. In shallow clones an unprovable commit is rejected, while
+an exact HEAD remains usable.
+
+Verified compressed artifacts are cached privately under
+`~/.knodin/shared-index-cache/v1/sha256/<compressedSha256>/graph.sqlite.zst`.
+The cache uses per-digest cross-process locks and leases, verifies size and
+digest before atomic installation, and never evicts a leased object. Every
+worktree gets a distinct writable candidate database. Decompression enforces
+the signed output size and digest, rejects trailing compressed data, validates
+the SQLite header and internal commit/schema/fingerprint, reconciles final Git
+and filesystem truth, deep-audits, and only then promotes.
+
+## Operator surfaces
+
+- `knodin shared status` is network-free. `--probe` is the explicit S3/auth
+  check.
+- `knodin shared pull` performs an explicit restore; `--jsonl` retains every
+  phase event.
+- `knodin shared configure` writes only `.knodin/shared-index.yaml` and never
+  accepts or stores AWS credentials. `--disable` preserves the graph and cache.
+- `knodin shared publisher-metadata --json` emits and stamps the frozen
+  compatibility metadata after watcher-free clean indexing.
+
+The single MCP gateway includes `sharedIndex` provenance in status, context,
+query, explain, review, map, and search responses before response budgeting.
+Snapshot provenance and freshness are separate claims. Failed attempts are
+recorded separately and never replace the provenance or bytes of the active
+graph.

package/docs/TELEMETRY.md

@@ -25,13 +25,31 @@ knodin telemetry export
 knodin telemetry clear
 ```
 
+Claude adoption evidence is an independent repository-local opt-in:
+
+```text
+knodin telemetry enable
+knodin telemetry disable
+```
+
+When enabled and the optional Claude hooks are installed, knodin records HMAC'd
+session identity, lifecycle event kind, turn boundaries, coarse tool category,
+supported knodin operation, freshness, context delivery, cache state, and
+latency. It never persists prompts, transcript paths, source, raw tool input or
+output, shell command text, usernames, or absolute paths. Disable stops new
+session events without deleting retained history; `clear` removes both
+operation and session event stores.
+
 `--retention-days 1..3650` changes the read/persistence window. `--input` and
 `--output` accept only repository-contained, non-symlink paths. `clear` is the
 only command that deletes the private JSONL file; report and export never do.
 
 The default report is `.knodin/telemetry-report.html`. It includes summary,
 operation, time-series, private repository, indexing-cost, latency, freshness,
-and fidelity views with light/dark styling. The default machine-readable export
+fidelity, session adoption, evidence-before-edit, and observed fallback-traversal
+views with light/dark styling. Ordinary hooks cannot establish why a follow-up
+occurred, so corrective round trips and task success remain unavailable unless
+supplied by a controlled outcome replay. The default machine-readable export
 is `.knodin/telemetry-export.json` and labels measured, modeled, and unknown
 baselines explicitly. Neither artifact needs a daemon, hosted service,
 authentication, or source egress.

package/docs/releases/0.8.4.md

@@ -0,0 +1,22 @@
+# knodin 0.8.4
+
+This release adds optional, bounded coding-session orientation and local
+adoption evidence while preserving knodin's freshness and privacy boundaries.
+
+- Adds an explicit, idempotent Claude hook installer for compact SessionStart
+  context. Injection is limited to 600 tokens, 8 KiB, and 12 items, reports its
+  bounds, rejects stale cached evidence, and fails open outside initialized
+  repositories.
+- Adds opt-in, repository-local session telemetry and an adoption dashboard for
+  delivered context, successful graph-evidence operations, fallback traversal,
+  and evidence-before-edit observations.
+- Persists only coarse allowlisted metadata and locally keyed session hashes;
+  prompts, source, raw tool input, commands, paths, and unhashed session IDs are
+  not retained.
+- Keeps corrective round trips explicitly unavailable because ordinary hook
+  events cannot establish why an agent made a follow-up call or prove a causal
+  productivity improvement.
+- Adds C102's preregistered paired-evaluation design so future outcome claims
+  require replay evidence rather than being inferred from adoption counters.
+
+This remains an ordinary 0.x release, not a dogfood-only build and not GA.

package/docs/releases/0.8.5.md

@@ -0,0 +1,25 @@
+# knodin 0.8.5
+
+This release adds a versioned, fail-closed shared-index contract and safer
+large-repository lifecycle operations while preserving local-only defaults and
+the limitations recorded in the competitive roadmap.
+
+- Adds strict repository configuration, discovery-pointer, immutable-manifest,
+  signature, compatibility, and provenance contracts shared by publishers and
+  clients.
+- Adds native AWS default-credential-chain support, bounded S3 retrieval and
+  caching, verified decompression, snapshot selection, and recoverable restore.
+- Adds watcher-free candidate database creation, deep audit, reconciliation,
+  atomic promotion, rollback, and interrupted-promotion recovery.
+- Adds shared-index configuration, status, restore, and publisher operations to
+  the CLI and compact MCP gateway, plus a guarded publishing workflow.
+- Adds `file_metrics` with arbitrary Git-ref comparison for source-derived
+  architectural ratchets without a checked-in numeric baseline.
+- Hardens timing-sensitive structural-routing and behavioral-contract replay
+  under instrumented host load without weakening assertions or interactive
+  hang limits.
+
+Shared indexes remain explicitly opt-in. Reviewed repository configuration is
+the trust root, snapshots cannot replace it, and incompatible or ambiguous
+evidence fails closed. This remains an ordinary 0.x release, not GA or a claim
+of certified trusted distribution.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "knodin",
-	"version": "0.8.3",
+	"version": "0.8.5",
 	"description": "knodin — source-evidenced local code intelligence with known bounds. Stable identity, fresh evidence, truthful budgets, and recoverable bounded views.",
 	"license": "MIT",
 	"repository": {
@@ -42,6 +42,7 @@
 		"docs/REPOSITORIES-AND-WORKTREES.md",
 		"docs/RELEASE-0.3-EVIDENCE.md",
 		"docs/SIGNED-UPDATES.md",
+		"docs/SHARED-INDEX-CONTRACT.md",
 		"docs/releases/0.3.0.md",
 		"docs/releases/0.4.0.md",
 		"docs/releases/0.4.1.md",
@@ -59,6 +60,8 @@
 		"docs/releases/0.8.0.md",
 		"docs/releases/0.8.2.md",
 		"docs/releases/0.8.3.md",
+		"docs/releases/0.8.4.md",
+		"docs/releases/0.8.5.md",
 		"docs/assets/knodin-favicon.svg",
 		"docs/SYSTEMS-AND-RELATIONSHIPS.md",
 		"docs/TELEMETRY.md",
@@ -67,6 +70,10 @@
 		"roadmap/competitive-roadmap.md",
 		"schemas/release-attestation-v1.schema.json",
 		"schemas/support-bundle-v2.schema.json",
+		"schemas/shared-index-config-v1.schema.json",
+		"schemas/shared-index-branch-pointer-v1.schema.json",
+		"schemas/shared-index-manifest-v1.schema.json",
+		"schemas/shared-index-provenance-v1.schema.json",
 		"*.wasm"
 	],
 	"engines": {
@@ -137,14 +144,16 @@
 		"lint:fix": "biome check --write ."
 	},
 	"dependencies": {
-		"@huggingface/transformers": "^4.2.0",
+		"@aws-sdk/client-s3": "3.1106.0",
+		"@huggingface/transformers": "4.2.0",
 		"@modelcontextprotocol/sdk": "^1.30.0",
+		"@smithy/node-http-handler": "4.9.13",
 		"chokidar": "^5.0.0",
 		"commander": "15.0.0",
 		"gpt-tokenizer": "3.4.0",
 		"ora": "9.4.1",
 		"re2-wasm": "1.0.2",
-		"tree-sitter-wasms": "^0.1.13",
+		"tree-sitter-wasms": "0.1.13",
 		"web-tree-sitter": "0.20.8",
 		"web-tree-sitter-sfapex": "2.4.1",
 		"yaml": "2.9.0",

package/roadmap/competitive-roadmap.md

@@ -137,6 +137,7 @@ new items or strengthen existing ones; they do not reopen the archived roadmap.
 | C99 | P1 | implemented | Resolve bounded TypeScript dependency-injection wiring | C2, C3, C24, C95 |
 | C100 | P1 | implemented | Prove bounded Salesforce Flow-to-Apex paths | C2, C3, C20, C23, C95, C96 |
 | C101 | P1 | implemented | Strengthen contract-led positioning | C95, C97, C98, C99, C100 |
+| C102 | P1 | implemented — opt-in observational evidence only | Add bounded Claude session context and adoption evidence | C3, C16, C61, C93, C95 |
 
 ### C98 — Bounded source-to-sink resource reachability
 
@@ -192,6 +193,25 @@ new items or strengthen existing ones; they do not reopen the archived roadmap.
   commits normally form one reasonably sized shared PR; assistants do not
   auto-open per-item PRs, and unrelated changes are not bundled for size.
 
+### C102 — Bounded Claude session context and adoption evidence
+
+- Status: implemented — opt-in observational evidence only
+- Priority: P1
+- DependsOn: C3, C16, C61, C93, C95
+- Evidence: `src/agent-hooks.ts`, `src/agent-events.ts`,
+  `src/session-telemetry.ts`, focused unit/CLI tests, and
+  `benchmarks/evaluations/c102-session-adoption/README.md`.
+- Implementation: an explicit user-global Claude hook installer atomically
+  preserves unrelated settings and supports status, dry-run, and targeted
+  uninstall. SessionStart injects cached, freshness-aware orientation under
+  600 tokens, 8 KiB, and 12 items. Separate repository-local telemetry opt-in
+  records private lifecycle categories and extends the existing local report.
+- Bounds: ordinary hooks prove neither task success nor why a follow-up turn
+  occurred. The dashboard labels corrective round trips unavailable, stores no
+  prompt/source/command/transcript/tool-output bodies, and authorizes no
+  productivity or superiority claim. Claude is the only supported client for
+  this adapter; the event model remains client-neutral for later evaluation.
+
 ## Roadmap completion contract
 
 This section is the control plane for completing this roadmap with a persistent

package/schemas/shared-index-branch-pointer-v1.schema.json

@@ -0,0 +1,66 @@
+{
+	"$schema": "https://json-schema.org/draft/2020-12/schema",
+	"$id": "https://knodin.dev/schemas/shared-index-branch-pointer-v1.schema.json",
+	"title": "Knodin shared-index branch discovery pointer v1",
+	"type": "object",
+	"additionalProperties": false,
+	"required": [
+		"schemaVersion",
+		"registrationId",
+		"repository",
+		"branch",
+		"commit",
+		"inputFingerprint",
+		"manifestKey",
+		"manifestSha256",
+		"updatedAt"
+	],
+	"properties": {
+		"schemaVersion": { "const": 1 },
+		"registrationId": { "$ref": "#/$defs/registrationId" },
+		"repository": { "$ref": "#/$defs/repository" },
+		"branch": { "type": "string", "minLength": 1, "maxLength": 1024 },
+		"commit": { "$ref": "#/$defs/gitObject" },
+		"inputFingerprint": { "$ref": "#/$defs/sha256" },
+		"manifestKey": {
+			"type": "string",
+			"minLength": 1,
+			"maxLength": 2048,
+			"pattern": "^v1/[^/]+/[^/]+/[^/]+/snapshots/[a-f0-9]{40,64}/[a-f0-9]{64}/manifest\\.json$"
+		},
+		"manifestSha256": { "$ref": "#/$defs/sha256" },
+		"updatedAt": {
+			"type": "string",
+			"pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{1,9})?Z$"
+		}
+	},
+	"$defs": {
+		"registrationId": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._-]{0,127}$" },
+		"sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+		"gitObject": { "type": "string", "pattern": "^[a-f0-9]{40,64}$" },
+		"repository": {
+			"type": "object",
+			"additionalProperties": false,
+			"required": ["host", "owner", "name"],
+			"properties": {
+				"host": {
+					"type": "string",
+					"pattern": "^(?!.*\\.\\.)(?!.*(?:^|\\.)-)(?!.*-(?:\\.|$))[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$",
+					"maxLength": 253
+				},
+				"owner": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 255,
+					"pattern": "^[a-z0-9](?:[a-z0-9-]{0,253}[a-z0-9])?$"
+				},
+				"name": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 255,
+					"pattern": "^[a-z0-9](?:[a-z0-9._-]{0,253}[a-z0-9])?$"
+				}
+			}
+		}
+	}
+}

package/schemas/shared-index-config-v1.schema.json

@@ -0,0 +1,97 @@
+{
+	"$schema": "https://json-schema.org/draft/2020-12/schema",
+	"$id": "https://knodin.dev/schemas/shared-index-config-v1.schema.json",
+	"title": "Knodin shared-index repository configuration v1",
+	"type": "object",
+	"additionalProperties": false,
+	"required": [
+		"schemaVersion",
+		"enabled",
+		"registrationId",
+		"aws",
+		"repository",
+		"branches",
+		"signing"
+	],
+	"properties": {
+		"schemaVersion": { "const": 1 },
+		"enabled": { "type": "boolean" },
+		"registrationId": { "$ref": "#/$defs/registrationId" },
+		"aws": {
+			"type": "object",
+			"additionalProperties": false,
+			"required": ["region", "bucket"],
+			"properties": {
+				"region": {
+					"type": "string",
+					"pattern": "^[a-z]{2}(?:-gov)?-[a-z]+-\\d$",
+					"maxLength": 32
+				},
+				"bucket": {
+					"type": "string",
+					"pattern": "^(?!xn--)(?!.*\\.\\.)(?!.*\\.-)(?!.*-\\.)(?!\\d{1,3}(?:\\.\\d{1,3}){3}$)[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$"
+				}
+			}
+		},
+		"repository": { "$ref": "#/$defs/repository" },
+		"branches": {
+			"type": "array",
+			"minItems": 1,
+			"maxItems": 64,
+			"uniqueItems": true,
+			"items": {
+				"type": "string",
+				"minLength": 1,
+				"maxLength": 255,
+				"pattern": "^(?!/)(?!.*//)(?!.*\\.\\.)(?!.*@\\{)(?!.*[~^:?\\[\\\\])[^*]+(?:/\\*)?$"
+			}
+		},
+		"signing": {
+			"type": "object",
+			"additionalProperties": false,
+			"required": ["algorithm", "keyId", "publicKeySha256", "publicKeyPem"],
+			"properties": {
+				"algorithm": { "const": "RSASSA_PSS_SHA_256" },
+				"keyId": {
+					"type": "string",
+					"maxLength": 2048,
+					"pattern": "^(?:arn:(?:aws|aws-us-gov|aws-cn):kms:[a-z0-9-]+:\\d{12}:(?:key/[A-Za-z0-9-]+|alias/[A-Za-z0-9/_+=,.@-]+)|alias/[A-Za-z0-9/_+=,.@-]+)$"
+				},
+				"publicKeySha256": { "$ref": "#/$defs/sha256" },
+				"publicKeyPem": {
+					"type": "string",
+					"pattern": "^-----BEGIN PUBLIC KEY-----\\n(?:[A-Za-z0-9+/=]+\\n)+-----END PUBLIC KEY-----\\n?$",
+					"maxLength": 16384
+				}
+			}
+		}
+	},
+	"$defs": {
+		"registrationId": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._-]{0,127}$" },
+		"sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+		"repository": {
+			"type": "object",
+			"additionalProperties": false,
+			"required": ["host", "owner", "name"],
+			"properties": {
+				"host": {
+					"type": "string",
+					"pattern": "^(?!.*\\.\\.)(?!.*(?:^|\\.)-)(?!.*-(?:\\.|$))[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$",
+					"maxLength": 253
+				},
+				"owner": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 255,
+					"pattern": "^[a-z0-9](?:[a-z0-9-]{0,253}[a-z0-9])?$"
+				},
+				"name": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 255,
+					"pattern": "^[a-z0-9](?:[a-z0-9._-]{0,253}[a-z0-9])?$"
+				}
+			}
+		}
+	}
+}