mustflow 2.69.0 → 2.74.0

package/schemas/diff-risk.schema.json

@@ -37,6 +37,12 @@
     "update_policies": { "$ref": "#/$defs/stringArray" },
     "drift_checks": { "$ref": "#/$defs/stringArray" },
     "required_verification": { "$ref": "#/$defs/stringArray" },
+    "complexity_budget": {
+      "anyOf": [
+        { "type": "null" },
+        { "$ref": "verify-report.schema.json#/$defs/complexityBudget" }
+      ]
+    },
     "residual_corrections": { "$ref": "#/$defs/residualCorrections" },
     "gap_count": { "type": "integer", "minimum": 0 },
     "gaps": {

package/schemas/evidence-report.schema.json

@@ -107,6 +107,7 @@
         "changed_files": { "$ref": "#/$defs/stringArray" },
         "validation_reasons": { "$ref": "#/$defs/stringArray" },
         "selected_intents": { "$ref": "#/$defs/stringArray" },
+        "risk_assessment": { "$ref": "#/$defs/riskAssessment" },
         "requirement_count": { "type": "integer", "minimum": 0 },
         "gap_count": { "type": "integer", "minimum": 0 },
         "requirements": {
@@ -199,6 +200,24 @@
         "receipt_count": { "type": ["integer", "null"], "minimum": 0 },
         "skipped_check_count": { "type": "integer", "minimum": 0 },
         "remaining_risk_count": { "type": "integer", "minimum": 0 },
+        "risk_assessment": {
+          "anyOf": [
+            { "type": "null" },
+            { "$ref": "#/$defs/riskAssessment" }
+          ]
+        },
+        "failure_replay_capsule": {
+          "anyOf": [
+            { "type": "null" },
+            { "$ref": "verify-report.schema.json#/$defs/failureReplayCapsule" }
+          ]
+        },
+        "conflict_ledger": {
+          "anyOf": [
+            { "type": "null" },
+            { "$ref": "verify-report.schema.json#/$defs/conflictLedger" }
+          ]
+        },
         "requirements": {
           "type": "array",
           "items": { "$ref": "#/$defs/latestRequirement" }
@@ -255,6 +274,32 @@
         "detail": { "type": "string" }
       }
     },
+    "riskAssessment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema_version",
+        "source",
+        "level",
+        "reasons",
+        "required_evidence",
+        "blocking_gaps",
+        "rollback_required",
+        "human_approval_required",
+        "manual_review_required"
+      ],
+      "properties": {
+        "schema_version": { "const": "1" },
+        "source": { "const": "change_classification_and_command_contract" },
+        "level": { "enum": ["low", "medium", "high", "critical"] },
+        "reasons": { "$ref": "#/$defs/stringArray" },
+        "required_evidence": { "$ref": "#/$defs/stringArray" },
+        "blocking_gaps": { "$ref": "#/$defs/stringArray" },
+        "rollback_required": { "type": "boolean" },
+        "human_approval_required": { "type": "boolean" },
+        "manual_review_required": { "type": "boolean" }
+      }
+    },
     "coverage": {
       "type": "object",
       "additionalProperties": false,

package/schemas/latest-run-pointer.schema.json

@@ -39,14 +39,22 @@
     },
     "execution_status": { "enum": ["passed", "partial", "failed", "blocked"] },
     "status": { "enum": ["passed", "partial", "failed", "blocked"] },
+    "risk_assessment": { "$ref": "#/$defs/riskAssessment" },
     "completion_verdict": { "$ref": "#/$defs/completionVerdict" },
     "evidence_model": { "$ref": "#/$defs/evidenceModel" },
+    "conflict_ledger": { "$ref": "verify-report.schema.json#/$defs/conflictLedger" },
     "failure_fingerprint": {
       "anyOf": [
         { "$ref": "#/$defs/failureFingerprint" },
         { "type": "null" }
       ]
     },
+    "failure_replay_capsule": {
+      "anyOf": [
+        { "$ref": "verify-report.schema.json#/$defs/failureReplayCapsule" },
+        { "type": "null" }
+      ]
+    },
     "repeated_failure_summary": {
       "anyOf": [
         { "$ref": "#/$defs/repeatedFailureSummary" },
@@ -196,6 +204,7 @@
             "receipt_binding_risk_count": { "type": "integer" },
             "stale_receipt_count": { "type": "integer" },
             "plan_mismatch_count": { "type": "integer" },
+            "risk_priced_evidence_risk_count": { "type": "integer" },
             "risks": { "$ref": "#/$defs/completionVerdictRisks" },
             "receipt_binding": { "$ref": "#/$defs/completionVerdictReceiptBinding" },
             "latest_run_status": { "type": ["string", "null"] }
@@ -253,7 +262,8 @@
         "write_drift": { "type": "integer" },
         "receipt_binding": { "type": "integer" },
         "stale_receipt": { "type": "integer" },
-        "plan_mismatch": { "type": "integer" }
+        "plan_mismatch": { "type": "integer" },
+        "risk_priced_evidence": { "type": "integer" }
       }
     },
     "completionVerdictReceiptBinding": {
@@ -322,6 +332,10 @@
           "type": "array",
           "items": { "$ref": "#/$defs/evidenceGap" }
         },
+        "complexity_budget": { "$ref": "verify-report.schema.json#/$defs/complexityBudget" },
+        "risk_assessment": { "$ref": "#/$defs/riskAssessment" },
+        "failure_replay_capsule": { "$ref": "verify-report.schema.json#/$defs/failureReplayCapsule" },
+        "conflict_ledger": { "$ref": "verify-report.schema.json#/$defs/conflictLedger" },
         "remaining_risks": {
           "type": "array",
           "items": { "$ref": "#/$defs/evidenceRemainingRisk" }
@@ -467,6 +481,41 @@
         "detail": { "type": "string" }
       }
     },
+    "riskAssessment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema_version",
+        "source",
+        "level",
+        "reasons",
+        "required_evidence",
+        "blocking_gaps",
+        "rollback_required",
+        "human_approval_required",
+        "manual_review_required"
+      ],
+      "properties": {
+        "schema_version": { "const": "1" },
+        "source": { "const": "change_classification_and_command_contract" },
+        "level": { "enum": ["low", "medium", "high", "critical"] },
+        "reasons": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "required_evidence": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "blocking_gaps": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "rollback_required": { "type": "boolean" },
+        "human_approval_required": { "type": "boolean" },
+        "manual_review_required": { "type": "boolean" }
+      }
+    },
     "reproEvidence": {
       "type": "object",
       "additionalProperties": false,

package/schemas/script-pack-catalog.schema.json

@@ -0,0 +1,68 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/script-pack-catalog.schema.json",
+  "title": "mustflow script-pack catalog",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "action",
+    "ok",
+    "mustflow_root",
+    "packs",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "action": { "const": "list" },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "packs": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/pack" }
+    },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    }
+  },
+  "$defs": {
+    "pack": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "summary_key", "scripts"],
+      "properties": {
+        "id": { "type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$" },
+        "summary_key": { "type": "string" },
+        "scripts": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/script" }
+        }
+      }
+    },
+    "script": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "ref", "usage", "summary_key", "actions", "report_schema_file"],
+      "properties": {
+        "id": { "type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$" },
+        "ref": { "type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*/[a-z0-9]+(?:-[a-z0-9]+)*$" },
+        "usage": { "type": "string" },
+        "summary_key": { "type": "string" },
+        "actions": {
+          "type": "array",
+          "items": { "type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$" },
+          "minItems": 1
+        },
+        "report_schema_file": {
+          "anyOf": [
+            { "type": "string", "pattern": "^[a-z0-9-]+\\.schema\\.json$" },
+            { "type": "null" }
+          ]
+        }
+      }
+    }
+  }
+}

package/schemas/text-budget-report.schema.json

@@ -0,0 +1,131 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/text-budget-report.schema.json",
+  "title": "mustflow text-budget report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "policy",
+    "input_hash",
+    "metrics",
+    "findings",
+    "artifacts",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "core" },
+    "script_id": { "const": "text-budget" },
+    "script_ref": { "const": "core/text-budget" },
+    "action": { "const": "check" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "policy": { "$ref": "#/$defs/policy" },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "metrics": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/metric" }
+    },
+    "findings": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/finding" }
+    },
+    "artifacts": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/artifact" }
+    },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "unit": {
+      "description": "Counting unit. The line unit counts line segments after splitting on line breaks, so a trailing line break contributes an empty final line.",
+      "enum": ["grapheme", "code-point", "utf16", "utf8-byte", "word", "line"]
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["min", "max", "exact", "unit", "json_pointer", "max_file_bytes"],
+      "properties": {
+        "min": { "type": ["integer", "null"], "minimum": 0 },
+        "max": { "type": ["integer", "null"], "minimum": 0 },
+        "exact": { "type": ["integer", "null"], "minimum": 0 },
+        "unit": { "$ref": "#/$defs/unit" },
+        "json_pointer": { "type": ["string", "null"] },
+        "max_file_bytes": { "type": "integer", "minimum": 1 }
+      }
+    },
+    "metric": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "value", "unit", "path", "json_pointer", "content_sha256"],
+      "properties": {
+        "name": { "const": "text_length" },
+        "value": { "type": "integer", "minimum": 0 },
+        "unit": { "$ref": "#/$defs/unit" },
+        "path": { "type": "string" },
+        "json_pointer": { "type": ["string", "null"] },
+        "content_sha256": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "message", "path", "json_pointer", "metric", "actual", "expected"],
+      "properties": {
+        "code": {
+          "enum": [
+            "text_budget_above_max",
+            "text_budget_below_min",
+            "text_budget_not_exact",
+            "text_budget_unreadable",
+            "text_budget_json_parse_failed",
+            "text_budget_json_pointer_invalid",
+            "text_budget_json_pointer_missing",
+            "text_budget_json_pointer_not_string"
+          ]
+        },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "type": "string" },
+        "json_pointer": { "type": ["string", "null"] },
+        "metric": {
+          "anyOf": [
+            { "const": "text_length" },
+            { "type": "null" }
+          ]
+        },
+        "actual": { "type": ["integer", "null"], "minimum": 0 },
+        "expected": { "type": ["integer", "null"], "minimum": 0 }
+      }
+    },
+    "artifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "path", "sha256", "size_bytes"],
+      "properties": {
+        "kind": { "const": "input" },
+        "path": { "type": "string" },
+        "sha256": { "$ref": "#/$defs/sha256" },
+        "size_bytes": { "type": "integer", "minimum": 0 }
+      }
+    }
+  }
+}

package/schemas/verification-plan.schema.json

@@ -48,6 +48,12 @@
       "type": "array",
       "items": { "$ref": "#/$defs/gap" }
     },
+    "risk_assessment": {
+      "anyOf": [
+        { "type": "null" },
+        { "$ref": "#/$defs/riskAssessment" }
+      ]
+    },
     "schedule": {
       "anyOf": [
         { "type": "null" },
@@ -159,6 +165,32 @@
         "detail": { "type": "string" }
       }
     },
+    "riskAssessment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema_version",
+        "source",
+        "level",
+        "reasons",
+        "required_evidence",
+        "blocking_gaps",
+        "rollback_required",
+        "human_approval_required",
+        "manual_review_required"
+      ],
+      "properties": {
+        "schema_version": { "const": "1" },
+        "source": { "const": "change_classification_and_command_contract" },
+        "level": { "enum": ["low", "medium", "high", "critical"] },
+        "reasons": { "$ref": "#/$defs/stringArray" },
+        "required_evidence": { "$ref": "#/$defs/stringArray" },
+        "blocking_gaps": { "$ref": "#/$defs/stringArray" },
+        "rollback_required": { "type": "boolean" },
+        "human_approval_required": { "type": "boolean" },
+        "manual_review_required": { "type": "boolean" }
+      }
+    },
     "schedule": {
       "type": "object",
       "additionalProperties": false,