owlrunkit 0.15.0 → 0.16.0

package/scripts/runkit-contract/schemas/deployment-lineage-v1.schema.json

@@ -0,0 +1,292 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/deployment-lineage-v1.json",
+  "title": "OwlCoda RunKit Deployment Lineage V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "parent", "child", "target", "authority", "permissions", "authorizationGranted", "lineageSha256"],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitDeploymentLineageV1" },
+    "parent": { "$ref": "#/$defs/parent" },
+    "child": { "$ref": "#/$defs/child" },
+    "ownerDecision": { "$ref": "#/$defs/compiledOwnerDecision" },
+    "target": { "$ref": "#/$defs/targetBinding" },
+    "authority": { "$ref": "#/$defs/authority" },
+    "permissions": { "$ref": "#/$defs/permissions" },
+    "authorizationGranted": { "const": false },
+    "lineageSha256": { "$ref": "#/$defs/hash" }
+  },
+  "$defs": {
+    "id": { "type": "string", "minLength": 1 },
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "hashRef": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "ownerDecisionBinding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["decisionId", "decisionVersion", "decisionSha256", "deploymentMode", "existingProjectAssets", "legacyRollbackAllowed", "dataAuthority", "serviceActivationAuthorized", "baselineCutAuthorized", "destructiveScope"],
+      "properties": {
+        "decisionId": { "$ref": "#/$defs/id" },
+        "decisionVersion": { "type": "integer", "minimum": 1 },
+        "decisionSha256": { "$ref": "#/$defs/hash" },
+        "compilationSha256": { "$ref": "#/$defs/hash" },
+        "deploymentMode": { "enum": ["clean_install", "in_place_update"] },
+        "existingProjectAssets": { "enum": ["preserve", "replace", "remove"] },
+        "legacyRollbackAllowed": { "type": "boolean" },
+        "dataAuthority": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["mode", "sourceRef"],
+          "properties": {
+            "mode": { "enum": ["preserve_existing", "replace_from_artifact", "initialize_new"] },
+            "sourceRef": { "type": "string", "minLength": 1 }
+          }
+        },
+        "serviceActivationAuthorized": { "type": "boolean" },
+        "baselineCutAuthorized": { "type": "boolean" },
+        "destructiveScope": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true }
+      }
+    },
+    "compiledOwnerDecision": {
+      "allOf": [
+        { "$ref": "#/$defs/ownerDecisionBinding" },
+        {
+          "type": "object",
+          "required": ["compilationSha256"],
+          "properties": {
+            "compilationSha256": { "$ref": "#/$defs/hash" }
+          }
+        }
+      ]
+    },
+    "descriptor": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256"],
+      "properties": { "path": { "type": "string", "minLength": 1 }, "sha256": { "$ref": "#/$defs/hash" } }
+    },
+    "artifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256", "size", "mediaType"],
+      "properties": { "path": { "type": "string", "minLength": 1 }, "sha256": { "$ref": "#/$defs/hash" }, "size": { "type": "integer", "minimum": 0 }, "mediaType": { "type": "string", "minLength": 1 } }
+    },
+    "sourceArtifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "runId", "path", "sha256", "sourceFingerprint"],
+      "properties": {
+        "kind": { "const": "source_candidate_v2" },
+        "runId": { "$ref": "#/$defs/id" },
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "sourceFingerprint": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "parent": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["prepareRunId", "prepareGoal", "prepareReceiptSha256", "acceptedCloseoutSha256", "artifact"],
+      "properties": {
+        "prepareRunId": { "$ref": "#/$defs/id" },
+        "prepareGoal": { "$ref": "#/$defs/descriptor" },
+        "prepareReceiptSha256": { "$ref": "#/$defs/hash" },
+        "acceptedCloseoutSha256": { "$ref": "#/$defs/hash" },
+        "deliveryPacketSha256": { "$ref": "#/$defs/hash" },
+        "sourceArtifact": { "$ref": "#/$defs/sourceArtifact" },
+        "artifact": { "$ref": "#/$defs/artifact" }
+      },
+      "oneOf": [
+        { "type": "object", "required": ["deliveryPacketSha256"] },
+        { "type": "object", "required": ["sourceArtifact"] }
+      ]
+    },
+    "child": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["executeRunId", "executeGoal", "control"],
+      "properties": {
+        "executeRunId": { "$ref": "#/$defs/id" },
+        "executeGoal": { "$ref": "#/$defs/descriptor" },
+        "control": { "$ref": "#/$defs/childControl" }
+      }
+    },
+    "targetBinding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["value", "sha256"],
+      "properties": { "value": { "$ref": "#/$defs/remoteTarget" }, "sha256": { "$ref": "#/$defs/hash" } }
+    },
+    "authority": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "source",
+        "authorityId",
+        "path",
+        "sha256",
+        "signerKeyId",
+        "trustStoreSha256",
+        "remoteManifestFileSha256",
+        "remoteDeploymentIntentSha256",
+        "ownerDecisionId",
+        "ownerDecisionSha256",
+        "inheritedFromPrepare"
+      ],
+      "properties": {
+        "source": { "const": "owner" },
+        "authorityId": { "$ref": "#/$defs/id" },
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "signerKeyId": { "$ref": "#/$defs/id" },
+        "trustStoreSha256": { "$ref": "#/$defs/hashRef" },
+        "remoteManifestFileSha256": { "$ref": "#/$defs/hash" },
+        "remoteDeploymentIntentSha256": { "$ref": "#/$defs/hash" },
+        "ownerDecisionId": { "$ref": "#/$defs/id" },
+        "ownerDecisionSha256": { "$ref": "#/$defs/hash" },
+        "inheritedFromPrepare": { "const": false }
+      }
+    },
+    "permissions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["deploy", "destructive"],
+      "properties": { "deploy": { "const": true }, "destructive": { "type": "boolean" } }
+    },
+    "remoteTarget": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "targetId", "environment", "host", "port", "user", "hostKeySha256", "machineIdentitySha256"],
+      "properties": {
+        "schemaVersion": { "const": "OwlCodaRunKitRemoteTargetV1" },
+        "targetId": { "$ref": "#/$defs/id" },
+        "environment": { "$ref": "#/$defs/id" },
+        "host": { "type": "string", "minLength": 1 },
+        "port": { "type": "integer", "minimum": 1, "maximum": 65535 },
+        "user": { "type": "string", "minLength": 1 },
+        "hostKeySha256": { "$ref": "#/$defs/hash" },
+        "machineIdentitySha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "coreIdentity": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["contractVersion", "coreVersion", "coreManifestSha256", "coreSourceRef"],
+      "properties": {
+        "contractVersion": { "type": "string", "minLength": 1 },
+        "coreVersion": { "type": "string", "minLength": 1 },
+        "coreManifestSha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+        "coreSourceRef": { "type": "string", "minLength": 1 }
+      }
+    },
+    "childControl": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["enginePin", "executionPlan", "deploymentParent", "lease", "profile", "resourcePreflight"],
+      "properties": {
+        "enginePin": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["path", "sha256", "value"],
+          "properties": {
+            "path": { "type": "string", "minLength": 1 },
+            "sha256": { "$ref": "#/$defs/hash" },
+            "value": { "$ref": "#/$defs/coreIdentity" }
+          }
+        },
+        "executionPlan": { "$ref": "#/$defs/descriptor" },
+        "deploymentParent": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["prepareRunId", "prepareReceiptSha256"],
+          "properties": {
+            "prepareRunId": { "$ref": "#/$defs/id" },
+            "prepareReceiptSha256": { "$ref": "#/$defs/hash" }
+          }
+        },
+        "lease": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["workItemId", "path", "sha256", "ownedPaths"],
+          "properties": {
+            "workItemId": { "$ref": "#/$defs/id" },
+            "path": { "type": "string", "minLength": 1 },
+            "sha256": { "$ref": "#/$defs/hash" },
+            "ownedPaths": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 }, "uniqueItems": true }
+          }
+        },
+        "profile": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["profileId", "profilesPath", "profilesSha256", "verificationPlanPath", "verificationPlanSha256"],
+          "properties": {
+            "profileId": { "$ref": "#/$defs/id" },
+            "profilesPath": { "type": "string", "minLength": 1 },
+            "profilesSha256": { "$ref": "#/$defs/hash" },
+            "verificationPlanPath": { "type": "string", "minLength": 1 },
+            "verificationPlanSha256": { "$ref": "#/$defs/hash" }
+          }
+        },
+        "resourcePreflight": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["preflightId", "path", "sha256", "decision"],
+          "properties": {
+            "preflightId": { "$ref": "#/$defs/id" },
+            "path": { "type": "string", "minLength": 1 },
+            "sha256": { "$ref": "#/$defs/hash" },
+            "decision": { "enum": ["ready_for_model_execution", "ready_without_model_execution"] }
+          }
+        }
+      }
+    }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitDeploymentLineageV1",
+    "parent": {
+      "prepareRunId": "deployment-prepare-001",
+      "prepareGoal": { "path": ".owlcoda/runkit/executions/deployment-prepare-001/goal-contract.json", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" },
+      "prepareReceiptSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "acceptedCloseoutSha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "deliveryPacketSha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "artifact": { "path": "dist/release.tgz", "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee", "size": 1234, "mediaType": "application/gzip" }
+    },
+    "child": {
+      "executeRunId": "deployment-execute-001",
+      "executeGoal": { "path": ".owlcoda/runkit/executions/deployment-execute-001/goal-contract.json", "sha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff" },
+      "control": {
+        "enginePin": {
+          "path": ".owlcoda/runkit/executions/deployment-execute-001/engine-pin.json",
+          "sha256": "6666666666666666666666666666666666666666666666666666666666666666",
+          "value": {
+            "contractVersion": "0.2",
+            "coreVersion": "0.16.0",
+            "coreManifestSha256": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
+            "coreSourceRef": "artifact:sha256:7777777777777777777777777777777777777777777777777777777777777777"
+          }
+        },
+        "executionPlan": { "path": ".owlcoda/runkit/executions/deployment-execute-001/execution-plan.json", "sha256": "8888888888888888888888888888888888888888888888888888888888888888" },
+        "deploymentParent": { "prepareRunId": "deployment-prepare-001", "prepareReceiptSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" },
+        "lease": { "workItemId": "deployment-execute", "path": ".owlcoda/runkit/executions/deployment-execute-001/leases/deployment-execute-attempt-001.json", "sha256": "9999999999999999999999999999999999999999999999999999999999999999", "ownedPaths": ["dist/release.tgz"] },
+        "profile": { "profileId": "deployment", "profilesPath": ".owlcoda/runkit/profiles.json", "profilesSha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "verificationPlanPath": ".owlcoda/runkit/executions/deployment-execute-001/verification-plans/deployment.json", "verificationPlanSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" },
+        "resourcePreflight": { "preflightId": "deployment", "path": ".owlcoda/runkit/executions/deployment-execute-001/resource-preflights/deployment.json", "sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc", "decision": "ready_without_model_execution" }
+      }
+    },
+    "target": { "value": { "schemaVersion": "OwlCodaRunKitRemoteTargetV1", "targetId": "vm-01", "environment": "production", "host": "deploy.example.invalid", "port": 22, "user": "deploy", "hostKeySha256": "4444444444444444444444444444444444444444444444444444444444444444", "machineIdentitySha256": "5555555555555555555555555555555555555555555555555555555555555555" }, "sha256": "1111111111111111111111111111111111111111111111111111111111111111" },
+    "authority": {
+      "source": "owner",
+      "authorityId": "owner-deploy-001",
+      "path": "authorities/deployment-execute-001.json",
+      "sha256": "2222222222222222222222222222222222222222222222222222222222222222",
+      "signerKeyId": "owner-key-001",
+      "trustStoreSha256": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+      "remoteManifestFileSha256": "5555555555555555555555555555555555555555555555555555555555555555",
+      "remoteDeploymentIntentSha256": "6666666666666666666666666666666666666666666666666666666666666666",
+      "ownerDecisionId": "owner-clean-install-001",
+      "ownerDecisionSha256": "7777777777777777777777777777777777777777777777777777777777777777",
+      "inheritedFromPrepare": false
+    },
+    "permissions": { "deploy": true, "destructive": false },
+    "authorizationGranted": false,
+    "lineageSha256": "3333333333333333333333333333333333333333333333333333333333333333"
+  }]
+}

package/scripts/runkit-contract/schemas/deployment-prepare-receipt-v1.schema.json

@@ -0,0 +1,140 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/deployment-prepare-receipt-v1.json",
+  "title": "OwlCoda RunKit Deployment Prepare Receipt V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "prepareRunId", "prepareGoal", "closeout", "artifact", "permissions", "authorizationGranted", "receiptSha256"],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitDeploymentPrepareReceiptV1" },
+    "prepareRunId": { "$ref": "#/$defs/id" },
+    "prepareGoal": { "$ref": "#/$defs/descriptor" },
+    "closeout": { "$ref": "#/$defs/closeout" },
+    "deliveryPacket": { "$ref": "#/$defs/packet" },
+    "sourceArtifact": { "$ref": "#/$defs/candidateSourceArtifact" },
+    "artifact": { "$ref": "#/$defs/artifact" },
+    "ownerDecision": { "$ref": "#/$defs/ownerDecisionBinding" },
+    "permissions": { "$ref": "#/$defs/permissions" },
+    "authorizationGranted": { "const": false },
+    "receiptSha256": { "$ref": "#/$defs/hash" }
+  },
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$" },
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "descriptor": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256"],
+      "properties": { "path": { "type": "string", "minLength": 1 }, "sha256": { "$ref": "#/$defs/hash" } }
+    },
+    "closeout": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["trusted", "decision", "runId", "path", "sha256", "gateInputSha256", "sourceFingerprint", "authorizationGranted"],
+      "properties": {
+        "trusted": { "const": true },
+        "decision": { "const": "accepted" },
+        "runId": { "$ref": "#/$defs/id" },
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "gateInputSha256": { "$ref": "#/$defs/hash" },
+        "sourceFingerprint": { "$ref": "#/$defs/hash" },
+        "sourceArtifact": { "$ref": "#/$defs/sourceArtifact" },
+        "authorizationGranted": { "const": false }
+      }
+    },
+    "packet": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runId", "path", "sha256", "sourceFingerprint"],
+      "properties": {
+        "runId": { "$ref": "#/$defs/id" },
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "sourceFingerprint": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "sourceArtifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "runId", "path", "sha256", "sourceFingerprint"],
+      "properties": {
+        "kind": { "enum": ["delivery_packet_v1", "source_candidate_v2"] },
+        "runId": { "$ref": "#/$defs/id" },
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "sourceFingerprint": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "candidateSourceArtifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "runId", "path", "sha256", "sourceFingerprint"],
+      "properties": {
+        "kind": { "const": "source_candidate_v2" },
+        "runId": { "$ref": "#/$defs/id" },
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "sourceFingerprint": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "artifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256", "size", "mediaType"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "size": { "type": "integer", "minimum": 0 },
+        "mediaType": { "type": "string", "pattern": "^[A-Za-z0-9.+-]+/[A-Za-z0-9.+-]+$" }
+      }
+    },
+    "ownerDecisionBinding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["decisionId", "decisionVersion", "decisionSha256", "deploymentMode", "existingProjectAssets", "legacyRollbackAllowed", "dataAuthority", "serviceActivationAuthorized", "baselineCutAuthorized", "destructiveScope"],
+      "properties": {
+        "decisionId": { "$ref": "#/$defs/id" },
+        "decisionVersion": { "type": "integer", "minimum": 1 },
+        "decisionSha256": { "$ref": "#/$defs/hash" },
+        "deploymentMode": { "enum": ["clean_install", "in_place_update"] },
+        "existingProjectAssets": { "enum": ["preserve", "replace", "remove"] },
+        "legacyRollbackAllowed": { "type": "boolean" },
+        "dataAuthority": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["mode", "sourceRef"],
+          "properties": {
+            "mode": { "enum": ["preserve_existing", "replace_from_artifact", "initialize_new"] },
+            "sourceRef": { "type": "string", "minLength": 1 }
+          }
+        },
+        "serviceActivationAuthorized": { "type": "boolean" },
+        "baselineCutAuthorized": { "type": "boolean" },
+        "destructiveScope": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true }
+      }
+    },
+    "permissions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["deploy", "destructive"],
+      "properties": { "deploy": { "const": false }, "destructive": { "const": false } }
+    }
+  },
+  "oneOf": [
+    { "type": "object", "required": ["deliveryPacket"] },
+    { "type": "object", "required": ["sourceArtifact"] }
+  ],
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitDeploymentPrepareReceiptV1",
+    "prepareRunId": "deployment-prepare-001",
+    "prepareGoal": { "path": ".owlcoda/runkit/executions/deployment-prepare-001/goal-contract.json", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" },
+    "closeout": { "trusted": true, "decision": "accepted", "runId": "deployment-prepare-001", "path": ".owlcoda/runkit/executions/deployment-prepare-001/closeout-receipt.json", "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", "gateInputSha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc", "sourceFingerprint": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "authorizationGranted": false },
+    "deliveryPacket": { "runId": "deployment-prepare-001", "path": ".owlcoda/runkit/executions/deployment-prepare-001/delivery-packets/release.json", "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee", "sourceFingerprint": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd" },
+    "artifact": { "path": "dist/release.tgz", "sha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", "size": 1234, "mediaType": "application/gzip" },
+    "ownerDecision": { "decisionId": "owner-clean-install-001", "decisionVersion": 1, "decisionSha256": "2222222222222222222222222222222222222222222222222222222222222222", "deploymentMode": "clean_install", "existingProjectAssets": "replace", "legacyRollbackAllowed": false, "dataAuthority": { "mode": "initialize_new", "sourceRef": "owner:data-authority/clean-install-001" }, "serviceActivationAuthorized": true, "baselineCutAuthorized": true, "destructiveScope": [] },
+    "permissions": { "deploy": false, "destructive": false },
+    "authorizationGranted": false,
+    "receiptSha256": "1111111111111111111111111111111111111111111111111111111111111111"
+  }]
+}

package/scripts/runkit-contract/schemas/fleet-discovery-v1.schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/fleet-discovery-v1.json",
+  "title": "OwlCoda RunKit Fleet Discovery V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "source", "coverageRoots", "unreachableRoots", "workspaceRoots", "complete", "frozenManifestSha256", "authorizationGranted"],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitFleetDiscoveryV1" },
+    "source": { "enum": ["fleet_registry", "fleet_roots", "fleet_manifest", "explicit_workspaces"] },
+    "manifestPath": { "type": "string", "minLength": 1 },
+    "registryPath": { "type": "string", "minLength": 1 },
+    "registrySha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "coverageRoots": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "unreachableRoots": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "workspaceRoots": { "type": "array", "maxItems": 256, "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "complete": { "type": "boolean" },
+    "frozenManifestSha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "authorizationGranted": { "const": false }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitFleetDiscoveryV1",
+    "source": "fleet_roots",
+    "coverageRoots": ["/absolute/path/to/fleet"],
+    "unreachableRoots": [],
+    "workspaceRoots": ["/absolute/path/to/fleet/project"],
+    "complete": true,
+    "frozenManifestSha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "authorizationGranted": false
+  }]
+}

package/scripts/runkit-contract/schemas/fleet-manifest-v1.schema.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/fleet-manifest-v1.json",
+  "title": "OwlCoda RunKit Fleet Manifest V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "skillName", "workspaceRoots", "authorizationGranted"],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitFleetManifestV1" },
+    "skillName": { "const": "owlcoda-runkit" },
+    "workspaceRoots": { "type": "array", "minItems": 1, "maxItems": 256, "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "authorizationGranted": { "const": false }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitFleetManifestV1",
+    "skillName": "owlcoda-runkit",
+    "workspaceRoots": ["/absolute/path/to/project"],
+    "authorizationGranted": false
+  }]
+}

package/scripts/runkit-contract/schemas/fleet-root-registry-v1.schema.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/fleet-root-registry-v1.json",
+  "title": "OwlCoda RunKit Fleet Root Registry V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "coverageRoots",
+    "authorizationGranted",
+    "registrySha256"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitFleetRootRegistryV1" },
+    "coverageRoots": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 32,
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "authorizationGranted": { "const": false },
+    "registrySha256": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitFleetRootRegistryV1",
+    "coverageRoots": ["/absolute/path/to/fleet"],
+    "authorizationGranted": false,
+    "registrySha256": "sha256:270e2fb1accb0e5a891f697c5a483b52881289849cfb75b4cd54a0443bcac8ec"
+  }]
+}

package/scripts/runkit-contract/schemas/human-status-v1.schema.json

@@ -0,0 +1,102 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/human-status-v1.json",
+  "title": "OwlCoda RunKit Human Status V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "status", "overall", "headline", "stage", "currentExecutionId", "completedSteps", "remainingGates", "remainingGateCount", "control", "milestones", "nextAllowedAction", "authorizationGranted", "gitAuthorization", "releaseAuthorization", "deployAuthorization"],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitHumanStatusV1" },
+    "status": { "const": "projected" },
+    "overall": { "enum": ["blocked", "closed", "idle", "ready_for_closeout", "working"] },
+    "headline": { "type": "string", "minLength": 1 },
+    "stage": { "enum": ["setup", "implementation", "delivery", "verification", "closeout", "external_action"] },
+    "currentExecutionId": { "oneOf": [{ "type": "null" }, { "type": "string", "minLength": 1 }] },
+    "completedSteps": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "remainingGates": { "type": "array", "items": { "$ref": "#/$defs/gate" } },
+    "remainingGateCount": { "type": "integer", "minimum": 0 },
+    "control": { "$ref": "#/$defs/control" },
+    "milestones": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["sourceData", "releasePackage", "remoteVmWrite"],
+      "properties": {
+        "sourceData": { "$ref": "#/$defs/milestone" },
+        "releasePackage": { "$ref": "#/$defs/milestone" },
+        "remoteVmWrite": { "$ref": "#/$defs/milestone" }
+      }
+    },
+    "nextAllowedAction": { "type": "string", "minLength": 1 },
+    "authorizationGranted": { "const": false },
+    "gitAuthorization": { "const": false },
+    "releaseAuthorization": { "const": false },
+    "deployAuthorization": { "const": false }
+  },
+  "$defs": {
+    "gate": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "label", "nextAllowedAction"],
+      "properties": {
+        "code": { "type": "string", "minLength": 1 },
+        "label": { "type": "string", "minLength": 1 },
+        "nextAllowedAction": { "type": "string", "minLength": 1 }
+      }
+    },
+    "control": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "issueCodes"],
+      "properties": {
+        "status": { "enum": ["healthy", "invalid", "drifted"] },
+        "issueCodes": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } }
+      }
+    },
+    "milestone": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "evidence", "label"],
+      "properties": {
+        "status": {
+          "enum": ["ready", "not_ready", "performed", "not_performed", "not_evidenced"]
+        },
+        "evidence": { "type": "string", "minLength": 1 },
+        "label": { "type": "string", "minLength": 1 }
+      }
+    }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitHumanStatusV1",
+    "status": "projected",
+    "overall": "idle",
+    "headline": "No RunKit execution is active.",
+    "stage": "setup",
+    "currentExecutionId": null,
+    "completedSteps": [],
+    "remainingGates": [],
+    "remainingGateCount": 0,
+    "control": { "status": "healthy", "issueCodes": [] },
+    "milestones": {
+      "sourceData": {
+        "status": "not_evidenced",
+        "evidence": "none",
+        "label": "Source/data readiness is not evidenced by inspect."
+      },
+      "releasePackage": {
+        "status": "not_evidenced",
+        "evidence": "none",
+        "label": "Release package readiness is not evidenced by inspect."
+      },
+      "remoteVmWrite": {
+        "status": "not_evidenced",
+        "evidence": "none",
+        "label": "Remote/VM write is not evidenced by inspect."
+      }
+    },
+    "nextAllowedAction": "plan_new_execution",
+    "authorizationGranted": false,
+    "gitAuthorization": false,
+    "releaseAuthorization": false,
+    "deployAuthorization": false
+  }]
+}