owlrunkit 0.15.0 → 0.16.0

package/scripts/runkit-contract/schemas/remote-deployment-stage-journal-v1.schema.json

@@ -0,0 +1,183 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/remote-deployment-stage-journal-v1.json",
+  "title": "OwlCoda RunKit Remote Deployment Stage Journal V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion"],
+  "properties": {
+    "schemaVersion": {
+      "enum": [
+        "OwlCodaRunKitRemoteDeploymentJournalBindingV1",
+        "OwlCodaRunKitRemoteStageInvocationBeforeV1",
+        "OwlCodaRunKitRemoteStageInvocationAfterV1",
+        "OwlCodaRunKitRemoteStageRecoveryV1"
+      ]
+    },
+    "deploymentId": { "type": "string", "minLength": 1 },
+    "deploymentLineageSha256": { "$ref": "#/$defs/hash" },
+    "remoteManifestSha256": { "$ref": "#/$defs/hash" },
+    "executeRequestSha256": { "$ref": "#/$defs/hash" },
+    "adapterIdentity": { "$ref": "#/$defs/adapter" },
+    "adapterIdentitySha256": { "$ref": "#/$defs/hash" },
+    "bindingSha256": { "$ref": "#/$defs/hash" },
+    "stage": { "$ref": "#/$defs/stage" },
+    "stageOrdinal": { "type": "integer", "minimum": 1, "maximum": 7 },
+    "operation": { "enum": ["execute", "reconcile"] },
+    "attempt": { "type": "integer", "minimum": 1 },
+    "status": {
+      "enum": [
+        "invocation_started",
+        "state_proven_consistent"
+      ]
+    },
+    "outcome": { "enum": ["completed", "indeterminate"] },
+    "beforeJournalSha256": { "$ref": "#/$defs/hash" },
+    "executeBeforeJournalSha256": { "$ref": "#/$defs/hash" },
+    "reconciliationAfterJournalSha256": { "$ref": "#/$defs/hash" },
+    "recoveredByJournalSha256": { "$ref": "#/$defs/hash" },
+    "stageReceipt": { "type": "object" },
+    "authorizationGranted": { "const": false },
+    "journalSha256": { "$ref": "#/$defs/hash" }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "schemaVersion": {
+            "const": "OwlCodaRunKitRemoteDeploymentJournalBindingV1"
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "schemaVersion",
+          "deploymentId",
+          "deploymentLineageSha256",
+          "remoteManifestSha256",
+          "executeRequestSha256",
+          "adapterIdentity",
+          "adapterIdentitySha256",
+          "authorizationGranted",
+          "bindingSha256"
+        ]
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "schemaVersion": {
+            "const": "OwlCodaRunKitRemoteStageInvocationBeforeV1"
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "schemaVersion",
+          "bindingSha256",
+          "deploymentId",
+          "deploymentLineageSha256",
+          "remoteManifestSha256",
+          "executeRequestSha256",
+          "adapterIdentitySha256",
+          "stage",
+          "stageOrdinal",
+          "operation",
+          "attempt",
+          "status",
+          "authorizationGranted",
+          "journalSha256"
+        ]
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "schemaVersion": {
+            "const": "OwlCodaRunKitRemoteStageInvocationAfterV1"
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "schemaVersion",
+          "bindingSha256",
+          "beforeJournalSha256",
+          "stage",
+          "operation",
+          "attempt",
+          "outcome",
+          "stageReceipt",
+          "authorizationGranted",
+          "journalSha256"
+        ]
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "schemaVersion": {
+            "const": "OwlCodaRunKitRemoteStageRecoveryV1"
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "schemaVersion",
+          "bindingSha256",
+          "stage",
+          "attempt",
+          "executeBeforeJournalSha256",
+          "reconciliationAfterJournalSha256",
+          "status",
+          "stageReceipt",
+          "authorizationGranted",
+          "journalSha256"
+        ]
+      }
+    }
+  ],
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "stage": {
+      "enum": [
+        "identity_preflight",
+        "upload",
+        "verify_remote_hashes",
+        "install",
+        "service",
+        "proxy",
+        "smoke"
+      ]
+    },
+    "adapter": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["adapterId", "version", "executable", "sha256"],
+      "properties": {
+        "adapterId": { "type": "string", "minLength": 1 },
+        "version": { "type": "string", "minLength": 1 },
+        "executable": { "type": "string", "pattern": "^/" },
+        "sha256": { "$ref": "#/$defs/hash" }
+      }
+    }
+  },
+  "examples": [
+    {
+      "schemaVersion": "OwlCodaRunKitRemoteDeploymentJournalBindingV1",
+      "deploymentId": "deployment-execute-001",
+      "deploymentLineageSha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "remoteManifestSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "executeRequestSha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "adapterIdentity": {
+        "adapterId": "builtin-ssh-v1",
+        "version": "1.0.0",
+        "executable": "/opt/owlcoda/ssh-remote-adapter.mjs",
+        "sha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+      },
+      "adapterIdentitySha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "authorizationGranted": false,
+      "bindingSha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
+    }
+  ]
+}

package/scripts/runkit-contract/schemas/remote-target-v1.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/remote-target-v1.json",
+  "title": "OwlCoda RunKit Remote Target V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "targetId", "environment", "host", "port", "user", "hostKeySha256", "machineIdentitySha256"],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitRemoteTargetV1" },
+    "targetId": { "$ref": "#/$defs/id" },
+    "environment": { "$ref": "#/$defs/id" },
+    "host": { "type": "string", "pattern": "^[^\\s/\\\\]+$" },
+    "port": { "type": "integer", "minimum": 1, "maximum": 65535 },
+    "user": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9._-]*$" },
+    "hostKeySha256": { "$ref": "#/$defs/hash" },
+    "machineIdentitySha256": { "$ref": "#/$defs/hash" }
+  },
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$" },
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitRemoteTargetV1",
+    "targetId": "vm-production-01",
+    "environment": "production",
+    "host": "deploy.example.invalid",
+    "port": 22,
+    "user": "deploy",
+    "hostKeySha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "machineIdentitySha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+  }]
+}

package/scripts/runkit-contract/schemas/source-candidate-v2.schema.json

@@ -0,0 +1,152 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/source-candidate-v2.json",
+  "title": "OwlCoda RunKit Source Candidate V2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "runId", "candidateId", "status", "sourceMode", "baseline", "sourceManifest", "sourceFingerprint", "payload", "discovery", "repositoryActions", "authorizationGranted", "candidateSha256"],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitSourceCandidateV2" },
+    "runId": { "$ref": "#/$defs/id" },
+    "candidateId": { "$ref": "#/$defs/id" },
+    "status": { "const": "frozen" },
+    "sourceMode": { "const": "dirty_worktree_exact_manifest_v2" },
+    "baseline": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["branch", "head"],
+      "properties": {
+        "branch": { "type": "string", "minLength": 1 },
+        "head": { "type": "string", "pattern": "^[a-f0-9]{40}$" }
+      }
+    },
+    "sourceManifest": { "$ref": "#/$defs/manifest" },
+    "sourceFingerprint": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["sha256"],
+      "properties": { "sha256": { "$ref": "#/$defs/hash" } }
+    },
+    "payload": { "$ref": "#/$defs/payload" },
+    "discovery": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["fromLease", "leasePath"],
+      "properties": {
+        "fromLease": { "$ref": "#/$defs/id" },
+        "leasePath": { "type": "string", "minLength": 1 }
+      }
+    },
+    "repositoryActions": { "$ref": "#/$defs/actions" },
+    "authorizationGranted": { "const": false },
+    "candidateSha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+  },
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$" },
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "actions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["worktreeCreated", "branchCreated", "staged", "committed", "pushed", "tagged", "published", "deployed"],
+      "properties": {
+        "worktreeCreated": { "const": false },
+        "branchCreated": { "const": false },
+        "staged": { "const": false },
+        "committed": { "const": false },
+        "pushed": { "const": false },
+        "tagged": { "const": false },
+        "published": { "const": false },
+        "deployed": { "const": false }
+      }
+    },
+    "entry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["operation", "status", "path"],
+      "properties": {
+        "operation": { "enum": ["added", "deleted", "modified", "renamed"] },
+        "status": { "type": "string", "minLength": 2 },
+        "path": { "type": "string", "minLength": 1 },
+        "previousPath": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "manifest": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "statusMode", "ownedPaths", "entries", "sha256"],
+      "properties": {
+        "schemaVersion": { "const": "OwlCodaRunKitDirtySourceManifestV2" },
+        "statusMode": { "const": "porcelain-v1-z-untracked-all-runkit-excluded" },
+        "ownedPaths": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+        "entries": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/entry" } },
+        "sha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+      }
+    },
+    "payloadEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "payloadPath", "sha256", "sizeBytes", "mode"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1 },
+        "payloadPath": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "sizeBytes": { "type": "integer", "minimum": 0 },
+        "mode": { "type": "integer", "minimum": 0, "maximum": 511 }
+      }
+    },
+    "payload": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "storage", "root", "blobCount", "totalBytes", "entries", "sha256"],
+      "properties": {
+        "schemaVersion": { "const": "OwlCodaRunKitSourcePayloadV1" },
+        "storage": { "const": "create_only_content_addressed_sha256" },
+        "root": { "type": "string", "minLength": 1 },
+        "blobCount": { "type": "integer", "minimum": 0 },
+        "totalBytes": { "type": "integer", "minimum": 0 },
+        "entries": {
+          "type": "array",
+          "minItems": 0,
+          "items": { "$ref": "#/$defs/payloadEntry" }
+        },
+        "sha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+      }
+    }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitSourceCandidateV2",
+    "runId": "formal-001",
+    "candidateId": "candidate-001",
+    "status": "frozen",
+    "sourceMode": "dirty_worktree_exact_manifest_v2",
+    "baseline": { "branch": "codex/release", "head": "1111111111111111111111111111111111111111" },
+    "sourceManifest": {
+      "schemaVersion": "OwlCodaRunKitDirtySourceManifestV2",
+      "statusMode": "porcelain-v1-z-untracked-all-runkit-excluded",
+      "ownedPaths": ["src/**"],
+      "entries": [{ "operation": "modified", "status": " M", "path": "src/index.mjs", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }],
+      "sha256": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    "sourceFingerprint": { "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" },
+    "payload": {
+      "schemaVersion": "OwlCodaRunKitSourcePayloadV1",
+      "storage": "create_only_content_addressed_sha256",
+      "root": ".owlcoda/runkit/executions/formal-001/source-candidates/candidate-001.payload",
+      "blobCount": 1,
+      "totalBytes": 12,
+      "entries": [{
+        "path": "src/index.mjs",
+        "payloadPath": ".owlcoda/runkit/executions/formal-001/source-candidates/candidate-001.payload/sha256/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "sizeBytes": 12,
+        "mode": 420
+      }],
+      "sha256": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+    },
+    "discovery": { "fromLease": "implementation", "leasePath": ".owlcoda/runkit/executions/formal-001/leases/implementation.json" },
+    "repositoryActions": { "worktreeCreated": false, "branchCreated": false, "staged": false, "committed": false, "pushed": false, "tagged": false, "published": false, "deployed": false },
+    "authorizationGranted": false,
+    "candidateSha256": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+  }]
+}

package/scripts/runkit-contract/schemas/verification-receipt-v2.schema.json

@@ -13,6 +13,7 @@
     "sourceFingerprint": { "$ref": "#/$defs/sha256" },
     "verificationContextFingerprint": { "$ref": "#/$defs/sha256" },
     "goalContractSha256": { "$ref": "#/$defs/sha256" },
+    "sourceArtifact": { "$ref": "#/$defs/sourceArtifact" },
     "risk": { "$ref": "#/$defs/risk" },
     "selectedProfileIds": {
       "type": "array",
@@ -45,6 +46,18 @@
   ],
   "$defs": {
     "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "sourceArtifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "runId", "path", "sha256", "sourceFingerprint"],
+      "properties": {
+        "kind": { "enum": ["delivery_packet_v1", "source_candidate_v2"] },
+        "runId": { "type": "string", "minLength": 1 },
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/sha256" },
+        "sourceFingerprint": { "$ref": "#/$defs/sha256" }
+      }
+    },
     "commandReceipt": {
       "type": "object",
       "additionalProperties": false,

package/scripts/runkit-contract/snapshot.mjs

@@ -175,7 +175,7 @@ function validateRequest(request) {
       || typeof entry.version !== "string")) {
     throw new Error("Snapshot toolVersions must contain name and version.");
   }
-  if (!Array.isArray(request.selectedPaths) || request.selectedPaths.length === 0) {
+  if (!Array.isArray(request.selectedPaths)) {
     throw new Error("Snapshot requires selectedPaths.");
   }
   if (request.statusMode !== STATUS_MODE) {