owlrunkit 0.15.1 → 0.16.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (76) hide show
  1. package/CHANGELOG.md +105 -0
  2. package/README.md +284 -66
  3. package/integrations/codex/skills/owlcoda-runkit/SKILL.md +235 -116
  4. package/integrations/codex/skills/owlcoda-runkit/assets/templates/config.json +3 -3
  5. package/integrations/codex/skills/owlcoda-runkit/assets/templates/ready-for-commit-request.json +2 -2
  6. package/package.json +2 -2
  7. package/packages/attest/distribution-manifest-v1.json +10 -0
  8. package/packages/attest/src/quick.mjs +10 -0
  9. package/registry-release-policy-v1.json +8 -2
  10. package/sbom.spdx.json +5 -5
  11. package/scripts/runkit-contract/assurance-router.mjs +119 -0
  12. package/scripts/runkit-contract/core-contract.mjs +203 -206
  13. package/scripts/runkit-contract/core-successor.mjs +2043 -0
  14. package/scripts/runkit-contract/deployment-workflow.mjs +2040 -0
  15. package/scripts/runkit-contract/finalize.mjs +242 -21
  16. package/scripts/runkit-contract/fleet-discovery.mjs +1198 -0
  17. package/scripts/runkit-contract/formal-workflow.mjs +850 -0
  18. package/scripts/runkit-contract/human-status.mjs +553 -0
  19. package/scripts/runkit-contract/inspect-presentation.mjs +25 -8
  20. package/scripts/runkit-contract/install-codex-skill.mjs +73 -30
  21. package/scripts/runkit-contract/lease-lifecycle.mjs +8 -2
  22. package/scripts/runkit-contract/lifecycle-orchestration.mjs +135 -12
  23. package/scripts/runkit-contract/onboarding-doctor.mjs +43 -90
  24. package/scripts/runkit-contract/owner-authority-trust.mjs +230 -0
  25. package/scripts/runkit-contract/owner-deployment-decision.mjs +385 -0
  26. package/scripts/runkit-contract/profile-onboarding.mjs +841 -13
  27. package/scripts/runkit-contract/project-cli-resolver.mjs +704 -0
  28. package/scripts/runkit-contract/project-control-parser.mjs +889 -0
  29. package/scripts/runkit-contract/project-control-state.mjs +28 -0
  30. package/scripts/runkit-contract/provenance-common.mjs +19 -2
  31. package/scripts/runkit-contract/ready-for-commit.mjs +330 -18
  32. package/scripts/runkit-contract/remote-deployment.mjs +1596 -0
  33. package/scripts/runkit-contract/remote-process-adapter.mjs +177 -0
  34. package/scripts/runkit-contract/runkit-bootstrap.mjs +131 -0
  35. package/scripts/runkit-contract/runkit-cli.mjs +1155 -21
  36. package/scripts/runkit-contract/schemas/assurance-route-v1.schema.json +26 -0
  37. package/scripts/runkit-contract/schemas/core-successor-batch-receipt-v1.schema.json +126 -0
  38. package/scripts/runkit-contract/schemas/core-successor-plan-v1.schema.json +167 -0
  39. package/scripts/runkit-contract/schemas/core-successor-project-success-receipt-v1.schema.json +72 -0
  40. package/scripts/runkit-contract/schemas/deployment-execute-request-v1.schema.json +63 -0
  41. package/scripts/runkit-contract/schemas/deployment-lineage-v1.schema.json +292 -0
  42. package/scripts/runkit-contract/schemas/deployment-prepare-receipt-v1.schema.json +140 -0
  43. package/scripts/runkit-contract/schemas/fleet-discovery-v1.schema.json +62 -0
  44. package/scripts/runkit-contract/schemas/fleet-manifest-v1.schema.json +20 -0
  45. package/scripts/runkit-contract/schemas/fleet-root-registry-v1.schema.json +34 -0
  46. package/scripts/runkit-contract/schemas/human-status-v1.schema.json +102 -0
  47. package/scripts/runkit-contract/schemas/owner-authority-trust-v1.schema.json +66 -0
  48. package/scripts/runkit-contract/schemas/owner-deployment-authority-v1.schema.json +46 -0
  49. package/scripts/runkit-contract/schemas/owner-deployment-authority-v2.schema.json +94 -0
  50. package/scripts/runkit-contract/schemas/owner-deployment-decision-v1.schema.json +102 -0
  51. package/scripts/runkit-contract/schemas/owner-migration-authority-v1.schema.json +33 -0
  52. package/scripts/runkit-contract/schemas/owner-migration-authority-v2.schema.json +67 -0
  53. package/scripts/runkit-contract/schemas/profile-apply-receipt-v1.schema.json +32 -0
  54. package/scripts/runkit-contract/schemas/profile-detection-v2.schema.json +145 -0
  55. package/scripts/runkit-contract/schemas/ready-for-commit-v2.schema.json +37 -0
  56. package/scripts/runkit-contract/schemas/remote-deployment-manifest-v1.schema.json +379 -0
  57. package/scripts/runkit-contract/schemas/remote-deployment-result-v1.schema.json +153 -0
  58. package/scripts/runkit-contract/schemas/remote-deployment-stage-journal-v1.schema.json +183 -0
  59. package/scripts/runkit-contract/schemas/remote-target-v1.schema.json +32 -0
  60. package/scripts/runkit-contract/schemas/source-candidate-v2.schema.json +152 -0
  61. package/scripts/runkit-contract/schemas/verification-receipt-v2.schema.json +13 -0
  62. package/scripts/runkit-contract/snapshot.mjs +1 -1
  63. package/scripts/runkit-contract/source-candidate.mjs +1382 -0
  64. package/scripts/runkit-contract/ssh-remote-adapter.mjs +1184 -0
  65. package/scripts/runkit-contract/sync-core016-release-identity.mjs +166 -0
  66. package/scripts/runkit-contract/templates/assurance-request.json +13 -0
  67. package/scripts/runkit-contract/templates/core-successor-owner-authority.json +15 -0
  68. package/scripts/runkit-contract/templates/deployment-execute-request.json +39 -0
  69. package/scripts/runkit-contract/templates/deployment-owner-authority.json +23 -0
  70. package/scripts/runkit-contract/templates/deployment-owner-decision.json +26 -0
  71. package/scripts/runkit-contract/templates/fleet-manifest.json +8 -0
  72. package/scripts/runkit-contract/templates/fleet-root-registry.json +8 -0
  73. package/scripts/runkit-contract/templates/owner-authority-trust.json +16 -0
  74. package/scripts/runkit-contract/templates/ready-for-commit-request.json +2 -2
  75. package/scripts/runkit-contract/templates/remote-deployment-manifest.json +108 -0
  76. package/scripts/runkit-contract/verification-receipt-gate.mjs +28 -0
@@ -0,0 +1,102 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://owlcoda.dev/schemas/runkit/human-status-v1.json",
4
+ "title": "OwlCoda RunKit Human Status V1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schemaVersion", "status", "overall", "headline", "stage", "currentExecutionId", "completedSteps", "remainingGates", "remainingGateCount", "control", "milestones", "nextAllowedAction", "authorizationGranted", "gitAuthorization", "releaseAuthorization", "deployAuthorization"],
8
+ "properties": {
9
+ "schemaVersion": { "const": "OwlCodaRunKitHumanStatusV1" },
10
+ "status": { "const": "projected" },
11
+ "overall": { "enum": ["blocked", "closed", "idle", "ready_for_closeout", "working"] },
12
+ "headline": { "type": "string", "minLength": 1 },
13
+ "stage": { "enum": ["setup", "implementation", "delivery", "verification", "closeout", "external_action"] },
14
+ "currentExecutionId": { "oneOf": [{ "type": "null" }, { "type": "string", "minLength": 1 }] },
15
+ "completedSteps": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
16
+ "remainingGates": { "type": "array", "items": { "$ref": "#/$defs/gate" } },
17
+ "remainingGateCount": { "type": "integer", "minimum": 0 },
18
+ "control": { "$ref": "#/$defs/control" },
19
+ "milestones": {
20
+ "type": "object",
21
+ "additionalProperties": false,
22
+ "required": ["sourceData", "releasePackage", "remoteVmWrite"],
23
+ "properties": {
24
+ "sourceData": { "$ref": "#/$defs/milestone" },
25
+ "releasePackage": { "$ref": "#/$defs/milestone" },
26
+ "remoteVmWrite": { "$ref": "#/$defs/milestone" }
27
+ }
28
+ },
29
+ "nextAllowedAction": { "type": "string", "minLength": 1 },
30
+ "authorizationGranted": { "const": false },
31
+ "gitAuthorization": { "const": false },
32
+ "releaseAuthorization": { "const": false },
33
+ "deployAuthorization": { "const": false }
34
+ },
35
+ "$defs": {
36
+ "gate": {
37
+ "type": "object",
38
+ "additionalProperties": false,
39
+ "required": ["code", "label", "nextAllowedAction"],
40
+ "properties": {
41
+ "code": { "type": "string", "minLength": 1 },
42
+ "label": { "type": "string", "minLength": 1 },
43
+ "nextAllowedAction": { "type": "string", "minLength": 1 }
44
+ }
45
+ },
46
+ "control": {
47
+ "type": "object",
48
+ "additionalProperties": false,
49
+ "required": ["status", "issueCodes"],
50
+ "properties": {
51
+ "status": { "enum": ["healthy", "invalid", "drifted"] },
52
+ "issueCodes": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } }
53
+ }
54
+ },
55
+ "milestone": {
56
+ "type": "object",
57
+ "additionalProperties": false,
58
+ "required": ["status", "evidence", "label"],
59
+ "properties": {
60
+ "status": {
61
+ "enum": ["ready", "not_ready", "performed", "not_performed", "not_evidenced"]
62
+ },
63
+ "evidence": { "type": "string", "minLength": 1 },
64
+ "label": { "type": "string", "minLength": 1 }
65
+ }
66
+ }
67
+ },
68
+ "examples": [{
69
+ "schemaVersion": "OwlCodaRunKitHumanStatusV1",
70
+ "status": "projected",
71
+ "overall": "idle",
72
+ "headline": "No RunKit execution is active.",
73
+ "stage": "setup",
74
+ "currentExecutionId": null,
75
+ "completedSteps": [],
76
+ "remainingGates": [],
77
+ "remainingGateCount": 0,
78
+ "control": { "status": "healthy", "issueCodes": [] },
79
+ "milestones": {
80
+ "sourceData": {
81
+ "status": "not_evidenced",
82
+ "evidence": "none",
83
+ "label": "Source/data readiness is not evidenced by inspect."
84
+ },
85
+ "releasePackage": {
86
+ "status": "not_evidenced",
87
+ "evidence": "none",
88
+ "label": "Release package readiness is not evidenced by inspect."
89
+ },
90
+ "remoteVmWrite": {
91
+ "status": "not_evidenced",
92
+ "evidence": "none",
93
+ "label": "Remote/VM write is not evidenced by inspect."
94
+ }
95
+ },
96
+ "nextAllowedAction": "plan_new_execution",
97
+ "authorizationGranted": false,
98
+ "gitAuthorization": false,
99
+ "releaseAuthorization": false,
100
+ "deployAuthorization": false
101
+ }]
102
+ }
@@ -0,0 +1,66 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://owlcoda.dev/schemas/runkit/owner-authority-trust-v1.json",
4
+ "title": "OwlCoda RunKit Owner Authority Trust V1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schemaVersion", "keys"],
8
+ "properties": {
9
+ "schemaVersion": {
10
+ "const": "OwlCodaRunKitOwnerAuthorityTrustV1"
11
+ },
12
+ "keys": {
13
+ "type": "array",
14
+ "minItems": 1,
15
+ "items": {
16
+ "type": "object",
17
+ "additionalProperties": false,
18
+ "required": [
19
+ "keyId",
20
+ "algorithm",
21
+ "publicKeyPem",
22
+ "publicKeySha256",
23
+ "purposes",
24
+ "status"
25
+ ],
26
+ "properties": {
27
+ "keyId": { "$ref": "#/$defs/id" },
28
+ "algorithm": { "const": "ed25519" },
29
+ "publicKeyPem": {
30
+ "type": "string",
31
+ "pattern": "^-----BEGIN PUBLIC KEY-----"
32
+ },
33
+ "publicKeySha256": { "$ref": "#/$defs/hash" },
34
+ "purposes": {
35
+ "type": "array",
36
+ "minItems": 1,
37
+ "uniqueItems": true,
38
+ "items": { "$ref": "#/$defs/id" }
39
+ },
40
+ "status": { "const": "active" }
41
+ }
42
+ }
43
+ }
44
+ },
45
+ "$defs": {
46
+ "id": {
47
+ "type": "string",
48
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
49
+ },
50
+ "hash": {
51
+ "type": "string",
52
+ "pattern": "^sha256:[a-f0-9]{64}$"
53
+ }
54
+ },
55
+ "examples": [{
56
+ "schemaVersion": "OwlCodaRunKitOwnerAuthorityTrustV1",
57
+ "keys": [{
58
+ "keyId": "owner-key-001",
59
+ "algorithm": "ed25519",
60
+ "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=\n-----END PUBLIC KEY-----\n",
61
+ "publicKeySha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
62
+ "purposes": ["core_successor", "remote_deployment"],
63
+ "status": "active"
64
+ }]
65
+ }]
66
+ }
@@ -0,0 +1,46 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://owlcoda.dev/schemas/runkit/owner-deployment-authority-v1.json",
4
+ "title": "OwlCoda RunKit Owner Deployment Authority V1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schemaVersion", "authorityId", "decision", "scope", "executeRunId", "prepareReceiptSha256", "targetSha256", "artifactSha256", "permissions", "authorizationGranted", "authoritySha256"],
8
+ "properties": {
9
+ "schemaVersion": { "const": "OwlCodaRunKitOwnerDeploymentAuthorityV1" },
10
+ "authorityId": { "$ref": "#/$defs/id" },
11
+ "decision": { "const": "approved" },
12
+ "scope": { "const": "execute_exact_remote_deployment" },
13
+ "executeRunId": { "$ref": "#/$defs/id" },
14
+ "prepareReceiptSha256": { "$ref": "#/$defs/hash" },
15
+ "targetSha256": { "$ref": "#/$defs/hash" },
16
+ "artifactSha256": { "$ref": "#/$defs/hash" },
17
+ "permissions": {
18
+ "type": "object",
19
+ "additionalProperties": false,
20
+ "required": ["deploy", "destructive"],
21
+ "properties": {
22
+ "deploy": { "const": true },
23
+ "destructive": { "type": "boolean" }
24
+ }
25
+ },
26
+ "authorizationGranted": { "const": false },
27
+ "authoritySha256": { "$ref": "#/$defs/hash" }
28
+ },
29
+ "$defs": {
30
+ "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$" },
31
+ "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
32
+ },
33
+ "examples": [{
34
+ "schemaVersion": "OwlCodaRunKitOwnerDeploymentAuthorityV1",
35
+ "authorityId": "owner-deployment-execute-001",
36
+ "decision": "approved",
37
+ "scope": "execute_exact_remote_deployment",
38
+ "executeRunId": "deployment-execute-001",
39
+ "prepareReceiptSha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
40
+ "targetSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
41
+ "artifactSha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
42
+ "permissions": { "deploy": true, "destructive": false },
43
+ "authorizationGranted": false,
44
+ "authoritySha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
45
+ }]
46
+ }
@@ -0,0 +1,94 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://owlcoda.dev/schemas/runkit/owner-deployment-authority-v2.json",
4
+ "title": "OwlCoda RunKit Owner Deployment Authority V2",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "authorityId",
10
+ "decision",
11
+ "scope",
12
+ "executeRunId",
13
+ "prepareReceiptSha256",
14
+ "targetSha256",
15
+ "artifactSha256",
16
+ "remoteManifestFileSha256",
17
+ "remoteDeploymentIntentSha256",
18
+ "ownerDecisionId",
19
+ "ownerDecisionSha256",
20
+ "signerKeyId",
21
+ "signatureAlgorithm",
22
+ "permissions",
23
+ "authorizationGranted",
24
+ "authoritySha256",
25
+ "signature"
26
+ ],
27
+ "properties": {
28
+ "schemaVersion": {
29
+ "const": "OwlCodaRunKitOwnerDeploymentAuthorityV2"
30
+ },
31
+ "authorityId": { "$ref": "#/$defs/id" },
32
+ "decision": { "const": "approved" },
33
+ "scope": { "const": "execute_exact_remote_deployment" },
34
+ "executeRunId": { "$ref": "#/$defs/id" },
35
+ "prepareReceiptSha256": { "$ref": "#/$defs/digest" },
36
+ "targetSha256": { "$ref": "#/$defs/digest" },
37
+ "artifactSha256": { "$ref": "#/$defs/digest" },
38
+ "remoteManifestFileSha256": { "$ref": "#/$defs/digest" },
39
+ "remoteDeploymentIntentSha256": { "$ref": "#/$defs/digest" },
40
+ "ownerDecisionId": { "$ref": "#/$defs/id" },
41
+ "ownerDecisionSha256": { "$ref": "#/$defs/digest" },
42
+ "signerKeyId": { "$ref": "#/$defs/id" },
43
+ "signatureAlgorithm": { "const": "ed25519" },
44
+ "permissions": {
45
+ "type": "object",
46
+ "additionalProperties": false,
47
+ "required": ["deploy", "destructive"],
48
+ "properties": {
49
+ "deploy": { "const": true },
50
+ "destructive": { "type": "boolean" }
51
+ }
52
+ },
53
+ "authorizationGranted": { "const": false },
54
+ "authoritySha256": { "$ref": "#/$defs/hashRef" },
55
+ "signature": {
56
+ "type": "string",
57
+ "pattern": "^[A-Za-z0-9+/]+={0,2}$"
58
+ }
59
+ },
60
+ "$defs": {
61
+ "id": {
62
+ "type": "string",
63
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
64
+ },
65
+ "digest": {
66
+ "type": "string",
67
+ "pattern": "^[a-f0-9]{64}$"
68
+ },
69
+ "hashRef": {
70
+ "type": "string",
71
+ "pattern": "^sha256:[a-f0-9]{64}$"
72
+ }
73
+ },
74
+ "examples": [{
75
+ "schemaVersion": "OwlCodaRunKitOwnerDeploymentAuthorityV2",
76
+ "authorityId": "owner-deployment-execute-001",
77
+ "decision": "approved",
78
+ "scope": "execute_exact_remote_deployment",
79
+ "executeRunId": "deployment-execute-001",
80
+ "prepareReceiptSha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
81
+ "targetSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
82
+ "artifactSha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
83
+ "remoteManifestFileSha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
84
+ "remoteDeploymentIntentSha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
85
+ "ownerDecisionId": "owner-clean-install-001",
86
+ "ownerDecisionSha256": "1111111111111111111111111111111111111111111111111111111111111111",
87
+ "signerKeyId": "owner-key-001",
88
+ "signatureAlgorithm": "ed25519",
89
+ "permissions": { "deploy": true, "destructive": false },
90
+ "authorizationGranted": false,
91
+ "authoritySha256": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
92
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
93
+ }]
94
+ }
@@ -0,0 +1,102 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://owlcoda.dev/schemas/runkit/owner-deployment-decision-v1.json",
4
+ "title": "OwlCoda RunKit Owner Deployment Decision V1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "decisionId",
10
+ "decisionVersion",
11
+ "provenance",
12
+ "project",
13
+ "supersedesDecisionSha256",
14
+ "deploymentMode",
15
+ "existingProjectAssets",
16
+ "legacyRollbackAllowed",
17
+ "dataAuthority",
18
+ "serviceActivationAuthorized",
19
+ "baselineCutAuthorized",
20
+ "destructiveScope",
21
+ "decisionSha256"
22
+ ],
23
+ "properties": {
24
+ "schemaVersion": { "const": "OwlCodaRunKitOwnerDeploymentDecisionV1" },
25
+ "decisionId": { "$ref": "#/$defs/id" },
26
+ "decisionVersion": { "type": "integer", "minimum": 1 },
27
+ "provenance": {
28
+ "type": "object",
29
+ "additionalProperties": false,
30
+ "required": ["kind", "sourceRef", "recordedAt"],
31
+ "properties": {
32
+ "kind": { "const": "owner_explicit" },
33
+ "sourceRef": { "type": "string", "minLength": 1 },
34
+ "recordedAt": { "type": "string", "format": "date-time" }
35
+ }
36
+ },
37
+ "project": {
38
+ "type": "object",
39
+ "additionalProperties": false,
40
+ "required": ["projectId", "scope"],
41
+ "properties": {
42
+ "projectId": { "$ref": "#/$defs/id" },
43
+ "scope": { "$ref": "#/$defs/id" }
44
+ }
45
+ },
46
+ "supersedesDecisionSha256": {
47
+ "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }]
48
+ },
49
+ "deploymentMode": { "enum": ["clean_install", "in_place_update"] },
50
+ "existingProjectAssets": { "enum": ["preserve", "replace", "remove"] },
51
+ "legacyRollbackAllowed": { "type": "boolean" },
52
+ "dataAuthority": {
53
+ "type": "object",
54
+ "additionalProperties": false,
55
+ "required": ["mode", "sourceRef"],
56
+ "properties": {
57
+ "mode": {
58
+ "enum": ["preserve_existing", "replace_from_artifact", "initialize_new"]
59
+ },
60
+ "sourceRef": { "type": "string", "minLength": 1 }
61
+ }
62
+ },
63
+ "serviceActivationAuthorized": { "type": "boolean" },
64
+ "baselineCutAuthorized": { "type": "boolean" },
65
+ "destructiveScope": {
66
+ "type": "array",
67
+ "items": { "type": "string", "minLength": 1 },
68
+ "uniqueItems": true
69
+ },
70
+ "decisionSha256": { "$ref": "#/$defs/hash" }
71
+ },
72
+ "$defs": {
73
+ "id": {
74
+ "type": "string",
75
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
76
+ },
77
+ "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
78
+ },
79
+ "examples": [{
80
+ "schemaVersion": "OwlCodaRunKitOwnerDeploymentDecisionV1",
81
+ "decisionId": "owner-clean-install-001",
82
+ "decisionVersion": 1,
83
+ "provenance": {
84
+ "kind": "owner_explicit",
85
+ "sourceRef": "owner:decision/clean-install-001",
86
+ "recordedAt": "2026-08-01T00:00:00.000Z"
87
+ },
88
+ "project": { "projectId": "owlapp", "scope": "production" },
89
+ "supersedesDecisionSha256": null,
90
+ "deploymentMode": "clean_install",
91
+ "existingProjectAssets": "replace",
92
+ "legacyRollbackAllowed": false,
93
+ "dataAuthority": {
94
+ "mode": "initialize_new",
95
+ "sourceRef": "owner:data-authority/clean-install-001"
96
+ },
97
+ "serviceActivationAuthorized": true,
98
+ "baselineCutAuthorized": true,
99
+ "destructiveScope": [],
100
+ "decisionSha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
101
+ }]
102
+ }
@@ -0,0 +1,33 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://owlcoda.dev/schemas/runkit/owner-migration-authority-v1.json",
4
+ "title": "OwlCoda RunKit Owner Migration Authority V1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schemaVersion", "authorityId", "decision", "scope", "planSha256", "fromCoreSetSha256", "toCoreManifestSha256", "fleetManifestSha256", "authorizationGranted", "authoritySha256"],
8
+ "properties": {
9
+ "schemaVersion": { "const": "OwlCodaRunKitOwnerMigrationAuthorityV1" },
10
+ "authorityId": { "type": "string", "minLength": 1 },
11
+ "decision": { "const": "approved" },
12
+ "scope": { "const": "migrate_declared_core_successor_fleet" },
13
+ "planSha256": { "$ref": "#/$defs/hash" },
14
+ "fromCoreSetSha256": { "$ref": "#/$defs/hash" },
15
+ "toCoreManifestSha256": { "$ref": "#/$defs/hash" },
16
+ "fleetManifestSha256": { "$ref": "#/$defs/hash" },
17
+ "authorizationGranted": { "const": false },
18
+ "authoritySha256": { "$ref": "#/$defs/hash" }
19
+ },
20
+ "$defs": { "hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" } },
21
+ "examples": [{
22
+ "schemaVersion": "OwlCodaRunKitOwnerMigrationAuthorityV1",
23
+ "authorityId": "owner-core-successor-001",
24
+ "decision": "approved",
25
+ "scope": "migrate_declared_core_successor_fleet",
26
+ "planSha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
27
+ "fromCoreSetSha256": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
28
+ "toCoreManifestSha256": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
29
+ "fleetManifestSha256": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
30
+ "authorizationGranted": false,
31
+ "authoritySha256": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"
32
+ }]
33
+ }
@@ -0,0 +1,67 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://owlcoda.dev/schemas/runkit/owner-migration-authority-v2.json",
4
+ "title": "OwlCoda RunKit Owner Migration Authority V2",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "authorityId",
10
+ "decision",
11
+ "scope",
12
+ "planSha256",
13
+ "fromCoreSetSha256",
14
+ "toCoreManifestSha256",
15
+ "fleetManifestSha256",
16
+ "signerKeyId",
17
+ "signatureAlgorithm",
18
+ "authorizationGranted",
19
+ "authoritySha256",
20
+ "signature"
21
+ ],
22
+ "properties": {
23
+ "schemaVersion": {
24
+ "const": "OwlCodaRunKitOwnerMigrationAuthorityV2"
25
+ },
26
+ "authorityId": { "$ref": "#/$defs/id" },
27
+ "decision": { "const": "approved" },
28
+ "scope": { "const": "migrate_declared_core_successor_fleet" },
29
+ "planSha256": { "$ref": "#/$defs/hash" },
30
+ "fromCoreSetSha256": { "$ref": "#/$defs/hash" },
31
+ "toCoreManifestSha256": { "$ref": "#/$defs/hash" },
32
+ "fleetManifestSha256": { "$ref": "#/$defs/hash" },
33
+ "signerKeyId": { "$ref": "#/$defs/id" },
34
+ "signatureAlgorithm": { "const": "ed25519" },
35
+ "authorizationGranted": { "const": false },
36
+ "authoritySha256": { "$ref": "#/$defs/hash" },
37
+ "signature": {
38
+ "type": "string",
39
+ "pattern": "^[A-Za-z0-9+/]+={0,2}$"
40
+ }
41
+ },
42
+ "$defs": {
43
+ "id": {
44
+ "type": "string",
45
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
46
+ },
47
+ "hash": {
48
+ "type": "string",
49
+ "pattern": "^sha256:[a-f0-9]{64}$"
50
+ }
51
+ },
52
+ "examples": [{
53
+ "schemaVersion": "OwlCodaRunKitOwnerMigrationAuthorityV2",
54
+ "authorityId": "owner-core-successor-001",
55
+ "decision": "approved",
56
+ "scope": "migrate_declared_core_successor_fleet",
57
+ "planSha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
58
+ "fromCoreSetSha256": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
59
+ "toCoreManifestSha256": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
60
+ "fleetManifestSha256": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
61
+ "signerKeyId": "owner-key-001",
62
+ "signatureAlgorithm": "ed25519",
63
+ "authorizationGranted": false,
64
+ "authoritySha256": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
65
+ "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
66
+ }]
67
+ }
@@ -0,0 +1,32 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://owlcoda.dev/schemas/runkit/profile-apply-receipt-v1.json",
4
+ "title": "OwlCoda RunKit Profiles Apply Receipt V1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schemaVersion", "status", "writesPerformed", "detectionSha256", "issueCodes", "authorizationGranted"],
8
+ "properties": {
9
+ "schemaVersion": { "const": "OwlCodaRunKitProfilesApplyReceiptV1" },
10
+ "status": { "enum": ["profiles_applied", "profiles_apply_blocked"] },
11
+ "writesPerformed": { "enum": [0, 2] },
12
+ "detectionSha256": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
13
+ "beforeProfilesSha256": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
14
+ "appliedProfilesSha256": { "$ref": "#/$defs/hash" },
15
+ "currentProfilesSha256": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
16
+ "receiptPath": { "type": "string", "minLength": 1 },
17
+ "issueCodes": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
18
+ "authorizationGranted": { "const": false }
19
+ },
20
+ "$defs": { "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" } },
21
+ "examples": [{
22
+ "schemaVersion": "OwlCodaRunKitProfilesApplyReceiptV1",
23
+ "status": "profiles_applied",
24
+ "writesPerformed": 2,
25
+ "detectionSha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
26
+ "beforeProfilesSha256": null,
27
+ "appliedProfilesSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
28
+ "receiptPath": ".owlcoda/runkit/profile-apply-receipts/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.json",
29
+ "issueCodes": [],
30
+ "authorizationGranted": false
31
+ }]
32
+ }