owlrunkit 0.18.3 → 0.19.0

package/scripts/runkit-contract/schemas/outcome-summary-v1.schema.json

@@ -0,0 +1,83 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/outcome-summary-v1.json",
+  "title": "OwlCoda RunKit Outcome Summary V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "result",
+    "headline",
+    "proofLevel",
+    "acceptanceLevels",
+    "proven",
+    "notProven",
+    "nextAction",
+    "authorizationGranted"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitOutcomeSummaryV1" },
+    "result": { "enum": ["pass", "fail", "invalidated", "indeterminate"] },
+    "headline": { "type": "string", "minLength": 1 },
+    "proofLevel": { "enum": ["captured_verification", "no_reusable_evidence"] },
+    "acceptanceLevels": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "candidateIdentity",
+        "workspaceAttestation",
+        "verificationCommand",
+        "productExperience",
+        "deploymentRuntime",
+        "productionBusiness"
+      ],
+      "properties": {
+        "candidateIdentity": { "enum": ["bound", "invalidated", "not_proven"] },
+        "workspaceAttestation": { "enum": ["unchanged", "changed", "not_proven"] },
+        "verificationCommand": { "enum": ["passed", "failed", "invalidated", "not_proven"] },
+        "productExperience": { "const": "not_proven" },
+        "deploymentRuntime": {
+          "enum": [
+            "not_proven",
+            "reported_passed",
+            "reported_failed_recovered",
+            "reported_failed_unrecovered",
+            "reported_indeterminate"
+          ]
+        },
+        "productionBusiness": { "const": "not_proven" }
+      }
+    },
+    "proven": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "notProven": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "nextAction": { "type": "string", "minLength": 1 },
+    "authorizationGranted": { "const": false }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitOutcomeSummaryV1",
+    "result": "pass",
+    "headline": "The exact verification command passed for the bound source candidate.",
+    "proofLevel": "captured_verification",
+    "acceptanceLevels": {
+      "candidateIdentity": "bound",
+      "workspaceAttestation": "unchanged",
+      "verificationCommand": "passed",
+      "productExperience": "not_proven",
+      "deploymentRuntime": "not_proven",
+      "productionBusiness": "not_proven"
+    },
+    "proven": ["The exact verification command exited successfully."],
+    "notProven": ["Product or UX acceptance was not performed by Quick Verification."],
+    "nextAction": "consume_attestation",
+    "authorizationGranted": false
+  }]
+}

package/scripts/runkit-contract/schemas/profile-detection-v3.schema.json

@@ -0,0 +1,170 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/profile-detection-v3.json",
+  "title": "OwlCoda RunKit Profile Detection V3",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "status", "dryRun", "writesPerformed", "confidence", "applyStatus", "issueCodes", "proposedProfiles", "candidates", "primaryProfileId", "inputManifest", "toolBinding", "currentProfilesSha256", "detectedScripts", "detectedWorkspaces", "changedPaths", "uncoveredChangedPaths", "uncoveredSourcePaths", "primaryBlockers", "minimalSuggestedProfile", "repairCommands", "authorizationGranted", "detectionSha256"],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitProfileDetectionV3" },
+    "status": { "enum": ["profiles_detected", "profiles_insufficient"] },
+    "dryRun": { "const": true },
+    "writesPerformed": { "const": 0 },
+    "confidence": { "enum": ["high", "review_required"] },
+    "applyStatus": { "enum": ["ready_to_apply", "review_required", "profiles_already_exists"] },
+    "issueCodes": { "$ref": "#/$defs/strings" },
+    "proposedProfiles": { "$ref": "#/$defs/profiles" },
+    "candidates": { "type": "array", "items": { "$ref": "#/$defs/profile" } },
+    "primaryProfileId": { "oneOf": [{ "type": "null" }, { "type": "string", "minLength": 1 }] },
+    "inputManifest": { "type": "array", "items": { "$ref": "#/$defs/input" } },
+    "toolBinding": { "$ref": "#/$defs/tool" },
+    "currentProfilesSha256": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
+    "detectedScripts": { "$ref": "#/$defs/strings" },
+    "detectedWorkspaces": { "type": "array", "items": { "$ref": "#/$defs/workspace" } },
+    "changedPaths": { "$ref": "#/$defs/strings" },
+    "uncoveredChangedPaths": { "$ref": "#/$defs/strings" },
+    "uncoveredSourcePaths": { "$ref": "#/$defs/strings" },
+    "primaryBlockers": { "$ref": "#/$defs/strings" },
+    "minimalSuggestedProfile": {
+      "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/profile" }]
+    },
+    "repairCommands": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["preview", "apply"],
+      "properties": {
+        "preview": { "type": "string", "minLength": 1 },
+        "apply": { "oneOf": [{ "type": "null" }, { "type": "string", "minLength": 1 }] }
+      }
+    },
+    "authorizationGranted": { "const": false },
+    "detectionSha256": { "$ref": "#/$defs/hash" }
+  },
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "strings": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "command": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "cwd", "executable", "argv"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "cwd": { "type": "string", "minLength": 1 },
+        "executable": { "oneOf": [{ "type": "null" }, { "type": "string", "minLength": 1 }] },
+        "argv": { "type": "array", "minItems": 1, "items": { "type": "string" } }
+      }
+    },
+    "profile": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "paths", "role", "primary", "requiresProfileIds", "commands"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "paths": { "$ref": "#/$defs/strings" },
+        "role": { "enum": ["primary", "supporting"] },
+        "primary": { "type": "boolean" },
+        "requiresProfileIds": { "$ref": "#/$defs/strings" },
+        "commands": { "type": "array", "items": { "$ref": "#/$defs/command" } }
+      }
+    },
+    "profiles": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "profiles"],
+      "properties": {
+        "schemaVersion": { "const": "OwlCodaRunKitProfilesV1" },
+        "profiles": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/profile" } }
+      }
+    },
+    "input": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "tool": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "confidence", "source", "packageManager", "executable", "argvPrefix", "version", "executableSha256", "launcherSha256"],
+      "properties": {
+        "status": { "enum": ["resolved", "invalid", "unavailable"] },
+        "confidence": { "enum": ["high", "review_required"] },
+        "source": { "type": "string", "minLength": 1 },
+        "packageManager": { "enum": ["npm", "pnpm", "yarn", "bun"] },
+        "executable": { "oneOf": [{ "type": "null" }, { "type": "string", "minLength": 1 }] },
+        "argvPrefix": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "version": { "oneOf": [{ "type": "null" }, { "type": "string", "minLength": 1 }] },
+        "executableSha256": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
+        "launcherSha256": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] }
+      }
+    },
+    "workspace": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "path", "scripts"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "path": { "type": "string", "minLength": 1 },
+        "scripts": { "$ref": "#/$defs/strings" }
+      }
+    }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitProfileDetectionV3",
+    "status": "profiles_detected",
+    "dryRun": true,
+    "writesPerformed": 0,
+    "confidence": "high",
+    "applyStatus": "ready_to_apply",
+    "issueCodes": [],
+    "proposedProfiles": {
+      "schemaVersion": "OwlCodaRunKitProfilesV1",
+      "profiles": [{
+        "id": "node-quality",
+        "paths": ["package.json"],
+        "role": "primary",
+        "primary": true,
+        "requiresProfileIds": [],
+        "commands": [{ "id": "npm-test", "cwd": ".", "executable": "/usr/bin/node", "argv": ["/usr/lib/npm-cli.js", "run", "test"] }]
+      }]
+    },
+    "candidates": [{
+      "id": "node-quality",
+      "paths": ["package.json"],
+      "role": "primary",
+      "primary": true,
+      "requiresProfileIds": [],
+      "commands": [{ "id": "npm-test", "cwd": ".", "executable": "/usr/bin/node", "argv": ["/usr/lib/npm-cli.js", "run", "test"] }]
+    }],
+    "primaryProfileId": "node-quality",
+    "inputManifest": [{ "path": "package.json", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }],
+    "toolBinding": {
+      "status": "resolved",
+      "confidence": "high",
+      "source": "project_lockfile",
+      "packageManager": "npm",
+      "executable": "/usr/bin/node",
+      "argvPrefix": ["/usr/lib/npm-cli.js"],
+      "version": "10.0.0",
+      "executableSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "launcherSha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+    },
+    "currentProfilesSha256": null,
+    "detectedScripts": ["test"],
+    "detectedWorkspaces": [],
+    "changedPaths": [],
+    "uncoveredChangedPaths": [],
+    "uncoveredSourcePaths": [],
+    "primaryBlockers": [],
+    "minimalSuggestedProfile": null,
+    "repairCommands": {
+      "preview": "npx --no-install owlrunkit profiles detect --workspace . --dry-run",
+      "apply": "npx --no-install owlrunkit profiles detect --workspace . --apply"
+    },
+    "authorizationGranted": false,
+    "detectionSha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+  }]
+}

package/scripts/runkit-contract/schemas/quick-evidence-reuse-plan-v1.schema.json

@@ -0,0 +1,59 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/quick-evidence-reuse-plan-v1.schema.json",
+  "title": "OwlCoda Quick Evidence Reuse Plan V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "status",
+    "exitCode",
+    "ready",
+    "baseReceipt",
+    "allowedPaths",
+    "actualDeltaPaths",
+    "outOfScopePaths",
+    "unusedAllowedPaths",
+    "currentSourceFingerprint",
+    "issues",
+    "reuseReceiptPath",
+    "authorizationGranted"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaQuickEvidenceReusePlanV1" },
+    "status": {
+      "enum": [
+        "quick_evidence_reuse_ready",
+        "quick_evidence_reuse_blocked",
+        "quick_evidence_reuse_not_needed"
+      ]
+    },
+    "exitCode": { "enum": [0, 2] },
+    "ready": { "type": "boolean" },
+    "baseReceipt": { "$ref": "#/$defs/baseReceipt" },
+    "allowedPaths": { "$ref": "#/$defs/paths" },
+    "actualDeltaPaths": { "$ref": "#/$defs/paths" },
+    "outOfScopePaths": { "$ref": "#/$defs/paths" },
+    "unusedAllowedPaths": { "$ref": "#/$defs/paths" },
+    "currentSourceFingerprint": { "$ref": "#/$defs/hash" },
+    "issues": { "type": "array", "items": { "type": "string" } },
+    "reuseReceiptPath": { "type": "null" },
+    "authorizationGranted": { "const": false }
+  },
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "paths": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "baseReceipt": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["receiptId", "path", "sha256", "sourceFingerprint", "attestationIssueCodes"],
+      "properties": {
+        "receiptId": { "type": "string", "minLength": 1 },
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "sourceFingerprint": { "$ref": "#/$defs/hash" },
+        "attestationIssueCodes": { "type": "array", "uniqueItems": true, "items": { "type": "string" } }
+      }
+    }
+  }
+}

package/scripts/runkit-contract/schemas/quick-evidence-reuse-receipt-v1.schema.json

@@ -0,0 +1,79 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/quick-evidence-reuse-receipt-v1.schema.json",
+  "title": "OwlCoda Quick Evidence Reuse Receipt V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "reuseId",
+    "baseReceipt",
+    "delta",
+    "decision",
+    "reasonCodes",
+    "proven",
+    "notProven",
+    "createdAt",
+    "authorizationGranted",
+    "receiptSha256"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaQuickEvidenceReuseReceiptV1" },
+    "reuseId": { "type": "string", "pattern": "^[A-Za-z0-9._-]+$" },
+    "baseReceipt": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["receiptId", "path", "sha256", "sourceFingerprint", "attestationIssueCodes"],
+      "properties": {
+        "receiptId": { "type": "string", "minLength": 1 },
+        "path": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "sourceFingerprint": { "$ref": "#/$defs/hash" },
+        "attestationIssueCodes": { "type": "array", "uniqueItems": true, "items": { "type": "string" } }
+      }
+    },
+    "delta": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "allowedPaths",
+        "actualPaths",
+        "unusedAllowedPaths",
+        "currentSourceFingerprint",
+        "receiptId",
+        "receiptPath",
+        "receiptSha256",
+        "command"
+      ],
+      "properties": {
+        "allowedPaths": { "$ref": "#/$defs/paths" },
+        "actualPaths": { "$ref": "#/$defs/paths" },
+        "unusedAllowedPaths": { "$ref": "#/$defs/paths" },
+        "currentSourceFingerprint": { "$ref": "#/$defs/hash" },
+        "receiptId": { "type": "string", "minLength": 1 },
+        "receiptPath": { "type": "string", "minLength": 1 },
+        "receiptSha256": { "$ref": "#/$defs/hash" },
+        "command": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["executable", "argv"],
+          "properties": {
+            "executable": { "type": "string", "minLength": 1 },
+            "argv": { "type": "array", "items": { "type": "string" } }
+          }
+        }
+      }
+    },
+    "decision": { "enum": ["accepted", "rejected"] },
+    "reasonCodes": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "proven": { "type": "array", "minItems": 2, "items": { "type": "string", "minLength": 1 } },
+    "notProven": { "type": "array", "minItems": 2, "items": { "type": "string", "minLength": 1 } },
+    "createdAt": { "type": "string", "format": "date-time" },
+    "authorizationGranted": { "const": false },
+    "receiptSha256": { "$ref": "#/$defs/hash" }
+  },
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "paths": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } }
+  }
+}

package/scripts/runkit-contract/schemas/runtime-transition-receipt-v1.schema.json

@@ -0,0 +1,185 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/runtime-transition-receipt-v1.schema.json",
+  "title": "OwlCoda RunKit Runtime Transition Receipt V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "receiptId",
+    "quickReceipt",
+    "runtimeReport",
+    "reportingBasis",
+    "workspaceMutation",
+    "externalMutation",
+    "rollbackPerformed",
+    "finalExternalState",
+    "failedStage",
+    "lastPassedStage",
+    "rollbackOutcome",
+    "stages",
+    "recoveryEvidence",
+    "transitionDecision",
+    "proven",
+    "notProven",
+    "createdAt",
+    "authorizationGranted",
+    "receiptSha256"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitRuntimeTransitionReceiptV1" },
+    "receiptId": { "$ref": "#/$defs/id" },
+    "quickReceipt": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["receiptId", "path", "sha256"],
+      "properties": {
+        "receiptId": { "$ref": "#/$defs/id" },
+        "path": { "$ref": "#/$defs/path" },
+        "sha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "runtimeReport": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256", "sizeBytes"],
+      "properties": {
+        "path": { "$ref": "#/$defs/path" },
+        "sha256": { "$ref": "#/$defs/hash" },
+        "sizeBytes": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "reportingBasis": { "const": "exact_command_report" },
+    "workspaceMutation": { "enum": ["changed", "unchanged"] },
+    "externalMutation": { "enum": ["changed", "unchanged", "unknown"] },
+    "rollbackPerformed": { "type": "boolean" },
+    "finalExternalState": { "$ref": "#/$defs/finalState" },
+    "failedStage": { "$ref": "#/$defs/nullableStageId" },
+    "lastPassedStage": { "$ref": "#/$defs/nullableStageId" },
+    "rollbackOutcome": { "enum": ["not_required", "succeeded", "failed", "unknown"] },
+    "stages": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 128,
+      "items": { "$ref": "#/$defs/stage" }
+    },
+    "recoveryEvidence": {
+      "type": "array",
+      "maxItems": 128,
+      "items": { "$ref": "#/$defs/recoveryEvidence" }
+    },
+    "transitionDecision": {
+      "enum": [
+        "external_transition_passed",
+        "external_transition_failed_recovered",
+        "external_transition_failed_unrecovered",
+        "external_transition_indeterminate",
+        "external_transition_invalidated"
+      ]
+    },
+    "proven": {
+      "type": "array",
+      "minItems": 2,
+      "items": { "$ref": "#/$defs/summary" }
+    },
+    "notProven": {
+      "type": "array",
+      "minItems": 2,
+      "items": { "$ref": "#/$defs/summary" }
+    },
+    "createdAt": { "type": "string", "format": "date-time" },
+    "authorizationGranted": { "const": false },
+    "receiptSha256": { "$ref": "#/$defs/hash" }
+  },
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "hashOrNull": {
+      "oneOf": [
+        { "type": "null" },
+        { "$ref": "#/$defs/hash" }
+      ]
+    },
+    "id": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
+    },
+    "stageId": { "$ref": "#/$defs/id" },
+    "nullableStageId": {
+      "oneOf": [
+        { "type": "null" },
+        { "$ref": "#/$defs/stageId" }
+      ]
+    },
+    "path": {
+      "type": "string",
+      "pattern": "^\\.owlcoda/runkit/quick/receipts/[^/]+/[^/]+$"
+    },
+    "reference": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1024,
+      "pattern": "^[^\\r\\n\\u0000]+$"
+    },
+    "summary": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2048,
+      "pattern": "^[^\\u0000]+$"
+    },
+    "finalState": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "stateRef", "fingerprint", "summary"],
+      "properties": {
+        "status": { "enum": ["changed", "unchanged", "restored", "unknown"] },
+        "stateRef": { "$ref": "#/$defs/reference" },
+        "fingerprint": { "$ref": "#/$defs/hashOrNull" },
+        "summary": { "$ref": "#/$defs/summary" }
+      }
+    },
+    "stage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["stageId", "status", "summary", "evidenceRefs"],
+      "properties": {
+        "stageId": { "$ref": "#/$defs/stageId" },
+        "status": { "enum": ["passed", "failed", "skipped"] },
+        "summary": { "$ref": "#/$defs/summary" },
+        "evidenceRefs": {
+          "type": "array",
+          "maxItems": 128,
+          "items": { "$ref": "#/$defs/reference" }
+        }
+      }
+    },
+    "capturedBefore": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["stageId", "stateRef", "fingerprint"],
+      "properties": {
+        "stageId": { "$ref": "#/$defs/stageId" },
+        "stateRef": { "$ref": "#/$defs/reference" },
+        "fingerprint": { "$ref": "#/$defs/hashOrNull" }
+      }
+    },
+    "restoresTo": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["stateRef", "fingerprint"],
+      "properties": {
+        "stateRef": { "$ref": "#/$defs/reference" },
+        "fingerprint": { "$ref": "#/$defs/hashOrNull" }
+      }
+    },
+    "recoveryEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["artifactRef", "capturedBefore", "restoresTo"],
+      "properties": {
+        "artifactRef": { "$ref": "#/$defs/reference" },
+        "capturedBefore": { "$ref": "#/$defs/capturedBefore" },
+        "restoresTo": { "$ref": "#/$defs/restoresTo" }
+      }
+    }
+  }
+}