owlrunkit 0.19.1 → 0.20.0

package/scripts/runkit-contract/schemas/candidate-transfer-packet-v1.schema.json

@@ -0,0 +1,98 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.com/schemas/runkit/candidate-transfer-packet-v1.schema.json",
+  "title": "OwlCoda RunKit Candidate Transfer Packet V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion", "packetId", "projectBinding", "gateId", "workItemId",
+    "candidateId", "candidateSha256", "baseSha", "head", "branch", "worktree",
+    "dirtyManifestSha256", "patchBundleRef", "snapshotRef", "reconstructionRefs",
+    "protectedArtifacts", "previousOwner", "nextOwner", "lifecycle", "handoffAck",
+    "verificationStatus", "authorityBoundary", "authorizationGranted"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitCandidateTransferPacketV1" },
+    "packetId": { "$ref": "#/$defs/id" },
+    "projectBinding": { "$ref": "#/$defs/projectBinding" },
+    "gateId": { "$ref": "#/$defs/id" },
+    "workItemId": { "$ref": "#/$defs/id" },
+    "candidateId": { "$ref": "#/$defs/id" },
+    "candidateSha256": { "$ref": "#/$defs/sha256Ref" },
+    "baseSha": { "$ref": "#/$defs/gitRef" },
+    "head": { "$ref": "#/$defs/gitRef" },
+    "branch": { "$ref": "#/$defs/text" },
+    "worktree": { "$ref": "#/$defs/absolutePath" },
+    "dirtyManifestSha256": { "$ref": "#/$defs/sha256Ref" },
+    "patchBundleRef": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/artifactSha256Ref" }] },
+    "snapshotRef": { "$ref": "#/$defs/artifactSha256Ref" },
+    "reconstructionRefs": { "$ref": "#/$defs/nonemptyStrings" },
+    "protectedArtifacts": { "$ref": "#/$defs/strings" },
+    "previousOwner": { "$ref": "#/$defs/id" },
+    "nextOwner": { "$ref": "#/$defs/id" },
+    "lifecycle": { "enum": ["candidate_active", "transfer_requested", "packet_generated", "new_owner_validation", "handoff_ack", "old_writer_release"] },
+    "handoffAck": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "agent", "occurredAt", "evidenceRefs"],
+      "properties": {
+        "status": { "enum": ["pending", "accepted", "rejected"] },
+        "agent": { "$ref": "#/$defs/nullableText" },
+        "occurredAt": { "$ref": "#/$defs/nullableIsoUtc" },
+        "evidenceRefs": { "$ref": "#/$defs/strings" }
+      }
+    },
+    "verificationStatus": { "enum": ["source_candidate_unverified", "source_candidate_verified", "accepted", "rework_required"] },
+    "authorityBoundary": { "$ref": "#/$defs/authorityBoundary" },
+    "authorizationGranted": { "const": false }
+  },
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]*$" },
+    "text": { "type": "string", "minLength": 1 },
+    "nullableText": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/text" }] },
+    "nullableIsoUtc": { "oneOf": [{ "type": "null" }, { "type": "string", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$" }] },
+    "strings": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/text" } },
+    "nonemptyStrings": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/text" } },
+    "sha256Ref": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "artifactSha256Ref": { "type": "string", "pattern": "^artifact:sha256:[a-f0-9]{64}$" },
+    "gitRef": { "type": "string", "pattern": "^git:[a-f0-9]{40}([a-f0-9]{24})?$" },
+    "absolutePath": { "type": "string", "pattern": "^(?:/|[A-Za-z]:[\\\\/]|\\\\\\\\)" },
+    "projectBinding": { "type": "object", "additionalProperties": false, "required": ["projectId", "projectTruthHash"], "properties": { "projectId": { "$ref": "#/$defs/id" }, "projectTruthHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" } } },
+    "authorityBoundary": { "type": "object", "additionalProperties": false, "required": ["agentDispatch", "git", "release", "deployment", "production", "business", "automation", "money"], "properties": { "agentDispatch": { "const": false }, "git": { "const": false }, "release": { "const": false }, "deployment": { "const": false }, "production": { "const": false }, "business": { "const": false }, "automation": { "const": false }, "money": { "const": false } } }
+  },
+  "allOf": [{
+    "if": {
+      "properties": { "lifecycle": { "enum": ["handoff_ack", "old_writer_release"] } },
+      "required": ["lifecycle"]
+    },
+    "then": {
+      "properties": {
+        "handoffAck": {
+          "properties": {
+            "status": { "const": "accepted" },
+            "agent": { "$ref": "#/$defs/text" },
+            "occurredAt": { "type": "string", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{3})?Z$" },
+            "evidenceRefs": { "minItems": 1 }
+          }
+        }
+      }
+    }
+  }],
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitCandidateTransferPacketV1", "packetId": "transfer-packet-001",
+    "projectBinding": { "projectId": "team-phase1", "projectTruthHash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" },
+    "gateId": "ready", "workItemId": "work-1", "candidateId": "candidate-001",
+    "candidateSha256": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+    "baseSha": "git:2222222222222222222222222222222222222222", "head": "git:3333333333333333333333333333333333333333",
+    "branch": "codex/team-a", "worktree": "/workspace/team-a",
+    "dirtyManifestSha256": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+    "patchBundleRef": "artifact:sha256:5555555555555555555555555555555555555555555555555555555555555555",
+    "snapshotRef": "artifact:sha256:6666666666666666666666666666666666666666666666666666666666666666",
+    "reconstructionRefs": ["git:2222222222222222222222222222222222222222"], "protectedArtifacts": ["docs/contract.md"],
+    "previousOwner": "agent-a", "nextOwner": "agent-b", "lifecycle": "handoff_ack",
+    "handoffAck": { "status": "accepted", "agent": "agent-b", "occurredAt": "2026-08-13T08:00:00.000Z", "evidenceRefs": ["receipt:transfer-001"] },
+    "verificationStatus": "source_candidate_unverified",
+    "authorityBoundary": { "agentDispatch": false, "git": false, "release": false, "deployment": false, "production": false, "business": false, "automation": false, "money": false },
+    "authorizationGranted": false
+  }]
+}

package/scripts/runkit-contract/schemas/formal-check-v2.schema.json

@@ -0,0 +1,231 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/formal-check-v2.json",
+  "title": "OwlCoda RunKit Formal Check V2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "runId",
+    "checkId",
+    "sequence",
+    "status",
+    "candidatePath",
+    "candidateSha256",
+    "payloadSha256",
+    "sourceFingerprint",
+    "verificationContext",
+    "verificationContextFingerprint",
+    "snapshotRequestPath",
+    "snapshotPath",
+    "commandExitCode",
+    "verificationCommandPolicy",
+    "envelopePath",
+    "envelopeSha256",
+    "envelopeReceiptPath",
+    "envelopeReceiptSha256",
+    "envelopeFormalEligible",
+    "failureCategory",
+    "failureDetail",
+    "finalized",
+    "authorizationGranted",
+    "formalCheckSha256"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitFormalCheckV2" },
+    "runId": { "$ref": "#/$defs/id" },
+    "checkId": { "$ref": "#/$defs/id" },
+    "sequence": { "type": "integer", "minimum": 1 },
+    "status": { "enum": ["formal_check_passed", "formal_check_failed"] },
+    "candidatePath": { "type": "string", "minLength": 1 },
+    "candidateSha256": { "$ref": "#/$defs/prefixedHash" },
+    "payloadSha256": { "$ref": "#/$defs/prefixedHash" },
+    "sourceFingerprint": { "$ref": "#/$defs/hash" },
+    "verificationContext": { "$ref": "#/$defs/verificationContext" },
+    "verificationContextFingerprint": { "$ref": "#/$defs/hash" },
+    "snapshotRequestPath": { "type": "string", "minLength": 1 },
+    "snapshotPath": { "type": "string", "minLength": 1 },
+    "commandExitCode": { "enum": [0, 2] },
+    "verificationCommandPolicy": { "$ref": "#/$defs/verificationCommandPolicy" },
+    "envelopePath": { "type": "string", "minLength": 1 },
+    "envelopeSha256": { "$ref": "#/$defs/hash" },
+    "envelopeReceiptPath": { "type": "string", "minLength": 1 },
+    "envelopeReceiptSha256": { "$ref": "#/$defs/hash" },
+    "envelopeFormalEligible": { "type": "boolean" },
+    "failureCategory": {
+      "type": ["string", "null"],
+      "enum": [
+        null,
+        "source_check_failed",
+        "envelope_capability_missing",
+        "toolchain_resolution_failed",
+        "network_policy_blocked"
+      ]
+    },
+    "failureDetail": { "type": ["string", "null"] },
+    "finalized": { "const": false },
+    "authorizationGranted": { "const": false },
+    "formalCheckSha256": { "$ref": "#/$defs/prefixedHash" }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "status": { "const": "formal_check_passed" } }, "required": ["status"] },
+      "then": {
+        "properties": {
+          "failureCategory": { "const": null },
+          "failureDetail": { "const": null },
+          "envelopeFormalEligible": { "const": true }
+        }
+      },
+      "else": {
+        "properties": {
+          "failureCategory": { "enum": ["source_check_failed", "envelope_capability_missing", "toolchain_resolution_failed", "network_policy_blocked"] },
+          "failureDetail": { "type": "string", "minLength": 1 }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$" },
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "prefixedHash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "nonempty": { "type": "string", "minLength": 1 },
+    "nameVersion": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "version"],
+      "properties": {
+        "name": { "$ref": "#/$defs/nonempty" },
+        "version": { "$ref": "#/$defs/nonempty" }
+      }
+    },
+    "pathHash": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256"],
+      "properties": {
+        "path": { "$ref": "#/$defs/nonempty" },
+        "sha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "idHash": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "sha256"],
+      "properties": {
+        "id": { "$ref": "#/$defs/nonempty" },
+        "sha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "verificationContext": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "reusePolicy", "platform", "toolchains", "lockfiles", "fixtures", "services", "environment"],
+      "properties": {
+        "schemaVersion": { "const": "OwlCodaRunKitVerificationContextV1" },
+        "reusePolicy": { "enum": ["portable", "platform_bound", "environment_bound"] },
+        "platform": {
+          "oneOf": [
+            { "type": "null" },
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["os", "arch"],
+              "properties": {
+                "os": { "$ref": "#/$defs/nonempty" },
+                "arch": { "$ref": "#/$defs/nonempty" }
+              }
+            }
+          ]
+        },
+        "toolchains": { "type": "array", "items": { "$ref": "#/$defs/nameVersion" } },
+        "lockfiles": { "type": "array", "items": { "$ref": "#/$defs/pathHash" } },
+        "fixtures": { "type": "array", "items": { "$ref": "#/$defs/idHash" } },
+        "services": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["id", "identity"],
+            "properties": {
+              "id": { "$ref": "#/$defs/nonempty" },
+              "identity": { "$ref": "#/$defs/nonempty" }
+            }
+          }
+        },
+        "environment": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["name", "valueSha256"],
+            "properties": {
+              "name": { "$ref": "#/$defs/nonempty" },
+              "valueSha256": { "$ref": "#/$defs/hash" }
+            }
+          }
+        }
+      }
+    },
+    "verificationCommandPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "mode", "riskClassification", "profileCommandIds", "envelopeSha256", "envelopeReceiptSha256", "authorizationGranted"],
+      "properties": {
+        "schemaVersion": { "const": "OwlCodaRunKitFormalVerificationCommandPolicyV1" },
+        "mode": { "const": "verification_envelope_v1" },
+        "riskClassification": { "const": "enforced_verification_envelope" },
+        "profileCommandIds": { "const": [] },
+        "envelopeSha256": { "$ref": "#/$defs/hash" },
+        "envelopeReceiptSha256": { "$ref": "#/$defs/hash" },
+        "authorizationGranted": { "const": false }
+      }
+    }
+  },
+  "examples": [
+    {
+      "schemaVersion": "OwlCodaRunKitFormalCheckV2",
+      "runId": "release-001",
+      "checkId": "quality",
+      "sequence": 1,
+      "status": "formal_check_failed",
+      "candidatePath": ".owlcoda/runkit/executions/release-001/source-candidates/quality.json",
+      "candidateSha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "payloadSha256": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "sourceFingerprint": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "verificationContext": {
+        "schemaVersion": "OwlCodaRunKitVerificationContextV1",
+        "reusePolicy": "portable",
+        "platform": null,
+        "toolchains": [],
+        "lockfiles": [],
+        "fixtures": [],
+        "services": [],
+        "environment": []
+      },
+      "verificationContextFingerprint": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "snapshotRequestPath": ".owlcoda/runkit/executions/release-001/formal-check-requests/quality.json",
+      "snapshotPath": ".owlcoda/runkit/executions/release-001/snapshots/quality-snapshot.json",
+      "commandExitCode": 2,
+      "verificationCommandPolicy": {
+        "schemaVersion": "OwlCodaRunKitFormalVerificationCommandPolicyV1",
+        "mode": "verification_envelope_v1",
+        "riskClassification": "enforced_verification_envelope",
+        "profileCommandIds": [],
+        "envelopeSha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+        "envelopeReceiptSha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+        "authorizationGranted": false
+      },
+      "envelopePath": ".owlcoda/runkit/executions/release-001/formal-envelopes/quality.json",
+      "envelopeSha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "envelopeReceiptPath": ".owlcoda/runkit/executions/release-001/verification-envelopes/quality/verification-envelope-receipt.json",
+      "envelopeReceiptSha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+      "envelopeFormalEligible": false,
+      "failureCategory": "source_check_failed",
+      "failureDetail": "verification_command_returned_nonzero",
+      "finalized": false,
+      "authorizationGranted": false,
+      "formalCheckSha256": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
+    }
+  ]
+}

package/scripts/runkit-contract/schemas/formal-envelope-preflight-v1.schema.json

@@ -0,0 +1,212 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.dev/schemas/runkit/formal-envelope-preflight-v1.json",
+  "title": "OwlCoda RunKit Formal Envelope Preflight V1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "status", "exitCode", "envelopeId", "envelopeSha256", "backend", "phases", "runtimeIsolation", "issues", "nextAllowedAction", "authorizationGranted"],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitFormalEnvelopePreflightV1" },
+    "status": { "enum": ["ready", "blocked"] },
+    "exitCode": { "enum": [0, 2] },
+    "envelopeId": { "$ref": "#/$defs/id" },
+    "envelopeSha256": { "$ref": "#/$defs/hash" },
+    "backend": { "$ref": "#/$defs/backend" },
+    "phases": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 3,
+      "items": { "$ref": "#/$defs/phase" }
+    },
+    "runtimeIsolation": { "$ref": "#/$defs/runtimeIsolation" },
+    "issues": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/issue" }
+    },
+    "nextAllowedAction": { "enum": ["repair_envelope_and_repeat_preflight", "run_formal_check_with_exact_envelope"] },
+    "authorizationGranted": { "const": false }
+  },
+  "examples": [
+    {
+      "schemaVersion": "OwlCodaRunKitFormalEnvelopePreflightV1",
+      "status": "ready",
+      "exitCode": 0,
+      "envelopeId": "focused-tests",
+      "envelopeSha256": "0000000000000000000000000000000000000000000000000000000000000000",
+      "backend": {
+        "id": "macos-sandbox-exec",
+        "available": true,
+        "executable": "/usr/bin/sandbox-exec",
+        "capabilities": {
+          "fileWritePolicy": "enforced",
+          "forbiddenReadPolicy": "enforced",
+          "networkPolicy": "enforced",
+          "processExecPolicy": "enforced",
+          "processCleanup": "verified"
+        }
+      },
+      "phases": [
+        {
+          "name": "check",
+          "executable": "/usr/bin/node",
+          "argv": ["--test", "tests/focused.test.mjs"],
+          "effectiveTool": "node",
+          "packageScript": null,
+          "packageScriptCommand": null,
+          "detectedTools": ["node"],
+          "requiredExecutables": ["/usr/bin/node"],
+          "temporaryDirectory": {
+            "needed": false,
+            "environmentName": "TMPDIR",
+            "declaredValue": null,
+            "resolvedPath": null,
+            "scratchRoot": null,
+            "disposition": "not_required"
+          },
+          "runtimeScan": {
+            "scanRoot": ".",
+            "protectedRuntimeRoot": ".owlcoda/runkit",
+            "canReachProtectedRuntime": false,
+            "collectorDetected": false,
+            "affectedScripts": []
+          }
+        }
+      ],
+      "runtimeIsolation": {
+        "status": "ok",
+        "affectedScripts": [],
+        "recommendedIgnore": ".owlcoda/runkit/"
+      },
+      "issues": [],
+      "nextAllowedAction": "run_formal_check_with_exact_envelope",
+      "authorizationGranted": false
+    }
+  ],
+  "allOf": [
+    {
+      "if": { "properties": { "status": { "const": "ready" } }, "required": ["status"] },
+      "then": {
+        "properties": {
+          "exitCode": { "const": 0 },
+          "nextAllowedAction": { "const": "run_formal_check_with_exact_envelope" }
+        }
+      },
+      "else": {
+        "properties": {
+          "exitCode": { "const": 2 },
+          "nextAllowedAction": { "const": "repair_envelope_and_repeat_preflight" }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$" },
+    "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "nonempty": { "type": "string", "minLength": 1 },
+    "capabilities": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["fileWritePolicy", "forbiddenReadPolicy", "networkPolicy", "processExecPolicy", "processCleanup"],
+      "properties": {
+        "fileWritePolicy": { "enum": ["enforced", "unavailable"] },
+        "forbiddenReadPolicy": { "enum": ["enforced", "unavailable"] },
+        "networkPolicy": { "enum": ["enforced", "unavailable"] },
+        "processExecPolicy": { "enum": ["enforced", "unavailable"] },
+        "processCleanup": { "enum": ["verified", "unavailable"] }
+      }
+    },
+    "backend": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "available", "capabilities"],
+      "properties": {
+        "id": { "$ref": "#/$defs/nonempty" },
+        "available": { "type": "boolean" },
+        "executable": { "type": "string", "minLength": 1 },
+        "reason": { "$ref": "#/$defs/nonempty" },
+        "capabilities": { "$ref": "#/$defs/capabilities" }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "available": { "const": true } }, "required": ["available"] },
+          "then": { "required": ["executable"], "not": { "required": ["reason"] } },
+          "else": { "required": ["reason"], "not": { "required": ["executable"] } }
+        }
+      ]
+    },
+    "affectedScript": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ignoreFile", "script", "tool"],
+      "properties": {
+        "ignoreFile": { "$ref": "#/$defs/nonempty" },
+        "script": { "$ref": "#/$defs/nonempty" },
+        "tool": { "$ref": "#/$defs/nonempty" }
+      }
+    },
+    "runtimeIsolation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "affectedScripts", "recommendedIgnore"],
+      "properties": {
+        "status": { "enum": ["ok", "warning", "unknown"] },
+        "affectedScripts": { "type": "array", "items": { "$ref": "#/$defs/affectedScript" } },
+        "recommendedIgnore": { "const": ".owlcoda/runkit/" }
+      }
+    },
+    "temporaryDirectory": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["needed", "environmentName", "declaredValue", "resolvedPath", "scratchRoot", "disposition"],
+      "properties": {
+        "needed": { "type": "boolean" },
+        "environmentName": { "const": "TMPDIR" },
+        "declaredValue": { "type": ["string", "null"] },
+        "resolvedPath": { "type": ["string", "null"] },
+        "scratchRoot": { "type": ["string", "null"] },
+        "disposition": { "enum": ["not_required", "not_declared", "bound_to_disposable_scratch", "outside_disposable_scratch_tree"] }
+      }
+    },
+    "runtimeScan": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["scanRoot", "protectedRuntimeRoot", "canReachProtectedRuntime", "collectorDetected", "affectedScripts"],
+      "properties": {
+        "scanRoot": { "$ref": "#/$defs/nonempty" },
+        "protectedRuntimeRoot": { "$ref": "#/$defs/nonempty" },
+        "canReachProtectedRuntime": { "type": "boolean" },
+        "collectorDetected": { "type": "boolean" },
+        "affectedScripts": { "type": "array", "items": { "$ref": "#/$defs/affectedScript" } }
+      }
+    },
+    "phase": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "executable", "argv", "effectiveTool", "packageScript", "packageScriptCommand", "detectedTools", "requiredExecutables", "temporaryDirectory", "runtimeScan"],
+      "properties": {
+        "name": { "enum": ["setup", "check", "teardown"] },
+        "executable": { "$ref": "#/$defs/nonempty" },
+        "argv": { "type": "array", "items": { "type": "string" } },
+        "effectiveTool": { "$ref": "#/$defs/nonempty" },
+        "packageScript": { "type": ["string", "null"] },
+        "packageScriptCommand": { "type": ["string", "null"] },
+        "detectedTools": { "type": "array", "items": { "$ref": "#/$defs/nonempty" }, "uniqueItems": true },
+        "requiredExecutables": { "type": "array", "items": { "$ref": "#/$defs/nonempty" }, "uniqueItems": true },
+        "temporaryDirectory": { "$ref": "#/$defs/temporaryDirectory" },
+        "runtimeScan": { "$ref": "#/$defs/runtimeScan" }
+      }
+    },
+    "issue": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "phase", "message", "repairCommand"],
+      "properties": {
+        "code": { "$ref": "#/$defs/nonempty" },
+        "severity": { "enum": ["blocker", "warning"] },
+        "phase": { "enum": [null, "setup", "check", "teardown"] },
+        "message": { "$ref": "#/$defs/nonempty" },
+        "repairCommand": { "$ref": "#/$defs/nonempty" }
+      }
+    }
+  }
+}