owlrunkit 0.20.0 → 0.22.0

package/scripts/runkit-contract/schemas/team-project-status-v4.schema.json

@@ -0,0 +1,208 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.com/schemas/runkit/team-project-status-v4.schema.json",
+  "title": "OwlCoda RunKit Team Project Status V4",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion", "status", "projectId", "objective", "overall", "counts",
+    "milestones", "workstreams", "workItems", "agents", "readyQueue",
+    "criticalWorkItems", "openDecisions", "resolvedDecisions",
+    "deferredVerifications", "openDeferredVerificationIds", "integrationGates",
+    "dataCandidates", "sourceDeliveries", "warnings", "externalGates",
+    "deliveryLifecycle", "projectTruthHash", "authorizationGranted",
+    "deliveryDisposition", "headline", "dominantGap", "nextAction",
+    "nextActorId", "exitCode"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitTeamProjectStatusV4" },
+    "status": { "const": "team_project_status" },
+    "projectId": { "$ref": "#/$defs/text" },
+    "objective": { "$ref": "#/$defs/text" },
+    "overall": { "enum": ["planned", "active", "active_with_blockers", "completed"] },
+    "counts": { "type": "object" },
+    "milestones": { "type": "array", "items": { "type": "object" } },
+    "workstreams": { "type": "array", "items": { "type": "object" } },
+    "workItems": { "type": "array", "items": { "type": "object" } },
+    "agents": { "type": "array", "items": { "type": "object" } },
+    "readyQueue": { "$ref": "#/$defs/strings" },
+    "criticalWorkItems": { "$ref": "#/$defs/strings" },
+    "openDecisions": { "type": "array", "items": { "type": "object" } },
+    "resolvedDecisions": { "type": "array", "items": { "type": "object" } },
+    "deferredVerifications": { "type": "array", "items": { "type": "object" } },
+    "openDeferredVerificationIds": { "$ref": "#/$defs/strings" },
+    "integrationGates": { "type": "array", "items": { "type": "object" } },
+    "dataCandidates": { "type": "array", "items": { "type": "object" } },
+    "sourceDeliveries": { "type": "array", "items": { "type": "object" } },
+    "warnings": { "type": "array", "items": { "type": "object" } },
+    "externalGates": { "type": "array", "items": { "$ref": "#/$defs/externalGate" } },
+    "deliveryLifecycle": { "$ref": "#/$defs/deliveryLifecycle" },
+    "projectTruthHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "authorizationGranted": { "const": false },
+    "deliveryDisposition": {
+      "enum": [
+        "work_ledger_incomplete", "work_ledger_complete", "source_accepted",
+        "integrated", "materialized", "deployed", "live_readback_passed", "product_accepted"
+      ]
+    },
+    "headline": { "$ref": "#/$defs/text" },
+    "dominantGap": { "$ref": "#/$defs/dominantGap" },
+    "nextAction": { "$ref": "#/$defs/nullableText" },
+    "nextActorId": { "$ref": "#/$defs/nullableText" },
+    "exitCode": { "const": 0 }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "deliveryDisposition": { "const": "product_accepted" } }, "required": ["deliveryDisposition"] },
+      "then": {
+        "properties": {
+          "dominantGap": { "properties": { "kind": { "const": "none" } } },
+          "nextAction": { "type": "null" },
+          "nextActorId": { "type": "null" }
+        }
+      }
+    }
+  ],
+  "examples": [
+    {
+      "schemaVersion": "OwlCodaRunKitTeamProjectStatusV4",
+      "status": "team_project_status",
+      "projectId": "delivery-wave",
+      "objective": "Preserve delivery truth after source completion",
+      "overall": "completed",
+      "counts": {},
+      "milestones": [],
+      "workstreams": [],
+      "workItems": [],
+      "agents": [],
+      "readyQueue": [],
+      "criticalWorkItems": [],
+      "openDecisions": [],
+      "resolvedDecisions": [],
+      "deferredVerifications": [],
+      "openDeferredVerificationIds": [],
+      "integrationGates": [],
+      "dataCandidates": [],
+      "sourceDeliveries": [],
+      "warnings": [],
+      "externalGates": [],
+      "deliveryLifecycle": {
+        "schemaVersion": "OwlCodaRunKitDeliveryLifecycleV1",
+        "lifecycleStatus": "in_progress",
+        "currentStage": "work_ledger_complete",
+        "nextRequiredStage": "source",
+        "blockingStage": null,
+        "blockingExternalGateIds": [],
+        "stages": [
+          { "stage": "source", "status": "pending", "recordId": null, "ownerAgentId": null, "summary": null, "evidenceRefs": [], "externalGateIds": [], "occurredAt": null, "truthRef": null },
+          { "stage": "integration", "status": "pending", "recordId": null, "ownerAgentId": null, "summary": null, "evidenceRefs": [], "externalGateIds": [], "occurredAt": null, "truthRef": null },
+          { "stage": "materialization", "status": "pending", "recordId": null, "ownerAgentId": null, "summary": null, "evidenceRefs": [], "externalGateIds": [], "occurredAt": null, "truthRef": null },
+          { "stage": "deployment", "status": "pending", "recordId": null, "ownerAgentId": null, "summary": null, "evidenceRefs": [], "externalGateIds": [], "occurredAt": null, "truthRef": null },
+          { "stage": "live_readback", "status": "pending", "recordId": null, "ownerAgentId": null, "summary": null, "evidenceRefs": [], "externalGateIds": [], "occurredAt": null, "truthRef": null },
+          { "stage": "product_acceptance", "status": "pending", "recordId": null, "ownerAgentId": null, "summary": null, "evidenceRefs": [], "externalGateIds": [], "occurredAt": null, "truthRef": null }
+        ],
+        "authorizationGranted": false
+      },
+      "projectTruthHash": "0000000000000000000000000000000000000000000000000000000000000000",
+      "authorizationGranted": false,
+      "deliveryDisposition": "work_ledger_complete",
+      "headline": "Dominant gap: delivery stage source; next: Record delivery stage source.",
+      "dominantGap": {
+        "kind": "delivery_stage",
+        "id": "source",
+        "title": "Delivery stage source",
+        "workItemId": null,
+        "agentId": null,
+        "reason": "Delivery stage source has no evidence-bound record.",
+        "truthRefs": ["project/definition.json"]
+      },
+      "nextAction": "Record delivery stage source.",
+      "nextActorId": null,
+      "exitCode": 0
+    }
+  ],
+  "$defs": {
+    "text": { "type": "string", "minLength": 1 },
+    "nullableText": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/text" }] },
+    "strings": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/text" } },
+    "nonemptyStrings": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/text" } },
+    "stageName": { "enum": ["source", "integration", "materialization", "deployment", "live_readback", "product_acceptance"] },
+    "nullableStage": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/stageName" }] },
+    "timestamp": { "type": "string", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$" },
+    "nullableTimestamp": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/timestamp" }] },
+    "externalGate": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "gateId", "title", "requiredFor", "gateStatus", "blocking", "ownerAgentId", "source", "summary", "evidenceRefs", "occurredAt", "truthRefs", "authorizationGranted"],
+      "properties": {
+        "schemaVersion": { "const": "OwlCodaRunKitExternalGateV1" },
+        "gateId": { "$ref": "#/$defs/text" },
+        "title": { "$ref": "#/$defs/text" },
+        "requiredFor": { "$ref": "#/$defs/stageName" },
+        "gateStatus": { "enum": ["pending", "passed", "blocked", "deferred"] },
+        "blocking": { "type": "boolean" },
+        "ownerAgentId": { "$ref": "#/$defs/text" },
+        "source": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["adapterId", "ref", "sha256"],
+          "properties": {
+            "adapterId": { "$ref": "#/$defs/text" },
+            "ref": { "$ref": "#/$defs/text" },
+            "sha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+          }
+        },
+        "summary": { "$ref": "#/$defs/text" },
+        "evidenceRefs": { "$ref": "#/$defs/nonemptyStrings" },
+        "occurredAt": { "$ref": "#/$defs/timestamp" },
+        "truthRefs": { "$ref": "#/$defs/nonemptyStrings" },
+        "authorizationGranted": { "const": false }
+      }
+    },
+    "deliveryStage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["stage", "status", "recordId", "ownerAgentId", "summary", "evidenceRefs", "externalGateIds", "occurredAt", "truthRef"],
+      "properties": {
+        "stage": { "$ref": "#/$defs/stageName" },
+        "status": { "enum": ["pending", "accepted", "rejected", "integrated", "materialized", "deployed", "failed", "rolled_back", "passed", "deferred"] },
+        "recordId": { "$ref": "#/$defs/nullableText" },
+        "ownerAgentId": { "$ref": "#/$defs/nullableText" },
+        "summary": { "$ref": "#/$defs/nullableText" },
+        "evidenceRefs": { "$ref": "#/$defs/strings" },
+        "externalGateIds": { "$ref": "#/$defs/strings" },
+        "occurredAt": { "$ref": "#/$defs/nullableTimestamp" },
+        "truthRef": { "$ref": "#/$defs/nullableText" }
+      }
+    },
+    "deliveryLifecycle": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "lifecycleStatus", "currentStage", "nextRequiredStage", "blockingStage", "blockingExternalGateIds", "stages", "authorizationGranted"],
+      "properties": {
+        "schemaVersion": { "const": "OwlCodaRunKitDeliveryLifecycleV1" },
+        "lifecycleStatus": { "enum": ["in_progress", "blocked", "completed"] },
+        "currentStage": { "enum": ["work_ledger_incomplete", "work_ledger_complete", "source_accepted", "integrated", "materialized", "deployed", "live_readback_passed", "product_accepted"] },
+        "nextRequiredStage": { "$ref": "#/$defs/nullableStage" },
+        "blockingStage": { "$ref": "#/$defs/nullableStage" },
+        "blockingExternalGateIds": { "$ref": "#/$defs/strings" },
+        "stages": { "type": "array", "minItems": 6, "maxItems": 6, "items": { "$ref": "#/$defs/deliveryStage" } },
+        "authorizationGranted": { "const": false }
+      }
+    },
+    "dominantGap": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "id", "title", "workItemId", "agentId", "reason", "truthRefs"],
+      "properties": {
+        "kind": { "enum": ["decision", "failed_work", "work_item", "deferred_verification", "integration_gate", "release_authority", "external_gate", "delivery_stage", "none"] },
+        "id": { "$ref": "#/$defs/nullableText" },
+        "title": { "$ref": "#/$defs/nullableText" },
+        "workItemId": { "$ref": "#/$defs/nullableText" },
+        "agentId": { "$ref": "#/$defs/nullableText" },
+        "reason": { "$ref": "#/$defs/nullableText" },
+        "truthRefs": { "$ref": "#/$defs/strings" }
+      }
+    }
+  }
+}

package/scripts/runkit-contract/schemas/team-recommendation-v2.schema.json

@@ -0,0 +1,120 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://owlcoda.com/schemas/runkit/team-recommendation-v2.schema.json",
+  "title": "OwlCoda RunKit Team Recommendation V2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion", "status", "project", "continuity", "coordination",
+    "assurance", "reasonCodes", "rejectedLighterModes", "lanes",
+    "pathConflicts", "acceptanceGaps", "ownerTransitions", "estimatedOverhead",
+    "nextCommand", "dispatch", "authorityBoundary", "authorizationGranted",
+    "exitCode", "teamCoordinationMode"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "OwlCodaRunKitTeamRecommendationV2" },
+    "status": { "const": "team_delivery_recommended" },
+    "project": {
+      "type": "object", "additionalProperties": false,
+      "required": ["present", "projectId", "projectTruthHash", "overall"],
+      "properties": {
+        "present": { "type": "boolean" },
+        "projectId": { "$ref": "#/$defs/nullableText" },
+        "projectTruthHash": { "oneOf": [{ "type": "null" }, { "type": "string", "pattern": "^[a-f0-9]{64}$" }] },
+        "overall": { "$ref": "#/$defs/nullableText" }
+      }
+    },
+    "teamCoordinationMode": { "enum": ["off", "team"] },
+    "continuity": { "enum": ["none", "project_driver"] },
+    "coordination": { "enum": ["none", "project_driver_team"] },
+    "assurance": {
+      "type": "object", "additionalProperties": false,
+      "required": ["changed", "selection", "reason"],
+      "properties": {
+        "changed": { "const": false },
+        "selection": { "const": "unchanged" },
+        "reason": { "const": "team_delivery_does_not_select_assurance" }
+      }
+    },
+    "reasonCodes": { "$ref": "#/$defs/strings" },
+    "rejectedLighterModes": {
+      "type": "array",
+      "items": {
+        "type": "object", "additionalProperties": false,
+        "required": ["mode", "reasonCodes"],
+        "properties": { "mode": { "const": "off" }, "reasonCodes": { "$ref": "#/$defs/nonemptyStrings" } }
+      }
+    },
+    "lanes": { "type": "array", "items": { "$ref": "#/$defs/lane" } },
+    "pathConflicts": { "type": "array", "items": { "$ref": "#/$defs/pathConflict" } },
+    "acceptanceGaps": { "type": "array", "items": { "$ref": "#/$defs/acceptanceGap" } },
+    "ownerTransitions": { "type": "array", "items": { "$ref": "#/$defs/ownerTransition" } },
+    "estimatedOverhead": {
+      "type": "object", "additionalProperties": false,
+      "required": ["additionalOperatorSteps", "potentialPortablePackets"],
+      "properties": {
+        "additionalOperatorSteps": { "type": "integer", "minimum": 0 },
+        "potentialPortablePackets": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "nextCommand": { "$ref": "#/$defs/nullableText" },
+    "dispatch": { "$ref": "#/$defs/dispatch" },
+    "authorityBoundary": { "$ref": "#/$defs/authorityBoundary" },
+    "authorizationGranted": { "const": false },
+    "exitCode": { "const": 0 }
+  },
+  "$defs": {
+    "text": { "type": "string", "minLength": 1 },
+    "nullableText": { "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/text" }] },
+    "strings": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/text" } },
+    "nonemptyStrings": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/text" } },
+    "lane": {
+      "type": "object", "additionalProperties": false,
+      "required": ["workItemId", "title", "status", "agentId", "dependencies", "unresolvedDependencies", "ownedPaths", "actionable", "parallelEligible", "coordinationFacts"],
+      "properties": {
+        "workItemId": { "$ref": "#/$defs/text" }, "title": { "$ref": "#/$defs/text" },
+        "status": { "$ref": "#/$defs/text" }, "agentId": { "$ref": "#/$defs/nullableText" },
+        "dependencies": { "$ref": "#/$defs/strings" }, "unresolvedDependencies": { "$ref": "#/$defs/strings" },
+        "ownedPaths": { "$ref": "#/$defs/nonemptyStrings" }, "actionable": { "type": "boolean" },
+        "parallelEligible": { "type": "boolean" }, "coordinationFacts": { "$ref": "#/$defs/strings" }
+      }
+    },
+    "pathConflict": {
+      "type": "object", "additionalProperties": false,
+      "required": ["leftWorkItemId", "leftPath", "rightWorkItemId", "rightPath"],
+      "properties": { "leftWorkItemId": { "$ref": "#/$defs/text" }, "leftPath": { "$ref": "#/$defs/text" }, "rightWorkItemId": { "$ref": "#/$defs/text" }, "rightPath": { "$ref": "#/$defs/text" } }
+    },
+    "acceptanceGap": {
+      "type": "object", "additionalProperties": false,
+      "required": ["workItemId", "code", "message"],
+      "properties": { "workItemId": { "$ref": "#/$defs/text" }, "code": { "const": "verification_model_family_unbound" }, "message": { "$ref": "#/$defs/text" } }
+    },
+    "ownerTransition": {
+      "type": "object", "additionalProperties": false,
+      "required": ["workItemId", "facts"],
+      "properties": { "workItemId": { "$ref": "#/$defs/text" }, "facts": { "$ref": "#/$defs/nonemptyStrings" } }
+    },
+    "dispatch": {
+      "type": "object", "additionalProperties": false,
+      "required": ["mode", "permitted", "nextCommand"],
+      "properties": { "mode": { "const": "none" }, "permitted": { "const": false }, "nextCommand": { "type": "null" } }
+    },
+    "authorityBoundary": {
+      "type": "object", "additionalProperties": false,
+      "required": ["agentDispatch", "git", "release", "deployment", "production", "business", "automation", "money"],
+      "properties": { "agentDispatch": { "const": false }, "git": { "const": false }, "release": { "const": false }, "deployment": { "const": false }, "production": { "const": false }, "business": { "const": false }, "automation": { "const": false }, "money": { "const": false } }
+    }
+  },
+  "examples": [{
+    "schemaVersion": "OwlCodaRunKitTeamRecommendationV2", "status": "team_delivery_recommended",
+    "project": { "present": false, "projectId": null, "projectTruthHash": null, "overall": null },
+    "teamCoordinationMode": "off", "continuity": "none", "coordination": "none",
+    "assurance": { "changed": false, "selection": "unchanged", "reason": "team_delivery_does_not_select_assurance" },
+    "reasonCodes": ["project_driver_not_initialized"], "rejectedLighterModes": [], "lanes": [],
+    "pathConflicts": [], "acceptanceGaps": [], "ownerTransitions": [],
+    "estimatedOverhead": { "additionalOperatorSteps": 0, "potentialPortablePackets": 0 },
+    "nextCommand": null, "dispatch": { "mode": "none", "permitted": false, "nextCommand": null },
+    "authorityBoundary": { "agentDispatch": false, "git": false, "release": false, "deployment": false, "production": false, "business": false, "automation": false, "money": false },
+    "authorizationGranted": false, "exitCode": 0
+  }]
+}

package/scripts/runkit-contract/sync-release-identity.mjs

@@ -126,6 +126,77 @@ function requireSurface(condition, surface) {
   }
 }
 
+const REGISTRY_GATED_POLICY_V2_FIELDS = Object.freeze([
+  "artifactVersion",
+  "authorizationGranted",
+  "embeddedAttestComponentVersion",
+  "exactVersionRequired",
+  "forbiddenAdoptionSources",
+  "foreignProjectWriteAuthorized",
+  "githubActionRequired",
+  "packageName",
+  "registry",
+  "registryEvidenceMustBeExternal",
+  "registryEvidenceSchemaVersion",
+  "registryRequiredBeforeAdoption",
+  "requiredRegistryBindings",
+  "rollbackRelease",
+  "schemaVersion",
+  "signatureRequired",
+  "standaloneAttestPublicationRequired",
+  "status",
+]);
+
+function exactStringArray(actual, expected) {
+  return Array.isArray(actual)
+    && actual.length === expected.length
+    && actual.every((value, index) => value === expected[index]);
+}
+
+function registryGatedPolicyV2Exact(policy, core) {
+  const rollback = policy?.rollbackRelease;
+  return policy?.schemaVersion === "OwlCodaRunKitRegistryReleasePolicyV2"
+    && Object.keys(policy).sort().join("\n") === REGISTRY_GATED_POLICY_V2_FIELDS.join("\n")
+    && policy.status === "release_artifact_registry_gated"
+    && policy.packageName === "owlrunkit"
+    && policy.artifactVersion === core.coreVersion
+    && policy.registry === "https://registry.npmjs.org"
+    && policy.registryRequiredBeforeAdoption === true
+    && policy.exactVersionRequired === true
+    && exactStringArray(policy.requiredRegistryBindings, [
+      "packageName",
+      "version",
+      "shasum",
+      "integrity",
+      "tarballUrl",
+    ])
+    && exactStringArray(policy.forbiddenAdoptionSources, [
+      "directory",
+      "file",
+      "git",
+      "local_tarball",
+      "symlink",
+      "workspace",
+    ])
+    && rollback?.packageName === "owlrunkit"
+    && /^\d+\.\d+\.\d+$/u.test(rollback?.version ?? "")
+    && rollback.version !== core.coreVersion
+    && /^[a-f0-9]{40}$/u.test(rollback?.shasum ?? "")
+    && /^sha512-[A-Za-z0-9+/]+={0,2}$/u.test(rollback?.integrity ?? "")
+    && rollback.tarballUrl
+      === `https://registry.npmjs.org/owlrunkit/-/owlrunkit-${rollback.version}.tgz`
+    && Object.keys(rollback).sort().join("\n")
+      === ["integrity", "packageName", "shasum", "tarballUrl", "version"].join("\n")
+    && policy.registryEvidenceMustBeExternal === true
+    && policy.registryEvidenceSchemaVersion === "OwlCodaRunKitRegistryReleaseEvidenceV1"
+    && policy.embeddedAttestComponentVersion === "0.2.0"
+    && policy.standaloneAttestPublicationRequired === false
+    && policy.signatureRequired === false
+    && policy.githubActionRequired === false
+    && policy.foreignProjectWriteAuthorized === false
+    && policy.authorizationGranted === false;
+}
+
 export function verifyReleaseIdentitySurfacesV1(input) {
   const core = input?.core;
   requireSurface(
@@ -155,6 +226,7 @@ export function verifyReleaseIdentitySurfacesV1(input) {
   };
   const releasePolicy = input.releasePolicy ?? null;
   const candidateUnpublished = releasePolicy?.status === "release_candidate_unpublished";
+  const registryGatedArtifact = releasePolicy?.status === "release_artifact_registry_gated";
   if (candidateUnpublished) {
     requireSurface(
       releasePolicy?.packageName === "owlrunkit"
@@ -167,6 +239,8 @@ export function verifyReleaseIdentitySurfacesV1(input) {
         && releasePolicy.currentPublishedRelease.version !== core.coreVersion,
       "release_policy",
     );
+  } else if (registryGatedArtifact) {
+    requireSurface(registryGatedPolicyV2Exact(releasePolicy, core), "release_policy");
   }
   const skillExact = (markdown) => {
     if (typeof markdown !== "string") return false;
@@ -175,6 +249,19 @@ export function verifyReleaseIdentitySurfacesV1(input) {
       && hashes[0] === core.coreManifestSha256
       && markdown.includes(`Core \`${core.coreVersion}\``);
     if (!identityExact) return false;
+    if (registryGatedArtifact) {
+      const rollback = releasePolicy.rollbackRelease.version;
+      return markdown.includes(
+        `Bundled registry-gated artifact: standalone \`owlrunkit@${core.coreVersion}\``,
+      )
+        && markdown.includes(
+          `provenance for \`owlrunkit@${core.coreVersion}\` is independently verified`,
+        )
+        && markdown.includes(
+          `published rollback baseline for this artifact is \`owlrunkit@${rollback}\``,
+        )
+        && !/(?:candidate is not published|current published release remains|already published|is published|registry publication pending|unpublished release candidate)/iu.test(markdown);
+    }
     if (!candidateUnpublished) {
       return markdown.includes(
         `Bundled release: standalone \`owlrunkit@${core.coreVersion}\``,