release-skill 0.9.16 → 0.9.17

package/adapters/qoder/src/schemas/executable-identity-observation.schema.json

@@ -0,0 +1,162 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.skill-family.example/v1/executable-identity-observation.json",
+  "title": "Executable identity observation",
+  "description": "A single, private observation of an executable lookup and its explicit launch image. Absolute roots and file bytes are intentionally represented only by the bound root and digest facts.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "kind", "lookup", "canonicalEntry", "interpreter", "launch", "observationDigest"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "skill-family.executable-identity-observation" },
+    "lookup": { "$ref": "#/$defs/lookup" },
+    "canonicalEntry": { "$ref": "#/$defs/canonicalEntry" },
+    "interpreter": {
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["request", "canonicalEntry", "shebangArgs"],
+          "properties": {
+            "request": {
+              "oneOf": [
+                { "$ref": "#/$defs/bareCommand" },
+                { "$ref": "#/$defs/absolutePath" }
+              ]
+            },
+            "canonicalEntry": {
+              "allOf": [
+                { "$ref": "#/$defs/canonicalEntry" },
+                { "type": "object", "properties": { "entryKind": { "const": "native-binary" } } }
+              ]
+            },
+            "shebangArgs": {
+              "type": "array",
+              "maxItems": 8,
+              "items": { "type": "string", "minLength": 1, "maxLength": 256, "pattern": "^[^\\u0000\\r\\n]+$" }
+            }
+          }
+        }
+      ]
+    },
+    "launch": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["file", "argvPrefix"],
+      "properties": {
+        "file": { "$ref": "#/$defs/absolutePath" },
+        "argvPrefix": {
+          "type": "array",
+          "maxItems": 8,
+          "items": { "$ref": "#/$defs/absolutePath" }
+        }
+      }
+    },
+    "observationDigest": { "$ref": "#/$defs/sha256" }
+  },
+  "allOf": [
+    {
+      "if": {
+        "type": "object",
+        "properties": { "canonicalEntry": { "type": "object", "properties": { "entryKind": { "const": "interpreter-script" } }, "required": ["entryKind"] } },
+        "required": ["canonicalEntry"]
+      },
+      "then": {
+        "type": "object",
+        "properties": {
+          "interpreter": { "type": "object" },
+          "launch": { "type": "object", "properties": { "argvPrefix": { "type": "array", "minItems": 1 } } }
+        }
+      },
+      "else": {
+        "type": "object",
+        "properties": {
+          "interpreter": { "type": "null" },
+          "launch": { "type": "object", "properties": { "argvPrefix": { "type": "array", "maxItems": 0 } } }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+    "absolutePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4096,
+      "pattern": "^/(?:[^/\\\\\\u0000]+(?:/[^/\\\\\\u0000]+)*)?$",
+      "not": { "pattern": "(?:^|/)\\.{1,2}(?:/|$)" }
+    },
+    "relativePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4096,
+      "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*(?:^|/)\\.(?:/|$))(?!.*\\\\)(?!.*\\u0000)[^/\\\\\\u0000]+(?:/[^/\\\\\\u0000]+)*$"
+    },
+    "bareCommand": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256,
+      "pattern": "^[^/\\\\\\u0000]+$"
+    },
+    "rootBinding": { "$ref": "https://contracts.skill-family.example/v1/filesystem-root-binding.json" },
+    "lookup": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requested", "mode", "selectedPath"],
+      "properties": {
+        "requested": { "type": "string", "minLength": 1, "maxLength": 4096 },
+        "mode": { "enum": ["absolute-path", "explicit-path-search"] },
+        "path": { "$ref": "#/$defs/absolutePath" },
+        "pathEntries": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 64,
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/absolutePath" }
+        },
+        "selectedPath": { "$ref": "#/$defs/absolutePath" }
+      },
+      "allOf": [
+        {
+          "if": { "type": "object", "properties": { "mode": { "const": "absolute-path" } }, "required": ["mode"] },
+          "then": {
+            "type": "object",
+            "required": ["path"],
+            "properties": { "path": {}, "pathEntries": false }
+          },
+          "else": {
+            "type": "object",
+            "required": ["pathEntries"],
+            "properties": { "pathEntries": {}, "path": false }
+          }
+        }
+      ]
+    },
+    "symlink": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "targetBase64", "bytes"],
+      "properties": {
+        "path": { "$ref": "#/$defs/absolutePath" },
+        "targetBase64": { "type": "string", "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$" },
+        "bytes": { "type": "integer", "minimum": 0, "maximum": 1048576 }
+      }
+    },
+    "canonicalEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "symlinkChain", "binding", "relPath", "sha256", "bytes", "statMode", "entryKind"],
+      "properties": {
+        "path": { "$ref": "#/$defs/absolutePath" },
+        "symlinkChain": { "type": "array", "maxItems": 40, "items": { "$ref": "#/$defs/symlink" } },
+        "binding": { "$ref": "#/$defs/rootBinding" },
+        "relPath": { "$ref": "#/$defs/relativePath" },
+        "sha256": { "$ref": "#/$defs/sha256" },
+        "bytes": { "type": "integer", "minimum": 0, "maximum": 1073741824 },
+        "statMode": { "type": "integer", "minimum": 0, "maximum": 4294967295 },
+        "entryKind": { "enum": ["native-binary", "interpreter-script", "opaque-executable"] }
+      }
+    }
+  }
+}

package/adapters/qoder/src/schemas/filesystem-root-binding.schema.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.skill-family.example/v1/filesystem-root-binding.json",
+  "title": "Filesystem root binding",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["kind", "digestAlgorithm", "basis", "digest"],
+  "properties": {
+    "kind": { "const": "trusted-filesystem-root-binding" },
+    "digestAlgorithm": { "const": "sha256" },
+    "basis": { "const": "canonical-realpath-device-inode-type-mode-v1" },
+    "digest": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
+  }
+}

package/adapters/qoder/src/schemas/filesystem-tree-observation.schema.json

@@ -0,0 +1,71 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.skill-family.example/v1/filesystem-tree-observation.json",
+  "title": "Filesystem tree observation",
+  "description": "A complete same-pass fact observation of a bound filesystem tree (FND-DES-014 section 6.1). Private data only: it is returned by the public read-only harness entry, but never enters a public plugin verification result. The record keeps the original root binding so consumers re-verify the same bound root and never re-bind a replacement. Default and explicit reject preserve the 0.14 UTF-16 order; record mode uses Unicode code point order. Directories carry identity/type/permission facts only; file bytes come from the same native descriptor that supplies statMode.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "kind", "rootBinding", "members", "membersDigest"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "skill-family.filesystem-tree-observation" },
+    "rootBinding": { "$ref": "https://contracts.skill-family.example/v1/filesystem-root-binding.json" },
+    "members": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/member" }
+    },
+    "membersDigest": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    }
+  },
+  "$defs": {
+    "statMode": { "type": "integer", "minimum": 0, "maximum": 65535 },
+    "member": {
+      "oneOf": [
+        { "$ref": "#/$defs/fileMember" },
+        { "$ref": "#/$defs/directoryMember" },
+        { "$ref": "#/$defs/symlinkMember" }
+      ]
+    },
+    "fileMember": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "type", "sha256", "bytes", "statMode", "contentBase64"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1 },
+        "type": { "const": "file" },
+        "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+        "bytes": { "type": "integer", "minimum": 0 },
+        "statMode": { "$ref": "#/$defs/statMode" },
+        "contentBase64": { "type": "string" }
+      }
+    },
+    "directoryMember": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "type", "statMode"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1 },
+        "type": { "const": "directory" },
+        "statMode": { "$ref": "#/$defs/statMode" }
+      }
+    },
+    "symlinkMember": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "type", "targetBase64", "bytes", "statMode"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1 },
+        "type": { "const": "symlink" },
+        "targetBase64": {
+          "type": "string",
+          "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+        },
+        "bytes": { "type": "integer", "minimum": 0, "maximum": 1048576 },
+        "statMode": { "$ref": "#/$defs/statMode" }
+      }
+    }
+  }
+}

package/adapters/qoder/src/schemas/fixed-set-publication-manifest.schema.json

@@ -0,0 +1,108 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.skill-family.example/v1/fixed-set-publication-manifest.json",
+  "title": "Fixed-set publication manifest",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "kind", "source", "target", "members", "digest"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "skill-family.fixed-set-publication-manifest" },
+    "source": { "$ref": "#/$defs/sourceClosure" },
+    "target": { "$ref": "#/$defs/targetClosure" },
+    "members": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/member" }
+    },
+    "digest": { "$ref": "#/$defs/sha256" }
+  },
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+    "decimalIdentity": { "type": "string", "pattern": "^(?:0|[1-9][0-9]*)$", "maxLength": 40 },
+    "relativePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 240,
+      "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\)(?!.*\\u0000)[A-Za-z0-9._-]+(?:/[A-Za-z0-9._-]+)*$"
+    },
+    "rootBinding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "digestAlgorithm", "basis", "digest"],
+      "properties": {
+        "kind": { "const": "trusted-filesystem-root-binding" },
+        "digestAlgorithm": { "const": "sha256" },
+        "basis": { "const": "canonical-realpath-device-inode-type-mode-v1" },
+        "digest": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "directoryIdentity": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["type", "mode", "device", "inode"],
+      "properties": {
+        "type": { "const": "directory" },
+        "mode": { "type": "integer", "minimum": 0, "maximum": 511 },
+        "device": { "$ref": "#/$defs/decimalIdentity" },
+        "inode": { "$ref": "#/$defs/decimalIdentity" }
+      }
+    },
+    "directoryMember": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "type", "mode", "device", "inode"],
+      "properties": {
+        "path": { "$ref": "#/$defs/relativePath" },
+        "type": { "const": "directory" },
+        "mode": { "type": "integer", "minimum": 0, "maximum": 511 },
+        "device": { "$ref": "#/$defs/decimalIdentity" },
+        "inode": { "$ref": "#/$defs/decimalIdentity" }
+      }
+    },
+    "sourceClosure": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["rootBinding", "root", "directories", "closureDigest"],
+      "properties": {
+        "rootBinding": { "$ref": "#/$defs/rootBinding" },
+        "root": { "$ref": "#/$defs/directoryIdentity" },
+        "directories": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/directoryMember" }
+        },
+        "closureDigest": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "targetClosure": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["rootBinding", "root", "directories", "closureDigest", "expectation"],
+      "properties": {
+        "rootBinding": { "$ref": "#/$defs/rootBinding" },
+        "root": { "$ref": "#/$defs/directoryIdentity" },
+        "directories": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/directoryMember" }
+        },
+        "closureDigest": { "$ref": "#/$defs/sha256" },
+        "expectation": { "const": "absent" }
+      }
+    },
+    "member": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "type", "mode", "bytes", "sha256"],
+      "properties": {
+        "path": { "$ref": "#/$defs/relativePath" },
+        "type": { "const": "regular" },
+        "mode": { "type": "integer", "minimum": 0, "maximum": 511 },
+        "bytes": { "type": "integer", "minimum": 0 },
+        "sha256": { "$ref": "#/$defs/sha256" }
+      }
+    }
+  }
+}

package/adapters/qoder/src/schemas/fixed-set-publication-receipt.schema.json

@@ -0,0 +1,148 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.skill-family.example/v1/fixed-set-publication-receipt.json",
+  "title": "Fixed-set publication receipt",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion", "kind", "manifestDigest", "targetRootBinding", "platform", "primitive",
+    "status", "targetState", "commitState", "verification", "durability"
+  ],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "skill-family.fixed-set-publication-receipt" },
+    "manifestDigest": { "$ref": "#/$defs/sha256" },
+    "targetRootBinding": { "$ref": "#/$defs/rootBinding" },
+    "platform": { "enum": ["darwin", "linux", "other"] },
+    "primitive": { "enum": ["darwin-renameatx-noreplace-v1", "linux-renameat2-noreplace-v1", "none"] },
+    "status": { "enum": ["succeeded", "refused", "failed", "indeterminate"] },
+    "targetState": { "enum": ["absent", "existing", "published", "indeterminate"] },
+    "commitState": { "enum": ["not-committed", "rename-committed"] },
+    "verification": { "enum": ["not-run", "verified", "failed"] },
+    "durability": { "enum": ["not-attempted", "synced", "indeterminate"] },
+    "publishedClosureDigest": { "$ref": "#/$defs/sha256" },
+    "memberCount": { "type": "integer", "minimum": 1 },
+    "error": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "message"],
+      "properties": {
+        "code": {
+          "enum": [
+            "TARGET_EXISTS", "UNSUPPORTED_PLATFORM", "MANIFEST_INVALID", "SOURCE_DRIFT",
+            "PATH_UNSAFE", "PUBLICATION_FAILED", "POST_VERIFY_FAILED", "DIRECTORY_FSYNC_FAILED"
+          ]
+        },
+        "message": { "type": "string", "minLength": 1, "maxLength": 300 }
+      }
+    }
+  },
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+    "rootBinding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "digestAlgorithm", "basis", "digest"],
+      "properties": {
+        "kind": { "const": "trusted-filesystem-root-binding" },
+        "digestAlgorithm": { "const": "sha256" },
+        "basis": { "const": "canonical-realpath-device-inode-type-mode-v1" },
+        "digest": { "$ref": "#/$defs/sha256" }
+      }
+    }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "status": { "const": "succeeded" } }, "required": ["status"] },
+      "then": {
+        "required": ["publishedClosureDigest", "memberCount"],
+        "properties": {
+          "platform": { "enum": ["darwin", "linux"] },
+          "primitive": { "enum": ["darwin-renameatx-noreplace-v1", "linux-renameat2-noreplace-v1"] },
+          "targetState": { "const": "published" },
+          "commitState": { "const": "rename-committed" },
+          "verification": { "const": "verified" },
+          "durability": { "const": "synced" },
+          "publishedClosureDigest": true,
+          "memberCount": true,
+          "error": false
+        }
+      }
+    },
+    {
+      "if": { "properties": { "status": { "const": "refused" } }, "required": ["status"] },
+      "then": {
+        "required": ["error"],
+        "properties": {
+          "targetState": { "enum": ["absent", "existing"] },
+          "commitState": { "const": "not-committed" },
+          "verification": { "const": "not-run" },
+          "durability": { "const": "not-attempted" },
+          "publishedClosureDigest": false,
+          "memberCount": false,
+          "error": true
+        }
+      }
+    },
+    {
+      "if": { "properties": { "status": { "const": "failed" } }, "required": ["status"] },
+      "then": {
+        "required": ["error"],
+        "properties": {
+          "targetState": { "const": "absent" },
+          "commitState": { "const": "not-committed" },
+          "verification": { "enum": ["not-run", "failed"] },
+          "durability": { "const": "not-attempted" },
+          "publishedClosureDigest": false,
+          "memberCount": false,
+          "error": true
+        }
+      }
+    },
+    {
+      "if": { "properties": { "status": { "const": "indeterminate" } }, "required": ["status"] },
+      "then": {
+        "required": ["error"],
+        "properties": {
+          "platform": { "enum": ["darwin", "linux"] },
+          "primitive": { "enum": ["darwin-renameatx-noreplace-v1", "linux-renameat2-noreplace-v1"] },
+          "targetState": { "enum": ["published", "indeterminate"] },
+          "commitState": { "const": "rename-committed" },
+          "verification": { "enum": ["verified", "failed"] },
+          "durability": { "const": "indeterminate" },
+          "error": {
+            "type": "object",
+            "properties": { "code": { "enum": ["POST_VERIFY_FAILED", "DIRECTORY_FSYNC_FAILED"] } }
+          }
+        },
+        "oneOf": [
+          {
+            "required": ["publishedClosureDigest", "memberCount"],
+            "properties": {
+              "targetState": { "const": "published" },
+              "verification": { "const": "verified" },
+              "error": {
+                "type": "object",
+                "properties": { "code": { "const": "DIRECTORY_FSYNC_FAILED" } }
+              },
+              "publishedClosureDigest": true,
+              "memberCount": true
+            }
+          },
+          {
+            "properties": {
+              "targetState": { "const": "indeterminate" },
+              "verification": { "const": "failed" },
+              "error": {
+                "type": "object",
+                "properties": { "code": { "const": "POST_VERIFY_FAILED" } }
+              },
+              "publishedClosureDigest": false,
+              "memberCount": false
+            }
+          }
+        ]
+      }
+    }
+  ]
+}

package/adapters/qoder/src/schemas/host-capability-fact.schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.skill-family.example/v1/host-capability-fact.json",
+  "title": "Skill Family host capability fact",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "kind", "hostId", "capability", "state", "evidence"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "skill-family.host-capability-fact" },
+    "hostId": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,63}$" },
+    "capability": { "enum": ["cli", "version", "payload", "registry", "discover", "enabled", "reload", "smoke", "uninstall"] },
+    "state": { "enum": ["available", "unavailable", "unknown", "error"] },
+    "evidence": { "type": "array", "minItems": 1, "maxItems": 8, "items": { "type": "string", "minLength": 1, "maxLength": 300 } },
+    "observedVersion": { "type": "string", "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$" },
+    "unknownReason": { "enum": ["timeout", "permission-denied", "interactive-required", "spawn-restricted", "not-probed", "driver-limited"] },
+    "manualSteps": { "type": "array", "minItems": 1, "maxItems": 8, "items": { "type": "string", "minLength": 1, "maxLength": 300 } }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "state": { "const": "unknown" } }, "required": ["state"] },
+      "then": { "properties": { "unknownReason": true, "manualSteps": true }, "required": ["unknownReason", "manualSteps"] },
+      "else": { "properties": { "unknownReason": false, "manualSteps": false } }
+    },
+    {
+      "if": { "properties": { "capability": { "const": "version" }, "state": { "const": "available" } }, "required": ["capability", "state"] },
+      "then": { "properties": { "observedVersion": true }, "required": ["observedVersion"] },
+      "else": { "properties": { "observedVersion": false } }
+    }
+  ]
+}