release-skill 0.9.16 → 0.9.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (356) hide show
  1. package/.claude-plugin/plugin.json +1 -1
  2. package/.codebuddy-plugin/plugin.json +1 -1
  3. package/.codex-plugin/plugin.json +2 -2
  4. package/.cursor-plugin/plugin.json +10 -0
  5. package/.kimi-plugin/plugin.json +1 -1
  6. package/.qoder-plugin/plugin.json +10 -0
  7. package/CHANGELOG.md +64 -0
  8. package/INSTALL.md +104 -9
  9. package/INSTALL.zh-CN.md +78 -7
  10. package/README.md +87 -32
  11. package/README.zh-CN.md +71 -30
  12. package/adapters/claude/.claude-plugin/plugin.json +1 -1
  13. package/adapters/claude/bin/consumer-contract-vectors.json +7 -7
  14. package/adapters/claude/bin/error-codes.json +1 -1
  15. package/adapters/claude/bin/foundation-resource-binding.json +1 -1
  16. package/adapters/claude/bin/prebuild-manifest.json +8 -4
  17. package/adapters/claude/bin/prebuilds/darwin-arm64/bound_read.darwin-arm64.node +0 -0
  18. package/adapters/claude/bin/prebuilds/darwin-x64/bound_read.darwin-x64.node +0 -0
  19. package/adapters/claude/bin/prebuilds/linux-arm64-gnu/bound_read.linux-arm64-gnu.node +0 -0
  20. package/adapters/claude/bin/prebuilds/linux-x64-gnu/bound_read.linux-x64-gnu.node +0 -0
  21. package/adapters/claude/bin/registry.json +1 -1
  22. package/adapters/claude/bin/release-skill.bundle.mjs +4950 -1819
  23. package/adapters/claude/bin/rules.json +1 -1
  24. package/adapters/claude/data/hosts/cursor/host-descriptor.json +34 -0
  25. package/adapters/claude/data/hosts/registry.json +1 -0
  26. package/adapters/claude/schemas/release-plan.schema.json +255 -25
  27. package/adapters/claude/schemas/release-project.schema.json +228 -26
  28. package/adapters/claude/skills/release-finish/SKILL.md +29 -15
  29. package/adapters/claude/skills/release-help/SKILL.md +40 -39
  30. package/adapters/claude/skills/release-verify/SKILL.md +2 -2
  31. package/adapters/claude/src/schemas/host-descriptor.schema.json +9 -2
  32. package/adapters/codex/.codex-plugin/plugin.json +2 -2
  33. package/adapters/codex/bin/consumer-contract-vectors.json +7 -7
  34. package/adapters/codex/bin/error-codes.json +1 -1
  35. package/adapters/codex/bin/foundation-resource-binding.json +1 -1
  36. package/adapters/codex/bin/prebuild-manifest.json +8 -4
  37. package/adapters/codex/bin/prebuilds/darwin-arm64/bound_read.darwin-arm64.node +0 -0
  38. package/adapters/codex/bin/prebuilds/darwin-x64/bound_read.darwin-x64.node +0 -0
  39. package/adapters/codex/bin/prebuilds/linux-arm64-gnu/bound_read.linux-arm64-gnu.node +0 -0
  40. package/adapters/codex/bin/prebuilds/linux-x64-gnu/bound_read.linux-x64-gnu.node +0 -0
  41. package/adapters/codex/bin/registry.json +1 -1
  42. package/adapters/codex/bin/release-skill.bundle.mjs +4950 -1819
  43. package/adapters/codex/bin/rules.json +1 -1
  44. package/adapters/codex/data/hosts/cursor/host-descriptor.json +34 -0
  45. package/adapters/codex/data/hosts/registry.json +1 -0
  46. package/adapters/codex/schemas/release-plan.schema.json +255 -25
  47. package/adapters/codex/schemas/release-project.schema.json +228 -26
  48. package/adapters/codex/skills/release-finish/SKILL.md +29 -15
  49. package/adapters/codex/skills/release-help/SKILL.md +40 -39
  50. package/adapters/codex/skills/release-verify/SKILL.md +2 -2
  51. package/adapters/codex/src/schemas/host-descriptor.schema.json +9 -2
  52. package/adapters/cursor/.cursor-plugin/plugin.json +10 -0
  53. package/adapters/cursor/bin/consumer-contract-vectors.json +110 -0
  54. package/adapters/cursor/bin/error-codes.json +161 -0
  55. package/adapters/cursor/bin/foundation-legal/skill-family-contracts/LICENSE +202 -0
  56. package/adapters/cursor/bin/foundation-legal/skill-family-contracts/NOTICE +10 -0
  57. package/adapters/cursor/bin/foundation-legal/skill-family-engineering-kit/LICENSE +202 -0
  58. package/adapters/cursor/bin/foundation-legal/skill-family-engineering-kit/NOTICE +10 -0
  59. package/adapters/cursor/bin/foundation-legal/skill-family-engineering-kit/THIRD_PARTY_NOTICES +142 -0
  60. package/adapters/cursor/bin/foundation-legal/skill-family-harness-node/LICENSE +202 -0
  61. package/adapters/cursor/bin/foundation-legal/skill-family-harness-node/NOTICE +10 -0
  62. package/adapters/cursor/bin/foundation-legal/skill-family-harness-node/native-NOTICE +2 -0
  63. package/adapters/cursor/bin/foundation-resource-binding.json +1 -0
  64. package/adapters/cursor/bin/kernel-protocol.json +60 -0
  65. package/adapters/cursor/bin/license-texts/Apache-2.0.txt +201 -0
  66. package/adapters/cursor/bin/license-texts/MIT.txt +21 -0
  67. package/adapters/cursor/bin/prebuild-manifest.json +83 -0
  68. package/adapters/cursor/bin/prebuilds/darwin-arm64/bound_read.darwin-arm64.node +0 -0
  69. package/adapters/cursor/bin/prebuilds/darwin-x64/bound_read.darwin-x64.node +0 -0
  70. package/adapters/cursor/bin/prebuilds/linux-arm64-gnu/bound_read.linux-arm64-gnu.node +0 -0
  71. package/adapters/cursor/bin/prebuilds/linux-x64-gnu/bound_read.linux-x64-gnu.node +0 -0
  72. package/adapters/cursor/bin/registry.json +347 -0
  73. package/adapters/cursor/bin/release-skill-local-finish.mjs +4 -0
  74. package/adapters/cursor/bin/release-skill.bundle.mjs +151806 -0
  75. package/adapters/cursor/bin/release-skill.mjs +54 -0
  76. package/adapters/cursor/bin/rules.json +104 -0
  77. package/adapters/cursor/bin/schemas/consumer-contract-vector.schema.json +149 -0
  78. package/adapters/cursor/data/hosts/claude/host-descriptor.json +45 -0
  79. package/adapters/cursor/data/hosts/codebuddy/host-descriptor.json +26 -0
  80. package/adapters/cursor/data/hosts/codex/host-descriptor.json +45 -0
  81. package/adapters/cursor/data/hosts/cursor/host-descriptor.json +34 -0
  82. package/adapters/cursor/data/hosts/deepseek-harness/host-descriptor.json +23 -0
  83. package/adapters/cursor/data/hosts/kimi-code/host-descriptor.json +36 -0
  84. package/adapters/cursor/data/hosts/qoder/host-descriptor.json +26 -0
  85. package/adapters/cursor/data/hosts/registry.json +14 -0
  86. package/adapters/cursor/data/hosts/workbuddy/host-descriptor.json +34 -0
  87. package/adapters/cursor/data/licensing/registry.json +211 -0
  88. package/adapters/cursor/data/licensing/schema.json +207 -0
  89. package/adapters/cursor/native/safe-write/binding.gyp +41 -0
  90. package/adapters/cursor/native/safe-write/prebuilds/darwin-arm64/safe_write.node +0 -0
  91. package/adapters/cursor/native/safe-write/prebuilds.json +24 -0
  92. package/adapters/cursor/native/safe-write/src/safe_write.cc +2032 -0
  93. package/adapters/cursor/schemas/.render-manifest.json +41 -0
  94. package/adapters/cursor/schemas/approval-record.schema.json +115 -0
  95. package/adapters/cursor/schemas/artifact-lock.schema.json +111 -0
  96. package/adapters/cursor/schemas/artifact-plan.schema.json +52 -0
  97. package/adapters/cursor/schemas/artifact-policy.schema.json +76 -0
  98. package/adapters/cursor/schemas/evidence-event-v2.schema.json +164 -0
  99. package/adapters/cursor/schemas/evidence-event.schema.json +89 -0
  100. package/adapters/cursor/schemas/postpublish-approval-record.schema.json +47 -0
  101. package/adapters/cursor/schemas/release-plan.schema.json +2226 -0
  102. package/adapters/cursor/schemas/release-project.schema.json +1815 -0
  103. package/adapters/cursor/schemas/release-run.schema.json +777 -0
  104. package/adapters/cursor/skills/release-assess/SKILL.md +61 -0
  105. package/adapters/cursor/skills/release-config/SKILL.md +151 -0
  106. package/adapters/cursor/skills/release-docs/SKILL.md +120 -0
  107. package/adapters/cursor/skills/release-finish/SKILL.md +155 -0
  108. package/adapters/cursor/skills/release-help/SKILL.md +155 -0
  109. package/adapters/cursor/skills/release-marketplace/SKILL.md +157 -0
  110. package/adapters/cursor/skills/release-prepare/SKILL.md +136 -0
  111. package/adapters/cursor/skills/release-publish/SKILL.md +92 -0
  112. package/adapters/cursor/skills/release-reconcile/SKILL.md +81 -0
  113. package/adapters/cursor/skills/release-setup/SKILL.md +132 -0
  114. package/adapters/cursor/skills/release-verify/SKILL.md +110 -0
  115. package/adapters/cursor/src/schemas/adapter-build-manifest.schema.json +41 -0
  116. package/adapters/cursor/src/schemas/adapter-peer-verification-request.schema.json +54 -0
  117. package/adapters/cursor/src/schemas/adapter-peer-verification-result.schema.json +54 -0
  118. package/adapters/cursor/src/schemas/adapter-source.schema.json +47 -0
  119. package/adapters/cursor/src/schemas/audit-baseline-pin.schema.json +163 -0
  120. package/adapters/cursor/src/schemas/declared-read-surface-result.schema.json +61 -0
  121. package/adapters/cursor/src/schemas/engineering-baseline.schema.json +77 -0
  122. package/adapters/cursor/src/schemas/executable-identity-observation.schema.json +162 -0
  123. package/adapters/cursor/src/schemas/filesystem-root-binding.schema.json +14 -0
  124. package/adapters/cursor/src/schemas/filesystem-tree-observation.schema.json +71 -0
  125. package/adapters/cursor/src/schemas/fixed-set-publication-manifest.schema.json +108 -0
  126. package/adapters/cursor/src/schemas/fixed-set-publication-receipt.schema.json +148 -0
  127. package/adapters/cursor/src/schemas/host-capability-fact.schema.json +31 -0
  128. package/adapters/cursor/src/schemas/host-descriptor.schema.json +144 -0
  129. package/adapters/cursor/src/schemas/host-operation-plan.schema.json +57 -0
  130. package/adapters/cursor/src/schemas/host-operation-receipt.schema.json +81 -0
  131. package/adapters/cursor/src/schemas/host-probe-result.schema.json +30 -0
  132. package/adapters/cursor/src/schemas/host-registry.schema.json +18 -0
  133. package/adapters/cursor/src/schemas/host-verification-request.schema.json +67 -0
  134. package/adapters/cursor/src/schemas/host-verification-result.schema.json +149 -0
  135. package/adapters/cursor/src/schemas/managed-file-lock.schema.json +77 -0
  136. package/adapters/cursor/src/schemas/migration-manifest.schema.json +412 -0
  137. package/adapters/cursor/src/schemas/observation-scope.schema.json +91 -0
  138. package/adapters/cursor/src/schemas/operation-request.schema.json +58 -0
  139. package/adapters/cursor/src/schemas/operation-result.schema.json +130 -0
  140. package/adapters/cursor/src/schemas/platform-difference-registry.schema.json +110 -0
  141. package/adapters/cursor/src/schemas/plugin-verification-request.schema.json +499 -0
  142. package/adapters/cursor/src/schemas/plugin-verification-result.schema.json +1217 -0
  143. package/adapters/cursor/src/schemas/profile-adoption-declaration.schema.json +111 -0
  144. package/adapters/cursor/src/schemas/profile-descriptor.schema.json +99 -0
  145. package/adapters/cursor/src/schemas/project-manifest.schema.json +67 -0
  146. package/adapters/cursor/src/schemas/project-profile.schema.json +25 -0
  147. package/adapters/cursor/src/schemas/public-boundary-declaration.schema.json +73 -0
  148. package/adapters/cursor/src/schemas/report-binding.schema.json +42 -0
  149. package/adapters/cursor/src/schemas/report-model.schema.json +308 -0
  150. package/adapters/cursor/src/schemas/skill-family-directory-verification-request.schema.json +100 -0
  151. package/adapters/cursor/src/schemas/skill-family-directory-verification-result.schema.json +193 -0
  152. package/adapters/cursor/src/schemas/source-authority-receipt.schema.json +31 -0
  153. package/adapters/cursor/src/schemas/state-event-envelope.schema.json +38 -0
  154. package/adapters/cursor/src/schemas/state-snapshot-metadata.schema.json +25 -0
  155. package/adapters/cursor/src/schemas/structured-scan-policy.schema.json +97 -0
  156. package/adapters/cursor/src/schemas/surface-scan-policy.schema.json +42 -0
  157. package/adapters/cursor/src/schemas/timeout-policy.schema.json +24 -0
  158. package/adapters/cursor/src/schemas/token-estimate-record.schema.json +75 -0
  159. package/adapters/cursor/src/schemas/token-estimate-result.schema.json +43 -0
  160. package/adapters/cursor/src/schemas/watchdog-termination-envelope.schema.json +156 -0
  161. package/adapters/kimi/.kimi-plugin/plugin.json +1 -1
  162. package/adapters/kimi/bin/consumer-contract-vectors.json +7 -7
  163. package/adapters/kimi/bin/error-codes.json +1 -1
  164. package/adapters/kimi/bin/foundation-resource-binding.json +1 -1
  165. package/adapters/kimi/bin/prebuild-manifest.json +8 -4
  166. package/adapters/kimi/bin/prebuilds/darwin-arm64/bound_read.darwin-arm64.node +0 -0
  167. package/adapters/kimi/bin/prebuilds/darwin-x64/bound_read.darwin-x64.node +0 -0
  168. package/adapters/kimi/bin/prebuilds/linux-arm64-gnu/bound_read.linux-arm64-gnu.node +0 -0
  169. package/adapters/kimi/bin/prebuilds/linux-x64-gnu/bound_read.linux-x64-gnu.node +0 -0
  170. package/adapters/kimi/bin/registry.json +1 -1
  171. package/adapters/kimi/bin/release-skill.bundle.mjs +4950 -1819
  172. package/adapters/kimi/bin/rules.json +1 -1
  173. package/adapters/kimi/data/hosts/cursor/host-descriptor.json +34 -0
  174. package/adapters/kimi/data/hosts/registry.json +1 -0
  175. package/adapters/kimi/schemas/release-plan.schema.json +255 -25
  176. package/adapters/kimi/schemas/release-project.schema.json +228 -26
  177. package/adapters/kimi/skills/release-finish/SKILL.md +29 -15
  178. package/adapters/kimi/skills/release-help/SKILL.md +40 -39
  179. package/adapters/kimi/skills/release-verify/SKILL.md +2 -2
  180. package/adapters/kimi/src/schemas/host-descriptor.schema.json +9 -2
  181. package/adapters/qoder/.qoder-plugin/plugin.json +10 -0
  182. package/adapters/qoder/bin/consumer-contract-vectors.json +110 -0
  183. package/adapters/qoder/bin/error-codes.json +161 -0
  184. package/adapters/qoder/bin/foundation-legal/skill-family-contracts/LICENSE +202 -0
  185. package/adapters/qoder/bin/foundation-legal/skill-family-contracts/NOTICE +10 -0
  186. package/adapters/qoder/bin/foundation-legal/skill-family-engineering-kit/LICENSE +202 -0
  187. package/adapters/qoder/bin/foundation-legal/skill-family-engineering-kit/NOTICE +10 -0
  188. package/adapters/qoder/bin/foundation-legal/skill-family-engineering-kit/THIRD_PARTY_NOTICES +142 -0
  189. package/adapters/qoder/bin/foundation-legal/skill-family-harness-node/LICENSE +202 -0
  190. package/adapters/qoder/bin/foundation-legal/skill-family-harness-node/NOTICE +10 -0
  191. package/adapters/qoder/bin/foundation-legal/skill-family-harness-node/native-NOTICE +2 -0
  192. package/adapters/qoder/bin/foundation-resource-binding.json +1 -0
  193. package/adapters/qoder/bin/kernel-protocol.json +60 -0
  194. package/adapters/qoder/bin/license-texts/Apache-2.0.txt +201 -0
  195. package/adapters/qoder/bin/license-texts/MIT.txt +21 -0
  196. package/adapters/qoder/bin/prebuild-manifest.json +83 -0
  197. package/adapters/qoder/bin/prebuilds/darwin-arm64/bound_read.darwin-arm64.node +0 -0
  198. package/adapters/qoder/bin/prebuilds/darwin-x64/bound_read.darwin-x64.node +0 -0
  199. package/adapters/qoder/bin/prebuilds/linux-arm64-gnu/bound_read.linux-arm64-gnu.node +0 -0
  200. package/adapters/qoder/bin/prebuilds/linux-x64-gnu/bound_read.linux-x64-gnu.node +0 -0
  201. package/adapters/qoder/bin/registry.json +347 -0
  202. package/adapters/qoder/bin/release-skill-local-finish.mjs +4 -0
  203. package/adapters/qoder/bin/release-skill.bundle.mjs +151806 -0
  204. package/adapters/qoder/bin/release-skill.mjs +54 -0
  205. package/adapters/qoder/bin/rules.json +104 -0
  206. package/adapters/qoder/bin/schemas/consumer-contract-vector.schema.json +149 -0
  207. package/adapters/qoder/data/hosts/claude/host-descriptor.json +45 -0
  208. package/adapters/qoder/data/hosts/codebuddy/host-descriptor.json +26 -0
  209. package/adapters/qoder/data/hosts/codex/host-descriptor.json +45 -0
  210. package/adapters/qoder/data/hosts/cursor/host-descriptor.json +34 -0
  211. package/adapters/qoder/data/hosts/deepseek-harness/host-descriptor.json +23 -0
  212. package/adapters/qoder/data/hosts/kimi-code/host-descriptor.json +36 -0
  213. package/adapters/qoder/data/hosts/qoder/host-descriptor.json +26 -0
  214. package/adapters/qoder/data/hosts/registry.json +14 -0
  215. package/adapters/qoder/data/hosts/workbuddy/host-descriptor.json +34 -0
  216. package/adapters/qoder/data/licensing/registry.json +211 -0
  217. package/adapters/qoder/data/licensing/schema.json +207 -0
  218. package/adapters/qoder/native/safe-write/binding.gyp +41 -0
  219. package/adapters/qoder/native/safe-write/prebuilds/darwin-arm64/safe_write.node +0 -0
  220. package/adapters/qoder/native/safe-write/prebuilds.json +24 -0
  221. package/adapters/qoder/native/safe-write/src/safe_write.cc +2032 -0
  222. package/adapters/qoder/schemas/.render-manifest.json +41 -0
  223. package/adapters/qoder/schemas/approval-record.schema.json +115 -0
  224. package/adapters/qoder/schemas/artifact-lock.schema.json +111 -0
  225. package/adapters/qoder/schemas/artifact-plan.schema.json +52 -0
  226. package/adapters/qoder/schemas/artifact-policy.schema.json +76 -0
  227. package/adapters/qoder/schemas/evidence-event-v2.schema.json +164 -0
  228. package/adapters/qoder/schemas/evidence-event.schema.json +89 -0
  229. package/adapters/qoder/schemas/postpublish-approval-record.schema.json +47 -0
  230. package/adapters/qoder/schemas/release-plan.schema.json +2226 -0
  231. package/adapters/qoder/schemas/release-project.schema.json +1815 -0
  232. package/adapters/qoder/schemas/release-run.schema.json +777 -0
  233. package/adapters/qoder/skills/release-assess/SKILL.md +60 -0
  234. package/adapters/qoder/skills/release-config/SKILL.md +150 -0
  235. package/adapters/qoder/skills/release-docs/SKILL.md +119 -0
  236. package/adapters/qoder/skills/release-finish/SKILL.md +154 -0
  237. package/adapters/qoder/skills/release-help/SKILL.md +154 -0
  238. package/adapters/qoder/skills/release-marketplace/SKILL.md +156 -0
  239. package/adapters/qoder/skills/release-prepare/SKILL.md +135 -0
  240. package/adapters/qoder/skills/release-publish/SKILL.md +91 -0
  241. package/adapters/qoder/skills/release-reconcile/SKILL.md +80 -0
  242. package/adapters/qoder/skills/release-setup/SKILL.md +131 -0
  243. package/adapters/qoder/skills/release-verify/SKILL.md +109 -0
  244. package/adapters/qoder/src/schemas/adapter-build-manifest.schema.json +41 -0
  245. package/adapters/qoder/src/schemas/adapter-peer-verification-request.schema.json +54 -0
  246. package/adapters/qoder/src/schemas/adapter-peer-verification-result.schema.json +54 -0
  247. package/adapters/qoder/src/schemas/adapter-source.schema.json +47 -0
  248. package/adapters/qoder/src/schemas/audit-baseline-pin.schema.json +163 -0
  249. package/adapters/qoder/src/schemas/declared-read-surface-result.schema.json +61 -0
  250. package/adapters/qoder/src/schemas/engineering-baseline.schema.json +77 -0
  251. package/adapters/qoder/src/schemas/executable-identity-observation.schema.json +162 -0
  252. package/adapters/qoder/src/schemas/filesystem-root-binding.schema.json +14 -0
  253. package/adapters/qoder/src/schemas/filesystem-tree-observation.schema.json +71 -0
  254. package/adapters/qoder/src/schemas/fixed-set-publication-manifest.schema.json +108 -0
  255. package/adapters/qoder/src/schemas/fixed-set-publication-receipt.schema.json +148 -0
  256. package/adapters/qoder/src/schemas/host-capability-fact.schema.json +31 -0
  257. package/adapters/qoder/src/schemas/host-descriptor.schema.json +144 -0
  258. package/adapters/qoder/src/schemas/host-operation-plan.schema.json +57 -0
  259. package/adapters/qoder/src/schemas/host-operation-receipt.schema.json +81 -0
  260. package/adapters/qoder/src/schemas/host-probe-result.schema.json +30 -0
  261. package/adapters/qoder/src/schemas/host-registry.schema.json +18 -0
  262. package/adapters/qoder/src/schemas/host-verification-request.schema.json +67 -0
  263. package/adapters/qoder/src/schemas/host-verification-result.schema.json +149 -0
  264. package/adapters/qoder/src/schemas/managed-file-lock.schema.json +77 -0
  265. package/adapters/qoder/src/schemas/migration-manifest.schema.json +412 -0
  266. package/adapters/qoder/src/schemas/observation-scope.schema.json +91 -0
  267. package/adapters/qoder/src/schemas/operation-request.schema.json +58 -0
  268. package/adapters/qoder/src/schemas/operation-result.schema.json +130 -0
  269. package/adapters/qoder/src/schemas/platform-difference-registry.schema.json +110 -0
  270. package/adapters/qoder/src/schemas/plugin-verification-request.schema.json +499 -0
  271. package/adapters/qoder/src/schemas/plugin-verification-result.schema.json +1217 -0
  272. package/adapters/qoder/src/schemas/profile-adoption-declaration.schema.json +111 -0
  273. package/adapters/qoder/src/schemas/profile-descriptor.schema.json +99 -0
  274. package/adapters/qoder/src/schemas/project-manifest.schema.json +67 -0
  275. package/adapters/qoder/src/schemas/project-profile.schema.json +25 -0
  276. package/adapters/qoder/src/schemas/public-boundary-declaration.schema.json +73 -0
  277. package/adapters/qoder/src/schemas/report-binding.schema.json +42 -0
  278. package/adapters/qoder/src/schemas/report-model.schema.json +308 -0
  279. package/adapters/qoder/src/schemas/skill-family-directory-verification-request.schema.json +100 -0
  280. package/adapters/qoder/src/schemas/skill-family-directory-verification-result.schema.json +193 -0
  281. package/adapters/qoder/src/schemas/source-authority-receipt.schema.json +31 -0
  282. package/adapters/qoder/src/schemas/state-event-envelope.schema.json +38 -0
  283. package/adapters/qoder/src/schemas/state-snapshot-metadata.schema.json +25 -0
  284. package/adapters/qoder/src/schemas/structured-scan-policy.schema.json +97 -0
  285. package/adapters/qoder/src/schemas/surface-scan-policy.schema.json +42 -0
  286. package/adapters/qoder/src/schemas/timeout-policy.schema.json +24 -0
  287. package/adapters/qoder/src/schemas/token-estimate-record.schema.json +75 -0
  288. package/adapters/qoder/src/schemas/token-estimate-result.schema.json +43 -0
  289. package/adapters/qoder/src/schemas/watchdog-termination-envelope.schema.json +156 -0
  290. package/adapters/workbuddy/.codebuddy-plugin/plugin.json +1 -1
  291. package/adapters/workbuddy/bin/consumer-contract-vectors.json +7 -7
  292. package/adapters/workbuddy/bin/error-codes.json +1 -1
  293. package/adapters/workbuddy/bin/foundation-resource-binding.json +1 -1
  294. package/adapters/workbuddy/bin/prebuild-manifest.json +8 -4
  295. package/adapters/workbuddy/bin/prebuilds/darwin-arm64/bound_read.darwin-arm64.node +0 -0
  296. package/adapters/workbuddy/bin/prebuilds/darwin-x64/bound_read.darwin-x64.node +0 -0
  297. package/adapters/workbuddy/bin/prebuilds/linux-arm64-gnu/bound_read.linux-arm64-gnu.node +0 -0
  298. package/adapters/workbuddy/bin/prebuilds/linux-x64-gnu/bound_read.linux-x64-gnu.node +0 -0
  299. package/adapters/workbuddy/bin/registry.json +1 -1
  300. package/adapters/workbuddy/bin/release-skill.bundle.mjs +4950 -1819
  301. package/adapters/workbuddy/bin/rules.json +1 -1
  302. package/adapters/workbuddy/data/hosts/cursor/host-descriptor.json +34 -0
  303. package/adapters/workbuddy/data/hosts/registry.json +1 -0
  304. package/adapters/workbuddy/schemas/release-plan.schema.json +255 -25
  305. package/adapters/workbuddy/schemas/release-project.schema.json +228 -26
  306. package/adapters/workbuddy/skills/release-finish/SKILL.md +29 -15
  307. package/adapters/workbuddy/skills/release-help/SKILL.md +40 -39
  308. package/adapters/workbuddy/skills/release-verify/SKILL.md +2 -2
  309. package/adapters/workbuddy/src/schemas/host-descriptor.schema.json +9 -2
  310. package/bin/consumer-contract-vectors.json +7 -7
  311. package/bin/error-codes.json +1 -1
  312. package/bin/foundation-resource-binding.json +1 -1
  313. package/bin/prebuild-manifest.json +8 -4
  314. package/bin/prebuilds/darwin-arm64/bound_read.darwin-arm64.node +0 -0
  315. package/bin/prebuilds/darwin-x64/bound_read.darwin-x64.node +0 -0
  316. package/bin/prebuilds/linux-arm64-gnu/bound_read.linux-arm64-gnu.node +0 -0
  317. package/bin/prebuilds/linux-x64-gnu/bound_read.linux-x64-gnu.node +0 -0
  318. package/bin/registry.json +1 -1
  319. package/bin/release-skill-cli.mjs +148 -6
  320. package/bin/release-skill.bundle.mjs +4950 -1819
  321. package/bin/rules.json +1 -1
  322. package/data/hosts/cursor/host-descriptor.json +34 -0
  323. package/data/hosts/registry.json +1 -0
  324. package/package.json +9 -5
  325. package/platform-manifest.json +140 -8
  326. package/references/02-project-config.md +9 -2
  327. package/schemas/release-plan.schema.json +255 -25
  328. package/schemas/release-project.schema.json +228 -26
  329. package/scripts/sync-public-files.mjs +3 -22
  330. package/skills/release-finish/SKILL.md +29 -15
  331. package/skills/release-help/SKILL.md +40 -39
  332. package/skills/release-verify/SKILL.md +2 -2
  333. package/skills-src/release-finish/SKILL.md +29 -15
  334. package/skills-src/release-help/SKILL.md +40 -39
  335. package/skills-src/release-verify/SKILL.md +2 -2
  336. package/src/adapters/contract.mjs +1 -0
  337. package/src/adapters/plugin-marketplace.mjs +201 -9
  338. package/src/commands/post-release-local.mjs +618 -53
  339. package/src/commands/prepare.mjs +74 -9
  340. package/src/commands/publish.mjs +4 -1
  341. package/src/commands/ship.mjs +2 -0
  342. package/src/commands/verify-records.mjs +467 -0
  343. package/src/commands/verify.mjs +73 -0
  344. package/src/core/checkpoints.mjs +5 -2
  345. package/src/core/config.mjs +1 -1
  346. package/src/core/foundation-host-verification.mjs +168 -0
  347. package/src/core/plan.mjs +19 -1
  348. package/src/core/postpublish.mjs +9 -1
  349. package/src/core/run-retention.mjs +1 -1
  350. package/src/core/run.mjs +1 -1
  351. package/src/core/surface-host-bindings.mjs +1 -0
  352. package/src/core/verification-gates.mjs +1 -1
  353. package/src/platforms/registry.mjs +225 -16
  354. package/src/producers/build-adapters.mjs +43 -25
  355. package/src/producers/foundation-resource-projection.mjs +3 -3
  356. package/src/schemas/host-descriptor.schema.json +9 -2
@@ -0,0 +1,61 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://contracts.skill-family.example/v1/declared-read-surface-result.json",
4
+ "title": "DeclaredReadSurfaceResult",
5
+ "description": "Static verification result for a declared fs read surface (FND-ADR-010). The mechanism collects every `.mjs`/`.js` module under the scanned root, compares each module's `import {...} from \"node:fs\"` named imports against the consumer-declared reader set, and forbids every write-family fs API across the whole tree. The verdict semantics are a closed three-rule enumeration carried in violations[].rule: undeclared-module-imports-fs, fs-api-outside-declared-set, write-family-fs-api. Scope and bias direction are declared in the contract: static syntax surface only (ESM named imports plus whole-source substring detection), conservative approximation (comments and string literals containing write-family API names also hit; static syntax-level violations are never under-reported), no execution of the scanned modules, no model call, no network. The result carries no timestamp.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": [
9
+ "schemaVersion",
10
+ "kind",
11
+ "ok",
12
+ "violations",
13
+ "scannedModules",
14
+ "scope",
15
+ "guarantees"
16
+ ],
17
+ "properties": {
18
+ "schemaVersion": { "const": 1 },
19
+ "kind": { "const": "skill-family.declared-read-surface-result" },
20
+ "ok": { "type": "boolean" },
21
+ "violations": {
22
+ "type": "array",
23
+ "items": {
24
+ "type": "object",
25
+ "additionalProperties": false,
26
+ "required": ["module", "rule"],
27
+ "properties": {
28
+ "module": { "type": "string", "minLength": 1 },
29
+ "api": { "type": "string", "minLength": 1 },
30
+ "rule": {
31
+ "enum": [
32
+ "undeclared-module-imports-fs",
33
+ "fs-api-outside-declared-set",
34
+ "write-family-fs-api"
35
+ ]
36
+ }
37
+ }
38
+ }
39
+ },
40
+ "scannedModules": {
41
+ "type": "array",
42
+ "uniqueItems": true,
43
+ "items": { "type": "string", "minLength": 1 }
44
+ },
45
+ "scope": { "const": "esm-named-imports-only" },
46
+ "guarantees": {
47
+ "type": "array",
48
+ "minItems": 1,
49
+ "uniqueItems": true,
50
+ "items": {
51
+ "enum": [
52
+ "syntax-surface-only",
53
+ "conservative-approximation",
54
+ "no-execution",
55
+ "no-model-calls",
56
+ "no-network-access"
57
+ ]
58
+ }
59
+ }
60
+ }
61
+ }
@@ -0,0 +1,77 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://contracts.skill-family.example/v1/engineering-baseline.json",
4
+ "title": "EngineeringBaseline",
5
+ "description": "Business-neutral identity for an engineering baseline. The contract carries the provider-owned baseline identity, canonical rule lineage references, and the Foundation reference implementation identity; it does not carry rule bodies, effects, equivalence, or exemption semantics.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": [
9
+ "schemaVersion",
10
+ "kind",
11
+ "provider",
12
+ "id",
13
+ "version",
14
+ "digest",
15
+ "canonicalRuleRefs",
16
+ "referenceImplementation"
17
+ ],
18
+ "properties": {
19
+ "schemaVersion": { "const": 1 },
20
+ "kind": { "const": "skill-family.engineering-baseline" },
21
+ "provider": {
22
+ "type": "string",
23
+ "minLength": 1,
24
+ "description": "Provider that owns the baseline identity, for example an independent Audit implementation."
25
+ },
26
+ "id": {
27
+ "type": "string",
28
+ "minLength": 1,
29
+ "description": "Provider-scoped stable baseline identifier."
30
+ },
31
+ "version": {
32
+ "type": "string",
33
+ "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$",
34
+ "description": "Semantic version of the provider-owned baseline identity."
35
+ },
36
+ "digest": {
37
+ "type": "string",
38
+ "pattern": "^[0-9a-f]{64}$",
39
+ "description": "SHA-256 digest of the canonical JSON of this document with digest omitted."
40
+ },
41
+ "canonicalRuleRefs": {
42
+ "type": "array",
43
+ "minItems": 1,
44
+ "items": { "$ref": "#/$defs/canonicalRuleRef" },
45
+ "description": "Sorted, unique references to provider-owned canonical rule lineages. Rule bodies and decisions remain outside this contract."
46
+ },
47
+ "referenceImplementation": {
48
+ "$ref": "#/$defs/referenceImplementation",
49
+ "description": "Identity of the Foundation reference implementation used by the baseline provider."
50
+ }
51
+ },
52
+ "$defs": {
53
+ "canonicalRuleRef": {
54
+ "type": "object",
55
+ "additionalProperties": false,
56
+ "required": ["id", "revision", "revisionDigest"],
57
+ "properties": {
58
+ "id": { "type": "string", "minLength": 1 },
59
+ "revision": { "type": "integer", "minimum": 1 },
60
+ "revisionDigest": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
61
+ }
62
+ },
63
+ "referenceImplementation": {
64
+ "type": "object",
65
+ "additionalProperties": false,
66
+ "required": ["foundationVersion", "profile", "skeletonDigest"],
67
+ "properties": {
68
+ "foundationVersion": {
69
+ "type": "string",
70
+ "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"
71
+ },
72
+ "profile": { "type": "string", "minLength": 1 },
73
+ "skeletonDigest": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
74
+ }
75
+ }
76
+ }
77
+ }
@@ -0,0 +1,162 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://contracts.skill-family.example/v1/executable-identity-observation.json",
4
+ "title": "Executable identity observation",
5
+ "description": "A single, private observation of an executable lookup and its explicit launch image. Absolute roots and file bytes are intentionally represented only by the bound root and digest facts.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": ["schemaVersion", "kind", "lookup", "canonicalEntry", "interpreter", "launch", "observationDigest"],
9
+ "properties": {
10
+ "schemaVersion": { "const": 1 },
11
+ "kind": { "const": "skill-family.executable-identity-observation" },
12
+ "lookup": { "$ref": "#/$defs/lookup" },
13
+ "canonicalEntry": { "$ref": "#/$defs/canonicalEntry" },
14
+ "interpreter": {
15
+ "oneOf": [
16
+ { "type": "null" },
17
+ {
18
+ "type": "object",
19
+ "additionalProperties": false,
20
+ "required": ["request", "canonicalEntry", "shebangArgs"],
21
+ "properties": {
22
+ "request": {
23
+ "oneOf": [
24
+ { "$ref": "#/$defs/bareCommand" },
25
+ { "$ref": "#/$defs/absolutePath" }
26
+ ]
27
+ },
28
+ "canonicalEntry": {
29
+ "allOf": [
30
+ { "$ref": "#/$defs/canonicalEntry" },
31
+ { "type": "object", "properties": { "entryKind": { "const": "native-binary" } } }
32
+ ]
33
+ },
34
+ "shebangArgs": {
35
+ "type": "array",
36
+ "maxItems": 8,
37
+ "items": { "type": "string", "minLength": 1, "maxLength": 256, "pattern": "^[^\\u0000\\r\\n]+$" }
38
+ }
39
+ }
40
+ }
41
+ ]
42
+ },
43
+ "launch": {
44
+ "type": "object",
45
+ "additionalProperties": false,
46
+ "required": ["file", "argvPrefix"],
47
+ "properties": {
48
+ "file": { "$ref": "#/$defs/absolutePath" },
49
+ "argvPrefix": {
50
+ "type": "array",
51
+ "maxItems": 8,
52
+ "items": { "$ref": "#/$defs/absolutePath" }
53
+ }
54
+ }
55
+ },
56
+ "observationDigest": { "$ref": "#/$defs/sha256" }
57
+ },
58
+ "allOf": [
59
+ {
60
+ "if": {
61
+ "type": "object",
62
+ "properties": { "canonicalEntry": { "type": "object", "properties": { "entryKind": { "const": "interpreter-script" } }, "required": ["entryKind"] } },
63
+ "required": ["canonicalEntry"]
64
+ },
65
+ "then": {
66
+ "type": "object",
67
+ "properties": {
68
+ "interpreter": { "type": "object" },
69
+ "launch": { "type": "object", "properties": { "argvPrefix": { "type": "array", "minItems": 1 } } }
70
+ }
71
+ },
72
+ "else": {
73
+ "type": "object",
74
+ "properties": {
75
+ "interpreter": { "type": "null" },
76
+ "launch": { "type": "object", "properties": { "argvPrefix": { "type": "array", "maxItems": 0 } } }
77
+ }
78
+ }
79
+ }
80
+ ],
81
+ "$defs": {
82
+ "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
83
+ "absolutePath": {
84
+ "type": "string",
85
+ "minLength": 1,
86
+ "maxLength": 4096,
87
+ "pattern": "^/(?:[^/\\\\\\u0000]+(?:/[^/\\\\\\u0000]+)*)?$",
88
+ "not": { "pattern": "(?:^|/)\\.{1,2}(?:/|$)" }
89
+ },
90
+ "relativePath": {
91
+ "type": "string",
92
+ "minLength": 1,
93
+ "maxLength": 4096,
94
+ "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*(?:^|/)\\.(?:/|$))(?!.*\\\\)(?!.*\\u0000)[^/\\\\\\u0000]+(?:/[^/\\\\\\u0000]+)*$"
95
+ },
96
+ "bareCommand": {
97
+ "type": "string",
98
+ "minLength": 1,
99
+ "maxLength": 256,
100
+ "pattern": "^[^/\\\\\\u0000]+$"
101
+ },
102
+ "rootBinding": { "$ref": "https://contracts.skill-family.example/v1/filesystem-root-binding.json" },
103
+ "lookup": {
104
+ "type": "object",
105
+ "additionalProperties": false,
106
+ "required": ["requested", "mode", "selectedPath"],
107
+ "properties": {
108
+ "requested": { "type": "string", "minLength": 1, "maxLength": 4096 },
109
+ "mode": { "enum": ["absolute-path", "explicit-path-search"] },
110
+ "path": { "$ref": "#/$defs/absolutePath" },
111
+ "pathEntries": {
112
+ "type": "array",
113
+ "minItems": 1,
114
+ "maxItems": 64,
115
+ "uniqueItems": true,
116
+ "items": { "$ref": "#/$defs/absolutePath" }
117
+ },
118
+ "selectedPath": { "$ref": "#/$defs/absolutePath" }
119
+ },
120
+ "allOf": [
121
+ {
122
+ "if": { "type": "object", "properties": { "mode": { "const": "absolute-path" } }, "required": ["mode"] },
123
+ "then": {
124
+ "type": "object",
125
+ "required": ["path"],
126
+ "properties": { "path": {}, "pathEntries": false }
127
+ },
128
+ "else": {
129
+ "type": "object",
130
+ "required": ["pathEntries"],
131
+ "properties": { "pathEntries": {}, "path": false }
132
+ }
133
+ }
134
+ ]
135
+ },
136
+ "symlink": {
137
+ "type": "object",
138
+ "additionalProperties": false,
139
+ "required": ["path", "targetBase64", "bytes"],
140
+ "properties": {
141
+ "path": { "$ref": "#/$defs/absolutePath" },
142
+ "targetBase64": { "type": "string", "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$" },
143
+ "bytes": { "type": "integer", "minimum": 0, "maximum": 1048576 }
144
+ }
145
+ },
146
+ "canonicalEntry": {
147
+ "type": "object",
148
+ "additionalProperties": false,
149
+ "required": ["path", "symlinkChain", "binding", "relPath", "sha256", "bytes", "statMode", "entryKind"],
150
+ "properties": {
151
+ "path": { "$ref": "#/$defs/absolutePath" },
152
+ "symlinkChain": { "type": "array", "maxItems": 40, "items": { "$ref": "#/$defs/symlink" } },
153
+ "binding": { "$ref": "#/$defs/rootBinding" },
154
+ "relPath": { "$ref": "#/$defs/relativePath" },
155
+ "sha256": { "$ref": "#/$defs/sha256" },
156
+ "bytes": { "type": "integer", "minimum": 0, "maximum": 1073741824 },
157
+ "statMode": { "type": "integer", "minimum": 0, "maximum": 4294967295 },
158
+ "entryKind": { "enum": ["native-binary", "interpreter-script", "opaque-executable"] }
159
+ }
160
+ }
161
+ }
162
+ }
@@ -0,0 +1,14 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://contracts.skill-family.example/v1/filesystem-root-binding.json",
4
+ "title": "Filesystem root binding",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["kind", "digestAlgorithm", "basis", "digest"],
8
+ "properties": {
9
+ "kind": { "const": "trusted-filesystem-root-binding" },
10
+ "digestAlgorithm": { "const": "sha256" },
11
+ "basis": { "const": "canonical-realpath-device-inode-type-mode-v1" },
12
+ "digest": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
13
+ }
14
+ }
@@ -0,0 +1,71 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://contracts.skill-family.example/v1/filesystem-tree-observation.json",
4
+ "title": "Filesystem tree observation",
5
+ "description": "A complete same-pass fact observation of a bound filesystem tree (FND-DES-014 section 6.1). Private data only: it is returned by the public read-only harness entry, but never enters a public plugin verification result. The record keeps the original root binding so consumers re-verify the same bound root and never re-bind a replacement. Default and explicit reject preserve the 0.14 UTF-16 order; record mode uses Unicode code point order. Directories carry identity/type/permission facts only; file bytes come from the same native descriptor that supplies statMode.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": ["schemaVersion", "kind", "rootBinding", "members", "membersDigest"],
9
+ "properties": {
10
+ "schemaVersion": { "const": 1 },
11
+ "kind": { "const": "skill-family.filesystem-tree-observation" },
12
+ "rootBinding": { "$ref": "https://contracts.skill-family.example/v1/filesystem-root-binding.json" },
13
+ "members": {
14
+ "type": "array",
15
+ "uniqueItems": true,
16
+ "items": { "$ref": "#/$defs/member" }
17
+ },
18
+ "membersDigest": {
19
+ "type": "string",
20
+ "pattern": "^[0-9a-f]{64}$"
21
+ }
22
+ },
23
+ "$defs": {
24
+ "statMode": { "type": "integer", "minimum": 0, "maximum": 65535 },
25
+ "member": {
26
+ "oneOf": [
27
+ { "$ref": "#/$defs/fileMember" },
28
+ { "$ref": "#/$defs/directoryMember" },
29
+ { "$ref": "#/$defs/symlinkMember" }
30
+ ]
31
+ },
32
+ "fileMember": {
33
+ "type": "object",
34
+ "additionalProperties": false,
35
+ "required": ["path", "type", "sha256", "bytes", "statMode", "contentBase64"],
36
+ "properties": {
37
+ "path": { "type": "string", "minLength": 1 },
38
+ "type": { "const": "file" },
39
+ "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
40
+ "bytes": { "type": "integer", "minimum": 0 },
41
+ "statMode": { "$ref": "#/$defs/statMode" },
42
+ "contentBase64": { "type": "string" }
43
+ }
44
+ },
45
+ "directoryMember": {
46
+ "type": "object",
47
+ "additionalProperties": false,
48
+ "required": ["path", "type", "statMode"],
49
+ "properties": {
50
+ "path": { "type": "string", "minLength": 1 },
51
+ "type": { "const": "directory" },
52
+ "statMode": { "$ref": "#/$defs/statMode" }
53
+ }
54
+ },
55
+ "symlinkMember": {
56
+ "type": "object",
57
+ "additionalProperties": false,
58
+ "required": ["path", "type", "targetBase64", "bytes", "statMode"],
59
+ "properties": {
60
+ "path": { "type": "string", "minLength": 1 },
61
+ "type": { "const": "symlink" },
62
+ "targetBase64": {
63
+ "type": "string",
64
+ "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
65
+ },
66
+ "bytes": { "type": "integer", "minimum": 0, "maximum": 1048576 },
67
+ "statMode": { "$ref": "#/$defs/statMode" }
68
+ }
69
+ }
70
+ }
71
+ }
@@ -0,0 +1,108 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://contracts.skill-family.example/v1/fixed-set-publication-manifest.json",
4
+ "title": "Fixed-set publication manifest",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schemaVersion", "kind", "source", "target", "members", "digest"],
8
+ "properties": {
9
+ "schemaVersion": { "const": 1 },
10
+ "kind": { "const": "skill-family.fixed-set-publication-manifest" },
11
+ "source": { "$ref": "#/$defs/sourceClosure" },
12
+ "target": { "$ref": "#/$defs/targetClosure" },
13
+ "members": {
14
+ "type": "array",
15
+ "minItems": 1,
16
+ "uniqueItems": true,
17
+ "items": { "$ref": "#/$defs/member" }
18
+ },
19
+ "digest": { "$ref": "#/$defs/sha256" }
20
+ },
21
+ "$defs": {
22
+ "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
23
+ "decimalIdentity": { "type": "string", "pattern": "^(?:0|[1-9][0-9]*)$", "maxLength": 40 },
24
+ "relativePath": {
25
+ "type": "string",
26
+ "minLength": 1,
27
+ "maxLength": 240,
28
+ "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\)(?!.*\\u0000)[A-Za-z0-9._-]+(?:/[A-Za-z0-9._-]+)*$"
29
+ },
30
+ "rootBinding": {
31
+ "type": "object",
32
+ "additionalProperties": false,
33
+ "required": ["kind", "digestAlgorithm", "basis", "digest"],
34
+ "properties": {
35
+ "kind": { "const": "trusted-filesystem-root-binding" },
36
+ "digestAlgorithm": { "const": "sha256" },
37
+ "basis": { "const": "canonical-realpath-device-inode-type-mode-v1" },
38
+ "digest": { "$ref": "#/$defs/sha256" }
39
+ }
40
+ },
41
+ "directoryIdentity": {
42
+ "type": "object",
43
+ "additionalProperties": false,
44
+ "required": ["type", "mode", "device", "inode"],
45
+ "properties": {
46
+ "type": { "const": "directory" },
47
+ "mode": { "type": "integer", "minimum": 0, "maximum": 511 },
48
+ "device": { "$ref": "#/$defs/decimalIdentity" },
49
+ "inode": { "$ref": "#/$defs/decimalIdentity" }
50
+ }
51
+ },
52
+ "directoryMember": {
53
+ "type": "object",
54
+ "additionalProperties": false,
55
+ "required": ["path", "type", "mode", "device", "inode"],
56
+ "properties": {
57
+ "path": { "$ref": "#/$defs/relativePath" },
58
+ "type": { "const": "directory" },
59
+ "mode": { "type": "integer", "minimum": 0, "maximum": 511 },
60
+ "device": { "$ref": "#/$defs/decimalIdentity" },
61
+ "inode": { "$ref": "#/$defs/decimalIdentity" }
62
+ }
63
+ },
64
+ "sourceClosure": {
65
+ "type": "object",
66
+ "additionalProperties": false,
67
+ "required": ["rootBinding", "root", "directories", "closureDigest"],
68
+ "properties": {
69
+ "rootBinding": { "$ref": "#/$defs/rootBinding" },
70
+ "root": { "$ref": "#/$defs/directoryIdentity" },
71
+ "directories": {
72
+ "type": "array",
73
+ "uniqueItems": true,
74
+ "items": { "$ref": "#/$defs/directoryMember" }
75
+ },
76
+ "closureDigest": { "$ref": "#/$defs/sha256" }
77
+ }
78
+ },
79
+ "targetClosure": {
80
+ "type": "object",
81
+ "additionalProperties": false,
82
+ "required": ["rootBinding", "root", "directories", "closureDigest", "expectation"],
83
+ "properties": {
84
+ "rootBinding": { "$ref": "#/$defs/rootBinding" },
85
+ "root": { "$ref": "#/$defs/directoryIdentity" },
86
+ "directories": {
87
+ "type": "array",
88
+ "uniqueItems": true,
89
+ "items": { "$ref": "#/$defs/directoryMember" }
90
+ },
91
+ "closureDigest": { "$ref": "#/$defs/sha256" },
92
+ "expectation": { "const": "absent" }
93
+ }
94
+ },
95
+ "member": {
96
+ "type": "object",
97
+ "additionalProperties": false,
98
+ "required": ["path", "type", "mode", "bytes", "sha256"],
99
+ "properties": {
100
+ "path": { "$ref": "#/$defs/relativePath" },
101
+ "type": { "const": "regular" },
102
+ "mode": { "type": "integer", "minimum": 0, "maximum": 511 },
103
+ "bytes": { "type": "integer", "minimum": 0 },
104
+ "sha256": { "$ref": "#/$defs/sha256" }
105
+ }
106
+ }
107
+ }
108
+ }
@@ -0,0 +1,148 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://contracts.skill-family.example/v1/fixed-set-publication-receipt.json",
4
+ "title": "Fixed-set publication receipt",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion", "kind", "manifestDigest", "targetRootBinding", "platform", "primitive",
9
+ "status", "targetState", "commitState", "verification", "durability"
10
+ ],
11
+ "properties": {
12
+ "schemaVersion": { "const": 1 },
13
+ "kind": { "const": "skill-family.fixed-set-publication-receipt" },
14
+ "manifestDigest": { "$ref": "#/$defs/sha256" },
15
+ "targetRootBinding": { "$ref": "#/$defs/rootBinding" },
16
+ "platform": { "enum": ["darwin", "linux", "other"] },
17
+ "primitive": { "enum": ["darwin-renameatx-noreplace-v1", "linux-renameat2-noreplace-v1", "none"] },
18
+ "status": { "enum": ["succeeded", "refused", "failed", "indeterminate"] },
19
+ "targetState": { "enum": ["absent", "existing", "published", "indeterminate"] },
20
+ "commitState": { "enum": ["not-committed", "rename-committed"] },
21
+ "verification": { "enum": ["not-run", "verified", "failed"] },
22
+ "durability": { "enum": ["not-attempted", "synced", "indeterminate"] },
23
+ "publishedClosureDigest": { "$ref": "#/$defs/sha256" },
24
+ "memberCount": { "type": "integer", "minimum": 1 },
25
+ "error": {
26
+ "type": "object",
27
+ "additionalProperties": false,
28
+ "required": ["code", "message"],
29
+ "properties": {
30
+ "code": {
31
+ "enum": [
32
+ "TARGET_EXISTS", "UNSUPPORTED_PLATFORM", "MANIFEST_INVALID", "SOURCE_DRIFT",
33
+ "PATH_UNSAFE", "PUBLICATION_FAILED", "POST_VERIFY_FAILED", "DIRECTORY_FSYNC_FAILED"
34
+ ]
35
+ },
36
+ "message": { "type": "string", "minLength": 1, "maxLength": 300 }
37
+ }
38
+ }
39
+ },
40
+ "$defs": {
41
+ "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
42
+ "rootBinding": {
43
+ "type": "object",
44
+ "additionalProperties": false,
45
+ "required": ["kind", "digestAlgorithm", "basis", "digest"],
46
+ "properties": {
47
+ "kind": { "const": "trusted-filesystem-root-binding" },
48
+ "digestAlgorithm": { "const": "sha256" },
49
+ "basis": { "const": "canonical-realpath-device-inode-type-mode-v1" },
50
+ "digest": { "$ref": "#/$defs/sha256" }
51
+ }
52
+ }
53
+ },
54
+ "allOf": [
55
+ {
56
+ "if": { "properties": { "status": { "const": "succeeded" } }, "required": ["status"] },
57
+ "then": {
58
+ "required": ["publishedClosureDigest", "memberCount"],
59
+ "properties": {
60
+ "platform": { "enum": ["darwin", "linux"] },
61
+ "primitive": { "enum": ["darwin-renameatx-noreplace-v1", "linux-renameat2-noreplace-v1"] },
62
+ "targetState": { "const": "published" },
63
+ "commitState": { "const": "rename-committed" },
64
+ "verification": { "const": "verified" },
65
+ "durability": { "const": "synced" },
66
+ "publishedClosureDigest": true,
67
+ "memberCount": true,
68
+ "error": false
69
+ }
70
+ }
71
+ },
72
+ {
73
+ "if": { "properties": { "status": { "const": "refused" } }, "required": ["status"] },
74
+ "then": {
75
+ "required": ["error"],
76
+ "properties": {
77
+ "targetState": { "enum": ["absent", "existing"] },
78
+ "commitState": { "const": "not-committed" },
79
+ "verification": { "const": "not-run" },
80
+ "durability": { "const": "not-attempted" },
81
+ "publishedClosureDigest": false,
82
+ "memberCount": false,
83
+ "error": true
84
+ }
85
+ }
86
+ },
87
+ {
88
+ "if": { "properties": { "status": { "const": "failed" } }, "required": ["status"] },
89
+ "then": {
90
+ "required": ["error"],
91
+ "properties": {
92
+ "targetState": { "const": "absent" },
93
+ "commitState": { "const": "not-committed" },
94
+ "verification": { "enum": ["not-run", "failed"] },
95
+ "durability": { "const": "not-attempted" },
96
+ "publishedClosureDigest": false,
97
+ "memberCount": false,
98
+ "error": true
99
+ }
100
+ }
101
+ },
102
+ {
103
+ "if": { "properties": { "status": { "const": "indeterminate" } }, "required": ["status"] },
104
+ "then": {
105
+ "required": ["error"],
106
+ "properties": {
107
+ "platform": { "enum": ["darwin", "linux"] },
108
+ "primitive": { "enum": ["darwin-renameatx-noreplace-v1", "linux-renameat2-noreplace-v1"] },
109
+ "targetState": { "enum": ["published", "indeterminate"] },
110
+ "commitState": { "const": "rename-committed" },
111
+ "verification": { "enum": ["verified", "failed"] },
112
+ "durability": { "const": "indeterminate" },
113
+ "error": {
114
+ "type": "object",
115
+ "properties": { "code": { "enum": ["POST_VERIFY_FAILED", "DIRECTORY_FSYNC_FAILED"] } }
116
+ }
117
+ },
118
+ "oneOf": [
119
+ {
120
+ "required": ["publishedClosureDigest", "memberCount"],
121
+ "properties": {
122
+ "targetState": { "const": "published" },
123
+ "verification": { "const": "verified" },
124
+ "error": {
125
+ "type": "object",
126
+ "properties": { "code": { "const": "DIRECTORY_FSYNC_FAILED" } }
127
+ },
128
+ "publishedClosureDigest": true,
129
+ "memberCount": true
130
+ }
131
+ },
132
+ {
133
+ "properties": {
134
+ "targetState": { "const": "indeterminate" },
135
+ "verification": { "const": "failed" },
136
+ "error": {
137
+ "type": "object",
138
+ "properties": { "code": { "const": "POST_VERIFY_FAILED" } }
139
+ },
140
+ "publishedClosureDigest": false,
141
+ "memberCount": false
142
+ }
143
+ }
144
+ ]
145
+ }
146
+ }
147
+ ]
148
+ }