release-skill 0.9.17 → 0.9.18

package/adapters/cursor/schemas/.render-manifest.json

@@ -0,0 +1,41 @@
+{
+  "source": "schemas",
+  "files": {
+    "approval-record.schema.json": {
+      "digest": "05b5a16d58372e4fdda625a472a4bb71439aa5db4e9813bf7f3d3cf2d39d144e",
+      "bytes": 3357
+    },
+    "artifact-lock.schema.json": {
+      "digest": "6a5f4c826540b849571f173118bcbd778dfaceb4133034036ae565c3e9e353e5",
+      "bytes": 2729
+    },
+    "artifact-plan.schema.json": {
+      "digest": "f2166b1ec48a99135c0d55e5bacf8d74ed80d0b8cb46837819e295fa310979df",
+      "bytes": 1546
+    },
+    "artifact-policy.schema.json": {
+      "digest": "86c9cab024ebe9c7f8ec3358fcc12d05b8ed246ab59da2b0acc6a517f31274ea",
+      "bytes": 2488
+    },
+    "evidence-event.schema.json": {
+      "digest": "b7e14522a5aba818cab191545f23d2323be0e4c80566e9d3e4da576103a00490",
+      "bytes": 2390
+    },
+    "postpublish-approval-record.schema.json": {
+      "digest": "e365c9e9f5aa189ca6788e68dbedfa718aa120f2c197534417c21e019b9a29a4",
+      "bytes": 1744
+    },
+    "release-plan.schema.json": {
+      "digest": "3d24cb908cdfbfd5d89551b7c6fed5140f6f1448b9920f114264291ca4cf1c52",
+      "bytes": 55905
+    },
+    "release-project.schema.json": {
+      "digest": "b0ba3c46692622f734a80d3f4e3904180bbfd1096ca2d9b6d6fd957917e96f73",
+      "bytes": 47688
+    },
+    "release-run.schema.json": {
+      "digest": "4a041b8f6488e7d61b7eb271ebdbc2e043731df41c4437783ef63e77f664c192",
+      "bytes": 19002
+    }
+  }
+}

package/adapters/cursor/schemas/approval-record.schema.json

@@ -0,0 +1,115 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://release-skill.dev/schemas/approval-record/v1",
+  "title": "Approval Record",
+  "description": "Schema for human approval record bound to a frozen release plan",
+  "type": "object",
+  "required": [
+    "planDigest",
+    "approvedActions",
+    "actor",
+    "approvedAt",
+    "expiresAt"
+  ],
+  "anyOf": [
+    { "required": ["targetVersion"] },
+    { "required": ["unitVersions"] }
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "planDigest": {
+      "type": "string",
+      "minLength": 1,
+      "description": "SHA-256 digest of the frozen release plan"
+    },
+    "baseline": {
+      "type": "object",
+      "description": "Workspace baseline captured at approval time. Optional record-layer audit data since planVersion 2 (validated structurally when present, never an approval binding); still required for v1 plans by validateApproval.",
+      "required": ["gitTreeHash"],
+      "additionalProperties": false,
+      "properties": {
+        "gitTreeHash": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Git tree hash at plan freeze time"
+        },
+        "workspaceDigest": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Deterministic digest of workspace file state at plan freeze time"
+        },
+        "workspaceDigestAlgorithm": {
+          "type": "string",
+          "const": "git-workspace-v2",
+          "description": "Versioned algorithm authority for workspaceDigest"
+        }
+      }
+    },
+    "targetVersion": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Target release version approved"
+    },
+    "unitVersions": {
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": {
+        "type": "string",
+        "minLength": 1
+      },
+      "description": "Exact unit-id to target-version authority for multi-unit releases"
+    },
+    "approvedActions": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "string",
+        "minLength": 1
+      },
+      "uniqueItems": true,
+      "description": "List of approved external actions (no wildcards)"
+    },
+    "actor": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Identity of the approver"
+    },
+    "approvedAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO 8601 timestamp when approval was granted"
+    },
+    "expiresAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO 8601 timestamp when approval expires (max 24h after approvedAt)"
+    },
+    "exceptions": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["rule", "reason", "responsible", "expiresAt"],
+        "additionalProperties": false,
+        "properties": {
+          "rule": {
+            "type": "string",
+            "minLength": 1
+          },
+          "reason": {
+            "type": "string",
+            "minLength": 1
+          },
+          "responsible": {
+            "type": "string",
+            "minLength": 1
+          },
+          "expiresAt": {
+            "type": "string",
+            "format": "date-time"
+          }
+        }
+      },
+      "description": "Exception waivers with reason, responsible person, and expiration"
+    }
+  }
+}

package/adapters/cursor/schemas/artifact-lock.schema.json

@@ -0,0 +1,111 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://release-skill.dev/artifact-lock.schema.json",
+  "title": "ArtifactLock",
+  "description": "Reachable accepted artifact manifest. Absolute repository paths are never authoritative.",
+  "type": "object",
+  "required": [
+    "lockVersion",
+    "repositoryId",
+    "repositoryIdentity",
+    "policyDigest",
+    "acceptanceId",
+    "acceptedArtifactManifestDigest",
+    "entries",
+    "acceptedAt",
+    "acceptedBy"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "apiVersion": {
+      "type": "string",
+      "const": "release-skill.dev/artifact-lock/v1"
+    },
+    "lockVersion": {
+      "type": "integer",
+      "const": 1
+    },
+    "repositoryId": {
+      "type": "string",
+      "minLength": 1
+    },
+    "repositoryIdentity": {
+      "type": "object",
+      "required": ["remoteUrlHash"],
+      "additionalProperties": false,
+      "properties": {
+        "remoteUrlHash": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$"
+        }
+      }
+    },
+    "policyDigest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "acceptanceId": {
+      "type": "string",
+      "minLength": 1
+    },
+    "acceptedArtifactManifestDigest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "entries": {
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": {
+        "type": "object",
+        "required": ["path", "type", "mode", "gitOid", "sha256"],
+        "additionalProperties": false,
+        "properties": {
+          "path": {
+            "type": "string",
+            "minLength": 1
+          },
+          "type": {
+            "type": "string",
+            "enum": ["blob", "tree"]
+          },
+          "mode": {
+            "type": "string",
+            "pattern": "^(100644|100755|040000)$"
+          },
+          "gitOid": {
+            "type": "string",
+            "pattern": "^[a-f0-9]{40,64}$"
+          },
+          "sha256": {
+            "type": "string",
+            "pattern": "^(sha256:)?[a-f0-9]{64}$"
+          },
+          "size": {
+            "type": "integer",
+            "minimum": 0
+          },
+          "manifestDigest": {
+            "type": "string",
+            "pattern": "^sha256:[a-f0-9]{64}$"
+          },
+          "ownership": {
+            "type": "string",
+            "enum": ["human", "generated", "mixed"]
+          },
+          "mergeDriver": {
+            "type": "string",
+            "minLength": 1
+          }
+        }
+      }
+    },
+    "acceptedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "acceptedBy": {
+      "type": "string",
+      "minLength": 1
+    }
+  }
+}

package/adapters/cursor/schemas/artifact-plan.schema.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://release-skill.dev/artifact-plan.schema.json",
+  "title": "ArtifactPlan",
+  "description": "Read-only inspection plan for artifact state and next action.",
+  "type": "object",
+  "required": [
+    "apiVersion",
+    "operation",
+    "bindings",
+    "artifacts",
+    "safeToWrite",
+    "targetUnchanged",
+    "nextAction",
+    "planDigest"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "apiVersion": { "type": "string", "const": "release-skill.dev/artifact-plan/v1" },
+    "operation": { "type": "string", "enum": ["inspect", "init", "status"] },
+    "bindings": {
+      "type": "object",
+      "required": [
+        "repositoryIdentity",
+        "policyDigest",
+        "baseManifestDigest",
+        "currentManifestDigest",
+        "producerClosureDigest"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "repositoryIdentity": { "type": "string" },
+        "policyDigest": { "type": "string" },
+        "baseManifestDigest": { "type": "string" },
+        "currentManifestDigest": { "type": "string" },
+        "producerClosureDigest": { "type": "string" }
+      }
+    },
+    "artifacts": { "type": "array" },
+    "safeToWrite": { "type": "boolean" },
+    "targetUnchanged": { "type": "boolean" },
+    "nextAction": {
+      "type": "object",
+      "required": ["command"],
+      "additionalProperties": false,
+      "properties": {
+        "command": { "type": "string" }
+      }
+    },
+    "planDigest": { "type": "string" }
+  }
+}

package/adapters/cursor/schemas/artifact-policy.schema.json

@@ -0,0 +1,76 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://release-skill.dev/artifact-policy.schema.json",
+  "title": "ArtifactPolicy",
+  "description": "Closed-world artifact policy defining repository identity, inventory, and artifact definitions.",
+  "type": "object",
+  "required": ["repository", "inventory", "artifacts"],
+  "additionalProperties": false,
+  "properties": {
+    "repository": {
+      "type": "object",
+      "required": ["id"],
+      "additionalProperties": false,
+      "properties": {
+        "id": { "type": "string", "minLength": 1 }
+      }
+    },
+    "inventory": {
+      "type": "object",
+      "required": ["roots", "defaultOwnership"],
+      "additionalProperties": false,
+      "properties": {
+        "roots": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 },
+          "minItems": 1
+        },
+        "defaultOwnership": { "type": "string", "enum": ["human", "generated"] }
+      }
+    },
+    "artifacts": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "required": ["id", "type"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "type": { "type": "string", "enum": ["declared", "generated"] },
+          "sourcePath": { "type": "string" },
+          "ownership": { "type": "string", "enum": ["human", "generated"] },
+          "producer": { "type": "string", "minLength": 1 },
+          "sourceArtifacts": {
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 },
+            "minItems": 1
+          },
+          "adoptionRoutes": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": ["target", "sourceArtifact", "mode"],
+              "additionalProperties": false,
+              "properties": {
+                "target": { "type": "string", "minLength": 1 },
+                "sourceArtifact": { "type": "string", "minLength": 1 },
+                "mode": { "type": "string", "enum": ["exact-copy"] }
+              }
+            },
+            "minItems": 1
+          }
+        },
+        "oneOf": [
+          {
+            "properties": { "type": { "const": "declared" } },
+            "required": ["sourcePath"]
+          },
+          {
+            "properties": { "type": { "const": "generated" } },
+            "required": ["producer", "sourceArtifacts", "adoptionRoutes"]
+          }
+        ]
+      }
+    }
+  }
+}

package/adapters/cursor/schemas/evidence-event-v2.schema.json

@@ -0,0 +1,164 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://release-skill.dev/schemas/evidence-event/v2",
+  "title": "Evidence Event v2",
+  "description": "Unified schema for JSONL evidence events produced by release-skill 0.8.0+. The v1 schema (evidence-event.schema.json) was too strict for the real event vocabulary (closed command/status/error enums, additionalProperties:false over phase-specific fields) and is retained only for legacy reads; v1 files are never rewritten. v2 freezes the stable envelope (identity, producer, command, phase, status, error, duration) with additionalProperties closed at the top level: every phase-specific detail field (unitId, gate, hookName, actionId, step, hookId, tagCommit, cached, testSelection, cacheKey, durationMs, exitCode, findingCount, ...) lives inside details. Declared location fields are type-constrained; the remaining details vocabulary stays open and producer-versioned. The evidence writer is the single choke point: it relocates any unknown top-level extension key into details and validates the event against this schema before writing (fail closed).",
+  "type": "object",
+  "required": [
+    "schemaVersion",
+    "runId",
+    "sequence",
+    "timestamp",
+    "command",
+    "phase",
+    "status",
+    "producer"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "type": "integer",
+      "const": 2,
+      "description": "Event format version (envelope field; never overridable by callers)"
+    },
+    "runId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Unique identifier for the run (directory name)"
+    },
+    "sequence": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Real monotonic sequence number assigned by the writer, starting from 1"
+    },
+    "timestamp": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO 8601 UTC timestamp of the event"
+    },
+    "command": {
+      "type": "string",
+      "enum": [
+        "assess",
+        "prepare",
+        "publish",
+        "reconcile",
+        "verify",
+        "distribute",
+        "postverify",
+        "hooks-validate"
+      ],
+      "description": "The command that triggered this event"
+    },
+    "phase": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Current execution phase identifier (producer-versioned vocabulary)"
+    },
+    "status": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Status value of this event (started/completed/passed/failed/skipped/warning/blocking/... — producer-versioned vocabulary)"
+    },
+    "producer": {
+      "type": "object",
+      "required": ["name", "version"],
+      "additionalProperties": false,
+      "properties": {
+        "name": {
+          "type": "string",
+          "const": "release-skill",
+          "description": "Producer name; attribution only, never an authority"
+        },
+        "version": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Producer version; attribution only, never an authority"
+        }
+      },
+      "description": "Producer identity for attribution (R-06B). Old v1 runs have no producer field."
+    },
+    "error": {
+      "type": ["object", "null"],
+      "description": "Error details when the event reports a failure. The writer normalizes diagnostic fields before validation (numeric child-process exit codes such as Git 128 are preserved as EXIT_<n>; free string errors become UNKNOWN_ERROR), so the real cause is never replaced by a schema failure.",
+      "additionalProperties": false,
+      "properties": {
+        "code": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Stable error code (open string: error codes are producer-versioned and grow over time)"
+        },
+        "message": {
+          "type": "string",
+          "description": "Human-readable error message"
+        }
+      }
+    },
+    "duration": {
+      "type": "integer",
+      "minimum": 0,
+      "description": "Phase duration in milliseconds"
+    },
+    "details": {
+      "type": "object",
+      "description": "Phase-specific supplementary information. Declared location fields are type-constrained; the remaining phase-specific vocabulary stays open.",
+      "properties": {
+        "unitId": {
+          "type": "string",
+          "description": "Release unit the event refers to"
+        },
+        "gate": {
+          "type": "string",
+          "description": "Safety gate the event refers to"
+        },
+        "hookName": {
+          "type": "string",
+          "description": "Declared hook the event refers to"
+        },
+        "actionId": {
+          "type": "string",
+          "description": "External action the event refers to"
+        },
+        "step": {
+          "type": "string",
+          "description": "Verification or execution step the event refers to"
+        },
+        "hookId": {
+          "type": "string",
+          "description": "Post-publish hook the event refers to"
+        },
+        "tagCommit": {
+          "type": "string",
+          "description": "Frozen tag commit the event refers to"
+        },
+        "cached": {
+          "type": "boolean",
+          "description": "Whether a hook completion was a cache hit"
+        },
+        "testSelection": {
+          "type": "string",
+          "description": "Test hook selection (full or incremental)"
+        },
+        "cacheKey": {
+          "type": "string",
+          "description": "Hook cache fingerprint"
+        },
+        "durationMs": {
+          "type": ["integer", "null"],
+          "minimum": 0,
+          "description": "Observed duration in milliseconds (null when unobserved)"
+        },
+        "exitCode": {
+          "type": "integer",
+          "description": "Child process exit code"
+        },
+        "findingCount": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Number of findings reported by a gate"
+        }
+      },
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": false
+}

package/adapters/cursor/schemas/evidence-event.schema.json

@@ -0,0 +1,89 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://release-skill.dev/schemas/evidence-event/v1",
+  "title": "Evidence Event",
+  "description": "Schema for JSONL evidence events produced during release execution",
+  "type": "object",
+  "required": [
+    "schemaVersion",
+    "runId",
+    "sequence",
+    "timestamp",
+    "command",
+    "phase",
+    "status"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "schemaVersion": {
+      "type": "integer",
+      "const": 1,
+      "description": "Event format version"
+    },
+    "runId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Unique identifier for the run (UUID)"
+    },
+    "sequence": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Event sequence number within the run, starting from 1"
+    },
+    "timestamp": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO 8601 UTC timestamp of the event"
+    },
+    "command": {
+      "type": "string",
+      "enum": ["assess", "prepare", "publish", "reconcile", "verify"],
+      "description": "The command that triggered this event"
+    },
+    "phase": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Current execution phase identifier"
+    },
+    "status": {
+      "type": "string",
+      "enum": ["started", "succeeded", "failed", "skipped"],
+      "description": "Status value of this event"
+    },
+    "error": {
+      "type": ["object", "null"],
+      "description": "Error details when status is failed",
+      "additionalProperties": false,
+      "properties": {
+        "code": {
+          "type": "string",
+          "enum": [
+            "CONFIG_INVALID",
+            "BASELINE_CHANGED",
+            "DIRTY_SCOPE_CONFLICT",
+            "GATE_FAILED",
+            "AUTH_MISSING",
+            "REMOTE_CONFLICT",
+            "HOOK_TIMEOUT",
+            "PARTIAL_RELEASE",
+            "POST_PUBLISH_VERIFY_FAILED"
+          ],
+          "description": "Stable error code"
+        },
+        "message": {
+          "type": "string",
+          "description": "Human-readable error message"
+        }
+      }
+    },
+    "duration": {
+      "type": "integer",
+      "minimum": 0,
+      "description": "Phase duration in milliseconds"
+    },
+    "details": {
+      "type": "object",
+      "description": "Phase-specific supplementary information"
+    }
+  }
+}