sealbridge 0.2.2 → 0.3.0

package/dist/spec/task-manifest.0.2.0.schema.json

@@ -0,0 +1,422 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://acp-spec.local/schemas/v0.2/task-manifest.schema.json",
+  "title": "TaskManifest",
+  "description": "Cross-owner agent collaboration task manifest and contract specification.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "protocolVersion",
+    "taskId",
+    "createdAt",
+    "deadline",
+    "requester",
+    "task",
+    "io",
+    "verification",
+    "budget",
+    "permissions",
+    "sandboxPolicy",
+    "hitlPolicy"
+  ],
+  "properties": {
+    "protocolVersion": {
+      "type": "string",
+      "const": "0.2.0",
+      "description": "Protocol specification version."
+    },
+    "taskId": {
+      "type": "string",
+      "pattern": "^task_[a-zA-Z0-9_-]{8,64}$",
+      "description": "Globally unique task identifier."
+    },
+    "parentTaskId": {
+      "type": "string",
+      "pattern": "^task_[a-zA-Z0-9_-]{8,64}$",
+      "description": "Optional parent task identifier when sub-delegating."
+    },
+    "createdAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "deadline": {
+      "type": "string",
+      "format": "date-time",
+      "description": "Hard UTC timestamp deadline after which the task transitions to TIMED_OUT."
+    },
+    "requester": {
+      "$ref": "#/$defs/partyDescriptor"
+    },
+    "worker": {
+      "$ref": "#/$defs/partyDescriptor",
+      "description": "Target worker party if directed; omitted in open proposals before ACCEPT."
+    },
+    "task": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["title", "description", "acceptanceCriteria"],
+      "properties": {
+        "skillId": { "type": "string", "minLength": 1 },
+        "taskType": { "type": "string", "minLength": 1 },
+        "title": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 200
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 32768,
+          "description": "Task instructions. Must be treated as untrusted data by the worker runtime."
+        },
+        "acceptanceCriteria": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 50,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["id", "description", "required"],
+            "properties": {
+              "id": {
+                "type": "string",
+                "pattern": "^ac_[a-zA-Z0-9_-]{1,32}$"
+              },
+              "description": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 1000
+              },
+              "required": {
+                "type": "boolean"
+              }
+            }
+          }
+        }
+      }
+    },
+    "io": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["inputSchema", "outputSchema"],
+      "properties": {
+        "inputSchema": {
+          "type": "object",
+          "description": "JSON Schema describing the structured task input payload."
+        },
+        "outputSchema": {
+          "type": "object",
+          "description": "JSON Schema describing the required structured output artifact."
+        },
+        "inputArtifacts": {
+          "type": "array",
+          "maxItems": 100,
+          "items": {
+            "$ref": "#/$defs/artifactRef"
+          }
+        }
+      }
+    },
+    "verification": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "requireUsageReceipt", "requireExecutionAttestation", "maxRetries"],
+      "properties": {
+        "mode": {
+          "type": "string",
+          "enum": ["schema_only", "automated_checks", "human_in_the_loop", "hybrid"],
+          "description": "How the requester gateway verifies delivered artifacts."
+        },
+        "requireUsageReceipt": {
+          "type": "boolean"
+        },
+        "requireExecutionAttestation": {
+          "type": "boolean"
+        },
+        "maxRetries": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 10
+        },
+        "checks": {
+          "type": "array",
+          "maxItems": 20,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["checkId", "kind", "target"],
+            "properties": {
+              "checkId": {
+                "type": "string",
+                "pattern": "^chk_[a-zA-Z0-9_-]{1,32}$"
+              },
+              "kind": {
+                "type": "string",
+                "enum": ["json_schema", "sha256_match", "deterministic_command", "human_review"]
+              },
+              "target": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 512
+              },
+              "expectedExitCode": {
+                "type": "integer",
+                "default": 0
+              }
+            }
+          }
+        }
+      }
+    },
+    "budget": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "costBearer",
+        "maxInputTokens",
+        "maxOutputTokens",
+        "maxToolInvocations",
+        "maxWallClockSeconds",
+        "onOverrun"
+      ],
+      "properties": {
+        "costBearer": {
+          "type": "string",
+          "enum": ["worker_byok", "bilateral_quota", "external_settlement_plugin"],
+          "description": "Who bears the LLM/API inference cost. Never shares raw API keys across owners."
+        },
+        "maxInputTokens": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100000000
+        },
+        "maxOutputTokens": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100000000
+        },
+        "maxToolInvocations": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100000
+        },
+        "maxWallClockSeconds": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 604800
+        },
+        "onOverrun": {
+          "type": "string",
+          "enum": ["hard_stop", "request_hitl_amendment"]
+        },
+        "settlementExtension": {
+          "type": "object",
+          "description": "Optional plugin metadata for off-protocol settlement or bilateral ledger accounting."
+        }
+      }
+    },
+    "permissions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["maxDelegationDepth", "grantedCapabilities"],
+      "properties": {
+        "maxDelegationDepth": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 5,
+          "description": "0 forbids sub-delegation to any third-party agent."
+        },
+        "grantedCapabilities": {
+          "type": "array",
+          "maxItems": 50,
+          "items": {
+            "$ref": "#/$defs/capabilityGrantSpec"
+          }
+        }
+      }
+    },
+    "sandboxPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["isolationLevel", "networkAccess", "filesystemScope"],
+      "properties": {
+        "allowSubprocessFallback": {
+          "type": "boolean",
+          "description": "Explicitly permit a restricted subprocess when OCI isolation is requested."
+        },
+        "isolationLevel": {
+          "type": "string",
+          "enum": ["subprocess_restricted", "oci_container", "wasm", "microvm"]
+        },
+        "networkAccess": {
+          "type": "string",
+          "enum": ["none", "allowlist_only"]
+        },
+        "allowedHosts": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 253
+          }
+        },
+        "filesystemScope": {
+          "type": "string",
+          "enum": ["ephemeral_workspace_only", "read_only_inputs"]
+        }
+      }
+    },
+    "hitlPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requiredGates"],
+      "properties": {
+        "requiredGates": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "enum": [
+              "GATE_CONTRACT_ACCEPT",
+              "GATE_EXTERNAL_SIDE_EFFECT",
+              "GATE_BUDGET_OVERRUN",
+              "GATE_SUB_DELEGATION",
+              "GATE_DELIVERY_ACCEPT"
+            ]
+          }
+        }
+      }
+    },
+    "signatures": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "requesterSignature": {
+          "$ref": "#/$defs/signatureBlock"
+        },
+        "workerSignature": {
+          "$ref": "#/$defs/signatureBlock"
+        }
+      }
+    }
+  },
+  "$defs": {
+    "didKey": {
+      "type": "string",
+      "pattern": "^did:key:z[1-9A-HJ-NP-Za-km-z]{32,128}$"
+    },
+    "sha256Digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "partyDescriptor": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ownerDid", "agentDid"],
+      "properties": {
+        "ownerDid": {
+          "$ref": "#/$defs/didKey"
+        },
+        "agentDid": {
+          "$ref": "#/$defs/didKey"
+        },
+        "displayName": {
+          "type": "string",
+          "maxLength": 100
+        },
+        "relayEndpoint": {
+          "type": "string",
+          "format": "uri"
+        }
+      }
+    },
+    "artifactRef": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "digest", "mediaType", "sizeBytes"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^[a-zA-Z0-9._/-]{1,255}$"
+        },
+        "digest": {
+          "$ref": "#/$defs/sha256Digest"
+        },
+        "mediaType": {
+          "type": "string",
+          "maxLength": 128
+        },
+        "sizeBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1073741824
+        }
+      }
+    },
+    "capabilityGrantSpec": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["capabilityId", "resource", "allowedTools", "maxInvocations", "expiresAt"],
+      "properties": {
+        "capabilityId": {
+          "type": "string",
+          "pattern": "^cap_[a-zA-Z0-9_-]{4,64}$"
+        },
+        "resource": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512,
+          "description": "Scoped URI or MCP resource prefix (e.g. mcp://owner-a/docs/public/*)."
+        },
+        "allowedTools": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 50,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+          }
+        },
+        "argConstraints": {
+          "type": "object",
+          "description": "Optional JSON Schema constraining tool arguments."
+        },
+        "maxInvocations": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 10000
+        },
+        "expiresAt": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
+    },
+    "signatureBlock": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["signerDid", "canonicalization", "payloadDigest", "signedAt", "signature"],
+      "properties": {
+        "signerDid": {
+          "$ref": "#/$defs/didKey"
+        },
+        "canonicalization": {
+          "type": "string",
+          "const": "RFC8785-JCS"
+        },
+        "payloadDigest": {
+          "$ref": "#/$defs/sha256Digest"
+        },
+        "signedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "signature": {
+          "type": "string",
+          "pattern": "^ed25519:[a-zA-Z0-9+/=_-]{64,180}$"
+        }
+      }
+    }
+  }
+}