workproof 0.1.3 → 0.3.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "workproof",
-  "version": "0.1.3",
-  "description": "Turn a private git repository into a verifiable engineering report for one author, without showing any code.",
+  "version": "0.3.0",
+  "description": "Turn a private git repository into a verifiable engineering report for one author, without showing any code: thirteen figures from git, a hash anyone can recompute offline, verify, and an in-toto attestation.",
   "type": "module",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
@@ -12,30 +12,47 @@
     }
   },
   "bin": {
-    "workproof": "./dist/src/cli.js"
+    "workproof": "dist/src/cli.js"
   },
   "files": [
     "dist/src",
+    "schema",
     "README.md",
     "LICENSE"
   ],
+  "sideEffects": false,
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "lint": "tsc -p tsconfig.json --noEmit",
-    "test": "npm run build && node --test dist/test/figures.test.js dist/test/report.test.js dist/test/cli.test.js",
+    "test": "npm run build && node --test dist/test/figures.test.js dist/test/exclusions.test.js dist/test/adversarial.test.js dist/test/integrity.test.js dist/test/attest.test.js dist/test/report.test.js dist/test/summary.test.js dist/test/cli.test.js dist/test/action.test.js test/release.test.mjs",
     "prepublishOnly": "npm test",
-    "examples": "npm run build && node examples/basic.mjs"
+    "examples": "npm run build && node examples/basic.mjs",
+    "release": "node scripts/release.mjs",
+    "release-gate": "npm run build && node scripts/release-gate.mjs",
+    "bench:adversarial": "npm run build && node bench/adversarial.mjs"
   },
   "engines": {
     "node": ">=20"
   },
   "keywords": [
     "git",
-    "portfolio",
+    "git-blame",
+    "engineering-report",
+    "verifiable",
     "proof-of-work",
+    "portfolio",
+    "resume",
+    "hiring",
     "career",
-    "blame",
-    "engineering-evidence"
+    "authorship",
+    "code-ownership",
+    "surviving-lines",
+    "engineering-evidence",
+    "in-toto",
+    "sigstore",
+    "attestation",
+    "github-action",
+    "cli"
   ],
   "author": "Efe Genc",
   "license": "MIT",
@@ -44,6 +61,13 @@
     "url": "git+https://github.com/Bubblegunn/workproof.git"
   },
   "homepage": "https://github.com/Bubblegunn/workproof#readme",
+  "bugs": {
+    "url": "https://github.com/Bubblegunn/workproof/issues"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "dependencies": {
     "surviving-lines": "^0.1.1"
   },

package/schema/report.schema.json

@@ -0,0 +1,74 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://workproof.dev/schema/report-2.json",
+  "title": "workproof report",
+  "description": "A verifiable engineering report for one author. hash is sha256 over the RFC 8785 canonical JSON of { params, repositories }.",
+  "type": "object",
+  "required": ["tool", "schemaVersion", "version", "generatedAt", "params", "repositories", "hash"],
+  "properties": {
+    "tool": { "const": "workproof" },
+    "schemaVersion": { "const": 2 },
+    "version": { "type": "string" },
+    "generatedAt": { "type": "string", "format": "date-time" },
+    "params": { "type": "object" },
+    "hash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+    "repositories": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "required": ["name", "head", "fingerprint", "identity", "environment", "excluded", "figures"],
+        "properties": {
+          "name": { "type": "string" },
+          "head": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+          "fingerprint": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+          "fingerprintKeyed": { "type": "boolean" },
+          "identity": {
+            "type": "object",
+            "required": ["emails", "names", "count"],
+            "properties": {
+              "emails": { "type": "array", "items": { "type": "string" } },
+              "names": { "type": "array", "items": { "type": "string" } },
+              "count": { "type": "integer", "minimum": 0 }
+            }
+          },
+          "environment": {
+            "type": "object",
+            "required": ["git", "blame"],
+            "properties": {
+              "git": { "type": "string" },
+              "blame": { "type": "array", "items": { "type": "string" } },
+              "ignoreRevs": { "type": ["string", "null"] },
+              "seed": { "type": "string" }
+            }
+          },
+          "excluded": {
+            "type": "object",
+            "required": ["botCommits", "files", "linesAddedShare"],
+            "properties": {
+              "botCommits": { "type": "integer", "minimum": 0 },
+              "files": { "type": "integer", "minimum": 0 },
+              "linesAddedShare": { "type": "number", "minimum": 0, "maximum": 1 },
+              "enabled": { "type": "boolean" }
+            }
+          },
+          "figures": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "type": "object",
+              "required": ["id", "title", "value", "command", "limits"],
+              "properties": {
+                "id": { "type": "string", "minLength": 1 },
+                "title": { "type": "string" },
+                "value": {},
+                "command": { "type": "string" },
+                "limits": { "type": "array", "items": { "type": "string" } }
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}