xuym-codex-collab 0.1.1 → 0.3.0

package/schemas/team-enrollment.schema.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:codex-collab:team-enrollment:v1",
+  "title": "Codex Collab Dual-Signed Enrollment Request v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "request_id",
+    "invite_id",
+    "agent_id",
+    "public_key",
+    "wecom_userid",
+    "chat_id",
+    "signature",
+    "invitation_signature"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": 1
+    },
+    "request_id": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$"
+    },
+    "invite_id": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$"
+    },
+    "agent_id": {
+      "type": "string",
+      "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+    },
+    "public_key": {
+      "type": "string",
+      "minLength": 1
+    },
+    "wecom_userid": {
+      "type": [
+        "string",
+        "null"
+      ],
+      "minLength": 1,
+      "maxLength": 200
+    },
+    "chat_id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 200
+    },
+    "signature": {
+      "type": "string",
+      "minLength": 1
+    },
+    "invitation_signature": {
+      "type": "string",
+      "minLength": 1
+    }
+  },
+  "$comment": "Runtime checks both member and invitation claim signatures, invite identity, allowed chat, expiry and userid semantics. Admin approval consumes invite_id once in a team version."
+}

package/schemas/team-invitation.schema.json

@@ -0,0 +1,86 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:codex-collab:team-invitation:v1",
+  "title": "Codex Collab Signed Member Invitation v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "invite_id",
+    "agent_id",
+    "capabilities",
+    "bot_id",
+    "chat_ids",
+    "commands_enabled",
+    "prefer",
+    "claim_public_key",
+    "expires_at",
+    "team_hash",
+    "actor_id",
+    "signature"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": 1
+    },
+    "invite_id": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$"
+    },
+    "agent_id": {
+      "type": "string",
+      "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+    },
+    "capabilities": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 16,
+      "uniqueItems": true,
+      "items": {
+        "type": "string",
+        "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+      }
+    },
+    "bot_id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 200
+    },
+    "chat_ids": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 200
+      }
+    },
+    "commands_enabled": {
+      "type": "boolean"
+    },
+    "prefer": {
+      "type": "boolean"
+    },
+    "claim_public_key": {
+      "type": "string",
+      "minLength": 1
+    },
+    "expires_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "team_hash": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "actor_id": {
+      "type": "string",
+      "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+    },
+    "signature": {
+      "type": "string",
+      "minLength": 1
+    }
+  },
+  "$comment": "Runtime verifies administrator signature under team_hash, Ed25519 claim key, expiry, and conflicts with existing members or assignments. No bot Secret or private keys are allowed here."
+}

package/schemas/team-policy.schema.json

@@ -0,0 +1,182 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:codex-collab:team-policy:v3",
+  "title": "Codex Collab Peer Team Policy v2/v3",
+  "type": "object",
+  "additionalProperties": true,
+  "required": [
+    "schema_version",
+    "repo",
+    "default_route",
+    "reviewer",
+    "agents",
+    "routes",
+    "policy"
+  ],
+  "properties": {
+    "schema_version": {
+      "enum": [
+        2,
+        3
+      ]
+    },
+    "repo": {
+      "type": "string",
+      "minLength": 1
+    },
+    "default_route": {
+      "type": "string",
+      "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+    },
+    "reviewer": {
+      "type": "string",
+      "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+    },
+    "agents": {
+      "type": "object",
+      "minProperties": 1,
+      "propertyNames": {
+        "type": "string",
+        "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+      },
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": true,
+        "required": [
+          "role",
+          "capabilities",
+          "max_concurrent_tasks",
+          "public_key"
+        ],
+        "properties": {
+          "role": {
+            "enum": [
+              "admin",
+              "member"
+            ]
+          },
+          "capabilities": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+            }
+          },
+          "max_concurrent_tasks": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 16
+          },
+          "public_key": {
+            "type": "string",
+            "minLength": 1
+          },
+          "wecom_userid": {
+            "type": "string",
+            "minLength": 1
+          }
+        }
+      }
+    },
+    "routes": {
+      "type": "object",
+      "propertyNames": {
+        "type": "string",
+        "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+      },
+      "additionalProperties": {
+        "type": "array",
+        "minItems": 1,
+        "uniqueItems": true,
+        "items": {
+          "type": "string",
+          "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+        }
+      }
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": true,
+      "required": [
+        "claim_timeout_ms",
+        "lease_ms",
+        "clock_skew_ms",
+        "max_attempts"
+      ],
+      "properties": {
+        "claim_timeout_ms": {
+          "type": "integer",
+          "minimum": 10,
+          "maximum": 3600000
+        },
+        "lease_ms": {
+          "type": "integer",
+          "minimum": 100,
+          "maximum": 3600000
+        },
+        "clock_skew_ms": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 60000
+        },
+        "max_attempts": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 20
+        }
+      }
+    },
+    "review_rules": {
+      "type": "object",
+      "propertyNames": {
+        "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+      },
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "required",
+          "reviewer",
+          "notify"
+        ],
+        "properties": {
+          "required": {
+            "type": "boolean"
+          },
+          "reviewer": {
+            "type": "string",
+            "pattern": "^(owner|admin|member:[a-zA-Z0-9_-]{1,64})$"
+          },
+          "notify": {
+            "type": "string",
+            "pattern": "^(owner|reviewer|none|member:[a-zA-Z0-9_-]{1,64})$"
+          }
+        }
+      }
+    }
+  },
+  "$comment": "Runtime verifies distinct Ed25519 keys and owner IDs, valid reviewer and route capabilities, and clock skew below half the lease. v3 requires a review rule for every route; specific members require a verified owner. v2 forbids review_rules so old clients cannot silently bypass gates.",
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "schema_version": {
+            "const": 3
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "review_rules"
+        ]
+      },
+      "else": {
+        "not": {
+          "required": [
+            "review_rules"
+          ]
+        }
+      }
+    }
+  ]
+}

package/schemas/team-version.schema.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:codex-collab:team-version:v1",
+  "title": "Codex Collab Signed Team Version v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "version",
+    "parent_hash",
+    "team_hash",
+    "team",
+    "actor_id",
+    "signature"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": 1
+    },
+    "version": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "parent_hash": {
+      "oneOf": [
+        {
+          "type": "null"
+        },
+        {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        }
+      ]
+    },
+    "team_hash": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "team": {
+      "$ref": "urn:codex-collab:team-policy:v2"
+    },
+    "actor_id": {
+      "type": "string",
+      "pattern": "^[a-zA-Z0-9_-]{1,64}$"
+    },
+    "enrollment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "invite_id",
+        "request_id"
+      ],
+      "properties": {
+        "invite_id": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$"
+        },
+        "request_id": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$"
+        }
+      }
+    },
+    "signature": {
+      "type": "string",
+      "minLength": 1
+    }
+  },
+  "$comment": "Runtime verifies pinned root hash, contiguous version and parent chain, canonical team_hash, previous-admin signature, immutable existing identities and local anti-rollback checkpoint."
+}

package/scripts/peer/cli.mjs

@@ -102,8 +102,11 @@ switch (command) {
     if (command === 'list') task = await service.list();
     if (command === 'read') task = await service.read(args[0]);
     if (command === 'review') {
-      if (!['approved', 'changes_requested'].includes(args[1])) throw new Error('review task-id approved|changes_requested');
-      task = await service.report(args[0], { type: 'reviewed', decision: args[1] });
+      if (!['approved', 'changes_requested'].includes(args[1])) throw new Error('review task-id approved|changes_requested [R-<seq>] [feedback]');
+      const revision = /^R-([1-9][0-9]*)$/.exec(args[2] || '');
+      if (args[2]?.startsWith('R-') && (!revision || !Number.isSafeInteger(Number(revision[1])))) throw new Error('invalid review revision; use R-<seq> from the current notification');
+      const summary = args.slice(revision ? 3 : 2).join(' ');
+      task = await service.report(args[0], { type: 'reviewed', decision: args[1], ...(summary ? { summary } : {}) }, {}, undefined, revision ? Number(revision[1]) : undefined);
     }
     if (command === 'complete') task = await service.report(args[0], { type: 'completed' });
     if (command === 'reopen') task = await service.report(args[0], { type: 'reopened', summary: args.slice(1).join(' ') });

package/scripts/peer/onboarding.mjs

@@ -44,7 +44,7 @@ export async function readPublicKeyFile(path) {
   return key.export({ type: 'spki', format: 'pem' });
 }
 
-async function getOrCreateIdentityFiles(agentId, directory) {
+export async function getOrCreateIdentityFiles(agentId, directory) {
   if (!idPattern.test(agentId || '') || !isAbsolute(directory)) throw new Error('provide a valid agent ID and absolute identity directory');
   await mkdir(directory, { recursive: true, mode: 0o700 });
   const privatePath = join(directory, `${agentId}.private.json`);