Files
AirCoding/packages/contracts/src/capability.ts
AirCoding a773bac28c P0-P8: Full V1.0.0 Alpha implementation + audit reports
Implements 123 tasks across 9 phases (T-001..T-809) totaling 146 source files.

Monorepo (P0):
- 7-package Bun + Turborepo + TypeScript monorepo
- dependency-cruiser enforcing 7 forbidden edges + 5 deep-import rules

Contracts (P0):
- 16 type files (ids/error/event/runtime/ipc/task/worker-result/tool/artifact/evidence/project/provider/permission/ui/capability/platform)

Storage & Events (P1):
- DatabaseManager + MigrationRunner (19 tables, 22 indexes, 5 schema_meta seeds)
- 16 repositories (Repository<T,I,U> pattern, INV-1 status columns via EventStore.project only)
- EventSchemaRegistry (54 durable + 7 ephemeral), EventStore, EventBus, EventIngestor
- Project/Session/Artifact/Evidence stores + 8-step Recovery

Tools & Permission (P2):
- PathClassifier (8 categories), CommandRiskAnalyzer (10 categories), SecretRedactor
- PermissionEngine 6-layer evaluation (capability→profile→task_scope→risk→credential→user_prompt)
- ToolRegistry with 20+ tools across fs/shell/git/project/artifact/context/permission/doctor
- CapabilityManifestValidator + CapabilityRegistry

LLM & Context (P3):
- ModelConfigLoader, CapabilityMatrix, AnthropicCanonicalConverter
- AnthropicAdapter + OpenAICompatibleAdapter
- ProviderManager facade
- PromptLayerLoader (L0/L1/L3/L5), CompactionPolicy, ContextAssembler

Worker IPC & Scheduler (P4):
- WorkerProtocol (NDJSON), WorkerProcess (exit codes 0-5), WorkerManager (spawn/handshake)
- WorkerRuntime (INV-3: IPC only, no direct fs/shell/SQLite)
- 5 worker roles (Executor/Reviewer/Debugger/Compactor/ExperienceMiner)
- TaskGraph, WavePlanner, RetryPlanner, AgentMonitor, WorkspaceManager
- Scheduler (state machine), 8-step Recovery

C++ Toolchain (P5):
- DiagnosticParser, CppProjectDetector, CMakeConfigurator, CppBuilder
- CppTestRunner, CppcheckRunner, ClangdClient
- CppToolRegistrar + capability manifest

Projection & TUI (P6):
- ProjectionStore (hydrate/apply/snapshot/subscribe)
- TuiApp + 8 components (Session/Task/Agent/Tool/Diff/Evidence/Permission/Blocker/Hud)
- ProjectionClient in-process ref

Agents & Knowledge (P7):
- MainAgent, ArchitectureDesigner
- DebugKnowledgeStore + LearnedMemoryStore (single-writer, outbox model)
- Role integration wiring

CLI & Doctor & Release (P8):
- Logger + DeveloperLogEncryptor (AES-256-GCM)
- DoctorService (self_bootstrap first)
- RuntimeApp + ServiceRegistry
- 11 CLI commands: run/init/doctor/provider/resume/compact/history/session/restore/e2e/release
- CliEntrypoint + air<TODO>

Audit (in AirPlan/docs/):
- Deepseek开发阶段审计.md (97 findings)
- Opus开发阶段审计.md (140+ findings, 18 P0 blockers)
- MiniMaxM3开发阶段审计.md (18 P0 blockers, focuses on executability)
- AirPlan/TODO.md (technical debt + 42 TODOs by phase)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-02 19:19:55 +08:00

70 lines
2.3 KiB
TypeScript
Executable File

// contracts §18 — Capability Contracts
// File: capability.ts — CapabilityManifestV1, ValidationResult, CapabilityRegistry, trust levels
// Implements: interface-contracts-v1.md §18
import type { CapabilityID, JsonSchema, JsonObject } from "./ids.js"
import type { ToolCategory } from "./tool.js"
import type { ToolPermissionSpec } from "./permission.js"
import type { ToolRegistry } from "./tool.js"
// =============================================================================
// contracts §18 — Capability Contracts
// =============================================================================
/**
* Trust levels for capabilities, ordered from most trusted to least trusted.
* Trust affects default enablement/prompt posture but never bypasses
* ToolRegistry or PermissionEngine.
*/
export type CapabilityTrustLevel =
| "built_in" // Core AirCoding capabilities, always trusted
| "project_local" // Project-scoped capabilities, trusted within project
| "user_installed" // User-installed capabilities, moderate trust
| "verified_publisher" // Third-party from verified publishers
| "untrusted" // Unverified third-party capabilities
export interface CapabilityToolSpec {
name: string
version: number
category: ToolCategory
description: string
input_schema: JsonSchema
output_schema: JsonSchema
streaming?: boolean
permissions: ToolPermissionSpec
}
export interface CapabilityManifestV1 {
schema_version: 1 // Must be exactly 1 per DoD
capability_id: CapabilityID
display_name: string
version: string
description: string
publisher?: string
source: JsonObject
trust_level: CapabilityTrustLevel
tools: CapabilityToolSpec[]
dependencies?: JsonObject[]
permissions: JsonObject
events?: {
produced?: string[]
consumed?: string[]
}
artifact_types?: string[]
config_schema?: JsonSchema
entrypoint?: JsonObject
}
export interface ValidationResult {
ok: boolean
errors: string[]
warnings: string[]
}
export interface CapabilityRegistry {
discover(): Promise<CapabilityManifestV1[]>
validate(manifest: CapabilityManifestV1): Promise<ValidationResult>
enable(capability_id: CapabilityID): Promise<void>
disable(capability_id: CapabilityID): Promise<void>
register_tools(tool_registry: ToolRegistry): Promise<void>
}