Agent task: add SourceOS release and build object schemas

[mdheller]

Target repo

SourceOS-Linux/sourceos-spec

Context

NLBoot object schemas are now merged. The next schema slice should cover adjacent SourceOS lifecycle objects consumed by NLBoot, sourceos-boot, sourceos-devtools, Homebrew/release tooling, and the web control surface.

Scope

Implement the smallest bounded change that adds canonical schemas and examples for:

1. ReleaseSet
2. Fingerprint
3. ConfigSource
4. TokenDoor
5. GitRefBuild

Also add validation tooling or extend existing validation so the examples are checked.

Acceptance criteria

• make validate passes.
• Schemas follow existing v2 schema conventions.
• Examples are indexed in examples README/catalog if the repo has one.
• PR body includes validation evidence.
• No runtime implementation is added.

Validation commands

make validate

Boundaries / non-goals

• Do not implement runtime behavior.
• Do not change NLBoot runtime code.
• Do not duplicate implementation logic from SociOS-Linux/nlboot, sourceos-boot, or sourceos-devtools.
• One PR only.

[mdheller]

@codex Please take this in the SourceOS spec Codex environment. One PR: implement the bounded schema task in the issue body. Inspect the repo first and include validation evidence.

[mdheller]

@copilot Assignment is active. Please open one bounded PR for the schema task in the issue body with validation evidence.

[chatgpt-codex-connector]

Summary

• Added three new bounded control-plane schema objects in legacy + canonical wrapper form, following the existing v2 identity pattern:
  • ConfigSource (config-source.schema.json + ConfigSource.json)
  • GitRefBuild (git-ref-build.schema.json + GitRefBuild.json)
  • TokenDoor (token-door.schema.json + TokenDoor.json). schemas/control-plane/config-source.schema.jsonL1-L17 schemas/control-plane/ConfigSource.jsonL1-L9 schemas/control-plane/git-ref-build.schema.jsonL1-L18 schemas/control-plane/GitRefBuild.jsonL1-L9 schemas/control-plane/token-door.schema.jsonL1-L27 schemas/control-plane/TokenDoor.jsonL1-L9
• Added positive example fixtures for all three new objects:
  • examples/config_source.json
  • examples/git_ref_build.json
  • examples/token_door.json. examples/config_source.jsonL1-L8 examples/git_ref_build.jsonL1-L9 examples/token_door.jsonL1-L13
• Added negative example fixtures (practical invalid cases) for the new contracts under control-plane examples:
  • config-source.invalid.sample.json
  • git-ref-build.invalid.sample.json
  • token-door.invalid.sample.json. examples/control-plane/README.mdL7-L16
• Extended control-plane validation tooling to:
  • validate positive fixtures for new schemas, and
  • assert the new negative fixtures fail schema validation. tools/validate_control_plane_examples.pyL10-L57
• Updated schema/example indexes so the new contracts are discoverable in repo docs/catalogs:
  • control-plane schema README inclusion lists,
  • top-level examples relationship map + file index,
  • control-plane example README fixture list. schemas/control-plane/README.mdL18-L49 examples/README.mdL52-L56 examples/README.mdL131-L166 examples/control-plane/README.mdL5-L16

Git / PR actions completed

• Committed changes on current branch:
  • 6747f25 — Add bounded control-plane schemas for config/build/token objects.
• Opened PR using make_pr with required body sections (what changed, exact commands, pass/fail summary, known gaps, blocked items).

Testing

• ⚠️ make validate (failed in this environment because pip install --user jsonschema could not reach package index via proxy; validation dependency unavailable).
• ⚠️ python3 -c 'import jsonschema; print(jsonschema.__version__)' (confirmed module is not installed in environment).

View task →