@awebai/oats 0.23.1 → 0.24.0

package/docs/portable.schema.json

@@ -0,0 +1,2512 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://oats.dev/schemas/portable-v1.json",
+  "title": "Portable OATS shared wire values v1",
+  "description": "Structural schemas only. Strict bounded decoding, canonical source/digest identities, cross-reference equality, constraints, provenance, graph limits and filesystem verification remain mandatory runtime checks. Provider payloads remain opaque; schema acceptance grants no trust, enrollment or privacy guarantee.",
+  "$defs": {
+    "Hash": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^sha256-[a-f0-9]{64}$"
+    },
+    "RelativePath": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+    },
+    "RootRelativePath": {
+      "oneOf": [
+        {
+          "const": "."
+        },
+        {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+        }
+      ]
+    },
+    "CapabilityId": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^[a-z0-9][a-z0-9._-]*$"
+    },
+    "TreeIntegrity": {
+      "type": "object",
+      "properties": {
+        "format": {
+          "const": "oats.tree-exec.v1"
+        },
+        "value": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^sha256-[a-f0-9]{64}$"
+        }
+      },
+      "required": [
+        "format",
+        "value"
+      ],
+      "additionalProperties": false
+    },
+    "PackageIntegrity": {
+      "type": "object",
+      "properties": {
+        "format": {
+          "const": "oats.package-payload-exec.v1"
+        },
+        "value": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^sha256-[a-f0-9]{64}$"
+        }
+      },
+      "required": [
+        "format",
+        "value"
+      ],
+      "additionalProperties": false
+    },
+    "ByteIntegrity": {
+      "type": "object",
+      "properties": {
+        "format": {
+          "const": "oats.bytes.v1"
+        },
+        "value": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^sha256-[a-f0-9]{64}$"
+        }
+      },
+      "required": [
+        "format",
+        "value"
+      ],
+      "additionalProperties": false
+    },
+    "ResolutionRef": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^sha256-[a-f0-9]{64}$"
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "id"
+      ],
+      "additionalProperties": false
+    },
+    "RepositoryIdentity": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "provider-repository"
+            },
+            "provider": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[a-z][a-z0-9.-]*$"
+            },
+            "host": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?$"
+            },
+            "id": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "kind",
+            "provider",
+            "host",
+            "id"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "canonical-remote"
+            },
+            "remote": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^git:.+$"
+            }
+          },
+          "required": [
+            "kind",
+            "remote"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "SoulIdentity": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "git-soul"
+            },
+            "repository": {
+              "$ref": "#/$defs/RepositoryIdentity"
+            },
+            "exportPath": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+            }
+          },
+          "required": [
+            "kind",
+            "repository",
+            "exportPath"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "local-soul"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^path:/.*$"
+            },
+            "exportPath": {
+              "oneOf": [
+                {
+                  "const": "."
+                },
+                {
+                  "type": "string",
+                  "minLength": 1,
+                  "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+                }
+              ]
+            }
+          },
+          "required": [
+            "kind",
+            "source",
+            "exportPath"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "WorkspaceIdentity": {
+      "type": "object",
+      "properties": {
+        "repository": {
+          "$ref": "#/$defs/RepositoryIdentity"
+        },
+        "path": {
+          "const": "oats-workspace.yaml"
+        }
+      },
+      "required": [
+        "repository",
+        "path"
+      ],
+      "additionalProperties": false
+    },
+    "CapabilityArtifactRef": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "const": "capability"
+        },
+        "capability": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[a-z0-9][a-z0-9._-]*$"
+        },
+        "integrity": {
+          "$ref": "#/$defs/TreeIntegrity"
+        }
+      },
+      "required": [
+        "kind",
+        "capability",
+        "integrity"
+      ],
+      "additionalProperties": false
+    },
+    "SoulArtifactRef": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "const": "soul"
+        },
+        "identity": {
+          "$ref": "#/$defs/SoulIdentity"
+        },
+        "integrity": {
+          "$ref": "#/$defs/TreeIntegrity"
+        }
+      },
+      "required": [
+        "kind",
+        "identity",
+        "integrity"
+      ],
+      "additionalProperties": false
+    },
+    "ResourceArtifactRef": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "const": "resource"
+        },
+        "integrity": {
+          "$ref": "#/$defs/TreeIntegrity"
+        }
+      },
+      "required": [
+        "kind",
+        "integrity"
+      ],
+      "additionalProperties": false
+    },
+    "ArtifactRef": {
+      "oneOf": [
+        {
+          "$ref": "#/$defs/CapabilityArtifactRef"
+        },
+        {
+          "$ref": "#/$defs/SoulArtifactRef"
+        },
+        {
+          "$ref": "#/$defs/ResourceArtifactRef"
+        }
+      ]
+    },
+    "ResourceRef": {
+      "type": "object",
+      "properties": {
+        "owner": {
+          "$ref": "#/$defs/ArtifactRef"
+        },
+        "path": {
+          "oneOf": [
+            {
+              "const": "."
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+            }
+          ]
+        },
+        "kind": {
+          "enum": [
+            "file",
+            "directory",
+            "manifest",
+            "skill",
+            "runtime-package"
+          ]
+        }
+      },
+      "required": [
+        "owner",
+        "path",
+        "kind"
+      ],
+      "additionalProperties": false
+    },
+    "OperatorDocument": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "const": "operator"
+        },
+        "id": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "required": [
+        "kind",
+        "id"
+      ],
+      "additionalProperties": false
+    },
+    "SourceDocument": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "source"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^git:.+$"
+            },
+            "revision": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[a-f0-9]{40}$"
+            },
+            "path": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+            },
+            "integrity": {
+              "$ref": "#/$defs/ByteIntegrity"
+            }
+          },
+          "required": [
+            "kind",
+            "source",
+            "revision",
+            "path",
+            "integrity"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "source"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^path:/.*$"
+            },
+            "revision": {
+              "const": "local"
+            },
+            "path": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+            },
+            "integrity": {
+              "$ref": "#/$defs/ByteIntegrity"
+            }
+          },
+          "required": [
+            "kind",
+            "source",
+            "revision",
+            "path",
+            "integrity"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "DeploymentDocument": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "const": "deployment"
+        },
+        "path": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+        },
+        "integrity": {
+          "$ref": "#/$defs/ByteIntegrity"
+        }
+      },
+      "required": [
+        "kind",
+        "path",
+        "integrity"
+      ],
+      "additionalProperties": false
+    },
+    "RecordDocument": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "const": "record"
+        },
+        "ref": {
+          "$ref": "#/$defs/ResolutionRef"
+        }
+      },
+      "required": [
+        "kind",
+        "ref"
+      ],
+      "additionalProperties": false
+    },
+    "ArtifactDocument": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "const": "artifact"
+        },
+        "owner": {
+          "$ref": "#/$defs/ArtifactRef"
+        },
+        "path": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+        },
+        "integrity": {
+          "$ref": "#/$defs/ByteIntegrity"
+        }
+      },
+      "required": [
+        "kind",
+        "owner",
+        "path",
+        "integrity"
+      ],
+      "additionalProperties": false
+    },
+    "Origin": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "enum": [
+            "soul-requirement",
+            "soul-default",
+            "workspace-default",
+            "import-adoption",
+            "operator",
+            "package-dependency",
+            "work-target",
+            "migration-evidence",
+            "provider-binding",
+            "workspace-admission",
+            "member-backlink",
+            "source-export",
+            "manifest-default"
+          ]
+        },
+        "document": {
+          "oneOf": [
+            {
+              "$ref": "#/$defs/SourceDocument"
+            },
+            {
+              "$ref": "#/$defs/DeploymentDocument"
+            },
+            {
+              "$ref": "#/$defs/OperatorDocument"
+            },
+            {
+              "$ref": "#/$defs/RecordDocument"
+            },
+            {
+              "$ref": "#/$defs/ArtifactDocument"
+            }
+          ]
+        },
+        "pointer": {
+          "type": "string",
+          "pattern": "^(?:/(?:[^~]|~[01])*)*$"
+        },
+        "span": {
+          "type": "object",
+          "properties": {
+            "start": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 9007199254740991
+            },
+            "end": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 9007199254740991
+            }
+          },
+          "required": [
+            "start",
+            "end"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "kind",
+        "document",
+        "pointer"
+      ],
+      "additionalProperties": false
+    },
+    "OperatorOrigin": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "const": "operator"
+        },
+        "document": {
+          "$ref": "#/$defs/OperatorDocument"
+        },
+        "pointer": {
+          "type": "string",
+          "pattern": "^(?:/(?:[^~]|~[01])*)*$"
+        },
+        "span": {
+          "type": "object",
+          "properties": {
+            "start": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 9007199254740991
+            },
+            "end": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 9007199254740991
+            }
+          },
+          "required": [
+            "start",
+            "end"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "kind",
+        "document",
+        "pointer"
+      ],
+      "additionalProperties": false
+    },
+    "Constraint": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "equals"
+            },
+            "value": {},
+            "origin": {
+              "$ref": "#/$defs/Origin"
+            }
+          },
+          "required": [
+            "kind",
+            "value",
+            "origin"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "required"
+            },
+            "origin": {
+              "$ref": "#/$defs/Origin"
+            }
+          },
+          "required": [
+            "kind",
+            "origin"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "Considered": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "enum": [
+            "manifest-default",
+            "workspace-default",
+            "soul-default",
+            "import-adoption",
+            "operator"
+          ]
+        },
+        "value": {},
+        "origin": {
+          "$ref": "#/$defs/Origin"
+        },
+        "disposition": {
+          "enum": [
+            "selected",
+            "overridden"
+          ]
+        }
+      },
+      "required": [
+        "kind",
+        "value",
+        "origin",
+        "disposition"
+      ],
+      "additionalProperties": false
+    },
+    "Choice": {
+      "type": "object",
+      "properties": {
+        "value": {},
+        "selectedBy": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "$ref": "#/$defs/Origin"
+            }
+          ]
+        },
+        "constraints": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Constraint"
+          }
+        },
+        "considered": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Considered"
+          }
+        }
+      },
+      "required": [
+        "value",
+        "selectedBy",
+        "constraints",
+        "considered"
+      ],
+      "additionalProperties": false
+    },
+    "GitObservation": {
+      "type": "object",
+      "properties": {
+        "identity": {
+          "$ref": "#/$defs/RepositoryIdentity"
+        },
+        "remote": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^git:.+$"
+        },
+        "selector": {
+          "type": "string",
+          "minLength": 1
+        },
+        "commit": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[a-f0-9]{40}$"
+        },
+        "provenance": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Origin"
+          },
+          "minItems": 1
+        }
+      },
+      "required": [
+        "identity",
+        "remote",
+        "selector",
+        "commit",
+        "provenance"
+      ],
+      "additionalProperties": false
+    },
+    "LocalObservation": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "const": "local"
+        },
+        "source": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^path:/.*$"
+        },
+        "integrity": {
+          "$ref": "#/$defs/TreeIntegrity"
+        },
+        "provenance": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Origin"
+          },
+          "minItems": 1
+        },
+        "repository": {
+          "$ref": "#/$defs/RepositoryIdentity"
+        }
+      },
+      "required": [
+        "kind",
+        "source",
+        "integrity",
+        "provenance"
+      ],
+      "additionalProperties": false
+    },
+    "SoulSelection": {
+      "type": "object",
+      "properties": {
+        "identity": {
+          "$ref": "#/$defs/SoulIdentity"
+        },
+        "revision": {
+          "oneOf": [
+            {
+              "$ref": "#/$defs/GitObservation"
+            },
+            {
+              "$ref": "#/$defs/LocalObservation"
+            }
+          ]
+        },
+        "alias": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+        },
+        "sourceArtifact": {
+          "$ref": "#/$defs/SoulArtifactRef"
+        },
+        "definition": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+        },
+        "projection": {
+          "type": "object",
+          "properties": {
+            "roots": {
+              "type": "array",
+              "items": {
+                "oneOf": [
+                  {
+                    "const": "."
+                  },
+                  {
+                    "type": "string",
+                    "minLength": 1,
+                    "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+                  }
+                ]
+              },
+              "uniqueItems": true,
+              "minItems": 1,
+              "description": "Set in canonical UTF-8 order; runtime verifies closure and witnesses."
+            }
+          },
+          "required": [
+            "roots"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "identity",
+        "revision",
+        "alias",
+        "sourceArtifact",
+        "definition",
+        "projection"
+      ],
+      "additionalProperties": false
+    },
+    "PackageRow": {
+      "type": "object",
+      "properties": {
+        "source": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(?:git:.+|path:/.*|catalog:.+)$"
+        },
+        "path": {
+          "oneOf": [
+            {
+              "const": "."
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+            }
+          ]
+        },
+        "version": {
+          "type": "string",
+          "minLength": 1
+        },
+        "commit": {
+          "oneOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[a-f0-9]{40}$"
+            },
+            {
+              "const": "local"
+            }
+          ]
+        },
+        "integrity": {
+          "$ref": "#/$defs/PackageIntegrity"
+        },
+        "dependencies": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^[a-z0-9][a-z0-9._-]*$"
+          },
+          "uniqueItems": true
+        }
+      },
+      "required": [
+        "source",
+        "path",
+        "version",
+        "commit",
+        "integrity",
+        "dependencies"
+      ],
+      "additionalProperties": false
+    },
+    "CapabilityOrigin": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "package"
+            },
+            "package": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[a-z0-9][a-z0-9._-]*$"
+            },
+            "path": {
+              "oneOf": [
+                {
+                  "const": "."
+                },
+                {
+                  "type": "string",
+                  "minLength": 1,
+                  "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+                }
+              ]
+            },
+            "projectionVersion": {
+              "const": 1
+            }
+          },
+          "required": [
+            "kind",
+            "package",
+            "path",
+            "projectionVersion"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "local-capability"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^path:/.*$"
+            },
+            "authoredAs": {
+              "enum": [
+                "owned",
+                "path"
+              ]
+            },
+            "witness": {
+              "$ref": "#/$defs/Origin"
+            }
+          },
+          "required": [
+            "kind",
+            "source",
+            "authoredAs",
+            "witness"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "CapabilityRow": {
+      "type": "object",
+      "properties": {
+        "version": {
+          "type": "string",
+          "minLength": 1
+        },
+        "artifact": {
+          "$ref": "#/$defs/CapabilityArtifactRef"
+        },
+        "origin": {
+          "$ref": "#/$defs/CapabilityOrigin"
+        }
+      },
+      "required": [
+        "version",
+        "artifact",
+        "origin"
+      ],
+      "additionalProperties": false
+    },
+    "ArtifactSet": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "packages": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/PackageRow"
+          },
+          "propertyNames": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^[a-z0-9][a-z0-9._-]*$"
+          }
+        },
+        "capabilities": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/CapabilityRow"
+          },
+          "propertyNames": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^[a-z0-9][a-z0-9._-]*$"
+          }
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "packages",
+        "capabilities"
+      ],
+      "additionalProperties": false
+    },
+    "CredentialRef": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "env"
+            },
+            "name": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+            }
+          },
+          "required": [
+            "kind",
+            "name"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "provider"
+            },
+            "provider": {
+              "type": "string",
+              "minLength": 1
+            },
+            "key": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "kind",
+            "provider",
+            "key"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "ProviderBinding": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "capability": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[a-z0-9][a-z0-9._-]*$"
+        },
+        "payloadContract": {
+          "type": "string",
+          "minLength": 1
+        },
+        "payloadVersion": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 9007199254740991
+        },
+        "payload": {},
+        "credentialRefs": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/CredentialRef"
+          }
+        },
+        "provenance": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Origin"
+          }
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "capability",
+        "payloadContract",
+        "payloadVersion",
+        "payload",
+        "credentialRefs",
+        "provenance"
+      ],
+      "additionalProperties": false
+    },
+    "Context": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "workspace"
+            },
+            "identity": {
+              "$ref": "#/$defs/WorkspaceIdentity"
+            },
+            "observation": {
+              "$ref": "#/$defs/Origin"
+            }
+          },
+          "required": [
+            "kind",
+            "identity",
+            "observation"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "standalone"
+            },
+            "key": {
+              "oneOf": [
+                {
+                  "type": "null"
+                },
+                {
+                  "type": "string",
+                  "minLength": 1
+                }
+              ]
+            }
+          },
+          "required": [
+            "kind",
+            "key"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "PrivateContext": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "workspace"
+            },
+            "identity": {
+              "$ref": "#/$defs/WorkspaceIdentity"
+            }
+          },
+          "required": [
+            "kind",
+            "identity"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "standalone"
+            },
+            "key": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "kind",
+            "key"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "TeamRef": {
+      "type": "object",
+      "properties": {
+        "provider": {
+          "type": "string",
+          "minLength": 1
+        },
+        "id": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "required": [
+        "provider",
+        "id"
+      ],
+      "additionalProperties": false
+    },
+    "MessagingChoice": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "schemaVersion": {
+              "const": 1
+            },
+            "enabled": {
+              "const": false
+            }
+          },
+          "required": [
+            "schemaVersion",
+            "enabled"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "schemaVersion": {
+              "const": 1
+            },
+            "enabled": {
+              "const": true
+            },
+            "privateKey": {
+              "type": "object",
+              "properties": {
+                "provider": {
+                  "type": "string",
+                  "minLength": 1,
+                  "pattern": "^[a-z0-9][a-z0-9._-]*$"
+                },
+                "human": {
+                  "$ref": "#/$defs/TeamRef"
+                },
+                "context": {
+                  "$ref": "#/$defs/PrivateContext"
+                }
+              },
+              "required": [
+                "provider",
+                "human",
+                "context"
+              ],
+              "additionalProperties": false
+            },
+            "wider": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/TeamRef"
+              },
+              "uniqueItems": true
+            },
+            "provenance": {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/Origin"
+              }
+            }
+          },
+          "required": [
+            "schemaVersion",
+            "enabled",
+            "privateKey",
+            "wider",
+            "provenance"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "RuntimeResource": {
+      "type": "object",
+      "properties": {
+        "runtime": {
+          "type": "string",
+          "minLength": 1
+        },
+        "package": {
+          "type": "string",
+          "minLength": 1
+        },
+        "resource": {
+          "type": "string",
+          "minLength": 1
+        },
+        "requiredBy": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Origin"
+          }
+        }
+      },
+      "required": [
+        "runtime",
+        "package",
+        "resource",
+        "requiredBy"
+      ],
+      "additionalProperties": false
+    },
+    "LaunchRecipe": {
+      "type": "object",
+      "required": [
+        "version",
+        "runtime"
+      ],
+      "properties": {
+        "version": {
+          "const": 1
+        },
+        "runtime": {
+          "enum": [
+            "pi",
+            "claude",
+            "codex"
+          ]
+        }
+      },
+      "description": "Envelope only: the sole existing launch codec owns all remaining recipe fields and their interpretation."
+    },
+    "InstructionBlock": {
+      "type": "object",
+      "properties": {
+        "source": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(kernel|work-mode|capability|config):[A-Za-z0-9._:-]+$"
+        },
+        "resource": {
+          "type": "string",
+          "minLength": 1
+        },
+        "choice": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "required": [
+        "source",
+        "resource"
+      ],
+      "additionalProperties": false
+    },
+    "InstructionOmission": {
+      "type": "object",
+      "properties": {
+        "source": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(kernel|work-mode|capability|config):[A-Za-z0-9._:-]+$"
+        },
+        "reason": {
+          "enum": [
+            "disabled",
+            "helper-knowledge",
+            "helper-policy"
+          ]
+        },
+        "choice": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "required": [
+        "source",
+        "reason"
+      ],
+      "additionalProperties": false
+    },
+    "InstructionComposition": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "mode": {
+          "enum": [
+            "worktree",
+            "checkout",
+            "attached",
+            "workspace",
+            "directory"
+          ]
+        },
+        "body": {
+          "type": "string",
+          "minLength": 1
+        },
+        "blocks": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/InstructionBlock"
+          }
+        },
+        "omissions": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/InstructionOmission"
+          }
+        },
+        "skills": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$"
+              },
+              "resource": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "required": [
+              "name",
+              "resource"
+            ],
+            "additionalProperties": false
+          }
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "mode",
+        "body",
+        "blocks",
+        "omissions",
+        "skills"
+      ],
+      "additionalProperties": false
+    },
+    "Dispatch": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "providerManifests": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string",
+            "minLength": 1
+          },
+          "propertyNames": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^[a-z0-9][a-z0-9._-]*$"
+          }
+        },
+        "settingsChoices": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "propertyNames": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^[a-z0-9][a-z0-9._-]*$"
+          }
+        },
+        "launch": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "$ref": "#/$defs/LaunchRecipe"
+            }
+          ]
+        },
+        "runtimePackages": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/RuntimeResource"
+          }
+        },
+        "hostRequirements": {
+          "type": "array",
+          "items": {}
+        },
+        "workTargetInputs": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "composition": {
+          "$ref": "#/$defs/InstructionComposition"
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "providerManifests",
+        "settingsChoices",
+        "launch",
+        "runtimePackages",
+        "hostRequirements",
+        "workTargetInputs"
+      ],
+      "additionalProperties": false,
+      "allOf": [
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "launch": {
+                "type": "object"
+              }
+            },
+            "required": [
+              "launch"
+            ]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "composition": {
+                "$ref": "#/$defs/InstructionComposition"
+              }
+            },
+            "required": [
+              "composition"
+            ]
+          }
+        }
+      ]
+    },
+    "CapturedSubject": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "persistent"
+            },
+            "soul": {
+              "$ref": "#/$defs/SoulSelection"
+            }
+          },
+          "required": [
+            "kind",
+            "soul"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "helper"
+            },
+            "provider": {
+              "$ref": "#/$defs/CapabilityArtifactRef"
+            },
+            "definition": {
+              "$ref": "#/$defs/ResourceRef"
+            },
+            "name": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+            }
+          },
+          "required": [
+            "kind",
+            "provider",
+            "definition",
+            "name"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "ExecutionBinding": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "deployment": {
+          "type": "string",
+          "minLength": 1
+        },
+        "resolution": {
+          "$ref": "#/$defs/ResolutionRef"
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "deployment",
+        "resolution"
+      ],
+      "additionalProperties": false
+    },
+    "CapturedAction": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "enum": [
+                "inspect",
+                "compose"
+              ]
+            }
+          },
+          "required": [
+            "kind"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "command"
+            },
+            "capability": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[a-z0-9][a-z0-9._-]*$"
+            },
+            "name": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "kind",
+            "capability",
+            "name"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "command"
+            },
+            "namespace": {
+              "type": "string",
+              "minLength": 1
+            },
+            "name": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "kind",
+            "namespace",
+            "name"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "hook"
+            },
+            "capability": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[a-z0-9][a-z0-9._-]*$"
+            },
+            "name": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "kind",
+            "capability",
+            "name"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "const": "operation"
+            },
+            "slot": {
+              "enum": [
+                "knowledge",
+                "messaging",
+                "tasks"
+              ]
+            },
+            "name": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "kind",
+            "slot",
+            "name"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "IncarnationId": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$"
+    },
+    "CapturedIntentRef": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "executionId": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$"
+        },
+        "incarnationId": {
+          "$ref": "#/$defs/IncarnationId"
+        },
+        "attempt": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 9007199254740991
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "executionId",
+        "incarnationId",
+        "attempt"
+      ],
+      "additionalProperties": false
+    },
+    "CapturedInvocationContext": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "executionBinding": {
+          "$ref": "#/$defs/ExecutionBinding"
+        },
+        "subject": {
+          "$ref": "#/$defs/CapturedSubject"
+        },
+        "instance": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "type": "object",
+              "properties": {
+                "home": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "work": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "name": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "agent": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "incarnationId": {
+                  "$ref": "#/$defs/IncarnationId"
+                }
+              },
+              "required": [
+                "home",
+                "work",
+                "name",
+                "agent",
+                "incarnationId"
+              ],
+              "additionalProperties": false
+            }
+          ]
+        },
+        "intent": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "$ref": "#/$defs/CapturedIntentRef"
+            }
+          ]
+        },
+        "context": {
+          "$ref": "#/$defs/Context"
+        },
+        "responsibleHuman": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "$ref": "#/$defs/TeamRef"
+            }
+          ]
+        },
+        "messagingChoice": {
+          "$ref": "#/$defs/MessagingChoice"
+        },
+        "capability": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[a-z0-9][a-z0-9._-]*$"
+        },
+        "action": {
+          "$ref": "#/$defs/CapturedAction"
+        },
+        "priorReceipt": {}
+      },
+      "required": [
+        "schemaVersion",
+        "executionBinding",
+        "subject",
+        "instance",
+        "intent",
+        "context",
+        "responsibleHuman",
+        "messagingChoice",
+        "capability",
+        "action",
+        "priorReceipt"
+      ],
+      "additionalProperties": false,
+      "description": "Bounded generic projection: exact subject union and validated record/instance equality are mandatory. Incarnation and intent are independently minted durable identities, never a resolution/home/name digest. A null intent grants no mutation authority. Prior receipt is opaque nullable JSON, not credentials."
+    },
+    "ProviderCheckInput": {
+      "type": "object",
+      "properties": {
+        "binding": {
+          "$ref": "#/$defs/ProviderBinding"
+        },
+        "context": {
+          "$ref": "#/$defs/Context"
+        },
+        "action": {
+          "type": "object",
+          "required": [
+            "kind"
+          ],
+          "properties": {
+            "kind": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        },
+        "invocation": {
+          "$ref": "#/$defs/CapturedInvocationContext"
+        }
+      },
+      "required": [
+        "binding",
+        "context",
+        "action"
+      ],
+      "additionalProperties": false
+    },
+    "CapturedResolution": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "capture": {
+          "enum": [
+            "prepared",
+            "reconstructed"
+          ]
+        },
+        "subject": {
+          "$ref": "#/$defs/CapturedSubject"
+        },
+        "context": {
+          "$ref": "#/$defs/Context"
+        },
+        "artifacts": {
+          "$ref": "#/$defs/ArtifactSet"
+        },
+        "choices": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/Choice"
+          },
+          "propertyNames": {
+            "pattern": "^/"
+          }
+        },
+        "bindings": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "knowledge": {
+              "$ref": "#/$defs/ProviderBinding"
+            },
+            "messaging": {
+              "$ref": "#/$defs/ProviderBinding"
+            },
+            "tasks": {
+              "$ref": "#/$defs/ProviderBinding"
+            }
+          }
+        },
+        "messagingChoice": {
+          "$ref": "#/$defs/MessagingChoice"
+        },
+        "resources": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/ResourceRef"
+          }
+        },
+        "resourceBundles": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/ResourceArtifactRef"
+          },
+          "uniqueItems": true
+        },
+        "dispatch": {
+          "$ref": "#/$defs/Dispatch"
+        },
+        "helpers": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/ResolutionRef"
+          }
+        },
+        "evidence": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Origin"
+          }
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "capture",
+        "subject",
+        "context",
+        "artifacts",
+        "choices",
+        "bindings",
+        "messagingChoice",
+        "resources",
+        "resourceBundles",
+        "dispatch",
+        "helpers",
+        "evidence"
+      ],
+      "additionalProperties": false,
+      "allOf": [
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "capture": {
+                "const": "reconstructed"
+              }
+            },
+            "required": [
+              "capture"
+            ]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "evidence": {
+                "type": "array",
+                "minItems": 1
+              }
+            }
+          }
+        }
+      ]
+    },
+    "CapturedSessionBackend": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "backend": {
+              "const": "tmux"
+            },
+            "binary": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^/",
+              "description": "Runtime also requires a normalized absolute path without NUL."
+            },
+            "socket": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^/",
+              "description": "Runtime also requires a normalized absolute path without NUL."
+            },
+            "session": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^[A-Za-z0-9_-]+$"
+            }
+          },
+          "required": [
+            "backend",
+            "binary",
+            "socket",
+            "session"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "backend": {
+              "const": "herdr"
+            },
+            "binary": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^/",
+              "description": "Runtime also requires a normalized absolute path without NUL."
+            },
+            "socket": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^/",
+              "description": "Runtime also requires a normalized absolute path without NUL."
+            },
+            "protocol": {
+              "enum": [
+                20,
+                22
+              ]
+            }
+          },
+          "required": [
+            "backend",
+            "binary",
+            "socket",
+            "protocol"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "CapturedSessionTarget": {
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "backend": {
+              "const": "tmux"
+            },
+            "socket": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^/",
+              "description": "Runtime also requires a normalized absolute path without NUL."
+            },
+            "session": {
+              "type": "string",
+              "minLength": 1
+            },
+            "window": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "backend",
+            "socket",
+            "session",
+            "window"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "backend": {
+              "const": "herdr"
+            },
+            "binary": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^/",
+              "description": "Runtime also requires a normalized absolute path without NUL."
+            },
+            "socket": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^/",
+              "description": "Runtime also requires a normalized absolute path without NUL."
+            },
+            "protocol": {
+              "enum": [
+                20,
+                22
+              ]
+            },
+            "workspaceId": {
+              "type": "string",
+              "minLength": 1
+            },
+            "paneId": {
+              "type": "string",
+              "minLength": 1
+            },
+            "terminalId": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "backend",
+            "binary",
+            "socket",
+            "protocol",
+            "workspaceId",
+            "paneId",
+            "terminalId"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "CapturedSessionRequest": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "backend": {
+          "$ref": "#/$defs/CapturedSessionBackend"
+        },
+        "task": {
+          "type": "string"
+        },
+        "stopGraceMs": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 300000
+        }
+      },
+      "required": [
+        "schemaVersion"
+      ],
+      "additionalProperties": false
+    },
+    "CapturedNativeSessionAvailability": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "api": {
+          "type": "object",
+          "properties": {
+            "contract": {
+              "const": "oats.captured-session"
+            },
+            "version": {
+              "const": 2
+            },
+            "available": {
+              "const": true
+            },
+            "backends": {
+              "const": [
+                "tmux",
+                "herdr"
+              ]
+            }
+          },
+          "required": [
+            "contract",
+            "version",
+            "available",
+            "backends"
+          ],
+          "additionalProperties": false
+        },
+        "readiness": {
+          "type": "object",
+          "properties": {
+            "status": {
+              "const": "not-checked"
+            }
+          },
+          "required": [
+            "status"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "api",
+        "readiness"
+      ],
+      "additionalProperties": false,
+      "description": "Static callable interface availability only; no selected-record, provider, instance or host readiness is checked. Actual native action validation/receipts remain mandatory."
+    },
+    "Problem": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "string",
+          "minLength": 1
+        },
+        "message": {
+          "type": "string",
+          "minLength": 1
+        },
+        "origins": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Origin"
+          }
+        },
+        "target": {},
+        "details": {}
+      },
+      "required": [
+        "code",
+        "message",
+        "origins"
+      ],
+      "additionalProperties": false
+    },
+    "PackageRequest": {
+      "type": "object",
+      "properties": {
+        "source": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(?:git:.+|path:/.*|catalog:.+)$"
+        },
+        "path": {
+          "oneOf": [
+            {
+              "const": "."
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^(?![A-Za-z]:)(?!.*(?:^|/)\\.{1,2}(?:/|$))[^/\\\\\u0000]+(?:/[^/\\\\\u0000]+)*$"
+            }
+          ]
+        }
+      },
+      "required": [
+        "source",
+        "path"
+      ],
+      "additionalProperties": false
+    },
+    "Freshness": {
+      "type": "object",
+      "properties": {
+        "state": {
+          "enum": [
+            "refreshed",
+            "offline",
+            "failed",
+            "not-checked"
+          ]
+        },
+        "observedAt": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^(?:[0-9]{4}|[+-][0-9]{6})-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\\.[0-9]{3}Z$"
+            }
+          ]
+        },
+        "problems": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/Problem"
+          }
+        }
+      },
+      "required": [
+        "state",
+        "observedAt",
+        "problems"
+      ],
+      "additionalProperties": false
+    },
+    "Selection": {
+      "type": "object",
+      "properties": {
+        "request": {
+          "$ref": "#/$defs/PackageRequest"
+        },
+        "current": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^sha256-[a-f0-9]{64}$"
+            }
+          ]
+        },
+        "available": {
+          "oneOf": [
+            {
+              "type": "null"
+            },
+            {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "^sha256-[a-f0-9]{64}$"
+            }
+          ]
+        },
+        "freshness": {
+          "$ref": "#/$defs/Freshness"
+        }
+      },
+      "required": [
+        "request",
+        "current",
+        "available",
+        "freshness"
+      ],
+      "additionalProperties": false,
+      "allOf": [
+        {
+          "if": {
+            "type": "object",
+            "properties": {
+              "freshness": {
+                "type": "object",
+                "properties": {
+                  "state": {
+                    "const": "refreshed"
+                  }
+                },
+                "required": [
+                  "state"
+                ]
+              }
+            },
+            "required": [
+              "freshness"
+            ]
+          },
+          "then": {
+            "type": "object",
+            "properties": {
+              "available": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "^sha256-[a-f0-9]{64}$"
+              },
+              "freshness": {
+                "type": "object",
+                "properties": {
+                  "observedAt": {
+                    "type": "string",
+                    "minLength": 1
+                  }
+                }
+              }
+            }
+          }
+        }
+      ]
+    },
+    "Lock3": {
+      "type": "object",
+      "properties": {
+        "lockfileVersion": {
+          "const": 3
+        },
+        "artifactSets": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/ArtifactSet"
+          },
+          "propertyNames": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^sha256-[a-f0-9]{64}$"
+          }
+        },
+        "selections": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/Selection"
+          },
+          "propertyNames": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^sha256-[a-f0-9]{64}$"
+          }
+        }
+      },
+      "required": [
+        "lockfileVersion",
+        "artifactSets",
+        "selections"
+      ],
+      "additionalProperties": false
+    },
+    "ApprovalEntry": {
+      "type": "object",
+      "properties": {
+        "artifact": {
+          "$ref": "#/$defs/CapabilityArtifactRef"
+        },
+        "approved": {
+          "const": true
+        },
+        "provenance": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/OperatorOrigin"
+          },
+          "minItems": 1
+        }
+      },
+      "required": [
+        "artifact",
+        "approved",
+        "provenance"
+      ],
+      "additionalProperties": false
+    },
+    "ApprovalLedger": {
+      "type": "object",
+      "properties": {
+        "schemaVersion": {
+          "const": 1
+        },
+        "capabilities": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "object",
+            "additionalProperties": {
+              "$ref": "#/$defs/ApprovalEntry"
+            },
+            "propertyNames": {
+              "pattern": "^oats\\.tree-exec\\.v1:sha256-[a-f0-9]{64}$"
+            }
+          },
+          "propertyNames": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^[a-z0-9][a-z0-9._-]*$"
+          }
+        }
+      },
+      "required": [
+        "schemaVersion",
+        "capabilities"
+      ],
+      "additionalProperties": false
+    }
+  }
+}