@dynamicalsystems/idl 0.12.0 → 0.13.0

package/dist/index.mjs

@@ -974,7 +974,7 @@ const ProjectSourceSchema = closed({
 	repository: NonEmptyString,
 	revision: Type.String({ pattern: "^(?:[0-9a-f]{40}|[0-9a-f]{64})$" })
 });
-const UniquePaths = () => Type.Array(OrganizationDocumentPathSchema, { uniqueItems: true });
+const UniquePaths$1 = () => Type.Array(OrganizationDocumentPathSchema, { uniqueItems: true });
 const UniqueNames = () => Type.Array(NonEmptyString, { uniqueItems: true });
 /** Frozen compatibility shape. Version one is loaded only through the explicit
 * compatibility path; it is never silently reinterpreted as version two. */
@@ -1036,12 +1036,12 @@ const OrganizationRootSchema = closed({
 	})),
 	vocabulary: Type.Optional(OrganizationDocumentPathSchema),
 	admissions: Type.Optional(OrganizationDocumentPathSchema),
-	projects: Type.Optional(UniquePaths()),
-	capabilities: Type.Optional(UniquePaths()),
+	projects: Type.Optional(UniquePaths$1()),
+	capabilities: Type.Optional(UniquePaths$1()),
 	instructions: Type.Optional(Type.Array(OrganizationInstructionSchema)),
-	documents: Type.Optional(UniquePaths()),
+	documents: Type.Optional(UniquePaths$1()),
 	archive: Type.Optional(OrganizationDocumentPathSchema),
-	releases: Type.Optional(UniquePaths()),
+	releases: Type.Optional(UniquePaths$1()),
 	deployment: Type.Optional(OrganizationDocumentPathSchema),
 	source: Type.Optional(OrganizationSourceLocationSchema)
 });
@@ -1063,7 +1063,7 @@ const WorkspaceProfileSchema = closed({
 		Type.Literal("curated")
 	]), { uniqueItems: true }),
 	handling: closed({ required: Type.Boolean() }),
-	readinessChecks: UniquePaths()
+	readinessChecks: UniquePaths$1()
 });
 const ProjectMembershipSchema = closed({
 	schemaVersion: Type.Literal(1),
@@ -1140,6 +1140,888 @@ const organizationSourceV2 = {
 	}
 };
 //#endregion
+//#region src/extension/release.v1.ts
+const EXTENSION_RELEASE_PROFILE = "dsg.extension.release/1";
+const EXTENSION_RELEASE_CANONICALIZATION = "RFC8785-JCS-UTF8";
+const IdentifierSchema$1 = Type.String({ pattern: "^[a-z][a-z0-9-]*(?:[.-][a-z0-9]+)*$" });
+const IdentifierSet$1 = () => Type.Array(IdentifierSchema$1, { uniqueItems: true });
+const RequiredStrings$1 = () => Type.Array(NonEmptyString, {
+	minItems: 1,
+	uniqueItems: true
+});
+const ExtensionReleaseReferenceSchema = Reference;
+const ExtensionComponentKindSchema = Type.Union([
+	Type.Literal("workflow"),
+	Type.Literal("example"),
+	Type.Literal("contract"),
+	Type.Literal("job-class"),
+	Type.Literal("workload-artifact"),
+	Type.Literal("event-catalog"),
+	Type.Literal("connector"),
+	Type.Literal("module"),
+	Type.Literal("check"),
+	Type.Literal("vocabulary"),
+	Type.Literal("assurance"),
+	Type.Literal("documentation")
+]);
+const ExtensionComponentReferenceSchema = Reference;
+const ComponentProperties = {
+	id: IdentifierSchema$1,
+	reference: ExtensionComponentReferenceSchema,
+	mediaType: NonEmptyString,
+	required: Type.Boolean(),
+	dependsOn: IdentifierSet$1()
+};
+const ExtensionComponentSchema = closed({
+	...ComponentProperties,
+	kind: ExtensionComponentKindSchema
+});
+const ComputeComponentKindSchema = Type.Union([
+	Type.Literal("workflow"),
+	Type.Literal("example"),
+	Type.Literal("contract"),
+	Type.Literal("job-class"),
+	Type.Literal("workload-artifact"),
+	Type.Literal("event-catalog"),
+	Type.Literal("connector"),
+	Type.Literal("module"),
+	Type.Literal("check"),
+	Type.Literal("vocabulary"),
+	Type.Literal("assurance"),
+	Type.Literal("documentation")
+]);
+const ComputeComponentSchema = closed({
+	...ComponentProperties,
+	kind: ComputeComponentKindSchema
+});
+const NonComputeComponentKindSchema = Type.Union([
+	Type.Literal("workflow"),
+	Type.Literal("example"),
+	Type.Literal("contract"),
+	Type.Literal("event-catalog"),
+	Type.Literal("connector"),
+	Type.Literal("module"),
+	Type.Literal("check"),
+	Type.Literal("vocabulary"),
+	Type.Literal("assurance"),
+	Type.Literal("documentation")
+]);
+const NonComputeComponentSchema = closed({
+	...ComponentProperties,
+	kind: NonComputeComponentKindSchema
+});
+const ExtensionDependencyKindSchema = Type.Union([
+	Type.Literal("extension-release"),
+	Type.Literal("idl-package"),
+	Type.Literal("module-release"),
+	Type.Literal("law-release"),
+	Type.Literal("event-catalog"),
+	Type.Literal("example-release"),
+	Type.Literal("target-release")
+]);
+const ExtensionDependencySchema = closed({
+	id: IdentifierSchema$1,
+	kind: ExtensionDependencyKindSchema,
+	reference: Reference,
+	required: Type.Boolean()
+});
+/** Shared requirements contain no compute-only workload obligations. */
+const ExtensionRequirementsSchema = closed({
+	idlProfiles: Type.Array(NonEmptyString, { uniqueItems: true }),
+	roles: Type.Array(NonEmptyString, { uniqueItems: true }),
+	qualification: Type.Optional(Reference),
+	handling: Type.Union([
+		Type.Literal("public"),
+		Type.Literal("restricted"),
+		Type.Literal("confidential")
+	])
+});
+const ExtensionComputeRequirementsSchema = closed({
+	idlProfiles: Type.Array(NonEmptyString, { uniqueItems: true }),
+	roles: Type.Array(NonEmptyString, { uniqueItems: true }),
+	qualification: Type.Optional(Reference),
+	handling: Type.Union([
+		Type.Literal("public"),
+		Type.Literal("restricted"),
+		Type.Literal("confidential")
+	]),
+	supportedPlatforms: RequiredStrings$1(),
+	targets: Type.Array(Reference, { uniqueItems: true }),
+	isolation: Type.Union([Type.Literal("ephemeral"), Type.Literal("dedicated")]),
+	retention: Type.Union([
+		Type.Literal("ephemeral"),
+		Type.Literal("bounded"),
+		Type.Literal("durable")
+	]),
+	completion: Reference,
+	teardown: Reference,
+	evidence: Reference,
+	replay: Reference
+});
+const ExtensionBoundsSchema = closed({
+	maxDurationSeconds: SafeInt,
+	maxParallelism: SafeInt,
+	maxUsdMicroUnits: SafeInt
+});
+const ReleaseIdentity = {
+	profile: Type.Literal(EXTENSION_RELEASE_PROFILE),
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("extension-release"),
+	publisher: Orn,
+	name: IdentifierSchema$1,
+	version: Type.String({ pattern: "^(?:0|[1-9][0-9]*)\\.[0-9]+\\.[0-9]+$" }),
+	/** Derived from publisher, namespace, name, and version; never from this
+	* body's digest, so canonical hashing has no self-reference. */
+	releaseOrn: Orn,
+	namespace: NonEmptyString,
+	source: closed({
+		repository: NonEmptyString,
+		revision: Type.String({ pattern: "^(?:[0-9a-f]{40}|[0-9a-f]{64})$" })
+	}),
+	build: closed({
+		provenance: Reference,
+		sourceDigest: Hex64
+	}),
+	canonicalization: Type.Literal(EXTENSION_RELEASE_CANONICALIZATION),
+	dependencies: Type.Array(ExtensionDependencySchema, { uniqueItems: true })
+};
+const ComputeReleaseSchema = closed({
+	...ReleaseIdentity,
+	compute: Type.Literal(true),
+	components: Type.Array(ComputeComponentSchema, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	requirements: ExtensionComputeRequirementsSchema,
+	bounds: ExtensionBoundsSchema
+});
+const NonComputeReleaseSchema = closed({
+	...ReleaseIdentity,
+	compute: Type.Literal(false),
+	components: Type.Array(NonComputeComponentSchema, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	requirements: ExtensionRequirementsSchema
+});
+const ExtensionReleaseSchema = Type.Union([ComputeReleaseSchema, NonComputeReleaseSchema]);
+/** Detached publisher envelope. `release.sha256` and `bodySha256` both pin
+* the RFC 8785 JCS UTF-8 bytes of the semantic release body. */
+const ExtensionReleaseSignatureSchema = closed({
+	profile: Type.Literal(EXTENSION_RELEASE_PROFILE),
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("extension-release-signature"),
+	release: ExtensionReleaseReferenceSchema,
+	publisher: Orn,
+	publicKey: Hex64,
+	bodySha256: Hex64,
+	canonicalization: Type.Literal(EXTENSION_RELEASE_CANONICALIZATION),
+	signature: Type.String({ pattern: "^[0-9a-f]{128}$" }),
+	signedAt: UtcSecond
+});
+const extensionReleaseV1 = {
+	literal: EXTENSION_RELEASE_PROFILE,
+	rootDocument: "release",
+	documents: {
+		release: ExtensionReleaseSchema,
+		signature: ExtensionReleaseSignatureSchema
+	}
+};
+//#endregion
+//#region src/organization/release.v1.ts
+const ORGANIZATION_RELEASE_PROFILE = "dsg.organization.release/1";
+const ORGANIZATION_RELEASE_CANONICALIZATION = "RFC8785-JCS-UTF8";
+const Identifier = Type.String({ pattern: "^[a-z][a-z0-9-]*(?:[.-][a-z0-9]+)*$" });
+const Revision = Type.String({ pattern: "^(?:[0-9a-f]{40}|[0-9a-f]{64})$" });
+const Identifiers = () => Type.Array(Identifier, { uniqueItems: true });
+const References = () => Type.Array(Reference, { uniqueItems: true });
+const Evidence = () => Type.Array(Reference, {
+	minItems: 1,
+	uniqueItems: true
+});
+const Header = {
+	profile: Type.Literal(ORGANIZATION_RELEASE_PROFILE),
+	schemaVersion: Type.Literal(1)
+};
+const CompilerContractSchema = closed({
+	profile: Type.String({ pattern: "^dsg\\.[a-z0-9.-]+/[1-9][0-9]*$" }),
+	version: Type.String({ pattern: "^(?:0|[1-9][0-9]*)\\.(?:0|[1-9][0-9]*)\\.(?:0|[1-9][0-9]*)$" }),
+	implementation: Reference
+});
+const DependencyKindSchema = Type.Union([
+	Type.Literal("extension-release"),
+	Type.Literal("component"),
+	Type.Literal("idl-package"),
+	Type.Literal("module-release"),
+	Type.Literal("law-release"),
+	Type.Literal("definition"),
+	Type.Literal("workload-artifact"),
+	Type.Literal("event-catalog"),
+	Type.Literal("example"),
+	Type.Literal("project"),
+	Type.Literal("target")
+]);
+const DependencyLockEntrySchema = closed({
+	id: Identifier,
+	kind: DependencyKindSchema,
+	reference: Reference,
+	mediaType: NonEmptyString,
+	selectedMemberIds: Identifiers(),
+	dependsOn: Identifiers()
+});
+const DependencyLockSchema = closed({
+	...Header,
+	kind: Type.Literal("dependency-lock"),
+	canonicalization: Type.Literal(ORGANIZATION_RELEASE_CANONICALIZATION),
+	roots: Identifiers(),
+	entries: Type.Array(DependencyLockEntrySchema, { uniqueItems: true }),
+	compiler: CompilerContractSchema
+});
+const OrganizationReleaseMemberKindSchema = Type.Union([
+	Type.Literal("publication"),
+	Type.Literal("import"),
+	Type.Literal("capability-admission"),
+	Type.Literal("workflow-publication"),
+	Type.Literal("contract-check"),
+	Type.Literal("target-readiness"),
+	Type.Literal("setup-condition"),
+	Type.Literal("paid-execution-readiness")
+]);
+const OrganizationReleaseMemberSchema = closed({
+	id: Identifier,
+	kind: OrganizationReleaseMemberKindSchema,
+	required: Type.Boolean(),
+	acceptableDispositions: Type.Array(NonEmptyString, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	subject: Reference
+});
+const ComponentBindingSchema = closed({
+	id: Identifier,
+	kind: ExtensionComponentKindSchema,
+	reference: Reference
+});
+const BuildSelectionSchema = closed({
+	id: Identifier,
+	selection: Reference,
+	extensionRelease: Reference,
+	members: Type.Array(ComponentBindingSchema, {
+		minItems: 1,
+		uniqueItems: true
+	})
+});
+const BuildComponentSchema = closed({
+	extensionRelease: Reference,
+	memberId: Identifier,
+	kind: ExtensionComponentKindSchema,
+	reference: Reference,
+	mediaType: NonEmptyString
+});
+const OrganizationBuildSchema = closed({
+	...Header,
+	kind: Type.Literal("organization-build"),
+	organization: NonEmptyString,
+	canonicalization: Type.Literal(ORGANIZATION_RELEASE_CANONICALIZATION),
+	source: closed({
+		root: Reference,
+		revision: Revision
+	}),
+	facts: closed({
+		name: NonEmptyString,
+		purpose: NonEmptyString,
+		space: NonEmptyString
+	}),
+	workspaceProfile: Reference,
+	projects: Type.Array(closed({
+		id: Identifier,
+		membership: Reference,
+		revision: Revision
+	}), { uniqueItems: true }),
+	sourceDocuments: Type.Array(closed({
+		path: NonEmptyString,
+		sha256: Hex64,
+		mediaType: NonEmptyString
+	}), {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	selections: Type.Array(BuildSelectionSchema, { uniqueItems: true }),
+	components: Type.Array(BuildComponentSchema, { uniqueItems: true }),
+	typedReleases: Type.Array(DependencyLockEntrySchema, { uniqueItems: true }),
+	dependencyLock: Reference,
+	compiler: CompilerContractSchema,
+	instructions: References(),
+	handling: References(),
+	releaseDeclarations: References(),
+	releaseMembers: Type.Array(OrganizationReleaseMemberSchema, { uniqueItems: true })
+});
+const OrganizationReleaseSchema = closed({
+	...Header,
+	kind: Type.Literal("organization-release"),
+	id: Identifier,
+	organization: NonEmptyString,
+	build: Reference,
+	dependencyLock: Reference,
+	selections: Identifiers(),
+	members: Type.Array(OrganizationReleaseMemberSchema, {
+		minItems: 1,
+		uniqueItems: true
+	})
+});
+const ImportCommon = {
+	...Header,
+	kind: Type.Literal("import-disposition"),
+	installation: Orn,
+	build: Reference,
+	release: Reference,
+	subject: Reference,
+	observedAt: UtcSecond
+};
+const ImportDispositionSchema = Type.Union([
+	closed({
+		...ImportCommon,
+		status: Type.Literal("pending")
+	}),
+	closed({
+		...ImportCommon,
+		status: Type.Literal("verified"),
+		disposition: Type.Union([Type.Literal("published"), Type.Literal("digest-match")]),
+		evidence: Evidence()
+	}),
+	closed({
+		...ImportCommon,
+		status: Type.Literal("staged"),
+		disposition: Type.Literal("captured"),
+		evidence: Evidence()
+	}),
+	closed({
+		...ImportCommon,
+		status: Type.Literal("refused"),
+		disposition: Type.Union([
+			Type.Literal("digest-mismatch"),
+			Type.Literal("missing"),
+			Type.Literal("unsupported")
+		]),
+		reason: NonEmptyString,
+		evidence: Evidence()
+	})
+]);
+const ReleaseStatusSchema = Type.Union([
+	Type.Literal("active"),
+	Type.Literal("retired"),
+	Type.Literal("revoked")
+]);
+const ReleaseStatusObservationSchema = closed({
+	...Header,
+	kind: Type.Literal("release-status-observation"),
+	subject: Reference,
+	registry: Reference,
+	trustView: Reference,
+	status: ReleaseStatusSchema,
+	effectiveAt: UtcSecond,
+	observedAt: UtcSecond,
+	evidence: Evidence()
+});
+const ReleaseEligibilitySchema = closed({
+	...Header,
+	kind: Type.Literal("release-eligibility"),
+	release: Reference,
+	operation: Type.Union([
+		Type.Literal("resolve"),
+		Type.Literal("select"),
+		Type.Literal("import"),
+		Type.Literal("admit"),
+		Type.Literal("activate"),
+		Type.Literal("execute")
+	]),
+	observation: ReleaseStatusObservationSchema,
+	trustView: Reference,
+	activeSet: Type.Union([Reference, Type.Null()])
+});
+const ApprovedUseSchema = closed({
+	use: NonEmptyString,
+	binding: Reference
+});
+const AdmissionCommon = {
+	...Header,
+	kind: Type.Literal("admission-record"),
+	id: Identifier,
+	installation: Orn,
+	organization: NonEmptyString,
+	build: Reference,
+	release: Reference,
+	selectionId: Identifier,
+	extensionRelease: Reference,
+	evaluatingCase: Reference,
+	decision: Reference,
+	authority: Reference,
+	fence: Reference,
+	revision: SafeInt,
+	decidedAt: UtcSecond
+};
+const AdmissionRecordSchema = Type.Union([closed({
+	...AdmissionCommon,
+	status: Type.Literal("admitted"),
+	components: Type.Array(ComponentBindingSchema, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	approvedUses: Type.Array(ApprovedUseSchema, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	bindings: Evidence(),
+	evidence: Evidence()
+}), closed({
+	...AdmissionCommon,
+	status: Type.Literal("refused"),
+	components: Type.Array(ComponentBindingSchema, { uniqueItems: true }),
+	reason: NonEmptyString,
+	evidence: Evidence()
+})]);
+const AdmissionObservationCommon = {
+	...Header,
+	kind: Type.Literal("admission-status-observation"),
+	admission: Reference,
+	decision: Reference,
+	evidence: Evidence(),
+	observedAt: UtcSecond
+};
+const AdmissionStatusObservationSchema = Type.Union([
+	closed({
+		...AdmissionObservationCommon,
+		status: Type.Literal("suspended"),
+		reason: NonEmptyString
+	}),
+	closed({
+		...AdmissionObservationCommon,
+		status: Type.Literal("superseded"),
+		replacement: Reference
+	}),
+	closed({
+		...AdmissionObservationCommon,
+		status: Type.Literal("revoked"),
+		governedRevocation: Reference,
+		trustView: Reference,
+		reason: NonEmptyString
+	})
+]);
+const MemberObservationCommon = {
+	...Header,
+	kind: Type.Literal("member-observation"),
+	installation: Orn,
+	build: Reference,
+	release: Reference,
+	memberId: Identifier,
+	memberKind: OrganizationReleaseMemberKindSchema,
+	subject: Reference,
+	evidence: Evidence(),
+	observedAt: UtcSecond
+};
+const MemberObservationSchema = Type.Union([closed({
+	...MemberObservationCommon,
+	disposition: Type.Union([Type.Literal("ready"), Type.Literal("verified")])
+}), closed({
+	...MemberObservationCommon,
+	disposition: Type.Union([
+		Type.Literal("refused"),
+		Type.Literal("suspended"),
+		Type.Literal("revoked")
+	]),
+	reason: NonEmptyString
+})]);
+const ActiveMemberSchema = closed({
+	selectionId: Identifier,
+	memberId: Identifier,
+	extensionRelease: Reference,
+	components: Type.Array(ComponentBindingSchema, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	admission: Reference
+});
+const ActiveSetSchema = closed({
+	...Header,
+	kind: Type.Literal("active-set"),
+	installation: Orn,
+	organization: NonEmptyString,
+	release: Reference,
+	build: Reference,
+	predecessor: Type.Union([Reference, Type.Null()]),
+	members: Type.Array(ActiveMemberSchema, { uniqueItems: true }),
+	memberObservations: Evidence(),
+	policies: References(),
+	configuration: References(),
+	activatingCase: Reference,
+	authority: Reference,
+	activatingDecision: Reference,
+	fence: Reference,
+	revision: SafeInt,
+	activatedAt: UtcSecond
+});
+const CatalogEntryCommon = {
+	id: Identifier,
+	activeSet: Reference,
+	selectionId: Identifier,
+	memberId: Identifier,
+	extensionRelease: Reference,
+	workflow: Reference,
+	example: Type.Union([Reference, Type.Null()]),
+	jobClass: Type.Union([Reference, Type.Null()]),
+	workloadArtifact: Type.Union([Reference, Type.Null()]),
+	contracts: References(),
+	availabilityEvidence: Evidence()
+};
+const CatalogEntrySchema = Type.Union([closed({
+	...CatalogEntryCommon,
+	availability: Type.Literal("available")
+}), closed({
+	...CatalogEntryCommon,
+	availability: Type.Literal("unavailable"),
+	unavailableReason: NonEmptyString
+})]);
+const CatalogSchema = closed({
+	...Header,
+	kind: Type.Literal("catalog"),
+	activeSet: Reference,
+	entries: Type.Array(CatalogEntrySchema, { uniqueItems: true })
+});
+const BoundAttestationSchema = closed({
+	...Header,
+	kind: Type.Literal("bound-attestation"),
+	subject: Reference,
+	issuer: Orn,
+	evidence: Reference,
+	verification: Type.Union([
+		Type.Literal("publisher-signature"),
+		Type.Literal("registry-recognition"),
+		Type.Literal("source-provenance"),
+		Type.Literal("component-digest")
+	]),
+	observedAt: UtcSecond,
+	signature: NonEmptyString
+});
+const organizationReleaseV1 = {
+	literal: ORGANIZATION_RELEASE_PROFILE,
+	documents: {
+		dependencyLock: DependencyLockSchema,
+		organizationBuild: OrganizationBuildSchema,
+		importDisposition: ImportDispositionSchema,
+		releaseStatusObservation: ReleaseStatusObservationSchema,
+		releaseEligibility: ReleaseEligibilitySchema,
+		organizationRelease: OrganizationReleaseSchema,
+		admissionRecord: AdmissionRecordSchema,
+		admissionStatusObservation: AdmissionStatusObservationSchema,
+		memberObservation: MemberObservationSchema,
+		activeSet: ActiveSetSchema,
+		catalog: CatalogSchema,
+		boundAttestation: BoundAttestationSchema
+	}
+};
+//#endregion
+//#region src/organization/source.v3.ts
+const ORGANIZATION_SOURCE_V3_PROFILE = "dsg.organization.source/3";
+const IdentifierSchema = Type.String({ pattern: "^[a-z][a-z0-9-]*(?:[.-][a-z0-9]+)*$" });
+const UniqueIdentifiers = () => Type.Array(IdentifierSchema, {
+	minItems: 1,
+	uniqueItems: true
+});
+const IdentifierSet = () => Type.Array(IdentifierSchema, { uniqueItems: true });
+const UniquePaths = () => Type.Array(OrganizationDocumentPathSchema, { uniqueItems: true });
+const UniqueStrings = () => Type.Array(NonEmptyString, { uniqueItems: true });
+const OrganizationSourceProjectSchema = closed({
+	schemaVersion: Type.Literal(3),
+	kind: Type.Literal("project-membership"),
+	id: IdentifierSchema,
+	source: ProjectSourceSchema,
+	contract: OrganizationDocumentPathSchema,
+	handling: OrganizationDocumentPathSchema
+});
+const OrganizationSelectionDispositionSchema = closed({
+	kind: Type.Union([
+		Type.Literal("publication"),
+		Type.Literal("import"),
+		Type.Literal("admission"),
+		Type.Literal("target"),
+		Type.Literal("check"),
+		Type.Literal("setup"),
+		Type.Literal("paid-execution")
+	]),
+	required: Type.Boolean(),
+	acceptable: UniqueStrings()
+});
+const AuthoredOverlaySchema = closed({
+	id: IdentifierSchema,
+	document: OrganizationDocumentPathSchema,
+	sha256: Hex64,
+	mediaType: NonEmptyString
+});
+const CapabilitySelectionV3Schema = closed({
+	schemaVersion: Type.Literal(3),
+	kind: Type.Literal("capability-selection"),
+	id: IdentifierSchema,
+	release: ExtensionReleaseReferenceSchema,
+	memberIds: UniqueIdentifiers(),
+	origin: Type.Union([
+		Type.Literal("workspace"),
+		Type.Literal("official"),
+		Type.Literal("curated")
+	]),
+	dependencyLock: OrganizationDocumentPathSchema,
+	requiredDispositions: Type.Array(OrganizationSelectionDispositionSchema, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	authoredOverlays: Type.Array(AuthoredOverlaySchema, { uniqueItems: true })
+});
+const WorkspaceProfileV3Schema = closed({
+	schemaVersion: Type.Literal(3),
+	kind: Type.Literal("workspace-profile"),
+	profile: Type.Literal(ORGANIZATION_SOURCE_V3_PROFILE),
+	id: IdentifierSchema,
+	version: Type.String({ pattern: "^(?:0|[1-9][0-9]*)\\.[0-9]+\\.[0-9]+$" }),
+	requirements: closed({
+		facts: UniqueStrings(),
+		minimumProjects: Type.Integer({ minimum: 0 }),
+		requiredSelections: Type.Array(IdentifierSchema, { uniqueItems: true }),
+		instructions: Type.Boolean()
+	}),
+	allowedOrigins: Type.Array(Type.Union([
+		Type.Literal("workspace"),
+		Type.Literal("official"),
+		Type.Literal("curated")
+	]), {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	sourceChecks: UniquePaths()
+});
+/** A semantic dependency lock is a source document referenced by the root;
+* its lock bytes contain no Build self-reference or runtime observations. */
+const OrganizationDependencyLockSchema = DependencyLockSchema;
+const OrganizationSourceReleaseMemberSchema = closed({
+	id: IdentifierSchema,
+	kind: OrganizationReleaseMemberKindSchema,
+	required: Type.Boolean(),
+	acceptableDispositions: Type.Array(NonEmptyString, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	subject: OrganizationDocumentPathSchema
+});
+/** Source-only Organization Release declaration. Runtime status, admission,
+* activation, predecessor, and supersession belong to release records. */
+const OrganizationReleaseDeclarationSchema = closed({
+	schemaVersion: Type.Literal(3),
+	kind: Type.Literal("organization-release-declaration"),
+	id: IdentifierSchema,
+	dependencyLock: OrganizationDocumentPathSchema,
+	selections: IdentifierSet(),
+	members: Type.Array(OrganizationSourceReleaseMemberSchema, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	acceptance: closed({
+		requiredMembers: UniqueIdentifiers(),
+		acceptableDispositions: Type.Array(NonEmptyString, {
+			minItems: 1,
+			uniqueItems: true
+		})
+	})
+});
+const OrganizationRootV3Schema = closed({
+	schemaVersion: Type.Literal(3),
+	kind: Type.Literal("organization"),
+	org: NonEmptyString,
+	space: OrganizationSpaceSchema,
+	purpose: NonEmptyString,
+	profile: OrganizationDocumentPathSchema,
+	projects: UniquePaths(),
+	capabilities: UniquePaths(),
+	dependencyLocks: UniquePaths(),
+	releases: UniquePaths(),
+	instructions: UniquePaths(),
+	documents: UniquePaths(),
+	archive: Type.Optional(OrganizationDocumentPathSchema),
+	source: Type.Optional(OrganizationSourceLocationSchema)
+});
+const organizationSourceV3 = {
+	literal: ORGANIZATION_SOURCE_V3_PROFILE,
+	rootDocument: "organization",
+	documents: {
+		organization: OrganizationRootV3Schema,
+		profile: WorkspaceProfileV3Schema,
+		project: OrganizationSourceProjectSchema,
+		capabilitySelection: CapabilitySelectionV3Schema,
+		dependencyLock: OrganizationDependencyLockSchema,
+		releaseMember: OrganizationSourceReleaseMemberSchema,
+		releaseDeclaration: OrganizationReleaseDeclarationSchema
+	}
+};
+//#endregion
+//#region src/run/job-class.v1.ts
+const JOB_CLASS_PROFILE = "dsg.run.job-class/1";
+const RequiredReferences = () => Type.Array(Reference, {
+	minItems: 1,
+	uniqueItems: true
+});
+const RequiredStrings = () => Type.Array(NonEmptyString, {
+	minItems: 1,
+	uniqueItems: true
+});
+const JobClassBoundsSchema = closed({
+	maxRunSeconds: SafeInt,
+	maxGpuSeconds: SafeInt,
+	maxParallelism: SafeInt,
+	maxUsdMicroUnits: SafeInt
+});
+const JobClassSchema = closed({
+	profile: Type.Literal(JOB_CLASS_PROFILE),
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("job-class"),
+	id: NonEmptyString,
+	executor: NonEmptyString,
+	mode: NonEmptyString,
+	modeEnvironmentVariable: NonEmptyString,
+	workloadArtifact: Reference,
+	platforms: RequiredStrings(),
+	isolation: Type.Union([Type.Literal("ephemeral"), Type.Literal("dedicated")]),
+	inputContracts: RequiredReferences(),
+	outputContracts: RequiredReferences(),
+	eventCatalog: Reference,
+	decisionRequirements: RequiredReferences(),
+	bounds: JobClassBoundsSchema,
+	handling: Type.Union([
+		Type.Literal("public"),
+		Type.Literal("restricted"),
+		Type.Literal("confidential")
+	]),
+	retention: Type.Union([
+		Type.Literal("ephemeral"),
+		Type.Literal("bounded"),
+		Type.Literal("durable")
+	]),
+	completion: Reference,
+	teardown: Reference,
+	evidence: Reference,
+	replay: Reference
+});
+const jobClassV1 = {
+	literal: JOB_CLASS_PROFILE,
+	rootDocument: "jobClass",
+	documents: { jobClass: JobClassSchema }
+};
+//#endregion
+//#region src/run/workload-artifact.v1.ts
+const WORKLOAD_ARTIFACT_PROFILE = "dsg.run.workload-artifact/1";
+const OciRepository = Type.String({ pattern: "^(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\\.)*[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?::[1-9][0-9]{0,4})?/[a-z0-9]+(?:[._-][a-z0-9]+)*(?:/[a-z0-9]+(?:[._-][a-z0-9]+)*)*$" });
+const WorkloadSourceSchema = closed({
+	repository: NonEmptyString,
+	revision: Type.String({ pattern: "^(?:[0-9a-f]{40}|[0-9a-f]{64})$" }),
+	sourceDigest: Hex64
+});
+const OciPlatformSchema = closed({
+	os: NonEmptyString,
+	architecture: NonEmptyString,
+	variant: Type.Optional(NonEmptyString)
+});
+const WorkloadArtifactSchema = closed({
+	profile: Type.Literal(WORKLOAD_ARTIFACT_PROFILE),
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("workload-artifact"),
+	id: NonEmptyString,
+	format: Type.Literal("oci-image"),
+	source: WorkloadSourceSchema,
+	index: Type.Union([Type.Null(), closed({
+		sha256: Hex64,
+		mediaType: Type.Union([Type.Literal("application/vnd.oci.image.index.v1+json"), Type.Literal("application/vnd.docker.distribution.manifest.list.v2+json")])
+	})]),
+	executable: closed({
+		repository: OciRepository,
+		platform: OciPlatformSchema,
+		manifest: closed({
+			sha256: Hex64,
+			mediaType: Type.Union([Type.Literal("application/vnd.oci.image.manifest.v1+json"), Type.Literal("application/vnd.docker.distribution.manifest.v2+json")])
+		}),
+		config: closed({
+			sha256: Hex64,
+			mediaType: Type.Union([Type.Literal("application/vnd.oci.image.config.v1+json"), Type.Literal("application/vnd.docker.container.image.v1+json")])
+		})
+	}),
+	entrypoint: Type.Array(NonEmptyString, { minItems: 1 })
+});
+const WorkloadArtifactProvenanceSchema = closed({
+	profile: Type.Literal(WORKLOAD_ARTIFACT_PROFILE),
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("workload-artifact-provenance"),
+	artifact: Reference,
+	source: WorkloadSourceSchema,
+	build: Reference,
+	transportArchiveSha256: Hex64,
+	observedAt: UtcSecond,
+	evidence: Type.Array(Reference, {
+		minItems: 1,
+		uniqueItems: true
+	})
+});
+const workloadArtifactV1 = {
+	literal: WORKLOAD_ARTIFACT_PROFILE,
+	rootDocument: "workloadArtifact",
+	documents: {
+		workloadArtifact: WorkloadArtifactSchema,
+		provenance: WorkloadArtifactProvenanceSchema
+	}
+};
+//#endregion
+//#region src/run/execution-binding.v1.ts
+const EXECUTION_BINDING_PROFILE = "dsg.run.execution-binding/1";
+const ExecutionBindingSchema = closed({
+	profile: Type.Literal(EXECUTION_BINDING_PROFILE),
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("execution-binding"),
+	installation: Orn,
+	operation: Reference,
+	activeSet: Reference,
+	admission: Reference,
+	organizationRelease: Reference,
+	organizationBuild: Reference,
+	selection: Reference,
+	extensionRelease: Reference,
+	workflow: Reference,
+	jobClass: Reference,
+	workloadArtifact: Reference,
+	executableManifestSha256: Hex64,
+	target: Reference,
+	eventCatalog: Reference,
+	law: Reference,
+	reservation: Reference,
+	trustView: Reference
+});
+const ExecutionRequestEnvelopeSchema = closed({
+	profile: Type.Literal(EXECUTION_BINDING_PROFILE),
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("execution-request-envelope"),
+	operation: OperationRequestSchema,
+	binding: ExecutionBindingSchema,
+	jobClass: JobClassSchema,
+	workloadArtifact: WorkloadArtifactSchema,
+	workloadArtifactProvenance: WorkloadArtifactProvenanceSchema,
+	admission: AdmissionRecordSchema,
+	activeSet: ActiveSetSchema,
+	selection: BuildSelectionSchema,
+	catalogEntry: CatalogEntrySchema,
+	releaseEligibility: ReleaseEligibilitySchema
+});
+const executionBindingV1 = {
+	literal: EXECUTION_BINDING_PROFILE,
+	rootDocument: "executionBinding",
+	documents: {
+		executionBinding: ExecutionBindingSchema,
+		executionRequestEnvelope: ExecutionRequestEnvelopeSchema
+	}
+};
+//#endregion
 //#region src/index.ts
 /** Every profile this version of the package defines, keyed by literal.
 * Profile modules are added here as they are extracted; the rules test
@@ -1164,9 +2046,15 @@ const PROFILES = {
 	[bootstrapV1.literal]: bootstrapV1,
 	[ordinaryAuthorityV1.literal]: ordinaryAuthorityV1,
 	[standingOrderActivationV1.literal]: standingOrderActivationV1,
-	[organizationSourceV2.literal]: organizationSourceV2
+	[organizationSourceV2.literal]: organizationSourceV2,
+	[extensionReleaseV1.literal]: extensionReleaseV1,
+	[organizationSourceV3.literal]: organizationSourceV3,
+	[organizationReleaseV1.literal]: organizationReleaseV1,
+	[jobClassV1.literal]: jobClassV1,
+	[workloadArtifactV1.literal]: workloadArtifactV1,
+	[executionBindingV1.literal]: executionBindingV1
 };
 //#endregion
-export { ADOPTION_FACT_PROFILE, AcceptedSchema, AdoptionFactSchema, BOOTSTRAP_PROFILE, BootstrapActionSchema, BootstrapIntentSchema, CapabilityOriginSchema, CapabilitySelectionSchema, DECISION_PROFILE, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, DispatchConsumeRequestSchema, DispatchLeaseSchema, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, EventSchema, EventStreamSealSchema, ExecutionDocumentSchema, ExecutionLawSchema, ExecutionResourcesSchema, ExperimentRefSchema, GOOGLE_IDENTITY_PROFILE, GOOGLE_SIGN_IN_ISSUER, GoogleIdentitySchema, Hex64, IDENTITY_BINDING_PROFILE, IdentityBindingSchema, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, ORGANIZATION_SOURCE_PROFILE, OperationBeforeSchema, OperationCleanupSchema, OperationCostSchema, OperationEvidenceSchema, OperationExecutionSchema, OperationRequestSchema, OperationStatusSchema, OrdinaryAuthoritySchema, OrganizationDocumentPathSchema, OrganizationInstructionSchema, OrganizationRootSchema, OrganizationRootV1Schema, OrganizationSourceLocationSchema, OrganizationSpaceSchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, PersonReference, ProjectMembershipSchema, ProjectSourceSchema, REFUSAL_PROFILE, REFUSAL_V2_PROFILE, REFUSAL_V3_PROFILE, REQUEST_PROFILE, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, RUN_SUMMARY_PROFILE, ReadbackSchema, Reference, RefusalCodeSchema, RefusalCodeV2Schema, RefusalCodeV3Schema, RefusalSchema, RefusalStageV2Schema, RefusalStageV3Schema, RefusalV2Schema, RefusalV3Schema, ReleaseDeclarationSchema, ReleaseMemberKindSchema, RequestCeilingsSchema, ResourceDescriptorSchema, RevocationPointerSchema, RevocationSchema, RunDecisionSchema, RunRequestSchema, RunSummaryDecisionSchema, RunSummarySchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, STANDING_ORDER_ACTIVATION_EVENT_KIND, STANDING_ORDER_ACTIVATION_PROFILE, SafeInt, SignedBootstrapIntentSchema, SignedLawBundleSchema, SignedStandingOrderActivationSchema, StandingOrderActivationEventSchema, StandingOrderActivationSchema, StandingOrderModeSchema, UtcSecond, WorkspaceProfileSchema, closed };
+export { ADOPTION_FACT_PROFILE, AcceptedSchema, ActiveMemberSchema, ActiveSetSchema, AdmissionRecordSchema, AdmissionStatusObservationSchema, AdoptionFactSchema, ApprovedUseSchema, AuthoredOverlaySchema, BOOTSTRAP_PROFILE, BootstrapActionSchema, BootstrapIntentSchema, BoundAttestationSchema, BuildComponentSchema, BuildSelectionSchema, CapabilityOriginSchema, CapabilitySelectionSchema, CapabilitySelectionV3Schema, CatalogEntrySchema, CatalogSchema, CompilerContractSchema, ComponentBindingSchema, DECISION_PROFILE, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, DependencyKindSchema, DependencyLockEntrySchema, DependencyLockSchema, DispatchConsumeRequestSchema, DispatchLeaseSchema, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTION_BINDING_PROFILE, EXECUTOR_PROTOCOL_VERSION, EXTENSION_RELEASE_CANONICALIZATION, EXTENSION_RELEASE_PROFILE, EventSchema, EventStreamSealSchema, ExecutionBindingSchema, ExecutionDocumentSchema, ExecutionLawSchema, ExecutionRequestEnvelopeSchema, ExecutionResourcesSchema, ExperimentRefSchema, ExtensionBoundsSchema, ExtensionComponentKindSchema, ExtensionComponentReferenceSchema, ExtensionComponentSchema, ExtensionComputeRequirementsSchema, ExtensionDependencyKindSchema, ExtensionDependencySchema, ExtensionReleaseReferenceSchema, ExtensionReleaseSchema, ExtensionReleaseSignatureSchema, ExtensionRequirementsSchema, GOOGLE_IDENTITY_PROFILE, GOOGLE_SIGN_IN_ISSUER, GoogleIdentitySchema, Hex64, IDENTITY_BINDING_PROFILE, IdentityBindingSchema, ImportDispositionSchema, JOB_CLASS_PROFILE, JobClassBoundsSchema, JobClassSchema, LIFECYCLE_KINDS, MemberObservationSchema, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, ORGANIZATION_RELEASE_CANONICALIZATION, ORGANIZATION_RELEASE_PROFILE, ORGANIZATION_SOURCE_PROFILE, ORGANIZATION_SOURCE_V3_PROFILE, OciPlatformSchema, OperationBeforeSchema, OperationCleanupSchema, OperationCostSchema, OperationEvidenceSchema, OperationExecutionSchema, OperationRequestSchema, OperationStatusSchema, OrdinaryAuthoritySchema, OrganizationBuildSchema, OrganizationDependencyLockSchema, OrganizationDocumentPathSchema, OrganizationInstructionSchema, OrganizationReleaseDeclarationSchema, OrganizationReleaseMemberKindSchema, OrganizationReleaseMemberSchema, OrganizationReleaseSchema, OrganizationRootSchema, OrganizationRootV1Schema, OrganizationRootV3Schema, OrganizationSelectionDispositionSchema, OrganizationSourceLocationSchema, OrganizationSourceProjectSchema, OrganizationSourceReleaseMemberSchema, OrganizationSpaceSchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, PersonReference, ProjectMembershipSchema, ProjectSourceSchema, REFUSAL_PROFILE, REFUSAL_V2_PROFILE, REFUSAL_V3_PROFILE, REQUEST_PROFILE, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, RUN_SUMMARY_PROFILE, ReadbackSchema, Reference, RefusalCodeSchema, RefusalCodeV2Schema, RefusalCodeV3Schema, RefusalSchema, RefusalStageV2Schema, RefusalStageV3Schema, RefusalV2Schema, RefusalV3Schema, ReleaseDeclarationSchema, ReleaseEligibilitySchema, ReleaseMemberKindSchema, ReleaseStatusObservationSchema, ReleaseStatusSchema, RequestCeilingsSchema, ResourceDescriptorSchema, RevocationPointerSchema, RevocationSchema, RunDecisionSchema, RunRequestSchema, RunSummaryDecisionSchema, RunSummarySchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, STANDING_ORDER_ACTIVATION_EVENT_KIND, STANDING_ORDER_ACTIVATION_PROFILE, SafeInt, SignedBootstrapIntentSchema, SignedLawBundleSchema, SignedStandingOrderActivationSchema, StandingOrderActivationEventSchema, StandingOrderActivationSchema, StandingOrderModeSchema, UtcSecond, WORKLOAD_ARTIFACT_PROFILE, WorkloadArtifactProvenanceSchema, WorkloadArtifactSchema, WorkloadSourceSchema, WorkspaceProfileSchema, WorkspaceProfileV3Schema, closed };
 
 //# sourceMappingURL=index.mjs.map