@openship/protocol 0.0.1

package/dist/skill/references/openship-sources.md

@@ -0,0 +1,143 @@
+# OpenShip Sources v1
+
+OpenShip Sources lets a running project publish the exact source snapshot that produced it. A client starting with only the origin can retrieve, verify, and materialize that snapshot without a repository provider or version-control history.
+
+Read [openship.md](openship.md) first for discovery, transport, and caching rules.
+
+## Endpoints
+
+Discovery advertises two required and three optional URLs:
+
+| Link | Required | Meaning |
+|---|---:|---|
+| `manifest` | Yes | Project identity and file metadata, without content. |
+| `bundle` | Yes | Every file's encoded content in one JSON document. |
+| `file` | No | Raw content for one manifest path. |
+| `archive` | No | The manifest file set as a compressed archive. |
+| `instructions` | No | Plain-language project-specific retrieval guidance. |
+
+All reads are public, CORS-readable GET requests.
+
+## Manifest
+
+```json
+{
+  "openship": "1.0",
+  "capability": "sources",
+  "generatedAt": "2026-08-21T12:00:00.000Z",
+  "digest": "sha256:1c413f...",
+  "project": {
+    "name": "Example",
+    "description": "An example project.",
+    "homepage": "https://example.com",
+    "repository": "https://github.com/example/example",
+    "license": "MIT"
+  },
+  "totals": { "files": 2, "bytes": 42 },
+  "files": [
+    {
+      "path": "app/page.tsx",
+      "size": 30,
+      "sha256": "0f1e2d...",
+      "encoding": "utf-8",
+      "mediaType": "text/plain; charset=utf-8",
+      "type": "file"
+    }
+  ]
+}
+```
+
+Required members are `openship`, `capability`, `digest`, `project`, `totals`, and `files`. Project name and description are required. Repository, commit, stack, structure, setup, runtime, environment-variable names, ignore rules, generation time, lineage, and other metadata are optional.
+
+See [schemas/sources-manifest.schema.json](schemas/sources-manifest.schema.json).
+
+### File entries
+
+Every entry MUST contain:
+
+- `path`: a repository-relative NFC string using `/` separators.
+- `size`: the raw byte length.
+- `sha256`: 64 lowercase hexadecimal characters over the raw bytes.
+- `encoding`: `utf-8` or `base64` for JSON transport.
+- `mediaType`: the media type used by a file endpoint.
+- `type`: `file` or `symlink`.
+
+Paths MUST NOT begin with `/`, contain `\`, contain an empty, `.` or `..` segment, contain a NUL byte, or exceed 512 UTF-8 bytes. Paths MUST be unique and sorted by ascending UTF-8 bytes.
+
+A symlink MUST include its repository-relative `target`. Its size and SHA-256 describe the bytes served by Bundle and File after resolving the declared target. An archive MAY preserve the link itself.
+
+### Optional metadata
+
+An `env` array contains environment-variable names only. It MUST NOT contain values. Commit metadata is informational: if a working tree was dirty, `commit.dirty` MUST be true and clients MUST NOT treat the commit SHA as the snapshot identity. The Sources digest is authoritative.
+
+## Bundle
+
+```json
+{
+  "openship": "1.0",
+  "capability": "sources",
+  "digest": "sha256:1c413f...",
+  "files": {
+    "app/page.tsx": {
+      "encoding": "utf-8",
+      "content": "export default function Page() {}\n"
+    },
+    "public/logo.png": {
+      "encoding": "base64",
+      "content": "iVBORw0KGgo..."
+    }
+  }
+}
+```
+
+The Bundle `digest` MUST equal the Manifest digest. Its file keys MUST exactly equal the Manifest paths. Each entry's encoding MUST match its Manifest entry.
+
+UTF-8 content MUST survive an encode/decode round trip. Base64 MUST use the standard alphabet and decode canonically; padded and unpadded input MAY be accepted, but producers SHOULD emit padded base64.
+
+See [schemas/sources-bundle.schema.json](schemas/sources-bundle.schema.json).
+
+## Digest
+
+Compute the snapshot digest from Manifest file entries sorted by the UTF-8 bytes of `path`:
+
+```text
+digest = "sha256:" + SHA256(
+  concat(path + "\0" + sha256_hex + "\n")
+)
+```
+
+`sha256_hex` is the lowercase, unprefixed file hash. Size, encoding, media type, file type, target, project metadata, and generation time do not enter the digest.
+
+Two conforming snapshots with the same digest contain the same paths and raw bytes. The digest does not claim that unlisted files do not exist on the server; publication safety comes from the declared file-set requirement.
+
+## Declared file set
+
+A producer MUST derive the published set from a fail-closed declaration. A checked-in manifest, a version-control index, or another explicit allowlist is acceptable. An unconstrained directory walk is not.
+
+The protocol does not mandate a checked-in `openship.json`. A project MAY use one as its implementation source of truth. Generated payload files that describe the snapshot MAY be excluded from the snapshot to avoid self-reference.
+
+Regardless of the declaration, a producer MUST refuse secret-shaped paths such as private environment files, credentials, private keys, dependency caches, and version-control internals.
+
+## File and archive retrieval
+
+A File endpoint MUST compare the requested path against the Manifest as an exact string. It MUST NOT resolve an arbitrary URL path against a filesystem. Unknown paths return `404`.
+
+An Archive MUST contain exactly the Manifest path set. It SHOULD preserve declared symlinks and file modes where practical. Archive bytes do not affect the Sources digest.
+
+## Consumer verification
+
+A conforming consumer:
+
+1. Fetches discovery, Manifest, and Bundle.
+2. Validates both JSON documents.
+3. Confirms sorted unique safe paths and exact Manifest/Bundle key equality.
+4. Decodes every file and verifies byte size and SHA-256.
+5. Recomputes and compares the snapshot digest.
+6. Writes only verified paths beneath a chosen empty destination.
+
+A consumer MUST finish validation before executing any retrieved code.
+
+## Security
+
+Serving Sources makes every included byte public. Producers MUST NOT publish secrets, environment values, signing keys, private deployment configuration, or data exports. File selection is the primary security boundary; filters and pattern scans are defense in depth.
+

package/dist/skill/references/openship-systems.md

@@ -0,0 +1,165 @@
+# OpenShip Systems v1
+
+OpenShip Systems is the advanced OpenShip capability. It publishes one self-contained JSON document containing a complete Sources snapshot, a typed architecture graph, and optional context for humans and agents.
+
+Systems is JSON-only in v1. Legacy directory or YAML bundles are not canonical OpenShip Systems representations.
+
+## Top-level document
+
+```json
+{
+  "openship": "1.0",
+  "capability": "systems",
+  "source": {
+    "manifest": { "openship": "1.0", "capability": "sources", "digest": "sha256:..." },
+    "bundle": { "openship": "1.0", "capability": "sources", "digest": "sha256:...", "files": {} }
+  },
+  "system": {
+    "id": "example-system",
+    "name": "Example system",
+    "rootNodeId": "s.root",
+    "nodes": [],
+    "edges": []
+  }
+}
+```
+
+`source.manifest` and `source.bundle` MUST form a valid, complete Sources snapshot. External URLs or omitted contents are not self-contained and are non-conformant.
+
+See [schemas/systems.schema.json](schemas/systems.schema.json).
+
+## Nodes and containment
+
+Node kinds are closed in v1:
+
+| Kind | Meaning |
+|---|---|
+| `Root` | The logical boundary of the described system. |
+| `Host` | An execution environment or external platform. |
+| `Container` | A grouped runtime unit hosted by a Host. |
+| `Process` | A running service or executable component. |
+| `Library` | A reusable code dependency outside runtime containment. |
+
+Canonical node shape:
+
+```json
+{
+  "id": "p.api",
+  "kind": "Process",
+  "name": "API",
+  "parentId": "h.runtime",
+  "sourceSelectors": ["apps/api/**", "packages/contracts/index.ts"],
+  "metadata": { "runtime": "node", "ownership": "first_party" }
+}
+```
+
+Rules:
+
+- Every node has `metadata.ownership`, whose value is `first_party` or `third_party`.
+- `first_party` means the system publisher owns or controls the component's implementation or operation. `third_party` means an external provider owns or controls it.
+- Exactly one node has kind `Root`; its ID equals `rootNodeId` and it has no parent.
+- Every Host has the Root as parent.
+- Every Container has a Host parent.
+- Every Process has a Host or Container parent.
+- Library has no parent. Process and Library cannot contain children.
+- IDs are unique and match `^[A-Za-z0-9._:-]+$`.
+- The containment graph is acyclic.
+- Metadata is open-ended beyond the required, typed `ownership` member. Boundary, ID prefixes, host naming, and other metadata are not required by v1.
+
+### Source selectors
+
+`sourceSelectors` is optional. An exact path selects itself. A selector ending in `/**` selects that directory and descendants. No other wildcard syntax is defined.
+
+Every selector MUST match at least one Manifest path. Multiple nodes MAY select the same path and some source paths MAY remain unassigned.
+
+## Edges
+
+Edge types are closed in v1:
+
+| Type | Source | Target | Cycle rule |
+|---|---|---|---|
+| `Runtime` | Process | Process or Container | Cycles allowed. |
+| `Dataflow` | Process | Process or Container | Projected graph must be acyclic. |
+| `Dependency` | Process | Library | Graph must be acyclic. |
+
+```json
+{
+  "id": "e.api.database",
+  "type": "Runtime",
+  "fromNodeId": "p.api",
+  "toNodeId": "p.database",
+  "metadata": { "protocol": "pgwire", "layer7": "postgresql-sql" }
+}
+```
+
+Root and Host cannot be edge endpoints under these rules. A Container target represents an opaque routing boundary.
+
+## Optional context
+
+`system.context` MAY contain concerns, shared documents, matrix assignments, system prompts, and node-local artifacts. Omitting context does not reduce graph conformance.
+
+### Concerns
+
+Concerns are explicitly declared. The recommended interoperable vocabulary is:
+
+1. `Features`
+2. `General Specs`
+3. `General Skills`
+4. `Data Model`
+5. `Interfaces`
+6. `Connectivity`
+7. `Security`
+8. `Implementation`
+9. `Deployment`
+
+Projects MAY use a subset and MAY declare additional concerns. Names are case-sensitive.
+
+### Documents, skills, and prompts
+
+Shared input kinds are `Document`, `Skill`, and `Prompt`:
+
+```json
+{
+  "kind": "Document",
+  "hash": "sha256:...",
+  "title": "Public API contract",
+  "language": "en",
+  "text": "...",
+  "supersedes": "sha256:..."
+}
+```
+
+Compute the hash from UTF-8 bytes of:
+
+```text
+kind + "\n" + title + "\n" + language + "\n" + text
+```
+
+`supersedes` is excluded. Supersession chains MUST be acyclic. Missing predecessors are allowed so a snapshot need not contain its entire history.
+
+Matrix assignments connect a node, a declared concern, and one or more `Document` or `Skill` hashes. References MUST resolve to documents of the corresponding kind.
+
+Prompts are not ordinary matrix references. `systemPromptRefs` belongs to context, references only `Prompt` documents, and applies only to the Root.
+
+### Artifacts
+
+Artifact types are `Summary`, `Docs`, and `Code`. Each belongs to one node and one declared concern.
+
+- Summary and Docs carry UTF-8 `text` and optional language.
+- Code carries `sourcePaths` that resolve to Manifest files.
+- Code MUST NOT duplicate file contents already present in the embedded Bundle.
+
+Artifact IDs are unique within the system.
+
+## Validation order
+
+A consumer SHOULD validate in this order:
+
+1. Top-level schema and embedded Sources.
+2. Node IDs, root, containment, and parent kinds.
+3. Edge endpoints and cycle rules.
+4. Source selectors.
+5. Concern declarations and document hashes.
+6. Matrix, prompt, artifact, and supersession references.
+
+Unknown metadata keys MUST be preserved. Unknown node, edge, document, or artifact kinds are invalid in v1.

package/dist/skill/references/openship.md

@@ -0,0 +1,125 @@
+# OpenShip v1
+
+Status: Draft v1  
+Protocol version: `1.0`
+
+OpenShip is a public interface between a running project and the people or agents that want to understand, reproduce, or improve it. It has three capabilities:
+
+1. **Sources** publishes an integrity-checked source snapshot.
+2. **Changes** accepts a patch against a Sources digest and produces an isolated candidate origin.
+3. **Systems** publishes a self-contained JSON description of source, architecture, infrastructure, and optional agent context.
+
+Sources is the foundation. Changes depends on Sources. Systems embeds a complete Sources snapshot but does not require Changes.
+
+The key words MUST, MUST NOT, SHOULD, SHOULD NOT, and MAY are normative.
+
+## Design goals
+
+- Start from an origin, not from a repository provider.
+- Use plain HTTP and JSON that small clients can implement.
+- Make source identity independently verifiable.
+- Keep public reading separate from permission to change or deploy.
+- Let simple projects stop at Sources while advanced projects add Systems.
+
+OpenShip does not prove who owns an origin or authored a source tree. A digest proves that two snapshots contain the same bytes. Identity and signed provenance may be layered on separately.
+
+## Common envelope
+
+Every OpenShip JSON document MUST contain:
+
+```json
+{
+  "openship": "1.0",
+  "capability": "discovery"
+}
+```
+
+`capability` is one of `discovery`, `sources`, `changes`, or `systems`. A Changes error or status document remains capability `changes`.
+
+Within major version 1, producers MAY add members without changing existing meanings. Consumers MUST ignore unknown members they do not need and SHOULD preserve them when transforming a document.
+
+## Public discovery
+
+An OpenShip origin MUST serve:
+
+```text
+GET /.well-known/openship.json
+```
+
+The response MUST be unauthenticated JSON, MUST allow cross-origin reads with `Access-Control-Allow-Origin: *`, and MUST contain absolute HTTPS URLs outside local development.
+
+```json
+{
+  "openship": "1.0",
+  "capability": "discovery",
+  "project": {
+    "name": "Example",
+    "description": "A short description of the running project."
+  },
+  "skill": "https://example.com/openship/file/skills/openship/SKILL.md",
+  "capabilities": {
+    "sources": {
+      "manifest": "https://example.com/openship/manifest.json",
+      "bundle": "https://example.com/openship/bundle.json",
+      "file": "https://example.com/openship/file/{path}",
+      "archive": "https://example.com/openship/source.tar.gz",
+      "instructions": "https://example.com/openship/agent.txt"
+    },
+    "changes": {
+      "policy": "https://example.com/openship/policy.json",
+      "submit": "https://example.com/openship/changes",
+      "status": "https://example.com/openship/changes/{changeId}"
+    },
+    "systems": {
+      "document": "https://example.com/openship/system.json"
+    }
+  }
+}
+```
+
+Requirements:
+
+- `project`, `capabilities`, and `capabilities.sources` are REQUIRED.
+- `project.name` and `project.description` are REQUIRED.
+- `sources.manifest` and `sources.bundle` are REQUIRED.
+- `changes`, `systems`, and `skill` are OPTIONAL and MUST be omitted when unavailable.
+- Changes MUST NOT be advertised without Sources.
+- `file` and `status` are URI templates with exactly the named expansion.
+- A project implementing Sources and Changes but not Systems simply omits `capabilities.systems`.
+
+See [schemas/discovery.schema.json](schemas/discovery.schema.json).
+
+## Access and transport
+
+Discovery, Sources, and Systems reads MUST NOT require cookies, credentials, custom headers, or query parameters. Changes writes MAY require authorization or payment disclosed by the Changes policy.
+
+JSON responses MUST use UTF-8. Public reads SHOULD support transport compression. A producer MAY offer additional representations, but the advertised JSON representation remains normative.
+
+## Caching
+
+Stable current-origin URLs can change after a deployment. They MUST be revalidatable and MUST NOT be marked `immutable`. A suitable default is:
+
+```text
+Cache-Control: public, max-age=0, must-revalidate
+```
+
+Content-addressed URLs and candidate origins whose hostname is derived from the resulting Sources digest MAY use:
+
+```text
+Cache-Control: public, max-age=31536000, immutable
+```
+
+Changes status responses change over time and MUST use `Cache-Control: no-store`.
+
+## Capability documents
+
+- Read [openship-sources.md](openship-sources.md) for source snapshots and integrity.
+- Read [openship-changes.md](openship-changes.md) for candidate changes and isolation.
+- Read [openship-systems.md](openship-systems.md) for the self-contained systems model.
+
+## Conformance
+
+A producer is conformant for a capability when its advertised documents pass the relevant schema and every cross-document invariant in that capability specification. Advertising one capability does not claim conformance for another.
+
+A consumer SHOULD report a precise path and invariant when rejecting a payload. It MUST reject unsupported major versions rather than silently interpreting them as v1.
+

package/dist/skill/references/schemas/changes-accepted.schema.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openship.dev/schemas/changes-accepted.schema.json",
+  "title": "OpenShip Changes v1 accepted response",
+  "$ref": "changes-status.schema.json",
+  "allOf": [
+    {
+      "type": "object",
+      "required": ["statusUrl"],
+      "properties": {
+        "status": { "enum": ["pending", "processing", "ready"] },
+        "statusUrl": { "type": "string", "format": "uri" }
+      }
+    }
+  ]
+}
+

package/dist/skill/references/schemas/changes-policy.schema.json

@@ -0,0 +1,44 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openship.dev/schemas/changes-policy.schema.json",
+  "title": "OpenShip Changes v1 policy",
+  "type": "object",
+  "required": ["openship", "capability", "writable", "protected", "limits"],
+  "properties": {
+    "openship": { "const": "1.0" },
+    "capability": { "const": "changes" },
+    "writable": { "type": "array", "items": { "$ref": "#/$defs/pattern" }, "uniqueItems": true },
+    "protected": { "type": "array", "items": { "$ref": "#/$defs/pattern" }, "uniqueItems": true },
+    "limits": {
+      "type": "object",
+      "required": ["filesPerChange", "bytesPerFile", "bytesPerChange"],
+      "properties": {
+        "filesPerChange": { "type": "integer", "minimum": 1 },
+        "bytesPerFile": { "type": "integer", "minimum": 1 },
+        "bytesPerChange": { "type": "integer", "minimum": 1 }
+      },
+      "additionalProperties": true
+    },
+    "contentRules": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "rule", "message"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "rule": { "type": "string", "minLength": 1 },
+          "message": { "type": "string", "minLength": 1 }
+        },
+        "additionalProperties": true
+      }
+    },
+    "document": { "type": "string", "format": "uri" },
+    "payment": { "type": "object", "additionalProperties": true },
+    "authorization": { "type": "object", "additionalProperties": true }
+  },
+  "$defs": {
+    "pattern": { "type": "string", "minLength": 1, "pattern": "^(?!/)(?:[^*]+|[^*]+/\\*\\*)$" }
+  },
+  "additionalProperties": true
+}
+

package/dist/skill/references/schemas/changes-status.schema.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openship.dev/schemas/changes-status.schema.json",
+  "title": "OpenShip Changes v1 status",
+  "type": "object",
+  "required": ["openship", "capability", "changeId", "base", "digest", "status", "candidateOrigin"],
+  "properties": {
+    "openship": { "const": "1.0" },
+    "capability": { "const": "changes" },
+    "changeId": { "type": "string", "minLength": 1 },
+    "base": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "status": { "enum": ["pending", "processing", "ready", "rejected", "failed"] },
+    "phase": { "type": "string", "minLength": 1 },
+    "candidateOrigin": { "type": "string", "format": "uri" },
+    "statusUrl": { "type": "string", "format": "uri" },
+    "buildId": { "type": "string", "minLength": 1 },
+    "reason": { "type": ["string", "null"] }
+  },
+  "additionalProperties": true
+}
+

package/dist/skill/references/schemas/changes-submission.schema.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openship.dev/schemas/changes-submission.schema.json",
+  "title": "OpenShip Changes v1 submission",
+  "type": "object",
+  "required": ["openship", "capability", "base", "title", "intent", "files"],
+  "properties": {
+    "openship": { "const": "1.0" },
+    "capability": { "const": "changes" },
+    "base": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "title": { "type": "string", "minLength": 1, "maxLength": 200 },
+    "intent": { "type": "string", "minLength": 1, "maxLength": 4000 },
+    "files": {
+      "type": "object",
+      "minProperties": 1,
+      "propertyNames": { "type": "string", "minLength": 1, "maxLength": 512, "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*//)[^\\u0000]+$" },
+      "additionalProperties": {
+        "oneOf": [
+          { "type": "null" },
+          {
+            "type": "object",
+            "required": ["encoding", "content"],
+            "properties": {
+              "encoding": { "enum": ["utf-8", "base64"] },
+              "content": { "type": "string" }
+            },
+            "additionalProperties": false
+          }
+        ]
+      }
+    }
+  },
+  "additionalProperties": true
+}

package/dist/skill/references/schemas/changes-violation.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openship.dev/schemas/changes-violation.schema.json",
+  "title": "OpenShip Changes v1 synchronous violation response",
+  "type": "object",
+  "required": ["openship", "capability", "error", "message", "violations"],
+  "properties": {
+    "openship": { "const": "1.0" },
+    "capability": { "const": "changes" },
+    "error": { "enum": ["stale_base", "policy_violation"] },
+    "message": { "type": "string", "minLength": 1 },
+    "base": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "policy": { "type": "string", "format": "uri" },
+    "violations": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "required": ["gate", "rule", "message"],
+        "properties": {
+          "gate": { "enum": ["envelope", "path", "size", "content", "tree"] },
+          "rule": { "type": "string", "minLength": 1 },
+          "path": { "type": "string", "minLength": 1 },
+          "line": { "type": "integer", "minimum": 1 },
+          "message": { "type": "string", "minLength": 1 }
+        },
+        "additionalProperties": true
+      }
+    }
+  },
+  "additionalProperties": true
+}

package/dist/skill/references/schemas/discovery.schema.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openship.dev/schemas/discovery.schema.json",
+  "title": "OpenShip v1 discovery",
+  "type": "object",
+  "required": ["openship", "capability", "project", "capabilities"],
+  "properties": {
+    "openship": { "const": "1.0" },
+    "capability": { "const": "discovery" },
+    "project": {
+      "type": "object",
+      "required": ["name", "description"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "description": { "type": "string", "minLength": 1 }
+      },
+      "additionalProperties": true
+    },
+    "skill": { "$ref": "#/$defs/httpsUrl" },
+    "capabilities": {
+      "type": "object",
+      "required": ["sources"],
+      "properties": {
+        "sources": {
+          "type": "object",
+          "required": ["manifest", "bundle"],
+          "properties": {
+            "manifest": { "$ref": "#/$defs/httpsUrl" },
+            "bundle": { "$ref": "#/$defs/httpsUrl" },
+            "file": { "type": "string", "pattern": "^https://.+\\{path\\}.+$|^https://.+/\\{path\\}$" },
+            "archive": { "$ref": "#/$defs/httpsUrl" },
+            "instructions": { "$ref": "#/$defs/httpsUrl" }
+          },
+          "additionalProperties": true
+        },
+        "changes": {
+          "type": "object",
+          "required": ["policy", "submit", "status"],
+          "properties": {
+            "policy": { "$ref": "#/$defs/httpsUrl" },
+            "submit": { "$ref": "#/$defs/httpsUrl" },
+            "status": { "type": "string", "pattern": "^https://.+\\{changeId\\}.+$|^https://.+/\\{changeId\\}$" }
+          },
+          "additionalProperties": true
+        },
+        "systems": {
+          "type": "object",
+          "required": ["document"],
+          "properties": { "document": { "$ref": "#/$defs/httpsUrl" } },
+          "additionalProperties": true
+        }
+      },
+      "additionalProperties": true
+    }
+  },
+  "$defs": {
+    "httpsUrl": { "type": "string", "format": "uri", "pattern": "^https://" }
+  },
+  "additionalProperties": true
+}
+