@ship.zone/ci-spec 2.0.0

package/conformance/runner-messages.json

@@ -0,0 +1,2035 @@
+{
+  "spec": "2.0.0",
+  "cases": [
+    {
+      "id": "registration-response-valid",
+      "schema": "RegisterRunnerResponse",
+      "valid": true,
+      "instance": {
+        "spec": "2.0.0",
+        "serverTime": "2026-07-30T18:00:00Z",
+        "registrationReplayUntil": "2026-07-30T18:10:00Z",
+        "credential": {
+          "credentialId": "credential-1",
+          "runnerId": "runner-1",
+          "token": "0123456789abcdef0123456789abcdef",
+          "expiresAt": "2026-07-30T19:00:00Z"
+        }
+      }
+    },
+    {
+      "id": "start-session-request-valid",
+      "schema": "StartSessionRequest",
+      "valid": true,
+      "instance": {
+        "sessionRequestId": "session-request-1",
+        "runnerId": "runner-1",
+        "spec": "2.0.0",
+        "runnerVersion": "1.0.0",
+        "capabilities": {
+          "executionProfiles": [
+            "oci"
+          ],
+          "isolation": [
+            "container",
+            "microvm"
+          ],
+          "platforms": [
+            "linux/amd64"
+          ],
+          "labels": [
+            "linux"
+          ],
+          "features": [
+            "source.tar-gz",
+            "artifacts",
+            "caches"
+          ],
+          "networks": [
+            "none",
+            "egress"
+          ],
+          "sourceFormats": [
+            "tar.gz"
+          ],
+          "limits": {
+            "maximumSourceArchiveBytes": 1048576,
+            "maximumSourceExtractedBytes": 4194304,
+            "maximumSourceEntries": 1000,
+            "maximumArtifactArchiveBytes": 0,
+            "maximumArtifactExtractedBytes": 0,
+            "maximumArtifactEntries": 0,
+            "maximumArtifacts": 0,
+            "maximumCacheArchiveBytes": 4294967296,
+            "maximumCacheExtractedBytes": 17179869184,
+            "maximumCacheEntries": 1000000,
+            "maximumCaches": 1,
+            "maximumLogChunkBytes": 65536,
+            "maximumTotalLogBytes": 10485760,
+            "maximumWorkspaceBytes": 21474836480,
+            "maximumWorkspaceEntries": 100000
+          }
+        }
+      }
+    },
+    {
+      "id": "start-session-request-range-spec-invalid",
+      "schema": "StartSessionRequest",
+      "valid": false,
+      "instance": {
+        "sessionRequestId": "session-request-1",
+        "runnerId": "runner-1",
+        "spec": "^2.0.0",
+        "runnerVersion": "1.0.0",
+        "capabilities": {
+          "executionProfiles": [
+            "oci"
+          ],
+          "isolation": [
+            "container",
+            "microvm"
+          ],
+          "platforms": [
+            "linux/amd64"
+          ],
+          "labels": [
+            "linux"
+          ],
+          "features": [
+            "source.tar-gz",
+            "artifacts",
+            "caches"
+          ],
+          "networks": [
+            "none",
+            "egress"
+          ],
+          "sourceFormats": [
+            "tar.gz"
+          ],
+          "limits": {
+            "maximumSourceArchiveBytes": 1048576,
+            "maximumSourceExtractedBytes": 4194304,
+            "maximumSourceEntries": 1000,
+            "maximumArtifactArchiveBytes": 0,
+            "maximumArtifactExtractedBytes": 0,
+            "maximumArtifactEntries": 0,
+            "maximumArtifacts": 0,
+            "maximumCacheArchiveBytes": 4294967296,
+            "maximumCacheExtractedBytes": 17179869184,
+            "maximumCacheEntries": 1000000,
+            "maximumCaches": 1,
+            "maximumLogChunkBytes": 65536,
+            "maximumTotalLogBytes": 10485760,
+            "maximumWorkspaceBytes": 21474836480,
+            "maximumWorkspaceEntries": 100000
+          }
+        }
+      }
+    },
+    {
+      "id": "register-request-protocol-field-invalid",
+      "schema": "RegisterRunnerRequest",
+      "valid": false,
+      "instance": {
+        "registrationRequestId": "registration-1",
+        "protocol": "shipzone-ci-runner",
+        "runnerVersion": "1.0.0",
+        "name": "runner-1",
+        "capabilities": {
+          "executionProfiles": [
+            "oci"
+          ],
+          "isolation": [
+            "container",
+            "microvm"
+          ],
+          "platforms": [
+            "linux/amd64"
+          ],
+          "labels": [
+            "linux"
+          ],
+          "features": [
+            "source.tar-gz",
+            "artifacts",
+            "caches"
+          ],
+          "networks": [
+            "none",
+            "egress"
+          ],
+          "sourceFormats": [
+            "tar.gz"
+          ],
+          "limits": {
+            "maximumSourceArchiveBytes": 1048576,
+            "maximumSourceExtractedBytes": 4194304,
+            "maximumSourceEntries": 1000,
+            "maximumArtifactArchiveBytes": 0,
+            "maximumArtifactExtractedBytes": 0,
+            "maximumArtifactEntries": 0,
+            "maximumArtifacts": 0,
+            "maximumCacheArchiveBytes": 4294967296,
+            "maximumCacheExtractedBytes": 17179869184,
+            "maximumCacheEntries": 1000000,
+            "maximumCaches": 1,
+            "maximumLogChunkBytes": 65536,
+            "maximumTotalLogBytes": 10485760,
+            "maximumWorkspaceBytes": 21474836480,
+            "maximumWorkspaceEntries": 100000
+          }
+        }
+      }
+    },
+    {
+      "id": "accept-request-valid",
+      "schema": "AcceptJobRequest",
+      "valid": true,
+      "instance": {
+        "acceptRequestId": "accept-1",
+        "identity": {
+          "runnerId": "runner-1",
+          "sessionId": "session-1",
+          "jobId": "job-1",
+          "attemptId": "attempt-1",
+          "leaseId": "lease-1",
+          "fencingToken": "0123456789abcdef"
+        }
+      }
+    },
+    {
+      "id": "heartbeat-request-valid",
+      "schema": "JobHeartbeatRequest",
+      "valid": true,
+      "instance": {
+        "identity": {
+          "runnerId": "runner-1",
+          "sessionId": "session-1",
+          "jobId": "job-1",
+          "attemptId": "attempt-1",
+          "leaseId": "lease-1",
+          "fencingToken": "0123456789abcdef"
+        },
+        "observedCancellationRequestId": "cancel-1"
+      }
+    },
+    {
+      "id": "log-request-valid",
+      "schema": "LogChunk",
+      "valid": true,
+      "instance": {
+        "identity": {
+          "runnerId": "runner-1",
+          "sessionId": "session-1",
+          "jobId": "job-1",
+          "attemptId": "attempt-1",
+          "leaseId": "lease-1",
+          "fencingToken": "0123456789abcdef"
+        },
+        "sequence": 0,
+        "stream": "stdout",
+        "data": "test output\n",
+        "timestamp": "2026-07-30T18:01:00Z"
+      }
+    },
+    {
+      "id": "canceled-completion-valid",
+      "schema": "CompleteJobRequest",
+      "valid": true,
+      "instance": {
+        "completionRequestId": "completion-1",
+        "identity": {
+          "runnerId": "runner-1",
+          "sessionId": "session-1",
+          "jobId": "job-1",
+          "attemptId": "attempt-1",
+          "leaseId": "lease-1",
+          "fencingToken": "0123456789abcdef"
+        },
+        "status": "canceled",
+        "exitCode": null,
+        "startedAt": "2026-07-30T18:01:00Z",
+        "completedAt": "2026-07-30T18:02:00Z",
+        "cancellationRequestId": "cancel-1"
+      }
+    },
+    {
+      "id": "abandon-request-valid",
+      "schema": "AbandonJobRequest",
+      "valid": true,
+      "instance": {
+        "abandonRequestId": "abandon-1",
+        "identity": {
+          "runnerId": "runner-1",
+          "sessionId": "session-1",
+          "jobId": "job-1",
+          "attemptId": "attempt-1",
+          "leaseId": "lease-1",
+          "fencingToken": "0123456789abcdef"
+        },
+        "reason": "runner_error"
+      }
+    },
+    {
+      "id": "recovery-request-valid",
+      "schema": "RecoverAttemptRequest",
+      "valid": true,
+      "instance": {
+        "recoveryRequestId": "recovery-1",
+        "runnerId": "runner-1",
+        "currentSessionId": "session-2",
+        "previousSessionId": "session-1",
+        "jobId": "job-1",
+        "attemptId": "attempt-1",
+        "reason": "runner_restarted"
+      }
+    },
+    {
+      "id": "transfer-record-valid",
+      "schema": "TransferRecord",
+      "valid": true,
+      "instance": {
+        "name": "test-results",
+        "format": "tar.gz",
+        "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "sizeBytes": 1024,
+        "extractedSizeBytes": 4096,
+        "entryCount": 4,
+        "createdAt": "2026-07-30T18:02:00Z"
+      }
+    },
+    {
+      "id": "flattened-heartbeat-invalid",
+      "schema": "JobHeartbeatRequest",
+      "valid": false,
+      "instance": {
+        "runnerId": "runner-1",
+        "sessionId": "session-1",
+        "jobId": "job-1",
+        "attemptId": "attempt-1",
+        "leaseId": "lease-1",
+        "fencingToken": "0123456789abcdef"
+      }
+    },
+    {
+      "id": "canceled-completion-without-directive-invalid",
+      "schema": "CompleteJobRequest",
+      "valid": false,
+      "instance": {
+        "completionRequestId": "completion-2",
+        "identity": {
+          "runnerId": "runner-1",
+          "sessionId": "session-1",
+          "jobId": "job-1",
+          "attemptId": "attempt-1",
+          "leaseId": "lease-1",
+          "fencingToken": "0123456789abcdef"
+        },
+        "status": "canceled",
+        "exitCode": null,
+        "startedAt": "2026-07-30T18:01:00Z",
+        "completedAt": "2026-07-30T18:02:00Z"
+      }
+    },
+    {
+      "id": "build-lease-with-grants-valid",
+      "schema": "JobLease",
+      "valid": true,
+      "instance": {
+        "jobId": "job-1",
+        "attemptId": "attempt-1",
+        "leaseId": "lease-1",
+        "fencingToken": "0123456789abcdef",
+        "leaseExpiresAt": "2026-09-25T18:05:00Z",
+        "job": {
+          "spec": "2.0.0",
+          "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "compiledPlanDigest": "e9465908999d42aa96d23ee7965d0da732a2a4bbd99b16748cad10ef328a1abd",
+          "requirements": {
+            "executionProfile": "oci-image",
+            "isolation": "microvm",
+            "platform": "linux/arm64",
+            "labels": [
+              "builder"
+            ],
+            "features": [
+              "source.tar-gz",
+              "caches"
+            ],
+            "limits": {
+              "maximumSourceArchiveBytes": 1048576,
+              "maximumSourceExtractedBytes": 4194304,
+              "maximumSourceEntries": 1000,
+              "maximumArtifactArchiveBytes": 0,
+              "maximumArtifactExtractedBytes": 0,
+              "maximumArtifactEntries": 0,
+              "maximumArtifacts": 0,
+              "maximumCacheArchiveBytes": 4294967296,
+              "maximumCacheExtractedBytes": 17179869184,
+              "maximumCacheEntries": 1000000,
+              "maximumCaches": 1,
+              "maximumLogChunkBytes": 65536,
+              "maximumTotalLogBytes": 10485760,
+              "maximumWorkspaceBytes": 21474836480,
+              "maximumWorkspaceEntries": 100000
+            }
+          },
+          "permissions": {
+            "source": "read",
+            "artifacts": "none",
+            "caches": "read-write",
+            "images": "push"
+          },
+          "network": {
+            "mode": "egress",
+            "allow": [
+              {
+                "host": "registry.npmjs.org",
+                "ports": [
+                  443
+                ]
+              }
+            ]
+          },
+          "build": {
+            "context": ".",
+            "dockerfile": "Dockerfile",
+            "target": "production",
+            "buildArgs": {
+              "NODE_ENV": "production"
+            },
+            "secrets": [
+              {
+                "id": "npmrc",
+                "environment": "NPM_TOKEN"
+              }
+            ],
+            "labels": {
+              "org.opencontainers.image.revision": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+              "org.opencontainers.image.source": "https://code.foss.global/example/app",
+              "org.opencontainers.image.title": "app"
+            },
+            "baseImages": [
+              {
+                "name": "base",
+                "image": {
+                  "candidate": "base-image"
+                }
+              }
+            ]
+          },
+          "source": {
+            "format": "tar.gz",
+            "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+            "sizeBytes": 1024,
+            "extractedSizeBytes": 4096,
+            "entryCount": 4
+          },
+          "secrets": {
+            "NPM_TOKEN": "resolved-secret-value"
+          },
+          "timeoutMs": 3600000,
+          "resources": {
+            "memoryBytes": 8589934592,
+            "cpus": 4,
+            "pids": 4096
+          },
+          "artifacts": [],
+          "caches": [
+            {
+              "name": "buildkit",
+              "key": "buildkit-linux-arm64",
+              "access": "read-write",
+              "maximumBytes": 4294967296,
+              "maximumExtractedBytes": 17179869184,
+              "maximumEntries": 1000000,
+              "retentionDays": 14
+            }
+          ]
+        },
+        "grants": [
+          {
+            "grantId": "grant-push-1",
+            "access": "push",
+            "registry": "code.foss.global",
+            "repository": "example/app/ci-candidates-trusted",
+            "username": "grant-push-1",
+            "secret": "0123456789abcdef0123456789abcdef",
+            "expiresAt": "2026-09-25T19:00:00Z"
+          },
+          {
+            "grantId": "grant-pull-1",
+            "access": "pull",
+            "registry": "code.foss.global",
+            "repository": "example/app/ci-candidates-trusted",
+            "username": "grant-pull-1",
+            "secret": "0123456789abcdef0123456789abcdef",
+            "expiresAt": "2026-09-25T19:00:00Z"
+          }
+        ],
+        "bindings": [
+          {
+            "candidate": "base-image",
+            "image": "code.foss.global/example/app/ci-candidates-trusted@sha256:9999999999999999999999999999999999999999999999999999999999999999"
+          }
+        ]
+      }
+    },
+    {
+      "id": "candidate-lease-with-binding-valid",
+      "schema": "JobLease",
+      "valid": true,
+      "instance": {
+        "jobId": "job-2",
+        "attemptId": "attempt-2",
+        "leaseId": "lease-2",
+        "fencingToken": "0123456789abcdef",
+        "leaseExpiresAt": "2026-09-25T18:05:00Z",
+        "job": {
+          "spec": "2.0.0",
+          "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "compiledPlanDigest": "cf4576a479ed8acc3d7635cf732de643df8edd0f48320a41e869712e8f72a1f5",
+          "requirements": {
+            "executionProfile": "oci",
+            "isolation": "container",
+            "labels": [
+              "linux"
+            ],
+            "features": [
+              "source.tar-gz"
+            ],
+            "limits": {
+              "maximumSourceArchiveBytes": 1048576,
+              "maximumSourceExtractedBytes": 4194304,
+              "maximumSourceEntries": 1000,
+              "maximumArtifactArchiveBytes": 0,
+              "maximumArtifactExtractedBytes": 0,
+              "maximumArtifactEntries": 0,
+              "maximumArtifacts": 0,
+              "maximumCacheArchiveBytes": 0,
+              "maximumCacheExtractedBytes": 0,
+              "maximumCacheEntries": 0,
+              "maximumCaches": 0,
+              "maximumLogChunkBytes": 65536,
+              "maximumTotalLogBytes": 10485760,
+              "maximumWorkspaceBytes": 268435456,
+              "maximumWorkspaceEntries": 100000
+            },
+            "platform": "linux/amd64"
+          },
+          "permissions": {
+            "source": "read",
+            "artifacts": "none",
+            "caches": "none",
+            "images": "none"
+          },
+          "network": {
+            "mode": "none"
+          },
+          "execution": {
+            "profile": "oci",
+            "image": {
+              "candidate": "image"
+            },
+            "workingDirectory": "/workspace"
+          },
+          "steps": [
+            {
+              "name": "Candidate smoke test",
+              "command": [
+                "/usr/local/bin/app",
+                "--self-test"
+              ],
+              "environment": {
+                "SHIPZONE_CI_INPUTS_JSON": "{}",
+                "SHIPZONE_CI_MATRIX_JSON": "{}"
+              }
+            }
+          ],
+          "source": {
+            "format": "tar.gz",
+            "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+            "sizeBytes": 1024,
+            "extractedSizeBytes": 4096,
+            "entryCount": 4
+          },
+          "secrets": {},
+          "timeoutMs": 60000,
+          "resources": {
+            "memoryBytes": 268435456,
+            "cpus": 1,
+            "pids": 256
+          },
+          "artifacts": [],
+          "caches": []
+        },
+        "grants": [
+          {
+            "grantId": "grant-pull-2",
+            "access": "pull",
+            "registry": "code.foss.global",
+            "repository": "example/app/ci-candidates-trusted",
+            "username": "grant-pull-2",
+            "secret": "0123456789abcdef0123456789abcdef",
+            "expiresAt": "2026-09-25T19:00:00Z"
+          }
+        ],
+        "bindings": [
+          {
+            "candidate": "image",
+            "image": "code.foss.global/example/app/ci-candidates-trusted@sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+          }
+        ]
+      }
+    },
+    {
+      "id": "lease-without-grants-invalid",
+      "schema": "JobLease",
+      "valid": false,
+      "instance": {
+        "jobId": "job-3",
+        "attemptId": "attempt-3",
+        "leaseId": "lease-3",
+        "fencingToken": "0123456789abcdef",
+        "leaseExpiresAt": "2026-09-25T18:05:00Z",
+        "job": {
+          "spec": "2.0.0",
+          "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "compiledPlanDigest": "510cbf54d5dbed5636d03249a9c7cb9c69ab1697ff7df505c372a72a6259636d",
+          "requirements": {
+            "executionProfile": "oci",
+            "isolation": "container",
+            "labels": [
+              "linux"
+            ],
+            "features": [
+              "source.tar-gz"
+            ],
+            "limits": {
+              "maximumSourceArchiveBytes": 1048576,
+              "maximumSourceExtractedBytes": 4194304,
+              "maximumSourceEntries": 1000,
+              "maximumArtifactArchiveBytes": 0,
+              "maximumArtifactExtractedBytes": 0,
+              "maximumArtifactEntries": 0,
+              "maximumArtifacts": 0,
+              "maximumCacheArchiveBytes": 0,
+              "maximumCacheExtractedBytes": 0,
+              "maximumCacheEntries": 0,
+              "maximumCaches": 0,
+              "maximumLogChunkBytes": 65536,
+              "maximumTotalLogBytes": 10485760,
+              "maximumWorkspaceBytes": 268435456,
+              "maximumWorkspaceEntries": 100000
+            }
+          },
+          "permissions": {
+            "source": "read",
+            "artifacts": "none",
+            "caches": "none",
+            "images": "none"
+          },
+          "network": {
+            "mode": "none"
+          },
+          "execution": {
+            "profile": "oci",
+            "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+            "workingDirectory": "/workspace"
+          },
+          "steps": [
+            {
+              "name": "Test",
+              "command": [
+                "pnpm",
+                "test"
+              ],
+              "environment": {
+                "CI": "true",
+                "SHIPZONE_CI_INPUTS_JSON": "{}",
+                "SHIPZONE_CI_MATRIX_JSON": "{}"
+              }
+            }
+          ],
+          "source": {
+            "format": "tar.gz",
+            "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+            "sizeBytes": 1024,
+            "extractedSizeBytes": 4096,
+            "entryCount": 4
+          },
+          "secrets": {},
+          "timeoutMs": 60000,
+          "resources": {
+            "memoryBytes": 268435456,
+            "cpus": 1,
+            "pids": 256
+          },
+          "artifacts": [],
+          "caches": []
+        }
+      }
+    },
+    {
+      "id": "binding-tagged-image-invalid",
+      "schema": "ImageBinding",
+      "valid": false,
+      "instance": {
+        "candidate": "image",
+        "image": "code.foss.global/example/app:latest"
+      }
+    },
+    {
+      "id": "grant-delete-access-invalid",
+      "schema": "ImageGrant",
+      "valid": false,
+      "instance": {
+        "grantId": "grant-push-1",
+        "access": "delete",
+        "registry": "code.foss.global",
+        "repository": "example/app/ci-candidates-trusted",
+        "username": "grant-push-1",
+        "secret": "0123456789abcdef0123456789abcdef",
+        "expiresAt": "2026-09-25T19:00:00Z"
+      }
+    },
+    {
+      "id": "record-image-request-valid",
+      "schema": "RecordImageRequest",
+      "valid": true,
+      "instance": {
+        "recordRequestId": "record-1",
+        "identity": {
+          "runnerId": "runner-1",
+          "sessionId": "session-1",
+          "jobId": "job-1",
+          "attemptId": "attempt-1",
+          "leaseId": "lease-1",
+          "fencingToken": "0123456789abcdef"
+        },
+        "manifestDigest": "sha256:abababababababababababababababababababababababababababababababab",
+        "mediaType": "application/vnd.oci.image.manifest.v1+json",
+        "sizeBytes": 1234,
+        "platform": "linux/arm64"
+      }
+    },
+    {
+      "id": "record-image-index-invalid",
+      "schema": "RecordImageRequest",
+      "valid": false,
+      "instance": {
+        "recordRequestId": "record-1",
+        "identity": {
+          "runnerId": "runner-1",
+          "sessionId": "session-1",
+          "jobId": "job-1",
+          "attemptId": "attempt-1",
+          "leaseId": "lease-1",
+          "fencingToken": "0123456789abcdef"
+        },
+        "manifestDigest": "sha256:abababababababababababababababababababababababababababababababab",
+        "mediaType": "application/vnd.oci.image.index.v1+json",
+        "sizeBytes": 1234,
+        "platform": "linux/arm64"
+      }
+    },
+    {
+      "id": "image-record-valid",
+      "schema": "ImageRecord",
+      "valid": true,
+      "instance": {
+        "registry": "code.foss.global",
+        "repository": "example/app/ci-candidates-trusted",
+        "manifestDigest": "sha256:abababababababababababababababababababababababababababababababab",
+        "mediaType": "application/vnd.oci.image.manifest.v1+json",
+        "sizeBytes": 1234,
+        "platform": "linux/arm64",
+        "createdAt": "2026-09-25T18:04:00Z"
+      }
+    },
+    {
+      "id": "builder-capabilities-valid",
+      "schema": "RunnerCapabilities",
+      "valid": true,
+      "instance": {
+        "executionProfiles": [
+          "oci-image"
+        ],
+        "isolation": [
+          "microvm"
+        ],
+        "platforms": [
+          "linux/arm64"
+        ],
+        "labels": [
+          "builder"
+        ],
+        "features": [
+          "source.tar-gz",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        }
+      }
+    },
+    {
+      "id": "container-capabilities-valid",
+      "schema": "RunnerCapabilities",
+      "valid": true,
+      "instance": {
+        "executionProfiles": [
+          "oci"
+        ],
+        "isolation": [
+          "container",
+          "microvm"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        }
+      }
+    },
+    {
+      "id": "builder-capabilities-shared-profile-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci-image",
+          "oci"
+        ],
+        "isolation": [
+          "microvm"
+        ],
+        "platforms": [
+          "linux/arm64"
+        ],
+        "labels": [
+          "builder"
+        ],
+        "features": [
+          "source.tar-gz",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        }
+      }
+    },
+    {
+      "id": "builder-capabilities-without-microvm-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci-image"
+        ],
+        "isolation": [
+          "container"
+        ],
+        "platforms": [
+          "linux/arm64"
+        ],
+        "labels": [
+          "builder"
+        ],
+        "features": [
+          "source.tar-gz",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        }
+      }
+    },
+    {
+      "id": "bridge-network-capability-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci-image"
+        ],
+        "isolation": [
+          "microvm"
+        ],
+        "platforms": [
+          "linux/arm64"
+        ],
+        "labels": [
+          "builder"
+        ],
+        "features": [
+          "source.tar-gz",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "bridge"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        }
+      }
+    },
+    {
+      "id": "start-session-request-resources-valid",
+      "schema": "StartSessionRequest",
+      "valid": true,
+      "instance": {
+        "sessionRequestId": "session-request-2",
+        "runnerId": "runner-1",
+        "spec": "2.0.0",
+        "runnerVersion": "1.0.0",
+        "capabilities": {
+          "executionProfiles": [
+            "oci"
+          ],
+          "isolation": [
+            "container",
+            "microvm"
+          ],
+          "platforms": [
+            "linux/amd64"
+          ],
+          "labels": [
+            "linux"
+          ],
+          "features": [
+            "source.tar-gz",
+            "artifacts",
+            "caches"
+          ],
+          "networks": [
+            "none",
+            "egress"
+          ],
+          "sourceFormats": [
+            "tar.gz"
+          ],
+          "limits": {
+            "maximumSourceArchiveBytes": 1048576,
+            "maximumSourceExtractedBytes": 4194304,
+            "maximumSourceEntries": 1000,
+            "maximumArtifactArchiveBytes": 0,
+            "maximumArtifactExtractedBytes": 0,
+            "maximumArtifactEntries": 0,
+            "maximumArtifacts": 0,
+            "maximumCacheArchiveBytes": 4294967296,
+            "maximumCacheExtractedBytes": 17179869184,
+            "maximumCacheEntries": 1000000,
+            "maximumCaches": 1,
+            "maximumLogChunkBytes": 65536,
+            "maximumTotalLogBytes": 10485760,
+            "maximumWorkspaceBytes": 21474836480,
+            "maximumWorkspaceEntries": 100000
+          },
+          "resources": {
+            "maximumMemoryBytes": 34359738368,
+            "maximumCpus": 8,
+            "maximumPids": 32768,
+            "maximumSharedMemoryBytes": 4294967296
+          }
+        }
+      }
+    },
+    {
+      "id": "capabilities-resources-incomplete-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci"
+        ],
+        "isolation": [
+          "container",
+          "microvm"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        },
+        "resources": {
+          "maximumMemoryBytes": 34359738368,
+          "maximumCpus": 8,
+          "maximumPids": 32768
+        }
+      }
+    },
+    {
+      "id": "vm-session-capabilities-valid",
+      "schema": "StartSessionRequest",
+      "valid": true,
+      "instance": {
+        "sessionRequestId": "session-request-3",
+        "runnerId": "runner-1",
+        "spec": "2.0.0",
+        "runnerVersion": "1.0.0",
+        "capabilities": {
+          "executionProfiles": [
+            "oci",
+            "vm"
+          ],
+          "isolation": [
+            "container",
+            "microvm"
+          ],
+          "platforms": [
+            "linux/amd64"
+          ],
+          "labels": [
+            "linux"
+          ],
+          "features": [
+            "source.tar-gz",
+            "artifacts",
+            "caches"
+          ],
+          "networks": [
+            "none",
+            "egress"
+          ],
+          "sourceFormats": [
+            "tar.gz"
+          ],
+          "limits": {
+            "maximumSourceArchiveBytes": 1048576,
+            "maximumSourceExtractedBytes": 4194304,
+            "maximumSourceEntries": 1000,
+            "maximumArtifactArchiveBytes": 0,
+            "maximumArtifactExtractedBytes": 0,
+            "maximumArtifactEntries": 0,
+            "maximumArtifacts": 0,
+            "maximumCacheArchiveBytes": 4294967296,
+            "maximumCacheExtractedBytes": 17179869184,
+            "maximumCacheEntries": 1000000,
+            "maximumCaches": 1,
+            "maximumLogChunkBytes": 65536,
+            "maximumTotalLogBytes": 10485760,
+            "maximumWorkspaceBytes": 21474836480,
+            "maximumWorkspaceEntries": 100000
+          }
+        }
+      }
+    },
+    {
+      "id": "darwin-vm-session-capabilities-valid",
+      "schema": "StartSessionRequest",
+      "valid": true,
+      "instance": {
+        "sessionRequestId": "session-request-4",
+        "runnerId": "runner-1",
+        "spec": "2.0.0",
+        "runnerVersion": "1.0.0",
+        "capabilities": {
+          "executionProfiles": [
+            "vm"
+          ],
+          "isolation": [
+            "microvm"
+          ],
+          "platforms": [
+            "darwin/arm64"
+          ],
+          "labels": [
+            "macos"
+          ],
+          "features": [
+            "source.tar-gz",
+            "artifacts",
+            "caches"
+          ],
+          "networks": [
+            "none",
+            "egress"
+          ],
+          "sourceFormats": [
+            "tar.gz"
+          ],
+          "limits": {
+            "maximumSourceArchiveBytes": 1048576,
+            "maximumSourceExtractedBytes": 4194304,
+            "maximumSourceEntries": 1000,
+            "maximumArtifactArchiveBytes": 0,
+            "maximumArtifactExtractedBytes": 0,
+            "maximumArtifactEntries": 0,
+            "maximumArtifacts": 0,
+            "maximumCacheArchiveBytes": 4294967296,
+            "maximumCacheExtractedBytes": 17179869184,
+            "maximumCacheEntries": 1000000,
+            "maximumCaches": 1,
+            "maximumLogChunkBytes": 65536,
+            "maximumTotalLogBytes": 10485760,
+            "maximumWorkspaceBytes": 21474836480,
+            "maximumWorkspaceEntries": 100000
+          }
+        }
+      }
+    },
+    {
+      "id": "vm-capabilities-without-microvm-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "vm"
+        ],
+        "isolation": [
+          "container"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        }
+      }
+    },
+    {
+      "id": "vm-builder-capabilities-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci-image",
+          "vm"
+        ],
+        "isolation": [
+          "microvm"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        }
+      }
+    },
+    {
+      "id": "npm-read-lease-valid",
+      "schema": "JobLease",
+      "valid": true,
+      "instance": {
+        "jobId": "job-1",
+        "attemptId": "attempt-1",
+        "leaseId": "lease-1",
+        "fencingToken": "0123456789abcdef",
+        "leaseExpiresAt": "2026-09-26T18:05:00Z",
+        "job": {
+          "spec": "2.0.0",
+          "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "compiledPlanDigest": "8405c79b143e01fded6f3a311a40cf8e1ccd7040a02b8a820dfb2e9844410741",
+          "requirements": {
+            "executionProfile": "oci",
+            "isolation": "container",
+            "labels": [
+              "linux"
+            ],
+            "features": [
+              "source.tar-gz"
+            ],
+            "limits": {
+              "maximumSourceArchiveBytes": 1048576,
+              "maximumSourceExtractedBytes": 4194304,
+              "maximumSourceEntries": 1000,
+              "maximumArtifactArchiveBytes": 0,
+              "maximumArtifactExtractedBytes": 0,
+              "maximumArtifactEntries": 0,
+              "maximumArtifacts": 0,
+              "maximumCacheArchiveBytes": 0,
+              "maximumCacheExtractedBytes": 0,
+              "maximumCacheEntries": 0,
+              "maximumCaches": 0,
+              "maximumLogChunkBytes": 65536,
+              "maximumTotalLogBytes": 10485760,
+              "maximumWorkspaceBytes": 21474836480,
+              "maximumWorkspaceEntries": 100000
+            }
+          },
+          "permissions": {
+            "source": "read",
+            "artifacts": "none",
+            "caches": "none",
+            "images": "none"
+          },
+          "network": {
+            "mode": "egress",
+            "allow": [
+              {
+                "host": "npm.example.com",
+                "ports": [
+                  443
+                ]
+              },
+              {
+                "host": "registry.npmjs.org",
+                "ports": [
+                  443
+                ]
+              }
+            ]
+          },
+          "execution": {
+            "profile": "oci",
+            "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+            "workingDirectory": "/workspace"
+          },
+          "steps": [
+            {
+              "name": "Install",
+              "command": [
+                "pnpm",
+                "install",
+                "--frozen-lockfile"
+              ],
+              "environment": {
+                "CI": "true",
+                "SHIPZONE_CI_INPUTS_JSON": "{}",
+                "SHIPZONE_CI_MATRIX_JSON": "{}"
+              }
+            }
+          ],
+          "source": {
+            "format": "tar.gz",
+            "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+            "sizeBytes": 1024,
+            "extractedSizeBytes": 4096,
+            "entryCount": 4
+          },
+          "secrets": {},
+          "timeoutMs": 60000,
+          "npmRead": [
+            {
+              "registry": "https://npm.example.com",
+              "scopes": [
+                "@example_private"
+              ]
+            }
+          ],
+          "artifacts": [],
+          "caches": []
+        },
+        "grants": [],
+        "bindings": [],
+        "npmGrants": [
+          {
+            "grantId": "grant-npm-1",
+            "registry": "https://npm.example.com",
+            "scopes": [
+              "@example_private"
+            ],
+            "secret": "0123456789abcdef0123456789abcdef",
+            "expiresAt": "2026-09-26T19:00:00Z"
+          }
+        ]
+      }
+    },
+    {
+      "id": "npm-read-lease-without-grants-invalid",
+      "schema": "JobLease",
+      "valid": false,
+      "instance": {
+        "jobId": "job-1",
+        "attemptId": "attempt-1",
+        "leaseId": "lease-1",
+        "fencingToken": "0123456789abcdef",
+        "leaseExpiresAt": "2026-09-26T18:05:00Z",
+        "job": {
+          "spec": "2.0.0",
+          "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "compiledPlanDigest": "8405c79b143e01fded6f3a311a40cf8e1ccd7040a02b8a820dfb2e9844410741",
+          "requirements": {
+            "executionProfile": "oci",
+            "isolation": "container",
+            "labels": [
+              "linux"
+            ],
+            "features": [
+              "source.tar-gz"
+            ],
+            "limits": {
+              "maximumSourceArchiveBytes": 1048576,
+              "maximumSourceExtractedBytes": 4194304,
+              "maximumSourceEntries": 1000,
+              "maximumArtifactArchiveBytes": 0,
+              "maximumArtifactExtractedBytes": 0,
+              "maximumArtifactEntries": 0,
+              "maximumArtifacts": 0,
+              "maximumCacheArchiveBytes": 0,
+              "maximumCacheExtractedBytes": 0,
+              "maximumCacheEntries": 0,
+              "maximumCaches": 0,
+              "maximumLogChunkBytes": 65536,
+              "maximumTotalLogBytes": 10485760,
+              "maximumWorkspaceBytes": 21474836480,
+              "maximumWorkspaceEntries": 100000
+            }
+          },
+          "permissions": {
+            "source": "read",
+            "artifacts": "none",
+            "caches": "none",
+            "images": "none"
+          },
+          "network": {
+            "mode": "egress",
+            "allow": [
+              {
+                "host": "npm.example.com",
+                "ports": [
+                  443
+                ]
+              },
+              {
+                "host": "registry.npmjs.org",
+                "ports": [
+                  443
+                ]
+              }
+            ]
+          },
+          "execution": {
+            "profile": "oci",
+            "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+            "workingDirectory": "/workspace"
+          },
+          "steps": [
+            {
+              "name": "Install",
+              "command": [
+                "pnpm",
+                "install",
+                "--frozen-lockfile"
+              ],
+              "environment": {
+                "CI": "true",
+                "SHIPZONE_CI_INPUTS_JSON": "{}",
+                "SHIPZONE_CI_MATRIX_JSON": "{}"
+              }
+            }
+          ],
+          "source": {
+            "format": "tar.gz",
+            "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+            "sizeBytes": 1024,
+            "extractedSizeBytes": 4096,
+            "entryCount": 4
+          },
+          "secrets": {},
+          "timeoutMs": 60000,
+          "npmRead": [
+            {
+              "registry": "https://npm.example.com",
+              "scopes": [
+                "@example_private"
+              ]
+            }
+          ],
+          "artifacts": [],
+          "caches": []
+        },
+        "grants": [],
+        "bindings": []
+      }
+    },
+    {
+      "id": "npm-grants-without-npm-read-invalid",
+      "schema": "JobLease",
+      "valid": false,
+      "instance": {
+        "jobId": "job-1",
+        "attemptId": "attempt-1",
+        "leaseId": "lease-1",
+        "fencingToken": "0123456789abcdef",
+        "leaseExpiresAt": "2026-09-26T18:05:00Z",
+        "job": {
+          "spec": "2.0.0",
+          "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "compiledPlanDigest": "2f45d18f2b0451125cb76284a26eaa5499981005fca934d51ffc7afe317ecaeb",
+          "requirements": {
+            "executionProfile": "oci",
+            "isolation": "container",
+            "labels": [
+              "linux"
+            ],
+            "features": [
+              "source.tar-gz"
+            ],
+            "limits": {
+              "maximumSourceArchiveBytes": 1048576,
+              "maximumSourceExtractedBytes": 4194304,
+              "maximumSourceEntries": 1000,
+              "maximumArtifactArchiveBytes": 0,
+              "maximumArtifactExtractedBytes": 0,
+              "maximumArtifactEntries": 0,
+              "maximumArtifacts": 0,
+              "maximumCacheArchiveBytes": 0,
+              "maximumCacheExtractedBytes": 0,
+              "maximumCacheEntries": 0,
+              "maximumCaches": 0,
+              "maximumLogChunkBytes": 65536,
+              "maximumTotalLogBytes": 10485760,
+              "maximumWorkspaceBytes": 21474836480,
+              "maximumWorkspaceEntries": 100000
+            }
+          },
+          "permissions": {
+            "source": "read",
+            "artifacts": "none",
+            "caches": "none",
+            "images": "none"
+          },
+          "network": {
+            "mode": "none"
+          },
+          "execution": {
+            "profile": "oci",
+            "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+            "workingDirectory": "/workspace"
+          },
+          "steps": [
+            {
+              "name": "Test",
+              "command": [
+                "pnpm",
+                "test"
+              ],
+              "environment": {
+                "CI": "true",
+                "SHIPZONE_CI_INPUTS_JSON": "{}",
+                "SHIPZONE_CI_MATRIX_JSON": "{}"
+              }
+            }
+          ],
+          "source": {
+            "format": "tar.gz",
+            "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+            "sizeBytes": 1024,
+            "extractedSizeBytes": 4096,
+            "entryCount": 4
+          },
+          "secrets": {},
+          "timeoutMs": 60000,
+          "resources": {
+            "memoryBytes": 268435456,
+            "cpus": 1,
+            "pids": 256,
+            "sharedMemoryBytes": 134217728
+          },
+          "artifacts": [],
+          "caches": []
+        },
+        "grants": [],
+        "bindings": [],
+        "npmGrants": [
+          {
+            "grantId": "grant-npm-1",
+            "registry": "https://npm.example.com",
+            "scopes": [
+              "@example_private"
+            ],
+            "secret": "0123456789abcdef0123456789abcdef",
+            "expiresAt": "2026-09-26T19:00:00Z"
+          }
+        ]
+      }
+    },
+    {
+      "id": "npm-grant-unscoped-invalid",
+      "schema": "NpmGrant",
+      "valid": false,
+      "instance": {
+        "grantId": "grant-npm-1",
+        "registry": "https://npm.example.com",
+        "scopes": [
+          "example_private"
+        ],
+        "secret": "0123456789abcdef0123456789abcdef",
+        "expiresAt": "2026-09-26T19:00:00Z"
+      }
+    },
+    {
+      "id": "start-session-request-lease-features-valid",
+      "schema": "StartSessionRequest",
+      "valid": true,
+      "instance": {
+        "sessionRequestId": "session-request-5",
+        "runnerId": "runner-1",
+        "spec": "2.0.0",
+        "runnerVersion": "1.0.0",
+        "capabilities": {
+          "executionProfiles": [
+            "oci"
+          ],
+          "isolation": [
+            "container",
+            "microvm"
+          ],
+          "platforms": [
+            "linux/amd64"
+          ],
+          "labels": [
+            "linux"
+          ],
+          "features": [
+            "source.tar-gz",
+            "artifacts",
+            "caches"
+          ],
+          "networks": [
+            "none",
+            "egress"
+          ],
+          "sourceFormats": [
+            "tar.gz"
+          ],
+          "limits": {
+            "maximumSourceArchiveBytes": 1048576,
+            "maximumSourceExtractedBytes": 4194304,
+            "maximumSourceEntries": 1000,
+            "maximumArtifactArchiveBytes": 0,
+            "maximumArtifactExtractedBytes": 0,
+            "maximumArtifactEntries": 0,
+            "maximumArtifacts": 0,
+            "maximumCacheArchiveBytes": 4294967296,
+            "maximumCacheExtractedBytes": 17179869184,
+            "maximumCacheEntries": 1000000,
+            "maximumCaches": 1,
+            "maximumLogChunkBytes": 65536,
+            "maximumTotalLogBytes": 10485760,
+            "maximumWorkspaceBytes": 21474836480,
+            "maximumWorkspaceEntries": 100000
+          },
+          "resources": {
+            "maximumMemoryBytes": 34359738368,
+            "maximumCpus": 8,
+            "maximumPids": 32768,
+            "maximumSharedMemoryBytes": 4294967296
+          },
+          "leaseFeatures": [
+            "image-pull-grants",
+            "candidate-bindings",
+            "npm-read-grants"
+          ],
+          "maximumTimeoutMs": 7200000
+        }
+      }
+    },
+    {
+      "id": "capabilities-empty-lease-features-valid",
+      "schema": "RunnerCapabilities",
+      "valid": true,
+      "instance": {
+        "executionProfiles": [
+          "oci"
+        ],
+        "isolation": [
+          "container",
+          "microvm"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        },
+        "leaseFeatures": []
+      }
+    },
+    {
+      "id": "capabilities-candidate-bindings-without-pull-grants-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci"
+        ],
+        "isolation": [
+          "container",
+          "microvm"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        },
+        "leaseFeatures": [
+          "candidate-bindings"
+        ]
+      }
+    },
+    {
+      "id": "capabilities-unknown-lease-feature-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci"
+        ],
+        "isolation": [
+          "container",
+          "microvm"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        },
+        "leaseFeatures": [
+          "image-push-grants"
+        ]
+      }
+    },
+    {
+      "id": "capabilities-duplicate-lease-feature-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci"
+        ],
+        "isolation": [
+          "container",
+          "microvm"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        },
+        "leaseFeatures": [
+          "npm-read-grants",
+          "npm-read-grants"
+        ]
+      }
+    },
+    {
+      "id": "capabilities-timeout-below-minimum-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci"
+        ],
+        "isolation": [
+          "container",
+          "microvm"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        },
+        "maximumTimeoutMs": 999
+      }
+    },
+    {
+      "id": "capabilities-timeout-above-maximum-invalid",
+      "schema": "RunnerCapabilities",
+      "valid": false,
+      "instance": {
+        "executionProfiles": [
+          "oci"
+        ],
+        "isolation": [
+          "container",
+          "microvm"
+        ],
+        "platforms": [
+          "linux/amd64"
+        ],
+        "labels": [
+          "linux"
+        ],
+        "features": [
+          "source.tar-gz",
+          "artifacts",
+          "caches"
+        ],
+        "networks": [
+          "none",
+          "egress"
+        ],
+        "sourceFormats": [
+          "tar.gz"
+        ],
+        "limits": {
+          "maximumSourceArchiveBytes": 1048576,
+          "maximumSourceExtractedBytes": 4194304,
+          "maximumSourceEntries": 1000,
+          "maximumArtifactArchiveBytes": 0,
+          "maximumArtifactExtractedBytes": 0,
+          "maximumArtifactEntries": 0,
+          "maximumArtifacts": 0,
+          "maximumCacheArchiveBytes": 4294967296,
+          "maximumCacheExtractedBytes": 17179869184,
+          "maximumCacheEntries": 1000000,
+          "maximumCaches": 1,
+          "maximumLogChunkBytes": 65536,
+          "maximumTotalLogBytes": 10485760,
+          "maximumWorkspaceBytes": 21474836480,
+          "maximumWorkspaceEntries": 100000
+        },
+        "maximumTimeoutMs": 86400001
+      }
+    }
+  ]
+}