@ship.zone/ci-spec 2.0.0

package/schemas/runner-job.schema.json

@@ -0,0 +1,1172 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://ship.zone/spec/ci/schemas/runner-job.schema.json",
+  "title": "ship.zone compiled runner job",
+  "description": "Immutable job issued by a conforming coordinator to a runner after workflow compilation and policy enforcement. The execution profile in requirements.executionProfile selects exactly one profile shape.",
+  "type": "object",
+  "unevaluatedProperties": false,
+  "required": [
+    "spec",
+    "sourceObjectId",
+    "workflowDigest",
+    "compiledPlanDigest",
+    "requirements",
+    "permissions",
+    "network",
+    "source",
+    "secrets",
+    "timeoutMs",
+    "artifacts",
+    "caches"
+  ],
+  "properties": {
+    "spec": {
+      "$ref": "#/$defs/specVersion"
+    },
+    "sourceObjectId": {
+      "$ref": "#/$defs/objectId"
+    },
+    "workflowDigest": {
+      "$ref": "#/$defs/sha256"
+    },
+    "compiledPlanDigest": {
+      "$ref": "#/$defs/sha256"
+    },
+    "requirements": {
+      "$ref": "#/$defs/requirements"
+    },
+    "permissions": {
+      "$ref": "#/$defs/permissions"
+    },
+    "network": {
+      "$ref": "#/$defs/network"
+    },
+    "source": {
+      "$ref": "#/$defs/source"
+    },
+    "secrets": {
+      "$ref": "#/$defs/environment"
+    },
+    "timeoutMs": {
+      "type": "integer",
+      "minimum": 1000,
+      "maximum": 86400000
+    },
+    "resources": {
+      "$ref": "#/$defs/resources"
+    },
+    "npmRead": {
+      "$ref": "#/$defs/npmRead"
+    },
+    "artifacts": {
+      "type": "array",
+      "maxItems": 64,
+      "items": {
+        "$ref": "#/$defs/artifact"
+      }
+    },
+    "caches": {
+      "type": "array",
+      "maxItems": 32
+    }
+  },
+  "oneOf": [
+    {
+      "$ref": "#/$defs/containerJob"
+    },
+    {
+      "$ref": "#/$defs/imageBuildJob"
+    },
+    {
+      "$ref": "#/$defs/vmJob"
+    }
+  ],
+  "allOf": [
+    {
+      "if": {
+        "type": "object",
+        "properties": {
+          "npmRead": {}
+        },
+        "required": ["npmRead"]
+      },
+      "then": {
+        "type": "object",
+        "properties": {
+          "steps": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "environment": {
+                  "type": "object",
+                  "properties": {
+                    "NPM_CONFIG_USERCONFIG": false
+                  }
+                }
+              }
+            }
+          },
+          "build": {
+            "type": "object",
+            "properties": {
+              "secrets": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "id": {
+                      "not": {
+                        "const": "npmrc"
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "type": "object",
+        "properties": {
+          "permissions": {
+            "type": "object",
+            "properties": {
+              "artifacts": {
+                "const": "none"
+              }
+            },
+            "required": ["artifacts"]
+          }
+        },
+        "required": ["permissions"]
+      },
+      "then": {
+        "type": "object",
+        "properties": {
+          "artifacts": {
+            "type": "array",
+            "maxItems": 0
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "type": "object",
+        "properties": {
+          "permissions": {
+            "type": "object",
+            "properties": {
+              "caches": {
+                "const": "none"
+              }
+            },
+            "required": ["caches"]
+          }
+        },
+        "required": ["permissions"]
+      },
+      "then": {
+        "type": "object",
+        "properties": {
+          "caches": {
+            "type": "array",
+            "maxItems": 0
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "type": "object",
+        "properties": {
+          "artifacts": {
+            "type": "array",
+            "minItems": 1
+          }
+        },
+        "required": ["artifacts"]
+      },
+      "then": {
+        "type": "object",
+        "properties": {
+          "permissions": {
+            "type": "object",
+            "properties": {
+              "artifacts": {
+                "const": "write"
+              }
+            },
+            "required": ["artifacts"]
+          },
+          "requirements": {
+            "type": "object",
+            "properties": {
+              "features": {
+                "type": "array",
+                "contains": {
+                  "const": "artifacts"
+                }
+              }
+            },
+            "required": ["features"]
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "type": "object",
+        "properties": {
+          "caches": {
+            "type": "array",
+            "minItems": 1
+          }
+        },
+        "required": ["caches"]
+      },
+      "then": {
+        "type": "object",
+        "properties": {
+          "permissions": {
+            "type": "object",
+            "properties": {
+              "caches": {
+                "enum": ["read", "read-write"]
+              }
+            },
+            "required": ["caches"]
+          },
+          "requirements": {
+            "type": "object",
+            "properties": {
+              "features": {
+                "type": "array",
+                "contains": {
+                  "const": "caches"
+                }
+              }
+            },
+            "required": ["features"]
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "type": "object",
+        "properties": {
+          "caches": {
+            "type": "array",
+            "contains": {
+              "type": "object",
+              "properties": {
+                "access": {
+                  "const": "read-write"
+                }
+              },
+              "required": ["access"]
+            }
+          }
+        },
+        "required": ["caches"]
+      },
+      "then": {
+        "type": "object",
+        "properties": {
+          "permissions": {
+            "type": "object",
+            "properties": {
+              "caches": {
+                "const": "read-write"
+              }
+            },
+            "required": ["caches"]
+          }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "specVersion": {
+      "description": "A released @ship.zone/ci-spec package version in canonical MAJOR.MINOR.PATCH form without prerelease or build metadata. Each component has at most 15 digits, so every component is a safe integer.",
+      "type": "string",
+      "pattern": "^(?:0|[1-9][0-9]{0,14})\\.(?:0|[1-9][0-9]{0,14})\\.(?:0|[1-9][0-9]{0,14})$"
+    },
+    "containerProfile": {
+      "const": "oci"
+    },
+    "imageBuildProfile": {
+      "const": "oci-image"
+    },
+    "vmProfile": {
+      "const": "vm"
+    },
+    "executionProfile": {
+      "anyOf": [
+        {
+          "$ref": "#/$defs/containerProfile"
+        },
+        {
+          "$ref": "#/$defs/imageBuildProfile"
+        },
+        {
+          "$ref": "#/$defs/vmProfile"
+        }
+      ]
+    },
+    "isolation": {
+      "enum": ["container", "microvm"]
+    },
+    "feature": {
+      "enum": ["source.tar-gz", "artifacts", "caches"]
+    },
+    "networkMode": {
+      "enum": ["none", "egress"]
+    },
+    "containerJob": {
+      "type": "object",
+      "required": ["execution", "steps"],
+      "properties": {
+        "requirements": {
+          "type": "object",
+          "properties": {
+            "executionProfile": {
+              "$ref": "#/$defs/containerProfile"
+            },
+            "platform": {
+              "$ref": "#/$defs/linuxPlatform"
+            }
+          }
+        },
+        "permissions": {
+          "type": "object",
+          "properties": {
+            "images": {
+              "const": "none"
+            }
+          }
+        },
+        "execution": {
+          "$ref": "#/$defs/ociExecution"
+        },
+        "steps": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 128,
+          "items": {
+            "$ref": "#/$defs/compiledStep"
+          }
+        },
+        "caches": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/cache"
+          }
+        }
+      }
+    },
+    "imageBuildJob": {
+      "type": "object",
+      "required": ["build"],
+      "properties": {
+        "requirements": {
+          "type": "object",
+          "required": ["platform"],
+          "properties": {
+            "executionProfile": {
+              "$ref": "#/$defs/imageBuildProfile"
+            },
+            "isolation": {
+              "const": "microvm"
+            },
+            "platform": {
+              "$ref": "#/$defs/linuxPlatform"
+            }
+          }
+        },
+        "permissions": {
+          "type": "object",
+          "properties": {
+            "images": {
+              "const": "push"
+            }
+          }
+        },
+        "build": {
+          "$ref": "#/$defs/imageBuild"
+        },
+        "artifacts": {
+          "type": "array",
+          "maxItems": 0
+        },
+        "caches": {
+          "type": "array",
+          "maxItems": 1,
+          "items": {
+            "$ref": "#/$defs/buildCache"
+          }
+        }
+      }
+    },
+    "vmJob": {
+      "type": "object",
+      "required": ["execution", "steps"],
+      "properties": {
+        "requirements": {
+          "type": "object",
+          "required": ["platform"],
+          "properties": {
+            "executionProfile": {
+              "$ref": "#/$defs/vmProfile"
+            },
+            "isolation": {
+              "const": "microvm"
+            },
+            "platform": {
+              "$ref": "#/$defs/vmPlatform"
+            }
+          }
+        },
+        "permissions": {
+          "type": "object",
+          "properties": {
+            "images": {
+              "const": "none"
+            }
+          }
+        },
+        "execution": {
+          "$ref": "#/$defs/vmExecution"
+        },
+        "steps": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 128,
+          "items": {
+            "$ref": "#/$defs/compiledStep"
+          }
+        },
+        "caches": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/cache"
+          }
+        }
+      },
+      "allOf": [
+        {
+          "$ref": "#/$defs/darwinGuestRestrictions"
+        }
+      ]
+    },
+    "darwinGuestRestrictions": {
+      "description": "A darwin guest boots a digest-pinned VM image and has no /dev/shm.",
+      "if": {
+        "type": "object",
+        "properties": {
+          "requirements": {
+            "type": "object",
+            "properties": {
+              "platform": {
+                "const": "darwin/arm64"
+              }
+            },
+            "required": ["platform"]
+          }
+        },
+        "required": ["requirements"]
+      },
+      "then": {
+        "type": "object",
+        "properties": {
+          "execution": {
+            "type": "object",
+            "properties": {
+              "image": {
+                "$ref": "#/$defs/pinnedImage"
+              }
+            }
+          },
+          "resources": {
+            "type": "object",
+            "properties": {
+              "sharedMemoryBytes": false
+            }
+          }
+        }
+      }
+    },
+    "identifier": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 64,
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$"
+    },
+    "objectId": {
+      "type": "string",
+      "minLength": 40,
+      "maxLength": 64,
+      "pattern": "^[a-f0-9]+$"
+    },
+    "sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "platform": {
+      "type": "string",
+      "minLength": 3,
+      "maxLength": 64,
+      "pattern": "^[a-z0-9]+/[a-z0-9_]+(?:/[a-z0-9]+)?$"
+    },
+    "requirements": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["executionProfile", "isolation", "labels", "features", "limits"],
+      "properties": {
+        "executionProfile": {
+          "$ref": "#/$defs/executionProfile"
+        },
+        "isolation": {
+          "$ref": "#/$defs/isolation"
+        },
+        "platform": {
+          "$ref": "#/$defs/platform"
+        },
+        "labels": {
+          "type": "array",
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/identifier"
+          }
+        },
+        "features": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 16,
+          "uniqueItems": true,
+          "contains": {
+            "const": "source.tar-gz"
+          },
+          "items": {
+            "$ref": "#/$defs/feature"
+          }
+        },
+        "limits": {
+          "$ref": "#/$defs/limits"
+        }
+      }
+    },
+    "limits": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "maximumSourceArchiveBytes",
+        "maximumSourceExtractedBytes",
+        "maximumSourceEntries",
+        "maximumArtifactArchiveBytes",
+        "maximumArtifactExtractedBytes",
+        "maximumArtifactEntries",
+        "maximumArtifacts",
+        "maximumCacheArchiveBytes",
+        "maximumCacheExtractedBytes",
+        "maximumCacheEntries",
+        "maximumCaches",
+        "maximumLogChunkBytes",
+        "maximumTotalLogBytes",
+        "maximumWorkspaceBytes",
+        "maximumWorkspaceEntries"
+      ],
+      "properties": {
+        "maximumSourceArchiveBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 8589934592
+        },
+        "maximumSourceExtractedBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 68719476736
+        },
+        "maximumSourceEntries": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1000000
+        },
+        "maximumArtifactArchiveBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 17179869184
+        },
+        "maximumArtifactExtractedBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 137438953472
+        },
+        "maximumArtifactEntries": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1000000
+        },
+        "maximumArtifacts": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 64
+        },
+        "maximumCacheArchiveBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 17179869184
+        },
+        "maximumCacheExtractedBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 137438953472
+        },
+        "maximumCacheEntries": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1000000
+        },
+        "maximumCaches": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 32
+        },
+        "maximumLogChunkBytes": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 65536
+        },
+        "maximumTotalLogBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1073741824
+        },
+        "maximumWorkspaceBytes": {
+          "type": "integer",
+          "minimum": 16777216,
+          "maximum": 1099511627776
+        },
+        "maximumWorkspaceEntries": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 2000000
+        }
+      }
+    },
+    "permissions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["source", "artifacts", "caches", "images"],
+      "properties": {
+        "source": {
+          "const": "read"
+        },
+        "artifacts": {
+          "enum": ["none", "write"]
+        },
+        "caches": {
+          "enum": ["none", "read", "read-write"]
+        },
+        "images": {
+          "enum": ["none", "push"]
+        }
+      }
+    },
+    "network": {
+      "oneOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["mode"],
+          "properties": {
+            "mode": {
+              "const": "none"
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["mode", "allow"],
+          "properties": {
+            "mode": {
+              "const": "egress"
+            },
+            "allow": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 64,
+              "uniqueItems": true,
+              "items": {
+                "$ref": "#/$defs/egressRule"
+              }
+            }
+          }
+        }
+      ]
+    },
+    "egressRule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["host", "ports"],
+      "properties": {
+        "host": {
+          "$ref": "#/$defs/egressHost"
+        },
+        "ports": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 16,
+          "uniqueItems": true,
+          "items": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 65535
+          }
+        }
+      }
+    },
+    "egressHost": {
+      "type": "string",
+      "minLength": 3,
+      "maxLength": 253,
+      "pattern": "^(?:\\*\\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z](?:[a-z0-9-]{0,61}[a-z0-9])?$"
+    },
+    "pinnedImage": {
+      "type": "string",
+      "minLength": 73,
+      "maxLength": 1024,
+      "pattern": "^[^\\s@]+@sha256:[a-f0-9]{64}$"
+    },
+    "candidateReference": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["candidate"],
+      "properties": {
+        "candidate": {
+          "$ref": "#/$defs/identifier"
+        }
+      }
+    },
+    "imageReference": {
+      "oneOf": [
+        {
+          "$ref": "#/$defs/pinnedImage"
+        },
+        {
+          "$ref": "#/$defs/candidateReference"
+        }
+      ]
+    },
+    "ociExecution": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["profile", "image"],
+      "properties": {
+        "profile": {
+          "$ref": "#/$defs/containerProfile"
+        },
+        "image": {
+          "$ref": "#/$defs/imageReference"
+        },
+        "workingDirectory": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "pattern": "^/[A-Za-z0-9._/-]+$"
+        }
+      }
+    },
+    "vmExecution": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["profile", "image"],
+      "properties": {
+        "profile": {
+          "$ref": "#/$defs/vmProfile"
+        },
+        "image": {
+          "$ref": "#/$defs/imageReference"
+        },
+        "workingDirectory": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "pattern": "^/[A-Za-z0-9._/-]+$"
+        }
+      }
+    },
+    "linuxPlatform": {
+      "description": "Platforms of the oci and oci-image profiles, which execute only linux.",
+      "type": "string",
+      "allOf": [
+        {
+          "$ref": "#/$defs/platform"
+        }
+      ],
+      "pattern": "^linux/"
+    },
+    "vmPlatform": {
+      "description": "Guest platforms of the vm profile: every linux platform, and darwin/arm64.",
+      "anyOf": [
+        {
+          "$ref": "#/$defs/linuxPlatform"
+        },
+        {
+          "const": "darwin/arm64"
+        }
+      ]
+    },
+    "imageBuild": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["context", "dockerfile", "buildArgs", "secrets", "labels", "baseImages"],
+      "properties": {
+        "context": {
+          "$ref": "#/$defs/relativePath"
+        },
+        "dockerfile": {
+          "$ref": "#/$defs/relativePath"
+        },
+        "target": {
+          "$ref": "#/$defs/identifier"
+        },
+        "buildArgs": {
+          "$ref": "#/$defs/buildArgs"
+        },
+        "secrets": {
+          "type": "array",
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/buildSecret"
+          }
+        },
+        "labels": {
+          "$ref": "#/$defs/imageLabels",
+          "type": "object",
+          "required": ["org.opencontainers.image.revision", "org.opencontainers.image.source"],
+          "properties": {
+            "org.opencontainers.image.revision": {
+              "$ref": "#/$defs/objectId"
+            },
+            "org.opencontainers.image.source": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 1024
+            }
+          }
+        },
+        "baseImages": {
+          "type": "array",
+          "maxItems": 16,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/baseImage"
+          }
+        }
+      }
+    },
+    "buildArgs": {
+      "type": "object",
+      "maxProperties": 64,
+      "propertyNames": {
+        "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,127}$",
+        "not": {
+          "pattern": "^BUILDKIT_"
+        }
+      },
+      "additionalProperties": {
+        "type": "string",
+        "maxLength": 65536
+      }
+    },
+    "buildSecret": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "environment"],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/identifier"
+        },
+        "environment": {
+          "type": "string",
+          "pattern": "^[A-Z_][A-Z0-9_]{0,127}$"
+        }
+      }
+    },
+    "imageLabels": {
+      "type": "object",
+      "maxProperties": 64,
+      "propertyNames": {
+        "maxLength": 128,
+        "pattern": "^[a-z0-9]+(?:[._-][a-z0-9]+)*$"
+      },
+      "additionalProperties": {
+        "type": "string",
+        "maxLength": 4096
+      }
+    },
+    "baseImage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "image"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$"
+        },
+        "image": {
+          "$ref": "#/$defs/imageReference"
+        }
+      }
+    },
+    "compiledStep": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["command", "environment"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "command": {
+          "$ref": "#/$defs/command"
+        },
+        "environment": {
+          "$ref": "#/$defs/environment"
+        }
+      }
+    },
+    "command": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 128,
+      "items": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 16384
+      }
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["format", "sha256", "sizeBytes", "extractedSizeBytes", "entryCount"],
+      "properties": {
+        "format": {
+          "const": "tar.gz"
+        },
+        "sha256": {
+          "$ref": "#/$defs/sha256"
+        },
+        "sizeBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 8589934592
+        },
+        "extractedSizeBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 68719476736
+        },
+        "entryCount": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1000000
+        }
+      }
+    },
+    "environment": {
+      "type": "object",
+      "maxProperties": 128,
+      "propertyNames": {
+        "pattern": "^[A-Z_][A-Z0-9_]{0,127}$"
+      },
+      "additionalProperties": {
+        "type": "string",
+        "maxLength": 65536
+      }
+    },
+    "resources": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "memoryBytes": {
+          "type": "integer",
+          "minimum": 16777216,
+          "maximum": 1099511627776
+        },
+        "cpus": {
+          "type": "number",
+          "exclusiveMinimum": 0,
+          "maximum": 1024
+        },
+        "pids": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 1048576
+        },
+        "sharedMemoryBytes": {
+          "type": "integer",
+          "minimum": 1048576,
+          "maximum": 1099511627776
+        }
+      }
+    },
+    "artifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "path", "format", "when", "required", "maximumBytes", "maximumExtractedBytes", "maximumEntries"],
+      "properties": {
+        "name": {
+          "$ref": "#/$defs/identifier"
+        },
+        "path": {
+          "$ref": "#/$defs/relativePath"
+        },
+        "format": {
+          "const": "tar.gz"
+        },
+        "when": {
+          "enum": ["always", "success", "failure"]
+        },
+        "required": {
+          "type": "boolean"
+        },
+        "maximumBytes": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 17179869184
+        },
+        "maximumExtractedBytes": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 137438953472
+        },
+        "maximumEntries": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 1000000
+        },
+        "retentionDays": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 3650
+        }
+      }
+    },
+    "cacheDeclaration": {
+      "type": "object",
+      "required": ["name", "key", "access", "maximumBytes", "maximumExtractedBytes", "maximumEntries"],
+      "properties": {
+        "name": {
+          "$ref": "#/$defs/identifier"
+        },
+        "key": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "access": {
+          "enum": ["read", "read-write"]
+        },
+        "maximumBytes": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 17179869184
+        },
+        "maximumExtractedBytes": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 137438953472
+        },
+        "maximumEntries": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 1000000
+        },
+        "retentionDays": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 3650
+        }
+      }
+    },
+    "cache": {
+      "$ref": "#/$defs/cacheDeclaration",
+      "type": "object",
+      "unevaluatedProperties": false,
+      "required": ["paths"],
+      "properties": {
+        "paths": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/relativePath"
+          }
+        }
+      }
+    },
+    "buildCache": {
+      "$ref": "#/$defs/cacheDeclaration",
+      "type": "object",
+      "unevaluatedProperties": false
+    },
+    "npmRegistry": {
+      "type": "string",
+      "minLength": 9,
+      "maxLength": 1024,
+      "pattern": "^https://[a-z0-9.-]+(?::[0-9]{1,5})?(?:/[^\\s?#]*)?$"
+    },
+    "npmScope": {
+      "type": "string",
+      "minLength": 2,
+      "maxLength": 129,
+      "pattern": "^@[a-z0-9~-][a-z0-9_.~-]{0,127}$"
+    },
+    "npmRead": {
+      "description": "Attempt-scoped read access to npm packages of the listed scopes on the listed registries.",
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 8,
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["registry", "scopes"],
+        "properties": {
+          "registry": {
+            "$ref": "#/$defs/npmRegistry"
+          },
+          "scopes": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 16,
+            "uniqueItems": true,
+            "items": {
+              "$ref": "#/$defs/npmScope"
+            }
+          }
+        }
+      }
+    },
+    "relativePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1024,
+      "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\u0000).+$"
+    }
+  }
+}