@ship.zone/ci-spec 2.0.0

package/spec/runner.openapi.json

@@ -0,0 +1,2182 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "ship.zone CI Runner Protocol",
+    "version": "2.0.0",
+    "description": "Language-neutral, outbound runner protocol of @ship.zone/ci-spec. info.version is the specification version this description is written against. This draft is incompatible with the legacy internal runner protocol it replaces.",
+    "license": {
+      "name": "MIT",
+      "identifier": "MIT"
+    }
+  },
+  "tags": [
+    {
+      "name": "Discovery"
+    },
+    {
+      "name": "Runner lifecycle"
+    },
+    {
+      "name": "Job lifecycle"
+    },
+    {
+      "name": "Transfers"
+    }
+  ],
+  "paths": {
+    "/api/runner": {
+      "get": {
+        "tags": ["Discovery"],
+        "operationId": "getRunnerProtocol",
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "Runner protocol discovery",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DiscoveryResponse"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/runner/runners/register": {
+      "post": {
+        "tags": ["Runner lifecycle"],
+        "operationId": "registerRunner",
+        "security": [
+          {
+            "bootstrapBearer": []
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RegisterRunnerRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Registered runner or exact replayed registration response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RegisterRunnerResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/runners/{runnerId}/sessions": {
+      "post": {
+        "tags": ["Runner lifecycle"],
+        "operationId": "startRunnerSession",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/RunnerId"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/StartSessionRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Started runner session",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/StartSessionResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/runners/{runnerId}/heartbeat": {
+      "post": {
+        "tags": ["Runner lifecycle"],
+        "operationId": "heartbeatRunner",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/RunnerId"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RunnerHeartbeatRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Runner heartbeat accepted",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RunnerHeartbeatResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/claim": {
+      "post": {
+        "tags": ["Job lifecycle"],
+        "operationId": "claimJob",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ClaimJobRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Matching lease or no available job",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ClaimJobResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/{jobId}/attempts/{attemptId}/accept": {
+      "post": {
+        "tags": ["Job lifecycle"],
+        "operationId": "acceptJob",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/JobId"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptId"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/AcceptJobRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "204": {
+            "description": "Lease accepted or exact acceptance replayed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/{jobId}/attempts/{attemptId}/heartbeat": {
+      "post": {
+        "tags": ["Job lifecycle"],
+        "operationId": "heartbeatJob",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/JobId"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptId"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/JobHeartbeatRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Lease renewed and optional cancellation directive delivered",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/JobHeartbeatResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/{jobId}/attempts/{attemptId}/logs": {
+      "post": {
+        "tags": ["Job lifecycle"],
+        "operationId": "appendJobLog",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/JobId"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptId"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/LogChunk"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Log sequence acknowledgement",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/LogAcknowledgement"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/{jobId}/attempts/{attemptId}/complete": {
+      "post": {
+        "tags": ["Job lifecycle"],
+        "operationId": "completeJob",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/JobId"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptId"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CompleteJobRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Terminal result accepted or exactly replayed",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CompleteJobResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/{jobId}/attempts/{attemptId}/abandon": {
+      "post": {
+        "tags": ["Job lifecycle"],
+        "operationId": "abandonJob",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/JobId"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptId"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/AbandonJobRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "204": {
+            "description": "Attempt abandoned"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/recover": {
+      "post": {
+        "tags": ["Job lifecycle"],
+        "operationId": "recoverJobAttempt",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RecoverAttemptRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "204": {
+            "description": "Interrupted attempt reconciled"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/sources/{sha256}": {
+      "get": {
+        "tags": ["Transfers"],
+        "operationId": "downloadJobSource",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/Sha256"
+          },
+          {
+            "$ref": "#/components/parameters/RunnerIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/SessionIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/JobIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/LeaseIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/FencingTokenHeader"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Exact immutable source archive",
+            "headers": {
+              "X-Content-SHA256": {
+                "$ref": "#/components/headers/Sha256"
+              },
+              "Content-Length": {
+                "$ref": "#/components/headers/SourceArchiveBytes"
+              },
+              "X-Extracted-Bytes": {
+                "$ref": "#/components/headers/SourceExtractedBytes"
+              },
+              "X-Archive-Entries": {
+                "$ref": "#/components/headers/SourceArchiveEntries"
+              }
+            },
+            "content": {
+              "application/gzip": {
+                "schema": {
+                  "type": "string",
+                  "contentEncoding": "binary"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/{jobId}/attempts/{attemptId}/artifacts/{artifactName}": {
+      "put": {
+        "tags": ["Transfers"],
+        "operationId": "uploadJobArtifact",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/JobId"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptId"
+          },
+          {
+            "$ref": "#/components/parameters/ArtifactName"
+          },
+          {
+            "$ref": "#/components/parameters/RunnerIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/SessionIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/LeaseIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/FencingTokenHeader"
+          },
+          {
+            "$ref": "#/components/parameters/ContentSha256Header"
+          },
+          {
+            "$ref": "#/components/parameters/TransferRequestIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/ContentLengthHeader"
+          },
+          {
+            "$ref": "#/components/parameters/ExtractedBytesHeader"
+          },
+          {
+            "$ref": "#/components/parameters/ArchiveEntriesHeader"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/gzip": {
+              "schema": {
+                "type": "string",
+                "contentEncoding": "binary"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Artifact verified and published",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TransferRecord"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/{jobId}/attempts/{attemptId}/caches/{cacheName}": {
+      "get": {
+        "tags": ["Transfers"],
+        "operationId": "downloadJobCache",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/JobId"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptId"
+          },
+          {
+            "$ref": "#/components/parameters/CacheName"
+          },
+          {
+            "$ref": "#/components/parameters/RunnerIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/SessionIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/LeaseIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/FencingTokenHeader"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Exact trust-scoped cache archive",
+            "headers": {
+              "X-Content-SHA256": {
+                "$ref": "#/components/headers/Sha256"
+              },
+              "Content-Length": {
+                "$ref": "#/components/headers/ArchiveBytes"
+              },
+              "X-Extracted-Bytes": {
+                "$ref": "#/components/headers/ExtractedBytes"
+              },
+              "X-Archive-Entries": {
+                "$ref": "#/components/headers/ArchiveEntries"
+              }
+            },
+            "content": {
+              "application/gzip": {
+                "schema": {
+                  "type": "string",
+                  "contentEncoding": "binary"
+                }
+              }
+            }
+          },
+          "204": {
+            "description": "No matching cache exists"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          }
+        }
+      },
+      "put": {
+        "tags": ["Transfers"],
+        "operationId": "uploadJobCache",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/JobId"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptId"
+          },
+          {
+            "$ref": "#/components/parameters/CacheName"
+          },
+          {
+            "$ref": "#/components/parameters/RunnerIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/SessionIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/LeaseIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/FencingTokenHeader"
+          },
+          {
+            "$ref": "#/components/parameters/ContentSha256Header"
+          },
+          {
+            "$ref": "#/components/parameters/TransferRequestIdHeader"
+          },
+          {
+            "$ref": "#/components/parameters/ContentLengthHeader"
+          },
+          {
+            "$ref": "#/components/parameters/ExtractedBytesHeader"
+          },
+          {
+            "$ref": "#/components/parameters/ArchiveEntriesHeader"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/gzip": {
+              "schema": {
+                "type": "string",
+                "contentEncoding": "binary"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Cache verified and generation published",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TransferRecord"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    },
+    "/api/runner/jobs/{jobId}/attempts/{attemptId}/image": {
+      "put": {
+        "tags": ["Transfers"],
+        "operationId": "recordJobImage",
+        "security": [
+          {
+            "runnerBearer": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/JobId"
+          },
+          {
+            "$ref": "#/components/parameters/AttemptId"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RecordImageRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Pushed image manifest verified and recorded, or exact record replayed",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ImageRecord"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "409": {
+            "$ref": "#/components/responses/Conflict"
+          },
+          "413": {
+            "$ref": "#/components/responses/PayloadTooLarge"
+          }
+        }
+      }
+    }
+  },
+  "components": {
+    "securitySchemes": {
+      "bootstrapBearer": {
+        "type": "http",
+        "scheme": "bearer",
+        "bearerFormat": "opaque one-time registration credential"
+      },
+      "runnerBearer": {
+        "type": "http",
+        "scheme": "bearer",
+        "bearerFormat": "opaque short-lived runner credential"
+      }
+    },
+    "parameters": {
+      "RunnerId": {
+        "name": "runnerId",
+        "in": "path",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "JobId": {
+        "name": "jobId",
+        "in": "path",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "AttemptId": {
+        "name": "attemptId",
+        "in": "path",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "ArtifactName": {
+        "name": "artifactName",
+        "in": "path",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "CacheName": {
+        "name": "cacheName",
+        "in": "path",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "Sha256": {
+        "name": "sha256",
+        "in": "path",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Sha256"
+        }
+      },
+      "RunnerIdHeader": {
+        "name": "X-Runner-ID",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "SessionIdHeader": {
+        "name": "X-Session-ID",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "JobIdHeader": {
+        "name": "X-Job-ID",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "AttemptIdHeader": {
+        "name": "X-Attempt-ID",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "LeaseIdHeader": {
+        "name": "X-Lease-ID",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "FencingTokenHeader": {
+        "name": "X-Fencing-Token",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "type": "string",
+          "minLength": 16,
+          "maxLength": 512
+        }
+      },
+      "ContentSha256Header": {
+        "name": "X-Content-SHA256",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Sha256"
+        }
+      },
+      "TransferRequestIdHeader": {
+        "name": "X-Transfer-Request-ID",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "$ref": "#/components/schemas/Identifier"
+        }
+      },
+      "ContentLengthHeader": {
+        "name": "Content-Length",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 17179869184
+        }
+      },
+      "ExtractedBytesHeader": {
+        "name": "X-Extracted-Bytes",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 137438953472
+        }
+      },
+      "ArchiveEntriesHeader": {
+        "name": "X-Archive-Entries",
+        "in": "header",
+        "required": true,
+        "schema": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1000000
+        }
+      }
+    },
+    "headers": {
+      "Sha256": {
+        "description": "Lowercase SHA-256 of the response body",
+        "schema": {
+          "$ref": "#/components/schemas/Sha256"
+        }
+      },
+      "ArchiveBytes": {
+        "description": "Recomputed compressed response body bytes",
+        "schema": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 17179869184
+        }
+      },
+      "SourceArchiveBytes": {
+        "description": "Recomputed compressed source response body bytes",
+        "schema": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 8589934592
+        }
+      },
+      "ExtractedBytes": {
+        "description": "Recomputed regular-file bytes after safe extraction",
+        "schema": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 137438953472
+        }
+      },
+      "SourceExtractedBytes": {
+        "description": "Recomputed regular-file bytes after safe source extraction",
+        "schema": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 68719476736
+        }
+      },
+      "ArchiveEntries": {
+        "description": "Recomputed archive entry count",
+        "schema": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1000000
+        }
+      },
+      "SourceArchiveEntries": {
+        "description": "Recomputed source archive entry count",
+        "schema": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1000000
+        }
+      }
+    },
+    "responses": {
+      "Unauthorized": {
+        "description": "Credential missing, expired, revoked, or not authorized for the endpoint",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/ErrorResponse"
+            }
+          }
+        }
+      },
+      "Conflict": {
+        "description": "Idempotency, lifecycle, sequence, session, lease, attempt, fencing, or specification-version conflict",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/ErrorResponse"
+            }
+          }
+        }
+      },
+      "PayloadTooLarge": {
+        "description": "Body exceeds the declared job or protocol limit",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/ErrorResponse"
+            }
+          }
+        }
+      }
+    },
+    "schemas": {
+      "Identifier": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 64,
+        "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$"
+      },
+      "Sha256": {
+        "type": "string",
+        "pattern": "^[a-f0-9]{64}$"
+      },
+      "Timestamp": {
+        "type": "string",
+        "format": "date-time"
+      },
+      "OciDigest": {
+        "type": "string",
+        "pattern": "^sha256:[a-f0-9]{64}$"
+      },
+      "RegistryHost": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 253,
+        "pattern": "^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::[0-9]{1,5})?$"
+      },
+      "OciRepository": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 255,
+        "pattern": "^[a-z0-9]+(?:(?:\\.|_|__|-+)[a-z0-9]+)*(?:/[a-z0-9]+(?:(?:\\.|_|__|-+)[a-z0-9]+)*)*$"
+      },
+      "DiscoveryResponse": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["spec", "basePath", "status", "serverTime", "limits"],
+        "properties": {
+          "spec": {
+            "$ref": "../schemas/runner-job.schema.json#/$defs/specVersion"
+          },
+          "basePath": {
+            "const": "/api/runner"
+          },
+          "status": {
+            "const": "draft"
+          },
+          "serverTime": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "limits": {
+            "$ref": "#/components/schemas/ProtocolLimits"
+          }
+        }
+      },
+      "ProtocolLimits": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["maximumJsonBytes", "maximumLogChunkBytes", "maximumTotalLogBytes", "minimumLeaseSeconds", "maximumLeaseSeconds"],
+        "properties": {
+          "maximumJsonBytes": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 2097152
+          },
+          "maximumLogChunkBytes": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 65536
+          },
+          "maximumTotalLogBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 1073741824
+          },
+          "minimumLeaseSeconds": {
+            "type": "integer",
+            "minimum": 30,
+            "maximum": 600
+          },
+          "maximumLeaseSeconds": {
+            "type": "integer",
+            "minimum": 30,
+            "maximum": 600
+          }
+        }
+      },
+      "RunnerCredential": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["credentialId", "runnerId", "token", "expiresAt"],
+        "properties": {
+          "credentialId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "runnerId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "token": {
+            "type": "string",
+            "minLength": 32,
+            "maxLength": 8192,
+            "writeOnly": true
+          },
+          "expiresAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "previousCredentialValidUntil": {
+            "$ref": "#/components/schemas/Timestamp"
+          }
+        }
+      },
+      "TransferLimits": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "maximumSourceArchiveBytes",
+          "maximumSourceExtractedBytes",
+          "maximumSourceEntries",
+          "maximumArtifactArchiveBytes",
+          "maximumArtifactExtractedBytes",
+          "maximumArtifactEntries",
+          "maximumArtifacts",
+          "maximumCacheArchiveBytes",
+          "maximumCacheExtractedBytes",
+          "maximumCacheEntries",
+          "maximumCaches",
+          "maximumLogChunkBytes",
+          "maximumTotalLogBytes",
+          "maximumWorkspaceBytes",
+          "maximumWorkspaceEntries"
+        ],
+        "properties": {
+          "maximumSourceArchiveBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 8589934592
+          },
+          "maximumSourceExtractedBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 68719476736
+          },
+          "maximumSourceEntries": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 1000000
+          },
+          "maximumArtifactArchiveBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 17179869184
+          },
+          "maximumArtifactExtractedBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 137438953472
+          },
+          "maximumArtifactEntries": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 1000000
+          },
+          "maximumArtifacts": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 64
+          },
+          "maximumCacheArchiveBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 17179869184
+          },
+          "maximumCacheExtractedBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 137438953472
+          },
+          "maximumCacheEntries": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 1000000
+          },
+          "maximumCaches": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 32
+          },
+          "maximumLogChunkBytes": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 65536
+          },
+          "maximumTotalLogBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 1073741824
+          },
+          "maximumWorkspaceBytes": {
+            "type": "integer",
+            "minimum": 16777216,
+            "maximum": 1099511627776
+          },
+          "maximumWorkspaceEntries": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 2000000
+          }
+        }
+      },
+      "ResourceLimits": {
+        "type": "object",
+        "additionalProperties": false,
+        "description": "Largest per-attempt resource ceilings the runner can enforce. A runner that advertises them is leased only jobs whose declared resources fit.",
+        "required": ["maximumMemoryBytes", "maximumCpus", "maximumPids", "maximumSharedMemoryBytes"],
+        "properties": {
+          "maximumMemoryBytes": {
+            "type": "integer",
+            "minimum": 16777216,
+            "maximum": 1099511627776
+          },
+          "maximumCpus": {
+            "type": "number",
+            "exclusiveMinimum": 0,
+            "maximum": 1024
+          },
+          "maximumPids": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 1048576
+          },
+          "maximumSharedMemoryBytes": {
+            "type": "integer",
+            "minimum": 1048576,
+            "maximum": 1099511627776
+          }
+        }
+      },
+      "LeaseFeature": {
+        "description": "Lease content a runner uses: image pull grants, candidate bindings, or npm read grants.",
+        "enum": ["image-pull-grants", "candidate-bindings", "npm-read-grants"]
+      },
+      "RunnerCapabilities": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["executionProfiles", "isolation", "platforms", "labels", "features", "networks", "sourceFormats", "limits"],
+        "properties": {
+          "executionProfiles": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 16,
+            "uniqueItems": true,
+            "items": {
+              "$ref": "../schemas/runner-job.schema.json#/$defs/executionProfile"
+            }
+          },
+          "isolation": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 2,
+            "uniqueItems": true,
+            "items": {
+              "$ref": "../schemas/runner-job.schema.json#/$defs/isolation"
+            }
+          },
+          "platforms": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 16,
+            "uniqueItems": true,
+            "items": {
+              "$ref": "../schemas/runner-job.schema.json#/$defs/platform"
+            }
+          },
+          "labels": {
+            "type": "array",
+            "maxItems": 32,
+            "uniqueItems": true,
+            "items": {
+              "$ref": "#/components/schemas/Identifier"
+            }
+          },
+          "features": {
+            "type": "array",
+            "maxItems": 16,
+            "uniqueItems": true,
+            "items": {
+              "$ref": "../schemas/runner-job.schema.json#/$defs/feature"
+            }
+          },
+          "networks": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 2,
+            "uniqueItems": true,
+            "items": {
+              "$ref": "../schemas/runner-job.schema.json#/$defs/networkMode"
+            }
+          },
+          "sourceFormats": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 1,
+            "items": {
+              "const": "tar.gz"
+            }
+          },
+          "limits": {
+            "$ref": "#/components/schemas/TransferLimits"
+          },
+          "resources": {
+            "$ref": "#/components/schemas/ResourceLimits"
+          },
+          "leaseFeatures": {
+            "type": "array",
+            "description": "Lease contents the runner uses. When present, a lease uses only listed lease features.",
+            "maxItems": 3,
+            "uniqueItems": true,
+            "items": {
+              "$ref": "#/components/schemas/LeaseFeature"
+            }
+          },
+          "maximumTimeoutMs": {
+            "type": "integer",
+            "description": "Largest job timeoutMs the runner executes. When present, a job is leased only when its timeoutMs is at most this value.",
+            "minimum": 1000,
+            "maximum": 86400000
+          }
+        },
+        "allOf": [
+          {
+            "if": {
+              "type": "object",
+              "properties": {
+                "executionProfiles": {
+                  "type": "array",
+                  "contains": {
+                    "$ref": "../schemas/runner-job.schema.json#/$defs/imageBuildProfile"
+                  }
+                }
+              },
+              "required": ["executionProfiles"]
+            },
+            "then": {
+              "type": "object",
+              "properties": {
+                "executionProfiles": {
+                  "type": "array",
+                  "maxItems": 1
+                },
+                "isolation": {
+                  "type": "array",
+                  "contains": {
+                    "const": "microvm"
+                  }
+                }
+              }
+            }
+          },
+          {
+            "if": {
+              "type": "object",
+              "properties": {
+                "executionProfiles": {
+                  "type": "array",
+                  "contains": {
+                    "$ref": "../schemas/runner-job.schema.json#/$defs/vmProfile"
+                  }
+                }
+              },
+              "required": ["executionProfiles"]
+            },
+            "then": {
+              "type": "object",
+              "properties": {
+                "isolation": {
+                  "type": "array",
+                  "contains": {
+                    "const": "microvm"
+                  }
+                }
+              }
+            }
+          },
+          {
+            "if": {
+              "type": "object",
+              "properties": {
+                "leaseFeatures": {
+                  "type": "array",
+                  "contains": {
+                    "const": "candidate-bindings"
+                  }
+                }
+              },
+              "required": ["leaseFeatures"]
+            },
+            "then": {
+              "type": "object",
+              "properties": {
+                "leaseFeatures": {
+                  "type": "array",
+                  "contains": {
+                    "const": "image-pull-grants"
+                  }
+                }
+              }
+            }
+          }
+        ]
+      },
+      "RegisterRunnerRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["registrationRequestId", "spec", "runnerVersion", "name", "capabilities"],
+        "properties": {
+          "registrationRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "spec": {
+            "$ref": "../schemas/runner-job.schema.json#/$defs/specVersion"
+          },
+          "runnerVersion": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64
+          },
+          "name": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+          },
+          "capabilities": {
+            "$ref": "#/components/schemas/RunnerCapabilities"
+          }
+        }
+      },
+      "RegisterRunnerResponse": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["spec", "serverTime", "registrationReplayUntil", "credential"],
+        "properties": {
+          "spec": {
+            "$ref": "../schemas/runner-job.schema.json#/$defs/specVersion"
+          },
+          "serverTime": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "registrationReplayUntil": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "credential": {
+            "$ref": "#/components/schemas/RunnerCredential"
+          }
+        }
+      },
+      "StartSessionRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["sessionRequestId", "runnerId", "spec", "runnerVersion", "capabilities"],
+        "properties": {
+          "sessionRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "runnerId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "spec": {
+            "$ref": "../schemas/runner-job.schema.json#/$defs/specVersion"
+          },
+          "runnerVersion": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64
+          },
+          "capabilities": {
+            "$ref": "#/components/schemas/RunnerCapabilities"
+          }
+        }
+      },
+      "StartSessionResponse": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["sessionId", "spec", "serverTime"],
+        "properties": {
+          "sessionId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "spec": {
+            "$ref": "../schemas/runner-job.schema.json#/$defs/specVersion"
+          },
+          "serverTime": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "credential": {
+            "$ref": "#/components/schemas/RunnerCredential"
+          }
+        }
+      },
+      "RunnerHeartbeatRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["runnerId", "sessionId"],
+        "properties": {
+          "runnerId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "sessionId": {
+            "$ref": "#/components/schemas/Identifier"
+          }
+        }
+      },
+      "RunnerHeartbeatResponse": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["serverTime", "drainRequested"],
+        "properties": {
+          "serverTime": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "drainRequested": {
+            "type": "boolean"
+          },
+          "credential": {
+            "$ref": "#/components/schemas/RunnerCredential"
+          }
+        }
+      },
+      "ClaimJobRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["claimRequestId", "runnerId", "sessionId", "capabilities"],
+        "properties": {
+          "claimRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "runnerId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "sessionId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "capabilities": {
+            "$ref": "#/components/schemas/RunnerCapabilities"
+          }
+        }
+      },
+      "ClaimJobResponse": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["serverTime", "lease"],
+        "properties": {
+          "serverTime": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "retryAfterMs": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 30000
+          },
+          "lease": {
+            "oneOf": [
+              {
+                "type": "null"
+              },
+              {
+                "$ref": "#/components/schemas/JobLease"
+              }
+            ]
+          }
+        }
+      },
+      "JobLease": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["jobId", "attemptId", "leaseId", "fencingToken", "leaseExpiresAt", "job", "grants", "bindings"],
+        "properties": {
+          "jobId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "attemptId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "leaseId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "fencingToken": {
+            "type": "string",
+            "minLength": 16,
+            "maxLength": 512
+          },
+          "leaseExpiresAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "job": {
+            "$ref": "../schemas/runner-job.schema.json"
+          },
+          "grants": {
+            "type": "array",
+            "maxItems": 64,
+            "items": {
+              "$ref": "#/components/schemas/ImageGrant"
+            }
+          },
+          "bindings": {
+            "type": "array",
+            "maxItems": 64,
+            "items": {
+              "$ref": "#/components/schemas/ImageBinding"
+            }
+          },
+          "npmGrants": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 8,
+            "items": {
+              "$ref": "#/components/schemas/NpmGrant"
+            }
+          }
+        },
+        "allOf": [
+          {
+            "if": {
+              "type": "object",
+              "properties": {
+                "job": {
+                  "type": "object",
+                  "properties": {
+                    "npmRead": {}
+                  },
+                  "required": ["npmRead"]
+                }
+              },
+              "required": ["job"]
+            },
+            "then": {
+              "type": "object",
+              "properties": {
+                "npmGrants": {}
+              },
+              "required": ["npmGrants"]
+            },
+            "else": {
+              "type": "object",
+              "properties": {
+                "npmGrants": false
+              }
+            }
+          }
+        ]
+      },
+      "NpmGrant": {
+        "type": "object",
+        "additionalProperties": false,
+        "description": "Attempt-scoped read-only npm registry token for one npmRead entry of the leased job. Outside the compiled plan digest.",
+        "required": ["grantId", "registry", "scopes", "secret", "expiresAt"],
+        "properties": {
+          "grantId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "registry": {
+            "$ref": "../schemas/runner-job.schema.json#/$defs/npmRegistry"
+          },
+          "scopes": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 16,
+            "uniqueItems": true,
+            "items": {
+              "$ref": "../schemas/runner-job.schema.json#/$defs/npmScope"
+            }
+          },
+          "secret": {
+            "type": "string",
+            "minLength": 32,
+            "maxLength": 8192,
+            "writeOnly": true
+          },
+          "expiresAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          }
+        }
+      },
+      "ImageGrant": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["grantId", "access", "registry", "repository", "username", "secret", "expiresAt"],
+        "properties": {
+          "grantId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "access": {
+            "enum": ["pull", "push"]
+          },
+          "registry": {
+            "$ref": "#/components/schemas/RegistryHost"
+          },
+          "repository": {
+            "$ref": "#/components/schemas/OciRepository"
+          },
+          "username": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "secret": {
+            "type": "string",
+            "minLength": 32,
+            "maxLength": 8192,
+            "writeOnly": true
+          },
+          "expiresAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          }
+        }
+      },
+      "ImageBinding": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["candidate", "image"],
+        "properties": {
+          "candidate": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "image": {
+            "$ref": "../schemas/runner-job.schema.json#/$defs/pinnedImage"
+          }
+        }
+      },
+      "JobIdentity": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["runnerId", "sessionId", "jobId", "attemptId", "leaseId", "fencingToken"],
+        "properties": {
+          "runnerId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "sessionId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "jobId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "attemptId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "leaseId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "fencingToken": {
+            "type": "string",
+            "minLength": 16,
+            "maxLength": 512
+          }
+        }
+      },
+      "AcceptJobRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["acceptRequestId", "identity"],
+        "properties": {
+          "acceptRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "identity": {
+            "$ref": "#/components/schemas/JobIdentity"
+          }
+        }
+      },
+      "JobHeartbeatRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["identity"],
+        "properties": {
+          "identity": {
+            "$ref": "#/components/schemas/JobIdentity"
+          },
+          "observedCancellationRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          }
+        }
+      },
+      "CancellationDirective": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["requestId", "requestedAt", "reason", "terminateBy"],
+        "properties": {
+          "requestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "requestedAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "reason": {
+            "enum": ["user_requested", "superseded", "policy", "coordinator_shutdown"]
+          },
+          "terminateBy": {
+            "$ref": "#/components/schemas/Timestamp"
+          }
+        }
+      },
+      "JobHeartbeatResponse": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["serverTime", "leaseExpiresAt"],
+        "properties": {
+          "serverTime": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "leaseExpiresAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "cancellation": {
+            "$ref": "#/components/schemas/CancellationDirective"
+          }
+        }
+      },
+      "LogChunk": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["identity", "sequence", "stream", "data", "timestamp"],
+        "properties": {
+          "identity": {
+            "$ref": "#/components/schemas/JobIdentity"
+          },
+          "sequence": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 9007199254740991
+          },
+          "stream": {
+            "enum": ["stdout", "stderr", "runner"]
+          },
+          "data": {
+            "type": "string",
+            "maxLength": 65536
+          },
+          "timestamp": {
+            "$ref": "#/components/schemas/Timestamp"
+          }
+        }
+      },
+      "LogAcknowledgement": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["serverTime", "nextSequence"],
+        "properties": {
+          "serverTime": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "nextSequence": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 9007199254740991
+          }
+        }
+      },
+      "CompleteJobRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["completionRequestId", "identity", "status", "exitCode", "startedAt", "completedAt"],
+        "properties": {
+          "completionRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "identity": {
+            "$ref": "#/components/schemas/JobIdentity"
+          },
+          "status": {
+            "enum": ["succeeded", "failed", "canceled", "timed_out", "system_error"]
+          },
+          "exitCode": {
+            "anyOf": [
+              {
+                "type": "integer",
+                "minimum": 0,
+                "maximum": 255
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "startedAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "completedAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "cancellationRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "error": {
+            "type": "string",
+            "maxLength": 1024
+          }
+        },
+        "allOf": [
+          {
+            "if": {
+              "properties": {
+                "status": {
+                  "const": "canceled"
+                }
+              },
+              "required": ["status"]
+            },
+            "then": {
+              "properties": {
+                "cancellationRequestId": {}
+              },
+              "required": ["cancellationRequestId"]
+            },
+            "else": {
+              "not": {
+                "required": ["cancellationRequestId"]
+              }
+            }
+          }
+        ]
+      },
+      "CompleteJobResponse": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["serverTime", "accepted"],
+        "properties": {
+          "serverTime": {
+            "$ref": "#/components/schemas/Timestamp"
+          },
+          "accepted": {
+            "const": true
+          }
+        }
+      },
+      "AbandonJobRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["abandonRequestId", "identity", "reason"],
+        "properties": {
+          "abandonRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "identity": {
+            "$ref": "#/components/schemas/JobIdentity"
+          },
+          "reason": {
+            "enum": ["runner_shutdown", "runner_error"]
+          }
+        }
+      },
+      "RecoverAttemptRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["recoveryRequestId", "runnerId", "currentSessionId", "previousSessionId", "jobId", "attemptId", "reason"],
+        "properties": {
+          "recoveryRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "runnerId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "currentSessionId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "previousSessionId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "jobId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "attemptId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "reason": {
+            "const": "runner_restarted"
+          }
+        }
+      },
+      "TransferRecord": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "format", "sha256", "sizeBytes", "extractedSizeBytes", "entryCount", "createdAt"],
+        "properties": {
+          "name": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "format": {
+            "const": "tar.gz"
+          },
+          "sha256": {
+            "$ref": "#/components/schemas/Sha256"
+          },
+          "sizeBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 17179869184
+          },
+          "extractedSizeBytes": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 137438953472
+          },
+          "entryCount": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 1000000
+          },
+          "createdAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          }
+        }
+      },
+      "RecordImageRequest": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["recordRequestId", "identity", "manifestDigest", "mediaType", "sizeBytes", "platform"],
+        "properties": {
+          "recordRequestId": {
+            "$ref": "#/components/schemas/Identifier"
+          },
+          "identity": {
+            "$ref": "#/components/schemas/JobIdentity"
+          },
+          "manifestDigest": {
+            "$ref": "#/components/schemas/OciDigest"
+          },
+          "mediaType": {
+            "const": "application/vnd.oci.image.manifest.v1+json"
+          },
+          "sizeBytes": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 4194304
+          },
+          "platform": {
+            "$ref": "../schemas/runner-job.schema.json#/$defs/platform"
+          }
+        }
+      },
+      "ImageRecord": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["registry", "repository", "manifestDigest", "mediaType", "sizeBytes", "platform", "createdAt"],
+        "properties": {
+          "registry": {
+            "$ref": "#/components/schemas/RegistryHost"
+          },
+          "repository": {
+            "$ref": "#/components/schemas/OciRepository"
+          },
+          "manifestDigest": {
+            "$ref": "#/components/schemas/OciDigest"
+          },
+          "mediaType": {
+            "const": "application/vnd.oci.image.manifest.v1+json"
+          },
+          "sizeBytes": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 4194304
+          },
+          "platform": {
+            "$ref": "../schemas/runner-job.schema.json#/$defs/platform"
+          },
+          "createdAt": {
+            "$ref": "#/components/schemas/Timestamp"
+          }
+        }
+      },
+      "ErrorResponse": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["error"],
+        "properties": {
+          "error": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["code", "message"],
+            "properties": {
+              "code": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 64,
+                "pattern": "^[a-z][a-z0-9_]{0,63}$"
+              },
+              "message": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 512
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}