{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "$ref": "#/definitions/Lockfile",
  "definitions": {
    "ExtensionName": {
      "type": "string",
      "minLength": 1,
      "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
      "title": "Extension Name",
      "description": "The name of an extension — lowercase letters, numbers, and hyphens (e.g. my-skill).",
      "examples": ["my-skill", "code-review", "prettier"]
    },
    "Handle": {
      "type": "string",
      "pattern": "^@[a-z0-9_](?:[a-z0-9_-]*[a-z0-9_])?$",
      "title": "Handle",
      "description": "A unique username or organization name starting with @, like @my-org.",
      "examples": ["@my-org", "@username"]
    },
    "SourceNamespace": { "type": "string", "minLength": 1 },
    "SourceSegment": { "type": "string", "minLength": 1 },
    "SourceSubPath": { "type": "string", "minLength": 1 },
    "TreeIntegrity": { "type": "string" },
    "Version": {
      "type": "string",
      "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$",
      "title": "Version",
      "description": "A semver version like 1.0.0. Ranges are not allowed here.",
      "examples": ["1.0.0", "2.3.1", "0.1.0-beta.1"]
    },
    "PackLockEntry": {
      "type": "object",
      "properties": {
        "type": { "type": "string", "enum": ["registry"] },
        "sourceType": { "type": "string", "enum": ["registry"] },
        "endpoint": { "type": "string" },
        "extensionType": { "type": "string", "enum": ["pack"] },
        "workspaceName": { "$ref": "#/definitions/ExtensionName" },
        "packageFormat": { "type": "string", "enum": ["agentxm"] },
        "owner": { "$ref": "#/definitions/Handle" },
        "name": { "$ref": "#/definitions/ExtensionName" },
        "resolvedVersion": { "$ref": "#/definitions/Version" },
        "integrity": { "type": "string" },
        "manifestContentIdentity": {
          "type": "string",
          "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
        },
        "sourceName": { "type": "string" },
        "publisherBindingId": { "type": "string", "minLength": 1 },
        "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
      },
      "required": [
        "type",
        "sourceType",
        "endpoint",
        "extensionType",
        "workspaceName",
        "packageFormat",
        "owner",
        "name",
        "resolvedVersion",
        "integrity",
        "manifestContentIdentity",
        "sourceName",
        "publisherBindingId",
        "treeIntegrity"
      ],
      "additionalProperties": false,
      "title": "Pack Lock Entry",
      "description": "Accepted immutable resolution for a Registry Pack."
    },
    "Lockfile": {
      "type": "object",
      "properties": {
        "lockfileVersion": {
          "type": "number",
          "enum": [6],
          "description": "Lockfile schema version.",
          "default": 6
        },
        "skills": {
          "type": "object",
          "additionalProperties": {
            "anyOf": [
              {
                "type": "object",
                "properties": {
                  "type": { "type": "string", "enum": ["github"] },
                  "sourceType": { "type": "string", "enum": ["github"] },
                  "sourceName": { "type": "string" },
                  "endpoint": { "type": "string" },
                  "extensionType": { "type": "string", "enum": ["skill"] },
                  "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                  "packageFormat": { "type": "string", "enum": ["agentxm", "agent-skill"] },
                  "packageOwner": {
                    "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                  },
                  "packageName": { "$ref": "#/definitions/ExtensionName" },
                  "owner": { "$ref": "#/definitions/SourceNamespace" },
                  "repo": { "$ref": "#/definitions/SourceSegment" },
                  "ref": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] },
                  "path": {
                    "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                  },
                  "resolvedCommit": { "type": "string", "minLength": 1 },
                  "resolvedTree": { "type": "string", "minLength": 1 },
                  "contentIdentity": {
                    "type": "string",
                    "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                  },
                  "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                },
                "required": [
                  "type",
                  "sourceType",
                  "sourceName",
                  "endpoint",
                  "extensionType",
                  "workspaceName",
                  "packageFormat",
                  "packageName",
                  "owner",
                  "repo",
                  "resolvedCommit",
                  "resolvedTree",
                  "contentIdentity",
                  "treeIntegrity"
                ],
                "additionalProperties": false
              },
              {
                "type": "object",
                "properties": {
                  "type": { "type": "string", "enum": ["gitlab"] },
                  "sourceType": { "type": "string", "enum": ["gitlab"] },
                  "sourceName": { "type": "string" },
                  "endpoint": { "type": "string" },
                  "extensionType": { "type": "string", "enum": ["skill"] },
                  "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                  "packageFormat": { "type": "string", "enum": ["agentxm", "agent-skill"] },
                  "packageOwner": {
                    "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                  },
                  "packageName": { "$ref": "#/definitions/ExtensionName" },
                  "owner": { "$ref": "#/definitions/SourceNamespace" },
                  "repo": { "$ref": "#/definitions/SourceSegment" },
                  "ref": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] },
                  "path": {
                    "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                  },
                  "resolvedCommit": { "type": "string", "minLength": 1 },
                  "resolvedTree": { "type": "string", "minLength": 1 },
                  "contentIdentity": {
                    "type": "string",
                    "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                  },
                  "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                },
                "required": [
                  "type",
                  "sourceType",
                  "sourceName",
                  "endpoint",
                  "extensionType",
                  "workspaceName",
                  "packageFormat",
                  "packageName",
                  "owner",
                  "repo",
                  "resolvedCommit",
                  "resolvedTree",
                  "contentIdentity",
                  "treeIntegrity"
                ],
                "additionalProperties": false
              },
              {
                "type": "object",
                "properties": {
                  "type": { "type": "string", "enum": ["bitbucket"] },
                  "sourceType": { "type": "string", "enum": ["bitbucket"] },
                  "sourceName": { "type": "string" },
                  "endpoint": { "type": "string" },
                  "extensionType": { "type": "string", "enum": ["skill"] },
                  "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                  "packageFormat": { "type": "string", "enum": ["agentxm", "agent-skill"] },
                  "packageOwner": {
                    "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                  },
                  "packageName": { "$ref": "#/definitions/ExtensionName" },
                  "owner": { "$ref": "#/definitions/SourceNamespace" },
                  "repo": { "$ref": "#/definitions/SourceSegment" },
                  "ref": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] },
                  "path": {
                    "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                  },
                  "resolvedCommit": { "type": "string", "minLength": 1 },
                  "resolvedTree": { "type": "string", "minLength": 1 },
                  "contentIdentity": {
                    "type": "string",
                    "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                  },
                  "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                },
                "required": [
                  "type",
                  "sourceType",
                  "sourceName",
                  "endpoint",
                  "extensionType",
                  "workspaceName",
                  "packageFormat",
                  "packageName",
                  "owner",
                  "repo",
                  "resolvedCommit",
                  "resolvedTree",
                  "contentIdentity",
                  "treeIntegrity"
                ],
                "additionalProperties": false
              },
              {
                "type": "object",
                "properties": {
                  "type": { "type": "string", "enum": ["azurerepos"] },
                  "sourceType": { "type": "string", "enum": ["azurerepos"] },
                  "sourceName": { "type": "string" },
                  "endpoint": { "type": "string" },
                  "extensionType": { "type": "string", "enum": ["skill"] },
                  "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                  "packageFormat": { "type": "string", "enum": ["agentxm", "agent-skill"] },
                  "packageOwner": {
                    "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                  },
                  "packageName": { "$ref": "#/definitions/ExtensionName" },
                  "organization": { "$ref": "#/definitions/SourceSegment" },
                  "project": { "$ref": "#/definitions/SourceSegment" },
                  "repo": { "$ref": "#/definitions/SourceSegment" },
                  "ref": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] },
                  "path": {
                    "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                  },
                  "resolvedCommit": { "type": "string", "minLength": 1 },
                  "resolvedTree": { "type": "string", "minLength": 1 },
                  "contentIdentity": {
                    "type": "string",
                    "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                  },
                  "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                },
                "required": [
                  "type",
                  "sourceType",
                  "sourceName",
                  "endpoint",
                  "extensionType",
                  "workspaceName",
                  "packageFormat",
                  "packageName",
                  "organization",
                  "project",
                  "repo",
                  "resolvedCommit",
                  "resolvedTree",
                  "contentIdentity",
                  "treeIntegrity"
                ],
                "additionalProperties": false
              },
              {
                "type": "object",
                "properties": {
                  "type": { "type": "string", "enum": ["git"] },
                  "sourceType": { "type": "string", "enum": ["git"] },
                  "sourceName": { "type": "string", "enum": ["git"] },
                  "extensionType": { "type": "string", "enum": ["skill"] },
                  "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                  "packageFormat": { "type": "string", "enum": ["agentxm", "agent-skill"] },
                  "packageOwner": {
                    "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                  },
                  "packageName": { "$ref": "#/definitions/ExtensionName" },
                  "url": { "type": "string" },
                  "ref": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] },
                  "path": {
                    "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                  },
                  "resolvedCommit": { "type": "string", "minLength": 1 },
                  "resolvedTree": { "type": "string", "minLength": 1 },
                  "contentIdentity": {
                    "type": "string",
                    "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                  },
                  "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                },
                "required": [
                  "type",
                  "sourceType",
                  "sourceName",
                  "extensionType",
                  "workspaceName",
                  "packageFormat",
                  "packageName",
                  "url",
                  "resolvedCommit",
                  "resolvedTree",
                  "contentIdentity",
                  "treeIntegrity"
                ],
                "additionalProperties": false
              },
              {
                "type": "object",
                "properties": {
                  "type": { "type": "string", "enum": ["local"] },
                  "sourceType": { "type": "string", "enum": ["local"] },
                  "sourceName": { "type": "string", "enum": ["local"] },
                  "extensionType": { "type": "string", "enum": ["skill"] },
                  "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                  "packageFormat": { "type": "string", "enum": ["agentxm", "agent-skill"] },
                  "packageOwner": {
                    "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                  },
                  "packageName": { "$ref": "#/definitions/ExtensionName" },
                  "path": { "type": "string" },
                  "contentIdentity": {
                    "type": "string",
                    "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                  },
                  "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                },
                "required": [
                  "type",
                  "sourceType",
                  "sourceName",
                  "extensionType",
                  "workspaceName",
                  "packageFormat",
                  "packageName",
                  "path",
                  "contentIdentity",
                  "treeIntegrity"
                ],
                "additionalProperties": false
              },
              {
                "type": "object",
                "properties": {
                  "type": { "type": "string", "enum": ["registry"] },
                  "sourceType": { "type": "string", "enum": ["registry"] },
                  "endpoint": { "type": "string" },
                  "extensionType": { "type": "string", "enum": ["skill"] },
                  "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                  "packageFormat": { "type": "string", "enum": ["agentxm"] },
                  "owner": { "$ref": "#/definitions/Handle" },
                  "name": { "$ref": "#/definitions/ExtensionName" },
                  "resolvedVersion": { "$ref": "#/definitions/Version" },
                  "integrity": {
                    "type": "string",
                    "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                  },
                  "sourceName": { "type": "string" },
                  "publisherBindingId": { "type": "string", "minLength": 1 },
                  "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                },
                "required": [
                  "type",
                  "sourceType",
                  "endpoint",
                  "extensionType",
                  "workspaceName",
                  "packageFormat",
                  "owner",
                  "name",
                  "resolvedVersion",
                  "integrity",
                  "sourceName",
                  "publisherBindingId",
                  "treeIntegrity"
                ],
                "additionalProperties": false
              }
            ]
          }
        },
        "subagents": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["github"] },
                      "sourceType": { "type": "string", "enum": ["github"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["subagent"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["gitlab"] },
                      "sourceType": { "type": "string", "enum": ["gitlab"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["subagent"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["bitbucket"] },
                      "sourceType": { "type": "string", "enum": ["bitbucket"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["subagent"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["azurerepos"] },
                      "sourceType": { "type": "string", "enum": ["azurerepos"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["subagent"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "organization": { "$ref": "#/definitions/SourceSegment" },
                      "project": { "$ref": "#/definitions/SourceSegment" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "organization",
                      "project",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["git"] },
                      "sourceType": { "type": "string", "enum": ["git"] },
                      "sourceName": { "type": "string", "enum": ["git"] },
                      "extensionType": { "type": "string", "enum": ["subagent"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "url": { "type": "string" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "url",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["local"] },
                      "sourceType": { "type": "string", "enum": ["local"] },
                      "sourceName": { "type": "string", "enum": ["local"] },
                      "extensionType": { "type": "string", "enum": ["subagent"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "path": { "type": "string" },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "path",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["registry"] },
                      "sourceType": { "type": "string", "enum": ["registry"] },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["subagent"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "owner": { "$ref": "#/definitions/Handle" },
                      "name": { "$ref": "#/definitions/ExtensionName" },
                      "resolvedVersion": { "$ref": "#/definitions/Version" },
                      "integrity": {
                        "type": "string",
                        "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                      },
                      "sourceName": { "type": "string" },
                      "publisherBindingId": { "type": "string", "minLength": 1 },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "owner",
                      "name",
                      "resolvedVersion",
                      "integrity",
                      "sourceName",
                      "publisherBindingId",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "mcpServers": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["github"] },
                      "sourceType": { "type": "string", "enum": ["github"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["mcp-server"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["gitlab"] },
                      "sourceType": { "type": "string", "enum": ["gitlab"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["mcp-server"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["bitbucket"] },
                      "sourceType": { "type": "string", "enum": ["bitbucket"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["mcp-server"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["azurerepos"] },
                      "sourceType": { "type": "string", "enum": ["azurerepos"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["mcp-server"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "organization": { "$ref": "#/definitions/SourceSegment" },
                      "project": { "$ref": "#/definitions/SourceSegment" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "organization",
                      "project",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["git"] },
                      "sourceType": { "type": "string", "enum": ["git"] },
                      "sourceName": { "type": "string", "enum": ["git"] },
                      "extensionType": { "type": "string", "enum": ["mcp-server"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "url": { "type": "string" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "url",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["local"] },
                      "sourceType": { "type": "string", "enum": ["local"] },
                      "sourceName": { "type": "string", "enum": ["local"] },
                      "extensionType": { "type": "string", "enum": ["mcp-server"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "path": { "type": "string" },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "path",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["registry"] },
                      "sourceType": { "type": "string", "enum": ["registry"] },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["mcp-server"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "owner": { "$ref": "#/definitions/Handle" },
                      "name": { "$ref": "#/definitions/ExtensionName" },
                      "resolvedVersion": { "$ref": "#/definitions/Version" },
                      "integrity": {
                        "type": "string",
                        "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                      },
                      "sourceName": { "type": "string" },
                      "publisherBindingId": { "type": "string", "minLength": 1 },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "owner",
                      "name",
                      "resolvedVersion",
                      "integrity",
                      "sourceName",
                      "publisherBindingId",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "rules": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["github"] },
                      "sourceType": { "type": "string", "enum": ["github"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["rule"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["gitlab"] },
                      "sourceType": { "type": "string", "enum": ["gitlab"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["rule"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["bitbucket"] },
                      "sourceType": { "type": "string", "enum": ["bitbucket"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["rule"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["azurerepos"] },
                      "sourceType": { "type": "string", "enum": ["azurerepos"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["rule"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "organization": { "$ref": "#/definitions/SourceSegment" },
                      "project": { "$ref": "#/definitions/SourceSegment" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "organization",
                      "project",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["git"] },
                      "sourceType": { "type": "string", "enum": ["git"] },
                      "sourceName": { "type": "string", "enum": ["git"] },
                      "extensionType": { "type": "string", "enum": ["rule"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "url": { "type": "string" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "url",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["local"] },
                      "sourceType": { "type": "string", "enum": ["local"] },
                      "sourceName": { "type": "string", "enum": ["local"] },
                      "extensionType": { "type": "string", "enum": ["rule"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "path": { "type": "string" },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "path",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["registry"] },
                      "sourceType": { "type": "string", "enum": ["registry"] },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["rule"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "owner": { "$ref": "#/definitions/Handle" },
                      "name": { "$ref": "#/definitions/ExtensionName" },
                      "resolvedVersion": { "$ref": "#/definitions/Version" },
                      "integrity": {
                        "type": "string",
                        "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                      },
                      "sourceName": { "type": "string" },
                      "publisherBindingId": { "type": "string", "minLength": 1 },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "owner",
                      "name",
                      "resolvedVersion",
                      "integrity",
                      "sourceName",
                      "publisherBindingId",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "hooks": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["github"] },
                      "sourceType": { "type": "string", "enum": ["github"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["hook"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["gitlab"] },
                      "sourceType": { "type": "string", "enum": ["gitlab"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["hook"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["bitbucket"] },
                      "sourceType": { "type": "string", "enum": ["bitbucket"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["hook"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["azurerepos"] },
                      "sourceType": { "type": "string", "enum": ["azurerepos"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["hook"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "organization": { "$ref": "#/definitions/SourceSegment" },
                      "project": { "$ref": "#/definitions/SourceSegment" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "organization",
                      "project",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["git"] },
                      "sourceType": { "type": "string", "enum": ["git"] },
                      "sourceName": { "type": "string", "enum": ["git"] },
                      "extensionType": { "type": "string", "enum": ["hook"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "url": { "type": "string" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "url",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["local"] },
                      "sourceType": { "type": "string", "enum": ["local"] },
                      "sourceName": { "type": "string", "enum": ["local"] },
                      "extensionType": { "type": "string", "enum": ["hook"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "path": { "type": "string" },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "path",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["registry"] },
                      "sourceType": { "type": "string", "enum": ["registry"] },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["hook"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "owner": { "$ref": "#/definitions/Handle" },
                      "name": { "$ref": "#/definitions/ExtensionName" },
                      "resolvedVersion": { "$ref": "#/definitions/Version" },
                      "integrity": {
                        "type": "string",
                        "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                      },
                      "sourceName": { "type": "string" },
                      "publisherBindingId": { "type": "string", "minLength": 1 },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "owner",
                      "name",
                      "resolvedVersion",
                      "integrity",
                      "sourceName",
                      "publisherBindingId",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "knowledge": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["github"] },
                      "sourceType": { "type": "string", "enum": ["github"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["knowledge"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["gitlab"] },
                      "sourceType": { "type": "string", "enum": ["gitlab"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["knowledge"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["bitbucket"] },
                      "sourceType": { "type": "string", "enum": ["bitbucket"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["knowledge"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "owner": { "$ref": "#/definitions/SourceNamespace" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "owner",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["azurerepos"] },
                      "sourceType": { "type": "string", "enum": ["azurerepos"] },
                      "sourceName": { "type": "string" },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["knowledge"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "organization": { "$ref": "#/definitions/SourceSegment" },
                      "project": { "$ref": "#/definitions/SourceSegment" },
                      "repo": { "$ref": "#/definitions/SourceSegment" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "organization",
                      "project",
                      "repo",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["git"] },
                      "sourceType": { "type": "string", "enum": ["git"] },
                      "sourceName": { "type": "string", "enum": ["git"] },
                      "extensionType": { "type": "string", "enum": ["knowledge"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "url": { "type": "string" },
                      "ref": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": {
                        "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                      },
                      "resolvedCommit": { "type": "string", "minLength": 1 },
                      "resolvedTree": { "type": "string", "minLength": 1 },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "url",
                      "resolvedCommit",
                      "resolvedTree",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["local"] },
                      "sourceType": { "type": "string", "enum": ["local"] },
                      "sourceName": { "type": "string", "enum": ["local"] },
                      "extensionType": { "type": "string", "enum": ["knowledge"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "packageOwner": { "$ref": "#/definitions/Handle" },
                      "packageName": { "$ref": "#/definitions/ExtensionName" },
                      "path": { "type": "string" },
                      "contentIdentity": {
                        "type": "string",
                        "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "sourceName",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "packageOwner",
                      "packageName",
                      "path",
                      "contentIdentity",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["registry"] },
                      "sourceType": { "type": "string", "enum": ["registry"] },
                      "endpoint": { "type": "string" },
                      "extensionType": { "type": "string", "enum": ["knowledge"] },
                      "workspaceName": { "$ref": "#/definitions/ExtensionName" },
                      "packageFormat": { "type": "string", "enum": ["agentxm"] },
                      "owner": { "$ref": "#/definitions/Handle" },
                      "name": { "$ref": "#/definitions/ExtensionName" },
                      "resolvedVersion": { "$ref": "#/definitions/Version" },
                      "integrity": {
                        "type": "string",
                        "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                      },
                      "sourceName": { "type": "string" },
                      "publisherBindingId": { "type": "string", "minLength": 1 },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": [
                      "type",
                      "sourceType",
                      "endpoint",
                      "extensionType",
                      "workspaceName",
                      "packageFormat",
                      "owner",
                      "name",
                      "resolvedVersion",
                      "integrity",
                      "sourceName",
                      "publisherBindingId",
                      "treeIntegrity"
                    ],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "packs": {
          "anyOf": [
            { "type": "object", "additionalProperties": { "$ref": "#/definitions/PackLockEntry" } },
            { "type": "null" }
          ]
        }
      },
      "required": ["lockfileVersion", "skills"],
      "additionalProperties": false,
      "title": "AXM Lockfile",
      "description": "Accepted immutable external source resolutions and provenance. Desired state and projection ownership are authoritative elsewhere."
    }
  }
}