{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "$ref": "#/definitions/Lockfile",
  "definitions": {
    "SourceSubPath": { "type": "string", "minLength": 1 },
    "Handle": {
      "type": "string",
      "pattern": "^@[a-z0-9_](?:[a-z0-9_-]*[a-z0-9_])?$",
      "title": "Handle",
      "description": "A unique username or organization name starting with @, like @my-org.",
      "examples": ["@my-org", "@username"]
    },
    "ExtensionName": {
      "type": "string",
      "minLength": 1,
      "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
      "title": "Extension Name",
      "description": "The name of an extension — lowercase letters, numbers, and hyphens (e.g. my-skill).",
      "examples": ["my-skill", "code-review", "prettier"]
    },
    "TreeIntegrity": { "type": "string" },
    "Version": {
      "type": "string",
      "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$",
      "title": "Version",
      "description": "A semver version like 1.0.0. Ranges are not allowed here.",
      "examples": ["1.0.0", "2.3.1", "0.1.0-beta.1"]
    },
    "NonPackExtensionFqn": {
      "type": "string",
      "pattern": "^(@[a-z0-9_](?:[a-z0-9_-]*[a-z0-9_])?)\\/(skills|mcps|subagents|rules|hooks|knowledge)\\/([a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?)$",
      "title": "Non-Pack Extension FQN",
      "description": "Extension identifier restricted to non-pack types (skills, mcps, subagents, rules, hooks, knowledge).",
      "examples": ["@acme/skills/code-review", "@my-org/rules/typescript"]
    },
    "VersionRange": {
      "type": "string",
      "minLength": 1,
      "pattern": "^[~^<>=*xXvV0-9A-Za-z+| .-]+$",
      "title": "Version Range",
      "description": "A semver version range like ^1.0.0, ~2.3.0, >=1.0.0 <3.0.0, or an exact version 1.2.3. Use \"*\" to always resolve to the latest available version.",
      "examples": ["^1.0.0", "~2.4", ">=1 <3", "1.2.3", "*"]
    },
    "PackMemberRegistrySource": {
      "type": "object",
      "properties": {
        "type": { "type": "string", "enum": ["registry"] },
        "url": { "type": "string" }
      },
      "required": ["type", "url"],
      "additionalProperties": false,
      "description": "A self-describing Registry locator for one Pack member."
    },
    "ExplicitRegistryPackMemberConstraint": {
      "type": "object",
      "properties": {
        "source": { "$ref": "#/definitions/PackMemberRegistrySource" },
        "versionRange": { "$ref": "#/definitions/VersionRange" }
      },
      "required": ["source", "versionRange"],
      "additionalProperties": false
    },
    "PackMemberConstraint": {
      "anyOf": [
        { "$ref": "#/definitions/VersionRange" },
        { "$ref": "#/definitions/ExplicitRegistryPackMemberConstraint" }
      ],
      "description": "A version range that inherits the Pack source, or an explicit Registry locator and range."
    },
    "PackLockEntry": {
      "anyOf": [
        {
          "type": "object",
          "properties": {
            "source": {
              "type": "object",
              "properties": {
                "type": { "type": "string", "enum": ["git"] },
                "url": { "type": "string" },
                "path": {
                  "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                },
                "revision": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] },
                "distribution": {
                  "anyOf": [
                    {
                      "type": "object",
                      "properties": {
                        "format": {
                          "type": "string",
                          "enum": ["agent-plugins", "claude", "codex", "cursor"]
                        },
                        "packageRoot": { "type": "string" },
                        "componentPath": { "type": "string" },
                        "manifestPath": { "type": "string" },
                        "marketplace": {
                          "type": "object",
                          "properties": {
                            "path": { "type": "string" },
                            "name": { "type": "string" }
                          },
                          "required": ["path", "name"],
                          "additionalProperties": false
                        }
                      },
                      "required": ["format", "packageRoot", "componentPath"],
                      "additionalProperties": false
                    },
                    { "type": "null" }
                  ]
                }
              },
              "required": ["type", "url"],
              "additionalProperties": false
            },
            "identity": {
              "type": "object",
              "properties": {
                "owner": { "$ref": "#/definitions/Handle" },
                "name": { "$ref": "#/definitions/ExtensionName" }
              },
              "required": ["owner", "name"],
              "additionalProperties": false
            },
            "resolved": {
              "type": "object",
              "properties": {
                "commit": { "type": "string", "minLength": 1 },
                "tree": { "type": "string", "minLength": 1 }
              },
              "required": ["commit", "tree"],
              "additionalProperties": false
            },
            "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" },
            "manifestVersion": { "$ref": "#/definitions/Version" },
            "manifestContentIdentity": {
              "type": "string",
              "description": "Semantic consistency digest over the accepted Pack identity, manifest version, and dependency declarations. It is not an authenticity signature."
            },
            "dependencies": {
              "type": "object",
              "additionalProperties": { "$ref": "#/definitions/PackMemberConstraint" },
              "propertyNames": { "$ref": "#/definitions/NonPackExtensionFqn" },
              "description": "Map of fully-qualified non-Pack extension names to inherited ranges or explicit Registry locators. Packs cannot depend on other Packs."
            },
            "sourceRoot": {
              "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
            }
          },
          "required": [
            "source",
            "identity",
            "resolved",
            "treeIntegrity",
            "manifestVersion",
            "manifestContentIdentity",
            "dependencies"
          ],
          "additionalProperties": false
        },
        {
          "type": "object",
          "properties": {
            "source": {
              "type": "object",
              "properties": {
                "type": { "type": "string", "enum": ["registry"] },
                "url": { "type": "string" }
              },
              "required": ["type", "url"],
              "additionalProperties": false
            },
            "identity": {
              "type": "object",
              "properties": {
                "owner": { "$ref": "#/definitions/Handle" },
                "name": { "$ref": "#/definitions/ExtensionName" }
              },
              "required": ["owner", "name"],
              "additionalProperties": false
            },
            "resolved": {
              "type": "object",
              "properties": {
                "version": { "$ref": "#/definitions/Version" },
                "integrity": {
                  "type": "string",
                  "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                },
                "publisherBindingId": { "type": "string", "minLength": 1 }
              },
              "required": ["version", "integrity", "publisherBindingId"],
              "additionalProperties": false
            },
            "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" },
            "manifestVersion": { "$ref": "#/definitions/Version" },
            "manifestContentIdentity": {
              "type": "string",
              "description": "Semantic consistency digest over the accepted Pack identity, manifest version, and dependency declarations. It is not an authenticity signature."
            },
            "dependencies": {
              "type": "object",
              "additionalProperties": { "$ref": "#/definitions/PackMemberConstraint" },
              "propertyNames": { "$ref": "#/definitions/NonPackExtensionFqn" },
              "description": "Map of fully-qualified non-Pack extension names to inherited ranges or explicit Registry locators. Packs cannot depend on other Packs."
            }
          },
          "required": [
            "source",
            "identity",
            "resolved",
            "treeIntegrity",
            "manifestVersion",
            "manifestContentIdentity",
            "dependencies"
          ],
          "additionalProperties": false
        },
        {
          "type": "object",
          "properties": {
            "source": {
              "type": "object",
              "properties": {
                "type": { "type": "string", "enum": ["path"] },
                "path": { "type": "string" },
                "distribution": {
                  "anyOf": [
                    {
                      "type": "object",
                      "properties": {
                        "format": {
                          "type": "string",
                          "enum": ["agent-plugins", "claude", "codex", "cursor"]
                        },
                        "packageRoot": { "type": "string" },
                        "componentPath": { "type": "string" },
                        "manifestPath": { "type": "string" },
                        "marketplace": {
                          "type": "object",
                          "properties": {
                            "path": { "type": "string" },
                            "name": { "type": "string" }
                          },
                          "required": ["path", "name"],
                          "additionalProperties": false
                        }
                      },
                      "required": ["format", "packageRoot", "componentPath"],
                      "additionalProperties": false
                    },
                    { "type": "null" }
                  ]
                }
              },
              "required": ["type", "path"],
              "additionalProperties": false
            },
            "identity": {
              "type": "object",
              "properties": {
                "owner": { "$ref": "#/definitions/Handle" },
                "name": { "$ref": "#/definitions/ExtensionName" }
              },
              "required": ["owner", "name"],
              "additionalProperties": false
            },
            "resolved": {
              "type": "object",
              "properties": {
                "tree": {
                  "type": "string",
                  "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                }
              },
              "required": ["tree"],
              "additionalProperties": false
            },
            "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" },
            "manifestVersion": { "$ref": "#/definitions/Version" },
            "manifestContentIdentity": {
              "type": "string",
              "description": "Semantic consistency digest over the accepted Pack identity, manifest version, and dependency declarations. It is not an authenticity signature."
            },
            "dependencies": {
              "type": "object",
              "additionalProperties": { "$ref": "#/definitions/PackMemberConstraint" },
              "propertyNames": { "$ref": "#/definitions/NonPackExtensionFqn" },
              "description": "Map of fully-qualified non-Pack extension names to inherited ranges or explicit Registry locators. Packs cannot depend on other Packs."
            },
            "sourceRoot": { "type": "string" }
          },
          "required": [
            "source",
            "identity",
            "resolved",
            "treeIntegrity",
            "manifestVersion",
            "manifestContentIdentity",
            "dependencies",
            "sourceRoot"
          ],
          "additionalProperties": false
        }
      ]
    },
    "Lockfile": {
      "type": "object",
      "properties": {
        "lockfileVersion": {
          "type": "number",
          "enum": [10],
          "description": "Lockfile schema version.",
          "default": 10
        },
        "skills": {
          "type": "object",
          "additionalProperties": {
            "anyOf": [
              {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["git"] },
                          "url": { "type": "string" },
                          "path": {
                            "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                          },
                          "revision": {
                            "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                          },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": {
                            "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                          },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "commit": { "type": "string", "minLength": 1 },
                          "tree": { "type": "string", "minLength": 1 }
                        },
                        "required": ["commit", "tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["registry"] },
                          "url": { "type": "string" }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "version": { "$ref": "#/definitions/Version" },
                          "integrity": {
                            "type": "string",
                            "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                          },
                          "publisherBindingId": { "type": "string", "minLength": 1 }
                        },
                        "required": ["version", "integrity", "publisherBindingId"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["path"] },
                          "path": { "type": "string" },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "path"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": {
                            "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                          },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "tree": {
                            "type": "string",
                            "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                          }
                        },
                        "required": ["tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  }
                ]
              },
              {
                "type": "object",
                "properties": {
                  "source": {
                    "type": "object",
                    "properties": {
                      "type": { "type": "string", "enum": ["http"] },
                      "url": { "type": "string" },
                      "kind": { "type": "string", "enum": ["skill-md", "archive", "index"] },
                      "entry": {
                        "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                      },
                      "path": { "$ref": "#/definitions/SourceSubPath" },
                      "portable": { "type": "boolean" },
                      "distribution": {
                        "anyOf": [
                          {
                            "type": "object",
                            "properties": {
                              "format": {
                                "type": "string",
                                "enum": ["agent-plugins", "claude", "codex", "cursor"]
                              },
                              "packageRoot": { "type": "string" },
                              "componentPath": { "type": "string" },
                              "manifestPath": { "type": "string" },
                              "marketplace": {
                                "type": "object",
                                "properties": {
                                  "path": { "type": "string" },
                                  "name": { "type": "string" }
                                },
                                "required": ["path", "name"],
                                "additionalProperties": false
                              }
                            },
                            "required": ["format", "packageRoot", "componentPath"],
                            "additionalProperties": false
                          },
                          { "type": "null" }
                        ]
                      }
                    },
                    "required": ["type", "url", "kind", "path", "portable"],
                    "additionalProperties": false
                  },
                  "identity": {
                    "type": "object",
                    "properties": {
                      "owner": {
                        "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                      },
                      "name": { "$ref": "#/definitions/ExtensionName" }
                    },
                    "required": ["name"],
                    "additionalProperties": false
                  },
                  "resolved": {
                    "anyOf": [
                      {
                        "type": "object",
                        "properties": {
                          "format": {
                            "type": "string",
                            "enum": ["skill-md", "zip", "tar", "tar.gz"]
                          },
                          "url": { "type": "string" },
                          "digest": { "type": "string" }
                        },
                        "required": ["format", "url", "digest"],
                        "additionalProperties": false
                      },
                      {
                        "type": "object",
                        "properties": {
                          "format": { "type": "string", "enum": ["files"] },
                          "files": {
                            "type": "array",
                            "minItems": 1,
                            "items": {
                              "type": "object",
                              "properties": {
                                "path": { "type": "string", "minLength": 1 },
                                "url": { "type": "string" },
                                "digest": { "type": "string" }
                              },
                              "required": ["path", "url", "digest"],
                              "additionalProperties": false
                            }
                          }
                        },
                        "required": ["format", "files"],
                        "additionalProperties": false
                      }
                    ]
                  },
                  "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                },
                "required": ["source", "identity", "resolved", "treeIntegrity"],
                "additionalProperties": false
              }
            ]
          }
        },
        "subagents": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["git"] },
                          "url": { "type": "string" },
                          "path": {
                            "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                          },
                          "revision": {
                            "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                          },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "commit": { "type": "string", "minLength": 1 },
                          "tree": { "type": "string", "minLength": 1 }
                        },
                        "required": ["commit", "tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["registry"] },
                          "url": { "type": "string" }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "version": { "$ref": "#/definitions/Version" },
                          "integrity": {
                            "type": "string",
                            "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                          },
                          "publisherBindingId": { "type": "string", "minLength": 1 }
                        },
                        "required": ["version", "integrity", "publisherBindingId"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["path"] },
                          "path": { "type": "string" },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "path"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "tree": {
                            "type": "string",
                            "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                          }
                        },
                        "required": ["tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "mcpServers": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["git"] },
                          "url": { "type": "string" },
                          "path": {
                            "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                          },
                          "revision": {
                            "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                          },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": {
                            "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                          },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "commit": { "type": "string", "minLength": 1 },
                          "tree": { "type": "string", "minLength": 1 }
                        },
                        "required": ["commit", "tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["registry"] },
                          "url": { "type": "string" }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "version": { "$ref": "#/definitions/Version" },
                          "integrity": {
                            "type": "string",
                            "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                          },
                          "publisherBindingId": { "type": "string", "minLength": 1 }
                        },
                        "required": ["version", "integrity", "publisherBindingId"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["path"] },
                          "path": { "type": "string" },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "path"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": {
                            "anyOf": [{ "$ref": "#/definitions/Handle" }, { "type": "null" }]
                          },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "tree": {
                            "type": "string",
                            "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                          }
                        },
                        "required": ["tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "rules": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["git"] },
                          "url": { "type": "string" },
                          "path": {
                            "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                          },
                          "revision": {
                            "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                          },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "commit": { "type": "string", "minLength": 1 },
                          "tree": { "type": "string", "minLength": 1 }
                        },
                        "required": ["commit", "tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["registry"] },
                          "url": { "type": "string" }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "version": { "$ref": "#/definitions/Version" },
                          "integrity": {
                            "type": "string",
                            "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                          },
                          "publisherBindingId": { "type": "string", "minLength": 1 }
                        },
                        "required": ["version", "integrity", "publisherBindingId"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["path"] },
                          "path": { "type": "string" },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "path"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "tree": {
                            "type": "string",
                            "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                          }
                        },
                        "required": ["tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "hooks": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["git"] },
                          "url": { "type": "string" },
                          "path": {
                            "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                          },
                          "revision": {
                            "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                          },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "commit": { "type": "string", "minLength": 1 },
                          "tree": { "type": "string", "minLength": 1 }
                        },
                        "required": ["commit", "tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["registry"] },
                          "url": { "type": "string" }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "version": { "$ref": "#/definitions/Version" },
                          "integrity": {
                            "type": "string",
                            "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                          },
                          "publisherBindingId": { "type": "string", "minLength": 1 }
                        },
                        "required": ["version", "integrity", "publisherBindingId"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["path"] },
                          "path": { "type": "string" },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "path"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "tree": {
                            "type": "string",
                            "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                          }
                        },
                        "required": ["tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "knowledge": {
          "anyOf": [
            {
              "type": "object",
              "additionalProperties": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["git"] },
                          "url": { "type": "string" },
                          "path": {
                            "anyOf": [{ "$ref": "#/definitions/SourceSubPath" }, { "type": "null" }]
                          },
                          "revision": {
                            "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
                          },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "commit": { "type": "string", "minLength": 1 },
                          "tree": { "type": "string", "minLength": 1 }
                        },
                        "required": ["commit", "tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["registry"] },
                          "url": { "type": "string" }
                        },
                        "required": ["type", "url"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "version": { "$ref": "#/definitions/Version" },
                          "integrity": {
                            "type": "string",
                            "description": "SRI sha512 of the published archive, verified against downloaded bytes before extraction. The supply-chain guarantee for registry installs; never compared against installed files on disk."
                          },
                          "publisherBindingId": { "type": "string", "minLength": 1 }
                        },
                        "required": ["version", "integrity", "publisherBindingId"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "source": {
                        "type": "object",
                        "properties": {
                          "type": { "type": "string", "enum": ["path"] },
                          "path": { "type": "string" },
                          "distribution": {
                            "anyOf": [
                              {
                                "type": "object",
                                "properties": {
                                  "format": {
                                    "type": "string",
                                    "enum": ["agent-plugins", "claude", "codex", "cursor"]
                                  },
                                  "packageRoot": { "type": "string" },
                                  "componentPath": { "type": "string" },
                                  "manifestPath": { "type": "string" },
                                  "marketplace": {
                                    "type": "object",
                                    "properties": {
                                      "path": { "type": "string" },
                                      "name": { "type": "string" }
                                    },
                                    "required": ["path", "name"],
                                    "additionalProperties": false
                                  }
                                },
                                "required": ["format", "packageRoot", "componentPath"],
                                "additionalProperties": false
                              },
                              { "type": "null" }
                            ]
                          }
                        },
                        "required": ["type", "path"],
                        "additionalProperties": false
                      },
                      "identity": {
                        "type": "object",
                        "properties": {
                          "owner": { "$ref": "#/definitions/Handle" },
                          "name": { "$ref": "#/definitions/ExtensionName" }
                        },
                        "required": ["owner", "name"],
                        "additionalProperties": false
                      },
                      "resolved": {
                        "type": "object",
                        "properties": {
                          "tree": {
                            "type": "string",
                            "description": "Advisory SHA-256 change-detection marker of canonical content at install time. Not a tamper guarantee: installed content is workspace-owned and may be rewritten by content-preserving tools after install."
                          }
                        },
                        "required": ["tree"],
                        "additionalProperties": false
                      },
                      "treeIntegrity": { "$ref": "#/definitions/TreeIntegrity" }
                    },
                    "required": ["source", "identity", "resolved", "treeIntegrity"],
                    "additionalProperties": false
                  }
                ]
              }
            },
            { "type": "null" }
          ]
        },
        "packs": {
          "anyOf": [
            { "type": "object", "additionalProperties": { "$ref": "#/definitions/PackLockEntry" } },
            { "type": "null" }
          ]
        }
      },
      "required": ["lockfileVersion", "skills"],
      "additionalProperties": false,
      "title": "AXM Lockfile",
      "description": "Accepted immutable external source resolutions and provenance. Desired state and projection ownership are authoritative elsewhere."
    }
  }
}