{
  "schemaVersion": "workspai-workspace-archive-capabilities-v1",
  "commands": [
    "export",
    "inspect",
    "verify",
    "doctor",
    "hydrate",
    "import"
  ],
  "container": {
    "writeFormat": "zip64",
    "readFormats": [
      "zip",
      "zip64"
    ],
    "compressionModes": [
      "store",
      "deflate"
    ],
    "defaultCompression": "store"
  },
  "streaming": {
    "export": true,
    "remoteDownload": true,
    "inspect": true,
    "verify": true,
    "hydrate": true,
    "import": true,
    "payloadBufferedInMemory": false
  },
  "sizePolicy": {
    "workspacePayloadDefault": "20gb",
    "remoteDownloadDefault": "5gb",
    "safetyBudgets": "secure-defaults-with-explicit-overrides",
    "manifestMemoryLimitBytes": 67108864,
    "remoteDownloadTimeoutDefaultMs": 300000
  },
  "integrity": {
    "algorithm": "sha256",
    "manifestRequired": true,
    "strictVerificationRequiresChecksums": true
  },
  "cliFlags": {
    "archiveCompression": {
      "signature": "--archive-compression <mode>",
      "description": "Archive compression: store (default) or deflate",
      "appliesTo": [
        "export"
      ]
    },
    "maxDownloadSize": {
      "signature": "--max-download-size <size>",
      "description": "Maximum remote archive download size (secure default: 5gb)",
      "appliesTo": [
        "inspect",
        "verify",
        "doctor",
        "hydrate",
        "import"
      ]
    },
    "maxExpandedSize": {
      "signature": "--max-expanded-size <size>",
      "description": "Maximum expanded archive payload size (secure default: 20gb)",
      "appliesTo": [
        "inspect",
        "verify",
        "doctor",
        "hydrate",
        "import"
      ]
    },
    "downloadTimeoutMs": {
      "signature": "--download-timeout-ms <ms>",
      "description": "Remote archive download timeout in milliseconds; 0 disables it",
      "appliesTo": [
        "inspect",
        "verify",
        "doctor",
        "hydrate",
        "import"
      ]
    },
    "allowPrivateNetwork": {
      "signature": "--allow-private-network",
      "description": "Allow archive downloads from loopback/private networks (unsafe for untrusted input)",
      "appliesTo": [
        "inspect",
        "verify",
        "doctor",
        "hydrate",
        "import"
      ]
    }
  },
  "contracts": {
    "manifest": {
      "schemaVersion": "workspai-workspace-archive-manifest-v1",
      "path": "contracts/workspace-archive-manifest.v1.json"
    },
    "operationResult": {
      "schemaVersion": "workspai-workspace-archive-operation-result-v1",
      "path": "contracts/workspace-archive-operation-result.v1.json"
    }
  }
}