{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://docs.caracal.run/schemas/caracal-policy-pack-manifest-2026-05-21.schema.json",
  "title": "Caracal Policy Pack Manifest",
  "description": "Offline compatibility metadata for packaged OPA policy bundles.",
  "type": "object",
  "required": ["schema_version", "id", "name", "version", "policy_input_schema_version", "entrypoint", "rego_modules", "parameters_schema", "tests", "compatibility", "signing"],
  "properties": {
    "schema_version": {
      "const": "2026-05-21"
    },
    "id": {
      "type": "string",
      "minLength": 1
    },
    "name": {
      "type": "string",
      "minLength": 1
    },
    "version": {
      "type": "string",
      "minLength": 1
    },
    "policy_input_schema_version": {
      "const": "2026-05-20"
    },
    "entrypoint": {
      "const": "data.caracal.authz.result"
    },
    "rego_modules": {
      "type": "array",
      "items": {
        "type": "string",
        "minLength": 1
      },
      "minItems": 1,
      "uniqueItems": true
    },
    "parameters_schema": {
      "type": "object",
      "additionalProperties": true
    },
    "tests": {
      "type": "array",
      "items": {
        "type": "object",
        "required": ["name", "input_fixture", "expected_decision"],
        "properties": {
          "name": {
            "type": "string",
            "minLength": 1
          },
          "input_fixture": {
            "type": "string",
            "minLength": 1
          },
          "expected_decision": {
            "enum": ["allow", "deny"]
          }
        },
        "additionalProperties": false
      },
      "minItems": 1
    },
    "compatibility": {
      "type": "object",
      "required": ["caracal_min_version"],
      "properties": {
        "caracal_min_version": {
          "type": "string",
          "minLength": 1
        },
        "caracal_max_version": {
          "type": "string"
        }
      },
      "additionalProperties": false
    },
    "signing": {
      "type": "object",
      "required": ["required"],
      "properties": {
        "required": {
          "type": "boolean"
        },
        "algorithm": {
          "enum": ["sigstore", "minisign", "none"]
        }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}