let oci = import "schemas/lib/integration/oci_artifact_format.ncl" in

{
  artifact = {
    media_type  = "application/vnd.ontoref.domain.v1",
    id          = "secret-delivery",
    version     = "0.1.0",
    description = "Delivers workspace secrets (credentials, tokens, age keys) from provisioning vault to integration mode participants. Consumer calls the context assembler binary on stdin to receive a JSON envelope with resolved secret values.",
    layers = [
      {
        media_type  = "application/vnd.ontoref.domain.contract.v1",
        description = "contract.ncl — Nickel type definition for the secret-delivery context JSON envelope",
        required    = true,
      },
      {
        media_type  = "application/vnd.ontoref.domain.example.v1",
        description = "example.json — sample context envelope for integration testing",
        required    = false,
      },
    ],
    uses_registry = "primary",
  } | oci.DomainArtifact,
}