null | close({
	// Deployment mode for the service: 'replicated' (default) or 'global'.
	mode?: string

	// Endpoint mode for the service: 'vip' (default) or 'dnsrr'.
	endpoint_mode?: string

	// Number of replicas of the service container to run.
	replicas?: int | string

	// Labels to apply to the service.
	labels?: #list_or_dict

	// Configuration for rolling back a service update.
	rollback_config?: close({
		// The number of containers to rollback at a time. If set to 0, all containers
		// rollback simultaneously.
		parallelism?: int | string

		// The time to wait between each container group's rollback (e.g., '1s', '1m30s').
		delay?: string

		// Action to take if a rollback fails: 'continue', 'pause'.
		failure_action?: string

		// Duration to monitor each task for failures after it is created (e.g., '1s', '1m30s').
		monitor?: string

		// Failure rate to tolerate during a rollback.
		max_failure_ratio?: number | string

		// Order of operations during rollbacks: 'stop-first' (default) or 'start-first'.
		order?: "start-first" | "stop-first"

		{[=~"^x-"]: _}
	})

	// Configuration for updating a service.
	update_config?: close({
		// The number of containers to update at a time.
		parallelism?: int | string

		// The time to wait between updating a group of containers (e.g., '1s', '1m30s').
		delay?: string

		// Action to take if an update fails: 'continue', 'pause', 'rollback'.
		failure_action?: string

		// Duration to monitor each updated task for failures after it is created (e.g., '1s', '1m30s').
		monitor?: string

		// Failure rate to tolerate during an update (0 to 1).
		max_failure_ratio?: number | string

		// Order of operations during updates: 'stop-first' (default) or 'start-first'.
		order?: "start-first" | "stop-first"

		{[=~"^x-"]: _}
	})

	// Resource constraints and reservations for the service.
	resources?: close({
		// Resource limits for the service containers.
		limits?: close({
			// Limit for how much of the available CPU resources, as number of cores, a container can use.
			cpus?: number | string

			// Limit on the amount of memory a container can allocate (e.g., '1g', '1024m').
			memory?: string

			// Maximum number of PIDs available to the container.
			pids?: int | string

			{[=~"^x-"]: _}
		})

		// Resource reservations for the service containers.
		reservations?: close({
			// Reservation for how much of the available CPU resources, as number of cores, a container can use.
			cpus?: number | string

			// Reservation on the amount of memory a container can allocate (e.g., '1g', '1024m').
			memory?: string

			// User-defined resources to reserve.
			generic_resources?: #generic_resources

			// Device reservations for the container.
			devices?: #devices

			{[=~"^x-"]: _}
		})

		{[=~"^x-"]: _}
	})

	// Restart policy for the service containers.
	restart_policy?: close({
		// Condition for restarting the container: 'none', 'on-failure', 'any'.
		condition?: string

		// Delay between restart attempts (e.g., '1s', '1m30s').
		delay?: string

		// Maximum number of restart attempts before giving up.
		max_attempts?: int | string

		// Time window used to evaluate the restart policy (e.g., '1s', '1m30s').
		window?: string

		{[=~"^x-"]: _}
	})

	// Constraints and preferences for the platform to select a physical node to run service containers
	placement?: close({
		// Placement constraints for the service (e.g., 'node.role==manager').
		constraints?: [...string]

		// Placement preferences for the service.
		preferences?: [...close({
			// Spread tasks evenly across values of the specified node label.
			spread?: string

			{[=~"^x-"]: _}
		})]

		// Maximum number of replicas of the service.
		max_replicas_per_node?: int | string

		{[=~"^x-"]: _}
	})

	{[=~"^x-"]: _}
})

null | close({
	// Configure watch mode for the service, which monitors file changes and
	// performs actions in response.
	watch?: [...close({
		// Patterns to exclude from watching.
		ignore?: #string_or_list

		// Patterns to include in watching.
		include?: #string_or_list

		// Path to watch for changes.
		path!: string

		// Action to take when a change is detected: rebuild the container, sync files,
		// restart the container, sync and restart, or sync and execute a command.
		action!: "rebuild" | "sync" | "restart" | "sync+restart" | "sync+exec"

		// Target path in the container for sync operations.
		target?: string

		// Command to execute when a change is detected and action is sync+exec.
		exec?: #service_hook

		// Ensure that an initial synchronization is done before starting watch mode for sync+x triggers
		initial_sync?: bool

		{[=~"^x-"]: _}
	})]

	{[=~"^x-"]: _}
})

[...close({
	// List of capabilities the device needs to have (e.g., 'gpu', 'compute', 'utility').
	capabilities!: #list_of_strings

	// Number of devices of this type to reserve.
	count?: int | string

	// List of specific device IDs to reserve.
	device_ids?: #list_of_strings

	// Device driver to use (e.g., 'nvidia').
	driver?: string

	// Driver-specific options for the device.
	options?: #list_or_dict

	{[=~"^x-"]: _}
})]

matchN(1, [
	string,
	[...matchN(1, [
		string,
		close({
			// Path to the environment file.
			path!: string

			// Format attribute lets you to use an alternative file formats for env_file.
			// When not set, env_file is parsed according to Compose rules.
			format?: string

			// Whether the file is required. If true and the file doesn't exist, an error will be raised.
			required?: bool | string
		}),
	])],
])

[...close({
	// Specification for discrete (countable) resources.
	discrete_resource_spec?: close({
		// Type of resource (e.g., 'GPU', 'FPGA', 'SSD').
		kind?: string

		// Number of resources of this kind to reserve.
		value?: number | string

		{[=~"^x-"]: _}
	})

	{[=~"^x-"]: _}
})]

matchN(1, [
	"all",
	[...{
		// List of capabilities the GPU needs to have (e.g., 'compute', 'utility').
		capabilities?: #list_of_strings

		// Number of GPUs to use.
		count?: int | string

		// List of specific GPU device IDs to use.
		device_ids?: #list_of_strings

		// GPU driver to use (e.g., 'nvidia').
		driver?: string

		// Driver-specific options for the GPU.
		options?: #list_or_dict
		...
	}],
])

matchN(1, [
	string,
	close({
		// Path to the Compose application or sub-project files to include.
		path?: #string_or_list

		// Path to the environment files to use to define default values when
		// interpolating variables in the Compose files being parsed.
		env_file?: #string_or_list

		// Path to resolve relative paths set in the Compose file
		project_directory?: string
	}),
])

#container_spec &
	#workload_spec &
	close({
		// List of profiles for this job. When profiles are specified, the job is only
		// active when the profile is activated.
		profiles?: #list_of_strings

		// Trigger conditions for the job. At least one trigger attribute must be
		// declared. Setting manual to false forbids manual execution by an explicit
		// run command.
		triggers!: matchN(>=1, [{
			manual!: _
			...
		}, {
			schedule!: _
			...
		}]) & close({
			// Whether the job can be triggered manually by an explicit run command.
			// Defaults to true; an explicit false forbids manual execution.
			manual?: bool | string

			// List of schedules for the job.
			schedule?: [...matchN(1, [string, #schedule])]

			{[=~"^x-"]: _}
		})
		annotations?:         _
		blkio_config?:        _
		cap_add?:             _
		cap_drop?:            _
		cgroup?:              _
		cgroup_parent?:       _
		command?:             _
		configs?:             _
		cpu_count?:           _
		cpu_percent?:         _
		cpu_shares?:          _
		cpu_quota?:           _
		cpu_period?:          _
		cpu_rt_period?:       _
		cpu_rt_runtime?:      _
		cpus?:                _
		cpuset?:              _
		credential_spec?:     _
		device_cgroup_rules?: _
		devices?:             _
		dns?:                 _
		dns_opt?:             _
		dns_search?:          _
		domainname?:          _
		entrypoint?:          _
		env_file?:            _
		label_file?:          _
		environment?:         _
		extra_hosts?:         _
		gpus?:                _
		group_add?:           _
		hostname?:            _
		image?:               _
		init?:                _
		ipc?:                 _
		isolation?:           _
		labels?:              _
		logging?:             _
		mac_address?:         _
		mem_limit?:           _
		mem_reservation?:     _
		mem_swappiness?:      _
		memswap_limit?:       _
		network_mode?:        _
		models?:              _
		networks?:            _
		oom_kill_disable?:    _
		oom_score_adj?:       _
		pid?:                 _
		pids_limit?:          _
		platform?:            _
		privileged?:          _
		pull_policy?:         _
		pull_refresh_after?:  _
		read_only?:           _
		runtime?:             _
		security_opt?:        _
		shm_size?:            _
		secrets?:             _
		sysctls?:             _
		stop_grace_period?:   _
		stop_signal?:         _
		storage_opt?:         _
		tmpfs?:               _
		ulimits?:             _
		use_api_socket?:      _
		user?:                _
		uts?:                 _
		userns_mode?:         _
		volumes?:             _
		volumes_from?:        _
		working_dir?:         _
		build?:               _
		depends_on?:          _
		healthcheck?:         _
		ports?:               _
		expose?:              _
		stdin_open?:          _
		tty?:                 _

		{[=~"^x-"]: _}
	})

null | close({
	// Custom name for this network.
	name?: string

	// Specify which driver should be used for this network. Default is 'bridge'.
	driver?: string

	// Specify driver-specific options defined as key/value pairs.
	driver_opts?: {
		{[=~"^.+$"]: number | string}
		...
	}

	// Custom IP Address Management configuration for this network.
	ipam?: close({
		// Custom IPAM driver, instead of the default.
		driver?: string

		// List of IPAM configuration blocks.
		config?: [...close({
			// Subnet in CIDR format that represents a network segment.
			subnet?: string

			// Range of IPs from which to allocate container IPs.
			ip_range?: string

			// IPv4 or IPv6 gateway for the subnet.
			gateway?: string

			// Auxiliary IPv4 or IPv6 addresses used by Network driver.
			aux_addresses?: close({

				{[=~"^.+$"]: string}})

			{[=~"^x-"]: _}
		})]

		// Driver-specific options for the IPAM driver.
		options?: close({

			{[=~"^.+$"]: string}})

		{[=~"^x-"]: _}
	})

	// Specifies that this network already exists and was created outside of Compose.
	external?: bool |
		string |
		close({
			// Specifies the name of the external network. Deprecated: use the 'name' property instead.
			name?: string @deprecated()

			{[=~"^x-"]: _}
		})

	// Create an externally isolated network.
	internal?: bool | string

	// Enable IPv4 networking.
	enable_ipv4?: bool | string

	// Enable IPv6 networking.
	enable_ipv6?: bool | string

	// If true, standalone containers can attach to this network.
	attachable?: bool | string

	// Add metadata to the network using labels.
	labels?: #list_or_dict

	{[=~"^x-"]: _}
})

#container_spec & close({
	// When true, the hook runs once per service replica instead of once per service.
	per_replica?:         bool | string
	annotations?:         _
	blkio_config?:        _
	cap_add?:             _
	cap_drop?:            _
	cgroup?:              _
	cgroup_parent?:       _
	command?:             _
	configs?:             _
	cpu_count?:           _
	cpu_percent?:         _
	cpu_shares?:          _
	cpu_quota?:           _
	cpu_period?:          _
	cpu_rt_period?:       _
	cpu_rt_runtime?:      _
	cpus?:                _
	cpuset?:              _
	credential_spec?:     _
	device_cgroup_rules?: _
	devices?:             _
	dns?:                 _
	dns_opt?:             _
	dns_search?:          _
	domainname?:          _
	entrypoint?:          _
	env_file?:            _
	label_file?:          _
	environment?:         _
	extra_hosts?:         _
	gpus?:                _
	group_add?:           _
	hostname?:            _
	image?:               _
	init?:                _
	ipc?:                 _
	isolation?:           _
	labels?:              _
	logging?:             _
	mac_address?:         _
	mem_limit?:           _
	mem_reservation?:     _
	mem_swappiness?:      _
	memswap_limit?:       _
	network_mode?:        _
	models?:              _
	networks?:            _
	oom_kill_disable?:    _
	oom_score_adj?:       _
	pid?:                 _
	pids_limit?:          _
	platform?:            _
	privileged?:          _
	pull_policy?:         _
	pull_refresh_after?:  _
	read_only?:           _
	runtime?:             _
	security_opt?:        _
	shm_size?:            _
	secrets?:             _
	sysctls?:             _
	stop_grace_period?:   _
	stop_signal?:         _
	storage_opt?:         _
	tmpfs?:               _
	ulimits?:             _
	use_api_socket?:      _
	user?:                _
	uts?:                 _
	userns_mode?:         _
	volumes?:             _
	volumes_from?:        _
	working_dir?:         _

	{[=~"^x-"]: _}
})

#container_spec &
	#workload_spec &
	close({
		deploy?:  #deployment
		develop?: #development

		// List of profiles for this service. When profiles are specified, services are
		// only started when the profile is activated.
		profiles?: #list_of_strings

		// Restart policy for the service container. Options include: 'no', 'always',
		// 'on-failure', and 'unless-stopped'.
		restart?: string

		// Number of containers to deploy for this service.
		scale?:  int | string
		attach?: bool | string

		// Specify a custom container name, rather than a generated default name.
		container_name?: =~"[a-zA-Z0-9][a-zA-Z0-9_.-]+"

		// Specify a service which will not be manage by Compose directly, and delegate
		// its management to an external provider.
		provider?: close({
			// External component used by Compose to manage setup and teardown lifecycle of the service.
			type!: string

			// Provider-specific options.
			options?: {
				{[=~"^.+$"]: matchN(1, [bool | number | string, [...bool | number | string]])}
				...
			}

			{[=~"^x-"]: _}
		})

		// Extend another service, in the current file or another file.
		extends?: matchN(1, [
			string,
			close({
				// The name of the service to extend.
				service!: string

				// The file path where the service to extend is defined.
				file?: string
			}),
		])

		// Link to containers in another service. Either specify both the service name
		// and a link alias (SERVICE:ALIAS), or just the service name.
		links?: list.UniqueItems() & [...string]

		// Link to services started outside this Compose application. Specify services
		// as <service_name>:<alias>.
		external_links?: list.UniqueItems() & [...string]

		// Init containers to run to completion before the service container is started.
		// Each step runs in its own ephemeral container, in declared order; a non-zero
		// exit fails the bring-up of the service and its dependents.
		pre_start?: [...#pre_start_hook]

		// Commands to run after the container starts. If any command fails, the container stops.
		post_start?: [...#service_hook]

		// Commands to run before the container stops. If any command fails, the container stop is aborted.
		pre_stop?:            [...#service_hook]
		annotations?:         _
		blkio_config?:        _
		cap_add?:             _
		cap_drop?:            _
		cgroup?:              _
		cgroup_parent?:       _
		command?:             _
		configs?:             _
		cpu_count?:           _
		cpu_percent?:         _
		cpu_shares?:          _
		cpu_quota?:           _
		cpu_period?:          _
		cpu_rt_period?:       _
		cpu_rt_runtime?:      _
		cpus?:                _
		cpuset?:              _
		credential_spec?:     _
		device_cgroup_rules?: _
		devices?:             _
		dns?:                 _
		dns_opt?:             _
		dns_search?:          _
		domainname?:          _
		entrypoint?:          _
		env_file?:            _
		label_file?:          _
		environment?:         _
		extra_hosts?:         _
		gpus?:                _
		group_add?:           _
		hostname?:            _
		image?:               _
		init?:                _
		ipc?:                 _
		isolation?:           _
		labels?:              _
		logging?:             _
		mac_address?:         _
		mem_limit?:           _
		mem_reservation?:     _
		mem_swappiness?:      _
		memswap_limit?:       _
		network_mode?:        _
		models?:              _
		networks?:            _
		oom_kill_disable?:    _
		oom_score_adj?:       _
		pid?:                 _
		pids_limit?:          _
		platform?:            _
		privileged?:          _
		pull_policy?:         _
		pull_refresh_after?:  _
		read_only?:           _
		runtime?:             _
		security_opt?:        _
		shm_size?:            _
		secrets?:             _
		sysctls?:             _
		stop_grace_period?:   _
		stop_signal?:         _
		storage_opt?:         _
		tmpfs?:               _
		ulimits?:             _
		use_api_socket?:      _
		user?:                _
		uts?:                 _
		userns_mode?:         _
		volumes?:             _
		volumes_from?:        _
		working_dir?:         _
		build?:               _
		depends_on?:          _
		healthcheck?:         _
		ports?:               _
		expose?:              _
		stdin_open?:          _
		tty?:                 _

		{[=~"^x-"]: _}
	})