@agentxm/registry-protocol 0.28.4-bootstrap.0

package/dist/src/unstable/publish/manifest-policy.d.ts

@@ -0,0 +1,611 @@
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import * as Schema from "effect/Schema";
+import { type ExtensionName, type ExtensionType } from "@agentxm/extension-model/unstable/extensions/common";
+import { type Handle } from "@agentxm/extension-model/unstable/extensions/handle";
+import { type Version } from "@agentxm/extension-model/unstable/version-constraints";
+import type { ArchiveGuardrailError, ZipEntry } from "./archive-guardrails.js";
+declare const ManifestError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ManifestError";
+} & Readonly<A>;
+export declare class ManifestError extends ManifestError_base<{
+    readonly code: "manifest_missing" | "manifest_multiple" | "manifest_invalid_json" | "manifest_schema_invalid" | "companion_package_purl_has_version" | "companion_package_scheme_mismatch" | "companion_package_invalid" | "declared_manifest_mismatch";
+    readonly detail: string;
+    readonly details?: unknown;
+}> {
+}
+export declare const MANIFEST_FILENAME_BY_TYPE: {
+    readonly skill: "skill.json";
+    readonly "mcp-server": "mcp.json";
+    readonly subagent: "subagent.json";
+    readonly pack: "pack.json";
+    readonly rule: "rule.json";
+    readonly hook: "hook.json";
+    readonly knowledge: "knowledge.json";
+};
+export declare const manifestFilenameForType: (type: ExtensionType) => string;
+export declare const ManifestIdentitySchema: Schema.Struct<{
+    readonly owner: Schema.brand<Schema.String, "Handle">;
+    readonly type: Schema.Literals<readonly ("skill" | "mcp-server" | "subagent" | "rule" | "hook" | "knowledge" | "pack")[]>;
+    readonly name: Schema.brand<Schema.NonEmptyString, "ExtensionName">;
+    readonly version: Schema.brand<Schema.String, "Version">;
+}>;
+export type ManifestIdentity = Schema.Schema.Type<typeof ManifestIdentitySchema>;
+export declare const manifestSchemaForType: (type: ExtensionType) => Schema.Struct<{
+    readonly type: Schema.Literal<"skill">;
+    readonly name: Schema.brand<Schema.NonEmptyString, "ExtensionName">;
+    readonly enhances: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly requires: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly fallback: Schema.optional<Schema.Literals<readonly ["auto", "none"]>>;
+    readonly recommendedPacks: Schema.optional<Schema.$Array<Schema.brand<Schema.NonEmptyString, "PackSpec">>>;
+    readonly standalone: Schema.optional<Schema.Boolean>;
+    readonly publish: Schema.optional<Schema.Struct<{
+        readonly visibility: Schema.optional<Schema.Literals<readonly ["public", "private"]>>;
+        readonly ignore: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    }>>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+    readonly owner: Schema.brand<Schema.String, "Handle">;
+    readonly version: Schema.brand<Schema.String, "Version">;
+    readonly description: Schema.optional<Schema.String>;
+    readonly keywords: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly repository: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.optional<Schema.NonEmptyString>;
+        readonly url: Schema.NonEmptyString;
+        readonly directory: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly homepage: Schema.optional<Schema.String>;
+    readonly license: Schema.optional<Schema.String>;
+    readonly bugs: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly url: Schema.optional<Schema.NonEmptyString>;
+        readonly email: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly authors: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly email: Schema.optional<Schema.String>;
+        readonly url: Schema.optional<Schema.String>;
+    }>>>;
+    readonly packages: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly purl: Schema.brand<Schema.NonEmptyString, "PackageIdentityPurl">;
+        readonly versionRange: Schema.optional<Schema.brand<Schema.decodeTo<Schema.toType<Schema.Struct<{
+            readonly raw: Schema.NonEmptyString;
+            readonly scheme: Schema.NonEmptyString;
+            readonly constraints: Schema.$Array<Schema.Struct<{
+                readonly comparator: Schema.Literals<readonly ["=", "!=", "<", "<=", ">", ">="]>;
+                readonly version: Schema.NonEmptyString;
+            }>>;
+        }>>, Schema.NonEmptyString, never, never>, "VersRange">>;
+    }>>>;
+    readonly $schema: Schema.optional<Schema.String>;
+}> | Schema.Struct<{
+    readonly type: Schema.Literal<"mcp-server">;
+    readonly name: Schema.brand<Schema.NonEmptyString, "ExtensionName">;
+    readonly server: Schema.Struct<{
+        readonly $schema: Schema.optional<Schema.String>;
+        readonly name: Schema.NonEmptyString;
+        readonly description: Schema.NonEmptyString;
+        readonly version: Schema.String;
+        readonly title: Schema.optional<Schema.NonEmptyString>;
+        readonly packages: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly registryType: Schema.String;
+            readonly identifier: Schema.String;
+            readonly transport: Schema.Union<readonly [Schema.Struct<{
+                readonly type: Schema.Literal<"stdio">;
+            }>, Schema.Struct<{
+                readonly type: Schema.Literal<"streamable-http">;
+                readonly url: Schema.NonEmptyString;
+                readonly headers: Schema.optional<Schema.$Array<Schema.Struct<{
+                    readonly name: Schema.String;
+                    readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                    readonly default: Schema.optional<Schema.String>;
+                    readonly description: Schema.optional<Schema.String>;
+                    readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                    readonly isRequired: Schema.optional<Schema.Boolean>;
+                    readonly isSecret: Schema.optional<Schema.Boolean>;
+                    readonly placeholder: Schema.optional<Schema.String>;
+                    readonly value: Schema.optional<Schema.String>;
+                    readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+                }>>>;
+            }>, Schema.Struct<{
+                readonly type: Schema.Literal<"sse">;
+                readonly url: Schema.NonEmptyString;
+                readonly headers: Schema.optional<Schema.$Array<Schema.Struct<{
+                    readonly name: Schema.String;
+                    readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                    readonly default: Schema.optional<Schema.String>;
+                    readonly description: Schema.optional<Schema.String>;
+                    readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                    readonly isRequired: Schema.optional<Schema.Boolean>;
+                    readonly isSecret: Schema.optional<Schema.Boolean>;
+                    readonly placeholder: Schema.optional<Schema.String>;
+                    readonly value: Schema.optional<Schema.String>;
+                    readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+                }>>>;
+            }>]>;
+            readonly version: Schema.optional<Schema.NonEmptyString>;
+            readonly registryBaseUrl: Schema.optional<Schema.String>;
+            readonly runtimeHint: Schema.optional<Schema.String>;
+            readonly runtimeArguments: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Union<readonly [Schema.Struct<{
+                readonly type: Schema.Literal<"positional">;
+                readonly isRepeated: Schema.optional<Schema.Boolean>;
+                readonly valueHint: Schema.String;
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly value: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>, Schema.Struct<{
+                readonly type: Schema.Literal<"positional">;
+                readonly isRepeated: Schema.optional<Schema.Boolean>;
+                readonly value: Schema.String;
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>]>, Schema.Struct<{
+                readonly type: Schema.Literal<"named">;
+                readonly name: Schema.String;
+                readonly isRepeated: Schema.optional<Schema.Boolean>;
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly value: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>]>>>;
+            readonly packageArguments: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Union<readonly [Schema.Struct<{
+                readonly type: Schema.Literal<"positional">;
+                readonly isRepeated: Schema.optional<Schema.Boolean>;
+                readonly valueHint: Schema.String;
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly value: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>, Schema.Struct<{
+                readonly type: Schema.Literal<"positional">;
+                readonly isRepeated: Schema.optional<Schema.Boolean>;
+                readonly value: Schema.String;
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>]>, Schema.Struct<{
+                readonly type: Schema.Literal<"named">;
+                readonly name: Schema.String;
+                readonly isRepeated: Schema.optional<Schema.Boolean>;
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly value: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>]>>>;
+            readonly environmentVariables: Schema.optional<Schema.$Array<Schema.Struct<{
+                readonly name: Schema.String;
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly value: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>>>;
+            readonly fileSha256: Schema.optional<Schema.String>;
+        }>>>;
+        readonly remotes: Schema.optional<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly type: Schema.Literal<"streamable-http">;
+            readonly url: Schema.NonEmptyString;
+            readonly headers: Schema.optional<Schema.$Array<Schema.Struct<{
+                readonly name: Schema.String;
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly value: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>>>;
+            readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Struct<{
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly value: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>>>;
+        }>, Schema.Struct<{
+            readonly type: Schema.Literal<"sse">;
+            readonly url: Schema.NonEmptyString;
+            readonly headers: Schema.optional<Schema.$Array<Schema.Struct<{
+                readonly name: Schema.String;
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly value: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>>>;
+            readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Struct<{
+                readonly choices: Schema.optional<Schema.$Array<Schema.String>>;
+                readonly default: Schema.optional<Schema.String>;
+                readonly description: Schema.optional<Schema.String>;
+                readonly format: Schema.optional<Schema.Literals<readonly ["string", "number", "boolean", "filepath"]>>;
+                readonly isRequired: Schema.optional<Schema.Boolean>;
+                readonly isSecret: Schema.optional<Schema.Boolean>;
+                readonly placeholder: Schema.optional<Schema.String>;
+                readonly value: Schema.optional<Schema.String>;
+                readonly variables: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+            }>>>;
+        }>]>>>;
+        readonly repository: Schema.optional<Schema.Struct<{
+            readonly url: Schema.String;
+            readonly source: Schema.String;
+            readonly id: Schema.optional<Schema.String>;
+            readonly subfolder: Schema.optional<Schema.String>;
+        }>>;
+        readonly icons: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly src: Schema.NonEmptyString;
+            readonly mimeType: Schema.optional<Schema.Literals<readonly ["image/png", "image/jpeg", "image/jpg", "image/svg+xml", "image/webp"]>>;
+            readonly sizes: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly theme: Schema.optional<Schema.Literals<readonly ["light", "dark"]>>;
+        }>>>;
+        readonly websiteUrl: Schema.optional<Schema.String>;
+        readonly _meta: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>;
+    readonly enhances: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly requires: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly fallback: Schema.optional<Schema.Literals<readonly ["auto", "none"]>>;
+    readonly recommendedPacks: Schema.optional<Schema.$Array<Schema.brand<Schema.NonEmptyString, "PackSpec">>>;
+    readonly standalone: Schema.optional<Schema.Boolean>;
+    readonly publish: Schema.optional<Schema.Struct<{
+        readonly visibility: Schema.optional<Schema.Literals<readonly ["public", "private"]>>;
+        readonly ignore: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    }>>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+    readonly owner: Schema.brand<Schema.String, "Handle">;
+    readonly version: Schema.brand<Schema.String, "Version">;
+    readonly description: Schema.optional<Schema.String>;
+    readonly keywords: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly repository: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.optional<Schema.NonEmptyString>;
+        readonly url: Schema.NonEmptyString;
+        readonly directory: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly homepage: Schema.optional<Schema.String>;
+    readonly license: Schema.optional<Schema.String>;
+    readonly bugs: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly url: Schema.optional<Schema.NonEmptyString>;
+        readonly email: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly authors: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly email: Schema.optional<Schema.String>;
+        readonly url: Schema.optional<Schema.String>;
+    }>>>;
+    readonly packages: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly purl: Schema.brand<Schema.NonEmptyString, "PackageIdentityPurl">;
+        readonly versionRange: Schema.optional<Schema.brand<Schema.decodeTo<Schema.toType<Schema.Struct<{
+            readonly raw: Schema.NonEmptyString;
+            readonly scheme: Schema.NonEmptyString;
+            readonly constraints: Schema.$Array<Schema.Struct<{
+                readonly comparator: Schema.Literals<readonly ["=", "!=", "<", "<=", ">", ">="]>;
+                readonly version: Schema.NonEmptyString;
+            }>>;
+        }>>, Schema.NonEmptyString, never, never>, "VersRange">>;
+    }>>>;
+    readonly $schema: Schema.optional<Schema.String>;
+}> | Schema.Struct<{
+    readonly type: Schema.Literal<"subagent">;
+    readonly name: Schema.brand<Schema.NonEmptyString, "ExtensionName">;
+    readonly enhances: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly requires: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly fallback: Schema.optional<Schema.Literals<readonly ["auto", "none"]>>;
+    readonly recommendedPacks: Schema.optional<Schema.$Array<Schema.brand<Schema.NonEmptyString, "PackSpec">>>;
+    readonly standalone: Schema.optional<Schema.Boolean>;
+    readonly publish: Schema.optional<Schema.Struct<{
+        readonly visibility: Schema.optional<Schema.Literals<readonly ["public", "private"]>>;
+        readonly ignore: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    }>>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+    readonly owner: Schema.brand<Schema.String, "Handle">;
+    readonly version: Schema.brand<Schema.String, "Version">;
+    readonly description: Schema.optional<Schema.String>;
+    readonly keywords: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly repository: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.optional<Schema.NonEmptyString>;
+        readonly url: Schema.NonEmptyString;
+        readonly directory: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly homepage: Schema.optional<Schema.String>;
+    readonly license: Schema.optional<Schema.String>;
+    readonly bugs: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly url: Schema.optional<Schema.NonEmptyString>;
+        readonly email: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly authors: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly email: Schema.optional<Schema.String>;
+        readonly url: Schema.optional<Schema.String>;
+    }>>>;
+    readonly packages: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly purl: Schema.brand<Schema.NonEmptyString, "PackageIdentityPurl">;
+        readonly versionRange: Schema.optional<Schema.brand<Schema.decodeTo<Schema.toType<Schema.Struct<{
+            readonly raw: Schema.NonEmptyString;
+            readonly scheme: Schema.NonEmptyString;
+            readonly constraints: Schema.$Array<Schema.Struct<{
+                readonly comparator: Schema.Literals<readonly ["=", "!=", "<", "<=", ">", ">="]>;
+                readonly version: Schema.NonEmptyString;
+            }>>;
+        }>>, Schema.NonEmptyString, never, never>, "VersRange">>;
+    }>>>;
+    readonly $schema: Schema.optional<Schema.String>;
+}> | Schema.Struct<{
+    readonly type: Schema.Literal<"pack">;
+    readonly name: Schema.brand<Schema.NonEmptyString, "ExtensionName">;
+    readonly dependencies: Schema.$Record<Schema.String, Schema.brand<Schema.NonEmptyString, "VersionRange">>;
+    readonly publish: Schema.optional<Schema.Struct<{
+        readonly visibility: Schema.optional<Schema.Literals<readonly ["public", "private"]>>;
+        readonly ignore: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    }>>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+    readonly owner: Schema.brand<Schema.String, "Handle">;
+    readonly version: Schema.brand<Schema.String, "Version">;
+    readonly description: Schema.optional<Schema.String>;
+    readonly keywords: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly repository: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.optional<Schema.NonEmptyString>;
+        readonly url: Schema.NonEmptyString;
+        readonly directory: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly homepage: Schema.optional<Schema.String>;
+    readonly license: Schema.optional<Schema.String>;
+    readonly bugs: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly url: Schema.optional<Schema.NonEmptyString>;
+        readonly email: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly authors: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly email: Schema.optional<Schema.String>;
+        readonly url: Schema.optional<Schema.String>;
+    }>>>;
+    readonly packages: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly purl: Schema.brand<Schema.NonEmptyString, "PackageIdentityPurl">;
+        readonly versionRange: Schema.optional<Schema.brand<Schema.decodeTo<Schema.toType<Schema.Struct<{
+            readonly raw: Schema.NonEmptyString;
+            readonly scheme: Schema.NonEmptyString;
+            readonly constraints: Schema.$Array<Schema.Struct<{
+                readonly comparator: Schema.Literals<readonly ["=", "!=", "<", "<=", ">", ">="]>;
+                readonly version: Schema.NonEmptyString;
+            }>>;
+        }>>, Schema.NonEmptyString, never, never>, "VersRange">>;
+    }>>>;
+    readonly $schema: Schema.optional<Schema.String>;
+}> | Schema.Struct<{
+    readonly type: Schema.Literal<"rule">;
+    readonly name: Schema.brand<Schema.NonEmptyString, "ExtensionName">;
+    readonly title: Schema.optional<Schema.NonEmptyString>;
+    readonly priority: Schema.optional<Schema.Int>;
+    readonly appliesTo: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly enhances: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly requires: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly fallback: Schema.optional<Schema.Literals<readonly ["auto", "none"]>>;
+    readonly recommendedPacks: Schema.optional<Schema.$Array<Schema.brand<Schema.NonEmptyString, "PackSpec">>>;
+    readonly standalone: Schema.optional<Schema.Boolean>;
+    readonly publish: Schema.optional<Schema.Struct<{
+        readonly visibility: Schema.optional<Schema.Literals<readonly ["public", "private"]>>;
+        readonly ignore: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    }>>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+    readonly owner: Schema.brand<Schema.String, "Handle">;
+    readonly version: Schema.brand<Schema.String, "Version">;
+    readonly description: Schema.optional<Schema.String>;
+    readonly keywords: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly repository: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.optional<Schema.NonEmptyString>;
+        readonly url: Schema.NonEmptyString;
+        readonly directory: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly homepage: Schema.optional<Schema.String>;
+    readonly license: Schema.optional<Schema.String>;
+    readonly bugs: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly url: Schema.optional<Schema.NonEmptyString>;
+        readonly email: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly authors: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly email: Schema.optional<Schema.String>;
+        readonly url: Schema.optional<Schema.String>;
+    }>>>;
+    readonly packages: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly purl: Schema.brand<Schema.NonEmptyString, "PackageIdentityPurl">;
+        readonly versionRange: Schema.optional<Schema.brand<Schema.decodeTo<Schema.toType<Schema.Struct<{
+            readonly raw: Schema.NonEmptyString;
+            readonly scheme: Schema.NonEmptyString;
+            readonly constraints: Schema.$Array<Schema.Struct<{
+                readonly comparator: Schema.Literals<readonly ["=", "!=", "<", "<=", ">", ">="]>;
+                readonly version: Schema.NonEmptyString;
+            }>>;
+        }>>, Schema.NonEmptyString, never, never>, "VersRange">>;
+    }>>>;
+    readonly $schema: Schema.optional<Schema.String>;
+}> | Schema.Struct<{
+    readonly type: Schema.Literal<"hook">;
+    readonly name: Schema.brand<Schema.NonEmptyString, "ExtensionName">;
+    readonly title: Schema.optional<Schema.NonEmptyString>;
+    readonly runtime: Schema.Literals<readonly ["bash", "node", "python"]>;
+    readonly entrypoint: Schema.NonEmptyString;
+    readonly bindings: Schema.$Array<Schema.Struct<{
+        readonly on: Schema.Literals<readonly ["session.start", "prompt.submit", "turn.end", "tool.pre", "tool.post", "subagent.stop", "compaction.pre"]>;
+        readonly match: Schema.optional<Schema.Struct<{
+            readonly tools: Schema.optional<Schema.NonEmptyArray<Schema.Literals<readonly ["file.read", "file.write", "file.edit", "shell.exec", "web.fetch", "mcp.call"]>>>;
+        }>>;
+        readonly matcherRaw: Schema.optional<Schema.NonEmptyString>;
+        readonly targets: Schema.optional<Schema.$Record<Schema.String, Schema.Struct<{
+            readonly matcherRaw: Schema.optional<Schema.NonEmptyString>;
+        }>>>;
+        readonly requires: Schema.optional<Schema.Struct<{
+            readonly decision: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"observe">;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"block">;
+                readonly outcomes: Schema.optional<Schema.NonEmptyArray<Schema.Literals<readonly ["allow", "deny", "ask"]>>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"modify">;
+                readonly operations: Schema.optional<Schema.NonEmptyArray<Schema.Literals<readonly ["modify-input", "inject-context", "modify-output", "synthesize", "redact"]>>>;
+            }>]>;
+        }>>;
+    }>>;
+    readonly timeoutMs: Schema.optional<Schema.Int>;
+    readonly capabilities: Schema.optional<Schema.Struct<{
+        readonly network: Schema.optional<Schema.Boolean>;
+        readonly filesystemWrite: Schema.optional<Schema.Boolean>;
+        readonly exec: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+        readonly env: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    }>>;
+    readonly enhances: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly requires: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly fallback: Schema.optional<Schema.Literals<readonly ["auto", "none"]>>;
+    readonly recommendedPacks: Schema.optional<Schema.$Array<Schema.brand<Schema.NonEmptyString, "PackSpec">>>;
+    readonly standalone: Schema.optional<Schema.Boolean>;
+    readonly publish: Schema.optional<Schema.Struct<{
+        readonly visibility: Schema.optional<Schema.Literals<readonly ["public", "private"]>>;
+        readonly ignore: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    }>>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+    readonly owner: Schema.brand<Schema.String, "Handle">;
+    readonly version: Schema.brand<Schema.String, "Version">;
+    readonly description: Schema.optional<Schema.String>;
+    readonly keywords: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly repository: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.optional<Schema.NonEmptyString>;
+        readonly url: Schema.NonEmptyString;
+        readonly directory: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly homepage: Schema.optional<Schema.String>;
+    readonly license: Schema.optional<Schema.String>;
+    readonly bugs: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly url: Schema.optional<Schema.NonEmptyString>;
+        readonly email: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly authors: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly email: Schema.optional<Schema.String>;
+        readonly url: Schema.optional<Schema.String>;
+    }>>>;
+    readonly packages: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly purl: Schema.brand<Schema.NonEmptyString, "PackageIdentityPurl">;
+        readonly versionRange: Schema.optional<Schema.brand<Schema.decodeTo<Schema.toType<Schema.Struct<{
+            readonly raw: Schema.NonEmptyString;
+            readonly scheme: Schema.NonEmptyString;
+            readonly constraints: Schema.$Array<Schema.Struct<{
+                readonly comparator: Schema.Literals<readonly ["=", "!=", "<", "<=", ">", ">="]>;
+                readonly version: Schema.NonEmptyString;
+            }>>;
+        }>>, Schema.NonEmptyString, never, never>, "VersRange">>;
+    }>>>;
+    readonly $schema: Schema.optional<Schema.String>;
+}> | Schema.Struct<{
+    readonly type: Schema.Literal<"knowledge">;
+    readonly format: Schema.Struct<{
+        readonly name: Schema.Literal<"okf">;
+        readonly version: Schema.Literal<"0.2">;
+    }>;
+    readonly bundleRoot: Schema.Literal<"src">;
+    readonly instructionEntry: Schema.optionalKey<Schema.Boolean>;
+    readonly name: Schema.brand<Schema.NonEmptyString, "ExtensionName">;
+    readonly enhances: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly requires: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly fallback: Schema.optional<Schema.Literals<readonly ["auto", "none"]>>;
+    readonly recommendedPacks: Schema.optional<Schema.$Array<Schema.brand<Schema.NonEmptyString, "PackSpec">>>;
+    readonly standalone: Schema.optional<Schema.Boolean>;
+    readonly publish: Schema.optional<Schema.Struct<{
+        readonly visibility: Schema.optional<Schema.Literals<readonly ["public", "private"]>>;
+        readonly ignore: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    }>>;
+    readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+    readonly owner: Schema.brand<Schema.String, "Handle">;
+    readonly version: Schema.brand<Schema.String, "Version">;
+    readonly description: Schema.optional<Schema.String>;
+    readonly keywords: Schema.optional<Schema.$Array<Schema.NonEmptyString>>;
+    readonly repository: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly type: Schema.optional<Schema.NonEmptyString>;
+        readonly url: Schema.NonEmptyString;
+        readonly directory: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly homepage: Schema.optional<Schema.String>;
+    readonly license: Schema.optional<Schema.String>;
+    readonly bugs: Schema.optional<Schema.Union<readonly [Schema.String, Schema.Struct<{
+        readonly url: Schema.optional<Schema.NonEmptyString>;
+        readonly email: Schema.optional<Schema.NonEmptyString>;
+    }>]>>;
+    readonly authors: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly email: Schema.optional<Schema.String>;
+        readonly url: Schema.optional<Schema.String>;
+    }>>>;
+    readonly packages: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly purl: Schema.brand<Schema.NonEmptyString, "PackageIdentityPurl">;
+        readonly versionRange: Schema.optional<Schema.brand<Schema.decodeTo<Schema.toType<Schema.Struct<{
+            readonly raw: Schema.NonEmptyString;
+            readonly scheme: Schema.NonEmptyString;
+            readonly constraints: Schema.$Array<Schema.Struct<{
+                readonly comparator: Schema.Literals<readonly ["=", "!=", "<", "<=", ">", ">="]>;
+                readonly version: Schema.NonEmptyString;
+            }>>;
+        }>>, Schema.NonEmptyString, never, never>, "VersRange">>;
+    }>>>;
+    readonly $schema: Schema.optional<Schema.String>;
+}>;
+export interface ManifestResolutionInput {
+    readonly type: ExtensionType;
+    readonly entries: readonly ZipEntry[];
+    readonly readEntry: (fileName: string) => Effect.Effect<Uint8Array, ArchiveGuardrailError>;
+}
+export interface DeclaredPublishIdentity {
+    readonly owner: Handle;
+    readonly type: ExtensionType;
+    readonly name: ExtensionName;
+    readonly version: Version;
+}
+export interface ResolvedManifest {
+    readonly identity: ManifestIdentity;
+    readonly raw: unknown;
+    readonly fileName: string;
+}
+export declare const validateManifestHasNoAgentsField: (fileName: string, raw: unknown) => Result.Result<void, ManifestError>;
+export declare const resolveManifest: (input: ManifestResolutionInput) => Effect.Effect<ResolvedManifest, ManifestError | ArchiveGuardrailError>;
+export declare const validateDeclaredManifestAlignment: (declaredIdentity: DeclaredPublishIdentity, manifest: ManifestIdentity) => Result.Result<void, ManifestError>;
+export {};
+//# sourceMappingURL=manifest-policy.d.ts.map