@asc-agent/runtime 0.1.0

package/dist/schemas/profile.d.ts

@@ -0,0 +1,631 @@
+import { z } from 'zod';
+/** 정본 한 갈래. 프로젝트는 하나가 아니라 집합을 갖는다 (OM §8). */
+export declare const CanonicalSourceSpec: z.ZodObject<{
+    id: z.ZodString;
+    provider: z.ZodEnum<["git", "github"]>;
+    remote: z.ZodOptional<z.ZodString>;
+    ref: z.ZodOptional<z.ZodString>;
+    paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    $comment: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    paths: string[];
+    provider: "git" | "github";
+    remote?: string | undefined;
+    ref?: string | undefined;
+    $comment?: string | undefined;
+}, {
+    id: string;
+    provider: "git" | "github";
+    paths?: string[] | undefined;
+    remote?: string | undefined;
+    ref?: string | undefined;
+    $comment?: string | undefined;
+}>;
+export declare const ProjectProfile: z.ZodPipeline<z.ZodEffects<z.ZodUnknown, unknown, unknown>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    $comment: z.ZodOptional<z.ZodString>;
+    id: z.ZodString;
+    requires: z.ZodDefault<z.ZodObject<{
+        asc: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        capabilities: string[];
+        asc?: string | undefined;
+    }, {
+        capabilities?: string[] | undefined;
+        asc?: string | undefined;
+    }>>;
+    optionalCapabilities: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    project: z.ZodObject<{
+        scm: z.ZodString;
+        repository: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        scm: string;
+        repository: string;
+    }, {
+        scm: string;
+        repository: string;
+    }>;
+    /**
+     * 빈 집합은 "canonical 검증이 성립하지 않는 프로젝트"다 — 세션 발급·시작에서 정본
+     * 대조가 통째로 빠진다. fixture·로컬 실험 전용이며, 실 프로젝트는 반드시 선언하라.
+     */
+    canonical: z.ZodDefault<z.ZodObject<{
+        sources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            provider: z.ZodEnum<["git", "github"]>;
+            remote: z.ZodOptional<z.ZodString>;
+            ref: z.ZodOptional<z.ZodString>;
+            paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            $comment: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            paths: string[];
+            provider: "git" | "github";
+            remote?: string | undefined;
+            ref?: string | undefined;
+            $comment?: string | undefined;
+        }, {
+            id: string;
+            provider: "git" | "github";
+            paths?: string[] | undefined;
+            remote?: string | undefined;
+            ref?: string | undefined;
+            $comment?: string | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        sources: {
+            id: string;
+            paths: string[];
+            provider: "git" | "github";
+            remote?: string | undefined;
+            ref?: string | undefined;
+            $comment?: string | undefined;
+        }[];
+    }, {
+        sources?: {
+            id: string;
+            provider: "git" | "github";
+            paths?: string[] | undefined;
+            remote?: string | undefined;
+            ref?: string | undefined;
+            $comment?: string | undefined;
+        }[] | undefined;
+    }>>;
+    monitor: z.ZodDefault<z.ZodObject<{
+        /** provider 어휘 → Generic Signal. Adapter가 내놓는 표를 여기서 고른다 (OM §10.6). */
+        reasonSignals: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<["assigned_to_me", "mentioned_me", "direct_reply", "review_requested", "my_pr_reviewed", "participated_thread_changed", "active_canonical_changed", "open_change_touches_active_canonical", "priority_labels", "project_specific_signal"]>>>;
+        priorityLabels: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<["P0", "P1", "P2"]>>>;
+        escalationLabels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        signalPriority: z.ZodDefault<z.ZodRecord<z.ZodEnum<["assigned_to_me", "mentioned_me", "direct_reply", "review_requested", "my_pr_reviewed", "participated_thread_changed", "active_canonical_changed", "open_change_touches_active_canonical", "priority_labels", "project_specific_signal"]>, z.ZodEnum<["P0", "P1", "P2"]>>>;
+        inboxSignals: z.ZodOptional<z.ZodArray<z.ZodEnum<["assigned_to_me", "mentioned_me", "direct_reply", "review_requested", "my_pr_reviewed", "participated_thread_changed", "active_canonical_changed", "open_change_touches_active_canonical", "priority_labels", "project_specific_signal"]>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        reasonSignals: Record<string, "assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal">;
+        priorityLabels: Record<string, "P0" | "P1" | "P2">;
+        escalationLabels: string[];
+        signalPriority: Partial<Record<"assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal", "P0" | "P1" | "P2">>;
+        inboxSignals?: ("assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal")[] | undefined;
+    }, {
+        reasonSignals?: Record<string, "assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal"> | undefined;
+        priorityLabels?: Record<string, "P0" | "P1" | "P2"> | undefined;
+        escalationLabels?: string[] | undefined;
+        signalPriority?: Partial<Record<"assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal", "P0" | "P1" | "P2">> | undefined;
+        inboxSignals?: ("assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal")[] | undefined;
+    }>>;
+    workflow: z.ZodDefault<z.ZodObject<{
+        blockSource: z.ZodOptional<z.ZodString>;
+        taskSource: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        $comment: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        taskSource: string[];
+        $comment?: string | undefined;
+        blockSource?: string | undefined;
+    }, {
+        $comment?: string | undefined;
+        blockSource?: string | undefined;
+        taskSource?: string[] | undefined;
+    }>>;
+    policy: z.ZodDefault<z.ZodObject<{
+        hardDeny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        softDeny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        roleScopes: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
+        settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+        lockedSettings: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /**
+         * 계층마다 합집합으로 쌓이는 이름 목록. 병합은 Core에 이미 있는데 여기 선언이 없어
+         * Profile로 채울 길이 없었다. 관례 키 `closureChecklist` — 세션이 끝난 뒤 확인해야 할
+         * 프로젝트 마무리 항목 id (B-20).
+         *
+         * 항목 id 문법을 **여기서** 막는 이유: 잘못된 선언을 회수 시점까지 끌고 가면 세션이
+         * 끝나고 나서야 "이 항목은 쓸 수 없다"를 알게 된다. resolve는 선언이 들어오는 입구이고,
+         * 여기서 막으면 잘못된 값이 profile.lock에 고정되지도 않는다.
+         *
+         * default를 주지 않는 이유: 파싱 결과 객체가 바뀌면 profile digest가 달라져
+         * 기존 attach가 전부 LOCK_DRIFT로 멈춘다.
+         */
+        unionLists: z.ZodEffects<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>, Record<string, string[]> | undefined, Record<string, string[]> | undefined>;
+    }, "strip", z.ZodTypeAny, {
+        hardDeny: string[];
+        softDeny: string[];
+        allow: string[];
+        roleScopes: Record<string, string[]>;
+        settings: Record<string, string | number | boolean>;
+        lockedSettings: string[];
+        unionLists?: Record<string, string[]> | undefined;
+    }, {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    }>>;
+    /**
+     * 책임 지도 — 역할 → 쓰기 영역과 결정권 (C-04 §6). 매 세션 사람이 owner·authority를
+     * 손으로 적지 않아도 되게 하는 **선언**이며, 이것만으로는 아무것도 막지 않는다.
+     *
+     * Preset·Override에는 두지 않는다. 책임 지도는 팀의 사실이라 개인 설정이 이것을 바꾸면
+     * 사람마다 다른 결정권자를 보게 되고, 그때부터는 누구 말이 맞는지 정할 방법이 없다.
+     *
+     * default를 주지 않는 이유는 `unionLists`와 같다 — 파싱 결과 객체가 바뀌면 profile
+     * digest가 달라져 기존 attach가 전부 LOCK_DRIFT로 멈춘다. Session의 `.default([])`와
+     * 성격이 다르다: 저쪽은 이미 저장된 entity를 읽는 문제이고, 이쪽은 설정 identity를
+     * 보존하는 문제다.
+     */
+    ownership: z.ZodEffects<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        authorities: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        paths: string[];
+        authorities: string[];
+    }, {
+        paths?: string[] | undefined;
+        authorities?: string[] | undefined;
+    }>>>, Record<string, {
+        paths: string[];
+        authorities: string[];
+    }> | undefined, Record<string, {
+        paths?: string[] | undefined;
+        authorities?: string[] | undefined;
+    }> | undefined>;
+    /**
+     * Resource Binding 역할 배정 (C-09 §3). 프로젝트는 외부 시스템을 하나만 쓰지 않는다 —
+     * 코드가 한 곳, 작업 항목이 다른 곳, 전달이 또 다른 곳일 수 있다.
+     *
+     * **역할은 사람이 정한다.** 어느 binding이 code-primary인지 ASC가 추론하지 않는다.
+     * adapter가 발견하는 것은 "여기 붙을 수 있다"까지이고, 그것이 무슨 역할인지는 정책이다.
+     *
+     * `project.scm`은 하위호환으로 남지만 runtime 조립의 중심이 아니다.
+     *
+     * ownership과 같은 이유로 default를 주지 않는다 — 파싱 결과가 바뀌면 profile digest가
+     * 달라져 기존 attach가 전부 LOCK_DRIFT로 멈춘다 (C-04 §6.3).
+     */
+    bindings: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        /** 'code-primary' | 'work' | 'presentation' … 자유 문자열이다. */
+        role: z.ZodString;
+        /** adapter id. Core는 이 값으로 분기하지 않는다 — 조립은 Composition의 몫이다. */
+        adapter: z.ZodString;
+        /** 문법은 adapter 소관. Core는 문자열로만 다룬다. */
+        resource: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        role: string;
+        resource: string;
+        adapter: string;
+    }, {
+        role: string;
+        resource: string;
+        adapter: string;
+    }>, "many">>, {
+        role: string;
+        resource: string;
+        adapter: string;
+    }[] | undefined, {
+        role: string;
+        resource: string;
+        adapter: string;
+    }[] | undefined>;
+    /** 프로젝트 용어를 Core 개념에 붙인다. 사람이 읽는 문서에만 쓰인다. */
+    terminology: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    monitor: {
+        reasonSignals: Record<string, "assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal">;
+        priorityLabels: Record<string, "P0" | "P1" | "P2">;
+        escalationLabels: string[];
+        signalPriority: Partial<Record<"assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal", "P0" | "P1" | "P2">>;
+        inboxSignals?: ("assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal")[] | undefined;
+    };
+    id: string;
+    requires: {
+        capabilities: string[];
+        asc?: string | undefined;
+    };
+    canonical: {
+        sources: {
+            id: string;
+            paths: string[];
+            provider: "git" | "github";
+            remote?: string | undefined;
+            ref?: string | undefined;
+            $comment?: string | undefined;
+        }[];
+    };
+    project: {
+        scm: string;
+        repository: string;
+    };
+    policy: {
+        hardDeny: string[];
+        softDeny: string[];
+        allow: string[];
+        roleScopes: Record<string, string[]>;
+        settings: Record<string, string | number | boolean>;
+        lockedSettings: string[];
+        unionLists?: Record<string, string[]> | undefined;
+    };
+    schemaVersion: 1;
+    optionalCapabilities: string[];
+    workflow: {
+        taskSource: string[];
+        $comment?: string | undefined;
+        blockSource?: string | undefined;
+    };
+    terminology: Record<string, string>;
+    ownership?: Record<string, {
+        paths: string[];
+        authorities: string[];
+    }> | undefined;
+    bindings?: {
+        role: string;
+        resource: string;
+        adapter: string;
+    }[] | undefined;
+    $comment?: string | undefined;
+}, {
+    id: string;
+    project: {
+        scm: string;
+        repository: string;
+    };
+    schemaVersion: 1;
+    monitor?: {
+        reasonSignals?: Record<string, "assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal"> | undefined;
+        priorityLabels?: Record<string, "P0" | "P1" | "P2"> | undefined;
+        escalationLabels?: string[] | undefined;
+        signalPriority?: Partial<Record<"assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal", "P0" | "P1" | "P2">> | undefined;
+        inboxSignals?: ("assigned_to_me" | "mentioned_me" | "direct_reply" | "review_requested" | "my_pr_reviewed" | "participated_thread_changed" | "active_canonical_changed" | "open_change_touches_active_canonical" | "priority_labels" | "project_specific_signal")[] | undefined;
+    } | undefined;
+    requires?: {
+        capabilities?: string[] | undefined;
+        asc?: string | undefined;
+    } | undefined;
+    canonical?: {
+        sources?: {
+            id: string;
+            provider: "git" | "github";
+            paths?: string[] | undefined;
+            remote?: string | undefined;
+            ref?: string | undefined;
+            $comment?: string | undefined;
+        }[] | undefined;
+    } | undefined;
+    ownership?: Record<string, {
+        paths?: string[] | undefined;
+        authorities?: string[] | undefined;
+    }> | undefined;
+    bindings?: {
+        role: string;
+        resource: string;
+        adapter: string;
+    }[] | undefined;
+    policy?: {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    } | undefined;
+    $comment?: string | undefined;
+    optionalCapabilities?: string[] | undefined;
+    workflow?: {
+        $comment?: string | undefined;
+        blockSource?: string | undefined;
+        taskSource?: string[] | undefined;
+    } | undefined;
+    terminology?: Record<string, string> | undefined;
+}>>;
+export type ProjectProfile = z.infer<typeof ProjectProfile>;
+/** 운영 성향. HARD DENY는 여기서 풀 수 없다 (OM §4.3). */
+export declare const OperationalPreset: z.ZodPipeline<z.ZodEffects<z.ZodUnknown, unknown, unknown>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    id: z.ZodString;
+    $comment: z.ZodOptional<z.ZodString>;
+    policy: z.ZodDefault<z.ZodObject<{
+        hardDeny: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+        softDeny: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+        allow: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+        roleScopes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>>;
+        settings: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>>>;
+        lockedSettings: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+        unionLists: z.ZodOptional<z.ZodEffects<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>, Record<string, string[]> | undefined, Record<string, string[]> | undefined>>;
+    }, "strip", z.ZodTypeAny, {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    }, {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    policy: {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    };
+    schemaVersion: 1;
+    $comment?: string | undefined;
+}, {
+    id: string;
+    schemaVersion: 1;
+    policy?: {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    } | undefined;
+    $comment?: string | undefined;
+}>>;
+export type OperationalPreset = z.infer<typeof OperationalPreset>;
+/**
+ * 개인 몫. 같은 Profile을 쓰는 팀원끼리 여기만 달라진다 (OM §4.4).
+ * 비밀은 값이 아니라 참조로만 적는다 — `tokenEnv` 는 이름이지 토큰이 아니다.
+ */
+export declare const UserOverride: z.ZodPipeline<z.ZodEffects<z.ZodUnknown, unknown, unknown>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    $comment: z.ZodOptional<z.ZodString>;
+    identity: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /** "나"로 인정할 계정들. Monitor의 신호 판정에 쓰인다. */
+    monitorIdentities: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    controller: z.ZodDefault<z.ZodObject<{
+        /** 승인 권한자 → `채널:actor` 목록 (OM §11.6). */
+        identities: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
+    }, "strip", z.ZodTypeAny, {
+        identities: Record<string, string[]>;
+    }, {
+        identities?: Record<string, string[]> | undefined;
+    }>>;
+    approval: z.ZodDefault<z.ZodObject<{
+        preferredChannel: z.ZodOptional<z.ZodString>;
+        messenger: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodString;
+            tokenEnv: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            provider: string;
+            tokenEnv: string;
+        }, {
+            provider: string;
+            tokenEnv: string;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        preferredChannel?: string | undefined;
+        messenger?: {
+            provider: string;
+            tokenEnv: string;
+        } | undefined;
+    }, {
+        preferredChannel?: string | undefined;
+        messenger?: {
+            provider: string;
+            tokenEnv: string;
+        } | undefined;
+    }>>;
+    monitor: z.ZodDefault<z.ZodObject<{
+        realtime: z.ZodOptional<z.ZodBoolean>;
+        /**
+         * 내가 맡은 ownership 역할들 (C-04 §6의 역할 이름). 관련성 판정에서 "내 영역"의
+         * 기준이 된다 — 팀 공통 사실이 아니라 개인 사실이라 Profile이 아니라 여기 산다.
+         *
+         * `.optional()`인 이유: 기존 override 파일의 parse 결과를 바꾸지 않기 위해서다.
+         * 기본값을 주면 없던 키가 생겨 overrideDigest가 흔들리고, 아무것도 고치지
+         * 않은 사용자가 LOCK_DRIFT를 본다.
+         */
+        roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        realtime?: boolean | undefined;
+        roles?: string[] | undefined;
+    }, {
+        realtime?: boolean | undefined;
+        roles?: string[] | undefined;
+    }>>;
+    policy: z.ZodDefault<z.ZodObject<{
+        hardDeny: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+        softDeny: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+        allow: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+        roleScopes: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>>;
+        settings: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>>>;
+        lockedSettings: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+        unionLists: z.ZodOptional<z.ZodEffects<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>, Record<string, string[]> | undefined, Record<string, string[]> | undefined>>;
+    }, "strip", z.ZodTypeAny, {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    }, {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    controller: {
+        identities: Record<string, string[]>;
+    };
+    monitor: {
+        realtime?: boolean | undefined;
+        roles?: string[] | undefined;
+    };
+    approval: {
+        preferredChannel?: string | undefined;
+        messenger?: {
+            provider: string;
+            tokenEnv: string;
+        } | undefined;
+    };
+    policy: {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    };
+    schemaVersion: 1;
+    identity: Record<string, string>;
+    monitorIdentities: string[];
+    $comment?: string | undefined;
+}, {
+    schemaVersion: 1;
+    controller?: {
+        identities?: Record<string, string[]> | undefined;
+    } | undefined;
+    monitor?: {
+        realtime?: boolean | undefined;
+        roles?: string[] | undefined;
+    } | undefined;
+    approval?: {
+        preferredChannel?: string | undefined;
+        messenger?: {
+            provider: string;
+            tokenEnv: string;
+        } | undefined;
+    } | undefined;
+    policy?: {
+        hardDeny?: string[] | undefined;
+        softDeny?: string[] | undefined;
+        allow?: string[] | undefined;
+        roleScopes?: Record<string, string[]> | undefined;
+        settings?: Record<string, string | number | boolean> | undefined;
+        lockedSettings?: string[] | undefined;
+        unionLists?: Record<string, string[]> | undefined;
+    } | undefined;
+    $comment?: string | undefined;
+    identity?: Record<string, string> | undefined;
+    monitorIdentities?: string[] | undefined;
+}>>;
+export type UserOverride = z.infer<typeof UserOverride>;
+/** attach 재현성 metadata (OM §4.9). Resolver만 쓴다. */
+export declare const ProfileLock: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    ascCore: z.ZodObject<{
+        version: z.ZodString;
+        commit: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        version: string;
+        commit?: string | undefined;
+    }, {
+        version: string;
+        commit?: string | undefined;
+    }>;
+    profile: z.ZodObject<{
+        id: z.ZodString;
+        source: z.ZodString;
+        digest: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        source: string;
+        digest: string;
+    }, {
+        id: string;
+        source: string;
+        digest: string;
+    }>;
+    preset: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        source: z.ZodString;
+        digest: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        source: string;
+        digest: string;
+    }, {
+        id: string;
+        source: string;
+        digest: string;
+    }>>;
+    overrideDigest: z.ZodOptional<z.ZodString>;
+    adapters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    configurationDigest: z.ZodString;
+    generatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    profile: {
+        id: string;
+        source: string;
+        digest: string;
+    };
+    capabilities: string[];
+    schemaVersion: 1;
+    ascCore: {
+        version: string;
+        commit?: string | undefined;
+    };
+    adapters: Record<string, string>;
+    configurationDigest: string;
+    generatedAt: string;
+    preset?: {
+        id: string;
+        source: string;
+        digest: string;
+    } | undefined;
+    overrideDigest?: string | undefined;
+}, {
+    profile: {
+        id: string;
+        source: string;
+        digest: string;
+    };
+    schemaVersion: 1;
+    ascCore: {
+        version: string;
+        commit?: string | undefined;
+    };
+    configurationDigest: string;
+    generatedAt: string;
+    capabilities?: string[] | undefined;
+    preset?: {
+        id: string;
+        source: string;
+        digest: string;
+    } | undefined;
+    overrideDigest?: string | undefined;
+    adapters?: Record<string, string> | undefined;
+}>;
+export type ProfileLock = z.infer<typeof ProfileLock>;