@cat-factory/contracts 0.229.0 → 0.231.0

package/dist/merge.d.ts

@@ -1,4 +1,5 @@
 import * as v from 'valibot';
+import { type WorkspaceRole } from './workspace-members.js';
 /**
  * A `merger` agent's structured assessment of a pull request. Each axis is scored
  * 0..1 (higher = more complex / riskier / higher blast-radius); `rationale` is the
@@ -21,7 +22,8 @@ export declare const REQUIREMENT_CONCERN_RANK: Record<RequirementConcernLevel, n
  *  - `always`     — auto-merge regardless of the scores.
  *  - `never`      — always route to a human, regardless of the scores.
  */
-export declare const mergeClassRuleSchema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+export declare const MERGE_CLASS_RULES: readonly ['thresholds', 'always', 'never'];
+export declare const mergeClassRuleSchema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
 export type MergeClassRule = v.InferOutput<typeof mergeClassRuleSchema>;
 /**
  * A preset's per-class rules: a PARTIAL map from change class to its rule. An absent class
@@ -32,20 +34,20 @@ export type MergeClassRule = v.InferOutput<typeof mergeClassRuleSchema>;
  * adopt a widened policy. See `RULEABLE_CHANGE_CLASSES`.
  */
 export declare const mergeClassRulesSchema: Omit<v.StrictObjectSchema<{
-    config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-    dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-    docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-    schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-    source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-    test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+    config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+    dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+    docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+    schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+    source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+    test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
 }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
     readonly entries: {
-        config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-        dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-        docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-        schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-        source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-        test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+        config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+        dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+        docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+        schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+        source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+        test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
     };
     readonly "~standard": v.StandardProps<{
         config?: "always" | "never" | "thresholds" | undefined;
@@ -97,9 +99,9 @@ export type MergeClassRules = v.InferOutput<typeof mergeClassRulesSchema>;
  * A partial map from {@link workspaceRoleSchema} to that role's own {@link mergeClassRulesSchema}.
  * The base `classRules` say what the WORK may do; this says what a given tier of person may do
  * with it, so a workspace can widen `dependency` to `always` for everyone and still hold a
- * non-engineer's runs to review on `source`.
+ * non-developer's runs to review on `source`.
  *
- * Composition is NARROW-ONLY (`narrowMergeClassRule` in kernel): a role entry may only make a
+ * Composition is NARROW-ONLY ({@link narrowMergeClassRule}): a role entry may only make a
  * class MORE restrictive than the base rule, never less. That is the whole safety property — an
  * allowlist authored per role can subtract capability but can never hand a role something the
  * preset itself withholds, so a role entry can be reviewed on its own without re-reading the base
@@ -112,20 +114,20 @@ export type MergeClassRules = v.InferOutput<typeof mergeClassRulesSchema>;
  */
 export declare const classRulesByRoleSchema: Omit<v.StrictObjectSchema<{
     admin: Omit<v.StrictObjectSchema<{
-        config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+        config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
     }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
         readonly entries: {
-            config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+            config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
         };
         readonly "~standard": v.StandardProps<{
             config?: "always" | "never" | "thresholds" | undefined;
@@ -171,20 +173,20 @@ export declare const classRulesByRoleSchema: Omit<v.StrictObjectSchema<{
         } | undefined;
     };
     member: Omit<v.StrictObjectSchema<{
-        config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+        config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
     }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
         readonly entries: {
-            config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+            config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
         };
         readonly "~standard": v.StandardProps<{
             config?: "always" | "never" | "thresholds" | undefined;
@@ -230,20 +232,20 @@ export declare const classRulesByRoleSchema: Omit<v.StrictObjectSchema<{
         } | undefined;
     };
     viewer: Omit<v.StrictObjectSchema<{
-        config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+        config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
     }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
         readonly entries: {
-            config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+            config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
         };
         readonly "~standard": v.StandardProps<{
             config?: "always" | "never" | "thresholds" | undefined;
@@ -291,20 +293,20 @@ export declare const classRulesByRoleSchema: Omit<v.StrictObjectSchema<{
 }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
     readonly entries: {
         admin: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -350,20 +352,20 @@ export declare const classRulesByRoleSchema: Omit<v.StrictObjectSchema<{
             } | undefined;
         }, undefined>;
         member: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -409,20 +411,20 @@ export declare const classRulesByRoleSchema: Omit<v.StrictObjectSchema<{
             } | undefined;
         }, undefined>;
         viewer: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -607,7 +609,7 @@ export type ClassRulesByRole = v.InferOutput<typeof classRulesByRoleSchema>;
  * such a role starts does the work and opens its PR, but nothing merges — not automatically, and
  * not through the manual merge endpoint either.
  *
- * This is the "sandboxed run for a non-engineer" setting. It is expressed on the preset rather
+ * This is the "sandboxed run for a non-developer" setting. It is expressed on the preset rather
  * than on the role catalog because it is a POLICY about a body of work (this service's tasks),
  * not a capability of the person: the same product manager may be trusted to land copy changes on
  * one service and nothing at all on another, and the preset is already what a task selects.
@@ -616,6 +618,34 @@ export type ClassRulesByRole = v.InferOutput<typeof classRulesByRoleSchema>;
  * cannot start runs at all (`viewer`, which holds no `runs.execute`) may be listed without effect.
  */
 export declare const dryRunRolesSchema: v.ArraySchema<v.PicklistSchema<readonly ["admin", "member", "viewer"], undefined>, undefined>;
+export type DryRunRoles = v.InferOutput<typeof dryRunRolesSchema>;
+/**
+ * Compose a base rule with a ROLE's rule, taking the STRICTER of the two.
+ *
+ * Narrow-only is the whole safety property of role-scoped rules, and it is enforced here rather
+ * than trusted to whoever authors a preset: a role entry can subtract capability but can never add
+ * it, so `{ source: 'always' }` under `viewer` on a preset whose base holds `source` at
+ * `thresholds` grants a viewer nothing. It reads as a mistake and behaves as a no-op, instead of
+ * quietly becoming the widest rule in the preset for its least-trusted tier.
+ *
+ * The consequence worth stating: a role entry is REVIEWABLE ON ITS OWN. Reading one tells you what
+ * that role at most may do, with no need to hold the base map in your head at the same time.
+ *
+ * It lives in contracts rather than in kernel because the SPA's preset editor has to agree with the
+ * engine about it: an authoring surface that offered a role a rule the engine will discard would be
+ * telling an operator they had written a policy that does nothing.
+ */
+export declare function narrowMergeClassRule(base: MergeClassRule, role: MergeClassRule): MergeClassRule;
+/**
+ * Whether a preset's {@link dryRunRolesSchema} sandboxes a run started under `role`.
+ *
+ * The rule worth naming is the null case: an unattributed run (a schedule fire, a public-API start,
+ * auth-disabled dev) pins no role, cannot match an entry, and is therefore never force-sandboxed.
+ * Shared with the SPA so a start control can say "your runs on this task are sandboxed" using the
+ * same reading the engine makes at admission, rather than a restated `includes` that would have to
+ * re-decide what an absent role means.
+ */
+export declare function dryRunForcedForRole(dryRunRoles: readonly WorkspaceRole[] | null | undefined, role: WorkspaceRole | null | undefined): boolean;
 export declare const mergeAssessmentSchema: v.ObjectSchema<{
     /** How intricate the change is (size, coupling, subtlety). */
     readonly complexity: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>;
@@ -728,20 +758,20 @@ export declare const riskPolicySchema: v.ObjectSchema<{
      * A rule NEVER overrides `autoMergeEnabled: false`: that master switch wins first.
      */
     readonly classRules: Omit<v.StrictObjectSchema<{
-        config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+        config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
     }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
         readonly entries: {
-            config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+            config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
         };
         readonly "~standard": v.StandardProps<{
             config?: "always" | "never" | "thresholds" | undefined;
@@ -793,20 +823,20 @@ export declare const riskPolicySchema: v.ObjectSchema<{
      */
     readonly classRulesByRole: Omit<v.StrictObjectSchema<{
         admin: Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -852,20 +882,20 @@ export declare const riskPolicySchema: v.ObjectSchema<{
             } | undefined;
         };
         member: Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -911,20 +941,20 @@ export declare const riskPolicySchema: v.ObjectSchema<{
             } | undefined;
         };
         viewer: Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -972,20 +1002,20 @@ export declare const riskPolicySchema: v.ObjectSchema<{
     }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
         readonly entries: {
             admin: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-                config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
             }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
                 readonly entries: {
-                    config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
                 };
                 readonly "~standard": v.StandardProps<{
                     config?: "always" | "never" | "thresholds" | undefined;
@@ -1031,20 +1061,20 @@ export declare const riskPolicySchema: v.ObjectSchema<{
                 } | undefined;
             }, undefined>;
             member: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-                config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
             }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
                 readonly entries: {
-                    config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
                 };
                 readonly "~standard": v.StandardProps<{
                     config?: "always" | "never" | "thresholds" | undefined;
@@ -1090,20 +1120,20 @@ export declare const riskPolicySchema: v.ObjectSchema<{
                 } | undefined;
             }, undefined>;
             viewer: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-                config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
             }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
                 readonly entries: {
-                    config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
                 };
                 readonly "~standard": v.StandardProps<{
                     config?: "always" | "never" | "thresholds" | undefined;
@@ -1326,20 +1356,20 @@ export declare const createRiskPolicySchema: v.ObjectSchema<{
     }, undefined>, undefined>, undefined>;
     /** Per-change-class auto-merge rules; absent ⇒ every class uses the score ceilings. */
     readonly classRules: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-        config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+        config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
     }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
         readonly entries: {
-            config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+            config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
         };
         readonly "~standard": v.StandardProps<{
             config?: "always" | "never" | "thresholds" | undefined;
@@ -1387,20 +1417,20 @@ export declare const createRiskPolicySchema: v.ObjectSchema<{
     /** Per-role narrowing of `classRules`; absent ⇒ every role uses the rules above unchanged. */
     readonly classRulesByRole: v.OptionalSchema<Omit<v.StrictObjectSchema<{
         admin: Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -1446,20 +1476,20 @@ export declare const createRiskPolicySchema: v.ObjectSchema<{
             } | undefined;
         };
         member: Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -1505,20 +1535,20 @@ export declare const createRiskPolicySchema: v.ObjectSchema<{
             } | undefined;
         };
         viewer: Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -1566,20 +1596,20 @@ export declare const createRiskPolicySchema: v.ObjectSchema<{
     }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
         readonly entries: {
             admin: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-                config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
             }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
                 readonly entries: {
-                    config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
                 };
                 readonly "~standard": v.StandardProps<{
                     config?: "always" | "never" | "thresholds" | undefined;
@@ -1625,20 +1655,20 @@ export declare const createRiskPolicySchema: v.ObjectSchema<{
                 } | undefined;
             }, undefined>;
             member: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-                config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
             }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
                 readonly entries: {
-                    config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
                 };
                 readonly "~standard": v.StandardProps<{
                     config?: "always" | "never" | "thresholds" | undefined;
@@ -1684,20 +1714,20 @@ export declare const createRiskPolicySchema: v.ObjectSchema<{
                 } | undefined;
             }, undefined>;
             viewer: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-                config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
             }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
                 readonly entries: {
-                    config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
                 };
                 readonly "~standard": v.StandardProps<{
                     config?: "always" | "never" | "thresholds" | undefined;
@@ -1907,20 +1937,20 @@ export declare const updateRiskPolicySchema: v.ObjectSchema<{
     }, undefined>, undefined>, undefined>;
     /** Replaces the whole rule map (not merged), so clearing a class is a plain omission. */
     readonly classRules: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-        config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-        test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+        config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
     }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
         readonly entries: {
-            config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-            test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+            config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
         };
         readonly "~standard": v.StandardProps<{
             config?: "always" | "never" | "thresholds" | undefined;
@@ -1968,20 +1998,20 @@ export declare const updateRiskPolicySchema: v.ObjectSchema<{
     /** Replaces the whole per-role map (not merged), so clearing a role is a plain omission. */
     readonly classRulesByRole: v.OptionalSchema<Omit<v.StrictObjectSchema<{
         admin: Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -2027,20 +2057,20 @@ export declare const updateRiskPolicySchema: v.ObjectSchema<{
             } | undefined;
         };
         member: Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -2086,20 +2116,20 @@ export declare const updateRiskPolicySchema: v.ObjectSchema<{
             } | undefined;
         };
         viewer: Omit<v.StrictObjectSchema<{
-            config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-            test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
         }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
             readonly entries: {
-                config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
             };
             readonly "~standard": v.StandardProps<{
                 config?: "always" | "never" | "thresholds" | undefined;
@@ -2147,20 +2177,20 @@ export declare const updateRiskPolicySchema: v.ObjectSchema<{
     }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
         readonly entries: {
             admin: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-                config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
             }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
                 readonly entries: {
-                    config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
                 };
                 readonly "~standard": v.StandardProps<{
                     config?: "always" | "never" | "thresholds" | undefined;
@@ -2206,20 +2236,20 @@ export declare const updateRiskPolicySchema: v.ObjectSchema<{
                 } | undefined;
             }, undefined>;
             member: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-                config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
             }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
                 readonly entries: {
-                    config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
                 };
                 readonly "~standard": v.StandardProps<{
                     config?: "always" | "never" | "thresholds" | undefined;
@@ -2265,20 +2295,20 @@ export declare const updateRiskPolicySchema: v.ObjectSchema<{
                 } | undefined;
             }, undefined>;
             viewer: v.OptionalSchema<Omit<v.StrictObjectSchema<{
-                config: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                dependency: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                docs: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                schema: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                source: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
-                test: v.PicklistSchema<["thresholds", "always", "never"], undefined>;
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
             }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
                 readonly entries: {
-                    config: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    dependency: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    docs: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    schema: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    source: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
-                    test: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
                 };
                 readonly "~standard": v.StandardProps<{
                     config?: "always" | "never" | "thresholds" | undefined;
@@ -2481,7 +2511,7 @@ export declare const mergeDecisionThresholdsSchema: v.ObjectSchema<{
      * dependency bumps" rather than implying the scores did it. Absent when the class was
      * `unknown` (rules never match it) or the preset left the class on `thresholds`.
      */
-    readonly classRule: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+    readonly classRule: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
     /**
      * The workspace role the run's initiator held when the run was ADMITTED, when one was pinned.
      * Absent for an unattributed run (a schedule fire, a public-API start, auth-disabled dev), which
@@ -2496,7 +2526,7 @@ export declare const mergeDecisionThresholdsSchema: v.ObjectSchema<{
      * the class alone, so its presence always means "this decision would have gone differently for
      * someone else".
      */
-    readonly roleRule: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+    readonly roleRule: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
 }, undefined>;
 export type MergeDecisionThresholds = v.InferOutput<typeof mergeDecisionThresholdsSchema>;
 export declare const mergeDecisionSchema: v.ObjectSchema<{
@@ -2555,7 +2585,7 @@ export declare const mergeDecisionSchema: v.ObjectSchema<{
          * dependency bumps" rather than implying the scores did it. Absent when the class was
          * `unknown` (rules never match it) or the preset left the class on `thresholds`.
          */
-        readonly classRule: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+        readonly classRule: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
         /**
          * The workspace role the run's initiator held when the run was ADMITTED, when one was pinned.
          * Absent for an unattributed run (a schedule fire, a public-API start, auth-disabled dev), which
@@ -2570,7 +2600,7 @@ export declare const mergeDecisionSchema: v.ObjectSchema<{
          * the class alone, so its presence always means "this decision would have gone differently for
          * someone else".
          */
-        readonly roleRule: v.OptionalSchema<v.PicklistSchema<["thresholds", "always", "never"], undefined>, undefined>;
+        readonly roleRule: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
     }, undefined>;
     /** The axes that exceeded their ceiling (empty unless `reason` is `exceeded_thresholds`). */
     readonly exceededAxes: v.ArraySchema<v.PicklistSchema<["complexity", "risk", "impact"], undefined>, undefined>;