@cat-factory/contracts 0.302.0 → 0.303.0

package/dist/merge.d.ts

@@ -1574,6 +1574,800 @@ export declare const riskPolicySchema: v.ObjectSchema<{
     readonly createdAt: v.NumberSchema<undefined>;
 }, undefined>;
 export type RiskPolicy = v.InferOutput<typeof riskPolicySchema>;
+/**
+ * Which tier a risk policy in a board's visible library is STORED at, and therefore who may edit
+ * it. `account` policies are authored once for the whole account and every board under it
+ * inherits them read-only; `workspace` policies belong to the board that holds them.
+ *
+ * There is deliberately no `builtin` member, unlike the fragment and foundational-service tiers.
+ * The built-in catalog (`seedRiskPolicies()`) is COPIED into each board at creation and reconciled
+ * against the catalog from there, so a built-in is a `workspace` row a board owns outright: it can
+ * be edited, deleted and reseeded. A tier that carried no rows would have to answer what a reseed
+ * means, and the answer is already "the row this board owns".
+ */
+export declare const riskPolicyTierSchema: v.PicklistSchema<["account", "workspace"], undefined>;
+export type RiskPolicyTier = v.InferOutput<typeof riskPolicyTierSchema>;
+/**
+ * One entry of the library a board actually picks from: the merge of its own policies with the
+ * ones it inherits from its account, each carrying the tier that owns it.
+ *
+ * The tier is what every reader needs and none can re-derive: a board's editor renders an
+ * inherited policy read-only beside a clone action, and the engine resolves a task's pin through
+ * the same merged view, so a pinned account policy governs a run exactly as a local one does.
+ * A workspace row WINS over an account row of the same id, and a board's suppression drops an
+ * inherited id from this list outright (`riskPolicySuppressionSchema`).
+ */
+export declare const riskPolicyLibraryEntrySchema: v.ObjectSchema<{
+    readonly id: v.StringSchema<undefined>;
+    readonly name: v.StringSchema<undefined>;
+    /** Auto-merge only when the assessment's complexity is at or below this. */
+    readonly maxComplexity: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>;
+    /** Auto-merge only when the assessment's risk is at or below this. */
+    readonly maxRisk: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>;
+    /** Auto-merge only when the assessment's impact is at or below this. */
+    readonly maxImpact: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>;
+    /** How many times the `ci-fixer` agent may try to turn CI green before giving up. */
+    readonly ciMaxAttempts: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>;
+    /**
+     * How many reviewer passes the iterative requirements-review loop may run before it
+     * stops on its own and asks the human to pick (extra round / proceed anyway / reset the
+     * task). One reviewer pass = one iteration; the initial review counts as iteration 1.
+     */
+    readonly maxRequirementIterations: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>]>;
+    /**
+     * The highest finding severity the requirements review tolerates WITHOUT stopping. When
+     * every outstanding finding from a reviewer pass is at or below this level, the findings
+     * are recorded but the run does NOT pause for human approval — the incorporation
+     * companion is skipped and the next pipeline step runs automatically. `none` (the
+     * default) tolerates nothing, so any finding pauses for a human; `high` tolerates
+     * everything. Severity order: none < low < medium < high.
+     */
+    readonly maxRequirementConcernAllowed: v.PicklistSchema<["none", "low", "medium", "high"], undefined>;
+    /**
+     * How many times the test quality-control companion may loop the Tester for a more
+     * complete report before it stops gating and lets the run proceed to the greenlight /
+     * fixer decision. One QC-driven Tester re-run = one iteration, so this is the maximum
+     * number of QC re-runs: `1` permits a single re-run before the gate gives up. Independent
+     * of the `ciMaxAttempts` fixer budget.
+     */
+    readonly maxTesterQualityIterations: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>]>;
+    /**
+     * How long (minutes) the post-release-health gate watches the deployed release's
+     * Datadog monitors/SLOs before declaring it healthy and advancing.
+     */
+    readonly releaseWatchWindowMinutes: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>]>;
+    /**
+     * How many `on-call` investigations the post-release-health gate may dispatch while
+     * watching before it gives up and raises a notification. The on-call agent investigates
+     * rather than fixing prod, so 1 is the sensible default.
+     */
+    readonly releaseMaxAttempts: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>;
+    /**
+     * How long (minutes) the `human-review` gate waits after the latest review comment before
+     * dispatching the `fixer` to address the batch — a grace window so a reviewer leaving a
+     * series of comments isn't churned mid-stream. Only the unapproved path waits; an approved
+     * PR's outstanding comments are addressed immediately.
+     */
+    readonly humanReviewGraceMinutes: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>;
+    /**
+     * The minimum score (0..1) a JUDGE step's verdict must reach for the run to advance
+     * without a human. Below it, the judge applies its registration's `onFail` disposition
+     * (park / bounce / fail). The per-task counterpart of `maxRequirementConcernAllowed`:
+     * how much rubric deviation THIS task tolerates. See `docs/initiatives/judge-registry.md`.
+     */
+    readonly judgeMinScore: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>;
+    /**
+     * How many BOUNCE rounds a judge may spend — re-arming the preceding producing step with
+     * the verdict's findings as rework feedback — before it must stop and ask a human. `0`
+     * means never bounce (a failing verdict goes straight to the registration's park/fail).
+     */
+    readonly judgeMaxBounces: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>;
+    /**
+     * When false the `merger` step never auto-merges: every PR is routed to a human
+     * `merge_review` notification regardless of the assessment scores. The built-in
+     * "Manual review only" preset sets this; a custom preset may too. Defaults to true
+     * (the historical behaviour: auto-merge a within-threshold, explained assessment).
+     */
+    readonly autoMergeEnabled: v.BooleanSchema<undefined>;
+    /**
+     * Estimate gating for the optional implementation-fork decision phase on the Coder step
+     * (the same three axes / `onMissingEstimate` as any other {@link stepGatingSchema}). When
+     * present and `enabled`, a task whose Coder config resolves to `auto` surfaces materially
+     * different implementation approaches and parks for a human whenever ANY supplied axis of
+     * its estimate is met/exceeded; `onMissingEstimate: 'run'` proposes even without an
+     * estimate (fail toward asking). Absent/disabled ⇒ fork surfacing is off in `auto` mode
+     * (a task can still force it via its `always` tri-state). Disabled by default on the
+     * built-in presets.
+     */
+    readonly forkDecision: v.OptionalSchema<v.NullableSchema<v.ObjectSchema<{
+        readonly enabled: v.BooleanSchema<undefined>;
+        readonly minComplexity: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>, undefined>;
+        readonly minRisk: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>, undefined>;
+        readonly minImpact: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>, undefined>;
+        readonly onMissingEstimate: v.OptionalSchema<v.PicklistSchema<["run", "skip"], undefined>, "run">;
+    }, undefined>, undefined>, undefined>;
+    /**
+     * Per-change-class auto-merge rules ({@link mergeClassRulesSchema}). An absent class — and
+     * therefore an empty object — means "use the score ceilings above", so `{}` is the identity.
+     * A rule NEVER overrides `autoMergeEnabled: false`: that master switch wins first.
+     */
+    readonly classRules: Omit<v.StrictObjectSchema<{
+        config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+    }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
+        readonly entries: {
+            config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+        };
+        readonly "~standard": v.StandardProps<{
+            config?: "always" | "never" | "thresholds" | undefined;
+            dependency?: "always" | "never" | "thresholds" | undefined;
+            docs?: "always" | "never" | "thresholds" | undefined;
+            schema?: "always" | "never" | "thresholds" | undefined;
+            source?: "always" | "never" | "thresholds" | undefined;
+            test?: "always" | "never" | "thresholds" | undefined;
+        }, {
+            config?: "always" | "never" | "thresholds" | undefined;
+            dependency?: "always" | "never" | "thresholds" | undefined;
+            docs?: "always" | "never" | "thresholds" | undefined;
+            schema?: "always" | "never" | "thresholds" | undefined;
+            source?: "always" | "never" | "thresholds" | undefined;
+            test?: "always" | "never" | "thresholds" | undefined;
+        }>;
+        readonly "~run": (dataset: v.UnknownDataset, config: v.Config<v.BaseIssue<unknown>>) => v.OutputDataset<{
+            config?: "always" | "never" | "thresholds" | undefined;
+            dependency?: "always" | "never" | "thresholds" | undefined;
+            docs?: "always" | "never" | "thresholds" | undefined;
+            schema?: "always" | "never" | "thresholds" | undefined;
+            source?: "always" | "never" | "thresholds" | undefined;
+            test?: "always" | "never" | "thresholds" | undefined;
+        }, v.PicklistIssue | v.StrictObjectIssue>;
+        readonly "~types"?: {
+            readonly input: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            };
+            readonly output: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            };
+            readonly issue: v.PicklistIssue | v.StrictObjectIssue;
+        } | undefined;
+    };
+    /**
+     * Per-ROLE narrowing of `classRules` ({@link classRulesByRoleSchema}), keyed on the workspace
+     * role the run's initiator held when it was admitted. Narrow-only, so an empty map is the
+     * identity and a role entry can never widen what `classRules` already allows.
+     */
+    readonly classRulesByRole: Omit<v.StrictObjectSchema<{
+        admin: Omit<v.StrictObjectSchema<{
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
+            readonly entries: {
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            };
+            readonly "~standard": v.StandardProps<{
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            }, {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            }>;
+            readonly "~run": (dataset: v.UnknownDataset, config: v.Config<v.BaseIssue<unknown>>) => v.OutputDataset<{
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            }, v.PicklistIssue | v.StrictObjectIssue>;
+            readonly "~types"?: {
+                readonly input: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                };
+                readonly output: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                };
+                readonly issue: v.PicklistIssue | v.StrictObjectIssue;
+            } | undefined;
+        };
+        member: Omit<v.StrictObjectSchema<{
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
+            readonly entries: {
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            };
+            readonly "~standard": v.StandardProps<{
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            }, {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            }>;
+            readonly "~run": (dataset: v.UnknownDataset, config: v.Config<v.BaseIssue<unknown>>) => v.OutputDataset<{
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            }, v.PicklistIssue | v.StrictObjectIssue>;
+            readonly "~types"?: {
+                readonly input: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                };
+                readonly output: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                };
+                readonly issue: v.PicklistIssue | v.StrictObjectIssue;
+            } | undefined;
+        };
+        viewer: Omit<v.StrictObjectSchema<{
+            config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+        }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
+            readonly entries: {
+                config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+            };
+            readonly "~standard": v.StandardProps<{
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            }, {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            }>;
+            readonly "~run": (dataset: v.UnknownDataset, config: v.Config<v.BaseIssue<unknown>>) => v.OutputDataset<{
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            }, v.PicklistIssue | v.StrictObjectIssue>;
+            readonly "~types"?: {
+                readonly input: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                };
+                readonly output: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                };
+                readonly issue: v.PicklistIssue | v.StrictObjectIssue;
+            } | undefined;
+        };
+    }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
+        readonly entries: {
+            admin: v.OptionalSchema<Omit<v.StrictObjectSchema<{
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
+                readonly entries: {
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                };
+                readonly "~standard": v.StandardProps<{
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                }, {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                }>;
+                readonly "~run": (dataset: v.UnknownDataset, config: v.Config<v.BaseIssue<unknown>>) => v.OutputDataset<{
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                }, v.PicklistIssue | v.StrictObjectIssue>;
+                readonly "~types"?: {
+                    readonly input: {
+                        config?: "always" | "never" | "thresholds" | undefined;
+                        dependency?: "always" | "never" | "thresholds" | undefined;
+                        docs?: "always" | "never" | "thresholds" | undefined;
+                        schema?: "always" | "never" | "thresholds" | undefined;
+                        source?: "always" | "never" | "thresholds" | undefined;
+                        test?: "always" | "never" | "thresholds" | undefined;
+                    };
+                    readonly output: {
+                        config?: "always" | "never" | "thresholds" | undefined;
+                        dependency?: "always" | "never" | "thresholds" | undefined;
+                        docs?: "always" | "never" | "thresholds" | undefined;
+                        schema?: "always" | "never" | "thresholds" | undefined;
+                        source?: "always" | "never" | "thresholds" | undefined;
+                        test?: "always" | "never" | "thresholds" | undefined;
+                    };
+                    readonly issue: v.PicklistIssue | v.StrictObjectIssue;
+                } | undefined;
+            }, undefined>;
+            member: v.OptionalSchema<Omit<v.StrictObjectSchema<{
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
+                readonly entries: {
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                };
+                readonly "~standard": v.StandardProps<{
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                }, {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                }>;
+                readonly "~run": (dataset: v.UnknownDataset, config: v.Config<v.BaseIssue<unknown>>) => v.OutputDataset<{
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                }, v.PicklistIssue | v.StrictObjectIssue>;
+                readonly "~types"?: {
+                    readonly input: {
+                        config?: "always" | "never" | "thresholds" | undefined;
+                        dependency?: "always" | "never" | "thresholds" | undefined;
+                        docs?: "always" | "never" | "thresholds" | undefined;
+                        schema?: "always" | "never" | "thresholds" | undefined;
+                        source?: "always" | "never" | "thresholds" | undefined;
+                        test?: "always" | "never" | "thresholds" | undefined;
+                    };
+                    readonly output: {
+                        config?: "always" | "never" | "thresholds" | undefined;
+                        dependency?: "always" | "never" | "thresholds" | undefined;
+                        docs?: "always" | "never" | "thresholds" | undefined;
+                        schema?: "always" | "never" | "thresholds" | undefined;
+                        source?: "always" | "never" | "thresholds" | undefined;
+                        test?: "always" | "never" | "thresholds" | undefined;
+                    };
+                    readonly issue: v.PicklistIssue | v.StrictObjectIssue;
+                } | undefined;
+            }, undefined>;
+            viewer: v.OptionalSchema<Omit<v.StrictObjectSchema<{
+                config: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                dependency: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                docs: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                schema: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                source: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+                test: v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>;
+            }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
+                readonly entries: {
+                    config: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    dependency: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    docs: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    schema: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    source: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                    test: v.OptionalSchema<v.PicklistSchema<readonly ["thresholds", "always", "never"], undefined>, undefined>;
+                };
+                readonly "~standard": v.StandardProps<{
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                }, {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                }>;
+                readonly "~run": (dataset: v.UnknownDataset, config: v.Config<v.BaseIssue<unknown>>) => v.OutputDataset<{
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                }, v.PicklistIssue | v.StrictObjectIssue>;
+                readonly "~types"?: {
+                    readonly input: {
+                        config?: "always" | "never" | "thresholds" | undefined;
+                        dependency?: "always" | "never" | "thresholds" | undefined;
+                        docs?: "always" | "never" | "thresholds" | undefined;
+                        schema?: "always" | "never" | "thresholds" | undefined;
+                        source?: "always" | "never" | "thresholds" | undefined;
+                        test?: "always" | "never" | "thresholds" | undefined;
+                    };
+                    readonly output: {
+                        config?: "always" | "never" | "thresholds" | undefined;
+                        dependency?: "always" | "never" | "thresholds" | undefined;
+                        docs?: "always" | "never" | "thresholds" | undefined;
+                        schema?: "always" | "never" | "thresholds" | undefined;
+                        source?: "always" | "never" | "thresholds" | undefined;
+                        test?: "always" | "never" | "thresholds" | undefined;
+                    };
+                    readonly issue: v.PicklistIssue | v.StrictObjectIssue;
+                } | undefined;
+            }, undefined>;
+        };
+        readonly "~standard": v.StandardProps<{
+            admin?: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            } | undefined;
+            member?: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            } | undefined;
+            viewer?: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            } | undefined;
+        }, {
+            admin?: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            } | undefined;
+            member?: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            } | undefined;
+            viewer?: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            } | undefined;
+        }>;
+        readonly "~run": (dataset: v.UnknownDataset, config: v.Config<v.BaseIssue<unknown>>) => v.OutputDataset<{
+            admin?: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            } | undefined;
+            member?: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            } | undefined;
+            viewer?: {
+                config?: "always" | "never" | "thresholds" | undefined;
+                dependency?: "always" | "never" | "thresholds" | undefined;
+                docs?: "always" | "never" | "thresholds" | undefined;
+                schema?: "always" | "never" | "thresholds" | undefined;
+                source?: "always" | "never" | "thresholds" | undefined;
+                test?: "always" | "never" | "thresholds" | undefined;
+            } | undefined;
+        }, v.PicklistIssue | v.StrictObjectIssue>;
+        readonly "~types"?: {
+            readonly input: {
+                admin?: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                } | undefined;
+                member?: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                } | undefined;
+                viewer?: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                } | undefined;
+            };
+            readonly output: {
+                admin?: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                } | undefined;
+                member?: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                } | undefined;
+                viewer?: {
+                    config?: "always" | "never" | "thresholds" | undefined;
+                    dependency?: "always" | "never" | "thresholds" | undefined;
+                    docs?: "always" | "never" | "thresholds" | undefined;
+                    schema?: "always" | "never" | "thresholds" | undefined;
+                    source?: "always" | "never" | "thresholds" | undefined;
+                    test?: "always" | "never" | "thresholds" | undefined;
+                } | undefined;
+            };
+            readonly issue: v.PicklistIssue | v.StrictObjectIssue;
+        } | undefined;
+    };
+    /**
+     * Roles whose runs are forced into dry-run mode ({@link dryRunRolesSchema}) — the work happens
+     * and the PR opens, but nothing merges. Empty on the built-ins.
+     */
+    readonly dryRunRoles: v.ArraySchema<v.PicklistSchema<readonly ["admin", "member", "viewer"], undefined>, undefined>;
+    /**
+     * Per-ROLE allowlist of the change classes this preset will land at all
+     * ({@link submissionClassesByRoleSchema}). Orthogonal to `classRulesByRole`, and both apply: a
+     * class may be `always` under the role's class rules and still outside its allowlist, and the
+     * allowlist wins, because it bars landing rather than deciding how much review landing takes.
+     * A role with no entry is unrestricted, so `{}` is the identity. Empty on the built-ins.
+     */
+    readonly submissionClassesByRole: Omit<v.StrictObjectSchema<{
+        admin: v.ArraySchema<v.PicklistSchema<readonly ["docs", "test", "dependency", "config", "source", "schema"], undefined>, undefined>;
+        member: v.ArraySchema<v.PicklistSchema<readonly ["docs", "test", "dependency", "config", "source", "schema"], undefined>, undefined>;
+        viewer: v.ArraySchema<v.PicklistSchema<readonly ["docs", "test", "dependency", "config", "source", "schema"], undefined>, undefined>;
+    }, undefined>, "entries" | "~run" | "~standard" | "~types"> & {
+        readonly entries: {
+            admin: v.OptionalSchema<v.ArraySchema<v.PicklistSchema<readonly ["docs", "test", "dependency", "config", "source", "schema"], undefined>, undefined>, undefined>;
+            member: v.OptionalSchema<v.ArraySchema<v.PicklistSchema<readonly ["docs", "test", "dependency", "config", "source", "schema"], undefined>, undefined>, undefined>;
+            viewer: v.OptionalSchema<v.ArraySchema<v.PicklistSchema<readonly ["docs", "test", "dependency", "config", "source", "schema"], undefined>, undefined>, undefined>;
+        };
+        readonly "~standard": v.StandardProps<{
+            admin?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+            member?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+            viewer?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+        }, {
+            admin?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+            member?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+            viewer?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+        }>;
+        readonly "~run": (dataset: v.UnknownDataset, config: v.Config<v.BaseIssue<unknown>>) => v.OutputDataset<{
+            admin?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+            member?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+            viewer?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+        }, v.ArrayIssue | v.PicklistIssue | v.StrictObjectIssue>;
+        readonly "~types"?: {
+            readonly input: {
+                admin?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+                member?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+                viewer?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+            };
+            readonly output: {
+                admin?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+                member?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+                viewer?: ("config" | "dependency" | "docs" | "schema" | "source" | "test")[] | undefined;
+            };
+            readonly issue: v.ArrayIssue | v.PicklistIssue | v.StrictObjectIssue;
+        } | undefined;
+    };
+    /**
+     * Whether a run governed by this policy answers its own automatic-loop caps
+     * ({@link runAutonomySchema}). `attended` on every built-in but the unattended default.
+     */
+    readonly autonomy: v.PicklistSchema<["attended", "unattended"], undefined>;
+    /**
+     * The minimum confidence (0..1) a Requirement-Writer recommendation must REPORT for an
+     * `unattended` run to take it as a review finding's answer and carry on with no person.
+     *
+     * Read ONLY on the unattended path, and inert under `attended` for the reason `dryRunRoles` is
+     * inert without a role policy: an attended run's auto-recommendations are drafts a human is
+     * about to read, so grading them changes nothing about who decides. Under `unattended` the same
+     * suggestion is the final answer, so the grade is the whole bar.
+     *
+     * It gates only the findings the REVIEWER classified `autoAnswerable` — a genuine product
+     * judgement is never eligible however confident the Writer sounds — and an UNREPORTED
+     * confidence is below every floor above 0, so a garbled Writer reply parks the run rather than
+     * quietly answering it. `0` accepts anything the Writer produces for that class of finding.
+     */
+    readonly minAutoAnswerConfidence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>;
+    /**
+     * The workspace's fallback preset for a run somebody started IN THE APP, used by tasks that
+     * pick none. Exactly one per workspace is true.
+     */
+    readonly isDefault: v.BooleanSchema<undefined>;
+    /**
+     * The workspace's fallback preset for a run nothing is watching (the public API, a tracker
+     * dispatch, a schedule fire), used by tasks that pick none. Exactly one per workspace is true,
+     * and it may be the same row as `isDefault`: a deployment that wants one posture everywhere
+     * flags one policy both ways.
+     */
+    readonly isUnattendedDefault: v.BooleanSchema<undefined>;
+    /**
+     * Monotonic seed version for a BUILT-IN preset (`seedRiskPolicies()` assigns it). When the
+     * current catalog version for this id exceeds the persisted copy's `version`, the SPA offers
+     * to reseed it. Absent on user-created presets (not version-tracked) and on rows persisted
+     * before versioning existed (treated as 0).
+     */
+    readonly version: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+    readonly createdAt: v.NumberSchema<undefined>;
+    readonly tier: v.PicklistSchema<["account", "workspace"], undefined>;
+}, undefined>;
+export type RiskPolicyLibraryEntry = v.InferOutput<typeof riskPolicyLibraryEntrySchema>;
+/**
+ * One policy a board is HIDING: an account policy id it has opted out of, so the policy loses the
+ * merge and no task on that board can pin it.
+ *
+ * A hidden id is by construction absent from the merged library, which is what makes this a
+ * separate read rather than a flag on the entry — without it, hiding would be a one-way door with
+ * nothing on screen to undo.
+ *
+ * `inherited` is the honest half: `false` says the suppression currently hides NOTHING, because
+ * the account has since deleted the policy it named. A reader must not conclude a posture is
+ * being withheld when there is none to withhold, and the name is then the id, which is the only
+ * thing left that identifies what was hidden.
+ */
+export declare const riskPolicySuppressionSchema: v.ObjectSchema<{
+    readonly id: v.StringSchema<undefined>;
+    readonly name: v.StringSchema<undefined>;
+    readonly inherited: v.BooleanSchema<undefined>;
+}, undefined>;
+export type RiskPolicySuppression = v.InferOutput<typeof riskPolicySuppressionSchema>;
+/**
+ * How long a risk policy's name may be.
+ *
+ * Exported because the SPA has to AGREE about it, not merely be validated against it: cloning an
+ * inherited policy composes the copy's name client-side (the label is localized copy, and the
+ * backend does not localize prose), so the composer needs the same ceiling the schema enforces.
+ * Without it a long enough source name pushed the composed `{name} (copy)` past the limit and the
+ * clone action answered a 422 the operator had no field to act on.
+ */
+export declare const RISK_POLICY_NAME_MAX_LENGTH = 60;
 /** Create a new merge threshold preset in a workspace. */
 export declare const createRiskPolicySchema: v.ObjectSchema<{
     readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 60, undefined>]>;
@@ -2827,6 +3621,23 @@ export declare const updateRiskPolicySchema: v.ObjectSchema<{
     readonly isUnattendedDefault: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
 }, undefined>;
 export type UpdateRiskPolicyInput = v.InferOutput<typeof updateRiskPolicySchema>;
+/**
+ * Copy an INHERITED account policy into the board's own tier, so the board can edit its numbers
+ * without an account admin and without changing the posture of every other board.
+ *
+ * The copy gets a FRESH id rather than shadowing the account id. An override sharing the id reads
+ * as the same policy in every picker and on every task that pinned it, so a board editing its copy
+ * would silently re-point work that was filed against the account's posture; a new id moves nothing
+ * that already exists and says what it is.
+ *
+ * `name` is optional and defaults to the source policy's, because two policies may share a name
+ * (nothing keys off it) and the backend does not localize prose — a caller that wants the copy
+ * marked as one sends the marked name itself.
+ */
+export declare const cloneRiskPolicySchema: v.ObjectSchema<{
+    readonly name: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 60, undefined>]>, undefined>;
+}, undefined>;
+export type CloneRiskPolicyInput = v.InferOutput<typeof cloneRiskPolicySchema>;
 /** Parse-or-throw an assessment payload an agent returned (the engine validates it). */
 export declare function parseMergeAssessment(value: unknown): MergeAssessment;
 /** Which assessment axis exceeded its preset ceiling. */