@claudexor/schema 3.1.0 → 3.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. package/dist/agent-capabilities.d.ts +8 -8
  2. package/dist/budget.d.ts +9 -9
  3. package/dist/config.d.ts +70 -38
  4. package/dist/config.d.ts.map +1 -1
  5. package/dist/config.js +12 -1
  6. package/dist/config.js.map +1 -1
  7. package/dist/control-operation-responses.d.ts +27 -27
  8. package/dist/control-run-detail.d.ts +13 -13
  9. package/dist/control.d.ts +135 -84
  10. package/dist/control.d.ts.map +1 -1
  11. package/dist/effort.d.ts +132 -0
  12. package/dist/effort.d.ts.map +1 -0
  13. package/dist/effort.js +167 -0
  14. package/dist/effort.js.map +1 -0
  15. package/dist/events.d.ts +4 -4
  16. package/dist/events.d.ts.map +1 -1
  17. package/dist/events.js +6 -0
  18. package/dist/events.js.map +1 -1
  19. package/dist/gate.d.ts +2 -2
  20. package/dist/harness.d.ts +98 -25
  21. package/dist/harness.d.ts.map +1 -1
  22. package/dist/harness.js +30 -13
  23. package/dist/harness.js.map +1 -1
  24. package/dist/index.d.ts +1 -0
  25. package/dist/index.d.ts.map +1 -1
  26. package/dist/index.js +1 -0
  27. package/dist/index.js.map +1 -1
  28. package/dist/operation.d.ts +16 -16
  29. package/dist/readiness.d.ts +48 -7
  30. package/dist/readiness.d.ts.map +1 -1
  31. package/dist/task.d.ts +62 -59
  32. package/dist/task.d.ts.map +1 -1
  33. package/dist/task.js +9 -8
  34. package/dist/task.js.map +1 -1
  35. package/dist/telemetry.d.ts +16 -16
  36. package/generated/AgentCapabilityCatalog.schema.json +4 -8
  37. package/generated/ControlHarnessListResponse.schema.json +45 -9
  38. package/generated/ControlHarnessSettingsPatch.schema.json +4 -8
  39. package/generated/ControlRunAgainDraft.schema.json +3 -7
  40. package/generated/ControlRunDetail.schema.json +3 -7
  41. package/generated/ControlRunListResponse.schema.json +3 -7
  42. package/generated/ControlRunStartRequest.schema.json +3 -7
  43. package/generated/ControlRunSummary.schema.json +3 -7
  44. package/generated/ControlSettingsSnapshot.schema.json +4 -8
  45. package/generated/ControlSettingsUpdateRequest.schema.json +4 -8
  46. package/generated/ControlThreadTurnRequest.schema.json +3 -7
  47. package/generated/GlobalConfig.schema.json +4 -8
  48. package/generated/HarnessManifest.schema.json +45 -9
  49. package/generated/HarnessStatusDto.schema.json +45 -9
  50. package/generated/ProjectConfig.schema.json +26 -0
  51. package/generated/RunEvent.schema.json +1 -0
  52. package/generated/TaskContract.schema.json +5 -9
  53. package/package.json +2 -2
package/dist/readiness.d.ts CHANGED
@@ -174,7 +174,18 @@ export declare const HarnessStatusDto: z.ZodObject<{
174
174
  json_schema_output: z.ZodDefault<z.ZodBoolean>;
175
175
  work_report_transport: z.ZodDefault<z.ZodEnum<["constrained", "validated", "unsupported"]>>;
176
176
  structured_output_channel: z.ZodDefault<z.ZodEnum<["side_tool", "final_message"]>>;
177
- effort_levels: z.ZodDefault<z.ZodArray<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>, "many">>;
177
+ effort_levels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
178
+ model_effort_levels: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
179
+ levels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
180
+ default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
181
+ }, "strict", z.ZodTypeAny, {
182
+ levels: string[];
183
+ default: string | null;
184
+ }, {
185
+ levels?: string[] | undefined;
186
+ default?: string | null | undefined;
187
+ }>>>;
188
+ effort_levels_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
178
189
  known_models: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
179
190
  id: z.ZodString;
180
191
  routes: z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">;
@@ -203,7 +214,12 @@ export declare const HarnessStatusDto: z.ZodObject<{
203
214
  json_schema_output: boolean;
204
215
  work_report_transport: "constrained" | "validated" | "unsupported";
205
216
  structured_output_channel: "side_tool" | "final_message";
206
- effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
217
+ effort_levels: string[];
218
+ model_effort_levels: Record<string, {
219
+ levels: string[];
220
+ default: string | null;
221
+ }>;
222
+ effort_levels_verified_against: string | null;
207
223
  known_models: (string | {
208
224
  id: string;
209
225
  routes: ("api_key" | "local_session")[];
@@ -226,7 +242,12 @@ export declare const HarnessStatusDto: z.ZodObject<{
226
242
  json_schema_output?: boolean | undefined;
227
243
  work_report_transport?: "constrained" | "validated" | "unsupported" | undefined;
228
244
  structured_output_channel?: "side_tool" | "final_message" | undefined;
229
- effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
245
+ effort_levels?: string[] | undefined;
246
+ model_effort_levels?: Record<string, {
247
+ levels?: string[] | undefined;
248
+ default?: string | null | undefined;
249
+ }> | undefined;
250
+ effort_levels_verified_against?: string | null | undefined;
230
251
  known_models?: (string | {
231
252
  id: string;
232
253
  routes: ("api_key" | "local_session")[];
@@ -283,7 +304,12 @@ export declare const HarnessStatusDto: z.ZodObject<{
283
304
  json_schema_output: boolean;
284
305
  work_report_transport: "constrained" | "validated" | "unsupported";
285
306
  structured_output_channel: "side_tool" | "final_message";
286
- effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
307
+ effort_levels: string[];
308
+ model_effort_levels: Record<string, {
309
+ levels: string[];
310
+ default: string | null;
311
+ }>;
312
+ effort_levels_verified_against: string | null;
287
313
  known_models: (string | {
288
314
  id: string;
289
315
  routes: ("api_key" | "local_session")[];
@@ -315,7 +341,12 @@ export declare const HarnessStatusDto: z.ZodObject<{
315
341
  json_schema_output?: boolean | undefined;
316
342
  work_report_transport?: "constrained" | "validated" | "unsupported" | undefined;
317
343
  structured_output_channel?: "side_tool" | "final_message" | undefined;
318
- effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
344
+ effort_levels?: string[] | undefined;
345
+ model_effort_levels?: Record<string, {
346
+ levels?: string[] | undefined;
347
+ default?: string | null | undefined;
348
+ }> | undefined;
349
+ effort_levels_verified_against?: string | null | undefined;
319
350
  known_models?: (string | {
320
351
  id: string;
321
352
  routes: ("api_key" | "local_session")[];
@@ -509,7 +540,12 @@ export declare const HarnessStatusDto: z.ZodObject<{
509
540
  json_schema_output: boolean;
510
541
  work_report_transport: "constrained" | "validated" | "unsupported";
511
542
  structured_output_channel: "side_tool" | "final_message";
512
- effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
543
+ effort_levels: string[];
544
+ model_effort_levels: Record<string, {
545
+ levels: string[];
546
+ default: string | null;
547
+ }>;
548
+ effort_levels_verified_against: string | null;
513
549
  known_models: (string | {
514
550
  id: string;
515
551
  routes: ("api_key" | "local_session")[];
@@ -559,7 +595,12 @@ export declare const HarnessStatusDto: z.ZodObject<{
559
595
  json_schema_output?: boolean | undefined;
560
596
  work_report_transport?: "constrained" | "validated" | "unsupported" | undefined;
561
597
  structured_output_channel?: "side_tool" | "final_message" | undefined;
562
- effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
598
+ effort_levels?: string[] | undefined;
599
+ model_effort_levels?: Record<string, {
600
+ levels?: string[] | undefined;
601
+ default?: string | null | undefined;
602
+ }> | undefined;
603
+ effort_levels_verified_against?: string | null | undefined;
563
604
  known_models?: (string | {
564
605
  id: string;
565
606
  routes: ("api_key" | "local_session")[];
package/dist/readiness.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;EAgB2C,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAWzB;;;yEAGqE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmBrE;2EACuE;;;;;;;;;;;;;;;;;;;;IAKvE,+DAA+D;;IAM/D;;qDAEiD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBlD,CAAC;AACJ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}
1
+ {"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;EAgB2C,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAWzB;;;yEAGqE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmBrE;2EACuE;;;;;;;;;;;;;;;;;;;;IAKvE,+DAA+D;;IAM/D;;qDAEiD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBlD,CAAC;AACJ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}
package/dist/task.d.ts CHANGED
@@ -84,8 +84,8 @@ export declare const TestCommand: z.ZodObject<{
84
84
  }>>>;
85
85
  }, "strict", z.ZodTypeAny, {
86
86
  id: string;
87
- args: string[];
88
87
  required: boolean;
88
+ args: string[];
89
89
  program: string;
90
90
  envAllowlist: string[];
91
91
  trust_required: boolean;
@@ -103,9 +103,9 @@ export declare const TestCommand: z.ZodObject<{
103
103
  }, {
104
104
  id: string;
105
105
  program: string;
106
+ required?: boolean | undefined;
106
107
  args?: string[] | undefined;
107
108
  cwd?: string | undefined;
108
- required?: boolean | undefined;
109
109
  envAllowlist?: string[] | undefined;
110
110
  trust_required?: boolean | undefined;
111
111
  trust_grant?: {
@@ -135,19 +135,20 @@ export declare const ProtectedPathApproval: z.ZodObject<{
135
135
  export type ProtectedPathApproval = z.infer<typeof ProtectedPathApproval>;
136
136
  export declare const TaskConstraints: z.ZodObject<{
137
137
  /** Globs whose changes escalate risk to a human-approval gate (wired into
138
- * classifyRisk/requireHuman). These are spec/config-owned and cannot be
139
- * suppressed by per-run protected-path approvals. The other constraint kinds
140
- * were unwired and removed. */
138
+ * classifyRisk/requireHuman). These are project-config-owned, cover every
139
+ * touched path (create/modify/delete/both rename sides), and cannot be
140
+ * suppressed by per-run protected-path approvals. */
141
141
  protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
142
- /** Per-run globs no candidate may touch AT ALL (create, modify, or delete —
143
- * stricter than protected_paths, which gates only tampering with existing
144
- * files). Enforced by the engine's post-diff policy gate on envelope runs;
142
+ /** Per-run globs no candidate may touch AT ALL (create, modify, delete, or
143
+ * rename). Unlike protected_paths, these produce a deny-path violation;
144
+ * both still require an explicit human decision before delivery. Enforced
145
+ * by the engine's post-diff policy gate on envelope runs;
145
146
  * an in-place run with deny_paths is refused at preflight. An operator
146
147
  * accept_risk decision MAY still deliver a violating patch (INV-111: the
147
148
  * human is the final authority). */
148
149
  deny_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
149
150
  /** Engine-derived gate/test path protections. Per-run approvals can narrow
150
- * only this auto-protected set, never spec/config-owned protected_paths. */
151
+ * only this auto-protected set, never project-config-owned protected_paths. */
151
152
  auto_protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
152
153
  /** Per-run typed approvals for protected gate/test path changes. These are
153
154
  * produced by explicit surfaces (CLI/control/IDE), then consumed by policy. */
@@ -273,19 +274,20 @@ export declare const TaskContract: z.ZodObject<{
273
274
  max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
274
275
  constraints: z.ZodDefault<z.ZodObject<{
275
276
  /** Globs whose changes escalate risk to a human-approval gate (wired into
276
- * classifyRisk/requireHuman). These are spec/config-owned and cannot be
277
- * suppressed by per-run protected-path approvals. The other constraint kinds
278
- * were unwired and removed. */
277
+ * classifyRisk/requireHuman). These are project-config-owned, cover every
278
+ * touched path (create/modify/delete/both rename sides), and cannot be
279
+ * suppressed by per-run protected-path approvals. */
279
280
  protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
280
- /** Per-run globs no candidate may touch AT ALL (create, modify, or delete —
281
- * stricter than protected_paths, which gates only tampering with existing
282
- * files). Enforced by the engine's post-diff policy gate on envelope runs;
281
+ /** Per-run globs no candidate may touch AT ALL (create, modify, delete, or
282
+ * rename). Unlike protected_paths, these produce a deny-path violation;
283
+ * both still require an explicit human decision before delivery. Enforced
284
+ * by the engine's post-diff policy gate on envelope runs;
283
285
  * an in-place run with deny_paths is refused at preflight. An operator
284
286
  * accept_risk decision MAY still deliver a violating patch (INV-111: the
285
287
  * human is the final authority). */
286
288
  deny_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
287
289
  /** Engine-derived gate/test path protections. Per-run approvals can narrow
288
- * only this auto-protected set, never spec/config-owned protected_paths. */
290
+ * only this auto-protected set, never project-config-owned protected_paths. */
289
291
  auto_protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
290
292
  /** Per-run typed approvals for protected gate/test path changes. These are
291
293
  * produced by explicit surfaces (CLI/control/IDE), then consumed by policy. */
@@ -358,8 +360,8 @@ export declare const TaskContract: z.ZodObject<{
358
360
  }>>>;
359
361
  }, "strict", z.ZodTypeAny, {
360
362
  id: string;
361
- args: string[];
362
363
  required: boolean;
364
+ args: string[];
363
365
  program: string;
364
366
  envAllowlist: string[];
365
367
  trust_required: boolean;
@@ -377,9 +379,9 @@ export declare const TaskContract: z.ZodObject<{
377
379
  }, {
378
380
  id: string;
379
381
  program: string;
382
+ required?: boolean | undefined;
380
383
  args?: string[] | undefined;
381
384
  cwd?: string | undefined;
382
- required?: boolean | undefined;
383
385
  envAllowlist?: string[] | undefined;
384
386
  trust_required?: boolean | undefined;
385
387
  trust_grant?: {
@@ -396,8 +398,8 @@ export declare const TaskContract: z.ZodObject<{
396
398
  }, "strip", z.ZodTypeAny, {
397
399
  commands: {
398
400
  id: string;
399
- args: string[];
400
401
  required: boolean;
402
+ args: string[];
401
403
  program: string;
402
404
  envAllowlist: string[];
403
405
  trust_required: boolean;
@@ -417,9 +419,9 @@ export declare const TaskContract: z.ZodObject<{
417
419
  commands?: {
418
420
  id: string;
419
421
  program: string;
422
+ required?: boolean | undefined;
420
423
  args?: string[] | undefined;
421
424
  cwd?: string | undefined;
422
- required?: boolean | undefined;
423
425
  envAllowlist?: string[] | undefined;
424
426
  trust_required?: boolean | undefined;
425
427
  trust_grant?: {
@@ -515,7 +517,7 @@ export declare const TaskContract: z.ZodObject<{
515
517
  * contract build so Exact Retry replays the effort that actually governed
516
518
  * the run instead of re-reading (possibly changed) settings. Empty = no
517
519
  * effort was resolved for any known lane (vendor default). */
518
- routing_efforts: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
520
+ routing_efforts: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
519
521
  convergence: z.ZodDefault<z.ZodObject<{
520
522
  require_tests_pass: z.ZodDefault<z.ZodBoolean>;
521
523
  require_no_accepted_block_open: z.ZodDefault<z.ZodBoolean>;
@@ -585,8 +587,8 @@ export declare const TaskContract: z.ZodObject<{
585
587
  tests: {
586
588
  commands: {
587
589
  id: string;
588
- args: string[];
589
590
  required: boolean;
591
+ args: string[];
590
592
  program: string;
591
593
  envAllowlist: string[];
592
594
  trust_required: boolean;
@@ -618,7 +620,7 @@ export declare const TaskContract: z.ZodObject<{
618
620
  };
619
621
  };
620
622
  routing_models: Record<string, string>;
621
- routing_efforts: Record<string, "low" | "medium" | "high" | "xhigh" | "max">;
623
+ routing_efforts: Record<string, string>;
622
624
  convergence: {
623
625
  require_tests_pass: boolean;
624
626
  require_no_accepted_block_open: boolean;
@@ -672,9 +674,9 @@ export declare const TaskContract: z.ZodObject<{
672
674
  commands?: {
673
675
  id: string;
674
676
  program: string;
677
+ required?: boolean | undefined;
675
678
  args?: string[] | undefined;
676
679
  cwd?: string | undefined;
677
- required?: boolean | undefined;
678
680
  envAllowlist?: string[] | undefined;
679
681
  trust_required?: boolean | undefined;
680
682
  trust_grant?: {
@@ -704,7 +706,7 @@ export declare const TaskContract: z.ZodObject<{
704
706
  } | undefined;
705
707
  } | undefined;
706
708
  routing_models?: Record<string, string> | undefined;
707
- routing_efforts?: Record<string, "low" | "medium" | "high" | "xhigh" | "max"> | undefined;
709
+ routing_efforts?: Record<string, string> | undefined;
708
710
  convergence?: {
709
711
  require_tests_pass?: boolean | undefined;
710
712
  require_no_accepted_block_open?: boolean | undefined;
@@ -762,8 +764,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
762
764
  }>>>;
763
765
  }, "strict", z.ZodTypeAny, {
764
766
  id: string;
765
- args: string[];
766
767
  required: boolean;
768
+ args: string[];
767
769
  program: string;
768
770
  envAllowlist: string[];
769
771
  trust_required: boolean;
@@ -781,9 +783,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
781
783
  }, {
782
784
  id: string;
783
785
  program: string;
786
+ required?: boolean | undefined;
784
787
  args?: string[] | undefined;
785
788
  cwd?: string | undefined;
786
- required?: boolean | undefined;
787
789
  envAllowlist?: string[] | undefined;
788
790
  trust_required?: boolean | undefined;
789
791
  trust_grant?: {
@@ -837,8 +839,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
837
839
  }>>>;
838
840
  }, "strict", z.ZodTypeAny, {
839
841
  id: string;
840
- args: string[];
841
842
  required: boolean;
843
+ args: string[];
842
844
  program: string;
843
845
  envAllowlist: string[];
844
846
  trust_required: boolean;
@@ -856,9 +858,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
856
858
  }, {
857
859
  id: string;
858
860
  program: string;
861
+ required?: boolean | undefined;
859
862
  args?: string[] | undefined;
860
863
  cwd?: string | undefined;
861
- required?: boolean | undefined;
862
864
  envAllowlist?: string[] | undefined;
863
865
  trust_required?: boolean | undefined;
864
866
  trust_grant?: {
@@ -912,8 +914,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
912
914
  }>>>;
913
915
  }, "strict", z.ZodTypeAny, {
914
916
  id: string;
915
- args: string[];
916
917
  required: boolean;
918
+ args: string[];
917
919
  program: string;
918
920
  envAllowlist: string[];
919
921
  trust_required: boolean;
@@ -931,9 +933,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
931
933
  }, {
932
934
  id: string;
933
935
  program: string;
936
+ required?: boolean | undefined;
934
937
  args?: string[] | undefined;
935
938
  cwd?: string | undefined;
936
- required?: boolean | undefined;
937
939
  envAllowlist?: string[] | undefined;
938
940
  trust_required?: boolean | undefined;
939
941
  trust_grant?: {
@@ -989,8 +991,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
989
991
  }>>>;
990
992
  }, "strict", z.ZodTypeAny, {
991
993
  id: string;
992
- args: string[];
993
994
  required: boolean;
995
+ args: string[];
994
996
  program: string;
995
997
  envAllowlist: string[];
996
998
  trust_required: boolean;
@@ -1008,9 +1010,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1008
1010
  }, {
1009
1011
  id: string;
1010
1012
  program: string;
1013
+ required?: boolean | undefined;
1011
1014
  args?: string[] | undefined;
1012
1015
  cwd?: string | undefined;
1013
- required?: boolean | undefined;
1014
1016
  envAllowlist?: string[] | undefined;
1015
1017
  trust_required?: boolean | undefined;
1016
1018
  trust_grant?: {
@@ -1064,8 +1066,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1064
1066
  }>>>;
1065
1067
  }, "strict", z.ZodTypeAny, {
1066
1068
  id: string;
1067
- args: string[];
1068
1069
  required: boolean;
1070
+ args: string[];
1069
1071
  program: string;
1070
1072
  envAllowlist: string[];
1071
1073
  trust_required: boolean;
@@ -1083,9 +1085,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1083
1085
  }, {
1084
1086
  id: string;
1085
1087
  program: string;
1088
+ required?: boolean | undefined;
1086
1089
  args?: string[] | undefined;
1087
1090
  cwd?: string | undefined;
1088
- required?: boolean | undefined;
1089
1091
  envAllowlist?: string[] | undefined;
1090
1092
  trust_required?: boolean | undefined;
1091
1093
  trust_grant?: {
@@ -1139,8 +1141,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1139
1141
  }>>>;
1140
1142
  }, "strict", z.ZodTypeAny, {
1141
1143
  id: string;
1142
- args: string[];
1143
1144
  required: boolean;
1145
+ args: string[];
1144
1146
  program: string;
1145
1147
  envAllowlist: string[];
1146
1148
  trust_required: boolean;
@@ -1158,9 +1160,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1158
1160
  }, {
1159
1161
  id: string;
1160
1162
  program: string;
1163
+ required?: boolean | undefined;
1161
1164
  args?: string[] | undefined;
1162
1165
  cwd?: string | undefined;
1163
- required?: boolean | undefined;
1164
1166
  envAllowlist?: string[] | undefined;
1165
1167
  trust_required?: boolean | undefined;
1166
1168
  trust_grant?: {
@@ -1216,8 +1218,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1216
1218
  }>>>;
1217
1219
  }, "strict", z.ZodTypeAny, {
1218
1220
  id: string;
1219
- args: string[];
1220
1221
  required: boolean;
1222
+ args: string[];
1221
1223
  program: string;
1222
1224
  envAllowlist: string[];
1223
1225
  trust_required: boolean;
@@ -1235,9 +1237,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1235
1237
  }, {
1236
1238
  id: string;
1237
1239
  program: string;
1240
+ required?: boolean | undefined;
1238
1241
  args?: string[] | undefined;
1239
1242
  cwd?: string | undefined;
1240
- required?: boolean | undefined;
1241
1243
  envAllowlist?: string[] | undefined;
1242
1244
  trust_required?: boolean | undefined;
1243
1245
  trust_grant?: {
@@ -1291,8 +1293,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1291
1293
  }>>>;
1292
1294
  }, "strict", z.ZodTypeAny, {
1293
1295
  id: string;
1294
- args: string[];
1295
1296
  required: boolean;
1297
+ args: string[];
1296
1298
  program: string;
1297
1299
  envAllowlist: string[];
1298
1300
  trust_required: boolean;
@@ -1310,9 +1312,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1310
1312
  }, {
1311
1313
  id: string;
1312
1314
  program: string;
1315
+ required?: boolean | undefined;
1313
1316
  args?: string[] | undefined;
1314
1317
  cwd?: string | undefined;
1315
- required?: boolean | undefined;
1316
1318
  envAllowlist?: string[] | undefined;
1317
1319
  trust_required?: boolean | undefined;
1318
1320
  trust_grant?: {
@@ -1366,8 +1368,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1366
1368
  }>>>;
1367
1369
  }, "strict", z.ZodTypeAny, {
1368
1370
  id: string;
1369
- args: string[];
1370
1371
  required: boolean;
1372
+ args: string[];
1371
1373
  program: string;
1372
1374
  envAllowlist: string[];
1373
1375
  trust_required: boolean;
@@ -1385,9 +1387,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1385
1387
  }, {
1386
1388
  id: string;
1387
1389
  program: string;
1390
+ required?: boolean | undefined;
1388
1391
  args?: string[] | undefined;
1389
1392
  cwd?: string | undefined;
1390
- required?: boolean | undefined;
1391
1393
  envAllowlist?: string[] | undefined;
1392
1394
  trust_required?: boolean | undefined;
1393
1395
  trust_grant?: {
@@ -1463,19 +1465,20 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1463
1465
  max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
1464
1466
  constraints: z.ZodDefault<z.ZodObject<{
1465
1467
  /** Globs whose changes escalate risk to a human-approval gate (wired into
1466
- * classifyRisk/requireHuman). These are spec/config-owned and cannot be
1467
- * suppressed by per-run protected-path approvals. The other constraint kinds
1468
- * were unwired and removed. */
1468
+ * classifyRisk/requireHuman). These are project-config-owned, cover every
1469
+ * touched path (create/modify/delete/both rename sides), and cannot be
1470
+ * suppressed by per-run protected-path approvals. */
1469
1471
  protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
1470
- /** Per-run globs no candidate may touch AT ALL (create, modify, or delete —
1471
- * stricter than protected_paths, which gates only tampering with existing
1472
- * files). Enforced by the engine's post-diff policy gate on envelope runs;
1472
+ /** Per-run globs no candidate may touch AT ALL (create, modify, delete, or
1473
+ * rename). Unlike protected_paths, these produce a deny-path violation;
1474
+ * both still require an explicit human decision before delivery. Enforced
1475
+ * by the engine's post-diff policy gate on envelope runs;
1473
1476
  * an in-place run with deny_paths is refused at preflight. An operator
1474
1477
  * accept_risk decision MAY still deliver a violating patch (INV-111: the
1475
1478
  * human is the final authority). */
1476
1479
  deny_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
1477
1480
  /** Engine-derived gate/test path protections. Per-run approvals can narrow
1478
- * only this auto-protected set, never spec/config-owned protected_paths. */
1481
+ * only this auto-protected set, never project-config-owned protected_paths. */
1479
1482
  auto_protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
1480
1483
  /** Per-run typed approvals for protected gate/test path changes. These are
1481
1484
  * produced by explicit surfaces (CLI/control/IDE), then consumed by policy. */
@@ -1548,8 +1551,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1548
1551
  }>>>;
1549
1552
  }, "strict", z.ZodTypeAny, {
1550
1553
  id: string;
1551
- args: string[];
1552
1554
  required: boolean;
1555
+ args: string[];
1553
1556
  program: string;
1554
1557
  envAllowlist: string[];
1555
1558
  trust_required: boolean;
@@ -1567,9 +1570,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1567
1570
  }, {
1568
1571
  id: string;
1569
1572
  program: string;
1573
+ required?: boolean | undefined;
1570
1574
  args?: string[] | undefined;
1571
1575
  cwd?: string | undefined;
1572
- required?: boolean | undefined;
1573
1576
  envAllowlist?: string[] | undefined;
1574
1577
  trust_required?: boolean | undefined;
1575
1578
  trust_grant?: {
@@ -1586,8 +1589,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1586
1589
  }, "strip", z.ZodTypeAny, {
1587
1590
  commands: {
1588
1591
  id: string;
1589
- args: string[];
1590
1592
  required: boolean;
1593
+ args: string[];
1591
1594
  program: string;
1592
1595
  envAllowlist: string[];
1593
1596
  trust_required: boolean;
@@ -1607,9 +1610,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1607
1610
  commands?: {
1608
1611
  id: string;
1609
1612
  program: string;
1613
+ required?: boolean | undefined;
1610
1614
  args?: string[] | undefined;
1611
1615
  cwd?: string | undefined;
1612
- required?: boolean | undefined;
1613
1616
  envAllowlist?: string[] | undefined;
1614
1617
  trust_required?: boolean | undefined;
1615
1618
  trust_grant?: {
@@ -1705,7 +1708,7 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1705
1708
  * contract build so Exact Retry replays the effort that actually governed
1706
1709
  * the run instead of re-reading (possibly changed) settings. Empty = no
1707
1710
  * effort was resolved for any known lane (vendor default). */
1708
- routing_efforts: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
1711
+ routing_efforts: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
1709
1712
  convergence: z.ZodDefault<z.ZodObject<{
1710
1713
  require_tests_pass: z.ZodDefault<z.ZodBoolean>;
1711
1714
  require_no_accepted_block_open: z.ZodDefault<z.ZodBoolean>;
@@ -1775,8 +1778,8 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1775
1778
  tests: {
1776
1779
  commands: {
1777
1780
  id: string;
1778
- args: string[];
1779
1781
  required: boolean;
1782
+ args: string[];
1780
1783
  program: string;
1781
1784
  envAllowlist: string[];
1782
1785
  trust_required: boolean;
@@ -1808,7 +1811,7 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1808
1811
  };
1809
1812
  };
1810
1813
  routing_models: Record<string, string>;
1811
- routing_efforts: Record<string, "low" | "medium" | "high" | "xhigh" | "max">;
1814
+ routing_efforts: Record<string, string>;
1812
1815
  convergence: {
1813
1816
  require_tests_pass: boolean;
1814
1817
  require_no_accepted_block_open: boolean;
@@ -1862,9 +1865,9 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1862
1865
  commands?: {
1863
1866
  id: string;
1864
1867
  program: string;
1868
+ required?: boolean | undefined;
1865
1869
  args?: string[] | undefined;
1866
1870
  cwd?: string | undefined;
1867
- required?: boolean | undefined;
1868
1871
  envAllowlist?: string[] | undefined;
1869
1872
  trust_required?: boolean | undefined;
1870
1873
  trust_grant?: {
@@ -1894,7 +1897,7 @@ export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
1894
1897
  } | undefined;
1895
1898
  } | undefined;
1896
1899
  routing_models?: Record<string, string> | undefined;
1897
- routing_efforts?: Record<string, "low" | "medium" | "high" | "xhigh" | "max"> | undefined;
1900
+ routing_efforts?: Record<string, string> | undefined;
1898
1901
  convergence?: {
1899
1902
  require_tests_pass?: boolean | undefined;
1900
1903
  require_no_accepted_block_open?: boolean | undefined;
package/dist/task.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;EAcmD,CAAC;AACtF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY8C,CAAC;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY2D,CAAC;AACpF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,qBAAqB;IAE9B;oFACgF;;;;;;;;;EASjF,CAAC;AACJ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,eAAe;IAExB;;;mCAG+B;;IAO/B;;;;;wCAKoC;;IAOpC;gFAC4E;;IAO5E;mFAC+E;;QA9C/E;wFACgF;;;;;;;;;;;;;;;;;;;;;;;;;;EAqDxB,CAAC;AAC7D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,oBAAoB;;;;;;IA0B7B;;;;OAIG;;;;;;;;;;;;;;;;EAMsF,CAAC;AAC9F,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuBrB;;2DAEuD;;IAKvD;;;;;mFAK+E;;IAQ/E;;2CAEuC;;IAIvC;iFAC6E;;IAM7E;;qEAEiE;;;QA9IjE;;;uCAG+B;;QAO/B;;;;;4CAKoC;;QAOpC;oFAC4E;;QAO5E;uFAC+E;;YA9C/E;4FACgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAmL5E,kGAAkG;;;;;;;;;;;;QAmBlG,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAwBpG;;mFAE+E;;IAO/E;;;kEAG8D;;;;;;;;QAxJ9D;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6JsF,CAAC;AAC9F,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAnInC;;2DAEuD;;IAKvD;;;;;mFAK+E;;IAQ/E;;2CAEuC;;IAIvC;iFAC6E;;IAM7E;;qEAEiE;;;QA9IjE;;;uCAG+B;;QAO/B;;;;;4CAKoC;;QAOpC;oFAC4E;;QAO5E;uFAC+E;;YA9C/E;4FACgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAmL5E,kGAAkG;;;;;;;;;;;;QAmBlG,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAwBpG;;mFAE+E;;IAO/E;;;kEAG8D;;;;;;;;QAxJ9D;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4K6E,CAAC;AACrF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
1
+ {"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;EAcmD,CAAC;AACtF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY8C,CAAC;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY2D,CAAC;AACpF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,qBAAqB;IAE9B;oFACgF;;;;;;;;;EASjF,CAAC;AACJ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,eAAe;IAExB;;;yDAGqD;;IAOrD;;;;;;wCAMoC;;IAOpC;mFAC+E;;IAO/E;mFAC+E;;QA/C/E;wFACgF;;;;;;;;;;;;;;;;;;;;;;;;;;EAsDxB,CAAC;AAC7D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,oBAAoB;;;;;;IA0B7B;;;;OAIG;;;;;;;;;;;;;;;;EAMsF,CAAC;AAC9F,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuBrB;;2DAEuD;;IAKvD;;;;;mFAK+E;;IAQ/E;;2CAEuC;;IAIvC;iFAC6E;;IAM7E;;qEAEiE;;;QA/IjE;;;6DAGqD;;QAOrD;;;;;;4CAMoC;;QAOpC;uFAC+E;;QAO/E;uFAC+E;;YA/C/E;4FACgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAoL5E,kGAAkG;;;;;;;;;;;;QAmBlG,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAwBpG;;mFAE+E;;IAO/E;;;kEAG8D;;;;;;;;QAxJ9D;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6JsF,CAAC;AAC9F,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAnInC;;2DAEuD;;IAKvD;;;;;mFAK+E;;IAQ/E;;2CAEuC;;IAIvC;iFAC6E;;IAM7E;;qEAEiE;;;QA/IjE;;;6DAGqD;;QAOrD;;;;;;4CAMoC;;QAOpC;uFAC+E;;QAO/E;uFAC+E;;YA/C/E;4FACgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAoL5E,kGAAkG;;;;;;;;;;;;QAmBlG,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAwBpG;;mFAE+E;;IAO/E;;;kEAG8D;;;;;;;;QAxJ9D;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4K6E,CAAC;AACrF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
package/dist/task.js CHANGED
@@ -55,16 +55,17 @@ export const ProtectedPathApproval = z
55
55
  export const TaskConstraints = z
56
56
  .object({
57
57
  /** Globs whose changes escalate risk to a human-approval gate (wired into
58
- * classifyRisk/requireHuman). These are spec/config-owned and cannot be
59
- * suppressed by per-run protected-path approvals. The other constraint kinds
60
- * were unwired and removed. */
58
+ * classifyRisk/requireHuman). These are project-config-owned, cover every
59
+ * touched path (create/modify/delete/both rename sides), and cannot be
60
+ * suppressed by per-run protected-path approvals. */
61
61
  protected_paths: z
62
62
  .array(z.string())
63
63
  .default([])
64
- .describe("Approval globs — path globs (e.g. `migrations/**`, `**/*.env`) whose changes escalate a run to a human-approval gate before it can be applied. Spec/config-owned and never suppressed by per-run protected-path approvals."),
65
- /** Per-run globs no candidate may touch AT ALL (create, modify, or delete —
66
- * stricter than protected_paths, which gates only tampering with existing
67
- * files). Enforced by the engine's post-diff policy gate on envelope runs;
64
+ .describe("Approval globs — path globs (e.g. `migrations/**`, `**/*.env`) whose matching create, modify, delete, or rename changes escalate a run to a human-approval gate before it can be applied. Project-config-owned and never suppressed by per-run protected-path approvals."),
65
+ /** Per-run globs no candidate may touch AT ALL (create, modify, delete, or
66
+ * rename). Unlike protected_paths, these produce a deny-path violation;
67
+ * both still require an explicit human decision before delivery. Enforced
68
+ * by the engine's post-diff policy gate on envelope runs;
68
69
  * an in-place run with deny_paths is refused at preflight. An operator
69
70
  * accept_risk decision MAY still deliver a violating patch (INV-111: the
70
71
  * human is the final authority). */
@@ -73,7 +74,7 @@ export const TaskConstraints = z
73
74
  .default([])
74
75
  .describe("Per-run globs no candidate may touch at all; enforced by the engine post-diff gate on envelope runs (in-place runs with deny_paths are refused). accept_risk may still deliver (INV-111)."),
75
76
  /** Engine-derived gate/test path protections. Per-run approvals can narrow
76
- * only this auto-protected set, never spec/config-owned protected_paths. */
77
+ * only this auto-protected set, never project-config-owned protected_paths. */
77
78
  auto_protected_paths: z
78
79
  .array(z.string())
79
80
  .default([])