@lannguyensi/harness 0.14.0 → 0.15.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (45) hide show
  1. package/CHANGELOG.md +23 -0
  2. package/README.md +3 -1
  3. package/dist/cli/init/composer.d.ts +29 -0
  4. package/dist/cli/init/composer.js +377 -0
  5. package/dist/cli/init/composer.js.map +1 -0
  6. package/dist/cli/init/dependencies.d.ts +25 -0
  7. package/dist/cli/init/dependencies.js +100 -10
  8. package/dist/cli/init/dependencies.js.map +1 -1
  9. package/dist/cli/init/index.d.ts +18 -1
  10. package/dist/cli/init/index.js +17 -7
  11. package/dist/cli/init/index.js.map +1 -1
  12. package/dist/cli/init/interactive.d.ts +31 -2
  13. package/dist/cli/init/interactive.js +321 -79
  14. package/dist/cli/init/interactive.js.map +1 -1
  15. package/dist/cli/init/templates.d.ts +1 -1
  16. package/dist/cli/init/templates.js +60 -9
  17. package/dist/cli/init/templates.js.map +1 -1
  18. package/dist/cli/pack/hook-pre-tool-use.d.ts +1 -1
  19. package/dist/cli/pack/hook-pre-tool-use.js +37 -3
  20. package/dist/cli/pack/hook-pre-tool-use.js.map +1 -1
  21. package/dist/cli/validate/checks.d.ts +1 -1
  22. package/dist/cli/validate/checks.js +1 -7
  23. package/dist/cli/validate/checks.js.map +1 -1
  24. package/dist/io/harness-lock.js +1 -9
  25. package/dist/io/harness-lock.js.map +1 -1
  26. package/dist/policies/ledger-client.js +3 -9
  27. package/dist/policies/ledger-client.js.map +1 -1
  28. package/dist/policies/producers.d.ts +12 -0
  29. package/dist/policies/producers.js +61 -0
  30. package/dist/policies/producers.js.map +1 -0
  31. package/dist/runtime/expand-home.d.ts +14 -0
  32. package/dist/runtime/expand-home.js +54 -0
  33. package/dist/runtime/expand-home.js.map +1 -0
  34. package/dist/runtime/intercept.js +13 -2
  35. package/dist/runtime/intercept.js.map +1 -1
  36. package/dist/runtime/ledger-add.js +10 -3
  37. package/dist/runtime/ledger-add.js.map +1 -1
  38. package/dist/runtime/ledger-record.js +11 -10
  39. package/dist/runtime/ledger-record.js.map +1 -1
  40. package/dist/schema/index.d.ts +281 -101
  41. package/dist/schema/permission-profiles.d.ts +125 -125
  42. package/dist/schema/policies.d.ts +261 -0
  43. package/dist/schema/policies.js +50 -0
  44. package/dist/schema/policies.js.map +1 -1
  45. package/package.json +1 -1
package/dist/schema/index.d.ts CHANGED
@@ -512,6 +512,46 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
512
512
  }>;
513
513
  hook: z.ZodString;
514
514
  enforcement: z.ZodEnum<["block", "warn"]>;
515
+ producers: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
516
+ kind: z.ZodLiteral<"bash">;
517
+ command: z.ZodString;
518
+ description: z.ZodString;
519
+ }, "strict", z.ZodTypeAny, {
520
+ command: string;
521
+ description: string;
522
+ kind: "bash";
523
+ }, {
524
+ command: string;
525
+ description: string;
526
+ kind: "bash";
527
+ }>, z.ZodObject<{
528
+ kind: z.ZodLiteral<"mcp">;
529
+ verb: z.ZodString;
530
+ example: z.ZodString;
531
+ description: z.ZodString;
532
+ }, "strict", z.ZodTypeAny, {
533
+ description: string;
534
+ kind: "mcp";
535
+ verb: string;
536
+ example: string;
537
+ }, {
538
+ description: string;
539
+ kind: "mcp";
540
+ verb: string;
541
+ example: string;
542
+ }>, z.ZodObject<{
543
+ kind: z.ZodLiteral<"ask">;
544
+ command: z.ZodString;
545
+ description: z.ZodString;
546
+ }, "strict", z.ZodTypeAny, {
547
+ command: string;
548
+ description: string;
549
+ kind: "ask";
550
+ }, {
551
+ command: string;
552
+ description: string;
553
+ kind: "ask";
554
+ }>]>, "many">>;
515
555
  }, "strict", z.ZodTypeAny, {
516
556
  name: string;
517
557
  description: string;
@@ -533,6 +573,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
533
573
  };
534
574
  hook: string;
535
575
  enforcement: "warn" | "block";
576
+ producers?: ({
577
+ command: string;
578
+ description: string;
579
+ kind: "bash";
580
+ } | {
581
+ description: string;
582
+ kind: "mcp";
583
+ verb: string;
584
+ example: string;
585
+ } | {
586
+ command: string;
587
+ description: string;
588
+ kind: "ask";
589
+ })[] | undefined;
536
590
  }, {
537
591
  name: string;
538
592
  description: string;
@@ -554,6 +608,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
554
608
  };
555
609
  hook: string;
556
610
  enforcement: "warn" | "block";
611
+ producers?: ({
612
+ command: string;
613
+ description: string;
614
+ kind: "bash";
615
+ } | {
616
+ description: string;
617
+ kind: "mcp";
618
+ verb: string;
619
+ example: string;
620
+ } | {
621
+ command: string;
622
+ description: string;
623
+ kind: "ask";
624
+ })[] | undefined;
557
625
  }>, {
558
626
  name: string;
559
627
  description: string;
@@ -575,6 +643,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
575
643
  };
576
644
  hook: string;
577
645
  enforcement: "warn" | "block";
646
+ producers?: ({
647
+ command: string;
648
+ description: string;
649
+ kind: "bash";
650
+ } | {
651
+ description: string;
652
+ kind: "mcp";
653
+ verb: string;
654
+ example: string;
655
+ } | {
656
+ command: string;
657
+ description: string;
658
+ kind: "ask";
659
+ })[] | undefined;
578
660
  }, {
579
661
  name: string;
580
662
  description: string;
@@ -596,6 +678,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
596
678
  };
597
679
  hook: string;
598
680
  enforcement: "warn" | "block";
681
+ producers?: ({
682
+ command: string;
683
+ description: string;
684
+ kind: "bash";
685
+ } | {
686
+ description: string;
687
+ kind: "mcp";
688
+ verb: string;
689
+ example: string;
690
+ } | {
691
+ command: string;
692
+ description: string;
693
+ kind: "ask";
694
+ })[] | undefined;
599
695
  }>, "many">, {
600
696
  name: string;
601
697
  description: string;
@@ -617,6 +713,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
617
713
  };
618
714
  hook: string;
619
715
  enforcement: "warn" | "block";
716
+ producers?: ({
717
+ command: string;
718
+ description: string;
719
+ kind: "bash";
720
+ } | {
721
+ description: string;
722
+ kind: "mcp";
723
+ verb: string;
724
+ example: string;
725
+ } | {
726
+ command: string;
727
+ description: string;
728
+ kind: "ask";
729
+ })[] | undefined;
620
730
  }[], {
621
731
  name: string;
622
732
  description: string;
@@ -638,6 +748,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
638
748
  };
639
749
  hook: string;
640
750
  enforcement: "warn" | "block";
751
+ producers?: ({
752
+ command: string;
753
+ description: string;
754
+ kind: "bash";
755
+ } | {
756
+ description: string;
757
+ kind: "mcp";
758
+ verb: string;
759
+ example: string;
760
+ } | {
761
+ command: string;
762
+ description: string;
763
+ kind: "ask";
764
+ })[] | undefined;
641
765
  }[]>>;
642
766
  policy_packs: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodObject<{
643
767
  name: z.ZodString;
@@ -674,7 +798,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
674
798
  description: z.ZodOptional<z.ZodString>;
675
799
  actions: z.ZodDefault<z.ZodObject<{
676
800
  read: z.ZodOptional<z.ZodObject<{
677
- allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
801
+ allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
678
802
  mode: z.ZodOptional<z.ZodString>;
679
803
  requires: z.ZodOptional<z.ZodObject<{
680
804
  ledger_tag: z.ZodString;
@@ -742,7 +866,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
742
866
  } | undefined;
743
867
  }>>;
744
868
  }, "strict", z.ZodTypeAny, {
745
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
869
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
746
870
  requires?: {
747
871
  ledger_tag: string;
748
872
  within?: string | undefined;
@@ -754,7 +878,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
754
878
  } | undefined;
755
879
  mode?: string | undefined;
756
880
  }, {
757
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
881
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
758
882
  requires?: {
759
883
  ledger_tag: string;
760
884
  within?: string | undefined;
@@ -767,7 +891,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
767
891
  mode?: string | undefined;
768
892
  }>>;
769
893
  edit: z.ZodOptional<z.ZodObject<{
770
- allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
894
+ allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
771
895
  mode: z.ZodOptional<z.ZodString>;
772
896
  requires: z.ZodOptional<z.ZodObject<{
773
897
  ledger_tag: z.ZodString;
@@ -835,7 +959,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
835
959
  } | undefined;
836
960
  }>>;
837
961
  }, "strict", z.ZodTypeAny, {
838
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
962
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
839
963
  requires?: {
840
964
  ledger_tag: string;
841
965
  within?: string | undefined;
@@ -847,7 +971,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
847
971
  } | undefined;
848
972
  mode?: string | undefined;
849
973
  }, {
850
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
974
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
851
975
  requires?: {
852
976
  ledger_tag: string;
853
977
  within?: string | undefined;
@@ -860,7 +984,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
860
984
  mode?: string | undefined;
861
985
  }>>;
862
986
  bash: z.ZodOptional<z.ZodObject<{
863
- allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
987
+ allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
864
988
  mode: z.ZodOptional<z.ZodString>;
865
989
  requires: z.ZodOptional<z.ZodObject<{
866
990
  ledger_tag: z.ZodString;
@@ -928,7 +1052,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
928
1052
  } | undefined;
929
1053
  }>>;
930
1054
  }, "strict", z.ZodTypeAny, {
931
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1055
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
932
1056
  requires?: {
933
1057
  ledger_tag: string;
934
1058
  within?: string | undefined;
@@ -940,7 +1064,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
940
1064
  } | undefined;
941
1065
  mode?: string | undefined;
942
1066
  }, {
943
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1067
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
944
1068
  requires?: {
945
1069
  ledger_tag: string;
946
1070
  within?: string | undefined;
@@ -953,7 +1077,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
953
1077
  mode?: string | undefined;
954
1078
  }>>;
955
1079
  commit: z.ZodOptional<z.ZodObject<{
956
- allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
1080
+ allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
957
1081
  mode: z.ZodOptional<z.ZodString>;
958
1082
  requires: z.ZodOptional<z.ZodObject<{
959
1083
  ledger_tag: z.ZodString;
@@ -1021,7 +1145,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1021
1145
  } | undefined;
1022
1146
  }>>;
1023
1147
  }, "strict", z.ZodTypeAny, {
1024
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1148
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1025
1149
  requires?: {
1026
1150
  ledger_tag: string;
1027
1151
  within?: string | undefined;
@@ -1033,7 +1157,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1033
1157
  } | undefined;
1034
1158
  mode?: string | undefined;
1035
1159
  }, {
1036
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1160
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1037
1161
  requires?: {
1038
1162
  ledger_tag: string;
1039
1163
  within?: string | undefined;
@@ -1046,7 +1170,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1046
1170
  mode?: string | undefined;
1047
1171
  }>>;
1048
1172
  push: z.ZodOptional<z.ZodObject<{
1049
- allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
1173
+ allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
1050
1174
  mode: z.ZodOptional<z.ZodString>;
1051
1175
  requires: z.ZodOptional<z.ZodObject<{
1052
1176
  ledger_tag: z.ZodString;
@@ -1114,7 +1238,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1114
1238
  } | undefined;
1115
1239
  }>>;
1116
1240
  }, "strict", z.ZodTypeAny, {
1117
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1241
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1118
1242
  requires?: {
1119
1243
  ledger_tag: string;
1120
1244
  within?: string | undefined;
@@ -1126,7 +1250,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1126
1250
  } | undefined;
1127
1251
  mode?: string | undefined;
1128
1252
  }, {
1129
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1253
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1130
1254
  requires?: {
1131
1255
  ledger_tag: string;
1132
1256
  within?: string | undefined;
@@ -1139,7 +1263,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1139
1263
  mode?: string | undefined;
1140
1264
  }>>;
1141
1265
  pr: z.ZodOptional<z.ZodObject<{
1142
- allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
1266
+ allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
1143
1267
  mode: z.ZodOptional<z.ZodString>;
1144
1268
  requires: z.ZodOptional<z.ZodObject<{
1145
1269
  ledger_tag: z.ZodString;
@@ -1207,7 +1331,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1207
1331
  } | undefined;
1208
1332
  }>>;
1209
1333
  }, "strict", z.ZodTypeAny, {
1210
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1334
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1211
1335
  requires?: {
1212
1336
  ledger_tag: string;
1213
1337
  within?: string | undefined;
@@ -1219,7 +1343,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1219
1343
  } | undefined;
1220
1344
  mode?: string | undefined;
1221
1345
  }, {
1222
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1346
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1223
1347
  requires?: {
1224
1348
  ledger_tag: string;
1225
1349
  within?: string | undefined;
@@ -1232,7 +1356,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1232
1356
  mode?: string | undefined;
1233
1357
  }>>;
1234
1358
  deploy: z.ZodOptional<z.ZodObject<{
1235
- allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
1359
+ allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
1236
1360
  mode: z.ZodOptional<z.ZodString>;
1237
1361
  requires: z.ZodOptional<z.ZodObject<{
1238
1362
  ledger_tag: z.ZodString;
@@ -1300,7 +1424,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1300
1424
  } | undefined;
1301
1425
  }>>;
1302
1426
  }, "strict", z.ZodTypeAny, {
1303
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1427
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1304
1428
  requires?: {
1305
1429
  ledger_tag: string;
1306
1430
  within?: string | undefined;
@@ -1312,7 +1436,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1312
1436
  } | undefined;
1313
1437
  mode?: string | undefined;
1314
1438
  }, {
1315
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1439
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1316
1440
  requires?: {
1317
1441
  ledger_tag: string;
1318
1442
  within?: string | undefined;
@@ -1326,7 +1450,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1326
1450
  }>>;
1327
1451
  }, "strict", z.ZodTypeAny, {
1328
1452
  push?: {
1329
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1453
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1330
1454
  requires?: {
1331
1455
  ledger_tag: string;
1332
1456
  within?: string | undefined;
@@ -1338,8 +1462,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1338
1462
  } | undefined;
1339
1463
  mode?: string | undefined;
1340
1464
  } | undefined;
1341
- read?: {
1342
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1465
+ bash?: {
1466
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1343
1467
  requires?: {
1344
1468
  ledger_tag: string;
1345
1469
  within?: string | undefined;
@@ -1351,8 +1475,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1351
1475
  } | undefined;
1352
1476
  mode?: string | undefined;
1353
1477
  } | undefined;
1354
- edit?: {
1355
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1478
+ read?: {
1479
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1356
1480
  requires?: {
1357
1481
  ledger_tag: string;
1358
1482
  within?: string | undefined;
@@ -1364,8 +1488,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1364
1488
  } | undefined;
1365
1489
  mode?: string | undefined;
1366
1490
  } | undefined;
1367
- bash?: {
1368
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1491
+ edit?: {
1492
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1369
1493
  requires?: {
1370
1494
  ledger_tag: string;
1371
1495
  within?: string | undefined;
@@ -1378,7 +1502,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1378
1502
  mode?: string | undefined;
1379
1503
  } | undefined;
1380
1504
  commit?: {
1381
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1505
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1382
1506
  requires?: {
1383
1507
  ledger_tag: string;
1384
1508
  within?: string | undefined;
@@ -1391,7 +1515,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1391
1515
  mode?: string | undefined;
1392
1516
  } | undefined;
1393
1517
  pr?: {
1394
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1518
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1395
1519
  requires?: {
1396
1520
  ledger_tag: string;
1397
1521
  within?: string | undefined;
@@ -1404,7 +1528,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1404
1528
  mode?: string | undefined;
1405
1529
  } | undefined;
1406
1530
  deploy?: {
1407
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1531
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1408
1532
  requires?: {
1409
1533
  ledger_tag: string;
1410
1534
  within?: string | undefined;
@@ -1418,7 +1542,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1418
1542
  } | undefined;
1419
1543
  }, {
1420
1544
  push?: {
1421
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1545
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1422
1546
  requires?: {
1423
1547
  ledger_tag: string;
1424
1548
  within?: string | undefined;
@@ -1430,8 +1554,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1430
1554
  } | undefined;
1431
1555
  mode?: string | undefined;
1432
1556
  } | undefined;
1433
- read?: {
1434
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1557
+ bash?: {
1558
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1435
1559
  requires?: {
1436
1560
  ledger_tag: string;
1437
1561
  within?: string | undefined;
@@ -1443,8 +1567,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1443
1567
  } | undefined;
1444
1568
  mode?: string | undefined;
1445
1569
  } | undefined;
1446
- edit?: {
1447
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1570
+ read?: {
1571
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1448
1572
  requires?: {
1449
1573
  ledger_tag: string;
1450
1574
  within?: string | undefined;
@@ -1456,8 +1580,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1456
1580
  } | undefined;
1457
1581
  mode?: string | undefined;
1458
1582
  } | undefined;
1459
- bash?: {
1460
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1583
+ edit?: {
1584
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1461
1585
  requires?: {
1462
1586
  ledger_tag: string;
1463
1587
  within?: string | undefined;
@@ -1470,7 +1594,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1470
1594
  mode?: string | undefined;
1471
1595
  } | undefined;
1472
1596
  commit?: {
1473
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1597
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1474
1598
  requires?: {
1475
1599
  ledger_tag: string;
1476
1600
  within?: string | undefined;
@@ -1483,7 +1607,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1483
1607
  mode?: string | undefined;
1484
1608
  } | undefined;
1485
1609
  pr?: {
1486
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1610
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1487
1611
  requires?: {
1488
1612
  ledger_tag: string;
1489
1613
  within?: string | undefined;
@@ -1496,7 +1620,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1496
1620
  mode?: string | undefined;
1497
1621
  } | undefined;
1498
1622
  deploy?: {
1499
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1623
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1500
1624
  requires?: {
1501
1625
  ledger_tag: string;
1502
1626
  within?: string | undefined;
@@ -1512,7 +1636,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1512
1636
  }, "strict", z.ZodTypeAny, {
1513
1637
  actions: {
1514
1638
  push?: {
1515
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1639
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1516
1640
  requires?: {
1517
1641
  ledger_tag: string;
1518
1642
  within?: string | undefined;
@@ -1524,8 +1648,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1524
1648
  } | undefined;
1525
1649
  mode?: string | undefined;
1526
1650
  } | undefined;
1527
- read?: {
1528
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1651
+ bash?: {
1652
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1529
1653
  requires?: {
1530
1654
  ledger_tag: string;
1531
1655
  within?: string | undefined;
@@ -1537,8 +1661,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1537
1661
  } | undefined;
1538
1662
  mode?: string | undefined;
1539
1663
  } | undefined;
1540
- edit?: {
1541
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1664
+ read?: {
1665
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1542
1666
  requires?: {
1543
1667
  ledger_tag: string;
1544
1668
  within?: string | undefined;
@@ -1550,8 +1674,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1550
1674
  } | undefined;
1551
1675
  mode?: string | undefined;
1552
1676
  } | undefined;
1553
- bash?: {
1554
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1677
+ edit?: {
1678
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1555
1679
  requires?: {
1556
1680
  ledger_tag: string;
1557
1681
  within?: string | undefined;
@@ -1564,7 +1688,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1564
1688
  mode?: string | undefined;
1565
1689
  } | undefined;
1566
1690
  commit?: {
1567
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1691
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1568
1692
  requires?: {
1569
1693
  ledger_tag: string;
1570
1694
  within?: string | undefined;
@@ -1577,7 +1701,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1577
1701
  mode?: string | undefined;
1578
1702
  } | undefined;
1579
1703
  pr?: {
1580
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1704
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1581
1705
  requires?: {
1582
1706
  ledger_tag: string;
1583
1707
  within?: string | undefined;
@@ -1590,7 +1714,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1590
1714
  mode?: string | undefined;
1591
1715
  } | undefined;
1592
1716
  deploy?: {
1593
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
1717
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
1594
1718
  requires?: {
1595
1719
  ledger_tag: string;
1596
1720
  within?: string | undefined;
@@ -1608,7 +1732,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1608
1732
  description?: string | undefined;
1609
1733
  actions?: {
1610
1734
  push?: {
1611
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1735
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1612
1736
  requires?: {
1613
1737
  ledger_tag: string;
1614
1738
  within?: string | undefined;
@@ -1620,8 +1744,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1620
1744
  } | undefined;
1621
1745
  mode?: string | undefined;
1622
1746
  } | undefined;
1623
- read?: {
1624
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1747
+ bash?: {
1748
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1625
1749
  requires?: {
1626
1750
  ledger_tag: string;
1627
1751
  within?: string | undefined;
@@ -1633,8 +1757,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1633
1757
  } | undefined;
1634
1758
  mode?: string | undefined;
1635
1759
  } | undefined;
1636
- edit?: {
1637
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1760
+ read?: {
1761
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1638
1762
  requires?: {
1639
1763
  ledger_tag: string;
1640
1764
  within?: string | undefined;
@@ -1646,8 +1770,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1646
1770
  } | undefined;
1647
1771
  mode?: string | undefined;
1648
1772
  } | undefined;
1649
- bash?: {
1650
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1773
+ edit?: {
1774
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1651
1775
  requires?: {
1652
1776
  ledger_tag: string;
1653
1777
  within?: string | undefined;
@@ -1660,7 +1784,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1660
1784
  mode?: string | undefined;
1661
1785
  } | undefined;
1662
1786
  commit?: {
1663
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1787
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1664
1788
  requires?: {
1665
1789
  ledger_tag: string;
1666
1790
  within?: string | undefined;
@@ -1673,7 +1797,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1673
1797
  mode?: string | undefined;
1674
1798
  } | undefined;
1675
1799
  pr?: {
1676
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1800
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1677
1801
  requires?: {
1678
1802
  ledger_tag: string;
1679
1803
  within?: string | undefined;
@@ -1686,7 +1810,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
1686
1810
  mode?: string | undefined;
1687
1811
  } | undefined;
1688
1812
  deploy?: {
1689
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
1813
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
1690
1814
  requires?: {
1691
1815
  ledger_tag: string;
1692
1816
  within?: string | undefined;
@@ -2058,6 +2182,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2058
2182
  };
2059
2183
  hook: string;
2060
2184
  enforcement: "warn" | "block";
2185
+ producers?: ({
2186
+ command: string;
2187
+ description: string;
2188
+ kind: "bash";
2189
+ } | {
2190
+ description: string;
2191
+ kind: "mcp";
2192
+ verb: string;
2193
+ example: string;
2194
+ } | {
2195
+ command: string;
2196
+ description: string;
2197
+ kind: "ask";
2198
+ })[] | undefined;
2061
2199
  }[];
2062
2200
  policy_packs: {
2063
2201
  name: string;
@@ -2069,7 +2207,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2069
2207
  permission_profiles: Record<string, {
2070
2208
  actions: {
2071
2209
  push?: {
2072
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2210
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2073
2211
  requires?: {
2074
2212
  ledger_tag: string;
2075
2213
  within?: string | undefined;
@@ -2081,8 +2219,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2081
2219
  } | undefined;
2082
2220
  mode?: string | undefined;
2083
2221
  } | undefined;
2084
- read?: {
2085
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2222
+ bash?: {
2223
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2086
2224
  requires?: {
2087
2225
  ledger_tag: string;
2088
2226
  within?: string | undefined;
@@ -2094,8 +2232,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2094
2232
  } | undefined;
2095
2233
  mode?: string | undefined;
2096
2234
  } | undefined;
2097
- edit?: {
2098
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2235
+ read?: {
2236
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2099
2237
  requires?: {
2100
2238
  ledger_tag: string;
2101
2239
  within?: string | undefined;
@@ -2107,8 +2245,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2107
2245
  } | undefined;
2108
2246
  mode?: string | undefined;
2109
2247
  } | undefined;
2110
- bash?: {
2111
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2248
+ edit?: {
2249
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2112
2250
  requires?: {
2113
2251
  ledger_tag: string;
2114
2252
  within?: string | undefined;
@@ -2121,7 +2259,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2121
2259
  mode?: string | undefined;
2122
2260
  } | undefined;
2123
2261
  commit?: {
2124
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2262
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2125
2263
  requires?: {
2126
2264
  ledger_tag: string;
2127
2265
  within?: string | undefined;
@@ -2134,7 +2272,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2134
2272
  mode?: string | undefined;
2135
2273
  } | undefined;
2136
2274
  pr?: {
2137
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2275
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2138
2276
  requires?: {
2139
2277
  ledger_tag: string;
2140
2278
  within?: string | undefined;
@@ -2147,7 +2285,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2147
2285
  mode?: string | undefined;
2148
2286
  } | undefined;
2149
2287
  deploy?: {
2150
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2288
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2151
2289
  requires?: {
2152
2290
  ledger_tag: string;
2153
2291
  within?: string | undefined;
@@ -2294,6 +2432,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2294
2432
  };
2295
2433
  hook: string;
2296
2434
  enforcement: "warn" | "block";
2435
+ producers?: ({
2436
+ command: string;
2437
+ description: string;
2438
+ kind: "bash";
2439
+ } | {
2440
+ description: string;
2441
+ kind: "mcp";
2442
+ verb: string;
2443
+ example: string;
2444
+ } | {
2445
+ command: string;
2446
+ description: string;
2447
+ kind: "ask";
2448
+ })[] | undefined;
2297
2449
  }[] | undefined;
2298
2450
  policy_packs?: {
2299
2451
  name: string;
@@ -2306,7 +2458,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2306
2458
  description?: string | undefined;
2307
2459
  actions?: {
2308
2460
  push?: {
2309
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2461
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2310
2462
  requires?: {
2311
2463
  ledger_tag: string;
2312
2464
  within?: string | undefined;
@@ -2318,8 +2470,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2318
2470
  } | undefined;
2319
2471
  mode?: string | undefined;
2320
2472
  } | undefined;
2321
- read?: {
2322
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2473
+ bash?: {
2474
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2323
2475
  requires?: {
2324
2476
  ledger_tag: string;
2325
2477
  within?: string | undefined;
@@ -2331,8 +2483,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2331
2483
  } | undefined;
2332
2484
  mode?: string | undefined;
2333
2485
  } | undefined;
2334
- edit?: {
2335
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2486
+ read?: {
2487
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2336
2488
  requires?: {
2337
2489
  ledger_tag: string;
2338
2490
  within?: string | undefined;
@@ -2344,8 +2496,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2344
2496
  } | undefined;
2345
2497
  mode?: string | undefined;
2346
2498
  } | undefined;
2347
- bash?: {
2348
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2499
+ edit?: {
2500
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2349
2501
  requires?: {
2350
2502
  ledger_tag: string;
2351
2503
  within?: string | undefined;
@@ -2358,7 +2510,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2358
2510
  mode?: string | undefined;
2359
2511
  } | undefined;
2360
2512
  commit?: {
2361
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2513
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2362
2514
  requires?: {
2363
2515
  ledger_tag: string;
2364
2516
  within?: string | undefined;
@@ -2371,7 +2523,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2371
2523
  mode?: string | undefined;
2372
2524
  } | undefined;
2373
2525
  pr?: {
2374
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2526
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2375
2527
  requires?: {
2376
2528
  ledger_tag: string;
2377
2529
  within?: string | undefined;
@@ -2384,7 +2536,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2384
2536
  mode?: string | undefined;
2385
2537
  } | undefined;
2386
2538
  deploy?: {
2387
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2539
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2388
2540
  requires?: {
2389
2541
  ledger_tag: string;
2390
2542
  within?: string | undefined;
@@ -2530,6 +2682,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2530
2682
  };
2531
2683
  hook: string;
2532
2684
  enforcement: "warn" | "block";
2685
+ producers?: ({
2686
+ command: string;
2687
+ description: string;
2688
+ kind: "bash";
2689
+ } | {
2690
+ description: string;
2691
+ kind: "mcp";
2692
+ verb: string;
2693
+ example: string;
2694
+ } | {
2695
+ command: string;
2696
+ description: string;
2697
+ kind: "ask";
2698
+ })[] | undefined;
2533
2699
  }[];
2534
2700
  policy_packs: {
2535
2701
  name: string;
@@ -2541,7 +2707,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2541
2707
  permission_profiles: Record<string, {
2542
2708
  actions: {
2543
2709
  push?: {
2544
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2710
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2545
2711
  requires?: {
2546
2712
  ledger_tag: string;
2547
2713
  within?: string | undefined;
@@ -2553,8 +2719,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2553
2719
  } | undefined;
2554
2720
  mode?: string | undefined;
2555
2721
  } | undefined;
2556
- read?: {
2557
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2722
+ bash?: {
2723
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2558
2724
  requires?: {
2559
2725
  ledger_tag: string;
2560
2726
  within?: string | undefined;
@@ -2566,8 +2732,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2566
2732
  } | undefined;
2567
2733
  mode?: string | undefined;
2568
2734
  } | undefined;
2569
- edit?: {
2570
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2735
+ read?: {
2736
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2571
2737
  requires?: {
2572
2738
  ledger_tag: string;
2573
2739
  within?: string | undefined;
@@ -2579,8 +2745,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2579
2745
  } | undefined;
2580
2746
  mode?: string | undefined;
2581
2747
  } | undefined;
2582
- bash?: {
2583
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2748
+ edit?: {
2749
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2584
2750
  requires?: {
2585
2751
  ledger_tag: string;
2586
2752
  within?: string | undefined;
@@ -2593,7 +2759,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2593
2759
  mode?: string | undefined;
2594
2760
  } | undefined;
2595
2761
  commit?: {
2596
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2762
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2597
2763
  requires?: {
2598
2764
  ledger_tag: string;
2599
2765
  within?: string | undefined;
@@ -2606,7 +2772,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2606
2772
  mode?: string | undefined;
2607
2773
  } | undefined;
2608
2774
  pr?: {
2609
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2775
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2610
2776
  requires?: {
2611
2777
  ledger_tag: string;
2612
2778
  within?: string | undefined;
@@ -2619,7 +2785,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2619
2785
  mode?: string | undefined;
2620
2786
  } | undefined;
2621
2787
  deploy?: {
2622
- allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
2788
+ allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
2623
2789
  requires?: {
2624
2790
  ledger_tag: string;
2625
2791
  within?: string | undefined;
@@ -2766,6 +2932,20 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2766
2932
  };
2767
2933
  hook: string;
2768
2934
  enforcement: "warn" | "block";
2935
+ producers?: ({
2936
+ command: string;
2937
+ description: string;
2938
+ kind: "bash";
2939
+ } | {
2940
+ description: string;
2941
+ kind: "mcp";
2942
+ verb: string;
2943
+ example: string;
2944
+ } | {
2945
+ command: string;
2946
+ description: string;
2947
+ kind: "ask";
2948
+ })[] | undefined;
2769
2949
  }[] | undefined;
2770
2950
  policy_packs?: {
2771
2951
  name: string;
@@ -2778,7 +2958,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2778
2958
  description?: string | undefined;
2779
2959
  actions?: {
2780
2960
  push?: {
2781
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2961
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2782
2962
  requires?: {
2783
2963
  ledger_tag: string;
2784
2964
  within?: string | undefined;
@@ -2790,8 +2970,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2790
2970
  } | undefined;
2791
2971
  mode?: string | undefined;
2792
2972
  } | undefined;
2793
- read?: {
2794
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2973
+ bash?: {
2974
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2795
2975
  requires?: {
2796
2976
  ledger_tag: string;
2797
2977
  within?: string | undefined;
@@ -2803,8 +2983,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2803
2983
  } | undefined;
2804
2984
  mode?: string | undefined;
2805
2985
  } | undefined;
2806
- edit?: {
2807
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2986
+ read?: {
2987
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2808
2988
  requires?: {
2809
2989
  ledger_tag: string;
2810
2990
  within?: string | undefined;
@@ -2816,8 +2996,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2816
2996
  } | undefined;
2817
2997
  mode?: string | undefined;
2818
2998
  } | undefined;
2819
- bash?: {
2820
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
2999
+ edit?: {
3000
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2821
3001
  requires?: {
2822
3002
  ledger_tag: string;
2823
3003
  within?: string | undefined;
@@ -2830,7 +3010,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2830
3010
  mode?: string | undefined;
2831
3011
  } | undefined;
2832
3012
  commit?: {
2833
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
3013
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2834
3014
  requires?: {
2835
3015
  ledger_tag: string;
2836
3016
  within?: string | undefined;
@@ -2843,7 +3023,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2843
3023
  mode?: string | undefined;
2844
3024
  } | undefined;
2845
3025
  pr?: {
2846
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
3026
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2847
3027
  requires?: {
2848
3028
  ledger_tag: string;
2849
3029
  within?: string | undefined;
@@ -2856,7 +3036,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2856
3036
  mode?: string | undefined;
2857
3037
  } | undefined;
2858
3038
  deploy?: {
2859
- allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
3039
+ allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
2860
3040
  requires?: {
2861
3041
  ledger_tag: string;
2862
3042
  within?: string | undefined;