@lannguyensi/harness 0.25.2 → 0.27.0

package/dist/schema/index.d.ts

@@ -514,7 +514,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         }>;
         hook: z.ZodString;
-        enforcement: z.ZodEnum<["block", "warn"]>;
+        enforcement: z.ZodEnum<["block", "warn", "require_approval"]>;
         producers: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
             kind: z.ZodLiteral<"bash">;
             command: z.ZodString;
@@ -568,6 +568,32 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         }>>;
+        when: z.ZodOptional<z.ZodEffects<z.ZodObject<{
+            "risk.severity_at_least": z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
+            "risk.category_in": z.ZodOptional<z.ZodArray<z.ZodEnum<["destructive", "data_loss", "production_mutation", "credential_access", "secret_exfiltration", "network_exfiltration", "deployment_change", "infrastructure_change", "privilege_escalation", "irreversible_action", "mass_update"]>, "many">>;
+            "environment.name": z.ZodOptional<z.ZodEnum<["production", "staging", "dev", "local", "unknown"]>>;
+            "action.reversible": z.ZodOptional<z.ZodBoolean>;
+        }, "strict", z.ZodTypeAny, {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        }, {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        }>, {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        }, {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        }>>;
     }, "strict", z.ZodTypeAny, {
         name: string;
         description: string;
@@ -589,7 +615,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -609,6 +635,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }, {
         name: string;
         description: string;
@@ -630,7 +662,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -650,6 +682,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }>, {
         name: string;
         description: string;
@@ -671,7 +709,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -691,6 +729,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }, {
         name: string;
         description: string;
@@ -712,7 +756,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -732,6 +776,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }>, "many">, {
         name: string;
         description: string;
@@ -753,7 +803,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -773,6 +823,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }[], {
         name: string;
         description: string;
@@ -794,7 +850,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -814,6 +870,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }[]>>;
     policy_packs: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -846,6 +908,222 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         source?: string | undefined;
         config?: Record<string, unknown> | undefined;
     }[]>>;
+    risk: z.ZodDefault<z.ZodEffects<z.ZodObject<{
+        classifiers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            tool: z.ZodString;
+            patterns: z.ZodArray<z.ZodEffects<z.ZodObject<{
+                pattern: z.ZodString;
+                categories: z.ZodArray<z.ZodEnum<["destructive", "data_loss", "production_mutation", "credential_access", "secret_exfiltration", "network_exfiltration", "deployment_change", "infrastructure_change", "privilege_escalation", "irreversible_action", "mass_update"]>, "many">;
+                severity: z.ZodEnum<["low", "medium", "high", "critical"]>;
+            }, "strict", z.ZodTypeAny, {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }, {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }>, {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }, {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }>, "many">;
+        }, "strict", z.ZodTypeAny, {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }, {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }>, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        classifiers: {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }[];
+    }, {
+        classifiers?: {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }[] | undefined;
+    }>, {
+        classifiers: {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }[];
+    }, {
+        classifiers?: {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }[] | undefined;
+    }>>;
+    environments: z.ZodDefault<z.ZodEffects<z.ZodObject<{
+        resolvers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            environment: z.ZodEnum<["production", "staging", "dev", "local"]>;
+            signals: z.ZodEffects<z.ZodObject<{
+                branch_patterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                env_var_patterns: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    var: z.ZodString;
+                    patterns: z.ZodArray<z.ZodString, "many">;
+                }, "strict", z.ZodTypeAny, {
+                    var: string;
+                    patterns: string[];
+                }, {
+                    var: string;
+                    patterns: string[];
+                }>, "many">>;
+                kube_context_patterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                kube_namespace_patterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            }, "strict", z.ZodTypeAny, {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            }, {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            }>, {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            }, {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            }>;
+        }, "strict", z.ZodTypeAny, {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }, {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }>, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        resolvers: {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }[];
+    }, {
+        resolvers?: {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }[] | undefined;
+    }>, {
+        resolvers: {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }[];
+    }, {
+        resolvers?: {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }[] | undefined;
+    }>>;
     permission_profiles: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         description: z.ZodOptional<z.ZodString>;
         actions: z.ZodDefault<z.ZodObject<{
@@ -2297,7 +2575,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -2317,6 +2595,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }[];
     policy_packs: {
         name: string;
@@ -2325,6 +2609,32 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         config: Record<string, unknown>;
         description?: string | undefined;
     }[];
+    risk: {
+        classifiers: {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }[];
+    };
+    environments: {
+        resolvers: {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }[];
+    };
     permission_profiles: Record<string, {
         actions: {
             push?: {
@@ -2560,7 +2870,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -2580,6 +2890,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }[] | undefined;
     policy_packs?: {
         name: string;
@@ -2588,6 +2904,32 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         source?: string | undefined;
         config?: Record<string, unknown> | undefined;
     }[] | undefined;
+    risk?: {
+        classifiers?: {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }[] | undefined;
+    } | undefined;
+    environments?: {
+        resolvers?: {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }[] | undefined;
+    } | undefined;
     permission_profiles?: Record<string, {
         description?: string | undefined;
         actions?: {
@@ -2823,7 +3165,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -2843,6 +3185,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }[];
     policy_packs: {
         name: string;
@@ -2851,6 +3199,32 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         config: Record<string, unknown>;
         description?: string | undefined;
     }[];
+    risk: {
+        classifiers: {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }[];
+    };
+    environments: {
+        resolvers: {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }[];
+    };
     permission_profiles: Record<string, {
         actions: {
             push?: {
@@ -3086,7 +3460,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             at_head?: boolean | undefined;
         };
         hook: string;
-        enforcement: "warn" | "block";
+        enforcement: "warn" | "block" | "require_approval";
         producers?: ({
             command: string;
             description: string;
@@ -3106,6 +3480,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: string[];
             run: string[];
         } | undefined;
+        when?: {
+            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
+            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
+            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
+            "action.reversible"?: boolean | undefined;
+        } | undefined;
     }[] | undefined;
     policy_packs?: {
         name: string;
@@ -3114,6 +3494,32 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         source?: string | undefined;
         config?: Record<string, unknown> | undefined;
     }[] | undefined;
+    risk?: {
+        classifiers?: {
+            patterns: {
+                pattern: string;
+                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
+                severity: "low" | "medium" | "high" | "critical";
+            }[];
+            name: string;
+            tool: string;
+        }[] | undefined;
+    } | undefined;
+    environments?: {
+        resolvers?: {
+            name: string;
+            environment: "production" | "staging" | "dev" | "local";
+            signals: {
+                branch_patterns?: string[] | undefined;
+                env_var_patterns?: {
+                    var: string;
+                    patterns: string[];
+                }[] | undefined;
+                kube_context_patterns?: string[] | undefined;
+                kube_namespace_patterns?: string[] | undefined;
+            };
+        }[] | undefined;
+    } | undefined;
     permission_profiles?: Record<string, {
         description?: string | undefined;
         actions?: {
@@ -3267,6 +3673,8 @@ export * from "./hooks.js";
 export * from "./permission-profiles.js";
 export * from "./policies.js";
 export * from "./policy-packs.js";
+export * from "./risk.js";
+export * from "./environments.js";
 export * from "./workflows.js";
 export * from "./audit.js";
 export * from "./extract.js";

package/dist/schema/index.js

@@ -1,10 +1,12 @@
 import { z } from "zod";
+import { EnvironmentsSchema } from "./environments.js";
 import { GroundingSchema } from "./grounding.js";
 import { HooksSchema } from "./hooks.js";
 import { MemorySchema } from "./memory.js";
 import { PoliciesSchema } from "./policies.js";
 import { PermissionProfilesSchema } from "./permission-profiles.js";
 import { PolicyPacksSchema } from "./policy-packs.js";
+import { RiskSchema } from "./risk.js";
 import { ToolsSchema } from "./tools.js";
 import { AuditSchema } from "./audit.js";
 import { ReviewTemplatesSchema, WorkflowsSchema } from "./workflows.js";
@@ -18,6 +20,10 @@ export const ManifestSchema = z
     hooks: HooksSchema.default([]),
     policies: PoliciesSchema.default([]),
     policy_packs: PolicyPacksSchema.default([]),
+    // Phase 7 Risk Gate inputs — schema vocabulary only, no runtime
+    // surface reads them yet. See docs/risk-gate.md.
+    risk: RiskSchema.default({}),
+    environments: EnvironmentsSchema.default({}),
     permission_profiles: PermissionProfilesSchema.default({}),
     workflows: WorkflowsSchema.default([]),
     review_templates: ReviewTemplatesSchema.default({}),
@@ -75,6 +81,8 @@ export * from "./hooks.js";
 export * from "./permission-profiles.js";
 export * from "./policies.js";
 export * from "./policy-packs.js";
+export * from "./risk.js";
+export * from "./environments.js";
 export * from "./workflows.js";
 export * from "./audit.js";
 export * from "./extract.js";