@lannguyensi/harness 0.40.0 → 0.42.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (189) hide show
  1. package/CHANGELOG.md +68 -0
  2. package/README.md +9 -0
  3. package/dist/cli/adopt/derive.d.ts +15 -0
  4. package/dist/cli/adopt/derive.js +34 -7
  5. package/dist/cli/adopt/derive.js.map +1 -1
  6. package/dist/cli/adopt/index.d.ts +30 -0
  7. package/dist/cli/adopt/index.js +23 -3
  8. package/dist/cli/adopt/index.js.map +1 -1
  9. package/dist/cli/apply/generate-settings.d.ts +14 -1
  10. package/dist/cli/apply/generate-settings.js +7 -3
  11. package/dist/cli/apply/generate-settings.js.map +1 -1
  12. package/dist/cli/approve/stdin-report.js +2 -0
  13. package/dist/cli/approve/stdin-report.js.map +1 -1
  14. package/dist/cli/approve/understanding.js +28 -0
  15. package/dist/cli/approve/understanding.js.map +1 -1
  16. package/dist/cli/doctor/claude-mcp.d.ts +50 -0
  17. package/dist/cli/doctor/claude-mcp.js +170 -0
  18. package/dist/cli/doctor/claude-mcp.js.map +1 -0
  19. package/dist/cli/doctor/codex.d.ts +8 -0
  20. package/dist/cli/doctor/codex.js +8 -1
  21. package/dist/cli/doctor/codex.js.map +1 -1
  22. package/dist/cli/doctor/format.js +60 -11
  23. package/dist/cli/doctor/format.js.map +1 -1
  24. package/dist/cli/doctor/index.d.ts +46 -0
  25. package/dist/cli/doctor/index.js +155 -29
  26. package/dist/cli/doctor/index.js.map +1 -1
  27. package/dist/cli/doctor/npm-bin-path.js +42 -0
  28. package/dist/cli/doctor/npm-bin-path.js.map +1 -1
  29. package/dist/cli/doctor/types.d.ts +37 -0
  30. package/dist/cli/doctor/types.js.map +1 -1
  31. package/dist/cli/dry-run.js +5 -0
  32. package/dist/cli/dry-run.js.map +1 -1
  33. package/dist/cli/explain.js +16 -3
  34. package/dist/cli/explain.js.map +1 -1
  35. package/dist/cli/index.js +328 -11
  36. package/dist/cli/index.js.map +1 -1
  37. package/dist/cli/init/agent-tasks-auth.js +32 -0
  38. package/dist/cli/init/agent-tasks-auth.js.map +1 -1
  39. package/dist/cli/init/composer.js +13 -40
  40. package/dist/cli/init/composer.js.map +1 -1
  41. package/dist/cli/init/dependencies.js +21 -0
  42. package/dist/cli/init/dependencies.js.map +1 -1
  43. package/dist/cli/init/detect.d.ts +20 -3
  44. package/dist/cli/init/detect.js +34 -36
  45. package/dist/cli/init/detect.js.map +1 -1
  46. package/dist/cli/init/index.d.ts +18 -0
  47. package/dist/cli/init/index.js +28 -2
  48. package/dist/cli/init/index.js.map +1 -1
  49. package/dist/cli/init/interactive.d.ts +41 -0
  50. package/dist/cli/init/interactive.js +421 -6
  51. package/dist/cli/init/interactive.js.map +1 -1
  52. package/dist/cli/init/profiles.d.ts +2 -2
  53. package/dist/cli/init/profiles.js +10 -1
  54. package/dist/cli/init/profiles.js.map +1 -1
  55. package/dist/cli/init/templates.d.ts +1 -1
  56. package/dist/cli/init/templates.js +217 -8
  57. package/dist/cli/init/templates.js.map +1 -1
  58. package/dist/cli/list.js +3 -1
  59. package/dist/cli/list.js.map +1 -1
  60. package/dist/cli/main.js +10 -0
  61. package/dist/cli/main.js.map +1 -1
  62. package/dist/cli/pack/hook-bootstrap.d.ts +24 -0
  63. package/dist/cli/pack/hook-bootstrap.js +47 -1
  64. package/dist/cli/pack/hook-bootstrap.js.map +1 -1
  65. package/dist/cli/pack/hook-branch-protection.js +9 -1
  66. package/dist/cli/pack/hook-branch-protection.js.map +1 -1
  67. package/dist/cli/pack/hook-codex-post-tool-use.d.ts +25 -0
  68. package/dist/cli/pack/hook-codex-post-tool-use.js +160 -0
  69. package/dist/cli/pack/hook-codex-post-tool-use.js.map +1 -0
  70. package/dist/cli/pack/hook-codex-pre-tool-use.d.ts +1 -0
  71. package/dist/cli/pack/hook-codex-pre-tool-use.js +43 -10
  72. package/dist/cli/pack/hook-codex-pre-tool-use.js.map +1 -1
  73. package/dist/cli/pack/hook-codex-stop.js +1 -8
  74. package/dist/cli/pack/hook-codex-stop.js.map +1 -1
  75. package/dist/cli/pack/hook-post-merge-gate-record.d.ts +30 -0
  76. package/dist/cli/pack/hook-post-merge-gate-record.js +153 -0
  77. package/dist/cli/pack/hook-post-merge-gate-record.js.map +1 -0
  78. package/dist/cli/pack/hook-post-merge-gate.d.ts +28 -0
  79. package/dist/cli/pack/hook-post-merge-gate.js +244 -0
  80. package/dist/cli/pack/hook-post-merge-gate.js.map +1 -0
  81. package/dist/cli/pack/hook-post-tool-use.js +16 -131
  82. package/dist/cli/pack/hook-post-tool-use.js.map +1 -1
  83. package/dist/cli/pack/hook-pre-tool-use.js +54 -2
  84. package/dist/cli/pack/hook-pre-tool-use.js.map +1 -1
  85. package/dist/cli/pack/hook-solution-acceptance-writeguard.js +148 -2
  86. package/dist/cli/pack/hook-solution-acceptance-writeguard.js.map +1 -1
  87. package/dist/cli/pack/hook-stay-in-scope.js +63 -20
  88. package/dist/cli/pack/hook-stay-in-scope.js.map +1 -1
  89. package/dist/cli/pack/hook-track-active-claim.js +33 -9
  90. package/dist/cli/pack/hook-track-active-claim.js.map +1 -1
  91. package/dist/cli/pack/index.d.ts +2 -1
  92. package/dist/cli/pack/index.js +2 -1
  93. package/dist/cli/pack/index.js.map +1 -1
  94. package/dist/cli/pack/mutate.d.ts +19 -0
  95. package/dist/cli/pack/mutate.js +38 -0
  96. package/dist/cli/pack/mutate.js.map +1 -1
  97. package/dist/cli/pack/reseed.d.ts +19 -0
  98. package/dist/cli/pack/reseed.js +118 -0
  99. package/dist/cli/pack/reseed.js.map +1 -0
  100. package/dist/cli/pack/understanding-report-schema-hint.js +1 -1
  101. package/dist/cli/pack/understanding-report-schema-hint.js.map +1 -1
  102. package/dist/cli/pause/index.js +12 -3
  103. package/dist/cli/pause/index.js.map +1 -1
  104. package/dist/cli/record/index.d.ts +64 -0
  105. package/dist/cli/record/index.js +211 -0
  106. package/dist/cli/record/index.js.map +1 -0
  107. package/dist/cli/session-start/index.d.ts +21 -0
  108. package/dist/cli/session-start/index.js +160 -25
  109. package/dist/cli/session-start/index.js.map +1 -1
  110. package/dist/cli/session-start/toolchain-parity.d.ts +149 -0
  111. package/dist/cli/session-start/toolchain-parity.js +618 -0
  112. package/dist/cli/session-start/toolchain-parity.js.map +1 -0
  113. package/dist/cli/uninstall/index.d.ts +73 -1
  114. package/dist/cli/uninstall/index.js +134 -2
  115. package/dist/cli/uninstall/index.js.map +1 -1
  116. package/dist/cli/validate/checks.js +8 -0
  117. package/dist/cli/validate/checks.js.map +1 -1
  118. package/dist/io/claude-mcp.d.ts +258 -0
  119. package/dist/io/claude-mcp.js +544 -0
  120. package/dist/io/claude-mcp.js.map +1 -0
  121. package/dist/policies/ledger-client.d.ts +34 -1
  122. package/dist/policies/ledger-client.js +21 -16
  123. package/dist/policies/ledger-client.js.map +1 -1
  124. package/dist/policy-packs/builtin/branch-protection-runtime.d.ts +4 -2
  125. package/dist/policy-packs/builtin/branch-protection-runtime.js +4 -2
  126. package/dist/policy-packs/builtin/branch-protection-runtime.js.map +1 -1
  127. package/dist/policy-packs/builtin/branch-protection.d.ts +10 -1
  128. package/dist/policy-packs/builtin/branch-protection.js +17 -0
  129. package/dist/policy-packs/builtin/branch-protection.js.map +1 -1
  130. package/dist/policy-packs/builtin/post-merge-gate-runtime.d.ts +195 -0
  131. package/dist/policy-packs/builtin/post-merge-gate-runtime.js +290 -0
  132. package/dist/policy-packs/builtin/post-merge-gate-runtime.js.map +1 -0
  133. package/dist/policy-packs/builtin/post-merge-gate.d.ts +56 -0
  134. package/dist/policy-packs/builtin/post-merge-gate.js +291 -0
  135. package/dist/policy-packs/builtin/post-merge-gate.js.map +1 -0
  136. package/dist/policy-packs/builtin/solution-acceptance-runtime.js +28 -13
  137. package/dist/policy-packs/builtin/solution-acceptance-runtime.js.map +1 -1
  138. package/dist/policy-packs/builtin/understanding-before-execution-runtime.d.ts +197 -24
  139. package/dist/policy-packs/builtin/understanding-before-execution-runtime.js +342 -40
  140. package/dist/policy-packs/builtin/understanding-before-execution-runtime.js.map +1 -1
  141. package/dist/policy-packs/builtin/understanding-before-execution.d.ts +26 -1
  142. package/dist/policy-packs/builtin/understanding-before-execution.js +302 -17
  143. package/dist/policy-packs/builtin/understanding-before-execution.js.map +1 -1
  144. package/dist/policy-packs/registry.d.ts +23 -2
  145. package/dist/policy-packs/registry.js +31 -2
  146. package/dist/policy-packs/registry.js.map +1 -1
  147. package/dist/policy-packs/ux-compare.d.ts +14 -0
  148. package/dist/policy-packs/ux-compare.js +58 -0
  149. package/dist/policy-packs/ux-compare.js.map +1 -0
  150. package/dist/policy-packs/ux-drift-check.d.ts +27 -0
  151. package/dist/policy-packs/ux-drift-check.js +78 -0
  152. package/dist/policy-packs/ux-drift-check.js.map +1 -0
  153. package/dist/probes/mcp.d.ts +13 -0
  154. package/dist/probes/mcp.js +57 -0
  155. package/dist/probes/mcp.js.map +1 -1
  156. package/dist/runtime/approval-signing.d.ts +82 -0
  157. package/dist/runtime/approval-signing.js +275 -0
  158. package/dist/runtime/approval-signing.js.map +1 -0
  159. package/dist/runtime/git-context.d.ts +50 -0
  160. package/dist/runtime/git-context.js +108 -1
  161. package/dist/runtime/git-context.js.map +1 -1
  162. package/dist/runtime/hermetic-spawn-guard.d.ts +25 -0
  163. package/dist/runtime/hermetic-spawn-guard.js +136 -0
  164. package/dist/runtime/hermetic-spawn-guard.js.map +1 -0
  165. package/dist/runtime/intercept.js +62 -5
  166. package/dist/runtime/intercept.js.map +1 -1
  167. package/dist/runtime/ledger-writer.d.ts +27 -0
  168. package/dist/runtime/ledger-writer.js +46 -0
  169. package/dist/runtime/ledger-writer.js.map +1 -0
  170. package/dist/runtime/pause-sentinel.js +14 -3
  171. package/dist/runtime/pause-sentinel.js.map +1 -1
  172. package/dist/runtime/read-only-bash.js +118 -0
  173. package/dist/runtime/read-only-bash.js.map +1 -1
  174. package/dist/runtime/recovery-git-commit.d.ts +22 -0
  175. package/dist/runtime/recovery-git-commit.js +284 -0
  176. package/dist/runtime/recovery-git-commit.js.map +1 -0
  177. package/dist/runtime/tool-name-aliases.d.ts +1 -0
  178. package/dist/runtime/tool-name-aliases.js +7 -1
  179. package/dist/runtime/tool-name-aliases.js.map +1 -1
  180. package/dist/schema/index.d.ts +94 -42
  181. package/dist/schema/index.js +5 -0
  182. package/dist/schema/index.js.map +1 -1
  183. package/dist/schema/policies.d.ts +56 -44
  184. package/dist/schema/policies.js +79 -9
  185. package/dist/schema/policies.js.map +1 -1
  186. package/dist/schema/toolchain-parity.d.ts +18 -0
  187. package/dist/schema/toolchain-parity.js +35 -0
  188. package/dist/schema/toolchain-parity.js.map +1 -0
  189. package/package.json +4 -2
@@ -445,7 +445,7 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
445
445
  bash_match?: string | undefined;
446
446
  extract?: Record<string, string> | undefined;
447
447
  }>;
448
- requires: z.ZodObject<{
448
+ requires: z.ZodOptional<z.ZodObject<{
449
449
  ledger_tag: z.ZodString;
450
450
  within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
451
451
  count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
@@ -512,9 +512,10 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
512
512
  max?: number | undefined;
513
513
  } | undefined;
514
514
  at_head?: boolean | undefined;
515
- }>;
515
+ }>>;
516
516
  hook: z.ZodString;
517
517
  enforcement: z.ZodEnum<["block", "warn", "require_approval"]>;
518
+ operator_only: z.ZodOptional<z.ZodBoolean>;
518
519
  producers: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
519
520
  kind: z.ZodLiteral<"bash">;
520
521
  command: z.ZodString;
@@ -604,7 +605,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
604
605
  bash_match?: string | undefined;
605
606
  extract?: Record<string, string> | undefined;
606
607
  };
607
- requires: {
608
+ hook: string;
609
+ enforcement: "warn" | "block" | "require_approval";
610
+ requires?: {
608
611
  ledger_tag: string;
609
612
  within?: string | undefined;
610
613
  count?: {
@@ -613,9 +616,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
613
616
  max?: number | undefined;
614
617
  } | undefined;
615
618
  at_head?: boolean | undefined;
616
- };
617
- hook: string;
618
- enforcement: "warn" | "block" | "require_approval";
619
+ } | undefined;
620
+ operator_only?: boolean | undefined;
619
621
  producers?: ({
620
622
  command: string;
621
623
  description: string;
@@ -651,7 +653,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
651
653
  bash_match?: string | undefined;
652
654
  extract?: Record<string, string> | undefined;
653
655
  };
654
- requires: {
656
+ hook: string;
657
+ enforcement: "warn" | "block" | "require_approval";
658
+ requires?: {
655
659
  ledger_tag: string;
656
660
  within?: string | undefined;
657
661
  count?: {
@@ -660,9 +664,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
660
664
  max?: number | undefined;
661
665
  } | undefined;
662
666
  at_head?: boolean | undefined;
663
- };
664
- hook: string;
665
- enforcement: "warn" | "block" | "require_approval";
667
+ } | undefined;
668
+ operator_only?: boolean | undefined;
666
669
  producers?: ({
667
670
  command: string;
668
671
  description: string;
@@ -698,7 +701,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
698
701
  bash_match?: string | undefined;
699
702
  extract?: Record<string, string> | undefined;
700
703
  };
701
- requires: {
704
+ hook: string;
705
+ enforcement: "warn" | "block" | "require_approval";
706
+ requires?: {
702
707
  ledger_tag: string;
703
708
  within?: string | undefined;
704
709
  count?: {
@@ -707,9 +712,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
707
712
  max?: number | undefined;
708
713
  } | undefined;
709
714
  at_head?: boolean | undefined;
710
- };
711
- hook: string;
712
- enforcement: "warn" | "block" | "require_approval";
715
+ } | undefined;
716
+ operator_only?: boolean | undefined;
713
717
  producers?: ({
714
718
  command: string;
715
719
  description: string;
@@ -745,7 +749,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
745
749
  bash_match?: string | undefined;
746
750
  extract?: Record<string, string> | undefined;
747
751
  };
748
- requires: {
752
+ hook: string;
753
+ enforcement: "warn" | "block" | "require_approval";
754
+ requires?: {
749
755
  ledger_tag: string;
750
756
  within?: string | undefined;
751
757
  count?: {
@@ -754,9 +760,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
754
760
  max?: number | undefined;
755
761
  } | undefined;
756
762
  at_head?: boolean | undefined;
757
- };
758
- hook: string;
759
- enforcement: "warn" | "block" | "require_approval";
763
+ } | undefined;
764
+ operator_only?: boolean | undefined;
760
765
  producers?: ({
761
766
  command: string;
762
767
  description: string;
@@ -792,7 +797,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
792
797
  bash_match?: string | undefined;
793
798
  extract?: Record<string, string> | undefined;
794
799
  };
795
- requires: {
800
+ hook: string;
801
+ enforcement: "warn" | "block" | "require_approval";
802
+ requires?: {
796
803
  ledger_tag: string;
797
804
  within?: string | undefined;
798
805
  count?: {
@@ -801,9 +808,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
801
808
  max?: number | undefined;
802
809
  } | undefined;
803
810
  at_head?: boolean | undefined;
804
- };
805
- hook: string;
806
- enforcement: "warn" | "block" | "require_approval";
811
+ } | undefined;
812
+ operator_only?: boolean | undefined;
807
813
  producers?: ({
808
814
  command: string;
809
815
  description: string;
@@ -839,7 +845,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
839
845
  bash_match?: string | undefined;
840
846
  extract?: Record<string, string> | undefined;
841
847
  };
842
- requires: {
848
+ hook: string;
849
+ enforcement: "warn" | "block" | "require_approval";
850
+ requires?: {
843
851
  ledger_tag: string;
844
852
  within?: string | undefined;
845
853
  count?: {
@@ -848,9 +856,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
848
856
  max?: number | undefined;
849
857
  } | undefined;
850
858
  at_head?: boolean | undefined;
851
- };
852
- hook: string;
853
- enforcement: "warn" | "block" | "require_approval";
859
+ } | undefined;
860
+ operator_only?: boolean | undefined;
854
861
  producers?: ({
855
862
  command: string;
856
863
  description: string;
@@ -2484,6 +2491,22 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2484
2491
  replacement?: string | undefined;
2485
2492
  })[] | undefined;
2486
2493
  }>>;
2494
+ toolchain_parity: z.ZodDefault<z.ZodObject<{
2495
+ enabled: z.ZodDefault<z.ZodBoolean>;
2496
+ machine_state_dir: z.ZodOptional<z.ZodString>;
2497
+ profile: z.ZodOptional<z.ZodString>;
2498
+ workspace_root: z.ZodOptional<z.ZodString>;
2499
+ }, "strict", z.ZodTypeAny, {
2500
+ enabled: boolean;
2501
+ machine_state_dir?: string | undefined;
2502
+ profile?: string | undefined;
2503
+ workspace_root?: string | undefined;
2504
+ }, {
2505
+ enabled?: boolean | undefined;
2506
+ machine_state_dir?: string | undefined;
2507
+ profile?: string | undefined;
2508
+ workspace_root?: string | undefined;
2509
+ }>>;
2487
2510
  }, "strict", z.ZodTypeAny, {
2488
2511
  version: 1;
2489
2512
  grounding: {
@@ -2569,7 +2592,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2569
2592
  bash_match?: string | undefined;
2570
2593
  extract?: Record<string, string> | undefined;
2571
2594
  };
2572
- requires: {
2595
+ hook: string;
2596
+ enforcement: "warn" | "block" | "require_approval";
2597
+ requires?: {
2573
2598
  ledger_tag: string;
2574
2599
  within?: string | undefined;
2575
2600
  count?: {
@@ -2578,9 +2603,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2578
2603
  max?: number | undefined;
2579
2604
  } | undefined;
2580
2605
  at_head?: boolean | undefined;
2581
- };
2582
- hook: string;
2583
- enforcement: "warn" | "block" | "require_approval";
2606
+ } | undefined;
2607
+ operator_only?: boolean | undefined;
2584
2608
  producers?: ({
2585
2609
  command: string;
2586
2610
  description: string;
@@ -2780,6 +2804,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2780
2804
  env_var: string;
2781
2805
  })[];
2782
2806
  };
2807
+ toolchain_parity: {
2808
+ enabled: boolean;
2809
+ machine_state_dir?: string | undefined;
2810
+ profile?: string | undefined;
2811
+ workspace_root?: string | undefined;
2812
+ };
2783
2813
  }, {
2784
2814
  version: 1;
2785
2815
  grounding?: {
@@ -2865,7 +2895,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2865
2895
  bash_match?: string | undefined;
2866
2896
  extract?: Record<string, string> | undefined;
2867
2897
  };
2868
- requires: {
2898
+ hook: string;
2899
+ enforcement: "warn" | "block" | "require_approval";
2900
+ requires?: {
2869
2901
  ledger_tag: string;
2870
2902
  within?: string | undefined;
2871
2903
  count?: {
@@ -2874,9 +2906,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
2874
2906
  max?: number | undefined;
2875
2907
  } | undefined;
2876
2908
  at_head?: boolean | undefined;
2877
- };
2878
- hook: string;
2879
- enforcement: "warn" | "block" | "require_approval";
2909
+ } | undefined;
2910
+ operator_only?: boolean | undefined;
2880
2911
  producers?: ({
2881
2912
  command: string;
2882
2913
  description: string;
@@ -3076,6 +3107,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
3076
3107
  replacement?: string | undefined;
3077
3108
  })[] | undefined;
3078
3109
  } | undefined;
3110
+ toolchain_parity?: {
3111
+ enabled?: boolean | undefined;
3112
+ machine_state_dir?: string | undefined;
3113
+ profile?: string | undefined;
3114
+ workspace_root?: string | undefined;
3115
+ } | undefined;
3079
3116
  }>, {
3080
3117
  version: 1;
3081
3118
  grounding: {
@@ -3161,7 +3198,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
3161
3198
  bash_match?: string | undefined;
3162
3199
  extract?: Record<string, string> | undefined;
3163
3200
  };
3164
- requires: {
3201
+ hook: string;
3202
+ enforcement: "warn" | "block" | "require_approval";
3203
+ requires?: {
3165
3204
  ledger_tag: string;
3166
3205
  within?: string | undefined;
3167
3206
  count?: {
@@ -3170,9 +3209,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
3170
3209
  max?: number | undefined;
3171
3210
  } | undefined;
3172
3211
  at_head?: boolean | undefined;
3173
- };
3174
- hook: string;
3175
- enforcement: "warn" | "block" | "require_approval";
3212
+ } | undefined;
3213
+ operator_only?: boolean | undefined;
3176
3214
  producers?: ({
3177
3215
  command: string;
3178
3216
  description: string;
@@ -3372,6 +3410,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
3372
3410
  env_var: string;
3373
3411
  })[];
3374
3412
  };
3413
+ toolchain_parity: {
3414
+ enabled: boolean;
3415
+ machine_state_dir?: string | undefined;
3416
+ profile?: string | undefined;
3417
+ workspace_root?: string | undefined;
3418
+ };
3375
3419
  }, {
3376
3420
  version: 1;
3377
3421
  grounding?: {
@@ -3457,7 +3501,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
3457
3501
  bash_match?: string | undefined;
3458
3502
  extract?: Record<string, string> | undefined;
3459
3503
  };
3460
- requires: {
3504
+ hook: string;
3505
+ enforcement: "warn" | "block" | "require_approval";
3506
+ requires?: {
3461
3507
  ledger_tag: string;
3462
3508
  within?: string | undefined;
3463
3509
  count?: {
@@ -3466,9 +3512,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
3466
3512
  max?: number | undefined;
3467
3513
  } | undefined;
3468
3514
  at_head?: boolean | undefined;
3469
- };
3470
- hook: string;
3471
- enforcement: "warn" | "block" | "require_approval";
3515
+ } | undefined;
3516
+ operator_only?: boolean | undefined;
3472
3517
  producers?: ({
3473
3518
  command: string;
3474
3519
  description: string;
@@ -3668,6 +3713,12 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
3668
3713
  replacement?: string | undefined;
3669
3714
  })[] | undefined;
3670
3715
  } | undefined;
3716
+ toolchain_parity?: {
3717
+ enabled?: boolean | undefined;
3718
+ machine_state_dir?: string | undefined;
3719
+ profile?: string | undefined;
3720
+ workspace_root?: string | undefined;
3721
+ } | undefined;
3671
3722
  }>;
3672
3723
  export type Manifest = z.infer<typeof ManifestSchema>;
3673
3724
  export declare class ManifestParseError extends Error {
@@ -3683,6 +3734,7 @@ export * from "./permission-profiles.js";
3683
3734
  export * from "./policies.js";
3684
3735
  export * from "./policy-packs.js";
3685
3736
  export * from "./risk.js";
3737
+ export * from "./toolchain-parity.js";
3686
3738
  export * from "./environments.js";
3687
3739
  export * from "./workflows.js";
3688
3740
  export * from "./audit.js";
@@ -8,6 +8,7 @@ import { PermissionProfilesSchema } from "./permission-profiles.js";
8
8
  import { PolicyPacksSchema } from "./policy-packs.js";
9
9
  import { RiskSchema } from "./risk.js";
10
10
  import { ToolsSchema } from "./tools.js";
11
+ import { ToolchainParitySchema } from "./toolchain-parity.js";
11
12
  import { AuditSchema } from "./audit.js";
12
13
  import { ReviewTemplatesSchema, WorkflowsSchema } from "./workflows.js";
13
14
  export const SUPPORTED_MANIFEST_VERSION = 1;
@@ -32,6 +33,9 @@ export const ManifestSchema = z
32
33
  workflows: WorkflowsSchema.default([]),
33
34
  review_templates: ReviewTemplatesSchema.default({}),
34
35
  audit: AuditSchema.default({}),
36
+ // Optional, default-OFF: `harness session-start toolchain-parity`
37
+ // snapshot + peer-drift-compare config. See ./toolchain-parity.ts.
38
+ toolchain_parity: ToolchainParitySchema.default({}),
35
39
  })
36
40
  .strict()
37
41
  .superRefine((manifest, ctx) => {
@@ -119,6 +123,7 @@ export * from "./permission-profiles.js";
119
123
  export * from "./policies.js";
120
124
  export * from "./policy-packs.js";
121
125
  export * from "./risk.js";
126
+ export * from "./toolchain-parity.js";
122
127
  export * from "./environments.js";
123
128
  export * from "./workflows.js";
124
129
  export * from "./audit.js";
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAExE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9C,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,YAAY,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,uDAAuD;IACvD,mEAAmE;IACnE,8DAA8D;IAC9D,yDAAyD;IACzD,oEAAoE;IACpE,yBAAyB;IACzB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,mBAAmB,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC;gBAC7B,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,IAAI,oCAAoC;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;QACpC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtC,GAAG,CAAC,QAAQ,CAAC;wBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;wBAC3B,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC;wBAChD,OAAO,EAAE,6BAA6B,IAAI,CAAC,QAAQ,sCAAsC;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAIL,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB;IAFlB,YACE,OAAe,EACC,MAAoB;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAc;QAGpC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAAC,MAAoB,EAAE,GAAY;IAC/D,MAAM,QAAQ,GACZ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAC5D,CAAC,CAAE,GAA+B,CAAC,SAAS,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,OAAe,CAAC;QACpB,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,OAAO,GAAG,4CAA4C,0BAA0B,0CAA0C,0BAA0B,GAAG,CAAC;QAC1J,CAAC;aAAM,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,GAAG,0BAA0B,EAAE,CAAC;YACjF,OAAO,GAAG,sCAAsC,0BAA0B,oCAAoC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,2HAA2H,CAAC;QACpQ,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,gCAAgC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,wCAAwC,0BAA0B,oBAAoB,0BAA0B,eAAe,CAAC;QACpM,CAAC;QACD,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,kBAAkB,CAC1B,wCAAwC,OAAO,EAAE,EACjD,MAAM,CACP,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAExE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9C,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,YAAY,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,uDAAuD;IACvD,mEAAmE;IACnE,8DAA8D;IAC9D,yDAAyD;IACzD,oEAAoE;IACpE,yBAAyB;IACzB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,mBAAmB,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,kEAAkE;IAClE,mEAAmE;IACnE,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;CACpD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC;gBAC7B,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,IAAI,oCAAoC;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;QACpC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtC,GAAG,CAAC,QAAQ,CAAC;wBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;wBAC3B,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC;wBAChD,OAAO,EAAE,6BAA6B,IAAI,CAAC,QAAQ,sCAAsC;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAIL,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB;IAFlB,YACE,OAAe,EACC,MAAoB;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAc;QAGpC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAAC,MAAoB,EAAE,GAAY;IAC/D,MAAM,QAAQ,GACZ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAC5D,CAAC,CAAE,GAA+B,CAAC,SAAS,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,OAAe,CAAC;QACpB,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,OAAO,GAAG,4CAA4C,0BAA0B,0CAA0C,0BAA0B,GAAG,CAAC;QAC1J,CAAC;aAAM,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,GAAG,0BAA0B,EAAE,CAAC;YACjF,OAAO,GAAG,sCAAsC,0BAA0B,oCAAoC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,2HAA2H,CAAC;QACpQ,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,gCAAgC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,wCAAwC,0BAA0B,oBAAoB,0BAA0B,eAAe,CAAC;QACpM,CAAC;QACD,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,kBAAkB,CAC1B,wCAAwC,OAAO,EAAE,EACjD,MAAM,CACP,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC"}
@@ -120,7 +120,7 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
120
120
  bash_match?: string | undefined;
121
121
  extract?: Record<string, string> | undefined;
122
122
  }>;
123
- requires: z.ZodObject<{
123
+ requires: z.ZodOptional<z.ZodObject<{
124
124
  ledger_tag: z.ZodString;
125
125
  within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
126
126
  count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
@@ -187,9 +187,10 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
187
187
  max?: number | undefined;
188
188
  } | undefined;
189
189
  at_head?: boolean | undefined;
190
- }>;
190
+ }>>;
191
191
  hook: z.ZodString;
192
192
  enforcement: z.ZodEnum<["block", "warn", "require_approval"]>;
193
+ operator_only: z.ZodOptional<z.ZodBoolean>;
193
194
  producers: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
194
195
  kind: z.ZodLiteral<"bash">;
195
196
  command: z.ZodString;
@@ -279,7 +280,9 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
279
280
  bash_match?: string | undefined;
280
281
  extract?: Record<string, string> | undefined;
281
282
  };
282
- requires: {
283
+ hook: string;
284
+ enforcement: "warn" | "block" | "require_approval";
285
+ requires?: {
283
286
  ledger_tag: string;
284
287
  within?: string | undefined;
285
288
  count?: {
@@ -288,9 +291,8 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
288
291
  max?: number | undefined;
289
292
  } | undefined;
290
293
  at_head?: boolean | undefined;
291
- };
292
- hook: string;
293
- enforcement: "warn" | "block" | "require_approval";
294
+ } | undefined;
295
+ operator_only?: boolean | undefined;
294
296
  producers?: ({
295
297
  command: string;
296
298
  description: string;
@@ -326,7 +328,9 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
326
328
  bash_match?: string | undefined;
327
329
  extract?: Record<string, string> | undefined;
328
330
  };
329
- requires: {
331
+ hook: string;
332
+ enforcement: "warn" | "block" | "require_approval";
333
+ requires?: {
330
334
  ledger_tag: string;
331
335
  within?: string | undefined;
332
336
  count?: {
@@ -335,9 +339,8 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
335
339
  max?: number | undefined;
336
340
  } | undefined;
337
341
  at_head?: boolean | undefined;
338
- };
339
- hook: string;
340
- enforcement: "warn" | "block" | "require_approval";
342
+ } | undefined;
343
+ operator_only?: boolean | undefined;
341
344
  producers?: ({
342
345
  command: string;
343
346
  description: string;
@@ -373,7 +376,9 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
373
376
  bash_match?: string | undefined;
374
377
  extract?: Record<string, string> | undefined;
375
378
  };
376
- requires: {
379
+ hook: string;
380
+ enforcement: "warn" | "block" | "require_approval";
381
+ requires?: {
377
382
  ledger_tag: string;
378
383
  within?: string | undefined;
379
384
  count?: {
@@ -382,9 +387,8 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
382
387
  max?: number | undefined;
383
388
  } | undefined;
384
389
  at_head?: boolean | undefined;
385
- };
386
- hook: string;
387
- enforcement: "warn" | "block" | "require_approval";
390
+ } | undefined;
391
+ operator_only?: boolean | undefined;
388
392
  producers?: ({
389
393
  command: string;
390
394
  description: string;
@@ -420,7 +424,9 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
420
424
  bash_match?: string | undefined;
421
425
  extract?: Record<string, string> | undefined;
422
426
  };
423
- requires: {
427
+ hook: string;
428
+ enforcement: "warn" | "block" | "require_approval";
429
+ requires?: {
424
430
  ledger_tag: string;
425
431
  within?: string | undefined;
426
432
  count?: {
@@ -429,9 +435,8 @@ export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
429
435
  max?: number | undefined;
430
436
  } | undefined;
431
437
  at_head?: boolean | undefined;
432
- };
433
- hook: string;
434
- enforcement: "warn" | "block" | "require_approval";
438
+ } | undefined;
439
+ operator_only?: boolean | undefined;
435
440
  producers?: ({
436
441
  command: string;
437
442
  description: string;
@@ -480,7 +485,7 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
480
485
  bash_match?: string | undefined;
481
486
  extract?: Record<string, string> | undefined;
482
487
  }>;
483
- requires: z.ZodObject<{
488
+ requires: z.ZodOptional<z.ZodObject<{
484
489
  ledger_tag: z.ZodString;
485
490
  within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
486
491
  count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
@@ -547,9 +552,10 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
547
552
  max?: number | undefined;
548
553
  } | undefined;
549
554
  at_head?: boolean | undefined;
550
- }>;
555
+ }>>;
551
556
  hook: z.ZodString;
552
557
  enforcement: z.ZodEnum<["block", "warn", "require_approval"]>;
558
+ operator_only: z.ZodOptional<z.ZodBoolean>;
553
559
  producers: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
554
560
  kind: z.ZodLiteral<"bash">;
555
561
  command: z.ZodString;
@@ -639,7 +645,9 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
639
645
  bash_match?: string | undefined;
640
646
  extract?: Record<string, string> | undefined;
641
647
  };
642
- requires: {
648
+ hook: string;
649
+ enforcement: "warn" | "block" | "require_approval";
650
+ requires?: {
643
651
  ledger_tag: string;
644
652
  within?: string | undefined;
645
653
  count?: {
@@ -648,9 +656,8 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
648
656
  max?: number | undefined;
649
657
  } | undefined;
650
658
  at_head?: boolean | undefined;
651
- };
652
- hook: string;
653
- enforcement: "warn" | "block" | "require_approval";
659
+ } | undefined;
660
+ operator_only?: boolean | undefined;
654
661
  producers?: ({
655
662
  command: string;
656
663
  description: string;
@@ -686,7 +693,9 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
686
693
  bash_match?: string | undefined;
687
694
  extract?: Record<string, string> | undefined;
688
695
  };
689
- requires: {
696
+ hook: string;
697
+ enforcement: "warn" | "block" | "require_approval";
698
+ requires?: {
690
699
  ledger_tag: string;
691
700
  within?: string | undefined;
692
701
  count?: {
@@ -695,9 +704,8 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
695
704
  max?: number | undefined;
696
705
  } | undefined;
697
706
  at_head?: boolean | undefined;
698
- };
699
- hook: string;
700
- enforcement: "warn" | "block" | "require_approval";
707
+ } | undefined;
708
+ operator_only?: boolean | undefined;
701
709
  producers?: ({
702
710
  command: string;
703
711
  description: string;
@@ -733,7 +741,9 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
733
741
  bash_match?: string | undefined;
734
742
  extract?: Record<string, string> | undefined;
735
743
  };
736
- requires: {
744
+ hook: string;
745
+ enforcement: "warn" | "block" | "require_approval";
746
+ requires?: {
737
747
  ledger_tag: string;
738
748
  within?: string | undefined;
739
749
  count?: {
@@ -742,9 +752,8 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
742
752
  max?: number | undefined;
743
753
  } | undefined;
744
754
  at_head?: boolean | undefined;
745
- };
746
- hook: string;
747
- enforcement: "warn" | "block" | "require_approval";
755
+ } | undefined;
756
+ operator_only?: boolean | undefined;
748
757
  producers?: ({
749
758
  command: string;
750
759
  description: string;
@@ -780,7 +789,9 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
780
789
  bash_match?: string | undefined;
781
790
  extract?: Record<string, string> | undefined;
782
791
  };
783
- requires: {
792
+ hook: string;
793
+ enforcement: "warn" | "block" | "require_approval";
794
+ requires?: {
784
795
  ledger_tag: string;
785
796
  within?: string | undefined;
786
797
  count?: {
@@ -789,9 +800,8 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
789
800
  max?: number | undefined;
790
801
  } | undefined;
791
802
  at_head?: boolean | undefined;
792
- };
793
- hook: string;
794
- enforcement: "warn" | "block" | "require_approval";
803
+ } | undefined;
804
+ operator_only?: boolean | undefined;
795
805
  producers?: ({
796
806
  command: string;
797
807
  description: string;
@@ -827,7 +837,9 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
827
837
  bash_match?: string | undefined;
828
838
  extract?: Record<string, string> | undefined;
829
839
  };
830
- requires: {
840
+ hook: string;
841
+ enforcement: "warn" | "block" | "require_approval";
842
+ requires?: {
831
843
  ledger_tag: string;
832
844
  within?: string | undefined;
833
845
  count?: {
@@ -836,9 +848,8 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
836
848
  max?: number | undefined;
837
849
  } | undefined;
838
850
  at_head?: boolean | undefined;
839
- };
840
- hook: string;
841
- enforcement: "warn" | "block" | "require_approval";
851
+ } | undefined;
852
+ operator_only?: boolean | undefined;
842
853
  producers?: ({
843
854
  command: string;
844
855
  description: string;
@@ -874,7 +885,9 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
874
885
  bash_match?: string | undefined;
875
886
  extract?: Record<string, string> | undefined;
876
887
  };
877
- requires: {
888
+ hook: string;
889
+ enforcement: "warn" | "block" | "require_approval";
890
+ requires?: {
878
891
  ledger_tag: string;
879
892
  within?: string | undefined;
880
893
  count?: {
@@ -883,9 +896,8 @@ export declare const PoliciesSchema: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
883
896
  max?: number | undefined;
884
897
  } | undefined;
885
898
  at_head?: boolean | undefined;
886
- };
887
- hook: string;
888
- enforcement: "warn" | "block" | "require_approval";
899
+ } | undefined;
900
+ operator_only?: boolean | undefined;
889
901
  producers?: ({
890
902
  command: string;
891
903
  description: string;