@lannguyensi/harness 0.6.0 → 0.8.0

package/dist/schema/index.d.ts

@@ -88,16 +88,16 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: z.ZodDefault<z.ZodBoolean>;
         }, "strict", z.ZodTypeAny, {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }, {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }>, "many">>;
         skills: z.ZodDefault<z.ZodEffects<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -143,8 +143,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         }[];
         cli: {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }[];
@@ -170,9 +170,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         cli?: {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }[] | undefined;
         skills?: {
             enabled?: string[] | undefined;
@@ -195,8 +195,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         }[];
         cli: {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }[];
@@ -222,9 +222,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         cli?: {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }[] | undefined;
         skills?: {
             enabled?: string[] | undefined;
@@ -581,6 +581,1329 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[]>>;
+    policy_packs: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        source: z.ZodDefault<z.ZodString>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+        config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        enabled: boolean;
+        source: string;
+        config: Record<string, unknown>;
+        description?: string | undefined;
+    }, {
+        name: string;
+        description?: string | undefined;
+        enabled?: boolean | undefined;
+        source?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }>, "many">, {
+        name: string;
+        enabled: boolean;
+        source: string;
+        config: Record<string, unknown>;
+        description?: string | undefined;
+    }[], {
+        name: string;
+        description?: string | undefined;
+        enabled?: boolean | undefined;
+        source?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }[]>>;
+    permission_profiles: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
+        actions: z.ZodDefault<z.ZodObject<{
+            read: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            edit: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            bash: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            commit: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            push: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            pr: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            deploy: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+        }, "strict", z.ZodTypeAny, {
+            push?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        }, {
+            push?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        actions: {
+            push?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        };
+        description?: string | undefined;
+    }, {
+        description?: string | undefined;
+        actions?: {
+            push?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }>>>;
+    workflows: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
+        name: z.ZodString;
+        when: z.ZodDefault<z.ZodObject<{
+            task_label: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            project: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        }, {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        }>>;
+        steps: z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"branch">;
+            from: z.ZodDefault<z.ZodString>;
+            per_task: z.ZodDefault<z.ZodBoolean>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "branch";
+            from: string;
+            per_task: boolean;
+        }, {
+            kind: "branch";
+            from?: string | undefined;
+            per_task?: boolean | undefined;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"review_subagent">;
+            spawn: z.ZodDefault<z.ZodEnum<["required", "optional", "skip"]>>;
+            agent_type: z.ZodDefault<z.ZodString>;
+            rigor: z.ZodDefault<z.ZodEnum<["rigorous", "quick", "docs-only"]>>;
+            template: z.ZodOptional<z.ZodString>;
+            on_findings: z.ZodDefault<z.ZodEnum<["fix_then_remerge", "comment_only"]>>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "review_subagent";
+            spawn: "required" | "optional" | "skip";
+            agent_type: string;
+            rigor: "rigorous" | "quick" | "docs-only";
+            on_findings: "fix_then_remerge" | "comment_only";
+            template?: string | undefined;
+        }, {
+            kind: "review_subagent";
+            spawn?: "required" | "optional" | "skip" | undefined;
+            agent_type?: string | undefined;
+            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
+            template?: string | undefined;
+            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"ci_gate">;
+            wait_for: z.ZodDefault<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "ci_gate";
+            wait_for: string;
+        }, {
+            kind: "ci_gate";
+            wait_for?: string | undefined;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"merge">;
+            method: z.ZodDefault<z.ZodEnum<["merge", "squash", "rebase"]>>;
+            gate: z.ZodDefault<z.ZodEnum<["solo", "agent_tasks_label", "none"]>>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "merge";
+            method: "merge" | "squash" | "rebase";
+            gate: "solo" | "agent_tasks_label" | "none";
+        }, {
+            kind: "merge";
+            method?: "merge" | "squash" | "rebase" | undefined;
+            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
+        }>]>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        when: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        };
+        steps: ({
+            kind: "branch";
+            from: string;
+            per_task: boolean;
+        } | {
+            kind: "review_subagent";
+            spawn: "required" | "optional" | "skip";
+            agent_type: string;
+            rigor: "rigorous" | "quick" | "docs-only";
+            on_findings: "fix_then_remerge" | "comment_only";
+            template?: string | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for: string;
+        } | {
+            kind: "merge";
+            method: "merge" | "squash" | "rebase";
+            gate: "solo" | "agent_tasks_label" | "none";
+        })[];
+    }, {
+        name: string;
+        steps: ({
+            kind: "branch";
+            from?: string | undefined;
+            per_task?: boolean | undefined;
+        } | {
+            kind: "review_subagent";
+            spawn?: "required" | "optional" | "skip" | undefined;
+            agent_type?: string | undefined;
+            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
+            template?: string | undefined;
+            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for?: string | undefined;
+        } | {
+            kind: "merge";
+            method?: "merge" | "squash" | "rebase" | undefined;
+            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
+        })[];
+        when?: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        } | undefined;
+    }>, {
+        name: string;
+        when: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        };
+        steps: ({
+            kind: "branch";
+            from: string;
+            per_task: boolean;
+        } | {
+            kind: "review_subagent";
+            spawn: "required" | "optional" | "skip";
+            agent_type: string;
+            rigor: "rigorous" | "quick" | "docs-only";
+            on_findings: "fix_then_remerge" | "comment_only";
+            template?: string | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for: string;
+        } | {
+            kind: "merge";
+            method: "merge" | "squash" | "rebase";
+            gate: "solo" | "agent_tasks_label" | "none";
+        })[];
+    }, {
+        name: string;
+        steps: ({
+            kind: "branch";
+            from?: string | undefined;
+            per_task?: boolean | undefined;
+        } | {
+            kind: "review_subagent";
+            spawn?: "required" | "optional" | "skip" | undefined;
+            agent_type?: string | undefined;
+            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
+            template?: string | undefined;
+            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for?: string | undefined;
+        } | {
+            kind: "merge";
+            method?: "merge" | "squash" | "rebase" | undefined;
+            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
+        })[];
+        when?: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        } | undefined;
+    }>, "many">, {
+        name: string;
+        when: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        };
+        steps: ({
+            kind: "branch";
+            from: string;
+            per_task: boolean;
+        } | {
+            kind: "review_subagent";
+            spawn: "required" | "optional" | "skip";
+            agent_type: string;
+            rigor: "rigorous" | "quick" | "docs-only";
+            on_findings: "fix_then_remerge" | "comment_only";
+            template?: string | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for: string;
+        } | {
+            kind: "merge";
+            method: "merge" | "squash" | "rebase";
+            gate: "solo" | "agent_tasks_label" | "none";
+        })[];
+    }[], {
+        name: string;
+        steps: ({
+            kind: "branch";
+            from?: string | undefined;
+            per_task?: boolean | undefined;
+        } | {
+            kind: "review_subagent";
+            spawn?: "required" | "optional" | "skip" | undefined;
+            agent_type?: string | undefined;
+            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
+            template?: string | undefined;
+            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for?: string | undefined;
+        } | {
+            kind: "merge";
+            method?: "merge" | "squash" | "rebase" | undefined;
+            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
+        })[];
+        when?: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        } | undefined;
+    }[]>>;
+    review_templates: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    audit: z.ZodDefault<z.ZodObject<{
+        redact: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodEffects<z.ZodObject<{
+            regex: z.ZodString;
+            replacement: z.ZodDefault<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            regex: string;
+            replacement: string;
+        }, {
+            regex: string;
+            replacement?: string | undefined;
+        }>, {
+            regex: string;
+            replacement: string;
+        }, {
+            regex: string;
+            replacement?: string | undefined;
+        }>, z.ZodObject<{
+            env_var: z.ZodString;
+            replacement: z.ZodDefault<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            replacement: string;
+            env_var: string;
+        }, {
+            env_var: string;
+            replacement?: string | undefined;
+        }>]>, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        redact: ({
+            regex: string;
+            replacement: string;
+        } | {
+            replacement: string;
+            env_var: string;
+        })[];
+    }, {
+        redact?: ({
+            regex: string;
+            replacement?: string | undefined;
+        } | {
+            env_var: string;
+            replacement?: string | undefined;
+        })[] | undefined;
+    }>>;
 }, "strict", z.ZodTypeAny, {
     version: 1;
     grounding: {
@@ -610,8 +1933,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         }[];
         cli: {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }[];
@@ -672,6 +1995,145 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[];
+    policy_packs: {
+        name: string;
+        enabled: boolean;
+        source: string;
+        config: Record<string, unknown>;
+        description?: string | undefined;
+    }[];
+    permission_profiles: Record<string, {
+        actions: {
+            push?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        };
+        description?: string | undefined;
+    }>;
+    workflows: {
+        name: string;
+        when: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        };
+        steps: ({
+            kind: "branch";
+            from: string;
+            per_task: boolean;
+        } | {
+            kind: "review_subagent";
+            spawn: "required" | "optional" | "skip";
+            agent_type: string;
+            rigor: "rigorous" | "quick" | "docs-only";
+            on_findings: "fix_then_remerge" | "comment_only";
+            template?: string | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for: string;
+        } | {
+            kind: "merge";
+            method: "merge" | "squash" | "rebase";
+            gate: "solo" | "agent_tasks_label" | "none";
+        })[];
+    }[];
+    review_templates: Record<string, string>;
+    audit: {
+        redact: ({
+            regex: string;
+            replacement: string;
+        } | {
+            replacement: string;
+            env_var: string;
+        })[];
+    };
 }, {
     version: 1;
     grounding?: {
@@ -702,9 +2164,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         cli?: {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }[] | undefined;
         skills?: {
             enabled?: string[] | undefined;
@@ -763,6 +2225,145 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[] | undefined;
+    policy_packs?: {
+        name: string;
+        description?: string | undefined;
+        enabled?: boolean | undefined;
+        source?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    permission_profiles?: Record<string, {
+        description?: string | undefined;
+        actions?: {
+            push?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }> | undefined;
+    workflows?: {
+        name: string;
+        steps: ({
+            kind: "branch";
+            from?: string | undefined;
+            per_task?: boolean | undefined;
+        } | {
+            kind: "review_subagent";
+            spawn?: "required" | "optional" | "skip" | undefined;
+            agent_type?: string | undefined;
+            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
+            template?: string | undefined;
+            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for?: string | undefined;
+        } | {
+            kind: "merge";
+            method?: "merge" | "squash" | "rebase" | undefined;
+            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
+        })[];
+        when?: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        } | undefined;
+    }[] | undefined;
+    review_templates?: Record<string, string> | undefined;
+    audit?: {
+        redact?: ({
+            regex: string;
+            replacement?: string | undefined;
+        } | {
+            env_var: string;
+            replacement?: string | undefined;
+        })[] | undefined;
+    } | undefined;
 }>, {
     version: 1;
     grounding: {
@@ -792,8 +2393,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         }[];
         cli: {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }[];
@@ -854,6 +2455,145 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[];
+    policy_packs: {
+        name: string;
+        enabled: boolean;
+        source: string;
+        config: Record<string, unknown>;
+        description?: string | undefined;
+    }[];
+    permission_profiles: Record<string, {
+        actions: {
+            push?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        };
+        description?: string | undefined;
+    }>;
+    workflows: {
+        name: string;
+        when: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        };
+        steps: ({
+            kind: "branch";
+            from: string;
+            per_task: boolean;
+        } | {
+            kind: "review_subagent";
+            spawn: "required" | "optional" | "skip";
+            agent_type: string;
+            rigor: "rigorous" | "quick" | "docs-only";
+            on_findings: "fix_then_remerge" | "comment_only";
+            template?: string | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for: string;
+        } | {
+            kind: "merge";
+            method: "merge" | "squash" | "rebase";
+            gate: "solo" | "agent_tasks_label" | "none";
+        })[];
+    }[];
+    review_templates: Record<string, string>;
+    audit: {
+        redact: ({
+            regex: string;
+            replacement: string;
+        } | {
+            replacement: string;
+            env_var: string;
+        })[];
+    };
 }, {
     version: 1;
     grounding?: {
@@ -884,9 +2624,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         cli?: {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }[] | undefined;
         skills?: {
             enabled?: string[] | undefined;
@@ -945,6 +2685,145 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[] | undefined;
+    policy_packs?: {
+        name: string;
+        description?: string | undefined;
+        enabled?: boolean | undefined;
+        source?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    permission_profiles?: Record<string, {
+        description?: string | undefined;
+        actions?: {
+            push?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }> | undefined;
+    workflows?: {
+        name: string;
+        steps: ({
+            kind: "branch";
+            from?: string | undefined;
+            per_task?: boolean | undefined;
+        } | {
+            kind: "review_subagent";
+            spawn?: "required" | "optional" | "skip" | undefined;
+            agent_type?: string | undefined;
+            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
+            template?: string | undefined;
+            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
+        } | {
+            kind: "ci_gate";
+            wait_for?: string | undefined;
+        } | {
+            kind: "merge";
+            method?: "merge" | "squash" | "rebase" | undefined;
+            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
+        })[];
+        when?: {
+            project?: string | undefined;
+            task_label?: string[] | undefined;
+        } | undefined;
+    }[] | undefined;
+    review_templates?: Record<string, string> | undefined;
+    audit?: {
+        redact?: ({
+            regex: string;
+            replacement?: string | undefined;
+        } | {
+            env_var: string;
+            replacement?: string | undefined;
+        })[] | undefined;
+    } | undefined;
 }>;
 export type Manifest = z.infer<typeof ManifestSchema>;
 export declare class ManifestParseError extends Error {
@@ -956,6 +2835,10 @@ export * from "./grounding.js";
 export * from "./tools.js";
 export * from "./memory.js";
 export * from "./hooks.js";
+export * from "./permission-profiles.js";
 export * from "./policies.js";
+export * from "./policy-packs.js";
+export * from "./workflows.js";
+export * from "./audit.js";
 export * from "./extract.js";
 export * from "./requires.js";