@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/schema/index.d.ts

@@ -1,3874 +1,160 @@
 import { z } from "zod";
+import { type ManifestPostureWarning, type StrippedIndexMaps } from "./removed-keys.js";
 export declare const SUPPORTED_MANIFEST_VERSION = 1;
-export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
+export declare const ManifestSchema: z.ZodObject<{
     version: z.ZodLiteral<1>;
-    grounding: z.ZodDefault<z.ZodObject<{
-        session: z.ZodDefault<z.ZodObject<{
+    grounding: z.ZodPrefault<z.ZodObject<{
+        session: z.ZodPrefault<z.ZodObject<{
             auto_start: z.ZodDefault<z.ZodBoolean>;
             id_format: z.ZodDefault<z.ZodString>;
-        }, "strict", z.ZodTypeAny, {
-            auto_start: boolean;
-            id_format: string;
-        }, {
-            auto_start?: boolean | undefined;
-            id_format?: string | undefined;
-        }>>;
-        evidence_ledger: z.ZodDefault<z.ZodObject<{
+        }, z.core.$strict>>;
+        evidence_ledger: z.ZodPrefault<z.ZodObject<{
             path: z.ZodDefault<z.ZodString>;
-            retention_days: z.ZodDefault<z.ZodNumber>;
-        }, "strict", z.ZodTypeAny, {
-            path: string;
-            retention_days: number;
-        }, {
-            path?: string | undefined;
-            retention_days?: number | undefined;
-        }>>;
-        policies_source: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    }, "strict", z.ZodTypeAny, {
-        session: {
-            auto_start: boolean;
-            id_format: string;
-        };
-        evidence_ledger: {
-            path: string;
-            retention_days: number;
-        };
-        policies_source: string | null;
-    }, {
-        session?: {
-            auto_start?: boolean | undefined;
-            id_format?: string | undefined;
-        } | undefined;
-        evidence_ledger?: {
-            path?: string | undefined;
-            retention_days?: number | undefined;
-        } | undefined;
-        policies_source?: string | null | undefined;
-    }>>;
-    tools: z.ZodDefault<z.ZodEffects<z.ZodObject<{
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    tools: z.ZodPrefault<z.ZodObject<{
         mcp: z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
-            command: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
+            command: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             health: z.ZodOptional<z.ZodObject<{
                 verb: z.ZodString;
                 timeout_ms: z.ZodDefault<z.ZodNumber>;
-            }, "strict", z.ZodTypeAny, {
-                verb: string;
-                timeout_ms: number;
-            }, {
-                verb: string;
-                timeout_ms?: number | undefined;
-            }>>;
+            }, z.core.$strict>>;
             enabled: z.ZodDefault<z.ZodBoolean>;
             min_version: z.ZodOptional<z.ZodString>;
-            version_command: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        }, "strict", z.ZodTypeAny, {
-            name: string;
-            command: string | string[];
-            enabled: boolean;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms: number;
-            } | undefined;
-        }, {
-            name: string;
-            command: string | string[];
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            enabled?: boolean | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms?: number | undefined;
-            } | undefined;
-        }>, "many">>;
+            version_command: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>>;
         cli: z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             binary: z.ZodString;
             min_version: z.ZodOptional<z.ZodString>;
-            version_command: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            version_command: z.ZodOptional<z.ZodArray<z.ZodString>>;
             required: z.ZodDefault<z.ZodBoolean>;
-        }, "strict", z.ZodTypeAny, {
-            name: string;
-            required: boolean;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-        }, {
-            name: string;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            required?: boolean | undefined;
-        }>, "many">>;
-        skills: z.ZodDefault<z.ZodEffects<z.ZodObject<{
-            enabled: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-            required: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-            source_dirs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-        }, "strict", z.ZodTypeAny, {
-            enabled: string[];
-            source_dirs: string[];
-            required?: string[] | undefined;
-        }, {
-            enabled?: string[] | undefined;
-            required?: string[] | undefined;
-            source_dirs?: string[] | undefined;
-        }>, {
-            enabled: string[];
-            source_dirs: string[];
-            required?: string[] | undefined;
-        }, {
-            enabled?: string[] | undefined;
-            required?: string[] | undefined;
-            source_dirs?: string[] | undefined;
-        }>>;
-        builtin: z.ZodDefault<z.ZodObject<{
-            known: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-        }, "strict", z.ZodTypeAny, {
-            known: string[];
-        }, {
-            known?: string[] | undefined;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        builtin: {
-            known: string[];
-        };
-        mcp: {
-            name: string;
-            command: string | string[];
-            enabled: boolean;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms: number;
-            } | undefined;
-        }[];
-        cli: {
-            name: string;
-            required: boolean;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-        }[];
-        skills: {
-            enabled: string[];
-            source_dirs: string[];
-            required?: string[] | undefined;
-        };
-    }, {
-        builtin?: {
-            known?: string[] | undefined;
-        } | undefined;
-        mcp?: {
-            name: string;
-            command: string | string[];
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            enabled?: boolean | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms?: number | undefined;
-            } | undefined;
-        }[] | undefined;
-        cli?: {
-            name: string;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            required?: boolean | undefined;
-        }[] | undefined;
-        skills?: {
-            enabled?: string[] | undefined;
-            required?: string[] | undefined;
-            source_dirs?: string[] | undefined;
-        } | undefined;
-    }>, {
-        builtin: {
-            known: string[];
-        };
-        mcp: {
-            name: string;
-            command: string | string[];
-            enabled: boolean;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms: number;
-            } | undefined;
-        }[];
-        cli: {
-            name: string;
-            required: boolean;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-        }[];
-        skills: {
-            enabled: string[];
-            source_dirs: string[];
-            required?: string[] | undefined;
-        };
-    }, {
-        builtin?: {
-            known?: string[] | undefined;
-        } | undefined;
-        mcp?: {
-            name: string;
-            command: string | string[];
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            enabled?: boolean | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms?: number | undefined;
-            } | undefined;
-        }[] | undefined;
-        cli?: {
-            name: string;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            required?: boolean | undefined;
-        }[] | undefined;
-        skills?: {
-            enabled?: string[] | undefined;
-            required?: string[] | undefined;
-            source_dirs?: string[] | undefined;
-        } | undefined;
-    }>>;
-    memory: z.ZodDefault<z.ZodObject<{
+        }, z.core.$strict>>>;
+        skills: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            required: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            source_dirs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        builtin: z.ZodPrefault<z.ZodObject<{
+            known: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    memory: z.ZodPrefault<z.ZodObject<{
         directories: z.ZodDefault<z.ZodArray<z.ZodObject<{
             path: z.ZodString;
-            scope: z.ZodEnum<["project", "user"]>;
-        }, "strict", z.ZodTypeAny, {
-            path: string;
-            scope: "project" | "user";
-        }, {
-            path: string;
-            scope: "project" | "user";
-        }>, "many">>;
+            scope: z.ZodEnum<{
+                project: "project";
+                user: "user";
+            }>;
+        }, z.core.$strict>>>;
         router: z.ZodOptional<z.ZodObject<{
-            command: z.ZodArray<z.ZodString, "many">;
+            command: z.ZodArray<z.ZodString>;
             enabled: z.ZodDefault<z.ZodBoolean>;
             min_version: z.ZodOptional<z.ZodString>;
-            version_command: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        }, "strict", z.ZodTypeAny, {
-            command: string[];
-            enabled: boolean;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-        }, {
-            command: string[];
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            enabled?: boolean | undefined;
-        }>>;
-        retention: z.ZodDefault<z.ZodObject<{
+            version_command: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        retention: z.ZodPrefault<z.ZodObject<{
             staleness_days: z.ZodDefault<z.ZodNumber>;
-            broken_refs: z.ZodDefault<z.ZodEnum<["warn", "error", "ignore"]>>;
-        }, "strict", z.ZodTypeAny, {
-            staleness_days: number;
-            broken_refs: "warn" | "error" | "ignore";
-        }, {
-            staleness_days?: number | undefined;
-            broken_refs?: "warn" | "error" | "ignore" | undefined;
-        }>>;
-        scopes: z.ZodDefault<z.ZodEffects<z.ZodObject<{
-            default: z.ZodDefault<z.ZodEnum<["project", "user"]>>;
-            allowed: z.ZodDefault<z.ZodArray<z.ZodEnum<["project", "user"]>, "many">>;
-        }, "strict", z.ZodTypeAny, {
-            default: "project" | "user";
-            allowed: ("project" | "user")[];
-        }, {
-            default?: "project" | "user" | undefined;
-            allowed?: ("project" | "user")[] | undefined;
-        }>, {
-            default: "project" | "user";
-            allowed: ("project" | "user")[];
-        }, {
-            default?: "project" | "user" | undefined;
-            allowed?: ("project" | "user")[] | undefined;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        directories: {
-            path: string;
-            scope: "project" | "user";
-        }[];
-        retention: {
-            staleness_days: number;
-            broken_refs: "warn" | "error" | "ignore";
-        };
-        scopes: {
-            default: "project" | "user";
-            allowed: ("project" | "user")[];
-        };
-        router?: {
-            command: string[];
-            enabled: boolean;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-        } | undefined;
-    }, {
-        directories?: {
-            path: string;
-            scope: "project" | "user";
-        }[] | undefined;
-        router?: {
-            command: string[];
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            enabled?: boolean | undefined;
-        } | undefined;
-        retention?: {
-            staleness_days?: number | undefined;
-            broken_refs?: "warn" | "error" | "ignore" | undefined;
-        } | undefined;
-        scopes?: {
-            default?: "project" | "user" | undefined;
-            allowed?: ("project" | "user")[] | undefined;
-        } | undefined;
-    }>>;
-    hooks: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
+            broken_refs: z.ZodDefault<z.ZodEnum<{
+                error: "error";
+                warn: "warn";
+                ignore: "ignore";
+            }>>;
+        }, z.core.$strict>>;
+        scopes: z.ZodPrefault<z.ZodObject<{
+            default: z.ZodDefault<z.ZodEnum<{
+                project: "project";
+                user: "user";
+            }>>;
+            allowed: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                project: "project";
+                user: "user";
+            }>>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    hooks: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
-        event: z.ZodEnum<["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop", "SubagentStart", "SubagentStop", "PreCompact"]>;
+        event: z.ZodEnum<{
+            SessionStart: "SessionStart";
+            UserPromptSubmit: "UserPromptSubmit";
+            PreToolUse: "PreToolUse";
+            PostToolUse: "PostToolUse";
+            Stop: "Stop";
+            SubagentStart: "SubagentStart";
+            SubagentStop: "SubagentStop";
+            PreCompact: "PreCompact";
+        }>;
         command: z.ZodString;
         match: z.ZodOptional<z.ZodString>;
-        path_match: z.ZodOptional<z.ZodString>;
-        bash_match: z.ZodOptional<z.ZodString>;
-        blocking: z.ZodUnion<[z.ZodLiteral<false>, z.ZodLiteral<"soft">, z.ZodLiteral<"hard">]>;
+        blocking: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodLiteral<"soft">, z.ZodLiteral<"hard">]>;
         budget_ms: z.ZodDefault<z.ZodNumber>;
         description: z.ZodOptional<z.ZodString>;
         min_version: z.ZodOptional<z.ZodString>;
-        version_command: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        budget_ms: number;
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }, {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        budget_ms?: number | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }>, {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        budget_ms: number;
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }, {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        budget_ms?: number | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }>, "many">, {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        budget_ms: number;
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }[], {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        budget_ms?: number | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }[]>>;
-    policies: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
-        name: z.ZodString;
-        description: z.ZodString;
-        trigger: z.ZodObject<{
-            event: z.ZodEnum<["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop", "SubagentStart", "SubagentStop", "PreCompact"]>;
-            match: z.ZodOptional<z.ZodString>;
-            path_match: z.ZodOptional<z.ZodString>;
-            bash_match: z.ZodOptional<z.ZodString>;
-            input_match: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean]>>, Record<string, string | number | boolean>, Record<string, string | number | boolean>>>;
-            extract: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodString, string, string>>, Record<string, string>, Record<string, string>>>;
-        }, "strict", z.ZodTypeAny, {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        }, {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        }>;
-        requires: z.ZodOptional<z.ZodObject<{
-            ledger_tag: z.ZodString;
-            within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-            count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-                min: z.ZodOptional<z.ZodNumber>;
-                max: z.ZodOptional<z.ZodNumber>;
-                exact: z.ZodOptional<z.ZodNumber>;
-            }, "strict", z.ZodTypeAny, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }>, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }>, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }>, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }>, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }, {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            }>>;
-            at_head: z.ZodOptional<z.ZodBoolean>;
-        }, "strict", z.ZodTypeAny, {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        }, {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        }>>;
-        hook: z.ZodString;
-        enforcement: z.ZodEnum<["block", "warn", "require_approval"]>;
-        operator_only: z.ZodOptional<z.ZodBoolean>;
-        producers: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
-            kind: z.ZodLiteral<"bash">;
-            command: z.ZodString;
-            description: z.ZodString;
-        }, "strict", z.ZodTypeAny, {
-            command: string;
-            description: string;
-            kind: "bash";
-        }, {
-            command: string;
-            description: string;
-            kind: "bash";
-        }>, z.ZodObject<{
-            kind: z.ZodLiteral<"mcp">;
-            verb: z.ZodString;
-            example: z.ZodString;
-            description: z.ZodString;
-        }, "strict", z.ZodTypeAny, {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        }, {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        }>, z.ZodObject<{
-            kind: z.ZodLiteral<"ask">;
-            command: z.ZodString;
-            description: z.ZodString;
-        }, "strict", z.ZodTypeAny, {
-            command: string;
-            description: string;
-            kind: "ask";
-        }, {
-            command: string;
-            description: string;
-            kind: "ask";
-        }>]>, "many">>;
-        ux: z.ZodOptional<z.ZodObject<{
-            cannot: z.ZodString;
-            required: z.ZodArray<z.ZodString, "many">;
-            run: z.ZodArray<z.ZodString, "many">;
-        }, "strict", z.ZodTypeAny, {
-            cannot: string;
-            required: string[];
-            run: string[];
-        }, {
-            cannot: string;
-            required: string[];
-            run: string[];
-        }>>;
-        when: z.ZodOptional<z.ZodEffects<z.ZodObject<{
-            "risk.severity_at_least": z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
-            "risk.category_in": z.ZodOptional<z.ZodArray<z.ZodEnum<["destructive", "data_loss", "production_mutation", "credential_access", "secret_exfiltration", "network_exfiltration", "deployment_change", "infrastructure_change", "privilege_escalation", "irreversible_action", "mass_update"]>, "many">>;
-            "environment.name": z.ZodOptional<z.ZodEnum<["production", "staging", "dev", "local", "unknown"]>>;
-            "action.reversible": z.ZodOptional<z.ZodBoolean>;
-            "action.deletion_target_unresolvable": z.ZodOptional<z.ZodLiteral<true>>;
-        }, "strict", z.ZodTypeAny, {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        }, {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        }>, {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        }, {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }, {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }>, {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }, {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }>, "many">, {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }[], {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }[]>>;
-    policy_packs: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodObject<{
+        version_command: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>;
+    policy_packs: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         source: z.ZodDefault<z.ZodString>;
         enabled: z.ZodDefault<z.ZodBoolean>;
         description: z.ZodOptional<z.ZodString>;
         config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         min_version: z.ZodOptional<z.ZodString>;
-    }, "strict", z.ZodTypeAny, {
-        name: string;
-        enabled: boolean;
-        source: string;
-        config: Record<string, unknown>;
-        description?: string | undefined;
-        min_version?: string | undefined;
-    }, {
-        name: string;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        enabled?: boolean | undefined;
-        source?: string | undefined;
-        config?: Record<string, unknown> | undefined;
-    }>, "many">, {
-        name: string;
-        enabled: boolean;
-        source: string;
-        config: Record<string, unknown>;
-        description?: string | undefined;
-        min_version?: string | undefined;
-    }[], {
-        name: string;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        enabled?: boolean | undefined;
-        source?: string | undefined;
-        config?: Record<string, unknown> | undefined;
-    }[]>>;
-    risk: z.ZodDefault<z.ZodEffects<z.ZodObject<{
-        classifiers: z.ZodDefault<z.ZodArray<z.ZodObject<{
-            name: z.ZodString;
-            tool: z.ZodString;
-            patterns: z.ZodArray<z.ZodEffects<z.ZodObject<{
-                pattern: z.ZodString;
-                categories: z.ZodArray<z.ZodEnum<["destructive", "data_loss", "production_mutation", "credential_access", "secret_exfiltration", "network_exfiltration", "deployment_change", "infrastructure_change", "privilege_escalation", "irreversible_action", "mass_update"]>, "many">;
-                severity: z.ZodEnum<["low", "medium", "high", "critical"]>;
-            }, "strict", z.ZodTypeAny, {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }, {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }>, {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }, {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }>, "many">;
-        }, "strict", z.ZodTypeAny, {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }, {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }>, "many">>;
-        degraded_fail_posture: z.ZodDefault<z.ZodEnum<["preserve_enforcement", "fail_open"]>>;
-        safe_deletion_roots: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        classifiers: {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }[];
-        degraded_fail_posture: "preserve_enforcement" | "fail_open";
-        safe_deletion_roots: string[];
-    }, {
-        classifiers?: {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }[] | undefined;
-        degraded_fail_posture?: "preserve_enforcement" | "fail_open" | undefined;
-        safe_deletion_roots?: string[] | undefined;
-    }>, {
-        classifiers: {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }[];
-        degraded_fail_posture: "preserve_enforcement" | "fail_open";
-        safe_deletion_roots: string[];
-    }, {
-        classifiers?: {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }[] | undefined;
-        degraded_fail_posture?: "preserve_enforcement" | "fail_open" | undefined;
-        safe_deletion_roots?: string[] | undefined;
-    }>>;
-    environments: z.ZodDefault<z.ZodEffects<z.ZodObject<{
-        resolvers: z.ZodDefault<z.ZodArray<z.ZodObject<{
-            name: z.ZodString;
-            environment: z.ZodEnum<["production", "staging", "dev", "local"]>;
-            signals: z.ZodEffects<z.ZodObject<{
-                branch_patterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                env_var_patterns: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                    var: z.ZodString;
-                    patterns: z.ZodArray<z.ZodString, "many">;
-                }, "strict", z.ZodTypeAny, {
-                    var: string;
-                    patterns: string[];
-                }, {
-                    var: string;
-                    patterns: string[];
-                }>, "many">>;
-                kube_context_patterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                kube_namespace_patterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-            }, "strict", z.ZodTypeAny, {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            }, {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            }>, {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            }, {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            }>;
-        }, "strict", z.ZodTypeAny, {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }, {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }>, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        resolvers: {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }[];
-    }, {
-        resolvers?: {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }[] | undefined;
-    }>, {
-        resolvers: {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }[];
-    }, {
-        resolvers?: {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }[] | undefined;
-    }>>;
-    permission_profiles: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        description: z.ZodOptional<z.ZodString>;
-        actions: z.ZodDefault<z.ZodObject<{
-            read: z.ZodOptional<z.ZodObject<{
-                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
-                mode: z.ZodOptional<z.ZodString>;
-                requires: z.ZodOptional<z.ZodObject<{
-                    ledger_tag: z.ZodString;
-                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-                        min: z.ZodOptional<z.ZodNumber>;
-                        max: z.ZodOptional<z.ZodNumber>;
-                        exact: z.ZodOptional<z.ZodNumber>;
-                    }, "strict", z.ZodTypeAny, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>>;
-                    at_head: z.ZodOptional<z.ZodBoolean>;
-                }, "strict", z.ZodTypeAny, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }>>;
-            }, "strict", z.ZodTypeAny, {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }, {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }>>;
-            edit: z.ZodOptional<z.ZodObject<{
-                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
-                mode: z.ZodOptional<z.ZodString>;
-                requires: z.ZodOptional<z.ZodObject<{
-                    ledger_tag: z.ZodString;
-                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-                        min: z.ZodOptional<z.ZodNumber>;
-                        max: z.ZodOptional<z.ZodNumber>;
-                        exact: z.ZodOptional<z.ZodNumber>;
-                    }, "strict", z.ZodTypeAny, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>>;
-                    at_head: z.ZodOptional<z.ZodBoolean>;
-                }, "strict", z.ZodTypeAny, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }>>;
-            }, "strict", z.ZodTypeAny, {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }, {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }>>;
-            bash: z.ZodOptional<z.ZodObject<{
-                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
-                mode: z.ZodOptional<z.ZodString>;
-                requires: z.ZodOptional<z.ZodObject<{
-                    ledger_tag: z.ZodString;
-                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-                        min: z.ZodOptional<z.ZodNumber>;
-                        max: z.ZodOptional<z.ZodNumber>;
-                        exact: z.ZodOptional<z.ZodNumber>;
-                    }, "strict", z.ZodTypeAny, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>>;
-                    at_head: z.ZodOptional<z.ZodBoolean>;
-                }, "strict", z.ZodTypeAny, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }>>;
-            }, "strict", z.ZodTypeAny, {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }, {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }>>;
-            commit: z.ZodOptional<z.ZodObject<{
-                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
-                mode: z.ZodOptional<z.ZodString>;
-                requires: z.ZodOptional<z.ZodObject<{
-                    ledger_tag: z.ZodString;
-                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-                        min: z.ZodOptional<z.ZodNumber>;
-                        max: z.ZodOptional<z.ZodNumber>;
-                        exact: z.ZodOptional<z.ZodNumber>;
-                    }, "strict", z.ZodTypeAny, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>>;
-                    at_head: z.ZodOptional<z.ZodBoolean>;
-                }, "strict", z.ZodTypeAny, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }>>;
-            }, "strict", z.ZodTypeAny, {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }, {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }>>;
-            push: z.ZodOptional<z.ZodObject<{
-                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
-                mode: z.ZodOptional<z.ZodString>;
-                requires: z.ZodOptional<z.ZodObject<{
-                    ledger_tag: z.ZodString;
-                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-                        min: z.ZodOptional<z.ZodNumber>;
-                        max: z.ZodOptional<z.ZodNumber>;
-                        exact: z.ZodOptional<z.ZodNumber>;
-                    }, "strict", z.ZodTypeAny, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>>;
-                    at_head: z.ZodOptional<z.ZodBoolean>;
-                }, "strict", z.ZodTypeAny, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }>>;
-            }, "strict", z.ZodTypeAny, {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }, {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }>>;
-            pr: z.ZodOptional<z.ZodObject<{
-                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
-                mode: z.ZodOptional<z.ZodString>;
-                requires: z.ZodOptional<z.ZodObject<{
-                    ledger_tag: z.ZodString;
-                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-                        min: z.ZodOptional<z.ZodNumber>;
-                        max: z.ZodOptional<z.ZodNumber>;
-                        exact: z.ZodOptional<z.ZodNumber>;
-                    }, "strict", z.ZodTypeAny, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>>;
-                    at_head: z.ZodOptional<z.ZodBoolean>;
-                }, "strict", z.ZodTypeAny, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }>>;
-            }, "strict", z.ZodTypeAny, {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }, {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }>>;
-            deploy: z.ZodOptional<z.ZodObject<{
-                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "ask" | "true" | "false" | "limited" | "ask_or_deny", boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny">;
-                mode: z.ZodOptional<z.ZodString>;
-                requires: z.ZodOptional<z.ZodObject<{
-                    ledger_tag: z.ZodString;
-                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
-                        min: z.ZodOptional<z.ZodNumber>;
-                        max: z.ZodOptional<z.ZodNumber>;
-                        exact: z.ZodOptional<z.ZodNumber>;
-                    }, "strict", z.ZodTypeAny, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }, {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    }>>;
-                    at_head: z.ZodOptional<z.ZodBoolean>;
-                }, "strict", z.ZodTypeAny, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }, {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                }>>;
-            }, "strict", z.ZodTypeAny, {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }, {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            }>>;
-        }, "strict", z.ZodTypeAny, {
-            push?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            bash?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            read?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            edit?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            commit?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            pr?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            deploy?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-        }, {
-            push?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            bash?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            read?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            edit?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            commit?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            pr?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            deploy?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        actions: {
-            push?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            bash?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            read?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            edit?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            commit?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            pr?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            deploy?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-        };
-        description?: string | undefined;
-    }, {
-        description?: string | undefined;
-        actions?: {
-            push?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            bash?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            read?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            edit?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            commit?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            pr?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            deploy?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-        } | undefined;
-    }>>>;
-    workflows: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
-        name: z.ZodString;
-        when: z.ZodDefault<z.ZodObject<{
-            task_label: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-            project: z.ZodOptional<z.ZodString>;
-        }, "strict", z.ZodTypeAny, {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        }, {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        }>>;
-        steps: z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
-            kind: z.ZodLiteral<"branch">;
-            from: z.ZodDefault<z.ZodString>;
-            per_task: z.ZodDefault<z.ZodBoolean>;
-        }, "strict", z.ZodTypeAny, {
-            kind: "branch";
-            from: string;
-            per_task: boolean;
-        }, {
-            kind: "branch";
-            from?: string | undefined;
-            per_task?: boolean | undefined;
-        }>, z.ZodObject<{
-            kind: z.ZodLiteral<"review_subagent">;
-            spawn: z.ZodDefault<z.ZodEnum<["required", "optional", "skip"]>>;
-            agent_type: z.ZodDefault<z.ZodString>;
-            rigor: z.ZodDefault<z.ZodEnum<["rigorous", "quick", "docs-only"]>>;
-            template: z.ZodOptional<z.ZodString>;
-            on_findings: z.ZodDefault<z.ZodEnum<["fix_then_remerge", "comment_only"]>>;
-        }, "strict", z.ZodTypeAny, {
-            kind: "review_subagent";
-            spawn: "required" | "optional" | "skip";
-            agent_type: string;
-            rigor: "rigorous" | "quick" | "docs-only";
-            on_findings: "fix_then_remerge" | "comment_only";
-            template?: string | undefined;
-        }, {
-            kind: "review_subagent";
-            spawn?: "required" | "optional" | "skip" | undefined;
-            agent_type?: string | undefined;
-            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
-            template?: string | undefined;
-            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
-        }>, z.ZodObject<{
-            kind: z.ZodLiteral<"ci_gate">;
-            wait_for: z.ZodDefault<z.ZodString>;
-        }, "strict", z.ZodTypeAny, {
-            kind: "ci_gate";
-            wait_for: string;
-        }, {
-            kind: "ci_gate";
-            wait_for?: string | undefined;
-        }>, z.ZodObject<{
-            kind: z.ZodLiteral<"merge">;
-            method: z.ZodDefault<z.ZodEnum<["merge", "squash", "rebase"]>>;
-            gate: z.ZodDefault<z.ZodEnum<["solo", "agent_tasks_label", "none"]>>;
-        }, "strict", z.ZodTypeAny, {
-            kind: "merge";
-            method: "merge" | "squash" | "rebase";
-            gate: "solo" | "agent_tasks_label" | "none";
-        }, {
-            kind: "merge";
-            method?: "merge" | "squash" | "rebase" | undefined;
-            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
-        }>]>, "many">;
-    }, "strict", z.ZodTypeAny, {
-        name: string;
-        when: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        };
-        steps: ({
-            kind: "branch";
-            from: string;
-            per_task: boolean;
-        } | {
-            kind: "review_subagent";
-            spawn: "required" | "optional" | "skip";
-            agent_type: string;
-            rigor: "rigorous" | "quick" | "docs-only";
-            on_findings: "fix_then_remerge" | "comment_only";
-            template?: string | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for: string;
-        } | {
-            kind: "merge";
-            method: "merge" | "squash" | "rebase";
-            gate: "solo" | "agent_tasks_label" | "none";
-        })[];
-    }, {
-        name: string;
-        steps: ({
-            kind: "branch";
-            from?: string | undefined;
-            per_task?: boolean | undefined;
-        } | {
-            kind: "review_subagent";
-            spawn?: "required" | "optional" | "skip" | undefined;
-            agent_type?: string | undefined;
-            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
-            template?: string | undefined;
-            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for?: string | undefined;
-        } | {
-            kind: "merge";
-            method?: "merge" | "squash" | "rebase" | undefined;
-            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
-        })[];
-        when?: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        } | undefined;
-    }>, {
-        name: string;
-        when: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        };
-        steps: ({
-            kind: "branch";
-            from: string;
-            per_task: boolean;
-        } | {
-            kind: "review_subagent";
-            spawn: "required" | "optional" | "skip";
-            agent_type: string;
-            rigor: "rigorous" | "quick" | "docs-only";
-            on_findings: "fix_then_remerge" | "comment_only";
-            template?: string | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for: string;
-        } | {
-            kind: "merge";
-            method: "merge" | "squash" | "rebase";
-            gate: "solo" | "agent_tasks_label" | "none";
-        })[];
-    }, {
-        name: string;
-        steps: ({
-            kind: "branch";
-            from?: string | undefined;
-            per_task?: boolean | undefined;
-        } | {
-            kind: "review_subagent";
-            spawn?: "required" | "optional" | "skip" | undefined;
-            agent_type?: string | undefined;
-            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
-            template?: string | undefined;
-            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for?: string | undefined;
-        } | {
-            kind: "merge";
-            method?: "merge" | "squash" | "rebase" | undefined;
-            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
-        })[];
-        when?: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        } | undefined;
-    }>, "many">, {
-        name: string;
-        when: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        };
-        steps: ({
-            kind: "branch";
-            from: string;
-            per_task: boolean;
-        } | {
-            kind: "review_subagent";
-            spawn: "required" | "optional" | "skip";
-            agent_type: string;
-            rigor: "rigorous" | "quick" | "docs-only";
-            on_findings: "fix_then_remerge" | "comment_only";
-            template?: string | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for: string;
-        } | {
-            kind: "merge";
-            method: "merge" | "squash" | "rebase";
-            gate: "solo" | "agent_tasks_label" | "none";
-        })[];
-    }[], {
-        name: string;
-        steps: ({
-            kind: "branch";
-            from?: string | undefined;
-            per_task?: boolean | undefined;
-        } | {
-            kind: "review_subagent";
-            spawn?: "required" | "optional" | "skip" | undefined;
-            agent_type?: string | undefined;
-            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
-            template?: string | undefined;
-            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for?: string | undefined;
-        } | {
-            kind: "merge";
-            method?: "merge" | "squash" | "rebase" | undefined;
-            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
-        })[];
-        when?: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        } | undefined;
-    }[]>>;
-    review_templates: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-    audit: z.ZodDefault<z.ZodObject<{
-        redact: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodEffects<z.ZodObject<{
-            regex: z.ZodString;
-            replacement: z.ZodDefault<z.ZodString>;
-        }, "strict", z.ZodTypeAny, {
-            regex: string;
-            replacement: string;
-        }, {
-            regex: string;
-            replacement?: string | undefined;
-        }>, {
-            regex: string;
-            replacement: string;
-        }, {
-            regex: string;
-            replacement?: string | undefined;
-        }>, z.ZodObject<{
-            env_var: z.ZodString;
-            replacement: z.ZodDefault<z.ZodString>;
-        }, "strict", z.ZodTypeAny, {
-            replacement: string;
-            env_var: string;
-        }, {
-            env_var: string;
-            replacement?: string | undefined;
-        }>]>, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        redact: ({
-            regex: string;
-            replacement: string;
-        } | {
-            replacement: string;
-            env_var: string;
-        })[];
-    }, {
-        redact?: ({
-            regex: string;
-            replacement?: string | undefined;
-        } | {
-            env_var: string;
-            replacement?: string | undefined;
-        })[] | undefined;
-    }>>;
-    toolchain_parity: z.ZodDefault<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        machine_state_dir: z.ZodOptional<z.ZodString>;
-        profile: z.ZodOptional<z.ZodString>;
-        workspace_root: z.ZodOptional<z.ZodString>;
-        stale_after_days: z.ZodOptional<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        enabled: boolean;
-        machine_state_dir?: string | undefined;
-        profile?: string | undefined;
-        workspace_root?: string | undefined;
-        stale_after_days?: number | undefined;
-    }, {
-        enabled?: boolean | undefined;
-        machine_state_dir?: string | undefined;
-        profile?: string | undefined;
-        workspace_root?: string | undefined;
-        stale_after_days?: number | undefined;
-    }>>;
-    stale_base_check: z.ZodDefault<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        remote: z.ZodOptional<z.ZodString>;
-        default_branch: z.ZodOptional<z.ZodString>;
-        fetch_timeout_ms: z.ZodOptional<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        enabled: boolean;
-        remote?: string | undefined;
-        default_branch?: string | undefined;
-        fetch_timeout_ms?: number | undefined;
-    }, {
-        enabled?: boolean | undefined;
-        remote?: string | undefined;
-        default_branch?: string | undefined;
-        fetch_timeout_ms?: number | undefined;
-    }>>;
-    session_start_preflight: z.ZodDefault<z.ZodObject<{
-        setup: z.ZodDefault<z.ZodBoolean>;
-    }, "strict", z.ZodTypeAny, {
-        setup: boolean;
-    }, {
-        setup?: boolean | undefined;
-    }>>;
-    doctor: z.ZodDefault<z.ZodObject<{
-        ignore_template_drift: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        ignore_template_drift: string[];
-    }, {
-        ignore_template_drift?: string[] | undefined;
-    }>>;
-}, "strict", z.ZodTypeAny, {
-    version: 1;
-    grounding: {
-        session: {
-            auto_start: boolean;
-            id_format: string;
-        };
-        evidence_ledger: {
-            path: string;
-            retention_days: number;
-        };
-        policies_source: string | null;
-    };
-    tools: {
-        builtin: {
-            known: string[];
-        };
-        mcp: {
-            name: string;
-            command: string | string[];
-            enabled: boolean;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms: number;
-            } | undefined;
-        }[];
-        cli: {
-            name: string;
-            required: boolean;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-        }[];
-        skills: {
-            enabled: string[];
-            source_dirs: string[];
-            required?: string[] | undefined;
-        };
-    };
-    memory: {
-        directories: {
-            path: string;
-            scope: "project" | "user";
-        }[];
-        retention: {
-            staleness_days: number;
-            broken_refs: "warn" | "error" | "ignore";
-        };
-        scopes: {
-            default: "project" | "user";
-            allowed: ("project" | "user")[];
-        };
-        router?: {
-            command: string[];
-            enabled: boolean;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-        } | undefined;
-    };
-    hooks: {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        budget_ms: number;
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }[];
-    policies: {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }[];
-    policy_packs: {
-        name: string;
-        enabled: boolean;
-        source: string;
-        config: Record<string, unknown>;
-        description?: string | undefined;
-        min_version?: string | undefined;
-    }[];
-    risk: {
-        classifiers: {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }[];
-        degraded_fail_posture: "preserve_enforcement" | "fail_open";
-        safe_deletion_roots: string[];
-    };
-    environments: {
-        resolvers: {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }[];
-    };
-    permission_profiles: Record<string, {
-        actions: {
-            push?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            bash?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            read?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            edit?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            commit?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            pr?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            deploy?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-        };
-        description?: string | undefined;
-    }>;
-    workflows: {
-        name: string;
-        when: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        };
-        steps: ({
-            kind: "branch";
-            from: string;
-            per_task: boolean;
-        } | {
-            kind: "review_subagent";
-            spawn: "required" | "optional" | "skip";
-            agent_type: string;
-            rigor: "rigorous" | "quick" | "docs-only";
-            on_findings: "fix_then_remerge" | "comment_only";
-            template?: string | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for: string;
-        } | {
-            kind: "merge";
-            method: "merge" | "squash" | "rebase";
-            gate: "solo" | "agent_tasks_label" | "none";
-        })[];
-    }[];
-    review_templates: Record<string, string>;
-    audit: {
-        redact: ({
-            regex: string;
-            replacement: string;
-        } | {
-            replacement: string;
-            env_var: string;
-        })[];
-    };
-    toolchain_parity: {
-        enabled: boolean;
-        machine_state_dir?: string | undefined;
-        profile?: string | undefined;
-        workspace_root?: string | undefined;
-        stale_after_days?: number | undefined;
-    };
-    stale_base_check: {
-        enabled: boolean;
-        remote?: string | undefined;
-        default_branch?: string | undefined;
-        fetch_timeout_ms?: number | undefined;
-    };
-    session_start_preflight: {
-        setup: boolean;
-    };
-    doctor: {
-        ignore_template_drift: string[];
-    };
-}, {
-    version: 1;
-    grounding?: {
-        session?: {
-            auto_start?: boolean | undefined;
-            id_format?: string | undefined;
-        } | undefined;
-        evidence_ledger?: {
-            path?: string | undefined;
-            retention_days?: number | undefined;
-        } | undefined;
-        policies_source?: string | null | undefined;
-    } | undefined;
-    tools?: {
-        builtin?: {
-            known?: string[] | undefined;
-        } | undefined;
-        mcp?: {
-            name: string;
-            command: string | string[];
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            enabled?: boolean | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms?: number | undefined;
-            } | undefined;
-        }[] | undefined;
-        cli?: {
-            name: string;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            required?: boolean | undefined;
-        }[] | undefined;
-        skills?: {
-            enabled?: string[] | undefined;
-            required?: string[] | undefined;
-            source_dirs?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    memory?: {
-        directories?: {
-            path: string;
-            scope: "project" | "user";
-        }[] | undefined;
-        router?: {
-            command: string[];
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            enabled?: boolean | undefined;
-        } | undefined;
-        retention?: {
-            staleness_days?: number | undefined;
-            broken_refs?: "warn" | "error" | "ignore" | undefined;
-        } | undefined;
-        scopes?: {
-            default?: "project" | "user" | undefined;
-            allowed?: ("project" | "user")[] | undefined;
-        } | undefined;
-    } | undefined;
-    hooks?: {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        budget_ms?: number | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }[] | undefined;
-    policies?: {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }[] | undefined;
-    policy_packs?: {
-        name: string;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        enabled?: boolean | undefined;
-        source?: string | undefined;
-        config?: Record<string, unknown> | undefined;
-    }[] | undefined;
-    risk?: {
-        classifiers?: {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }[] | undefined;
-        degraded_fail_posture?: "preserve_enforcement" | "fail_open" | undefined;
-        safe_deletion_roots?: string[] | undefined;
-    } | undefined;
-    environments?: {
-        resolvers?: {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }[] | undefined;
-    } | undefined;
-    permission_profiles?: Record<string, {
-        description?: string | undefined;
-        actions?: {
-            push?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            bash?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            read?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            edit?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            commit?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            pr?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            deploy?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-        } | undefined;
-    }> | undefined;
-    workflows?: {
-        name: string;
-        steps: ({
-            kind: "branch";
-            from?: string | undefined;
-            per_task?: boolean | undefined;
-        } | {
-            kind: "review_subagent";
-            spawn?: "required" | "optional" | "skip" | undefined;
-            agent_type?: string | undefined;
-            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
-            template?: string | undefined;
-            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for?: string | undefined;
-        } | {
-            kind: "merge";
-            method?: "merge" | "squash" | "rebase" | undefined;
-            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
-        })[];
-        when?: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        } | undefined;
-    }[] | undefined;
-    review_templates?: Record<string, string> | undefined;
-    audit?: {
-        redact?: ({
-            regex: string;
-            replacement?: string | undefined;
-        } | {
-            env_var: string;
-            replacement?: string | undefined;
-        })[] | undefined;
-    } | undefined;
-    toolchain_parity?: {
-        enabled?: boolean | undefined;
-        machine_state_dir?: string | undefined;
-        profile?: string | undefined;
-        workspace_root?: string | undefined;
-        stale_after_days?: number | undefined;
-    } | undefined;
-    stale_base_check?: {
-        enabled?: boolean | undefined;
-        remote?: string | undefined;
-        default_branch?: string | undefined;
-        fetch_timeout_ms?: number | undefined;
-    } | undefined;
-    session_start_preflight?: {
-        setup?: boolean | undefined;
-    } | undefined;
-    doctor?: {
-        ignore_template_drift?: string[] | undefined;
-    } | undefined;
-}>, {
-    version: 1;
-    grounding: {
-        session: {
-            auto_start: boolean;
-            id_format: string;
-        };
-        evidence_ledger: {
-            path: string;
-            retention_days: number;
-        };
-        policies_source: string | null;
-    };
-    tools: {
-        builtin: {
-            known: string[];
-        };
-        mcp: {
-            name: string;
-            command: string | string[];
-            enabled: boolean;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms: number;
-            } | undefined;
-        }[];
-        cli: {
-            name: string;
-            required: boolean;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-        }[];
-        skills: {
-            enabled: string[];
-            source_dirs: string[];
-            required?: string[] | undefined;
-        };
-    };
-    memory: {
-        directories: {
-            path: string;
-            scope: "project" | "user";
-        }[];
-        retention: {
-            staleness_days: number;
-            broken_refs: "warn" | "error" | "ignore";
-        };
-        scopes: {
-            default: "project" | "user";
-            allowed: ("project" | "user")[];
-        };
-        router?: {
-            command: string[];
-            enabled: boolean;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-        } | undefined;
-    };
-    hooks: {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        budget_ms: number;
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }[];
-    policies: {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }[];
-    policy_packs: {
-        name: string;
-        enabled: boolean;
-        source: string;
-        config: Record<string, unknown>;
-        description?: string | undefined;
-        min_version?: string | undefined;
-    }[];
-    risk: {
-        classifiers: {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }[];
-        degraded_fail_posture: "preserve_enforcement" | "fail_open";
-        safe_deletion_roots: string[];
-    };
-    environments: {
-        resolvers: {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }[];
-    };
-    permission_profiles: Record<string, {
-        actions: {
-            push?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            bash?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            read?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            edit?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            commit?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            pr?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            deploy?: {
-                allow: "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-        };
-        description?: string | undefined;
-    }>;
-    workflows: {
-        name: string;
-        when: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        };
-        steps: ({
-            kind: "branch";
-            from: string;
-            per_task: boolean;
-        } | {
-            kind: "review_subagent";
-            spawn: "required" | "optional" | "skip";
-            agent_type: string;
-            rigor: "rigorous" | "quick" | "docs-only";
-            on_findings: "fix_then_remerge" | "comment_only";
-            template?: string | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for: string;
-        } | {
-            kind: "merge";
-            method: "merge" | "squash" | "rebase";
-            gate: "solo" | "agent_tasks_label" | "none";
-        })[];
-    }[];
-    review_templates: Record<string, string>;
-    audit: {
-        redact: ({
-            regex: string;
-            replacement: string;
-        } | {
-            replacement: string;
-            env_var: string;
-        })[];
-    };
-    toolchain_parity: {
-        enabled: boolean;
-        machine_state_dir?: string | undefined;
-        profile?: string | undefined;
-        workspace_root?: string | undefined;
-        stale_after_days?: number | undefined;
-    };
-    stale_base_check: {
-        enabled: boolean;
-        remote?: string | undefined;
-        default_branch?: string | undefined;
-        fetch_timeout_ms?: number | undefined;
-    };
-    session_start_preflight: {
-        setup: boolean;
-    };
-    doctor: {
-        ignore_template_drift: string[];
-    };
-}, {
-    version: 1;
-    grounding?: {
-        session?: {
-            auto_start?: boolean | undefined;
-            id_format?: string | undefined;
-        } | undefined;
-        evidence_ledger?: {
-            path?: string | undefined;
-            retention_days?: number | undefined;
-        } | undefined;
-        policies_source?: string | null | undefined;
-    } | undefined;
-    tools?: {
-        builtin?: {
-            known?: string[] | undefined;
-        } | undefined;
-        mcp?: {
-            name: string;
-            command: string | string[];
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            enabled?: boolean | undefined;
-            env?: Record<string, string> | undefined;
-            health?: {
-                verb: string;
-                timeout_ms?: number | undefined;
-            } | undefined;
-        }[] | undefined;
-        cli?: {
-            name: string;
-            binary: string;
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            required?: boolean | undefined;
-        }[] | undefined;
-        skills?: {
-            enabled?: string[] | undefined;
-            required?: string[] | undefined;
-            source_dirs?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    memory?: {
-        directories?: {
-            path: string;
-            scope: "project" | "user";
-        }[] | undefined;
-        router?: {
-            command: string[];
-            min_version?: string | undefined;
-            version_command?: string[] | undefined;
-            enabled?: boolean | undefined;
-        } | undefined;
-        retention?: {
-            staleness_days?: number | undefined;
-            broken_refs?: "warn" | "error" | "ignore" | undefined;
-        } | undefined;
-        scopes?: {
-            default?: "project" | "user" | undefined;
-            allowed?: ("project" | "user")[] | undefined;
-        } | undefined;
-    } | undefined;
-    hooks?: {
-        name: string;
-        event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-        command: string;
-        blocking: false | "soft" | "hard";
-        match?: string | undefined;
-        path_match?: string | undefined;
-        bash_match?: string | undefined;
-        budget_ms?: number | undefined;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }[] | undefined;
-    policies?: {
-        name: string;
-        description: string;
-        trigger: {
-            event: "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "Stop" | "SubagentStart" | "SubagentStop" | "PreCompact";
-            match?: string | undefined;
-            path_match?: string | undefined;
-            bash_match?: string | undefined;
-            extract?: Record<string, string> | undefined;
-            input_match?: Record<string, string | number | boolean> | undefined;
-        };
-        hook: string;
-        enforcement: "warn" | "block" | "require_approval";
-        requires?: {
-            ledger_tag: string;
-            within?: string | undefined;
-            count?: {
-                exact?: number | undefined;
-                min?: number | undefined;
-                max?: number | undefined;
-            } | undefined;
-            at_head?: boolean | undefined;
-        } | undefined;
-        operator_only?: boolean | undefined;
-        producers?: ({
-            command: string;
-            description: string;
-            kind: "bash";
-        } | {
-            description: string;
-            kind: "mcp";
-            verb: string;
-            example: string;
-        } | {
-            command: string;
-            description: string;
-            kind: "ask";
-        })[] | undefined;
-        ux?: {
-            cannot: string;
-            required: string[];
-            run: string[];
-        } | undefined;
-        when?: {
-            "risk.severity_at_least"?: "low" | "medium" | "high" | "critical" | undefined;
-            "risk.category_in"?: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[] | undefined;
-            "environment.name"?: "production" | "staging" | "dev" | "local" | "unknown" | undefined;
-            "action.reversible"?: boolean | undefined;
-            "action.deletion_target_unresolvable"?: true | undefined;
-        } | undefined;
-    }[] | undefined;
-    policy_packs?: {
-        name: string;
-        description?: string | undefined;
-        min_version?: string | undefined;
-        enabled?: boolean | undefined;
-        source?: string | undefined;
-        config?: Record<string, unknown> | undefined;
-    }[] | undefined;
-    risk?: {
-        classifiers?: {
-            patterns: {
-                pattern: string;
-                categories: ("destructive" | "data_loss" | "production_mutation" | "credential_access" | "secret_exfiltration" | "network_exfiltration" | "deployment_change" | "infrastructure_change" | "privilege_escalation" | "irreversible_action" | "mass_update")[];
-                severity: "low" | "medium" | "high" | "critical";
-            }[];
-            name: string;
-            tool: string;
-        }[] | undefined;
-        degraded_fail_posture?: "preserve_enforcement" | "fail_open" | undefined;
-        safe_deletion_roots?: string[] | undefined;
-    } | undefined;
-    environments?: {
-        resolvers?: {
-            name: string;
-            environment: "production" | "staging" | "dev" | "local";
-            signals: {
-                branch_patterns?: string[] | undefined;
-                env_var_patterns?: {
-                    var: string;
-                    patterns: string[];
-                }[] | undefined;
-                kube_context_patterns?: string[] | undefined;
-                kube_namespace_patterns?: string[] | undefined;
-            };
-        }[] | undefined;
-    } | undefined;
-    permission_profiles?: Record<string, {
-        description?: string | undefined;
-        actions?: {
-            push?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            bash?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            read?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            edit?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            commit?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            pr?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-            deploy?: {
-                allow: boolean | "ask" | "true" | "false" | "limited" | "ask_or_deny";
-                requires?: {
-                    ledger_tag: string;
-                    within?: string | undefined;
-                    count?: {
-                        exact?: number | undefined;
-                        min?: number | undefined;
-                        max?: number | undefined;
-                    } | undefined;
-                    at_head?: boolean | undefined;
-                } | undefined;
-                mode?: string | undefined;
-            } | undefined;
-        } | undefined;
-    }> | undefined;
-    workflows?: {
-        name: string;
-        steps: ({
-            kind: "branch";
-            from?: string | undefined;
-            per_task?: boolean | undefined;
-        } | {
-            kind: "review_subagent";
-            spawn?: "required" | "optional" | "skip" | undefined;
-            agent_type?: string | undefined;
-            rigor?: "rigorous" | "quick" | "docs-only" | undefined;
-            template?: string | undefined;
-            on_findings?: "fix_then_remerge" | "comment_only" | undefined;
-        } | {
-            kind: "ci_gate";
-            wait_for?: string | undefined;
-        } | {
-            kind: "merge";
-            method?: "merge" | "squash" | "rebase" | undefined;
-            gate?: "solo" | "agent_tasks_label" | "none" | undefined;
-        })[];
-        when?: {
-            project?: string | undefined;
-            task_label?: string[] | undefined;
-        } | undefined;
-    }[] | undefined;
-    review_templates?: Record<string, string> | undefined;
-    audit?: {
-        redact?: ({
-            regex: string;
-            replacement?: string | undefined;
-        } | {
-            env_var: string;
-            replacement?: string | undefined;
-        })[] | undefined;
-    } | undefined;
-    toolchain_parity?: {
-        enabled?: boolean | undefined;
-        machine_state_dir?: string | undefined;
-        profile?: string | undefined;
-        workspace_root?: string | undefined;
-        stale_after_days?: number | undefined;
-    } | undefined;
-    stale_base_check?: {
-        enabled?: boolean | undefined;
-        remote?: string | undefined;
-        default_branch?: string | undefined;
-        fetch_timeout_ms?: number | undefined;
-    } | undefined;
-    session_start_preflight?: {
-        setup?: boolean | undefined;
-    } | undefined;
-    doctor?: {
-        ignore_template_drift?: string[] | undefined;
-    } | undefined;
-}>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
 export type Manifest = z.infer<typeof ManifestSchema>;
+/**
+ * One manifest-validation issue, as published by `ManifestParseError`.
+ * Harness-owned so the public type names no zod: `path` is remapped to
+ * the manifest as written (`remapIssuePath`) and holds only the keys
+ * YAML/JSON data can carry (a string key, an array index); `code` is the
+ * zod issue code passed through as an opaque string, following zod's
+ * values (which changed in zod 4) without being a stable harness
+ * contract. An item carries exactly these three fields: the zod issue's
+ * per-code extras (`origin`, `values`, `keys`, ...) are dropped at the
+ * boundary in `parseManifestWithWarnings`.
+ */
+export interface ManifestIssue {
+    path: (string | number)[];
+    message: string;
+    code: string;
+}
 export declare class ManifestParseError extends Error {
-    readonly issues: z.ZodIssue[];
-    constructor(message: string, issues: z.ZodIssue[]);
+    readonly issues: ManifestIssue[];
+    constructor(message: string, issues: ManifestIssue[]);
+}
+export interface ParsedManifest {
+    manifest: Manifest;
+    /**
+     * Removed keys, removed hook fields and removed packs that were stripped
+     * before the parse, then every hook command or pack `producers` / `ux.run`
+     * line that still calls a removed command.
+     */
+    warnings: ManifestPostureWarning[];
+    /**
+     * Original positions of the policy_packs[] entries that
+     * survived the drop, for a caller that reports a diagnostic about the
+     * parsed manifest (`remapDiagnosticPath`). Absent when nothing was dropped.
+     */
+    indexMaps?: StrippedIndexMaps;
 }
+/**
+ * Parse a raw manifest, first stripping every removed manifest path, every
+ * removed hook field and every removed pack name (`src/schema/removed-keys.ts`):
+ * those warn (an empty value of a removed key does not) and are ignored
+ * instead of failing the strict parse. Any other unknown key still fails it. A manifest that parses is then scanned for sites that still call
+ * a removed command (`findRemovedCommandUses`); those warn too, with the
+ * manifest path of each site.
+ */
+export declare function parseManifestWithWarnings(raw: unknown): ParsedManifest;
+/** `parseManifestWithWarnings` for callers that do not report the warnings. */
 export declare function parseManifest(raw: unknown): Manifest;
 export * from "./grounding.js";
 export * from "./tools.js";
 export * from "./memory.js";
 export * from "./hooks.js";
-export * from "./permission-profiles.js";
-export * from "./policies.js";
+export * from "./policy-ux.js";
 export * from "./policy-packs.js";
-export * from "./risk.js";
-export * from "./toolchain-parity.js";
-export * from "./environments.js";
-export * from "./workflows.js";
-export * from "./audit.js";
-export * from "./doctor.js";
-export * from "./extract.js";
-export * from "./requires.js";
+export { REMOVED_MANIFEST_PATHS, REMOVED_HOOK_FIELDS, REMOVED_PACK_NAMES, REMOVED_MANIFEST_TABLE, REMOVED_COMMANDS, REMOVED_LIST_CATEGORIES, REMOVED_DESCRIBE_PILLARS, removedInspectNameMessage, stripRemovedManifestEntries, stripRemovedManifestPaths, stripRemovedHookFields, formatPostureWarning, invokesRemovedCommand, findRemovedCommandUses, remapDiagnosticPath, } from "./removed-keys.js";
+export type { RemovedManifestPath, RemovedHookField, RemovedPackName, RemovedManifestTable, IndexMap, StrippedIndexMaps, ManifestPostureWarning, StrippedManifest, RemovedCommand, RemovedInspectName, } from "./removed-keys.js";