@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/schema/index.js

@@ -1,82 +1,21 @@
 import { z } from "zod";
-import { EnvironmentsSchema } from "./environments.js";
 import { GroundingSchema } from "./grounding.js";
 import { HooksSchema } from "./hooks.js";
 import { MemorySchema } from "./memory.js";
-import { PoliciesSchema } from "./policies.js";
-import { PermissionProfilesSchema } from "./permission-profiles.js";
 import { PolicyPacksSchema } from "./policy-packs.js";
-import { RiskSchema } from "./risk.js";
 import { ToolsSchema } from "./tools.js";
-import { ToolchainParitySchema } from "./toolchain-parity.js";
-import { StaleBaseCheckSchema } from "./stale-base-check.js";
-import { SessionStartPreflightSchema } from "./session-start-preflight.js";
-import { AuditSchema } from "./audit.js";
-import { DoctorSchema } from "./doctor.js";
-import { ReviewTemplatesSchema, WorkflowsSchema } from "./workflows.js";
+import { findRemovedCommandUses, remapIssuePath, stripRemovedManifestEntries, } from "./removed-keys.js";
 export const SUPPORTED_MANIFEST_VERSION = 1;
 export const ManifestSchema = z
     .object({
     version: z.literal(SUPPORTED_MANIFEST_VERSION),
-    grounding: GroundingSchema.default({}),
-    tools: ToolsSchema.default({}),
-    memory: MemorySchema.default({}),
+    grounding: GroundingSchema.prefault({}),
+    tools: ToolsSchema.prefault({}),
+    memory: MemorySchema.prefault({}),
     hooks: HooksSchema.default([]),
-    policies: PoliciesSchema.default([]),
     policy_packs: PolicyPacksSchema.default([]),
-    // Phase 7 Risk Gate inputs — LIVE since Phase 7 #3/#5:
-    // `risk.classifiers[]` feeds `classifyRisk` (runtime/intercept.ts)
-    // on every PreToolUse once the manifest declares at least one
-    // `when:`-bearing policy (the riskGateActive guard), and
-    // `when.risk.*` clauses consume the result in runtime/when-eval.ts.
-    // See docs/risk-gate.md.
-    risk: RiskSchema.default({}),
-    environments: EnvironmentsSchema.default({}),
-    permission_profiles: PermissionProfilesSchema.default({}),
-    workflows: WorkflowsSchema.default([]),
-    review_templates: ReviewTemplatesSchema.default({}),
-    audit: AuditSchema.default({}),
-    // Optional, default-OFF: `harness session-start toolchain-parity`
-    // snapshot + peer-drift-compare config. See ./toolchain-parity.ts.
-    toolchain_parity: ToolchainParitySchema.default({}),
-    // Optional, default-OFF: `harness session-start stale-base-check`
-    // config (task ce3903b0, incident ea8becf5). See ./stale-base-check.ts.
-    stale_base_check: StaleBaseCheckSchema.default({}),
-    // Optional, default-OFF: `harness session-start preflight` (and its
-    // `harness preflight` alias) `--setup` passthrough (task 30183330).
-    // See ./session-start-preflight.ts.
-    session_start_preflight: SessionStartPreflightSchema.default({}),
-    // Optional: `harness doctor` config, e.g. the deliberate-opt-out
-    // list for the template-policy-drift check. See ./doctor.ts.
-    doctor: DoctorSchema.default({}),
 })
-    .strict()
-    .superRefine((manifest, ctx) => {
-    const hookNames = new Set(manifest.hooks.map((h) => h.name));
-    manifest.policies.forEach((p, i) => {
-        if (!hookNames.has(p.hook)) {
-            ctx.addIssue({
-                code: z.ZodIssueCode.custom,
-                path: ["policies", i, "hook"],
-                message: `policy "${p.name}" references hook "${p.hook}" which is not declared in hooks[]`,
-            });
-        }
-    });
-    const templateNames = new Set(Object.keys(manifest.review_templates));
-    manifest.workflows.forEach((wf, wi) => {
-        wf.steps.forEach((step, si) => {
-            if (step.kind === "review_subagent" && step.template !== undefined) {
-                if (!templateNames.has(step.template)) {
-                    ctx.addIssue({
-                        code: z.ZodIssueCode.custom,
-                        path: ["workflows", wi, "steps", si, "template"],
-                        message: `review_subagent.template "${step.template}" is not defined in review_templates`,
-                    });
-                }
-            }
-        });
-    });
-});
+    .strict();
 export class ManifestParseError extends Error {
     issues;
     constructor(message, issues) {
@@ -117,30 +56,52 @@ function friendlyVersionIssues(issues, raw) {
         return { ...i, message };
     });
 }
-export function parseManifest(raw) {
-    const result = ManifestSchema.safeParse(raw);
+/**
+ * Parse a raw manifest, first stripping every removed manifest path, every
+ * removed hook field and every removed pack name (`src/schema/removed-keys.ts`):
+ * those warn (an empty value of a removed key does not) and are ignored
+ * instead of failing the strict parse. Any other unknown key still fails it. A manifest that parses is then scanned for sites that still call
+ * a removed command (`findRemovedCommandUses`); those warn too, with the
+ * manifest path of each site.
+ */
+export function parseManifestWithWarnings(raw) {
+    const stripped = stripRemovedManifestEntries(raw);
+    const result = ManifestSchema.safeParse(stripped.raw);
     if (!result.success) {
-        const issues = friendlyVersionIssues(result.error.issues, raw);
+        // Dropping an entry re-indexes policy_packs[]: name the index the
+        // operator wrote, not the one the strict parse saw.
+        // Project each zod issue onto the published shape: exactly
+        // path/message/code, extras dropped. The `as` is not a widening:
+        // zod declares `path: PropertyKey[]`, but manifest data arrives from
+        // YAML/JSON, where every segment is a string key or an array index,
+        // and remapIssuePath returns `(string | number)[]`.
+        const issues = friendlyVersionIssues(result.error.issues, raw).map((i) => ({
+            path: remapIssuePath(i.path, stripped.indexMaps),
+            message: i.message,
+            code: i.code,
+        }));
         const summary = issues
             .map((i) => `  ${i.path.join(".") || "<root>"}: ${i.message}`)
             .join("\n");
         throw new ManifestParseError(`harness manifest failed validation:\n${summary}`, issues);
     }
-    return result.data;
+    return {
+        manifest: result.data,
+        warnings: [...stripped.warnings, ...findRemovedCommandUses(raw)],
+        ...(stripped.indexMaps !== undefined ? { indexMaps: stripped.indexMaps } : {}),
+    };
+}
+/** `parseManifestWithWarnings` for callers that do not report the warnings. */
+export function parseManifest(raw) {
+    return parseManifestWithWarnings(raw).manifest;
 }
 export * from "./grounding.js";
 export * from "./tools.js";
 export * from "./memory.js";
 export * from "./hooks.js";
-export * from "./permission-profiles.js";
-export * from "./policies.js";
+export * from "./policy-ux.js";
 export * from "./policy-packs.js";
-export * from "./risk.js";
-export * from "./toolchain-parity.js";
-export * from "./environments.js";
-export * from "./workflows.js";
-export * from "./audit.js";
-export * from "./doctor.js";
-export * from "./extract.js";
-export * from "./requires.js";
+// Named, not `export *`: `removedCommandMessage` is shared with the doctor
+// but is not part of the package API.
+export { REMOVED_MANIFEST_PATHS, REMOVED_HOOK_FIELDS, REMOVED_PACK_NAMES, REMOVED_MANIFEST_TABLE, REMOVED_COMMANDS, REMOVED_LIST_CATEGORIES, REMOVED_DESCRIBE_PILLARS, removedInspectNameMessage, stripRemovedManifestEntries, stripRemovedManifestPaths, stripRemovedHookFields, formatPostureWarning, invokesRemovedCommand, findRemovedCommandUses, remapDiagnosticPath, } from "./removed-keys.js";
 //# sourceMappingURL=index.js.map

package/dist/schema/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAExE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9C,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,YAAY,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,uDAAuD;IACvD,mEAAmE;IACnE,8DAA8D;IAC9D,yDAAyD;IACzD,oEAAoE;IACpE,yBAAyB;IACzB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,mBAAmB,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,kEAAkE;IAClE,mEAAmE;IACnE,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,kEAAkE;IAClE,wEAAwE;IACxE,gBAAgB,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,oEAAoE;IACpE,oEAAoE;IACpE,oCAAoC;IACpC,uBAAuB,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,iEAAiE;IACjE,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;CACjC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC;gBAC7B,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,IAAI,oCAAoC;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;QACpC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtC,GAAG,CAAC,QAAQ,CAAC;wBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;wBAC3B,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC;wBAChD,OAAO,EAAE,6BAA6B,IAAI,CAAC,QAAQ,sCAAsC;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAIL,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB;IAFlB,YACE,OAAe,EACC,MAAoB;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAc;QAGpC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAAC,MAAoB,EAAE,GAAY;IAC/D,MAAM,QAAQ,GACZ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAC5D,CAAC,CAAE,GAA+B,CAAC,SAAS,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,OAAe,CAAC;QACpB,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,OAAO,GAAG,4CAA4C,0BAA0B,0CAA0C,0BAA0B,GAAG,CAAC;QAC1J,CAAC;aAAM,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,GAAG,0BAA0B,EAAE,CAAC;YACjF,OAAO,GAAG,sCAAsC,0BAA0B,oCAAoC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,2HAA2H,CAAC;QACpQ,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,gCAAgC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,wCAAwC,0BAA0B,oBAAoB,0BAA0B,eAAe,CAAC;QACpM,CAAC;QACD,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,kBAAkB,CAC1B,wCAAwC,OAAO,EAAE,EACjD,MAAM,CACP,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,2BAA2B,GAG5B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9C,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,YAAY,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAqBZ,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB;IAFlB,YACE,OAAe,EACC,MAAuB;QAEvC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAiB;QAGvC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAAC,MAA0B,EAAE,GAAY;IACrE,MAAM,QAAQ,GACZ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAC5D,CAAC,CAAE,GAA+B,CAAC,SAAS,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,OAAe,CAAC;QACpB,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,OAAO,GAAG,4CAA4C,0BAA0B,0CAA0C,0BAA0B,GAAG,CAAC;QAC1J,CAAC;aAAM,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,GAAG,0BAA0B,EAAE,CAAC;YACjF,OAAO,GAAG,sCAAsC,0BAA0B,oCAAoC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,2HAA2H,CAAC;QACpQ,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,gCAAgC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,wCAAwC,0BAA0B,oBAAoB,0BAA0B,eAAe,CAAC;QACpM,CAAC;QACD,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAkBD;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,kEAAkE;QAClE,oDAAoD;QACpD,2DAA2D;QAC3D,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,MAAM,GAAoB,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1F,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,IAAsC,EAAE,QAAQ,CAAC,SAAS,CAAC;YAClF,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,kBAAkB,CAC1B,wCAAwC,OAAO,EAAE,EACjD,MAAM,CACP,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;AACjD,CAAC;AAED,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,2EAA2E;AAC3E,sCAAsC;AACtC,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC"}

package/dist/schema/memory.d.ts

@@ -1,147 +1,70 @@
 import { z } from "zod";
-export declare const MemoryScopeSchema: z.ZodEnum<["project", "user"]>;
+export declare const MemoryScopeSchema: z.ZodEnum<{
+    project: "project";
+    user: "user";
+}>;
 export declare const MemoryDirectorySchema: z.ZodObject<{
     path: z.ZodString;
-    scope: z.ZodEnum<["project", "user"]>;
-}, "strict", z.ZodTypeAny, {
-    path: string;
-    scope: "project" | "user";
-}, {
-    path: string;
-    scope: "project" | "user";
-}>;
+    scope: z.ZodEnum<{
+        project: "project";
+        user: "user";
+    }>;
+}, z.core.$strict>;
 export declare const MemoryRouterSchema: z.ZodObject<{
-    command: z.ZodArray<z.ZodString, "many">;
+    command: z.ZodArray<z.ZodString>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     min_version: z.ZodOptional<z.ZodString>;
-    version_command: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    command: string[];
-    enabled: boolean;
-    min_version?: string | undefined;
-    version_command?: string[] | undefined;
-}, {
-    command: string[];
-    min_version?: string | undefined;
-    version_command?: string[] | undefined;
-    enabled?: boolean | undefined;
-}>;
+    version_command: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
 export declare const MemoryRetentionSchema: z.ZodObject<{
     staleness_days: z.ZodDefault<z.ZodNumber>;
-    broken_refs: z.ZodDefault<z.ZodEnum<["warn", "error", "ignore"]>>;
-}, "strict", z.ZodTypeAny, {
-    staleness_days: number;
-    broken_refs: "warn" | "error" | "ignore";
-}, {
-    staleness_days?: number | undefined;
-    broken_refs?: "warn" | "error" | "ignore" | undefined;
-}>;
-export declare const MemoryScopesSchema: z.ZodEffects<z.ZodObject<{
-    default: z.ZodDefault<z.ZodEnum<["project", "user"]>>;
-    allowed: z.ZodDefault<z.ZodArray<z.ZodEnum<["project", "user"]>, "many">>;
-}, "strict", z.ZodTypeAny, {
-    default: "project" | "user";
-    allowed: ("project" | "user")[];
-}, {
-    default?: "project" | "user" | undefined;
-    allowed?: ("project" | "user")[] | undefined;
-}>, {
-    default: "project" | "user";
-    allowed: ("project" | "user")[];
-}, {
-    default?: "project" | "user" | undefined;
-    allowed?: ("project" | "user")[] | undefined;
-}>;
+    broken_refs: z.ZodDefault<z.ZodEnum<{
+        error: "error";
+        warn: "warn";
+        ignore: "ignore";
+    }>>;
+}, z.core.$strict>;
+export declare const MemoryScopesSchema: z.ZodObject<{
+    default: z.ZodDefault<z.ZodEnum<{
+        project: "project";
+        user: "user";
+    }>>;
+    allowed: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        project: "project";
+        user: "user";
+    }>>>;
+}, z.core.$strict>;
 export declare const MemorySchema: z.ZodObject<{
     directories: z.ZodDefault<z.ZodArray<z.ZodObject<{
         path: z.ZodString;
-        scope: z.ZodEnum<["project", "user"]>;
-    }, "strict", z.ZodTypeAny, {
-        path: string;
-        scope: "project" | "user";
-    }, {
-        path: string;
-        scope: "project" | "user";
-    }>, "many">>;
+        scope: z.ZodEnum<{
+            project: "project";
+            user: "user";
+        }>;
+    }, z.core.$strict>>>;
     router: z.ZodOptional<z.ZodObject<{
-        command: z.ZodArray<z.ZodString, "many">;
+        command: z.ZodArray<z.ZodString>;
         enabled: z.ZodDefault<z.ZodBoolean>;
         min_version: z.ZodOptional<z.ZodString>;
-        version_command: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        command: string[];
-        enabled: boolean;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    }, {
-        command: string[];
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-        enabled?: boolean | undefined;
-    }>>;
-    retention: z.ZodDefault<z.ZodObject<{
+        version_command: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    retention: z.ZodPrefault<z.ZodObject<{
         staleness_days: z.ZodDefault<z.ZodNumber>;
-        broken_refs: z.ZodDefault<z.ZodEnum<["warn", "error", "ignore"]>>;
-    }, "strict", z.ZodTypeAny, {
-        staleness_days: number;
-        broken_refs: "warn" | "error" | "ignore";
-    }, {
-        staleness_days?: number | undefined;
-        broken_refs?: "warn" | "error" | "ignore" | undefined;
-    }>>;
-    scopes: z.ZodDefault<z.ZodEffects<z.ZodObject<{
-        default: z.ZodDefault<z.ZodEnum<["project", "user"]>>;
-        allowed: z.ZodDefault<z.ZodArray<z.ZodEnum<["project", "user"]>, "many">>;
-    }, "strict", z.ZodTypeAny, {
-        default: "project" | "user";
-        allowed: ("project" | "user")[];
-    }, {
-        default?: "project" | "user" | undefined;
-        allowed?: ("project" | "user")[] | undefined;
-    }>, {
-        default: "project" | "user";
-        allowed: ("project" | "user")[];
-    }, {
-        default?: "project" | "user" | undefined;
-        allowed?: ("project" | "user")[] | undefined;
-    }>>;
-}, "strict", z.ZodTypeAny, {
-    directories: {
-        path: string;
-        scope: "project" | "user";
-    }[];
-    retention: {
-        staleness_days: number;
-        broken_refs: "warn" | "error" | "ignore";
-    };
-    scopes: {
-        default: "project" | "user";
-        allowed: ("project" | "user")[];
-    };
-    router?: {
-        command: string[];
-        enabled: boolean;
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-    } | undefined;
-}, {
-    directories?: {
-        path: string;
-        scope: "project" | "user";
-    }[] | undefined;
-    router?: {
-        command: string[];
-        min_version?: string | undefined;
-        version_command?: string[] | undefined;
-        enabled?: boolean | undefined;
-    } | undefined;
-    retention?: {
-        staleness_days?: number | undefined;
-        broken_refs?: "warn" | "error" | "ignore" | undefined;
-    } | undefined;
-    scopes?: {
-        default?: "project" | "user" | undefined;
-        allowed?: ("project" | "user")[] | undefined;
-    } | undefined;
-}>;
+        broken_refs: z.ZodDefault<z.ZodEnum<{
+            error: "error";
+            warn: "warn";
+            ignore: "ignore";
+        }>>;
+    }, z.core.$strict>>;
+    scopes: z.ZodPrefault<z.ZodObject<{
+        default: z.ZodDefault<z.ZodEnum<{
+            project: "project";
+            user: "user";
+        }>>;
+        allowed: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            project: "project";
+            user: "user";
+        }>>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
 export type Memory = z.infer<typeof MemorySchema>;

package/dist/schema/memory.js

@@ -47,8 +47,8 @@ export const MemorySchema = z
     .object({
     directories: z.array(MemoryDirectorySchema).default([]),
     router: MemoryRouterSchema.optional(),
-    retention: MemoryRetentionSchema.default({}),
-    scopes: MemoryScopesSchema.default({}),
+    retention: MemoryRetentionSchema.prefault({}),
+    scopes: MemoryScopesSchema.prefault({}),
 })
     .strict();
 //# sourceMappingURL=memory.js.map

package/dist/schema/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/schema/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAE5F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,iBAAiB;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;SACvD,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACxD,qEAAqE;IACrE,+DAA+D;IAC/D,mEAAmE;IACnE,+DAA+D;IAC/D,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,kEAAkE;AAClE,uEAAuE;AACvE,uEAAuE;AACvE,mEAAmE;AACnE,2CAA2C;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC;CAChE,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;IAC5C,OAAO,EAAE,4DAA4D;CACtE,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;CACvC,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/schema/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAE5F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,iBAAiB;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;SACvD,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACxD,qEAAqE;IACrE,+DAA+D;IAC/D,mEAAmE;IACnE,+DAA+D;IAC/D,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,kEAAkE;AAClE,uEAAuE;AACvE,uEAAuE;AACvE,mEAAmE;AACnE,2CAA2C;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC;CAChE,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;IAC5C,OAAO,EAAE,4DAA4D;CACtE,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7C,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;CACxC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/schema/policy-packs.d.ts

@@ -6,55 +6,13 @@ export declare const PolicyPackSchema: z.ZodObject<{
     description: z.ZodOptional<z.ZodString>;
     config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     min_version: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    name: string;
-    enabled: boolean;
-    source: string;
-    config: Record<string, unknown>;
-    description?: string | undefined;
-    min_version?: string | undefined;
-}, {
-    name: string;
-    description?: string | undefined;
-    min_version?: string | undefined;
-    enabled?: boolean | undefined;
-    source?: string | undefined;
-    config?: Record<string, unknown> | undefined;
-}>;
-export declare const PolicyPacksSchema: z.ZodEffects<z.ZodArray<z.ZodObject<{
+}, z.core.$strict>;
+export declare const PolicyPacksSchema: z.ZodArray<z.ZodObject<{
     name: z.ZodString;
     source: z.ZodDefault<z.ZodString>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     description: z.ZodOptional<z.ZodString>;
     config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     min_version: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    name: string;
-    enabled: boolean;
-    source: string;
-    config: Record<string, unknown>;
-    description?: string | undefined;
-    min_version?: string | undefined;
-}, {
-    name: string;
-    description?: string | undefined;
-    min_version?: string | undefined;
-    enabled?: boolean | undefined;
-    source?: string | undefined;
-    config?: Record<string, unknown> | undefined;
-}>, "many">, {
-    name: string;
-    enabled: boolean;
-    source: string;
-    config: Record<string, unknown>;
-    description?: string | undefined;
-    min_version?: string | undefined;
-}[], {
-    name: string;
-    description?: string | undefined;
-    min_version?: string | undefined;
-    enabled?: boolean | undefined;
-    source?: string | undefined;
-    config?: Record<string, unknown> | undefined;
-}[]>;
+}, z.core.$strict>>;
 export type PolicyPack = z.infer<typeof PolicyPackSchema>;

package/dist/schema/policy-packs.js

@@ -5,7 +5,7 @@ import { NUMERIC_VERSION_MESSAGE, NUMERIC_VERSION_PATTERN } from "../io/version-
 // not contain `/`, `..`, or anything else that would escape the policy-
 // packs subtree. Constrain to alphanumeric + dash + underscore + dot,
 // must start with an alphanumeric. This matches the canonical builtin
-// (`understanding-before-execution`) and is friendly to future names like
+// (`branch-protection`) and is friendly to future names like
 // `safe-shell.v2`.
 const PACK_NAME_RE = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
 export const PolicyPackSchema = z
@@ -18,17 +18,11 @@ export const PolicyPackSchema = z
     enabled: z.boolean().default(true),
     description: z.string().min(1).optional(),
     config: z.record(z.string().min(1), z.unknown()).default({}),
-    // Optional version floor on the pack's canonical package-side bin.
-    // The hook-level `min_version` (carried by each pack-emitted Hook
-    // entry) covers each individual hook command; this pack-level floor
-    // catches a config-schema mismatch between the harness-side pack
-    // definition and the package-side runtime: e.g. a `config:` key
-    // that only the newer release honours. `harness doctor` probes the
-    // version command registered per builtin in the policy-pack
-    // registry and warns when the installed binary is below this floor.
-    // The pack still functions in degraded mode; only features gated on
-    // the newer version are lost. Optional: legacy manifests without
-    // the field stay silent.
+    // Optional declared version floor. Builtin packs ship inside harness
+    // and have no package-side bin to probe, so the floor cannot be
+    // enforced: `harness doctor` reports a declared value as a warning
+    // (see src/policy-packs/version-check.ts). Optional: manifests
+    // without the field stay silent.
     min_version: z
         .string()
         .min(1)
@@ -41,7 +35,7 @@ export const PolicyPacksSchema = z.array(PolicyPackSchema).superRefine((packs, c
     packs.forEach((pack, i) => {
         if (seen.has(pack.name)) {
             ctx.addIssue({
-                code: z.ZodIssueCode.custom,
+                code: "custom",
                 path: [i, "name"],
                 message: `duplicate policy_pack name: ${pack.name}`,
             });

package/dist/schema/policy-packs.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-packs.js","sourceRoot":"","sources":["../../src/schema/policy-packs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAE5F,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AACxE,sEAAsE;AACtE,sEAAsE;AACtE,0EAA0E;AAC1E,mBAAmB;AACnB,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CACJ,YAAY,EACZ,gHAAgH,CACjH;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,mEAAmE;IACnE,kEAAkE;IAClE,oEAAoE;IACpE,iEAAiE;IACjE,gEAAgE;IAChE,mEAAmE;IACnE,4DAA4D;IAC5D,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,yBAAyB;IACzB,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;SACvD,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC;gBACjB,OAAO,EAAE,+BAA+B,IAAI,CAAC,IAAI,EAAE;aACpD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"policy-packs.js","sourceRoot":"","sources":["../../src/schema/policy-packs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAE5F,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AACxE,sEAAsE;AACtE,sEAAsE;AACtE,6DAA6D;AAC7D,mBAAmB;AACnB,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CACJ,YAAY,EACZ,gHAAgH,CACjH;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,qEAAqE;IACrE,gEAAgE;IAChE,mEAAmE;IACnE,+DAA+D;IAC/D,iCAAiC;IACjC,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;SACvD,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC;gBACjB,OAAO,EAAE,+BAA+B,IAAI,CAAC,IAAI,EAAE;aACpD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/schema/policy-ux.d.ts

@@ -0,0 +1,7 @@
+import { z } from "zod";
+export declare const PolicyUxSchema: z.ZodObject<{
+    cannot: z.ZodString;
+    required: z.ZodArray<z.ZodString>;
+    run: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type PolicyUx = z.infer<typeof PolicyUxSchema>;

package/dist/schema/policy-ux.js

@@ -0,0 +1,18 @@
+import { z } from "zod";
+// `ux:` is the agent-facing translation of a block, used by the builtin
+// policy packs' `config.ux` (branch-protection). When declared, it replaces
+// the agent-facing reason text with a structured, plain-language form: a
+// `cannot` sentence, a `required:` list of human-readable preconditions, and
+// a `run:` list of exact commands.
+//
+// All three fields are templates: `${VAR}` references are substituted by
+// `substituteTemplate` (`src/runtime/agent-facing.ts`) from the values the
+// caller supplies (the branch-protection hook passes `BRANCH`).
+export const PolicyUxSchema = z
+    .object({
+    cannot: z.string().min(1),
+    required: z.array(z.string().min(1)).min(1),
+    run: z.array(z.string().min(1)).min(1),
+})
+    .strict();
+//# sourceMappingURL=policy-ux.js.map

package/dist/schema/policy-ux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-ux.js","sourceRoot":"","sources":["../../src/schema/policy-ux.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,mCAAmC;AACnC,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,gEAAgE;AAChE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACvC,CAAC;KACD,MAAM,EAAE,CAAC"}