@lannguyensi/harness 0.7.0 → 0.8.1

package/dist/schema/index.d.ts

@@ -88,16 +88,16 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
             required: z.ZodDefault<z.ZodBoolean>;
         }, "strict", z.ZodTypeAny, {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }, {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }>, "many">>;
         skills: z.ZodDefault<z.ZodEffects<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -143,8 +143,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         }[];
         cli: {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }[];
@@ -170,9 +170,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         cli?: {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }[] | undefined;
         skills?: {
             enabled?: string[] | undefined;
@@ -195,8 +195,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         }[];
         cli: {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }[];
@@ -222,9 +222,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         cli?: {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }[] | undefined;
         skills?: {
             enabled?: string[] | undefined;
@@ -581,6 +581,1067 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[]>>;
+    policy_packs: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        source: z.ZodDefault<z.ZodString>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+        config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        enabled: boolean;
+        source: string;
+        config: Record<string, unknown>;
+        description?: string | undefined;
+    }, {
+        name: string;
+        description?: string | undefined;
+        enabled?: boolean | undefined;
+        source?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }>, "many">, {
+        name: string;
+        enabled: boolean;
+        source: string;
+        config: Record<string, unknown>;
+        description?: string | undefined;
+    }[], {
+        name: string;
+        description?: string | undefined;
+        enabled?: boolean | undefined;
+        source?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }[]>>;
+    permission_profiles: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
+        actions: z.ZodDefault<z.ZodObject<{
+            read: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            edit: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            bash: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            commit: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            push: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            pr: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+            deploy: z.ZodOptional<z.ZodObject<{
+                allow: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "ask", "limited", "ask_or_deny"]>]>, "true" | "false" | "ask" | "limited" | "ask_or_deny", boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny">;
+                mode: z.ZodOptional<z.ZodString>;
+                requires: z.ZodOptional<z.ZodObject<{
+                    ledger_tag: z.ZodString;
+                    within: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                    count: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+                        min: z.ZodOptional<z.ZodNumber>;
+                        max: z.ZodOptional<z.ZodNumber>;
+                        exact: z.ZodOptional<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }, {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }, {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }, {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            }>>;
+        }, "strict", z.ZodTypeAny, {
+            push?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        }, {
+            push?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        actions: {
+            push?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        };
+        description?: string | undefined;
+    }, {
+        description?: string | undefined;
+        actions?: {
+            push?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }>>>;
     workflows: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
         name: z.ZodString;
         when: z.ZodDefault<z.ZodObject<{
@@ -872,8 +1933,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         }[];
         cli: {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }[];
@@ -934,6 +1995,109 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[];
+    policy_packs: {
+        name: string;
+        enabled: boolean;
+        source: string;
+        config: Record<string, unknown>;
+        description?: string | undefined;
+    }[];
+    permission_profiles: Record<string, {
+        actions: {
+            push?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        };
+        description?: string | undefined;
+    }>;
     workflows: {
         name: string;
         when: {
@@ -1000,9 +2164,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         cli?: {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }[] | undefined;
         skills?: {
             enabled?: string[] | undefined;
@@ -1061,6 +2225,109 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[] | undefined;
+    policy_packs?: {
+        name: string;
+        description?: string | undefined;
+        enabled?: boolean | undefined;
+        source?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    permission_profiles?: Record<string, {
+        description?: string | undefined;
+        actions?: {
+            push?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }> | undefined;
     workflows?: {
         name: string;
         steps: ({
@@ -1126,8 +2393,8 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         }[];
         cli: {
             name: string;
-            binary: string;
             required: boolean;
+            binary: string;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
         }[];
@@ -1188,6 +2455,109 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[];
+    policy_packs: {
+        name: string;
+        enabled: boolean;
+        source: string;
+        config: Record<string, unknown>;
+        description?: string | undefined;
+    }[];
+    permission_profiles: Record<string, {
+        actions: {
+            push?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        };
+        description?: string | undefined;
+    }>;
     workflows: {
         name: string;
         when: {
@@ -1254,9 +2624,9 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         cli?: {
             name: string;
             binary: string;
+            required?: boolean | undefined;
             min_version?: string | undefined;
             version_command?: string[] | undefined;
-            required?: boolean | undefined;
         }[] | undefined;
         skills?: {
             enabled?: string[] | undefined;
@@ -1315,6 +2685,109 @@ export declare const ManifestSchema: z.ZodEffects<z.ZodObject<{
         hook: string;
         enforcement: "warn" | "block";
     }[] | undefined;
+    policy_packs?: {
+        name: string;
+        description?: string | undefined;
+        enabled?: boolean | undefined;
+        source?: string | undefined;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    permission_profiles?: Record<string, {
+        description?: string | undefined;
+        actions?: {
+            push?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            read?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            edit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            bash?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            commit?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            pr?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+            deploy?: {
+                allow: boolean | "true" | "false" | "ask" | "limited" | "ask_or_deny";
+                requires?: {
+                    ledger_tag: string;
+                    within?: string | undefined;
+                    count?: {
+                        exact?: number | undefined;
+                        min?: number | undefined;
+                        max?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                mode?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }> | undefined;
     workflows?: {
         name: string;
         steps: ({
@@ -1362,7 +2835,9 @@ export * from "./grounding.js";
 export * from "./tools.js";
 export * from "./memory.js";
 export * from "./hooks.js";
+export * from "./permission-profiles.js";
 export * from "./policies.js";
+export * from "./policy-packs.js";
 export * from "./workflows.js";
 export * from "./audit.js";
 export * from "./extract.js";