@mmerterden/multi-agent-pipeline 20.2.1 → 20.3.0

package/pipeline/schemas/stack-adapters.schema.json

@@ -0,0 +1,184 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/stack-adapters.schema.json",
+  "version": "1.0.0",
+  "title": "Multi-Agent Pipeline  -  stack adapters",
+  "description": "Shape of pipeline/schemas/stack-adapters.json: one adapter per stack, keyed by id, plus the unknown adapter every lookup falls back to. _stack-adapter.mjs enforces the same rules at load time without a schema library, and additionally compiles every pattern and requires a (?<ref>...) group in each reference pattern.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "order", "adapters"],
+  "properties": {
+    "$comment": { "type": "string" },
+    "version": { "type": "string", "const": "1.0.0" },
+    "order": {
+      "description": "Priority when a repo matches several adapters; the first match is the primary one. A manifest that names a language outranks a package.json, which is often only tooling.",
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/adapterId" }
+    },
+    "adapters": {
+      "type": "object",
+      "required": [
+        "ios",
+        "android",
+        "web",
+        "backend-node",
+        "python",
+        "go",
+        "rust",
+        "jvm",
+        "unknown"
+      ],
+      "propertyNames": { "$ref": "#/$defs/adapterId" },
+      "additionalProperties": { "$ref": "#/$defs/adapter" }
+    }
+  },
+  "$defs": {
+    "adapterId": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+    "coarseStack": { "type": "string", "enum": ["ios", "android", "web", "backend"] },
+    "marker": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["pattern"],
+      "properties": {
+        "pattern": { "type": "string", "minLength": 1, "maxLength": 200 },
+        "flags": { "type": "string", "pattern": "^[im]{0,2}$" }
+      }
+    },
+    "markerSet": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["success", "failure"],
+      "properties": {
+        "success": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/marker" } },
+        "failure": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/marker" } },
+        "skipped": {
+          "description": "Lines the runner prints when the task did not run at all (a skipped or source-less test task). evidence-gate.mjs --stack counts a match as zero tests when the log carries no counts.",
+          "type": "array",
+          "items": { "$ref": "#/$defs/marker" }
+        },
+        "loadError": {
+          "description": "Lines that mean the test did not compile or load, so it never reached an assertion. test-strength.mjs reads a red run with one of these as unjudged, not red.",
+          "type": "array",
+          "items": { "$ref": "#/$defs/marker" }
+        }
+      }
+    },
+    "command": {
+      "description": "Either a shell template with {placeholder} slots, or a package.json script resolved through package-manager.mjs so the repo's own package manager runs it.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "template": { "type": "string", "minLength": 1 },
+        "packageScript": { "type": "string", "pattern": "^[A-Za-z0-9:_-]+$" },
+        "args": { "type": "array", "items": { "type": "string" } },
+        "exitMarker": { "type": "string", "pattern": "^[^'\\n]+$" }
+      },
+      "oneOf": [{ "required": ["template"] }, { "required": ["packageScript"] }]
+    },
+    "commandSet": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["build", "test"],
+      "properties": {
+        "when": {
+          "description": "Manifests that select this entry; an entry without it is the fallback.",
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "build": { "$ref": "#/$defs/command" },
+        "test": { "$ref": "#/$defs/command" },
+        "testFile": { "$ref": "#/$defs/command" },
+        "lint": {
+          "description": "The stack's linter, run by scaffold-gate.mjs; a skeleton must lint clean before its first commit. Optional: a stack without one reports lint not-applicable.",
+          "$ref": "#/$defs/command"
+        }
+      }
+    },
+    "globList": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+    "patternList": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+    "adapter": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "label",
+        "detection",
+        "commands",
+        "markers",
+        "testSummary",
+        "testFilePatterns",
+        "truthSources",
+        "referencePatterns"
+      ],
+      "properties": {
+        "label": { "type": "string", "minLength": 1 },
+        "applicable": { "type": "boolean" },
+        "detection": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "stackDetect": { "$ref": "#/$defs/coarseStack" },
+            "manifests": { "$ref": "#/$defs/globList" },
+            "notWith": { "type": "array", "items": { "$ref": "#/$defs/adapterId" } }
+          }
+        },
+        "commands": { "type": "array", "items": { "$ref": "#/$defs/commandSet" } },
+        "markers": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "build": { "$ref": "#/$defs/markerSet" },
+            "test": { "$ref": "#/$defs/markerSet" }
+          }
+        },
+        "testSummary": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["parsers"],
+          "properties": {
+            "parsers": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "enum": [
+                  "xcodebuild",
+                  "xcresult",
+                  "junit-xml",
+                  "gradle",
+                  "maven",
+                  "pytest",
+                  "jest",
+                  "vitest",
+                  "node-test",
+                  "go-test",
+                  "go-test-json",
+                  "cargo-test"
+                ]
+              }
+            },
+            "resultFiles": { "$ref": "#/$defs/globList" }
+          }
+        },
+        "testFilePatterns": { "$ref": "#/$defs/patternList" },
+        "truthSources": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "localization": { "$ref": "#/$defs/globList" },
+            "endpoints": { "$ref": "#/$defs/globList" },
+            "generated": { "$ref": "#/$defs/globList" }
+          }
+        },
+        "referencePatterns": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "localization": { "$ref": "#/$defs/patternList" },
+            "endpoints": { "$ref": "#/$defs/patternList" }
+          }
+        }
+      }
+    }
+  }
+}

package/pipeline/schemas/token-budget.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/token-budget.json",
-  "description": "Per-phase token ceilings for the lazy-loaded pipeline docs, enforced by smoke-token-budget.sh. Only the ACTIVE phase is loaded at run time and nothing truncates a phase document, so these numbers govern what may be written, not what a run receives. Two rules, and the split is the point. `max_tokens` and `total_max_tokens` are committed constants a human owns: computing them would end the gate, because a ceiling that is always current x k can never fail. The warn tier is NOT stored - the gate derives it per phase from that phase's own git history (median + 3*MAD of its historical per-commit deltas, which is robust to the one 980-token release that makes sigma meaningless on phase-4), because a soft line maintained by hand rots, and this one rotted twice: it was reset at v13.6.0 when five lines had gone permanently amber, and six of eight were amber again by v17.1.0. A ceiling more than 25% above the measurement is stale and fails, which is the 'only ratchets down' rule the SKILL.md grace list always had and this budget never did. Ceilings are DERIVED from schemas/phases.json and re-measured after the v19.0.0 six-phase merge, not summed from the eight old ones: the two-sided rule fails a ceiling more than 25% above the measurement, so a sum would have shipped stale by construction. Change history: docs/token-budget-history.md.",
+  "description": "Per-phase token ceilings for the lazy-loaded pipeline docs, enforced by smoke-token-budget.sh. Only the ACTIVE phase is loaded at run time and nothing truncates a phase document, so these numbers govern what may be written, not what a run receives. Two rules, and the split is the point. `max_tokens` and `total_max_tokens` are committed constants a human owns: computing them would end the gate, because a ceiling that is always current x k can never fail. The warn tier is NOT stored - the gate derives it per phase from that phase's own git history (median + 3*MAD of its historical per-commit deltas, which is robust to a single outsized release), because a soft line maintained by hand drifts. A ceiling more than 25% above the measurement is stale and fails, so the ceilings only ratchet down. Ceilings are keyed by the phases in schemas/phases.json and measured against those documents. Ceiling change history: CHANGELOG-archive.md.",
   "phases": {
     "phase-0-init": {
       "max_tokens": 13400

package/pipeline/schemas/token-budget.schema.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/token-budget.schema.json",
+  "title": "Phase token ceilings",
+  "description": "token-budget.json: the per-phase and total token ceilings smoke-token-budget.sh holds the phase documents to.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["phases", "total_max_tokens"],
+  "properties": {
+    "$schema": { "type": "string" },
+    "$id": { "type": "string" },
+    "description": { "type": "string" },
+    "phases": {
+      "type": "object",
+      "minProperties": 1,
+      "propertyNames": { "pattern": "^phase-[0-9]+-[a-z-]+$" },
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["max_tokens"],
+        "properties": { "max_tokens": { "type": "integer", "minimum": 1 } }
+      }
+    },
+    "total_max_tokens": { "type": "integer", "minimum": 1 }
+  }
+}

package/pipeline/schemas/triage-output.schema.json

@@ -1,9 +1,9 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/triage-output.schema.json",
-  "version": "3.4.0",
+  "version": "3.5.0",
   "title": "Multi-Agent Pipeline  -  Phase 3 triage output",
-  "description": "Contract for the Opus triage agent's JSON output in Phase 4 Step 3. Triage consumes merged reviewer findings and splits them into accepted/deferred/rejected. Only `accepted` blocking/important items trigger Phase 3 rework. v3.1.0 adds the optional `consensus` block so triage can surface reviewer-agreement risk (false consensus among same-base-model reviewers) instead of silently merging. v3.2.0 adds the optional per-finding `verification` block written by Phase 3 Step 3.7 (verify-by-test): the empirical repro-test outcome for accepted blocking findings. v3.3.0 carries ruleId + criteriaSource through triage so a finding that cites a stable rule ID keeps that citation into Phase 4 and Phase 5, and the lesson loop can key durable learnings by rule. v3.4.0 adds the optional per-finding fingerprint (finding-fingerprint.mjs) so review-delta.mjs can tell still-present, resolved and new findings apart between rounds.",
+  "description": "Contract for the Opus triage agent's JSON output in Phase 4 Step 3. Triage consumes merged reviewer findings and splits them into accepted/deferred/rejected. Only `accepted` blocking/important items trigger Phase 3 rework. v3.1.0 adds the optional `consensus` block so triage can surface reviewer-agreement risk (false consensus among same-base-model reviewers) instead of silently merging. v3.2.0 adds the optional per-finding `verification` block written by Phase 3 Step 3.7 (verify-by-test): the empirical repro-test outcome for accepted blocking findings. v3.3.0 carries ruleId + criteriaSource through triage so a finding that cites a stable rule ID keeps that citation into Phase 4 and Phase 5, and the lesson loop can key durable learnings by rule. v3.4.0 adds the optional per-finding fingerprint (finding-fingerprint.mjs) so review-delta.mjs can tell still-present, resolved and new findings apart between rounds. v3.5.0 adds the optional per-finding `quote` (matched against the cited line by verify-citations.mjs) and `preExisting` + `baselineEvidence` on findings and on deferred/rejected items, so a pre-existing claim in an unattended run can be checked against the base commit.",
   "type": "object",
   "additionalProperties": false,
   "required": ["accepted", "deferred", "rejected", "approved"],
@@ -30,6 +30,13 @@
             "type": "string",
             "minLength": 4,
             "description": "Why deferred  -  e.g. 'out of scope: touches payment module, task is auth-only'."
+          },
+          "preExisting": {
+            "type": "boolean",
+            "description": "The finding is claimed to exist on the base commit already. In an unattended run the claim needs baselineEvidence."
+          },
+          "baselineEvidence": {
+            "$ref": "#/$defs/baselineEvidence"
           }
         }
       }
@@ -49,6 +56,13 @@
             "type": "string",
             "minLength": 4,
             "description": "Why rejected  -  e.g. 'false positive: the null check the reviewer wants already happens in the caller'."
+          },
+          "preExisting": {
+            "type": "boolean",
+            "description": "The finding is claimed to exist on the base commit already. In an unattended run the claim needs baselineEvidence."
+          },
+          "baselineEvidence": {
+            "$ref": "#/$defs/baselineEvidence"
           }
         }
       }
@@ -91,7 +105,7 @@
     "reviewer": {
       "type": "string",
       "enum": ["fable", "opus", "sonnet", "gpt"],
-      "description": "Which reviewer produced the raw finding. Claude Code Reviewer 1 is fable (opus when fallback engages); Copilot CLI adds gpt. Haiku was removed in v2.1.0."
+      "description": "Which reviewer produced the raw finding. Claude Code Reviewer 1 is fable (opus when fallback engages); Copilot CLI adds gpt."
     },
     "consensus": {
       "type": "object",
@@ -217,6 +231,18 @@
           "type": "string",
           "pattern": "^F:[0-9a-f]{8}$",
           "description": "Stable cross-round identity of the finding, computed by finding-fingerprint.mjs from (file, ruleId or normalized issue text). Never includes the line. On iteration >= 2 a reviewer that recognises an entry from <previous-round-findings> echoes its fingerprint; otherwise leave it unset and the script fills it in."
+        },
+        "quote": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Verbatim text of the cited line (or of the lines starting there). verify-citations.mjs requires it to match after whitespace is collapsed; a line number alone only says the line exists."
+        },
+        "preExisting": {
+          "type": "boolean",
+          "description": "The finding is claimed to exist on the base commit already. In an unattended run the claim needs baselineEvidence."
+        },
+        "baselineEvidence": {
+          "$ref": "#/$defs/baselineEvidence"
         }
       }
     },
@@ -270,10 +296,45 @@
               "type": "string",
               "pattern": "^F:[0-9a-f]{8}$",
               "description": "Stable cross-round identity of the finding, computed by finding-fingerprint.mjs from (file, ruleId or normalized issue text). Never includes the line. On iteration >= 2 a reviewer that recognises an entry from <previous-round-findings> echoes its fingerprint; otherwise leave it unset and the script fills it in."
+            },
+            "quote": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Verbatim text of the cited line (or of the lines starting there). verify-citations.mjs requires it to match after whitespace is collapsed; a line number alone only says the line exists."
+            },
+            "preExisting": {
+              "type": "boolean",
+              "description": "The finding is claimed to exist on the base commit already. In an unattended run the claim needs baselineEvidence."
+            },
+            "baselineEvidence": {
+              "$ref": "#/$defs/baselineEvidence"
             }
           }
         }
       ]
+    },
+    "baselineEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["sha"],
+      "description": "What backs a pre-existing claim, checked in unattended runs by verify-citations.mjs (_pre-existing.mjs). sha must be the run's base commit or an ancestor of it; for a code finding the cited line must be present in that file there; for a failing test, testId must be in state.baseline.tests.failing or logPath must be a non-empty log of the check run at the base.",
+      "properties": {
+        "sha": {
+          "type": "string",
+          "minLength": 7,
+          "description": "The base commit the claim is about."
+        },
+        "testId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The failing test the claim names, as it appears in state.baseline.tests.failing."
+        },
+        "logPath": {
+          "type": "string",
+          "minLength": 1,
+          "description": "A log of the check run at sha."
+        }
+      }
     }
   }
 }

package/pipeline/schemas/unattended-policy.json

@@ -0,0 +1,139 @@
+{
+  "$comment": "What agent-guard blocks when MULTI_AGENT_UNATTENDED=1, as data. The command grammar (which gh verbs write, how a curl URL is read) lives in scripts/unattended_policy.py; the lists a deployment may want to change live here. Nothing here is read when the variable is unset. Contract: multi-agent-refs/features/unattended-security.md.",
+  "network": {
+    "$comment": "curl and wget may reach these hosts, and subdomains of them, for reads only. prefsHostKeys are read from prefs.global.hosts at hook time, so a machine's own Jira or Confluence host is allowed without editing this file. corpDomain is deliberately absent: it is an email domain, and allowing it would allow every host under it.",
+    "staticHosts": [
+      "github.com",
+      "api.github.com",
+      "raw.githubusercontent.com",
+      "objects.githubusercontent.com",
+      "codeload.github.com",
+      "localhost",
+      "127.0.0.1",
+      "::1"
+    ],
+    "prefsHostKeys": [
+      "jira",
+      "confluence",
+      "bitbucket",
+      "fortify",
+      "graylog",
+      "graylogTest",
+      "jenkins"
+    ]
+  },
+  "protectedRepoPaths": {
+    "$comment": "Matched as a path segment sequence anywhere in the target path, except that a .claude directory which IS the host root under $HOME is judged by protectedHostEntries instead.",
+    "dirs": [".github/workflows", ".claude", ".git"],
+    "files": ["CODEOWNERS", ".mcp.json"]
+  },
+  "protectedHostRoots": [".claude", ".copilot", ".codex"],
+  "protectedHostEntries": [
+    "scripts",
+    "lib",
+    "commands",
+    "skills",
+    "multi-agent-refs",
+    "agents",
+    "rules",
+    "hooks",
+    "schemas",
+    "settings.json",
+    "settings.local.json",
+    "config.toml",
+    "autopilot",
+    "plugins",
+    "CLAUDE.md",
+    "multi-agent-preferences.json",
+    "multi-agent-unattended.settings.json"
+  ],
+  "protectedHomeFiles": [
+    ".claude.json",
+    ".gitconfig",
+    ".zshrc",
+    ".zprofile",
+    ".bashrc",
+    ".bash_profile",
+    ".bash_login",
+    ".profile",
+    ".zshenv",
+    ".zlogin",
+    ".zlogout",
+    ".npmrc",
+    ".netrc",
+    ".git-credentials",
+    ".curlrc",
+    ".wgetrc",
+    ".lldbinit",
+    ".pythonrc",
+    ".gemrc",
+    ".tmux.conf",
+    ".vimrc"
+  ],
+  "$commentHomeDirs": "Directory prefixes under $HOME whose whole subtree is host, shell or credential configuration, the guard's twin of the profile's sandbox.filesystem.denyWrite list. ~/.config/git holds the XDG git config, ~/.config/gh the GitHub CLI token, ~/.ssh and ~/.gnupg keys and their config; ~/Library/LaunchAgents holds per-user launchd jobs that run as the operator; ~/.gradle/init.d runs on every build; ~/.m2, ~/.cargo, ~/.bundle, ~/.pip, ~/.config/pip and ~/.config/fish point a toolchain or shell at a config or index.",
+  "protectedHomeDirs": [
+    ".config/git",
+    ".config/gh",
+    ".config/pip",
+    ".config/fish",
+    ".ssh",
+    ".gnupg",
+    ".gradle/init.d",
+    ".m2",
+    ".cargo",
+    ".bundle",
+    ".pip",
+    "Library/LaunchAgents",
+    "Library/LaunchDaemons"
+  ],
+  "manifests": {
+    "$comment": "Dependency manifests and lockfiles. Editing one is how a run adds a package, so it is blocked the same way an install command is.",
+    "files": [
+      "Package.swift",
+      "Package.resolved",
+      "package.json",
+      "package-lock.json",
+      "npm-shrinkwrap.json",
+      "yarn.lock",
+      "pnpm-lock.yaml",
+      "bun.lock",
+      "bun.lockb",
+      "Podfile",
+      "Podfile.lock",
+      "Cartfile",
+      "Cartfile.resolved",
+      "build.gradle",
+      "build.gradle.kts",
+      "settings.gradle",
+      "settings.gradle.kts",
+      "libs.versions.toml",
+      "pyproject.toml",
+      "poetry.lock",
+      "uv.lock",
+      "Pipfile",
+      "Pipfile.lock",
+      "go.mod",
+      "go.sum",
+      "Cargo.toml",
+      "Cargo.lock",
+      "Gemfile",
+      "Gemfile.lock"
+    ],
+    "patterns": ["^requirements.*\\.txt$", "^constraints.*\\.txt$"]
+  },
+  "publisherScripts": {
+    "$comment": "Pipeline scripts that write to a tracker, a PR or a wiki, or change which devices may reach this machine. Under the single-writer model the runner publishes; a run calling one of these directly is blocked. A value of null blocks every invocation; a list blocks only those subcommands.",
+    "jira-publish.sh": null,
+    "post-pr-review.sh": null,
+    "update-issue-progress.sh": null,
+    "analysis-jira-write.sh": null,
+    "jira-attach.sh": null,
+    "md2confluence-v3.py": ["create", "update"],
+    "multi-repo-pipeline.sh": ["push", "pr"],
+    "keychain-save.sh": null,
+    "credential-store.sh": ["get", "set", "delete"],
+    "keychain.py": ["get", "set", "delete"],
+    "gate-ledger.mjs": ["append"],
+    "phone-devices.mjs": ["add", "revoke", "launch"]
+  }
+}

package/pipeline/schemas/unattended-policy.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/unattended-policy.schema.json",
+  "title": "Unattended guard policy",
+  "description": "The data unattended_policy.py and agent-guard.py judge an unattended command against: the network allowlist, the protected repo and home paths, the manifests a run may not edit, and the publisher scripts it may not call.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "network",
+    "protectedRepoPaths",
+    "protectedHostRoots",
+    "protectedHostEntries",
+    "protectedHomeFiles",
+    "protectedHomeDirs",
+    "manifests",
+    "publisherScripts"
+  ],
+  "$defs": {
+    "names": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true }
+  },
+  "properties": {
+    "$comment": { "type": "string" },
+    "$commentHomeDirs": { "type": "string" },
+    "network": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["staticHosts", "prefsHostKeys"],
+      "properties": {
+        "$comment": { "type": "string" },
+        "staticHosts": {
+          "$ref": "#/$defs/names",
+          "description": "Hosts a fetch may always reach."
+        },
+        "prefsHostKeys": {
+          "$ref": "#/$defs/names",
+          "description": "prefs.global.hosts keys whose configured host joins the allowlist."
+        }
+      }
+    },
+    "protectedRepoPaths": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["dirs", "files"],
+      "properties": {
+        "$comment": { "type": "string" },
+        "dirs": { "$ref": "#/$defs/names" },
+        "files": { "$ref": "#/$defs/names" }
+      }
+    },
+    "protectedHostRoots": { "$ref": "#/$defs/names" },
+    "protectedHostEntries": { "$ref": "#/$defs/names" },
+    "protectedHomeFiles": { "$ref": "#/$defs/names" },
+    "protectedHomeDirs": { "$ref": "#/$defs/names" },
+    "manifests": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["files", "patterns"],
+      "properties": {
+        "$comment": { "type": "string" },
+        "files": { "$ref": "#/$defs/names" },
+        "patterns": { "$ref": "#/$defs/names" }
+      }
+    },
+    "publisherScripts": {
+      "type": "object",
+      "description": "Script name to the subcommands a run may not call; null blocks every invocation.",
+      "properties": { "$comment": { "type": "string" } },
+      "additionalProperties": {
+        "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/names", "minItems": 1 }]
+      }
+    }
+  }
+}