@neuraloom/contracts 0.0.0-stage → 0.1.22

package/dist/schemas/workflow/repo-intel-snapshot.schema.js

@@ -0,0 +1,98 @@
+"use strict";
+/**
+ * RepoIntelSnapshot — payload schema for workflow_artifacts rows with
+ * artifact_type='repoIntelSnapshot'.
+ *
+ * Produced by the Scan step. Consumed by Architecture Control, Spec, Plan,
+ * and all downstream steps. Acts as the factual operating map of the repo.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RepoIntelSnapshotPayloadSchema = exports.RepoScanCollectionEvidenceSchema = exports.RepoIntelOrphanFindingSchema = exports.RepoIntelDriftFindingSchema = exports.RepoIntelCountsSchema = exports.RepoScanStatusSchema = void 0;
+const zod_1 = require("zod");
+// ─── Scan Status ──────────────────────────────────────────────────────────────
+exports.RepoScanStatusSchema = zod_1.z.enum(['passed', 'warning', 'failed']);
+// ─── Counts Summary ───────────────────────────────────────────────────────────
+exports.RepoIntelCountsSchema = zod_1.z.object({
+    filesIndexed: zod_1.z.number().int().min(0),
+    packagesDetected: zod_1.z.number().int().min(0),
+    routesDetected: zod_1.z.number().int().min(0),
+    apiHandlersDetected: zod_1.z.number().int().min(0),
+    migrationsDetected: zod_1.z.number().int().min(0),
+    contractsDetected: zod_1.z.number().int().min(0),
+    clientsDetected: zod_1.z.number().int().min(0),
+    uiComponentsDetected: zod_1.z.number().int().min(0),
+    testsDetected: zod_1.z.number().int().min(0),
+});
+// ─── Drift Finding (summary entry) ───────────────────────────────────────────
+exports.RepoIntelDriftFindingSchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    severity: zod_1.z.enum(['critical', 'high', 'medium', 'low']),
+    category: zod_1.z.string(),
+    message: zod_1.z.string(),
+    file: zod_1.z.string().optional(),
+    line: zod_1.z.number().int().min(0).optional(),
+    suggestedAction: zod_1.z.string().optional(),
+});
+// ─── Orphan Finding ───────────────────────────────────────────────────────────
+exports.RepoIntelOrphanFindingSchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    type: zod_1.z.enum(['route', 'component', 'table', 'client', 'schema', 'test', 'other']),
+    path: zod_1.z.string(),
+    reason: zod_1.z.string(),
+});
+// ─── Snapshot Payload ─────────────────────────────────────────────────────────
+exports.RepoScanCollectionEvidenceSchema = zod_1.z.object({
+    version: zod_1.z.literal(1),
+    scanMode: zod_1.z.enum(['full', 'incremental']),
+    treeHash: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
+    treeComplete: zod_1.z.literal(true),
+    eligibleFileCount: zod_1.z.number().int().nonnegative(),
+    fetchedEligibleFileCount: zod_1.z.number().int().nonnegative(),
+    omittedEligibleFileCount: zod_1.z.number().int().nonnegative(),
+    fetchFailedFileCount: zod_1.z.number().int().nonnegative().nullable(),
+}).strict().refine(evidence => evidence.fetchedEligibleFileCount + evidence.omittedEligibleFileCount === evidence.eligibleFileCount, 'Collection counts must cover the eligible corpus');
+exports.RepoIntelSnapshotPayloadSchema = zod_1.z.object({
+    /** Semver of the snapshot schema itself. */
+    schemaVersion: zod_1.z.literal('1.0.0'),
+    /** Actual durable scan that produced this snapshot; absent on legacy artifacts. */
+    scanRunId: zod_1.z.string().uuid().optional(),
+    /** Detector implementation compatibility only; never completeness authority. */
+    detectorSourceHash: zod_1.z.string().regex(/^[a-f0-9]{64}$/).optional(),
+    collectionEvidence: exports.RepoScanCollectionEvidenceSchema.optional(),
+    /** Fetched policy provenance; loaded indicates object syntax, not semantic coverage. */
+    policyInputs: zod_1.z.array(zod_1.z.object({
+        path: zod_1.z.string().min(1),
+        status: zod_1.z.enum(['missing', 'unfetched', 'invalid_json', 'non_object', 'loaded']),
+        sha256: zod_1.z.string().regex(/^[a-f0-9]{64}$/).nullable(),
+    }).strict().refine(input => (input.status === 'missing' || input.status === 'unfetched') === (input.sha256 === null), 'Fetched policy inputs require a content hash')).optional(),
+    detectorCoverage: zod_1.z.array(zod_1.z.object({
+        detectorId: zod_1.z.string().min(1),
+        categories: zod_1.z.array(zod_1.z.string().min(1)).min(1).max(30).refine(values => new Set(values).size === values.length, 'Duplicate coverage category'),
+        status: zod_1.z.enum(['complete', 'incomplete_collection', 'invalid_policy']),
+        policyHash: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
+        scopeHash: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
+        eligibleFileCount: zod_1.z.number().int().nonnegative(),
+        fetchedFileCount: zod_1.z.number().int().nonnegative(),
+    }).strict().refine(row => row.fetchedFileCount <= row.eligibleFileCount && (row.status !== 'complete' || row.fetchedFileCount === row.eligibleFileCount), 'Coverage counts contradict completion')).max(30).optional(),
+    scanStatus: exports.RepoScanStatusSchema,
+    generatedAt: zod_1.z.string().datetime(),
+    repoName: zod_1.z.string(),
+    branch: zod_1.z.string(),
+    commitSha: zod_1.z.string(),
+    packageManager: zod_1.z.string(),
+    detectedFrameworks: zod_1.z.array(zod_1.z.string()),
+    counts: exports.RepoIntelCountsSchema,
+    criticalDriftCount: zod_1.z.number().int().min(0),
+    openOrphanCount: zod_1.z.number().int().min(0),
+    driftFindings: zod_1.z.array(exports.RepoIntelDriftFindingSchema),
+    orphanFindings: zod_1.z.array(exports.RepoIntelOrphanFindingSchema),
+    /**
+     * Whether this snapshot was produced by a deep forensic scan (audit-existing mode)
+     * or a standard scan (build-new mode).
+     */
+    scanMode: zod_1.z.enum(['standard', 'deep']).default('standard'),
+    /** Path to the manifest.json written by the scan. */
+    manifestPath: zod_1.z.string().optional(),
+    /** sha256 of canonical snapshot inputs (repo-intel bundle or scan lineage). */
+    contentHash: zod_1.z.string().regex(/^[a-f0-9]{64}$/i).optional(),
+});

package/dist/schemas/workflow/repo-policy-snapshot.schema.d.ts

@@ -0,0 +1,365 @@
+/**
+ * RepoPolicySnapshot — payload schema for workflow_artifacts rows with
+ * artifact_type='repoPolicySnapshot'.
+ *
+ * Produced by the Architecture Control step. Captures the canonical ownership
+ * map, tombstones, forbidden patterns, and branch classes for a repo at a
+ * point in time. Consumed by Spec, Plan, and all downstream steps.
+ */
+import { z } from 'zod';
+export declare const DomainOwnershipEntrySchema: z.ZodObject<{
+    domain: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    canonicalFile: z.ZodOptional<z.ZodString>;
+    canonicalTable: z.ZodOptional<z.ZodString>;
+    canonicalFiles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    canonicalTables: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    canonicalCodeOwners: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    forbiddenTables: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    forbiddenPatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    forbiddenDuplicates: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    legacyMirrors: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    note: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    domain: string;
+    description?: string | undefined;
+    forbiddenPatterns?: string[] | undefined;
+    note?: string | undefined;
+    canonicalFile?: string | undefined;
+    canonicalTable?: string | undefined;
+    canonicalFiles?: string[] | undefined;
+    canonicalTables?: string[] | undefined;
+    canonicalCodeOwners?: string[] | undefined;
+    forbiddenTables?: string[] | undefined;
+    forbiddenDuplicates?: string[] | undefined;
+    legacyMirrors?: string[] | undefined;
+}, {
+    domain: string;
+    description?: string | undefined;
+    forbiddenPatterns?: string[] | undefined;
+    note?: string | undefined;
+    canonicalFile?: string | undefined;
+    canonicalTable?: string | undefined;
+    canonicalFiles?: string[] | undefined;
+    canonicalTables?: string[] | undefined;
+    canonicalCodeOwners?: string[] | undefined;
+    forbiddenTables?: string[] | undefined;
+    forbiddenDuplicates?: string[] | undefined;
+    legacyMirrors?: string[] | undefined;
+}>;
+export type DomainOwnershipEntry = z.infer<typeof DomainOwnershipEntrySchema>;
+export declare const TombstoneEntrySchema: z.ZodObject<{
+    name: z.ZodString;
+    kind: z.ZodEnum<["route", "table", "package", "codePattern"]>;
+    replacement: z.ZodOptional<z.ZodString>;
+    reason: z.ZodString;
+    removedAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    kind: "route" | "table" | "package" | "codePattern";
+    reason: string;
+    replacement?: string | undefined;
+    removedAt?: string | undefined;
+}, {
+    name: string;
+    kind: "route" | "table" | "package" | "codePattern";
+    reason: string;
+    replacement?: string | undefined;
+    removedAt?: string | undefined;
+}>;
+export type TombstoneEntry = z.infer<typeof TombstoneEntrySchema>;
+export declare const ForbiddenPatternEntrySchema: z.ZodObject<{
+    id: z.ZodString;
+    severity: z.ZodEnum<["critical", "high", "medium", "low"]>;
+    description: z.ZodString;
+    patterns: z.ZodArray<z.ZodString, "many">;
+    isRegex: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    exemptPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    description: string;
+    severity: "critical" | "low" | "medium" | "high";
+    reason: string;
+    patterns: string[];
+    isRegex: boolean;
+    exemptPaths?: string[] | undefined;
+}, {
+    id: string;
+    description: string;
+    severity: "critical" | "low" | "medium" | "high";
+    reason: string;
+    patterns: string[];
+    isRegex?: boolean | undefined;
+    exemptPaths?: string[] | undefined;
+}>;
+export type ForbiddenPatternEntry = z.infer<typeof ForbiddenPatternEntrySchema>;
+export declare const BranchClassEntrySchema: z.ZodObject<{
+    prefix: z.ZodString;
+    description: z.ZodString;
+    maxFilesChanged: z.ZodNumber;
+    allowsSchemaChanges: z.ZodBoolean;
+    allowsRegistryChanges: z.ZodBoolean;
+    requiresSpec: z.ZodBoolean;
+    requiresPlan: z.ZodBoolean;
+    requiresTaskCapsule: z.ZodBoolean;
+    requiresEngineLabel: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    description: string;
+    prefix: string;
+    maxFilesChanged: number;
+    allowsSchemaChanges: boolean;
+    allowsRegistryChanges: boolean;
+    requiresSpec: boolean;
+    requiresPlan: boolean;
+    requiresTaskCapsule: boolean;
+    requiresEngineLabel: boolean;
+}, {
+    description: string;
+    prefix: string;
+    maxFilesChanged: number;
+    allowsSchemaChanges: boolean;
+    allowsRegistryChanges: boolean;
+    requiresSpec: boolean;
+    requiresPlan: boolean;
+    requiresTaskCapsule: boolean;
+    requiresEngineLabel?: boolean | undefined;
+}>;
+export type BranchClassEntry = z.infer<typeof BranchClassEntrySchema>;
+export declare const RepoPolicySnapshotPayloadSchema: z.ZodObject<{
+    /** Semver of the snapshot schema itself. */
+    schemaVersion: z.ZodLiteral<"1.0.0">;
+    generatedAt: z.ZodString;
+    repoName: z.ZodString;
+    /** Artifact ID of the repoIntelSnapshot this policy was derived from. */
+    sourceRepoIntelSnapshotId: z.ZodOptional<z.ZodString>;
+    /**
+     * How this policy was produced:
+     * - 'generated' = created by NeuraLoom from scratch (build-new mode)
+     * - 'inferred' = inferred from an existing codebase (audit-existing mode)
+     * - 'manual' = human-authored
+     */
+    generationMode: z.ZodEnum<["generated", "inferred", "manual"]>;
+    domains: z.ZodArray<z.ZodObject<{
+        domain: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        canonicalFile: z.ZodOptional<z.ZodString>;
+        canonicalTable: z.ZodOptional<z.ZodString>;
+        canonicalFiles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        canonicalTables: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        canonicalCodeOwners: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        forbiddenTables: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        forbiddenPatterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        forbiddenDuplicates: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        legacyMirrors: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        note: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        domain: string;
+        description?: string | undefined;
+        forbiddenPatterns?: string[] | undefined;
+        note?: string | undefined;
+        canonicalFile?: string | undefined;
+        canonicalTable?: string | undefined;
+        canonicalFiles?: string[] | undefined;
+        canonicalTables?: string[] | undefined;
+        canonicalCodeOwners?: string[] | undefined;
+        forbiddenTables?: string[] | undefined;
+        forbiddenDuplicates?: string[] | undefined;
+        legacyMirrors?: string[] | undefined;
+    }, {
+        domain: string;
+        description?: string | undefined;
+        forbiddenPatterns?: string[] | undefined;
+        note?: string | undefined;
+        canonicalFile?: string | undefined;
+        canonicalTable?: string | undefined;
+        canonicalFiles?: string[] | undefined;
+        canonicalTables?: string[] | undefined;
+        canonicalCodeOwners?: string[] | undefined;
+        forbiddenTables?: string[] | undefined;
+        forbiddenDuplicates?: string[] | undefined;
+        legacyMirrors?: string[] | undefined;
+    }>, "many">;
+    tombstones: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        kind: z.ZodEnum<["route", "table", "package", "codePattern"]>;
+        replacement: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        removedAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        kind: "route" | "table" | "package" | "codePattern";
+        reason: string;
+        replacement?: string | undefined;
+        removedAt?: string | undefined;
+    }, {
+        name: string;
+        kind: "route" | "table" | "package" | "codePattern";
+        reason: string;
+        replacement?: string | undefined;
+        removedAt?: string | undefined;
+    }>, "many">;
+    forbiddenPatterns: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        severity: z.ZodEnum<["critical", "high", "medium", "low"]>;
+        description: z.ZodString;
+        patterns: z.ZodArray<z.ZodString, "many">;
+        isRegex: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        exemptPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        reason: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        description: string;
+        severity: "critical" | "low" | "medium" | "high";
+        reason: string;
+        patterns: string[];
+        isRegex: boolean;
+        exemptPaths?: string[] | undefined;
+    }, {
+        id: string;
+        description: string;
+        severity: "critical" | "low" | "medium" | "high";
+        reason: string;
+        patterns: string[];
+        isRegex?: boolean | undefined;
+        exemptPaths?: string[] | undefined;
+    }>, "many">;
+    branchClasses: z.ZodArray<z.ZodObject<{
+        prefix: z.ZodString;
+        description: z.ZodString;
+        maxFilesChanged: z.ZodNumber;
+        allowsSchemaChanges: z.ZodBoolean;
+        allowsRegistryChanges: z.ZodBoolean;
+        requiresSpec: z.ZodBoolean;
+        requiresPlan: z.ZodBoolean;
+        requiresTaskCapsule: z.ZodBoolean;
+        requiresEngineLabel: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        description: string;
+        prefix: string;
+        maxFilesChanged: number;
+        allowsSchemaChanges: boolean;
+        allowsRegistryChanges: boolean;
+        requiresSpec: boolean;
+        requiresPlan: boolean;
+        requiresTaskCapsule: boolean;
+        requiresEngineLabel: boolean;
+    }, {
+        description: string;
+        prefix: string;
+        maxFilesChanged: number;
+        allowsSchemaChanges: boolean;
+        allowsRegistryChanges: boolean;
+        requiresSpec: boolean;
+        requiresPlan: boolean;
+        requiresTaskCapsule: boolean;
+        requiresEngineLabel?: boolean | undefined;
+    }>, "many">;
+    /** Number of domains with unknown/conflicting ownership (0 = clean). */
+    unknownOwnershipCount: z.ZodNumber;
+    /** Whether implementation is allowed given this policy state. */
+    implementationAllowed: z.ZodBoolean;
+    /** Reasons implementation is blocked, if any. */
+    implementationBlockers: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    schemaVersion: "1.0.0";
+    generatedAt: string;
+    forbiddenPatterns: {
+        id: string;
+        description: string;
+        severity: "critical" | "low" | "medium" | "high";
+        reason: string;
+        patterns: string[];
+        isRegex: boolean;
+        exemptPaths?: string[] | undefined;
+    }[];
+    domains: {
+        domain: string;
+        description?: string | undefined;
+        forbiddenPatterns?: string[] | undefined;
+        note?: string | undefined;
+        canonicalFile?: string | undefined;
+        canonicalTable?: string | undefined;
+        canonicalFiles?: string[] | undefined;
+        canonicalTables?: string[] | undefined;
+        canonicalCodeOwners?: string[] | undefined;
+        forbiddenTables?: string[] | undefined;
+        forbiddenDuplicates?: string[] | undefined;
+        legacyMirrors?: string[] | undefined;
+    }[];
+    repoName: string;
+    generationMode: "inferred" | "manual" | "generated";
+    tombstones: {
+        name: string;
+        kind: "route" | "table" | "package" | "codePattern";
+        reason: string;
+        replacement?: string | undefined;
+        removedAt?: string | undefined;
+    }[];
+    branchClasses: {
+        description: string;
+        prefix: string;
+        maxFilesChanged: number;
+        allowsSchemaChanges: boolean;
+        allowsRegistryChanges: boolean;
+        requiresSpec: boolean;
+        requiresPlan: boolean;
+        requiresTaskCapsule: boolean;
+        requiresEngineLabel: boolean;
+    }[];
+    unknownOwnershipCount: number;
+    implementationAllowed: boolean;
+    implementationBlockers: string[];
+    sourceRepoIntelSnapshotId?: string | undefined;
+}, {
+    schemaVersion: "1.0.0";
+    generatedAt: string;
+    forbiddenPatterns: {
+        id: string;
+        description: string;
+        severity: "critical" | "low" | "medium" | "high";
+        reason: string;
+        patterns: string[];
+        isRegex?: boolean | undefined;
+        exemptPaths?: string[] | undefined;
+    }[];
+    domains: {
+        domain: string;
+        description?: string | undefined;
+        forbiddenPatterns?: string[] | undefined;
+        note?: string | undefined;
+        canonicalFile?: string | undefined;
+        canonicalTable?: string | undefined;
+        canonicalFiles?: string[] | undefined;
+        canonicalTables?: string[] | undefined;
+        canonicalCodeOwners?: string[] | undefined;
+        forbiddenTables?: string[] | undefined;
+        forbiddenDuplicates?: string[] | undefined;
+        legacyMirrors?: string[] | undefined;
+    }[];
+    repoName: string;
+    generationMode: "inferred" | "manual" | "generated";
+    tombstones: {
+        name: string;
+        kind: "route" | "table" | "package" | "codePattern";
+        reason: string;
+        replacement?: string | undefined;
+        removedAt?: string | undefined;
+    }[];
+    branchClasses: {
+        description: string;
+        prefix: string;
+        maxFilesChanged: number;
+        allowsSchemaChanges: boolean;
+        allowsRegistryChanges: boolean;
+        requiresSpec: boolean;
+        requiresPlan: boolean;
+        requiresTaskCapsule: boolean;
+        requiresEngineLabel?: boolean | undefined;
+    }[];
+    unknownOwnershipCount: number;
+    implementationAllowed: boolean;
+    implementationBlockers: string[];
+    sourceRepoIntelSnapshotId?: string | undefined;
+}>;
+export type RepoPolicySnapshotPayload = z.infer<typeof RepoPolicySnapshotPayloadSchema>;

package/dist/schemas/workflow/repo-policy-snapshot.schema.js

@@ -0,0 +1,83 @@
+"use strict";
+/**
+ * RepoPolicySnapshot — payload schema for workflow_artifacts rows with
+ * artifact_type='repoPolicySnapshot'.
+ *
+ * Produced by the Architecture Control step. Captures the canonical ownership
+ * map, tombstones, forbidden patterns, and branch classes for a repo at a
+ * point in time. Consumed by Spec, Plan, and all downstream steps.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RepoPolicySnapshotPayloadSchema = exports.BranchClassEntrySchema = exports.ForbiddenPatternEntrySchema = exports.TombstoneEntrySchema = exports.DomainOwnershipEntrySchema = void 0;
+const zod_1 = require("zod");
+// ─── Domain Ownership ─────────────────────────────────────────────────────────
+exports.DomainOwnershipEntrySchema = zod_1.z.object({
+    domain: zod_1.z.string(),
+    description: zod_1.z.string().optional(),
+    canonicalFile: zod_1.z.string().optional(),
+    canonicalTable: zod_1.z.string().optional(),
+    canonicalFiles: zod_1.z.array(zod_1.z.string()).optional(),
+    canonicalTables: zod_1.z.array(zod_1.z.string()).optional(),
+    canonicalCodeOwners: zod_1.z.array(zod_1.z.string()).optional(),
+    forbiddenTables: zod_1.z.array(zod_1.z.string()).optional(),
+    forbiddenPatterns: zod_1.z.array(zod_1.z.string()).optional(),
+    forbiddenDuplicates: zod_1.z.array(zod_1.z.string()).optional(),
+    legacyMirrors: zod_1.z.array(zod_1.z.string()).optional(),
+    note: zod_1.z.string().optional(),
+});
+// ─── Tombstone Entry ──────────────────────────────────────────────────────────
+exports.TombstoneEntrySchema = zod_1.z.object({
+    name: zod_1.z.string(),
+    kind: zod_1.z.enum(['route', 'table', 'package', 'codePattern']),
+    replacement: zod_1.z.string().optional(),
+    reason: zod_1.z.string(),
+    removedAt: zod_1.z.string().optional(),
+});
+// ─── Forbidden Pattern Entry ──────────────────────────────────────────────────
+exports.ForbiddenPatternEntrySchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    severity: zod_1.z.enum(['critical', 'high', 'medium', 'low']),
+    description: zod_1.z.string(),
+    patterns: zod_1.z.array(zod_1.z.string()),
+    isRegex: zod_1.z.boolean().optional().default(false),
+    exemptPaths: zod_1.z.array(zod_1.z.string()).optional(),
+    reason: zod_1.z.string(),
+});
+// ─── Branch Class Entry ───────────────────────────────────────────────────────
+exports.BranchClassEntrySchema = zod_1.z.object({
+    prefix: zod_1.z.string(),
+    description: zod_1.z.string(),
+    maxFilesChanged: zod_1.z.number().int().min(1),
+    allowsSchemaChanges: zod_1.z.boolean(),
+    allowsRegistryChanges: zod_1.z.boolean(),
+    requiresSpec: zod_1.z.boolean(),
+    requiresPlan: zod_1.z.boolean(),
+    requiresTaskCapsule: zod_1.z.boolean(),
+    requiresEngineLabel: zod_1.z.boolean().optional().default(false),
+});
+// ─── Snapshot Payload ─────────────────────────────────────────────────────────
+exports.RepoPolicySnapshotPayloadSchema = zod_1.z.object({
+    /** Semver of the snapshot schema itself. */
+    schemaVersion: zod_1.z.literal('1.0.0'),
+    generatedAt: zod_1.z.string().datetime(),
+    repoName: zod_1.z.string(),
+    /** Artifact ID of the repoIntelSnapshot this policy was derived from. */
+    sourceRepoIntelSnapshotId: zod_1.z.string().uuid().optional(),
+    /**
+     * How this policy was produced:
+     * - 'generated' = created by NeuraLoom from scratch (build-new mode)
+     * - 'inferred' = inferred from an existing codebase (audit-existing mode)
+     * - 'manual' = human-authored
+     */
+    generationMode: zod_1.z.enum(['generated', 'inferred', 'manual']),
+    domains: zod_1.z.array(exports.DomainOwnershipEntrySchema),
+    tombstones: zod_1.z.array(exports.TombstoneEntrySchema),
+    forbiddenPatterns: zod_1.z.array(exports.ForbiddenPatternEntrySchema),
+    branchClasses: zod_1.z.array(exports.BranchClassEntrySchema),
+    /** Number of domains with unknown/conflicting ownership (0 = clean). */
+    unknownOwnershipCount: zod_1.z.number().int().min(0),
+    /** Whether implementation is allowed given this policy state. */
+    implementationAllowed: zod_1.z.boolean(),
+    /** Reasons implementation is blocked, if any. */
+    implementationBlockers: zod_1.z.array(zod_1.z.string()),
+});