@sweny-ai/core 0.1.142 → 0.1.144

package/dist/schema.d.ts

@@ -42,12 +42,12 @@ export declare const toolZ: z.ZodObject<{
     description: string;
     name: string;
     input_schema: Record<string, unknown>;
-    access?: "read" | "write" | undefined;
+    access?: "write" | "read" | undefined;
 }, {
     description: string;
     name: string;
     input_schema: Record<string, unknown>;
-    access?: "read" | "write" | undefined;
+    access?: "write" | "read" | undefined;
 }>;
 export declare const skillCategoryZ: z.ZodEnum<["general", "git", "tasks", "notification", "observability", "data"]>;
 export declare const mcpServerConfigZ: z.ZodEffects<z.ZodObject<{
@@ -202,12 +202,12 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }, {
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }>, "many">>;
     instruction: z.ZodOptional<z.ZodString>;
     mcp: z.ZodOptional<z.ZodEffects<z.ZodObject<{
@@ -261,7 +261,7 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }[];
     instruction?: string | undefined;
     mcp?: {
@@ -296,7 +296,7 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }[] | undefined;
     mcpAliases?: Record<string, string[]> | undefined;
 }>, {
@@ -313,7 +313,7 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }[];
     instruction?: string | undefined;
     mcp?: {
@@ -348,7 +348,7 @@ export declare const skillZ: z.ZodEffects<z.ZodObject<{
         description: string;
         name: string;
         input_schema: Record<string, unknown>;
-        access?: "read" | "write" | undefined;
+        access?: "write" | "read" | undefined;
     }[] | undefined;
     mcpAliases?: Record<string, string[]> | undefined;
 }>;
@@ -822,6 +822,81 @@ export declare const nodeRetryZ: z.ZodObject<{
         reflect: string;
     } | undefined;
 }>;
+/**
+ * Node / workflow permissions (#365): `read` | `write`, or an object with
+ * `access`, `deny` (portable tool classes) and `strict`. The object form must
+ * declare at least one key.
+ */
+export declare const nodePermissionsZ: z.ZodUnion<[z.ZodEnum<["read", "write"]>, z.ZodEffects<z.ZodObject<{
+    access: z.ZodOptional<z.ZodEnum<["read", "write"]>>;
+    deny: z.ZodOptional<z.ZodArray<z.ZodEnum<["shell", "write", "edit", "net", "subagent"]>, "many">>;
+    strict: z.ZodOptional<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    strict?: boolean | undefined;
+    deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+    access?: "write" | "read" | undefined;
+}, {
+    strict?: boolean | undefined;
+    deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+    access?: "write" | "read" | undefined;
+}>, {
+    strict?: boolean | undefined;
+    deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+    access?: "write" | "read" | undefined;
+}, {
+    strict?: boolean | undefined;
+    deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+    access?: "write" | "read" | undefined;
+}>]>;
+/** One typed write intent a node may emit (#365). */
+export declare const safeOutputDeclarationZ: z.ZodObject<{
+    type: z.ZodEnum<["comment", "issue", "pr", "label"]>;
+    via: z.ZodOptional<z.ZodString>;
+    max: z.ZodOptional<z.ZodNumber>;
+    target: z.ZodOptional<z.ZodString>;
+    title_prefix: z.ZodOptional<z.ZodString>;
+    labels: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    expires: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    type: "comment" | "issue" | "pr" | "label";
+    labels?: string[] | undefined;
+    max?: number | undefined;
+    via?: string | undefined;
+    target?: string | undefined;
+    title_prefix?: string | undefined;
+    expires?: string | undefined;
+}, {
+    type: "comment" | "issue" | "pr" | "label";
+    labels?: string[] | undefined;
+    max?: number | undefined;
+    via?: string | undefined;
+    target?: string | undefined;
+    title_prefix?: string | undefined;
+    expires?: string | undefined;
+}>;
+/** Workflow-level safe-output policy (#365): the ceiling and run-wide limits. */
+export declare const safeOutputsPolicyZ: z.ZodObject<{
+    allow: z.ZodOptional<z.ZodArray<z.ZodEnum<["comment", "issue", "pr", "label"]>, "many">>;
+    max: z.ZodOptional<z.ZodNumber>;
+    staged: z.ZodOptional<z.ZodBoolean>;
+    trusted_actors: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    trusted_associations: z.ZodOptional<z.ZodArray<z.ZodEnum<["OWNER", "MEMBER", "COLLABORATOR", "CONTRIBUTOR", "FIRST_TIME_CONTRIBUTOR", "FIRST_TIMER", "NONE"]>, "many">>;
+    screen: z.ZodOptional<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    staged?: boolean | undefined;
+    allow?: ("comment" | "issue" | "pr" | "label")[] | undefined;
+    max?: number | undefined;
+    trusted_actors?: string[] | undefined;
+    trusted_associations?: ("OWNER" | "MEMBER" | "COLLABORATOR" | "CONTRIBUTOR" | "FIRST_TIME_CONTRIBUTOR" | "FIRST_TIMER" | "NONE")[] | undefined;
+    screen?: boolean | undefined;
+}, {
+    staged?: boolean | undefined;
+    allow?: ("comment" | "issue" | "pr" | "label")[] | undefined;
+    max?: number | undefined;
+    trusted_actors?: string[] | undefined;
+    trusted_associations?: ("OWNER" | "MEMBER" | "COLLABORATOR" | "CONTRIBUTOR" | "FIRST_TIME_CONTRIBUTOR" | "FIRST_TIMER" | "NONE")[] | undefined;
+    screen?: boolean | undefined;
+}>;
 export declare const nodeZ: z.ZodObject<{
     name: z.ZodString;
     instruction: z.ZodUnion<[z.ZodString, z.ZodObject<{
@@ -868,6 +943,52 @@ export declare const nodeZ: z.ZodObject<{
     }>>;
     fail_soft: z.ZodOptional<z.ZodBoolean>;
     on_fail: z.ZodOptional<z.ZodEnum<["halt", "continue"]>>;
+    permissions: z.ZodOptional<z.ZodUnion<[z.ZodEnum<["read", "write"]>, z.ZodEffects<z.ZodObject<{
+        access: z.ZodOptional<z.ZodEnum<["read", "write"]>>;
+        deny: z.ZodOptional<z.ZodArray<z.ZodEnum<["shell", "write", "edit", "net", "subagent"]>, "many">>;
+        strict: z.ZodOptional<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    }, {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    }>, {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    }, {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    }>]>>;
+    outputs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<["comment", "issue", "pr", "label"]>;
+        via: z.ZodOptional<z.ZodString>;
+        max: z.ZodOptional<z.ZodNumber>;
+        target: z.ZodOptional<z.ZodString>;
+        title_prefix: z.ZodOptional<z.ZodString>;
+        labels: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        expires: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        type: "comment" | "issue" | "pr" | "label";
+        labels?: string[] | undefined;
+        max?: number | undefined;
+        via?: string | undefined;
+        target?: string | undefined;
+        title_prefix?: string | undefined;
+        expires?: string | undefined;
+    }, {
+        type: "comment" | "issue" | "pr" | "label";
+        labels?: string[] | undefined;
+        max?: number | undefined;
+        via?: string | undefined;
+        target?: string | undefined;
+        title_prefix?: string | undefined;
+        expires?: string | undefined;
+    }>, "many">>;
     rules: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
         inline: z.ZodString;
     }, "strict", z.ZodTypeAny, {
@@ -1275,6 +1396,20 @@ export declare const nodeZ: z.ZodObject<{
     max_turns?: number | undefined;
     disallowed_tools?: string[] | undefined;
     fail_soft?: boolean | undefined;
+    permissions?: "write" | "read" | {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    } | undefined;
+    outputs?: {
+        type: "comment" | "issue" | "pr" | "label";
+        labels?: string[] | undefined;
+        max?: number | undefined;
+        via?: string | undefined;
+        target?: string | undefined;
+        title_prefix?: string | undefined;
+        expires?: string | undefined;
+    }[] | undefined;
     rules?: (string | {
         inline: string;
     } | {
@@ -1371,6 +1506,20 @@ export declare const nodeZ: z.ZodObject<{
     max_turns?: number | undefined;
     disallowed_tools?: string[] | undefined;
     fail_soft?: boolean | undefined;
+    permissions?: "write" | "read" | {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    } | undefined;
+    outputs?: {
+        type: "comment" | "issue" | "pr" | "label";
+        labels?: string[] | undefined;
+        max?: number | undefined;
+        via?: string | undefined;
+        target?: string | undefined;
+        title_prefix?: string | undefined;
+        expires?: string | undefined;
+    }[] | undefined;
     rules?: (string | {
         inline: string;
     } | {
@@ -1528,6 +1677,52 @@ export declare const workflowZ: z.ZodObject<{
         }>>;
         fail_soft: z.ZodOptional<z.ZodBoolean>;
         on_fail: z.ZodOptional<z.ZodEnum<["halt", "continue"]>>;
+        permissions: z.ZodOptional<z.ZodUnion<[z.ZodEnum<["read", "write"]>, z.ZodEffects<z.ZodObject<{
+            access: z.ZodOptional<z.ZodEnum<["read", "write"]>>;
+            deny: z.ZodOptional<z.ZodArray<z.ZodEnum<["shell", "write", "edit", "net", "subagent"]>, "many">>;
+            strict: z.ZodOptional<z.ZodBoolean>;
+        }, "strict", z.ZodTypeAny, {
+            strict?: boolean | undefined;
+            deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+            access?: "write" | "read" | undefined;
+        }, {
+            strict?: boolean | undefined;
+            deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+            access?: "write" | "read" | undefined;
+        }>, {
+            strict?: boolean | undefined;
+            deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+            access?: "write" | "read" | undefined;
+        }, {
+            strict?: boolean | undefined;
+            deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+            access?: "write" | "read" | undefined;
+        }>]>>;
+        outputs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<["comment", "issue", "pr", "label"]>;
+            via: z.ZodOptional<z.ZodString>;
+            max: z.ZodOptional<z.ZodNumber>;
+            target: z.ZodOptional<z.ZodString>;
+            title_prefix: z.ZodOptional<z.ZodString>;
+            labels: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            expires: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            type: "comment" | "issue" | "pr" | "label";
+            labels?: string[] | undefined;
+            max?: number | undefined;
+            via?: string | undefined;
+            target?: string | undefined;
+            title_prefix?: string | undefined;
+            expires?: string | undefined;
+        }, {
+            type: "comment" | "issue" | "pr" | "label";
+            labels?: string[] | undefined;
+            max?: number | undefined;
+            via?: string | undefined;
+            target?: string | undefined;
+            title_prefix?: string | undefined;
+            expires?: string | undefined;
+        }>, "many">>;
         rules: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
             inline: z.ZodString;
         }, "strict", z.ZodTypeAny, {
@@ -1935,6 +2130,20 @@ export declare const workflowZ: z.ZodObject<{
         max_turns?: number | undefined;
         disallowed_tools?: string[] | undefined;
         fail_soft?: boolean | undefined;
+        permissions?: "write" | "read" | {
+            strict?: boolean | undefined;
+            deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+            access?: "write" | "read" | undefined;
+        } | undefined;
+        outputs?: {
+            type: "comment" | "issue" | "pr" | "label";
+            labels?: string[] | undefined;
+            max?: number | undefined;
+            via?: string | undefined;
+            target?: string | undefined;
+            title_prefix?: string | undefined;
+            expires?: string | undefined;
+        }[] | undefined;
         rules?: (string | {
             inline: string;
         } | {
@@ -2031,6 +2240,20 @@ export declare const workflowZ: z.ZodObject<{
         max_turns?: number | undefined;
         disallowed_tools?: string[] | undefined;
         fail_soft?: boolean | undefined;
+        permissions?: "write" | "read" | {
+            strict?: boolean | undefined;
+            deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+            access?: "write" | "read" | undefined;
+        } | undefined;
+        outputs?: {
+            type: "comment" | "issue" | "pr" | "label";
+            labels?: string[] | undefined;
+            max?: number | undefined;
+            via?: string | undefined;
+            target?: string | undefined;
+            title_prefix?: string | undefined;
+            expires?: string | undefined;
+        }[] | undefined;
         rules?: (string | {
             inline: string;
         } | {
@@ -2291,6 +2514,49 @@ export declare const workflowZ: z.ZodObject<{
         default?: unknown;
         enum?: unknown[] | undefined;
     }>>>;
+    permissions: z.ZodOptional<z.ZodUnion<[z.ZodEnum<["read", "write"]>, z.ZodEffects<z.ZodObject<{
+        access: z.ZodOptional<z.ZodEnum<["read", "write"]>>;
+        deny: z.ZodOptional<z.ZodArray<z.ZodEnum<["shell", "write", "edit", "net", "subagent"]>, "many">>;
+        strict: z.ZodOptional<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    }, {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    }>, {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    }, {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    }>]>>;
+    safe_outputs: z.ZodOptional<z.ZodObject<{
+        allow: z.ZodOptional<z.ZodArray<z.ZodEnum<["comment", "issue", "pr", "label"]>, "many">>;
+        max: z.ZodOptional<z.ZodNumber>;
+        staged: z.ZodOptional<z.ZodBoolean>;
+        trusted_actors: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        trusted_associations: z.ZodOptional<z.ZodArray<z.ZodEnum<["OWNER", "MEMBER", "COLLABORATOR", "CONTRIBUTOR", "FIRST_TIME_CONTRIBUTOR", "FIRST_TIMER", "NONE"]>, "many">>;
+        screen: z.ZodOptional<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        staged?: boolean | undefined;
+        allow?: ("comment" | "issue" | "pr" | "label")[] | undefined;
+        max?: number | undefined;
+        trusted_actors?: string[] | undefined;
+        trusted_associations?: ("OWNER" | "MEMBER" | "COLLABORATOR" | "CONTRIBUTOR" | "FIRST_TIME_CONTRIBUTOR" | "FIRST_TIMER" | "NONE")[] | undefined;
+        screen?: boolean | undefined;
+    }, {
+        staged?: boolean | undefined;
+        allow?: ("comment" | "issue" | "pr" | "label")[] | undefined;
+        max?: number | undefined;
+        trusted_actors?: string[] | undefined;
+        trusted_associations?: ("OWNER" | "MEMBER" | "COLLABORATOR" | "CONTRIBUTOR" | "FIRST_TIME_CONTRIBUTOR" | "FIRST_TIMER" | "NONE")[] | undefined;
+        screen?: boolean | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     description: string;
     name: string;
@@ -2329,6 +2595,20 @@ export declare const workflowZ: z.ZodObject<{
         max_turns?: number | undefined;
         disallowed_tools?: string[] | undefined;
         fail_soft?: boolean | undefined;
+        permissions?: "write" | "read" | {
+            strict?: boolean | undefined;
+            deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+            access?: "write" | "read" | undefined;
+        } | undefined;
+        outputs?: {
+            type: "comment" | "issue" | "pr" | "label";
+            labels?: string[] | undefined;
+            max?: number | undefined;
+            via?: string | undefined;
+            target?: string | undefined;
+            title_prefix?: string | undefined;
+            expires?: string | undefined;
+        }[] | undefined;
         rules?: (string | {
             inline: string;
         } | {
@@ -2413,6 +2693,11 @@ export declare const workflowZ: z.ZodObject<{
     }[];
     entry: string;
     model?: string | undefined;
+    permissions?: "write" | "read" | {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    } | undefined;
     rules?: (string | {
         inline: string;
     } | {
@@ -2439,6 +2724,14 @@ export declare const workflowZ: z.ZodObject<{
         default?: unknown;
         enum?: unknown[] | undefined;
     }> | undefined;
+    safe_outputs?: {
+        staged?: boolean | undefined;
+        allow?: ("comment" | "issue" | "pr" | "label")[] | undefined;
+        max?: number | undefined;
+        trusted_actors?: string[] | undefined;
+        trusted_associations?: ("OWNER" | "MEMBER" | "COLLABORATOR" | "CONTRIBUTOR" | "FIRST_TIME_CONTRIBUTOR" | "FIRST_TIMER" | "NONE")[] | undefined;
+        screen?: boolean | undefined;
+    } | undefined;
 }, {
     name: string;
     id: string;
@@ -2463,6 +2756,20 @@ export declare const workflowZ: z.ZodObject<{
         max_turns?: number | undefined;
         disallowed_tools?: string[] | undefined;
         fail_soft?: boolean | undefined;
+        permissions?: "write" | "read" | {
+            strict?: boolean | undefined;
+            deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+            access?: "write" | "read" | undefined;
+        } | undefined;
+        outputs?: {
+            type: "comment" | "issue" | "pr" | "label";
+            labels?: string[] | undefined;
+            max?: number | undefined;
+            via?: string | undefined;
+            target?: string | undefined;
+            title_prefix?: string | undefined;
+            expires?: string | undefined;
+        }[] | undefined;
         rules?: (string | {
             inline: string;
         } | {
@@ -2561,6 +2868,11 @@ export declare const workflowZ: z.ZodObject<{
             env?: Record<string, string> | undefined;
         } | undefined;
     }> | undefined;
+    permissions?: "write" | "read" | {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    } | undefined;
     rules?: (string | {
         inline: string;
     } | {
@@ -2587,6 +2899,14 @@ export declare const workflowZ: z.ZodObject<{
         default?: unknown;
         enum?: unknown[] | undefined;
     }> | undefined;
+    safe_outputs?: {
+        staged?: boolean | undefined;
+        allow?: ("comment" | "issue" | "pr" | "label")[] | undefined;
+        max?: number | undefined;
+        trusted_actors?: string[] | undefined;
+        trusted_associations?: ("OWNER" | "MEMBER" | "COLLABORATOR" | "CONTRIBUTOR" | "FIRST_TIME_CONTRIBUTOR" | "FIRST_TIMER" | "NONE")[] | undefined;
+        screen?: boolean | undefined;
+    } | undefined;
 }>;
 /**
  * Detect legacy `verify:` blocks before parse and throw a clear migration
@@ -2639,6 +2959,20 @@ export declare function parseWorkflow(raw: unknown): {
         max_turns?: number | undefined;
         disallowed_tools?: string[] | undefined;
         fail_soft?: boolean | undefined;
+        permissions?: "write" | "read" | {
+            strict?: boolean | undefined;
+            deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+            access?: "write" | "read" | undefined;
+        } | undefined;
+        outputs?: {
+            type: "comment" | "issue" | "pr" | "label";
+            labels?: string[] | undefined;
+            max?: number | undefined;
+            via?: string | undefined;
+            target?: string | undefined;
+            title_prefix?: string | undefined;
+            expires?: string | undefined;
+        }[] | undefined;
         rules?: (string | {
             inline: string;
         } | {
@@ -2723,6 +3057,11 @@ export declare function parseWorkflow(raw: unknown): {
     }[];
     entry: string;
     model?: string | undefined;
+    permissions?: "write" | "read" | {
+        strict?: boolean | undefined;
+        deny?: ("shell" | "write" | "edit" | "net" | "subagent")[] | undefined;
+        access?: "write" | "read" | undefined;
+    } | undefined;
     rules?: (string | {
         inline: string;
     } | {
@@ -2749,9 +3088,17 @@ export declare function parseWorkflow(raw: unknown): {
         default?: unknown;
         enum?: unknown[] | undefined;
     }> | undefined;
+    safe_outputs?: {
+        staged?: boolean | undefined;
+        allow?: ("comment" | "issue" | "pr" | "label")[] | undefined;
+        max?: number | undefined;
+        trusted_actors?: string[] | undefined;
+        trusted_associations?: ("OWNER" | "MEMBER" | "COLLABORATOR" | "CONTRIBUTOR" | "FIRST_TIME_CONTRIBUTOR" | "FIRST_TIMER" | "NONE")[] | undefined;
+        screen?: boolean | undefined;
+    } | undefined;
 };
 export interface WorkflowError {
-    code: "MISSING_ENTRY" | "UNKNOWN_EDGE_SOURCE" | "UNKNOWN_EDGE_TARGET" | "UNREACHABLE_NODE" | "UNKNOWN_SKILL" | "SELF_LOOP" | "UNBOUNDED_CYCLE" | "AMBIGUOUS_EDGES" | "UNSUPPORTED_EVAL_POLICY" | "INVALID_INLINE_SKILL" | "EDGE_ITERATIONS_EXCEEDED" | "RETRY_MAX_EXCEEDED";
+    code: "MISSING_ENTRY" | "UNKNOWN_EDGE_SOURCE" | "UNKNOWN_EDGE_TARGET" | "UNREACHABLE_NODE" | "UNKNOWN_SKILL" | "SELF_LOOP" | "UNBOUNDED_CYCLE" | "AMBIGUOUS_EDGES" | "UNSUPPORTED_EVAL_POLICY" | "INVALID_INLINE_SKILL" | "EDGE_ITERATIONS_EXCEEDED" | "RETRY_MAX_EXCEEDED" | "PERMISSION_CEILING" | "OUTPUT_NOT_ALLOWED" | "DUPLICATE_OUTPUT" | "UNSUPPORTED_OUTPUT";
     message: string;
     nodeId?: string;
 }
@@ -2981,6 +3328,83 @@ export declare const workflowJsonSchema: {
                 };
             }];
         };
+        readonly Permissions: {
+            readonly description: "What a node's agent may do. 'read' runs it read-only: only access: read skill tools, no external skill MCP servers, no shell, file-write, edit, fetch or subagent built-ins. On the workflow it is the default and the ceiling for every node.";
+            readonly oneOf: readonly [{
+                readonly type: "string";
+                readonly enum: readonly ["read", "write"];
+            }, {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly minProperties: 1;
+                readonly properties: {
+                    readonly access: {
+                        readonly type: "string";
+                        readonly enum: readonly ["read", "write"];
+                    };
+                    readonly deny: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly enum: readonly ["shell", "write", "edit", "net", "subagent"];
+                        };
+                        readonly minItems: 1;
+                        readonly description: "Built-in tool classes the agent must not have, compiled per harness.";
+                    };
+                    readonly strict: {
+                        readonly type: "boolean";
+                        readonly description: "Exclusive MCP (only the servers sweny injects), and refuse the node on a harness that cannot enforce the policy.";
+                    };
+                };
+            }];
+        };
+        readonly SafeOutput: {
+            readonly type: "object";
+            readonly required: readonly ["type"];
+            readonly additionalProperties: false;
+            readonly properties: {
+                readonly type: {
+                    readonly type: "string";
+                    readonly enum: readonly ["comment", "issue", "pr", "label"];
+                };
+                readonly via: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "Skill that applies the write. Default: the first node skill that supports the type.";
+                };
+                readonly max: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly maximum: 100;
+                    readonly description: "Max writes of this type from this node per run. Default 1.";
+                };
+                readonly target: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "Pinned target (GitHub owner/repo, Linear team id). GitHub default: GITHUB_REPOSITORY.";
+                };
+                readonly title_prefix: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 64;
+                    readonly description: "Prepended to issue and PR titles that do not already start with it.";
+                };
+                readonly labels: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly minItems: 1;
+                    readonly description: "issue / pr: labels always added. label: the only labels the agent may add.";
+                };
+                readonly expires: {
+                    readonly type: "string";
+                    readonly pattern: string;
+                    readonly description: "Drop an intent older than this when the write stage runs (e.g. 30m, 2h, 7d).";
+                };
+            };
+        };
     };
     readonly properties: {
         readonly id: {
@@ -3028,6 +3452,58 @@ export declare const workflowJsonSchema: {
             readonly minLength: 1;
             readonly description: "Default execution model for every node. Overridable per-node. Free-text passthrough (no registry); resolved as node.model ?? workflow.model ?? executor default.";
         };
+        readonly permissions: {
+            readonly $ref: "#/$defs/Permissions";
+            readonly description: "Default and ceiling for every node's permissions. Absent: write.";
+        };
+        readonly safe_outputs: {
+            readonly type: "object";
+            readonly description: "Workflow-level safe-output policy: the ceiling on output types and run-wide limits.";
+            readonly additionalProperties: false;
+            readonly properties: {
+                readonly allow: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                        readonly enum: readonly ["comment", "issue", "pr", "label"];
+                    };
+                    readonly minItems: 1;
+                    readonly description: "Output types any node may declare. Absent: all types.";
+                };
+                readonly max: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly maximum: 100;
+                    readonly description: "Total writes per run across all nodes.";
+                };
+                readonly staged: {
+                    readonly type: "boolean";
+                    readonly description: "Preview every write and apply none.";
+                };
+                readonly trusted_actors: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly minItems: 1;
+                    readonly description: "GitHub logins whose runs may write.";
+                };
+                readonly trusted_associations: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                        readonly enum: readonly ["OWNER", "MEMBER", "COLLABORATOR", "CONTRIBUTOR", "FIRST_TIME_CONTRIBUTOR", "FIRST_TIMER", "NONE"];
+                    };
+                    readonly minItems: 1;
+                    readonly description: "Author associations (from the GitHub event payload) whose runs may write.";
+                };
+                readonly screen: {
+                    readonly type: "boolean";
+                    readonly description: "One model call that may veto the writes after every deterministic check. It can never authorize one.";
+                };
+            };
+        };
         readonly judge_budget: {
             readonly type: "integer";
             readonly minimum: 0;
@@ -3199,11 +3675,11 @@ export declare const workflowJsonSchema: {
                             readonly type: "string";
                             readonly minLength: 1;
                         };
-                        readonly description: "Built-in tool names the agent cannot use at this node (e.g. ['Bash']). Forwarded to the Claude Agent SDK's disallowedTools, which removes the tools from the model context entirely.";
+                        readonly description: "Built-in tool names the agent cannot use at this node, in the harness's own names (Claude Code: ['Bash']). Passed through to the harness: Claude Code removes them from the model context; Codex maps known names to tool classes and reports what it cannot deny as degraded. For portable workflows prefer tool classes in tools.deny.";
                     };
                     readonly tools: {
                         readonly type: "object";
-                        readonly description: "Per-node filter over skill-provided tools. 'allow' keeps only the listed skill tools; 'deny' removes the listed skill tools (applied after 'allow'). Filtered tools are never registered for the node's run. Absent field = all skill tools exposed. Complements disallowed_tools, which covers built-in agent tools only.";
+                        readonly description: "Per-node filter over skill-provided tools. 'allow' keeps only the listed skill tools; 'deny' removes the listed skill tools (applied after 'allow'). Filtered tools are never registered for the node's run. Absent field = all skill tools exposed. A 'deny' entry that names a portable tool class (shell, write, edit, net, subagent) also denies that class of built-in agent tools on every harness.";
                         readonly additionalProperties: false;
                         readonly anyOf: readonly [{
                             readonly required: readonly ["allow"];
@@ -3226,6 +3702,7 @@ export declare const workflowJsonSchema: {
                                     readonly minLength: 1;
                                 };
                                 readonly minItems: 1;
+                                readonly description: "Skill tool names to remove, and/or portable tool classes (shell, write, edit, net, subagent) to deny for built-in agent tools. Each harness enforces a class natively or reports it as degraded; under strict harness policy an unenforceable class refuses the node.";
                             };
                         };
                     };
@@ -3238,6 +3715,18 @@ export declare const workflowJsonSchema: {
                         readonly enum: readonly ["halt", "continue"];
                         readonly description: "What to do when this node finishes 'failed' (agent-level failure, or an eval failure that exhausted retries and was not softened by fail_soft). 'halt' (default) stops the workflow with the failure surfaced so a broken node never advances down a conditional edge; 'continue' preserves the legacy fall-through where routing proceeds from the failed node. Distinct from requires.on_fail (the pre-condition gate).";
                     };
+                    readonly permissions: {
+                        readonly $ref: "#/$defs/Permissions";
+                        readonly description: "What this node's agent may do. Absent: read when the node declares outputs, else the workflow's permissions, else write.";
+                    };
+                    readonly outputs: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/SafeOutput";
+                        };
+                        readonly minItems: 1;
+                        readonly description: "Typed write intents this node may emit with the emit_output tool. sweny applies them after the node, within the declared caps.";
+                    };
                     readonly rules: {
                         readonly $ref: "#/$defs/NodeSources";
                         readonly description: "Per-node rules. Additive by default; set { only: true } to block cascade.";
@@ -3358,7 +3847,7 @@ export declare const workflowJsonSchema: {
                     };
                     readonly when: {
                         readonly type: "string";
-                        readonly description: "Natural language condition. Claude evaluates at runtime.";
+                        readonly description: "Natural language condition, evaluated at runtime by the workflow's harness.";
                     };
                     readonly max_iterations: {
                         readonly type: "integer";