@sweny-ai/core 0.1.179 → 0.1.181

package/dist/schema.js

@@ -7,7 +7,7 @@
  * parsing untrusted input (JSON/YAML import, Studio editor).
  */
 import { z } from "zod";
-import { AUTHOR_ASSOCIATIONS, CONTEXT_MODES, DECIDER_CONFIDENCE_FLOOR, DECIDER_MARGIN_FLOOR, DECIDER_MIN_CONFIDENCE, DECIDER_MIN_MARGIN, DECIDER_MODE_REMOVED, DECIDER_PROVIDER_MOVED, EVALUATOR_KINDS, EVAL_POLICIES, MCP_TRANSPORTS, NODE_ACCESS, NODE_ON_FAIL, REQUIRES_ON_FAIL, ROUTE_BY, SAFE_OUTPUT_APPLIERS, SAFE_OUTPUT_EXPIRES_PATTERN, SAFE_OUTPUT_MAX_CEILING, SAFE_OUTPUT_STATES, SAFE_OUTPUT_TYPES, SKILL_CATEGORIES, SKILL_ID_MAX_LENGTH, SKILL_ID_PATTERN, TOOL_ACCESS, TOOL_CLASSES, WORKFLOW_TYPES, } from "./types.js";
+import { AUTHOR_ASSOCIATIONS, CONTEXT_MODES, DECIDER_CONFIDENCE_FLOOR, DECIDER_MARGIN_FLOOR, DECIDER_MIN_CONFIDENCE, DECIDER_MIN_MARGIN, DECIDER_MODE_REMOVED, DECIDER_PROVIDER_MOVED, EVALUATOR_KINDS, EVAL_POLICIES, MCP_TRANSPORTS, NODE_ACCESS, NODE_NATIVE, NODE_ON_FAIL, REQUIRES_ON_FAIL, ROUTE_BY, SAFE_OUTPUT_APPLIERS, SAFE_OUTPUT_EXPIRES_PATTERN, SAFE_OUTPUT_MAX_CEILING, SAFE_OUTPUT_STATES, SAFE_OUTPUT_TYPES, SKILL_CATEGORIES, SKILL_ID_MAX_LENGTH, SKILL_ID_PATTERN, TOOL_ACCESS, TOOL_CLASSES, WORKFLOW_TYPES, } from "./types.js";
 import { sourceZ } from "./sources.js";
 import { resolveNodePermissions } from "./node-policy.js";
 import { workflowInputsZ, WORKFLOW_INPUT_TYPES } from "./inputs.js";
@@ -17,7 +17,7 @@ export { isWhenExpression, whenLabel } from "./when.js";
 export { sourceZ };
 export { workflowInputsZ };
 // ─── Zod Schemas ─────────────────────────────────────────────────
-export const jsonSchemaZ = z.record(z.unknown());
+export const jsonSchemaZ = z.record(z.string(), z.unknown());
 // .strict() to match the published skill JSON Schema's ConfigField
 // `additionalProperties: false`. Without it Zod silently STRIPPED an unknown
 // nested key while ajv REJECTED it (the #214/#225 divergence class, missed for
@@ -52,8 +52,8 @@ export const mcpServerConfigZ = z
     command: z.string().optional(),
     args: z.array(z.string()).optional(),
     url: z.string().optional(),
-    headers: z.record(z.string()).optional(),
-    env: z.record(z.string()).optional(),
+    headers: z.record(z.string(), z.string()).optional(),
+    env: z.record(z.string(), z.string()).optional(),
 })
     .strict()
     .refine((c) => c.command || c.url, {
@@ -76,11 +76,11 @@ export const skillZ = z
     name: z.string(),
     description: z.string(),
     category: skillCategoryZ,
-    config: z.record(configFieldZ).default({}),
+    config: z.record(z.string(), configFieldZ).default({}),
     tools: z.array(toolZ).default([]),
     instruction: z.string().optional(),
     mcp: mcpServerConfigZ.optional(),
-    mcpAliases: z.record(z.array(z.string().min(1)).min(1)).optional(),
+    mcpAliases: z.record(z.string(), z.array(z.string().min(1)).min(1)).optional(),
 })
     // Strict to match the published skill JSON Schema's
     // `additionalProperties: false`. Without this an unknown top-level key was
@@ -260,10 +260,11 @@ export const nodePermissionsZ = z.union([
         access: z.enum(NODE_ACCESS).optional(),
         deny: z.array(z.enum(TOOL_CLASSES)).min(1).optional(),
         strict: z.boolean().optional(),
+        native: z.enum(NODE_NATIVE).optional(),
     })
         .strict()
-        .refine((p) => p.access !== undefined || p.deny !== undefined || p.strict !== undefined, {
-        message: "permissions must declare at least one of access, deny, strict",
+        .refine((p) => p.access !== undefined || p.deny !== undefined || p.strict !== undefined || p.native !== undefined, {
+        message: "permissions must declare at least one of access, deny, strict, native",
     }),
 ]);
 /**
@@ -390,10 +391,10 @@ export const workflowZ = z.object({
         .regex(/^[1-9]\d*$/, "spec_version must be a positive integer string")
         .optional(),
     workflow_type: workflowTypeZ.optional(),
-    nodes: z.record(nodeZ),
+    nodes: z.record(z.string(), nodeZ),
     edges: z.array(edgeZ),
     entry: z.string().min(1),
-    skills: z.record(skillDefinitionZ).default({}),
+    skills: z.record(z.string(), skillDefinitionZ).default({}),
     rules: z.array(sourceZ).optional(),
     context: z.array(sourceZ).optional(),
     judge_model: z.string().min(1).optional(),
@@ -998,6 +999,11 @@ export const workflowJsonSchema = {
                             type: "boolean",
                             description: "Exclusive MCP (only the servers sweny injects), and refuse the node on a harness that cannot enforce the policy.",
                         },
+                        native: {
+                            type: "string",
+                            enum: [...NODE_NATIVE],
+                            description: "'none' gives the agent no built-in tools and loads no settings, CLAUDE.md or skills from disk; only skill tools reach it. On the workflow it is a ceiling a node cannot lift. A harness that cannot honor it degrades, and refuses the node under strict.",
+                        },
                     },
                 },
             ],

package/dist/sources.d.ts

@@ -27,28 +27,14 @@ export type SourceKind = "inline" | "file" | "url";
  * Runtime validation of `type` against the resolver registry happens later —
  * the schema stays permissive so new resolvers slot in without schema bumps.
  */
-export declare const sourceZ: z.ZodUnion<[z.ZodString, z.ZodObject<{
+export declare const sourceZ: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
     inline: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    inline: string;
-}, {
-    inline: string;
-}>, z.ZodObject<{
+}, z.core.$strict>, z.ZodObject<{
     file: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    file: string;
-}, {
-    file: string;
-}>, z.ZodObject<{
+}, z.core.$strict>, z.ZodObject<{
     url: z.ZodString;
     type: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    url: string;
-    type?: string | undefined;
-}, {
-    url: string;
-    type?: string | undefined;
-}>]>;
+}, z.core.$strict>]>;
 export type ResolvedSource = {
     content: string;
     kind: SourceKind;

package/dist/types.d.ts

@@ -443,6 +443,13 @@ export interface Node {
 /** Node access level. `read` = no write-capable tool reaches the agent. */
 export declare const NODE_ACCESS: readonly ["read", "write"];
 export type NodeAccess = (typeof NODE_ACCESS)[number];
+/**
+ * Built-in tools and settings. `default`: today's behavior. `none`: the agent
+ * has no built-in tools at all and loads no settings, CLAUDE.md or skills from
+ * disk; only the tools sweny passes (skill tools) reach the model.
+ */
+export declare const NODE_NATIVE: readonly ["default", "none"];
+export type NodeNative = (typeof NODE_NATIVE)[number];
 /** Portable built-in tool classes, compiled per harness (Claude Code: native tool names). */
 export declare const TOOL_CLASSES: readonly ["shell", "write", "edit", "net", "subagent"];
 /** Object form of {@link NodePermissions}. */
@@ -452,6 +459,8 @@ export interface NodePermissionsSpec {
     deny?: (typeof TOOL_CLASSES)[number][];
     /** Exclusive MCP, and refuse the node on a harness that cannot enforce the policy. */
     strict?: boolean;
+    /** `none`: no built-in tools and no settings sources. A workflow `none` is a ceiling a node cannot lift. */
+    native?: NodeNative;
 }
 /** `read` / `write` shorthand, or the object form. */
 export type NodePermissions = NodeAccess | NodePermissionsSpec;

package/dist/types.js

@@ -72,6 +72,12 @@ export const MCP_TRANSPORTS = ["stdio", "http"];
 // ─── Permissions and safe outputs (#365) ─────────────────────────
 /** Node access level. `read` = no write-capable tool reaches the agent. */
 export const NODE_ACCESS = ["read", "write"];
+/**
+ * Built-in tools and settings. `default`: today's behavior. `none`: the agent
+ * has no built-in tools at all and loads no settings, CLAUDE.md or skills from
+ * disk; only the tools sweny passes (skill tools) reach the model.
+ */
+export const NODE_NATIVE = ["default", "none"];
 /** Portable built-in tool classes, compiled per harness (Claude Code: native tool names). */
 export const TOOL_CLASSES = ["shell", "write", "edit", "net", "subagent"];
 /** Write operations a node may request through `emit_output`. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sweny-ai/core",
-  "version": "0.1.179",
+  "version": "0.1.181",
   "type": "module",
   "bin": {
     "sweny": "./dist/cli/main.js"
@@ -68,7 +68,7 @@
     "chalk": "^5",
     "commander": "^13",
     "yaml": "^2.9.0",
-    "zod": "^3.25.76"
+    "zod": "^4.0.0"
   },
   "devDependencies": {
     "@anthropic-ai/claude-code": "^2.1.220",