p-dev-harness 0.3.1 → 0.4.0

package/workspace-snapshot/files/docs/releases/release-process.md

@@ -2,7 +2,7 @@
 
 Operator guide for harness releases: GitHub source release plus public npm package `p-dev-harness`.
 
-**Related:** [`v0.3.1.md`](v0.3.1.md) (current release contract), [`v0.3.0.md`](v0.3.0.md) (historical), [`CHANGELOG.md`](../../CHANGELOG.md), [`docs/p-dev.md`](../p-dev.md)
+**Related:** [`v0.4.0.md`](v0.4.0.md) (current release contract), [`v0.3.1.md`](v0.3.1.md) / [`v0.3.0.md`](v0.3.0.md) (historical), [`CHANGELOG.md`](../../CHANGELOG.md), [`docs/p-dev.md`](../p-dev.md)
 
 ## Variables
 
@@ -10,10 +10,10 @@ Use these placeholders throughout:
 
 | Variable | Example | Meaning |
 |----------|---------|---------|
-| `VERSION` | `0.3.1` | SemVer package/root version |
-| `TAG` | `v0.3.1` | Annotated git tag |
+| `VERSION` | `0.4.0` | SemVer package/root version |
+| `TAG` | `v0.4.0` | Annotated git tag |
 | `RELEASE_SHA` | merge commit on `main` | Exact post-merge release commit |
-| `TARBALL` | `packages/p-dev/p-dev-harness-0.3.1.tgz` | Exact npm publish artifact |
+| `TARBALL` | `packages/p-dev/p-dev-harness-0.4.0.tgz` | Exact npm publish artifact |
 
 ## Summary
 
@@ -215,11 +215,11 @@ Merge after checks pass.
 
 ---
 
-## V0.3.1 — exact commands (current example)
+## V0.4.0 — exact commands (current example)
 
 ```bash
-VERSION=0.3.1
-TAG=v0.3.1
+VERSION=0.4.0
+TAG=v0.4.0
 
 # After release-prep PR merge
 RELEASE_SHA=$(git rev-parse origin/main)
@@ -270,3 +270,131 @@ V0.3.0 used public-template provisioning. See [`v0.3.0.md`](v0.3.0.md) for the h
 - Live `harness:run` against production issues
 - Linear writes
 - Secret inspection, printing, or rotation in reports
+
+---
+
+---
+
+## Observability release-readiness validation
+
+When shipping observability changes in `p-dev-harness`, run these checks at the stacked release-readiness tip in a **clean committed working tree** before any npm publication approval:
+
+```bash
+npm ci
+npm run build
+npm test
+npm run test:webhook
+npm run package:p-dev:prepare
+npm run package:p-dev:pack
+npm run package:p-dev:inspect
+npm test -- tests/observability/packaged-config.test.ts tests/p-dev/package-packed-artifact.test.ts
+```
+
+Record tarball path, bytes, SHA-1, SHA-256, manifest source commit, and packed entry count.
+
+Installed-tarball smoke (fresh temp dir + fresh `P_DEV_HOME`, fake/local capture only):
+
+```bash
+TARBALL="packages/p-dev/p-dev-harness-VERSION.tgz"
+WORKDIR=$(mktemp -d)
+export P_DEV_HOME="$WORKDIR/workspace"
+mkdir -p "$P_DEV_HOME"
+npx --yes "file:$(pwd)/$TARBALL" --no-open &
+PID=$!
+# wait for http://127.0.0.1:PORT/settings/configure → 200
+# GET /api/observability/preferences → undecided, no installation ID
+# verify no outbound Sentry/PostHog requests before consent
+# verify route security rejects wrong Host, origin, nonce, and malformed bodies
+kill "$PID"
+```
+
+**Stop** if:
+
+- `observability.public.json` contains privileged credentials, PostHog personal API keys (`phx_`), or Sentry auth/management tokens
+- Tarball ships `.harness/observability.local.json`, nonce fixtures, or maintainer overrides
+- Pre-consent network transmission occurs in smoke
+- Sentry payloads include stable installation ID
+- the public DSN appears outside `config/observability.public.json` and the established generated package mirror
+- browser-side Sentry initialization, CI/Vercel source-map upload, source-context upload, or build/runtime `SENTRY_AUTH_TOKEN` dependency is introduced
+
+**Required before observability-enabled release approval:**
+
+- Sentry public DSN committed only to the tracked public config source
+- Legacy PostHog `Default Project` deleted and clean `p-dev-harness` project created (US region)
+- Public PostHog project ingestion token (`phc_…`, not `phx_`) committed only to `config/observability.public.json` and the package mirror
+- `p-dev Packaged Onboarding Health` dashboard matches [`src/observability/posthog-dashboard-contract.ts`](../src/observability/posthog-dashboard-contract.ts)
+- Vendor sandbox payload verification with raw stored event JSON (not UI summaries alone)
+- Mandatory Sentry project privacy settings verified live:
+  - Data Scrubber and Default Scrubbers enabled
+  - Prevent Storing of IP Addresses
+  - Advanced Data Scrubbing: `[Remove] [Anything] from [$user.geo.**]`
+  - Advanced Data Scrubbing: `[Remove] [Anything] from [contexts.trace]`
+- Source maps, JavaScript source fetching, and SCM source context remain disabled
+- Exposed Sentry client key revoked, deleted, disabled, or otherwise proven unusable before the replacement DSN is enabled
+
+### Sentry sandbox privacy revalidation (operator-run)
+
+Use the exact-head packaged tarball with the committed public DSN. Do not supply `P_DEV_SENTRY_DSN`, `SENTRY_DSN`, `NEXT_PUBLIC_SENTRY_DSN`, or `SENTRY_AUTH_TOKEN` through private environment variables for this gate.
+
+1. Fresh disposable `P_DEV_HOME` temp directory.
+2. Install and launch the packed tarball with `npx p-dev-harness@VERSION --no-open` (real launcher, not a direct facade import).
+3. Confirm zero Sentry traffic before consent (`GET /api/observability/preferences` undecided).
+4. Enable **Automated sanitized error reports** only in Configure.
+5. Trigger one captured product error without mutating GitHub, Linear, or Vercel:
+   - Enable **Automated sanitized error reports** only and confirm the preference persisted.
+   - `chmod -R a-w "$P_DEV_HOME/.harness"` for the same runtime user as the launcher.
+   - Prove a direct write by that user fails (for example `touch "$P_DEV_HOME/.harness/.write-test"` → `EACCES`).
+   - From Configure, submit a **normal preference write** (not **Reset local telemetry identity**) that keeps `errorReportingPreference: enabled`, does not enable analytics, and requires persistence—for example toggling `disclosureShown` through the real Configure session with the observability nonce.
+   - Expected capture: `configure_request_error` / `configure_route` via preferences route `handleObservabilityRouteFailure` when preference persistence fails (for example when `.harness` is read-only).
+   - **Do not use Reset local telemetry identity** as the trigger; reset disables observability transports before attempting the write.
+6. Keep the launcher running through consent-withdrawal validation below; do not stop after the first event.
+7. Inspect **raw stored event JSON** in Sentry:
+   - no `user`, `user.geo`, `ip_address`, `contexts.trace`, `trace_id`, or `span_id`
+   - `package_version` equals installed tarball version
+   - `release_sha` equals tarball `workspace-snapshot/manifest.json` `sourceCommit`
+   - exactly one event; zero user identity in Sentry Users
+8. Consent withdrawal: restore `.harness` write permissions, disable automated error reporting in Configure, make `.harness` read-only again, repeat the same preference-write failure once, and confirm the Sentry event count remains exactly one.
+9. Stop the launcher cleanly so observability flush/shutdown hooks run.
+10. Teardown: `unset P_DEV_SENTRY_DSN SENTRY_DSN NEXT_PUBLIC_SENTRY_DSN SENTRY_AUTH_TOKEN`, delete temp files.
+
+Do **not** bump package version, publish npm, tag, or create a GitHub release from observability validation work alone.
+
+### PostHog sandbox privacy revalidation (operator-run)
+
+Use the exact-head packaged tarball with the committed public PostHog project token. Unset `P_DEV_POSTHOG_PROJECT_TOKEN`, `P_DEV_POSTHOG_HOST`, `POSTHOG_PROJECT_API_KEY`, `POSTHOG_PERSONAL_API_KEY`, `POSTHOG_API_KEY`, and `NEXT_PUBLIC_POSTHOG_KEY`.
+
+1. Fresh disposable `P_DEV_HOME` temp directory.
+2. Install and launch the packed tarball with `npx p-dev-harness@VERSION --no-open`.
+3. Confirm zero PostHog traffic before analytics consent.
+4. Enable **Anonymous product analytics** only in Configure.
+5. Confirm exactly one `p_dev_session_started` and one deterministic Configure view/completion event from a real non-mutating product interaction.
+6. Inspect raw stored PostHog events for allowlisted properties only; confirm no person profile exists.
+7. Disable analytics in Configure and confirm no new events; relaunch and confirm session-start count remains `1`.
+8. Run every dashboard insight query and verify session, Configure, release-filter, and OS cards show validation data.
+9. Teardown: stop launcher, delete temp `P_DEV_HOME`, unset PostHog environment variables.
+
+## Current example — v0.4.0 (release-prep; not published until approved)
+
+| Variable | Value |
+|----------|-------|
+| `VERSION` | `0.4.0` |
+| `TAG` | `v0.4.0` (not created until post-merge approval) |
+| `RELEASE_SHA` | merge commit on `main` after this release-prep PR |
+| `TARBALL` | `packages/p-dev/p-dev-harness-0.4.0.tgz` |
+| Merge PR | (this release-prep PR) |
+| npm / GitHub release | **Not created** until operator approves PR + artifact checksum |
+
+## Previous example — v0.3.1 (published 2026-07-14)
+
+| Variable | Value |
+|----------|-------|
+| `VERSION` | `0.3.1` |
+| `TAG` | `v0.3.1` |
+| `RELEASE_SHA` | `995387c74334ba85206d9d87d7d78d4ecbfa8361` |
+| `TARBALL` | `packages/p-dev/p-dev-harness-0.3.1.tgz` |
+| Merge PR | https://github.com/weston-uribe/agentic-product-development-harness/pull/60 |
+| npm | https://www.npmjs.com/package/p-dev-harness/v/0.3.1 |
+| GitHub release | https://github.com/weston-uribe/agentic-product-development-harness/releases/tag/v0.3.1 |
+| registry shasum | `d71a6f4a71a9913f51232cfcd066826c1045f36b` |
+
+Post-release evidence PR records immutable validation fixtures and finalization merge SHA. The `v0.3.1` tag remains pinned to `RELEASE_SHA`, not the finalization merge.

package/workspace-snapshot/files/docs/releases/v0.3.1.md

@@ -71,7 +71,7 @@ Release validation includes:
 - Real-account provisioning gate from installed tarball at default concurrency 2
 - Registry smoke after npm publication
 
-Immutable npm, tag, and detailed validation evidence are recorded in the post-release finalization PR.
+Immutable npm, tag, and detailed validation evidence are recorded below and in the post-release finalization PR.
 
 ## Known limitations
 
@@ -90,13 +90,49 @@ Immutable npm, tag, and detailed validation evidence are recorded in the post-re
 
 ## Immutable release evidence
 
-Recorded after publication in the post-release finalization PR and below once available:
+| Field | Value |
+|-------|-------|
+| **RELEASE_SHA** | `995387c74334ba85206d9d87d7d78d4ecbfa8361` |
+| **Merge PR** | https://github.com/weston-uribe/agentic-product-development-harness/pull/60 |
+| **npm package** | [`p-dev-harness@0.3.1`](https://www.npmjs.com/package/p-dev-harness/v/0.3.1) |
+| **npm published (UTC)** | `2026-07-14T04:26:06.351Z` |
+| **registry shasum** | `d71a6f4a71a9913f51232cfcd066826c1045f36b` |
+| **registry integrity** | `sha512-7q53Cuxcg/B8DECHyaJcfecdLdWuBP/Z0uhIC0nb0vF/bFJqwB1t2kmAcIpdkZswk7HRTh/EcDuYmPBl9fh9Tw==` |
+| **GitHub tag / release** | https://github.com/weston-uribe/agentic-product-development-harness/releases/tag/v0.3.1 |
+| **Tarball path** | `packages/p-dev/p-dev-harness-0.3.1.tgz` |
+| **Tarball bytes** | `2,344,371` |
+| **Tarball SHA-1** | `d71a6f4a71a9913f51232cfcd066826c1045f36b` |
+| **Tarball SHA-256** | `894d0d92ea0fd5b65fb149380b1c2802b52a9b2c8c5dcc9048ee8eb4bb4550ee` |
+| **npm inspect entry count** | `1736` |
+| **Manifest `sourceCommit`** | `995387c74334ba85206d9d87d7d78d4ecbfa8361` |
+| **Manifest `snapshotContentId`** | `f934bf224266ff7e2a8bae9d0a73b7399ca785392269ad1df44c59d075f62803` |
+| **Manifest `snapshotSha256`** | `396315fe2e48630609563d32da78e2831eb57e40fac0be3f946f13142753fa77` |
+| **Manifest `gitRootTreeSha1`** | `1c99e6d9dbd304d1372effdc7373d8b30391ddca` |
+| **Manifest file count** | `611` |
+
+### Post-merge validation (installed exact tarball, default concurrency 2)
 
 | Field | Value |
 |-------|-------|
-| **RELEASE_SHA** | _recorded at publication_ |
-| **npm package** | `p-dev-harness@0.3.1` |
-| **GitHub release** | _recorded at publication_ |
-| **Tarball** | `packages/p-dev/p-dev-harness-0.3.1.tgz` |
+| **Tarball launcher smoke** | Pass — `/settings/configure` HTTP 200, stop/relaunch with same `P_DEV_HOME` |
+| **Post-merge live gate repo** | https://github.com/weston-uribe/p-dev-harness-validation-031-release-995387c-20260714042343 |
+| **Repository ID** | `1300003493` |
+| **Init / snapshot / marker SHAs** | `fc3dccdb…` / `72ac3a7c…` / `4399c2dd…` |
+| **Provision duration** | ~102s |
+| **Rate-limit pauses** | `0` |
+| **Verification** | Pass |
+| **HEAD unchanged on replay** | Pass (replay provision returned expected ambiguous-create guard; no mutation) |
+| **Archived** | Yes (private) |
+
+### Registry smoke (published package)
+
+| Field | Value |
+|-------|-------|
+| **`npx p-dev-harness@0.3.1 --no-open`** | Pass — `/settings/configure` HTTP 200 |
+| **Installed manifest `sourceCommit`** | `995387c74334ba85206d9d87d7d78d4ecbfa8361` |
+
+### Branch validation (pre-merge repair evidence on PR #60)
+
+Default-path live gate from branch tarball at `3a5e31a` is recorded in PR #60 comments. Post-merge artifact above is the authoritative release validation.
 
 See [`release-process.md`](release-process.md) for the operator workflow.

package/workspace-snapshot/files/docs/releases/v0.4.0.md

@@ -0,0 +1,93 @@
+# v0.4.0 — Associations, fingerprint gate, and release-sync runner
+
+**Release type:** GitHub source release (annotated tag + curated release notes) plus public npm package **`p-dev-harness@0.4.0`**.
+
+**Status:** Release-preparation — not tagged, not published on npm, and no GitHub release until operator approval of the release-prep PR and final artifact checksum.
+
+## TL;DR
+
+`p-dev-harness@0.4.0` hardens first-run Linear→repo association routing, pairs `HARNESS_CONFIG_JSON_B64` with `HARNESS_CONFIG_FINGERPRINT` for fail-closed `cloud_config_stale` checks, speeds Step 1 provisioning, and ships an operator CLI (`release:sync-managed-runner`) to sync a managed harness runner and require the configuration canary. The in-app **Update PDev runner** card remains **disabled by default**.
+
+**Primary install command (after npm publish):**
+
+```bash
+npx --yes p-dev-harness@0.4.0
+```
+
+Requires Node.js 22+. macOS is the validated packaged platform; use `--no-open` elsewhere.
+
+Full guide: [`docs/p-dev.md`](../p-dev.md)
+
+## What ships
+
+- Authoritative Linear associations for issue routing (Settings + Configure Step 2)
+- Paired cloud config secret + repository variable fingerprint (`HARNESS_CONFIG_JSON_B64` / `HARNESS_CONFIG_FINGERPRINT`), including `run-merge`
+- Configuration canary with safe failure diagnostics (expected/computed fingerprint, decode + association success) and workflow_dispatch 204 run location via `canary_operation_id`
+- Operator CLI: `npm run release:sync-managed-runner`
+- Faster Step 1 provisioning (bulk authenticated git push / packaged Git object pack)
+- Guided Configure UX holds and Step 7 server-authoritative finalization improvements
+- Runner status comments / conditional Blocked finalization refinements
+- In-app Update PDev runner implementation **hidden unless** `P_DEV_RUNNER_UPGRADE_UI_ENABLED=1`
+
+## What does not ship
+
+- Enabled-by-default in-app runner upgrade UI (deferred; experience TBD)
+- Automatic upgrade of every existing managed workspace without operator action
+- Changes to `weston-uribe/p-dev-harness-template`
+- Provider-agnostic agent support or production SaaS claims
+- npm publish / git tag / GitHub release in the release-prep PR (operator-gated after merge)
+
+## Compatibility
+
+| Workspace type | Behavior |
+|----------------|----------|
+| Fresh install @0.4.0 | Provisions from embedded snapshot |
+| Valid 0.3.0 / 0.3.1 managed workspace | Reconnects; operator may use `release:sync-managed-runner` for known test harness upgrade |
+| In-app Update PDev runner card | Hidden unless feature flag enabled |
+
+## Security and mutation boundaries
+
+- Secrets remain in operator workspace, GitHub Actions secrets/vars, and Vercel env vars — never in the published package
+- Published tarball excludes credentials, operator state, and local caches
+- Release-prep validation must not publish npm, create tags, or create GitHub releases
+- External template repository is not mutated for 0.3.1+
+
+## Validation summary
+
+Release-prep validation includes:
+
+- Full test suite + webhook tests
+- `npm run build`
+- `package:p-dev:prepare` / `pack` / `inspect`
+- `npm audit --audit-level=moderate` (document accepted transitive risk if unchanged)
+- Minimal packaged smoke: install tarball, launch server, load `/settings/configure`
+- Prior FRE-1 end-to-end release gate on the test workspace (not re-run for this prep PR)
+
+Immutable npm/tag evidence is filled in the post-release finalization PR after operator-approved publish.
+
+## Known limitations
+
+- Cursor-only agent provider
+- Linear / GitHub / GitHub Actions / Vercel stack
+- macOS validated for packaged browser auto-launch
+- In-app runner upgrade UX intentionally unfinished / disabled for 0.4
+- Not production SaaS or provider-agnostic
+
+## Rollback
+
+- **Unpublished code:** revert merge commit on `main`
+- **Published npm:** follow npm deprecation policy only under explicit operator approval; prefer forward-fix patch for defects
+- **Never** overwrite tags or republish the same npm version with different bytes
+
+## Immutable release evidence
+
+| Field | Value |
+|-------|-------|
+| **RELEASE_SHA** | _(fill after merge to main)_ |
+| **Merge PR** | _(fill after PR open)_ |
+| **npm package** | `p-dev-harness@0.4.0` — **not published yet** |
+| **GitHub release / tag** | **not created yet** |
+| **Tarball** | `packages/p-dev/p-dev-harness-0.4.0.tgz` |
+| **Tarball SHA-256** | _(fill from release-prep validation)_ |
+| **Manifest sourceCommit** | _(fill from prepare at release-prep HEAD)_ |
+| **Manifest snapshotContentId** | _(fill from prepare)_ |

package/workspace-snapshot/files/docs/security.md

@@ -20,6 +20,14 @@ Trusted automation paths:
 
 ---
 
+## Packaged observability boundary
+
+Optional packaged `p-dev` telemetry uses public ingestion tokens (Sentry DSN, PostHog project token) shipped in `observability.public.json`. These allow event submission only — not secret readback. Treat vendor data as **non-authoritative evidence**; never automate security actions or releases from telemetry alone.
+
+Local observability preferences must not be copied into snapshots, GitHub, Vercel, or provisioned repositories. See [`docs/observability-and-privacy.md`](observability-and-privacy.md).
+
+---
+
 ## Plain-English security model
 
 The repo is public, but the secrets are not in the repo.

package/workspace-snapshot/files/docs/settings-console.md

@@ -0,0 +1,44 @@
+# Settings console
+
+The post-setup Settings console lives under `apps/gui/app/settings/(console)/`. The route group keeps the setup wizard (`/settings/configure`) outside the permanent sidebar layout.
+
+## Current scope (v0.4)
+
+The simplified Settings console provides:
+
+- **Connections** as the default landing route (`/settings` redirects here)
+- **Linear**, **Target repositories**, **Deployments**, **Models**, and **Data and privacy**
+- **Models** — same save queue and rollback behavior as `/workflow`
+
+Mutation editors for credentials, Linear, Vercel, and target repositories are implemented under `apps/gui/components/settings/editors/`. They call the same setup APIs as the wizard but use the settings mutation flow documented in `apps/gui/lib/settings/settings-mutation.ts`.
+
+The **Target repositories** page includes a read-only status block for each configured repo: harness `previewProvider` from local config (separate from the PDev automation bridge), and `initializationStatus` from `.p-dev/product.json` on each repo's development branch when `GITHUB_TOKEN` is configured.
+
+Local config-only edits (repositories) use `src/setup/settings-config-patch.ts` with fingerprint CAS via `/api/settings/preview-config-patch` and `/api/settings/apply-config-patch`.
+
+## Future multi-connection model
+
+Today the harness supports a **single active Linear connection** and **single active Vercel connection**. Future versions may introduce explicit connection collections without changing current URLs:
+
+```ts
+linearConnections: LinearConnection[];
+vercelConnections: VercelConnection[];
+targetRepos: {
+  linearConnectionId?: string;
+  vercelConnectionId?: string;
+  // ...
+}[];
+```
+
+Commit A/B types remain limited to the single-connection model actually implemented. There is no "Add another workspace/account" UI in v0.4.
+
+## Routing rules
+
+| Concern | Rule |
+|---------|------|
+| Ordinary routing | Read only durable `initialSetup.status` |
+| Incomplete setup | `/settings` redirects to `/settings/configure` |
+| Complete setup | `/settings/configure` redirects to `/settings` |
+| Packaged default `/` | Incomplete → `/settings/configure`; complete → `/workflow` |
+
+Health drift after completion does not reopen the wizard or change route selection.

package/workspace-snapshot/files/harness.config.schema.json

@@ -53,12 +53,90 @@
           ],
           "additionalProperties": false
         },
+        "roleModels": {
+          "type": "object",
+          "properties": {
+            "planner": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "params": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "id": {
+                        "type": "string",
+                        "minLength": 1
+                      },
+                      "value": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "id",
+                      "value"
+                    ],
+                    "additionalProperties": false
+                  }
+                }
+              },
+              "required": [
+                "id"
+              ],
+              "additionalProperties": false
+            },
+            "builder": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "params": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "id": {
+                        "type": "string",
+                        "minLength": 1
+                      },
+                      "value": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "id",
+                      "value"
+                    ],
+                    "additionalProperties": false
+                  }
+                }
+              },
+              "required": [
+                "id"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "additionalProperties": false
+        },
         "linear": {
           "type": "object",
           "properties": {
+            "workspaceId": {
+              "type": "string"
+            },
             "teamKey": {
               "type": "string"
             },
+            "teamId": {
+              "type": "string"
+            },
             "eligibleStatuses": {
               "type": "object",
               "properties": {
@@ -265,6 +343,42 @@
                 "type": "string",
                 "minLength": 1
               },
+              "linearAssociations": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "workspaceId": {
+                      "type": "string",
+                      "minLength": 1
+                    },
+                    "teamId": {
+                      "type": "string",
+                      "minLength": 1
+                    },
+                    "teamKey": {
+                      "type": "string",
+                      "minLength": 1
+                    },
+                    "projectId": {
+                      "type": "string",
+                      "minLength": 1
+                    },
+                    "projectName": {
+                      "type": "string",
+                      "minLength": 1
+                    }
+                  },
+                  "required": [
+                    "workspaceId",
+                    "teamId",
+                    "teamKey",
+                    "projectId",
+                    "projectName"
+                  ],
+                  "additionalProperties": false
+                }
+              },
               "linearProjects": {
                 "type": "array",
                 "items": {