Variable ArchiveManifestSchema`Const`

ArchiveManifestSchema: ZodObject<
    {
        schemaVersion: ZodLiteral<"archive-manifest.v2">;
        createdAt: ZodString;
        sessionId: ZodString;
        fingerprint: ZodString;
        policyMode: ZodEnum<
            {
                unknown: "unknown";
                solo: "solo";
                team: "team";
                "team-ci": "team-ci";
                regulated: "regulated";
            },
        >;
        profileId: ZodString;
        discoveryDigest: ZodNullable<ZodString>;
        auditChainHead: ZodString;
        auditEventCount: ZodNumber;
        includedFiles: ZodArray<ZodString>;
        fileDigests: ZodRecord<ZodString, ZodString>;
        contentDigest: ZodString;
        redactionMode: ZodOptional<
            ZodEnum<{ none: "none"; strict: "strict"; basic: "basic" }>,
        >;
        rawIncluded: ZodOptional<ZodBoolean>;
        redactedArtifacts: ZodOptional<ZodArray<ZodString>>;
        excludedFiles: ZodOptional<ZodArray<ZodString>>;
        riskFlags: ZodOptional<ZodArray<ZodString>>;
    },
    $strip,
> = ...

Archive manifest — integrity metadata for a session archive.

Written BEFORE the tar is created and included as part of the archive. Enables post-hoc verification of archive completeness and integrity.

includedFiles: sorted list of relative paths in the archive
fileDigests: SHA-256 of each file's content, keyed by relative path
contentDigest: SHA-256 over the sorted file digests AND an integrity header of security-relevant metadata (policy mode, audit head/count, identity). See ./content-digest.ts for the canonical formula.

Distinction:

contentDigest = hash over file digests + integrity header (inside manifest)
.tar.gz.sha256 = hash of the archive file itself (sidecar, verifiable from outside)

Variable ArchiveManifestSchemaConst

Settings

Variable ArchiveManifestSchema`Const`