Distillation

Date: Sep 4, 2026

• 🟡 (23:03) User provided additional excerpt of src/schemas/project_config.ts, showing StatusProvider includes Manual = 'manual'; target configuration includes required owner: z.string() and optional excludeNames: z.string().optional().
• 🟡 (23:03) The src/schemas/project_config.ts excerpt defines BaseStatusProviderSchema, BaseArtifactProviderSchema, GitHubArtifactsConfigSchema, and target/config schema composition through TargetConfigSchema; project configuration has optional targets: z.array(TargetConfigSchema).optional() and artifactProvider: BaseArtifactProviderSchema.optional().
• 🟡 (23:03) src/schemas/project_config.ts workspace-glob validation rejects unsafe path segments including empty segments and ..; it supports glob character validation and brace-alternative expansion, and explicitly protects against prototype pollution because assigning __proto__ to a normal object mutates its prototype.
• 🟡 (23:03) src/schemas/project_config.ts validates workspace configuration using isSafeWorkspaceGlob via .refine(...); workspace configurations represent named, independently-versioned release units within one repository and reject github.projectPath with the error message Workspace configurations cannot use github.projectPath..