Package release 0.4.167 from the current workspace snapshot

Constraint: Windows and Linux artifacts are built on native GitHub runners from a temporary snapshot branch
Rejected: Build Windows/Linux locally on Apple Silicon | docker/wine packaging is not stable on this host
Confidence: medium
Scope-risk: moderate
Directive: This snapshot branch is transport-only and should be deleted after the release completes
Tested: local verify/build stages before snapshot creation
Not-tested: remote packaging before workflow execution

tests/unit/agent-schema-validation.test.ts

@@ -0,0 +1,59 @@
+import { describe, expect, it } from "vitest";
+import { hireRequestSchema } from "../../src/shared/contracts/schemas-agents";
+import { getHireNameValidationError } from "../../src/main/agent-permissions";
+
+const baseHireRequest = {
+  companyId: "00000000-0000-0000-0000-000000000000",
+  requestedByAgentId: null,
+  name: "Alice",
+  role: "Engineer",
+  title: "Backend Engineer",
+  department: "engineering" as const,
+  reportsTo: null,
+  connectorId: "codex_local" as const,
+  workspaceId: null,
+  model: null,
+  metadataJson: "{}",
+  capabilities: "Build backend services",
+  budgetMonthlyUsd: 120,
+};
+
+describe("agent input schemas", () => {
+  it("rejects whitespace-only hire names", () => {
+    expect(() =>
+      hireRequestSchema.parse({
+        ...baseHireRequest,
+        name: "   ",
+      }),
+    ).toThrow();
+  });
+
+  it("trims semantic hire fields before persistence", () => {
+    const parsed = hireRequestSchema.parse({
+      ...baseHireRequest,
+      name: "  Alice  ",
+      role: "  Engineer  ",
+      title: "  Backend Engineer  ",
+    });
+
+    expect(parsed.name).toBe("Alice");
+    expect(parsed.role).toBe("Engineer");
+    expect(parsed.title).toBe("Backend Engineer");
+  });
+
+  it("rejects role-like names for non-executive hires", () => {
+    expect(getHireNameValidationError({
+      name: "Backend Engineer",
+      role: "Backend Engineer",
+      title: "Backend Engineer",
+    })).toBe("Hire name must be a real display name, not just the role.");
+  });
+
+  it("allows executive acronyms when they are the intended display name", () => {
+    expect(getHireNameValidationError({
+      name: "CTO",
+      role: "CTO",
+      title: "Chief Technology Officer",
+    })).toBeNull();
+  });
+});