@claudexor/schema 1.0.0 → 2.0.0

package/dist/control.d.ts

@@ -1,29 +1,5 @@
 import { z } from "zod";
-/** Project context depth. The "deep" tier never shipped a distinct behavior
- * (v0.15 triage): auto is the only mode; off exists solely on projections of
- * no-project runs. */
-export declare const RunScopeContext: z.ZodEnum<["auto"]>;
-export type RunScopeContext = z.infer<typeof RunScopeContext>;
-export declare const RunScope: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
-    kind: z.ZodLiteral<"project">;
-    root: z.ZodString;
-    context: z.ZodDefault<z.ZodEnum<["auto"]>>;
-}, "strict", z.ZodTypeAny, {
-    kind: "project";
-    root: string;
-    context: "auto";
-}, {
-    kind: "project";
-    root: string;
-    context?: "auto" | undefined;
-}>, z.ZodObject<{
-    kind: z.ZodLiteral<"none">;
-}, "strict", z.ZodTypeAny, {
-    kind: "none";
-}, {
-    kind: "none";
-}>]>;
-export type RunScope = z.infer<typeof RunScope>;
+export { ControlQuotaResponse } from "./quota.js";
 export declare const RunExecution: z.ZodObject<{
     isolation: z.ZodDefault<z.ZodEnum<["envelope", "live"]>>;
 }, "strict", z.ZodTypeAny, {
@@ -42,36 +18,23 @@ export declare const ControlReviewerPanelEntry: z.ZodObject<{
     effort: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>;
 }, "strict", z.ZodTypeAny, {
     harness: string;
-    effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     model?: string | undefined;
+    effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
 }, {
     harness: string;
-    effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     model?: string | undefined;
+    effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
 }>;
 export type ControlReviewerPanelEntry = z.infer<typeof ControlReviewerPanelEntry>;
 export declare const ControlRunStartRequest: z.ZodObject<{
     prompt: z.ZodDefault<z.ZodString>;
-    /** Inbound files/images for this turn; the daemon resolves each to a scoped
-     *  on-disk Attachment before the run spec is built. */
+    /** Immutable daemon resource ids; upload/finalize happens before enqueue. */
     attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        kind: z.ZodDefault<z.ZodEnum<["image", "file"]>>;
-        mime: z.ZodDefault<z.ZodString>;
-        name: z.ZodDefault<z.ZodString>;
-        data: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        path: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        path: string | null;
-        kind: "image" | "file";
-        mime: string;
-        name: string;
-        data: string | null;
+        resourceId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        resourceId: string;
     }, {
-        path?: string | null | undefined;
-        kind?: "image" | "file" | undefined;
-        mime?: string | undefined;
-        name?: string | undefined;
-        data?: string | null | undefined;
+        resourceId: string;
     }>, "many">>;
     mode: z.ZodDefault<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>>;
     scope: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
@@ -102,7 +65,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     }>>;
     harnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     primaryHarness: z.ZodOptional<z.ZodString>;
-    portfolio: z.ZodOptional<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
+    routingGoal: z.ZodOptional<z.ZodEnum<["auto", "quality", "economy"]>>;
     /** Scalar model convenience: expands to the RESOLVED PRIMARY harness only
      * (never the pool). With a multi-harness pool and no primary it is
      * rejected — use `models` instead (INV-103). */
@@ -126,15 +89,44 @@ export declare const ControlRunStartRequest: z.ZodObject<{
      * candidate when n>=3 and candidates genuinely complement; `always`/`never`
      * force it. Threaded to the orchestrator's decideSynthesis. */
     synthesis: z.ZodOptional<z.ZodEnum<["auto", "always", "never"]>>;
-    maxUsd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    paidBudget: z.ZodOptional<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"unlimited">;
+    }, "strict", z.ZodTypeAny, {
+        kind: "unlimited";
+    }, {
+        kind: "unlimited";
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"finite">;
+        maxUsd: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        kind: "finite";
+        maxUsd: number;
+    }, {
+        kind: "finite";
+        maxUsd: number;
+    }>]>>;
     /** Requested access profile. Effective access is derived by the engine and never client-supplied. */
     access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
     web: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
     externalContextPolicy: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
-    /** Opt this run into the agent-driven browser (Playwright MCP). Honored only
-     *  for browser-capable harnesses when web policy is not `off`. */
+    /** Opt this run into the agent-driven browser (Playwright MCP). */
     browser: z.ZodOptional<z.ZodBoolean>;
-    tests: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    tests: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        program: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        cwd: z.ZodOptional<z.ZodString>;
+        envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        program: string;
+        args: string[];
+        envAllowlist: string[];
+        cwd?: string | undefined;
+    }, {
+        program: string;
+        cwd?: string | undefined;
+        args?: string[] | undefined;
+        envAllowlist?: string[] | undefined;
+    }>, "many">>;
     /** Typed per-run approval for changing auto-protected gate/test paths. This
      * does not bypass built-in critical/security path human gates. */
     protectedPathApprovals: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -158,6 +150,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
      * lineage; POST /threads/:id/turns is the public turn surface. */
     turnId: z.ZodOptional<z.ZodString>;
     parentRunId: z.ZodOptional<z.ZodString>;
+    retryOf: z.ZodOptional<z.ZodString>;
     /** When set, this turn implements an approved plan: the engine prefixes the
      * parent plan run's final/plan.md into the prompt (mode is forced to agent). */
     planRunId: z.ZodOptional<z.ZodString>;
@@ -174,12 +167,12 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         effort: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>;
     }, "strict", z.ZodTypeAny, {
         harness: string;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }, {
         harness: string;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }>, "many">>;
     /** Per-run auth route override (subscription/api_key/auto). */
     authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
@@ -191,8 +184,8 @@ export declare const ControlRunStartRequest: z.ZodObject<{
      * mode=orchestrate; consumed by executeOrchestratePlan. */
     maxToolCalls: z.ZodOptional<z.ZodNumber>;
 }, "strict", z.ZodTypeAny, {
-    prompt: string;
     mode: "ask" | "plan" | "audit" | "agent" | "orchestrate";
+    prompt: string;
     scope: {
         kind: "project";
         root: string;
@@ -206,24 +199,26 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     web?: "off" | "auto" | "cached" | "live" | undefined;
     attachments?: {
-        path: string | null;
-        kind: "image" | "file";
-        mime: string;
-        name: string;
-        data: string | null;
+        resourceId: string;
     }[] | undefined;
     browser?: boolean | undefined;
     turnId?: string | undefined;
     planRunId?: string | undefined;
     models?: Record<string, string> | undefined;
     harnesses?: string[] | undefined;
-    tests?: string[] | undefined;
-    portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
+    model?: string | undefined;
     effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+    tests?: {
+        program: string;
+        args: string[];
+        envAllowlist: string[];
+        cwd?: string | undefined;
+    }[] | undefined;
     autonomy?: "suggest" | "auto_safe" | "auto_full" | undefined;
     n?: number | undefined;
-    model?: string | undefined;
+    retryOf?: string | undefined;
     primaryHarness?: string | undefined;
+    routingGoal?: "auto" | "quality" | "economy" | undefined;
     reviewerModels?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", string>> | undefined;
     reviewerEfforts?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", "low" | "medium" | "high" | "xhigh" | "max">> | undefined;
     attempts?: number | null | undefined;
@@ -231,7 +226,12 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     swarm?: boolean | undefined;
     create?: boolean | undefined;
     synthesis?: "auto" | "never" | "always" | undefined;
-    maxUsd?: number | null | undefined;
+    paidBudget?: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    } | undefined;
     externalContextPolicy?: "off" | "auto" | "cached" | "live" | undefined;
     protectedPathApprovals?: {
         path: string;
@@ -244,34 +244,35 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     parentRunId?: string | undefined;
     reviewerPanel?: {
         harness: string;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }[] | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
     maxToolCalls?: number | undefined;
 }, {
+    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     prompt?: string | undefined;
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     web?: "off" | "auto" | "cached" | "live" | undefined;
     attachments?: {
-        path?: string | null | undefined;
-        kind?: "image" | "file" | undefined;
-        mime?: string | undefined;
-        name?: string | undefined;
-        data?: string | null | undefined;
+        resourceId: string;
     }[] | undefined;
     browser?: boolean | undefined;
-    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     turnId?: string | undefined;
     planRunId?: string | undefined;
     models?: Record<string, string> | undefined;
     harnesses?: string[] | undefined;
-    tests?: string[] | undefined;
-    portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
+    model?: string | undefined;
     effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+    tests?: {
+        program: string;
+        cwd?: string | undefined;
+        args?: string[] | undefined;
+        envAllowlist?: string[] | undefined;
+    }[] | undefined;
     autonomy?: "suggest" | "auto_safe" | "auto_full" | undefined;
     n?: number | undefined;
-    model?: string | undefined;
+    retryOf?: string | undefined;
     scope?: {
         kind: "project";
         root: string;
@@ -283,6 +284,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         isolation?: "live" | "envelope" | undefined;
     } | undefined;
     primaryHarness?: string | undefined;
+    routingGoal?: "auto" | "quality" | "economy" | undefined;
     reviewerModels?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", string>> | undefined;
     reviewerEfforts?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", "low" | "medium" | "high" | "xhigh" | "max">> | undefined;
     attempts?: number | null | undefined;
@@ -290,7 +292,12 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     swarm?: boolean | undefined;
     create?: boolean | undefined;
     synthesis?: "auto" | "never" | "always" | undefined;
-    maxUsd?: number | null | undefined;
+    paidBudget?: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    } | undefined;
     externalContextPolicy?: "off" | "auto" | "cached" | "live" | undefined;
     protectedPathApprovals?: {
         path: string;
@@ -303,354 +310,515 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     parentRunId?: string | undefined;
     reviewerPanel?: {
         harness: string;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }[] | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
     maxToolCalls?: number | undefined;
 }>;
 export type ControlRunStartRequest = z.infer<typeof ControlRunStartRequest>;
-/** Harness ids that have a managed setup flow (shared by the async setup-jobs path). */
-export declare const ControlHarnessSetupHarness: z.ZodEnum<["codex", "claude", "cursor", "opencode", "raw"]>;
-export type ControlHarnessSetupHarness = z.infer<typeof ControlHarnessSetupHarness>;
-export declare const ControlSetupJobAction: z.ZodEnum<["install", "login", "doctor", "store_key"]>;
-export type ControlSetupJobAction = z.infer<typeof ControlSetupJobAction>;
-export declare const ControlSetupJobState: z.ZodEnum<["queued", "running", "waiting_for_input", "succeeded", "failed", "cancelled", "not_supported"]>;
-export type ControlSetupJobState = z.infer<typeof ControlSetupJobState>;
-export declare const ControlSetupJobCreateRequest: z.ZodObject<{
-    harness: z.ZodEnum<["codex", "claude", "cursor", "opencode", "raw"]>;
-    action: z.ZodEnum<["install", "login", "doctor", "store_key"]>;
-}, "strict", z.ZodTypeAny, {
-    harness: "cursor" | "opencode" | "raw" | "codex" | "claude";
-    action: "install" | "login" | "doctor" | "store_key";
-}, {
-    harness: "cursor" | "opencode" | "raw" | "codex" | "claude";
-    action: "install" | "login" | "doctor" | "store_key";
-}>;
-export type ControlSetupJobCreateRequest = z.infer<typeof ControlSetupJobCreateRequest>;
-export declare const ControlSetupJob: z.ZodObject<{
-    jobId: z.ZodString;
-    harness: z.ZodEnum<["codex", "claude", "cursor", "opencode", "raw"]>;
-    action: z.ZodEnum<["install", "login", "doctor", "store_key"]>;
-    state: z.ZodEnum<["queued", "running", "waiting_for_input", "succeeded", "failed", "cancelled", "not_supported"]>;
-    command: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    guideUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    logPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    message: z.ZodString;
-    riskFlags: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    requiresConfirmation: z.ZodDefault<z.ZodBoolean>;
-    createdAt: z.ZodString;
-    startedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    firstOutputAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    lastOutputAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    finishedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    retryCount: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    message: string;
-    command: string | null;
-    state: "cancelled" | "failed" | "running" | "queued" | "waiting_for_input" | "succeeded" | "not_supported";
-    harness: "cursor" | "opencode" | "raw" | "codex" | "claude";
-    action: "install" | "login" | "doctor" | "store_key";
-    jobId: string;
-    guideUrl: string | null;
-    logPath: string | null;
-    riskFlags: string[];
-    requiresConfirmation: boolean;
-    createdAt: string;
-    startedAt: string | null;
-    firstOutputAt: string | null;
-    lastOutputAt: string | null;
-    finishedAt: string | null;
-    retryCount: number;
+export declare const ControlRunStartInfo: z.ZodObject<{
+    jobId: z.ZodOptional<z.ZodString>;
+    runId: z.ZodString;
+    taskId: z.ZodOptional<z.ZodString>;
+    runDir: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    runId: string;
+    runDir: string;
+    jobId?: string | undefined;
+    taskId?: string | undefined;
 }, {
-    message: string;
-    state: "cancelled" | "failed" | "running" | "queued" | "waiting_for_input" | "succeeded" | "not_supported";
-    harness: "cursor" | "opencode" | "raw" | "codex" | "claude";
-    action: "install" | "login" | "doctor" | "store_key";
-    jobId: string;
-    createdAt: string;
-    command?: string | null | undefined;
-    guideUrl?: string | null | undefined;
-    logPath?: string | null | undefined;
-    riskFlags?: string[] | undefined;
-    requiresConfirmation?: boolean | undefined;
-    startedAt?: string | null | undefined;
-    firstOutputAt?: string | null | undefined;
-    lastOutputAt?: string | null | undefined;
-    finishedAt?: string | null | undefined;
-    retryCount?: number | undefined;
+    runId: string;
+    runDir: string;
+    jobId?: string | undefined;
+    taskId?: string | undefined;
 }>;
-export type ControlSetupJob = z.infer<typeof ControlSetupJob>;
-export declare const ControlSetupJobEvent: z.ZodObject<{
+export type ControlRunStartInfo = z.infer<typeof ControlRunStartInfo>;
+export declare const ControlRunRetryResponse: z.ZodObject<{
+    retryOf: z.ZodString;
     jobId: z.ZodString;
-    seq: z.ZodNumber;
-    time: z.ZodString;
-    /** Only "status" is ever produced (v0.15 triage: the log/end kinds had no
-     * producer; SSE stream end is a transport frame, not a payload kind). */
-    kind: z.ZodEnum<["status"]>;
-    state: z.ZodOptional<z.ZodEnum<["queued", "running", "waiting_for_input", "succeeded", "failed", "cancelled", "not_supported"]>>;
-    message: z.ZodString;
+    runId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    turnId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    state: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    message: string;
-    kind: "status";
-    time: string;
+    state: string;
+    turnId: string | null;
+    runId: string | null;
     jobId: string;
-    seq: number;
-    state?: "cancelled" | "failed" | "running" | "queued" | "waiting_for_input" | "succeeded" | "not_supported" | undefined;
+    retryOf: string;
 }, {
-    message: string;
-    kind: "status";
-    time: string;
+    state: string;
     jobId: string;
-    seq: number;
-    state?: "cancelled" | "failed" | "running" | "queued" | "waiting_for_input" | "succeeded" | "not_supported" | undefined;
-}>;
-export type ControlSetupJobEvent = z.infer<typeof ControlSetupJobEvent>;
-export declare const ControlSetupJobListResponse: z.ZodObject<{
-    jobs: z.ZodArray<z.ZodObject<{
-        jobId: z.ZodString;
-        harness: z.ZodEnum<["codex", "claude", "cursor", "opencode", "raw"]>;
-        action: z.ZodEnum<["install", "login", "doctor", "store_key"]>;
-        state: z.ZodEnum<["queued", "running", "waiting_for_input", "succeeded", "failed", "cancelled", "not_supported"]>;
-        command: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        guideUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        logPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        message: z.ZodString;
-        riskFlags: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-        requiresConfirmation: z.ZodDefault<z.ZodBoolean>;
-        createdAt: z.ZodString;
-        startedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        firstOutputAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        lastOutputAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        finishedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        retryCount: z.ZodDefault<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        message: string;
-        command: string | null;
-        state: "cancelled" | "failed" | "running" | "queued" | "waiting_for_input" | "succeeded" | "not_supported";
-        harness: "cursor" | "opencode" | "raw" | "codex" | "claude";
-        action: "install" | "login" | "doctor" | "store_key";
-        jobId: string;
-        guideUrl: string | null;
-        logPath: string | null;
-        riskFlags: string[];
-        requiresConfirmation: boolean;
-        createdAt: string;
-        startedAt: string | null;
-        firstOutputAt: string | null;
-        lastOutputAt: string | null;
-        finishedAt: string | null;
-        retryCount: number;
-    }, {
-        message: string;
-        state: "cancelled" | "failed" | "running" | "queued" | "waiting_for_input" | "succeeded" | "not_supported";
-        harness: "cursor" | "opencode" | "raw" | "codex" | "claude";
-        action: "install" | "login" | "doctor" | "store_key";
-        jobId: string;
-        createdAt: string;
-        command?: string | null | undefined;
-        guideUrl?: string | null | undefined;
-        logPath?: string | null | undefined;
-        riskFlags?: string[] | undefined;
-        requiresConfirmation?: boolean | undefined;
-        startedAt?: string | null | undefined;
-        firstOutputAt?: string | null | undefined;
-        lastOutputAt?: string | null | undefined;
-        finishedAt?: string | null | undefined;
-        retryCount?: number | undefined;
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    jobs: {
-        message: string;
-        command: string | null;
-        state: "cancelled" | "failed" | "running" | "queued" | "waiting_for_input" | "succeeded" | "not_supported";
-        harness: "cursor" | "opencode" | "raw" | "codex" | "claude";
-        action: "install" | "login" | "doctor" | "store_key";
-        jobId: string;
-        guideUrl: string | null;
-        logPath: string | null;
-        riskFlags: string[];
-        requiresConfirmation: boolean;
-        createdAt: string;
-        startedAt: string | null;
-        firstOutputAt: string | null;
-        lastOutputAt: string | null;
-        finishedAt: string | null;
-        retryCount: number;
-    }[];
-}, {
-    jobs: {
-        message: string;
-        state: "cancelled" | "failed" | "running" | "queued" | "waiting_for_input" | "succeeded" | "not_supported";
-        harness: "cursor" | "opencode" | "raw" | "codex" | "claude";
-        action: "install" | "login" | "doctor" | "store_key";
-        jobId: string;
-        createdAt: string;
-        command?: string | null | undefined;
-        guideUrl?: string | null | undefined;
-        logPath?: string | null | undefined;
-        riskFlags?: string[] | undefined;
-        requiresConfirmation?: boolean | undefined;
-        startedAt?: string | null | undefined;
-        firstOutputAt?: string | null | undefined;
-        lastOutputAt?: string | null | undefined;
-        finishedAt?: string | null | undefined;
-        retryCount?: number | undefined;
-    }[];
-}>;
-export type ControlSetupJobListResponse = z.infer<typeof ControlSetupJobListResponse>;
-export declare const ControlSetupJobConfirmRequest: z.ZodObject<{
-    confirmed: z.ZodDefault<z.ZodBoolean>;
-}, "strict", z.ZodTypeAny, {
-    confirmed: boolean;
-}, {
-    confirmed?: boolean | undefined;
+    retryOf: string;
+    turnId?: string | null | undefined;
+    runId?: string | null | undefined;
 }>;
-export type ControlSetupJobConfirmRequest = z.infer<typeof ControlSetupJobConfirmRequest>;
-export declare const ControlSpecQuestionsRequest: z.ZodObject<{
-    prompt: z.ZodString;
-    scope: z.ZodObject<{
-        kind: z.ZodLiteral<"project">;
-        root: z.ZodString;
-        context: z.ZodDefault<z.ZodEnum<["auto"]>>;
+export declare const ControlRunAgainDraft: z.ZodObject<{
+    sourceRunId: z.ZodString;
+    request: z.ZodObject<{
+        prompt: z.ZodDefault<z.ZodString>;
+        /** Immutable daemon resource ids; upload/finalize happens before enqueue. */
+        attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            resourceId: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            resourceId: string;
+        }, {
+            resourceId: string;
+        }>, "many">>;
+        mode: z.ZodDefault<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>>;
+        scope: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"project">;
+            root: z.ZodString;
+            context: z.ZodDefault<z.ZodEnum<["auto"]>>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "project";
+            root: string;
+            context: "auto";
+        }, {
+            kind: "project";
+            root: string;
+            context?: "auto" | undefined;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"none">;
+        }, "strict", z.ZodTypeAny, {
+            kind: "none";
+        }, {
+            kind: "none";
+        }>]>>;
+        execution: z.ZodDefault<z.ZodObject<{
+            isolation: z.ZodDefault<z.ZodEnum<["envelope", "live"]>>;
+        }, "strict", z.ZodTypeAny, {
+            isolation: "live" | "envelope";
+        }, {
+            isolation?: "live" | "envelope" | undefined;
+        }>>;
+        harnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        primaryHarness: z.ZodOptional<z.ZodString>;
+        routingGoal: z.ZodOptional<z.ZodEnum<["auto", "quality", "economy"]>>;
+        /** Scalar model convenience: expands to the RESOLVED PRIMARY harness only
+         * (never the pool). With a multi-harness pool and no primary it is
+         * rejected — use `models` instead (INV-103). */
+        model: z.ZodOptional<z.ZodString>;
+        /** Harness-scoped model map (harness id → model id). Specific beats
+         * general: an entry here wins over the scalar `model` and over the
+         * per-harness settings default. */
+        models: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        effort: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>;
+        reviewerModels: z.ZodOptional<z.ZodRecord<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>, z.ZodString>>;
+        reviewerEfforts: z.ZodOptional<z.ZodRecord<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>, z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
+        n: z.ZodOptional<z.ZodNumber>;
+        attempts: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        /** agent flag: iterate until the convergence predicate is clean (no fixed cap). */
+        untilClean: z.ZodOptional<z.ZodBoolean>;
+        /** audit flag: bounded read-only research swarm (the old `explore`). */
+        swarm: z.ZodOptional<z.ZodBoolean>;
+        /** agent flag: create-from-scratch intent (the old `create` mode). */
+        create: z.ZodOptional<z.ZodBoolean>;
+        /** Best-of-N synthesis policy. `auto` (default) only synthesizes a 3rd
+         * candidate when n>=3 and candidates genuinely complement; `always`/`never`
+         * force it. Threaded to the orchestrator's decideSynthesis. */
+        synthesis: z.ZodOptional<z.ZodEnum<["auto", "always", "never"]>>;
+        paidBudget: z.ZodOptional<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"unlimited">;
+        }, "strict", z.ZodTypeAny, {
+            kind: "unlimited";
+        }, {
+            kind: "unlimited";
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"finite">;
+            maxUsd: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            kind: "finite";
+            maxUsd: number;
+        }, {
+            kind: "finite";
+            maxUsd: number;
+        }>]>>;
+        /** Requested access profile. Effective access is derived by the engine and never client-supplied. */
+        access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+        web: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+        externalContextPolicy: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+        /** Opt this run into the agent-driven browser (Playwright MCP). */
+        browser: z.ZodOptional<z.ZodBoolean>;
+        tests: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            cwd?: string | undefined;
+        }, {
+            program: string;
+            cwd?: string | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+        }>, "many">>;
+        /** Typed per-run approval for changing auto-protected gate/test paths. This
+         * does not bypass built-in critical/security path human gates. */
+        protectedPathApprovals: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            reason: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            path: string;
+            reason?: string | undefined;
+        }, {
+            path: string;
+            reason?: string | undefined;
+        }>, "many">>;
+        specPath: z.ZodOptional<z.ZodString>;
+        specId: z.ZodOptional<z.ZodString>;
+        specHash: z.ZodOptional<z.ZodString>;
+        /** Thread/session linkage: a run is a turn inside a thread. */
+        threadId: z.ZodOptional<z.ZodString>;
+        /** INTERNAL single-writer handoff: control-api pre-creates the turn and
+         * passes its id to the daemon runner. REJECTED (400) when supplied by a
+         * client on POST /runs — a foreign turnId could rebind another thread's
+         * lineage; POST /threads/:id/turns is the public turn surface. */
+        turnId: z.ZodOptional<z.ZodString>;
+        parentRunId: z.ZodOptional<z.ZodString>;
+        retryOf: z.ZodOptional<z.ZodString>;
+        /** When set, this turn implements an approved plan: the engine prefixes the
+         * parent plan run's final/plan.md into the prompt (mode is forced to agent). */
+        planRunId: z.ZodOptional<z.ZodString>;
+        /** Explicit reviewer panel. When present it overrides the legacy
+         * per-provider-family reviewerModels/reviewerEfforts maps and preserves
+         * duplicate harness entries for multi-model same-provider reviews. */
+        reviewerPanel: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            /** Explicit reviewer harness id. Repeated harness ids are allowed so one
+             * native provider can review through multiple requested models. */
+            harness: z.ZodString;
+            /** Optional per-reviewer model hint, passed to that harness only. */
+            model: z.ZodOptional<z.ZodString>;
+            /** Optional per-reviewer effort hint, passed to that harness only. */
+            effort: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>;
+        }, "strict", z.ZodTypeAny, {
+            harness: string;
+            model?: string | undefined;
+            effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        }, {
+            harness: string;
+            model?: string | undefined;
+            effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        }>, "many">>;
+        /** Per-run auth route override (subscription/api_key/auto). */
+        authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+        /** How much the orchestrate planner may act without confirmation
+         * (suggest/auto_safe/auto_full). Only meaningful for mode=orchestrate;
+         * consumed by the executor in runOrchestrate. */
+        autonomy: z.ZodOptional<z.ZodEnum<["suggest", "auto_safe", "auto_full"]>>;
+        /** Orchestrate executor: cap on plan tool calls. Only meaningful for
+         * mode=orchestrate; consumed by executeOrchestratePlan. */
+        maxToolCalls: z.ZodOptional<z.ZodNumber>;
     }, "strict", z.ZodTypeAny, {
-        kind: "project";
-        root: string;
-        context: "auto";
+        mode: "ask" | "plan" | "audit" | "agent" | "orchestrate";
+        prompt: string;
+        scope: {
+            kind: "project";
+            root: string;
+            context: "auto";
+        } | {
+            kind: "none";
+        };
+        execution: {
+            isolation: "live" | "envelope";
+        };
+        access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        attachments?: {
+            resourceId: string;
+        }[] | undefined;
+        browser?: boolean | undefined;
+        turnId?: string | undefined;
+        planRunId?: string | undefined;
+        models?: Record<string, string> | undefined;
+        harnesses?: string[] | undefined;
+        model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        tests?: {
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            cwd?: string | undefined;
+        }[] | undefined;
+        autonomy?: "suggest" | "auto_safe" | "auto_full" | undefined;
+        n?: number | undefined;
+        retryOf?: string | undefined;
+        primaryHarness?: string | undefined;
+        routingGoal?: "auto" | "quality" | "economy" | undefined;
+        reviewerModels?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", string>> | undefined;
+        reviewerEfforts?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", "low" | "medium" | "high" | "xhigh" | "max">> | undefined;
+        attempts?: number | null | undefined;
+        untilClean?: boolean | undefined;
+        swarm?: boolean | undefined;
+        create?: boolean | undefined;
+        synthesis?: "auto" | "never" | "always" | undefined;
+        paidBudget?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
+        externalContextPolicy?: "off" | "auto" | "cached" | "live" | undefined;
+        protectedPathApprovals?: {
+            path: string;
+            reason?: string | undefined;
+        }[] | undefined;
+        specPath?: string | undefined;
+        specId?: string | undefined;
+        specHash?: string | undefined;
+        threadId?: string | undefined;
+        parentRunId?: string | undefined;
+        reviewerPanel?: {
+            harness: string;
+            model?: string | undefined;
+            effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        }[] | undefined;
+        authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        maxToolCalls?: number | undefined;
     }, {
-        kind: "project";
-        root: string;
-        context?: "auto" | undefined;
+        mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
+        prompt?: string | undefined;
+        access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        attachments?: {
+            resourceId: string;
+        }[] | undefined;
+        browser?: boolean | undefined;
+        turnId?: string | undefined;
+        planRunId?: string | undefined;
+        models?: Record<string, string> | undefined;
+        harnesses?: string[] | undefined;
+        model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        tests?: {
+            program: string;
+            cwd?: string | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+        }[] | undefined;
+        autonomy?: "suggest" | "auto_safe" | "auto_full" | undefined;
+        n?: number | undefined;
+        retryOf?: string | undefined;
+        scope?: {
+            kind: "project";
+            root: string;
+            context?: "auto" | undefined;
+        } | {
+            kind: "none";
+        } | undefined;
+        execution?: {
+            isolation?: "live" | "envelope" | undefined;
+        } | undefined;
+        primaryHarness?: string | undefined;
+        routingGoal?: "auto" | "quality" | "economy" | undefined;
+        reviewerModels?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", string>> | undefined;
+        reviewerEfforts?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", "low" | "medium" | "high" | "xhigh" | "max">> | undefined;
+        attempts?: number | null | undefined;
+        untilClean?: boolean | undefined;
+        swarm?: boolean | undefined;
+        create?: boolean | undefined;
+        synthesis?: "auto" | "never" | "always" | undefined;
+        paidBudget?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
+        externalContextPolicy?: "off" | "auto" | "cached" | "live" | undefined;
+        protectedPathApprovals?: {
+            path: string;
+            reason?: string | undefined;
+        }[] | undefined;
+        specPath?: string | undefined;
+        specId?: string | undefined;
+        specHash?: string | undefined;
+        threadId?: string | undefined;
+        parentRunId?: string | undefined;
+        reviewerPanel?: {
+            harness: string;
+            model?: string | undefined;
+            effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        }[] | undefined;
+        authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        maxToolCalls?: number | undefined;
     }>;
-    harnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    /** Already-answered decisions from prior tiers; carried so each round goes
-     *  DEEPER instead of re-asking (multi-tier adaptive interview). */
-    priorDecisions: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        question: z.ZodString;
-        answer: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        question: string;
-        answer: string;
-    }, {
-        question: string;
-        answer: string;
-    }>, "many">>;
-}, "strict", z.ZodTypeAny, {
-    prompt: string;
-    scope: {
-        kind: "project";
-        root: string;
-        context: "auto";
-    };
-    harnesses?: string[] | undefined;
-    priorDecisions?: {
-        question: string;
-        answer: string;
-    }[] | undefined;
-}, {
-    prompt: string;
-    scope: {
-        kind: "project";
-        root: string;
-        context?: "auto" | undefined;
-    };
-    harnesses?: string[] | undefined;
-    priorDecisions?: {
-        question: string;
-        answer: string;
-    }[] | undefined;
-}>;
-export type ControlSpecQuestionsRequest = z.infer<typeof ControlSpecQuestionsRequest>;
-export declare const ControlSpecFreezeRequest: z.ZodObject<{
-    prompt: z.ZodString;
-    scope: z.ZodObject<{
-        kind: z.ZodLiteral<"project">;
-        root: z.ZodString;
-        context: z.ZodDefault<z.ZodEnum<["auto"]>>;
+    differences: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        field: z.ZodString;
+        change: z.ZodLiteral<"omitted">;
+        reason: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        kind: "project";
-        root: string;
-        context: "auto";
-    }, {
-        kind: "project";
-        root: string;
-        context?: "auto" | undefined;
-    }>;
-    planDir: z.ZodOptional<z.ZodString>;
-    plan: z.ZodOptional<z.ZodString>;
-    answers: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
-    /** Accumulated prior-tier interview decisions. Folded into the frozen
-     *  SpecPack's decided_tradeoffs so a MULTI-TIER spec carries every tier, not
-     *  just the last (mirror of ControlSpecQuestionsRequest.priorDecisions). */
-    priorDecisions: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        question: z.ZodString;
-        answer: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        question: string;
-        answer: string;
+        reason: string;
+        field: string;
+        change: "omitted";
     }, {
-        question: string;
-        answer: string;
+        reason: string;
+        field: string;
+        change: "omitted";
     }>, "many">>;
 }, "strict", z.ZodTypeAny, {
-    prompt: string;
-    scope: {
-        kind: "project";
-        root: string;
-        context: "auto";
+    sourceRunId: string;
+    request: {
+        mode: "ask" | "plan" | "audit" | "agent" | "orchestrate";
+        prompt: string;
+        scope: {
+            kind: "project";
+            root: string;
+            context: "auto";
+        } | {
+            kind: "none";
+        };
+        execution: {
+            isolation: "live" | "envelope";
+        };
+        access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        attachments?: {
+            resourceId: string;
+        }[] | undefined;
+        browser?: boolean | undefined;
+        turnId?: string | undefined;
+        planRunId?: string | undefined;
+        models?: Record<string, string> | undefined;
+        harnesses?: string[] | undefined;
+        model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        tests?: {
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            cwd?: string | undefined;
+        }[] | undefined;
+        autonomy?: "suggest" | "auto_safe" | "auto_full" | undefined;
+        n?: number | undefined;
+        retryOf?: string | undefined;
+        primaryHarness?: string | undefined;
+        routingGoal?: "auto" | "quality" | "economy" | undefined;
+        reviewerModels?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", string>> | undefined;
+        reviewerEfforts?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", "low" | "medium" | "high" | "xhigh" | "max">> | undefined;
+        attempts?: number | null | undefined;
+        untilClean?: boolean | undefined;
+        swarm?: boolean | undefined;
+        create?: boolean | undefined;
+        synthesis?: "auto" | "never" | "always" | undefined;
+        paidBudget?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
+        externalContextPolicy?: "off" | "auto" | "cached" | "live" | undefined;
+        protectedPathApprovals?: {
+            path: string;
+            reason?: string | undefined;
+        }[] | undefined;
+        specPath?: string | undefined;
+        specId?: string | undefined;
+        specHash?: string | undefined;
+        threadId?: string | undefined;
+        parentRunId?: string | undefined;
+        reviewerPanel?: {
+            harness: string;
+            model?: string | undefined;
+            effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        }[] | undefined;
+        authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        maxToolCalls?: number | undefined;
     };
-    plan?: string | undefined;
-    answers?: unknown[] | undefined;
-    priorDecisions?: {
-        question: string;
-        answer: string;
-    }[] | undefined;
-    planDir?: string | undefined;
+    differences: {
+        reason: string;
+        field: string;
+        change: "omitted";
+    }[];
 }, {
-    prompt: string;
-    scope: {
-        kind: "project";
-        root: string;
-        context?: "auto" | undefined;
+    sourceRunId: string;
+    request: {
+        mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
+        prompt?: string | undefined;
+        access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        attachments?: {
+            resourceId: string;
+        }[] | undefined;
+        browser?: boolean | undefined;
+        turnId?: string | undefined;
+        planRunId?: string | undefined;
+        models?: Record<string, string> | undefined;
+        harnesses?: string[] | undefined;
+        model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        tests?: {
+            program: string;
+            cwd?: string | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+        }[] | undefined;
+        autonomy?: "suggest" | "auto_safe" | "auto_full" | undefined;
+        n?: number | undefined;
+        retryOf?: string | undefined;
+        scope?: {
+            kind: "project";
+            root: string;
+            context?: "auto" | undefined;
+        } | {
+            kind: "none";
+        } | undefined;
+        execution?: {
+            isolation?: "live" | "envelope" | undefined;
+        } | undefined;
+        primaryHarness?: string | undefined;
+        routingGoal?: "auto" | "quality" | "economy" | undefined;
+        reviewerModels?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", string>> | undefined;
+        reviewerEfforts?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", "low" | "medium" | "high" | "xhigh" | "max">> | undefined;
+        attempts?: number | null | undefined;
+        untilClean?: boolean | undefined;
+        swarm?: boolean | undefined;
+        create?: boolean | undefined;
+        synthesis?: "auto" | "never" | "always" | undefined;
+        paidBudget?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
+        externalContextPolicy?: "off" | "auto" | "cached" | "live" | undefined;
+        protectedPathApprovals?: {
+            path: string;
+            reason?: string | undefined;
+        }[] | undefined;
+        specPath?: string | undefined;
+        specId?: string | undefined;
+        specHash?: string | undefined;
+        threadId?: string | undefined;
+        parentRunId?: string | undefined;
+        reviewerPanel?: {
+            harness: string;
+            model?: string | undefined;
+            effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+        }[] | undefined;
+        authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        maxToolCalls?: number | undefined;
     };
-    plan?: string | undefined;
-    answers?: unknown[] | undefined;
-    priorDecisions?: {
-        question: string;
-        answer: string;
+    differences?: {
+        reason: string;
+        field: string;
+        change: "omitted";
     }[] | undefined;
-    planDir?: string | undefined;
-}>;
-export type ControlSpecFreezeRequest = z.infer<typeof ControlSpecFreezeRequest>;
-export declare const ControlRunStartInfo: z.ZodObject<{
-    jobId: z.ZodOptional<z.ZodString>;
-    runId: z.ZodString;
-    taskId: z.ZodOptional<z.ZodString>;
-    runDir: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    runId: string;
-    runDir: string;
-    jobId?: string | undefined;
-    taskId?: string | undefined;
-}, {
-    runId: string;
-    runDir: string;
-    jobId?: string | undefined;
-    taskId?: string | undefined;
 }>;
-export type ControlRunStartInfo = z.infer<typeof ControlRunStartInfo>;
-export declare const ControlRunState: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted", "exhausted", "not_converged", "stuck_no_progress"]>;
+export declare const ControlRunState: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted_unknown", "cost_unverifiable", "exhausted_overshoot", "exhausted", "not_converged", "stuck_no_progress"]>;
 export type ControlRunState = z.infer<typeof ControlRunState>;
 export declare const ControlQueuedRunInfo: z.ZodObject<{
     jobId: z.ZodString;
-    state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted", "exhausted", "not_converged", "stuck_no_progress"]>;
+    state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted_unknown", "cost_unverifiable", "exhausted_overshoot", "exhausted", "not_converged", "stuck_no_progress"]>;
     error: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+    state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
     jobId: string;
     error?: string | undefined;
 }, {
-    state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+    state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
     jobId: string;
     error?: string | undefined;
 }>;
@@ -667,11 +835,11 @@ export declare const RunFailure: z.ZodObject<{
     runDir: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     nextActions: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
-    runDir: string | null;
-    category: "validation" | "unknown" | "harness_error" | "auth" | "cancelled" | "budget" | "project" | "policy" | "harness_unavailable" | "internal";
-    phase: string;
     harnessId: string | null;
     attemptId: string | null;
+    runDir: string | null;
+    phase: string;
+    category: "validation" | "unknown" | "harness_error" | "cancelled" | "auth" | "policy" | "budget" | "project" | "harness_unavailable" | "internal";
     safeMessage: string;
     rawDetailRef: string | null;
     logRefs: string[];
@@ -679,11 +847,11 @@ export declare const RunFailure: z.ZodObject<{
     nextActions: string[];
 }, {
     safeMessage: string;
-    runDir?: string | null | undefined;
-    category?: "validation" | "unknown" | "harness_error" | "auth" | "cancelled" | "budget" | "project" | "policy" | "harness_unavailable" | "internal" | undefined;
-    phase?: string | undefined;
     harnessId?: string | null | undefined;
     attemptId?: string | null | undefined;
+    runDir?: string | null | undefined;
+    phase?: string | undefined;
+    category?: "validation" | "unknown" | "harness_error" | "cancelled" | "auth" | "policy" | "budget" | "project" | "harness_unavailable" | "internal" | undefined;
     rawDetailRef?: string | null | undefined;
     logRefs?: string[] | undefined;
     eventRefs?: string[] | undefined;
@@ -723,29 +891,29 @@ export declare const ControlWebEvidence: z.ZodObject<{
     /** False when the run predates telemetry.yaml; surfaces must render "telemetry unavailable". */
     available: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    status: "none" | "failed" | "attempted" | "unverified" | "satisfied";
+    status: "failed" | "none" | "attempted" | "satisfied" | "unverified";
+    available: boolean;
+    mode: "off" | "auto" | "cached" | "live";
     target: string | null;
     tool: string | null;
-    mode: "off" | "auto" | "cached" | "live";
     required: boolean;
     attempted: boolean;
     rawDetailRef: string | null;
     effectiveMode: "off" | "auto" | "cached" | "live";
     satisfied: boolean;
     errorSummary: string | null;
-    available: boolean;
 }, {
-    status?: "none" | "failed" | "attempted" | "unverified" | "satisfied" | undefined;
+    status?: "failed" | "none" | "attempted" | "satisfied" | "unverified" | undefined;
+    available?: boolean | undefined;
+    mode?: "off" | "auto" | "cached" | "live" | undefined;
     target?: string | null | undefined;
     tool?: string | null | undefined;
-    mode?: "off" | "auto" | "cached" | "live" | undefined;
     required?: boolean | undefined;
     attempted?: boolean | undefined;
     rawDetailRef?: string | null | undefined;
     effectiveMode?: "off" | "auto" | "cached" | "live" | undefined;
     satisfied?: boolean | undefined;
     errorSummary?: string | null | undefined;
-    available?: boolean | undefined;
 }>;
 export type ControlWebEvidence = z.infer<typeof ControlWebEvidence>;
 /**
@@ -759,15 +927,15 @@ export declare const ControlRouteInfo: z.ZodObject<{
     harnessId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     verified: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    verified: boolean;
     harnessId: string | null;
     requestedModel: string | null;
     observedModel: string | null;
+    verified: boolean;
 }, {
-    verified?: boolean | undefined;
     harnessId?: string | null | undefined;
     requestedModel?: string | null | undefined;
     observedModel?: string | null | undefined;
+    verified?: boolean | undefined;
 }>;
 export type ControlRouteInfo = z.infer<typeof ControlRouteInfo>;
 /**
@@ -800,18 +968,16 @@ export declare const ControlRunResult: z.ZodObject<{
     adopted: z.ZodDefault<z.ZodNullable<z.ZodBoolean>>;
     /** Honest application state (decoupled from clean-terminal). */
     applyState: z.ZodDefault<z.ZodEnum<["not_applied", "applied", "applied_review_blocked", "reverted"]>>;
-    /** Tree SHA before this turn mutated the in-place tree (revert restore target). */
     preTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    /** Tree SHA right after this turn's mutation (revert divergence fence: refuse
-     * to revert if the working tree has diverged from this since). */
     postTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    revertAnchorId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     /** Revert metadata is available (the turn mutated the live tree in place and
-     * pre/post-turn snapshots were recorded), so a Revert affordance may be offered.
+     * an external patch anchor was recorded), so a Revert affordance may be offered.
      * This is NOT a live-safe guarantee: the server re-checks tree divergence at
      * revert time and refuses (fail loud) if the working tree changed since. */
     revertable: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    kind: "plan" | "none" | "patch" | "report" | "answer";
+    kind: "plan" | "none" | "patch" | "answer" | "report";
     diffStat: {
         files: number;
         additions: number;
@@ -822,9 +988,10 @@ export declare const ControlRunResult: z.ZodObject<{
     applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
     preTurnSha: string | null;
     postTurnSha: string | null;
+    revertAnchorId: string | null;
     revertable: boolean;
 }, {
-    kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+    kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
     diffStat?: {
         files: number;
         additions: number;
@@ -835,6 +1002,7 @@ export declare const ControlRunResult: z.ZodObject<{
     applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
     preTurnSha?: string | null | undefined;
     postTurnSha?: string | null | undefined;
+    revertAnchorId?: string | null | undefined;
     revertable?: boolean | undefined;
 }>;
 export type ControlRunResult = z.infer<typeof ControlRunResult>;
@@ -842,7 +1010,7 @@ export declare const ControlRunSummary: z.ZodObject<{
     jobId: z.ZodString;
     runId: z.ZodString;
     taskId: z.ZodOptional<z.ZodString>;
-    state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted", "exhausted", "not_converged", "stuck_no_progress"]>;
+    state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted_unknown", "cost_unverifiable", "exhausted_overshoot", "exhausted", "not_converged", "stuck_no_progress"]>;
     runDir: z.ZodOptional<z.ZodString>;
     error: z.ZodOptional<z.ZodString>;
     failure: z.ZodDefault<z.ZodNullable<z.ZodObject<{
@@ -857,11 +1025,11 @@ export declare const ControlRunSummary: z.ZodObject<{
         runDir: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         nextActions: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
-        runDir: string | null;
-        category: "validation" | "unknown" | "harness_error" | "auth" | "cancelled" | "budget" | "project" | "policy" | "harness_unavailable" | "internal";
-        phase: string;
         harnessId: string | null;
         attemptId: string | null;
+        runDir: string | null;
+        phase: string;
+        category: "validation" | "unknown" | "harness_error" | "cancelled" | "auth" | "policy" | "budget" | "project" | "harness_unavailable" | "internal";
         safeMessage: string;
         rawDetailRef: string | null;
         logRefs: string[];
@@ -869,11 +1037,11 @@ export declare const ControlRunSummary: z.ZodObject<{
         nextActions: string[];
     }, {
         safeMessage: string;
-        runDir?: string | null | undefined;
-        category?: "validation" | "unknown" | "harness_error" | "auth" | "cancelled" | "budget" | "project" | "policy" | "harness_unavailable" | "internal" | undefined;
-        phase?: string | undefined;
         harnessId?: string | null | undefined;
         attemptId?: string | null | undefined;
+        runDir?: string | null | undefined;
+        phase?: string | undefined;
+        category?: "validation" | "unknown" | "harness_error" | "cancelled" | "auth" | "policy" | "budget" | "project" | "harness_unavailable" | "internal" | undefined;
         rawDetailRef?: string | null | undefined;
         logRefs?: string[] | undefined;
         eventRefs?: string[] | undefined;
@@ -901,7 +1069,7 @@ export declare const ControlRunSummary: z.ZodObject<{
     prompt: z.ZodOptional<z.ZodString>;
     harnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     primaryHarness: z.ZodOptional<z.ZodString>;
-    portfolio: z.ZodOptional<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
+    routingGoal: z.ZodOptional<z.ZodEnum<["auto", "quality", "economy"]>>;
     model: z.ZodOptional<z.ZodString>;
     reviewerPanel: z.ZodOptional<z.ZodArray<z.ZodObject<{
         /** Explicit reviewer harness id. Repeated harness ids are allowed so one
@@ -913,12 +1081,12 @@ export declare const ControlRunSummary: z.ZodObject<{
         effort: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>;
     }, "strict", z.ZodTypeAny, {
         harness: string;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }, {
         harness: string;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }>, "many">>;
     protectedPathApprovals: z.ZodOptional<z.ZodArray<z.ZodObject<{
         path: z.ZodString;
@@ -931,7 +1099,22 @@ export declare const ControlRunSummary: z.ZodObject<{
         reason?: string | undefined;
     }>, "many">>;
     n: z.ZodOptional<z.ZodNumber>;
-    maxUsd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    paidBudget: z.ZodOptional<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"unlimited">;
+    }, "strict", z.ZodTypeAny, {
+        kind: "unlimited";
+    }, {
+        kind: "unlimited";
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"finite">;
+        maxUsd: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        kind: "finite";
+        maxUsd: number;
+    }, {
+        kind: "finite";
+        maxUsd: number;
+    }>]>>;
     spendUsd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     spendEstimated: z.ZodOptional<z.ZodBoolean>;
     access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
@@ -956,30 +1139,55 @@ export declare const ControlRunSummary: z.ZodObject<{
         /** False when the run predates telemetry.yaml; surfaces must render "telemetry unavailable". */
         available: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
-        status: "none" | "failed" | "attempted" | "unverified" | "satisfied";
+        status: "failed" | "none" | "attempted" | "satisfied" | "unverified";
+        available: boolean;
+        mode: "off" | "auto" | "cached" | "live";
         target: string | null;
         tool: string | null;
-        mode: "off" | "auto" | "cached" | "live";
         required: boolean;
         attempted: boolean;
         rawDetailRef: string | null;
         effectiveMode: "off" | "auto" | "cached" | "live";
         satisfied: boolean;
         errorSummary: string | null;
-        available: boolean;
     }, {
-        status?: "none" | "failed" | "attempted" | "unverified" | "satisfied" | undefined;
+        status?: "failed" | "none" | "attempted" | "satisfied" | "unverified" | undefined;
+        available?: boolean | undefined;
+        mode?: "off" | "auto" | "cached" | "live" | undefined;
         target?: string | null | undefined;
         tool?: string | null | undefined;
-        mode?: "off" | "auto" | "cached" | "live" | undefined;
         required?: boolean | undefined;
         attempted?: boolean | undefined;
         rawDetailRef?: string | null | undefined;
         effectiveMode?: "off" | "auto" | "cached" | "live" | undefined;
         satisfied?: boolean | undefined;
         errorSummary?: string | null | undefined;
-        available?: boolean | undefined;
     }>>;
+    requestRequirements: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        capability: z.ZodLiteral<"browser">;
+        harness_id: z.ZodString;
+        eligible: z.ZodBoolean;
+        requested: z.ZodBoolean;
+        effective: z.ZodBoolean;
+        reason: z.ZodEnum<["not_requested", "effective", "manifest_unsupported", "web_policy_off", "access_profile_incompatible"]>;
+        evidence_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        requested: boolean;
+        effective: boolean;
+        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
+        evidence_refs: string[];
+        harness_id: string;
+        eligible: boolean;
+        capability: "browser";
+    }, {
+        requested: boolean;
+        effective: boolean;
+        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
+        harness_id: string;
+        eligible: boolean;
+        capability: "browser";
+        evidence_refs?: string[] | undefined;
+    }>, "many">>;
     toolPermissionPolicy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     outputReadyState: z.ZodDefault<z.ZodEnum<["pending", "finalizing", "ready", "diagnostic"]>>;
     /** Non-blocking tool warnings projected from final/telemetry.yaml. */
@@ -1005,18 +1213,16 @@ export declare const ControlRunSummary: z.ZodObject<{
         adopted: z.ZodDefault<z.ZodNullable<z.ZodBoolean>>;
         /** Honest application state (decoupled from clean-terminal). */
         applyState: z.ZodDefault<z.ZodEnum<["not_applied", "applied", "applied_review_blocked", "reverted"]>>;
-        /** Tree SHA before this turn mutated the in-place tree (revert restore target). */
         preTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        /** Tree SHA right after this turn's mutation (revert divergence fence: refuse
-         * to revert if the working tree has diverged from this since). */
         postTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        revertAnchorId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** Revert metadata is available (the turn mutated the live tree in place and
-         * pre/post-turn snapshots were recorded), so a Revert affordance may be offered.
+         * an external patch anchor was recorded), so a Revert affordance may be offered.
          * This is NOT a live-safe guarantee: the server re-checks tree divergence at
          * revert time and refuses (fail loud) if the working tree changed since. */
         revertable: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
-        kind: "plan" | "none" | "patch" | "report" | "answer";
+        kind: "plan" | "none" | "patch" | "answer" | "report";
         diffStat: {
             files: number;
             additions: number;
@@ -1027,9 +1233,10 @@ export declare const ControlRunSummary: z.ZodObject<{
         applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
         preTurnSha: string | null;
         postTurnSha: string | null;
+        revertAnchorId: string | null;
         revertable: boolean;
     }, {
-        kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+        kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
         diffStat?: {
             files: number;
             additions: number;
@@ -1040,6 +1247,7 @@ export declare const ControlRunSummary: z.ZodObject<{
         applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
         preTurnSha?: string | null | undefined;
         postTurnSha?: string | null | undefined;
+        revertAnchorId?: string | null | undefined;
         revertable?: boolean | undefined;
     }>>;
     /** True while at least one interaction.requested has no answered/timeout. */
@@ -1051,24 +1259,39 @@ export declare const ControlRunSummary: z.ZodObject<{
         harnessId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         verified: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
-        verified: boolean;
         harnessId: string | null;
         requestedModel: string | null;
         observedModel: string | null;
+        verified: boolean;
     }, {
-        verified?: boolean | undefined;
         harnessId?: string | null | undefined;
         requestedModel?: string | null | undefined;
         observedModel?: string | null | undefined;
+        verified?: boolean | undefined;
     }>>>;
-    tests: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    tests: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        program: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        cwd: z.ZodOptional<z.ZodString>;
+        envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        program: string;
+        args: string[];
+        envAllowlist: string[];
+        cwd?: string | undefined;
+    }, {
+        program: string;
+        cwd?: string | undefined;
+        args?: string[] | undefined;
+        envAllowlist?: string[] | undefined;
+    }>, "many">>;
     specId: z.ZodOptional<z.ZodString>;
     specHash: z.ZodOptional<z.ZodString>;
     createdAt: z.ZodOptional<z.ZodString>;
     startedAt: z.ZodOptional<z.ZodString>;
     finishedAt: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+    state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
     runId: string;
     project: {
         kind: "none" | "project";
@@ -1078,11 +1301,11 @@ export declare const ControlRunSummary: z.ZodObject<{
     };
     jobId: string;
     failure: {
-        runDir: string | null;
-        category: "validation" | "unknown" | "harness_error" | "auth" | "cancelled" | "budget" | "project" | "policy" | "harness_unavailable" | "internal";
-        phase: string;
         harnessId: string | null;
         attemptId: string | null;
+        runDir: string | null;
+        phase: string;
+        category: "validation" | "unknown" | "harness_error" | "cancelled" | "auth" | "policy" | "budget" | "project" | "harness_unavailable" | "internal";
         safeMessage: string;
         rawDetailRef: string | null;
         logRefs: string[];
@@ -1090,22 +1313,31 @@ export declare const ControlRunSummary: z.ZodObject<{
         nextActions: string[];
     } | null;
     webEvidence: {
-        status: "none" | "failed" | "attempted" | "unverified" | "satisfied";
+        status: "failed" | "none" | "attempted" | "satisfied" | "unverified";
+        available: boolean;
+        mode: "off" | "auto" | "cached" | "live";
         target: string | null;
         tool: string | null;
-        mode: "off" | "auto" | "cached" | "live";
         required: boolean;
         attempted: boolean;
         rawDetailRef: string | null;
         effectiveMode: "off" | "auto" | "cached" | "live";
         satisfied: boolean;
         errorSummary: string | null;
-        available: boolean;
     };
+    requestRequirements: {
+        requested: boolean;
+        effective: boolean;
+        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
+        evidence_refs: string[];
+        harness_id: string;
+        eligible: boolean;
+        capability: "browser";
+    }[];
     outputReadyState: "pending" | "finalizing" | "ready" | "diagnostic";
     toolWarningsTotal: number;
     result: {
-        kind: "plan" | "none" | "patch" | "report" | "answer";
+        kind: "plan" | "none" | "patch" | "answer" | "report";
         diffStat: {
             files: number;
             additions: number;
@@ -1116,27 +1348,41 @@ export declare const ControlRunSummary: z.ZodObject<{
         applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
         preTurnSha: string | null;
         postTurnSha: string | null;
+        revertAnchorId: string | null;
         revertable: boolean;
     };
     waitingOnUser: boolean;
     route: {
-        verified: boolean;
         harnessId: string | null;
         requestedModel: string | null;
         observedModel: string | null;
+        verified: boolean;
     } | null;
+    startedAt?: string | undefined;
+    createdAt?: string | undefined;
+    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     prompt?: string | undefined;
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     error?: string | undefined;
-    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     harnesses?: string[] | undefined;
     runDir?: string | undefined;
-    tests?: string[] | undefined;
-    portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-    n?: number | undefined;
     model?: string | undefined;
+    tests?: {
+        program: string;
+        args: string[];
+        envAllowlist: string[];
+        cwd?: string | undefined;
+    }[] | undefined;
+    n?: number | undefined;
+    taskId?: string | undefined;
     primaryHarness?: string | undefined;
-    maxUsd?: number | null | undefined;
+    routingGoal?: "auto" | "quality" | "economy" | undefined;
+    paidBudget?: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    } | undefined;
     externalContextPolicy?: "off" | "auto" | "cached" | "live" | undefined;
     protectedPathApprovals?: {
         path: string;
@@ -1146,13 +1392,9 @@ export declare const ControlRunSummary: z.ZodObject<{
     specHash?: string | undefined;
     reviewerPanel?: {
         harness: string;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }[] | undefined;
-    createdAt?: string | undefined;
-    startedAt?: string | undefined;
-    finishedAt?: string | undefined;
-    taskId?: string | undefined;
     strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
     spendUsd?: number | null | undefined;
     spendEstimated?: boolean | undefined;
@@ -1161,18 +1403,26 @@ export declare const ControlRunSummary: z.ZodObject<{
     webRequired?: boolean | undefined;
     webMode?: "off" | "auto" | "cached" | "live" | undefined;
     toolPermissionPolicy?: Record<string, unknown> | undefined;
+    finishedAt?: string | undefined;
 }, {
-    state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+    state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
     runId: string;
     jobId: string;
+    startedAt?: string | undefined;
+    createdAt?: string | undefined;
+    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     prompt?: string | undefined;
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     error?: string | undefined;
-    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     harnesses?: string[] | undefined;
     runDir?: string | undefined;
-    tests?: string[] | undefined;
-    portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
+    model?: string | undefined;
+    tests?: {
+        program: string;
+        cwd?: string | undefined;
+        args?: string[] | undefined;
+        envAllowlist?: string[] | undefined;
+    }[] | undefined;
     project?: {
         kind?: "none" | "project" | undefined;
         root?: string | null | undefined;
@@ -1180,9 +1430,15 @@ export declare const ControlRunSummary: z.ZodObject<{
         projectName?: string | null | undefined;
     } | undefined;
     n?: number | undefined;
-    model?: string | undefined;
+    taskId?: string | undefined;
     primaryHarness?: string | undefined;
-    maxUsd?: number | null | undefined;
+    routingGoal?: "auto" | "quality" | "economy" | undefined;
+    paidBudget?: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    } | undefined;
     externalContextPolicy?: "off" | "auto" | "cached" | "live" | undefined;
     protectedPathApprovals?: {
         path: string;
@@ -1192,20 +1448,16 @@ export declare const ControlRunSummary: z.ZodObject<{
     specHash?: string | undefined;
     reviewerPanel?: {
         harness: string;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         model?: string | undefined;
+        effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }[] | undefined;
-    createdAt?: string | undefined;
-    startedAt?: string | undefined;
-    finishedAt?: string | undefined;
-    taskId?: string | undefined;
     failure?: {
         safeMessage: string;
-        runDir?: string | null | undefined;
-        category?: "validation" | "unknown" | "harness_error" | "auth" | "cancelled" | "budget" | "project" | "policy" | "harness_unavailable" | "internal" | undefined;
-        phase?: string | undefined;
         harnessId?: string | null | undefined;
         attemptId?: string | null | undefined;
+        runDir?: string | null | undefined;
+        phase?: string | undefined;
+        category?: "validation" | "unknown" | "harness_error" | "cancelled" | "auth" | "policy" | "budget" | "project" | "harness_unavailable" | "internal" | undefined;
         rawDetailRef?: string | null | undefined;
         logRefs?: string[] | undefined;
         eventRefs?: string[] | undefined;
@@ -1219,23 +1471,32 @@ export declare const ControlRunSummary: z.ZodObject<{
     webRequired?: boolean | undefined;
     webMode?: "off" | "auto" | "cached" | "live" | undefined;
     webEvidence?: {
-        status?: "none" | "failed" | "attempted" | "unverified" | "satisfied" | undefined;
+        status?: "failed" | "none" | "attempted" | "satisfied" | "unverified" | undefined;
+        available?: boolean | undefined;
+        mode?: "off" | "auto" | "cached" | "live" | undefined;
         target?: string | null | undefined;
         tool?: string | null | undefined;
-        mode?: "off" | "auto" | "cached" | "live" | undefined;
         required?: boolean | undefined;
         attempted?: boolean | undefined;
         rawDetailRef?: string | null | undefined;
         effectiveMode?: "off" | "auto" | "cached" | "live" | undefined;
         satisfied?: boolean | undefined;
         errorSummary?: string | null | undefined;
-        available?: boolean | undefined;
     } | undefined;
+    requestRequirements?: {
+        requested: boolean;
+        effective: boolean;
+        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
+        harness_id: string;
+        eligible: boolean;
+        capability: "browser";
+        evidence_refs?: string[] | undefined;
+    }[] | undefined;
     toolPermissionPolicy?: Record<string, unknown> | undefined;
     outputReadyState?: "pending" | "finalizing" | "ready" | "diagnostic" | undefined;
     toolWarningsTotal?: number | undefined;
     result?: {
-        kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+        kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
         diffStat?: {
             files: number;
             additions: number;
@@ -1246,15 +1507,17 @@ export declare const ControlRunSummary: z.ZodObject<{
         applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
         preTurnSha?: string | null | undefined;
         postTurnSha?: string | null | undefined;
+        revertAnchorId?: string | null | undefined;
         revertable?: boolean | undefined;
     } | undefined;
     waitingOnUser?: boolean | undefined;
     route?: {
-        verified?: boolean | undefined;
         harnessId?: string | null | undefined;
         requestedModel?: string | null | undefined;
         observedModel?: string | null | undefined;
+        verified?: boolean | undefined;
     } | null | undefined;
+    finishedAt?: string | undefined;
 }>;
 export type ControlRunSummary = z.infer<typeof ControlRunSummary>;
 export declare const ControlPrimaryOutput: z.ZodObject<{
@@ -1264,14 +1527,14 @@ export declare const ControlPrimaryOutput: z.ZodObject<{
     bytes: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     path: string;
-    kind: "diagnostic" | "plan" | "summary" | "patch" | "report" | "answer";
+    kind: "diagnostic" | "plan" | "summary" | "patch" | "answer" | "report";
     text: string | null;
     bytes?: number | undefined;
 }, {
     path: string;
-    kind: "diagnostic" | "plan" | "summary" | "patch" | "report" | "answer";
-    text?: string | null | undefined;
+    kind: "diagnostic" | "plan" | "summary" | "patch" | "answer" | "report";
     bytes?: number | undefined;
+    text?: string | null | undefined;
 }>;
 export type ControlPrimaryOutput = z.infer<typeof ControlPrimaryOutput>;
 export declare const ControlTimelineEvent: z.ZodObject<{
@@ -1289,12 +1552,12 @@ export declare const ControlTimelineEvent: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     type: string;
     detail: string | null;
-    target: string | null;
-    title: string;
-    severity: "error" | "info" | "warning";
     harnessId: string | null;
     attemptId: string | null;
+    target: string | null;
+    title: string;
     errorSummary: string | null;
+    severity: "error" | "info" | "warning";
     toolName: string | null;
     rawRef: string | null;
     ts?: string | undefined;
@@ -1302,18 +1565,33 @@ export declare const ControlTimelineEvent: z.ZodObject<{
     type: string;
     title: string;
     detail?: string | null | undefined;
-    target?: string | null | undefined;
-    ts?: string | undefined;
-    severity?: "error" | "info" | "warning" | undefined;
     harnessId?: string | null | undefined;
     attemptId?: string | null | undefined;
+    target?: string | null | undefined;
+    ts?: string | undefined;
     errorSummary?: string | null | undefined;
+    severity?: "error" | "info" | "warning" | undefined;
     toolName?: string | null | undefined;
     rawRef?: string | null | undefined;
 }>;
 export type ControlTimelineEvent = z.infer<typeof ControlTimelineEvent>;
 export declare const ControlBudgetSnapshot: z.ZodObject<{
-    maxUsd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    paidBudget: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"unlimited">;
+    }, "strict", z.ZodTypeAny, {
+        kind: "unlimited";
+    }, {
+        kind: "unlimited";
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"finite">;
+        maxUsd: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        kind: "finite";
+        maxUsd: number;
+    }, {
+        kind: "finite";
+        maxUsd: number;
+    }>]>>;
     spendUsd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     remainingUsd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     estimated: z.ZodDefault<z.ZodBoolean>;
@@ -1321,13 +1599,23 @@ export declare const ControlBudgetSnapshot: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     source: "unknown" | "decision" | "events" | "settings";
     estimated: boolean;
-    maxUsd: number | null;
+    paidBudget: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    };
     spendUsd: number | null;
     remainingUsd: number | null;
 }, {
     source?: "unknown" | "decision" | "events" | "settings" | undefined;
     estimated?: boolean | undefined;
-    maxUsd?: number | null | undefined;
+    paidBudget?: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    } | undefined;
     spendUsd?: number | null | undefined;
     remainingUsd?: number | null | undefined;
 }>;
@@ -1396,6 +1684,8 @@ export declare const ControlPendingInteraction: z.ZodObject<{
     requestedAt: z.ZodString;
     timeoutAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
+    harnessId: string | null;
+    attemptId: string | null;
     questions: {
         options: {
             label: string;
@@ -1407,8 +1697,6 @@ export declare const ControlPendingInteraction: z.ZodObject<{
         multi_select: boolean;
     }[];
     runId: string;
-    harnessId: string | null;
-    attemptId: string | null;
     interactionId: string;
     sourceTool: string | null;
     requestedAt: string;
@@ -1417,6 +1705,8 @@ export declare const ControlPendingInteraction: z.ZodObject<{
     runId: string;
     interactionId: string;
     requestedAt: string;
+    harnessId?: string | null | undefined;
+    attemptId?: string | null | undefined;
     questions?: {
         id: string;
         question: string;
@@ -1427,8 +1717,6 @@ export declare const ControlPendingInteraction: z.ZodObject<{
         header?: string | null | undefined;
         multi_select?: boolean | undefined;
     }[] | undefined;
-    harnessId?: string | null | undefined;
-    attemptId?: string | null | undefined;
     sourceTool?: string | null | undefined;
     timeoutAt?: string | null | undefined;
 }>;
@@ -1522,13 +1810,13 @@ export declare const RunControl: z.ZodObject<{
     reason?: string | undefined;
 }, {
     kind: "cancel";
+    reason?: string | undefined;
     target?: {
         harnessId?: string | undefined;
         attemptId?: string | undefined;
         sessionId?: string | undefined;
         requestId?: string | undefined;
     } | undefined;
-    reason?: string | undefined;
 }>;
 export type RunControl = z.infer<typeof RunControl>;
 export declare const ControlRunControlRequest: z.ZodObject<{
@@ -1562,13 +1850,13 @@ export declare const ControlRunControlRequest: z.ZodObject<{
         reason?: string | undefined;
     }, {
         kind: "cancel";
+        reason?: string | undefined;
         target?: {
             harnessId?: string | undefined;
             attemptId?: string | undefined;
             sessionId?: string | undefined;
             requestId?: string | undefined;
         } | undefined;
-        reason?: string | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     control: {
@@ -1584,13 +1872,13 @@ export declare const ControlRunControlRequest: z.ZodObject<{
 }, {
     control: {
         kind: "cancel";
+        reason?: string | undefined;
         target?: {
             harnessId?: string | undefined;
             attemptId?: string | undefined;
             sessionId?: string | undefined;
             requestId?: string | undefined;
         } | undefined;
-        reason?: string | undefined;
     };
 }>;
 export type ControlRunControlRequest = z.infer<typeof ControlRunControlRequest>;
@@ -1682,24 +1970,24 @@ export declare const ControlApplyRequest: z.ZodObject<{
     branch: z.ZodOptional<z.ZodString>;
     message: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
+    mode: "apply" | "commit" | "branch" | "pr" | "artifact_only";
     target: {
         kind: "original_project";
     } | {
         kind: "project";
         root: string;
     };
-    mode: "apply" | "commit" | "branch" | "pr" | "artifact_only";
     message?: string | undefined;
     branch?: string | undefined;
 }, {
     message?: string | undefined;
+    mode?: "apply" | "commit" | "branch" | "pr" | "artifact_only" | undefined;
     target?: {
         kind: "original_project";
     } | {
         kind: "project";
         root: string;
     } | undefined;
-    mode?: "apply" | "commit" | "branch" | "pr" | "artifact_only" | undefined;
     branch?: string | undefined;
 }>;
 export type ControlApplyRequest = z.infer<typeof ControlApplyRequest>;
@@ -1791,7 +2079,9 @@ export declare const ControlThread: z.ZodObject<{
     primaryHarness: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     /** Sticky eligible pool for the thread (empty => engine auto-pools). */
     eligibleHarnesses: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    state: z.ZodDefault<z.ZodEnum<["active", "closed"]>>;
+    state: z.ZodDefault<z.ZodEnum<["active", "closed", "trashed", "purged"]>>;
+    trashedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    purgeAfter: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     runIds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     headRunId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     /** True when the head turn is blocked on a human decision (needs-me inbox). */
@@ -1799,32 +2089,36 @@ export declare const ControlThread: z.ZodObject<{
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
+    state: "active" | "closed" | "trashed" | "purged";
+    createdAt: string;
     id: string;
     title: string | null;
-    state: "active" | "closed";
     primaryHarness: string | null;
     authPreference: "auto" | "subscription" | "api_key";
-    createdAt: string;
     repoRoot: string | null;
     workspaceMode: "in_place" | "isolated";
     eligibleHarnesses: string[];
+    trashedAt: string | null;
+    purgeAfter: string | null;
     runIds: string[];
     headRunId: string | null;
     needsHuman: boolean;
     updatedAt: string;
     mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
 }, {
-    id: string;
     createdAt: string;
+    id: string;
     updatedAt: string;
-    title?: string | null | undefined;
+    state?: "active" | "closed" | "trashed" | "purged" | undefined;
     mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
-    state?: "active" | "closed" | undefined;
+    title?: string | null | undefined;
     primaryHarness?: string | null | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
     repoRoot?: string | null | undefined;
     workspaceMode?: "in_place" | "isolated" | undefined;
     eligibleHarnesses?: string[] | undefined;
+    trashedAt?: string | null | undefined;
+    purgeAfter?: string | null | undefined;
     runIds?: string[] | undefined;
     headRunId?: string | null | undefined;
     needsHuman?: boolean | undefined;
@@ -1838,16 +2132,16 @@ export declare const ControlSession: z.ZodObject<{
     observedModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     state: z.ZodDefault<z.ZodEnum<["live", "stale", "rebound"]>>;
 }, "strip", z.ZodTypeAny, {
-    id: string;
+    harnessId: string;
     state: "live" | "stale" | "rebound";
+    id: string;
     threadId: string;
-    harnessId: string;
     observedModel: string | null;
     nativeSessionId: string | null;
 }, {
+    harnessId: string;
     id: string;
     threadId: string;
-    harnessId: string;
     state?: "live" | "stale" | "rebound" | undefined;
     observedModel?: string | null | undefined;
     nativeSessionId?: string | null | undefined;
@@ -1858,7 +2152,7 @@ export type ControlSession = z.infer<typeof ControlSession>;
  * conversation from one GET /threads/:id (no N+1 run-detail fetch per turn).
  */
 export declare const ControlTurnRunCard: z.ZodObject<{
-    state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted", "exhausted", "not_converged", "stuck_no_progress"]>;
+    state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted_unknown", "cost_unverifiable", "exhausted_overshoot", "exhausted", "not_converged", "stuck_no_progress"]>;
     mode: z.ZodOptional<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>>;
     strategy: z.ZodOptional<z.ZodNullable<z.ZodEnum<["race", "attempts", "until_clean", "swarm", "create"]>>>;
     n: z.ZodOptional<z.ZodNumber>;
@@ -1882,18 +2176,16 @@ export declare const ControlTurnRunCard: z.ZodObject<{
         adopted: z.ZodDefault<z.ZodNullable<z.ZodBoolean>>;
         /** Honest application state (decoupled from clean-terminal). */
         applyState: z.ZodDefault<z.ZodEnum<["not_applied", "applied", "applied_review_blocked", "reverted"]>>;
-        /** Tree SHA before this turn mutated the in-place tree (revert restore target). */
         preTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        /** Tree SHA right after this turn's mutation (revert divergence fence: refuse
-         * to revert if the working tree has diverged from this since). */
         postTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        revertAnchorId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** Revert metadata is available (the turn mutated the live tree in place and
-         * pre/post-turn snapshots were recorded), so a Revert affordance may be offered.
+         * an external patch anchor was recorded), so a Revert affordance may be offered.
          * This is NOT a live-safe guarantee: the server re-checks tree divergence at
          * revert time and refuses (fail loud) if the working tree changed since. */
         revertable: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
-        kind: "plan" | "none" | "patch" | "report" | "answer";
+        kind: "plan" | "none" | "patch" | "answer" | "report";
         diffStat: {
             files: number;
             additions: number;
@@ -1904,9 +2196,10 @@ export declare const ControlTurnRunCard: z.ZodObject<{
         applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
         preTurnSha: string | null;
         postTurnSha: string | null;
+        revertAnchorId: string | null;
         revertable: boolean;
     }, {
-        kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+        kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
         diffStat?: {
             files: number;
             additions: number;
@@ -1917,6 +2210,7 @@ export declare const ControlTurnRunCard: z.ZodObject<{
         applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
         preTurnSha?: string | null | undefined;
         postTurnSha?: string | null | undefined;
+        revertAnchorId?: string | null | undefined;
         revertable?: boolean | undefined;
     }>>;
     spendUsd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -1924,11 +2218,10 @@ export declare const ControlTurnRunCard: z.ZodObject<{
     waitingOnUser: z.ZodDefault<z.ZodBoolean>;
     finishedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
-    state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
-    finishedAt: string | null;
+    state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
     outputReadyState: "pending" | "finalizing" | "ready" | "diagnostic";
     result: {
-        kind: "plan" | "none" | "patch" | "report" | "answer";
+        kind: "plan" | "none" | "patch" | "answer" | "report";
         diffStat: {
             files: number;
             additions: number;
@@ -1939,23 +2232,24 @@ export declare const ControlTurnRunCard: z.ZodObject<{
         applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
         preTurnSha: string | null;
         postTurnSha: string | null;
+        revertAnchorId: string | null;
         revertable: boolean;
     };
     waitingOnUser: boolean;
+    finishedAt: string | null;
     mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     n?: number | undefined;
     strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
     spendUsd?: number | null | undefined;
 }, {
-    state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+    state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
     mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     n?: number | undefined;
-    finishedAt?: string | null | undefined;
     strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
     spendUsd?: number | null | undefined;
     outputReadyState?: "pending" | "finalizing" | "ready" | "diagnostic" | undefined;
     result?: {
-        kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+        kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
         diffStat?: {
             files: number;
             additions: number;
@@ -1966,9 +2260,11 @@ export declare const ControlTurnRunCard: z.ZodObject<{
         applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
         preTurnSha?: string | null | undefined;
         postTurnSha?: string | null | undefined;
+        revertAnchorId?: string | null | undefined;
         revertable?: boolean | undefined;
     } | undefined;
     waitingOnUser?: boolean | undefined;
+    finishedAt?: string | null | undefined;
 }>;
 export type ControlTurnRunCard = z.infer<typeof ControlTurnRunCard>;
 export declare const ControlThreadTurn: z.ZodObject<{
@@ -1982,7 +2278,7 @@ export declare const ControlThreadTurn: z.ZodObject<{
     prompt: z.ZodDefault<z.ZodString>;
     /** Embedded run card (outcome/state) so the chat renders without N+1 fetches. */
     run: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-        state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted", "exhausted", "not_converged", "stuck_no_progress"]>;
+        state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted_unknown", "cost_unverifiable", "exhausted_overshoot", "exhausted", "not_converged", "stuck_no_progress"]>;
         mode: z.ZodOptional<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>>;
         strategy: z.ZodOptional<z.ZodNullable<z.ZodEnum<["race", "attempts", "until_clean", "swarm", "create"]>>>;
         n: z.ZodOptional<z.ZodNumber>;
@@ -2006,18 +2302,16 @@ export declare const ControlThreadTurn: z.ZodObject<{
             adopted: z.ZodDefault<z.ZodNullable<z.ZodBoolean>>;
             /** Honest application state (decoupled from clean-terminal). */
             applyState: z.ZodDefault<z.ZodEnum<["not_applied", "applied", "applied_review_blocked", "reverted"]>>;
-            /** Tree SHA before this turn mutated the in-place tree (revert restore target). */
             preTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-            /** Tree SHA right after this turn's mutation (revert divergence fence: refuse
-             * to revert if the working tree has diverged from this since). */
             postTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            revertAnchorId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             /** Revert metadata is available (the turn mutated the live tree in place and
-             * pre/post-turn snapshots were recorded), so a Revert affordance may be offered.
+             * an external patch anchor was recorded), so a Revert affordance may be offered.
              * This is NOT a live-safe guarantee: the server re-checks tree divergence at
              * revert time and refuses (fail loud) if the working tree changed since. */
             revertable: z.ZodDefault<z.ZodBoolean>;
         }, "strip", z.ZodTypeAny, {
-            kind: "plan" | "none" | "patch" | "report" | "answer";
+            kind: "plan" | "none" | "patch" | "answer" | "report";
             diffStat: {
                 files: number;
                 additions: number;
@@ -2028,9 +2322,10 @@ export declare const ControlThreadTurn: z.ZodObject<{
             applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
             preTurnSha: string | null;
             postTurnSha: string | null;
+            revertAnchorId: string | null;
             revertable: boolean;
         }, {
-            kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+            kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
             diffStat?: {
                 files: number;
                 additions: number;
@@ -2041,6 +2336,7 @@ export declare const ControlThreadTurn: z.ZodObject<{
             applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
             preTurnSha?: string | null | undefined;
             postTurnSha?: string | null | undefined;
+            revertAnchorId?: string | null | undefined;
             revertable?: boolean | undefined;
         }>>;
         spendUsd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -2048,11 +2344,10 @@ export declare const ControlThreadTurn: z.ZodObject<{
         waitingOnUser: z.ZodDefault<z.ZodBoolean>;
         finishedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     }, "strip", z.ZodTypeAny, {
-        state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
-        finishedAt: string | null;
+        state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
         outputReadyState: "pending" | "finalizing" | "ready" | "diagnostic";
         result: {
-            kind: "plan" | "none" | "patch" | "report" | "answer";
+            kind: "plan" | "none" | "patch" | "answer" | "report";
             diffStat: {
                 files: number;
                 additions: number;
@@ -2063,23 +2358,24 @@ export declare const ControlThreadTurn: z.ZodObject<{
             applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
             preTurnSha: string | null;
             postTurnSha: string | null;
+            revertAnchorId: string | null;
             revertable: boolean;
         };
         waitingOnUser: boolean;
+        finishedAt: string | null;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
         n?: number | undefined;
         strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
         spendUsd?: number | null | undefined;
     }, {
-        state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+        state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
         n?: number | undefined;
-        finishedAt?: string | null | undefined;
         strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
         spendUsd?: number | null | undefined;
         outputReadyState?: "pending" | "finalizing" | "ready" | "diagnostic" | undefined;
         result?: {
-            kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+            kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
             diffStat?: {
                 files: number;
                 additions: number;
@@ -2090,9 +2386,11 @@ export declare const ControlThreadTurn: z.ZodObject<{
             applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
             preTurnSha?: string | null | undefined;
             postTurnSha?: string | null | undefined;
+            revertAnchorId?: string | null | undefined;
             revertable?: boolean | undefined;
         } | undefined;
         waitingOnUser?: boolean | undefined;
+        finishedAt?: string | null | undefined;
     }>>>;
     /** Why this turn has NO run (enqueue/preflight refusal, e.g. the trust
      * gate) — surfaces render it as an inline failure card with the remedy;
@@ -2118,20 +2416,19 @@ export declare const ControlThreadTurn: z.ZodObject<{
     }>>>;
     createdAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    id: string;
     kind: "initial" | "followup" | "decision";
+    createdAt: string;
+    id: string;
     prompt: string;
     planRunId: string | null;
     runId: string | null;
     threadId: string;
     parentRunId: string | null;
-    createdAt: string;
     run: {
-        state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
-        finishedAt: string | null;
+        state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
         outputReadyState: "pending" | "finalizing" | "ready" | "diagnostic";
         result: {
-            kind: "plan" | "none" | "patch" | "report" | "answer";
+            kind: "plan" | "none" | "patch" | "answer" | "report";
             diffStat: {
                 files: number;
                 additions: number;
@@ -2142,9 +2439,11 @@ export declare const ControlThreadTurn: z.ZodObject<{
             applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
             preTurnSha: string | null;
             postTurnSha: string | null;
+            revertAnchorId: string | null;
             revertable: boolean;
         };
         waitingOnUser: boolean;
+        finishedAt: string | null;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
         n?: number | undefined;
         strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
@@ -2157,24 +2456,23 @@ export declare const ControlThreadTurn: z.ZodObject<{
         failedAt: string;
     } | null;
 }, {
+    createdAt: string;
     id: string;
     threadId: string;
-    createdAt: string;
     kind?: "initial" | "followup" | "decision" | undefined;
     prompt?: string | undefined;
     planRunId?: string | null | undefined;
     runId?: string | null | undefined;
     parentRunId?: string | null | undefined;
     run?: {
-        state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+        state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
         n?: number | undefined;
-        finishedAt?: string | null | undefined;
         strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
         spendUsd?: number | null | undefined;
         outputReadyState?: "pending" | "finalizing" | "ready" | "diagnostic" | undefined;
         result?: {
-            kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+            kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
             diffStat?: {
                 files: number;
                 additions: number;
@@ -2185,9 +2483,11 @@ export declare const ControlThreadTurn: z.ZodObject<{
             applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
             preTurnSha?: string | null | undefined;
             postTurnSha?: string | null | undefined;
+            revertAnchorId?: string | null | undefined;
             revertable?: boolean | undefined;
         } | undefined;
         waitingOnUser?: boolean | undefined;
+        finishedAt?: string | null | undefined;
     } | null | undefined;
     enqueueError?: {
         message: string;
@@ -2232,16 +2532,16 @@ export declare const ControlThreadCreateRequest: z.ZodObject<{
     } | {
         kind: "none";
     };
-    title?: string | undefined;
-    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     workspace?: "in_place" | "isolated" | undefined;
+    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
+    title?: string | undefined;
     primaryHarness?: string | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
     eligibleHarnesses?: string[] | undefined;
 }, {
-    title?: string | undefined;
-    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     workspace?: "in_place" | "isolated" | undefined;
+    mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
+    title?: string | undefined;
     scope?: {
         kind: "project";
         root: string;
@@ -2262,50 +2562,17 @@ export declare const ControlThreadUpdateRequest: z.ZodObject<{
     primaryHarness: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     eligibleHarnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, "strict", z.ZodTypeAny, {
-    title?: string | undefined;
     state?: "active" | "closed" | undefined;
+    title?: string | undefined;
     primaryHarness?: string | null | undefined;
     eligibleHarnesses?: string[] | undefined;
 }, {
-    title?: string | undefined;
     state?: "active" | "closed" | undefined;
+    title?: string | undefined;
     primaryHarness?: string | null | undefined;
     eligibleHarnesses?: string[] | undefined;
 }>;
 export type ControlThreadUpdateRequest = z.infer<typeof ControlThreadUpdateRequest>;
-/** Apply an isolated thread's accumulated worktree diff to the project. */
-export declare const ControlThreadApplyRequest: z.ZodObject<{
-    mode: z.ZodDefault<z.ZodEnum<["apply", "branch", "commit", "pr"]>>;
-    branch: z.ZodOptional<z.ZodString>;
-    message: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    mode: "apply" | "commit" | "branch" | "pr";
-    message?: string | undefined;
-    branch?: string | undefined;
-}, {
-    message?: string | undefined;
-    mode?: "apply" | "commit" | "branch" | "pr" | undefined;
-    branch?: string | undefined;
-}>;
-export type ControlThreadApplyRequest = z.infer<typeof ControlThreadApplyRequest>;
-export declare const ControlThreadApplyResponse: z.ZodObject<{
-    applied: z.ZodBoolean;
-    status: z.ZodEnum<["applied", "branched", "committed", "pr_opened", "empty", "conflict", "rejected"]>;
-    /** True when the project HEAD moved past the thread base since the thread started. */
-    headMoved: z.ZodDefault<z.ZodBoolean>;
-    detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    status: "applied" | "rejected" | "branched" | "committed" | "pr_opened" | "empty" | "conflict";
-    detail: string | null;
-    applied: boolean;
-    headMoved: boolean;
-}, {
-    status: "applied" | "rejected" | "branched" | "committed" | "pr_opened" | "empty" | "conflict";
-    applied: boolean;
-    detail?: string | null | undefined;
-    headMoved?: boolean | undefined;
-}>;
-export type ControlThreadApplyResponse = z.infer<typeof ControlThreadApplyResponse>;
 export declare const ControlThreadListResponse: z.ZodObject<{
     threads: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -2318,7 +2585,9 @@ export declare const ControlThreadListResponse: z.ZodObject<{
         primaryHarness: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** Sticky eligible pool for the thread (empty => engine auto-pools). */
         eligibleHarnesses: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-        state: z.ZodDefault<z.ZodEnum<["active", "closed"]>>;
+        state: z.ZodDefault<z.ZodEnum<["active", "closed", "trashed", "purged"]>>;
+        trashedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        purgeAfter: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         runIds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         headRunId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** True when the head turn is blocked on a human decision (needs-me inbox). */
@@ -2326,47 +2595,53 @@ export declare const ControlThreadListResponse: z.ZodObject<{
         createdAt: z.ZodString;
         updatedAt: z.ZodString;
     }, "strip", z.ZodTypeAny, {
+        state: "active" | "closed" | "trashed" | "purged";
+        createdAt: string;
         id: string;
         title: string | null;
-        state: "active" | "closed";
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
-        createdAt: string;
         repoRoot: string | null;
         workspaceMode: "in_place" | "isolated";
         eligibleHarnesses: string[];
+        trashedAt: string | null;
+        purgeAfter: string | null;
         runIds: string[];
         headRunId: string | null;
         needsHuman: boolean;
         updatedAt: string;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     }, {
-        id: string;
         createdAt: string;
+        id: string;
         updatedAt: string;
-        title?: string | null | undefined;
+        state?: "active" | "closed" | "trashed" | "purged" | undefined;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
-        state?: "active" | "closed" | undefined;
+        title?: string | null | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         repoRoot?: string | null | undefined;
         workspaceMode?: "in_place" | "isolated" | undefined;
         eligibleHarnesses?: string[] | undefined;
+        trashedAt?: string | null | undefined;
+        purgeAfter?: string | null | undefined;
         runIds?: string[] | undefined;
         headRunId?: string | null | undefined;
         needsHuman?: boolean | undefined;
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     threads: {
+        state: "active" | "closed" | "trashed" | "purged";
+        createdAt: string;
         id: string;
         title: string | null;
-        state: "active" | "closed";
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
-        createdAt: string;
         repoRoot: string | null;
         workspaceMode: "in_place" | "isolated";
         eligibleHarnesses: string[];
+        trashedAt: string | null;
+        purgeAfter: string | null;
         runIds: string[];
         headRunId: string | null;
         needsHuman: boolean;
@@ -2375,17 +2650,19 @@ export declare const ControlThreadListResponse: z.ZodObject<{
     }[];
 }, {
     threads?: {
-        id: string;
         createdAt: string;
+        id: string;
         updatedAt: string;
-        title?: string | null | undefined;
+        state?: "active" | "closed" | "trashed" | "purged" | undefined;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
-        state?: "active" | "closed" | undefined;
+        title?: string | null | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         repoRoot?: string | null | undefined;
         workspaceMode?: "in_place" | "isolated" | undefined;
         eligibleHarnesses?: string[] | undefined;
+        trashedAt?: string | null | undefined;
+        purgeAfter?: string | null | undefined;
         runIds?: string[] | undefined;
         headRunId?: string | null | undefined;
         needsHuman?: boolean | undefined;
@@ -2404,7 +2681,9 @@ export declare const ControlThreadDetail: z.ZodObject<{
         primaryHarness: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** Sticky eligible pool for the thread (empty => engine auto-pools). */
         eligibleHarnesses: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-        state: z.ZodDefault<z.ZodEnum<["active", "closed"]>>;
+        state: z.ZodDefault<z.ZodEnum<["active", "closed", "trashed", "purged"]>>;
+        trashedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        purgeAfter: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         runIds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         headRunId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** True when the head turn is blocked on a human decision (needs-me inbox). */
@@ -2412,32 +2691,36 @@ export declare const ControlThreadDetail: z.ZodObject<{
         createdAt: z.ZodString;
         updatedAt: z.ZodString;
     }, "strip", z.ZodTypeAny, {
+        state: "active" | "closed" | "trashed" | "purged";
+        createdAt: string;
         id: string;
         title: string | null;
-        state: "active" | "closed";
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
-        createdAt: string;
         repoRoot: string | null;
         workspaceMode: "in_place" | "isolated";
         eligibleHarnesses: string[];
+        trashedAt: string | null;
+        purgeAfter: string | null;
         runIds: string[];
         headRunId: string | null;
         needsHuman: boolean;
         updatedAt: string;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     }, {
-        id: string;
         createdAt: string;
+        id: string;
         updatedAt: string;
-        title?: string | null | undefined;
+        state?: "active" | "closed" | "trashed" | "purged" | undefined;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
-        state?: "active" | "closed" | undefined;
+        title?: string | null | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         repoRoot?: string | null | undefined;
         workspaceMode?: "in_place" | "isolated" | undefined;
         eligibleHarnesses?: string[] | undefined;
+        trashedAt?: string | null | undefined;
+        purgeAfter?: string | null | undefined;
         runIds?: string[] | undefined;
         headRunId?: string | null | undefined;
         needsHuman?: boolean | undefined;
@@ -2450,16 +2733,16 @@ export declare const ControlThreadDetail: z.ZodObject<{
         observedModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         state: z.ZodDefault<z.ZodEnum<["live", "stale", "rebound"]>>;
     }, "strip", z.ZodTypeAny, {
-        id: string;
+        harnessId: string;
         state: "live" | "stale" | "rebound";
+        id: string;
         threadId: string;
-        harnessId: string;
         observedModel: string | null;
         nativeSessionId: string | null;
     }, {
+        harnessId: string;
         id: string;
         threadId: string;
-        harnessId: string;
         state?: "live" | "stale" | "rebound" | undefined;
         observedModel?: string | null | undefined;
         nativeSessionId?: string | null | undefined;
@@ -2475,7 +2758,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
         prompt: z.ZodDefault<z.ZodString>;
         /** Embedded run card (outcome/state) so the chat renders without N+1 fetches. */
         run: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-            state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted", "exhausted", "not_converged", "stuck_no_progress"]>;
+            state: z.ZodEnum<["queued", "running", "blocked", "succeeded", "no_op", "ungated", "review_not_run", "failed", "cancelled", "interrupted_unknown", "cost_unverifiable", "exhausted_overshoot", "exhausted", "not_converged", "stuck_no_progress"]>;
             mode: z.ZodOptional<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>>;
             strategy: z.ZodOptional<z.ZodNullable<z.ZodEnum<["race", "attempts", "until_clean", "swarm", "create"]>>>;
             n: z.ZodOptional<z.ZodNumber>;
@@ -2499,18 +2782,16 @@ export declare const ControlThreadDetail: z.ZodObject<{
                 adopted: z.ZodDefault<z.ZodNullable<z.ZodBoolean>>;
                 /** Honest application state (decoupled from clean-terminal). */
                 applyState: z.ZodDefault<z.ZodEnum<["not_applied", "applied", "applied_review_blocked", "reverted"]>>;
-                /** Tree SHA before this turn mutated the in-place tree (revert restore target). */
                 preTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-                /** Tree SHA right after this turn's mutation (revert divergence fence: refuse
-                 * to revert if the working tree has diverged from this since). */
                 postTurnSha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                revertAnchorId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
                 /** Revert metadata is available (the turn mutated the live tree in place and
-                 * pre/post-turn snapshots were recorded), so a Revert affordance may be offered.
+                 * an external patch anchor was recorded), so a Revert affordance may be offered.
                  * This is NOT a live-safe guarantee: the server re-checks tree divergence at
                  * revert time and refuses (fail loud) if the working tree changed since. */
                 revertable: z.ZodDefault<z.ZodBoolean>;
             }, "strip", z.ZodTypeAny, {
-                kind: "plan" | "none" | "patch" | "report" | "answer";
+                kind: "plan" | "none" | "patch" | "answer" | "report";
                 diffStat: {
                     files: number;
                     additions: number;
@@ -2521,9 +2802,10 @@ export declare const ControlThreadDetail: z.ZodObject<{
                 applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
                 preTurnSha: string | null;
                 postTurnSha: string | null;
+                revertAnchorId: string | null;
                 revertable: boolean;
             }, {
-                kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+                kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
                 diffStat?: {
                     files: number;
                     additions: number;
@@ -2534,6 +2816,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
                 applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
                 preTurnSha?: string | null | undefined;
                 postTurnSha?: string | null | undefined;
+                revertAnchorId?: string | null | undefined;
                 revertable?: boolean | undefined;
             }>>;
             spendUsd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -2541,11 +2824,10 @@ export declare const ControlThreadDetail: z.ZodObject<{
             waitingOnUser: z.ZodDefault<z.ZodBoolean>;
             finishedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         }, "strip", z.ZodTypeAny, {
-            state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
-            finishedAt: string | null;
+            state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
             outputReadyState: "pending" | "finalizing" | "ready" | "diagnostic";
             result: {
-                kind: "plan" | "none" | "patch" | "report" | "answer";
+                kind: "plan" | "none" | "patch" | "answer" | "report";
                 diffStat: {
                     files: number;
                     additions: number;
@@ -2556,23 +2838,24 @@ export declare const ControlThreadDetail: z.ZodObject<{
                 applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
                 preTurnSha: string | null;
                 postTurnSha: string | null;
+                revertAnchorId: string | null;
                 revertable: boolean;
             };
             waitingOnUser: boolean;
+            finishedAt: string | null;
             mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
             n?: number | undefined;
             strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
             spendUsd?: number | null | undefined;
         }, {
-            state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+            state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
             mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
             n?: number | undefined;
-            finishedAt?: string | null | undefined;
             strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
             spendUsd?: number | null | undefined;
             outputReadyState?: "pending" | "finalizing" | "ready" | "diagnostic" | undefined;
             result?: {
-                kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+                kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
                 diffStat?: {
                     files: number;
                     additions: number;
@@ -2583,9 +2866,11 @@ export declare const ControlThreadDetail: z.ZodObject<{
                 applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
                 preTurnSha?: string | null | undefined;
                 postTurnSha?: string | null | undefined;
+                revertAnchorId?: string | null | undefined;
                 revertable?: boolean | undefined;
             } | undefined;
             waitingOnUser?: boolean | undefined;
+            finishedAt?: string | null | undefined;
         }>>>;
         /** Why this turn has NO run (enqueue/preflight refusal, e.g. the trust
          * gate) — surfaces render it as an inline failure card with the remedy;
@@ -2611,20 +2896,19 @@ export declare const ControlThreadDetail: z.ZodObject<{
         }>>>;
         createdAt: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        id: string;
         kind: "initial" | "followup" | "decision";
+        createdAt: string;
+        id: string;
         prompt: string;
         planRunId: string | null;
         runId: string | null;
         threadId: string;
         parentRunId: string | null;
-        createdAt: string;
         run: {
-            state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
-            finishedAt: string | null;
+            state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
             outputReadyState: "pending" | "finalizing" | "ready" | "diagnostic";
             result: {
-                kind: "plan" | "none" | "patch" | "report" | "answer";
+                kind: "plan" | "none" | "patch" | "answer" | "report";
                 diffStat: {
                     files: number;
                     additions: number;
@@ -2635,9 +2919,11 @@ export declare const ControlThreadDetail: z.ZodObject<{
                 applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
                 preTurnSha: string | null;
                 postTurnSha: string | null;
+                revertAnchorId: string | null;
                 revertable: boolean;
             };
             waitingOnUser: boolean;
+            finishedAt: string | null;
             mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
             n?: number | undefined;
             strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
@@ -2650,24 +2936,23 @@ export declare const ControlThreadDetail: z.ZodObject<{
             failedAt: string;
         } | null;
     }, {
+        createdAt: string;
         id: string;
         threadId: string;
-        createdAt: string;
         kind?: "initial" | "followup" | "decision" | undefined;
         prompt?: string | undefined;
         planRunId?: string | null | undefined;
         runId?: string | null | undefined;
         parentRunId?: string | null | undefined;
         run?: {
-            state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+            state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
             mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
             n?: number | undefined;
-            finishedAt?: string | null | undefined;
             strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
             spendUsd?: number | null | undefined;
             outputReadyState?: "pending" | "finalizing" | "ready" | "diagnostic" | undefined;
             result?: {
-                kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+                kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
                 diffStat?: {
                     files: number;
                     additions: number;
@@ -2678,9 +2963,11 @@ export declare const ControlThreadDetail: z.ZodObject<{
                 applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
                 preTurnSha?: string | null | undefined;
                 postTurnSha?: string | null | undefined;
+                revertAnchorId?: string | null | undefined;
                 revertable?: boolean | undefined;
             } | undefined;
             waitingOnUser?: boolean | undefined;
+            finishedAt?: string | null | undefined;
         } | null | undefined;
         enqueueError?: {
             message: string;
@@ -2691,15 +2978,17 @@ export declare const ControlThreadDetail: z.ZodObject<{
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     thread: {
+        state: "active" | "closed" | "trashed" | "purged";
+        createdAt: string;
         id: string;
         title: string | null;
-        state: "active" | "closed";
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
-        createdAt: string;
         repoRoot: string | null;
         workspaceMode: "in_place" | "isolated";
         eligibleHarnesses: string[];
+        trashedAt: string | null;
+        purgeAfter: string | null;
         runIds: string[];
         headRunId: string | null;
         needsHuman: boolean;
@@ -2707,28 +2996,27 @@ export declare const ControlThreadDetail: z.ZodObject<{
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     };
     sessions: {
-        id: string;
+        harnessId: string;
         state: "live" | "stale" | "rebound";
+        id: string;
         threadId: string;
-        harnessId: string;
         observedModel: string | null;
         nativeSessionId: string | null;
     }[];
     turns: {
-        id: string;
         kind: "initial" | "followup" | "decision";
+        createdAt: string;
+        id: string;
         prompt: string;
         planRunId: string | null;
         runId: string | null;
         threadId: string;
         parentRunId: string | null;
-        createdAt: string;
         run: {
-            state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
-            finishedAt: string | null;
+            state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
             outputReadyState: "pending" | "finalizing" | "ready" | "diagnostic";
             result: {
-                kind: "plan" | "none" | "patch" | "report" | "answer";
+                kind: "plan" | "none" | "patch" | "answer" | "report";
                 diffStat: {
                     files: number;
                     additions: number;
@@ -2739,9 +3027,11 @@ export declare const ControlThreadDetail: z.ZodObject<{
                 applyState: "not_applied" | "applied" | "applied_review_blocked" | "reverted";
                 preTurnSha: string | null;
                 postTurnSha: string | null;
+                revertAnchorId: string | null;
                 revertable: boolean;
             };
             waitingOnUser: boolean;
+            finishedAt: string | null;
             mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
             n?: number | undefined;
             strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
@@ -2756,48 +3046,49 @@ export declare const ControlThreadDetail: z.ZodObject<{
     }[];
 }, {
     thread: {
-        id: string;
         createdAt: string;
+        id: string;
         updatedAt: string;
-        title?: string | null | undefined;
+        state?: "active" | "closed" | "trashed" | "purged" | undefined;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
-        state?: "active" | "closed" | undefined;
+        title?: string | null | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         repoRoot?: string | null | undefined;
         workspaceMode?: "in_place" | "isolated" | undefined;
         eligibleHarnesses?: string[] | undefined;
+        trashedAt?: string | null | undefined;
+        purgeAfter?: string | null | undefined;
         runIds?: string[] | undefined;
         headRunId?: string | null | undefined;
         needsHuman?: boolean | undefined;
     };
     sessions?: {
+        harnessId: string;
         id: string;
         threadId: string;
-        harnessId: string;
         state?: "live" | "stale" | "rebound" | undefined;
         observedModel?: string | null | undefined;
         nativeSessionId?: string | null | undefined;
     }[] | undefined;
     turns?: {
+        createdAt: string;
         id: string;
         threadId: string;
-        createdAt: string;
         kind?: "initial" | "followup" | "decision" | undefined;
         prompt?: string | undefined;
         planRunId?: string | null | undefined;
         runId?: string | null | undefined;
         parentRunId?: string | null | undefined;
         run?: {
-            state: "cancelled" | "no_op" | "ungated" | "review_not_run" | "blocked" | "not_converged" | "stuck_no_progress" | "failed" | "exhausted" | "running" | "queued" | "succeeded" | "interrupted";
+            state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "no_op" | "ungated" | "review_not_run" | "blocked" | "cost_unverifiable" | "exhausted_overshoot" | "exhausted" | "not_converged" | "stuck_no_progress" | "queued" | "succeeded";
             mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
             n?: number | undefined;
-            finishedAt?: string | null | undefined;
             strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
             spendUsd?: number | null | undefined;
             outputReadyState?: "pending" | "finalizing" | "ready" | "diagnostic" | undefined;
             result?: {
-                kind?: "plan" | "none" | "patch" | "report" | "answer" | undefined;
+                kind?: "plan" | "none" | "patch" | "answer" | "report" | undefined;
                 diffStat?: {
                     files: number;
                     additions: number;
@@ -2808,9 +3099,11 @@ export declare const ControlThreadDetail: z.ZodObject<{
                 applyState?: "not_applied" | "applied" | "applied_review_blocked" | "reverted" | undefined;
                 preTurnSha?: string | null | undefined;
                 postTurnSha?: string | null | undefined;
+                revertAnchorId?: string | null | undefined;
                 revertable?: boolean | undefined;
             } | undefined;
             waitingOnUser?: boolean | undefined;
+            finishedAt?: string | null | undefined;
         } | null | undefined;
         enqueueError?: {
             message: string;
@@ -2833,35 +3126,35 @@ export declare const HarnessStatusDto: z.ZodObject<{
         provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
         capability_profile: z.ZodDefault<z.ZodObject<{
             auth: z.ZodDefault<z.ZodObject<{
-                supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-                preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+                supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+                preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
                 credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-                    source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                    source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
                     kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
                     relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
                 }, "strip", z.ZodTypeAny, {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                 }, {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                 }>, "many">>;
             }, "strip", z.ZodTypeAny, {
-                supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-                preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+                supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+                preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
                 credential_transports: {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                 }[];
             }, {
-                supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-                preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+                supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+                preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
                 credential_transports?: {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                 }[] | undefined;
             }>>;
@@ -2879,14 +3172,32 @@ export declare const HarnessStatusDto: z.ZodObject<{
             }, {
                 supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
             }>>;
-            image_input: z.ZodDefault<z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>>;
+            attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                kind: z.ZodEnum<["image", "file"]>;
+                mime_types: z.ZodArray<z.ZodString, "many">;
+                max_bytes: z.ZodNumber;
+                max_count: z.ZodNumber;
+                transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
+            }, "strict", z.ZodTypeAny, {
+                kind: "image" | "file";
+                mime_types: string[];
+                max_bytes: number;
+                max_count: number;
+                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+            }, {
+                kind: "image" | "file";
+                mime_types: string[];
+                max_bytes: number;
+                max_count: number;
+                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+            }>, "many">>;
         }, "strip", z.ZodTypeAny, {
             auth: {
-                supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-                preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+                supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+                preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
                 credential_transports: {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                 }[];
             };
@@ -2896,14 +3207,20 @@ export declare const HarnessStatusDto: z.ZodObject<{
             isolation: {
                 supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
             };
-            image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+            attachment_inputs: {
+                kind: "image" | "file";
+                mime_types: string[];
+                max_bytes: number;
+                max_count: number;
+                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+            }[];
         }, {
             auth?: {
-                supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-                preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+                supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+                preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
                 credential_transports?: {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                 }[] | undefined;
             } | undefined;
@@ -2913,11 +3230,18 @@ export declare const HarnessStatusDto: z.ZodObject<{
             isolation?: {
                 supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
             } | undefined;
-            image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+            attachment_inputs?: {
+                kind: "image" | "file";
+                mime_types: string[];
+                max_bytes: number;
+                max_count: number;
+                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+            }[] | undefined;
         }>>;
         capabilities: z.ZodObject<{
             plan: z.ZodDefault<z.ZodBoolean>;
             implement: z.ZodDefault<z.ZodBoolean>;
+            implementation_transport: z.ZodDefault<z.ZodEnum<["workspace", "git_patch_envelope"]>>;
             create_from_scratch: z.ZodDefault<z.ZodBoolean>;
             review: z.ZodDefault<z.ZodBoolean>;
             verify: z.ZodDefault<z.ZodBoolean>;
@@ -2941,6 +3265,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             review: boolean;
             verify: boolean;
             synthesize: boolean;
+            implementation_transport: "workspace" | "git_patch_envelope";
             read_files: boolean;
             browser_tool: boolean;
             web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -2959,6 +3284,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             review?: boolean | undefined;
             verify?: boolean | undefined;
             synthesize?: boolean | undefined;
+            implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
             read_files?: boolean | undefined;
             browser_tool?: boolean | undefined;
             web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -2973,17 +3299,17 @@ export declare const HarnessStatusDto: z.ZodObject<{
         auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
         access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        id: string;
         kind: "local_cli" | "remote_api" | "fake";
+        id: string;
         display_name: string;
         provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         capability_profile: {
             auth: {
-                supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-                preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+                supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+                preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
                 credential_transports: {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                 }[];
             };
@@ -2993,7 +3319,13 @@ export declare const HarnessStatusDto: z.ZodObject<{
             isolation: {
                 supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
             };
-            image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+            attachment_inputs: {
+                kind: "image" | "file";
+                mime_types: string[];
+                max_bytes: number;
+                max_count: number;
+                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+            }[];
         };
         capabilities: {
             plan: boolean;
@@ -3003,6 +3335,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             review: boolean;
             verify: boolean;
             synthesize: boolean;
+            implementation_transport: "workspace" | "git_patch_envelope";
             read_files: boolean;
             browser_tool: boolean;
             web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -3019,8 +3352,8 @@ export declare const HarnessStatusDto: z.ZodObject<{
         version?: string | undefined;
         adapter_version?: string | undefined;
     }, {
-        id: string;
         kind: "local_cli" | "remote_api" | "fake";
+        id: string;
         display_name: string;
         capabilities: {
             plan?: boolean | undefined;
@@ -3030,6 +3363,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             review?: boolean | undefined;
             verify?: boolean | undefined;
             synthesize?: boolean | undefined;
+            implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
             read_files?: boolean | undefined;
             browser_tool?: boolean | undefined;
             web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -3046,11 +3380,11 @@ export declare const HarnessStatusDto: z.ZodObject<{
         provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
         capability_profile?: {
             auth?: {
-                supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-                preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+                supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+                preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
                 credential_transports?: {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                 }[] | undefined;
             } | undefined;
@@ -3060,7 +3394,13 @@ export declare const HarnessStatusDto: z.ZodObject<{
             isolation?: {
                 supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
             } | undefined;
-            image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+            attachment_inputs?: {
+                kind: "image" | "file";
+                mime_types: string[];
+                max_bytes: number;
+                max_count: number;
+                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+            }[] | undefined;
         } | undefined;
         auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
         access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
@@ -3084,6 +3424,22 @@ export declare const HarnessStatusDto: z.ZodObject<{
         duration_ms?: number | undefined;
     }>, "many">>;
     reasons: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    authSources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+        availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+        verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+        detail: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }, {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }>, "many">>;
     /** The user's configured per-harness default model, if any. */
     configuredModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     /** Strict truth-source check of `configuredModel`: null when no model
@@ -3100,7 +3456,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
         message?: string | null | undefined;
     }>>>;
 }, "strip", z.ZodTypeAny, {
-    status: "ok" | "degraded" | "unavailable";
+    status: "unavailable" | "ok" | "degraded";
     id: string;
     checks: {
         status: "pass" | "fail" | "skip";
@@ -3112,22 +3468,28 @@ export declare const HarnessStatusDto: z.ZodObject<{
     enabledIntents: string[];
     disabledIntents: string[];
     configuredModel: string | null;
+    authSources: {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }[];
     configuredModelCheck: {
         message: string | null;
         status: "ok" | "rejected";
     } | null;
     manifest?: {
-        id: string;
         kind: "local_cli" | "remote_api" | "fake";
+        id: string;
         display_name: string;
         provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         capability_profile: {
             auth: {
-                supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-                preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+                supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+                preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
                 credential_transports: {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                 }[];
             };
@@ -3137,7 +3499,13 @@ export declare const HarnessStatusDto: z.ZodObject<{
             isolation: {
                 supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
             };
-            image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+            attachment_inputs: {
+                kind: "image" | "file";
+                mime_types: string[];
+                max_bytes: number;
+                max_count: number;
+                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+            }[];
         };
         capabilities: {
             plan: boolean;
@@ -3147,6 +3515,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             review: boolean;
             verify: boolean;
             synthesize: boolean;
+            implementation_transport: "workspace" | "git_patch_envelope";
             read_files: boolean;
             browser_tool: boolean;
             web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -3164,7 +3533,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
         adapter_version?: string | undefined;
     } | null | undefined;
 }, {
-    status: "ok" | "degraded" | "unavailable";
+    status: "unavailable" | "ok" | "degraded";
     id: string;
     checks?: {
         status: "pass" | "fail" | "skip";
@@ -3174,8 +3543,8 @@ export declare const HarnessStatusDto: z.ZodObject<{
     }[] | undefined;
     reasons?: string[] | undefined;
     manifest?: {
-        id: string;
         kind: "local_cli" | "remote_api" | "fake";
+        id: string;
         display_name: string;
         capabilities: {
             plan?: boolean | undefined;
@@ -3185,6 +3554,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             review?: boolean | undefined;
             verify?: boolean | undefined;
             synthesize?: boolean | undefined;
+            implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
             read_files?: boolean | undefined;
             browser_tool?: boolean | undefined;
             web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -3201,11 +3571,11 @@ export declare const HarnessStatusDto: z.ZodObject<{
         provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
         capability_profile?: {
             auth?: {
-                supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-                preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+                supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+                preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
                 credential_transports?: {
-                    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                     relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                 }[] | undefined;
             } | undefined;
@@ -3215,7 +3585,13 @@ export declare const HarnessStatusDto: z.ZodObject<{
             isolation?: {
                 supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
             } | undefined;
-            image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+            attachment_inputs?: {
+                kind: "image" | "file";
+                mime_types: string[];
+                max_bytes: number;
+                max_count: number;
+                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+            }[] | undefined;
         } | undefined;
         auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
         access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
@@ -3223,6 +3599,12 @@ export declare const HarnessStatusDto: z.ZodObject<{
     enabledIntents?: string[] | undefined;
     disabledIntents?: string[] | undefined;
     configuredModel?: string | null | undefined;
+    authSources?: {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }[] | undefined;
     configuredModelCheck?: {
         status: "ok" | "rejected";
         message?: string | null | undefined;
@@ -3242,35 +3624,35 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
             capability_profile: z.ZodDefault<z.ZodObject<{
                 auth: z.ZodDefault<z.ZodObject<{
-                    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-                    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+                    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+                    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
                     credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-                        source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
                         kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
                         relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
                     }, "strip", z.ZodTypeAny, {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                     }, {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                     }>, "many">>;
                 }, "strip", z.ZodTypeAny, {
-                    supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-                    preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+                    supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+                    preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
                     credential_transports: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                     }[];
                 }, {
-                    supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-                    preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+                    supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+                    preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
                     credential_transports?: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                     }[] | undefined;
                 }>>;
@@ -3288,14 +3670,32 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 }, {
                     supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
                 }>>;
-                image_input: z.ZodDefault<z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>>;
+                attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    kind: z.ZodEnum<["image", "file"]>;
+                    mime_types: z.ZodArray<z.ZodString, "many">;
+                    max_bytes: z.ZodNumber;
+                    max_count: z.ZodNumber;
+                    transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
+                }, "strict", z.ZodTypeAny, {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }, {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }>, "many">>;
             }, "strip", z.ZodTypeAny, {
                 auth: {
-                    supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-                    preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+                    supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+                    preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
                     credential_transports: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                     }[];
                 };
@@ -3305,14 +3705,20 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 isolation: {
                     supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
                 };
-                image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+                attachment_inputs: {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }[];
             }, {
                 auth?: {
-                    supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-                    preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+                    supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+                    preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
                     credential_transports?: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                     }[] | undefined;
                 } | undefined;
@@ -3322,11 +3728,18 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 isolation?: {
                     supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
                 } | undefined;
-                image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+                attachment_inputs?: {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }[] | undefined;
             }>>;
             capabilities: z.ZodObject<{
                 plan: z.ZodDefault<z.ZodBoolean>;
                 implement: z.ZodDefault<z.ZodBoolean>;
+                implementation_transport: z.ZodDefault<z.ZodEnum<["workspace", "git_patch_envelope"]>>;
                 create_from_scratch: z.ZodDefault<z.ZodBoolean>;
                 review: z.ZodDefault<z.ZodBoolean>;
                 verify: z.ZodDefault<z.ZodBoolean>;
@@ -3350,6 +3763,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 review: boolean;
                 verify: boolean;
                 synthesize: boolean;
+                implementation_transport: "workspace" | "git_patch_envelope";
                 read_files: boolean;
                 browser_tool: boolean;
                 web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -3368,6 +3782,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 review?: boolean | undefined;
                 verify?: boolean | undefined;
                 synthesize?: boolean | undefined;
+                implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
                 read_files?: boolean | undefined;
                 browser_tool?: boolean | undefined;
                 web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -3382,17 +3797,17 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
             access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
         }, "strip", z.ZodTypeAny, {
-            id: string;
             kind: "local_cli" | "remote_api" | "fake";
+            id: string;
             display_name: string;
             provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
             capability_profile: {
                 auth: {
-                    supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-                    preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+                    supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+                    preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
                     credential_transports: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                     }[];
                 };
@@ -3402,7 +3817,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 isolation: {
                     supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
                 };
-                image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+                attachment_inputs: {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }[];
             };
             capabilities: {
                 plan: boolean;
@@ -3412,6 +3833,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 review: boolean;
                 verify: boolean;
                 synthesize: boolean;
+                implementation_transport: "workspace" | "git_patch_envelope";
                 read_files: boolean;
                 browser_tool: boolean;
                 web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -3428,8 +3850,8 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             version?: string | undefined;
             adapter_version?: string | undefined;
         }, {
-            id: string;
             kind: "local_cli" | "remote_api" | "fake";
+            id: string;
             display_name: string;
             capabilities: {
                 plan?: boolean | undefined;
@@ -3439,6 +3861,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 review?: boolean | undefined;
                 verify?: boolean | undefined;
                 synthesize?: boolean | undefined;
+                implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
                 read_files?: boolean | undefined;
                 browser_tool?: boolean | undefined;
                 web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -3455,11 +3878,11 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
             capability_profile?: {
                 auth?: {
-                    supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-                    preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+                    supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+                    preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
                     credential_transports?: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                     }[] | undefined;
                 } | undefined;
@@ -3469,7 +3892,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 isolation?: {
                     supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
                 } | undefined;
-                image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+                attachment_inputs?: {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }[] | undefined;
             } | undefined;
             auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
             access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
@@ -3493,6 +3922,22 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             duration_ms?: number | undefined;
         }>, "many">>;
         reasons: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        authSources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+            availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+            verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            detail?: string | undefined;
+        }, {
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            detail?: string | undefined;
+        }>, "many">>;
         /** The user's configured per-harness default model, if any. */
         configuredModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** Strict truth-source check of `configuredModel`: null when no model
@@ -3509,7 +3954,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             message?: string | null | undefined;
         }>>>;
     }, "strip", z.ZodTypeAny, {
-        status: "ok" | "degraded" | "unavailable";
+        status: "unavailable" | "ok" | "degraded";
         id: string;
         checks: {
             status: "pass" | "fail" | "skip";
@@ -3521,22 +3966,28 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         enabledIntents: string[];
         disabledIntents: string[];
         configuredModel: string | null;
+        authSources: {
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            detail?: string | undefined;
+        }[];
         configuredModelCheck: {
             message: string | null;
             status: "ok" | "rejected";
         } | null;
         manifest?: {
-            id: string;
             kind: "local_cli" | "remote_api" | "fake";
+            id: string;
             display_name: string;
             provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
             capability_profile: {
                 auth: {
-                    supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-                    preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+                    supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+                    preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
                     credential_transports: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                     }[];
                 };
@@ -3546,7 +3997,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 isolation: {
                     supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
                 };
-                image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+                attachment_inputs: {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }[];
             };
             capabilities: {
                 plan: boolean;
@@ -3556,6 +4013,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 review: boolean;
                 verify: boolean;
                 synthesize: boolean;
+                implementation_transport: "workspace" | "git_patch_envelope";
                 read_files: boolean;
                 browser_tool: boolean;
                 web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -3573,7 +4031,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             adapter_version?: string | undefined;
         } | null | undefined;
     }, {
-        status: "ok" | "degraded" | "unavailable";
+        status: "unavailable" | "ok" | "degraded";
         id: string;
         checks?: {
             status: "pass" | "fail" | "skip";
@@ -3583,8 +4041,8 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         }[] | undefined;
         reasons?: string[] | undefined;
         manifest?: {
-            id: string;
             kind: "local_cli" | "remote_api" | "fake";
+            id: string;
             display_name: string;
             capabilities: {
                 plan?: boolean | undefined;
@@ -3594,6 +4052,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 review?: boolean | undefined;
                 verify?: boolean | undefined;
                 synthesize?: boolean | undefined;
+                implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
                 read_files?: boolean | undefined;
                 browser_tool?: boolean | undefined;
                 web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -3610,11 +4069,11 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
             capability_profile?: {
                 auth?: {
-                    supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-                    preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+                    supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+                    preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
                     credential_transports?: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                     }[] | undefined;
                 } | undefined;
@@ -3624,7 +4083,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 isolation?: {
                     supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
                 } | undefined;
-                image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+                attachment_inputs?: {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }[] | undefined;
             } | undefined;
             auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
             access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
@@ -3632,6 +4097,12 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         enabledIntents?: string[] | undefined;
         disabledIntents?: string[] | undefined;
         configuredModel?: string | null | undefined;
+        authSources?: {
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            detail?: string | undefined;
+        }[] | undefined;
         configuredModelCheck?: {
             status: "ok" | "rejected";
             message?: string | null | undefined;
@@ -3639,7 +4110,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     harnesses: {
-        status: "ok" | "degraded" | "unavailable";
+        status: "unavailable" | "ok" | "degraded";
         id: string;
         checks: {
             status: "pass" | "fail" | "skip";
@@ -3651,22 +4122,28 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         enabledIntents: string[];
         disabledIntents: string[];
         configuredModel: string | null;
+        authSources: {
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            detail?: string | undefined;
+        }[];
         configuredModelCheck: {
             message: string | null;
             status: "ok" | "rejected";
         } | null;
         manifest?: {
-            id: string;
             kind: "local_cli" | "remote_api" | "fake";
+            id: string;
             display_name: string;
             provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
             capability_profile: {
                 auth: {
-                    supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-                    preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+                    supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+                    preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
                     credential_transports: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
                     }[];
                 };
@@ -3676,7 +4153,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 isolation: {
                     supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
                 };
-                image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+                attachment_inputs: {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }[];
             };
             capabilities: {
                 plan: boolean;
@@ -3686,6 +4169,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 review: boolean;
                 verify: boolean;
                 synthesize: boolean;
+                implementation_transport: "workspace" | "git_patch_envelope";
                 read_files: boolean;
                 browser_tool: boolean;
                 web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -3705,7 +4189,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
     }[];
 }, {
     harnesses?: {
-        status: "ok" | "degraded" | "unavailable";
+        status: "unavailable" | "ok" | "degraded";
         id: string;
         checks?: {
             status: "pass" | "fail" | "skip";
@@ -3715,8 +4199,8 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         }[] | undefined;
         reasons?: string[] | undefined;
         manifest?: {
-            id: string;
             kind: "local_cli" | "remote_api" | "fake";
+            id: string;
             display_name: string;
             capabilities: {
                 plan?: boolean | undefined;
@@ -3726,6 +4210,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 review?: boolean | undefined;
                 verify?: boolean | undefined;
                 synthesize?: boolean | undefined;
+                implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
                 read_files?: boolean | undefined;
                 browser_tool?: boolean | undefined;
                 web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -3742,11 +4227,11 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
             capability_profile?: {
                 auth?: {
-                    supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-                    preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+                    supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+                    preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
                     credential_transports?: {
-                        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
                     }[] | undefined;
                 } | undefined;
@@ -3756,7 +4241,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 isolation?: {
                     supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
                 } | undefined;
-                image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+                attachment_inputs?: {
+                    kind: "image" | "file";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+                }[] | undefined;
             } | undefined;
             auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
             access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
@@ -3764,6 +4255,12 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         enabledIntents?: string[] | undefined;
         disabledIntents?: string[] | undefined;
         configuredModel?: string | null | undefined;
+        authSources?: {
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            detail?: string | undefined;
+        }[] | undefined;
         configuredModelCheck?: {
             status: "ok" | "rejected";
             message?: string | null | undefined;
@@ -3799,13 +4296,13 @@ export declare const ControlHarnessModelsResponse: z.ZodObject<{
     verifiedAgainst: z.ZodDefault<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     source: "none" | "api" | "manifest";
+    harnessId: string;
     verifiedAgainst: string | null;
     models: {
         id: string;
         label: string | null;
         context_window: number | null;
     }[];
-    harnessId: string;
 }, {
     source: "none" | "api" | "manifest";
     harnessId: string;
@@ -3819,7 +4316,6 @@ export declare const ControlHarnessModelsResponse: z.ZodObject<{
 export type ControlHarnessModelsResponse = z.infer<typeof ControlHarnessModelsResponse>;
 export declare const ControlSettingsSnapshot: z.ZodObject<{
     sources: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    defaultPortfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
     /** How long a run waits for an interactive answer before a benign decline. */
     interactionTimeoutMs: z.ZodDefault<z.ZodNumber>;
     routing: z.ZodDefault<z.ZodObject<{
@@ -3828,25 +4324,79 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         eligibleHarnesses: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         envInheritance: z.ZodDefault<z.ZodEnum<["mirror_native", "clean"]>>;
         authPreference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+        goal: z.ZodDefault<z.ZodEnum<["auto", "quality", "economy"]>>;
+        paidFallback: z.ZodDefault<z.ZodEnum<["never", "when_unavailable", "allowed_within_cap"]>>;
+        qualityTiers: z.ZodDefault<z.ZodRecord<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, z.ZodArray<z.ZodArray<z.ZodObject<{
+            harness: z.ZodString;
+            model: z.ZodString;
+            effort: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+        }, "strict", z.ZodTypeAny, {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }, {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }>, "many">, "many">>>;
     }, "strip", z.ZodTypeAny, {
+        goal: "auto" | "quality" | "economy";
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
         eligibleHarnesses: string[];
         defaultPolicy: "auto" | "primary";
         envInheritance: "mirror_native" | "clean";
+        paidFallback: "never" | "when_unavailable" | "allowed_within_cap";
+        qualityTiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>>;
     }, {
+        goal?: "auto" | "quality" | "economy" | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         eligibleHarnesses?: string[] | undefined;
         defaultPolicy?: "auto" | "primary" | undefined;
         envInheritance?: "mirror_native" | "clean" | undefined;
+        paidFallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+        qualityTiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>> | undefined;
     }>>;
     budget: z.ZodDefault<z.ZodObject<{
-        maxUsdPerRun: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        paidBudgetPerRun: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"unlimited">;
+        }, "strict", z.ZodTypeAny, {
+            kind: "unlimited";
+        }, {
+            kind: "unlimited";
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"finite">;
+            maxUsd: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            kind: "finite";
+            maxUsd: number;
+        }, {
+            kind: "finite";
+            maxUsd: number;
+        }>]>>;
     }, "strip", z.ZodTypeAny, {
-        maxUsdPerRun: number | null;
+        paidBudgetPerRun: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
     }, {
-        maxUsdPerRun?: number | null | undefined;
+        paidBudgetPerRun?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
     }>>;
     runtime: z.ZodDefault<z.ZodObject<{
         reviewerTimeoutMs: z.ZodDefault<z.ZodNumber>;
@@ -3887,7 +4437,6 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         effort: z.ZodDefault<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
         maxTurns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
         maxRounds: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
-        maxUsd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
         toolsAllow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         toolsDeny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         fallbackModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -3897,7 +4446,6 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         web: "off" | "auto" | "cached" | "live";
         enabled: boolean;
         effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
-        maxUsd: number | null;
         authPreference: "auto" | "subscription" | "api_key";
         defaultModel: string | null;
         maxTurns: number | null;
@@ -3909,7 +4457,6 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-        maxUsd?: number | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
@@ -3923,7 +4470,6 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         web: "off" | "auto" | "cached" | "live";
         enabled: boolean;
         effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
-        maxUsd: number | null;
         authPreference: "auto" | "subscription" | "api_key";
         defaultModel: string | null;
         maxTurns: number | null;
@@ -3933,14 +4479,26 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         fallbackModel: string | null;
     }>;
     budget: {
-        maxUsdPerRun: number | null;
+        paidBudgetPerRun: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
     };
     routing: {
+        goal: "auto" | "quality" | "economy";
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
         eligibleHarnesses: string[];
         defaultPolicy: "auto" | "primary";
         envInheritance: "mirror_native" | "clean";
+        paidFallback: "never" | "when_unavailable" | "allowed_within_cap";
+        qualityTiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>>;
     };
     runtime: {
         reviewerTimeoutMs: number;
@@ -3952,14 +4510,12 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         };
     };
     sources: string[];
-    defaultPortfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
     interactionTimeoutMs: number;
 }, {
     harnesses?: Record<string, {
         web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-        maxUsd?: number | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
@@ -3969,14 +4525,26 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         fallbackModel?: string | null | undefined;
     }> | undefined;
     budget?: {
-        maxUsdPerRun?: number | null | undefined;
+        paidBudgetPerRun?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
     } | undefined;
     routing?: {
+        goal?: "auto" | "quality" | "economy" | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         eligibleHarnesses?: string[] | undefined;
         defaultPolicy?: "auto" | "primary" | undefined;
         envInheritance?: "mirror_native" | "clean" | undefined;
+        paidFallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+        qualityTiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>> | undefined;
     } | undefined;
     runtime?: {
         reviewerTimeoutMs?: number | undefined;
@@ -3988,7 +4556,6 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         } | undefined;
     } | undefined;
     sources?: string[] | undefined;
-    defaultPortfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
     interactionTimeoutMs?: number | undefined;
 }>;
 export type ControlSettingsSnapshot = z.infer<typeof ControlSettingsSnapshot>;
@@ -4002,7 +4569,6 @@ export declare const ControlHarnessSettingsPatch: z.ZodObject<{
     effort: z.ZodOptional<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
     maxTurns: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     maxRounds: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-    maxUsd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     toolsAllow: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     toolsDeny: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     fallbackModel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -4012,7 +4578,6 @@ export declare const ControlHarnessSettingsPatch: z.ZodObject<{
     web?: "off" | "auto" | "cached" | "live" | undefined;
     enabled?: boolean | undefined;
     effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-    maxUsd?: number | null | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
     defaultModel?: string | null | undefined;
     maxTurns?: number | null | undefined;
@@ -4024,7 +4589,6 @@ export declare const ControlHarnessSettingsPatch: z.ZodObject<{
     web?: "off" | "auto" | "cached" | "live" | undefined;
     enabled?: boolean | undefined;
     effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-    maxUsd?: number | null | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
     defaultModel?: string | null | undefined;
     maxTurns?: number | null | undefined;
@@ -4034,15 +4598,43 @@ export declare const ControlHarnessSettingsPatch: z.ZodObject<{
     fallbackModel?: string | null | undefined;
 }>;
 export type ControlHarnessSettingsPatch = z.infer<typeof ControlHarnessSettingsPatch>;
-export declare const ControlSettingsUpdateRequest: z.ZodEffects<z.ZodObject<{
-    defaultPortfolio: z.ZodOptional<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
+export declare const ControlSettingsUpdateRequest: z.ZodObject<{
+    routingGoal: z.ZodOptional<z.ZodEnum<["auto", "quality", "economy"]>>;
+    paidFallback: z.ZodOptional<z.ZodEnum<["never", "when_unavailable", "allowed_within_cap"]>>;
+    qualityTiers: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, z.ZodArray<z.ZodArray<z.ZodObject<{
+        harness: z.ZodString;
+        model: z.ZodString;
+        effort: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+    }, "strict", z.ZodTypeAny, {
+        harness: string;
+        model: string;
+        effort: "low" | "medium" | "high" | "xhigh" | "max";
+    }, {
+        harness: string;
+        model: string;
+        effort: "low" | "medium" | "high" | "xhigh" | "max";
+    }>, "many">, "many">>>>;
     interactionTimeoutMs: z.ZodOptional<z.ZodNumber>;
     routingPolicy: z.ZodOptional<z.ZodEnum<["auto", "primary"]>>;
     primaryHarness: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     eligibleHarnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     envInheritance: z.ZodOptional<z.ZodEnum<["mirror_native", "clean"]>>;
-    maxUsdPerRun: z.ZodOptional<z.ZodNumber>;
-    clearMaxUsdPerRun: z.ZodOptional<z.ZodBoolean>;
+    paidBudgetPerRun: z.ZodOptional<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"unlimited">;
+    }, "strict", z.ZodTypeAny, {
+        kind: "unlimited";
+    }, {
+        kind: "unlimited";
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"finite">;
+        maxUsd: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        kind: "finite";
+        maxUsd: number;
+    }, {
+        kind: "finite";
+        maxUsd: number;
+    }>]>>;
     authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
     harnesses: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
@@ -4050,7 +4642,6 @@ export declare const ControlSettingsUpdateRequest: z.ZodEffects<z.ZodObject<{
         effort: z.ZodOptional<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
         maxTurns: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         maxRounds: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-        maxUsd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         toolsAllow: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         toolsDeny: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         fallbackModel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -4060,7 +4651,6 @@ export declare const ControlSettingsUpdateRequest: z.ZodEffects<z.ZodObject<{
         web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-        maxUsd?: number | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
@@ -4072,7 +4662,6 @@ export declare const ControlSettingsUpdateRequest: z.ZodEffects<z.ZodObject<{
         web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-        maxUsd?: number | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
@@ -4086,53 +4675,6 @@ export declare const ControlSettingsUpdateRequest: z.ZodEffects<z.ZodObject<{
         web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-        maxUsd?: number | null | undefined;
-        authPreference?: "auto" | "subscription" | "api_key" | undefined;
-        defaultModel?: string | null | undefined;
-        maxTurns?: number | null | undefined;
-        maxRounds?: number | null | undefined;
-        toolsAllow?: string[] | undefined;
-        toolsDeny?: string[] | undefined;
-        fallbackModel?: string | null | undefined;
-    }> | undefined;
-    primaryHarness?: string | null | undefined;
-    authPreference?: "auto" | "subscription" | "api_key" | undefined;
-    eligibleHarnesses?: string[] | undefined;
-    defaultPortfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-    interactionTimeoutMs?: number | undefined;
-    envInheritance?: "mirror_native" | "clean" | undefined;
-    maxUsdPerRun?: number | undefined;
-    routingPolicy?: "auto" | "primary" | undefined;
-    clearMaxUsdPerRun?: boolean | undefined;
-}, {
-    harnesses?: Record<string, {
-        web?: "off" | "auto" | "cached" | "live" | undefined;
-        enabled?: boolean | undefined;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-        maxUsd?: number | null | undefined;
-        authPreference?: "auto" | "subscription" | "api_key" | undefined;
-        defaultModel?: string | null | undefined;
-        maxTurns?: number | null | undefined;
-        maxRounds?: number | null | undefined;
-        toolsAllow?: string[] | undefined;
-        toolsDeny?: string[] | undefined;
-        fallbackModel?: string | null | undefined;
-    }> | undefined;
-    primaryHarness?: string | null | undefined;
-    authPreference?: "auto" | "subscription" | "api_key" | undefined;
-    eligibleHarnesses?: string[] | undefined;
-    defaultPortfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-    interactionTimeoutMs?: number | undefined;
-    envInheritance?: "mirror_native" | "clean" | undefined;
-    maxUsdPerRun?: number | undefined;
-    routingPolicy?: "auto" | "primary" | undefined;
-    clearMaxUsdPerRun?: boolean | undefined;
-}>, {
-    harnesses?: Record<string, {
-        web?: "off" | "auto" | "cached" | "live" | undefined;
-        enabled?: boolean | undefined;
-        effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-        maxUsd?: number | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
@@ -4142,20 +4684,29 @@ export declare const ControlSettingsUpdateRequest: z.ZodEffects<z.ZodObject<{
         fallbackModel?: string | null | undefined;
     }> | undefined;
     primaryHarness?: string | null | undefined;
+    routingGoal?: "auto" | "quality" | "economy" | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
     eligibleHarnesses?: string[] | undefined;
-    defaultPortfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
     interactionTimeoutMs?: number | undefined;
     envInheritance?: "mirror_native" | "clean" | undefined;
-    maxUsdPerRun?: number | undefined;
+    paidFallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+    qualityTiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+        harness: string;
+        model: string;
+        effort: "low" | "medium" | "high" | "xhigh" | "max";
+    }[][]>> | undefined;
+    paidBudgetPerRun?: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    } | undefined;
     routingPolicy?: "auto" | "primary" | undefined;
-    clearMaxUsdPerRun?: boolean | undefined;
 }, {
     harnesses?: Record<string, {
         web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-        maxUsd?: number | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
         defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
@@ -4165,62 +4716,24 @@ export declare const ControlSettingsUpdateRequest: z.ZodEffects<z.ZodObject<{
         fallbackModel?: string | null | undefined;
     }> | undefined;
     primaryHarness?: string | null | undefined;
+    routingGoal?: "auto" | "quality" | "economy" | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
     eligibleHarnesses?: string[] | undefined;
-    defaultPortfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
     interactionTimeoutMs?: number | undefined;
     envInheritance?: "mirror_native" | "clean" | undefined;
-    maxUsdPerRun?: number | undefined;
+    paidFallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+    qualityTiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+        harness: string;
+        model: string;
+        effort: "low" | "medium" | "high" | "xhigh" | "max";
+    }[][]>> | undefined;
+    paidBudgetPerRun?: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    } | undefined;
     routingPolicy?: "auto" | "primary" | undefined;
-    clearMaxUsdPerRun?: boolean | undefined;
 }>;
 export type ControlSettingsUpdateRequest = z.infer<typeof ControlSettingsUpdateRequest>;
-/** Secret list row: exactly what the store's list() can honestly produce
- * (the never-populated harnesses/env/description fields were retired in the
- * v0.15 triage). */
-export declare const SecretMetadata: z.ZodObject<{
-    name: z.ZodString;
-    backend: z.ZodEnum<["keychain", "file"]>;
-    present: z.ZodDefault<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-    name: string;
-    backend: "file" | "keychain";
-    present: boolean;
-}, {
-    name: string;
-    backend: "file" | "keychain";
-    present?: boolean | undefined;
-}>;
-export type SecretMetadata = z.infer<typeof SecretMetadata>;
-export declare const ControlSecretListResponse: z.ZodObject<{
-    backend: z.ZodEnum<["keychain", "file"]>;
-    secrets: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        backend: z.ZodEnum<["keychain", "file"]>;
-        present: z.ZodDefault<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        name: string;
-        backend: "file" | "keychain";
-        present: boolean;
-    }, {
-        name: string;
-        backend: "file" | "keychain";
-        present?: boolean | undefined;
-    }>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    backend: "file" | "keychain";
-    secrets: {
-        name: string;
-        backend: "file" | "keychain";
-        present: boolean;
-    }[];
-}, {
-    backend: "file" | "keychain";
-    secrets?: {
-        name: string;
-        backend: "file" | "keychain";
-        present?: boolean | undefined;
-    }[] | undefined;
-}>;
-export type ControlSecretListResponse = z.infer<typeof ControlSecretListResponse>;
 //# sourceMappingURL=control.d.ts.map