@claudexor/schema 1.0.0 → 2.0.0

package/dist/harness.d.ts

@@ -37,6 +37,7 @@ export type WebPolicySupport = z.infer<typeof WebPolicySupport>;
 export declare const HarnessCapabilities: z.ZodObject<{
     plan: z.ZodDefault<z.ZodBoolean>;
     implement: z.ZodDefault<z.ZodBoolean>;
+    implementation_transport: z.ZodDefault<z.ZodEnum<["workspace", "git_patch_envelope"]>>;
     create_from_scratch: z.ZodDefault<z.ZodBoolean>;
     review: z.ZodDefault<z.ZodBoolean>;
     /** Consumed by the Phase-3 FinalVerifier routing (gating pushes `verify`). */
@@ -103,6 +104,7 @@ export declare const HarnessCapabilities: z.ZodObject<{
     review: boolean;
     verify: boolean;
     synthesize: boolean;
+    implementation_transport: "workspace" | "git_patch_envelope";
     read_files: boolean;
     browser_tool: boolean;
     web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -121,6 +123,7 @@ export declare const HarnessCapabilities: z.ZodObject<{
     review?: boolean | undefined;
     verify?: boolean | undefined;
     synthesize?: boolean | undefined;
+    implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
     read_files?: boolean | undefined;
     browser_tool?: boolean | undefined;
     web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -133,56 +136,54 @@ export declare const HarnessCapabilities: z.ZodObject<{
     known_models_verified_against?: string | null | undefined;
 }>;
 export type HarnessCapabilities = z.infer<typeof HarnessCapabilities>;
-export declare const AuthSourceKind: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
-export type AuthSourceKind = z.infer<typeof AuthSourceKind>;
 export declare const CredentialTransportKind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
 export type CredentialTransportKind = z.infer<typeof CredentialTransportKind>;
 export declare const CredentialRelocation: z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>;
 export type CredentialRelocation = z.infer<typeof CredentialRelocation>;
 export declare const CredentialTransport: z.ZodObject<{
-    source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+    source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
     kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
     relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
     relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
 }, {
-    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
     relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
 }>;
 export type CredentialTransport = z.infer<typeof CredentialTransport>;
 export declare const AuthCapabilities: z.ZodDefault<z.ZodObject<{
-    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
     credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
         kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
         relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
     }, {
-        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-    preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+    supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+    preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
     credential_transports: {
-        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
     }[];
 }, {
-    supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-    preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+    supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+    preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
     credential_transports?: {
-        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
     }[] | undefined;
 }>>;
@@ -217,35 +218,35 @@ export type AccessControlCapabilities = z.infer<typeof AccessControlCapabilities
  */
 export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
     auth: z.ZodDefault<z.ZodObject<{
-        supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-        preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+        supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+        preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
         credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-            source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+            source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
             kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
             relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
         }, "strip", z.ZodTypeAny, {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
         }, {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-        preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+        supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+        preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
         credential_transports: {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
         }[];
     }, {
-        supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-        preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+        supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+        preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
         credential_transports?: {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
         }[] | undefined;
     }>>;
@@ -263,16 +264,33 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
     }, {
         supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
     }>>;
-    /** How the harness accepts image input (drives honest attach gating + the
-     *  per-adapter serializer). `none` = no vision input on this route. */
-    image_input: z.ZodDefault<z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>>;
+    /** Every accepted media class has a finite MIME/size/count/transport declaration. */
+    attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<["image", "file"]>;
+        mime_types: z.ZodArray<z.ZodString, "many">;
+        max_bytes: z.ZodNumber;
+        max_count: z.ZodNumber;
+        transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "image" | "file";
+        mime_types: string[];
+        max_bytes: number;
+        max_count: number;
+        transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+    }, {
+        kind: "image" | "file";
+        mime_types: string[];
+        max_bytes: number;
+        max_count: number;
+        transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+    }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     auth: {
-        supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-        preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+        supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+        preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
         credential_transports: {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
         }[];
     };
@@ -282,14 +300,20 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
     isolation: {
         supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
     };
-    image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+    attachment_inputs: {
+        kind: "image" | "file";
+        mime_types: string[];
+        max_bytes: number;
+        max_count: number;
+        transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+    }[];
 }, {
     auth?: {
-        supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-        preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+        supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+        preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
         credential_transports?: {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
         }[] | undefined;
     } | undefined;
@@ -299,7 +323,13 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
     isolation?: {
         supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
     } | undefined;
-    image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+    attachment_inputs?: {
+        kind: "image" | "file";
+        mime_types: string[];
+        max_bytes: number;
+        max_count: number;
+        transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+    }[] | undefined;
 }>>;
 export type HarnessCapabilityProfile = z.infer<typeof HarnessCapabilityProfile>;
 /**
@@ -331,35 +361,35 @@ export declare const HarnessManifest: z.ZodObject<{
     provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
     capability_profile: z.ZodDefault<z.ZodObject<{
         auth: z.ZodDefault<z.ZodObject<{
-            supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-            preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+            supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+            preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
             credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-                source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
                 kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
                 relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
             }, "strip", z.ZodTypeAny, {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
             }, {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
             }>, "many">>;
         }, "strip", z.ZodTypeAny, {
-            supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-            preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+            supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+            preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
             credential_transports: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
             }[];
         }, {
-            supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-            preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+            supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+            preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
             credential_transports?: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
             }[] | undefined;
         }>>;
@@ -377,16 +407,33 @@ export declare const HarnessManifest: z.ZodObject<{
         }, {
             supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
         }>>;
-        /** How the harness accepts image input (drives honest attach gating + the
-         *  per-adapter serializer). `none` = no vision input on this route. */
-        image_input: z.ZodDefault<z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>>;
+        /** Every accepted media class has a finite MIME/size/count/transport declaration. */
+        attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            kind: z.ZodEnum<["image", "file"]>;
+            mime_types: z.ZodArray<z.ZodString, "many">;
+            max_bytes: z.ZodNumber;
+            max_count: z.ZodNumber;
+            transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "image" | "file";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }, {
+            kind: "image" | "file";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         auth: {
-            supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-            preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+            supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+            preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
             credential_transports: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
             }[];
         };
@@ -396,14 +443,20 @@ export declare const HarnessManifest: z.ZodObject<{
         isolation: {
             supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
         };
-        image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+        attachment_inputs: {
+            kind: "image" | "file";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }[];
     }, {
         auth?: {
-            supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-            preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+            supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+            preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
             credential_transports?: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
             }[] | undefined;
         } | undefined;
@@ -413,12 +466,19 @@ export declare const HarnessManifest: z.ZodObject<{
         isolation?: {
             supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
         } | undefined;
-        image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+        attachment_inputs?: {
+            kind: "image" | "file";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }[] | undefined;
     }>>;
     /** Compatibility convenience fields. New routing/UI should prefer capability_profile. */
     capabilities: z.ZodObject<{
         plan: z.ZodDefault<z.ZodBoolean>;
         implement: z.ZodDefault<z.ZodBoolean>;
+        implementation_transport: z.ZodDefault<z.ZodEnum<["workspace", "git_patch_envelope"]>>;
         create_from_scratch: z.ZodDefault<z.ZodBoolean>;
         review: z.ZodDefault<z.ZodBoolean>;
         /** Consumed by the Phase-3 FinalVerifier routing (gating pushes `verify`). */
@@ -485,6 +545,7 @@ export declare const HarnessManifest: z.ZodObject<{
         review: boolean;
         verify: boolean;
         synthesize: boolean;
+        implementation_transport: "workspace" | "git_patch_envelope";
         read_files: boolean;
         browser_tool: boolean;
         web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -503,6 +564,7 @@ export declare const HarnessManifest: z.ZodObject<{
         review?: boolean | undefined;
         verify?: boolean | undefined;
         synthesize?: boolean | undefined;
+        implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
         read_files?: boolean | undefined;
         browser_tool?: boolean | undefined;
         web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -517,17 +579,17 @@ export declare const HarnessManifest: z.ZodObject<{
     auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
     access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    id: string;
     kind: "local_cli" | "remote_api" | "fake";
+    id: string;
     display_name: string;
     provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
     capability_profile: {
         auth: {
-            supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-            preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+            supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+            preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
             credential_transports: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
             }[];
         };
@@ -537,7 +599,13 @@ export declare const HarnessManifest: z.ZodObject<{
         isolation: {
             supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
         };
-        image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+        attachment_inputs: {
+            kind: "image" | "file";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }[];
     };
     capabilities: {
         plan: boolean;
@@ -547,6 +615,7 @@ export declare const HarnessManifest: z.ZodObject<{
         review: boolean;
         verify: boolean;
         synthesize: boolean;
+        implementation_transport: "workspace" | "git_patch_envelope";
         read_files: boolean;
         browser_tool: boolean;
         web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -563,8 +632,8 @@ export declare const HarnessManifest: z.ZodObject<{
     version?: string | undefined;
     adapter_version?: string | undefined;
 }, {
-    id: string;
     kind: "local_cli" | "remote_api" | "fake";
+    id: string;
     display_name: string;
     capabilities: {
         plan?: boolean | undefined;
@@ -574,6 +643,7 @@ export declare const HarnessManifest: z.ZodObject<{
         review?: boolean | undefined;
         verify?: boolean | undefined;
         synthesize?: boolean | undefined;
+        implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
         read_files?: boolean | undefined;
         browser_tool?: boolean | undefined;
         web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -590,11 +660,11 @@ export declare const HarnessManifest: z.ZodObject<{
     provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
     capability_profile?: {
         auth?: {
-            supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-            preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+            supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+            preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
             credential_transports?: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
             }[] | undefined;
         } | undefined;
@@ -604,7 +674,13 @@ export declare const HarnessManifest: z.ZodObject<{
         isolation?: {
             supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
         } | undefined;
-        image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+        attachment_inputs?: {
+            kind: "image" | "file";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }[] | undefined;
     } | undefined;
     auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
     access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
@@ -652,8 +728,24 @@ export declare const ConformanceReport: z.ZodObject<{
     enabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, "many">>;
     disabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, "many">>;
     reasons: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    auth_sources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+        availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+        verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+        detail: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }, {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    status: "ok" | "degraded" | "unavailable";
+    status: "unavailable" | "ok" | "degraded";
     harness_id: string;
     checks: {
         status: "pass" | "fail" | "skip";
@@ -664,8 +756,14 @@ export declare const ConformanceReport: z.ZodObject<{
     enabled_intents: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[];
     disabled_intents: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[];
     reasons: string[];
+    auth_sources: {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }[];
 }, {
-    status: "ok" | "degraded" | "unavailable";
+    status: "unavailable" | "ok" | "degraded";
     harness_id: string;
     checks?: {
         status: "pass" | "fail" | "skip";
@@ -676,27 +774,16 @@ export declare const ConformanceReport: z.ZodObject<{
     enabled_intents?: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[] | undefined;
     disabled_intents?: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[] | undefined;
     reasons?: string[] | undefined;
+    auth_sources?: {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }[] | undefined;
 }>;
 export type ConformanceReport = z.infer<typeof ConformanceReport>;
-/**
- * Per-run browser-tool wiring. Present (non-null) on a HarnessRunSpec ONLY when
- * the orchestrator has decided this run gets the agent-driven browser: the run
- * opted in, the harness has the `browser_tool` capability, AND web policy is not
- * `off`. The adapter injects Playwright MCP accordingly.
- */
 export declare const BrowserToolSpec: z.ZodObject<{
-    /**
-     * `--output-dir` for the browser MCP. Captures the per-navigation accessibility
-     * SNAPSHOTS (Playwright MCP writes screenshot image files to the agent's cwd,
-     * not here) into the run artifact tree as a browsing record the Canvas gallery
-     * lists. The live view is the headed window itself. Null = MCP's own temp dir.
-     */
     output_dir: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    /**
-     * Run the browser headless (no visible window). Default false — a headed
-     * Chromium so the user can watch the agent browse directly (the chosen mirror:
-     * a real visible window, not an embedded screencast).
-     */
     headless: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     output_dir: string | null;
@@ -729,7 +816,6 @@ export declare const HarnessRunSpec: z.ZodObject<{
     }>>;
     model_hint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     effort_hint: z.ZodDefault<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
-    max_usd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     /**
      * Which auth route the attempt should use. `auto` = subscription-first with
@@ -747,30 +833,36 @@ export declare const HarnessRunSpec: z.ZodObject<{
      * (agent env isolation). Threaded from routing.env_inheritance at spawn.
      */
     env_inheritance: z.ZodDefault<z.ZodEnum<["mirror_native", "clean"]>>;
+    evidence_policy: z.ZodDefault<z.ZodEnum<["stream_only", "allow_vendor_session_artifacts"]>>;
     env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
     /**
-     * User/agent attachments (images, files) forwarded to the harness in its
-     * native shape per `capability_profile.image_input`. Empty for non-vision
-     * harnesses — the orchestrator drops + discloses rather than silently ignore.
+     * Immutable user/agent resources forwarded only after the selected adapter's
+     * finite `capability_profile.attachment_inputs` declaration admits them.
      */
     attachments: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        kind: z.ZodDefault<z.ZodEnum<["image", "file"]>>;
-        mime: z.ZodDefault<z.ZodString>;
-        name: z.ZodDefault<z.ZodString>;
+        resource_id: z.ZodString;
+        kind: z.ZodEnum<["image", "file"]>;
+        mime: z.ZodString;
+        name: z.ZodString;
+        sha256: z.ZodString;
+        size_bytes: z.ZodNumber;
         path: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
+    }, "strict", z.ZodTypeAny, {
         path: string;
-        id: string;
+        resource_id: string;
         kind: "image" | "file";
         mime: string;
         name: string;
+        sha256: string;
+        size_bytes: number;
     }, {
         path: string;
-        id: string;
-        kind?: "image" | "file" | undefined;
-        mime?: string | undefined;
-        name?: string | undefined;
+        resource_id: string;
+        kind: "image" | "file";
+        mime: string;
+        name: string;
+        sha256: string;
+        size_bytes: number;
     }>, "many">>;
     /**
      * Agent-driven browser wiring. Null = no browser tool this run (the common
@@ -778,18 +870,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
      * `browser_tool`, and web policy is not `off`.
      */
     browser: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-        /**
-         * `--output-dir` for the browser MCP. Captures the per-navigation accessibility
-         * SNAPSHOTS (Playwright MCP writes screenshot image files to the agent's cwd,
-         * not here) into the run artifact tree as a browsing record the Canvas gallery
-         * lists. The live view is the headed window itself. Null = MCP's own temp dir.
-         */
         output_dir: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        /**
-         * Run the browser headless (no visible window). Default false — a headed
-         * Chromium so the user can watch the agent browse directly (the chosen mirror:
-         * a real visible window, not an embedded screencast).
-         */
         headless: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         output_dir: string | null;
@@ -805,6 +886,125 @@ export declare const HarnessRunSpec: z.ZodObject<{
      * declares `json_schema_output`; consumers add the native CLI flag.
      */
     output_schema: z.ZodOptional<z.ZodUnknown>;
+    raw_context_packet: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        schema_version: z.ZodLiteral<1>;
+        packet_hash: z.ZodString;
+        base_commit_sha: z.ZodString;
+        base_tree_sha: z.ZodString;
+        readable_files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            mode: z.ZodString;
+            blob_oid: z.ZodString;
+            content_hash: z.ZodString;
+            content: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }, {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }>, "many">;
+        editable_paths: z.ZodArray<z.ZodString, "many">;
+        creatable_roots: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        file_manifest: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            disposition: z.ZodEnum<["full", "included", "manifest_only", "excluded", "sensitive", "binary", "vendored", "oversized", "read_error", "omitted"]>;
+            hash: z.ZodOptional<z.ZodString>;
+            bytes: z.ZodOptional<z.ZodNumber>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }, {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }>, "many">;
+        omissions: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            reason: z.ZodString;
+            replacement: z.ZodDefault<z.ZodEnum<["summary", "map", "index", "none"]>>;
+            hash: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            reason: string;
+            replacement: "map" | "none" | "summary" | "index";
+            hash?: string | undefined;
+        }, {
+            path: string;
+            reason: string;
+            hash?: string | undefined;
+            replacement?: "map" | "none" | "summary" | "index" | undefined;
+        }>, "many">;
+        evidence_refs: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        schema_version: 1;
+        packet_hash: string;
+        base_commit_sha: string;
+        base_tree_sha: string;
+        readable_files: {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }[];
+        editable_paths: string[];
+        creatable_roots: string[];
+        file_manifest: {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }[];
+        omissions: {
+            path: string;
+            reason: string;
+            replacement: "map" | "none" | "summary" | "index";
+            hash?: string | undefined;
+        }[];
+        evidence_refs: string[];
+    }, {
+        schema_version: 1;
+        packet_hash: string;
+        base_commit_sha: string;
+        base_tree_sha: string;
+        readable_files: {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }[];
+        editable_paths: string[];
+        file_manifest: {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }[];
+        omissions: {
+            path: string;
+            reason: string;
+            hash?: string | undefined;
+            replacement?: "map" | "none" | "summary" | "index" | undefined;
+        }[];
+        evidence_refs: string[];
+        creatable_roots?: string[] | undefined;
+    }>>>;
     extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
     max_turns: number | null;
@@ -821,17 +1021,19 @@ export declare const HarnessRunSpec: z.ZodObject<{
     };
     model_hint: string | null;
     effort_hint: "low" | "medium" | "high" | "xhigh" | "max" | null;
-    max_usd: number | null;
     auth_preference: "auto" | "subscription" | "api_key";
     resume_session_id: string | null;
     env_inheritance: "mirror_native" | "clean";
+    evidence_policy: "stream_only" | "allow_vendor_session_artifacts";
     env: Record<string, string>;
     attachments: {
         path: string;
-        id: string;
+        resource_id: string;
         kind: "image" | "file";
         mime: string;
         name: string;
+        sha256: string;
+        size_bytes: number;
     }[];
     browser: {
         output_dir: string | null;
@@ -839,6 +1041,35 @@ export declare const HarnessRunSpec: z.ZodObject<{
     } | null;
     extra: Record<string, unknown>;
     output_schema?: unknown;
+    raw_context_packet?: {
+        schema_version: 1;
+        packet_hash: string;
+        base_commit_sha: string;
+        base_tree_sha: string;
+        readable_files: {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }[];
+        editable_paths: string[];
+        creatable_roots: string[];
+        file_manifest: {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }[];
+        omissions: {
+            path: string;
+            reason: string;
+            replacement: "map" | "none" | "summary" | "index";
+            hash?: string | undefined;
+        }[];
+        evidence_refs: string[];
+    } | null | undefined;
 }, {
     session_id: string;
     intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
@@ -854,23 +1085,54 @@ export declare const HarnessRunSpec: z.ZodObject<{
     } | undefined;
     model_hint?: string | null | undefined;
     effort_hint?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-    max_usd?: number | null | undefined;
     auth_preference?: "auto" | "subscription" | "api_key" | undefined;
     resume_session_id?: string | null | undefined;
     env_inheritance?: "mirror_native" | "clean" | undefined;
+    evidence_policy?: "stream_only" | "allow_vendor_session_artifacts" | undefined;
     env?: Record<string, string> | undefined;
     attachments?: {
         path: string;
-        id: string;
-        kind?: "image" | "file" | undefined;
-        mime?: string | undefined;
-        name?: string | undefined;
+        resource_id: string;
+        kind: "image" | "file";
+        mime: string;
+        name: string;
+        sha256: string;
+        size_bytes: number;
     }[] | undefined;
     browser?: {
         output_dir?: string | null | undefined;
         headless?: boolean | undefined;
     } | null | undefined;
     output_schema?: unknown;
+    raw_context_packet?: {
+        schema_version: 1;
+        packet_hash: string;
+        base_commit_sha: string;
+        base_tree_sha: string;
+        readable_files: {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }[];
+        editable_paths: string[];
+        file_manifest: {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }[];
+        omissions: {
+            path: string;
+            reason: string;
+            hash?: string | undefined;
+            replacement?: "map" | "none" | "summary" | "index" | undefined;
+        }[];
+        evidence_refs: string[];
+        creatable_roots?: string[] | undefined;
+    } | null | undefined;
     extra?: Record<string, unknown> | undefined;
 }>;
 export type HarnessRunSpec = z.infer<typeof HarnessRunSpec>;
@@ -900,7 +1162,7 @@ export declare const ToolRef: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     kind: "file" | "web" | "command" | "mcp" | "search" | "other";
     name: string;
-    status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+    status?: "cancelled" | "ok" | "error" | "denied" | undefined;
     use_id?: string | undefined;
     target?: string | undefined;
     error_summary?: string | undefined;
@@ -908,7 +1170,7 @@ export declare const ToolRef: z.ZodObject<{
     exit_code?: number | undefined;
 }, {
     name: string;
-    status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+    status?: "cancelled" | "ok" | "error" | "denied" | undefined;
     kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
     use_id?: string | undefined;
     target?: string | undefined;
@@ -1086,7 +1348,7 @@ export declare const InteractionAnswerSet: z.ZodObject<{
 export type InteractionAnswerSet = z.infer<typeof InteractionAnswerSet>;
 /** Normalized event emitted by every adapter (the SSOT of adapter output). */
 export declare const HarnessEvent: z.ZodObject<{
-    type: z.ZodEnum<["started", "thinking", "message", "tool_call", "tool_result", "interaction_requested", "file_change", "usage", "error", "completed"]>;
+    type: z.ZodEnum<["started", "thinking", "message", "tool_call", "tool_result", "interaction_requested", "file_change", "patch_produced", "usage", "error", "completed"]>;
     session_id: z.ZodString;
     ts: z.ZodString;
     text: z.ZodOptional<z.ZodString>;
@@ -1106,7 +1368,7 @@ export declare const HarnessEvent: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         kind: "file" | "web" | "command" | "mcp" | "search" | "other";
         name: string;
-        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
         error_summary?: string | undefined;
@@ -1114,7 +1376,7 @@ export declare const HarnessEvent: z.ZodObject<{
         exit_code?: number | undefined;
     }, {
         name: string;
-        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
@@ -1189,6 +1451,44 @@ export declare const HarnessEvent: z.ZodObject<{
         }[] | undefined;
         source_tool?: string | null | undefined;
     }>>;
+    patch_envelope: z.ZodOptional<z.ZodObject<{
+        schema_version: z.ZodLiteral<1>;
+        context_packet_hash: z.ZodString;
+        base_tree_sha: z.ZodString;
+        patch: z.ZodString;
+        patch_hash: z.ZodString;
+        touched_paths: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            expected_blob_oid: z.ZodNullable<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            expected_blob_oid: string | null;
+        }, {
+            path: string;
+            expected_blob_oid: string | null;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        schema_version: 1;
+        base_tree_sha: string;
+        context_packet_hash: string;
+        patch: string;
+        patch_hash: string;
+        touched_paths: {
+            path: string;
+            expected_blob_oid: string | null;
+        }[];
+    }, {
+        schema_version: 1;
+        base_tree_sha: string;
+        context_packet_hash: string;
+        patch: string;
+        patch_hash: string;
+        touched_paths: {
+            path: string;
+            expected_blob_oid: string | null;
+        }[];
+    }>>;
+    refusal_code: z.ZodOptional<z.ZodEnum<["raw_patch_requires_isolation", "raw_patch_missing_evidence", "raw_patch_digest_mismatch", "raw_patch_base_mismatch", "raw_patch_path_traversal", "raw_patch_outside_scope", "raw_patch_stale_preimage", "raw_patch_binary_unsupported", "raw_patch_sensitive_content", "raw_patch_truncated", "raw_patch_apply_failed"]>>;
     usage: z.ZodOptional<z.ZodObject<{
         input_tokens: z.ZodOptional<z.ZodNumber>;
         output_tokens: z.ZodOptional<z.ZodNumber>;
@@ -1197,38 +1497,72 @@ export declare const HarnessEvent: z.ZodObject<{
         /** True when cost_usd is derived from token pricing (not natively reported). */
         estimated: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
+        estimated?: boolean | undefined;
         input_tokens?: number | undefined;
         output_tokens?: number | undefined;
         cached_input_tokens?: number | undefined;
         cost_usd?: number | undefined;
-        estimated?: boolean | undefined;
     }, {
+        estimated?: boolean | undefined;
         input_tokens?: number | undefined;
         output_tokens?: number | undefined;
         cached_input_tokens?: number | undefined;
         cost_usd?: number | undefined;
-        estimated?: boolean | undefined;
     }>>;
     observed_model: z.ZodOptional<z.ZodString>;
-    /**
-     * Typed quota/usage-window signal: the harness CLI's OWN record of how
-     * much of its subscription/rate window is consumed. Producers read native
-     * machine-readable surfaces only (codex rollout `token_count.rate_limits`);
-     * a harness with no native surface emits nothing (fail-honest, never
-     * scraped from prose). The budget layer maps this to a `used_percent`
-     * observation; `headroom()` and pool ordering consume it.
-     */
+    credential_route: z.ZodOptional<z.ZodEnum<["vendor_native", "managed_api_key", "local"]>>;
+    credential_source: z.ZodOptional<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>;
+    /** Vendor-owned quota windows. All reported windows remain independent. */
     quota: z.ZodOptional<z.ZodObject<{
-        /** 0-100: consumed share of the binding rate window. */
-        used_percent: z.ZodNumber;
-        /** Native reset moment for the window, when the CLI reports one. */
-        resets_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        used_percent: number;
-        resets_at: string | null;
+        source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry"]>;
+        plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        constraints: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            used_ratio: z.ZodNullable<z.ZodNumber>;
+            window_seconds: z.ZodNullable<z.ZodNumber>;
+            resets_at: z.ZodNullable<z.ZodString>;
+            cooldown_until: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }, {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry";
+        plan_label: string | null;
+        subject_id: string | null;
+        constraints: {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }[];
     }, {
-        used_percent: number;
-        resets_at?: string | null | undefined;
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry";
+        constraints: {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }[];
+        plan_label?: string | null | undefined;
+        subject_id?: string | null | undefined;
     }>>;
     /**
      * Typed live plan/todo progress: adapters map their native plan tools
@@ -1296,24 +1630,27 @@ export declare const HarnessEvent: z.ZodObject<{
         retry_delay_ms?: number | null | undefined;
     }>>;
     error: z.ZodOptional<z.ZodString>;
+    aborted: z.ZodOptional<z.ZodBoolean>;
     payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
-    type: "message" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "usage" | "completed";
+    type: "message" | "completed" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "patch_produced" | "usage";
     session_id: string;
     ts: string;
+    aborted?: boolean | undefined;
+    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
     error?: string | undefined;
     usage?: {
+        estimated?: boolean | undefined;
         input_tokens?: number | undefined;
         output_tokens?: number | undefined;
         cached_input_tokens?: number | undefined;
         cost_usd?: number | undefined;
-        estimated?: boolean | undefined;
     } | undefined;
     text?: string | undefined;
     tool?: {
         kind: "file" | "web" | "command" | "mcp" | "search" | "other";
         name: string;
-        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
         error_summary?: string | undefined;
@@ -1334,10 +1671,32 @@ export declare const HarnessEvent: z.ZodObject<{
         }[];
         source_tool: string | null;
     } | undefined;
+    patch_envelope?: {
+        schema_version: 1;
+        base_tree_sha: string;
+        context_packet_hash: string;
+        patch: string;
+        patch_hash: string;
+        touched_paths: {
+            path: string;
+            expected_blob_oid: string | null;
+        }[];
+    } | undefined;
+    refusal_code?: "raw_patch_requires_isolation" | "raw_patch_missing_evidence" | "raw_patch_digest_mismatch" | "raw_patch_base_mismatch" | "raw_patch_path_traversal" | "raw_patch_outside_scope" | "raw_patch_stale_preimage" | "raw_patch_binary_unsupported" | "raw_patch_sensitive_content" | "raw_patch_truncated" | "raw_patch_apply_failed" | undefined;
     observed_model?: string | undefined;
+    credential_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | undefined;
     quota?: {
-        used_percent: number;
-        resets_at: string | null;
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry";
+        plan_label: string | null;
+        subject_id: string | null;
+        constraints: {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }[];
     } | undefined;
     plan_progress?: {
         items: {
@@ -1356,21 +1715,23 @@ export declare const HarnessEvent: z.ZodObject<{
     } | undefined;
     payload?: Record<string, unknown> | undefined;
 }, {
-    type: "message" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "usage" | "completed";
+    type: "message" | "completed" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "patch_produced" | "usage";
     session_id: string;
     ts: string;
+    aborted?: boolean | undefined;
+    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
     error?: string | undefined;
     usage?: {
+        estimated?: boolean | undefined;
         input_tokens?: number | undefined;
         output_tokens?: number | undefined;
         cached_input_tokens?: number | undefined;
         cost_usd?: number | undefined;
-        estimated?: boolean | undefined;
     } | undefined;
     text?: string | undefined;
     tool?: {
         name: string;
-        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
@@ -1392,10 +1753,32 @@ export declare const HarnessEvent: z.ZodObject<{
         }[] | undefined;
         source_tool?: string | null | undefined;
     } | undefined;
+    patch_envelope?: {
+        schema_version: 1;
+        base_tree_sha: string;
+        context_packet_hash: string;
+        patch: string;
+        patch_hash: string;
+        touched_paths: {
+            path: string;
+            expected_blob_oid: string | null;
+        }[];
+    } | undefined;
+    refusal_code?: "raw_patch_requires_isolation" | "raw_patch_missing_evidence" | "raw_patch_digest_mismatch" | "raw_patch_base_mismatch" | "raw_patch_path_traversal" | "raw_patch_outside_scope" | "raw_patch_stale_preimage" | "raw_patch_binary_unsupported" | "raw_patch_sensitive_content" | "raw_patch_truncated" | "raw_patch_apply_failed" | undefined;
     observed_model?: string | undefined;
+    credential_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | undefined;
     quota?: {
-        used_percent: number;
-        resets_at?: string | null | undefined;
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry";
+        constraints: {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }[];
+        plan_label?: string | null | undefined;
+        subject_id?: string | null | undefined;
     } | undefined;
     plan_progress?: {
         items?: {