@claudexor/schema 1.0.0 → 2.0.0

package/dist/config.d.ts

@@ -22,45 +22,80 @@ export declare const ProjectConfig: z.ZodObject<{
         exclude?: string[] | undefined;
     }>>;
     tests: z.ZodDefault<z.ZodObject<{
-        commands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        commands: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            cwd?: string | undefined;
+        }, {
+            program: string;
+            cwd?: string | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+        }>, "many">>;
     }, "strict", z.ZodTypeAny, {
-        commands: string[];
+        commands: {
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            cwd?: string | undefined;
+        }[];
     }, {
-        commands?: string[] | undefined;
+        commands?: {
+            program: string;
+            cwd?: string | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+        }[] | undefined;
     }>>;
     budget: z.ZodDefault<z.ZodObject<{
-        portfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
+        routing_goal: z.ZodOptional<z.ZodEnum<["auto", "quality", "economy"]>>;
     }, "strict", z.ZodTypeAny, {
-        portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
     }, {
-        portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
     version: 1;
+    tests: {
+        commands: {
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            cwd?: string | undefined;
+        }[];
+    };
+    budget: {
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
+    };
     context: {
         mandatory_files: string[];
         include: string[];
         exclude: string[];
     };
-    tests: {
-        commands: string[];
-    };
-    budget: {
-        portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
-    };
 }, {
     version?: 1 | undefined;
+    tests?: {
+        commands?: {
+            program: string;
+            cwd?: string | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+        }[] | undefined;
+    } | undefined;
+    budget?: {
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
+    } | undefined;
     context?: {
         mandatory_files?: string[] | undefined;
         include?: string[] | undefined;
         exclude?: string[] | undefined;
     } | undefined;
-    tests?: {
-        commands?: string[] | undefined;
-    } | undefined;
-    budget?: {
-        portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-    } | undefined;
 }>;
 export type ProjectConfig = z.infer<typeof ProjectConfig>;
 /** Sensitive trust settings — only valid in global/user-local/trust files. */
@@ -76,22 +111,69 @@ export declare const TrustConfig: z.ZodObject<{
      * carry null and surfaces disclose them as revocable only via CLI.
      */
     repo_root: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    test_command_grants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        projectDigest: z.ZodString;
+        configDigest: z.ZodString;
+        commandDigest: z.ZodString;
+        executablePath: z.ZodString;
+        executableDigest: z.ZodString;
+        scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+    }, "strict", z.ZodTypeAny, {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        scriptPath: string | null;
+        scriptDigest: string | null;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }, {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        scriptPath?: string | null | undefined;
+        scriptDigest?: string | null | undefined;
+    }>, "many">>;
 }, "strict", z.ZodTypeAny, {
     version: 1;
     access_default: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
     allow_full_access: boolean;
     repo_root: string | null;
+    test_command_grants: {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        scriptPath: string | null;
+        scriptDigest: string | null;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }[];
 }, {
     version?: 1 | undefined;
     access_default?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     allow_full_access?: boolean | undefined;
     repo_root?: string | null | undefined;
+    test_command_grants?: {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        scriptPath?: string | null | undefined;
+        scriptDigest?: string | null | undefined;
+    }[] | undefined;
 }>;
 export type TrustConfig = z.infer<typeof TrustConfig>;
-/** Global user config (~/.claudexor/config.yaml). */
+/** Claudexor v2 global user config (~/.claudexor/v2/config.yaml). */
 export declare const GlobalConfig: z.ZodObject<{
     version: z.ZodDefault<z.ZodLiteral<1>>;
-    default_portfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
     /**
      * How long an interactive run waits for the user's answer to a harness
      * question (interaction.requested) before delivering a benign decline and
@@ -110,43 +192,89 @@ export declare const GlobalConfig: z.ZodObject<{
         env_inheritance: z.ZodDefault<z.ZodEnum<["mirror_native", "clean"]>>;
         /** Default auth route preference (subscription/api_key/auto). */
         auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
-        /**
-         * Operator-tunable per-provider-family quality priors (0..1) feeding
-         * RouterCandidate.qualityForIntent. A DECLARED prior, not
-         * invented magic: unset families ride the router's neutral 0.5.
-         */
-        quality_priors: z.ZodDefault<z.ZodRecord<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>, z.ZodNumber>>;
+        goal: z.ZodDefault<z.ZodEnum<["auto", "quality", "economy"]>>;
+        paid_fallback: z.ZodDefault<z.ZodEnum<["never", "when_unavailable", "allowed_within_cap"]>>;
+        quality_tiers: z.ZodDefault<z.ZodRecord<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, z.ZodArray<z.ZodArray<z.ZodObject<{
+            harness: z.ZodString;
+            model: z.ZodString;
+            effort: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+        }, "strict", z.ZodTypeAny, {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }, {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }>, "many">, "many">>>;
     }, "strict", z.ZodTypeAny, {
         auth_preference: "auto" | "subscription" | "api_key";
         env_inheritance: "mirror_native" | "clean";
         primary_harness: string | null;
         eligible_harnesses: string[];
         default_policy: "auto" | "primary";
-        quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+        goal: "auto" | "quality" | "economy";
+        paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+        quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>>;
     }, {
         auth_preference?: "auto" | "subscription" | "api_key" | undefined;
         env_inheritance?: "mirror_native" | "clean" | undefined;
         primary_harness?: string | null | undefined;
         eligible_harnesses?: string[] | undefined;
         default_policy?: "auto" | "primary" | undefined;
-        quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+        goal?: "auto" | "quality" | "economy" | undefined;
+        paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+        quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>> | undefined;
     }>>;
     budget: z.ZodDefault<z.ZodObject<{
-        max_usd_per_run: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        paid_budget_per_run: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"unlimited">;
+        }, "strict", z.ZodTypeAny, {
+            kind: "unlimited";
+        }, {
+            kind: "unlimited";
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"finite">;
+            maxUsd: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            kind: "finite";
+            maxUsd: number;
+        }, {
+            kind: "finite";
+            maxUsd: number;
+        }>]>>;
         /**
          * Per-candidate reservation floor (USD) held against the run cap for
          * every race-wave slot AFTER the first, BEFORE any usage streams.
          * Makes concurrent in-flight candidates visible to the budget breaker
-         * so a parallel wave cannot blow past `max_usd_per_run` between
+         * so a parallel wave cannot blow past the finite paid budget between
          * settlements. The first slot never holds it: a cap smaller than the
          * floor still runs one candidate and stops on real usage.
          */
         estimate_usd_floor: z.ZodDefault<z.ZodNumber>;
     }, "strict", z.ZodTypeAny, {
-        max_usd_per_run: number | null;
+        paid_budget_per_run: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
         estimate_usd_floor: number;
     }, {
-        max_usd_per_run?: number | null | undefined;
+        paid_budget_per_run?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
         estimate_usd_floor?: number | undefined;
     }>>;
     runtime: z.ZodDefault<z.ZodObject<{
@@ -202,7 +330,6 @@ export declare const GlobalConfig: z.ZodObject<{
         effort: z.ZodDefault<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
         max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
         max_rounds: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
-        max_usd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
         tools_allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         tools_deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         fallback_model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -213,11 +340,10 @@ export declare const GlobalConfig: z.ZodObject<{
         fallback_model: string | null;
         max_turns: number | null;
         web: "off" | "auto" | "cached" | "live";
-        max_usd: number | null;
         auth_preference: "auto" | "subscription" | "api_key";
         enabled: boolean;
-        default_model: string | null;
         effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+        default_model: string | null;
         max_rounds: number | null;
         tools_allow: string[];
         tools_deny: string[];
@@ -225,11 +351,10 @@ export declare const GlobalConfig: z.ZodObject<{
         fallback_model?: string | null | undefined;
         max_turns?: number | null | undefined;
         web?: "off" | "auto" | "cached" | "live" | undefined;
-        max_usd?: number | null | undefined;
         auth_preference?: "auto" | "subscription" | "api_key" | undefined;
         enabled?: boolean | undefined;
-        default_model?: string | null | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+        default_model?: string | null | undefined;
         max_rounds?: number | null | undefined;
         tools_allow?: string[] | undefined;
         tools_deny?: string[] | undefined;
@@ -240,20 +365,23 @@ export declare const GlobalConfig: z.ZodObject<{
         fallback_model: string | null;
         max_turns: number | null;
         web: "off" | "auto" | "cached" | "live";
-        max_usd: number | null;
         auth_preference: "auto" | "subscription" | "api_key";
         enabled: boolean;
-        default_model: string | null;
         effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+        default_model: string | null;
         max_rounds: number | null;
         tools_allow: string[];
         tools_deny: string[];
     }>;
     budget: {
-        max_usd_per_run: number | null;
+        paid_budget_per_run: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
         estimate_usd_floor: number;
     };
-    default_portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
     interaction_timeout_ms: number;
     routing: {
         auth_preference: "auto" | "subscription" | "api_key";
@@ -261,7 +389,13 @@ export declare const GlobalConfig: z.ZodObject<{
         primary_harness: string | null;
         eligible_harnesses: string[];
         default_policy: "auto" | "primary";
-        quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+        goal: "auto" | "quality" | "economy";
+        paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+        quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>>;
     };
     runtime: {
         transient_retry: {
@@ -278,20 +412,23 @@ export declare const GlobalConfig: z.ZodObject<{
         fallback_model?: string | null | undefined;
         max_turns?: number | null | undefined;
         web?: "off" | "auto" | "cached" | "live" | undefined;
-        max_usd?: number | null | undefined;
         auth_preference?: "auto" | "subscription" | "api_key" | undefined;
         enabled?: boolean | undefined;
-        default_model?: string | null | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+        default_model?: string | null | undefined;
         max_rounds?: number | null | undefined;
         tools_allow?: string[] | undefined;
         tools_deny?: string[] | undefined;
     }> | undefined;
     budget?: {
-        max_usd_per_run?: number | null | undefined;
+        paid_budget_per_run?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
         estimate_usd_floor?: number | undefined;
     } | undefined;
-    default_portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
     interaction_timeout_ms?: number | undefined;
     routing?: {
         auth_preference?: "auto" | "subscription" | "api_key" | undefined;
@@ -299,7 +436,13 @@ export declare const GlobalConfig: z.ZodObject<{
         primary_harness?: string | null | undefined;
         eligible_harnesses?: string[] | undefined;
         default_policy?: "auto" | "primary" | undefined;
-        quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+        goal?: "auto" | "quality" | "economy" | undefined;
+        paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+        quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>> | undefined;
     } | undefined;
     runtime?: {
         transient_retry?: {
@@ -330,45 +473,80 @@ export declare const ResolvedConfig: z.ZodObject<{
             exclude?: string[] | undefined;
         }>>;
         tests: z.ZodDefault<z.ZodObject<{
-            commands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            commands: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                program: z.ZodString;
+                args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                cwd: z.ZodOptional<z.ZodString>;
+                envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            }, "strict", z.ZodTypeAny, {
+                program: string;
+                args: string[];
+                envAllowlist: string[];
+                cwd?: string | undefined;
+            }, {
+                program: string;
+                cwd?: string | undefined;
+                args?: string[] | undefined;
+                envAllowlist?: string[] | undefined;
+            }>, "many">>;
         }, "strict", z.ZodTypeAny, {
-            commands: string[];
+            commands: {
+                program: string;
+                args: string[];
+                envAllowlist: string[];
+                cwd?: string | undefined;
+            }[];
         }, {
-            commands?: string[] | undefined;
+            commands?: {
+                program: string;
+                cwd?: string | undefined;
+                args?: string[] | undefined;
+                envAllowlist?: string[] | undefined;
+            }[] | undefined;
         }>>;
         budget: z.ZodDefault<z.ZodObject<{
-            portfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
+            routing_goal: z.ZodOptional<z.ZodEnum<["auto", "quality", "economy"]>>;
         }, "strict", z.ZodTypeAny, {
-            portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
         }, {
-            portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
         }>>;
     }, "strict", z.ZodTypeAny, {
         version: 1;
+        tests: {
+            commands: {
+                program: string;
+                args: string[];
+                envAllowlist: string[];
+                cwd?: string | undefined;
+            }[];
+        };
+        budget: {
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
+        };
         context: {
             mandatory_files: string[];
             include: string[];
             exclude: string[];
         };
-        tests: {
-            commands: string[];
-        };
-        budget: {
-            portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
-        };
     }, {
         version?: 1 | undefined;
+        tests?: {
+            commands?: {
+                program: string;
+                cwd?: string | undefined;
+                args?: string[] | undefined;
+                envAllowlist?: string[] | undefined;
+            }[] | undefined;
+        } | undefined;
+        budget?: {
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
+        } | undefined;
         context?: {
             mandatory_files?: string[] | undefined;
             include?: string[] | undefined;
             exclude?: string[] | undefined;
         } | undefined;
-        tests?: {
-            commands?: string[] | undefined;
-        } | undefined;
-        budget?: {
-            portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-        } | undefined;
     }>;
     trust: z.ZodObject<{
         version: z.ZodDefault<z.ZodLiteral<1>>;
@@ -382,20 +560,67 @@ export declare const ResolvedConfig: z.ZodObject<{
          * carry null and surfaces disclose them as revocable only via CLI.
          */
         repo_root: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        test_command_grants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            projectDigest: z.ZodString;
+            configDigest: z.ZodString;
+            commandDigest: z.ZodString;
+            executablePath: z.ZodString;
+            executableDigest: z.ZodString;
+            scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+        }, "strict", z.ZodTypeAny, {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            scriptPath: string | null;
+            scriptDigest: string | null;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        }, {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            scriptPath?: string | null | undefined;
+            scriptDigest?: string | null | undefined;
+        }>, "many">>;
     }, "strict", z.ZodTypeAny, {
         version: 1;
         access_default: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
         allow_full_access: boolean;
         repo_root: string | null;
+        test_command_grants: {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            scriptPath: string | null;
+            scriptDigest: string | null;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        }[];
     }, {
         version?: 1 | undefined;
         access_default?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
         allow_full_access?: boolean | undefined;
         repo_root?: string | null | undefined;
+        test_command_grants?: {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            scriptPath?: string | null | undefined;
+            scriptDigest?: string | null | undefined;
+        }[] | undefined;
     }>;
     global: z.ZodObject<{
         version: z.ZodDefault<z.ZodLiteral<1>>;
-        default_portfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
         /**
          * How long an interactive run waits for the user's answer to a harness
          * question (interaction.requested) before delivering a benign decline and
@@ -414,43 +639,89 @@ export declare const ResolvedConfig: z.ZodObject<{
             env_inheritance: z.ZodDefault<z.ZodEnum<["mirror_native", "clean"]>>;
             /** Default auth route preference (subscription/api_key/auto). */
             auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
-            /**
-             * Operator-tunable per-provider-family quality priors (0..1) feeding
-             * RouterCandidate.qualityForIntent. A DECLARED prior, not
-             * invented magic: unset families ride the router's neutral 0.5.
-             */
-            quality_priors: z.ZodDefault<z.ZodRecord<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>, z.ZodNumber>>;
+            goal: z.ZodDefault<z.ZodEnum<["auto", "quality", "economy"]>>;
+            paid_fallback: z.ZodDefault<z.ZodEnum<["never", "when_unavailable", "allowed_within_cap"]>>;
+            quality_tiers: z.ZodDefault<z.ZodRecord<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, z.ZodArray<z.ZodArray<z.ZodObject<{
+                harness: z.ZodString;
+                model: z.ZodString;
+                effort: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+            }, "strict", z.ZodTypeAny, {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }, {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }>, "many">, "many">>>;
         }, "strict", z.ZodTypeAny, {
             auth_preference: "auto" | "subscription" | "api_key";
             env_inheritance: "mirror_native" | "clean";
             primary_harness: string | null;
             eligible_harnesses: string[];
             default_policy: "auto" | "primary";
-            quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+            goal: "auto" | "quality" | "economy";
+            paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+            quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>>;
         }, {
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
             env_inheritance?: "mirror_native" | "clean" | undefined;
             primary_harness?: string | null | undefined;
             eligible_harnesses?: string[] | undefined;
             default_policy?: "auto" | "primary" | undefined;
-            quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+            goal?: "auto" | "quality" | "economy" | undefined;
+            paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+            quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>> | undefined;
         }>>;
         budget: z.ZodDefault<z.ZodObject<{
-            max_usd_per_run: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+            paid_budget_per_run: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+                kind: z.ZodLiteral<"unlimited">;
+            }, "strict", z.ZodTypeAny, {
+                kind: "unlimited";
+            }, {
+                kind: "unlimited";
+            }>, z.ZodObject<{
+                kind: z.ZodLiteral<"finite">;
+                maxUsd: z.ZodNumber;
+            }, "strict", z.ZodTypeAny, {
+                kind: "finite";
+                maxUsd: number;
+            }, {
+                kind: "finite";
+                maxUsd: number;
+            }>]>>;
             /**
              * Per-candidate reservation floor (USD) held against the run cap for
              * every race-wave slot AFTER the first, BEFORE any usage streams.
              * Makes concurrent in-flight candidates visible to the budget breaker
-             * so a parallel wave cannot blow past `max_usd_per_run` between
+             * so a parallel wave cannot blow past the finite paid budget between
              * settlements. The first slot never holds it: a cap smaller than the
              * floor still runs one candidate and stops on real usage.
              */
             estimate_usd_floor: z.ZodDefault<z.ZodNumber>;
         }, "strict", z.ZodTypeAny, {
-            max_usd_per_run: number | null;
+            paid_budget_per_run: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            };
             estimate_usd_floor: number;
         }, {
-            max_usd_per_run?: number | null | undefined;
+            paid_budget_per_run?: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            } | undefined;
             estimate_usd_floor?: number | undefined;
         }>>;
         runtime: z.ZodDefault<z.ZodObject<{
@@ -506,7 +777,6 @@ export declare const ResolvedConfig: z.ZodObject<{
             effort: z.ZodDefault<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
             max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
             max_rounds: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
-            max_usd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
             tools_allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
             tools_deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
             fallback_model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -517,11 +787,10 @@ export declare const ResolvedConfig: z.ZodObject<{
             fallback_model: string | null;
             max_turns: number | null;
             web: "off" | "auto" | "cached" | "live";
-            max_usd: number | null;
             auth_preference: "auto" | "subscription" | "api_key";
             enabled: boolean;
-            default_model: string | null;
             effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+            default_model: string | null;
             max_rounds: number | null;
             tools_allow: string[];
             tools_deny: string[];
@@ -529,11 +798,10 @@ export declare const ResolvedConfig: z.ZodObject<{
             fallback_model?: string | null | undefined;
             max_turns?: number | null | undefined;
             web?: "off" | "auto" | "cached" | "live" | undefined;
-            max_usd?: number | null | undefined;
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
             enabled?: boolean | undefined;
-            default_model?: string | null | undefined;
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+            default_model?: string | null | undefined;
             max_rounds?: number | null | undefined;
             tools_allow?: string[] | undefined;
             tools_deny?: string[] | undefined;
@@ -544,20 +812,23 @@ export declare const ResolvedConfig: z.ZodObject<{
             fallback_model: string | null;
             max_turns: number | null;
             web: "off" | "auto" | "cached" | "live";
-            max_usd: number | null;
             auth_preference: "auto" | "subscription" | "api_key";
             enabled: boolean;
-            default_model: string | null;
             effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+            default_model: string | null;
             max_rounds: number | null;
             tools_allow: string[];
             tools_deny: string[];
         }>;
         budget: {
-            max_usd_per_run: number | null;
+            paid_budget_per_run: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            };
             estimate_usd_floor: number;
         };
-        default_portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
         interaction_timeout_ms: number;
         routing: {
             auth_preference: "auto" | "subscription" | "api_key";
@@ -565,7 +836,13 @@ export declare const ResolvedConfig: z.ZodObject<{
             primary_harness: string | null;
             eligible_harnesses: string[];
             default_policy: "auto" | "primary";
-            quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+            goal: "auto" | "quality" | "economy";
+            paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+            quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>>;
         };
         runtime: {
             transient_retry: {
@@ -582,20 +859,23 @@ export declare const ResolvedConfig: z.ZodObject<{
             fallback_model?: string | null | undefined;
             max_turns?: number | null | undefined;
             web?: "off" | "auto" | "cached" | "live" | undefined;
-            max_usd?: number | null | undefined;
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
             enabled?: boolean | undefined;
-            default_model?: string | null | undefined;
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+            default_model?: string | null | undefined;
             max_rounds?: number | null | undefined;
             tools_allow?: string[] | undefined;
             tools_deny?: string[] | undefined;
         }> | undefined;
         budget?: {
-            max_usd_per_run?: number | null | undefined;
+            paid_budget_per_run?: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            } | undefined;
             estimate_usd_floor?: number | undefined;
         } | undefined;
-        default_portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
         interaction_timeout_ms?: number | undefined;
         routing?: {
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
@@ -603,7 +883,13 @@ export declare const ResolvedConfig: z.ZodObject<{
             primary_harness?: string | null | undefined;
             eligible_harnesses?: string[] | undefined;
             default_policy?: "auto" | "primary" | undefined;
-            quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+            goal?: "auto" | "quality" | "economy" | undefined;
+            paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+            quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>> | undefined;
         } | undefined;
         runtime?: {
             transient_retry?: {
@@ -619,23 +905,38 @@ export declare const ResolvedConfig: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     project: {
         version: 1;
+        tests: {
+            commands: {
+                program: string;
+                args: string[];
+                envAllowlist: string[];
+                cwd?: string | undefined;
+            }[];
+        };
+        budget: {
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
+        };
         context: {
             mandatory_files: string[];
             include: string[];
             exclude: string[];
         };
-        tests: {
-            commands: string[];
-        };
-        budget: {
-            portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
-        };
     };
     trust: {
         version: 1;
         access_default: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
         allow_full_access: boolean;
         repo_root: string | null;
+        test_command_grants: {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            scriptPath: string | null;
+            scriptDigest: string | null;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        }[];
     };
     global: {
         version: 1;
@@ -643,20 +944,23 @@ export declare const ResolvedConfig: z.ZodObject<{
             fallback_model: string | null;
             max_turns: number | null;
             web: "off" | "auto" | "cached" | "live";
-            max_usd: number | null;
             auth_preference: "auto" | "subscription" | "api_key";
             enabled: boolean;
-            default_model: string | null;
             effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+            default_model: string | null;
             max_rounds: number | null;
             tools_allow: string[];
             tools_deny: string[];
         }>;
         budget: {
-            max_usd_per_run: number | null;
+            paid_budget_per_run: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            };
             estimate_usd_floor: number;
         };
-        default_portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
         interaction_timeout_ms: number;
         routing: {
             auth_preference: "auto" | "subscription" | "api_key";
@@ -664,7 +968,13 @@ export declare const ResolvedConfig: z.ZodObject<{
             primary_harness: string | null;
             eligible_harnesses: string[];
             default_policy: "auto" | "primary";
-            quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+            goal: "auto" | "quality" | "economy";
+            paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+            quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>>;
         };
         runtime: {
             transient_retry: {
@@ -680,23 +990,38 @@ export declare const ResolvedConfig: z.ZodObject<{
 }, {
     project: {
         version?: 1 | undefined;
+        tests?: {
+            commands?: {
+                program: string;
+                cwd?: string | undefined;
+                args?: string[] | undefined;
+                envAllowlist?: string[] | undefined;
+            }[] | undefined;
+        } | undefined;
+        budget?: {
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
+        } | undefined;
         context?: {
             mandatory_files?: string[] | undefined;
             include?: string[] | undefined;
             exclude?: string[] | undefined;
         } | undefined;
-        tests?: {
-            commands?: string[] | undefined;
-        } | undefined;
-        budget?: {
-            portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-        } | undefined;
     };
     trust: {
         version?: 1 | undefined;
         access_default?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
         allow_full_access?: boolean | undefined;
         repo_root?: string | null | undefined;
+        test_command_grants?: {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            scriptPath?: string | null | undefined;
+            scriptDigest?: string | null | undefined;
+        }[] | undefined;
     };
     global: {
         version?: 1 | undefined;
@@ -704,20 +1029,23 @@ export declare const ResolvedConfig: z.ZodObject<{
             fallback_model?: string | null | undefined;
             max_turns?: number | null | undefined;
             web?: "off" | "auto" | "cached" | "live" | undefined;
-            max_usd?: number | null | undefined;
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
             enabled?: boolean | undefined;
-            default_model?: string | null | undefined;
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+            default_model?: string | null | undefined;
             max_rounds?: number | null | undefined;
             tools_allow?: string[] | undefined;
             tools_deny?: string[] | undefined;
         }> | undefined;
         budget?: {
-            max_usd_per_run?: number | null | undefined;
+            paid_budget_per_run?: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            } | undefined;
             estimate_usd_floor?: number | undefined;
         } | undefined;
-        default_portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
         interaction_timeout_ms?: number | undefined;
         routing?: {
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
@@ -725,7 +1053,13 @@ export declare const ResolvedConfig: z.ZodObject<{
             primary_harness?: string | null | undefined;
             eligible_harnesses?: string[] | undefined;
             default_policy?: "auto" | "primary" | undefined;
-            quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+            goal?: "auto" | "quality" | "economy" | undefined;
+            paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+            quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>> | undefined;
         } | undefined;
         runtime?: {
             transient_retry?: {