@claudexor/schema 1.0.0

package/dist/harness.d.ts

@@ -0,0 +1,1418 @@
+import { z } from "zod";
+/** Quality of a usage/quota signal a harness can emit. */
+export declare const SignalQuality: z.ZodEnum<["exact", "native", "observed", "manual", "unknown"]>;
+export type SignalQuality = z.infer<typeof SignalQuality>;
+/**
+ * Open cross-harness reasoning-effort vocabulary. Adapters declare the SUBSET
+ * they actually support via `HarnessCapabilities.effort_levels`; a shared
+ * normalizer maps any requested level onto the nearest supported one. New levels
+ * (e.g. a future `ultra`) extend this union without touching adapter logic.
+ */
+export declare const EffortHint: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+export type EffortHint = z.infer<typeof EffortHint>;
+export declare const HarnessKind: z.ZodEnum<["local_cli", "remote_api", "fake"]>;
+export type HarnessKind = z.infer<typeof HarnessKind>;
+/**
+ * How a harness can honor the external web policy:
+ * - `native`: web modes are a native config surface (codex web_search).
+ * - `tools`: web runs through permissioned tools the adapter can allow/deny (claude).
+ * - `uncontrolled`: the harness CAN reach the web but exposes no enforceable
+ *   switch — incompatible with `off` (cannot be enforced) AND with
+ *   `cached`/`live` (cannot produce required evidence). cursor/opencode today.
+ * - `none`: the harness has NO web access at all — trivially satisfies `off`,
+ *   incompatible with web-required policies. raw-api/fake.
+ */
+export declare const WebPolicySupport: z.ZodEnum<["native", "tools", "uncontrolled", "none"]>;
+export type WebPolicySupport = z.infer<typeof WebPolicySupport>;
+/**
+ * Declared capabilities the ENGINE actually consumes (intent gating, routing,
+ * knob support, disclosure). Every field here has a reader; declared-but-
+ * never-read booleans (historically: spec/repair/shell/edit_files/
+ * apply_patch/structured_events/structured_output/resume/cancel/mcp/plugins/
+ * worktree_native) were deleted — a capability with no consumer is the same
+ * bug class as a staged field. Re-add one only WITH its consumer in the same
+ * change (as `json_schema_output` was, together with the structured-output
+ * gate that reads it).
+ */
+export declare const HarnessCapabilities: z.ZodObject<{
+    plan: z.ZodDefault<z.ZodBoolean>;
+    implement: z.ZodDefault<z.ZodBoolean>;
+    create_from_scratch: z.ZodDefault<z.ZodBoolean>;
+    review: z.ZodDefault<z.ZodBoolean>;
+    /** Consumed by the Phase-3 FinalVerifier routing (gating pushes `verify`). */
+    verify: z.ZodDefault<z.ZodBoolean>;
+    synthesize: z.ZodDefault<z.ZodBoolean>;
+    read_files: z.ZodDefault<z.ZodBoolean>;
+    /**
+     * The adapter can inject a browser-automation MCP server (Playwright MCP) that
+     * this harness drives as `browser_*` tools (navigate / screenshot / snapshot).
+     * Gated on web policy: never injected under `external_context_policy:off`.
+     */
+    browser_tool: z.ZodDefault<z.ZodBoolean>;
+    web_policy: z.ZodDefault<z.ZodEnum<["native", "tools", "uncontrolled", "none"]>>;
+    /** Honors HarnessRunSpec.max_turns (e.g. claude --max-turns). */
+    max_turns: z.ZodDefault<z.ZodBoolean>;
+    /** Honors tool_permission_policy allow/deny lists (e.g. claude --allowedTools). */
+    tool_lists: z.ZodDefault<z.ZodBoolean>;
+    /**
+     * The adapter can surface interactive user questions (interaction_requested
+     * events) and deliver typed answers back into the live session. Claude's
+     * bidirectional stream-json control protocol today; honest false elsewhere.
+     */
+    interactive: z.ZodDefault<z.ZodBoolean>;
+    /**
+     * The harness can play the autonomous `orchestrate` planner intent: plan
+     * multi-harness work over the typed tool belt. NOT a privileged role — routed
+     * like reviewers via doctor + capability + quota headroom.
+     */
+    orchestrate: z.ZodDefault<z.ZodBoolean>;
+    /**
+     * The harness can constrain its FINAL message to a caller-supplied JSON
+     * Schema (codex `--output-schema <file>`, claude `--json-schema <json>`).
+     * Consumer: the engine passes HarnessRunSpec.output_schema only to routes
+     * declaring this; everything else keeps fenced-JSON parsing.
+     */
+    json_schema_output: z.ZodDefault<z.ZodBoolean>;
+    /**
+     * Ordered (weakest→strongest) reasoning-effort levels this harness actually
+     * accepts. Empty = effort is not a tunable surface. The shared effort
+     * normalizer clamps any requested EffortHint onto the nearest member.
+     */
+    effort_levels: z.ZodDefault<z.ZodArray<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>, "many">>;
+    /**
+     * Known model ids/aliases this harness accepts — the manifest-declared model
+     * truth source used when the adapter has no live `models()` inventory.
+     * STRICT: an explicit model outside the active truth source is refused
+     * at settings-write, run preflight, and reviewer resolution; a harness with
+     * NO truth source (no `models()` and an empty list) refuses every explicit
+     * model. Data-driven like `effort_levels` — no model id is hardcoded in
+     * routing logic.
+     */
+    known_models: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /**
+     * Vendor CLI version this `known_models` hint set was last verified against
+     * (freshness note, surfaced with manifest-sourced model lists and checked by
+     * the model-hints-freshness gate). Null = never verified / not applicable.
+     */
+    known_models_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    plan: boolean;
+    orchestrate: boolean;
+    implement: boolean;
+    create_from_scratch: boolean;
+    review: boolean;
+    verify: boolean;
+    synthesize: boolean;
+    read_files: boolean;
+    browser_tool: boolean;
+    web_policy: "none" | "native" | "tools" | "uncontrolled";
+    max_turns: boolean;
+    tool_lists: boolean;
+    interactive: boolean;
+    json_schema_output: boolean;
+    effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
+    known_models: string[];
+    known_models_verified_against: string | null;
+}, {
+    plan?: boolean | undefined;
+    orchestrate?: boolean | undefined;
+    implement?: boolean | undefined;
+    create_from_scratch?: boolean | undefined;
+    review?: boolean | undefined;
+    verify?: boolean | undefined;
+    synthesize?: boolean | undefined;
+    read_files?: boolean | undefined;
+    browser_tool?: boolean | undefined;
+    web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
+    max_turns?: boolean | undefined;
+    tool_lists?: boolean | undefined;
+    interactive?: boolean | undefined;
+    json_schema_output?: boolean | undefined;
+    effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
+    known_models?: string[] | undefined;
+    known_models_verified_against?: string | null | undefined;
+}>;
+export type HarnessCapabilities = z.infer<typeof HarnessCapabilities>;
+export declare const AuthSourceKind: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+export type AuthSourceKind = z.infer<typeof AuthSourceKind>;
+export declare const CredentialTransportKind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
+export type CredentialTransportKind = z.infer<typeof CredentialTransportKind>;
+export declare const CredentialRelocation: z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>;
+export type CredentialRelocation = z.infer<typeof CredentialRelocation>;
+export declare const CredentialTransport: z.ZodObject<{
+    source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+    kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
+    relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+    relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+}, {
+    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+    relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+}>;
+export type CredentialTransport = z.infer<typeof CredentialTransport>;
+export declare const AuthCapabilities: z.ZodDefault<z.ZodObject<{
+    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+    credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+        kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
+        relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+    }, {
+        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
+    preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+    credential_transports: {
+        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+    }[];
+}, {
+    supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
+    preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+    credential_transports?: {
+        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+    }[] | undefined;
+}>>;
+export type AuthCapabilities = z.infer<typeof AuthCapabilities>;
+export declare const ContainmentKind: z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>;
+export type ContainmentKind = z.infer<typeof ContainmentKind>;
+export declare const IsolationCapabilities: z.ZodDefault<z.ZodObject<{
+    supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
+}, {
+    supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
+}>>;
+export type IsolationCapabilities = z.infer<typeof IsolationCapabilities>;
+export declare const ReadonlyMechanism: z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>;
+export type ReadonlyMechanism = z.infer<typeof ReadonlyMechanism>;
+export declare const AccessControlCapabilities: z.ZodDefault<z.ZodObject<{
+    readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
+}, "strip", z.ZodTypeAny, {
+    readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+}, {
+    readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
+}>>;
+export type AccessControlCapabilities = z.infer<typeof AccessControlCapabilities>;
+/**
+ * Structured per-harness facts the engine consumes: auth routing (scoped-home
+ * keychain bridging), isolation containment, honest readonly mechanism, and
+ * vision input. The v0.15 triage deleted the never-consumed subtrees
+ * (execution_surfaces, session, output, probe/env metadata, access booleans):
+ * a declared capability with no consumer is a staged field. Re-add a branch
+ * only WITH its consumer in the same change.
+ */
+export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
+    auth: z.ZodDefault<z.ZodObject<{
+        supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+        preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+        credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+            kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
+            relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+        }, {
+            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
+        preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+        credential_transports: {
+            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+        }[];
+    }, {
+        supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
+        preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+        credential_transports?: {
+            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+        }[] | undefined;
+    }>>;
+    access_control: z.ZodDefault<z.ZodObject<{
+        readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
+    }, "strip", z.ZodTypeAny, {
+        readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+    }, {
+        readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
+    }>>;
+    isolation: z.ZodDefault<z.ZodObject<{
+        supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
+    }, {
+        supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
+    }>>;
+    /** How the harness accepts image input (drives honest attach gating + the
+     *  per-adapter serializer). `none` = no vision input on this route. */
+    image_input: z.ZodDefault<z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>>;
+}, "strip", z.ZodTypeAny, {
+    auth: {
+        supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
+        preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+        credential_transports: {
+            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+        }[];
+    };
+    access_control: {
+        readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+    };
+    isolation: {
+        supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
+    };
+    image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+}, {
+    auth?: {
+        supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
+        preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+        credential_transports?: {
+            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+        }[] | undefined;
+    } | undefined;
+    access_control?: {
+        readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
+    } | undefined;
+    isolation?: {
+        supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
+    } | undefined;
+    image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+}>>;
+export type HarnessCapabilityProfile = z.infer<typeof HarnessCapabilityProfile>;
+/**
+ * One enumerable model offered by a harness. Deliberately small: only the
+ * fields a real enumeration source (an OpenAI-compatible `GET /v1/models`)
+ * can honestly populate. `label`/`context_window` are nullable because the
+ * raw `{data:[{id}]}` list rarely carries them.
+ */
+export declare const HarnessModel: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    context_window: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    label: string | null;
+    context_window: number | null;
+}, {
+    id: string;
+    label?: string | null | undefined;
+    context_window?: number | null | undefined;
+}>;
+export type HarnessModel = z.infer<typeof HarnessModel>;
+export declare const HarnessManifest: z.ZodObject<{
+    id: z.ZodString;
+    display_name: z.ZodString;
+    kind: z.ZodEnum<["local_cli", "remote_api", "fake"]>;
+    version: z.ZodOptional<z.ZodString>;
+    adapter_version: z.ZodOptional<z.ZodString>;
+    provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
+    capability_profile: z.ZodDefault<z.ZodObject<{
+        auth: z.ZodDefault<z.ZodObject<{
+            supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+            preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+            credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
+                relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+            }, "strip", z.ZodTypeAny, {
+                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+            }, {
+                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+            }>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
+            preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+            credential_transports: {
+                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+            }[];
+        }, {
+            supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
+            preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+            credential_transports?: {
+                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+            }[] | undefined;
+        }>>;
+        access_control: z.ZodDefault<z.ZodObject<{
+            readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
+        }, "strip", z.ZodTypeAny, {
+            readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+        }, {
+            readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
+        }>>;
+        isolation: z.ZodDefault<z.ZodObject<{
+            supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
+        }, {
+            supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
+        }>>;
+        /** How the harness accepts image input (drives honest attach gating + the
+         *  per-adapter serializer). `none` = no vision input on this route. */
+        image_input: z.ZodDefault<z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>>;
+    }, "strip", z.ZodTypeAny, {
+        auth: {
+            supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
+            preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+            credential_transports: {
+                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+            }[];
+        };
+        access_control: {
+            readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+        };
+        isolation: {
+            supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
+        };
+        image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+    }, {
+        auth?: {
+            supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
+            preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+            credential_transports?: {
+                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+            }[] | undefined;
+        } | undefined;
+        access_control?: {
+            readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
+        } | undefined;
+        isolation?: {
+            supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
+        } | undefined;
+        image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+    }>>;
+    /** Compatibility convenience fields. New routing/UI should prefer capability_profile. */
+    capabilities: z.ZodObject<{
+        plan: z.ZodDefault<z.ZodBoolean>;
+        implement: z.ZodDefault<z.ZodBoolean>;
+        create_from_scratch: z.ZodDefault<z.ZodBoolean>;
+        review: z.ZodDefault<z.ZodBoolean>;
+        /** Consumed by the Phase-3 FinalVerifier routing (gating pushes `verify`). */
+        verify: z.ZodDefault<z.ZodBoolean>;
+        synthesize: z.ZodDefault<z.ZodBoolean>;
+        read_files: z.ZodDefault<z.ZodBoolean>;
+        /**
+         * The adapter can inject a browser-automation MCP server (Playwright MCP) that
+         * this harness drives as `browser_*` tools (navigate / screenshot / snapshot).
+         * Gated on web policy: never injected under `external_context_policy:off`.
+         */
+        browser_tool: z.ZodDefault<z.ZodBoolean>;
+        web_policy: z.ZodDefault<z.ZodEnum<["native", "tools", "uncontrolled", "none"]>>;
+        /** Honors HarnessRunSpec.max_turns (e.g. claude --max-turns). */
+        max_turns: z.ZodDefault<z.ZodBoolean>;
+        /** Honors tool_permission_policy allow/deny lists (e.g. claude --allowedTools). */
+        tool_lists: z.ZodDefault<z.ZodBoolean>;
+        /**
+         * The adapter can surface interactive user questions (interaction_requested
+         * events) and deliver typed answers back into the live session. Claude's
+         * bidirectional stream-json control protocol today; honest false elsewhere.
+         */
+        interactive: z.ZodDefault<z.ZodBoolean>;
+        /**
+         * The harness can play the autonomous `orchestrate` planner intent: plan
+         * multi-harness work over the typed tool belt. NOT a privileged role — routed
+         * like reviewers via doctor + capability + quota headroom.
+         */
+        orchestrate: z.ZodDefault<z.ZodBoolean>;
+        /**
+         * The harness can constrain its FINAL message to a caller-supplied JSON
+         * Schema (codex `--output-schema <file>`, claude `--json-schema <json>`).
+         * Consumer: the engine passes HarnessRunSpec.output_schema only to routes
+         * declaring this; everything else keeps fenced-JSON parsing.
+         */
+        json_schema_output: z.ZodDefault<z.ZodBoolean>;
+        /**
+         * Ordered (weakest→strongest) reasoning-effort levels this harness actually
+         * accepts. Empty = effort is not a tunable surface. The shared effort
+         * normalizer clamps any requested EffortHint onto the nearest member.
+         */
+        effort_levels: z.ZodDefault<z.ZodArray<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>, "many">>;
+        /**
+         * Known model ids/aliases this harness accepts — the manifest-declared model
+         * truth source used when the adapter has no live `models()` inventory.
+         * STRICT: an explicit model outside the active truth source is refused
+         * at settings-write, run preflight, and reviewer resolution; a harness with
+         * NO truth source (no `models()` and an empty list) refuses every explicit
+         * model. Data-driven like `effort_levels` — no model id is hardcoded in
+         * routing logic.
+         */
+        known_models: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /**
+         * Vendor CLI version this `known_models` hint set was last verified against
+         * (freshness note, surfaced with manifest-sourced model lists and checked by
+         * the model-hints-freshness gate). Null = never verified / not applicable.
+         */
+        known_models_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        plan: boolean;
+        orchestrate: boolean;
+        implement: boolean;
+        create_from_scratch: boolean;
+        review: boolean;
+        verify: boolean;
+        synthesize: boolean;
+        read_files: boolean;
+        browser_tool: boolean;
+        web_policy: "none" | "native" | "tools" | "uncontrolled";
+        max_turns: boolean;
+        tool_lists: boolean;
+        interactive: boolean;
+        json_schema_output: boolean;
+        effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
+        known_models: string[];
+        known_models_verified_against: string | null;
+    }, {
+        plan?: boolean | undefined;
+        orchestrate?: boolean | undefined;
+        implement?: boolean | undefined;
+        create_from_scratch?: boolean | undefined;
+        review?: boolean | undefined;
+        verify?: boolean | undefined;
+        synthesize?: boolean | undefined;
+        read_files?: boolean | undefined;
+        browser_tool?: boolean | undefined;
+        web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
+        max_turns?: boolean | undefined;
+        tool_lists?: boolean | undefined;
+        interactive?: boolean | undefined;
+        json_schema_output?: boolean | undefined;
+        effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
+        known_models?: string[] | undefined;
+        known_models_verified_against?: string | null | undefined;
+    }>;
+    auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
+    access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    kind: "local_cli" | "remote_api" | "fake";
+    display_name: string;
+    provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
+    capability_profile: {
+        auth: {
+            supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
+            preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+            credential_transports: {
+                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
+            }[];
+        };
+        access_control: {
+            readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+        };
+        isolation: {
+            supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
+        };
+        image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+    };
+    capabilities: {
+        plan: boolean;
+        orchestrate: boolean;
+        implement: boolean;
+        create_from_scratch: boolean;
+        review: boolean;
+        verify: boolean;
+        synthesize: boolean;
+        read_files: boolean;
+        browser_tool: boolean;
+        web_policy: "none" | "native" | "tools" | "uncontrolled";
+        max_turns: boolean;
+        tool_lists: boolean;
+        interactive: boolean;
+        json_schema_output: boolean;
+        effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
+        known_models: string[];
+        known_models_verified_against: string | null;
+    };
+    auth_modes: ("api_key" | "none" | "local_session")[];
+    access_profiles_supported: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+    version?: string | undefined;
+    adapter_version?: string | undefined;
+}, {
+    id: string;
+    kind: "local_cli" | "remote_api" | "fake";
+    display_name: string;
+    capabilities: {
+        plan?: boolean | undefined;
+        orchestrate?: boolean | undefined;
+        implement?: boolean | undefined;
+        create_from_scratch?: boolean | undefined;
+        review?: boolean | undefined;
+        verify?: boolean | undefined;
+        synthesize?: boolean | undefined;
+        read_files?: boolean | undefined;
+        browser_tool?: boolean | undefined;
+        web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
+        max_turns?: boolean | undefined;
+        tool_lists?: boolean | undefined;
+        interactive?: boolean | undefined;
+        json_schema_output?: boolean | undefined;
+        effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
+        known_models?: string[] | undefined;
+        known_models_verified_against?: string | null | undefined;
+    };
+    version?: string | undefined;
+    adapter_version?: string | undefined;
+    provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
+    capability_profile?: {
+        auth?: {
+            supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
+            preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+            credential_transports?: {
+                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
+                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
+            }[] | undefined;
+        } | undefined;
+        access_control?: {
+            readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
+        } | undefined;
+        isolation?: {
+            supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
+        } | undefined;
+        image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+    } | undefined;
+    auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
+    access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
+}>;
+export type HarnessManifest = z.infer<typeof HarnessManifest>;
+/** Result of a conformance probe for one capability check. */
+export declare const ConformanceCheck: z.ZodObject<{
+    id: z.ZodString;
+    status: z.ZodEnum<["pass", "fail", "skip"]>;
+    detail: z.ZodOptional<z.ZodString>;
+    duration_ms: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    status: "pass" | "fail" | "skip";
+    id: string;
+    detail?: string | undefined;
+    duration_ms?: number | undefined;
+}, {
+    status: "pass" | "fail" | "skip";
+    id: string;
+    detail?: string | undefined;
+    duration_ms?: number | undefined;
+}>;
+export type ConformanceCheck = z.infer<typeof ConformanceCheck>;
+export declare const AdapterStatus: z.ZodEnum<["ok", "degraded", "unavailable"]>;
+export type AdapterStatus = z.infer<typeof AdapterStatus>;
+export declare const ConformanceReport: z.ZodObject<{
+    harness_id: z.ZodString;
+    status: z.ZodEnum<["ok", "degraded", "unavailable"]>;
+    checks: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        status: z.ZodEnum<["pass", "fail", "skip"]>;
+        detail: z.ZodOptional<z.ZodString>;
+        duration_ms: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        status: "pass" | "fail" | "skip";
+        id: string;
+        detail?: string | undefined;
+        duration_ms?: number | undefined;
+    }, {
+        status: "pass" | "fail" | "skip";
+        id: string;
+        detail?: string | undefined;
+        duration_ms?: number | undefined;
+    }>, "many">>;
+    enabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, "many">>;
+    disabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, "many">>;
+    reasons: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    status: "ok" | "degraded" | "unavailable";
+    harness_id: string;
+    checks: {
+        status: "pass" | "fail" | "skip";
+        id: string;
+        detail?: string | undefined;
+        duration_ms?: number | undefined;
+    }[];
+    enabled_intents: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[];
+    disabled_intents: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[];
+    reasons: string[];
+}, {
+    status: "ok" | "degraded" | "unavailable";
+    harness_id: string;
+    checks?: {
+        status: "pass" | "fail" | "skip";
+        id: string;
+        detail?: string | undefined;
+        duration_ms?: number | undefined;
+    }[] | undefined;
+    enabled_intents?: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[] | undefined;
+    disabled_intents?: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[] | undefined;
+    reasons?: string[] | undefined;
+}>;
+export type ConformanceReport = z.infer<typeof ConformanceReport>;
+/**
+ * Per-run browser-tool wiring. Present (non-null) on a HarnessRunSpec ONLY when
+ * the orchestrator has decided this run gets the agent-driven browser: the run
+ * opted in, the harness has the `browser_tool` capability, AND web policy is not
+ * `off`. The adapter injects Playwright MCP accordingly.
+ */
+export declare const BrowserToolSpec: z.ZodObject<{
+    /**
+     * `--output-dir` for the browser MCP. Captures the per-navigation accessibility
+     * SNAPSHOTS (Playwright MCP writes screenshot image files to the agent's cwd,
+     * not here) into the run artifact tree as a browsing record the Canvas gallery
+     * lists. The live view is the headed window itself. Null = MCP's own temp dir.
+     */
+    output_dir: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    /**
+     * Run the browser headless (no visible window). Default false — a headed
+     * Chromium so the user can watch the agent browse directly (the chosen mirror:
+     * a real visible window, not an embedded screencast).
+     */
+    headless: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    output_dir: string | null;
+    headless: boolean;
+}, {
+    output_dir?: string | null | undefined;
+    headless?: boolean | undefined;
+}>;
+export type BrowserToolSpec = z.infer<typeof BrowserToolSpec>;
+/** Spec passed to a harness adapter's run(). */
+export declare const HarnessRunSpec: z.ZodObject<{
+    session_id: z.ZodString;
+    intent: z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>;
+    prompt: z.ZodString;
+    cwd: z.ZodString;
+    access: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+    external_context_policy: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+    tool_permission_policy: z.ZodDefault<z.ZodObject<{
+        web: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+        allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        web: "off" | "auto" | "cached" | "live";
+        allow: string[];
+        deny: string[];
+    }, {
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        allow?: string[] | undefined;
+        deny?: string[] | undefined;
+    }>>;
+    model_hint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    effort_hint: z.ZodDefault<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
+    max_usd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    /**
+     * Which auth route the attempt should use. `auto` = subscription-first with
+     * api_key fallback; adapters seed native session vs inject the key accordingly.
+     */
+    auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+    /**
+     * Native CLI session id to resume into (codex `exec resume`, claude `--resume`,
+     * cursor `agent --resume`, opencode `run --session`). Null starts a fresh session.
+     */
+    resume_session_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    /**
+     * How the child harness env is composed. `mirror_native` inherits the parent
+     * env (minus provider-secret scrub); `clean` spawns from a minimal allowlist
+     * (agent env isolation). Threaded from routing.env_inheritance at spawn.
+     */
+    env_inheritance: z.ZodDefault<z.ZodEnum<["mirror_native", "clean"]>>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /**
+     * User/agent attachments (images, files) forwarded to the harness in its
+     * native shape per `capability_profile.image_input`. Empty for non-vision
+     * harnesses — the orchestrator drops + discloses rather than silently ignore.
+     */
+    attachments: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodDefault<z.ZodEnum<["image", "file"]>>;
+        mime: z.ZodDefault<z.ZodString>;
+        name: z.ZodDefault<z.ZodString>;
+        path: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        path: string;
+        id: string;
+        kind: "image" | "file";
+        mime: string;
+        name: string;
+    }, {
+        path: string;
+        id: string;
+        kind?: "image" | "file" | undefined;
+        mime?: string | undefined;
+        name?: string | undefined;
+    }>, "many">>;
+    /**
+     * Agent-driven browser wiring. Null = no browser tool this run (the common
+     * case). Set by the orchestrator only when the run opted in, the harness has
+     * `browser_tool`, and web policy is not `off`.
+     */
+    browser: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        /**
+         * `--output-dir` for the browser MCP. Captures the per-navigation accessibility
+         * SNAPSHOTS (Playwright MCP writes screenshot image files to the agent's cwd,
+         * not here) into the run artifact tree as a browsing record the Canvas gallery
+         * lists. The live view is the headed window itself. Null = MCP's own temp dir.
+         */
+        output_dir: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        /**
+         * Run the browser headless (no visible window). Default false — a headed
+         * Chromium so the user can watch the agent browse directly (the chosen mirror:
+         * a real visible window, not an embedded screencast).
+         */
+        headless: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        output_dir: string | null;
+        headless: boolean;
+    }, {
+        output_dir?: string | null | undefined;
+        headless?: boolean | undefined;
+    }>>>;
+    /**
+     * JSON Schema constraining the harness's FINAL message. Producers:
+     * the orchestrate planner (OrchestratePlan schema) and spec-questions
+     * grounding (InterviewQuestion block). Passed only to routes whose manifest
+     * declares `json_schema_output`; consumers add the native CLI flag.
+     */
+    output_schema: z.ZodOptional<z.ZodUnknown>;
+    extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    max_turns: number | null;
+    session_id: string;
+    intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
+    prompt: string;
+    cwd: string;
+    access: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    external_context_policy: "off" | "auto" | "cached" | "live";
+    tool_permission_policy: {
+        web: "off" | "auto" | "cached" | "live";
+        allow: string[];
+        deny: string[];
+    };
+    model_hint: string | null;
+    effort_hint: "low" | "medium" | "high" | "xhigh" | "max" | null;
+    max_usd: number | null;
+    auth_preference: "auto" | "subscription" | "api_key";
+    resume_session_id: string | null;
+    env_inheritance: "mirror_native" | "clean";
+    env: Record<string, string>;
+    attachments: {
+        path: string;
+        id: string;
+        kind: "image" | "file";
+        mime: string;
+        name: string;
+    }[];
+    browser: {
+        output_dir: string | null;
+        headless: boolean;
+    } | null;
+    extra: Record<string, unknown>;
+    output_schema?: unknown;
+}, {
+    session_id: string;
+    intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
+    prompt: string;
+    cwd: string;
+    max_turns?: number | null | undefined;
+    access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+    external_context_policy?: "off" | "auto" | "cached" | "live" | undefined;
+    tool_permission_policy?: {
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        allow?: string[] | undefined;
+        deny?: string[] | undefined;
+    } | undefined;
+    model_hint?: string | null | undefined;
+    effort_hint?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+    max_usd?: number | null | undefined;
+    auth_preference?: "auto" | "subscription" | "api_key" | undefined;
+    resume_session_id?: string | null | undefined;
+    env_inheritance?: "mirror_native" | "clean" | undefined;
+    env?: Record<string, string> | undefined;
+    attachments?: {
+        path: string;
+        id: string;
+        kind?: "image" | "file" | undefined;
+        mime?: string | undefined;
+        name?: string | undefined;
+    }[] | undefined;
+    browser?: {
+        output_dir?: string | null | undefined;
+        headless?: boolean | undefined;
+    } | null | undefined;
+    output_schema?: unknown;
+    extra?: Record<string, unknown> | undefined;
+}>;
+export type HarnessRunSpec = z.infer<typeof HarnessRunSpec>;
+/**
+ * Coarse tool classification used for typed governance (no tool-name string
+ * matching outside adapters). Adapters map native tool names to a kind.
+ */
+export declare const ToolKind: z.ZodEnum<["web", "file", "command", "mcp", "search", "other"]>;
+export type ToolKind = z.infer<typeof ToolKind>;
+/**
+ * Typed tool reference attached to `tool_call` / `tool_result` events.
+ * `status` is REQUIRED on `tool_result` events (adapter conformance enforces it);
+ * a missing status on a result is treated as a dropped/diagnostic event, never as ok.
+ */
+export declare const ToolRef: z.ZodObject<{
+    name: z.ZodString;
+    kind: z.ZodDefault<z.ZodEnum<["web", "file", "command", "mcp", "search", "other"]>>;
+    use_id: z.ZodOptional<z.ZodString>;
+    /** Redacted, bounded human-readable target (query/url/path/command). */
+    target: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<["ok", "error", "cancelled", "denied"]>>;
+    /** Redacted, bounded error detail for status=error results. */
+    error_summary: z.ZodOptional<z.ZodString>;
+    /** Redacted, bounded content detail for results (success or failure). */
+    content_summary: z.ZodOptional<z.ZodString>;
+    exit_code: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    kind: "file" | "web" | "command" | "mcp" | "search" | "other";
+    name: string;
+    status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+    use_id?: string | undefined;
+    target?: string | undefined;
+    error_summary?: string | undefined;
+    content_summary?: string | undefined;
+    exit_code?: number | undefined;
+}, {
+    name: string;
+    status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+    kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
+    use_id?: string | undefined;
+    target?: string | undefined;
+    error_summary?: string | undefined;
+    content_summary?: string | undefined;
+    exit_code?: number | undefined;
+}>;
+export type ToolRef = z.infer<typeof ToolRef>;
+/**
+ * One multiple-choice option of an interactive question (AskUserQuestion-style).
+ */
+export declare const InteractionOption: z.ZodObject<{
+    label: z.ZodString;
+    description: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    description: string | null;
+}, {
+    label: string;
+    description?: string | null | undefined;
+}>;
+export type InteractionOption = z.infer<typeof InteractionOption>;
+export declare const InteractionQuestion: z.ZodObject<{
+    id: z.ZodString;
+    question: z.ZodString;
+    /** Short chip/header text some harnesses attach to a question. */
+    header: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    options: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        description: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        label: string;
+        description: string | null;
+    }, {
+        label: string;
+        description?: string | null | undefined;
+    }>, "many">>;
+    multi_select: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    options: {
+        label: string;
+        description: string | null;
+    }[];
+    id: string;
+    question: string;
+    header: string | null;
+    multi_select: boolean;
+}, {
+    id: string;
+    question: string;
+    options?: {
+        label: string;
+        description?: string | null | undefined;
+    }[] | undefined;
+    header?: string | null | undefined;
+    multi_select?: boolean | undefined;
+}>;
+export type InteractionQuestion = z.infer<typeof InteractionQuestion>;
+/**
+ * A live request for user input raised by an interactive harness session.
+ * Carried on `interaction_requested` HarnessEvents and projected into
+ * `interaction.requested` RunEvents.
+ */
+export declare const InteractionRequest: z.ZodObject<{
+    interaction_id: z.ZodString;
+    questions: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        question: z.ZodString;
+        /** Short chip/header text some harnesses attach to a question. */
+        header: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        options: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            label: z.ZodString;
+            description: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            label: string;
+            description: string | null;
+        }, {
+            label: string;
+            description?: string | null | undefined;
+        }>, "many">>;
+        multi_select: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        options: {
+            label: string;
+            description: string | null;
+        }[];
+        id: string;
+        question: string;
+        header: string | null;
+        multi_select: boolean;
+    }, {
+        id: string;
+        question: string;
+        options?: {
+            label: string;
+            description?: string | null | undefined;
+        }[] | undefined;
+        header?: string | null | undefined;
+        multi_select?: boolean | undefined;
+    }>, "many">>;
+    /** Native tool that raised the request (e.g. "AskUserQuestion"). */
+    source_tool: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    interaction_id: string;
+    questions: {
+        options: {
+            label: string;
+            description: string | null;
+        }[];
+        id: string;
+        question: string;
+        header: string | null;
+        multi_select: boolean;
+    }[];
+    source_tool: string | null;
+}, {
+    interaction_id: string;
+    questions?: {
+        id: string;
+        question: string;
+        options?: {
+            label: string;
+            description?: string | null | undefined;
+        }[] | undefined;
+        header?: string | null | undefined;
+        multi_select?: boolean | undefined;
+    }[] | undefined;
+    source_tool?: string | null | undefined;
+}>;
+export type InteractionRequest = z.infer<typeof InteractionRequest>;
+export declare const InteractionAnswer: z.ZodObject<{
+    question_id: z.ZodString;
+    selected_labels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    free_text: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    question_id: string;
+    selected_labels: string[];
+    free_text: string | null;
+}, {
+    question_id: string;
+    selected_labels?: string[] | undefined;
+    free_text?: string | null | undefined;
+}>;
+export type InteractionAnswer = z.infer<typeof InteractionAnswer>;
+export declare const InteractionAnswerSet: z.ZodObject<{
+    interaction_id: z.ZodString;
+    answers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        question_id: z.ZodString;
+        selected_labels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        free_text: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        question_id: string;
+        selected_labels: string[];
+        free_text: string | null;
+    }, {
+        question_id: string;
+        selected_labels?: string[] | undefined;
+        free_text?: string | null | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    interaction_id: string;
+    answers: {
+        question_id: string;
+        selected_labels: string[];
+        free_text: string | null;
+    }[];
+}, {
+    interaction_id: string;
+    answers?: {
+        question_id: string;
+        selected_labels?: string[] | undefined;
+        free_text?: string | null | undefined;
+    }[] | undefined;
+}>;
+export type InteractionAnswerSet = z.infer<typeof InteractionAnswerSet>;
+/** Normalized event emitted by every adapter (the SSOT of adapter output). */
+export declare const HarnessEvent: z.ZodObject<{
+    type: z.ZodEnum<["started", "thinking", "message", "tool_call", "tool_result", "interaction_requested", "file_change", "usage", "error", "completed"]>;
+    session_id: z.ZodString;
+    ts: z.ZodString;
+    text: z.ZodOptional<z.ZodString>;
+    /** Typed tool info; set on `tool_call` and `tool_result` events. */
+    tool: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        kind: z.ZodDefault<z.ZodEnum<["web", "file", "command", "mcp", "search", "other"]>>;
+        use_id: z.ZodOptional<z.ZodString>;
+        /** Redacted, bounded human-readable target (query/url/path/command). */
+        target: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodEnum<["ok", "error", "cancelled", "denied"]>>;
+        /** Redacted, bounded error detail for status=error results. */
+        error_summary: z.ZodOptional<z.ZodString>;
+        /** Redacted, bounded content detail for results (success or failure). */
+        content_summary: z.ZodOptional<z.ZodString>;
+        exit_code: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        kind: "file" | "web" | "command" | "mcp" | "search" | "other";
+        name: string;
+        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        use_id?: string | undefined;
+        target?: string | undefined;
+        error_summary?: string | undefined;
+        content_summary?: string | undefined;
+        exit_code?: number | undefined;
+    }, {
+        name: string;
+        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
+        use_id?: string | undefined;
+        target?: string | undefined;
+        error_summary?: string | undefined;
+        content_summary?: string | undefined;
+        exit_code?: number | undefined;
+    }>>;
+    /** Set on `interaction_requested` events. */
+    interaction: z.ZodOptional<z.ZodObject<{
+        interaction_id: z.ZodString;
+        questions: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            question: z.ZodString;
+            /** Short chip/header text some harnesses attach to a question. */
+            header: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            options: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                label: z.ZodString;
+                description: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strip", z.ZodTypeAny, {
+                label: string;
+                description: string | null;
+            }, {
+                label: string;
+                description?: string | null | undefined;
+            }>, "many">>;
+            multi_select: z.ZodDefault<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            options: {
+                label: string;
+                description: string | null;
+            }[];
+            id: string;
+            question: string;
+            header: string | null;
+            multi_select: boolean;
+        }, {
+            id: string;
+            question: string;
+            options?: {
+                label: string;
+                description?: string | null | undefined;
+            }[] | undefined;
+            header?: string | null | undefined;
+            multi_select?: boolean | undefined;
+        }>, "many">>;
+        /** Native tool that raised the request (e.g. "AskUserQuestion"). */
+        source_tool: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        interaction_id: string;
+        questions: {
+            options: {
+                label: string;
+                description: string | null;
+            }[];
+            id: string;
+            question: string;
+            header: string | null;
+            multi_select: boolean;
+        }[];
+        source_tool: string | null;
+    }, {
+        interaction_id: string;
+        questions?: {
+            id: string;
+            question: string;
+            options?: {
+                label: string;
+                description?: string | null | undefined;
+            }[] | undefined;
+            header?: string | null | undefined;
+            multi_select?: boolean | undefined;
+        }[] | undefined;
+        source_tool?: string | null | undefined;
+    }>>;
+    usage: z.ZodOptional<z.ZodObject<{
+        input_tokens: z.ZodOptional<z.ZodNumber>;
+        output_tokens: z.ZodOptional<z.ZodNumber>;
+        cached_input_tokens: z.ZodOptional<z.ZodNumber>;
+        cost_usd: z.ZodOptional<z.ZodNumber>;
+        /** True when cost_usd is derived from token pricing (not natively reported). */
+        estimated: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        input_tokens?: number | undefined;
+        output_tokens?: number | undefined;
+        cached_input_tokens?: number | undefined;
+        cost_usd?: number | undefined;
+        estimated?: boolean | undefined;
+    }, {
+        input_tokens?: number | undefined;
+        output_tokens?: number | undefined;
+        cached_input_tokens?: number | undefined;
+        cost_usd?: number | undefined;
+        estimated?: boolean | undefined;
+    }>>;
+    observed_model: z.ZodOptional<z.ZodString>;
+    /**
+     * Typed quota/usage-window signal: the harness CLI's OWN record of how
+     * much of its subscription/rate window is consumed. Producers read native
+     * machine-readable surfaces only (codex rollout `token_count.rate_limits`);
+     * a harness with no native surface emits nothing (fail-honest, never
+     * scraped from prose). The budget layer maps this to a `used_percent`
+     * observation; `headroom()` and pool ordering consume it.
+     */
+    quota: z.ZodOptional<z.ZodObject<{
+        /** 0-100: consumed share of the binding rate window. */
+        used_percent: z.ZodNumber;
+        /** Native reset moment for the window, when the CLI reports one. */
+        resets_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        used_percent: number;
+        resets_at: string | null;
+    }, {
+        used_percent: number;
+        resets_at?: string | null | undefined;
+    }>>;
+    /**
+     * Typed live plan/todo progress: adapters map their native plan tools
+     * (codex `todo_list` items, claude `TodoWrite` todos) into this shape in
+     * the parse layer; the orchestrator forwards the LAST-WINS list as a
+     * `plan.progress` run event and the UI renders live checklists. Never
+     * parsed from prose.
+     */
+    plan_progress: z.ZodOptional<z.ZodObject<{
+        items: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            title: z.ZodString;
+            status: z.ZodEnum<["pending", "in_progress", "completed"]>;
+        }, "strip", z.ZodTypeAny, {
+            status: "pending" | "completed" | "in_progress";
+            id: string;
+            title: string;
+        }, {
+            status: "pending" | "completed" | "in_progress";
+            id: string;
+            title: string;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        items: {
+            status: "pending" | "completed" | "in_progress";
+            id: string;
+            title: string;
+        }[];
+    }, {
+        items?: {
+            status: "pending" | "completed" | "in_progress";
+            id: string;
+            title: string;
+        }[] | undefined;
+    }>>;
+    /**
+     * Typed rate-limit / quota signal. Adapters set this in their parse layer when
+     * the native CLI reports a 429 / quota / overload (adapter knowledge is allowed);
+     * the budget layer projects it WITHOUT regex over model/CLI prose. Replaces the
+     * old string-matching governance in budget/observe.ts.
+     */
+    rate_limit: z.ZodOptional<z.ZodObject<{
+        resets_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        retry_delay_ms: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        resets_at: string | null;
+        retry_delay_ms: number | null;
+    }, {
+        resets_at?: string | null | undefined;
+        retry_delay_ms?: number | null | undefined;
+    }>>;
+    /**
+     * Typed transient-failure signal. Adapters set this from native CLI/API error
+     * shapes in their parse layer; the orchestrator consumes it for bounded retry
+     * policy without governing on free-form harness prose.
+     */
+    transient: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodDefault<z.ZodEnum<["network", "stream_disconnect", "service_unavailable", "timeout", "unknown"]>>;
+        retry_delay_ms: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        kind: "unknown" | "network" | "stream_disconnect" | "service_unavailable" | "timeout";
+        retry_delay_ms: number | null;
+    }, {
+        kind?: "unknown" | "network" | "stream_disconnect" | "service_unavailable" | "timeout" | undefined;
+        retry_delay_ms?: number | null | undefined;
+    }>>;
+    error: z.ZodOptional<z.ZodString>;
+    payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    type: "message" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "usage" | "completed";
+    session_id: string;
+    ts: string;
+    error?: string | undefined;
+    usage?: {
+        input_tokens?: number | undefined;
+        output_tokens?: number | undefined;
+        cached_input_tokens?: number | undefined;
+        cost_usd?: number | undefined;
+        estimated?: boolean | undefined;
+    } | undefined;
+    text?: string | undefined;
+    tool?: {
+        kind: "file" | "web" | "command" | "mcp" | "search" | "other";
+        name: string;
+        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        use_id?: string | undefined;
+        target?: string | undefined;
+        error_summary?: string | undefined;
+        content_summary?: string | undefined;
+        exit_code?: number | undefined;
+    } | undefined;
+    interaction?: {
+        interaction_id: string;
+        questions: {
+            options: {
+                label: string;
+                description: string | null;
+            }[];
+            id: string;
+            question: string;
+            header: string | null;
+            multi_select: boolean;
+        }[];
+        source_tool: string | null;
+    } | undefined;
+    observed_model?: string | undefined;
+    quota?: {
+        used_percent: number;
+        resets_at: string | null;
+    } | undefined;
+    plan_progress?: {
+        items: {
+            status: "pending" | "completed" | "in_progress";
+            id: string;
+            title: string;
+        }[];
+    } | undefined;
+    rate_limit?: {
+        resets_at: string | null;
+        retry_delay_ms: number | null;
+    } | undefined;
+    transient?: {
+        kind: "unknown" | "network" | "stream_disconnect" | "service_unavailable" | "timeout";
+        retry_delay_ms: number | null;
+    } | undefined;
+    payload?: Record<string, unknown> | undefined;
+}, {
+    type: "message" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "usage" | "completed";
+    session_id: string;
+    ts: string;
+    error?: string | undefined;
+    usage?: {
+        input_tokens?: number | undefined;
+        output_tokens?: number | undefined;
+        cached_input_tokens?: number | undefined;
+        cost_usd?: number | undefined;
+        estimated?: boolean | undefined;
+    } | undefined;
+    text?: string | undefined;
+    tool?: {
+        name: string;
+        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
+        use_id?: string | undefined;
+        target?: string | undefined;
+        error_summary?: string | undefined;
+        content_summary?: string | undefined;
+        exit_code?: number | undefined;
+    } | undefined;
+    interaction?: {
+        interaction_id: string;
+        questions?: {
+            id: string;
+            question: string;
+            options?: {
+                label: string;
+                description?: string | null | undefined;
+            }[] | undefined;
+            header?: string | null | undefined;
+            multi_select?: boolean | undefined;
+        }[] | undefined;
+        source_tool?: string | null | undefined;
+    } | undefined;
+    observed_model?: string | undefined;
+    quota?: {
+        used_percent: number;
+        resets_at?: string | null | undefined;
+    } | undefined;
+    plan_progress?: {
+        items?: {
+            status: "pending" | "completed" | "in_progress";
+            id: string;
+            title: string;
+        }[] | undefined;
+    } | undefined;
+    rate_limit?: {
+        resets_at?: string | null | undefined;
+        retry_delay_ms?: number | null | undefined;
+    } | undefined;
+    transient?: {
+        kind?: "unknown" | "network" | "stream_disconnect" | "service_unavailable" | "timeout" | undefined;
+        retry_delay_ms?: number | null | undefined;
+    } | undefined;
+    payload?: Record<string, unknown> | undefined;
+}>;
+export type HarnessEvent = z.infer<typeof HarnessEvent>;
+//# sourceMappingURL=harness.d.ts.map