@claudexor/schema 1.0.1 → 2.1.1

package/dist/harness.d.ts

@@ -37,6 +37,7 @@ export type WebPolicySupport = z.infer<typeof WebPolicySupport>;
 export declare const HarnessCapabilities: z.ZodObject<{
     plan: z.ZodDefault<z.ZodBoolean>;
     implement: z.ZodDefault<z.ZodBoolean>;
+    implementation_transport: z.ZodDefault<z.ZodEnum<["workspace", "git_patch_envelope"]>>;
     create_from_scratch: z.ZodDefault<z.ZodBoolean>;
     review: z.ZodDefault<z.ZodBoolean>;
     /** Consumed by the Phase-3 FinalVerifier routing (gating pushes `verify`). */
@@ -88,7 +89,18 @@ export declare const HarnessCapabilities: z.ZodObject<{
      * model. Data-driven like `effort_levels` — no model id is hardcoded in
      * routing logic.
      */
-    known_models: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    known_models: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        /** Credential routes this model is available on. A bare string
+         * entry means ALL routes (backward shape). */
+        routes: z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        routes: ("api_key" | "local_session")[];
+    }, {
+        id: string;
+        routes: ("api_key" | "local_session")[];
+    }>]>, "many">>;
     /**
      * Vendor CLI version this `known_models` hint set was last verified against
      * (freshness note, surfaced with manifest-sourced model lists and checked by
@@ -103,6 +115,7 @@ export declare const HarnessCapabilities: z.ZodObject<{
     review: boolean;
     verify: boolean;
     synthesize: boolean;
+    implementation_transport: "workspace" | "git_patch_envelope";
     read_files: boolean;
     browser_tool: boolean;
     web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -111,7 +124,10 @@ export declare const HarnessCapabilities: z.ZodObject<{
     interactive: boolean;
     json_schema_output: boolean;
     effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-    known_models: string[];
+    known_models: (string | {
+        id: string;
+        routes: ("api_key" | "local_session")[];
+    })[];
     known_models_verified_against: string | null;
 }, {
     plan?: boolean | undefined;
@@ -121,6 +137,7 @@ export declare const HarnessCapabilities: z.ZodObject<{
     review?: boolean | undefined;
     verify?: boolean | undefined;
     synthesize?: boolean | undefined;
+    implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
     read_files?: boolean | undefined;
     browser_tool?: boolean | undefined;
     web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -129,60 +146,67 @@ export declare const HarnessCapabilities: z.ZodObject<{
     interactive?: boolean | undefined;
     json_schema_output?: boolean | undefined;
     effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-    known_models?: string[] | undefined;
+    known_models?: (string | {
+        id: string;
+        routes: ("api_key" | "local_session")[];
+    })[] | undefined;
     known_models_verified_against?: string | null | undefined;
 }>;
 export type HarnessCapabilities = z.infer<typeof HarnessCapabilities>;
-export declare const AuthSourceKind: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
-export type AuthSourceKind = z.infer<typeof AuthSourceKind>;
+export type KnownModelEntry = HarnessCapabilities["known_models"][number];
+/** Model ids from a known_models list that are valid on `route`. ONE owner for
+ * the route filter (INV-122): a bare string entry is valid on every route;
+ * `route: null` (undecidable pre-spawn) returns only the route-UNRESTRICTED
+ * ids — fail-closed, a route-scoped model never leaks past an unknown route. */
+export declare function knownModelIdsForRoute(entries: readonly KnownModelEntry[], route: "local_session" | "api_key" | null): string[];
 export declare const CredentialTransportKind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
 export type CredentialTransportKind = z.infer<typeof CredentialTransportKind>;
 export declare const CredentialRelocation: z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>;
 export type CredentialRelocation = z.infer<typeof CredentialRelocation>;
 export declare const CredentialTransport: z.ZodObject<{
-    source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+    source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
     kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
     relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
     relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
 }, {
-    kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-    source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
     relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
 }>;
 export type CredentialTransport = z.infer<typeof CredentialTransport>;
 export declare const AuthCapabilities: z.ZodDefault<z.ZodObject<{
-    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
     credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
         kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
         relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
     }, {
-        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-    preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+    supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+    preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
     credential_transports: {
-        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
         relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
     }[];
 }, {
-    supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-    preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+    supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+    preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
     credential_transports?: {
-        kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-        source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
         relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
     }[] | undefined;
 }>>;
@@ -217,35 +241,35 @@ export type AccessControlCapabilities = z.infer<typeof AccessControlCapabilities
  */
 export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
     auth: z.ZodDefault<z.ZodObject<{
-        supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-        preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+        supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+        preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
         credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-            source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+            source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
             kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
             relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
         }, "strip", z.ZodTypeAny, {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
         }, {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-        preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+        supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+        preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
         credential_transports: {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
         }[];
     }, {
-        supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-        preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+        supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+        preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
         credential_transports?: {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
         }[] | undefined;
     }>>;
@@ -263,16 +287,33 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
     }, {
         supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
     }>>;
-    /** How the harness accepts image input (drives honest attach gating + the
-     *  per-adapter serializer). `none` = no vision input on this route. */
-    image_input: z.ZodDefault<z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>>;
+    /** Every accepted media class has a finite MIME/size/count/transport declaration. */
+    attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<["image", "file"]>;
+        mime_types: z.ZodArray<z.ZodString, "many">;
+        max_bytes: z.ZodNumber;
+        max_count: z.ZodNumber;
+        transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "file" | "image";
+        mime_types: string[];
+        max_bytes: number;
+        max_count: number;
+        transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+    }, {
+        kind: "file" | "image";
+        mime_types: string[];
+        max_bytes: number;
+        max_count: number;
+        transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+    }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     auth: {
-        supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-        preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+        supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+        preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
         credential_transports: {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
         }[];
     };
@@ -282,14 +323,20 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
     isolation: {
         supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
     };
-    image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+    attachment_inputs: {
+        kind: "file" | "image";
+        mime_types: string[];
+        max_bytes: number;
+        max_count: number;
+        transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+    }[];
 }, {
     auth?: {
-        supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-        preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+        supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+        preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
         credential_transports?: {
-            kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-            source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+            source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+            kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
             relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
         }[] | undefined;
     } | undefined;
@@ -299,7 +346,13 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
     isolation?: {
         supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
     } | undefined;
-    image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+    attachment_inputs?: {
+        kind: "file" | "image";
+        mime_types: string[];
+        max_bytes: number;
+        max_count: number;
+        transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+    }[] | undefined;
 }>>;
 export type HarnessCapabilityProfile = z.infer<typeof HarnessCapabilityProfile>;
 /**
@@ -312,13 +365,18 @@ export declare const HarnessModel: z.ZodObject<{
     id: z.ZodString;
     label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     context_window: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    /** Credential routes the model is scoped to per the manifest annotation;
+     * null = unannotated (available on every route). */
+    routes: z.ZodDefault<z.ZodNullable<z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">>>;
 }, "strip", z.ZodTypeAny, {
     id: string;
     label: string | null;
+    routes: ("api_key" | "local_session")[] | null;
     context_window: number | null;
 }, {
     id: string;
     label?: string | null | undefined;
+    routes?: ("api_key" | "local_session")[] | null | undefined;
     context_window?: number | null | undefined;
 }>;
 export type HarnessModel = z.infer<typeof HarnessModel>;
@@ -331,35 +389,35 @@ export declare const HarnessManifest: z.ZodObject<{
     provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
     capability_profile: z.ZodDefault<z.ZodObject<{
         auth: z.ZodDefault<z.ZodObject<{
-            supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-            preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+            supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+            preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
             credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-                source: z.ZodEnum<["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
                 kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
                 relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
             }, "strip", z.ZodTypeAny, {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
             }, {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
             }>, "many">>;
         }, "strip", z.ZodTypeAny, {
-            supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-            preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+            supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+            preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
             credential_transports: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
             }[];
         }, {
-            supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-            preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+            supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+            preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
             credential_transports?: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
             }[] | undefined;
         }>>;
@@ -377,16 +435,33 @@ export declare const HarnessManifest: z.ZodObject<{
         }, {
             supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
         }>>;
-        /** How the harness accepts image input (drives honest attach gating + the
-         *  per-adapter serializer). `none` = no vision input on this route. */
-        image_input: z.ZodDefault<z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>>;
+        /** Every accepted media class has a finite MIME/size/count/transport declaration. */
+        attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            kind: z.ZodEnum<["image", "file"]>;
+            mime_types: z.ZodArray<z.ZodString, "many">;
+            max_bytes: z.ZodNumber;
+            max_count: z.ZodNumber;
+            transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "file" | "image";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }, {
+            kind: "file" | "image";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         auth: {
-            supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-            preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+            supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+            preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
             credential_transports: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
             }[];
         };
@@ -396,14 +471,20 @@ export declare const HarnessManifest: z.ZodObject<{
         isolation: {
             supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
         };
-        image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+        attachment_inputs: {
+            kind: "file" | "image";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }[];
     }, {
         auth?: {
-            supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-            preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+            supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+            preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
             credential_transports?: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
             }[] | undefined;
         } | undefined;
@@ -413,12 +494,19 @@ export declare const HarnessManifest: z.ZodObject<{
         isolation?: {
             supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
         } | undefined;
-        image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+        attachment_inputs?: {
+            kind: "file" | "image";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }[] | undefined;
     }>>;
     /** Compatibility convenience fields. New routing/UI should prefer capability_profile. */
     capabilities: z.ZodObject<{
         plan: z.ZodDefault<z.ZodBoolean>;
         implement: z.ZodDefault<z.ZodBoolean>;
+        implementation_transport: z.ZodDefault<z.ZodEnum<["workspace", "git_patch_envelope"]>>;
         create_from_scratch: z.ZodDefault<z.ZodBoolean>;
         review: z.ZodDefault<z.ZodBoolean>;
         /** Consumed by the Phase-3 FinalVerifier routing (gating pushes `verify`). */
@@ -470,7 +558,18 @@ export declare const HarnessManifest: z.ZodObject<{
          * model. Data-driven like `effort_levels` — no model id is hardcoded in
          * routing logic.
          */
-        known_models: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        known_models: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
+            id: z.ZodString;
+            /** Credential routes this model is available on. A bare string
+             * entry means ALL routes (backward shape). */
+            routes: z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        }, {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        }>]>, "many">>;
         /**
          * Vendor CLI version this `known_models` hint set was last verified against
          * (freshness note, surfaced with manifest-sourced model lists and checked by
@@ -485,6 +584,7 @@ export declare const HarnessManifest: z.ZodObject<{
         review: boolean;
         verify: boolean;
         synthesize: boolean;
+        implementation_transport: "workspace" | "git_patch_envelope";
         read_files: boolean;
         browser_tool: boolean;
         web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -493,7 +593,10 @@ export declare const HarnessManifest: z.ZodObject<{
         interactive: boolean;
         json_schema_output: boolean;
         effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-        known_models: string[];
+        known_models: (string | {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        })[];
         known_models_verified_against: string | null;
     }, {
         plan?: boolean | undefined;
@@ -503,6 +606,7 @@ export declare const HarnessManifest: z.ZodObject<{
         review?: boolean | undefined;
         verify?: boolean | undefined;
         synthesize?: boolean | undefined;
+        implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
         read_files?: boolean | undefined;
         browser_tool?: boolean | undefined;
         web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -511,23 +615,26 @@ export declare const HarnessManifest: z.ZodObject<{
         interactive?: boolean | undefined;
         json_schema_output?: boolean | undefined;
         effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-        known_models?: string[] | undefined;
+        known_models?: (string | {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        })[] | undefined;
         known_models_verified_against?: string | null | undefined;
     }>;
     auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
     access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    id: string;
-    kind: "local_cli" | "remote_api" | "fake";
     display_name: string;
+    kind: "local_cli" | "remote_api" | "fake";
+    id: string;
     provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
     capability_profile: {
         auth: {
-            supported_sources: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[];
-            preferred_source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null;
+            supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
+            preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
             credential_transports: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
             }[];
         };
@@ -537,7 +644,13 @@ export declare const HarnessManifest: z.ZodObject<{
         isolation: {
             supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
         };
-        image_input: "file_path" | "base64_stream" | "base64_inline" | "none";
+        attachment_inputs: {
+            kind: "file" | "image";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }[];
     };
     capabilities: {
         plan: boolean;
@@ -547,6 +660,7 @@ export declare const HarnessManifest: z.ZodObject<{
         review: boolean;
         verify: boolean;
         synthesize: boolean;
+        implementation_transport: "workspace" | "git_patch_envelope";
         read_files: boolean;
         browser_tool: boolean;
         web_policy: "none" | "native" | "tools" | "uncontrolled";
@@ -555,7 +669,10 @@ export declare const HarnessManifest: z.ZodObject<{
         interactive: boolean;
         json_schema_output: boolean;
         effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-        known_models: string[];
+        known_models: (string | {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        })[];
         known_models_verified_against: string | null;
     };
     auth_modes: ("api_key" | "none" | "local_session")[];
@@ -563,9 +680,9 @@ export declare const HarnessManifest: z.ZodObject<{
     version?: string | undefined;
     adapter_version?: string | undefined;
 }, {
-    id: string;
-    kind: "local_cli" | "remote_api" | "fake";
     display_name: string;
+    kind: "local_cli" | "remote_api" | "fake";
+    id: string;
     capabilities: {
         plan?: boolean | undefined;
         orchestrate?: boolean | undefined;
@@ -574,6 +691,7 @@ export declare const HarnessManifest: z.ZodObject<{
         review?: boolean | undefined;
         verify?: boolean | undefined;
         synthesize?: boolean | undefined;
+        implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
         read_files?: boolean | undefined;
         browser_tool?: boolean | undefined;
         web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
@@ -582,7 +700,10 @@ export declare const HarnessManifest: z.ZodObject<{
         interactive?: boolean | undefined;
         json_schema_output?: boolean | undefined;
         effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-        known_models?: string[] | undefined;
+        known_models?: (string | {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        })[] | undefined;
         known_models_verified_against?: string | null | undefined;
     };
     version?: string | undefined;
@@ -590,11 +711,11 @@ export declare const HarnessManifest: z.ZodObject<{
     provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
     capability_profile?: {
         auth?: {
-            supported_sources?: ("none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file")[] | undefined;
-            preferred_source?: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file" | null | undefined;
+            supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
+            preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
             credential_transports?: {
-                kind: "none" | "config_file" | "env_var" | "oauth_token_env" | "os_keychain" | "http_header";
-                source: "none" | "native_session" | "api_key_env" | "api_key_flag" | "provider_auth_file";
+                source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
                 relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
             }[] | undefined;
         } | undefined;
@@ -604,7 +725,13 @@ export declare const HarnessManifest: z.ZodObject<{
         isolation?: {
             supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
         } | undefined;
-        image_input?: "file_path" | "base64_stream" | "base64_inline" | "none" | undefined;
+        attachment_inputs?: {
+            kind: "file" | "image";
+            mime_types: string[];
+            max_bytes: number;
+            max_count: number;
+            transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
+        }[] | undefined;
     } | undefined;
     auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
     access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
@@ -652,8 +779,24 @@ export declare const ConformanceReport: z.ZodObject<{
     enabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, "many">>;
     disabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, "many">>;
     reasons: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    auth_sources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+        availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+        verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+        detail: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }, {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    status: "ok" | "degraded" | "unavailable";
+    status: "unavailable" | "ok" | "degraded";
     harness_id: string;
     checks: {
         status: "pass" | "fail" | "skip";
@@ -664,8 +807,14 @@ export declare const ConformanceReport: z.ZodObject<{
     enabled_intents: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[];
     disabled_intents: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[];
     reasons: string[];
+    auth_sources: {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }[];
 }, {
-    status: "ok" | "degraded" | "unavailable";
+    status: "unavailable" | "ok" | "degraded";
     harness_id: string;
     checks?: {
         status: "pass" | "fail" | "skip";
@@ -676,27 +825,16 @@ export declare const ConformanceReport: z.ZodObject<{
     enabled_intents?: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[] | undefined;
     disabled_intents?: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[] | undefined;
     reasons?: string[] | undefined;
+    auth_sources?: {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        detail?: string | undefined;
+    }[] | undefined;
 }>;
 export type ConformanceReport = z.infer<typeof ConformanceReport>;
-/**
- * Per-run browser-tool wiring. Present (non-null) on a HarnessRunSpec ONLY when
- * the orchestrator has decided this run gets the agent-driven browser: the run
- * opted in, the harness has the `browser_tool` capability, AND web policy is not
- * `off`. The adapter injects Playwright MCP accordingly.
- */
 export declare const BrowserToolSpec: z.ZodObject<{
-    /**
-     * `--output-dir` for the browser MCP. Captures the per-navigation accessibility
-     * SNAPSHOTS (Playwright MCP writes screenshot image files to the agent's cwd,
-     * not here) into the run artifact tree as a browsing record the Canvas gallery
-     * lists. The live view is the headed window itself. Null = MCP's own temp dir.
-     */
     output_dir: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    /**
-     * Run the browser headless (no visible window). Default false — a headed
-     * Chromium so the user can watch the agent browse directly (the chosen mirror:
-     * a real visible window, not an embedded screencast).
-     */
     headless: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     output_dir: string | null;
@@ -711,6 +849,14 @@ export declare const HarnessRunSpec: z.ZodObject<{
     session_id: z.ZodString;
     intent: z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>;
     prompt: z.ZodString;
+    /**
+     * Optional caller-supplied system-level instructions layered on top of the
+     * prompt for TASK-PRODUCING lanes (primary, candidate, planner, explorer,
+     * orchestrate-planner) — never reviewers, synthesis, or the auth smoke.
+     * Adapters deliver it natively (claude `--append-system-prompt`, codex
+     * `developer_instructions`) or as a delimited prompt prefix.
+     */
+    instructions: z.ZodOptional<z.ZodString>;
     cwd: z.ZodString;
     access: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
     external_context_policy: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
@@ -729,13 +875,66 @@ export declare const HarnessRunSpec: z.ZodObject<{
     }>>;
     model_hint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     effort_hint: z.ZodDefault<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
-    max_usd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     /**
      * Which auth route the attempt should use. `auto` = subscription-first with
      * api_key fallback; adapters seed native session vs inject the key accordingly.
      */
     auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+    /**
+     * The RESOLVED credential profile for this attempt (INV-135), stamped by
+     * the orchestrator (the one resolve owner) from the durable registry —
+     * adapters consume the typed transport and never read config. Null = the
+     * engine-default credential ladder. An explicit profile is STRICT: the
+     * adapter uses exactly its transport or refuses with a typed error, never
+     * a silent fallback to default credentials.
+     */
+    credential_profile: z.ZodDefault<z.ZodNullable<z.ZodEffects<z.ZodObject<{
+        profile_id: z.ZodString;
+        harness_id: z.ZodString;
+        display_name: z.ZodString;
+        credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+        isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>>>;
     /**
      * Native CLI session id to resume into (codex `exec resume`, claude `--resume`,
      * cursor `agent --resume`, opencode `run --session`). Null starts a fresh session.
@@ -747,30 +946,44 @@ export declare const HarnessRunSpec: z.ZodObject<{
      * (agent env isolation). Threaded from routing.env_inheritance at spawn.
      */
     env_inheritance: z.ZodDefault<z.ZodEnum<["mirror_native", "clean"]>>;
+    evidence_policy: z.ZodDefault<z.ZodEnum<["stream_only", "allow_vendor_session_artifacts"]>>;
+    /**
+     * Opt-in live text deltas (F2.5 W-C4): adapters that support partial
+     * output add their native flag (claude --include-partial-messages,
+     * cursor --stream-partial-output; codex exec has no deltas). Set ONLY on
+     * single-candidate chat lanes — racing lanes stay delta-free (noise × N).
+     * Delta messages carry payload.delta=true and never enter answers.
+     */
+    stream_deltas: z.ZodDefault<z.ZodBoolean>;
     env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
     /**
-     * User/agent attachments (images, files) forwarded to the harness in its
-     * native shape per `capability_profile.image_input`. Empty for non-vision
-     * harnesses — the orchestrator drops + discloses rather than silently ignore.
+     * Immutable user/agent resources forwarded only after the selected adapter's
+     * finite `capability_profile.attachment_inputs` declaration admits them.
      */
     attachments: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        kind: z.ZodDefault<z.ZodEnum<["image", "file"]>>;
-        mime: z.ZodDefault<z.ZodString>;
-        name: z.ZodDefault<z.ZodString>;
+        resource_id: z.ZodString;
+        kind: z.ZodEnum<["image", "file"]>;
+        mime: z.ZodString;
+        name: z.ZodString;
+        sha256: z.ZodString;
+        size_bytes: z.ZodNumber;
         path: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
+    }, "strict", z.ZodTypeAny, {
         path: string;
-        id: string;
-        kind: "image" | "file";
-        mime: string;
         name: string;
+        kind: "file" | "image";
+        resource_id: string;
+        mime: string;
+        sha256: string;
+        size_bytes: number;
     }, {
         path: string;
-        id: string;
-        kind?: "image" | "file" | undefined;
-        mime?: string | undefined;
-        name?: string | undefined;
+        name: string;
+        kind: "file" | "image";
+        resource_id: string;
+        mime: string;
+        sha256: string;
+        size_bytes: number;
     }>, "many">>;
     /**
      * Agent-driven browser wiring. Null = no browser tool this run (the common
@@ -778,18 +991,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
      * `browser_tool`, and web policy is not `off`.
      */
     browser: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-        /**
-         * `--output-dir` for the browser MCP. Captures the per-navigation accessibility
-         * SNAPSHOTS (Playwright MCP writes screenshot image files to the agent's cwd,
-         * not here) into the run artifact tree as a browsing record the Canvas gallery
-         * lists. The live view is the headed window itself. Null = MCP's own temp dir.
-         */
         output_dir: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        /**
-         * Run the browser headless (no visible window). Default false — a headed
-         * Chromium so the user can watch the agent browse directly (the chosen mirror:
-         * a real visible window, not an embedded screencast).
-         */
         headless: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         output_dir: string | null;
@@ -805,6 +1007,125 @@ export declare const HarnessRunSpec: z.ZodObject<{
      * declares `json_schema_output`; consumers add the native CLI flag.
      */
     output_schema: z.ZodOptional<z.ZodUnknown>;
+    raw_context_packet: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        schema_version: z.ZodLiteral<1>;
+        packet_hash: z.ZodString;
+        base_commit_sha: z.ZodString;
+        base_tree_sha: z.ZodString;
+        readable_files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            mode: z.ZodString;
+            blob_oid: z.ZodString;
+            content_hash: z.ZodString;
+            content: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }, {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }>, "many">;
+        editable_paths: z.ZodArray<z.ZodString, "many">;
+        creatable_roots: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        file_manifest: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            disposition: z.ZodEnum<["full", "included", "manifest_only", "excluded", "sensitive", "binary", "vendored", "oversized", "read_error", "omitted"]>;
+            hash: z.ZodOptional<z.ZodString>;
+            bytes: z.ZodOptional<z.ZodNumber>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }, {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }>, "many">;
+        omissions: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            reason: z.ZodString;
+            replacement: z.ZodDefault<z.ZodEnum<["summary", "map", "index", "none"]>>;
+            hash: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            reason: string;
+            replacement: "map" | "none" | "summary" | "index";
+            hash?: string | undefined;
+        }, {
+            path: string;
+            reason: string;
+            hash?: string | undefined;
+            replacement?: "map" | "none" | "summary" | "index" | undefined;
+        }>, "many">;
+        evidence_refs: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        schema_version: 1;
+        packet_hash: string;
+        base_commit_sha: string;
+        base_tree_sha: string;
+        readable_files: {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }[];
+        editable_paths: string[];
+        creatable_roots: string[];
+        file_manifest: {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }[];
+        omissions: {
+            path: string;
+            reason: string;
+            replacement: "map" | "none" | "summary" | "index";
+            hash?: string | undefined;
+        }[];
+        evidence_refs: string[];
+    }, {
+        schema_version: 1;
+        packet_hash: string;
+        base_commit_sha: string;
+        base_tree_sha: string;
+        readable_files: {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }[];
+        editable_paths: string[];
+        file_manifest: {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }[];
+        omissions: {
+            path: string;
+            reason: string;
+            hash?: string | undefined;
+            replacement?: "map" | "none" | "summary" | "index" | undefined;
+        }[];
+        evidence_refs: string[];
+        creatable_roots?: string[] | undefined;
+    }>>>;
     extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
     max_turns: number | null;
@@ -821,29 +1142,73 @@ export declare const HarnessRunSpec: z.ZodObject<{
     };
     model_hint: string | null;
     effort_hint: "low" | "medium" | "high" | "xhigh" | "max" | null;
-    max_usd: number | null;
     auth_preference: "auto" | "subscription" | "api_key";
+    credential_profile: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    } | null;
     resume_session_id: string | null;
     env_inheritance: "mirror_native" | "clean";
+    evidence_policy: "stream_only" | "allow_vendor_session_artifacts";
+    stream_deltas: boolean;
     env: Record<string, string>;
     attachments: {
         path: string;
-        id: string;
-        kind: "image" | "file";
-        mime: string;
         name: string;
+        kind: "file" | "image";
+        resource_id: string;
+        mime: string;
+        sha256: string;
+        size_bytes: number;
     }[];
     browser: {
         output_dir: string | null;
         headless: boolean;
     } | null;
     extra: Record<string, unknown>;
+    instructions?: string | undefined;
     output_schema?: unknown;
+    raw_context_packet?: {
+        schema_version: 1;
+        packet_hash: string;
+        base_commit_sha: string;
+        base_tree_sha: string;
+        readable_files: {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }[];
+        editable_paths: string[];
+        creatable_roots: string[];
+        file_manifest: {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }[];
+        omissions: {
+            path: string;
+            reason: string;
+            replacement: "map" | "none" | "summary" | "index";
+            hash?: string | undefined;
+        }[];
+        evidence_refs: string[];
+    } | null | undefined;
 }, {
     session_id: string;
     intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
     prompt: string;
     cwd: string;
+    instructions?: string | undefined;
     max_turns?: number | null | undefined;
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     external_context_policy?: "off" | "auto" | "cached" | "live" | undefined;
@@ -854,69 +1219,68 @@ export declare const HarnessRunSpec: z.ZodObject<{
     } | undefined;
     model_hint?: string | null | undefined;
     effort_hint?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
-    max_usd?: number | null | undefined;
     auth_preference?: "auto" | "subscription" | "api_key" | undefined;
+    credential_profile?: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    } | null | undefined;
     resume_session_id?: string | null | undefined;
     env_inheritance?: "mirror_native" | "clean" | undefined;
+    evidence_policy?: "stream_only" | "allow_vendor_session_artifacts" | undefined;
+    stream_deltas?: boolean | undefined;
     env?: Record<string, string> | undefined;
     attachments?: {
         path: string;
-        id: string;
-        kind?: "image" | "file" | undefined;
-        mime?: string | undefined;
-        name?: string | undefined;
+        name: string;
+        kind: "file" | "image";
+        resource_id: string;
+        mime: string;
+        sha256: string;
+        size_bytes: number;
     }[] | undefined;
     browser?: {
         output_dir?: string | null | undefined;
         headless?: boolean | undefined;
     } | null | undefined;
     output_schema?: unknown;
+    raw_context_packet?: {
+        schema_version: 1;
+        packet_hash: string;
+        base_commit_sha: string;
+        base_tree_sha: string;
+        readable_files: {
+            path: string;
+            mode: string;
+            blob_oid: string;
+            content_hash: string;
+            content: string;
+        }[];
+        editable_paths: string[];
+        file_manifest: {
+            path: string;
+            disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            hash?: string | undefined;
+            bytes?: number | undefined;
+            reason?: string | undefined;
+        }[];
+        omissions: {
+            path: string;
+            reason: string;
+            hash?: string | undefined;
+            replacement?: "map" | "none" | "summary" | "index" | undefined;
+        }[];
+        evidence_refs: string[];
+        creatable_roots?: string[] | undefined;
+    } | null | undefined;
     extra?: Record<string, unknown> | undefined;
 }>;
 export type HarnessRunSpec = z.infer<typeof HarnessRunSpec>;
-/**
- * Coarse tool classification used for typed governance (no tool-name string
- * matching outside adapters). Adapters map native tool names to a kind.
- */
-export declare const ToolKind: z.ZodEnum<["web", "file", "command", "mcp", "search", "other"]>;
-export type ToolKind = z.infer<typeof ToolKind>;
-/**
- * Typed tool reference attached to `tool_call` / `tool_result` events.
- * `status` is REQUIRED on `tool_result` events (adapter conformance enforces it);
- * a missing status on a result is treated as a dropped/diagnostic event, never as ok.
- */
-export declare const ToolRef: z.ZodObject<{
-    name: z.ZodString;
-    kind: z.ZodDefault<z.ZodEnum<["web", "file", "command", "mcp", "search", "other"]>>;
-    use_id: z.ZodOptional<z.ZodString>;
-    /** Redacted, bounded human-readable target (query/url/path/command). */
-    target: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<["ok", "error", "cancelled", "denied"]>>;
-    /** Redacted, bounded error detail for status=error results. */
-    error_summary: z.ZodOptional<z.ZodString>;
-    /** Redacted, bounded content detail for results (success or failure). */
-    content_summary: z.ZodOptional<z.ZodString>;
-    exit_code: z.ZodOptional<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    kind: "file" | "web" | "command" | "mcp" | "search" | "other";
-    name: string;
-    status?: "ok" | "error" | "cancelled" | "denied" | undefined;
-    use_id?: string | undefined;
-    target?: string | undefined;
-    error_summary?: string | undefined;
-    content_summary?: string | undefined;
-    exit_code?: number | undefined;
-}, {
-    name: string;
-    status?: "ok" | "error" | "cancelled" | "denied" | undefined;
-    kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
-    use_id?: string | undefined;
-    target?: string | undefined;
-    error_summary?: string | undefined;
-    content_summary?: string | undefined;
-    exit_code?: number | undefined;
-}>;
-export type ToolRef = z.infer<typeof ToolRef>;
 /**
  * One multiple-choice option of an interactive question (AskUserQuestion-style).
  */
@@ -1086,27 +1450,31 @@ export declare const InteractionAnswerSet: z.ZodObject<{
 export type InteractionAnswerSet = z.infer<typeof InteractionAnswerSet>;
 /** Normalized event emitted by every adapter (the SSOT of adapter output). */
 export declare const HarnessEvent: z.ZodObject<{
-    type: z.ZodEnum<["started", "thinking", "message", "tool_call", "tool_result", "interaction_requested", "file_change", "usage", "error", "completed"]>;
+    type: z.ZodEnum<["started", "thinking", "message", "tool_call", "tool_result", "interaction_requested", "file_change", "patch_produced", "usage", "error", "status", "completed"]>;
     session_id: z.ZodString;
     ts: z.ZodString;
     text: z.ZodOptional<z.ZodString>;
+    /**
+     * True on the harness's TYPED final answer message — claude/cursor's
+     * terminal `result` event, codex's last agent message finalized at
+     * `turn.completed`. Narration (mid-run) messages never set it; consumers
+     * take a final message VERBATIM as the answer instead of joining prose.
+     */
+    final: z.ZodOptional<z.ZodBoolean>;
     /** Typed tool info; set on `tool_call` and `tool_result` events. */
     tool: z.ZodOptional<z.ZodObject<{
         name: z.ZodString;
         kind: z.ZodDefault<z.ZodEnum<["web", "file", "command", "mcp", "search", "other"]>>;
         use_id: z.ZodOptional<z.ZodString>;
-        /** Redacted, bounded human-readable target (query/url/path/command). */
         target: z.ZodOptional<z.ZodString>;
         status: z.ZodOptional<z.ZodEnum<["ok", "error", "cancelled", "denied"]>>;
-        /** Redacted, bounded error detail for status=error results. */
         error_summary: z.ZodOptional<z.ZodString>;
-        /** Redacted, bounded content detail for results (success or failure). */
         content_summary: z.ZodOptional<z.ZodString>;
         exit_code: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        kind: "file" | "web" | "command" | "mcp" | "search" | "other";
         name: string;
-        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        kind: "web" | "file" | "command" | "mcp" | "search" | "other";
+        status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
         error_summary?: string | undefined;
@@ -1114,8 +1482,8 @@ export declare const HarnessEvent: z.ZodObject<{
         exit_code?: number | undefined;
     }, {
         name: string;
-        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
-        kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
+        status?: "cancelled" | "ok" | "error" | "denied" | undefined;
+        kind?: "web" | "file" | "command" | "mcp" | "search" | "other" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
         error_summary?: string | undefined;
@@ -1189,6 +1557,44 @@ export declare const HarnessEvent: z.ZodObject<{
         }[] | undefined;
         source_tool?: string | null | undefined;
     }>>;
+    patch_envelope: z.ZodOptional<z.ZodObject<{
+        schema_version: z.ZodLiteral<1>;
+        context_packet_hash: z.ZodString;
+        base_tree_sha: z.ZodString;
+        patch: z.ZodString;
+        patch_hash: z.ZodString;
+        touched_paths: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            expected_blob_oid: z.ZodNullable<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            path: string;
+            expected_blob_oid: string | null;
+        }, {
+            path: string;
+            expected_blob_oid: string | null;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        schema_version: 1;
+        base_tree_sha: string;
+        context_packet_hash: string;
+        patch: string;
+        patch_hash: string;
+        touched_paths: {
+            path: string;
+            expected_blob_oid: string | null;
+        }[];
+    }, {
+        schema_version: 1;
+        base_tree_sha: string;
+        context_packet_hash: string;
+        patch: string;
+        patch_hash: string;
+        touched_paths: {
+            path: string;
+            expected_blob_oid: string | null;
+        }[];
+    }>>;
+    refusal_code: z.ZodOptional<z.ZodEnum<["raw_patch_requires_isolation", "raw_patch_missing_evidence", "raw_patch_digest_mismatch", "raw_patch_base_mismatch", "raw_patch_path_traversal", "raw_patch_outside_scope", "raw_patch_stale_preimage", "raw_patch_binary_unsupported", "raw_patch_sensitive_content", "raw_patch_truncated", "raw_patch_apply_failed"]>>;
     usage: z.ZodOptional<z.ZodObject<{
         input_tokens: z.ZodOptional<z.ZodNumber>;
         output_tokens: z.ZodOptional<z.ZodNumber>;
@@ -1197,38 +1603,76 @@ export declare const HarnessEvent: z.ZodObject<{
         /** True when cost_usd is derived from token pricing (not natively reported). */
         estimated: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
+        estimated?: boolean | undefined;
         input_tokens?: number | undefined;
         output_tokens?: number | undefined;
         cached_input_tokens?: number | undefined;
         cost_usd?: number | undefined;
-        estimated?: boolean | undefined;
     }, {
+        estimated?: boolean | undefined;
         input_tokens?: number | undefined;
         output_tokens?: number | undefined;
         cached_input_tokens?: number | undefined;
         cost_usd?: number | undefined;
-        estimated?: boolean | undefined;
     }>>;
     observed_model: z.ZodOptional<z.ZodString>;
-    /**
-     * Typed quota/usage-window signal: the harness CLI's OWN record of how
-     * much of its subscription/rate window is consumed. Producers read native
-     * machine-readable surfaces only (codex rollout `token_count.rate_limits`);
-     * a harness with no native surface emits nothing (fail-honest, never
-     * scraped from prose). The budget layer maps this to a `used_percent`
-     * observation; `headroom()` and pool ordering consume it.
-     */
+    credential_route: z.ZodOptional<z.ZodEnum<["vendor_native", "managed_api_key", "local"]>>;
+    credential_source: z.ZodOptional<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>;
+    /** Credential profile the attempt runs under (INV-135); stamped by the
+     * adapter alongside credential_route so quota/api_retry records stay
+     * independently attributable to the profile. Absent = engine default. */
+    credential_profile_id: z.ZodOptional<z.ZodString>;
+    /** Vendor-owned quota windows. All reported windows remain independent. */
     quota: z.ZodOptional<z.ZodObject<{
-        /** 0-100: consumed share of the binding rate window. */
-        used_percent: z.ZodNumber;
-        /** Native reset moment for the window, when the CLI reports one. */
-        resets_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        used_percent: number;
-        resets_at: string | null;
+        source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage"]>;
+        plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        constraints: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            used_ratio: z.ZodNullable<z.ZodNumber>;
+            window_seconds: z.ZodNullable<z.ZodNumber>;
+            resets_at: z.ZodNullable<z.ZodString>;
+            cooldown_until: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }, {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry" | "claude_oauth_usage";
+        plan_label: string | null;
+        subject_id: string | null;
+        constraints: {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }[];
     }, {
-        used_percent: number;
-        resets_at?: string | null | undefined;
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry" | "claude_oauth_usage";
+        constraints: {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }[];
+        plan_label?: string | null | undefined;
+        subject_id?: string | null | undefined;
     }>>;
     /**
      * Typed live plan/todo progress: adapters map their native plan tools
@@ -1280,6 +1724,33 @@ export declare const HarnessEvent: z.ZodObject<{
         resets_at?: string | null | undefined;
         retry_delay_ms?: number | null | undefined;
     }>>;
+    /**
+     * Typed transient-status detail; set on `status` events. Today's only kind
+     * is claude's native `api_retry` (the CLI is retrying an API call by
+     * itself): the adapter maps the official fields through instead of
+     * fabricating a thinking block, so retries land in the activity feed —
+     * never in the reasoning disclosure. `error_category` passes the vendor's
+     * own label (e.g. rate_limit, overloaded) verbatim as disclosed evidence.
+     */
+    status: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<["api_retry"]>;
+        attempt: z.ZodOptional<z.ZodNumber>;
+        max_retries: z.ZodOptional<z.ZodNumber>;
+        retry_delay_ms: z.ZodOptional<z.ZodNumber>;
+        error_category: z.ZodOptional<z.ZodEnum<["authentication_failed", "oauth_org_not_allowed", "billing_error", "rate_limit", "overloaded", "invalid_request", "model_not_found", "server_error", "max_output_tokens", "unknown"]>>;
+    }, "strip", z.ZodTypeAny, {
+        kind: "api_retry";
+        retry_delay_ms?: number | undefined;
+        attempt?: number | undefined;
+        max_retries?: number | undefined;
+        error_category?: "unknown" | "rate_limit" | "authentication_failed" | "oauth_org_not_allowed" | "billing_error" | "overloaded" | "invalid_request" | "model_not_found" | "server_error" | "max_output_tokens" | undefined;
+    }, {
+        kind: "api_retry";
+        retry_delay_ms?: number | undefined;
+        attempt?: number | undefined;
+        max_retries?: number | undefined;
+        error_category?: "unknown" | "rate_limit" | "authentication_failed" | "oauth_org_not_allowed" | "billing_error" | "overloaded" | "invalid_request" | "model_not_found" | "server_error" | "max_output_tokens" | undefined;
+    }>>;
     /**
      * Typed transient-failure signal. Adapters set this from native CLI/API error
      * shapes in their parse layer; the orchestrator consumes it for bounded retry
@@ -1296,24 +1767,35 @@ export declare const HarnessEvent: z.ZodObject<{
         retry_delay_ms?: number | null | undefined;
     }>>;
     error: z.ZodOptional<z.ZodString>;
+    aborted: z.ZodOptional<z.ZodBoolean>;
     payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
-    type: "message" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "usage" | "completed";
+    type: "message" | "status" | "completed" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "patch_produced" | "usage";
     session_id: string;
     ts: string;
+    aborted?: boolean | undefined;
+    status?: {
+        kind: "api_retry";
+        retry_delay_ms?: number | undefined;
+        attempt?: number | undefined;
+        max_retries?: number | undefined;
+        error_category?: "unknown" | "rate_limit" | "authentication_failed" | "oauth_org_not_allowed" | "billing_error" | "overloaded" | "invalid_request" | "model_not_found" | "server_error" | "max_output_tokens" | undefined;
+    } | undefined;
     error?: string | undefined;
+    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
     usage?: {
+        estimated?: boolean | undefined;
         input_tokens?: number | undefined;
         output_tokens?: number | undefined;
         cached_input_tokens?: number | undefined;
         cost_usd?: number | undefined;
-        estimated?: boolean | undefined;
     } | undefined;
     text?: string | undefined;
+    final?: boolean | undefined;
     tool?: {
-        kind: "file" | "web" | "command" | "mcp" | "search" | "other";
         name: string;
-        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
+        kind: "web" | "file" | "command" | "mcp" | "search" | "other";
+        status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
         error_summary?: string | undefined;
@@ -1334,10 +1816,33 @@ export declare const HarnessEvent: z.ZodObject<{
         }[];
         source_tool: string | null;
     } | undefined;
+    patch_envelope?: {
+        schema_version: 1;
+        base_tree_sha: string;
+        context_packet_hash: string;
+        patch: string;
+        patch_hash: string;
+        touched_paths: {
+            path: string;
+            expected_blob_oid: string | null;
+        }[];
+    } | undefined;
+    refusal_code?: "raw_patch_requires_isolation" | "raw_patch_missing_evidence" | "raw_patch_digest_mismatch" | "raw_patch_base_mismatch" | "raw_patch_path_traversal" | "raw_patch_outside_scope" | "raw_patch_stale_preimage" | "raw_patch_binary_unsupported" | "raw_patch_sensitive_content" | "raw_patch_truncated" | "raw_patch_apply_failed" | undefined;
     observed_model?: string | undefined;
+    credential_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | undefined;
+    credential_profile_id?: string | undefined;
     quota?: {
-        used_percent: number;
-        resets_at: string | null;
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry" | "claude_oauth_usage";
+        plan_label: string | null;
+        subject_id: string | null;
+        constraints: {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until: string | null;
+        }[];
     } | undefined;
     plan_progress?: {
         items: {
@@ -1356,22 +1861,32 @@ export declare const HarnessEvent: z.ZodObject<{
     } | undefined;
     payload?: Record<string, unknown> | undefined;
 }, {
-    type: "message" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "usage" | "completed";
+    type: "message" | "status" | "completed" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "patch_produced" | "usage";
     session_id: string;
     ts: string;
+    aborted?: boolean | undefined;
+    status?: {
+        kind: "api_retry";
+        retry_delay_ms?: number | undefined;
+        attempt?: number | undefined;
+        max_retries?: number | undefined;
+        error_category?: "unknown" | "rate_limit" | "authentication_failed" | "oauth_org_not_allowed" | "billing_error" | "overloaded" | "invalid_request" | "model_not_found" | "server_error" | "max_output_tokens" | undefined;
+    } | undefined;
     error?: string | undefined;
+    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
     usage?: {
+        estimated?: boolean | undefined;
         input_tokens?: number | undefined;
         output_tokens?: number | undefined;
         cached_input_tokens?: number | undefined;
         cost_usd?: number | undefined;
-        estimated?: boolean | undefined;
     } | undefined;
     text?: string | undefined;
+    final?: boolean | undefined;
     tool?: {
         name: string;
-        status?: "ok" | "error" | "cancelled" | "denied" | undefined;
-        kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
+        status?: "cancelled" | "ok" | "error" | "denied" | undefined;
+        kind?: "web" | "file" | "command" | "mcp" | "search" | "other" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
         error_summary?: string | undefined;
@@ -1392,10 +1907,33 @@ export declare const HarnessEvent: z.ZodObject<{
         }[] | undefined;
         source_tool?: string | null | undefined;
     } | undefined;
+    patch_envelope?: {
+        schema_version: 1;
+        base_tree_sha: string;
+        context_packet_hash: string;
+        patch: string;
+        patch_hash: string;
+        touched_paths: {
+            path: string;
+            expected_blob_oid: string | null;
+        }[];
+    } | undefined;
+    refusal_code?: "raw_patch_requires_isolation" | "raw_patch_missing_evidence" | "raw_patch_digest_mismatch" | "raw_patch_base_mismatch" | "raw_patch_path_traversal" | "raw_patch_outside_scope" | "raw_patch_stale_preimage" | "raw_patch_binary_unsupported" | "raw_patch_sensitive_content" | "raw_patch_truncated" | "raw_patch_apply_failed" | undefined;
     observed_model?: string | undefined;
+    credential_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | undefined;
+    credential_profile_id?: string | undefined;
     quota?: {
-        used_percent: number;
-        resets_at?: string | null | undefined;
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry" | "claude_oauth_usage";
+        constraints: {
+            id: string;
+            label: string;
+            used_ratio: number | null;
+            window_seconds: number | null;
+            resets_at: string | null;
+            cooldown_until?: string | null | undefined;
+        }[];
+        plan_label?: string | null | undefined;
+        subject_id?: string | null | undefined;
     } | undefined;
     plan_progress?: {
         items?: {