@claudexor/schema 1.0.1 → 2.1.1

package/dist/harness.js

@@ -1,6 +1,11 @@
 import { z } from "zod";
-import { AccessProfile, AuthPreference, ExternalContextPolicy, Id, Intent, ProviderFamily } from "./primitives.js";
-import { Attachment, ImageInputMode } from "./attachment.js";
+import { AuthSourceKind, AuthSourceReadiness, CredentialRoute } from "./auth.js";
+import { CredentialProfile } from "./credential-profile.js";
+import { ToolRef } from "./tool-ref.js";
+import { AccessProfile, AuthPreference, ExternalContextPolicy, Id, Intent, ProviderFamily, } from "./primitives.js";
+import { Attachment, AttachmentInputClass } from "./attachment.js";
+import { ImplementationTransport, RawContextPacket, RawGitPatchEnvelope, RawPatchRefusalCode, } from "./raw.js";
+import { QuotaConstraint, QuotaSource } from "./quota.js";
 /** Quality of a usage/quota signal a harness can emit. */
 export const SignalQuality = z
     .enum(["exact", "native", "observed", "manual", "unknown"])
@@ -46,12 +51,28 @@ export const WebPolicySupport = z
 export const HarnessCapabilities = z
     .object({
     plan: z.boolean().default(false).describe("The harness can produce plans (plan intent)."),
-    implement: z.boolean().default(false).describe("The harness can implement code changes (implement intent)."),
-    create_from_scratch: z.boolean().default(false).describe("The harness can scaffold new projects (create_from_scratch intent)."),
-    review: z.boolean().default(false).describe("The harness can act as a reviewer (review intent)."),
+    implement: z
+        .boolean()
+        .default(false)
+        .describe("The harness can implement code changes (implement intent)."),
+    implementation_transport: ImplementationTransport.default("workspace").describe("Typed producer/consumer transport used when implement=true."),
+    create_from_scratch: z
+        .boolean()
+        .default(false)
+        .describe("The harness can scaffold new projects (create_from_scratch intent)."),
+    review: z
+        .boolean()
+        .default(false)
+        .describe("The harness can act as a reviewer (review intent)."),
     /** Consumed by the Phase-3 FinalVerifier routing (gating pushes `verify`). */
-    verify: z.boolean().default(false).describe("The harness can act as the FinalVerifier (verify intent)."),
-    synthesize: z.boolean().default(false).describe("The harness can synthesize across candidate outputs (synthesize intent)."),
+    verify: z
+        .boolean()
+        .default(false)
+        .describe("The harness can act as the FinalVerifier (verify intent)."),
+    synthesize: z
+        .boolean()
+        .default(false)
+        .describe("The harness can synthesize across candidate outputs (synthesize intent)."),
     read_files: z.boolean().default(false).describe("The harness can read project files."),
     /**
      * The adapter can inject a browser-automation MCP server (Playwright MCP) that
@@ -64,9 +85,15 @@ export const HarnessCapabilities = z
         .describe("The adapter can inject a browser-automation MCP server (Playwright MCP) the harness drives as browser_* tools; never injected when web policy is off."),
     web_policy: WebPolicySupport.default("none"),
     /** Honors HarnessRunSpec.max_turns (e.g. claude --max-turns). */
-    max_turns: z.boolean().default(false).describe("Honors HarnessRunSpec.max_turns (e.g. a native --max-turns flag)."),
+    max_turns: z
+        .boolean()
+        .default(false)
+        .describe("Honors HarnessRunSpec.max_turns (e.g. a native --max-turns flag)."),
     /** Honors tool_permission_policy allow/deny lists (e.g. claude --allowedTools). */
-    tool_lists: z.boolean().default(false).describe("Honors tool_permission_policy allow/deny lists (e.g. a native --allowedTools flag)."),
+    tool_lists: z
+        .boolean()
+        .default(false)
+        .describe("Honors tool_permission_policy allow/deny lists (e.g. a native --allowedTools flag)."),
     /**
      * The adapter can surface interactive user questions (interaction_requested
      * events) and deliver typed answers back into the live session. Claude's
@@ -114,9 +141,22 @@ export const HarnessCapabilities = z
      * routing logic.
      */
     known_models: z
-        .array(z.string())
+        .array(z.union([
+        z.string(),
+        z
+            .object({
+            id: z.string().min(1).describe("Model id/alias."),
+            /** Credential routes this model is available on. A bare string
+             * entry means ALL routes (backward shape). */
+            routes: z
+                .array(z.enum(["local_session", "api_key"]))
+                .min(1)
+                .describe("Credential routes this model is available on."),
+        })
+            .strict(),
+    ]))
         .default([])
-        .describe("Manifest-declared model ids/aliases this harness accepts, used as the model truth source when the adapter has no live inventory; explicit models outside the truth source are refused."),
+        .describe("Manifest-declared model ids/aliases this harness accepts (bare string = every credential route; object form scopes a model to specific routes), used as the model truth source when the adapter has no live inventory; explicit models outside the truth source are refused."),
     /**
      * Vendor CLI version this `known_models` hint set was last verified against
      * (freshness note, surfaced with manifest-sourced model lists and checked by
@@ -129,9 +169,15 @@ export const HarnessCapabilities = z
         .describe("Vendor CLI version the known_models hints were last verified against; null = never verified / not applicable."),
 })
     .describe("Declared harness capabilities the engine actually consumes for intent gating, routing, knob support, and disclosure.");
-export const AuthSourceKind = z
-    .enum(["native_session", "api_key_env", "api_key_flag", "provider_auth_file", "none"])
-    .describe("Where a harness's credentials can come from: a native login session, an API key via env var or CLI flag, a provider auth file, or none.");
+/** Model ids from a known_models list that are valid on `route`. ONE owner for
+ * the route filter (INV-122): a bare string entry is valid on every route;
+ * `route: null` (undecidable pre-spawn) returns only the route-UNRESTRICTED
+ * ids — fail-closed, a route-scoped model never leaks past an unknown route. */
+export function knownModelIdsForRoute(entries, route) {
+    return entries
+        .filter((entry) => typeof entry === "string" ? true : route !== null && entry.routes.includes(route))
+        .map((entry) => (typeof entry === "string" ? entry : entry.id));
+}
 export const CredentialTransportKind = z
     .enum(["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"])
     .describe("Mechanism that carries a credential to the harness process (config file, env var, OAuth token env, OS keychain, HTTP header, or none).");
@@ -142,19 +188,36 @@ export const CredentialTransport = z
     .object({
     source: AuthSourceKind,
     kind: CredentialTransportKind,
-    relocatable_by: z.array(CredentialRelocation).default([]).describe("Relocation levers that can move this transport into a scoped environment."),
+    relocatable_by: z
+        .array(CredentialRelocation)
+        .default([])
+        .describe("Relocation levers that can move this transport into a scoped environment."),
 })
     .describe("How a credential from one auth source physically reaches the harness process.");
 export const AuthCapabilities = z
     .object({
-    supported_sources: z.array(AuthSourceKind).default([]).describe("Auth sources this harness supports."),
-    preferred_source: AuthSourceKind.nullable().default(null).describe("Auth source the adapter prefers; null when it has no preference."),
-    credential_transports: z.array(CredentialTransport).default([]).describe("Declared credential transports per auth source."),
+    supported_sources: z
+        .array(AuthSourceKind)
+        .default([])
+        .describe("Auth sources this harness supports."),
+    preferred_source: AuthSourceKind.nullable()
+        .default(null)
+        .describe("Auth source the adapter prefers; null when it has no preference."),
+    credential_transports: z
+        .array(CredentialTransport)
+        .default([])
+        .describe("Declared credential transports per auth source."),
 })
     .default({})
     .describe("Declared auth routing facts for a harness.");
 export const ContainmentKind = z
-    .enum(["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"])
+    .enum([
+    "env_or_file_injection",
+    "scoped_home_keychain_bridge",
+    "host_user_context",
+    "process_sandbox",
+    "container",
+])
     .describe("Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers.");
 export const IsolationCapabilities = z
     .object({
@@ -187,12 +250,11 @@ export const HarnessCapabilityProfile = z
     auth: AuthCapabilities,
     access_control: AccessControlCapabilities,
     isolation: IsolationCapabilities,
-    /** How the harness accepts image input (drives honest attach gating + the
-     *  per-adapter serializer). `none` = no vision input on this route. */
-    image_input: ImageInputMode.default("none"),
+    /** Every accepted media class has a finite MIME/size/count/transport declaration. */
+    attachment_inputs: z.array(AttachmentInputClass).default([]),
 })
     .default({})
-    .describe("Structured per-harness facts the engine consumes: auth routing, isolation containment, readonly mechanism, and vision input.");
+    .describe("Structured per-harness facts the engine consumes: auth routing, isolation containment, readonly mechanism, and finite attachment inputs.");
 /**
  * One enumerable model offered by a harness. Deliberately small: only the
  * fields a real enumeration source (an OpenAI-compatible `GET /v1/models`)
@@ -202,7 +264,11 @@ export const HarnessCapabilityProfile = z
 export const HarnessModel = z
     .object({
     id: z.string().describe("Model id as the vendor enumerates it."),
-    label: z.string().nullable().default(null).describe("Human-readable model label; null when the enumeration source has none."),
+    label: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Human-readable model label; null when the enumeration source has none."),
     context_window: z
         .number()
         .int()
@@ -210,6 +276,13 @@ export const HarnessModel = z
         .nullable()
         .default(null)
         .describe("Context window in tokens; null when the enumeration source does not report it."),
+    /** Credential routes the model is scoped to per the manifest annotation;
+     * null = unannotated (available on every route). */
+    routes: z
+        .array(z.enum(["local_session", "api_key"]))
+        .nullable()
+        .default(null)
+        .describe("Credential routes the model is scoped to; null = every route."),
 })
     .describe("One enumerable model offered by a harness, limited to fields a real enumeration source can honestly populate.");
 export const HarnessManifest = z
@@ -227,7 +300,10 @@ export const HarnessManifest = z
         .array(z.enum(["local_session", "api_key", "none"]))
         .default([])
         .describe("Auth modes the harness supports (availability only, not readiness)."),
-    access_profiles_supported: z.array(AccessProfile).default([]).describe("Access profiles the adapter can enforce."),
+    access_profiles_supported: z
+        .array(AccessProfile)
+        .default([])
+        .describe("Access profiles the adapter can enforce."),
 })
     .describe("Static manifest an adapter declares for its harness: identity, kind, capabilities, auth modes, and access profiles.");
 /** Result of a conformance probe for one capability check. */
@@ -236,7 +312,12 @@ export const ConformanceCheck = z
     id: z.string().describe("Check id."),
     status: z.enum(["pass", "fail", "skip"]).describe("Outcome of the check: pass, fail, or skip."),
     detail: z.string().optional().describe("Human-readable detail for the outcome."),
-    duration_ms: z.number().int().nonnegative().optional().describe("How long the check took, in milliseconds."),
+    duration_ms: z
+        .number()
+        .int()
+        .nonnegative()
+        .optional()
+        .describe("How long the check took, in milliseconds."),
 })
     .describe("Result of a conformance probe for one capability check.");
 export const AdapterStatus = z
@@ -247,35 +328,28 @@ export const ConformanceReport = z
     harness_id: Id.describe("Harness the report is about."),
     status: AdapterStatus,
     checks: z.array(ConformanceCheck).default([]).describe("Individual probe results."),
-    enabled_intents: z.array(Intent).default([]).describe("Intents the gateway will route to this harness."),
+    enabled_intents: z
+        .array(Intent)
+        .default([])
+        .describe("Intents the gateway will route to this harness."),
     disabled_intents: z.array(Intent).default([]).describe("Intents the doctor disabled."),
-    reasons: z.array(z.string()).default([]).describe("Human-readable reasons for degraded/unavailable status or disabled intents."),
+    reasons: z
+        .array(z.string())
+        .default([])
+        .describe("Human-readable reasons for degraded/unavailable status or disabled intents."),
+    auth_sources: z
+        .array(AuthSourceReadiness)
+        .default([])
+        .describe("Doctor-backed readiness by authentication source; an empty array means the adapter did not report source readiness."),
 })
     .describe("Doctor/conformance report for one harness: status, probe results, and the intents enabled or disabled by it.");
-/**
- * Per-run browser-tool wiring. Present (non-null) on a HarnessRunSpec ONLY when
- * the orchestrator has decided this run gets the agent-driven browser: the run
- * opted in, the harness has the `browser_tool` capability, AND web policy is not
- * `off`. The adapter injects Playwright MCP accordingly.
- */
 export const BrowserToolSpec = z
     .object({
-    /**
-     * `--output-dir` for the browser MCP. Captures the per-navigation accessibility
-     * SNAPSHOTS (Playwright MCP writes screenshot image files to the agent's cwd,
-     * not here) into the run artifact tree as a browsing record the Canvas gallery
-     * lists. The live view is the headed window itself. Null = MCP's own temp dir.
-     */
     output_dir: z
         .string()
         .nullable()
         .default(null)
         .describe("Output directory for the browser MCP's per-navigation accessibility snapshots, kept in the run artifact tree; null = the MCP's own temp dir."),
-    /**
-     * Run the browser headless (no visible window). Default false — a headed
-     * Chromium so the user can watch the agent browse directly (the chosen mirror:
-     * a real visible window, not an embedded screencast).
-     */
     headless: z
         .boolean()
         .default(false)
@@ -288,6 +362,17 @@ export const HarnessRunSpec = z
     session_id: Id.describe("Session id this run belongs to."),
     intent: Intent,
     prompt: z.string().describe("Prompt text delivered to the harness."),
+    /**
+     * Optional caller-supplied system-level instructions layered on top of the
+     * prompt for TASK-PRODUCING lanes (primary, candidate, planner, explorer,
+     * orchestrate-planner) — never reviewers, synthesis, or the auth smoke.
+     * Adapters deliver it natively (claude `--append-system-prompt`, codex
+     * `developer_instructions`) or as a delimited prompt prefix.
+     */
+    instructions: z
+        .string()
+        .optional()
+        .describe("Caller-supplied system-level instructions for task-producing lanes; delivered natively (append-system-prompt / developer_instructions) or as a delimited prompt prefix."),
     cwd: z.string().describe("Working directory the harness process runs in."),
     access: AccessProfile.default("workspace_write"),
     external_context_policy: ExternalContextPolicy.default("auto"),
@@ -299,15 +384,36 @@ export const HarnessRunSpec = z
     })
         .default({ web: "auto", allow: [], deny: [] })
         .describe("Tool allow/deny policy for harnesses that support tool lists."),
-    model_hint: z.string().nullable().default(null).describe("Requested model id; null = the harness's default."),
-    effort_hint: EffortHint.nullable().default(null).describe("Requested reasoning effort; null = the harness's default."),
-    max_usd: z.number().nullable().default(null).describe("USD spend cap for the attempt; null = no cap."),
-    max_turns: z.number().int().nullable().default(null).describe("Maximum agent turns, for harnesses that honor it; null = no limit."),
+    model_hint: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Requested model id; null = the harness's default."),
+    effort_hint: EffortHint.nullable()
+        .default(null)
+        .describe("Requested reasoning effort; null = the harness's default."),
+    max_turns: z
+        .number()
+        .int()
+        .nullable()
+        .default(null)
+        .describe("Maximum agent turns, for harnesses that honor it; null = no limit."),
     /**
      * Which auth route the attempt should use. `auto` = subscription-first with
      * api_key fallback; adapters seed native session vs inject the key accordingly.
      */
     auth_preference: AuthPreference.default("auto"),
+    /**
+     * The RESOLVED credential profile for this attempt (INV-135), stamped by
+     * the orchestrator (the one resolve owner) from the durable registry —
+     * adapters consume the typed transport and never read config. Null = the
+     * engine-default credential ladder. An explicit profile is STRICT: the
+     * adapter uses exactly its transport or refuses with a typed error, never
+     * a silent fallback to default credentials.
+     */
+    credential_profile: CredentialProfile.nullable()
+        .default(null)
+        .describe("Resolved credential profile for this attempt; null = engine-default credentials. Explicit profiles are strict: exact transport or typed refusal."),
     /**
      * Native CLI session id to resume into (codex `exec resume`, claude `--resume`,
      * cursor `agent --resume`, opencode `run --session`). Null starts a fresh session.
@@ -326,16 +432,33 @@ export const HarnessRunSpec = z
         .enum(["mirror_native", "clean"])
         .default("mirror_native")
         .describe("How the child harness env is composed: mirror_native inherits the parent env (minus provider-secret scrub); clean spawns from a minimal allowlist."),
-    env: z.record(z.string(), z.string()).default({}).describe("Extra environment variables injected into the harness process."),
+    evidence_policy: z
+        .enum(["stream_only", "allow_vendor_session_artifacts"])
+        .default("allow_vendor_session_artifacts")
+        .describe("Whether route evidence may read vendor session artifacts; auth capability smokes require stream_only."),
+    /**
+     * Opt-in live text deltas (F2.5 W-C4): adapters that support partial
+     * output add their native flag (claude --include-partial-messages,
+     * cursor --stream-partial-output; codex exec has no deltas). Set ONLY on
+     * single-candidate chat lanes — racing lanes stay delta-free (noise × N).
+     * Delta messages carry payload.delta=true and never enter answers.
+     */
+    stream_deltas: z
+        .boolean()
+        .default(false)
+        .describe("Opt-in live text deltas on supporting adapters; single-candidate chat lanes only."),
+    env: z
+        .record(z.string(), z.string())
+        .default({})
+        .describe("Extra environment variables injected into the harness process."),
     /**
-     * User/agent attachments (images, files) forwarded to the harness in its
-     * native shape per `capability_profile.image_input`. Empty for non-vision
-     * harnesses — the orchestrator drops + discloses rather than silently ignore.
+     * Immutable user/agent resources forwarded only after the selected adapter's
+     * finite `capability_profile.attachment_inputs` declaration admits them.
      */
     attachments: z
         .array(Attachment)
         .default([])
-        .describe("Attachments forwarded to the harness in its native shape; empty for non-vision harnesses (dropped and disclosed)."),
+        .describe("Digest-bound resources forwarded to the harness in its declared native attachment transport."),
     /**
      * Agent-driven browser wiring. Null = no browser tool this run (the common
      * case). Set by the orchestrator only when the run opted in, the harness has
@@ -354,46 +477,26 @@ export const HarnessRunSpec = z
         .unknown()
         .optional()
         .describe("JSON Schema constraining the harness's final message; passed only to routes declaring json_schema_output."),
-    extra: z.record(z.string(), z.unknown()).default({}).describe("Adapter-specific extras (no cross-adapter meaning)."),
-})
-    .describe("Spec passed to a harness adapter's run(): prompt, working directory, access, policies, routing hints, and wiring.");
-/**
- * Coarse tool classification used for typed governance (no tool-name string
- * matching outside adapters). Adapters map native tool names to a kind.
- */
-export const ToolKind = z
-    .enum(["web", "file", "command", "mcp", "search", "other"])
-    .describe("Coarse tool classification used for typed governance; adapters map native tool names to a kind.");
-/**
- * Typed tool reference attached to `tool_call` / `tool_result` events.
- * `status` is REQUIRED on `tool_result` events (adapter conformance enforces it);
- * a missing status on a result is treated as a dropped/diagnostic event, never as ok.
- */
-export const ToolRef = z
-    .object({
-    name: z.string().describe("Native tool name as the harness reports it."),
-    kind: ToolKind.default("other"),
-    use_id: z.string().optional().describe("Correlates a tool_result with its tool_call."),
-    /** Redacted, bounded human-readable target (query/url/path/command). */
-    target: z.string().optional().describe("Redacted, bounded human-readable target (query/url/path/command)."),
-    status: z
-        .enum(["ok", "error", "cancelled", "denied"])
+    raw_context_packet: RawContextPacket.nullable()
         .optional()
-        .describe("Outcome of the tool use; required on tool_result events (a missing status is never treated as ok)."),
-    /** Redacted, bounded error detail for status=error results. */
-    error_summary: z.string().optional().describe("Redacted, bounded error detail for status=error results."),
-    /** Redacted, bounded content detail for results (success or failure). */
-    content_summary: z.string().optional().describe("Redacted, bounded content detail for results (success or failure)."),
-    exit_code: z.number().int().optional().describe("Process exit code for command tools, when known."),
+        .describe("Hash-bound context packet supplied only to git-patch-envelope producers."),
+    extra: z
+        .record(z.string(), z.unknown())
+        .default({})
+        .describe("Adapter-specific extras (no cross-adapter meaning)."),
 })
-    .describe("Typed tool reference attached to tool_call/tool_result events.");
+    .describe("Spec passed to a harness adapter's run(): prompt, working directory, access, policies, routing hints, and wiring.");
 /**
  * One multiple-choice option of an interactive question (AskUserQuestion-style).
  */
 export const InteractionOption = z
     .object({
     label: z.string().describe("Option label shown to the user."),
-    description: z.string().nullable().default(null).describe("Optional longer explanation of the option."),
+    description: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Optional longer explanation of the option."),
 })
     .describe("One multiple-choice option of an interactive question.");
 export const InteractionQuestion = z
@@ -401,8 +504,15 @@ export const InteractionQuestion = z
     id: Id.describe("Question id."),
     question: z.string().describe("The question text."),
     /** Short chip/header text some harnesses attach to a question. */
-    header: z.string().nullable().default(null).describe("Short chip/header text some harnesses attach to a question."),
-    options: z.array(InteractionOption).default([]).describe("Selectable options; empty for free-text-only questions."),
+    header: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Short chip/header text some harnesses attach to a question."),
+    options: z
+        .array(InteractionOption)
+        .default([])
+        .describe("Selectable options; empty for free-text-only questions."),
     multi_select: z.boolean().default(false).describe("Whether multiple options may be selected."),
 })
     .describe("One question of an interactive user-input request.");
@@ -414,16 +524,27 @@ export const InteractionQuestion = z
 export const InteractionRequest = z
     .object({
     interaction_id: Id.describe("Interaction id used to correlate the answer set."),
-    questions: z.array(InteractionQuestion).default([]).describe("Questions the harness wants answered."),
+    questions: z
+        .array(InteractionQuestion)
+        .default([])
+        .describe("Questions the harness wants answered."),
     /** Native tool that raised the request (e.g. "AskUserQuestion"). */
-    source_tool: z.string().nullable().default(null).describe('Native tool that raised the request (e.g. "AskUserQuestion").'),
+    source_tool: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe('Native tool that raised the request (e.g. "AskUserQuestion").'),
 })
     .describe("A live request for user input raised by an interactive harness session.");
 export const InteractionAnswer = z
     .object({
     question_id: Id.describe("Id of the question being answered."),
     selected_labels: z.array(z.string()).default([]).describe("Labels of the selected options."),
-    free_text: z.string().nullable().default(null).describe("Free-text answer; null when only options were selected."),
+    free_text: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Free-text answer; null when only options were selected."),
 })
     .describe("The user's answer to one interactive question.");
 export const InteractionAnswerSet = z
@@ -444,47 +565,74 @@ export const HarnessEvent = z
         "tool_result",
         "interaction_requested",
         "file_change",
+        "patch_produced",
         "usage",
         "error",
+        "status",
         "completed",
     ])
-        .describe("Normalized event type covering session lifecycle, output, tool use, interaction, file changes, usage, and errors."),
+        .describe("Normalized event type covering session lifecycle, output, tool use, interaction, file changes, usage, transient status, and errors."),
     session_id: Id.describe("Session the event belongs to."),
     ts: z.string().describe("Event timestamp."),
     text: z.string().optional().describe("Text content for thinking/message/error events."),
+    /**
+     * True on the harness's TYPED final answer message — claude/cursor's
+     * terminal `result` event, codex's last agent message finalized at
+     * `turn.completed`. Narration (mid-run) messages never set it; consumers
+     * take a final message VERBATIM as the answer instead of joining prose.
+     */
+    final: z
+        .boolean()
+        .optional()
+        .describe("True on the harness's typed final-answer message (vendor terminal result); mid-run narration never sets it."),
     /** Typed tool info; set on `tool_call` and `tool_result` events. */
     tool: ToolRef.optional().describe("Typed tool info; set on tool_call and tool_result events."),
     /** Set on `interaction_requested` events. */
     interaction: InteractionRequest.optional().describe("Set on interaction_requested events."),
+    patch_envelope: RawGitPatchEnvelope.optional().describe("Typed hash-bound patch produced by a git-patch-envelope harness."),
+    refusal_code: RawPatchRefusalCode.optional().describe("Typed refusal code for a rejected raw patch contract."),
     usage: z
         .object({
         input_tokens: z.number().int().nonnegative().optional().describe("Input tokens consumed."),
-        output_tokens: z.number().int().nonnegative().optional().describe("Output tokens produced."),
-        cached_input_tokens: z.number().int().nonnegative().optional().describe("Input tokens served from cache."),
+        output_tokens: z
+            .number()
+            .int()
+            .nonnegative()
+            .optional()
+            .describe("Output tokens produced."),
+        cached_input_tokens: z
+            .number()
+            .int()
+            .nonnegative()
+            .optional()
+            .describe("Input tokens served from cache."),
         cost_usd: z.number().nonnegative().optional().describe("Cost in USD."),
         /** True when cost_usd is derived from token pricing (not natively reported). */
-        estimated: z.boolean().optional().describe("True when cost_usd is derived from token pricing (not natively reported)."),
+        estimated: z
+            .boolean()
+            .optional()
+            .describe("True when cost_usd is derived from token pricing (not natively reported)."),
     })
         .optional()
         .describe("Token/cost usage reported by the harness."),
     observed_model: z.string().optional().describe("Model the harness actually reported using."),
-    /**
-     * Typed quota/usage-window signal: the harness CLI's OWN record of how
-     * much of its subscription/rate window is consumed. Producers read native
-     * machine-readable surfaces only (codex rollout `token_count.rate_limits`);
-     * a harness with no native surface emits nothing (fail-honest, never
-     * scraped from prose). The budget layer maps this to a `used_percent`
-     * observation; `headroom()` and pool ordering consume it.
-     */
+    credential_route: CredentialRoute.optional().describe("Concrete credential route selected before spawn; first-class route evidence, never inferred from free-form payload text."),
+    credential_source: AuthSourceKind.optional().describe("Concrete credential source selected before spawn; exact native subscription requires native_session, never an OAuth token or API key."),
+    /** Credential profile the attempt runs under (INV-135); stamped by the
+     * adapter alongside credential_route so quota/api_retry records stay
+     * independently attributable to the profile. Absent = engine default. */
+    credential_profile_id: Id.optional().describe("Credential profile the attempt runs under; absent = engine-default credentials (INV-135 attribution)."),
+    /** Vendor-owned quota windows. All reported windows remain independent. */
     quota: z
         .object({
-        /** 0-100: consumed share of the binding rate window. */
-        used_percent: z.number().min(0).max(100).describe("Consumed share of the binding rate window, 0-100."),
-        /** Native reset moment for the window, when the CLI reports one. */
-        resets_at: z.string().nullable().default(null).describe("Native reset moment for the window, when the CLI reports one."),
+        source: QuotaSource,
+        plan_label: z.string().nullable().default(null),
+        subject_id: z.string().nullable().default(null),
+        constraints: z.array(QuotaConstraint),
     })
+        .strict()
         .optional()
-        .describe("Typed quota/usage-window signal from the harness CLI's own native machine-readable surface, never scraped from prose."),
+        .describe("All quota windows from a vendor-owned machine-readable source; never scraped from prose or collapsed into a fake aggregate."),
     /**
      * Typed live plan/todo progress: adapters map their native plan tools
      * (codex `todo_list` items, claude `TodoWrite` todos) into this shape in
@@ -498,7 +646,9 @@ export const HarnessEvent = z
             .array(z.object({
             id: z.string().describe("Plan item id."),
             title: z.string().describe("Plan item title."),
-            status: z.enum(["pending", "in_progress", "completed"]).describe("Progress state of the item."),
+            status: z
+                .enum(["pending", "in_progress", "completed"])
+                .describe("Progress state of the item."),
         }))
             .default([])
             .describe("Last-wins list of plan/todo items."),
@@ -513,7 +663,11 @@ export const HarnessEvent = z
      */
     rate_limit: z
         .object({
-        resets_at: z.string().nullable().default(null).describe("When the rate window resets, when reported."),
+        resets_at: z
+            .string()
+            .nullable()
+            .default(null)
+            .describe("When the rate window resets, when reported."),
         retry_delay_ms: z
             .number()
             .int()
@@ -524,6 +678,48 @@ export const HarnessEvent = z
     })
         .optional()
         .describe("Typed rate-limit/quota signal set by the adapter when the native CLI reports a 429/quota/overload."),
+    /**
+     * Typed transient-status detail; set on `status` events. Today's only kind
+     * is claude's native `api_retry` (the CLI is retrying an API call by
+     * itself): the adapter maps the official fields through instead of
+     * fabricating a thinking block, so retries land in the activity feed —
+     * never in the reasoning disclosure. `error_category` passes the vendor's
+     * own label (e.g. rate_limit, overloaded) verbatim as disclosed evidence.
+     */
+    status: z
+        .object({
+        kind: z.enum(["api_retry"]).describe("Kind of transient status."),
+        attempt: z.number().int().nonnegative().optional().describe("Retry attempt number."),
+        max_retries: z
+            .number()
+            .int()
+            .nonnegative()
+            .optional()
+            .describe("Vendor's configured retry ceiling."),
+        retry_delay_ms: z
+            .number()
+            .int()
+            .nonnegative()
+            .optional()
+            .describe("Delay before the retry, when reported."),
+        error_category: z
+            .enum([
+            "authentication_failed",
+            "oauth_org_not_allowed",
+            "billing_error",
+            "rate_limit",
+            "overloaded",
+            "invalid_request",
+            "model_not_found",
+            "server_error",
+            "max_output_tokens",
+            "unknown",
+        ])
+            .optional()
+            .describe("Vendor's error category mapped onto the documented enum; unrecognized values collapse to 'unknown' (never free-form prose)."),
+    })
+        .optional()
+        .describe("Typed transient-status detail set by the adapter on status events."),
     /**
      * Typed transient-failure signal. Adapters set this from native CLI/API error
      * shapes in their parse layer; the orchestrator consumes it for bounded retry
@@ -546,7 +742,14 @@ export const HarnessEvent = z
         .optional()
         .describe("Typed transient-failure signal set by the adapter from native CLI/API error shapes, consumed for bounded retry policy."),
     error: z.string().optional().describe("Error text for error events."),
-    payload: z.record(z.string(), z.unknown()).optional().describe("Raw adapter-specific payload for diagnostics."),
+    aborted: z
+        .boolean()
+        .optional()
+        .describe("Typed terminal cancellation marker, set on completed events when the run was aborted."),
+    payload: z
+        .record(z.string(), z.unknown())
+        .optional()
+        .describe("Raw adapter-specific payload for diagnostics."),
 })
     .describe("Normalized event emitted by every adapter (the SSOT of adapter output).");
 //# sourceMappingURL=harness.js.map