@claudexor/schema 1.0.1 → 2.1.1

package/dist/task.d.ts

@@ -13,18 +13,125 @@ export declare const SuccessCriterion: z.ZodObject<{
     required?: boolean | undefined;
 }>;
 export type SuccessCriterion = z.infer<typeof SuccessCriterion>;
+export declare const TestCommandInvocation: z.ZodObject<{
+    program: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    cwd: z.ZodOptional<z.ZodString>;
+    envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    program: string;
+    args: string[];
+    envAllowlist: string[];
+    cwd?: string | undefined;
+}, {
+    program: string;
+    cwd?: string | undefined;
+    args?: string[] | undefined;
+    envAllowlist?: string[] | undefined;
+}>;
+export type TestCommandInvocation = z.infer<typeof TestCommandInvocation>;
+export declare const TestCommandGrant: z.ZodObject<{
+    projectDigest: z.ZodString;
+    configDigest: z.ZodString;
+    commandDigest: z.ZodString;
+    executablePath: z.ZodString;
+    executableDigest: z.ZodString;
+    scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+}, "strict", z.ZodTypeAny, {
+    projectDigest: string;
+    configDigest: string;
+    commandDigest: string;
+    executablePath: string;
+    executableDigest: string;
+    scriptPath: string | null;
+    scriptDigest: string | null;
+    accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+}, {
+    projectDigest: string;
+    configDigest: string;
+    commandDigest: string;
+    executablePath: string;
+    executableDigest: string;
+    accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    scriptPath?: string | null | undefined;
+    scriptDigest?: string | null | undefined;
+}>;
+export type TestCommandGrant = z.infer<typeof TestCommandGrant>;
 export declare const TestCommand: z.ZodObject<{
+    program: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    cwd: z.ZodOptional<z.ZodString>;
+    envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+} & {
     id: z.ZodString;
-    command: z.ZodString;
     required: z.ZodDefault<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
+    trust_required: z.ZodDefault<z.ZodBoolean>;
+    trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        projectDigest: z.ZodString;
+        configDigest: z.ZodString;
+        commandDigest: z.ZodString;
+        executablePath: z.ZodString;
+        executableDigest: z.ZodString;
+        scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+    }, "strict", z.ZodTypeAny, {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        scriptPath: string | null;
+        scriptDigest: string | null;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }, {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        scriptPath?: string | null | undefined;
+        scriptDigest?: string | null | undefined;
+    }>>>;
+}, "strict", z.ZodTypeAny, {
     id: string;
-    command: string;
     required: boolean;
+    program: string;
+    args: string[];
+    envAllowlist: string[];
+    trust_required: boolean;
+    trust_grant: {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        scriptPath: string | null;
+        scriptDigest: string | null;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    } | null;
+    cwd?: string | undefined;
 }, {
     id: string;
-    command: string;
+    program: string;
+    cwd?: string | undefined;
     required?: boolean | undefined;
+    args?: string[] | undefined;
+    envAllowlist?: string[] | undefined;
+    trust_required?: boolean | undefined;
+    trust_grant?: {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        scriptPath?: string | null | undefined;
+        scriptDigest?: string | null | undefined;
+    } | null | undefined;
 }>;
 export type TestCommand = z.infer<typeof TestCommand>;
 export declare const ProtectedPathApproval: z.ZodObject<{
@@ -46,6 +153,13 @@ export declare const TaskConstraints: z.ZodObject<{
      * suppressed by per-run protected-path approvals. The other constraint kinds
      * were unwired and removed. */
     protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Per-run globs no candidate may touch AT ALL (create, modify, or delete —
+     * stricter than protected_paths, which gates only tampering with existing
+     * files). Enforced by the engine's post-diff policy gate on envelope runs;
+     * an in-place run with deny_paths is refused at preflight. An operator
+     * accept_risk decision MAY still deliver a violating patch (INV-111: the
+     * human is the final authority). */
+    deny_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     /** Engine-derived gate/test path protections. Per-run approvals can narrow
      * only this auto-protected set, never spec/config-owned protected_paths. */
     auto_protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -65,6 +179,7 @@ export declare const TaskConstraints: z.ZodObject<{
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     protected_paths: string[];
+    deny_paths: string[];
     auto_protected_paths: string[];
     protected_path_approvals: {
         path: string;
@@ -72,6 +187,7 @@ export declare const TaskConstraints: z.ZodObject<{
     }[];
 }, {
     protected_paths?: string[] | undefined;
+    deny_paths?: string[] | undefined;
     auto_protected_paths?: string[] | undefined;
     protected_path_approvals?: {
         path: string;
@@ -195,18 +311,40 @@ export declare const TaskContract: z.ZodObject<{
         raw: string;
         normalized?: string | undefined;
     }>;
+    /** Caller-supplied per-run system-level instructions layered onto every
+     *  TASK-PRODUCING lane's prompt (primary, candidate, planner, explorer,
+     *  orchestrate-planner) — never reviewers, synthesis, or the auth smoke. */
+    instructions: z.ZodOptional<z.ZodString>;
+    /** Caller-supplied JSON Schema the run's final ANSWER must conform to,
+     * already normalized/strictified at the engine boundary. Mandatory when
+     * present: every answer-producing lane is constrained natively
+     * (HarnessRunSpec.output_schema) and ONE engine validator writes
+     * final/output.json + a typed conformance receipt; a non-conformant answer
+     * ends success-with-warnings (outputConformance failed), never a hard fail. */
+    output_schema: z.ZodDefault<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    /** The auth route the caller REQUESTED for this run (a preference, not a
+     * secret); the effective route is disclosed per attempt and rolled into
+     * the telemetry auth_route receipt. */
+    auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+    /** The credential profile the caller REQUESTED for this run (INV-135);
+     * null = engine-default credentials. Route evidence for profile identity. */
+    credential_profile_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    /** Caller-requested per-run turn cap. Run-level beats per-harness settings
+     * (specific beats general); a lane whose manifest lacks max_turns support
+     * discloses the ignored knob instead of silently dropping it. */
+    max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     spec: z.ZodOptional<z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
         hash: z.ZodOptional<z.ZodString>;
         path: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         path?: string | undefined;
-        id?: string | undefined;
         hash?: string | undefined;
+        id?: string | undefined;
     }, {
         path?: string | undefined;
-        id?: string | undefined;
         hash?: string | undefined;
+        id?: string | undefined;
     }>>;
     success_criteria: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -262,6 +400,13 @@ export declare const TaskContract: z.ZodObject<{
          * suppressed by per-run protected-path approvals. The other constraint kinds
          * were unwired and removed. */
         protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Per-run globs no candidate may touch AT ALL (create, modify, or delete —
+         * stricter than protected_paths, which gates only tampering with existing
+         * files). Enforced by the engine's post-diff policy gate on envelope runs;
+         * an in-place run with deny_paths is refused at preflight. An operator
+         * accept_risk decision MAY still deliver a violating patch (INV-111: the
+         * human is the final authority). */
+        deny_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         /** Engine-derived gate/test path protections. Per-run approvals can narrow
          * only this auto-protected set, never spec/config-owned protected_paths. */
         auto_protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -281,6 +426,7 @@ export declare const TaskContract: z.ZodObject<{
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         protected_paths: string[];
+        deny_paths: string[];
         auto_protected_paths: string[];
         protected_path_approvals: {
             path: string;
@@ -288,6 +434,7 @@ export declare const TaskContract: z.ZodObject<{
         }[];
     }, {
         protected_paths?: string[] | undefined;
+        deny_paths?: string[] | undefined;
         auto_protected_paths?: string[] | undefined;
         protected_path_approvals?: {
             path: string;
@@ -296,29 +443,118 @@ export declare const TaskContract: z.ZodObject<{
     }>>;
     tests: z.ZodDefault<z.ZodObject<{
         commands: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
             id: z.ZodString;
-            command: z.ZodString;
             required: z.ZodDefault<z.ZodBoolean>;
-        }, "strip", z.ZodTypeAny, {
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
             id: string;
-            command: string;
             required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
         }, {
             id: string;
-            command: string;
+            program: string;
+            cwd?: string | undefined;
             required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         commands: {
             id: string;
-            command: string;
             required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
         }[];
     }, {
         commands?: {
             id: string;
-            command: string;
+            program: string;
+            cwd?: string | undefined;
             required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
         }[] | undefined;
     }>>;
     access: z.ZodDefault<z.ZodObject<{
@@ -360,14 +596,39 @@ export declare const TaskContract: z.ZodObject<{
         deny?: string[] | undefined;
     }>>;
     budget: z.ZodDefault<z.ZodObject<{
-        portfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
-        max_usd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        routing_goal: z.ZodDefault<z.ZodEnum<["auto", "quality", "economy"]>>;
+        paid_budget: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"unlimited">;
+        }, "strict", z.ZodTypeAny, {
+            kind: "unlimited";
+        }, {
+            kind: "unlimited";
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"finite">;
+            maxUsd: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            kind: "finite";
+            maxUsd: number;
+        }, {
+            kind: "finite";
+            maxUsd: number;
+        }>]>>;
     }, "strip", z.ZodTypeAny, {
-        max_usd: number | null;
-        portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
+        routing_goal: "auto" | "quality" | "economy";
+        paid_budget: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
     }, {
-        max_usd?: number | null | undefined;
-        portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
+        paid_budget?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
     }>>;
     /** Resolved harness-scoped model map for this run (harness id → model id),
      * after scalar→primary expansion. The contract is the SSOT the route spec
@@ -401,6 +662,21 @@ export declare const TaskContract: z.ZodObject<{
         require_no_accepted_needs_human_open?: boolean | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
+    created_at: string;
+    mode: {
+        kind: "ask" | "plan" | "audit" | "agent" | "orchestrate";
+    };
+    schema_version: 2;
+    constraints: {
+        protected_paths: string[];
+        deny_paths: string[];
+        auto_protected_paths: string[];
+        protected_path_approvals: {
+            path: string;
+            reason?: string | undefined;
+        }[];
+    };
+    max_turns: number | null;
     access: {
         requested_profile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
         effective_profile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
@@ -410,11 +686,9 @@ export declare const TaskContract: z.ZodObject<{
         allow: string[];
         deny: string[];
     };
-    mode: {
-        kind: "ask" | "plan" | "audit" | "agent" | "orchestrate";
-    };
-    schema_version: 2;
-    created_at: string;
+    auth_preference: "auto" | "subscription" | "api_key";
+    output_schema: Record<string, unknown> | null;
+    credential_profile_id: string | null;
     repo: {
         root: string;
         base_ref: string;
@@ -422,17 +696,6 @@ export declare const TaskContract: z.ZodObject<{
         base_sha?: string | undefined;
     };
     task_id: string;
-    tests: {
-        commands: {
-            id: string;
-            command: string;
-            required: boolean;
-        }[];
-    };
-    budget: {
-        max_usd: number | null;
-        portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
-    };
     user_intent: {
         raw: string;
         normalized?: string | undefined;
@@ -453,12 +716,25 @@ export declare const TaskContract: z.ZodObject<{
         }[];
         order: string[];
     } | null;
-    constraints: {
-        protected_paths: string[];
-        auto_protected_paths: string[];
-        protected_path_approvals: {
-            path: string;
-            reason?: string | undefined;
+    tests: {
+        commands: {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
         }[];
     };
     external_context: {
@@ -466,6 +742,15 @@ export declare const TaskContract: z.ZodObject<{
         web_required: boolean;
         effective_mode: "off" | "auto" | "cached" | "live";
     };
+    budget: {
+        routing_goal: "auto" | "quality" | "economy";
+        paid_budget: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
+    };
     routing_models: Record<string, string>;
     convergence: {
         require_tests_pass: boolean;
@@ -477,15 +762,16 @@ export declare const TaskContract: z.ZodObject<{
     };
     spec?: {
         path?: string | undefined;
-        id?: string | undefined;
         hash?: string | undefined;
+        id?: string | undefined;
     } | undefined;
+    instructions?: string | undefined;
 }, {
+    created_at: string;
     mode: {
         kind: "ask" | "plan" | "audit" | "agent" | "orchestrate";
     };
     schema_version: 2;
-    created_at: string;
     repo: {
         root: string;
         base_ref: string;
@@ -499,9 +785,20 @@ export declare const TaskContract: z.ZodObject<{
     };
     spec?: {
         path?: string | undefined;
-        id?: string | undefined;
         hash?: string | undefined;
+        id?: string | undefined;
+    } | undefined;
+    instructions?: string | undefined;
+    constraints?: {
+        protected_paths?: string[] | undefined;
+        deny_paths?: string[] | undefined;
+        auto_protected_paths?: string[] | undefined;
+        protected_path_approvals?: {
+            path: string;
+            reason?: string | undefined;
+        }[] | undefined;
     } | undefined;
+    max_turns?: number | null | undefined;
     access?: {
         requested_profile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
         effective_profile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
@@ -511,17 +808,9 @@ export declare const TaskContract: z.ZodObject<{
         allow?: string[] | undefined;
         deny?: string[] | undefined;
     } | undefined;
-    tests?: {
-        commands?: {
-            id: string;
-            command: string;
-            required?: boolean | undefined;
-        }[] | undefined;
-    } | undefined;
-    budget?: {
-        max_usd?: number | null | undefined;
-        portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-    } | undefined;
+    auth_preference?: "auto" | "subscription" | "api_key" | undefined;
+    output_schema?: Record<string, unknown> | null | undefined;
+    credential_profile_id?: string | null | undefined;
     success_criteria?: {
         id: string;
         text: string;
@@ -538,12 +827,25 @@ export declare const TaskContract: z.ZodObject<{
         }[] | undefined;
         order?: string[] | undefined;
     } | null | undefined;
-    constraints?: {
-        protected_paths?: string[] | undefined;
-        auto_protected_paths?: string[] | undefined;
-        protected_path_approvals?: {
-            path: string;
-            reason?: string | undefined;
+    tests?: {
+        commands?: {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
         }[] | undefined;
     } | undefined;
     external_context?: {
@@ -551,6 +853,15 @@ export declare const TaskContract: z.ZodObject<{
         web_required?: boolean | undefined;
         effective_mode?: "off" | "auto" | "cached" | "live" | undefined;
     } | undefined;
+    budget?: {
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
+        paid_budget?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
+    } | undefined;
     routing_models?: Record<string, string> | undefined;
     convergence?: {
         require_tests_pass?: boolean | undefined;
@@ -562,4 +873,1290 @@ export declare const TaskContract: z.ZodObject<{
     } | undefined;
 }>;
 export type TaskContract = z.infer<typeof TaskContract>;
+/**
+ * Decoder for the persisted, frozen task artifact used to authorize delivery.
+ * Runtime construction keeps TaskContract defaults for callers building a new
+ * contract, but an existing authority must state its gate set explicitly: an
+ * omitted/typoed field must never become a trustworthy empty list via defaults.
+ */
+export declare const FrozenTaskContractArtifact: z.ZodPipeline<z.ZodObject<{
+    tests: z.ZodObject<{
+        commands: z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        commands: z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        commands: z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">;
+    }, z.ZodTypeAny, "passthrough">>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    tests: z.ZodObject<{
+        commands: z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        commands: z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        commands: z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">;
+    }, z.ZodTypeAny, "passthrough">>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    tests: z.ZodObject<{
+        commands: z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        commands: z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        commands: z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">;
+    }, z.ZodTypeAny, "passthrough">>;
+}, z.ZodTypeAny, "passthrough">>, z.ZodObject<{
+    schema_version: z.ZodLiteral<2>;
+    task_id: z.ZodString;
+    created_at: z.ZodString;
+    repo: z.ZodObject<{
+        root: z.ZodString;
+        base_ref: z.ZodString;
+        base_sha: z.ZodOptional<z.ZodString>;
+        dirty_policy: z.ZodDefault<z.ZodEnum<["refuse", "snapshot"]>>;
+    }, "strip", z.ZodTypeAny, {
+        root: string;
+        base_ref: string;
+        dirty_policy: "refuse" | "snapshot";
+        base_sha?: string | undefined;
+    }, {
+        root: string;
+        base_ref: string;
+        base_sha?: string | undefined;
+        dirty_policy?: "refuse" | "snapshot" | undefined;
+    }>;
+    mode: z.ZodObject<{
+        kind: z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>;
+    }, "strip", z.ZodTypeAny, {
+        kind: "ask" | "plan" | "audit" | "agent" | "orchestrate";
+    }, {
+        kind: "ask" | "plan" | "audit" | "agent" | "orchestrate";
+    }>;
+    user_intent: z.ZodObject<{
+        raw: z.ZodString;
+        normalized: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        raw: string;
+        normalized?: string | undefined;
+    }, {
+        raw: string;
+        normalized?: string | undefined;
+    }>;
+    /** Caller-supplied per-run system-level instructions layered onto every
+     *  TASK-PRODUCING lane's prompt (primary, candidate, planner, explorer,
+     *  orchestrate-planner) — never reviewers, synthesis, or the auth smoke. */
+    instructions: z.ZodOptional<z.ZodString>;
+    /** Caller-supplied JSON Schema the run's final ANSWER must conform to,
+     * already normalized/strictified at the engine boundary. Mandatory when
+     * present: every answer-producing lane is constrained natively
+     * (HarnessRunSpec.output_schema) and ONE engine validator writes
+     * final/output.json + a typed conformance receipt; a non-conformant answer
+     * ends success-with-warnings (outputConformance failed), never a hard fail. */
+    output_schema: z.ZodDefault<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    /** The auth route the caller REQUESTED for this run (a preference, not a
+     * secret); the effective route is disclosed per attempt and rolled into
+     * the telemetry auth_route receipt. */
+    auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+    /** The credential profile the caller REQUESTED for this run (INV-135);
+     * null = engine-default credentials. Route evidence for profile identity. */
+    credential_profile_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    /** Caller-requested per-run turn cap. Run-level beats per-harness settings
+     * (specific beats general); a lane whose manifest lacks max_turns support
+     * discloses the ignored knob instead of silently dropping it. */
+    max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    spec: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        hash: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        path?: string | undefined;
+        hash?: string | undefined;
+        id?: string | undefined;
+    }, {
+        path?: string | undefined;
+        hash?: string | undefined;
+        id?: string | undefined;
+    }>>;
+    success_criteria: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        text: z.ZodString;
+        required: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        text: string;
+        required: boolean;
+    }, {
+        id: string;
+        text: string;
+        required?: boolean | undefined;
+    }>, "many">>;
+    non_goals: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    forbidden_approaches: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    decided_tradeoffs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Spec-derived task graph; null until a frozen SpecPack with tasks is resolved. */
+    task_graph: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        nodes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            title: z.ZodDefault<z.ZodString>;
+            depends_on: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            title: string;
+            depends_on: string[];
+        }, {
+            id: string;
+            title?: string | undefined;
+            depends_on?: string[] | undefined;
+        }>, "many">>;
+        /** Topological execution order (node ids); empty when there are no tasks. */
+        order: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        nodes: {
+            id: string;
+            title: string;
+            depends_on: string[];
+        }[];
+        order: string[];
+    }, {
+        nodes?: {
+            id: string;
+            title?: string | undefined;
+            depends_on?: string[] | undefined;
+        }[] | undefined;
+        order?: string[] | undefined;
+    }>>>;
+    constraints: z.ZodDefault<z.ZodObject<{
+        /** Globs whose changes escalate risk to a human-approval gate (wired into
+         * classifyRisk/requireHuman). These are spec/config-owned and cannot be
+         * suppressed by per-run protected-path approvals. The other constraint kinds
+         * were unwired and removed. */
+        protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Per-run globs no candidate may touch AT ALL (create, modify, or delete —
+         * stricter than protected_paths, which gates only tampering with existing
+         * files). Enforced by the engine's post-diff policy gate on envelope runs;
+         * an in-place run with deny_paths is refused at preflight. An operator
+         * accept_risk decision MAY still deliver a violating patch (INV-111: the
+         * human is the final authority). */
+        deny_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Engine-derived gate/test path protections. Per-run approvals can narrow
+         * only this auto-protected set, never spec/config-owned protected_paths. */
+        auto_protected_paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Per-run typed approvals for protected gate/test path changes. These are
+         * produced by explicit surfaces (CLI/control/IDE), then consumed by policy. */
+        protected_path_approvals: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            /** Glob approved by the operator/user for this run; consumed only by the
+             * auto-protected gate/test path policy, not by built-in critical-path gates. */
+            path: z.ZodString;
+            reason: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            path: string;
+            reason?: string | undefined;
+        }, {
+            path: string;
+            reason?: string | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        protected_paths: string[];
+        deny_paths: string[];
+        auto_protected_paths: string[];
+        protected_path_approvals: {
+            path: string;
+            reason?: string | undefined;
+        }[];
+    }, {
+        protected_paths?: string[] | undefined;
+        deny_paths?: string[] | undefined;
+        auto_protected_paths?: string[] | undefined;
+        protected_path_approvals?: {
+            path: string;
+            reason?: string | undefined;
+        }[] | undefined;
+    }>>;
+    tests: z.ZodDefault<z.ZodObject<{
+        commands: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        } & {
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            trust_required: z.ZodDefault<z.ZodBoolean>;
+            trust_grant: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                projectDigest: z.ZodString;
+                configDigest: z.ZodString;
+                commandDigest: z.ZodString;
+                executablePath: z.ZodString;
+                executableDigest: z.ZodString;
+                scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+            }, "strict", z.ZodTypeAny, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            }, {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            }>>>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }, {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        commands: {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }[];
+    }, {
+        commands?: {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }[] | undefined;
+    }>>;
+    access: z.ZodDefault<z.ZodObject<{
+        requested_profile: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+        /** Profile actually enforced by the engine (mode/trust clamps applied; never client-supplied). */
+        effective_profile: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+    }, "strip", z.ZodTypeAny, {
+        requested_profile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        effective_profile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }, {
+        requested_profile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+        effective_profile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+    }>>;
+    external_context: z.ZodDefault<z.ZodObject<{
+        policy: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+        web_required: z.ZodDefault<z.ZodBoolean>;
+        /** Mode the selected route actually executes (disclosed upgrades, e.g. claude cached->live). */
+        effective_mode: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+    }, "strip", z.ZodTypeAny, {
+        policy: "off" | "auto" | "cached" | "live";
+        web_required: boolean;
+        effective_mode: "off" | "auto" | "cached" | "live";
+    }, {
+        policy?: "off" | "auto" | "cached" | "live" | undefined;
+        web_required?: boolean | undefined;
+        effective_mode?: "off" | "auto" | "cached" | "live" | undefined;
+    }>>;
+    tool_permission_policy: z.ZodDefault<z.ZodObject<{
+        web: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+        allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        web: "off" | "auto" | "cached" | "live";
+        allow: string[];
+        deny: string[];
+    }, {
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        allow?: string[] | undefined;
+        deny?: string[] | undefined;
+    }>>;
+    budget: z.ZodDefault<z.ZodObject<{
+        routing_goal: z.ZodDefault<z.ZodEnum<["auto", "quality", "economy"]>>;
+        paid_budget: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"unlimited">;
+        }, "strict", z.ZodTypeAny, {
+            kind: "unlimited";
+        }, {
+            kind: "unlimited";
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"finite">;
+            maxUsd: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            kind: "finite";
+            maxUsd: number;
+        }, {
+            kind: "finite";
+            maxUsd: number;
+        }>]>>;
+    }, "strip", z.ZodTypeAny, {
+        routing_goal: "auto" | "quality" | "economy";
+        paid_budget: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
+    }, {
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
+        paid_budget?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
+    }>>;
+    /** Resolved harness-scoped model map for this run (harness id → model id),
+     * after scalar→primary expansion. The contract is the SSOT the route spec
+     * builder reads; empty = every route uses its per-harness settings default. */
+    routing_models: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    convergence: z.ZodDefault<z.ZodObject<{
+        require_tests_pass: z.ZodDefault<z.ZodBoolean>;
+        require_no_accepted_block_open: z.ZodDefault<z.ZodBoolean>;
+        require_no_accepted_fix_first_open: z.ZodDefault<z.ZodBoolean>;
+        require_final_cross_family_clean_review: z.ZodDefault<z.ZodBoolean>;
+        require_final_diff_stable_after_review: z.ZodDefault<z.ZodBoolean>;
+        /**
+         * Block convergence while an accepted NEEDS_HUMAN escalation is still open.
+         * Closes the v0.8 hole where, with cross-family clean review disabled, a run
+         * could converge to success with an open NEEDS_HUMAN finding.
+         */
+        require_no_accepted_needs_human_open: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        require_tests_pass: boolean;
+        require_no_accepted_block_open: boolean;
+        require_no_accepted_fix_first_open: boolean;
+        require_final_cross_family_clean_review: boolean;
+        require_final_diff_stable_after_review: boolean;
+        require_no_accepted_needs_human_open: boolean;
+    }, {
+        require_tests_pass?: boolean | undefined;
+        require_no_accepted_block_open?: boolean | undefined;
+        require_no_accepted_fix_first_open?: boolean | undefined;
+        require_final_cross_family_clean_review?: boolean | undefined;
+        require_final_diff_stable_after_review?: boolean | undefined;
+        require_no_accepted_needs_human_open?: boolean | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    created_at: string;
+    mode: {
+        kind: "ask" | "plan" | "audit" | "agent" | "orchestrate";
+    };
+    schema_version: 2;
+    constraints: {
+        protected_paths: string[];
+        deny_paths: string[];
+        auto_protected_paths: string[];
+        protected_path_approvals: {
+            path: string;
+            reason?: string | undefined;
+        }[];
+    };
+    max_turns: number | null;
+    access: {
+        requested_profile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        effective_profile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    };
+    tool_permission_policy: {
+        web: "off" | "auto" | "cached" | "live";
+        allow: string[];
+        deny: string[];
+    };
+    auth_preference: "auto" | "subscription" | "api_key";
+    output_schema: Record<string, unknown> | null;
+    credential_profile_id: string | null;
+    repo: {
+        root: string;
+        base_ref: string;
+        dirty_policy: "refuse" | "snapshot";
+        base_sha?: string | undefined;
+    };
+    task_id: string;
+    user_intent: {
+        raw: string;
+        normalized?: string | undefined;
+    };
+    success_criteria: {
+        id: string;
+        text: string;
+        required: boolean;
+    }[];
+    non_goals: string[];
+    forbidden_approaches: string[];
+    decided_tradeoffs: string[];
+    task_graph: {
+        nodes: {
+            id: string;
+            title: string;
+            depends_on: string[];
+        }[];
+        order: string[];
+    } | null;
+    tests: {
+        commands: {
+            id: string;
+            required: boolean;
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            trust_required: boolean;
+            trust_grant: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                scriptPath: string | null;
+                scriptDigest: string | null;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            } | null;
+            cwd?: string | undefined;
+        }[];
+    };
+    external_context: {
+        policy: "off" | "auto" | "cached" | "live";
+        web_required: boolean;
+        effective_mode: "off" | "auto" | "cached" | "live";
+    };
+    budget: {
+        routing_goal: "auto" | "quality" | "economy";
+        paid_budget: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
+    };
+    routing_models: Record<string, string>;
+    convergence: {
+        require_tests_pass: boolean;
+        require_no_accepted_block_open: boolean;
+        require_no_accepted_fix_first_open: boolean;
+        require_final_cross_family_clean_review: boolean;
+        require_final_diff_stable_after_review: boolean;
+        require_no_accepted_needs_human_open: boolean;
+    };
+    spec?: {
+        path?: string | undefined;
+        hash?: string | undefined;
+        id?: string | undefined;
+    } | undefined;
+    instructions?: string | undefined;
+}, {
+    created_at: string;
+    mode: {
+        kind: "ask" | "plan" | "audit" | "agent" | "orchestrate";
+    };
+    schema_version: 2;
+    repo: {
+        root: string;
+        base_ref: string;
+        base_sha?: string | undefined;
+        dirty_policy?: "refuse" | "snapshot" | undefined;
+    };
+    task_id: string;
+    user_intent: {
+        raw: string;
+        normalized?: string | undefined;
+    };
+    spec?: {
+        path?: string | undefined;
+        hash?: string | undefined;
+        id?: string | undefined;
+    } | undefined;
+    instructions?: string | undefined;
+    constraints?: {
+        protected_paths?: string[] | undefined;
+        deny_paths?: string[] | undefined;
+        auto_protected_paths?: string[] | undefined;
+        protected_path_approvals?: {
+            path: string;
+            reason?: string | undefined;
+        }[] | undefined;
+    } | undefined;
+    max_turns?: number | null | undefined;
+    access?: {
+        requested_profile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+        effective_profile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+    } | undefined;
+    tool_permission_policy?: {
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        allow?: string[] | undefined;
+        deny?: string[] | undefined;
+    } | undefined;
+    auth_preference?: "auto" | "subscription" | "api_key" | undefined;
+    output_schema?: Record<string, unknown> | null | undefined;
+    credential_profile_id?: string | null | undefined;
+    success_criteria?: {
+        id: string;
+        text: string;
+        required?: boolean | undefined;
+    }[] | undefined;
+    non_goals?: string[] | undefined;
+    forbidden_approaches?: string[] | undefined;
+    decided_tradeoffs?: string[] | undefined;
+    task_graph?: {
+        nodes?: {
+            id: string;
+            title?: string | undefined;
+            depends_on?: string[] | undefined;
+        }[] | undefined;
+        order?: string[] | undefined;
+    } | null | undefined;
+    tests?: {
+        commands?: {
+            id: string;
+            program: string;
+            cwd?: string | undefined;
+            required?: boolean | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+            trust_required?: boolean | undefined;
+            trust_grant?: {
+                projectDigest: string;
+                configDigest: string;
+                commandDigest: string;
+                executablePath: string;
+                executableDigest: string;
+                accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+                scriptPath?: string | null | undefined;
+                scriptDigest?: string | null | undefined;
+            } | null | undefined;
+        }[] | undefined;
+    } | undefined;
+    external_context?: {
+        policy?: "off" | "auto" | "cached" | "live" | undefined;
+        web_required?: boolean | undefined;
+        effective_mode?: "off" | "auto" | "cached" | "live" | undefined;
+    } | undefined;
+    budget?: {
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
+        paid_budget?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
+    } | undefined;
+    routing_models?: Record<string, string> | undefined;
+    convergence?: {
+        require_tests_pass?: boolean | undefined;
+        require_no_accepted_block_open?: boolean | undefined;
+        require_no_accepted_fix_first_open?: boolean | undefined;
+        require_final_cross_family_clean_review?: boolean | undefined;
+        require_final_diff_stable_after_review?: boolean | undefined;
+        require_no_accepted_needs_human_open?: boolean | undefined;
+    } | undefined;
+}>>;
+export type FrozenTaskContractArtifact = z.infer<typeof FrozenTaskContractArtifact>;
 //# sourceMappingURL=task.d.ts.map