@claudexor/schema 1.0.1 → 2.1.1

package/dist/config.d.ts

@@ -22,45 +22,80 @@ export declare const ProjectConfig: z.ZodObject<{
         exclude?: string[] | undefined;
     }>>;
     tests: z.ZodDefault<z.ZodObject<{
-        commands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        commands: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            program: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            cwd: z.ZodOptional<z.ZodString>;
+            envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            cwd?: string | undefined;
+        }, {
+            program: string;
+            cwd?: string | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+        }>, "many">>;
     }, "strict", z.ZodTypeAny, {
-        commands: string[];
+        commands: {
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            cwd?: string | undefined;
+        }[];
     }, {
-        commands?: string[] | undefined;
+        commands?: {
+            program: string;
+            cwd?: string | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+        }[] | undefined;
     }>>;
     budget: z.ZodDefault<z.ZodObject<{
-        portfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
+        routing_goal: z.ZodOptional<z.ZodEnum<["auto", "quality", "economy"]>>;
     }, "strict", z.ZodTypeAny, {
-        portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
     }, {
-        portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
     version: 1;
+    tests: {
+        commands: {
+            program: string;
+            args: string[];
+            envAllowlist: string[];
+            cwd?: string | undefined;
+        }[];
+    };
+    budget: {
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
+    };
     context: {
         mandatory_files: string[];
         include: string[];
         exclude: string[];
     };
-    tests: {
-        commands: string[];
-    };
-    budget: {
-        portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
-    };
 }, {
     version?: 1 | undefined;
+    tests?: {
+        commands?: {
+            program: string;
+            cwd?: string | undefined;
+            args?: string[] | undefined;
+            envAllowlist?: string[] | undefined;
+        }[] | undefined;
+    } | undefined;
+    budget?: {
+        routing_goal?: "auto" | "quality" | "economy" | undefined;
+    } | undefined;
     context?: {
         mandatory_files?: string[] | undefined;
         include?: string[] | undefined;
         exclude?: string[] | undefined;
     } | undefined;
-    tests?: {
-        commands?: string[] | undefined;
-    } | undefined;
-    budget?: {
-        portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-    } | undefined;
 }>;
 export type ProjectConfig = z.infer<typeof ProjectConfig>;
 /** Sensitive trust settings — only valid in global/user-local/trust files. */
@@ -76,22 +111,69 @@ export declare const TrustConfig: z.ZodObject<{
      * carry null and surfaces disclose them as revocable only via CLI.
      */
     repo_root: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    test_command_grants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        projectDigest: z.ZodString;
+        configDigest: z.ZodString;
+        commandDigest: z.ZodString;
+        executablePath: z.ZodString;
+        executableDigest: z.ZodString;
+        scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+    }, "strict", z.ZodTypeAny, {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        scriptPath: string | null;
+        scriptDigest: string | null;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }, {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        scriptPath?: string | null | undefined;
+        scriptDigest?: string | null | undefined;
+    }>, "many">>;
 }, "strict", z.ZodTypeAny, {
     version: 1;
     access_default: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
     allow_full_access: boolean;
     repo_root: string | null;
+    test_command_grants: {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        scriptPath: string | null;
+        scriptDigest: string | null;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }[];
 }, {
     version?: 1 | undefined;
     access_default?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     allow_full_access?: boolean | undefined;
     repo_root?: string | null | undefined;
+    test_command_grants?: {
+        projectDigest: string;
+        configDigest: string;
+        commandDigest: string;
+        executablePath: string;
+        executableDigest: string;
+        accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        scriptPath?: string | null | undefined;
+        scriptDigest?: string | null | undefined;
+    }[] | undefined;
 }>;
 export type TrustConfig = z.infer<typeof TrustConfig>;
-/** Global user config (~/.claudexor/config.yaml). */
+/** Claudexor v2 global user config (~/.claudexor/v2/config.yaml). */
 export declare const GlobalConfig: z.ZodObject<{
     version: z.ZodDefault<z.ZodLiteral<1>>;
-    default_portfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
     /**
      * How long an interactive run waits for the user's answer to a harness
      * question (interaction.requested) before delivering a benign decline and
@@ -110,43 +192,89 @@ export declare const GlobalConfig: z.ZodObject<{
         env_inheritance: z.ZodDefault<z.ZodEnum<["mirror_native", "clean"]>>;
         /** Default auth route preference (subscription/api_key/auto). */
         auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
-        /**
-         * Operator-tunable per-provider-family quality priors (0..1) feeding
-         * RouterCandidate.qualityForIntent. A DECLARED prior, not
-         * invented magic: unset families ride the router's neutral 0.5.
-         */
-        quality_priors: z.ZodDefault<z.ZodRecord<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>, z.ZodNumber>>;
+        goal: z.ZodDefault<z.ZodEnum<["auto", "quality", "economy"]>>;
+        paid_fallback: z.ZodDefault<z.ZodEnum<["never", "when_unavailable", "allowed_within_cap"]>>;
+        quality_tiers: z.ZodDefault<z.ZodRecord<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, z.ZodArray<z.ZodArray<z.ZodObject<{
+            harness: z.ZodString;
+            model: z.ZodString;
+            effort: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+        }, "strict", z.ZodTypeAny, {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }, {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }>, "many">, "many">>>;
     }, "strict", z.ZodTypeAny, {
         auth_preference: "auto" | "subscription" | "api_key";
         env_inheritance: "mirror_native" | "clean";
         primary_harness: string | null;
         eligible_harnesses: string[];
         default_policy: "auto" | "primary";
-        quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+        goal: "auto" | "quality" | "economy";
+        paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+        quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>>;
     }, {
         auth_preference?: "auto" | "subscription" | "api_key" | undefined;
         env_inheritance?: "mirror_native" | "clean" | undefined;
         primary_harness?: string | null | undefined;
         eligible_harnesses?: string[] | undefined;
         default_policy?: "auto" | "primary" | undefined;
-        quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+        goal?: "auto" | "quality" | "economy" | undefined;
+        paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+        quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>> | undefined;
     }>>;
     budget: z.ZodDefault<z.ZodObject<{
-        max_usd_per_run: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        paid_budget_per_run: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"unlimited">;
+        }, "strict", z.ZodTypeAny, {
+            kind: "unlimited";
+        }, {
+            kind: "unlimited";
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"finite">;
+            maxUsd: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            kind: "finite";
+            maxUsd: number;
+        }, {
+            kind: "finite";
+            maxUsd: number;
+        }>]>>;
         /**
          * Per-candidate reservation floor (USD) held against the run cap for
          * every race-wave slot AFTER the first, BEFORE any usage streams.
          * Makes concurrent in-flight candidates visible to the budget breaker
-         * so a parallel wave cannot blow past `max_usd_per_run` between
+         * so a parallel wave cannot blow past the finite paid budget between
          * settlements. The first slot never holds it: a cap smaller than the
          * floor still runs one candidate and stops on real usage.
          */
         estimate_usd_floor: z.ZodDefault<z.ZodNumber>;
     }, "strict", z.ZodTypeAny, {
-        max_usd_per_run: number | null;
+        paid_budget_per_run: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
         estimate_usd_floor: number;
     }, {
-        max_usd_per_run?: number | null | undefined;
+        paid_budget_per_run?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
         estimate_usd_floor?: number | undefined;
     }>>;
     runtime: z.ZodDefault<z.ZodObject<{
@@ -196,13 +324,122 @@ export declare const GlobalConfig: z.ZodObject<{
         reviewer_timeout_ms?: number | undefined;
         harness_inactivity_timeout_ms?: number | undefined;
     }>>;
+    /**
+     * Disk retention for engine-owned runtime artifacts (W3.6). The daemon's
+     * retention service deletes ONLY terminal, unreferenced run trees past
+     * their age — active/queued/blocked runs, runs referenced by live
+     * threads, and undelivered/applyable work products always survive, and
+     * the newest N runs per project survive regardless of age.
+     */
+    retention: z.ZodDefault<z.ZodObject<{
+        runs_max_age_days: z.ZodDefault<z.ZodNumber>;
+        reviews_max_age_days: z.ZodDefault<z.ZodNumber>;
+        keep_last_runs_per_project: z.ZodDefault<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        runs_max_age_days: number;
+        reviews_max_age_days: number;
+        keep_last_runs_per_project: number;
+    }, {
+        runs_max_age_days?: number | undefined;
+        reviews_max_age_days?: number | undefined;
+        keep_last_runs_per_project?: number | undefined;
+    }>>;
+    /**
+     * Durable NON-SECRET credential-profile registry (INV-135): additional
+     * credential identities per harness beyond the engine default. Uniqueness
+     * of (harness_id, profile_id) is enforced here; secret material lives in
+     * the vendor dir or the secret store, never in config.
+     */
+    credential_profiles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
+        profile_id: z.ZodString;
+        harness_id: z.ZodString;
+        display_name: z.ZodString;
+        credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+        isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>, "many">>, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }[], {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }[] | undefined>;
     harnesses: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         default_model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         effort: z.ZodDefault<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
         max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
         max_rounds: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
-        max_usd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        /**
+         * ONE typed profile-selection policy (INV-135, W5.4): what happens
+         * when the selected credential profile hits its vendor limit.
+         * Rotation is OPT-IN and rotates only on typed vendor-limit
+         * signals or proactive headroom breaches — never on ordinary
+         * network errors.
+         */
+        profile_policy: z.ZodDefault<z.ZodObject<{
+            limit_action: z.ZodDefault<z.ZodEnum<["fail", "ask", "rotate"]>>;
+            rotation_eligible: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            headroom_threshold: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            limit_action: "ask" | "fail" | "rotate";
+            rotation_eligible: string[];
+            headroom_threshold: number;
+        }, {
+            limit_action?: "ask" | "fail" | "rotate" | undefined;
+            rotation_eligible?: string[] | undefined;
+            headroom_threshold?: number | undefined;
+        }>>;
         tools_allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         tools_deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         fallback_model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -211,26 +448,34 @@ export declare const GlobalConfig: z.ZodObject<{
         auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
     }, "strict", z.ZodTypeAny, {
         fallback_model: string | null;
-        max_turns: number | null;
+        enabled: boolean;
         web: "off" | "auto" | "cached" | "live";
-        max_usd: number | null;
+        max_turns: number | null;
         auth_preference: "auto" | "subscription" | "api_key";
-        enabled: boolean;
-        default_model: string | null;
         effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+        default_model: string | null;
         max_rounds: number | null;
+        profile_policy: {
+            limit_action: "ask" | "fail" | "rotate";
+            rotation_eligible: string[];
+            headroom_threshold: number;
+        };
         tools_allow: string[];
         tools_deny: string[];
     }, {
         fallback_model?: string | null | undefined;
-        max_turns?: number | null | undefined;
+        enabled?: boolean | undefined;
         web?: "off" | "auto" | "cached" | "live" | undefined;
-        max_usd?: number | null | undefined;
+        max_turns?: number | null | undefined;
         auth_preference?: "auto" | "subscription" | "api_key" | undefined;
-        enabled?: boolean | undefined;
-        default_model?: string | null | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+        default_model?: string | null | undefined;
         max_rounds?: number | null | undefined;
+        profile_policy?: {
+            limit_action?: "ask" | "fail" | "rotate" | undefined;
+            rotation_eligible?: string[] | undefined;
+            headroom_threshold?: number | undefined;
+        } | undefined;
         tools_allow?: string[] | undefined;
         tools_deny?: string[] | undefined;
     }>>>;
@@ -238,22 +483,30 @@ export declare const GlobalConfig: z.ZodObject<{
     version: 1;
     harnesses: Record<string, {
         fallback_model: string | null;
-        max_turns: number | null;
+        enabled: boolean;
         web: "off" | "auto" | "cached" | "live";
-        max_usd: number | null;
+        max_turns: number | null;
         auth_preference: "auto" | "subscription" | "api_key";
-        enabled: boolean;
-        default_model: string | null;
         effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+        default_model: string | null;
         max_rounds: number | null;
+        profile_policy: {
+            limit_action: "ask" | "fail" | "rotate";
+            rotation_eligible: string[];
+            headroom_threshold: number;
+        };
         tools_allow: string[];
         tools_deny: string[];
     }>;
     budget: {
-        max_usd_per_run: number | null;
+        paid_budget_per_run: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        };
         estimate_usd_floor: number;
     };
-    default_portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
     interaction_timeout_ms: number;
     routing: {
         auth_preference: "auto" | "subscription" | "api_key";
@@ -261,7 +514,13 @@ export declare const GlobalConfig: z.ZodObject<{
         primary_harness: string | null;
         eligible_harnesses: string[];
         default_policy: "auto" | "primary";
-        quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+        goal: "auto" | "quality" | "economy";
+        paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+        quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>>;
     };
     runtime: {
         transient_retry: {
@@ -272,26 +531,49 @@ export declare const GlobalConfig: z.ZodObject<{
         reviewer_timeout_ms: number;
         harness_inactivity_timeout_ms: number;
     };
+    retention: {
+        runs_max_age_days: number;
+        reviews_max_age_days: number;
+        keep_last_runs_per_project: number;
+    };
+    credential_profiles: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }[];
 }, {
     version?: 1 | undefined;
     harnesses?: Record<string, {
         fallback_model?: string | null | undefined;
-        max_turns?: number | null | undefined;
+        enabled?: boolean | undefined;
         web?: "off" | "auto" | "cached" | "live" | undefined;
-        max_usd?: number | null | undefined;
+        max_turns?: number | null | undefined;
         auth_preference?: "auto" | "subscription" | "api_key" | undefined;
-        enabled?: boolean | undefined;
-        default_model?: string | null | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+        default_model?: string | null | undefined;
         max_rounds?: number | null | undefined;
+        profile_policy?: {
+            limit_action?: "ask" | "fail" | "rotate" | undefined;
+            rotation_eligible?: string[] | undefined;
+            headroom_threshold?: number | undefined;
+        } | undefined;
         tools_allow?: string[] | undefined;
         tools_deny?: string[] | undefined;
     }> | undefined;
     budget?: {
-        max_usd_per_run?: number | null | undefined;
+        paid_budget_per_run?: {
+            kind: "unlimited";
+        } | {
+            kind: "finite";
+            maxUsd: number;
+        } | undefined;
         estimate_usd_floor?: number | undefined;
     } | undefined;
-    default_portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
     interaction_timeout_ms?: number | undefined;
     routing?: {
         auth_preference?: "auto" | "subscription" | "api_key" | undefined;
@@ -299,7 +581,13 @@ export declare const GlobalConfig: z.ZodObject<{
         primary_harness?: string | null | undefined;
         eligible_harnesses?: string[] | undefined;
         default_policy?: "auto" | "primary" | undefined;
-        quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+        goal?: "auto" | "quality" | "economy" | undefined;
+        paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+        quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+            harness: string;
+            model: string;
+            effort: "low" | "medium" | "high" | "xhigh" | "max";
+        }[][]>> | undefined;
     } | undefined;
     runtime?: {
         transient_retry?: {
@@ -310,6 +598,21 @@ export declare const GlobalConfig: z.ZodObject<{
         reviewer_timeout_ms?: number | undefined;
         harness_inactivity_timeout_ms?: number | undefined;
     } | undefined;
+    retention?: {
+        runs_max_age_days?: number | undefined;
+        reviews_max_age_days?: number | undefined;
+        keep_last_runs_per_project?: number | undefined;
+    } | undefined;
+    credential_profiles?: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }[] | undefined;
 }>;
 export type GlobalConfig = z.infer<typeof GlobalConfig>;
 /** The fully-resolved effective config after precedence merge. */
@@ -330,45 +633,80 @@ export declare const ResolvedConfig: z.ZodObject<{
             exclude?: string[] | undefined;
         }>>;
         tests: z.ZodDefault<z.ZodObject<{
-            commands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            commands: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                program: z.ZodString;
+                args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                cwd: z.ZodOptional<z.ZodString>;
+                envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            }, "strict", z.ZodTypeAny, {
+                program: string;
+                args: string[];
+                envAllowlist: string[];
+                cwd?: string | undefined;
+            }, {
+                program: string;
+                cwd?: string | undefined;
+                args?: string[] | undefined;
+                envAllowlist?: string[] | undefined;
+            }>, "many">>;
         }, "strict", z.ZodTypeAny, {
-            commands: string[];
+            commands: {
+                program: string;
+                args: string[];
+                envAllowlist: string[];
+                cwd?: string | undefined;
+            }[];
         }, {
-            commands?: string[] | undefined;
+            commands?: {
+                program: string;
+                cwd?: string | undefined;
+                args?: string[] | undefined;
+                envAllowlist?: string[] | undefined;
+            }[] | undefined;
         }>>;
         budget: z.ZodDefault<z.ZodObject<{
-            portfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
+            routing_goal: z.ZodOptional<z.ZodEnum<["auto", "quality", "economy"]>>;
         }, "strict", z.ZodTypeAny, {
-            portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
         }, {
-            portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
         }>>;
     }, "strict", z.ZodTypeAny, {
         version: 1;
+        tests: {
+            commands: {
+                program: string;
+                args: string[];
+                envAllowlist: string[];
+                cwd?: string | undefined;
+            }[];
+        };
+        budget: {
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
+        };
         context: {
             mandatory_files: string[];
             include: string[];
             exclude: string[];
         };
-        tests: {
-            commands: string[];
-        };
-        budget: {
-            portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
-        };
     }, {
         version?: 1 | undefined;
+        tests?: {
+            commands?: {
+                program: string;
+                cwd?: string | undefined;
+                args?: string[] | undefined;
+                envAllowlist?: string[] | undefined;
+            }[] | undefined;
+        } | undefined;
+        budget?: {
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
+        } | undefined;
         context?: {
             mandatory_files?: string[] | undefined;
             include?: string[] | undefined;
             exclude?: string[] | undefined;
         } | undefined;
-        tests?: {
-            commands?: string[] | undefined;
-        } | undefined;
-        budget?: {
-            portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-        } | undefined;
     }>;
     trust: z.ZodObject<{
         version: z.ZodDefault<z.ZodLiteral<1>>;
@@ -382,20 +720,67 @@ export declare const ResolvedConfig: z.ZodObject<{
          * carry null and surfaces disclose them as revocable only via CLI.
          */
         repo_root: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        test_command_grants: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            projectDigest: z.ZodString;
+            configDigest: z.ZodString;
+            commandDigest: z.ZodString;
+            executablePath: z.ZodString;
+            executableDigest: z.ZodString;
+            scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+        }, "strict", z.ZodTypeAny, {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            scriptPath: string | null;
+            scriptDigest: string | null;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        }, {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            scriptPath?: string | null | undefined;
+            scriptDigest?: string | null | undefined;
+        }>, "many">>;
     }, "strict", z.ZodTypeAny, {
         version: 1;
         access_default: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
         allow_full_access: boolean;
         repo_root: string | null;
+        test_command_grants: {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            scriptPath: string | null;
+            scriptDigest: string | null;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        }[];
     }, {
         version?: 1 | undefined;
         access_default?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
         allow_full_access?: boolean | undefined;
         repo_root?: string | null | undefined;
+        test_command_grants?: {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            scriptPath?: string | null | undefined;
+            scriptDigest?: string | null | undefined;
+        }[] | undefined;
     }>;
     global: z.ZodObject<{
         version: z.ZodDefault<z.ZodLiteral<1>>;
-        default_portfolio: z.ZodDefault<z.ZodEnum<["daily-rich", "balanced", "cheapest", "strongest", "burn", "subscription-first", "api-overflow", "conserve-claude", "conserve-codex"]>>;
         /**
          * How long an interactive run waits for the user's answer to a harness
          * question (interaction.requested) before delivering a benign decline and
@@ -414,43 +799,89 @@ export declare const ResolvedConfig: z.ZodObject<{
             env_inheritance: z.ZodDefault<z.ZodEnum<["mirror_native", "clean"]>>;
             /** Default auth route preference (subscription/api_key/auto). */
             auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
-            /**
-             * Operator-tunable per-provider-family quality priors (0..1) feeding
-             * RouterCandidate.qualityForIntent. A DECLARED prior, not
-             * invented magic: unset families ride the router's neutral 0.5.
-             */
-            quality_priors: z.ZodDefault<z.ZodRecord<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>, z.ZodNumber>>;
+            goal: z.ZodDefault<z.ZodEnum<["auto", "quality", "economy"]>>;
+            paid_fallback: z.ZodDefault<z.ZodEnum<["never", "when_unavailable", "allowed_within_cap"]>>;
+            quality_tiers: z.ZodDefault<z.ZodRecord<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, z.ZodArray<z.ZodArray<z.ZodObject<{
+                harness: z.ZodString;
+                model: z.ZodString;
+                effort: z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>;
+            }, "strict", z.ZodTypeAny, {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }, {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }>, "many">, "many">>>;
         }, "strict", z.ZodTypeAny, {
             auth_preference: "auto" | "subscription" | "api_key";
             env_inheritance: "mirror_native" | "clean";
             primary_harness: string | null;
             eligible_harnesses: string[];
             default_policy: "auto" | "primary";
-            quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+            goal: "auto" | "quality" | "economy";
+            paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+            quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>>;
         }, {
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
             env_inheritance?: "mirror_native" | "clean" | undefined;
             primary_harness?: string | null | undefined;
             eligible_harnesses?: string[] | undefined;
             default_policy?: "auto" | "primary" | undefined;
-            quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+            goal?: "auto" | "quality" | "economy" | undefined;
+            paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+            quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>> | undefined;
         }>>;
         budget: z.ZodDefault<z.ZodObject<{
-            max_usd_per_run: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+            paid_budget_per_run: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+                kind: z.ZodLiteral<"unlimited">;
+            }, "strict", z.ZodTypeAny, {
+                kind: "unlimited";
+            }, {
+                kind: "unlimited";
+            }>, z.ZodObject<{
+                kind: z.ZodLiteral<"finite">;
+                maxUsd: z.ZodNumber;
+            }, "strict", z.ZodTypeAny, {
+                kind: "finite";
+                maxUsd: number;
+            }, {
+                kind: "finite";
+                maxUsd: number;
+            }>]>>;
             /**
              * Per-candidate reservation floor (USD) held against the run cap for
              * every race-wave slot AFTER the first, BEFORE any usage streams.
              * Makes concurrent in-flight candidates visible to the budget breaker
-             * so a parallel wave cannot blow past `max_usd_per_run` between
+             * so a parallel wave cannot blow past the finite paid budget between
              * settlements. The first slot never holds it: a cap smaller than the
              * floor still runs one candidate and stops on real usage.
              */
             estimate_usd_floor: z.ZodDefault<z.ZodNumber>;
         }, "strict", z.ZodTypeAny, {
-            max_usd_per_run: number | null;
+            paid_budget_per_run: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            };
             estimate_usd_floor: number;
         }, {
-            max_usd_per_run?: number | null | undefined;
+            paid_budget_per_run?: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            } | undefined;
             estimate_usd_floor?: number | undefined;
         }>>;
         runtime: z.ZodDefault<z.ZodObject<{
@@ -500,13 +931,122 @@ export declare const ResolvedConfig: z.ZodObject<{
             reviewer_timeout_ms?: number | undefined;
             harness_inactivity_timeout_ms?: number | undefined;
         }>>;
+        /**
+         * Disk retention for engine-owned runtime artifacts (W3.6). The daemon's
+         * retention service deletes ONLY terminal, unreferenced run trees past
+         * their age — active/queued/blocked runs, runs referenced by live
+         * threads, and undelivered/applyable work products always survive, and
+         * the newest N runs per project survive regardless of age.
+         */
+        retention: z.ZodDefault<z.ZodObject<{
+            runs_max_age_days: z.ZodDefault<z.ZodNumber>;
+            reviews_max_age_days: z.ZodDefault<z.ZodNumber>;
+            keep_last_runs_per_project: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            runs_max_age_days: number;
+            reviews_max_age_days: number;
+            keep_last_runs_per_project: number;
+        }, {
+            runs_max_age_days?: number | undefined;
+            reviews_max_age_days?: number | undefined;
+            keep_last_runs_per_project?: number | undefined;
+        }>>;
+        /**
+         * Durable NON-SECRET credential-profile registry (INV-135): additional
+         * credential identities per harness beyond the engine default. Uniqueness
+         * of (harness_id, profile_id) is enforced here; secret material lives in
+         * the vendor dir or the secret store, never in config.
+         */
+        credential_profiles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
+            profile_id: z.ZodString;
+            harness_id: z.ZodString;
+            display_name: z.ZodString;
+            credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+            isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>, "many">>, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }[], {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }[] | undefined>;
         harnesses: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             default_model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             effort: z.ZodDefault<z.ZodNullable<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>>>;
             max_turns: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
             max_rounds: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
-            max_usd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+            /**
+             * ONE typed profile-selection policy (INV-135, W5.4): what happens
+             * when the selected credential profile hits its vendor limit.
+             * Rotation is OPT-IN and rotates only on typed vendor-limit
+             * signals or proactive headroom breaches — never on ordinary
+             * network errors.
+             */
+            profile_policy: z.ZodDefault<z.ZodObject<{
+                limit_action: z.ZodDefault<z.ZodEnum<["fail", "ask", "rotate"]>>;
+                rotation_eligible: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                headroom_threshold: z.ZodDefault<z.ZodNumber>;
+            }, "strict", z.ZodTypeAny, {
+                limit_action: "ask" | "fail" | "rotate";
+                rotation_eligible: string[];
+                headroom_threshold: number;
+            }, {
+                limit_action?: "ask" | "fail" | "rotate" | undefined;
+                rotation_eligible?: string[] | undefined;
+                headroom_threshold?: number | undefined;
+            }>>;
             tools_allow: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
             tools_deny: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
             fallback_model: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -515,26 +1055,34 @@ export declare const ResolvedConfig: z.ZodObject<{
             auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
         }, "strict", z.ZodTypeAny, {
             fallback_model: string | null;
-            max_turns: number | null;
+            enabled: boolean;
             web: "off" | "auto" | "cached" | "live";
-            max_usd: number | null;
+            max_turns: number | null;
             auth_preference: "auto" | "subscription" | "api_key";
-            enabled: boolean;
-            default_model: string | null;
             effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+            default_model: string | null;
             max_rounds: number | null;
+            profile_policy: {
+                limit_action: "ask" | "fail" | "rotate";
+                rotation_eligible: string[];
+                headroom_threshold: number;
+            };
             tools_allow: string[];
             tools_deny: string[];
         }, {
             fallback_model?: string | null | undefined;
-            max_turns?: number | null | undefined;
+            enabled?: boolean | undefined;
             web?: "off" | "auto" | "cached" | "live" | undefined;
-            max_usd?: number | null | undefined;
+            max_turns?: number | null | undefined;
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
-            enabled?: boolean | undefined;
-            default_model?: string | null | undefined;
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+            default_model?: string | null | undefined;
             max_rounds?: number | null | undefined;
+            profile_policy?: {
+                limit_action?: "ask" | "fail" | "rotate" | undefined;
+                rotation_eligible?: string[] | undefined;
+                headroom_threshold?: number | undefined;
+            } | undefined;
             tools_allow?: string[] | undefined;
             tools_deny?: string[] | undefined;
         }>>>;
@@ -542,22 +1090,30 @@ export declare const ResolvedConfig: z.ZodObject<{
         version: 1;
         harnesses: Record<string, {
             fallback_model: string | null;
-            max_turns: number | null;
+            enabled: boolean;
             web: "off" | "auto" | "cached" | "live";
-            max_usd: number | null;
+            max_turns: number | null;
             auth_preference: "auto" | "subscription" | "api_key";
-            enabled: boolean;
-            default_model: string | null;
             effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+            default_model: string | null;
             max_rounds: number | null;
+            profile_policy: {
+                limit_action: "ask" | "fail" | "rotate";
+                rotation_eligible: string[];
+                headroom_threshold: number;
+            };
             tools_allow: string[];
             tools_deny: string[];
         }>;
         budget: {
-            max_usd_per_run: number | null;
+            paid_budget_per_run: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            };
             estimate_usd_floor: number;
         };
-        default_portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
         interaction_timeout_ms: number;
         routing: {
             auth_preference: "auto" | "subscription" | "api_key";
@@ -565,7 +1121,13 @@ export declare const ResolvedConfig: z.ZodObject<{
             primary_harness: string | null;
             eligible_harnesses: string[];
             default_policy: "auto" | "primary";
-            quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+            goal: "auto" | "quality" | "economy";
+            paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+            quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>>;
         };
         runtime: {
             transient_retry: {
@@ -576,26 +1138,49 @@ export declare const ResolvedConfig: z.ZodObject<{
             reviewer_timeout_ms: number;
             harness_inactivity_timeout_ms: number;
         };
+        retention: {
+            runs_max_age_days: number;
+            reviews_max_age_days: number;
+            keep_last_runs_per_project: number;
+        };
+        credential_profiles: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }[];
     }, {
         version?: 1 | undefined;
         harnesses?: Record<string, {
             fallback_model?: string | null | undefined;
-            max_turns?: number | null | undefined;
+            enabled?: boolean | undefined;
             web?: "off" | "auto" | "cached" | "live" | undefined;
-            max_usd?: number | null | undefined;
+            max_turns?: number | null | undefined;
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
-            enabled?: boolean | undefined;
-            default_model?: string | null | undefined;
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+            default_model?: string | null | undefined;
             max_rounds?: number | null | undefined;
+            profile_policy?: {
+                limit_action?: "ask" | "fail" | "rotate" | undefined;
+                rotation_eligible?: string[] | undefined;
+                headroom_threshold?: number | undefined;
+            } | undefined;
             tools_allow?: string[] | undefined;
             tools_deny?: string[] | undefined;
         }> | undefined;
         budget?: {
-            max_usd_per_run?: number | null | undefined;
+            paid_budget_per_run?: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            } | undefined;
             estimate_usd_floor?: number | undefined;
         } | undefined;
-        default_portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
         interaction_timeout_ms?: number | undefined;
         routing?: {
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
@@ -603,7 +1188,13 @@ export declare const ResolvedConfig: z.ZodObject<{
             primary_harness?: string | null | undefined;
             eligible_harnesses?: string[] | undefined;
             default_policy?: "auto" | "primary" | undefined;
-            quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+            goal?: "auto" | "quality" | "economy" | undefined;
+            paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+            quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>> | undefined;
         } | undefined;
         runtime?: {
             transient_retry?: {
@@ -614,49 +1205,87 @@ export declare const ResolvedConfig: z.ZodObject<{
             reviewer_timeout_ms?: number | undefined;
             harness_inactivity_timeout_ms?: number | undefined;
         } | undefined;
+        retention?: {
+            runs_max_age_days?: number | undefined;
+            reviews_max_age_days?: number | undefined;
+            keep_last_runs_per_project?: number | undefined;
+        } | undefined;
+        credential_profiles?: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }[] | undefined;
     }>;
     sources: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
     project: {
         version: 1;
+        tests: {
+            commands: {
+                program: string;
+                args: string[];
+                envAllowlist: string[];
+                cwd?: string | undefined;
+            }[];
+        };
+        budget: {
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
+        };
         context: {
             mandatory_files: string[];
             include: string[];
             exclude: string[];
         };
-        tests: {
-            commands: string[];
-        };
-        budget: {
-            portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
-        };
     };
     trust: {
         version: 1;
         access_default: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
         allow_full_access: boolean;
         repo_root: string | null;
+        test_command_grants: {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            scriptPath: string | null;
+            scriptDigest: string | null;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        }[];
     };
     global: {
         version: 1;
         harnesses: Record<string, {
             fallback_model: string | null;
-            max_turns: number | null;
+            enabled: boolean;
             web: "off" | "auto" | "cached" | "live";
-            max_usd: number | null;
+            max_turns: number | null;
             auth_preference: "auto" | "subscription" | "api_key";
-            enabled: boolean;
-            default_model: string | null;
             effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
+            default_model: string | null;
             max_rounds: number | null;
+            profile_policy: {
+                limit_action: "ask" | "fail" | "rotate";
+                rotation_eligible: string[];
+                headroom_threshold: number;
+            };
             tools_allow: string[];
             tools_deny: string[];
         }>;
         budget: {
-            max_usd_per_run: number | null;
+            paid_budget_per_run: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            };
             estimate_usd_floor: number;
         };
-        default_portfolio: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex";
         interaction_timeout_ms: number;
         routing: {
             auth_preference: "auto" | "subscription" | "api_key";
@@ -664,7 +1293,13 @@ export declare const ResolvedConfig: z.ZodObject<{
             primary_harness: string | null;
             eligible_harnesses: string[];
             default_policy: "auto" | "primary";
-            quality_priors: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>>;
+            goal: "auto" | "quality" | "economy";
+            paid_fallback: "never" | "when_unavailable" | "allowed_within_cap";
+            quality_tiers: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>>;
         };
         runtime: {
             transient_retry: {
@@ -675,49 +1310,87 @@ export declare const ResolvedConfig: z.ZodObject<{
             reviewer_timeout_ms: number;
             harness_inactivity_timeout_ms: number;
         };
+        retention: {
+            runs_max_age_days: number;
+            reviews_max_age_days: number;
+            keep_last_runs_per_project: number;
+        };
+        credential_profiles: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }[];
     };
     sources: string[];
 }, {
     project: {
         version?: 1 | undefined;
+        tests?: {
+            commands?: {
+                program: string;
+                cwd?: string | undefined;
+                args?: string[] | undefined;
+                envAllowlist?: string[] | undefined;
+            }[] | undefined;
+        } | undefined;
+        budget?: {
+            routing_goal?: "auto" | "quality" | "economy" | undefined;
+        } | undefined;
         context?: {
             mandatory_files?: string[] | undefined;
             include?: string[] | undefined;
             exclude?: string[] | undefined;
         } | undefined;
-        tests?: {
-            commands?: string[] | undefined;
-        } | undefined;
-        budget?: {
-            portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
-        } | undefined;
     };
     trust: {
         version?: 1 | undefined;
         access_default?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
         allow_full_access?: boolean | undefined;
         repo_root?: string | null | undefined;
+        test_command_grants?: {
+            projectDigest: string;
+            configDigest: string;
+            commandDigest: string;
+            executablePath: string;
+            executableDigest: string;
+            accessProfile: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+            scriptPath?: string | null | undefined;
+            scriptDigest?: string | null | undefined;
+        }[] | undefined;
     };
     global: {
         version?: 1 | undefined;
         harnesses?: Record<string, {
             fallback_model?: string | null | undefined;
-            max_turns?: number | null | undefined;
+            enabled?: boolean | undefined;
             web?: "off" | "auto" | "cached" | "live" | undefined;
-            max_usd?: number | null | undefined;
+            max_turns?: number | null | undefined;
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
-            enabled?: boolean | undefined;
-            default_model?: string | null | undefined;
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
+            default_model?: string | null | undefined;
             max_rounds?: number | null | undefined;
+            profile_policy?: {
+                limit_action?: "ask" | "fail" | "rotate" | undefined;
+                rotation_eligible?: string[] | undefined;
+                headroom_threshold?: number | undefined;
+            } | undefined;
             tools_allow?: string[] | undefined;
             tools_deny?: string[] | undefined;
         }> | undefined;
         budget?: {
-            max_usd_per_run?: number | null | undefined;
+            paid_budget_per_run?: {
+                kind: "unlimited";
+            } | {
+                kind: "finite";
+                maxUsd: number;
+            } | undefined;
             estimate_usd_floor?: number | undefined;
         } | undefined;
-        default_portfolio?: "daily-rich" | "balanced" | "cheapest" | "strongest" | "burn" | "subscription-first" | "api-overflow" | "conserve-claude" | "conserve-codex" | undefined;
         interaction_timeout_ms?: number | undefined;
         routing?: {
             auth_preference?: "auto" | "subscription" | "api_key" | undefined;
@@ -725,7 +1398,13 @@ export declare const ResolvedConfig: z.ZodObject<{
             primary_harness?: string | null | undefined;
             eligible_harnesses?: string[] | undefined;
             default_policy?: "auto" | "primary" | undefined;
-            quality_priors?: Partial<Record<"openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown", number>> | undefined;
+            goal?: "auto" | "quality" | "economy" | undefined;
+            paid_fallback?: "never" | "when_unavailable" | "allowed_within_cap" | undefined;
+            quality_tiers?: Partial<Record<"plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain", {
+                harness: string;
+                model: string;
+                effort: "low" | "medium" | "high" | "xhigh" | "max";
+            }[][]>> | undefined;
         } | undefined;
         runtime?: {
             transient_retry?: {
@@ -736,6 +1415,21 @@ export declare const ResolvedConfig: z.ZodObject<{
             reviewer_timeout_ms?: number | undefined;
             harness_inactivity_timeout_ms?: number | undefined;
         } | undefined;
+        retention?: {
+            runs_max_age_days?: number | undefined;
+            reviews_max_age_days?: number | undefined;
+            keep_last_runs_per_project?: number | undefined;
+        } | undefined;
+        credential_profiles?: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }[] | undefined;
     };
     sources?: string[] | undefined;
 }>;