@claudexor/schema 2.0.0 → 2.1.1

package/dist/harness.d.ts

@@ -89,7 +89,18 @@ export declare const HarnessCapabilities: z.ZodObject<{
      * model. Data-driven like `effort_levels` — no model id is hardcoded in
      * routing logic.
      */
-    known_models: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    known_models: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        /** Credential routes this model is available on. A bare string
+         * entry means ALL routes (backward shape). */
+        routes: z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        routes: ("api_key" | "local_session")[];
+    }, {
+        id: string;
+        routes: ("api_key" | "local_session")[];
+    }>]>, "many">>;
     /**
      * Vendor CLI version this `known_models` hint set was last verified against
      * (freshness note, surfaced with manifest-sourced model lists and checked by
@@ -113,7 +124,10 @@ export declare const HarnessCapabilities: z.ZodObject<{
     interactive: boolean;
     json_schema_output: boolean;
     effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-    known_models: string[];
+    known_models: (string | {
+        id: string;
+        routes: ("api_key" | "local_session")[];
+    })[];
     known_models_verified_against: string | null;
 }, {
     plan?: boolean | undefined;
@@ -132,10 +146,19 @@ export declare const HarnessCapabilities: z.ZodObject<{
     interactive?: boolean | undefined;
     json_schema_output?: boolean | undefined;
     effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-    known_models?: string[] | undefined;
+    known_models?: (string | {
+        id: string;
+        routes: ("api_key" | "local_session")[];
+    })[] | undefined;
     known_models_verified_against?: string | null | undefined;
 }>;
 export type HarnessCapabilities = z.infer<typeof HarnessCapabilities>;
+export type KnownModelEntry = HarnessCapabilities["known_models"][number];
+/** Model ids from a known_models list that are valid on `route`. ONE owner for
+ * the route filter (INV-122): a bare string entry is valid on every route;
+ * `route: null` (undecidable pre-spawn) returns only the route-UNRESTRICTED
+ * ids — fail-closed, a route-scoped model never leaks past an unknown route. */
+export declare function knownModelIdsForRoute(entries: readonly KnownModelEntry[], route: "local_session" | "api_key" | null): string[];
 export declare const CredentialTransportKind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
 export type CredentialTransportKind = z.infer<typeof CredentialTransportKind>;
 export declare const CredentialRelocation: z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>;
@@ -272,13 +295,13 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         max_count: z.ZodNumber;
         transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
     }, "strict", z.ZodTypeAny, {
-        kind: "image" | "file";
+        kind: "file" | "image";
         mime_types: string[];
         max_bytes: number;
         max_count: number;
         transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
     }, {
-        kind: "image" | "file";
+        kind: "file" | "image";
         mime_types: string[];
         max_bytes: number;
         max_count: number;
@@ -301,7 +324,7 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
     };
     attachment_inputs: {
-        kind: "image" | "file";
+        kind: "file" | "image";
         mime_types: string[];
         max_bytes: number;
         max_count: number;
@@ -324,7 +347,7 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
     } | undefined;
     attachment_inputs?: {
-        kind: "image" | "file";
+        kind: "file" | "image";
         mime_types: string[];
         max_bytes: number;
         max_count: number;
@@ -342,13 +365,18 @@ export declare const HarnessModel: z.ZodObject<{
     id: z.ZodString;
     label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     context_window: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    /** Credential routes the model is scoped to per the manifest annotation;
+     * null = unannotated (available on every route). */
+    routes: z.ZodDefault<z.ZodNullable<z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">>>;
 }, "strip", z.ZodTypeAny, {
     id: string;
     label: string | null;
+    routes: ("api_key" | "local_session")[] | null;
     context_window: number | null;
 }, {
     id: string;
     label?: string | null | undefined;
+    routes?: ("api_key" | "local_session")[] | null | undefined;
     context_window?: number | null | undefined;
 }>;
 export type HarnessModel = z.infer<typeof HarnessModel>;
@@ -415,13 +443,13 @@ export declare const HarnessManifest: z.ZodObject<{
             max_count: z.ZodNumber;
             transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
         }, "strict", z.ZodTypeAny, {
-            kind: "image" | "file";
+            kind: "file" | "image";
             mime_types: string[];
             max_bytes: number;
             max_count: number;
             transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
         }, {
-            kind: "image" | "file";
+            kind: "file" | "image";
             mime_types: string[];
             max_bytes: number;
             max_count: number;
@@ -444,7 +472,7 @@ export declare const HarnessManifest: z.ZodObject<{
             supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
         };
         attachment_inputs: {
-            kind: "image" | "file";
+            kind: "file" | "image";
             mime_types: string[];
             max_bytes: number;
             max_count: number;
@@ -467,7 +495,7 @@ export declare const HarnessManifest: z.ZodObject<{
             supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
         } | undefined;
         attachment_inputs?: {
-            kind: "image" | "file";
+            kind: "file" | "image";
             mime_types: string[];
             max_bytes: number;
             max_count: number;
@@ -530,7 +558,18 @@ export declare const HarnessManifest: z.ZodObject<{
          * model. Data-driven like `effort_levels` — no model id is hardcoded in
          * routing logic.
          */
-        known_models: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        known_models: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
+            id: z.ZodString;
+            /** Credential routes this model is available on. A bare string
+             * entry means ALL routes (backward shape). */
+            routes: z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        }, {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        }>]>, "many">>;
         /**
          * Vendor CLI version this `known_models` hint set was last verified against
          * (freshness note, surfaced with manifest-sourced model lists and checked by
@@ -554,7 +593,10 @@ export declare const HarnessManifest: z.ZodObject<{
         interactive: boolean;
         json_schema_output: boolean;
         effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-        known_models: string[];
+        known_models: (string | {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        })[];
         known_models_verified_against: string | null;
     }, {
         plan?: boolean | undefined;
@@ -573,15 +615,18 @@ export declare const HarnessManifest: z.ZodObject<{
         interactive?: boolean | undefined;
         json_schema_output?: boolean | undefined;
         effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-        known_models?: string[] | undefined;
+        known_models?: (string | {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        })[] | undefined;
         known_models_verified_against?: string | null | undefined;
     }>;
     auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
     access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
+    display_name: string;
     kind: "local_cli" | "remote_api" | "fake";
     id: string;
-    display_name: string;
     provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
     capability_profile: {
         auth: {
@@ -600,7 +645,7 @@ export declare const HarnessManifest: z.ZodObject<{
             supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
         };
         attachment_inputs: {
-            kind: "image" | "file";
+            kind: "file" | "image";
             mime_types: string[];
             max_bytes: number;
             max_count: number;
@@ -624,7 +669,10 @@ export declare const HarnessManifest: z.ZodObject<{
         interactive: boolean;
         json_schema_output: boolean;
         effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-        known_models: string[];
+        known_models: (string | {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        })[];
         known_models_verified_against: string | null;
     };
     auth_modes: ("api_key" | "none" | "local_session")[];
@@ -632,9 +680,9 @@ export declare const HarnessManifest: z.ZodObject<{
     version?: string | undefined;
     adapter_version?: string | undefined;
 }, {
+    display_name: string;
     kind: "local_cli" | "remote_api" | "fake";
     id: string;
-    display_name: string;
     capabilities: {
         plan?: boolean | undefined;
         orchestrate?: boolean | undefined;
@@ -652,7 +700,10 @@ export declare const HarnessManifest: z.ZodObject<{
         interactive?: boolean | undefined;
         json_schema_output?: boolean | undefined;
         effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-        known_models?: string[] | undefined;
+        known_models?: (string | {
+            id: string;
+            routes: ("api_key" | "local_session")[];
+        })[] | undefined;
         known_models_verified_against?: string | null | undefined;
     };
     version?: string | undefined;
@@ -675,7 +726,7 @@ export declare const HarnessManifest: z.ZodObject<{
             supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
         } | undefined;
         attachment_inputs?: {
-            kind: "image" | "file";
+            kind: "file" | "image";
             mime_types: string[];
             max_bytes: number;
             max_count: number;
@@ -798,6 +849,14 @@ export declare const HarnessRunSpec: z.ZodObject<{
     session_id: z.ZodString;
     intent: z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>;
     prompt: z.ZodString;
+    /**
+     * Optional caller-supplied system-level instructions layered on top of the
+     * prompt for TASK-PRODUCING lanes (primary, candidate, planner, explorer,
+     * orchestrate-planner) — never reviewers, synthesis, or the auth smoke.
+     * Adapters deliver it natively (claude `--append-system-prompt`, codex
+     * `developer_instructions`) or as a delimited prompt prefix.
+     */
+    instructions: z.ZodOptional<z.ZodString>;
     cwd: z.ZodString;
     access: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
     external_context_policy: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
@@ -822,6 +881,60 @@ export declare const HarnessRunSpec: z.ZodObject<{
      * api_key fallback; adapters seed native session vs inject the key accordingly.
      */
     auth_preference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+    /**
+     * The RESOLVED credential profile for this attempt (INV-135), stamped by
+     * the orchestrator (the one resolve owner) from the durable registry —
+     * adapters consume the typed transport and never read config. Null = the
+     * engine-default credential ladder. An explicit profile is STRICT: the
+     * adapter uses exactly its transport or refuses with a typed error, never
+     * a silent fallback to default credentials.
+     */
+    credential_profile: z.ZodDefault<z.ZodNullable<z.ZodEffects<z.ZodObject<{
+        profile_id: z.ZodString;
+        harness_id: z.ZodString;
+        display_name: z.ZodString;
+        credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+        isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>>>;
     /**
      * Native CLI session id to resume into (codex `exec resume`, claude `--resume`,
      * cursor `agent --resume`, opencode `run --session`). Null starts a fresh session.
@@ -834,6 +947,14 @@ export declare const HarnessRunSpec: z.ZodObject<{
      */
     env_inheritance: z.ZodDefault<z.ZodEnum<["mirror_native", "clean"]>>;
     evidence_policy: z.ZodDefault<z.ZodEnum<["stream_only", "allow_vendor_session_artifacts"]>>;
+    /**
+     * Opt-in live text deltas (F2.5 W-C4): adapters that support partial
+     * output add their native flag (claude --include-partial-messages,
+     * cursor --stream-partial-output; codex exec has no deltas). Set ONLY on
+     * single-candidate chat lanes — racing lanes stay delta-free (noise × N).
+     * Delta messages carry payload.delta=true and never enter answers.
+     */
+    stream_deltas: z.ZodDefault<z.ZodBoolean>;
     env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
     /**
      * Immutable user/agent resources forwarded only after the selected adapter's
@@ -849,18 +970,18 @@ export declare const HarnessRunSpec: z.ZodObject<{
         path: z.ZodString;
     }, "strict", z.ZodTypeAny, {
         path: string;
+        name: string;
+        kind: "file" | "image";
         resource_id: string;
-        kind: "image" | "file";
         mime: string;
-        name: string;
         sha256: string;
         size_bytes: number;
     }, {
         path: string;
+        name: string;
+        kind: "file" | "image";
         resource_id: string;
-        kind: "image" | "file";
         mime: string;
-        name: string;
         sha256: string;
         size_bytes: number;
     }>, "many">>;
@@ -1022,16 +1143,27 @@ export declare const HarnessRunSpec: z.ZodObject<{
     model_hint: string | null;
     effort_hint: "low" | "medium" | "high" | "xhigh" | "max" | null;
     auth_preference: "auto" | "subscription" | "api_key";
+    credential_profile: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    } | null;
     resume_session_id: string | null;
     env_inheritance: "mirror_native" | "clean";
     evidence_policy: "stream_only" | "allow_vendor_session_artifacts";
+    stream_deltas: boolean;
     env: Record<string, string>;
     attachments: {
         path: string;
+        name: string;
+        kind: "file" | "image";
         resource_id: string;
-        kind: "image" | "file";
         mime: string;
-        name: string;
         sha256: string;
         size_bytes: number;
     }[];
@@ -1040,6 +1172,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
         headless: boolean;
     } | null;
     extra: Record<string, unknown>;
+    instructions?: string | undefined;
     output_schema?: unknown;
     raw_context_packet?: {
         schema_version: 1;
@@ -1075,6 +1208,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
     intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
     prompt: string;
     cwd: string;
+    instructions?: string | undefined;
     max_turns?: number | null | undefined;
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     external_context_policy?: "off" | "auto" | "cached" | "live" | undefined;
@@ -1086,16 +1220,27 @@ export declare const HarnessRunSpec: z.ZodObject<{
     model_hint?: string | null | undefined;
     effort_hint?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
     auth_preference?: "auto" | "subscription" | "api_key" | undefined;
+    credential_profile?: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    } | null | undefined;
     resume_session_id?: string | null | undefined;
     env_inheritance?: "mirror_native" | "clean" | undefined;
     evidence_policy?: "stream_only" | "allow_vendor_session_artifacts" | undefined;
+    stream_deltas?: boolean | undefined;
     env?: Record<string, string> | undefined;
     attachments?: {
         path: string;
+        name: string;
+        kind: "file" | "image";
         resource_id: string;
-        kind: "image" | "file";
         mime: string;
-        name: string;
         sha256: string;
         size_bytes: number;
     }[] | undefined;
@@ -1136,49 +1281,6 @@ export declare const HarnessRunSpec: z.ZodObject<{
     extra?: Record<string, unknown> | undefined;
 }>;
 export type HarnessRunSpec = z.infer<typeof HarnessRunSpec>;
-/**
- * Coarse tool classification used for typed governance (no tool-name string
- * matching outside adapters). Adapters map native tool names to a kind.
- */
-export declare const ToolKind: z.ZodEnum<["web", "file", "command", "mcp", "search", "other"]>;
-export type ToolKind = z.infer<typeof ToolKind>;
-/**
- * Typed tool reference attached to `tool_call` / `tool_result` events.
- * `status` is REQUIRED on `tool_result` events (adapter conformance enforces it);
- * a missing status on a result is treated as a dropped/diagnostic event, never as ok.
- */
-export declare const ToolRef: z.ZodObject<{
-    name: z.ZodString;
-    kind: z.ZodDefault<z.ZodEnum<["web", "file", "command", "mcp", "search", "other"]>>;
-    use_id: z.ZodOptional<z.ZodString>;
-    /** Redacted, bounded human-readable target (query/url/path/command). */
-    target: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<["ok", "error", "cancelled", "denied"]>>;
-    /** Redacted, bounded error detail for status=error results. */
-    error_summary: z.ZodOptional<z.ZodString>;
-    /** Redacted, bounded content detail for results (success or failure). */
-    content_summary: z.ZodOptional<z.ZodString>;
-    exit_code: z.ZodOptional<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    kind: "file" | "web" | "command" | "mcp" | "search" | "other";
-    name: string;
-    status?: "cancelled" | "ok" | "error" | "denied" | undefined;
-    use_id?: string | undefined;
-    target?: string | undefined;
-    error_summary?: string | undefined;
-    content_summary?: string | undefined;
-    exit_code?: number | undefined;
-}, {
-    name: string;
-    status?: "cancelled" | "ok" | "error" | "denied" | undefined;
-    kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
-    use_id?: string | undefined;
-    target?: string | undefined;
-    error_summary?: string | undefined;
-    content_summary?: string | undefined;
-    exit_code?: number | undefined;
-}>;
-export type ToolRef = z.infer<typeof ToolRef>;
 /**
  * One multiple-choice option of an interactive question (AskUserQuestion-style).
  */
@@ -1348,26 +1450,30 @@ export declare const InteractionAnswerSet: z.ZodObject<{
 export type InteractionAnswerSet = z.infer<typeof InteractionAnswerSet>;
 /** Normalized event emitted by every adapter (the SSOT of adapter output). */
 export declare const HarnessEvent: z.ZodObject<{
-    type: z.ZodEnum<["started", "thinking", "message", "tool_call", "tool_result", "interaction_requested", "file_change", "patch_produced", "usage", "error", "completed"]>;
+    type: z.ZodEnum<["started", "thinking", "message", "tool_call", "tool_result", "interaction_requested", "file_change", "patch_produced", "usage", "error", "status", "completed"]>;
     session_id: z.ZodString;
     ts: z.ZodString;
     text: z.ZodOptional<z.ZodString>;
+    /**
+     * True on the harness's TYPED final answer message — claude/cursor's
+     * terminal `result` event, codex's last agent message finalized at
+     * `turn.completed`. Narration (mid-run) messages never set it; consumers
+     * take a final message VERBATIM as the answer instead of joining prose.
+     */
+    final: z.ZodOptional<z.ZodBoolean>;
     /** Typed tool info; set on `tool_call` and `tool_result` events. */
     tool: z.ZodOptional<z.ZodObject<{
         name: z.ZodString;
         kind: z.ZodDefault<z.ZodEnum<["web", "file", "command", "mcp", "search", "other"]>>;
         use_id: z.ZodOptional<z.ZodString>;
-        /** Redacted, bounded human-readable target (query/url/path/command). */
         target: z.ZodOptional<z.ZodString>;
         status: z.ZodOptional<z.ZodEnum<["ok", "error", "cancelled", "denied"]>>;
-        /** Redacted, bounded error detail for status=error results. */
         error_summary: z.ZodOptional<z.ZodString>;
-        /** Redacted, bounded content detail for results (success or failure). */
         content_summary: z.ZodOptional<z.ZodString>;
         exit_code: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        kind: "file" | "web" | "command" | "mcp" | "search" | "other";
         name: string;
+        kind: "web" | "file" | "command" | "mcp" | "search" | "other";
         status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
@@ -1377,7 +1483,7 @@ export declare const HarnessEvent: z.ZodObject<{
     }, {
         name: string;
         status?: "cancelled" | "ok" | "error" | "denied" | undefined;
-        kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
+        kind?: "web" | "file" | "command" | "mcp" | "search" | "other" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
         error_summary?: string | undefined;
@@ -1512,9 +1618,13 @@ export declare const HarnessEvent: z.ZodObject<{
     observed_model: z.ZodOptional<z.ZodString>;
     credential_route: z.ZodOptional<z.ZodEnum<["vendor_native", "managed_api_key", "local"]>>;
     credential_source: z.ZodOptional<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>;
+    /** Credential profile the attempt runs under (INV-135); stamped by the
+     * adapter alongside credential_route so quota/api_retry records stay
+     * independently attributable to the profile. Absent = engine default. */
+    credential_profile_id: z.ZodOptional<z.ZodString>;
     /** Vendor-owned quota windows. All reported windows remain independent. */
     quota: z.ZodOptional<z.ZodObject<{
-        source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry"]>;
+        source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage"]>;
         plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         constraints: z.ZodArray<z.ZodObject<{
@@ -1540,7 +1650,7 @@ export declare const HarnessEvent: z.ZodObject<{
             cooldown_until?: string | null | undefined;
         }>, "many">;
     }, "strict", z.ZodTypeAny, {
-        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry";
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry" | "claude_oauth_usage";
         plan_label: string | null;
         subject_id: string | null;
         constraints: {
@@ -1552,7 +1662,7 @@ export declare const HarnessEvent: z.ZodObject<{
             cooldown_until: string | null;
         }[];
     }, {
-        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry";
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry" | "claude_oauth_usage";
         constraints: {
             id: string;
             label: string;
@@ -1614,6 +1724,33 @@ export declare const HarnessEvent: z.ZodObject<{
         resets_at?: string | null | undefined;
         retry_delay_ms?: number | null | undefined;
     }>>;
+    /**
+     * Typed transient-status detail; set on `status` events. Today's only kind
+     * is claude's native `api_retry` (the CLI is retrying an API call by
+     * itself): the adapter maps the official fields through instead of
+     * fabricating a thinking block, so retries land in the activity feed —
+     * never in the reasoning disclosure. `error_category` passes the vendor's
+     * own label (e.g. rate_limit, overloaded) verbatim as disclosed evidence.
+     */
+    status: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<["api_retry"]>;
+        attempt: z.ZodOptional<z.ZodNumber>;
+        max_retries: z.ZodOptional<z.ZodNumber>;
+        retry_delay_ms: z.ZodOptional<z.ZodNumber>;
+        error_category: z.ZodOptional<z.ZodEnum<["authentication_failed", "oauth_org_not_allowed", "billing_error", "rate_limit", "overloaded", "invalid_request", "model_not_found", "server_error", "max_output_tokens", "unknown"]>>;
+    }, "strip", z.ZodTypeAny, {
+        kind: "api_retry";
+        retry_delay_ms?: number | undefined;
+        attempt?: number | undefined;
+        max_retries?: number | undefined;
+        error_category?: "unknown" | "rate_limit" | "authentication_failed" | "oauth_org_not_allowed" | "billing_error" | "overloaded" | "invalid_request" | "model_not_found" | "server_error" | "max_output_tokens" | undefined;
+    }, {
+        kind: "api_retry";
+        retry_delay_ms?: number | undefined;
+        attempt?: number | undefined;
+        max_retries?: number | undefined;
+        error_category?: "unknown" | "rate_limit" | "authentication_failed" | "oauth_org_not_allowed" | "billing_error" | "overloaded" | "invalid_request" | "model_not_found" | "server_error" | "max_output_tokens" | undefined;
+    }>>;
     /**
      * Typed transient-failure signal. Adapters set this from native CLI/API error
      * shapes in their parse layer; the orchestrator consumes it for bounded retry
@@ -1633,12 +1770,19 @@ export declare const HarnessEvent: z.ZodObject<{
     aborted: z.ZodOptional<z.ZodBoolean>;
     payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
-    type: "message" | "completed" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "patch_produced" | "usage";
+    type: "message" | "status" | "completed" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "patch_produced" | "usage";
     session_id: string;
     ts: string;
     aborted?: boolean | undefined;
-    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
+    status?: {
+        kind: "api_retry";
+        retry_delay_ms?: number | undefined;
+        attempt?: number | undefined;
+        max_retries?: number | undefined;
+        error_category?: "unknown" | "rate_limit" | "authentication_failed" | "oauth_org_not_allowed" | "billing_error" | "overloaded" | "invalid_request" | "model_not_found" | "server_error" | "max_output_tokens" | undefined;
+    } | undefined;
     error?: string | undefined;
+    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
     usage?: {
         estimated?: boolean | undefined;
         input_tokens?: number | undefined;
@@ -1647,9 +1791,10 @@ export declare const HarnessEvent: z.ZodObject<{
         cost_usd?: number | undefined;
     } | undefined;
     text?: string | undefined;
+    final?: boolean | undefined;
     tool?: {
-        kind: "file" | "web" | "command" | "mcp" | "search" | "other";
         name: string;
+        kind: "web" | "file" | "command" | "mcp" | "search" | "other";
         status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
@@ -1685,8 +1830,9 @@ export declare const HarnessEvent: z.ZodObject<{
     refusal_code?: "raw_patch_requires_isolation" | "raw_patch_missing_evidence" | "raw_patch_digest_mismatch" | "raw_patch_base_mismatch" | "raw_patch_path_traversal" | "raw_patch_outside_scope" | "raw_patch_stale_preimage" | "raw_patch_binary_unsupported" | "raw_patch_sensitive_content" | "raw_patch_truncated" | "raw_patch_apply_failed" | undefined;
     observed_model?: string | undefined;
     credential_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | undefined;
+    credential_profile_id?: string | undefined;
     quota?: {
-        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry";
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry" | "claude_oauth_usage";
         plan_label: string | null;
         subject_id: string | null;
         constraints: {
@@ -1715,12 +1861,19 @@ export declare const HarnessEvent: z.ZodObject<{
     } | undefined;
     payload?: Record<string, unknown> | undefined;
 }, {
-    type: "message" | "completed" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "patch_produced" | "usage";
+    type: "message" | "status" | "completed" | "error" | "started" | "thinking" | "tool_call" | "tool_result" | "interaction_requested" | "file_change" | "patch_produced" | "usage";
     session_id: string;
     ts: string;
     aborted?: boolean | undefined;
-    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
+    status?: {
+        kind: "api_retry";
+        retry_delay_ms?: number | undefined;
+        attempt?: number | undefined;
+        max_retries?: number | undefined;
+        error_category?: "unknown" | "rate_limit" | "authentication_failed" | "oauth_org_not_allowed" | "billing_error" | "overloaded" | "invalid_request" | "model_not_found" | "server_error" | "max_output_tokens" | undefined;
+    } | undefined;
     error?: string | undefined;
+    credential_route?: "local" | "vendor_native" | "managed_api_key" | undefined;
     usage?: {
         estimated?: boolean | undefined;
         input_tokens?: number | undefined;
@@ -1729,10 +1882,11 @@ export declare const HarnessEvent: z.ZodObject<{
         cost_usd?: number | undefined;
     } | undefined;
     text?: string | undefined;
+    final?: boolean | undefined;
     tool?: {
         name: string;
         status?: "cancelled" | "ok" | "error" | "denied" | undefined;
-        kind?: "file" | "web" | "command" | "mcp" | "search" | "other" | undefined;
+        kind?: "web" | "file" | "command" | "mcp" | "search" | "other" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
         error_summary?: string | undefined;
@@ -1767,8 +1921,9 @@ export declare const HarnessEvent: z.ZodObject<{
     refusal_code?: "raw_patch_requires_isolation" | "raw_patch_missing_evidence" | "raw_patch_digest_mismatch" | "raw_patch_base_mismatch" | "raw_patch_path_traversal" | "raw_patch_outside_scope" | "raw_patch_stale_preimage" | "raw_patch_binary_unsupported" | "raw_patch_sensitive_content" | "raw_patch_truncated" | "raw_patch_apply_failed" | undefined;
     observed_model?: string | undefined;
     credential_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | undefined;
+    credential_profile_id?: string | undefined;
     quota?: {
-        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry";
+        source: "codex_app_server" | "codex_rollout" | "claude_statusline" | "claude_api_retry" | "claude_oauth_usage";
         constraints: {
             id: string;
             label: string;