@claudexor/schema 2.1.2 → 3.0.0

package/dist/events.js

@@ -51,17 +51,35 @@ export const RunEventType = z
     "route.transient.retry_scheduled",
     "route.profile.headroom_exceeded",
     "route.profile.rotated",
+    "route.profile.rotation_exhausted",
     "route.transient.exhausted",
     /** A subscription->API (or harness->harness) auth switch driven by a typed
      * quota/money signal. Distinct from a plain harness rotation; never silent. */
     "route.fallback.auth_switched",
-    /** A thread re-hosted onto a different harness; payload is SessionReboundLineage. */
-    "session.rebound",
+    /** The requested/sticky PRIMARY harness was dropped BEFORE any attempt (its
+     * account was quota-exhausted / on cooldown, or the route was unavailable),
+     * so the run's effective harness differs from what the composer chip showed.
+     * A pre-attempt routing divergence — distinct from a mid-run route.fallback.*
+     * (no attempt was ever made on the primary to fall back FROM); never silent.
+     * Payload: RoutePrimaryDivergedPayload {requested, effective, reason, detail}. */
+    "route.primary.diverged",
+    /** A thread turn was continued across the conversation (INV-137); payload
+     * carries the ContinuityDisclosure stats (kind, packet_turns, summarized,
+     * lane_switched_from). Replaces the old static session.rebound phrase. */
+    "session.continuity",
     "interaction.requested",
     "interaction.answered",
     "interaction.timeout",
     "interaction.answer_discarded",
     "plan.progress",
+    "plan.questions",
+    "plan.brief.materialized",
+    /** Council plan strategy (INV-031): membership announced, per-member draft
+     * landed / failed, and the primary's merge completed. */
+    "council.started",
+    "council.draft",
+    "council.member.failed",
+    "council.merged",
     "budget.quota_pressure",
     "output.ready",
     "gate.started",
@@ -80,14 +98,6 @@ export const RunEventType = z
     /** A race/agent winner's patch was auto-applied to the live in-place tree
      * (or the apply was attempted and failed). Payload: {applied, patch_sha256, detail}. */
     "work_product.adopted",
-    /** Orchestrate executor (auto_safe/auto_full): a SAFE plan step spawned an
-     * isolated envelope sub-run. Payload: {tool, mode, n}. */
-    "orchestrate.subrun.started",
-    /** Orchestrate executor: a plan step completed. Payload: {index, tool, status/ok, run_id}. */
-    "orchestrate.step.done",
-    /** Orchestrate executor: a RISKY plan step (apply) was blocked under auto_safe
-     * (not executed; awaiting a human decision). Payload: {index, tool, autonomy}. */
-    "orchestrate.step.blocked",
     "control.requested",
     "control.applied",
     "control.rejected",
@@ -95,7 +105,7 @@ export const RunEventType = z
     "run.completed",
     "run.failed",
 ])
-    .describe("Type of an append-only run event, covering run lifecycle, contract/context creation, budget, routing fallbacks, harness activity, interactions, gates, review, arbitration, work products, orchestrate steps, and control verbs.");
+    .describe("Type of an append-only run event, covering run lifecycle, contract/context creation, budget, routing fallbacks, harness activity, interactions, gates, review, arbitration, work products, and control verbs.");
 /**
  * Typed payload for `route.fallback.*` events. The orchestrator validates this
  * before stamping it onto the (otherwise free-form) RunEvent.payload, so a
@@ -121,6 +131,31 @@ export const RouteFallbackPayload = z
         .describe("Redacted error detail that triggered the fallback."),
 })
     .describe("Typed payload for route.fallback.* events, validated before being stamped onto the RunEvent payload so a fallback/auth-switch is always evidence-backed.");
+/**
+ * Typed payload for the `route.primary.diverged` event. Emitted at route
+ * selection when a run's requested/sticky PRIMARY harness is not the harness
+ * that will actually run (its account was quota-exhausted / on cooldown, or the
+ * route was unavailable), so the composer's visible harness choice silently
+ * would not have applied. The orchestrator validates this before stamping it, so
+ * the divergence is always evidence-backed — the receipt discloses "requested
+ * <requested> → ran on <effective> (<reason>)" from real facts, never invented.
+ */
+export const RoutePrimaryDivergedPayload = z
+    .object({
+    requested: z.string().min(1).describe("The requested/sticky primary harness the chip showed."),
+    effective: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("The harness that actually ran first, or null when nothing remained routable."),
+    reason: FallbackReason.default("quota_exhausted"),
+    detail: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Redacted human reason the primary was dropped (e.g. cooldown, unavailable)."),
+})
+    .describe("Typed payload for route.primary.diverged, validated before being stamped onto the RunEvent payload so a pre-attempt primary divergence is always evidence-backed.");
 /** Append-only event record (one JSONL line). */
 export const RunEvent = z
     .object({

package/dist/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,+DAA+D,CAAC,CAAC;AAG7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;IACrF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,8EAA8E,CAAC;CAC5F,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,sFAAsF;IACpF,0FAA0F;IAC1F,2FAA2F;IAC3F,qEAAqE,CACxE,CAAC;AAGJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,IAAI,CAAC;IACJ,aAAa;IACb,uBAAuB;IACvB,sBAAsB;IACtB,yBAAyB;IACzB,sBAAsB;IACtB,oBAAoB;IACpB,aAAa;IACb,qBAAqB;IACrB,iBAAiB;IACjB,eAAe;IACf,mBAAmB;IACnB,wBAAwB;IACxB,0BAA0B;IAC1B,0BAA0B;IAC1B,0BAA0B;IAC1B,iCAAiC;IACjC,iCAAiC;IACjC,uBAAuB;IACvB,2BAA2B;IAC3B;mFAC+E;IAC/E,8BAA8B;IAC9B,qFAAqF;IACrF,iBAAiB;IACjB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,8BAA8B;IAC9B,eAAe;IACf,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,oBAAoB;IACpB,oBAAoB;IACpB,iBAAiB;IACjB,qBAAqB;IACrB,mBAAmB;IACnB,uBAAuB;IACvB,sBAAsB;IACtB;4FACwF;IACxF,sBAAsB;IACtB;8DAC0D;IAC1D,4BAA4B;IAC5B,8FAA8F;IAC9F,uBAAuB;IACvB;sFACkF;IAClF,0BAA0B;IAC1B,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,YAAY;CACb,CAAC;KACD,QAAQ,CACP,kOAAkO,CACnO,CAAC;AAGJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC/F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3F,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACpF,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACjF,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxC,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,oDAAoD,CAAC;CAClE,CAAC;KACD,QAAQ,CACP,0JAA0J,CAC3J,CAAC;AAGJ,iDAAiD;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN;;;;OAIG;IACH,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,qIAAqI,CACtI;IACH,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC3C,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAChD,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAChD;6EACyE;IACzE,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC5E,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAChG,CAAC;KACD,QAAQ,CAAC,uEAAuE,CAAC,CAAC"}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,+DAA+D,CAAC,CAAC;AAG7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;IACrF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,8EAA8E,CAAC;CAC5F,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,sFAAsF;IACpF,0FAA0F;IAC1F,2FAA2F;IAC3F,qEAAqE,CACxE,CAAC;AAGJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,IAAI,CAAC;IACJ,aAAa;IACb,uBAAuB;IACvB,sBAAsB;IACtB,yBAAyB;IACzB,sBAAsB;IACtB,oBAAoB;IACpB,aAAa;IACb,qBAAqB;IACrB,iBAAiB;IACjB,eAAe;IACf,mBAAmB;IACnB,wBAAwB;IACxB,0BAA0B;IAC1B,0BAA0B;IAC1B,0BAA0B;IAC1B,iCAAiC;IACjC,iCAAiC;IACjC,uBAAuB;IACvB,kCAAkC;IAClC,2BAA2B;IAC3B;mFAC+E;IAC/E,8BAA8B;IAC9B;;;;;sFAKkF;IAClF,wBAAwB;IACxB;;8EAE0E;IAC1E,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,8BAA8B;IAC9B,eAAe;IACf,gBAAgB;IAChB,yBAAyB;IACzB;6DACyD;IACzD,iBAAiB;IACjB,eAAe;IACf,uBAAuB;IACvB,gBAAgB;IAChB,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,oBAAoB;IACpB,oBAAoB;IACpB,iBAAiB;IACjB,qBAAqB;IACrB,mBAAmB;IACnB,uBAAuB;IACvB,sBAAsB;IACtB;4FACwF;IACxF,sBAAsB;IACtB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,YAAY;CACb,CAAC;KACD,QAAQ,CACP,+MAA+M,CAChN,CAAC;AAGJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC/F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3F,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACpF,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACjF,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxC,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,oDAAoD,CAAC;CAClE,CAAC;KACD,QAAQ,CACP,0JAA0J,CAC3J,CAAC;AAGJ;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC9F,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACjD,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,6EAA6E,CAAC;CAC3F,CAAC;KACD,QAAQ,CACP,mKAAmK,CACpK,CAAC;AAGJ,iDAAiD;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN;;;;OAIG;IACH,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,qIAAqI,CACtI;IACH,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC3C,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAChD,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAChD;6EACyE;IACzE,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC5E,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAChG,CAAC;KACD,QAAQ,CAAC,uEAAuE,CAAC,CAAC"}

package/dist/gate.d.ts

@@ -1,19 +1,19 @@
 import { z } from "zod";
-export declare const GateStatus: z.ZodEnum<["passed", "failed", "skipped", "timed_out"]>;
+export declare const GateStatus: z.ZodEnum<["passed", "failed", "timed_out"]>;
 export type GateStatus = z.infer<typeof GateStatus>;
 /** Result of a deterministic gate (build/test/lint/etc). Decided by exit code, not text. */
 export declare const GateResult: z.ZodObject<{
     id: z.ZodString;
     command: z.ZodString;
     exit_code: z.ZodNullable<z.ZodNumber>;
-    status: z.ZodEnum<["passed", "failed", "skipped", "timed_out"]>;
+    status: z.ZodEnum<["passed", "failed", "timed_out"]>;
     duration_ms: z.ZodDefault<z.ZodNumber>;
     required: z.ZodDefault<z.ZodBoolean>;
     stdout_tail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     stderr_tail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     output_truncated: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    status: "passed" | "failed" | "skipped" | "timed_out";
+    status: "passed" | "failed" | "timed_out";
     command: string;
     exit_code: number | null;
     id: string;
@@ -23,7 +23,7 @@ export declare const GateResult: z.ZodObject<{
     stderr_tail: string | null;
     output_truncated: boolean;
 }, {
-    status: "passed" | "failed" | "skipped" | "timed_out";
+    status: "passed" | "failed" | "timed_out";
     command: string;
     exit_code: number | null;
     id: string;

package/dist/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,UAAU,yDAE+D,CAAC;AACvF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,4FAA4F;AAC5F,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCpB,CAAC;AACJ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,UAAU,8CAEsD,CAAC;AAC9E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,4FAA4F;AAC5F,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCpB,CAAC;AACJ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC"}

package/dist/gate.js

@@ -1,8 +1,8 @@
 import { z } from "zod";
 import { Id } from "./primitives.js";
 export const GateStatus = z
-    .enum(["passed", "failed", "skipped", "timed_out"])
-    .describe("Outcome of a deterministic gate: passed, failed, skipped, or timed_out.");
+    .enum(["passed", "failed", "timed_out"])
+    .describe("Outcome of a deterministic gate: passed, failed, or timed_out.");
 /** Result of a deterministic gate (build/test/lint/etc). Decided by exit code, not text. */
 export const GateResult = z
     .object({

package/dist/gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAErC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;KAClD,QAAQ,CAAC,yEAAyE,CAAC,CAAC;AAGvF,4FAA4F;AAC5F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACrD,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,MAAM,EAAE,UAAU;IAClB,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,0CAA0C,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACzF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,gBAAgB,EAAE,CAAC;SAChB,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,QAAQ,CACP,uFAAuF,CACxF,CAAC"}
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAErC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;KACvC,QAAQ,CAAC,gEAAgE,CAAC,CAAC;AAG9E,4FAA4F;AAC5F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACrD,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,MAAM,EAAE,UAAU;IAClB,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,0CAA0C,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACzF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,gBAAgB,EAAE,CAAC;SAChB,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,QAAQ,CACP,uFAAuF,CACxF,CAAC"}

package/dist/harness.d.ts

@@ -61,12 +61,6 @@ export declare const HarnessCapabilities: z.ZodObject<{
      * bidirectional stream-json control protocol today; honest false elsewhere.
      */
     interactive: z.ZodDefault<z.ZodBoolean>;
-    /**
-     * The harness can play the autonomous `orchestrate` planner intent: plan
-     * multi-harness work over the typed tool belt. NOT a privileged role — routed
-     * like reviewers via doctor + capability + quota headroom.
-     */
-    orchestrate: z.ZodDefault<z.ZodBoolean>;
     /**
      * The harness can constrain its FINAL message to a caller-supplied JSON
      * Schema (codex `--output-schema <file>`, claude `--json-schema <json>`).
@@ -109,7 +103,6 @@ export declare const HarnessCapabilities: z.ZodObject<{
     known_models_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     plan: boolean;
-    orchestrate: boolean;
     implement: boolean;
     create_from_scratch: boolean;
     review: boolean;
@@ -131,7 +124,6 @@ export declare const HarnessCapabilities: z.ZodObject<{
     known_models_verified_against: string | null;
 }, {
     plan?: boolean | undefined;
-    orchestrate?: boolean | undefined;
     implement?: boolean | undefined;
     create_from_scratch?: boolean | undefined;
     review?: boolean | undefined;
@@ -307,6 +299,24 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         max_count: number;
         transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
     }>, "many">>;
+    /**
+     * The adapter can inject engine-owned MCP servers into the harness sandbox
+     * (the generalized browser-MCP seam): claude via `--mcp-config` inline JSON,
+     * codex via `-c mcp_servers.<name>.*` overrides. Consumers: the browser-tool
+     * wiring and the delegation belt. When false, `HarnessRunSpec.extra_mcp_servers`
+     * is refused at preflight (never silently dropped) and the Agent `delegate`
+     * toggle is a typed refusal naming the harness.
+     */
+    mcp_injection: z.ZodDefault<z.ZodBoolean>;
+    /**
+     * The injected belt can only reach the daemon (socket + control API, OUTSIDE
+     * the run sandbox) at FULL access. Codex's workspace-write seatbelt cancels
+     * that escalation-requiring MCP call in headless exec; only danger-full-access
+     * lets it through — the browser MCP already rides this. Claude does not
+     * sandbox its MCP servers (false). true => a --delegate lane below full
+     * access is a typed preflight refusal, never a silent non-delegation.
+     */
+    mcp_injection_requires_full_access: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     auth: {
         supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
@@ -330,6 +340,8 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         max_count: number;
         transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
     }[];
+    mcp_injection: boolean;
+    mcp_injection_requires_full_access: boolean;
 }, {
     auth?: {
         supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
@@ -353,6 +365,8 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         max_count: number;
         transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
     }[] | undefined;
+    mcp_injection?: boolean | undefined;
+    mcp_injection_requires_full_access?: boolean | undefined;
 }>>;
 export type HarnessCapabilityProfile = z.infer<typeof HarnessCapabilityProfile>;
 /**
@@ -455,6 +469,24 @@ export declare const HarnessManifest: z.ZodObject<{
             max_count: number;
             transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
         }>, "many">>;
+        /**
+         * The adapter can inject engine-owned MCP servers into the harness sandbox
+         * (the generalized browser-MCP seam): claude via `--mcp-config` inline JSON,
+         * codex via `-c mcp_servers.<name>.*` overrides. Consumers: the browser-tool
+         * wiring and the delegation belt. When false, `HarnessRunSpec.extra_mcp_servers`
+         * is refused at preflight (never silently dropped) and the Agent `delegate`
+         * toggle is a typed refusal naming the harness.
+         */
+        mcp_injection: z.ZodDefault<z.ZodBoolean>;
+        /**
+         * The injected belt can only reach the daemon (socket + control API, OUTSIDE
+         * the run sandbox) at FULL access. Codex's workspace-write seatbelt cancels
+         * that escalation-requiring MCP call in headless exec; only danger-full-access
+         * lets it through — the browser MCP already rides this. Claude does not
+         * sandbox its MCP servers (false). true => a --delegate lane below full
+         * access is a typed preflight refusal, never a silent non-delegation.
+         */
+        mcp_injection_requires_full_access: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         auth: {
             supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
@@ -478,6 +510,8 @@ export declare const HarnessManifest: z.ZodObject<{
             max_count: number;
             transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
         }[];
+        mcp_injection: boolean;
+        mcp_injection_requires_full_access: boolean;
     }, {
         auth?: {
             supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
@@ -501,6 +535,8 @@ export declare const HarnessManifest: z.ZodObject<{
             max_count: number;
             transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
         }[] | undefined;
+        mcp_injection?: boolean | undefined;
+        mcp_injection_requires_full_access?: boolean | undefined;
     }>>;
     /** Compatibility convenience fields. New routing/UI should prefer capability_profile. */
     capabilities: z.ZodObject<{
@@ -530,12 +566,6 @@ export declare const HarnessManifest: z.ZodObject<{
          * bidirectional stream-json control protocol today; honest false elsewhere.
          */
         interactive: z.ZodDefault<z.ZodBoolean>;
-        /**
-         * The harness can play the autonomous `orchestrate` planner intent: plan
-         * multi-harness work over the typed tool belt. NOT a privileged role — routed
-         * like reviewers via doctor + capability + quota headroom.
-         */
-        orchestrate: z.ZodDefault<z.ZodBoolean>;
         /**
          * The harness can constrain its FINAL message to a caller-supplied JSON
          * Schema (codex `--output-schema <file>`, claude `--json-schema <json>`).
@@ -578,7 +608,6 @@ export declare const HarnessManifest: z.ZodObject<{
         known_models_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     }, "strip", z.ZodTypeAny, {
         plan: boolean;
-        orchestrate: boolean;
         implement: boolean;
         create_from_scratch: boolean;
         review: boolean;
@@ -600,7 +629,6 @@ export declare const HarnessManifest: z.ZodObject<{
         known_models_verified_against: string | null;
     }, {
         plan?: boolean | undefined;
-        orchestrate?: boolean | undefined;
         implement?: boolean | undefined;
         create_from_scratch?: boolean | undefined;
         review?: boolean | undefined;
@@ -651,10 +679,11 @@ export declare const HarnessManifest: z.ZodObject<{
             max_count: number;
             transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
         }[];
+        mcp_injection: boolean;
+        mcp_injection_requires_full_access: boolean;
     };
     capabilities: {
         plan: boolean;
-        orchestrate: boolean;
         implement: boolean;
         create_from_scratch: boolean;
         review: boolean;
@@ -685,7 +714,6 @@ export declare const HarnessManifest: z.ZodObject<{
     id: string;
     capabilities: {
         plan?: boolean | undefined;
-        orchestrate?: boolean | undefined;
         implement?: boolean | undefined;
         create_from_scratch?: boolean | undefined;
         review?: boolean | undefined;
@@ -732,6 +760,8 @@ export declare const HarnessManifest: z.ZodObject<{
             max_count: number;
             transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
         }[] | undefined;
+        mcp_injection?: boolean | undefined;
+        mcp_injection_requires_full_access?: boolean | undefined;
     } | undefined;
     auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
     access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
@@ -776,8 +806,8 @@ export declare const ConformanceReport: z.ZodObject<{
         detail?: string | undefined;
         duration_ms?: number | undefined;
     }>, "many">>;
-    enabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, "many">>;
-    disabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>, "many">>;
+    enabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit"]>, "many">>;
+    disabled_intents: z.ZodDefault<z.ZodArray<z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit"]>, "many">>;
     reasons: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     auth_sources: z.ZodDefault<z.ZodArray<z.ZodObject<{
         source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
@@ -804,8 +834,8 @@ export declare const ConformanceReport: z.ZodObject<{
         detail?: string | undefined;
         duration_ms?: number | undefined;
     }[];
-    enabled_intents: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[];
-    disabled_intents: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[];
+    enabled_intents: ("plan" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain" | "audit")[];
+    disabled_intents: ("plan" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain" | "audit")[];
     reasons: string[];
     auth_sources: {
         source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
@@ -822,8 +852,8 @@ export declare const ConformanceReport: z.ZodObject<{
         detail?: string | undefined;
         duration_ms?: number | undefined;
     }[] | undefined;
-    enabled_intents?: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[] | undefined;
-    disabled_intents?: ("plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain")[] | undefined;
+    enabled_intents?: ("plan" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain" | "audit")[] | undefined;
+    disabled_intents?: ("plan" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain" | "audit")[] | undefined;
     reasons?: string[] | undefined;
     auth_sources?: {
         source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
@@ -844,15 +874,41 @@ export declare const BrowserToolSpec: z.ZodObject<{
     headless?: boolean | undefined;
 }>;
 export type BrowserToolSpec = z.infer<typeof BrowserToolSpec>;
+/**
+ * One extra MCP server the adapter injects into the harness sandbox (generalized
+ * from the browser-MCP seam). The engine names them, supplies the exact local
+ * command + args + env, and each adapter translates the list into its native
+ * MCP-injection transport (claude `--mcp-config` inline JSON, codex
+ * `-c mcp_servers.<name>.*` overrides). Only injected on adapters whose
+ * `capability_profile.mcp_injection` is true. `name` is the server key the
+ * harness exposes its tools under (`mcp__<name>__*`).
+ */
+export declare const ExtraMcpServer: z.ZodObject<{
+    name: z.ZodString;
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    command: string;
+    name: string;
+    args: string[];
+    env: Record<string, string>;
+}, {
+    command: string;
+    name: string;
+    args?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+}>;
+export type ExtraMcpServer = z.infer<typeof ExtraMcpServer>;
 /** Spec passed to a harness adapter's run(). */
 export declare const HarnessRunSpec: z.ZodObject<{
     session_id: z.ZodString;
-    intent: z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit", "orchestrate"]>;
+    intent: z.ZodEnum<["plan", "spec", "implement", "create_from_scratch", "repair", "review", "verify", "synthesize", "explain", "audit"]>;
     prompt: z.ZodString;
     /**
      * Optional caller-supplied system-level instructions layered on top of the
-     * prompt for TASK-PRODUCING lanes (primary, candidate, planner, explorer,
-     * orchestrate-planner) — never reviewers, synthesis, or the auth smoke.
+     * prompt for TASK-PRODUCING lanes (primary, candidate, planner, explorer)
+     * — never reviewers, synthesis, or the auth smoke.
      * Adapters deliver it natively (claude `--append-system-prompt`, codex
      * `developer_instructions`) or as a delimited prompt prefix.
      */
@@ -970,16 +1026,16 @@ export declare const HarnessRunSpec: z.ZodObject<{
         path: z.ZodString;
     }, "strict", z.ZodTypeAny, {
         path: string;
-        name: string;
         kind: "file" | "image";
+        name: string;
         resource_id: string;
         mime: string;
         sha256: string;
         size_bytes: number;
     }, {
         path: string;
-        name: string;
         kind: "file" | "image";
+        name: string;
         resource_id: string;
         mime: string;
         sha256: string;
@@ -1001,10 +1057,32 @@ export declare const HarnessRunSpec: z.ZodObject<{
         headless?: boolean | undefined;
     }>>>;
     /**
-     * JSON Schema constraining the harness's FINAL message. Producers:
-     * the orchestrate planner (OrchestratePlan schema) and spec-questions
-     * grounding (InterviewQuestion block). Passed only to routes whose manifest
-     * declares `json_schema_output`; consumers add the native CLI flag.
+     * Extra MCP servers to inject into the harness sandbox (the delegation belt,
+     * and any future engine-owned server). Empty by default. Only honored by
+     * adapters whose `capability_profile.mcp_injection` is true; the engine
+     * refuses `delegate` on an adapter that cannot inject rather than silently
+     * dropping the belt.
+     */
+    extra_mcp_servers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        command: string;
+        name: string;
+        args: string[];
+        env: Record<string, string>;
+    }, {
+        command: string;
+        name: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }>, "many">>;
+    /**
+     * JSON Schema constraining the harness's FINAL message (a caller-supplied
+     * per-run output schema on agent/ask answers). Passed only to routes whose
+     * manifest declares `json_schema_output`; consumers add the native CLI flag.
      */
     output_schema: z.ZodOptional<z.ZodUnknown>;
     raw_context_packet: z.ZodOptional<z.ZodNullable<z.ZodObject<{
@@ -1042,15 +1120,15 @@ export declare const HarnessRunSpec: z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             path: string;
             disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            reason?: string | undefined;
             hash?: string | undefined;
             bytes?: number | undefined;
-            reason?: string | undefined;
         }, {
             path: string;
             disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            reason?: string | undefined;
             hash?: string | undefined;
             bytes?: number | undefined;
-            reason?: string | undefined;
         }>, "many">;
         omissions: z.ZodArray<z.ZodObject<{
             path: z.ZodString;
@@ -1086,9 +1164,9 @@ export declare const HarnessRunSpec: z.ZodObject<{
         file_manifest: {
             path: string;
             disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            reason?: string | undefined;
             hash?: string | undefined;
             bytes?: number | undefined;
-            reason?: string | undefined;
         }[];
         omissions: {
             path: string;
@@ -1113,9 +1191,9 @@ export declare const HarnessRunSpec: z.ZodObject<{
         file_manifest: {
             path: string;
             disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            reason?: string | undefined;
             hash?: string | undefined;
             bytes?: number | undefined;
-            reason?: string | undefined;
         }[];
         omissions: {
             path: string;
@@ -1129,8 +1207,9 @@ export declare const HarnessRunSpec: z.ZodObject<{
     extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
     max_turns: number | null;
+    env: Record<string, string>;
     session_id: string;
-    intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
+    intent: "plan" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain" | "audit";
     prompt: string;
     cwd: string;
     access: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
@@ -1157,11 +1236,10 @@ export declare const HarnessRunSpec: z.ZodObject<{
     env_inheritance: "mirror_native" | "clean";
     evidence_policy: "stream_only" | "allow_vendor_session_artifacts";
     stream_deltas: boolean;
-    env: Record<string, string>;
     attachments: {
         path: string;
-        name: string;
         kind: "file" | "image";
+        name: string;
         resource_id: string;
         mime: string;
         sha256: string;
@@ -1171,6 +1249,12 @@ export declare const HarnessRunSpec: z.ZodObject<{
         output_dir: string | null;
         headless: boolean;
     } | null;
+    extra_mcp_servers: {
+        command: string;
+        name: string;
+        args: string[];
+        env: Record<string, string>;
+    }[];
     extra: Record<string, unknown>;
     instructions?: string | undefined;
     output_schema?: unknown;
@@ -1191,9 +1275,9 @@ export declare const HarnessRunSpec: z.ZodObject<{
         file_manifest: {
             path: string;
             disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            reason?: string | undefined;
             hash?: string | undefined;
             bytes?: number | undefined;
-            reason?: string | undefined;
         }[];
         omissions: {
             path: string;
@@ -1205,11 +1289,12 @@ export declare const HarnessRunSpec: z.ZodObject<{
     } | null | undefined;
 }, {
     session_id: string;
-    intent: "plan" | "audit" | "orchestrate" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain";
+    intent: "plan" | "spec" | "implement" | "create_from_scratch" | "repair" | "review" | "verify" | "synthesize" | "explain" | "audit";
     prompt: string;
     cwd: string;
     instructions?: string | undefined;
     max_turns?: number | null | undefined;
+    env?: Record<string, string> | undefined;
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     external_context_policy?: "off" | "auto" | "cached" | "live" | undefined;
     tool_permission_policy?: {
@@ -1234,11 +1319,10 @@ export declare const HarnessRunSpec: z.ZodObject<{
     env_inheritance?: "mirror_native" | "clean" | undefined;
     evidence_policy?: "stream_only" | "allow_vendor_session_artifacts" | undefined;
     stream_deltas?: boolean | undefined;
-    env?: Record<string, string> | undefined;
     attachments?: {
         path: string;
-        name: string;
         kind: "file" | "image";
+        name: string;
         resource_id: string;
         mime: string;
         sha256: string;
@@ -1248,6 +1332,12 @@ export declare const HarnessRunSpec: z.ZodObject<{
         output_dir?: string | null | undefined;
         headless?: boolean | undefined;
     } | null | undefined;
+    extra_mcp_servers?: {
+        command: string;
+        name: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }[] | undefined;
     output_schema?: unknown;
     raw_context_packet?: {
         schema_version: 1;
@@ -1265,9 +1355,9 @@ export declare const HarnessRunSpec: z.ZodObject<{
         file_manifest: {
             path: string;
             disposition: "full" | "included" | "manifest_only" | "excluded" | "sensitive" | "binary" | "vendored" | "oversized" | "read_error" | "omitted";
+            reason?: string | undefined;
             hash?: string | undefined;
             bytes?: number | undefined;
-            reason?: string | undefined;
         }[];
         omissions: {
             path: string;
@@ -1472,8 +1562,8 @@ export declare const HarnessEvent: z.ZodObject<{
         content_summary: z.ZodOptional<z.ZodString>;
         exit_code: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         kind: "web" | "file" | "command" | "mcp" | "search" | "other";
+        name: string;
         status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;
@@ -1793,8 +1883,8 @@ export declare const HarnessEvent: z.ZodObject<{
     text?: string | undefined;
     final?: boolean | undefined;
     tool?: {
-        name: string;
         kind: "web" | "file" | "command" | "mcp" | "search" | "other";
+        name: string;
         status?: "cancelled" | "ok" | "error" | "denied" | undefined;
         use_id?: string | undefined;
         target?: string | undefined;