@claudexor/schema 5.0.2 → 5.1.0

package/dist/tool-ref.js

@@ -6,18 +6,28 @@ import { z } from "zod/v3";
 export const ToolKind = z
     .enum(["web", "file", "command", "mcp", "search", "other"])
     .describe("Coarse tool classification used for typed governance; adapters map native tool names to a kind.");
+/**
+ * #546: the vendor's own report that a background command ended, as far as a
+ * protocol source defines it. It is neither an exit code nor the success of the
+ * command's work, and a word outside this list is no report at all.
+ */
+export const ToolCommandCompletionStatus = z
+    .enum(["success", "error", "aborted"])
+    .describe("The vendor's word for how a background command ended (Cursor 2026.08.11 shell completions); never an exit code or proof that the command's work succeeded.");
 /**
  * #450: what a command-kind tool result established about the PROCESS it
  * ran, separate from `status` (the tool call's own outcome). A background
  * handoff or an elapsed timeout returns an ordinary tool result while the
  * command's end is unobserved, so neither counts as a finished command.
+ * #546: a later `command_outcome_refined` status can replace these facts for
+ * the same call (`completion_reported`), keeping the handoff facts beside it.
  * Absent on adapters and legacy events that do not report it.
  */
 export const ToolCommandOutcome = z
     .object({
     state: z
-        .enum(["exited", "timed_out", "backgrounded", "unknown"])
-        .describe("exited: the tool observed the command end; timed_out: the tool's timeout elapsed before an observed end (the process may still run or may have been signalled); backgrounded: the command was handed to a background shell and was still running when the result returned; unknown: the native result established none of these."),
+        .enum(["exited", "timed_out", "backgrounded", "completion_reported", "unknown"])
+        .describe("exited: the tool observed the command end; timed_out: the tool's timeout elapsed before an observed end (the process may still run or may have been signalled); backgrounded: the command was handed to a background shell and was still running when the result returned; completion_reported: after such a handoff, a later vendor notification reported that the command ended, without an exit code; unknown: the native result established none of these."),
     signal: z
         .string()
         .min(1)
@@ -39,8 +49,63 @@ export const ToolCommandOutcome = z
         .optional()
         .describe("Vendor handle of the background shell that kept the command."),
     pid: z.number().int().positive().optional().describe("Vendor-reported process id."),
+    completion_status: ToolCommandCompletionStatus.optional().describe("What the vendor reported about a completion_reported command; never an exit code."),
 })
     .describe("Typed facts about the process a command-kind tool ran, separate from status.");
+/**
+ * #546: `payload.code` of the `status` event that refines the command outcome
+ * of an earlier tool call (today: Cursor reports the end of a command it had
+ * handed to a background shell). Its `tool` names that call by `use_id` and
+ * carries the refined `command_outcome`, which replaces the call's handoff
+ * facts and keeps them beside the new state. It is only ever
+ * `completion_reported` with a defined status: it can never prove an exit,
+ * restates or changes no call `status`, carries no exit code, and is never a
+ * second result. A reader that does not know the code sees an ordinary status
+ * event.
+ */
+export const COMMAND_OUTCOME_REFINED = "command_outcome_refined";
+/** The call and refined command facts of a `command_outcome_refined` status
+ * event or of its stored `harness.event` payload; null for anything else,
+ * including a row that claims an exit or an undefined report. */
+export function commandOutcomeRefinement(event) {
+    const row = (event !== null && typeof event === "object" ? event : {});
+    if (row.type !== "status" || row.payload?.code !== COMMAND_OUTCOME_REFINED)
+        return null;
+    const useId = row.tool?.use_id;
+    const outcome = ToolCommandOutcome.safeParse(row.tool?.command_outcome);
+    return typeof useId === "string" &&
+        useId &&
+        outcome.success &&
+        outcome.data.state === "completion_reported" &&
+        outcome.data.completion_status
+        ? { useId, outcome: outcome.data }
+        : null;
+}
+/**
+ * #546: what an attempt keeps of the vendor's reports about commands it had
+ * handed to a background shell: the exact call and its refined facts. These are
+ * command facts, never tool errors, so no recovery, warning, terminal or ranking
+ * policy reads them: a deliberately stopped dev server reports `aborted` and may
+ * simply have finished correctly. `recent` is bounded by the writer and `total`
+ * keeps the true count.
+ */
+export const ReportedCommandOutcomes = z
+    .object({
+    total: z.number().int().nonnegative().describe("True count of reports in this attempt."),
+    recent: z
+        .array(z.object({
+        tool: z.string().describe("Native tool name of the reported call."),
+        target: z
+            .string()
+            .nullable()
+            .default(null)
+            .describe("Target of the call as issued, when known."),
+        tool_use_id: z.string().min(1).describe("The exact call the report refined."),
+        command_outcome: ToolCommandOutcome.describe("The call's refined facts: the vendor's word and the handoff, never an exit code."),
+    }))
+        .describe("The most recent reports, bounded by the writer."),
+})
+    .describe("Vendor reports about handed-off commands, kept apart from tool errors.");
 /**
  * Typed tool reference attached to `tool_call` / `tool_result` events.
  * `status` is REQUIRED on `tool_result` events (adapter conformance enforces it);
@@ -89,26 +154,38 @@ export const ToolRef = z
     /**
      * QA-042: adapter-stamped RETRIEVAL outcome for a web/browser tool result,
      * distinct from `status` (the tool-call LIFECYCLE). `verified` = the vendor
-     * exposed a typed successful retrieval (content/page present); `dispatched`
-     * = the tool call completed but the vendor exposes NO typed fetch outcome
-     * (codex `web_search`/`open_page` — a completed item can hide a 502), so the
-     * evidence is dispatch-only, not proof of content; `failed` = a typed
-     * retrieval failure. Absent on non-web tools and on adapters that do not
-     * stamp it. The engine reads THIS (never prose) to separate "web reached"
-     * from "web verified".
+     * exposed a typed successful retrieval, and `web_content` says what it
+     * returned; `dispatched` = the call completed but the vendor exposes NO typed
+     * fetch outcome (codex `web_search`/`open_page` — a completed item can hide a
+     * 502; a Browser page read that got an HTTP error), so the evidence is
+     * dispatch-only, not proof of content; `failed` = a typed retrieval failure.
+     * Absent on non-web tools, on a Browser call that read no web page (#118),
+     * and on adapters that do not stamp it. The engine reads THIS (never prose)
+     * to separate "web reached" from "web verified".
      */
     web_retrieval: z
         .enum(["verified", "dispatched", "failed"])
         .optional()
         .describe("Adapter-stamped web/browser retrieval outcome (verified/dispatched/failed), distinct from the tool-call status lifecycle."),
+    /**
+     * #118: what a `verified` retrieval returned. `page` = a fetched or loaded
+     * page (claude WebFetch; a Browser navigation or snapshot of an http(s) page
+     * with no HTTP error); `search_results` = the results of a web search
+     * (claude WebSearch), which is not a fetched page. Absent otherwise.
+     */
+    web_content: z
+        .enum(["page", "search_results"])
+        .optional()
+        .describe("What a verified web retrieval returned: page (a fetched or loaded page) or search_results (a web search's results, not a fetched page)."),
 })
     .describe("Typed tool reference attached to tool_call/tool_result events.");
 /**
  * True when a result carries command facts that do not establish an observed
- * end: still running in a background shell, timed out, or any other state.
- * Such a result never proves the command finished, so it is never a success
- * or a recovery. Absent facts (other adapters, legacy events) keep their
- * existing meaning; an unrecognized value counts as unconfirmed.
+ * exit: handed to a background shell, timed out, a completion reported
+ * without an exit code, or any other state. Such a result never proves the
+ * command finished successfully, so it is never a success or a recovery.
+ * Absent facts (other adapters, legacy events) keep their existing meaning;
+ * an unrecognized value counts as unconfirmed.
  */
 export function commandOutcomeUnconfirmed(value) {
     if (value === undefined || value === null)
@@ -123,8 +200,12 @@ function durationLabel(ms) {
 }
 /**
  * The one English description of an unconfirmed command outcome (INV-134,
- * INV-141), used by adapter result text and ACP. Null when nothing needs
- * disclosure: no facts, or an observed exit.
+ * INV-141), used by adapter text, ACP and the continuation packet; the macOS
+ * note mirrors it word for word. A handoff says only what was seen: the
+ * command went to a background shell and its completion was not observed,
+ * never that it is still running. A reported completion leads with the
+ * report, keeps the exit code unknown and keeps the handoff as history. Null
+ * when nothing needs disclosure: no facts, or an observed exit.
  */
 export function commandOutcomeLabel(value) {
     if (!commandOutcomeUnconfirmed(value))
@@ -134,19 +215,23 @@ export function commandOutcomeLabel(value) {
         return "Command outcome not reported";
     const { state, timeout_ms: ms, background_reason: reason, shell_id, pid } = parsed.data;
     const handle = [shell_id && `shell ${shell_id}`, pid && `pid ${pid}`].filter(Boolean);
-    const lead = state === "timed_out"
-        ? [
-            ms === undefined ? "Timed out" : `Timed out after ${durationLabel(ms)}`,
-            "exit status unknown",
-        ]
-        : reason === "timeout" && ms !== 0
-            ? [
-                ms === undefined
-                    ? "Moved to background after its timeout"
-                    : `Moved to background after ${durationLabel(ms)}`,
-                "still running",
-            ]
-            : ["Running in background"];
-    return [...lead, ...handle].join(" · ");
+    if (state === "timed_out") {
+        const lead = ms === undefined ? "Timed out" : `Timed out after ${durationLabel(ms)}`;
+        return [lead, "exit status unknown", ...handle].join(" · ");
+    }
+    const after = reason === "timeout" && ms !== 0
+        ? ms === undefined
+            ? " after its timeout"
+            : ` after its ${durationLabel(ms)} timeout`
+        : "";
+    if (state === "backgrounded")
+        return [`Handed off to background${after}; completion not observed`, ...handle].join(" · ");
+    const vendor = parsed.data.completion_status;
+    const reported = vendor && vendor !== "success" ? ` (${vendor})` : "";
+    return [
+        `Completion reported${reported}; exit code unknown`,
+        `handed off to background${after}`,
+        ...handle,
+    ].join(" · ");
 }
 //# sourceMappingURL=tool-ref.js.map

package/dist/tool-ref.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-ref.js","sourceRoot":"","sources":["../src/tool-ref.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;KAC1D,QAAQ,CACP,iGAAiG,CAClG,CAAC;AAGJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;SACxD,QAAQ,CACP,kUAAkU,CACnU;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,mDAAmD,CAAC;IAChE,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,EAAE;SACV,QAAQ,CACP,mFAAmF,CACpF;IACH,iBAAiB,EAAE,CAAC;SACjB,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;SAC9B,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;IACxF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,8DAA8D,CAAC;IAC3E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CACpF,CAAC;KACD,QAAQ,CAAC,8EAA8E,CAAC,CAAC;AAG5F;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACtF,yEAAyE;IACzE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;SAC5C,QAAQ,EAAE;SACV,QAAQ,CACP,oGAAoG,CACrG;IACH;;;;;OAKG;IACH,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;SAC9B,QAAQ,EAAE;SACV,QAAQ,CACP,mKAAmK,CACpK;IACH,8EAA8E;IAC9E,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,kIAAkI,CACnI;IACH,iEAAiE;IACjE,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,qHAAqH,CACtH;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,eAAe,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACrD,gFAAgF,CACjF;IACD;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC;SACb,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;SAC1C,QAAQ,EAAE;SACV,QAAQ,CACP,2HAA2H,CAC5H;CACJ,CAAC;KACD,QAAQ,CAAC,gEAAgE,CAAC,CAAC;AAG9E;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxD,OAAQ,KAA6B,CAAC,KAAK,KAAK,QAAQ,CAAC;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,OAAO,OAAO,GAAG,EAAE;QACjB,CAAC,CAAC,GAAG,OAAO,GAAG;QACf,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,8BAA8B,CAAC;IAC9F,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IACxF,MAAM,MAAM,GAAG,CAAC,QAAQ,IAAI,SAAS,QAAQ,EAAE,EAAE,GAAG,IAAI,OAAO,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,IAAI,GACR,KAAK,KAAK,WAAW;QACnB,CAAC,CAAC;YACE,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,aAAa,CAAC,EAAE,CAAC,EAAE;YACvE,qBAAqB;SACtB;QACH,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,KAAK,CAAC;YAChC,CAAC,CAAC;gBACE,EAAE,KAAK,SAAS;oBACd,CAAC,CAAC,uCAAuC;oBACzC,CAAC,CAAC,6BAA6B,aAAa,CAAC,EAAE,CAAC,EAAE;gBACpD,eAAe;aAChB;YACH,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"tool-ref.js","sourceRoot":"","sources":["../src/tool-ref.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;KAC1D,QAAQ,CACP,iGAAiG,CAClG,CAAC;AAGJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;KACrC,QAAQ,CACP,4JAA4J,CAC7J,CAAC;AAGJ;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC;SAC/E,QAAQ,CACP,gcAAgc,CACjc;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,mDAAmD,CAAC;IAChE,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,EAAE;SACV,QAAQ,CACP,mFAAmF,CACpF;IACH,iBAAiB,EAAE,CAAC;SACjB,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;SAC9B,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;IACxF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,8DAA8D,CAAC;IAC3E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACnF,iBAAiB,EAAE,2BAA2B,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChE,mFAAmF,CACpF;CACF,CAAC;KACD,QAAQ,CAAC,8EAA8E,CAAC,CAAC;AAG5F;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE;;iEAEiE;AACjE,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,MAAM,GAAG,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAIpE,CAAC;IACF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAC;IACxF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACxE,OAAO,OAAO,KAAK,KAAK,QAAQ;QAC9B,KAAK;QACL,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,qBAAqB;QAC5C,OAAO,CAAC,IAAI,CAAC,iBAAiB;QAC9B,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QAClC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACxF,MAAM,EAAE,CAAC;SACN,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QACnE,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,2CAA2C,CAAC;QACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC7E,eAAe,EAAE,kBAAkB,CAAC,QAAQ,CAC1C,kFAAkF,CACnF;KACF,CAAC,CACH;SACA,QAAQ,CAAC,iDAAiD,CAAC;CAC/D,CAAC;KACD,QAAQ,CAAC,wEAAwE,CAAC,CAAC;AAGtF;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACtF,yEAAyE;IACzE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;SAC5C,QAAQ,EAAE;SACV,QAAQ,CACP,oGAAoG,CACrG;IACH;;;;;OAKG;IACH,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;SAC9B,QAAQ,EAAE;SACV,QAAQ,CACP,mKAAmK,CACpK;IACH,8EAA8E;IAC9E,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,kIAAkI,CACnI;IACH,iEAAiE;IACjE,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,qHAAqH,CACtH;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,eAAe,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACrD,gFAAgF,CACjF;IACD;;;;;;;;;;;OAWG;IACH,aAAa,EAAE,CAAC;SACb,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;SAC1C,QAAQ,EAAE;SACV,QAAQ,CACP,2HAA2H,CAC5H;IACH;;;;;OAKG;IACH,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;SAChC,QAAQ,EAAE;SACV,QAAQ,CACP,yIAAyI,CAC1I;CACJ,CAAC;KACD,QAAQ,CAAC,gEAAgE,CAAC,CAAC;AAG9E;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxD,OAAQ,KAA6B,CAAC,KAAK,KAAK,QAAQ,CAAC;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,OAAO,OAAO,GAAG,EAAE;QACjB,CAAC,CAAC,GAAG,OAAO,GAAG;QACf,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AAC/E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,8BAA8B,CAAC;IAC9F,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IACxF,MAAM,MAAM,GAAG,CAAC,QAAQ,IAAI,SAAS,QAAQ,EAAE,EAAE,GAAG,IAAI,OAAO,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;QACrF,OAAO,CAAC,IAAI,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GACT,MAAM,KAAK,SAAS,IAAI,EAAE,KAAK,CAAC;QAC9B,CAAC,CAAC,EAAE,KAAK,SAAS;YAChB,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,cAAc,aAAa,CAAC,EAAE,CAAC,UAAU;QAC7C,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,KAAK,KAAK,cAAc;QAC1B,OAAO,CAAC,2BAA2B,KAAK,2BAA2B,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO;QACL,sBAAsB,QAAQ,qBAAqB;QACnD,2BAA2B,KAAK,EAAE;QAClC,GAAG,MAAM;KACV,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC"}

package/dist/web-evidence.d.ts

@@ -0,0 +1,91 @@
+import { z } from "zod/v3";
+export declare const WebEvidenceStatus: z.ZodEnum<["none", "attempted", "satisfied", "failed", "unverified"]>;
+export type WebEvidenceStatus = z.infer<typeof WebEvidenceStatus>;
+/**
+ * What web evidence covers (#118). Every engine version has observed the same
+ * two things, so the default is also true of records written before it: the
+ * harness's typed web tool calls and calls to the engine Browser MCP. Process
+ * network traffic is not measured: the vendor API connection always exists, and
+ * an allowed shell command or another tool can reach the network without a web
+ * tool call. `attempted: false` is therefore never a statement about network use.
+ */
+export declare const WebObservation: z.ZodObject<{
+    evidence: z.ZodLiteral<"tool_calls">;
+    network: z.ZodLiteral<"not_measured">;
+}, "strip", z.ZodTypeAny, {
+    evidence: "tool_calls";
+    network: "not_measured";
+}, {
+    evidence: "tool_calls";
+    network: "not_measured";
+}>;
+export type WebObservation = z.infer<typeof WebObservation>;
+export declare const WebEvidenceRecord: z.ZodObject<{
+    required: z.ZodDefault<z.ZodBoolean>;
+    policy: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+    effective_mode: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+    attempted: z.ZodDefault<z.ZodBoolean>;
+    satisfied: z.ZodDefault<z.ZodBoolean>;
+    status: z.ZodDefault<z.ZodEnum<["none", "attempted", "satisfied", "failed", "unverified"]>>;
+    /**
+     * QA-042: retrieval STRENGTH of satisfied/attempted web activity, orthogonal
+     * to `status`. `verified` = at least one result was a typed successful
+     * retrieval, and `verified_content` says whether it was a page or search
+     * results; `dispatched` = a web call completed without one (codex
+     * `web_search`/`open_page`, a Browser page read that got an HTTP error);
+     * `none` = no search or page retrieval was observed. #118: a Browser call
+     * that read no web page (closing, clicking, tabs, about:blank) still makes
+     * `satisfied` true, as the required-web gate always counted it, but leaves
+     * the strength at `none`. A surface renders "Web verified" only for a
+     * verified page and "Web searched" for verified search results.
+     */
+    verification: z.ZodDefault<z.ZodEnum<["verified", "dispatched", "none"]>>;
+    verified_content: z.ZodDefault<z.ZodNullable<z.ZodEnum<["page", "search_results"]>>>;
+    tool: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    target: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    error_summary: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    observation: z.ZodDefault<z.ZodObject<{
+        evidence: z.ZodLiteral<"tool_calls">;
+        network: z.ZodLiteral<"not_measured">;
+    }, "strip", z.ZodTypeAny, {
+        evidence: "tool_calls";
+        network: "not_measured";
+    }, {
+        evidence: "tool_calls";
+        network: "not_measured";
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    required: boolean;
+    policy: "auto" | "cached" | "live" | "off";
+    effective_mode: "auto" | "cached" | "live" | "off";
+    attempted: boolean;
+    satisfied: boolean;
+    status: "attempted" | "failed" | "none" | "satisfied" | "unverified";
+    verification: "dispatched" | "none" | "verified";
+    verified_content: "page" | "search_results" | null;
+    tool: string | null;
+    target: string | null;
+    error_summary: string | null;
+    observation: {
+        evidence: "tool_calls";
+        network: "not_measured";
+    };
+}, {
+    required?: boolean | undefined;
+    policy?: "auto" | "cached" | "live" | "off" | undefined;
+    effective_mode?: "auto" | "cached" | "live" | "off" | undefined;
+    attempted?: boolean | undefined;
+    satisfied?: boolean | undefined;
+    status?: "attempted" | "failed" | "none" | "satisfied" | "unverified" | undefined;
+    verification?: "dispatched" | "none" | "verified" | undefined;
+    verified_content?: "page" | "search_results" | null | undefined;
+    tool?: string | null | undefined;
+    target?: string | null | undefined;
+    error_summary?: string | null | undefined;
+    observation?: {
+        evidence: "tool_calls";
+        network: "not_measured";
+    } | undefined;
+}>;
+export type WebEvidenceRecord = z.infer<typeof WebEvidenceRecord>;
+//# sourceMappingURL=web-evidence.d.ts.map

package/dist/web-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-evidence.d.ts","sourceRoot":"","sources":["../src/web-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,eAAO,MAAM,iBAAiB,uEAE0D,CAAC;AACzF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc;;;;;;;;;EAWqE,CAAC;AACjG,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,iBAAiB;;;;;;;IAoB1B;;;;;;;;;;;OAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCJ,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/web-evidence.js

@@ -0,0 +1,77 @@
+import { z } from "zod/v3";
+import { ExternalContextPolicy } from "./primitives.js";
+export const WebEvidenceStatus = z
+    .enum(["none", "attempted", "satisfied", "failed", "unverified"])
+    .describe("Observed web activity: none, attempted, satisfied, failed, or unverified.");
+/**
+ * What web evidence covers (#118). Every engine version has observed the same
+ * two things, so the default is also true of records written before it: the
+ * harness's typed web tool calls and calls to the engine Browser MCP. Process
+ * network traffic is not measured: the vendor API connection always exists, and
+ * an allowed shell command or another tool can reach the network without a web
+ * tool call. `attempted: false` is therefore never a statement about network use.
+ */
+export const WebObservation = z
+    .object({
+    evidence: z
+        .literal("tool_calls")
+        .describe("Web evidence comes from typed web tool calls and engine Browser MCP calls."),
+    network: z
+        .literal("not_measured")
+        .describe("Process network traffic is not measured: vendor API traffic, shell commands and other tools can use the network without appearing here."),
+})
+    .describe("Scope of the web evidence: observed tool calls only, never a network measurement.");
+export const WebEvidenceRecord = z
+    .object({
+    required: z.boolean().default(false).describe("Explicit stored web requirement."),
+    policy: ExternalContextPolicy.default("auto").describe("Requested web policy for the run."),
+    effective_mode: ExternalContextPolicy.default("auto").describe("Policy given to the harness route, after disclosed upgrades (e.g. cached to live); not proof that a native session ran."),
+    attempted: z
+        .boolean()
+        .default(false)
+        .describe("Whether a web tool call or engine Browser call was observed; not a network measurement (see observation)."),
+    satisfied: z
+        .boolean()
+        .default(false)
+        .describe("Completed without a typed failure; verification records retrieval-proof strength."),
+    status: WebEvidenceStatus.default("none"),
+    /**
+     * QA-042: retrieval STRENGTH of satisfied/attempted web activity, orthogonal
+     * to `status`. `verified` = at least one result was a typed successful
+     * retrieval, and `verified_content` says whether it was a page or search
+     * results; `dispatched` = a web call completed without one (codex
+     * `web_search`/`open_page`, a Browser page read that got an HTTP error);
+     * `none` = no search or page retrieval was observed. #118: a Browser call
+     * that read no web page (closing, clicking, tabs, about:blank) still makes
+     * `satisfied` true, as the required-web gate always counted it, but leaves
+     * the strength at `none`. A surface renders "Web verified" only for a
+     * verified page and "Web searched" for verified search results.
+     */
+    verification: z
+        .enum(["verified", "dispatched", "none"])
+        .default("none")
+        .describe("Retrieval-proof strength of observed web activity: verified (a typed successful retrieval; verified_content says of what), dispatched (a web call completed without a typed retrieval result), or none (no search or page retrieval observed, though a Browser action may have completed)."),
+    verified_content: z
+        .enum(["page", "search_results"])
+        .nullable()
+        .default(null)
+        .describe("What the verified retrieval returned: page (a fetched or loaded page; it outranks search results) or search_results (a web search's results, not a fetched page); null when nothing was verified or the record predates this field."),
+    tool: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Web tool that produced the evidence, when any."),
+    target: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Target (query/url) of the web activity as issued, when any."),
+    error_summary: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Redacted error detail when web activity failed."),
+    observation: WebObservation.default({ evidence: "tool_calls", network: "not_measured" }),
+})
+    .describe("Typed web-evidence record computed by the orchestrator; surfaces project it and never re-derive evidence from raw events.");
+//# sourceMappingURL=web-evidence.js.map

package/dist/web-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-evidence.js","sourceRoot":"","sources":["../src/web-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;KAChE,QAAQ,CAAC,2EAA2E,CAAC,CAAC;AAGzF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,OAAO,CAAC,YAAY,CAAC;SACrB,QAAQ,CAAC,4EAA4E,CAAC;IACzF,OAAO,EAAE,CAAC;SACP,OAAO,CAAC,cAAc,CAAC;SACvB,QAAQ,CACP,yIAAyI,CAC1I;CACJ,CAAC;KACD,QAAQ,CAAC,mFAAmF,CAAC,CAAC;AAGjG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACjF,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC3F,cAAc,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAC5D,yHAAyH,CAC1H;IACD,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,2GAA2G,CAC5G;IACH,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,mFAAmF,CACpF;IACH,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC;IACzC;;;;;;;;;;;OAWG;IACH,YAAY,EAAE,CAAC;SACZ,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;SACxC,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CACP,4RAA4R,CAC7R;IACH,gBAAgB,EAAE,CAAC;SAChB,IAAI,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;SAChC,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,qOAAqO,CACtO;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,6DAA6D,CAAC;IAC1E,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;CACzF,CAAC;KACD,QAAQ,CACP,2HAA2H,CAC5H,CAAC"}

package/dist/workspace.js

@@ -36,7 +36,7 @@ export const WorkspaceEnvelope = z
     policy_profile: z
         .string()
         .default("workspace_write")
-        .describe("Access profile the envelope enforces."),
+        .describe("Access profile recorded for the envelope."),
     dirty_policy: DirtyPolicy.default("refuse"),
     created_at: IsoTimestamp.describe("When the envelope was created."),
 })

package/dist/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC/B,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACrD,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC9E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACvF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,mDAAmD,CAAC;IAChE,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,CAAC,mEAAmE,CAAC;IAChF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,mDAAmD,CAAC;IAChE,cAAc,EAAE,aAAa,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,CAAC,4EAA4E,CAAC;IACzF,mBAAmB,EAAE,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9B,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,wFAAwF,CACzF;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,OAAO,CAAC,iBAAiB,CAAC;SAC1B,QAAQ,CAAC,uCAAuC,CAAC;IACpD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3C,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CACpE,CAAC;KACD,QAAQ,CACP,+KAA+K,CAChL,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC/B,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACrD,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC9E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACvF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,mDAAmD,CAAC;IAChE,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,CAAC,mEAAmE,CAAC;IAChF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,mDAAmD,CAAC;IAChE,cAAc,EAAE,aAAa,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,CAAC,4EAA4E,CAAC;IACzF,mBAAmB,EAAE,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9B,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,wFAAwF,CACzF;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,OAAO,CAAC,iBAAiB,CAAC;SAC1B,QAAQ,CAAC,2CAA2C,CAAC;IACxD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3C,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CACpE,CAAC;KACD,QAAQ,CACP,+KAA+K,CAChL,CAAC"}

package/generated/AgentCapabilityCatalog.schema.json

@@ -392,7 +392,7 @@
                   ],
                   "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                 },
-                "description": "Access profiles the adapter can enforce."
+                "description": "Access profiles the adapter can translate to its harness."
               },
               "readonlyMechanism": {
                 "type": "string",
@@ -402,7 +402,7 @@
                   "tool_allowlist",
                   "none"
                 ],
-                "description": "HOW read-only is enforced (fs_sandbox | permission_deny | tool_allowlist | none) — none means read-only intent is advisory for this harness."
+                "description": "HOW a harness applies read-only (fs_sandbox | permission_deny | tool_allowlist | none) — none means read-only intent is advisory for this harness."
               },
               "writeMechanism": {
                 "type": "string",
@@ -556,6 +556,23 @@
           },
           "description": "Accepted POST /runs request keys (derived from the ControlRunStartRequest schema; the CLI/MCP/ACP surfaces project subsets of these)."
         },
+        "runDecisionActions": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": [
+              "accept_clean_patch",
+              "rerun_with_feedback",
+              "accept_risk",
+              "override_needs_human",
+              "revert_run",
+              "discard",
+              "taken"
+            ],
+            "description": "Operator decision: apply an accepted result, rerun with feedback, accept risk, override needs-human, revert a recorded Git effect, acknowledge a captured terminal patch result, or discard remaining copied files without applying them."
+          },
+          "description": "Actions accepted by POST /runs/:id/decision; taken acknowledges a captured terminal patch result."
+        },
         "outputSchemaDialects": {
           "type": "array",
           "items": {
@@ -740,6 +757,7 @@
         "availableHarnesses",
         "modes",
         "runControlKeys",
+        "runDecisionActions",
         "outputSchemaDialects",
         "mutability",
         "cliCommands",

package/generated/ControlAccountRoutingEvidenceResponse.schema.json

@@ -70,6 +70,66 @@
           },
           "description": "Temporary capability marks; absent from engines that predate them. A mark clears on a success there or a catalog or credential change; after expires_at one operation may probe the account."
         },
+        "credentialUnusable": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "harness_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Harness family of the account."
+              },
+              "profile_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Registered account row the refusal was observed on."
+              },
+              "model": {
+                "type": "string",
+                "description": "Model the refused run requested, exactly as requested; a vendor-reported id that differs from it does not clear the observation."
+              },
+              "code": {
+                "type": "string",
+                "enum": [
+                  "auth_revoked",
+                  "capability_refused",
+                  "verification_failed"
+                ],
+                "description": "Typed reason an observed credential is unusable: vendor rejection, entitlement refusal, or a failed profile verification probe."
+              },
+              "detail": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "description": "Redacted typed evidence of the refusal, such as the vendor's error category; null when none was observed."
+              },
+              "observed_at": {
+                "type": "string",
+                "minLength": 1,
+                "description": "When the refusal was observed."
+              },
+              "expires_at": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Self-expiry of the observation (bounded retention, not a vendor reset time)."
+              }
+            },
+            "required": [
+              "harness_id",
+              "profile_id",
+              "model",
+              "code",
+              "detail",
+              "observed_at",
+              "expires_at"
+            ],
+            "additionalProperties": false,
+            "description": "A live typed refusal of one model on one registered account. It affects routing for that model only and never changes the account's status, Enabled state or order."
+          },
+          "description": "Live model-scoped credential refusals of the registered rows, most recent first per account, present only when the client asked (includeCredentialUnusable=true). One clears on a later service of exactly that model, a credential change, or expiry."
+        },
         "refusals": {
           "type": "array",
           "items": {
@@ -160,7 +220,7 @@
         "lastService"
       ],
       "additionalProperties": false,
-      "description": "Model-scoped account routing evidence: live refusal marks, temporary capability marks and the durable last-served order."
+      "description": "Model-scoped account routing evidence: live refusal marks, temporary capability marks, model-scoped credential refusals and the durable last-served order."
     }
   },
   "$schema": "http://json-schema.org/draft-07/schema#"

package/generated/ControlCredentialProfilesQueryResponse.schema.json

@@ -656,7 +656,7 @@
                                       "tool_allowlist",
                                       "none"
                                     ],
-                                    "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                                    "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                                     "default": "none"
                                   },
                                   "write_mechanism": {
@@ -1157,7 +1157,7 @@
                               "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                             },
                             "default": [],
-                            "description": "Access profiles the adapter can enforce."
+                            "description": "Access profiles the adapter can translate to its harness."
                           }
                         },
                         "required": [

package/generated/ControlCredentialProfilesResourcesResponse.schema.json

@@ -635,7 +635,7 @@
                                   "tool_allowlist",
                                   "none"
                                 ],
-                                "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                                "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                                 "default": "none"
                               },
                               "write_mechanism": {
@@ -1136,7 +1136,7 @@
                           "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                         },
                         "default": [],
-                        "description": "Access profiles the adapter can enforce."
+                        "description": "Access profiles the adapter can translate to its harness."
                       }
                     },
                     "required": [

package/generated/ControlCredentialProfilesSnapshotResponse.schema.json

@@ -635,7 +635,7 @@
                                   "tool_allowlist",
                                   "none"
                                 ],
-                                "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                                "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                                 "default": "none"
                               },
                               "write_mechanism": {
@@ -1136,7 +1136,7 @@
                           "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                         },
                         "default": [],
-                        "description": "Access profiles the adapter can enforce."
+                        "description": "Access profiles the adapter can translate to its harness."
                       }
                     },
                     "required": [