@crewhaus/spec 0.4.0 → 0.4.2

package/dist/index.d.ts

@@ -1718,6 +1718,73 @@ declare const observabilityBlock: z.ZodOptional<z.ZodObject<{
         endpoint?: string | undefined;
     } | undefined;
 }>>;
+/**
+ * "Watch me" — observe this harness's interactions and learn from them
+ * (design/watch-me.md). Presence turns on the live capture tap; `crewhaus
+ * watchme report` distills the watched sessions post-hoc. Carried on the
+ * three interactive-loop shapes (cli, channel, managed); the strict unions
+ * reject the key loudly elsewhere (research/crew are a named deferral,
+ * design/watch-me.md §13.1).
+ *
+ * Deliberately a SIBLING of `observability:`, not a sub-key of it:
+ * observability controls the generic telemetry subscribers (ring buffer,
+ * printers, metrics, cost, alerts, otel) while watchme is a learning feature
+ * with its own durable store and spec-synthesis outputs. Capture is
+ * INDEPENDENT of `observability.trace.level` — that knob controls the ring
+ * buffer + printers only, never the watchme tap.
+ *
+ * Every knob defaults, so a bare `watchme: {}` is a complete declaration.
+ * NO `watchme.*` path is optimizer-tunable — see the exclusion note beside
+ * OPTIMIZABLE_PATHS in `@crewhaus/spec-patch`.
+ */
+declare const watchmeBlock: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    /** "full" = write the .events.jsonl trace sibling; "mirrors" = rely on the
+     *  default-on advisor mirrors only (retro-analysis grade, no extra file). */
+    capture: z.ZodDefault<z.ZodEnum<["full", "mirrors"]>>;
+    judge: z.ZodOptional<z.ZodObject<{
+        /** Judge model for the sampled phase-2 quality pass. Refused at runtime
+         *  if unpriced (dream-engine pattern) — the budget cap must be
+         *  enforceable. */
+        model: z.ZodDefault<z.ZodString>;
+        /** Fraction of ungraded turns escalated to the judge. */
+        sample_rate: z.ZodDefault<z.ZodNumber>;
+        /** Per-report spend cap. 0 (default) = deterministic-only reports. */
+        budget_usd: z.ZodDefault<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        model: string;
+        budget_usd: number;
+        sample_rate: number;
+    }, {
+        model?: string | undefined;
+        budget_usd?: number | undefined;
+        sample_rate?: number | undefined;
+    }>>;
+    /** "user" additionally registers this harness in the global registry at run time. */
+    scope: z.ZodDefault<z.ZodEnum<["harness", "user"]>>;
+    /** Publish redacted distilled findings to the wiki/Thredz at report time. */
+    share: z.ZodDefault<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    enabled: boolean;
+    scope: "harness" | "user";
+    capture: "full" | "mirrors";
+    share: boolean;
+    judge?: {
+        model: string;
+        budget_usd: number;
+        sample_rate: number;
+    } | undefined;
+}, {
+    judge?: {
+        model?: string | undefined;
+        budget_usd?: number | undefined;
+        sample_rate?: number | undefined;
+    } | undefined;
+    enabled?: boolean | undefined;
+    scope?: "harness" | "user" | undefined;
+    capture?: "full" | "mirrors" | undefined;
+    share?: boolean | undefined;
+}>>;
 /**
  * Item 1 (G30) — the `expose:` block: project THIS compiled bundle's turn
  * function as an MCP server so Claude Code / IDEs / other CrewHaus runtimes
@@ -3226,6 +3293,54 @@ declare const cliSchema: z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     }>>;
+    watchme: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** "full" = write the .events.jsonl trace sibling; "mirrors" = rely on the
+         *  default-on advisor mirrors only (retro-analysis grade, no extra file). */
+        capture: z.ZodDefault<z.ZodEnum<["full", "mirrors"]>>;
+        judge: z.ZodOptional<z.ZodObject<{
+            /** Judge model for the sampled phase-2 quality pass. Refused at runtime
+             *  if unpriced (dream-engine pattern) — the budget cap must be
+             *  enforceable. */
+            model: z.ZodDefault<z.ZodString>;
+            /** Fraction of ungraded turns escalated to the judge. */
+            sample_rate: z.ZodDefault<z.ZodNumber>;
+            /** Per-report spend cap. 0 (default) = deterministic-only reports. */
+            budget_usd: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        }, {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        }>>;
+        /** "user" additionally registers this harness in the global registry at run time. */
+        scope: z.ZodDefault<z.ZodEnum<["harness", "user"]>>;
+        /** Publish redacted distilled findings to the wiki/Thredz at report time. */
+        share: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    }, {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    }>>;
     cli: z.ZodOptional<z.ZodObject<{
         banner: z.ZodOptional<z.ZodObject<{
             taglineMode: z.ZodDefault<z.ZodEnum<["static", "random"]>>;
@@ -3659,6 +3774,17 @@ declare const cliSchema: z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    } | undefined;
     chains?: {
         kind: "evm";
         id: string;
@@ -3983,6 +4109,17 @@ declare const cliSchema: z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    } | undefined;
     chains?: {
         kind: "evm";
         id: string;
@@ -6193,14 +6330,17 @@ declare const whatsappChannelSchema: z.ZodObject<{
     phoneNumberId: z.ZodString;
     accessToken: z.ZodString;
     appSecret: z.ZodString;
+    verifyToken: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     phoneNumberId: string;
     accessToken: string;
     appSecret: string;
+    verifyToken?: string | undefined;
 }, {
     phoneNumberId: string;
     accessToken: string;
     appSecret: string;
+    verifyToken?: string | undefined;
 }>;
 declare const imessageChannelSchema: z.ZodObject<{
     chatDbPath: z.ZodOptional<z.ZodString>;
@@ -7377,14 +7517,17 @@ declare const channelSchema: z.ZodObject<{
             phoneNumberId: z.ZodString;
             accessToken: z.ZodString;
             appSecret: z.ZodString;
+            verifyToken: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         }, {
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         }>>;
         imessage: z.ZodOptional<z.ZodObject<{
             chatDbPath: z.ZodOptional<z.ZodString>;
@@ -7415,6 +7558,7 @@ declare const channelSchema: z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -7439,6 +7583,7 @@ declare const channelSchema: z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -7463,6 +7608,7 @@ declare const channelSchema: z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -7487,6 +7633,7 @@ declare const channelSchema: z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -7496,9 +7643,9 @@ declare const channelSchema: z.ZodObject<{
     routing: z.ZodObject<{
         sessionKey: z.ZodEnum<["thread", "user", "channel"]>;
     }, "strict", z.ZodTypeAny, {
-        sessionKey: "thread" | "user" | "channel";
+        sessionKey: "user" | "thread" | "channel";
     }, {
-        sessionKey: "thread" | "user" | "channel";
+        sessionKey: "user" | "thread" | "channel";
     }>;
     mcp_servers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
         transport: z.ZodLiteral<"stdio">;
@@ -8346,6 +8493,54 @@ declare const channelSchema: z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     }>>;
+    watchme: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** "full" = write the .events.jsonl trace sibling; "mirrors" = rely on the
+         *  default-on advisor mirrors only (retro-analysis grade, no extra file). */
+        capture: z.ZodDefault<z.ZodEnum<["full", "mirrors"]>>;
+        judge: z.ZodOptional<z.ZodObject<{
+            /** Judge model for the sampled phase-2 quality pass. Refused at runtime
+             *  if unpriced (dream-engine pattern) — the budget cap must be
+             *  enforceable. */
+            model: z.ZodDefault<z.ZodString>;
+            /** Fraction of ungraded turns escalated to the judge. */
+            sample_rate: z.ZodDefault<z.ZodNumber>;
+            /** Per-report spend cap. 0 (default) = deterministic-only reports. */
+            budget_usd: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        }, {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        }>>;
+        /** "user" additionally registers this harness in the global registry at run time. */
+        scope: z.ZodDefault<z.ZodEnum<["harness", "user"]>>;
+        /** Publish redacted distilled findings to the wiki/Thredz at report time. */
+        share: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    }, {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    }>>;
     heartbeat: z.ZodOptional<z.ZodObject<{
         every: z.ZodString;
         instructions: z.ZodString;
@@ -8514,7 +8709,7 @@ declare const channelSchema: z.ZodObject<{
     }>>;
 }, "strict", z.ZodTypeAny, {
     routing: {
-        sessionKey: "thread" | "user" | "channel";
+        sessionKey: "user" | "thread" | "channel";
     };
     name: string;
     target: "channel";
@@ -8610,6 +8805,7 @@ declare const channelSchema: z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -8814,6 +9010,17 @@ declare const channelSchema: z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    } | undefined;
     chains?: {
         kind: "evm";
         id: string;
@@ -8871,7 +9078,7 @@ declare const channelSchema: z.ZodObject<{
     } | undefined;
 }, {
     routing: {
-        sessionKey: "thread" | "user" | "channel";
+        sessionKey: "user" | "thread" | "channel";
     };
     name: string;
     target: "channel";
@@ -8967,6 +9174,7 @@ declare const channelSchema: z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -9171,6 +9379,17 @@ declare const channelSchema: z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    } | undefined;
     chains?: {
         kind: "evm";
         id: string;
@@ -9250,9 +9469,28 @@ declare const graphNodeSchema: z.ZodObject<{
     tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     tool_config: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnknown>, Record<string, unknown>, Record<string, unknown>>>;
     /**
-     * When true, the node calls `ctx.requestApproval(prompt)` before
-     * returning. The engine pauses, persists a checkpoint, and waits for
-     * `resume(checkpointId, decision)` from the operator/CLI.
+     * A human approval gate on this node, and a PRE-condition: the node
+     * calls `ctx.requestApproval(prompt)` BEFORE its model turn, so the
+     * prompt is answered against the UPSTREAM state (which the `hitl_pause`
+     * event and the bundle's pause report both print) and no tokens are
+     * spent until the human answers. The engine pauses, persists a
+     * checkpoint, and waits for `resume(checkpointId, decision)` from the
+     * operator/CLI; the resumed run replays this node from the top and
+     * makes its FIRST model call.
+     *
+     * The decision string is recorded at `state["<node>_decision"]`, which
+     * every downstream node reads as part of the upstream state. (NOTE:
+     * `edges[].when.key` cannot name it yet — that key must name a declared
+     * node; see the `graphEdgeWhenSchema` note below.) A rejecting decision
+     * — `reject`, `no`, `deny`, `decline`, `abort`, `cancel`, `stop`, `veto`
+     * (trimmed, case-insensitive) — cancels this node's turn entirely, so
+     * the node records only its decision and no output; any other string,
+     * including free text, approves it. To halt the run on a rejection,
+     * guard the node's outgoing edge with `when: { key: <node>, exists:
+     * true }` — a cancelled node records no output, so no edge matches.
+     *
+     * To have a human approve a node's OWN output, put the gate on the
+     * DOWNSTREAM node: its upstream state is exactly that output.
      */
     hitl: z.ZodOptional<z.ZodObject<{
         prompt: z.ZodString;
@@ -9359,9 +9597,28 @@ declare const graphAnyNodeSchema: z.ZodUnion<[z.ZodObject<{
     tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     tool_config: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnknown>, Record<string, unknown>, Record<string, unknown>>>;
     /**
-     * When true, the node calls `ctx.requestApproval(prompt)` before
-     * returning. The engine pauses, persists a checkpoint, and waits for
-     * `resume(checkpointId, decision)` from the operator/CLI.
+     * A human approval gate on this node, and a PRE-condition: the node
+     * calls `ctx.requestApproval(prompt)` BEFORE its model turn, so the
+     * prompt is answered against the UPSTREAM state (which the `hitl_pause`
+     * event and the bundle's pause report both print) and no tokens are
+     * spent until the human answers. The engine pauses, persists a
+     * checkpoint, and waits for `resume(checkpointId, decision)` from the
+     * operator/CLI; the resumed run replays this node from the top and
+     * makes its FIRST model call.
+     *
+     * The decision string is recorded at `state["<node>_decision"]`, which
+     * every downstream node reads as part of the upstream state. (NOTE:
+     * `edges[].when.key` cannot name it yet — that key must name a declared
+     * node; see the `graphEdgeWhenSchema` note below.) A rejecting decision
+     * — `reject`, `no`, `deny`, `decline`, `abort`, `cancel`, `stop`, `veto`
+     * (trimmed, case-insensitive) — cancels this node's turn entirely, so
+     * the node records only its decision and no output; any other string,
+     * including free text, approves it. To halt the run on a rejection,
+     * guard the node's outgoing edge with `when: { key: <node>, exists:
+     * true }` — a cancelled node records no output, so no edge matches.
+     *
+     * To have a human approve a node's OWN output, put the gate on the
+     * DOWNSTREAM node: its upstream state is exactly that output.
      */
     hitl: z.ZodOptional<z.ZodObject<{
         prompt: z.ZodString;
@@ -9447,8 +9704,16 @@ declare const graphAnyNodeSchema: z.ZodUnion<[z.ZodObject<{
  *   - `equals` — take the edge when `state[key] === equals` (string/number/
  *     boolean strict equality).
  *   - `exists: true` — take the edge when `state[key] !== undefined` (the
- *     node has produced output; pairs with hitl `_decision` gating in a
- *     follow-up).
+ *     node has produced output — which, for a `hitl:` node, is FALSE when
+ *     the operator rejected the gate, since a rejected node records only
+ *     `state["<node>_decision"]`).
+ *
+ * GAP (unchanged by the pre-condition HITL fix): `key` may not yet name a
+ * hitl node's `<node>_decision` record — the cross-check below pins it to a
+ * declared node name, so a rejection can be observed via `exists` on the
+ * node itself but not matched on the decision string. Widening it means
+ * touching the three mirrored checks (this one, ir-passes' graph
+ * wellformedness, target-graph's validateGraph).
  *
  * Lowered to `IrGraphEdge.when` and emitted as a graph-engine
  * `EdgeCondition` (`(state) => state[key] === equals` / `!== undefined`).
@@ -9546,9 +9811,28 @@ declare const graphSchema: z.ZodObject<{
         tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         tool_config: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnknown>, Record<string, unknown>, Record<string, unknown>>>;
         /**
-         * When true, the node calls `ctx.requestApproval(prompt)` before
-         * returning. The engine pauses, persists a checkpoint, and waits for
-         * `resume(checkpointId, decision)` from the operator/CLI.
+         * A human approval gate on this node, and a PRE-condition: the node
+         * calls `ctx.requestApproval(prompt)` BEFORE its model turn, so the
+         * prompt is answered against the UPSTREAM state (which the `hitl_pause`
+         * event and the bundle's pause report both print) and no tokens are
+         * spent until the human answers. The engine pauses, persists a
+         * checkpoint, and waits for `resume(checkpointId, decision)` from the
+         * operator/CLI; the resumed run replays this node from the top and
+         * makes its FIRST model call.
+         *
+         * The decision string is recorded at `state["<node>_decision"]`, which
+         * every downstream node reads as part of the upstream state. (NOTE:
+         * `edges[].when.key` cannot name it yet — that key must name a declared
+         * node; see the `graphEdgeWhenSchema` note below.) A rejecting decision
+         * — `reject`, `no`, `deny`, `decline`, `abort`, `cancel`, `stop`, `veto`
+         * (trimmed, case-insensitive) — cancels this node's turn entirely, so
+         * the node records only its decision and no output; any other string,
+         * including free text, approves it. To halt the run on a rejection,
+         * guard the node's outgoing edge with `when: { key: <node>, exists:
+         * true }` — a cancelled node records no output, so no edge matches.
+         *
+         * To have a human approve a node's OWN output, put the gate on the
+         * DOWNSTREAM node: its upstream state is exactly that output.
          */
         hitl: z.ZodOptional<z.ZodObject<{
             prompt: z.ZodString;
@@ -11067,6 +11351,56 @@ declare const managedSchema: z.ZodObject<{
         on_fail?: "retry" | "halt" | "note" | undefined;
         max_retries?: number | undefined;
     }>>;
+    feedback: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        modality: z.ZodDefault<z.ZodEnum<["binary", "stars", "scale", "comment"]>>;
+        scale: z.ZodOptional<z.ZodObject<{
+            min: z.ZodNumber;
+            max: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            min: number;
+            max: number;
+        }, {
+            min: number;
+            max: number;
+        }>>;
+        storage: z.ZodOptional<z.ZodObject<{
+            location: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            location: string;
+        }, {
+            location: string;
+        }>>;
+        autoDistill: z.ZodOptional<z.ZodBoolean>;
+        exitPrompt: z.ZodOptional<z.ZodBoolean>;
+        channelReactions: z.ZodOptional<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        modality: "binary" | "stars" | "scale" | "comment";
+        enabled?: boolean | undefined;
+        scale?: {
+            min: number;
+            max: number;
+        } | undefined;
+        storage?: {
+            location: string;
+        } | undefined;
+        autoDistill?: boolean | undefined;
+        exitPrompt?: boolean | undefined;
+        channelReactions?: boolean | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        scale?: {
+            min: number;
+            max: number;
+        } | undefined;
+        modality?: "binary" | "stars" | "scale" | "comment" | undefined;
+        storage?: {
+            location: string;
+        } | undefined;
+        autoDistill?: boolean | undefined;
+        exitPrompt?: boolean | undefined;
+        channelReactions?: boolean | undefined;
+    }>>;
     memory: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
         backend: z.ZodOptional<z.ZodEnum<["file", "thredz"]>>;
@@ -11508,6 +11842,54 @@ declare const managedSchema: z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     }>>;
+    watchme: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** "full" = write the .events.jsonl trace sibling; "mirrors" = rely on the
+         *  default-on advisor mirrors only (retro-analysis grade, no extra file). */
+        capture: z.ZodDefault<z.ZodEnum<["full", "mirrors"]>>;
+        judge: z.ZodOptional<z.ZodObject<{
+            /** Judge model for the sampled phase-2 quality pass. Refused at runtime
+             *  if unpriced (dream-engine pattern) — the budget cap must be
+             *  enforceable. */
+            model: z.ZodDefault<z.ZodString>;
+            /** Fraction of ungraded turns escalated to the judge. */
+            sample_rate: z.ZodDefault<z.ZodNumber>;
+            /** Per-report spend cap. 0 (default) = deterministic-only reports. */
+            budget_usd: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        }, {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        }>>;
+        /** "user" additionally registers this harness in the global registry at run time. */
+        scope: z.ZodDefault<z.ZodEnum<["harness", "user"]>>;
+        /** Publish redacted distilled findings to the wiki/Thredz at report time. */
+        share: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    }, {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    }>>;
     schedule: z.ZodOptional<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
         kind: z.ZodLiteral<"cron">;
         cron: z.ZodString;
@@ -11708,6 +12090,20 @@ declare const managedSchema: z.ZodObject<{
         on_fail?: "retry" | "halt" | "note" | undefined;
         max_retries?: number | undefined;
     } | undefined;
+    feedback?: {
+        modality: "binary" | "stars" | "scale" | "comment";
+        enabled?: boolean | undefined;
+        scale?: {
+            min: number;
+            max: number;
+        } | undefined;
+        storage?: {
+            location: string;
+        } | undefined;
+        autoDistill?: boolean | undefined;
+        exitPrompt?: boolean | undefined;
+        channelReactions?: boolean | undefined;
+    } | undefined;
     memory?: {
         backend?: "file" | "thredz" | undefined;
         enabled?: boolean | undefined;
@@ -11785,6 +12181,17 @@ declare const managedSchema: z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    } | undefined;
     schedule?: {
         kind: "cron";
         cron: string;
@@ -11962,6 +12369,20 @@ declare const managedSchema: z.ZodObject<{
         on_fail?: "retry" | "halt" | "note" | undefined;
         max_retries?: number | undefined;
     } | undefined;
+    feedback?: {
+        enabled?: boolean | undefined;
+        scale?: {
+            min: number;
+            max: number;
+        } | undefined;
+        modality?: "binary" | "stars" | "scale" | "comment" | undefined;
+        storage?: {
+            location: string;
+        } | undefined;
+        autoDistill?: boolean | undefined;
+        exitPrompt?: boolean | undefined;
+        channelReactions?: boolean | undefined;
+    } | undefined;
     memory?: {
         backend?: "file" | "thredz" | undefined;
         enabled?: boolean | undefined;
@@ -12039,6 +12460,17 @@ declare const managedSchema: z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    } | undefined;
     schedule?: {
         kind: "cron";
         cron: string;
@@ -17733,12 +18165,29 @@ declare const browserDriverSchema: z.ZodObject<{
         height?: number | undefined;
     }>>;
     startUrl: z.ZodOptional<z.ZodString>;
+    /**
+     * SECURITY — opt in to private/loopback navigation targets. Default false:
+     * the Navigate tool refuses private/loopback/link-local/metadata hosts
+     * before `driver.goto`, and the chromium backend routes every request
+     * through a DNS-pinning proxy that refuses the same floor at the
+     * connection layer. Together they stop a prompt-injected page from
+     * reaching the host's own services.
+     *
+     * Set true ONLY when the browser legitimately must reach a private target
+     * the operator controls AND the page content is trusted — an intranet app
+     * under test, or a locally-served fixture page (what the browser runtime
+     * smoke does). It relaxes BOTH layers for this spec, so it stays a
+     * per-spec reviewed decision and never a global switch. The http/https
+     * scheme allowlist is NOT waived.
+     */
+    allowPrivateTargets: z.ZodDefault<z.ZodBoolean>;
 }, "strict", z.ZodTypeAny, {
     backend: "host" | "chromium" | "remote";
     viewport: {
         width: number;
         height: number;
     };
+    allowPrivateTargets: boolean;
     startUrl?: string | undefined;
 }, {
     backend?: "host" | "chromium" | "remote" | undefined;
@@ -17747,6 +18196,7 @@ declare const browserDriverSchema: z.ZodObject<{
         height?: number | undefined;
     } | undefined;
     startUrl?: string | undefined;
+    allowPrivateTargets?: boolean | undefined;
 }>;
 declare const browserSchema: z.ZodObject<{
     name: z.ZodString;
@@ -18023,12 +18473,29 @@ declare const browserSchema: z.ZodObject<{
             height?: number | undefined;
         }>>;
         startUrl: z.ZodOptional<z.ZodString>;
+        /**
+         * SECURITY — opt in to private/loopback navigation targets. Default false:
+         * the Navigate tool refuses private/loopback/link-local/metadata hosts
+         * before `driver.goto`, and the chromium backend routes every request
+         * through a DNS-pinning proxy that refuses the same floor at the
+         * connection layer. Together they stop a prompt-injected page from
+         * reaching the host's own services.
+         *
+         * Set true ONLY when the browser legitimately must reach a private target
+         * the operator controls AND the page content is trusted — an intranet app
+         * under test, or a locally-served fixture page (what the browser runtime
+         * smoke does). It relaxes BOTH layers for this spec, so it stays a
+         * per-spec reviewed decision and never a global switch. The http/https
+         * scheme allowlist is NOT waived.
+         */
+        allowPrivateTargets: z.ZodDefault<z.ZodBoolean>;
     }, "strict", z.ZodTypeAny, {
         backend: "host" | "chromium" | "remote";
         viewport: {
             width: number;
             height: number;
         };
+        allowPrivateTargets: boolean;
         startUrl?: string | undefined;
     }, {
         backend?: "host" | "chromium" | "remote" | undefined;
@@ -18037,6 +18504,7 @@ declare const browserSchema: z.ZodObject<{
             height?: number | undefined;
         } | undefined;
         startUrl?: string | undefined;
+        allowPrivateTargets?: boolean | undefined;
     }>>;
     /** Vision-grounding model. Defaults to the agent's primary model. */
     groundingModel: z.ZodOptional<z.ZodString>;
@@ -18345,6 +18813,7 @@ declare const browserSchema: z.ZodObject<{
             width: number;
             height: number;
         };
+        allowPrivateTargets: boolean;
         startUrl?: string | undefined;
     };
     tools?: string[] | undefined;
@@ -18537,6 +19006,7 @@ declare const browserSchema: z.ZodObject<{
             height?: number | undefined;
         } | undefined;
         startUrl?: string | undefined;
+        allowPrivateTargets?: boolean | undefined;
     } | undefined;
     groundingModel?: string | undefined;
 }>;
@@ -21150,6 +21620,54 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     }>>;
+    watchme: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** "full" = write the .events.jsonl trace sibling; "mirrors" = rely on the
+         *  default-on advisor mirrors only (retro-analysis grade, no extra file). */
+        capture: z.ZodDefault<z.ZodEnum<["full", "mirrors"]>>;
+        judge: z.ZodOptional<z.ZodObject<{
+            /** Judge model for the sampled phase-2 quality pass. Refused at runtime
+             *  if unpriced (dream-engine pattern) — the budget cap must be
+             *  enforceable. */
+            model: z.ZodDefault<z.ZodString>;
+            /** Fraction of ungraded turns escalated to the judge. */
+            sample_rate: z.ZodDefault<z.ZodNumber>;
+            /** Per-report spend cap. 0 (default) = deterministic-only reports. */
+            budget_usd: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        }, {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        }>>;
+        /** "user" additionally registers this harness in the global registry at run time. */
+        scope: z.ZodDefault<z.ZodEnum<["harness", "user"]>>;
+        /** Publish redacted distilled findings to the wiki/Thredz at report time. */
+        share: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    }, {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    }>>;
     cli: z.ZodOptional<z.ZodObject<{
         banner: z.ZodOptional<z.ZodObject<{
             taglineMode: z.ZodDefault<z.ZodEnum<["static", "random"]>>;
@@ -21583,6 +22101,17 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    } | undefined;
     chains?: {
         kind: "evm";
         id: string;
@@ -21907,6 +22436,17 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    } | undefined;
     chains?: {
         kind: "evm";
         id: string;
@@ -23741,14 +24281,17 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             phoneNumberId: z.ZodString;
             accessToken: z.ZodString;
             appSecret: z.ZodString;
+            verifyToken: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         }, {
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         }>>;
         imessage: z.ZodOptional<z.ZodObject<{
             chatDbPath: z.ZodOptional<z.ZodString>;
@@ -23779,6 +24322,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -23803,6 +24347,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -23827,6 +24372,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -23851,6 +24397,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -23860,9 +24407,9 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
     routing: z.ZodObject<{
         sessionKey: z.ZodEnum<["thread", "user", "channel"]>;
     }, "strict", z.ZodTypeAny, {
-        sessionKey: "thread" | "user" | "channel";
+        sessionKey: "user" | "thread" | "channel";
     }, {
-        sessionKey: "thread" | "user" | "channel";
+        sessionKey: "user" | "thread" | "channel";
     }>;
     mcp_servers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<"transport", [z.ZodObject<{
         transport: z.ZodLiteral<"stdio">;
@@ -24710,6 +25257,54 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     }>>;
+    watchme: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** "full" = write the .events.jsonl trace sibling; "mirrors" = rely on the
+         *  default-on advisor mirrors only (retro-analysis grade, no extra file). */
+        capture: z.ZodDefault<z.ZodEnum<["full", "mirrors"]>>;
+        judge: z.ZodOptional<z.ZodObject<{
+            /** Judge model for the sampled phase-2 quality pass. Refused at runtime
+             *  if unpriced (dream-engine pattern) — the budget cap must be
+             *  enforceable. */
+            model: z.ZodDefault<z.ZodString>;
+            /** Fraction of ungraded turns escalated to the judge. */
+            sample_rate: z.ZodDefault<z.ZodNumber>;
+            /** Per-report spend cap. 0 (default) = deterministic-only reports. */
+            budget_usd: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        }, {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        }>>;
+        /** "user" additionally registers this harness in the global registry at run time. */
+        scope: z.ZodDefault<z.ZodEnum<["harness", "user"]>>;
+        /** Publish redacted distilled findings to the wiki/Thredz at report time. */
+        share: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    }, {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    }>>;
     heartbeat: z.ZodOptional<z.ZodObject<{
         every: z.ZodString;
         instructions: z.ZodString;
@@ -24878,7 +25473,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
     }>>;
 }, "strict", z.ZodTypeAny, {
     routing: {
-        sessionKey: "thread" | "user" | "channel";
+        sessionKey: "user" | "thread" | "channel";
     };
     name: string;
     target: "channel";
@@ -24974,6 +25569,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -25178,6 +25774,17 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    } | undefined;
     chains?: {
         kind: "evm";
         id: string;
@@ -25235,7 +25842,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
     } | undefined;
 }, {
     routing: {
-        sessionKey: "thread" | "user" | "channel";
+        sessionKey: "user" | "thread" | "channel";
     };
     name: string;
     target: "channel";
@@ -25331,6 +25938,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             phoneNumberId: string;
             accessToken: string;
             appSecret: string;
+            verifyToken?: string | undefined;
         } | undefined;
         imessage?: {
             chatDbPath?: string | undefined;
@@ -25535,6 +26143,17 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    } | undefined;
     chains?: {
         kind: "evm";
         id: string;
@@ -25619,9 +26238,28 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
         tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         tool_config: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnknown>, Record<string, unknown>, Record<string, unknown>>>;
         /**
-         * When true, the node calls `ctx.requestApproval(prompt)` before
-         * returning. The engine pauses, persists a checkpoint, and waits for
-         * `resume(checkpointId, decision)` from the operator/CLI.
+         * A human approval gate on this node, and a PRE-condition: the node
+         * calls `ctx.requestApproval(prompt)` BEFORE its model turn, so the
+         * prompt is answered against the UPSTREAM state (which the `hitl_pause`
+         * event and the bundle's pause report both print) and no tokens are
+         * spent until the human answers. The engine pauses, persists a
+         * checkpoint, and waits for `resume(checkpointId, decision)` from the
+         * operator/CLI; the resumed run replays this node from the top and
+         * makes its FIRST model call.
+         *
+         * The decision string is recorded at `state["<node>_decision"]`, which
+         * every downstream node reads as part of the upstream state. (NOTE:
+         * `edges[].when.key` cannot name it yet — that key must name a declared
+         * node; see the `graphEdgeWhenSchema` note below.) A rejecting decision
+         * — `reject`, `no`, `deny`, `decline`, `abort`, `cancel`, `stop`, `veto`
+         * (trimmed, case-insensitive) — cancels this node's turn entirely, so
+         * the node records only its decision and no output; any other string,
+         * including free text, approves it. To halt the run on a rejection,
+         * guard the node's outgoing edge with `when: { key: <node>, exists:
+         * true }` — a cancelled node records no output, so no edge matches.
+         *
+         * To have a human approve a node's OWN output, put the gate on the
+         * DOWNSTREAM node: its upstream state is exactly that output.
          */
         hitl: z.ZodOptional<z.ZodObject<{
             prompt: z.ZodString;
@@ -27114,6 +27752,56 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
         on_fail?: "retry" | "halt" | "note" | undefined;
         max_retries?: number | undefined;
     }>>;
+    feedback: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        modality: z.ZodDefault<z.ZodEnum<["binary", "stars", "scale", "comment"]>>;
+        scale: z.ZodOptional<z.ZodObject<{
+            min: z.ZodNumber;
+            max: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            min: number;
+            max: number;
+        }, {
+            min: number;
+            max: number;
+        }>>;
+        storage: z.ZodOptional<z.ZodObject<{
+            location: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            location: string;
+        }, {
+            location: string;
+        }>>;
+        autoDistill: z.ZodOptional<z.ZodBoolean>;
+        exitPrompt: z.ZodOptional<z.ZodBoolean>;
+        channelReactions: z.ZodOptional<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        modality: "binary" | "stars" | "scale" | "comment";
+        enabled?: boolean | undefined;
+        scale?: {
+            min: number;
+            max: number;
+        } | undefined;
+        storage?: {
+            location: string;
+        } | undefined;
+        autoDistill?: boolean | undefined;
+        exitPrompt?: boolean | undefined;
+        channelReactions?: boolean | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        scale?: {
+            min: number;
+            max: number;
+        } | undefined;
+        modality?: "binary" | "stars" | "scale" | "comment" | undefined;
+        storage?: {
+            location: string;
+        } | undefined;
+        autoDistill?: boolean | undefined;
+        exitPrompt?: boolean | undefined;
+        channelReactions?: boolean | undefined;
+    }>>;
     memory: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
         backend: z.ZodOptional<z.ZodEnum<["file", "thredz"]>>;
@@ -27555,6 +28243,54 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     }>>;
+    watchme: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** "full" = write the .events.jsonl trace sibling; "mirrors" = rely on the
+         *  default-on advisor mirrors only (retro-analysis grade, no extra file). */
+        capture: z.ZodDefault<z.ZodEnum<["full", "mirrors"]>>;
+        judge: z.ZodOptional<z.ZodObject<{
+            /** Judge model for the sampled phase-2 quality pass. Refused at runtime
+             *  if unpriced (dream-engine pattern) — the budget cap must be
+             *  enforceable. */
+            model: z.ZodDefault<z.ZodString>;
+            /** Fraction of ungraded turns escalated to the judge. */
+            sample_rate: z.ZodDefault<z.ZodNumber>;
+            /** Per-report spend cap. 0 (default) = deterministic-only reports. */
+            budget_usd: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        }, {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        }>>;
+        /** "user" additionally registers this harness in the global registry at run time. */
+        scope: z.ZodDefault<z.ZodEnum<["harness", "user"]>>;
+        /** Publish redacted distilled findings to the wiki/Thredz at report time. */
+        share: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    }, {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    }>>;
     schedule: z.ZodOptional<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
         kind: z.ZodLiteral<"cron">;
         cron: z.ZodString;
@@ -27755,6 +28491,20 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
         on_fail?: "retry" | "halt" | "note" | undefined;
         max_retries?: number | undefined;
     } | undefined;
+    feedback?: {
+        modality: "binary" | "stars" | "scale" | "comment";
+        enabled?: boolean | undefined;
+        scale?: {
+            min: number;
+            max: number;
+        } | undefined;
+        storage?: {
+            location: string;
+        } | undefined;
+        autoDistill?: boolean | undefined;
+        exitPrompt?: boolean | undefined;
+        channelReactions?: boolean | undefined;
+    } | undefined;
     memory?: {
         backend?: "file" | "thredz" | undefined;
         enabled?: boolean | undefined;
@@ -27832,6 +28582,17 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        enabled: boolean;
+        scope: "harness" | "user";
+        capture: "full" | "mirrors";
+        share: boolean;
+        judge?: {
+            model: string;
+            budget_usd: number;
+            sample_rate: number;
+        } | undefined;
+    } | undefined;
     schedule?: {
         kind: "cron";
         cron: string;
@@ -28009,6 +28770,20 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
         on_fail?: "retry" | "halt" | "note" | undefined;
         max_retries?: number | undefined;
     } | undefined;
+    feedback?: {
+        enabled?: boolean | undefined;
+        scale?: {
+            min: number;
+            max: number;
+        } | undefined;
+        modality?: "binary" | "stars" | "scale" | "comment" | undefined;
+        storage?: {
+            location: string;
+        } | undefined;
+        autoDistill?: boolean | undefined;
+        exitPrompt?: boolean | undefined;
+        channelReactions?: boolean | undefined;
+    } | undefined;
     memory?: {
         backend?: "file" | "thredz" | undefined;
         enabled?: boolean | undefined;
@@ -28086,6 +28861,17 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             endpoint?: string | undefined;
         } | undefined;
     } | undefined;
+    watchme?: {
+        judge?: {
+            model?: string | undefined;
+            budget_usd?: number | undefined;
+            sample_rate?: number | undefined;
+        } | undefined;
+        enabled?: boolean | undefined;
+        scope?: "harness" | "user" | undefined;
+        capture?: "full" | "mirrors" | undefined;
+        share?: boolean | undefined;
+    } | undefined;
     schedule?: {
         kind: "cron";
         cron: string;
@@ -33406,12 +34192,29 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             height?: number | undefined;
         }>>;
         startUrl: z.ZodOptional<z.ZodString>;
+        /**
+         * SECURITY — opt in to private/loopback navigation targets. Default false:
+         * the Navigate tool refuses private/loopback/link-local/metadata hosts
+         * before `driver.goto`, and the chromium backend routes every request
+         * through a DNS-pinning proxy that refuses the same floor at the
+         * connection layer. Together they stop a prompt-injected page from
+         * reaching the host's own services.
+         *
+         * Set true ONLY when the browser legitimately must reach a private target
+         * the operator controls AND the page content is trusted — an intranet app
+         * under test, or a locally-served fixture page (what the browser runtime
+         * smoke does). It relaxes BOTH layers for this spec, so it stays a
+         * per-spec reviewed decision and never a global switch. The http/https
+         * scheme allowlist is NOT waived.
+         */
+        allowPrivateTargets: z.ZodDefault<z.ZodBoolean>;
     }, "strict", z.ZodTypeAny, {
         backend: "host" | "chromium" | "remote";
         viewport: {
             width: number;
             height: number;
         };
+        allowPrivateTargets: boolean;
         startUrl?: string | undefined;
     }, {
         backend?: "host" | "chromium" | "remote" | undefined;
@@ -33420,6 +34223,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             height?: number | undefined;
         } | undefined;
         startUrl?: string | undefined;
+        allowPrivateTargets?: boolean | undefined;
     }>>;
     /** Vision-grounding model. Defaults to the agent's primary model. */
     groundingModel: z.ZodOptional<z.ZodString>;
@@ -33728,6 +34532,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             width: number;
             height: number;
         };
+        allowPrivateTargets: boolean;
         startUrl?: string | undefined;
     };
     tools?: string[] | undefined;
@@ -33920,6 +34725,7 @@ export declare const Spec: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
             height?: number | undefined;
         } | undefined;
         startUrl?: string | undefined;
+        allowPrivateTargets?: boolean | undefined;
     } | undefined;
     groundingModel?: string | undefined;
 }>, z.ZodObject<{
@@ -35054,6 +35860,9 @@ export type SpecBudgetBlock = z.infer<typeof budgetBlock>;
 /** Ops item 37 + Loop contract 0.4 (Batch C, G26) — the cross-cutting
  *  `observability:` block (slo + trace/metrics/cost/alerts/incidents/otel). */
 export type SpecObservabilityBlock = z.infer<typeof observabilityBlock>;
+/** "Watch me" — the observe-and-learn `watchme:` block, carried on
+ *  cli/channel/managed (design/watch-me.md §4.1). */
+export type SpecWatchmeBlock = z.infer<typeof watchmeBlock>;
 export type SpecSecurityBlock = z.infer<typeof securityBlock>;
 export type SpecFeedbackBlock = z.infer<typeof feedbackBlock>;
 export type SpecMemoryBlock = z.infer<typeof memoryBlock>;