@harness-control/protocol 0.4.0 → 0.4.2

package/README.md

@@ -14,3 +14,13 @@ const message = parseHcpMessage(JSON.parse(wireMessage));
 Use `@harness-control/protocol/schema.json` for validators in Python or other languages. Use `@harness-control/sdk` for app-side commands and request correlation, and `@harness-control/runner` on the local machine.
 
 The package includes `hcp-protocol-conformance` and conformance fixtures. See [HCP documentation](https://github.com/qazisaad/harness-control-protocol#readme) for wire semantics and compatibility. Package versions and the wire protocol version (`hcp.v0`) are separate.
+
+### MCP review extension v1
+
+HCP owns `io.harness-control/review-v1`. Tool metadata under this key contains a policy (`always`, or `argument` with a name and allowed values). Call metadata under the same key contains `{request_id, action_json}`. These are review hints and a bound grant, not independent authorization: the control plane still validates its current user, tool policy, lease, decision and dispatch claim.
+
+Import `mcpReviewActionSchema`, `mcpReviewGrantSchema`, `mcpReviewPolicySchema`, `mcpReviewActionBytes`, and `hashMcpReviewAction` from `@harness-control/protocol`. Action JSON is a closed `{kind: "mcp_tool", attachment_name, tool_name, arguments}` object. The immutable action string is limited to 65,536 UTF-8 bytes; the hash is lowercase hexadecimal SHA-256 of those exact bytes, without whitespace or Unicode normalization. Do not parse and reserialize it before hashing or forwarding.
+
+Non-TypeScript consumers use `@harness-control/protocol/mcp-review.json` and the shared `mcp-review-fixtures.json`. In addition to JSON Schema validation, enforce the manifest's UTF-8 byte limit and validate the grant's embedded action JSON against the action schema. The versioned key intentionally has no application-specific alias.
+
+Durable continuation is an adapter capability (`durableMcpContinuation: true`), not a restriction in the persisted operation contract. Only adapters that can restore their native execution context should declare it. The built-in Codex adapter currently does; other built-ins do not. Application authorization and supported-provider policy remain the control plane's responsibility. See `examples/mcp-review-consumer.mjs` for approval and restart recovery using public APIs with an independent adapter.

package/dist/accounts.d.ts

@@ -58,8 +58,8 @@ export declare const accountUsageUnavailableSchema: z.ZodObject<{
     observed_at: z.ZodISODateTime;
     reason: z.ZodEnum<{
         disabled: "disabled";
-        unsupported: "unsupported";
         unauthenticated: "unauthenticated";
+        unsupported: "unsupported";
         not_applicable: "not_applicable";
         timeout: "timeout";
         provider_error: "provider_error";
@@ -101,8 +101,8 @@ export declare const accountUsageObservationSchema: z.ZodDiscriminatedUnion<[z.Z
     observed_at: z.ZodISODateTime;
     reason: z.ZodEnum<{
         disabled: "disabled";
-        unsupported: "unsupported";
         unauthenticated: "unauthenticated";
+        unsupported: "unsupported";
         not_applicable: "not_applicable";
         timeout: "timeout";
         provider_error: "provider_error";
@@ -151,8 +151,8 @@ export declare const accountProviderReadingSchema: z.ZodObject<{
         observed_at: z.ZodISODateTime;
         reason: z.ZodEnum<{
             disabled: "disabled";
-            unsupported: "unsupported";
             unauthenticated: "unauthenticated";
+            unsupported: "unsupported";
             not_applicable: "not_applicable";
             timeout: "timeout";
             provider_error: "provider_error";
@@ -201,8 +201,8 @@ export declare const hcpAccountsSnapshotPayloadSchema: z.ZodObject<{
             observed_at: z.ZodISODateTime;
             reason: z.ZodEnum<{
                 disabled: "disabled";
-                unsupported: "unsupported";
                 unauthenticated: "unauthenticated";
+                unsupported: "unsupported";
                 not_applicable: "not_applicable";
                 timeout: "timeout";
                 provider_error: "provider_error";
@@ -250,8 +250,8 @@ export declare const accountSourceStateSchema: z.ZodObject<{
         observed_at: z.ZodISODateTime;
         reason: z.ZodEnum<{
             disabled: "disabled";
-            unsupported: "unsupported";
             unauthenticated: "unauthenticated";
+            unsupported: "unsupported";
             not_applicable: "not_applicable";
             timeout: "timeout";
             provider_error: "provider_error";

package/dist/bin/generate-json-schema.js

@@ -9,4 +9,6 @@ const schemaJson = `${JSON.stringify(createHcpMessageJsonSchema(), null, 2)}\n`;
 await mkdir(dirname(outputPath), { recursive: true });
 await writeFile(outputPath, schemaJson, "utf8");
 process.stdout.write(`${outputPath}\n`);
+const { createMcpReviewContract } = await import("../mcp-review.js");
+await writeFile(fileURLToPath(new URL("../../schemas/mcp-review.json", import.meta.url)), `${JSON.stringify(createMcpReviewContract(), null, 2)}\n`, "utf8");
 //# sourceMappingURL=generate-json-schema.js.map

package/dist/index.d.ts

@@ -6788,4 +6788,5 @@ export declare function parseLocalActionErrorPayload(input: unknown): LocalActio
 export declare function parseHcpHarnessEventPayload(input: unknown): HcpHarnessEventPayload;
 export { HcpSessionEventReducer, type HcpEventApplyResult, type HcpSnapshotApplyResult, } from "./session-reducer.js";
 export * from "./pairing.js";
+export * from "./mcp-review.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1462,6 +1462,7 @@ const inputRequestedEventDataSchema = z
     turn_id: nonEmptyStringSchema,
     prompt: z.string(),
     input_kind: z.enum(["text", "choice", "multi_choice", "form"]),
+    form_schema: z.record(z.string(), z.json()).optional(),
     choices: z
         .array(z
         .object({
@@ -1932,4 +1933,5 @@ export function parseHcpHarnessEventPayload(input) {
 }
 export { HcpSessionEventReducer, } from "./session-reducer.js";
 export * from "./pairing.js";
+export * from "./mcp-review.js";
 //# sourceMappingURL=index.js.map

package/dist/json-schema.js

@@ -26,10 +26,10 @@ function cloneJsonSchema(schema) {
 function toRootJsonSchema(schema) {
     return asJsonSchema(z.toJSONSchema(schema), "generated JSON Schema");
 }
-function toEmbeddedJsonSchema(schema) {
+function toEmbeddedJsonSchema(schema, name) {
     const jsonSchema = cloneJsonSchema(toRootJsonSchema(schema));
     delete jsonSchema.$schema;
-    delete jsonSchema.$id;
+    jsonSchema.$id = `https://schemas.harness-control.local/${HCP_VERSION}/events/${name}.schema.json`;
     return jsonSchema;
 }
 function hasMessageTypeConst(schema, messageType) {
@@ -74,13 +74,12 @@ function createHarnessEventMessageSchema(baseMessageSchema, payloadSchema) {
 function createHarnessEventMessageSchemas(baseMessageSchema) {
     const basePayloadSchema = getObjectProperty(baseMessageSchema, "payload", "harness.event message schema");
     const knownEventSchemas = KNOWN_HCP_EVENT_TYPES.map((eventType) => {
-        const dataSchema = toEmbeddedJsonSchema(knownHcpEventDataSchemas[eventType]);
+        const dataSchema = toEmbeddedJsonSchema(knownHcpEventDataSchemas[eventType], eventType);
         const payloadSchema = createHarnessEventPayloadSchema(basePayloadSchema, createEventTypeSchema(eventType), dataSchema, eventType.startsWith("local_capability.action."));
         return createHarnessEventMessageSchema(baseMessageSchema, payloadSchema);
     });
-    const extensionEventDataSchema = toEmbeddedJsonSchema(hcpExtensionEventDataSchema);
     const extensionEventSchemas = ["provider", "extension"].map((prefix) => {
-        const payloadSchema = createHarnessEventPayloadSchema(basePayloadSchema, createExtensionEventTypeSchema(prefix), extensionEventDataSchema, false);
+        const payloadSchema = createHarnessEventPayloadSchema(basePayloadSchema, createExtensionEventTypeSchema(prefix), toEmbeddedJsonSchema(hcpExtensionEventDataSchema, prefix), false);
         return createHarnessEventMessageSchema(baseMessageSchema, payloadSchema);
     });
     return [...knownEventSchemas, ...extensionEventSchemas];

package/dist/mcp-review.d.ts

@@ -0,0 +1,54 @@
+import { z } from "zod";
+/** HCP extension v1; unrelated to the upstream MCP protocol version. */
+export declare const MCP_REVIEW_META_KEY = "io.harness-control/review-v1";
+export declare const MCP_REVIEW_MAX_ACTION_BYTES: number;
+export declare const MCP_REVIEW_MAX_REQUEST_ID_LENGTH = 256;
+export declare const mcpReviewActionSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"mcp_tool">;
+    attachment_name: z.ZodString;
+    tool_name: z.ZodString;
+    arguments: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+}, z.core.$strict>;
+export type McpReviewAction = z.infer<typeof mcpReviewActionSchema>;
+export declare function mcpReviewActionBytes(json: string): Uint8Array;
+export declare function hashMcpReviewAction(json: string): Promise<string>;
+export declare const mcpReviewGrantSchema: z.ZodObject<{
+    request_id: z.ZodString;
+    action_json: z.ZodString;
+}, z.core.$strict>;
+export type McpReviewGrant = z.infer<typeof mcpReviewGrantSchema>;
+export declare const mcpReviewPolicySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"always">;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"argument">;
+    argument: z.ZodString;
+    values: z.ZodArray<z.ZodString>;
+}, z.core.$strict>], "kind">;
+export type McpReviewPolicy = z.infer<typeof mcpReviewPolicySchema>;
+/** JSON Schema consumers must also enforce the embedded action and UTF-8 limit. */
+export declare function createMcpReviewContract(): {
+    version: number;
+    metadata_key: string;
+    max_action_bytes: number;
+    hashing: string;
+    schemas: {
+        action: z.core.ZodStandardJSONSchemaPayload<z.ZodObject<{
+            kind: z.ZodLiteral<"mcp_tool">;
+            attachment_name: z.ZodString;
+            tool_name: z.ZodString;
+            arguments: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+        }, z.core.$strict>>;
+        grant: z.core.ZodStandardJSONSchemaPayload<z.ZodObject<{
+            request_id: z.ZodString;
+            action_json: z.ZodString;
+        }, z.core.$strict>>;
+        policy: z.core.ZodStandardJSONSchemaPayload<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"always">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"argument">;
+            argument: z.ZodString;
+            values: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>], "kind">>;
+    };
+};
+//# sourceMappingURL=mcp-review.d.ts.map

package/dist/mcp-review.js

@@ -0,0 +1,44 @@
+import { z } from "zod";
+/** HCP extension v1; unrelated to the upstream MCP protocol version. */
+export const MCP_REVIEW_META_KEY = "io.harness-control/review-v1";
+export const MCP_REVIEW_MAX_ACTION_BYTES = 64 * 1024;
+export const MCP_REVIEW_MAX_REQUEST_ID_LENGTH = 256;
+export const mcpReviewActionSchema = z.object({
+    kind: z.literal("mcp_tool"), attachment_name: z.string().min(1),
+    tool_name: z.string().min(1), arguments: z.record(z.string(), z.json()),
+}).strict();
+export function mcpReviewActionBytes(json) {
+    const bytes = new TextEncoder().encode(json);
+    if (bytes.length === 0 || bytes.length > MCP_REVIEW_MAX_ACTION_BYTES)
+        throw new Error("MCP review action exceeds its UTF-8 byte limit.");
+    mcpReviewActionSchema.parse(JSON.parse(json));
+    return bytes;
+}
+export async function hashMcpReviewAction(json) {
+    const bytes = mcpReviewActionBytes(json);
+    const hash = await crypto.subtle.digest("SHA-256", Uint8Array.from(bytes));
+    return Array.from(new Uint8Array(hash), byte => byte.toString(16).padStart(2, "0")).join("");
+}
+export const mcpReviewGrantSchema = z.object({
+    request_id: z.string().min(1).max(MCP_REVIEW_MAX_REQUEST_ID_LENGTH),
+    action_json: z.string().min(1).max(MCP_REVIEW_MAX_ACTION_BYTES),
+}).strict().superRefine((value, context) => {
+    try {
+        mcpReviewActionBytes(value.action_json);
+    }
+    catch {
+        context.addIssue({ code: "custom", path: ["action_json"], message: "Invalid or oversized MCP review action." });
+    }
+});
+export const mcpReviewPolicySchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("always") }).strict(),
+    z.object({ kind: z.literal("argument"), argument: z.string().min(1), values: z.array(z.string().min(1)).min(1) }).strict(),
+]);
+/** JSON Schema consumers must also enforce the embedded action and UTF-8 limit. */
+export function createMcpReviewContract() {
+    return { version: 1, metadata_key: MCP_REVIEW_META_KEY, max_action_bytes: MCP_REVIEW_MAX_ACTION_BYTES,
+        hashing: "sha256-exact-utf8-lowercase-hex", schemas: {
+            action: z.toJSONSchema(mcpReviewActionSchema), grant: z.toJSONSchema(mcpReviewGrantSchema), policy: z.toJSONSchema(mcpReviewPolicySchema),
+        } };
+}
+//# sourceMappingURL=mcp-review.js.map

package/fixtures/mcp-review.json

@@ -0,0 +1,20 @@
+[
+  {
+    "action_json": "{\"kind\":\"mcp_tool\",\"attachment_name\":\"server\",\"tool_name\":\"write\",\"arguments\":{\"text\":\"é🙂\"}}",
+    "valid": true,
+    "sha256": "f56beacaa38c8377403c751206b8c1998b45d6cc9a146d84c3e1ede2652ce7c4"
+  },
+  {
+    "action_json": "{\"kind\":\"mcp_tool\",\"attachment_name\":\"server\",\"tool_name\":\"write\",\"arguments\":{}}",
+    "valid": true,
+    "sha256": "3a571ac3eec173ae039bedda0a3c015b7e3577af92efce1b6c1b6949d06cf8c0"
+  },
+  {
+    "action_json": "{\"kind\":\"mcp_tool\",\"attachment_name\":\"\",\"tool_name\":\"write\",\"arguments\":{}}",
+    "valid": false
+  },
+  {
+    "action_json": "{}",
+    "valid": false
+  }
+]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@harness-control/protocol",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "license": "Apache-2.0",
   "type": "module",
   "main": "./dist/index.js",
@@ -24,7 +24,13 @@
     "./schema.json": {
       "default": "./schemas/hcp-message.schema.json"
     },
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./mcp-review.json": {
+      "default": "./schemas/mcp-review.json"
+    },
+    "./mcp-review-fixtures.json": {
+      "default": "./fixtures/mcp-review.json"
+    }
   },
   "scripts": {
     "build": "tsc -b && npm run schema:generate",
@@ -56,6 +62,7 @@
     "README.md",
     "LICENSE",
     "schemas",
-    "fixtures/conformance"
+    "fixtures/conformance",
+    "fixtures/mcp-review.json"
   ]
 }

package/schemas/hcp-message.schema.json

@@ -7970,7 +7970,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/session.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -8163,7 +8164,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/session.configured.schema.json"
             },
             "raw": {
               "type": "object",
@@ -8356,7 +8358,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/session.state.changed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -8549,7 +8552,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/session.exited.schema.json"
             },
             "raw": {
               "type": "object",
@@ -8721,7 +8725,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/thread.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -8893,7 +8898,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/thread.state.changed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -9065,7 +9071,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/thread.metadata.updated.schema.json"
             },
             "raw": {
               "type": "object",
@@ -9237,7 +9244,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/thread.token_usage.updated.schema.json"
             },
             "raw": {
               "type": "object",
@@ -9409,7 +9417,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/thread.realtime.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -9581,7 +9590,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/thread.realtime.item_added.schema.json"
             },
             "raw": {
               "type": "object",
@@ -9753,7 +9763,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/thread.realtime.audio_delta.schema.json"
             },
             "raw": {
               "type": "object",
@@ -9925,7 +9936,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/thread.realtime.error.schema.json"
             },
             "raw": {
               "type": "object",
@@ -10097,7 +10109,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/thread.realtime.closed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -10250,7 +10263,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/auth.status.schema.json"
             },
             "raw": {
               "type": "object",
@@ -10403,7 +10417,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/account.updated.schema.json"
             },
             "raw": {
               "type": "object",
@@ -10556,7 +10571,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/account.rate_limits.updated.schema.json"
             },
             "raw": {
               "type": "object",
@@ -10751,7 +10767,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/turn.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -10990,7 +11007,8 @@
               "required": [
                 "final_output"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/turn.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -11229,7 +11247,8 @@
               "required": [
                 "final_output"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/turn.failed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -11468,7 +11487,8 @@
               "required": [
                 "final_output"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/turn.aborted.schema.json"
             },
             "raw": {
               "type": "object",
@@ -11707,7 +11727,8 @@
               "required": [
                 "final_output"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/turn.cancelled.schema.json"
             },
             "raw": {
               "type": "object",
@@ -11902,7 +11923,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/turn.plan.updated.schema.json"
             },
             "raw": {
               "type": "object",
@@ -12097,7 +12119,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/turn.proposed.delta.schema.json"
             },
             "raw": {
               "type": "object",
@@ -12292,7 +12315,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/turn.proposed.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -12487,7 +12511,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/turn.diff.updated.schema.json"
             },
             "raw": {
               "type": "object",
@@ -12602,7 +12627,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/item.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -12717,7 +12743,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/item.updated.schema.json"
             },
             "raw": {
               "type": "object",
@@ -12832,7 +12859,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/item.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -12941,7 +12969,8 @@
               "required": [
                 "delta"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/content.delta.schema.json"
             },
             "raw": {
               "type": "object",
@@ -13050,7 +13079,8 @@
               "required": [
                 "delta"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/reasoning.delta.schema.json"
             },
             "raw": {
               "type": "object",
@@ -13209,7 +13239,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/command.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -13368,7 +13399,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/command.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -13504,7 +13536,8 @@
                 "provider_instance_id",
                 "status"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/local_capability.lease.created.schema.json"
             },
             "raw": {
               "type": "object",
@@ -13640,7 +13673,8 @@
                 "provider_instance_id",
                 "status"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/local_capability.lease.revoked.schema.json"
             },
             "raw": {
               "type": "object",
@@ -13776,7 +13810,8 @@
                 "provider_instance_id",
                 "status"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/local_capability.lease.expired.schema.json"
             },
             "raw": {
               "type": "object",
@@ -13946,7 +13981,8 @@
                 "action",
                 "status"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/local_capability.action.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -14117,7 +14153,8 @@
                 "action",
                 "status"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/local_capability.action.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -14288,7 +14325,8 @@
                 "action",
                 "status"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/local_capability.action.failed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -14448,7 +14486,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/file_change.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -14607,7 +14646,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/file_change.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -14766,7 +14806,8 @@
               "required": [
                 "tool_name"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/mcp_tool.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -14925,7 +14966,8 @@
               "required": [
                 "tool_name"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/mcp_tool.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -15043,7 +15085,8 @@
                   "minLength": 1
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/mcp.status.updated.schema.json"
             },
             "raw": {
               "type": "object",
@@ -15161,7 +15204,8 @@
                   "minLength": 1
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/mcp.oauth.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -15356,7 +15400,8 @@
                 "expires_at",
                 "display"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/approval.requested.schema.json"
             },
             "raw": {
               "type": "object",
@@ -15497,7 +15542,8 @@
                 "decision",
                 "actor_id"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/approval.resolved.schema.json"
             },
             "raw": {
               "type": "object",
@@ -15619,6 +15665,15 @@
                     "form"
                   ]
                 },
+                "form_schema": {
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {
+                    "$ref": "#/$defs/__schema0"
+                  }
+                },
                 "choices": {
                   "type": "array",
                   "items": {
@@ -15668,7 +15723,41 @@
                 "required",
                 "redaction"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$defs": {
+                "__schema0": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "number"
+                    },
+                    {
+                      "type": "boolean"
+                    },
+                    {
+                      "type": "null"
+                    },
+                    {
+                      "type": "array",
+                      "items": {
+                        "$ref": "#/$defs/__schema0"
+                      }
+                    },
+                    {
+                      "type": "object",
+                      "propertyNames": {
+                        "type": "string"
+                      },
+                      "additionalProperties": {
+                        "$ref": "#/$defs/__schema0"
+                      }
+                    }
+                  ]
+                }
+              },
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/input.requested.schema.json"
             },
             "raw": {
               "type": "object",
@@ -15797,7 +15886,8 @@
                 "session_id",
                 "turn_id"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/input.resolved.schema.json"
             },
             "raw": {
               "type": "object",
@@ -15924,7 +16014,8 @@
                   "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/request.opened.schema.json"
             },
             "raw": {
               "type": "object",
@@ -16051,7 +16142,8 @@
                   "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/request.resolved.schema.json"
             },
             "raw": {
               "type": "object",
@@ -16173,6 +16265,15 @@
                     "form"
                   ]
                 },
+                "form_schema": {
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {
+                    "$ref": "#/$defs/__schema0"
+                  }
+                },
                 "choices": {
                   "type": "array",
                   "items": {
@@ -16222,7 +16323,41 @@
                 "required",
                 "redaction"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$defs": {
+                "__schema0": {
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "number"
+                    },
+                    {
+                      "type": "boolean"
+                    },
+                    {
+                      "type": "null"
+                    },
+                    {
+                      "type": "array",
+                      "items": {
+                        "$ref": "#/$defs/__schema0"
+                      }
+                    },
+                    {
+                      "type": "object",
+                      "propertyNames": {
+                        "type": "string"
+                      },
+                      "additionalProperties": {
+                        "$ref": "#/$defs/__schema0"
+                      }
+                    }
+                  ]
+                }
+              },
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/user_input.requested.schema.json"
             },
             "raw": {
               "type": "object",
@@ -16351,7 +16486,8 @@
                 "session_id",
                 "turn_id"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/user_input.resolved.schema.json"
             },
             "raw": {
               "type": "object",
@@ -16496,7 +16632,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/task.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -16641,7 +16778,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/task.progress.schema.json"
             },
             "raw": {
               "type": "object",
@@ -16786,7 +16924,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/task.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -16935,7 +17074,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/hook.started.schema.json"
             },
             "raw": {
               "type": "object",
@@ -17084,7 +17224,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/hook.progress.schema.json"
             },
             "raw": {
               "type": "object",
@@ -17233,7 +17374,8 @@
                   "additionalProperties": false
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/hook.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -17348,7 +17490,8 @@
                   "maximum": 1
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/tool.progress.schema.json"
             },
             "raw": {
               "type": "object",
@@ -17463,7 +17606,8 @@
                   "maximum": 1
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/tool.summary.schema.json"
             },
             "raw": {
               "type": "object",
@@ -17573,7 +17717,8 @@
                   "type": "string"
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/model.rerouted.schema.json"
             },
             "raw": {
               "type": "object",
@@ -17710,7 +17855,8 @@
                   }
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/config.warning.schema.json"
             },
             "raw": {
               "type": "object",
@@ -17847,7 +17993,8 @@
                   }
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/deprecation.notice.schema.json"
             },
             "raw": {
               "type": "object",
@@ -18008,7 +18155,8 @@
                   }
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/files.persisted.schema.json"
             },
             "raw": {
               "type": "object",
@@ -18147,7 +18295,8 @@
                 "cwd",
                 "result"
               ],
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/workspace.preflight.completed.schema.json"
             },
             "raw": {
               "type": "object",
@@ -18265,7 +18414,8 @@
                   "minimum": 0
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/usage.updated.schema.json"
             },
             "raw": {
               "type": "object",
@@ -18402,7 +18552,8 @@
                   }
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/runtime.warning.schema.json"
             },
             "raw": {
               "type": "object",
@@ -18539,7 +18690,8 @@
                   }
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/runtime.error.schema.json"
             },
             "raw": {
               "type": "object",
@@ -18648,7 +18800,8 @@
                   "additionalProperties": {}
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/provider.schema.json"
             },
             "raw": {
               "type": "object",
@@ -18757,7 +18910,8 @@
                   "additionalProperties": {}
                 }
               },
-              "additionalProperties": false
+              "additionalProperties": false,
+              "$id": "https://schemas.harness-control.local/hcp.v0/events/extension.schema.json"
             },
             "raw": {
               "type": "object",

package/schemas/mcp-review.json

@@ -0,0 +1,141 @@
+{
+  "version": 1,
+  "metadata_key": "io.harness-control/review-v1",
+  "max_action_bytes": 65536,
+  "hashing": "sha256-exact-utf8-lowercase-hex",
+  "schemas": {
+    "action": {
+      "$schema": "https://json-schema.org/draft/2020-12/schema",
+      "type": "object",
+      "properties": {
+        "kind": {
+          "type": "string",
+          "const": "mcp_tool"
+        },
+        "attachment_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "tool_name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "arguments": {
+          "type": "object",
+          "propertyNames": {
+            "type": "string"
+          },
+          "additionalProperties": {
+            "$ref": "#/$defs/__schema0"
+          }
+        }
+      },
+      "required": [
+        "kind",
+        "attachment_name",
+        "tool_name",
+        "arguments"
+      ],
+      "additionalProperties": false,
+      "$defs": {
+        "__schema0": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "number"
+            },
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "null"
+            },
+            {
+              "type": "array",
+              "items": {
+                "$ref": "#/$defs/__schema0"
+              }
+            },
+            {
+              "type": "object",
+              "propertyNames": {
+                "type": "string"
+              },
+              "additionalProperties": {
+                "$ref": "#/$defs/__schema0"
+              }
+            }
+          ]
+        }
+      }
+    },
+    "grant": {
+      "$schema": "https://json-schema.org/draft/2020-12/schema",
+      "type": "object",
+      "properties": {
+        "request_id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "action_json": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 65536
+        }
+      },
+      "required": [
+        "request_id",
+        "action_json"
+      ],
+      "additionalProperties": false
+    },
+    "policy": {
+      "$schema": "https://json-schema.org/draft/2020-12/schema",
+      "oneOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "always"
+            }
+          },
+          "required": [
+            "kind"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "argument"
+            },
+            "argument": {
+              "type": "string",
+              "minLength": 1
+            },
+            "values": {
+              "minItems": 1,
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          },
+          "required": [
+            "kind",
+            "argument",
+            "values"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    }
+  }
+}