@kya-os/cli 2.0.0 → 2.0.3

package/node_modules/@kya-os/contracts/dist/workbench/governed.d.ts

@@ -0,0 +1,4323 @@
+import { z } from 'zod';
+/** Saved candidate binding. Only an authenticated task.start readback matching
+ * the whole admission can establish verified_standing provenance. */
+export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    admissionRef: z.ZodString;
+    admission: z.ZodEffects<z.ZodObject<Omit<{
+        workerDid: z.ZodString;
+        repository: z.ZodString;
+        baseSha: z.ZodString;
+        attemptNumber: z.ZodNumber;
+        capabilities: z.ZodEffects<z.ZodArray<z.ZodEnum<["task.execute", "model.invoke", "github.branch.write", "github.pull_request.draft"]>, "many">, ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[], ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[]>;
+        limits: z.ZodObject<{
+            maxRuntimeSeconds: z.ZodNumber;
+            maxCostMicrousd: z.ZodNumber;
+            maxOperations: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        }, {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        }>;
+        modelPolicy: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodLiteral<"anthropic">;
+            models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
+            maxOutputTokens: z.ZodNumber;
+            maxRequestBytes: z.ZodNumber;
+            reservedCostMicrousd: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        }, {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        }>>;
+        sourceOperationId: z.ZodString;
+        taskId: z.ZodString;
+        sourceRevision: z.ZodNumber;
+        ownerEpoch: z.ZodNumber;
+        specRevision: z.ZodNumber;
+        manifestDigest: z.ZodString;
+        executionOperationId: z.ZodString;
+    }, "workerDid"> & {
+        schema: z.ZodLiteral<"kya.task.admission.v1">;
+        admissionId: z.ZodString;
+        organizationId: z.ZodString;
+        projectId: z.ZodString;
+        installationId: z.ZodString;
+        leadDid: z.ZodString;
+        holderDid: z.ZodString;
+        branch: z.ZodString;
+        notBefore: z.ZodString;
+        expiresAt: z.ZodString;
+        policyProvenance: z.ZodLiteral<"administrator_registered">;
+        requiresOnlineActionGate: z.ZodLiteral<true>;
+        credentialExport: z.ZodLiteral<false>;
+    }, "strict", z.ZodTypeAny, {
+        projectId: string;
+        organizationId: string;
+        capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+        expiresAt: string;
+        taskId: string;
+        notBefore: string;
+        specRevision: number;
+        manifestDigest: string;
+        sourceRevision: number;
+        repository: string;
+        attemptNumber: number;
+        ownerEpoch: number;
+        admissionId: string;
+        schema: "kya.task.admission.v1";
+        installationId: string;
+        baseSha: string;
+        sourceOperationId: string;
+        executionOperationId: string;
+        branch: string;
+        limits: {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        };
+        leadDid: string;
+        holderDid: string;
+        policyProvenance: "administrator_registered";
+        requiresOnlineActionGate: true;
+        credentialExport: false;
+        modelPolicy?: {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        } | undefined;
+    }, {
+        projectId: string;
+        organizationId: string;
+        capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+        expiresAt: string;
+        taskId: string;
+        notBefore: string;
+        specRevision: number;
+        manifestDigest: string;
+        sourceRevision: number;
+        repository: string;
+        attemptNumber: number;
+        ownerEpoch: number;
+        admissionId: string;
+        schema: "kya.task.admission.v1";
+        installationId: string;
+        baseSha: string;
+        sourceOperationId: string;
+        executionOperationId: string;
+        branch: string;
+        limits: {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        };
+        leadDid: string;
+        holderDid: string;
+        policyProvenance: "administrator_registered";
+        requiresOnlineActionGate: true;
+        credentialExport: false;
+        modelPolicy?: {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        } | undefined;
+    }>, {
+        projectId: string;
+        organizationId: string;
+        capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+        expiresAt: string;
+        taskId: string;
+        notBefore: string;
+        specRevision: number;
+        manifestDigest: string;
+        sourceRevision: number;
+        repository: string;
+        attemptNumber: number;
+        ownerEpoch: number;
+        admissionId: string;
+        schema: "kya.task.admission.v1";
+        installationId: string;
+        baseSha: string;
+        sourceOperationId: string;
+        executionOperationId: string;
+        branch: string;
+        limits: {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        };
+        leadDid: string;
+        holderDid: string;
+        policyProvenance: "administrator_registered";
+        requiresOnlineActionGate: true;
+        credentialExport: false;
+        modelPolicy?: {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        } | undefined;
+    }, {
+        projectId: string;
+        organizationId: string;
+        capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+        expiresAt: string;
+        taskId: string;
+        notBefore: string;
+        specRevision: number;
+        manifestDigest: string;
+        sourceRevision: number;
+        repository: string;
+        attemptNumber: number;
+        ownerEpoch: number;
+        admissionId: string;
+        schema: "kya.task.admission.v1";
+        installationId: string;
+        baseSha: string;
+        sourceOperationId: string;
+        executionOperationId: string;
+        branch: string;
+        limits: {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        };
+        leadDid: string;
+        holderDid: string;
+        policyProvenance: "administrator_registered";
+        requiresOnlineActionGate: true;
+        credentialExport: false;
+        modelPolicy?: {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        } | undefined;
+    }>;
+    config: z.ZodObject<{
+        origin: z.ZodString;
+        organizationId: z.ZodString;
+        projectId: z.ZodString;
+        destinationDid: z.ZodString;
+        ownerEpoch: z.ZodNumber;
+        acceptedProviders: z.ZodOptional<z.ZodArray<z.ZodEnum<["linear", "github", "discord", "a2a", "didcomm"]>, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    }, {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    }>;
+    workerProfile: z.ZodString;
+    startOperationId: z.ZodString;
+    review: z.ZodEffects<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        manifest: z.ZodEffects<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            taskId: z.ZodString;
+            revision: z.ZodNumber;
+            objective: z.ZodString;
+            repository: z.ZodObject<{
+                repositoryId: z.ZodString;
+                path: z.ZodString;
+                baseCommit: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            }, {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            }>;
+            source: z.ZodOptional<z.ZodObject<{
+                sourceId: z.ZodString;
+                sourceRevision: z.ZodNumber;
+                inputDigest: z.ZodString;
+                operationId: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            }, {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            }>>;
+            dependencyBinding: z.ZodOptional<z.ZodString>;
+            acceptanceCriteria: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                text: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                text: string;
+            }, {
+                id: string;
+                text: string;
+            }>, "many">;
+            routing: z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
+                mode: z.ZodLiteral<"direct">;
+                leadId: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                mode: "direct";
+                leadId: string;
+            }, {
+                mode: "direct";
+                leadId: string;
+            }>, z.ZodObject<{
+                mode: z.ZodLiteral<"pool">;
+                poolId: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                mode: "pool";
+                poolId: string;
+            }, {
+                mode: "pool";
+                poolId: string;
+            }>]>;
+            harness: z.ZodString;
+            model: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            maxAttempts: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        }, {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        }>, {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        }, {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        }>;
+        manifestDigest: z.ZodString;
+        runnerId: z.ZodString;
+        expiresAtMs: z.ZodNumber;
+        invocation: z.ZodObject<{
+            command: z.ZodString;
+            executableDigest: z.ZodString;
+            args: z.ZodArray<z.ZodString, "many">;
+            workspace: z.ZodString;
+            stdinDigest: z.ZodString;
+            timeoutMs: z.ZodNumber;
+            providerDestinations: z.ZodArray<z.ZodString, "many">;
+            providerDestinationEnforcement: z.ZodLiteral<"expected_only">;
+            configuration: z.ZodUnknown;
+            transport: z.ZodEnum<["codex_exec", "codex_app_server"]>;
+            nativeBinding: z.ZodOptional<z.ZodUnknown>;
+        }, "strict", z.ZodTypeAny, {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        }, {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        }>;
+        permittedOperations: z.ZodArray<z.ZodString, "many">;
+        prohibitedExternalOperations: z.ZodArray<z.ZodString, "many">;
+        policy: z.ZodObject<{
+            persistHistory: z.ZodDefault<z.ZodBoolean>;
+            nativeResume: z.ZodOptional<z.ZodObject<{
+                attemptId: z.ZodString;
+                priorSegmentId: z.ZodString;
+                threadId: z.ZodString;
+                turnId: z.ZodString;
+                usageBaseline: z.ZodObject<{
+                    inputTokens: z.ZodNumber;
+                    outputTokens: z.ZodNumber;
+                    cachedInputTokens: z.ZodNumber;
+                    cacheWriteInputTokens: z.ZodNullable<z.ZodNumber>;
+                }, "strict", z.ZodTypeAny, {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                }, {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                }>;
+                workspaceSnapshotDigest: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            }, {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            }>>;
+            nativeFork: z.ZodOptional<z.ZodObject<{
+                parentTaskId: z.ZodString;
+                parentAttemptId: z.ZodString;
+                parentSegmentId: z.ZodString;
+                parentManifestDigest: z.ZodString;
+                parentThreadId: z.ZodString;
+                parentTurnId: z.ZodString;
+                workspaceSnapshotDigest: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            }, {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            }>>;
+            budget: z.ZodNullable<z.ZodObject<{
+                budgetId: z.ZodString;
+                reservationMicroUsd: z.ZodNumber;
+                pricing: z.ZodNullable<z.ZodObject<{
+                    schemaVersion: z.ZodLiteral<1>;
+                    currency: z.ZodLiteral<"USD">;
+                    provider: z.ZodString;
+                    model: z.ZodString;
+                    version: z.ZodString;
+                    sourceUrl: z.ZodEffects<z.ZodString, string, string>;
+                    inputAccounting: z.ZodEnum<["excludes_cache", "includes_read_only", "includes_read_and_write"]>;
+                    rates: z.ZodObject<{
+                        input: z.ZodNullable<z.ZodNumber>;
+                        output: z.ZodNullable<z.ZodNumber>;
+                        cache_read: z.ZodNullable<z.ZodNumber>;
+                        cache_write_short: z.ZodNullable<z.ZodNumber>;
+                        cache_write_long: z.ZodNullable<z.ZodNumber>;
+                        cache_write_unspecified: z.ZodNullable<z.ZodNumber>;
+                        cache_storage: z.ZodNullable<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    }, {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    }>;
+                }, "strict", z.ZodTypeAny, {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                }, {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            }, {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            }>>;
+            requiresIsolatedSecrets: z.ZodDefault<z.ZodBoolean>;
+            requiresManagedContainment: z.ZodDefault<z.ZodBoolean>;
+            requiresProviderEgressEnforcement: z.ZodDefault<z.ZodBoolean>;
+            requiresBrokeredExternalActions: z.ZodDefault<z.ZodBoolean>;
+        }, "strict", z.ZodTypeAny, {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory: boolean;
+            requiresIsolatedSecrets: boolean;
+            requiresManagedContainment: boolean;
+            requiresProviderEgressEnforcement: boolean;
+            requiresBrokeredExternalActions: boolean;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+        }, {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory?: boolean | undefined;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+            requiresIsolatedSecrets?: boolean | undefined;
+            requiresManagedContainment?: boolean | undefined;
+            requiresProviderEgressEnforcement?: boolean | undefined;
+            requiresBrokeredExternalActions?: boolean | undefined;
+        }>;
+        capabilities: z.ZodObject<{
+            workspaceSandbox: z.ZodLiteral<"harness_workspace_write">;
+            childNetworkPolicy: z.ZodLiteral<"disabled_in_requested_harness_policy">;
+            isolatedSecrets: z.ZodLiteral<false>;
+            managedContainment: z.ZodLiteral<false>;
+            providerEgressEnforcement: z.ZodLiteral<false>;
+            brokeredExternalActions: z.ZodLiteral<false>;
+            limitation: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        }, {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        capabilities: {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        };
+        policy: {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory: boolean;
+            requiresIsolatedSecrets: boolean;
+            requiresManagedContainment: boolean;
+            requiresProviderEgressEnforcement: boolean;
+            requiresBrokeredExternalActions: boolean;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+        };
+        schemaVersion: 1;
+        manifestDigest: string;
+        manifest: {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        };
+        runnerId: string;
+        expiresAtMs: number;
+        invocation: {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        };
+        permittedOperations: string[];
+        prohibitedExternalOperations: string[];
+    }, {
+        capabilities: {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        };
+        policy: {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory?: boolean | undefined;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+            requiresIsolatedSecrets?: boolean | undefined;
+            requiresManagedContainment?: boolean | undefined;
+            requiresProviderEgressEnforcement?: boolean | undefined;
+            requiresBrokeredExternalActions?: boolean | undefined;
+        };
+        schemaVersion: 1;
+        manifestDigest: string;
+        manifest: {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        };
+        runnerId: string;
+        expiresAtMs: number;
+        invocation: {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        };
+        permittedOperations: string[];
+        prohibitedExternalOperations: string[];
+    }>, {
+        capabilities: {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        };
+        policy: {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory: boolean;
+            requiresIsolatedSecrets: boolean;
+            requiresManagedContainment: boolean;
+            requiresProviderEgressEnforcement: boolean;
+            requiresBrokeredExternalActions: boolean;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+        };
+        schemaVersion: 1;
+        manifestDigest: string;
+        manifest: {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        };
+        runnerId: string;
+        expiresAtMs: number;
+        invocation: {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        };
+        permittedOperations: string[];
+        prohibitedExternalOperations: string[];
+    }, {
+        capabilities: {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        };
+        policy: {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory?: boolean | undefined;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+            requiresIsolatedSecrets?: boolean | undefined;
+            requiresManagedContainment?: boolean | undefined;
+            requiresProviderEgressEnforcement?: boolean | undefined;
+            requiresBrokeredExternalActions?: boolean | undefined;
+        };
+        schemaVersion: 1;
+        manifestDigest: string;
+        manifest: {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        };
+        runnerId: string;
+        expiresAtMs: number;
+        invocation: {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        };
+        permittedOperations: string[];
+        prohibitedExternalOperations: string[];
+    }>;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: 1;
+    review: {
+        capabilities: {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        };
+        policy: {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory: boolean;
+            requiresIsolatedSecrets: boolean;
+            requiresManagedContainment: boolean;
+            requiresProviderEgressEnforcement: boolean;
+            requiresBrokeredExternalActions: boolean;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+        };
+        schemaVersion: 1;
+        manifestDigest: string;
+        manifest: {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        };
+        runnerId: string;
+        expiresAtMs: number;
+        invocation: {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        };
+        permittedOperations: string[];
+        prohibitedExternalOperations: string[];
+    };
+    admissionRef: string;
+    admission: {
+        projectId: string;
+        organizationId: string;
+        capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+        expiresAt: string;
+        taskId: string;
+        notBefore: string;
+        specRevision: number;
+        manifestDigest: string;
+        sourceRevision: number;
+        repository: string;
+        attemptNumber: number;
+        ownerEpoch: number;
+        admissionId: string;
+        schema: "kya.task.admission.v1";
+        installationId: string;
+        baseSha: string;
+        sourceOperationId: string;
+        executionOperationId: string;
+        branch: string;
+        limits: {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        };
+        leadDid: string;
+        holderDid: string;
+        policyProvenance: "administrator_registered";
+        requiresOnlineActionGate: true;
+        credentialExport: false;
+        modelPolicy?: {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        } | undefined;
+    };
+    config: {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    };
+    workerProfile: string;
+    startOperationId: string;
+}, {
+    schemaVersion: 1;
+    review: {
+        capabilities: {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        };
+        policy: {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory?: boolean | undefined;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+            requiresIsolatedSecrets?: boolean | undefined;
+            requiresManagedContainment?: boolean | undefined;
+            requiresProviderEgressEnforcement?: boolean | undefined;
+            requiresBrokeredExternalActions?: boolean | undefined;
+        };
+        schemaVersion: 1;
+        manifestDigest: string;
+        manifest: {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        };
+        runnerId: string;
+        expiresAtMs: number;
+        invocation: {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        };
+        permittedOperations: string[];
+        prohibitedExternalOperations: string[];
+    };
+    admissionRef: string;
+    admission: {
+        projectId: string;
+        organizationId: string;
+        capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+        expiresAt: string;
+        taskId: string;
+        notBefore: string;
+        specRevision: number;
+        manifestDigest: string;
+        sourceRevision: number;
+        repository: string;
+        attemptNumber: number;
+        ownerEpoch: number;
+        admissionId: string;
+        schema: "kya.task.admission.v1";
+        installationId: string;
+        baseSha: string;
+        sourceOperationId: string;
+        executionOperationId: string;
+        branch: string;
+        limits: {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        };
+        leadDid: string;
+        holderDid: string;
+        policyProvenance: "administrator_registered";
+        requiresOnlineActionGate: true;
+        credentialExport: false;
+        modelPolicy?: {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        } | undefined;
+    };
+    config: {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    };
+    workerProfile: string;
+    startOperationId: string;
+}>, {
+    schemaVersion: 1;
+    review: {
+        capabilities: {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        };
+        policy: {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory: boolean;
+            requiresIsolatedSecrets: boolean;
+            requiresManagedContainment: boolean;
+            requiresProviderEgressEnforcement: boolean;
+            requiresBrokeredExternalActions: boolean;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+        };
+        schemaVersion: 1;
+        manifestDigest: string;
+        manifest: {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        };
+        runnerId: string;
+        expiresAtMs: number;
+        invocation: {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        };
+        permittedOperations: string[];
+        prohibitedExternalOperations: string[];
+    };
+    admissionRef: string;
+    admission: {
+        projectId: string;
+        organizationId: string;
+        capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+        expiresAt: string;
+        taskId: string;
+        notBefore: string;
+        specRevision: number;
+        manifestDigest: string;
+        sourceRevision: number;
+        repository: string;
+        attemptNumber: number;
+        ownerEpoch: number;
+        admissionId: string;
+        schema: "kya.task.admission.v1";
+        installationId: string;
+        baseSha: string;
+        sourceOperationId: string;
+        executionOperationId: string;
+        branch: string;
+        limits: {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        };
+        leadDid: string;
+        holderDid: string;
+        policyProvenance: "administrator_registered";
+        requiresOnlineActionGate: true;
+        credentialExport: false;
+        modelPolicy?: {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        } | undefined;
+    };
+    config: {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    };
+    workerProfile: string;
+    startOperationId: string;
+}, {
+    schemaVersion: 1;
+    review: {
+        capabilities: {
+            workspaceSandbox: "harness_workspace_write";
+            childNetworkPolicy: "disabled_in_requested_harness_policy";
+            isolatedSecrets: false;
+            managedContainment: false;
+            providerEgressEnforcement: false;
+            brokeredExternalActions: false;
+            limitation: string;
+        };
+        policy: {
+            budget: {
+                pricing: {
+                    version: string;
+                    provider: string;
+                    model: string;
+                    schemaVersion: 1;
+                    currency: "USD";
+                    sourceUrl: string;
+                    inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                    rates: {
+                        input: number | null;
+                        output: number | null;
+                        cache_read: number | null;
+                        cache_write_short: number | null;
+                        cache_write_long: number | null;
+                        cache_write_unspecified: number | null;
+                        cache_storage: number | null;
+                    };
+                } | null;
+                budgetId: string;
+                reservationMicroUsd: number;
+            } | null;
+            persistHistory?: boolean | undefined;
+            nativeResume?: {
+                attemptId: string;
+                priorSegmentId: string;
+                threadId: string;
+                turnId: string;
+                usageBaseline: {
+                    inputTokens: number;
+                    outputTokens: number;
+                    cachedInputTokens: number;
+                    cacheWriteInputTokens: number | null;
+                };
+                workspaceSnapshotDigest: string;
+            } | undefined;
+            nativeFork?: {
+                parentTaskId: string;
+                workspaceSnapshotDigest: string;
+                parentAttemptId: string;
+                parentSegmentId: string;
+                parentManifestDigest: string;
+                parentThreadId: string;
+                parentTurnId: string;
+            } | undefined;
+            requiresIsolatedSecrets?: boolean | undefined;
+            requiresManagedContainment?: boolean | undefined;
+            requiresProviderEgressEnforcement?: boolean | undefined;
+            requiresBrokeredExternalActions?: boolean | undefined;
+        };
+        schemaVersion: 1;
+        manifestDigest: string;
+        manifest: {
+            taskId: string;
+            harness: string;
+            schemaVersion: 1;
+            objective: string;
+            acceptanceCriteria: {
+                id: string;
+                text: string;
+            }[];
+            revision: number;
+            repository: {
+                path: string;
+                repositoryId: string;
+                baseCommit: string;
+            };
+            routing: {
+                mode: "direct";
+                leadId: string;
+            } | {
+                mode: "pool";
+                poolId: string;
+            };
+            maxAttempts: number;
+            model?: string | null | undefined;
+            source?: {
+                sourceId: string;
+                sourceRevision: number;
+                inputDigest: string;
+                operationId: string;
+            } | undefined;
+            dependencyBinding?: string | undefined;
+        };
+        runnerId: string;
+        expiresAtMs: number;
+        invocation: {
+            command: string;
+            args: string[];
+            executableDigest: string;
+            workspace: string;
+            stdinDigest: string;
+            timeoutMs: number;
+            providerDestinations: string[];
+            providerDestinationEnforcement: "expected_only";
+            transport: "codex_exec" | "codex_app_server";
+            configuration?: unknown;
+            nativeBinding?: unknown;
+        };
+        permittedOperations: string[];
+        prohibitedExternalOperations: string[];
+    };
+    admissionRef: string;
+    admission: {
+        projectId: string;
+        organizationId: string;
+        capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+        expiresAt: string;
+        taskId: string;
+        notBefore: string;
+        specRevision: number;
+        manifestDigest: string;
+        sourceRevision: number;
+        repository: string;
+        attemptNumber: number;
+        ownerEpoch: number;
+        admissionId: string;
+        schema: "kya.task.admission.v1";
+        installationId: string;
+        baseSha: string;
+        sourceOperationId: string;
+        executionOperationId: string;
+        branch: string;
+        limits: {
+            maxRuntimeSeconds: number;
+            maxOperations: number;
+            maxCostMicrousd: number;
+        };
+        leadDid: string;
+        holderDid: string;
+        policyProvenance: "administrator_registered";
+        requiresOnlineActionGate: true;
+        credentialExport: false;
+        modelPolicy?: {
+            provider: "anthropic";
+            models: string[];
+            maxOutputTokens: number;
+            maxRequestBytes: number;
+            reservedCostMicrousd: number;
+        } | undefined;
+    };
+    config: {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    };
+    workerProfile: string;
+    startOperationId: string;
+}>;
+export type GovernedExecution = z.infer<typeof GovernedExecutionSchema>;
+/** Metadata projection, with gate status separate from local outcome. It does
+ * not assert that the supervisor has sent task.finish or published a result. */
+export declare const StandingExecutionViewSchema: z.ZodObject<{
+    admissionRef: z.ZodString;
+    taskId: z.ZodString;
+    operationId: z.ZodString;
+    leadDid: z.ZodString;
+    workerDid: z.ZodString;
+    bindingDigest: z.ZodString;
+    state: z.ZodEnum<["queued", "starting", "started", "unknown"]>;
+    localOutcome: z.ZodNullable<z.ZodEnum<["succeeded", "failed", "cancelled", "unknown"]>>;
+    supervisorState: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    supervisorNotice: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    provenance: z.ZodEnum<["standing_pending_online", "verified_standing"]>;
+    expiresAtMs: z.ZodNumber;
+    limits: z.ZodObject<{
+        maxRuntimeSeconds: z.ZodNumber;
+        maxCostMicrousd: z.ZodNumber;
+        maxOperations: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        maxRuntimeSeconds: number;
+        maxOperations: number;
+        maxCostMicrousd: number;
+    }, {
+        maxRuntimeSeconds: number;
+        maxOperations: number;
+        maxCostMicrousd: number;
+    }>;
+    capabilities: z.ZodObject<{
+        workspaceSandbox: z.ZodLiteral<"harness_workspace_write">;
+        childNetworkPolicy: z.ZodLiteral<"disabled_in_requested_harness_policy">;
+        isolatedSecrets: z.ZodLiteral<false>;
+        managedContainment: z.ZodLiteral<false>;
+        providerEgressEnforcement: z.ZodLiteral<false>;
+        brokeredExternalActions: z.ZodLiteral<false>;
+        limitation: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        workspaceSandbox: "harness_workspace_write";
+        childNetworkPolicy: "disabled_in_requested_harness_policy";
+        isolatedSecrets: false;
+        managedContainment: false;
+        providerEgressEnforcement: false;
+        brokeredExternalActions: false;
+        limitation: string;
+    }, {
+        workspaceSandbox: "harness_workspace_write";
+        childNetworkPolicy: "disabled_in_requested_harness_policy";
+        isolatedSecrets: false;
+        managedContainment: false;
+        providerEgressEnforcement: false;
+        brokeredExternalActions: false;
+        limitation: string;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    capabilities: {
+        workspaceSandbox: "harness_workspace_write";
+        childNetworkPolicy: "disabled_in_requested_harness_policy";
+        isolatedSecrets: false;
+        managedContainment: false;
+        providerEgressEnforcement: false;
+        brokeredExternalActions: false;
+        limitation: string;
+    };
+    taskId: string;
+    state: "starting" | "unknown" | "started" | "queued";
+    operationId: string;
+    workerDid: string;
+    limits: {
+        maxRuntimeSeconds: number;
+        maxOperations: number;
+        maxCostMicrousd: number;
+    };
+    leadDid: string;
+    expiresAtMs: number;
+    admissionRef: string;
+    bindingDigest: string;
+    localOutcome: "unknown" | "failed" | "succeeded" | "cancelled" | null;
+    provenance: "standing_pending_online" | "verified_standing";
+    supervisorState?: string | null | undefined;
+    supervisorNotice?: string | null | undefined;
+}, {
+    capabilities: {
+        workspaceSandbox: "harness_workspace_write";
+        childNetworkPolicy: "disabled_in_requested_harness_policy";
+        isolatedSecrets: false;
+        managedContainment: false;
+        providerEgressEnforcement: false;
+        brokeredExternalActions: false;
+        limitation: string;
+    };
+    taskId: string;
+    state: "starting" | "unknown" | "started" | "queued";
+    operationId: string;
+    workerDid: string;
+    limits: {
+        maxRuntimeSeconds: number;
+        maxOperations: number;
+        maxCostMicrousd: number;
+    };
+    leadDid: string;
+    expiresAtMs: number;
+    admissionRef: string;
+    bindingDigest: string;
+    localOutcome: "unknown" | "failed" | "succeeded" | "cancelled" | null;
+    provenance: "standing_pending_online" | "verified_standing";
+    supervisorState?: string | null | undefined;
+    supervisorNotice?: string | null | undefined;
+}>;
+export type StandingExecutionView = z.infer<typeof StandingExecutionViewSchema>;
+export declare const StandingSupervisorBindingSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    execution: z.ZodEffects<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        admissionRef: z.ZodString;
+        admission: z.ZodEffects<z.ZodObject<Omit<{
+            workerDid: z.ZodString;
+            repository: z.ZodString;
+            baseSha: z.ZodString;
+            attemptNumber: z.ZodNumber;
+            capabilities: z.ZodEffects<z.ZodArray<z.ZodEnum<["task.execute", "model.invoke", "github.branch.write", "github.pull_request.draft"]>, "many">, ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[], ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[]>;
+            limits: z.ZodObject<{
+                maxRuntimeSeconds: z.ZodNumber;
+                maxCostMicrousd: z.ZodNumber;
+                maxOperations: z.ZodNumber;
+            }, "strict", z.ZodTypeAny, {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            }, {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            }>;
+            modelPolicy: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodLiteral<"anthropic">;
+                models: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>;
+                maxOutputTokens: z.ZodNumber;
+                maxRequestBytes: z.ZodNumber;
+                reservedCostMicrousd: z.ZodNumber;
+            }, "strict", z.ZodTypeAny, {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            }, {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            }>>;
+            sourceOperationId: z.ZodString;
+            taskId: z.ZodString;
+            sourceRevision: z.ZodNumber;
+            ownerEpoch: z.ZodNumber;
+            specRevision: z.ZodNumber;
+            manifestDigest: z.ZodString;
+            executionOperationId: z.ZodString;
+        }, "workerDid"> & {
+            schema: z.ZodLiteral<"kya.task.admission.v1">;
+            admissionId: z.ZodString;
+            organizationId: z.ZodString;
+            projectId: z.ZodString;
+            installationId: z.ZodString;
+            leadDid: z.ZodString;
+            holderDid: z.ZodString;
+            branch: z.ZodString;
+            notBefore: z.ZodString;
+            expiresAt: z.ZodString;
+            policyProvenance: z.ZodLiteral<"administrator_registered">;
+            requiresOnlineActionGate: z.ZodLiteral<true>;
+            credentialExport: z.ZodLiteral<false>;
+        }, "strict", z.ZodTypeAny, {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        }, {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        }>, {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        }, {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        }>;
+        config: z.ZodObject<{
+            origin: z.ZodString;
+            organizationId: z.ZodString;
+            projectId: z.ZodString;
+            destinationDid: z.ZodString;
+            ownerEpoch: z.ZodNumber;
+            acceptedProviders: z.ZodOptional<z.ZodArray<z.ZodEnum<["linear", "github", "discord", "a2a", "didcomm"]>, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            projectId: string;
+            organizationId: string;
+            origin: string;
+            ownerEpoch: number;
+            destinationDid: string;
+            acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+        }, {
+            projectId: string;
+            organizationId: string;
+            origin: string;
+            ownerEpoch: number;
+            destinationDid: string;
+            acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+        }>;
+        workerProfile: z.ZodString;
+        startOperationId: z.ZodString;
+        review: z.ZodEffects<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            manifest: z.ZodEffects<z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                taskId: z.ZodString;
+                revision: z.ZodNumber;
+                objective: z.ZodString;
+                repository: z.ZodObject<{
+                    repositoryId: z.ZodString;
+                    path: z.ZodString;
+                    baseCommit: z.ZodString;
+                }, "strict", z.ZodTypeAny, {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                }, {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                }>;
+                source: z.ZodOptional<z.ZodObject<{
+                    sourceId: z.ZodString;
+                    sourceRevision: z.ZodNumber;
+                    inputDigest: z.ZodString;
+                    operationId: z.ZodString;
+                }, "strict", z.ZodTypeAny, {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                }, {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                }>>;
+                dependencyBinding: z.ZodOptional<z.ZodString>;
+                acceptanceCriteria: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    text: z.ZodString;
+                }, "strict", z.ZodTypeAny, {
+                    id: string;
+                    text: string;
+                }, {
+                    id: string;
+                    text: string;
+                }>, "many">;
+                routing: z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
+                    mode: z.ZodLiteral<"direct">;
+                    leadId: z.ZodString;
+                }, "strict", z.ZodTypeAny, {
+                    mode: "direct";
+                    leadId: string;
+                }, {
+                    mode: "direct";
+                    leadId: string;
+                }>, z.ZodObject<{
+                    mode: z.ZodLiteral<"pool">;
+                    poolId: z.ZodString;
+                }, "strict", z.ZodTypeAny, {
+                    mode: "pool";
+                    poolId: string;
+                }, {
+                    mode: "pool";
+                    poolId: string;
+                }>]>;
+                harness: z.ZodString;
+                model: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                maxAttempts: z.ZodNumber;
+            }, "strict", z.ZodTypeAny, {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            }, {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            }>, {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            }, {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            }>;
+            manifestDigest: z.ZodString;
+            runnerId: z.ZodString;
+            expiresAtMs: z.ZodNumber;
+            invocation: z.ZodObject<{
+                command: z.ZodString;
+                executableDigest: z.ZodString;
+                args: z.ZodArray<z.ZodString, "many">;
+                workspace: z.ZodString;
+                stdinDigest: z.ZodString;
+                timeoutMs: z.ZodNumber;
+                providerDestinations: z.ZodArray<z.ZodString, "many">;
+                providerDestinationEnforcement: z.ZodLiteral<"expected_only">;
+                configuration: z.ZodUnknown;
+                transport: z.ZodEnum<["codex_exec", "codex_app_server"]>;
+                nativeBinding: z.ZodOptional<z.ZodUnknown>;
+            }, "strict", z.ZodTypeAny, {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            }, {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            }>;
+            permittedOperations: z.ZodArray<z.ZodString, "many">;
+            prohibitedExternalOperations: z.ZodArray<z.ZodString, "many">;
+            policy: z.ZodObject<{
+                persistHistory: z.ZodDefault<z.ZodBoolean>;
+                nativeResume: z.ZodOptional<z.ZodObject<{
+                    attemptId: z.ZodString;
+                    priorSegmentId: z.ZodString;
+                    threadId: z.ZodString;
+                    turnId: z.ZodString;
+                    usageBaseline: z.ZodObject<{
+                        inputTokens: z.ZodNumber;
+                        outputTokens: z.ZodNumber;
+                        cachedInputTokens: z.ZodNumber;
+                        cacheWriteInputTokens: z.ZodNullable<z.ZodNumber>;
+                    }, "strict", z.ZodTypeAny, {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    }, {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    }>;
+                    workspaceSnapshotDigest: z.ZodString;
+                }, "strict", z.ZodTypeAny, {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                }, {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                }>>;
+                nativeFork: z.ZodOptional<z.ZodObject<{
+                    parentTaskId: z.ZodString;
+                    parentAttemptId: z.ZodString;
+                    parentSegmentId: z.ZodString;
+                    parentManifestDigest: z.ZodString;
+                    parentThreadId: z.ZodString;
+                    parentTurnId: z.ZodString;
+                    workspaceSnapshotDigest: z.ZodString;
+                }, "strict", z.ZodTypeAny, {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                }, {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                }>>;
+                budget: z.ZodNullable<z.ZodObject<{
+                    budgetId: z.ZodString;
+                    reservationMicroUsd: z.ZodNumber;
+                    pricing: z.ZodNullable<z.ZodObject<{
+                        schemaVersion: z.ZodLiteral<1>;
+                        currency: z.ZodLiteral<"USD">;
+                        provider: z.ZodString;
+                        model: z.ZodString;
+                        version: z.ZodString;
+                        sourceUrl: z.ZodEffects<z.ZodString, string, string>;
+                        inputAccounting: z.ZodEnum<["excludes_cache", "includes_read_only", "includes_read_and_write"]>;
+                        rates: z.ZodObject<{
+                            input: z.ZodNullable<z.ZodNumber>;
+                            output: z.ZodNullable<z.ZodNumber>;
+                            cache_read: z.ZodNullable<z.ZodNumber>;
+                            cache_write_short: z.ZodNullable<z.ZodNumber>;
+                            cache_write_long: z.ZodNullable<z.ZodNumber>;
+                            cache_write_unspecified: z.ZodNullable<z.ZodNumber>;
+                            cache_storage: z.ZodNullable<z.ZodNumber>;
+                        }, "strict", z.ZodTypeAny, {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        }, {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        }>;
+                    }, "strict", z.ZodTypeAny, {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    }, {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                }, {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                }>>;
+                requiresIsolatedSecrets: z.ZodDefault<z.ZodBoolean>;
+                requiresManagedContainment: z.ZodDefault<z.ZodBoolean>;
+                requiresProviderEgressEnforcement: z.ZodDefault<z.ZodBoolean>;
+                requiresBrokeredExternalActions: z.ZodDefault<z.ZodBoolean>;
+            }, "strict", z.ZodTypeAny, {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory: boolean;
+                requiresIsolatedSecrets: boolean;
+                requiresManagedContainment: boolean;
+                requiresProviderEgressEnforcement: boolean;
+                requiresBrokeredExternalActions: boolean;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+            }, {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory?: boolean | undefined;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+                requiresIsolatedSecrets?: boolean | undefined;
+                requiresManagedContainment?: boolean | undefined;
+                requiresProviderEgressEnforcement?: boolean | undefined;
+                requiresBrokeredExternalActions?: boolean | undefined;
+            }>;
+            capabilities: z.ZodObject<{
+                workspaceSandbox: z.ZodLiteral<"harness_workspace_write">;
+                childNetworkPolicy: z.ZodLiteral<"disabled_in_requested_harness_policy">;
+                isolatedSecrets: z.ZodLiteral<false>;
+                managedContainment: z.ZodLiteral<false>;
+                providerEgressEnforcement: z.ZodLiteral<false>;
+                brokeredExternalActions: z.ZodLiteral<false>;
+                limitation: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            }, {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            }>;
+        }, "strict", z.ZodTypeAny, {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory: boolean;
+                requiresIsolatedSecrets: boolean;
+                requiresManagedContainment: boolean;
+                requiresProviderEgressEnforcement: boolean;
+                requiresBrokeredExternalActions: boolean;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        }, {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory?: boolean | undefined;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+                requiresIsolatedSecrets?: boolean | undefined;
+                requiresManagedContainment?: boolean | undefined;
+                requiresProviderEgressEnforcement?: boolean | undefined;
+                requiresBrokeredExternalActions?: boolean | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        }>, {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory: boolean;
+                requiresIsolatedSecrets: boolean;
+                requiresManagedContainment: boolean;
+                requiresProviderEgressEnforcement: boolean;
+                requiresBrokeredExternalActions: boolean;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        }, {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory?: boolean | undefined;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+                requiresIsolatedSecrets?: boolean | undefined;
+                requiresManagedContainment?: boolean | undefined;
+                requiresProviderEgressEnforcement?: boolean | undefined;
+                requiresBrokeredExternalActions?: boolean | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        schemaVersion: 1;
+        review: {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory: boolean;
+                requiresIsolatedSecrets: boolean;
+                requiresManagedContainment: boolean;
+                requiresProviderEgressEnforcement: boolean;
+                requiresBrokeredExternalActions: boolean;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        };
+        admissionRef: string;
+        admission: {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        };
+        config: {
+            projectId: string;
+            organizationId: string;
+            origin: string;
+            ownerEpoch: number;
+            destinationDid: string;
+            acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+        };
+        workerProfile: string;
+        startOperationId: string;
+    }, {
+        schemaVersion: 1;
+        review: {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory?: boolean | undefined;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+                requiresIsolatedSecrets?: boolean | undefined;
+                requiresManagedContainment?: boolean | undefined;
+                requiresProviderEgressEnforcement?: boolean | undefined;
+                requiresBrokeredExternalActions?: boolean | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        };
+        admissionRef: string;
+        admission: {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        };
+        config: {
+            projectId: string;
+            organizationId: string;
+            origin: string;
+            ownerEpoch: number;
+            destinationDid: string;
+            acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+        };
+        workerProfile: string;
+        startOperationId: string;
+    }>, {
+        schemaVersion: 1;
+        review: {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory: boolean;
+                requiresIsolatedSecrets: boolean;
+                requiresManagedContainment: boolean;
+                requiresProviderEgressEnforcement: boolean;
+                requiresBrokeredExternalActions: boolean;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        };
+        admissionRef: string;
+        admission: {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        };
+        config: {
+            projectId: string;
+            organizationId: string;
+            origin: string;
+            ownerEpoch: number;
+            destinationDid: string;
+            acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+        };
+        workerProfile: string;
+        startOperationId: string;
+    }, {
+        schemaVersion: 1;
+        review: {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory?: boolean | undefined;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+                requiresIsolatedSecrets?: boolean | undefined;
+                requiresManagedContainment?: boolean | undefined;
+                requiresProviderEgressEnforcement?: boolean | undefined;
+                requiresBrokeredExternalActions?: boolean | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        };
+        admissionRef: string;
+        admission: {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        };
+        config: {
+            projectId: string;
+            organizationId: string;
+            origin: string;
+            ownerEpoch: number;
+            destinationDid: string;
+            acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+        };
+        workerProfile: string;
+        startOperationId: string;
+    }>;
+    leadConfig: z.ZodObject<{
+        origin: z.ZodString;
+        organizationId: z.ZodString;
+        projectId: z.ZodString;
+        destinationDid: z.ZodString;
+        ownerEpoch: z.ZodNumber;
+        acceptedProviders: z.ZodOptional<z.ZodArray<z.ZodEnum<["linear", "github", "discord", "a2a", "didcomm"]>, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    }, {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    }>;
+    leadProfile: z.ZodString;
+    requireDraftPr: z.ZodBoolean;
+    commitOperation: z.ZodNullable<z.ZodString>;
+    artifactOperation: z.ZodNullable<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: 1;
+    execution: {
+        schemaVersion: 1;
+        review: {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory: boolean;
+                requiresIsolatedSecrets: boolean;
+                requiresManagedContainment: boolean;
+                requiresProviderEgressEnforcement: boolean;
+                requiresBrokeredExternalActions: boolean;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        };
+        admissionRef: string;
+        admission: {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        };
+        config: {
+            projectId: string;
+            organizationId: string;
+            origin: string;
+            ownerEpoch: number;
+            destinationDid: string;
+            acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+        };
+        workerProfile: string;
+        startOperationId: string;
+    };
+    leadConfig: {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    };
+    leadProfile: string;
+    requireDraftPr: boolean;
+    commitOperation: string | null;
+    artifactOperation: string | null;
+}, {
+    schemaVersion: 1;
+    execution: {
+        schemaVersion: 1;
+        review: {
+            capabilities: {
+                workspaceSandbox: "harness_workspace_write";
+                childNetworkPolicy: "disabled_in_requested_harness_policy";
+                isolatedSecrets: false;
+                managedContainment: false;
+                providerEgressEnforcement: false;
+                brokeredExternalActions: false;
+                limitation: string;
+            };
+            policy: {
+                budget: {
+                    pricing: {
+                        version: string;
+                        provider: string;
+                        model: string;
+                        schemaVersion: 1;
+                        currency: "USD";
+                        sourceUrl: string;
+                        inputAccounting: "excludes_cache" | "includes_read_only" | "includes_read_and_write";
+                        rates: {
+                            input: number | null;
+                            output: number | null;
+                            cache_read: number | null;
+                            cache_write_short: number | null;
+                            cache_write_long: number | null;
+                            cache_write_unspecified: number | null;
+                            cache_storage: number | null;
+                        };
+                    } | null;
+                    budgetId: string;
+                    reservationMicroUsd: number;
+                } | null;
+                persistHistory?: boolean | undefined;
+                nativeResume?: {
+                    attemptId: string;
+                    priorSegmentId: string;
+                    threadId: string;
+                    turnId: string;
+                    usageBaseline: {
+                        inputTokens: number;
+                        outputTokens: number;
+                        cachedInputTokens: number;
+                        cacheWriteInputTokens: number | null;
+                    };
+                    workspaceSnapshotDigest: string;
+                } | undefined;
+                nativeFork?: {
+                    parentTaskId: string;
+                    workspaceSnapshotDigest: string;
+                    parentAttemptId: string;
+                    parentSegmentId: string;
+                    parentManifestDigest: string;
+                    parentThreadId: string;
+                    parentTurnId: string;
+                } | undefined;
+                requiresIsolatedSecrets?: boolean | undefined;
+                requiresManagedContainment?: boolean | undefined;
+                requiresProviderEgressEnforcement?: boolean | undefined;
+                requiresBrokeredExternalActions?: boolean | undefined;
+            };
+            schemaVersion: 1;
+            manifestDigest: string;
+            manifest: {
+                taskId: string;
+                harness: string;
+                schemaVersion: 1;
+                objective: string;
+                acceptanceCriteria: {
+                    id: string;
+                    text: string;
+                }[];
+                revision: number;
+                repository: {
+                    path: string;
+                    repositoryId: string;
+                    baseCommit: string;
+                };
+                routing: {
+                    mode: "direct";
+                    leadId: string;
+                } | {
+                    mode: "pool";
+                    poolId: string;
+                };
+                maxAttempts: number;
+                model?: string | null | undefined;
+                source?: {
+                    sourceId: string;
+                    sourceRevision: number;
+                    inputDigest: string;
+                    operationId: string;
+                } | undefined;
+                dependencyBinding?: string | undefined;
+            };
+            runnerId: string;
+            expiresAtMs: number;
+            invocation: {
+                command: string;
+                args: string[];
+                executableDigest: string;
+                workspace: string;
+                stdinDigest: string;
+                timeoutMs: number;
+                providerDestinations: string[];
+                providerDestinationEnforcement: "expected_only";
+                transport: "codex_exec" | "codex_app_server";
+                configuration?: unknown;
+                nativeBinding?: unknown;
+            };
+            permittedOperations: string[];
+            prohibitedExternalOperations: string[];
+        };
+        admissionRef: string;
+        admission: {
+            projectId: string;
+            organizationId: string;
+            capabilities: ("task.execute" | "model.invoke" | "github.branch.write" | "github.pull_request.draft")[];
+            expiresAt: string;
+            taskId: string;
+            notBefore: string;
+            specRevision: number;
+            manifestDigest: string;
+            sourceRevision: number;
+            repository: string;
+            attemptNumber: number;
+            ownerEpoch: number;
+            admissionId: string;
+            schema: "kya.task.admission.v1";
+            installationId: string;
+            baseSha: string;
+            sourceOperationId: string;
+            executionOperationId: string;
+            branch: string;
+            limits: {
+                maxRuntimeSeconds: number;
+                maxOperations: number;
+                maxCostMicrousd: number;
+            };
+            leadDid: string;
+            holderDid: string;
+            policyProvenance: "administrator_registered";
+            requiresOnlineActionGate: true;
+            credentialExport: false;
+            modelPolicy?: {
+                provider: "anthropic";
+                models: string[];
+                maxOutputTokens: number;
+                maxRequestBytes: number;
+                reservedCostMicrousd: number;
+            } | undefined;
+        };
+        config: {
+            projectId: string;
+            organizationId: string;
+            origin: string;
+            ownerEpoch: number;
+            destinationDid: string;
+            acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+        };
+        workerProfile: string;
+        startOperationId: string;
+    };
+    leadConfig: {
+        projectId: string;
+        organizationId: string;
+        origin: string;
+        ownerEpoch: number;
+        destinationDid: string;
+        acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
+    };
+    leadProfile: string;
+    requireDraftPr: boolean;
+    commitOperation: string | null;
+    artifactOperation: string | null;
+}>;
+export declare const StandingSupervisorViewSchema: z.ZodObject<{
+    admissionRef: z.ZodString;
+    taskId: z.ZodString;
+    executionOperationId: z.ZodString;
+    state: z.ZodEnum<["awaiting_terminal", "awaiting_evidence", "awaiting_review", "needs_attention", "finish_unknown", "result_unknown", "recorded"]>;
+    finishOutboxId: z.ZodString;
+    resultOutboxId: z.ZodString;
+    attempts: z.ZodNumber;
+    nextAttemptMs: z.ZodNumber;
+    notice: z.ZodNullable<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    taskId: string;
+    state: "awaiting_terminal" | "awaiting_evidence" | "awaiting_review" | "needs_attention" | "finish_unknown" | "result_unknown" | "recorded";
+    executionOperationId: string;
+    admissionRef: string;
+    finishOutboxId: string;
+    resultOutboxId: string;
+    attempts: number;
+    nextAttemptMs: number;
+    notice: string | null;
+}, {
+    taskId: string;
+    state: "awaiting_terminal" | "awaiting_evidence" | "awaiting_review" | "needs_attention" | "finish_unknown" | "result_unknown" | "recorded";
+    executionOperationId: string;
+    admissionRef: string;
+    finishOutboxId: string;
+    resultOutboxId: string;
+    attempts: number;
+    nextAttemptMs: number;
+    notice: string | null;
+}>;
+export type StandingSupervisorBinding = z.infer<typeof StandingSupervisorBindingSchema>;
+export type StandingSupervisorView = z.infer<typeof StandingSupervisorViewSchema>;