@makaio/framework 1.0.0-dev-1781022866275 → 1.0.0-dev-1781023871421

package/dist/index-Bvb2mMH6.d.mts

@@ -0,0 +1,1730 @@
+import { z } from "zod";
+import * as _$_makaio_core0 from "@makaio/framework/core";
+import { MakaioBusLike } from "@makaio/framework/core";
+
+//#region core/contracts/src/harness/schemas.d.ts
+/** Approval policy used when a tool invocation requires authorization. */
+declare const ApprovalPolicySchema: z.ZodEnum<{
+  reject: "reject";
+  "always-ask": "always-ask";
+  "full-access": "full-access";
+}>;
+type ApprovalPolicy = z.infer<typeof ApprovalPolicySchema>;
+/** Per-tool approval policy overrides keyed by tool name. */
+declare const ToolApprovalOverridesSchema: z.ZodRecord<z.ZodString, z.ZodEnum<{
+  reject: "reject";
+  "always-ask": "always-ask";
+  "full-access": "full-access";
+}>>;
+type ToolApprovalOverrides = z.infer<typeof ToolApprovalOverridesSchema>;
+/**
+ * Base object shape shared between stored and create schemas.
+ * Exported for consumers that need to call `.omit()` — refined schemas
+ * (`ZodEffects`) do not support `.omit()` in Zod v4.
+ */
+declare const HarnessDefinitionBaseSchema: z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  adapterName: z.ZodOptional<z.ZodString>;
+  clientId: z.ZodOptional<z.ZodString>;
+  approvalPolicy: z.ZodDefault<z.ZodEnum<{
+    reject: "reject";
+    "always-ask": "always-ask";
+    "full-access": "full-access";
+  }>>;
+  nativeTools: z.ZodObject<{
+    enabled: z.ZodArray<z.ZodString>;
+    disabled: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>;
+  registryTools: z.ZodObject<{
+    enabled: z.ZodArray<z.ZodString>;
+    disabled: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>;
+  skills: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodArray<z.ZodString>;
+    disabled: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>>;
+  toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+    "file.read": "file.read";
+    "file.write": "file.write";
+    "file.delete": "file.delete";
+    "search.content": "search.content";
+    "search.files": "search.files";
+    "search.web": "search.web";
+    "shell.execute": "shell.execute";
+    "network.request": "network.request";
+    "process.manage": "process.manage";
+  }>>>>>;
+  capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+    reject: "reject";
+    "always-ask": "always-ask";
+    "full-access": "full-access";
+  }>>>;
+  toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+    reject: "reject";
+    "always-ask": "always-ask";
+    "full-access": "full-access";
+  }>>>;
+  env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  cwd: z.ZodOptional<z.ZodString>;
+  isDefault: z.ZodDefault<z.ZodBoolean>;
+  enabled: z.ZodDefault<z.ZodBoolean>;
+  createdAt: z.ZodNumber;
+  updatedAt: z.ZodNumber;
+}, z.core.$strip>;
+/**
+ * Stored harness definition.
+ *
+ * A harness selects tool availability and execution policies for one adapter.
+ * Either `adapterName` (for API-only adapters) or `clientId` (for client-scoped
+ * harnesses) must be set; both may be present.
+ */
+declare const HarnessDefinitionSchema: z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  adapterName: z.ZodOptional<z.ZodString>;
+  clientId: z.ZodOptional<z.ZodString>;
+  approvalPolicy: z.ZodDefault<z.ZodEnum<{
+    reject: "reject";
+    "always-ask": "always-ask";
+    "full-access": "full-access";
+  }>>;
+  nativeTools: z.ZodObject<{
+    enabled: z.ZodArray<z.ZodString>;
+    disabled: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>;
+  registryTools: z.ZodObject<{
+    enabled: z.ZodArray<z.ZodString>;
+    disabled: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>;
+  skills: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodArray<z.ZodString>;
+    disabled: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>>;
+  toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+    "file.read": "file.read";
+    "file.write": "file.write";
+    "file.delete": "file.delete";
+    "search.content": "search.content";
+    "search.files": "search.files";
+    "search.web": "search.web";
+    "shell.execute": "shell.execute";
+    "network.request": "network.request";
+    "process.manage": "process.manage";
+  }>>>>>;
+  capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+    reject: "reject";
+    "always-ask": "always-ask";
+    "full-access": "full-access";
+  }>>>;
+  toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+    reject: "reject";
+    "always-ask": "always-ask";
+    "full-access": "full-access";
+  }>>>;
+  env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  cwd: z.ZodOptional<z.ZodString>;
+  isDefault: z.ZodDefault<z.ZodBoolean>;
+  enabled: z.ZodDefault<z.ZodBoolean>;
+  createdAt: z.ZodNumber;
+  updatedAt: z.ZodNumber;
+}, z.core.$strip>;
+type HarnessDefinition = z.infer<typeof HarnessDefinitionSchema>;
+/** Input payload for create/update operations. */
+declare const HarnessDefinitionCreateSchema: z.ZodObject<{
+  description: z.ZodOptional<z.ZodString>;
+  name: z.ZodString;
+  adapterName: z.ZodOptional<z.ZodString>;
+  clientId: z.ZodOptional<z.ZodString>;
+  cwd: z.ZodOptional<z.ZodString>;
+  env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  nativeTools: z.ZodObject<{
+    enabled: z.ZodArray<z.ZodString>;
+    disabled: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>;
+  toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+    "file.read": "file.read";
+    "file.write": "file.write";
+    "file.delete": "file.delete";
+    "search.content": "search.content";
+    "search.files": "search.files";
+    "search.web": "search.web";
+    "shell.execute": "shell.execute";
+    "network.request": "network.request";
+    "process.manage": "process.manage";
+  }>>>>>;
+  capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+    reject: "reject";
+    "always-ask": "always-ask";
+    "full-access": "full-access";
+  }>>>;
+  toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+    reject: "reject";
+    "always-ask": "always-ask";
+    "full-access": "full-access";
+  }>>>;
+  registryTools: z.ZodObject<{
+    enabled: z.ZodArray<z.ZodString>;
+    disabled: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>;
+  skills: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodArray<z.ZodString>;
+    disabled: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>>;
+  approvalPolicy: z.ZodOptional<z.ZodEnum<{
+    reject: "reject";
+    "always-ask": "always-ask";
+    "full-access": "full-access";
+  }>>;
+  isDefault: z.ZodOptional<z.ZodBoolean>;
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type HarnessDefinitionCreate = z.infer<typeof HarnessDefinitionCreateSchema>;
+/** Shipped default harness shape (timestamps are generated at seed time). */
+type DefaultHarnessDefinition = Omit<HarnessDefinition, 'createdAt' | 'updatedAt'>;
+//#endregion
+//#region core/contracts/src/harness/namespace.d.ts
+declare const HarnessSchemas: {
+  get: {
+    request: z.ZodObject<{
+      id: z.ZodOptional<z.ZodString>;
+      name: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      cwd: z.ZodOptional<z.ZodString>;
+      isDefault: z.ZodDefault<z.ZodBoolean>;
+      enabled: z.ZodDefault<z.ZodBoolean>;
+      createdAt: z.ZodNumber;
+      updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+  };
+  list: {
+    request: z.ZodObject<{
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      harnesses: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        adapterName: z.ZodOptional<z.ZodString>;
+        clientId: z.ZodOptional<z.ZodString>;
+        approvalPolicy: z.ZodDefault<z.ZodEnum<{
+          reject: "reject";
+          "always-ask": "always-ask";
+          "full-access": "full-access";
+        }>>;
+        nativeTools: z.ZodObject<{
+          enabled: z.ZodArray<z.ZodString>;
+          disabled: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        registryTools: z.ZodObject<{
+          enabled: z.ZodArray<z.ZodString>;
+          disabled: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        skills: z.ZodOptional<z.ZodObject<{
+          enabled: z.ZodArray<z.ZodString>;
+          disabled: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+        toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+          "file.read": "file.read";
+          "file.write": "file.write";
+          "file.delete": "file.delete";
+          "search.content": "search.content";
+          "search.files": "search.files";
+          "search.web": "search.web";
+          "shell.execute": "shell.execute";
+          "network.request": "network.request";
+          "process.manage": "process.manage";
+        }>>>>>;
+        capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+          reject: "reject";
+          "always-ask": "always-ask";
+          "full-access": "full-access";
+        }>>>;
+        toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+          reject: "reject";
+          "always-ask": "always-ask";
+          "full-access": "full-access";
+        }>>>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        isDefault: z.ZodDefault<z.ZodBoolean>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        createdAt: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+      }, z.core.$strip>>;
+    }, z.core.$strip>;
+  };
+  set: {
+    request: z.ZodObject<{
+      description: z.ZodOptional<z.ZodString>;
+      name: z.ZodString;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      cwd: z.ZodOptional<z.ZodString>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      approvalPolicy: z.ZodOptional<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      isDefault: z.ZodOptional<z.ZodBoolean>;
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+    }, z.core.$strip>;
+  };
+  delete: {
+    request: z.ZodObject<{
+      id: z.ZodString;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      success: z.ZodBoolean;
+    }, z.core.$strip>;
+  };
+  getDefault: {
+    request: z.ZodObject<{
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      cwd: z.ZodOptional<z.ZodString>;
+      isDefault: z.ZodDefault<z.ZodBoolean>;
+      enabled: z.ZodDefault<z.ZodBoolean>;
+      createdAt: z.ZodNumber;
+      updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+  };
+  resolve: {
+    request: z.ZodObject<{
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      personaHarnessId: z.ZodOptional<z.ZodString>;
+      profileHarnessId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      cwd: z.ZodOptional<z.ZodString>;
+      isDefault: z.ZodDefault<z.ZodBoolean>;
+      enabled: z.ZodDefault<z.ZodBoolean>;
+      createdAt: z.ZodNumber;
+      updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+  };
+  getSchema: {
+    request: z.ZodObject<{}, z.core.$strip>;
+    response: z.ZodObject<{
+      schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+      uiConfig: z.ZodObject<{
+        editMode: z.ZodDefault<z.ZodEnum<{
+          inline: "inline";
+          slidePanel: "slidePanel";
+          fullPage: "fullPage";
+        }>>;
+        hiddenFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        readOnlyInEditMode: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        fieldOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+          widget: z.ZodOptional<z.ZodString>;
+          delimiter: z.ZodOptional<z.ZodString>;
+          placeholder: z.ZodOptional<z.ZodString>;
+          helpText: z.ZodOptional<z.ZodString>;
+          min: z.ZodOptional<z.ZodNumber>;
+          max: z.ZodOptional<z.ZodNumber>;
+          step: z.ZodOptional<z.ZodNumber>;
+          options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            label: z.ZodString;
+          }, z.core.$strip>>>;
+        }, z.core.$strip>>>;
+        sections: z.ZodOptional<z.ZodArray<z.ZodObject<{
+          id: z.ZodString;
+          title: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>>;
+      }, z.core.$strip>;
+    }, z.core.$strip>;
+  }; /** Emitted after a new harness definition is inserted. */
+  created: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    adapterName: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodOptional<z.ZodString>;
+    approvalPolicy: z.ZodDefault<z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>;
+    nativeTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    registryTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    skills: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+      "file.read": "file.read";
+      "file.write": "file.write";
+      "file.delete": "file.delete";
+      "search.content": "search.content";
+      "search.files": "search.files";
+      "search.web": "search.web";
+      "shell.execute": "shell.execute";
+      "network.request": "network.request";
+      "process.manage": "process.manage";
+    }>>>>>;
+    capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    isDefault: z.ZodDefault<z.ZodBoolean>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+  }, z.core.$strip>; /** Emitted after an existing harness definition is updated. */
+  updated: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    adapterName: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodOptional<z.ZodString>;
+    approvalPolicy: z.ZodDefault<z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>;
+    nativeTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    registryTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    skills: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+      "file.read": "file.read";
+      "file.write": "file.write";
+      "file.delete": "file.delete";
+      "search.content": "search.content";
+      "search.files": "search.files";
+      "search.web": "search.web";
+      "shell.execute": "shell.execute";
+      "network.request": "network.request";
+      "process.manage": "process.manage";
+    }>>>>>;
+    capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    isDefault: z.ZodDefault<z.ZodBoolean>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+  }, z.core.$strip>; /** Emitted after a harness definition is deleted. */
+  deleted: z.ZodObject<{
+    id: z.ZodString;
+  }, z.core.$strip>;
+};
+declare const HarnessNamespace: _$_makaio_core0.BusNamespaceDefinition<"harness", {
+  get: {
+    request: z.ZodObject<{
+      id: z.ZodOptional<z.ZodString>;
+      name: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      cwd: z.ZodOptional<z.ZodString>;
+      isDefault: z.ZodDefault<z.ZodBoolean>;
+      enabled: z.ZodDefault<z.ZodBoolean>;
+      createdAt: z.ZodNumber;
+      updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+  };
+  list: {
+    request: z.ZodObject<{
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      harnesses: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        adapterName: z.ZodOptional<z.ZodString>;
+        clientId: z.ZodOptional<z.ZodString>;
+        approvalPolicy: z.ZodDefault<z.ZodEnum<{
+          reject: "reject";
+          "always-ask": "always-ask";
+          "full-access": "full-access";
+        }>>;
+        nativeTools: z.ZodObject<{
+          enabled: z.ZodArray<z.ZodString>;
+          disabled: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        registryTools: z.ZodObject<{
+          enabled: z.ZodArray<z.ZodString>;
+          disabled: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        skills: z.ZodOptional<z.ZodObject<{
+          enabled: z.ZodArray<z.ZodString>;
+          disabled: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+        toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+          "file.read": "file.read";
+          "file.write": "file.write";
+          "file.delete": "file.delete";
+          "search.content": "search.content";
+          "search.files": "search.files";
+          "search.web": "search.web";
+          "shell.execute": "shell.execute";
+          "network.request": "network.request";
+          "process.manage": "process.manage";
+        }>>>>>;
+        capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+          reject: "reject";
+          "always-ask": "always-ask";
+          "full-access": "full-access";
+        }>>>;
+        toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+          reject: "reject";
+          "always-ask": "always-ask";
+          "full-access": "full-access";
+        }>>>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        isDefault: z.ZodDefault<z.ZodBoolean>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        createdAt: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+      }, z.core.$strip>>;
+    }, z.core.$strip>;
+  };
+  set: {
+    request: z.ZodObject<{
+      description: z.ZodOptional<z.ZodString>;
+      name: z.ZodString;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      cwd: z.ZodOptional<z.ZodString>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      approvalPolicy: z.ZodOptional<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      isDefault: z.ZodOptional<z.ZodBoolean>;
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+    }, z.core.$strip>;
+  };
+  delete: {
+    request: z.ZodObject<{
+      id: z.ZodString;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      success: z.ZodBoolean;
+    }, z.core.$strip>;
+  };
+  getDefault: {
+    request: z.ZodObject<{
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      cwd: z.ZodOptional<z.ZodString>;
+      isDefault: z.ZodDefault<z.ZodBoolean>;
+      enabled: z.ZodDefault<z.ZodBoolean>;
+      createdAt: z.ZodNumber;
+      updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+  };
+  resolve: {
+    request: z.ZodObject<{
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      personaHarnessId: z.ZodOptional<z.ZodString>;
+      profileHarnessId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      cwd: z.ZodOptional<z.ZodString>;
+      isDefault: z.ZodDefault<z.ZodBoolean>;
+      enabled: z.ZodDefault<z.ZodBoolean>;
+      createdAt: z.ZodNumber;
+      updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+  };
+  getSchema: {
+    request: z.ZodObject<{}, z.core.$strip>;
+    response: z.ZodObject<{
+      schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+      uiConfig: z.ZodObject<{
+        editMode: z.ZodDefault<z.ZodEnum<{
+          inline: "inline";
+          slidePanel: "slidePanel";
+          fullPage: "fullPage";
+        }>>;
+        hiddenFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        readOnlyInEditMode: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        fieldOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+          widget: z.ZodOptional<z.ZodString>;
+          delimiter: z.ZodOptional<z.ZodString>;
+          placeholder: z.ZodOptional<z.ZodString>;
+          helpText: z.ZodOptional<z.ZodString>;
+          min: z.ZodOptional<z.ZodNumber>;
+          max: z.ZodOptional<z.ZodNumber>;
+          step: z.ZodOptional<z.ZodNumber>;
+          options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            label: z.ZodString;
+          }, z.core.$strip>>>;
+        }, z.core.$strip>>>;
+        sections: z.ZodOptional<z.ZodArray<z.ZodObject<{
+          id: z.ZodString;
+          title: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>>;
+      }, z.core.$strip>;
+    }, z.core.$strip>;
+  }; /** Emitted after a new harness definition is inserted. */
+  created: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    adapterName: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodOptional<z.ZodString>;
+    approvalPolicy: z.ZodDefault<z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>;
+    nativeTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    registryTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    skills: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+      "file.read": "file.read";
+      "file.write": "file.write";
+      "file.delete": "file.delete";
+      "search.content": "search.content";
+      "search.files": "search.files";
+      "search.web": "search.web";
+      "shell.execute": "shell.execute";
+      "network.request": "network.request";
+      "process.manage": "process.manage";
+    }>>>>>;
+    capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    isDefault: z.ZodDefault<z.ZodBoolean>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+  }, z.core.$strip>; /** Emitted after an existing harness definition is updated. */
+  updated: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    adapterName: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodOptional<z.ZodString>;
+    approvalPolicy: z.ZodDefault<z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>;
+    nativeTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    registryTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    skills: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+      "file.read": "file.read";
+      "file.write": "file.write";
+      "file.delete": "file.delete";
+      "search.content": "search.content";
+      "search.files": "search.files";
+      "search.web": "search.web";
+      "shell.execute": "shell.execute";
+      "network.request": "network.request";
+      "process.manage": "process.manage";
+    }>>>>>;
+    capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    isDefault: z.ZodDefault<z.ZodBoolean>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+  }, z.core.$strip>; /** Emitted after a harness definition is deleted. */
+  deleted: z.ZodObject<{
+    id: z.ZodString;
+  }, z.core.$strip>;
+}>;
+declare const HarnessSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatSubjectDefinitions<"harness", {
+  get: {
+    request: z.ZodObject<{
+      id: z.ZodOptional<z.ZodString>;
+      name: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      cwd: z.ZodOptional<z.ZodString>;
+      isDefault: z.ZodDefault<z.ZodBoolean>;
+      enabled: z.ZodDefault<z.ZodBoolean>;
+      createdAt: z.ZodNumber;
+      updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+  };
+  list: {
+    request: z.ZodObject<{
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      harnesses: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        adapterName: z.ZodOptional<z.ZodString>;
+        clientId: z.ZodOptional<z.ZodString>;
+        approvalPolicy: z.ZodDefault<z.ZodEnum<{
+          reject: "reject";
+          "always-ask": "always-ask";
+          "full-access": "full-access";
+        }>>;
+        nativeTools: z.ZodObject<{
+          enabled: z.ZodArray<z.ZodString>;
+          disabled: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        registryTools: z.ZodObject<{
+          enabled: z.ZodArray<z.ZodString>;
+          disabled: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        skills: z.ZodOptional<z.ZodObject<{
+          enabled: z.ZodArray<z.ZodString>;
+          disabled: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+        toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+          "file.read": "file.read";
+          "file.write": "file.write";
+          "file.delete": "file.delete";
+          "search.content": "search.content";
+          "search.files": "search.files";
+          "search.web": "search.web";
+          "shell.execute": "shell.execute";
+          "network.request": "network.request";
+          "process.manage": "process.manage";
+        }>>>>>;
+        capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+          reject: "reject";
+          "always-ask": "always-ask";
+          "full-access": "full-access";
+        }>>>;
+        toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+          reject: "reject";
+          "always-ask": "always-ask";
+          "full-access": "full-access";
+        }>>>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        isDefault: z.ZodDefault<z.ZodBoolean>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        createdAt: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+      }, z.core.$strip>>;
+    }, z.core.$strip>;
+  };
+  set: {
+    request: z.ZodObject<{
+      description: z.ZodOptional<z.ZodString>;
+      name: z.ZodString;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      cwd: z.ZodOptional<z.ZodString>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      approvalPolicy: z.ZodOptional<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      isDefault: z.ZodOptional<z.ZodBoolean>;
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+    }, z.core.$strip>;
+  };
+  delete: {
+    request: z.ZodObject<{
+      id: z.ZodString;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      success: z.ZodBoolean;
+    }, z.core.$strip>;
+  };
+  getDefault: {
+    request: z.ZodObject<{
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      cwd: z.ZodOptional<z.ZodString>;
+      isDefault: z.ZodDefault<z.ZodBoolean>;
+      enabled: z.ZodDefault<z.ZodBoolean>;
+      createdAt: z.ZodNumber;
+      updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+  };
+  resolve: {
+    request: z.ZodObject<{
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      personaHarnessId: z.ZodOptional<z.ZodString>;
+      profileHarnessId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    response: z.ZodObject<{
+      id: z.ZodString;
+      name: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      adapterName: z.ZodOptional<z.ZodString>;
+      clientId: z.ZodOptional<z.ZodString>;
+      approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>;
+      nativeTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      registryTools: z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>;
+      skills: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        disabled: z.ZodArray<z.ZodString>;
+      }, z.core.$strip>>;
+      toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        "file.read": "file.read";
+        "file.write": "file.write";
+        "file.delete": "file.delete";
+        "search.content": "search.content";
+        "search.files": "search.files";
+        "search.web": "search.web";
+        "shell.execute": "shell.execute";
+        "network.request": "network.request";
+        "process.manage": "process.manage";
+      }>>>>>;
+      capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        reject: "reject";
+        "always-ask": "always-ask";
+        "full-access": "full-access";
+      }>>>;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      cwd: z.ZodOptional<z.ZodString>;
+      isDefault: z.ZodDefault<z.ZodBoolean>;
+      enabled: z.ZodDefault<z.ZodBoolean>;
+      createdAt: z.ZodNumber;
+      updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+  };
+  getSchema: {
+    request: z.ZodObject<{}, z.core.$strip>;
+    response: z.ZodObject<{
+      schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+      uiConfig: z.ZodObject<{
+        editMode: z.ZodDefault<z.ZodEnum<{
+          inline: "inline";
+          slidePanel: "slidePanel";
+          fullPage: "fullPage";
+        }>>;
+        hiddenFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        readOnlyInEditMode: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        fieldOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+          widget: z.ZodOptional<z.ZodString>;
+          delimiter: z.ZodOptional<z.ZodString>;
+          placeholder: z.ZodOptional<z.ZodString>;
+          helpText: z.ZodOptional<z.ZodString>;
+          min: z.ZodOptional<z.ZodNumber>;
+          max: z.ZodOptional<z.ZodNumber>;
+          step: z.ZodOptional<z.ZodNumber>;
+          options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            label: z.ZodString;
+          }, z.core.$strip>>>;
+        }, z.core.$strip>>>;
+        sections: z.ZodOptional<z.ZodArray<z.ZodObject<{
+          id: z.ZodString;
+          title: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>>;
+      }, z.core.$strip>;
+    }, z.core.$strip>;
+  }; /** Emitted after a new harness definition is inserted. */
+  created: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    adapterName: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodOptional<z.ZodString>;
+    approvalPolicy: z.ZodDefault<z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>;
+    nativeTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    registryTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    skills: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+      "file.read": "file.read";
+      "file.write": "file.write";
+      "file.delete": "file.delete";
+      "search.content": "search.content";
+      "search.files": "search.files";
+      "search.web": "search.web";
+      "shell.execute": "shell.execute";
+      "network.request": "network.request";
+      "process.manage": "process.manage";
+    }>>>>>;
+    capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    isDefault: z.ZodDefault<z.ZodBoolean>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+  }, z.core.$strip>; /** Emitted after an existing harness definition is updated. */
+  updated: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    adapterName: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodOptional<z.ZodString>;
+    approvalPolicy: z.ZodDefault<z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>;
+    nativeTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    registryTools: z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    skills: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodArray<z.ZodString>;
+      disabled: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    toolCapabilityMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+      "file.read": "file.read";
+      "file.write": "file.write";
+      "file.delete": "file.delete";
+      "search.content": "search.content";
+      "search.files": "search.files";
+      "search.web": "search.web";
+      "shell.execute": "shell.execute";
+      "network.request": "network.request";
+      "process.manage": "process.manage";
+    }>>>>>;
+    capabilityOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    toolApprovalOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+      reject: "reject";
+      "always-ask": "always-ask";
+      "full-access": "full-access";
+    }>>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    isDefault: z.ZodDefault<z.ZodBoolean>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+  }, z.core.$strip>; /** Emitted after a harness definition is deleted. */
+  deleted: z.ZodObject<{
+    id: z.ZodString;
+  }, z.core.$strip>;
+}>, "harness">;
+//#endregion
+//#region core/contracts/src/tool-capability/capabilities.d.ts
+/**
+ * Canonical capability taxonomy. Platform-owned and adapter-agnostic.
+ * Tools map to one or more capabilities at declaration time.
+ */
+declare const ToolCapability: {
+  /** Read the contents of a file from the local filesystem. */readonly FILE_READ: "file.read"; /** Write or create a file on the local filesystem. */
+  readonly FILE_WRITE: "file.write"; /** Delete a file or directory from the local filesystem. */
+  readonly FILE_DELETE: "file.delete"; /** Search within file contents (grep-style). */
+  readonly SEARCH_CONTENT: "search.content"; /** Search for files by name or pattern (glob/find-style). */
+  readonly SEARCH_FILES: "search.files"; /** Perform a web or internet search. */
+  readonly SEARCH_WEB: "search.web"; /** Execute arbitrary shell commands. */
+  readonly SHELL_EXECUTE: "shell.execute"; /** Make HTTP or other network requests. */
+  readonly NETWORK_REQUEST: "network.request"; /** Start, stop, or otherwise manage OS processes. */
+  readonly PROCESS_MANAGE: "process.manage";
+};
+/** Union of all capability string literals. */
+type ToolCapability = (typeof ToolCapability)[keyof typeof ToolCapability];
+/**
+ * Semantic meta-tags derived from a tool's capability set.
+ *
+ * - `'read-only'`  — the tool only reads state; it never mutates anything.
+ * - `'destructive'` — the tool can modify or destroy data/processes.
+ */
+type ToolMetaTag = 'read-only' | 'destructive';
+declare const ToolCapabilitySchema: z.ZodEnum<{
+  "file.read": "file.read";
+  "file.write": "file.write";
+  "file.delete": "file.delete";
+  "search.content": "search.content";
+  "search.files": "search.files";
+  "search.web": "search.web";
+  "shell.execute": "shell.execute";
+  "network.request": "network.request";
+  "process.manage": "process.manage";
+}>;
+/**
+ * Derives semantic meta-tags from a tool's declared capabilities.
+ *
+ * - Returns `'read-only'` when **all** capabilities are in
+ * the read-only capability set (the tool observes only).
+ * - Returns `'destructive'` when **any** capability is in
+ * the destructive capability set (the tool can mutate/destroy).
+ * - No tags may be returned (e.g. a tool with only `NETWORK_REQUEST` receives
+ * neither {@link ToolMetaTag}).
+ * - `'read-only'` and `'destructive'` cannot both be returned in the current
+ * taxonomy because the read-only and destructive capability sets are disjoint.
+ * @param capabilities - The capability values declared by the tool.
+ * @returns An array of {@link ToolMetaTag} values that apply to the tool.
+ */
+declare function computeMetaTags(capabilities: readonly ToolCapability[]): ToolMetaTag[];
+//#endregion
+//#region core/contracts/src/tool-capability/picker-types.d.ts
+/**
+ * Composite value emitted by the CapabilityPicker widget.
+ * Controls four schema fields via a single widget.
+ * @param allowedCapabilities - Capabilities explicitly allowed (present = allowed in three-state model)
+ * @param disallowedCapabilities - Capabilities explicitly disallowed (present = disallowed in three-state model)
+ * @param allowedTools - Raw tool name overrides that bypass capability filtering
+ * @param disallowedTools - Raw tool names explicitly blocked
+ */
+interface CapabilityPickerValue {
+  /** Capabilities explicitly allowed (three-state: present = allowed). */
+  allowedCapabilities: ToolCapability[];
+  /** Capabilities explicitly disallowed (three-state: present = disallowed). */
+  disallowedCapabilities: ToolCapability[];
+  /** Raw tool name overrides that bypass capability filtering. */
+  allowedTools: string[];
+  /** Raw tool names explicitly blocked. */
+  disallowedTools: string[];
+}
+/**
+ * A capability with its resolved tools and meta-tags, ready for rendering.
+ * @param capability - Canonical capability identifier
+ * @param label - Human-readable label derived from capability
+ * @param resolvedTools - Tool names in the active harness that declare this capability
+ * @param metaTags - Computed meta-tags for tools with only this capability
+ */
+interface CapabilityItem {
+  /** Canonical capability identifier. */
+  capability: ToolCapability;
+  /** Human-readable label (derived from capability, e.g., 'file.read' → 'File Read'). */
+  label: string;
+  /** Tool names in the active harness that declare this capability. */
+  resolvedTools: string[];
+  /** Computed meta-tags for tools with only this capability. */
+  metaTags: ToolMetaTag[];
+}
+/**
+ * Capabilities grouped by dotted-namespace prefix for rendering.
+ * @param label - Group label (e.g., 'File', 'Shell', 'Search')
+ * @param items - Capabilities in this group
+ */
+interface CapabilityGroup {
+  /** Group label (e.g., 'File', 'Shell', 'Search', 'Network', 'Process'). */
+  label: string;
+  /** Capabilities in this group. */
+  items: CapabilityItem[];
+}
+//#endregion
+//#region core/contracts/src/harness/expand-capabilities.d.ts
+/**
+ * Looks up the declared capabilities for a tool name.
+ * @param toolName - Adapter-native tool name (e.g., 'bash', 'Read')
+ * @param capabilityMap - Map of tool names to their declared capabilities
+ * @returns Declared capabilities, or empty array if the tool has no capability mapping
+ */
+declare function getToolCapabilities(toolName: string, capabilityMap: Readonly<Record<string, readonly ToolCapability[]>>): readonly ToolCapability[];
+/** Input parameters for {@link expandCapabilities}. */
+interface ExpandCapabilitiesParams {
+  /** Tool names currently registered/enabled by the active harness. */
+  registeredTools: readonly string[];
+  /**
+   * Capabilities to allow. When empty, no capability-based filtering is
+   * applied and `allowedTools` in the result will be empty.
+   *
+   * Callers are expected to merge the returned `allowedTools` with any
+   * explicit `allowedTools` from the profile (Stance B overrides) at
+   * resolution time; this function does not handle that merge.
+   */
+  allowedCapabilities: readonly ToolCapability[];
+  /** Capabilities to disallow. */
+  disallowedCapabilities: readonly ToolCapability[];
+  /** Map of tool names to their declared capabilities. */
+  capabilityMap: Readonly<Record<string, readonly ToolCapability[]>>;
+}
+/** Expanded concrete tool name lists produced by {@link expandCapabilities}. */
+interface ExpandCapabilitiesResult {
+  /** Tool names whose capabilities are all within the allowed set. */
+  allowedTools: string[];
+  /** Tool names that have at least one disallowed capability. */
+  disallowedTools: string[];
+}
+/**
+ * Expands capability filters to concrete tool names using the ALL-match rule.
+ * Only tools present in `registeredTools` are evaluated.
+ *
+ * A tool is included in `allowedTools` only if all its capabilities fall within
+ * the allowed set. A tool is included in `disallowedTools` if any of its
+ * capabilities falls within the disallowed set.
+ *
+ * Explicit `allowedTools` overrides (Stance B) are intentionally not handled
+ * here; that merge belongs to the caller.
+ * @param params - Expansion parameters; see {@link ExpandCapabilitiesParams}.
+ * @returns Expanded tool name lists; see {@link ExpandCapabilitiesResult}.
+ */
+declare function expandCapabilities(params: ExpandCapabilitiesParams): ExpandCapabilitiesResult;
+/**
+ * Config shape consumed by {@link expandProfileToolCapabilities}.
+ * Matches the common subset shared by ProfileDefinition, Persona, and ad-hoc
+ * SubagentConfig-level callers.
+ */
+interface ProfileToolCapabilitiesConfig {
+  /** Capabilities to allow; drives expansion to concrete tool names. */
+  allowedCapabilities?: readonly ToolCapability[];
+  /** Capabilities to disallow; drives expansion to concrete tool names. */
+  disallowedCapabilities?: readonly ToolCapability[];
+  /** Harness ID used to load the capability map and registered tools. */
+  harnessId?: string;
+  /** Explicit allowed tool names to union with expanded results (Stance B). */
+  allowedTools?: readonly string[];
+  /** Explicit disallowed tool names to union with expanded results (Stance B). */
+  disallowedTools?: readonly string[];
+}
+/**
+ * Expands capability-based filters from a profile-like config into concrete
+ * tool names, loading the harness capability map via bus.
+ *
+ * This is a no-op when no capability fields are set, when `harnessId` is
+ * absent, or when the resolved harness has no `toolCapabilityMap`. In all
+ * these cases the explicit `allowedTools` / `disallowedTools` are returned
+ * unchanged.
+ *
+ * Results are unioned with the explicit tool lists (Stance B): explicit names
+ * are never removed by capability expansion.
+ * @param bus - Bus for harness RPC
+ * @param config - Object with capability and explicit tool list fields
+ * @returns Expanded `allowedTools` and `disallowedTools` (Stance B union applied)
+ */
+declare function expandProfileToolCapabilities(bus: MakaioBusLike, config: ProfileToolCapabilitiesConfig): Promise<{
+  allowedTools?: string[];
+  disallowedTools?: string[];
+}>;
+//#endregion
+//#region core/contracts/src/harness/codex-capability-map.d.ts
+/**
+ * Canonical capability map for Codex native harness tools.
+ *
+ * This is shared by contracts defaults and the codex-app-server adapter to
+ * keep capability taxonomy in one place and avoid drift.
+ */
+declare const codexCapabilityMap: {
+  readonly bash: readonly ["shell.execute", "file.read", "file.write", "file.delete", "network.request", "process.manage"];
+  readonly patch: readonly ["file.write"];
+};
+//#endregion
+//#region core/contracts/src/harness/defaults.d.ts
+/** Default harness for codex-app-server native tools. */
+declare const CODEX_APP_SERVER_NATIVE_HARNESS: DefaultHarnessDefinition;
+/** Default harness for openai-node adapter using registry tools only. */
+declare const OPENAI_NODE_REGISTRY_HARNESS: DefaultHarnessDefinition;
+/** Default harness for claude-code adapter using registry tools only. */
+declare const CLAUDE_CODE_REGISTRY_HARNESS: DefaultHarnessDefinition;
+/** Default harness for gemini-sdk adapter using registry tools only. */
+declare const GEMINI_SDK_REGISTRY_HARNESS: DefaultHarnessDefinition;
+/** Shipped default harnesses registered during service initialization. */
+declare const DEFAULT_HARNESSES: DefaultHarnessDefinition[];
+//#endregion
+export { HarnessDefinitionSchema as A, ApprovalPolicy as C, HarnessDefinitionBaseSchema as D, HarnessDefinition as E, ToolApprovalOverridesSchema as M, HarnessDefinitionCreate as O, HarnessSubjects as S, DefaultHarnessDefinition as T, ToolCapabilitySchema as _, OPENAI_NODE_REGISTRY_HARNESS as a, HarnessNamespace as b, ExpandCapabilitiesResult as c, expandProfileToolCapabilities as d, getToolCapabilities as f, ToolCapability as g, CapabilityPickerValue as h, GEMINI_SDK_REGISTRY_HARNESS as i, ToolApprovalOverrides as j, HarnessDefinitionCreateSchema as k, ProfileToolCapabilitiesConfig as l, CapabilityItem as m, CODEX_APP_SERVER_NATIVE_HARNESS as n, codexCapabilityMap as o, CapabilityGroup as p, DEFAULT_HARNESSES as r, ExpandCapabilitiesParams as s, CLAUDE_CODE_REGISTRY_HARNESS as t, expandCapabilities as u, ToolMetaTag as v, ApprovalPolicySchema as w, HarnessSchemas as x, computeMetaTags as y };