@makaio/framework 1.0.0-dev-1783687982716 → 1.0.0-dev-1783940945655

package/dist/{index-CAhKyxfm.d.mts → index-DlUPWOh4.d.mts}

@@ -1,5 +1,5 @@
-import { It as ArtifactRevision$1 } from "./index-B9d_8_V2.mjs";
-import { i as JsonValue$1, t as JsonObjectContractSchema } from "./json-value-DtIkQN7g.mjs";
+import { It as ArtifactRevision$1 } from "./index-9g0agW_p.mjs";
+import { i as JsonValue$1, t as JsonObjectContractSchema } from "./json-value-C8duSh9X.mjs";
 import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
 import { ExtractSubjectPayload, SubjectDefinition, TypedPayloadFilter } from "@makaio/framework/core";
@@ -177,8 +177,8 @@ declare const WorkflowNodeTypeSchema: z.ZodEnum<{
   "delegate-agent": "delegate-agent";
   "delegate-role": "delegate-role";
   sequence: "sequence";
-  parallel: "parallel";
   gate: "gate";
+  parallel: "parallel";
   iterate: "iterate";
   "iterate-chain": "iterate-chain";
   loop: "loop";
@@ -906,8 +906,8 @@ declare const WorkflowFrameStateSchema$1: z.ZodObject<{
     "delegate-agent": "delegate-agent";
     "delegate-role": "delegate-role";
     sequence: "sequence";
-    parallel: "parallel";
     gate: "gate";
+    parallel: "parallel";
     iterate: "iterate";
     "iterate-chain": "iterate-chain";
     loop: "loop";
@@ -993,21 +993,85 @@ declare const WorkflowResolvedRoleSchema: z.ZodObject<{
   harnessId: z.ZodOptional<z.ZodString>;
   systemPrompt: z.ZodOptional<z.ZodString>;
   contextMode: z.ZodOptional<z.ZodEnum<{
-    fork: "fork";
     fresh: "fresh";
+    fork: "fork";
   }>>;
-  providerContext: z.ZodOptional<z.ZodObject<{
+  providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"resolved">;
     providerConfigId: z.ZodString;
     definitionId: z.ZodString;
     endpointOverrides: z.ZodOptional<z.ZodObject<{
       anthropic: z.ZodOptional<z.ZodString>;
       openai: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
-    credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-    credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+      mode: z.ZodLiteral<"explicit">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"explicit">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        fields: z.ZodArray<z.ZodObject<{
+          id: z.ZodString;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          required: z.ZodBoolean;
+          secret: z.ZodBoolean;
+          sourceHints: z.ZodArray<z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            variable: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>;
+      credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"inferred">;
+      method: z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"inferred">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+      account: z.ZodOptional<z.ZodObject<{
+        managerId: z.ZodString;
+        accountId: z.ZodString;
+      }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"none">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"none">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+    }, z.core.$strict>], "mode">;
     capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-  }, z.core.$strip>>;
+  }, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"unresolved">;
+  }, z.core.$strict>], "state">>;
   completion: z.ZodOptional<z.ZodEnum<{
     tool: "tool";
     turn: "turn";
@@ -1035,21 +1099,85 @@ declare const WorkflowResolvedAgentSchema: z.ZodObject<{
   harnessId: z.ZodOptional<z.ZodString>;
   systemPrompt: z.ZodOptional<z.ZodString>;
   contextMode: z.ZodOptional<z.ZodEnum<{
-    fork: "fork";
     fresh: "fresh";
+    fork: "fork";
   }>>;
-  providerContext: z.ZodOptional<z.ZodObject<{
+  providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"resolved">;
     providerConfigId: z.ZodString;
     definitionId: z.ZodString;
     endpointOverrides: z.ZodOptional<z.ZodObject<{
       anthropic: z.ZodOptional<z.ZodString>;
       openai: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
-    credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-    credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+      mode: z.ZodLiteral<"explicit">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"explicit">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        fields: z.ZodArray<z.ZodObject<{
+          id: z.ZodString;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          required: z.ZodBoolean;
+          secret: z.ZodBoolean;
+          sourceHints: z.ZodArray<z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            variable: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>;
+      credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"inferred">;
+      method: z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"inferred">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+      account: z.ZodOptional<z.ZodObject<{
+        managerId: z.ZodString;
+        accountId: z.ZodString;
+      }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"none">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"none">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+    }, z.core.$strict>], "mode">;
     capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-  }, z.core.$strip>>;
+  }, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"unresolved">;
+  }, z.core.$strict>], "state">>;
   completion: z.ZodOptional<z.ZodEnum<{
     tool: "tool";
     turn: "turn";
@@ -1634,15 +1762,15 @@ declare const ArtifactQuerySourceSchema: z.ZodObject<{
     }, z.core.$strip>>;
     confidence: z.ZodOptional<z.ZodObject<{
       maxLevel: z.ZodOptional<z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
       }>>;
       minLevel: z.ZodOptional<z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
@@ -1709,15 +1837,15 @@ declare const ContextSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strip>>;
     confidence: z.ZodOptional<z.ZodObject<{
       maxLevel: z.ZodOptional<z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
       }>>;
       minLevel: z.ZodOptional<z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
@@ -2885,8 +3013,8 @@ declare const WorkflowSchemas: {
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
           sequence: "sequence";
-          parallel: "parallel";
           gate: "gate";
+          parallel: "parallel";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -3085,21 +3213,85 @@ declare const WorkflowSchemas: {
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fork: "fork";
         fresh: "fresh";
+        fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -3127,21 +3319,85 @@ declare const WorkflowSchemas: {
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fork: "fork";
         fresh: "fresh";
+        fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -3582,8 +3838,8 @@ declare const WorkflowSchemas: {
       "delegate-agent": "delegate-agent";
       "delegate-role": "delegate-role";
       sequence: "sequence";
-      parallel: "parallel";
       gate: "gate";
+      parallel: "parallel";
       iterate: "iterate";
       "iterate-chain": "iterate-chain";
       loop: "loop";
@@ -3742,8 +3998,8 @@ declare const WorkflowSchemas: {
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
           sequence: "sequence";
-          parallel: "parallel";
           gate: "gate";
+          parallel: "parallel";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -4957,8 +5213,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
           sequence: "sequence";
-          parallel: "parallel";
           gate: "gate";
+          parallel: "parallel";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -5157,21 +5413,85 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fork: "fork";
         fresh: "fresh";
+        fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -5199,21 +5519,85 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fork: "fork";
         fresh: "fresh";
+        fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -5654,8 +6038,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
       "delegate-agent": "delegate-agent";
       "delegate-role": "delegate-role";
       sequence: "sequence";
-      parallel: "parallel";
       gate: "gate";
+      parallel: "parallel";
       iterate: "iterate";
       "iterate-chain": "iterate-chain";
       loop: "loop";
@@ -5814,8 +6198,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
           sequence: "sequence";
-          parallel: "parallel";
           gate: "gate";
+          parallel: "parallel";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -7029,8 +7413,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
           sequence: "sequence";
-          parallel: "parallel";
           gate: "gate";
+          parallel: "parallel";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -7229,21 +7613,85 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fork: "fork";
         fresh: "fresh";
+        fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -7271,21 +7719,85 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fork: "fork";
         fresh: "fresh";
+        fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -7726,8 +8238,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
       "delegate-agent": "delegate-agent";
       "delegate-role": "delegate-role";
       sequence: "sequence";
-      parallel: "parallel";
       gate: "gate";
+      parallel: "parallel";
       iterate: "iterate";
       "iterate-chain": "iterate-chain";
       loop: "loop";
@@ -7886,8 +8398,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
           sequence: "sequence";
-          parallel: "parallel";
           gate: "gate";
+          parallel: "parallel";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -8806,8 +9318,8 @@ declare const WorkflowRunResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strip>>;
     confidence: z.ZodOptional<z.ZodObject<{
       level: z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
@@ -9113,8 +9625,8 @@ declare const WorkLogFrameEntrySchema$1: z.ZodObject<{
     "delegate-agent": "delegate-agent";
     "delegate-role": "delegate-role";
     sequence: "sequence";
-    parallel: "parallel";
     gate: "gate";
+    parallel: "parallel";
     iterate: "iterate";
     "iterate-chain": "iterate-chain";
     loop: "loop";
@@ -9253,8 +9765,8 @@ type WorkLogDynamicNodeMaterialization = z.infer<typeof WorkLogDynamicNodeMateri
  * - fresh: Start with clean context
  */
 declare const ContextModeSchema$1: z.ZodEnum<{
-  fork: "fork";
   fresh: "fresh";
+  fork: "fork";
 }>;
 type ContextMode = z.infer<typeof ContextModeSchema$1>;
 /**
@@ -9268,11 +9780,11 @@ type ContextMode = z.infer<typeof ContextModeSchema$1>;
 declare const SubagentStatusSchema: z.ZodEnum<{
   completed: "completed";
   cancelled: "cancelled";
-  spawning: "spawning";
   running: "running";
+  failed: "failed";
+  spawning: "spawning";
   waiting_input: "waiting_input";
   hung: "hung";
-  failed: "failed";
 }>;
 type SubagentStatus$1 = z.infer<typeof SubagentStatusSchema>;
 /**
@@ -9300,18 +9812,82 @@ declare const SubagentConfigSchema$1: z.ZodObject<{
   task: z.ZodString;
   adapterName: z.ZodOptional<z.ZodString>;
   providerConfigId: z.ZodOptional<z.ZodString>;
-  providerContext: z.ZodOptional<z.ZodObject<{
+  providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"resolved">;
     providerConfigId: z.ZodString;
     definitionId: z.ZodString;
     endpointOverrides: z.ZodOptional<z.ZodObject<{
       anthropic: z.ZodOptional<z.ZodString>;
       openai: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
-    credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-    credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+      mode: z.ZodLiteral<"explicit">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"explicit">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        fields: z.ZodArray<z.ZodObject<{
+          id: z.ZodString;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          required: z.ZodBoolean;
+          secret: z.ZodBoolean;
+          sourceHints: z.ZodArray<z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            variable: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>;
+      credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"inferred">;
+      method: z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"inferred">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+      account: z.ZodOptional<z.ZodObject<{
+        managerId: z.ZodString;
+        accountId: z.ZodString;
+      }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"none">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"none">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+    }, z.core.$strict>], "mode">;
     capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-  }, z.core.$strip>>;
+  }, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"unresolved">;
+  }, z.core.$strict>], "state">>;
   harnessId: z.ZodOptional<z.ZodString>;
   model: z.ZodOptional<z.ZodString>;
   reasoningEffort: z.ZodOptional<z.ZodEnum<{
@@ -9322,8 +9898,8 @@ declare const SubagentConfigSchema$1: z.ZodObject<{
     "extra-high": "extra-high";
   }>>;
   contextMode: z.ZodDefault<z.ZodEnum<{
-    fork: "fork";
     fresh: "fresh";
+    fork: "fork";
   }>>;
   tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
   disallowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -9398,18 +9974,82 @@ declare const SpawnSubagentRpcRequestSchema$1: z.ZodObject<{
     task: z.ZodString;
     adapterName: z.ZodOptional<z.ZodString>;
     providerConfigId: z.ZodOptional<z.ZodString>;
-    providerContext: z.ZodOptional<z.ZodObject<{
+    providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      state: z.ZodLiteral<"resolved">;
       providerConfigId: z.ZodString;
       definitionId: z.ZodString;
       endpointOverrides: z.ZodOptional<z.ZodObject<{
         anthropic: z.ZodOptional<z.ZodString>;
         openai: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>>;
-      credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-      credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-      ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+      auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"explicit">;
+        method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          owner: z.ZodLiteral<"provider">;
+          providerDefinitionId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          owner: z.ZodLiteral<"client">;
+          clientId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>], "owner">;
+        definition: z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"explicit">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            required: z.ZodBoolean;
+            secret: z.ZodBoolean;
+            sourceHints: z.ZodArray<z.ZodObject<{
+              kind: z.ZodLiteral<"environment">;
+              variable: z.ZodString;
+            }, z.core.$strict>>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>;
+        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+      }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"inferred">;
+        method: z.ZodObject<{
+          owner: z.ZodLiteral<"client">;
+          clientId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>;
+        definition: z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"inferred">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        account: z.ZodOptional<z.ZodObject<{
+          managerId: z.ZodString;
+          accountId: z.ZodString;
+        }, z.core.$strict>>;
+      }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"none">;
+        method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          owner: z.ZodLiteral<"provider">;
+          providerDefinitionId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          owner: z.ZodLiteral<"client">;
+          clientId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>], "owner">;
+        definition: z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"none">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+      }, z.core.$strict>], "mode">;
       capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-    }, z.core.$strip>>;
+    }, z.core.$strict>, z.ZodObject<{
+      state: z.ZodLiteral<"unresolved">;
+    }, z.core.$strict>], "state">>;
     harnessId: z.ZodOptional<z.ZodString>;
     model: z.ZodOptional<z.ZodString>;
     reasoningEffort: z.ZodOptional<z.ZodEnum<{
@@ -9420,8 +10060,8 @@ declare const SpawnSubagentRpcRequestSchema$1: z.ZodObject<{
       "extra-high": "extra-high";
     }>>;
     contextMode: z.ZodDefault<z.ZodEnum<{
-      fork: "fork";
       fresh: "fresh";
+      fork: "fork";
     }>>;
     tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
     disallowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -9461,8 +10101,8 @@ declare const AwaitSubagentResponseSchema: z.ZodObject<{
   status: z.ZodEnum<{
     completed: "completed";
     cancelled: "cancelled";
-    waiting_input: "waiting_input";
     failed: "failed";
+    waiting_input: "waiting_input";
     timeout: "timeout";
   }>;
   result: z.ZodOptional<z.ZodString>;
@@ -9565,11 +10205,11 @@ declare const ListSubagentsBySessionResponseSchema: z.ZodObject<{
     status: z.ZodEnum<{
       completed: "completed";
       cancelled: "cancelled";
-      spawning: "spawning";
       running: "running";
+      failed: "failed";
+      spawning: "spawning";
       waiting_input: "waiting_input";
       hung: "hung";
-      failed: "failed";
     }>;
   }, z.core.$strip>>;
 }, z.core.$strip>;