@makaio/framework 1.0.0-dev-1783705652236 → 1.0.0-dev-1783940945655

package/dist/{index-FFVwQMad.d.mts → index-DlUPWOh4.d.mts}

@@ -1,5 +1,5 @@
-import { It as ArtifactRevision$1 } from "./index-B9d_8_V2.mjs";
-import { i as JsonValue$1, t as JsonObjectContractSchema } from "./json-value-DtIkQN7g.mjs";
+import { It as ArtifactRevision$1 } from "./index-9g0agW_p.mjs";
+import { i as JsonValue$1, t as JsonObjectContractSchema } from "./json-value-C8duSh9X.mjs";
 import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
 import { ExtractSubjectPayload, SubjectDefinition, TypedPayloadFilter } from "@makaio/framework/core";
@@ -845,8 +845,8 @@ declare const ExecutionStatusSchema$1: z.ZodEnum<{
   pending: "pending";
   completed: "completed";
   cancelled: "cancelled";
-  failed: "failed";
   running: "running";
+  failed: "failed";
   paused: "paused";
 }>;
 type ExecutionStatus = z.infer<typeof ExecutionStatusSchema$1>;
@@ -861,8 +861,8 @@ declare const WorkflowExecutionSchema$1: z.ZodObject<{
     pending: "pending";
     completed: "completed";
     cancelled: "cancelled";
-    failed: "failed";
     running: "running";
+    failed: "failed";
     paused: "paused";
   }>;
   inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -918,8 +918,8 @@ declare const WorkflowFrameStateSchema$1: z.ZodObject<{
     pending: "pending";
     completed: "completed";
     cancelled: "cancelled";
-    failed: "failed";
     running: "running";
+    failed: "failed";
     skipped: "skipped";
     waiting: "waiting";
   }>;
@@ -996,18 +996,82 @@ declare const WorkflowResolvedRoleSchema: z.ZodObject<{
     fresh: "fresh";
     fork: "fork";
   }>>;
-  providerContext: z.ZodOptional<z.ZodObject<{
+  providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"resolved">;
     providerConfigId: z.ZodString;
     definitionId: z.ZodString;
     endpointOverrides: z.ZodOptional<z.ZodObject<{
       anthropic: z.ZodOptional<z.ZodString>;
       openai: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
-    credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-    credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+      mode: z.ZodLiteral<"explicit">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"explicit">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        fields: z.ZodArray<z.ZodObject<{
+          id: z.ZodString;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          required: z.ZodBoolean;
+          secret: z.ZodBoolean;
+          sourceHints: z.ZodArray<z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            variable: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>;
+      credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"inferred">;
+      method: z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"inferred">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+      account: z.ZodOptional<z.ZodObject<{
+        managerId: z.ZodString;
+        accountId: z.ZodString;
+      }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"none">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"none">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+    }, z.core.$strict>], "mode">;
     capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-  }, z.core.$strip>>;
+  }, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"unresolved">;
+  }, z.core.$strict>], "state">>;
   completion: z.ZodOptional<z.ZodEnum<{
     tool: "tool";
     turn: "turn";
@@ -1038,18 +1102,82 @@ declare const WorkflowResolvedAgentSchema: z.ZodObject<{
     fresh: "fresh";
     fork: "fork";
   }>>;
-  providerContext: z.ZodOptional<z.ZodObject<{
+  providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"resolved">;
     providerConfigId: z.ZodString;
     definitionId: z.ZodString;
     endpointOverrides: z.ZodOptional<z.ZodObject<{
       anthropic: z.ZodOptional<z.ZodString>;
       openai: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
-    credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-    credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+      mode: z.ZodLiteral<"explicit">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"explicit">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        fields: z.ZodArray<z.ZodObject<{
+          id: z.ZodString;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          required: z.ZodBoolean;
+          secret: z.ZodBoolean;
+          sourceHints: z.ZodArray<z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            variable: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>;
+      credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"inferred">;
+      method: z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"inferred">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+      account: z.ZodOptional<z.ZodObject<{
+        managerId: z.ZodString;
+        accountId: z.ZodString;
+      }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"none">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"none">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+    }, z.core.$strict>], "mode">;
     capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-  }, z.core.$strip>>;
+  }, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"unresolved">;
+  }, z.core.$strict>], "state">>;
   completion: z.ZodOptional<z.ZodEnum<{
     tool: "tool";
     turn: "turn";
@@ -1118,8 +1246,8 @@ declare const ExecutionListQuerySchema$1: z.ZodObject<{
     pending: "pending";
     completed: "completed";
     cancelled: "cancelled";
-    failed: "failed";
     running: "running";
+    failed: "failed";
     paused: "paused";
   }>>;
   artifactRef: z.ZodOptional<z.ZodObject<{
@@ -1472,8 +1600,8 @@ interface IStepRunner {
  */
 declare const SpanStatusSchema: z.ZodEnum<{
   completed: "completed";
-  failed: "failed";
   running: "running";
+  failed: "failed";
   skipped: "skipped";
 }>;
 type SpanStatus = z.infer<typeof SpanStatusSchema>;
@@ -1497,8 +1625,8 @@ declare const SpanRecordSchema$1: z.ZodObject<{
   }>;
   status: z.ZodEnum<{
     completed: "completed";
-    failed: "failed";
     running: "running";
+    failed: "failed";
     skipped: "skipped";
   }>;
   startedAt: z.ZodOptional<z.ZodNumber>;
@@ -1634,15 +1762,15 @@ declare const ArtifactQuerySourceSchema: z.ZodObject<{
     }, z.core.$strip>>;
     confidence: z.ZodOptional<z.ZodObject<{
       maxLevel: z.ZodOptional<z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
       }>>;
       minLevel: z.ZodOptional<z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
@@ -1709,15 +1837,15 @@ declare const ContextSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strip>>;
     confidence: z.ZodOptional<z.ZodObject<{
       maxLevel: z.ZodOptional<z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
       }>>;
       minLevel: z.ZodOptional<z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
@@ -2564,8 +2692,8 @@ declare const WorkflowSchemas: {
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -2621,8 +2749,8 @@ declare const WorkflowSchemas: {
         pending: "pending";
         completed: "completed";
         cancelled: "cancelled";
-        failed: "failed";
         running: "running";
+        failed: "failed";
         paused: "paused";
       }>>;
       artifactRef: z.ZodOptional<z.ZodObject<{
@@ -2644,8 +2772,8 @@ declare const WorkflowSchemas: {
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -2700,8 +2828,8 @@ declare const WorkflowSchemas: {
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -2754,8 +2882,8 @@ declare const WorkflowSchemas: {
         }>;
         status: z.ZodEnum<{
           completed: "completed";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           skipped: "skipped";
         }>;
         startedAt: z.ZodOptional<z.ZodNumber>;
@@ -2897,8 +3025,8 @@ declare const WorkflowSchemas: {
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           skipped: "skipped";
           waiting: "waiting";
         }>;
@@ -3088,18 +3216,82 @@ declare const WorkflowSchemas: {
         fresh: "fresh";
         fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -3130,18 +3322,82 @@ declare const WorkflowSchemas: {
         fresh: "fresh";
         fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -3707,8 +3963,8 @@ declare const WorkflowSchemas: {
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         startedAt: z.ZodNumber;
@@ -3753,8 +4009,8 @@ declare const WorkflowSchemas: {
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           skipped: "skipped";
           waiting: "waiting";
         }>;
@@ -3784,8 +4040,8 @@ declare const WorkflowSchemas: {
         pending: "pending";
         completed: "completed";
         cancelled: "cancelled";
-        failed: "failed";
         running: "running";
+        failed: "failed";
         paused: "paused";
       }>>;
       limit: z.ZodOptional<z.ZodNumber>;
@@ -3800,8 +4056,8 @@ declare const WorkflowSchemas: {
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         startedAt: z.ZodNumber;
@@ -4636,8 +4892,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -4693,8 +4949,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         pending: "pending";
         completed: "completed";
         cancelled: "cancelled";
-        failed: "failed";
         running: "running";
+        failed: "failed";
         paused: "paused";
       }>>;
       artifactRef: z.ZodOptional<z.ZodObject<{
@@ -4716,8 +4972,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -4772,8 +5028,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -4826,8 +5082,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         }>;
         status: z.ZodEnum<{
           completed: "completed";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           skipped: "skipped";
         }>;
         startedAt: z.ZodOptional<z.ZodNumber>;
@@ -4969,8 +5225,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           skipped: "skipped";
           waiting: "waiting";
         }>;
@@ -5160,18 +5416,82 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         fresh: "fresh";
         fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -5202,18 +5522,82 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         fresh: "fresh";
         fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -5779,8 +6163,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         startedAt: z.ZodNumber;
@@ -5825,8 +6209,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           skipped: "skipped";
           waiting: "waiting";
         }>;
@@ -5856,8 +6240,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         pending: "pending";
         completed: "completed";
         cancelled: "cancelled";
-        failed: "failed";
         running: "running";
+        failed: "failed";
         paused: "paused";
       }>>;
       limit: z.ZodOptional<z.ZodNumber>;
@@ -5872,8 +6256,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         startedAt: z.ZodNumber;
@@ -6708,8 +7092,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -6765,8 +7149,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         pending: "pending";
         completed: "completed";
         cancelled: "cancelled";
-        failed: "failed";
         running: "running";
+        failed: "failed";
         paused: "paused";
       }>>;
       artifactRef: z.ZodOptional<z.ZodObject<{
@@ -6788,8 +7172,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -6844,8 +7228,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -6898,8 +7282,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         }>;
         status: z.ZodEnum<{
           completed: "completed";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           skipped: "skipped";
         }>;
         startedAt: z.ZodOptional<z.ZodNumber>;
@@ -7041,8 +7425,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           skipped: "skipped";
           waiting: "waiting";
         }>;
@@ -7232,18 +7616,82 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         fresh: "fresh";
         fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -7274,18 +7722,82 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         fresh: "fresh";
         fork: "fork";
       }>>;
-      providerContext: z.ZodOptional<z.ZodObject<{
+      providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"resolved">;
         providerConfigId: z.ZodString;
         definitionId: z.ZodString;
         endpointOverrides: z.ZodOptional<z.ZodObject<{
           anthropic: z.ZodOptional<z.ZodString>;
           openai: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
-        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          mode: z.ZodLiteral<"explicit">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"explicit">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            fields: z.ZodArray<z.ZodObject<{
+              id: z.ZodString;
+              label: z.ZodString;
+              description: z.ZodOptional<z.ZodString>;
+              required: z.ZodBoolean;
+              secret: z.ZodBoolean;
+              sourceHints: z.ZodArray<z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                variable: z.ZodString;
+              }, z.core.$strict>>;
+            }, z.core.$strict>>;
+          }, z.core.$strict>;
+          credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"inferred">;
+          method: z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"inferred">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+          account: z.ZodOptional<z.ZodObject<{
+            managerId: z.ZodString;
+            accountId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          mode: z.ZodLiteral<"none">;
+          method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            owner: z.ZodLiteral<"provider">;
+            providerDefinitionId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodLiteral<"client">;
+            clientId: z.ZodString;
+            methodId: z.ZodString;
+          }, z.core.$strict>], "owner">;
+          definition: z.ZodObject<{
+            id: z.ZodString;
+            mode: z.ZodLiteral<"none">;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>;
+        }, z.core.$strict>], "mode">;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-      }, z.core.$strip>>;
+      }, z.core.$strict>, z.ZodObject<{
+        state: z.ZodLiteral<"unresolved">;
+      }, z.core.$strict>], "state">>;
       completion: z.ZodOptional<z.ZodEnum<{
         tool: "tool";
         turn: "turn";
@@ -7851,8 +8363,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         startedAt: z.ZodNumber;
@@ -7897,8 +8409,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           skipped: "skipped";
           waiting: "waiting";
         }>;
@@ -7928,8 +8440,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         pending: "pending";
         completed: "completed";
         cancelled: "cancelled";
-        failed: "failed";
         running: "running";
+        failed: "failed";
         paused: "paused";
       }>>;
       limit: z.ZodOptional<z.ZodNumber>;
@@ -7944,8 +8456,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           pending: "pending";
           completed: "completed";
           cancelled: "cancelled";
-          failed: "failed";
           running: "running";
+          failed: "failed";
           paused: "paused";
         }>;
         startedAt: z.ZodNumber;
@@ -8806,8 +9318,8 @@ declare const WorkflowRunResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strip>>;
     confidence: z.ZodOptional<z.ZodObject<{
       level: z.ZodEnum<{
-        assumed: "assumed";
         inferred: "inferred";
+        assumed: "assumed";
         stated: "stated";
         confirmed: "confirmed";
         verified: "verified";
@@ -9082,8 +9594,8 @@ declare const WorkLogExecutionSummarySchema: z.ZodObject<{
     pending: "pending";
     completed: "completed";
     cancelled: "cancelled";
-    failed: "failed";
     running: "running";
+    failed: "failed";
     paused: "paused";
   }>;
   startedAt: z.ZodNumber;
@@ -9124,8 +9636,8 @@ declare const WorkLogFrameEntrySchema$1: z.ZodObject<{
     pending: "pending";
     completed: "completed";
     cancelled: "cancelled";
-    failed: "failed";
     running: "running";
+    failed: "failed";
     skipped: "skipped";
     waiting: "waiting";
   }>;
@@ -9268,9 +9780,9 @@ type ContextMode = z.infer<typeof ContextModeSchema$1>;
 declare const SubagentStatusSchema: z.ZodEnum<{
   completed: "completed";
   cancelled: "cancelled";
+  running: "running";
   failed: "failed";
   spawning: "spawning";
-  running: "running";
   waiting_input: "waiting_input";
   hung: "hung";
 }>;
@@ -9300,18 +9812,82 @@ declare const SubagentConfigSchema$1: z.ZodObject<{
   task: z.ZodString;
   adapterName: z.ZodOptional<z.ZodString>;
   providerConfigId: z.ZodOptional<z.ZodString>;
-  providerContext: z.ZodOptional<z.ZodObject<{
+  providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"resolved">;
     providerConfigId: z.ZodString;
     definitionId: z.ZodString;
     endpointOverrides: z.ZodOptional<z.ZodObject<{
       anthropic: z.ZodOptional<z.ZodString>;
       openai: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
-    credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-    credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+      mode: z.ZodLiteral<"explicit">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"explicit">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        fields: z.ZodArray<z.ZodObject<{
+          id: z.ZodString;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          required: z.ZodBoolean;
+          secret: z.ZodBoolean;
+          sourceHints: z.ZodArray<z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            variable: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>;
+      credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"inferred">;
+      method: z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"inferred">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+      account: z.ZodOptional<z.ZodObject<{
+        managerId: z.ZodString;
+        accountId: z.ZodString;
+      }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+      mode: z.ZodLiteral<"none">;
+      method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        owner: z.ZodLiteral<"provider">;
+        providerDefinitionId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodLiteral<"client">;
+        clientId: z.ZodString;
+        methodId: z.ZodString;
+      }, z.core.$strict>], "owner">;
+      definition: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodLiteral<"none">;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+    }, z.core.$strict>], "mode">;
     capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-  }, z.core.$strip>>;
+  }, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"unresolved">;
+  }, z.core.$strict>], "state">>;
   harnessId: z.ZodOptional<z.ZodString>;
   model: z.ZodOptional<z.ZodString>;
   reasoningEffort: z.ZodOptional<z.ZodEnum<{
@@ -9398,18 +9974,82 @@ declare const SpawnSubagentRpcRequestSchema$1: z.ZodObject<{
     task: z.ZodString;
     adapterName: z.ZodOptional<z.ZodString>;
     providerConfigId: z.ZodOptional<z.ZodString>;
-    providerContext: z.ZodOptional<z.ZodObject<{
+    providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      state: z.ZodLiteral<"resolved">;
       providerConfigId: z.ZodString;
       definitionId: z.ZodString;
       endpointOverrides: z.ZodOptional<z.ZodObject<{
         anthropic: z.ZodOptional<z.ZodString>;
         openai: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>>;
-      credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
-      credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-      ambientCredentialEnvVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
+      auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"explicit">;
+        method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          owner: z.ZodLiteral<"provider">;
+          providerDefinitionId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          owner: z.ZodLiteral<"client">;
+          clientId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>], "owner">;
+        definition: z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"explicit">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            required: z.ZodBoolean;
+            secret: z.ZodBoolean;
+            sourceHints: z.ZodArray<z.ZodObject<{
+              kind: z.ZodLiteral<"environment">;
+              variable: z.ZodString;
+            }, z.core.$strict>>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>;
+        credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+      }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"inferred">;
+        method: z.ZodObject<{
+          owner: z.ZodLiteral<"client">;
+          clientId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>;
+        definition: z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"inferred">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        account: z.ZodOptional<z.ZodObject<{
+          managerId: z.ZodString;
+          accountId: z.ZodString;
+        }, z.core.$strict>>;
+      }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"none">;
+        method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+          owner: z.ZodLiteral<"provider">;
+          providerDefinitionId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          owner: z.ZodLiteral<"client">;
+          clientId: z.ZodString;
+          methodId: z.ZodString;
+        }, z.core.$strict>], "owner">;
+        definition: z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"none">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+      }, z.core.$strict>], "mode">;
       capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
-    }, z.core.$strip>>;
+    }, z.core.$strict>, z.ZodObject<{
+      state: z.ZodLiteral<"unresolved">;
+    }, z.core.$strict>], "state">>;
     harnessId: z.ZodOptional<z.ZodString>;
     model: z.ZodOptional<z.ZodString>;
     reasoningEffort: z.ZodOptional<z.ZodEnum<{
@@ -9565,9 +10205,9 @@ declare const ListSubagentsBySessionResponseSchema: z.ZodObject<{
     status: z.ZodEnum<{
       completed: "completed";
       cancelled: "cancelled";
+      running: "running";
       failed: "failed";
       spawning: "spawning";
-      running: "running";
       waiting_input: "waiting_input";
       hung: "hung";
     }>;