@zhivex-ai/harness 1.1.0-rc.3 → 1.1.1

package/CHANGELOG.md

@@ -4,10 +4,107 @@ All notable changes to Zhivex Harness are documented in this file.
 
 The project follows Semantic Versioning. During `0.x`, minor releases may change user-facing contracts when the change is documented with a migration note. Patch releases remain backwards compatible bug fixes.
 
+## 1.1.1 - 2026-09-23
+
+- Update the RC.10 SDK batch to its stable releases: Agents 1.9.0, Core 1.23.0, Gemini 0.12.2, Meta 0.2.7, OpenAI 0.13.5 and Qwen 0.15.1. Preserve approvals and exactly-once host effects across resume; the updated artifact still requires release certification.
+- Include bounded approval-denial evidence in benchmark and release diagnostics: tool, rejection rule, approval round and preceding compactions, without raw arguments or model text. Distinguish lexical command matches from direct protected-test edits.
+- Publish directly to `latest` after fresh exact-artifact certification. Preserve the failed `v1.1.0` tag and its evidence.
+- Archive superseded audit reports and intermediate diagnostic plans in Git history.
+
+## 1.1.0 - 2026-09-23
+
+Compatible minor release of the Node CLI and TypeScript library. The separate
+Desktop application remains private alpha; Gemini remains provisional.
+
+- Simplify first-use provider/model selection, credential setup, command help and recovery. Add UTF-8 task input, atomic profile updates and a shared searchable model catalog.
+- Improve conversation activity, context estimates and compaction while preserving working plans. Add explicit unlimited cumulative-token mode without disabling per-request limits, accounting or other execution controls.
+- Add authenticated local service transport, durable redacted event replay and application-owned read delegation with file scope and acceptance checks.
+- Integrate the SDK prerelease batch certified by RC.10, including redaction, failed-child accounting and OpenAI function receipt fixes. Preserve approvals and exactly-once host effects across resume.
+- Use Muse Spark 1.3, Qwen 3.8 Max and GPT-6 Luna for new selections and release certification. Add bounded Meta receipt-continuation recovery; preserve saved model selections and historical certification mappings.
+- Preserve Stable 1.x contracts and state format 1. Existing installations need no state migration; review new default models when creating profiles.
+
+RC.10 passed the full artifact, live and representative gates. Publication of this
+stable artifact requires its own protected certification and provenance verification.
+
+## 1.1.0-rc.10 - 2026-09-23
+
+- Restore `qwen3.8-max` as the default for new CLI/Desktop selections and RC.10 certification. Keep saved models and historical release mappings unchanged.
+- Remove transient provider/SDK investigation reports and their local trial evidence; retain them in Git history.
+
+- Recover once when Meta Responses rejects a function receipt continuation because its response ID is unavailable. Replay the identical request after a bounded delay, preserve cancellation, and exclude hosted tools and unrelated HTTP errors. Host tools are not executed again.
+- Bind the new Meta transport policy to durable run identity. Use Qwen 3.8 Max, OpenAI Luna 6 and Muse Spark 1.3 release models; full release certification remains required.
+
+## 1.1.0-rc.9 - 2026-09-23
+
+- Upgrade Core to 1.23.0-next.2 and Agents to 1.9.0-next.2. All eight consumer redaction cases pass, including later rejection and file-store reopen. Qwen Flash orchestration remains intermittent, so RC certification is still blocked.
+
+- Default new Meta selections to Muse Spark 1.3 and use Responses for built-in Meta agent tool loops. Bind the transport migration to durable run identity; preserve saved model IDs and historical evidence. Certification remains pending.
+
+- Add application-owned read delegation contracts: models select task IDs while Harness preserves task text, enforces file scope and validates acceptance. Keep durable SDK execution and budgets; expose finite error classifications without logging task content.
+- Allow trusted strict-mode applications to select a fingerprint-bound tool catalog and render only relevant tool instructions. Use scoped contracts/catalogs in live certification without weakening effect, approval, journal or marker checks.
+- Integrate the published SDK next batch with failed-child linkage/accounting and OpenAI function receipt fixes. Update native-tool fixtures to the consistent metadata contract.
+- Publication remains blocked: governed Flash orchestration passed three local executions, but the scoped base campaign failed one of three cases on exact approval arguments before mutation. These are local validation results, not a new RC certification.
+
+## 1.1.0-rc.8 - 2026-09-22
+
+- Preserve OpenAI function tool receipts through approval resume using SDK result envelopes. Prevent function names such as `apply_patch` from being mistaken for native Responses tools and losing their output. Keep release assertions and fail-fast gates unchanged.
+
+## 1.1.0-rc.7 - 2026-09-22
+
+- Select `gpt-6-luna` as the OpenAI default for new CLI/Desktop choices and pin it in RC7 release certification. Preserve explicitly saved models and historical certification mappings.
+- Identify failed base live-smoke checkpoints with allowlisted labels and assertion kinds, without retaining raw assertion values or model responses.
+
+## 1.1.0-rc.6 - 2026-09-22
+
+- Stop release gates and remaining providers after a confirmed failure while retaining exhaustive manual diagnostics.
+- Preserve completed certification cases across report failures and record bounded, sanitized error structure and finalization phases.
+
+## 1.1.0-rc.5 - 2026-09-22
+
+Unpublished candidate targeting npm `next`, superseding the tagged but unpublished RC.4.
+
+- Use `qwen3.8-flash` as the default Qwen model in CLI/Desktop and the new release certification matrix. Keep Max selectable and preserve explicitly saved model choices and historical certification pins. Flash requires fresh release-bound certification.
+
+## 1.1.0-rc.4 - 2026-09-22
+
+- Align the SDK batch with the latest stable packages verified on 2026-09-22:
+  Agents 1.8.0, Core 1.22.0, Gemini 0.12.1, Meta 0.2.6, OpenAI 0.13.4 and
+  Qwen 0.15.0. Keep the compatible TypeScript 6.0.3 compiler API for architecture
+  and Stable signature checks while building with TypeScript 7.0.2.
+
+- Use searchable provider/model selection during first use, detect a lone environment
+  provider, recover failed keychain setup with explicit temporary use or retry, and
+  show one ready screen with credential source and approval policy.
+- Make `doctor` follow conversation defaults and inspect the selected environment
+  or keychain credential without contacting the provider. Human diagnostics focus
+  on the selected provider; JSON retains the full provider inventory. One-shot
+  execution continues to require explicit profiles and environment credentials.
+
+- Retain recent conversation groups by estimated tokens, adapt repair compaction
+  to remaining input allowance, and preserve structured working plans across
+  repeated summaries. Keep SDK approval/checkpoint ownership and explicit overrides.
+- Unify context estimates, reuse transport measurements and cache tool-schema
+  serialization. Default discovery to ten search matches and path-only listings;
+  callers can explicitly request larger results and digests.
+
+- Add `--no-token-budget` / `unlimitedTokens: true` to disable cumulative token
+  budgets for main runs and subagents while preserving usage accounting,
+  compaction, per-request limits, and non-token execution controls.
+
+Unpublished release candidate targeting npm `next`, following published RC.3.
+Fresh protected certification is required before publication. Stable `latest`
+remains 1.0.0.
+
+- Make appended command help independent of task/configuration validation, group options with examples, and accept `--name=value` for value options.
+- Add explicit UTF-8 task input through `zhx run -` and `zhx review -`, bounded to 1 MiB and retaining approval requirements.
+- Add atomic personal profile updates with `zhx init --update`, reopen provider/model selection after declining the default profile, and give actionable usage/configuration recovery messages.
+- Share the curated model catalog across CLI and Desktop, with primary/other groups, explicit lifecycle and validation metadata, custom model IDs, and optional HTTPS catalog distribution with cached fallback.
+- Improve the separate Desktop alpha with rendered Markdown, file diffs, conversation navigation and local preferences, accessible panels and controlled external links. Desktop retains its independent private alpha version.
+
 ## 1.1.0-rc.3 - 2026-09-22
 
-Release candidate targeting npm `next`; fresh protected certification is required
-before publication. Stable `latest` remains 1.0.0.
+Published release candidate on npm `next`. The changes below describe RC.3;
+subsequent work belongs to RC.4. Stable `latest` remains 1.0.0.
 
 - Group interactive tool activity into a bounded live line and summaries between assistant messages. Preserve individual failures, check receipts and approval requests; `/verbose` restores event detail.
 - Identify token-budget and step-limit failures without mislabeling them as provider stream failures or exposing arbitrary provider error payloads.

package/README.md

@@ -6,15 +6,18 @@ Zhivex Harness is a local terminal assistant and TypeScript library. It supports
 OpenAI, Qwen and Meta, with provisional Gemini support. Conversations and pending
 approvals survive restarts.
 
-This development branch prepares `1.1.0-rc.3` (unpublished), with console, local
-service and Desktop preview improvements. The commands below install stable 1.0.0.
+Version `1.1.1` is prepared for stable publication, with console, local service
+and governed delegation improvements. Publication remains pending until the
+[repository release status](https://raw.githubusercontent.com/Zhivex/zhivex-harness/main/release-status.json)
+records its verified artifact. The installation commands below target 1.1.1 once
+published. Desktop retains its separate private alpha status.
 
 ## Quick start
 
 Requires Node.js 22.13.0 or newer, Git and a provider API key.
 
 ```sh
-npm install -g @zhivex-ai/harness@1.0.0
+npm install -g @zhivex-ai/harness@1.1.1
 cd /path/to/your/project
 zhx
 ```

package/contracts/public-api.json

@@ -540,6 +540,7 @@
     "HarnessContextManifestIdentity",
     "HarnessContextSource",
     "HarnessCostBudget",
+    "HarnessDelegationContract",
     "HarnessEnvironmentStatus",
     "HarnessErrorCategory",
     "HarnessErrorCode",
@@ -738,6 +739,7 @@
     "HarnessContextConfiguration",
     "HarnessContextManifestIdentity",
     "HarnessContextSource",
+    "HarnessDelegationContract",
     "HarnessEnvironmentStatus",
     "HarnessErrorOptions",
     "HarnessExecutionIoMetrics",
@@ -904,6 +906,7 @@
           "--provider",
           "--model",
           "--profile",
+          "--update",
           "--json"
         ],
         "required": [],
@@ -943,6 +946,7 @@
           "--oci-max-workspace-bytes",
           "--oci-max-file-write-bytes",
           "--oci-tmpfs-mb",
+          "--no-token-budget",
           "--max-steps",
           "--timeout-ms",
           "--max-tool-calls",
@@ -1015,6 +1019,7 @@
           "--namespace",
           "--context-config",
           "--no-project-context",
+          "--no-token-budget",
           "--subagent-max-steps",
           "--subagent-max-tool-calls",
           "--subagent-max-tool-errors",
@@ -1067,6 +1072,7 @@
           "--oci-max-workspace-bytes",
           "--oci-max-file-write-bytes",
           "--oci-tmpfs-mb",
+          "--no-token-budget",
           "--max-steps",
           "--timeout-ms",
           "--max-tool-calls",
@@ -1158,6 +1164,7 @@
           "--oci-max-workspace-bytes",
           "--oci-max-file-write-bytes",
           "--oci-tmpfs-mb",
+          "--no-token-budget",
           "--max-steps",
           "--timeout-ms",
           "--max-tool-calls",

package/contracts/stable-api-signatures.json

@@ -25,11 +25,11 @@
     },
     {
       "name": "CLI_OPTION_DEFINITIONS",
-      "sha256": "sha256:ac981aadf7a89313aa9744aca63c61d700797f6356bd43cf92be4984ea5e8d80"
+      "sha256": "sha256:4da95d4f23e38f79e7506efb7ad4a937e58bf8ab85ea5e256b05c6f3446fb037"
     },
     {
       "name": "CLI_OPTION_NAMES",
-      "sha256": "sha256:2c94006a4fcb5a7df4e5d24fe57533b436f630bf656ffae864f7e461f0c694ac"
+      "sha256": "sha256:103709e32bffb3b601aa4a5dafdb31da57fb671377ae27eee211636c31ac93ab"
     },
     {
       "name": "DEFAULT_ALLOWED_CHECKS",
@@ -133,7 +133,7 @@
     },
     {
       "name": "cancelHarnessRun",
-      "sha256": "sha256:5dff05d25e725c488d5a644205321410fa0c1e08518f6c632152ba695151e699"
+      "sha256": "sha256:823fd43f826d587b0b3147c844dfd47f7392a74632cc2bd45c3058d661e173c2"
     },
     {
       "name": "canonicalizeChangeEnvelope",
@@ -141,11 +141,11 @@
     },
     {
       "name": "cleanupHarnessRuns",
-      "sha256": "sha256:18508c3118bed4230333e8062dc263aa732d7cfe655517df4d4da9aae01cff4f"
+      "sha256": "sha256:cbc2c34f94bd783b6934706ed874f85bd96575b38be3984093bad39f4dc5d2f1"
     },
     {
       "name": "cliJsonDocumentSchema",
-      "sha256": "sha256:4ff4562c29617f921add72f71bc045a5580c1444c2df3e8e29c853f6d6e0332f"
+      "sha256": "sha256:ea42dc40b4af3974defe2e12e4d7ee9e34b0720bac927f6ea3c34659bb77c0ea"
     },
     {
       "name": "cliJsonLineDocumentSchema",
@@ -165,7 +165,7 @@
     },
     {
       "name": "createHarness",
-      "sha256": "sha256:7cea05d51dff835bef5f3205e917273797af3ce09084ab99b608671c2812ccfb"
+      "sha256": "sha256:52818969fa1527136a5b2759e385b3627390d66a6224703e7652481abbc9b5cf"
     },
     {
       "name": "createHarnessMcpTools",
@@ -177,7 +177,7 @@
     },
     {
       "name": "createHarnessStateBackup",
-      "sha256": "sha256:e27ff63ef8f5a1789d85c277403e25c73fd9a9ff56a6e6f29fbd9cde69c446e4"
+      "sha256": "sha256:c8dd18aac2d97b68b5397f5eb934253e7f27a572538f5ced999bcc35aa0f1745"
     },
     {
       "name": "createHttpMcpClient",
@@ -185,7 +185,7 @@
     },
     {
       "name": "createProviderModel",
-      "sha256": "sha256:b2adb6e40c2ca68fc445afd3c22f230289e94f6eca193ac382a332451f3b533b"
+      "sha256": "sha256:8786fb1b47fdfb31136a08b83112942ccfbfcacb2532f6aea5d39eeabef48b1b"
     },
     {
       "name": "digestChangeEnvelopeArtifact",
@@ -193,7 +193,7 @@
     },
     {
       "name": "exportHarnessStateBackup",
-      "sha256": "sha256:cd1117475aac1011b98bf68a29fc2c1daf59e9c98ea6470e2fff6ec5ba21d779"
+      "sha256": "sha256:39809fa355443c69e4b601cf9f695a514ceff82cfd769eb754cc865815066291"
     },
     {
       "name": "harnessErrorDocument",
@@ -201,23 +201,23 @@
     },
     {
       "name": "importHarnessStateBackup",
-      "sha256": "sha256:3005bfd712e481929ee1a9ec47c28e33b10f128c64e5e24d4b326f4404d87ccc"
+      "sha256": "sha256:ce72b186c9e4f22662ebde0f9db2d7c5529ce641355862a872107e237ed2876a"
     },
     {
       "name": "importHarnessStateBackupFile",
-      "sha256": "sha256:6f0d7e51644ba349752c7e5bb15ff98516a583b9565d949af7b6ec068c43401a"
+      "sha256": "sha256:033e94a7eb08cff52e52524cb1b745b45f001645bd9c881916f51cd0bfc06fdc"
     },
     {
       "name": "inspectHarnessRun",
-      "sha256": "sha256:cc09fcb2817b6796298ee5646f4e3da859e2dfd5535be14c524c6632a1dba4fd"
+      "sha256": "sha256:a6cfd6fa9adc33ee9f8e11c2055c9add421143866718511634fd1b923c718366"
     },
     {
       "name": "inspectHarnessState",
-      "sha256": "sha256:8e77932f9779560c559c8ef8f54a663b99dfda4f398541f1db131db0551f09c3"
+      "sha256": "sha256:db2caf84f86749f44f738fa2e838c81014dd44a69c00fdd12457107cc13ed644"
     },
     {
       "name": "listHarnessRuns",
-      "sha256": "sha256:b34cbed127d5466c46b741b09cd1ab3f3db960db34038630aa6f0ced6dba09de"
+      "sha256": "sha256:f5e2aaf8d3a7703743982dc78824e8ea37b09e84aa6f30fa02549a3258e49581"
     },
     {
       "name": "loadHarnessMcpConfiguration",
@@ -225,7 +225,7 @@
     },
     {
       "name": "migrateHarnessConfigInput",
-      "sha256": "sha256:d3d19574d6aa34e42a734473d2e50e819a90937974e1260d9648e455d48c7f1f"
+      "sha256": "sha256:03b462e72c9c2caf7a730b0fb8b3d0c7d6377c666e01a69a38f74da98387a07e"
     },
     {
       "name": "normalizeHarnessError",
@@ -241,11 +241,11 @@
     },
     {
       "name": "openHarnessPersistence",
-      "sha256": "sha256:c175d40b073968ceed5c6cae89c775b2adb86e51f44fffbe720424e034391689"
+      "sha256": "sha256:8e8a5e30d452b06b52e4ef7ee62790e3b07751d61f3641a3ff08d546f2c3dd8d"
     },
     {
       "name": "parseCliJsonDocument",
-      "sha256": "sha256:6eaea717eb3322d23199635b3f8001857d454fff19c74ffa240168372e69151a"
+      "sha256": "sha256:ccd4fcd5c2d462d0e583a4ba35c6c7d3e8dc463a461be981ee3cf6a9172ba53c"
     },
     {
       "name": "parseCliJsonLineDocument",
@@ -269,11 +269,11 @@
     },
     {
       "name": "resolveHarnessConfig",
-      "sha256": "sha256:6206f7bcb149c2952ac4ef6b07677f06a5e37b99ce72cb804c3010e61f56858b"
+      "sha256": "sha256:026cbbe3f5491a96e5bbb115692c47eb8128c51e2a2c8584eef2e8ebade1a85c"
     },
     {
       "name": "runHarness",
-      "sha256": "sha256:584ffc9c7bfbdfc556226907d97d68d7e5d82ec67e39688b6bb79c03b8e1361a"
+      "sha256": "sha256:0804b28280524cb6ef0e465987138a201da5d5c65e2406271ac329c096b7d98e"
     },
     {
       "name": "serializeStreamEvent",
@@ -319,7 +319,7 @@
     },
     {
       "name": "CliJsonDocument",
-      "sha256": "sha256:02694a1a27ba9e44f24b9663628f6dc3f93cb165e1acb99ce15ce5223ad4022b"
+      "sha256": "sha256:4883ded187c36153df00c29064b9ceff2dea7b529087d6901655d94fb9d42819"
     },
     {
       "name": "CliJsonLineDocument",
@@ -331,7 +331,7 @@
     },
     {
       "name": "CliOptionName",
-      "sha256": "sha256:9628cdc1bd1d28ff1ecb4e29091a04a6cfdff48c4b9da2d49c1d64ca003f7a76"
+      "sha256": "sha256:43987e98d1dc505e7348b59155334fea559a202e94941fc77528a5aa727ec471"
     },
     {
       "name": "CliReviewGroupDocument",
@@ -351,7 +351,7 @@
     },
     {
       "name": "CliRunResultDocument",
-      "sha256": "sha256:dc066ac7f7aed6b7deabd0975503eff16a31c142ba892c97521a1a1374701196"
+      "sha256": "sha256:31efc5f7914df25f60ebec8408242b54bcae290d2bb0306869fc2fddcf357390"
     },
     {
       "name": "CliSession",
@@ -375,23 +375,23 @@
     },
     {
       "name": "CreateHarnessOptions",
-      "sha256": "sha256:d519d636d27673caaf1307f60094a67fb6791009f4c05dd61d6c64559940c207"
+      "sha256": "sha256:d8e0ac53e4adf68e3b69ad916720b1149fb9d6bddf28d2862513071c65a2c384"
     },
     {
       "name": "HarnessBudget",
-      "sha256": "sha256:5824301ecd5e057bb1d84f3de75fffc5307d36a2f64b949796c2077ae4ebd8d3"
+      "sha256": "sha256:86935e2a5d85184a15af839900cff28f8f46f58df68e62114327be88e287a249"
     },
     {
       "name": "HarnessConfig",
-      "sha256": "sha256:d25060b2beb3a10723f8eb2fe415293bb1576884bbb208399aded2773eece4b9"
+      "sha256": "sha256:79a3e06319c96a8f1f22e79268ba69fb197e36239c416d71be4da6f0fa3fcc34"
     },
     {
       "name": "HarnessConfigInput",
-      "sha256": "sha256:8319db71eaca723ff9988f5ccd54a5dab47745ac4e89fd6d9e472a97ec3dc591"
+      "sha256": "sha256:df1e5958a465f308ca8a3fe6acb57fdcd4b8cf8abd4568aac729a8b82909a799"
     },
     {
       "name": "HarnessConfigMigrationResult",
-      "sha256": "sha256:9658f4d2497c409fd4dfb1f59f06ca9713f37b10b80b497a9a5390577014910b"
+      "sha256": "sha256:6a0786f1ca26a837dcdff1a06190e3b3b0805796134e48314f9e4d033a5e75d3"
     },
     {
       "name": "HarnessContextBundle",
@@ -487,8 +487,8 @@
     },
     {
       "name": "ZhivexHarness",
-      "sha256": "sha256:984c1171cdd88a8138de73523aca11f384d6bcedefdd9c688b346e60c56ee7fb"
+      "sha256": "sha256:4d1be5f38915422cedcc86e52d04daab55d91b9141aec6a0239ce8d1cbeaaf5e"
     }
   ],
-  "digest": "sha256:9a4abc106a3713d3295e440c42f5a3a75f40719c630d2800317e1e9e30ca5ece"
+  "digest": "sha256:d64051c5fff1b9b20576aebff01ca1a8451730850efbe79570cb2a0fddab1d7c"
 }

package/dist/cli/arguments.d.ts

@@ -16,6 +16,7 @@ export interface CliOptions {
     command: Command;
     helpTopic?: string;
     profile?: string;
+    updateProfile?: boolean;
     provider?: string;
     model?: string;
     workspace?: string;
@@ -28,6 +29,7 @@ export interface CliOptions {
     timeoutMs?: number;
     maxToolCalls?: number;
     maxToolErrors?: number;
+    unlimitedTokens?: boolean;
     maxInputTokens?: number;
     maxOutputTokens?: number;
     maxTotalTokens?: number;

package/dist/cli/cli-credentials.d.ts

@@ -13,6 +13,12 @@ export interface CredentialInput {
     secret(prompt: string): Promise<string>;
 }
 export type EntryFactory = (provider: string) => Promise<SecretEntry>;
+export type CredentialStatus = {
+    source: "environment" | "temporary" | "keychain" | "missing" | "unavailable" | "blocked";
+    configured: boolean;
+};
+export declare class CredentialSetupError extends Error {
+}
 export declare const credentialService = "ai.zhivex.harness.cli";
 export declare const validCredential: (value: string) => boolean;
 export declare const nativeCredentialEntry: EntryFactory;
@@ -27,7 +33,13 @@ export declare class CliCredentials {
     private environmentKey;
     private validate;
     private saved;
+    private readonly sources;
+    source(provider: HarnessProvider): "blocked" | "environment" | "keychain" | "missing" | "temporary" | "unavailable";
+    private endpointOverride;
+    /** Presence only: never contacts a provider or returns a secret. */
+    inspect(provider: HarnessProvider): Promise<CredentialStatus>;
     configure(provider: HarnessProvider, input: CredentialInput): Promise<boolean>;
+    private configureOnce;
     providerEnvironment(provider: HarnessProvider, input: CredentialInput): Promise<NodeJS.ProcessEnv>;
     clear(): void;
 }

package/dist/cli/cli-options.d.ts

@@ -8,7 +8,7 @@ export interface CliCommandOptionContract {
     repeatable: readonly string[];
     conflicts: Readonly<Record<string, readonly string[]>>;
 }
-export declare const CLI_OPTION_NAMES: readonly ["--provider", "--model", "--profile", "--route", "--workspace", "--state-dir", "--mcp-config", "--context-config", "--no-project-context", "--patch", "--preconditions", "--now", "--agent-profile", "--execution", "--oci-runtime", "--oci-image", "--oci-allow-command", "--oci-shell", "--oci-max-process-runtime-ms", "--oci-max-process-output-bytes", "--oci-max-memory-mb", "--oci-max-pids", "--oci-max-cpus", "--oci-max-workspace-bytes", "--oci-max-file-write-bytes", "--oci-tmpfs-mb", "--store", "--tenant", "--user", "--namespace", "--idempotency-key", "--max-steps", "--timeout-ms", "--max-tool-calls", "--max-tool-errors", "--max-input-tokens", "--max-output-tokens", "--max-total-tokens", "--subagent-max-steps", "--subagent-max-tool-calls", "--subagent-max-tool-errors", "--subagent-max-input-tokens", "--subagent-max-output-tokens", "--subagent-max-total-tokens", "--subagent-timeout-ms", "--max-parallel-reviews", "--max-cost-usd", "--input-cost-per-million", "--output-cost-per-million", "--allow-check", "--require-capability", "--subagent", "--reviewer", "--yes", "--approve", "--deny", "--json", "--jsonl", "--session", "--continue", "--status", "--limit", "--cursor", "--before", "--reason", "--cascade", "--final", "--service", "--apply", "--help", "--version", "--search", "--pricing-file", "--usage-limit-usd"];
+export declare const CLI_OPTION_NAMES: readonly ["--provider", "--model", "--profile", "--route", "--workspace", "--state-dir", "--mcp-config", "--context-config", "--no-project-context", "--patch", "--preconditions", "--now", "--agent-profile", "--execution", "--oci-runtime", "--oci-image", "--oci-allow-command", "--oci-shell", "--oci-max-process-runtime-ms", "--oci-max-process-output-bytes", "--oci-max-memory-mb", "--oci-max-pids", "--oci-max-cpus", "--oci-max-workspace-bytes", "--oci-max-file-write-bytes", "--oci-tmpfs-mb", "--store", "--tenant", "--user", "--namespace", "--idempotency-key", "--no-token-budget", "--max-steps", "--timeout-ms", "--max-tool-calls", "--max-tool-errors", "--max-input-tokens", "--max-output-tokens", "--max-total-tokens", "--subagent-max-steps", "--subagent-max-tool-calls", "--subagent-max-tool-errors", "--subagent-max-input-tokens", "--subagent-max-output-tokens", "--subagent-max-total-tokens", "--subagent-timeout-ms", "--max-parallel-reviews", "--max-cost-usd", "--input-cost-per-million", "--output-cost-per-million", "--allow-check", "--require-capability", "--subagent", "--reviewer", "--yes", "--approve", "--deny", "--json", "--jsonl", "--session", "--continue", "--update", "--status", "--limit", "--cursor", "--before", "--reason", "--cascade", "--final", "--service", "--apply", "--help", "--version", "--search", "--pricing-file", "--usage-limit-usd"];
 export type CliOptionName = (typeof CLI_OPTION_NAMES)[number];
 export declare const CLI_OPTION_DEFINITIONS: Readonly<Record<CliOptionName, CliOptionDefinition>>;
 export declare const CLI_COMMAND_OPTION_CONTRACTS: {

package/dist/cli/cli-profiles.d.ts

@@ -34,6 +34,22 @@ export declare const createCliProfile: (name: string, input: {
         model: string;
     };
 }>;
+/** Publish a complete, private replacement without truncating the current profile. */
+export declare const updateCliProfile: (name: string, input: {
+    provider: HarnessProvider;
+    model: string;
+}, context?: CliProfilePathContext) => Promise<{
+    path: string;
+    profile: {
+        schemaVersion: 1;
+        provider: "gemini" | "meta" | "openai" | "qwen";
+        model: string;
+    };
+}>;
 export declare const applyCliProfile: <T extends HarnessConfigInput & {
     profile?: string;
 }>(options: T, context?: CliProfilePathContext) => Promise<T>;
+/** Shared defaults for the conversation and its diagnostic command. */
+export declare const resolveCliDefaults: <T extends HarnessConfigInput & {
+    profile?: string;
+}>(options: T, context?: CliProfilePathContext) => Promise<T>;

package/dist/cli/console/console-model-catalog.d.ts

@@ -1,25 +1,8 @@
 export declare const CONSOLE_MODEL_CATALOG: {
-    readonly sdkVersion: "1.25.1";
-    readonly providers: {
-        readonly openai: {
-            readonly revision: "2026-09-12";
-            readonly sourceSha256: "af33783afbf76d7fd12776a2a19244663c286a0f7bc6f05549e2ffe8a3e41900";
-            readonly models: readonly ["gpt-6-astra", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna", "gpt-5.5", "gpt-5.4", "gpt-5.4-mini", "gpt-4o-mini"];
-        };
-        readonly qwen: {
-            readonly revision: "2026-09-20";
-            readonly sourceSha256: "f52a311095ad69f94bdfdbb71f7011ec7e19d24a5c7d7a116f53d7d13c8c6008";
-            readonly models: readonly ["qwen3.8-omni-flash", "qwen3.8-max-0902", "qwen3.8-max", "qwen3.8-flash", "qwen3.8-max-preview", "qwen3.7-max", "qwen3.7-plus", "qwen3.6-flash", "qwen3.5-omni-plus", "qwen-plus"];
-        };
-        readonly gemini: {
-            readonly revision: "2026-09-16";
-            readonly sourceSha256: "ef26943ffd54a786e06f232adf06585ccfdddb6450dd090b2e7bc01d668153b4";
-            readonly models: readonly ["gemini-3.8-flash", "gemini-3.7-flash", "gemini-3.6-flash", "gemini-3.5-flash-lite", "gemini-3.5-flash", "gemini-3.1-pro-preview", "gemini-3.1-pro-preview-customtools", "gemini-3-flash-preview", "gemini-3.1-flash-lite"];
-        };
-        readonly meta: {
-            readonly revision: "2026-09-04";
-            readonly sourceSha256: "0e655bb5cee4dd5430336bec10d1a9cfb08a4fdc5902c211d91599f6f92492f6";
-            readonly models: readonly ["muse-spark-1.3", "muse-spark-1.2", "muse-spark-1.2-contributor", "muse-spark-1.1"];
+    providers: {
+        [k: string]: {
+            revision: string;
+            models: string[];
         };
     };
 };

package/dist/cli/console/console-navigation.d.ts

@@ -1,8 +1,10 @@
 import type { ConsoleInput } from "./console-input.js";
+import { type ModelCatalog } from "../../models/catalog.js";
 import type { ProviderAvailability } from "../../providers/providers.js";
-export declare const consoleModelChoices: (provider: string, defaultModel: string, current?: string) => {
+export declare const consoleModelChoices: (provider: string, defaultModel: string, current?: string, catalog?: ModelCatalog) => {
     value: string;
     label: string;
+    group: "other" | "primary";
     detail: string;
 }[];
 export type ConsoleNavigationResult = {

package/dist/cli/doctor.d.ts

@@ -1,3 +1,4 @@
+import { type CredentialStatus } from "./cli-credentials.js";
 import { providerAvailability, resolveHarnessConfig, type HarnessProvider } from "../runtime/config.js";
 import { type HarnessOciRuntimeAdapter } from "../execution/execution-environment.js";
 import { CLI_JSON_SCHEMA_VERSION } from "./cli-stream.js";
@@ -40,11 +41,12 @@ export interface DoctorReport {
 }
 export interface DoctorContext {
     env?: NodeJS.ProcessEnv;
+    credentialStatus?: CredentialStatus;
     nodeVersion?: string;
     /** @deprecated Test-only compatibility injection for the secondary Bun runtime. */
     bunVersion?: string;
     ociRuntimeAdapter?: HarnessOciRuntimeAdapter;
 }
-export declare const createDoctorReport: (options?: Pick<CliOptions, "provider" | "model" | "workspace" | "stateDirectory" | "storeBackend" | "tenantId" | "userId" | "namespace" | "maxSteps" | "agentProfile" | "timeoutMs" | "maxToolCalls" | "maxToolErrors" | "maxInputTokens" | "maxOutputTokens" | "maxTotalTokens" | "maxCostUsd" | "inputCostPerMillion" | "outputCostPerMillion" | "allowedChecks" | "requiredCapabilities" | "subagentProfiles" | "subagentMaxSteps" | "subagentMaxToolCalls" | "subagentMaxToolErrors" | "subagentMaxInputTokens" | "subagentMaxOutputTokens" | "subagentMaxTotalTokens" | "subagentTimeoutMs" | "maxParallelReviews" | "executionBackend" | "ociRuntime" | "ociImage" | "ociAllowedCommands" | "ociShellMode" | "ociMaxProcessRuntimeMs" | "ociMaxProcessOutputBytes" | "ociMaxMemoryMb" | "ociMaxPids" | "ociMaxCpus" | "ociMaxWorkspaceBytes" | "ociMaxFileWriteBytes" | "ociTmpfsMb" | "mcpConfigPath" | "contextConfigPath" | "projectContext">, context?: DoctorContext) => Promise<DoctorReport>;
+export declare const createDoctorReport: (options?: Pick<CliOptions, "provider" | "model" | "workspace" | "stateDirectory" | "storeBackend" | "tenantId" | "userId" | "namespace" | "maxSteps" | "agentProfile" | "timeoutMs" | "maxToolCalls" | "maxToolErrors" | "unlimitedTokens" | "maxInputTokens" | "maxOutputTokens" | "maxTotalTokens" | "maxCostUsd" | "inputCostPerMillion" | "outputCostPerMillion" | "allowedChecks" | "requiredCapabilities" | "subagentProfiles" | "subagentMaxSteps" | "subagentMaxToolCalls" | "subagentMaxToolErrors" | "subagentMaxInputTokens" | "subagentMaxOutputTokens" | "subagentMaxTotalTokens" | "subagentTimeoutMs" | "maxParallelReviews" | "executionBackend" | "ociRuntime" | "ociImage" | "ociAllowedCommands" | "ociShellMode" | "ociMaxProcessRuntimeMs" | "ociMaxProcessOutputBytes" | "ociMaxMemoryMb" | "ociMaxPids" | "ociMaxCpus" | "ociMaxWorkspaceBytes" | "ociMaxFileWriteBytes" | "ociTmpfsMb" | "mcpConfigPath" | "contextConfigPath" | "projectContext">, context?: DoctorContext) => Promise<DoctorReport>;
 export declare const formatDoctorReport: (report: DoctorReport) => string;
 export declare const doctor: (options: CliOptions) => Promise<void>;

package/dist/cli/errors.d.ts

@@ -1,3 +1,4 @@
+export declare const cliRecoveryHint: (error: unknown, argv: string[]) => string;
 export declare const CLI_EXIT_CODES: {
     readonly success: 0;
     readonly runtimeError: 1;

package/dist/cli/setup.d.ts

@@ -1,16 +1,10 @@
-import { type HarnessProvider } from "../runtime/config.js";
 import { type CliOptions } from "./arguments.js";
 export declare const providersDocument: (env?: NodeJS.ProcessEnv) => {
     schemaVersion: 1;
     kind: "providers";
     providers: readonly import("../index.js").ProviderAvailability[];
 };
-export declare const confirmDefaultProfileSelection: (profile: {
-    provider: HarnessProvider;
-    model: string;
-}, ask: (prompt: string) => Promise<string>) => Promise<{
-    provider: HarnessProvider;
-    model: string;
-} | undefined>;
-export declare const initializeCli: (options: CliOptions) => Promise<void>;
+export declare const initializeCli: (options: CliOptions, context?: {
+    onboarding?: boolean;
+}) => Promise<boolean>;
 export declare const listProviders: (json: boolean) => void;

package/dist/cli/task-input.d.ts

@@ -0,0 +1,6 @@
+import type { Readable } from "node:stream";
+export declare const MAX_STDIN_TASK_BYTES: number;
+/** Stdin is opt-in and is consumed before constructing a provider or opening state. */
+export declare function readStdinTask(input?: Readable & {
+    isTTY?: boolean;
+}): Promise<string>;

package/dist/cli.d.ts

@@ -25,7 +25,6 @@ export { CLI_FULL_HELP_TEXT } from "./cli/help-text.js";
 export { summarizeApproval } from "./cli/presentation.js";
 export { withTemporaryHarnessProfiles } from "./cli/routing.js";
 export { providersDocument } from "./cli/setup.js";
-export { confirmDefaultProfileSelection } from "./cli/setup.js";
 export type { DoctorCheckStatus } from "./cli/doctor.js";
 export type { DoctorCheck } from "./cli/doctor.js";
 export type { DoctorReport } from "./cli/doctor.js";