@zhivex-ai/harness 1.2.0 → 1.3.0-rc.7

package/dist/{cli-3jmy4h5h.js → cli-t7hrhayq.js}

@@ -1,108 +1,150 @@
 #!/usr/bin/env node
 import {
-  CLI_OPTION_DEFINITIONS,
-  formatCliHelp,
-  resolveHelpTopic,
-  shortCliHelp,
-  validateCliCommandOptions
-} from "./cli-entry-b1mfvmxe.js";
-import {
+  APPROVAL_HISTORY_KEY,
   ActivityHistory,
+  CLI_CHANGES_COMMANDS,
+  CLI_COMMANDS,
   CLI_JSON_SCHEMA_VERSION,
+  CLI_RUNS_COMMANDS,
+  CLI_SESSIONS_COMMANDS,
+  CLI_STATE_COMMANDS,
+  CliCredentials,
   CliOciRuntimeAdapter,
+  CliUsageError,
   ConsoleInput,
+  CredentialSetupError,
   DEFAULT_HARNESS_CONTEXT_MANIFEST,
   FileChangedWhileReadingError,
   FileSizeLimitError,
   HARNESS_OPERATIONS_SCHEMA_VERSION,
+  HARNESS_RESUME_METADATA_KEY,
+  HARNESS_RESUME_METADATA_SCHEMA_VERSION,
   HARNESS_SESSION_SCHEMA_VERSION,
   HARNESS_SQLITE_FILE,
   MAX_HARNESS_CONTEXT_FILE_BYTES,
   MAX_HARNESS_CONTEXT_TOTAL_BYTES,
   SqliteDatabase,
+  TASK_ACCEPTANCE_EVIDENCE_KEY,
   TASK_SOURCE_KEY,
-  ToolActivity,
   USAGE_LEDGER_KEY,
   UnsafeFileTypeError,
   Workspace,
+  annotateCliStreamError,
   appendUserMessage,
+  applyCliProfile,
+  approvalDecisionViews,
+  approvalResponses,
+  assertRoutePricingIsSafe,
   cancelHarnessRun,
   canonicalizeChangeEnvelope,
   changeEnvelopePreconditionsSchema,
+  changeEnvelopeSchema,
   chooseReasoning,
   cleanupHarnessExecutionArtifacts,
   cleanupHarnessRuns,
+  cliStreamErrorSequence,
   compactHarnessMessages,
-  compactToolResult,
   createChangeEnvelope,
+  createCliProfile,
+  createConfiguredHarness,
   createHarness,
+  createHarnessResumeMetadata,
+  createHarnessRouteModels,
+  credentialModel,
   digestChangeEnvelopeArtifact,
   estimateMessages,
   fileDigestSchema,
+  flushToolActivity,
   formatAppliedFiles,
-  formatApproval,
   formatConsoleHelp,
   formatConsoleWelcome,
-  formatTerminalEvent,
   formatUsageLedger,
   formatVerificationSummary,
+  harnessConfigInput,
+  harnessPolicyDecisionEventSchema,
   harnessToolExecution,
+  inspectCliPolicy,
   inspectHarnessRun,
   inspectRuntimeDiagnostics,
+  inspectRuntimeManifest,
   inspectUsageLedger,
+  issueAutomaticApprovalResponses,
+  issueObservedApprovalResponses,
   listHarnessRuns,
+  loadCliProfile,
   loadHarnessMcpConfiguration,
   loadHarnessProjectContext,
   loadModelCatalog,
   navigateConsole,
+  observeCliPolicy,
   openCliSessionStore,
+  openHarnessActivityStore,
   openHarnessPersistence,
+  openWorkspaceCheckpointStore,
+  orchestrationObserver,
+  parseCliArgs,
+  parseHarnessModelRoute,
+  persistedCliOptions,
+  printTerminalResult,
+  publishPendingPolicyDecision,
+  readHarnessResumeConfig,
+  readHarnessResumeRoutes,
   readRegularFileChunksNoFollow,
   readRegularFileNoFollow,
+  readTaskAcceptanceLedger,
+  requiresExplicitHostReview,
+  resolveCliDefaults,
+  resolveHarnessModelRoutes,
   resolvePackageManager,
-  resolveTerminalApprovals,
+  resolvedRouting,
+  resumeCommand,
   runHarness,
   runHarnessReviewGroup,
   runPortableProcess,
   runResultDocument,
   sanitizeTerminalText,
-  serializeStreamEvent,
-  serializeStreamResult,
+  serializeHarnessModelRoutes,
   sqliteAdapter,
+  streamSink,
+  summarizeApproval,
+  taskCheckReceiptSchema,
   taskSources,
+  terminalApprovalResolver,
   terminalContinuationMessages,
+  terminalErrorMessage,
   terminalRunFailure,
   terminalSupportsColor,
-  usagePricingSchema,
+  updateCliProfile,
   validateStateDirectory,
   verifyChangeEnvelope,
-  workspaceFilePathSchema
-} from "./cli-entry-c2f58zj2.js";
+  withTemporaryHarnessProfiles,
+  workspaceCheckpointSchema,
+  workspaceRestoreOperationSchema
+} from "./cli-entry-ae7x44d4.js";
 import {
   BUN_ENGINE_RANGE,
   HARNESS_VERSION,
-  NODE_ENGINE_RANGE
-} from "./cli-entry-64pdp3k5.js";
+  NODE_ENGINE_RANGE,
+  formatCliHelp,
+  shortCliHelp
+} from "./cli-entry-ev76ezcd.js";
 import {
   DEFAULT_HARNESS_MAX_STEPS,
   DEFAULT_PROVIDER_REGISTRY,
-  HARNESS_REQUIRED_CAPABILITIES,
   HARNESS_SUBAGENT_PROFILES,
   HarnessConfigError,
   HarnessError,
   HarnessStateConflictError,
   HarnessWorkspaceError,
   PROVIDERS,
-  createProviderModel,
   harnessErrorDocument,
   modelReasoningEfforts,
-  normalizeHarnessError,
   parseProvider,
   providerAvailability,
   providerDescriptor,
   reasoningEffortSchema,
   resolveHarnessConfig
-} from "./cli-entry-427869g9.js";
+} from "./cli-entry-d5788aay.js";
 import {
   __require
 } from "./cli-entry-1bx83sw4.js";
@@ -111,1577 +153,6 @@ import {
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 
-// src/cli/cli-profiles.ts
-import { constants as fsConstants } from "node:fs";
-import { lstat, mkdir, open, unlink, rename } from "node:fs/promises";
-import { randomUUID } from "node:crypto";
-import os from "node:os";
-import path from "node:path";
-import { z } from "zod";
-var CLI_PROFILE_SCHEMA_VERSION = 1;
-var CLI_PROFILE_CONFIG_DIRECTORY_ENV = "ZHIVEX_HARNESS_CONFIG_DIR";
-var MAX_CLI_PROFILE_BYTES = 16 * 1024;
-var profileNamePattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
-var cliProfileSchema = z.strictObject({
-  schemaVersion: z.literal(CLI_PROFILE_SCHEMA_VERSION),
-  provider: z.enum(PROVIDERS),
-  reasoningEffort: reasoningEffortSchema.optional(),
-  model: z.string().min(1).max(512).refine((value) => !/[\u0000-\u001f\u007f]/.test(value), "model must contain printable characters")
-});
-var absoluteDirectory = (value, source, pathApi = path) => {
-  if (!pathApi.isAbsolute(value)) {
-    throw new HarnessConfigError(`${source} must be an absolute path.`);
-  }
-  return pathApi.normalize(value);
-};
-var validateCliProfileName = (name) => {
-  if (!profileNamePattern.test(name)) {
-    throw new HarnessConfigError("Profile names must use 1-64 letters, digits, dot, underscore, or hyphen and start with a letter or digit.");
-  }
-  return name;
-};
-var resolveCliProfileConfigDirectory = (context = {}) => {
-  const env = context.env ?? process.env;
-  const platform = context.platform ?? process.platform;
-  const homeDirectory = context.homeDirectory ?? os.homedir();
-  const pathApi = platform === "win32" ? path.win32 : path;
-  const override = env[CLI_PROFILE_CONFIG_DIRECTORY_ENV]?.trim();
-  if (override) {
-    return absoluteDirectory(override, CLI_PROFILE_CONFIG_DIRECTORY_ENV, pathApi);
-  }
-  if (platform === "darwin") {
-    return pathApi.join(homeDirectory, "Library", "Application Support", "zhivex-harness");
-  }
-  if (platform === "win32") {
-    const appData = env.APPDATA?.trim();
-    if (!appData) {
-      throw new HarnessConfigError(`APPDATA is required to locate Zhivex Harness profiles on ${platform}.`);
-    }
-    return pathApi.join(absoluteDirectory(appData, "APPDATA", pathApi), "zhivex-harness");
-  }
-  const xdgConfigHome = env.XDG_CONFIG_HOME?.trim();
-  const configHome = xdgConfigHome ? absoluteDirectory(xdgConfigHome, "XDG_CONFIG_HOME", pathApi) : pathApi.join(homeDirectory, ".config");
-  return pathApi.join(configHome, "zhivex-harness");
-};
-var resolveCliProfilePath = (name, context = {}) => path.join(resolveCliProfileConfigDirectory(context), "profiles", `${validateCliProfileName(name)}.json`);
-var validatePrivateDirectory = async (directory) => {
-  const directoryStat = await lstat(directory);
-  if (!directoryStat.isDirectory() || directoryStat.isSymbolicLink()) {
-    throw new HarnessConfigError(`CLI profile directory must be a real directory: ${directory}`);
-  }
-  if ((directoryStat.mode & 18) !== 0) {
-    throw new HarnessConfigError(`CLI profile directory must not be writable by group or others: ${directory}`);
-  }
-};
-var ensurePrivateDirectory = async (directory) => {
-  try {
-    await validatePrivateDirectory(directory);
-    return;
-  } catch (error) {
-    if (error.code !== "ENOENT")
-      throw error;
-  }
-  await mkdir(directory, { recursive: true, mode: 448 });
-  await validatePrivateDirectory(directory);
-};
-var profileReadError = (profilePath, error) => {
-  if (error instanceof UnsafeFileTypeError) {
-    throw new HarnessConfigError(`CLI profile must be a regular non-linked file: ${profilePath}`);
-  }
-  if (error instanceof FileSizeLimitError) {
-    throw new HarnessConfigError(`CLI profile exceeds the ${MAX_CLI_PROFILE_BYTES}-byte limit: ${profilePath}`);
-  }
-  if (error instanceof FileChangedWhileReadingError) {
-    throw new HarnessConfigError(`CLI profile changed while it was being read: ${profilePath}`);
-  }
-  const code = error && typeof error === "object" && "code" in error ? error.code : undefined;
-  if (code === "ENOENT") {
-    throw new HarnessConfigError(`CLI profile was not found: ${profilePath}. Create it with zhx init --profile <name>.`);
-  }
-  throw error;
-};
-var loadCliProfile = async (name, context = {}) => {
-  const profilePath = resolveCliProfilePath(name, context);
-  let file;
-  try {
-    await validatePrivateDirectory(resolveCliProfileConfigDirectory(context));
-    await validatePrivateDirectory(path.dirname(profilePath));
-    file = await readRegularFileNoFollow(profilePath, {
-      label: `CLI profile ${name}`,
-      maxBytes: MAX_CLI_PROFILE_BYTES,
-      requireSingleLink: true
-    });
-  } catch (error) {
-    return profileReadError(profilePath, error);
-  }
-  if ((file.stat.mode & 63) !== 0) {
-    throw new HarnessConfigError(`CLI profile permissions are too broad; expected owner-only access: ${profilePath}`);
-  }
-  let document;
-  try {
-    document = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(file.contents));
-  } catch {
-    throw new HarnessConfigError(`CLI profile is not valid UTF-8 JSON: ${profilePath}`);
-  }
-  const parsed = cliProfileSchema.safeParse(document);
-  if (!parsed.success) {
-    throw new HarnessConfigError(`CLI profile is invalid: ${parsed.error.issues[0]?.message ?? "schema mismatch"}`);
-  }
-  return parsed.data;
-};
-var createCliProfile = async (name, input, context = {}) => {
-  const parsed = cliProfileSchema.safeParse({
-    schemaVersion: CLI_PROFILE_SCHEMA_VERSION,
-    provider: input.provider,
-    model: input.model,
-    ...input.reasoningEffort ? { reasoningEffort: input.reasoningEffort } : {}
-  });
-  if (!parsed.success) {
-    throw new HarnessConfigError(`CLI profile is invalid: ${parsed.error.issues[0]?.message ?? "schema mismatch"}`);
-  }
-  const profile = parsed.data;
-  const profilePath = resolveCliProfilePath(name, context);
-  await ensurePrivateDirectory(resolveCliProfileConfigDirectory(context));
-  await ensurePrivateDirectory(path.dirname(profilePath));
-  let handle;
-  try {
-    handle = await open(profilePath, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | fsConstants.O_NOFOLLOW, 384);
-  } catch (error) {
-    if (error.code === "EEXIST") {
-      throw new HarnessConfigError(`CLI profile already exists: ${profilePath}. Use zhx init --profile ${name} --update, or choose another --profile name.`);
-    }
-    throw error;
-  }
-  let completed = false;
-  try {
-    await handle.chmod(384);
-    await handle.writeFile(`${JSON.stringify(profile, null, 2)}
-`, "utf8");
-    await handle.sync();
-    const fileStat = await handle.stat();
-    if (!fileStat.isFile() || fileStat.nlink !== 1 || (fileStat.mode & 63) !== 0) {
-      throw new HarnessConfigError(`CLI profile could not be created safely: ${profilePath}`);
-    }
-    completed = true;
-  } finally {
-    try {
-      await handle.close();
-    } finally {
-      if (!completed)
-        await unlink(profilePath).catch(() => {
-          return;
-        });
-    }
-  }
-  return { path: profilePath, profile };
-};
-var updateCliProfile = async (name, input, context = {}) => {
-  await loadCliProfile(name, context);
-  const profilePath = resolveCliProfilePath(name, context);
-  const temporary = await createCliProfile(`update-${randomUUID()}`, input, context);
-  try {
-    await loadCliProfile(name, context);
-    await rename(temporary.path, profilePath);
-    return { path: profilePath, profile: temporary.profile };
-  } finally {
-    await unlink(temporary.path).catch((error) => {
-      if (error.code !== "ENOENT")
-        throw error;
-    });
-  }
-};
-var applyCliProfile = async (options, context = {}) => {
-  if (!options.profile)
-    return options;
-  const profile = await loadCliProfile(options.profile, context);
-  return {
-    provider: profile.provider,
-    model: profile.model,
-    ...profile.reasoningEffort && (!options.provider || options.provider === profile.provider) && (!options.model || options.model === profile.model) ? { reasoningEffort: profile.reasoningEffort } : {},
-    ...options
-  };
-};
-var resolveCliDefaults = async (options, context = {}) => {
-  const env = context.env ?? process.env;
-  if (options.profile || options.provider || options.model || env.ZHIVEX_HARNESS_PROVIDER || env.ZHIVEX_HARNESS_MODEL)
-    return options;
-  try {
-    await lstat(resolveCliProfilePath("default", context));
-  } catch (error) {
-    if (error.code !== "ENOENT")
-      throw error;
-    const configured = providerAvailability(env).filter((provider) => provider.configured);
-    return configured.length === 1 ? { ...options, provider: configured[0].id } : options;
-  }
-  return { ...options, profile: "default" };
-};
-
-// src/cli/arguments.ts
-import { z as z2 } from "zod";
-
-// src/providers/routing.ts
-var routeError = (value) => new Error(`Invalid route: ${value}. Use <profile>=<provider>[:<model>].`);
-var parseHarnessModelRoute = (value, registry = DEFAULT_PROVIDER_REGISTRY) => {
-  const separator = value.indexOf("=");
-  if (separator <= 0 || separator === value.length - 1) {
-    throw routeError(value);
-  }
-  const profile = value.slice(0, separator).trim().toLowerCase();
-  if (!HARNESS_SUBAGENT_PROFILES.includes(profile)) {
-    throw routeError(value);
-  }
-  const target = value.slice(separator + 1).trim();
-  const modelSeparator = target.indexOf(":");
-  const providerInput = (modelSeparator === -1 ? target : target.slice(0, modelSeparator)).trim();
-  const provider = registry.parse(providerInput);
-  const configuredModel = modelSeparator === -1 ? "" : target.slice(modelSeparator + 1).trim();
-  if (modelSeparator !== -1 && !configuredModel) {
-    throw routeError(value);
-  }
-  const model = configuredModel || registry.descriptor(provider).defaultModel;
-  if (/[\u0000-\u001f\u007f]/.test(model) || model.length > 256) {
-    throw routeError(value);
-  }
-  return Object.freeze({
-    profile,
-    provider,
-    model
-  });
-};
-var resolveHarnessModelRoutes = (values = [], registry = DEFAULT_PROVIDER_REGISTRY) => {
-  const routes = new Map;
-  for (const value of values) {
-    const route = parseHarnessModelRoute(value, registry);
-    if (routes.has(route.profile)) {
-      throw new Error(`Duplicate model route for ${route.profile}.`);
-    }
-    routes.set(route.profile, route);
-  }
-  return routes;
-};
-var createHarnessRouteModels = (routes, env = process.env, registry = DEFAULT_PROVIDER_REGISTRY) => Object.fromEntries([...routes].map(([profile, route]) => [
-  profile,
-  registry.createModel(route, env)
-]));
-var serializeHarnessModelRoutes = (routes) => Object.fromEntries([...routes].map(([profile, route]) => [
-  profile,
-  { provider: route.provider, model: route.model }
-]));
-
-// src/cli/arguments.ts
-var CLI_COMMANDS = ["init", "run", "review", "chat", "providers", "doctor", "resume", "runs", "sessions", "changes", "state", "help", "version"];
-var CLI_RUNS_COMMANDS = ["list", "inspect", "cancel", "cleanup", "export"];
-var CLI_SESSIONS_COMMANDS = ["list", "inspect", "rename", "fork", "archive"];
-var CLI_CHANGES_COMMANDS = ["create", "verify"];
-var CLI_STATE_COMMANDS = ["status", "export", "import"];
-var COMMANDS = new Set(CLI_COMMANDS);
-var RUNS_COMMANDS = new Set(CLI_RUNS_COMMANDS);
-var SESSIONS_COMMANDS = new Set(CLI_SESSIONS_COMMANDS);
-var CHANGES_COMMANDS = new Set(CLI_CHANGES_COMMANDS);
-var STATE_COMMANDS = new Set(CLI_STATE_COMMANDS);
-var CLI_TIMESTAMP_SCHEMA = z2.iso.datetime({ precision: 3 });
-var RUN_STATUSES = new Set([
-  "queued",
-  "running",
-  "completed",
-  "suspended",
-  "waiting_approval",
-  "cancel_requested",
-  "failed",
-  "cancelled",
-  "timed_out"
-]);
-
-class CliUsageError extends HarnessError {
-  constructor(message) {
-    super(message, { code: "CLI_USAGE_INVALID", category: "usage" });
-    this.name = "CliUsageError";
-  }
-}
-var optionValue = (argv, index, name) => {
-  const value = argv[index + 1];
-  if (!value || value.startsWith("-")) {
-    throw new CliUsageError(`Missing value for ${name}.`);
-  }
-  return value;
-};
-var parseCliArgs = (argv) => {
-  const booleanOptions = new Set(["--token-budget", "--no-token-budget", "--yes", "--approve", "--deny", "--json", "--jsonl", "--continue", "--cascade", "--final", "--apply", "--help", "--version", "--no-project-context", "--update"]);
-  const separator = argv.indexOf("--");
-  argv = argv.flatMap((arg, index) => {
-    const equals = arg.indexOf("=");
-    const name = arg.slice(0, equals);
-    return (separator < 0 || index < separator) && equals > 0 && name in CLI_OPTION_DEFINITIONS && !booleanOptions.has(name) ? [name, arg.slice(equals + 1)] : [arg];
-  });
-  let command = "run";
-  let commandWasExplicit = false;
-  const positional = [];
-  const options = {
-    command,
-    cascade: false,
-    final: false,
-    apply: false,
-    yes: false,
-    json: false,
-    jsonl: false,
-    continueSession: false,
-    implicitCommand: true
-  };
-  let positionalOnly = false;
-  const optionCounts = new Map;
-  const helpIndex = argv.findIndex((arg, index) => (arg === "--help" || arg === "-h") && (argv.indexOf("--") < 0 || index < argv.indexOf("--")));
-  if (helpIndex >= 0) {
-    const words = [];
-    for (let index = 0;index < argv.length && argv[index] !== "--"; index++) {
-      const arg = argv[index];
-      if (arg.startsWith("-")) {
-        if (arg in CLI_OPTION_DEFINITIONS && !booleanOptions.has(arg) && argv[index + 1] && !argv[index + 1].startsWith("-"))
-          index++;
-      } else
-        words.push(arg);
-    }
-    const first = words[0];
-    const parts = first === "help" ? words.slice(1) : first && COMMANDS.has(first) ? words.slice(0, ["runs", "sessions", "changes", "state"].includes(first) ? 2 : 1) : [];
-    try {
-      const topic = resolveHelpTopic(parts, parts.length > 0);
-      return { ...options, command: "help", ...topic ? { helpTopic: topic } : {} };
-    } catch (error) {
-      throw new CliUsageError(error instanceof Error ? error.message : String(error));
-    }
-  }
-  for (let index = 0;index < argv.length; index += 1) {
-    const argument = argv[index];
-    if (!argument) {
-      continue;
-    }
-    if (positionalOnly) {
-      positional.push(argument);
-      continue;
-    }
-    if (argument === "--") {
-      positionalOnly = true;
-      continue;
-    }
-    const canonicalOption = argument === "-h" ? "--help" : argument === "-v" ? "--version" : argument;
-    if (canonicalOption in CLI_OPTION_DEFINITIONS) {
-      optionCounts.set(canonicalOption, (optionCounts.get(canonicalOption) ?? 0) + 1);
-    }
-    if (!commandWasExplicit && COMMANDS.has(argument)) {
-      command = argument;
-      options.command = command;
-      commandWasExplicit = true;
-      continue;
-    }
-    switch (argument) {
-      case "--update":
-        options.updateProfile = true;
-        break;
-      case "-":
-        positional.push(argument);
-        break;
-      case "--profile":
-        try {
-          options.profile = validateCliProfileName(optionValue(argv, index, argument));
-        } catch (error) {
-          throw new CliUsageError(error instanceof Error ? error.message : String(error));
-        }
-        index += 1;
-        break;
-      case "--provider":
-        try {
-          options.provider = parseProvider(optionValue(argv, index, argument));
-        } catch (error) {
-          throw new CliUsageError(error instanceof Error ? error.message : String(error));
-        }
-        index += 1;
-        break;
-      case "--model":
-        options.model = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--route": {
-        const value = optionValue(argv, index, argument);
-        try {
-          parseHarnessModelRoute(value);
-        } catch (error) {
-          throw new CliUsageError(error instanceof Error ? error.message : String(error));
-        }
-        options.routes ??= [];
-        options.routes.push(value);
-        if (options.routes.length > HARNESS_SUBAGENT_PROFILES.length) {
-          throw new CliUsageError(`--route cannot be repeated more than ${HARNESS_SUBAGENT_PROFILES.length} times.`);
-        }
-        index += 1;
-        break;
-      }
-      case "--workspace":
-        options.workspace = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--state-dir":
-        options.stateDirectory = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--mcp-config":
-        options.mcpConfigPath = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--context-config":
-        options.contextConfigPath = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--token-budget":
-        options.unlimitedTokens = false;
-        break;
-      case "--no-token-budget":
-        options.unlimitedTokens = true;
-        break;
-      case "--no-project-context":
-        options.projectContext = false;
-        break;
-      case "--patch":
-        options.patchPath = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--preconditions":
-        options.preconditionsPath = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--now": {
-        const value = optionValue(argv, index, argument);
-        if (!CLI_TIMESTAMP_SCHEMA.safeParse(value).success) {
-          throw new CliUsageError("--now must be a millisecond-precision ISO-8601 UTC timestamp.");
-        }
-        options.verificationTime = value;
-        index += 1;
-        break;
-      }
-      case "--reasoning":
-        options.reasoningEffort = reasoningEffortSchema.parse(optionValue(argv, index, argument));
-        index += 1;
-        break;
-      case "--require-verified-delivery":
-        options.requireVerifiedDelivery = true;
-        break;
-      case "--execution":
-        options.executionBackend = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--oci-runtime":
-        options.ociRuntime = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--oci-image":
-        options.ociImage = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--oci-allow-command": {
-        const value = optionValue(argv, index, argument);
-        if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/.test(value)) {
-          throw new CliUsageError("--oci-allow-command requires a bare executable name.");
-        }
-        options.ociAllowedCommands ??= [];
-        options.ociAllowedCommands.push(value);
-        index += 1;
-        break;
-      }
-      case "--oci-shell":
-        options.ociShellMode = optionValue(argv, index, argument);
-        if (!["deny", "ask"].includes(options.ociShellMode)) {
-          throw new CliUsageError("--oci-shell must be deny or ask.");
-        }
-        index += 1;
-        break;
-      case "--store":
-        options.storeBackend = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--tenant":
-        options.tenantId = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--user":
-        options.userId = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--namespace":
-        options.namespace = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--idempotency-key":
-        options.idempotencyKey = optionValue(argv, index, argument);
-        if (options.idempotencyKey.length > 256) {
-          throw new CliUsageError("--idempotency-key cannot exceed 256 characters.");
-        }
-        index += 1;
-        break;
-      case "--max-steps": {
-        const value = optionValue(argv, index, argument);
-        options.maxSteps = Number(value);
-        if (!Number.isSafeInteger(options.maxSteps) || options.maxSteps < 1) {
-          throw new CliUsageError("--max-steps must be a positive safe integer.");
-        }
-        index += 1;
-        break;
-      }
-      case "--timeout-ms":
-      case "--max-tool-calls":
-      case "--max-tool-errors":
-      case "--context-tokens":
-      case "--max-input-tokens":
-      case "--max-output-tokens":
-      case "--max-total-tokens":
-      case "--subagent-max-steps":
-      case "--subagent-max-tool-calls":
-      case "--subagent-max-tool-errors":
-      case "--subagent-max-input-tokens":
-      case "--subagent-max-output-tokens":
-      case "--subagent-max-total-tokens":
-      case "--subagent-timeout-ms":
-      case "--max-parallel-reviews": {
-        const value = Number(optionValue(argv, index, argument));
-        if (!Number.isSafeInteger(value) || value < 0) {
-          throw new CliUsageError(`${argument} must be a non-negative integer.`);
-        }
-        if (argument === "--timeout-ms")
-          options.timeoutMs = value;
-        if (argument === "--max-tool-calls")
-          options.maxToolCalls = value;
-        if (argument === "--max-tool-errors")
-          options.maxToolErrors = value;
-        if (argument === "--context-tokens")
-          options.compactionMaxEstimatedInputTokens = value;
-        if (argument === "--max-input-tokens")
-          options.maxInputTokens = value;
-        if (argument === "--max-output-tokens")
-          options.maxOutputTokens = value;
-        if (argument === "--max-total-tokens")
-          options.maxTotalTokens = value;
-        if (argument === "--subagent-max-steps")
-          options.subagentMaxSteps = value;
-        if (argument === "--subagent-max-tool-calls")
-          options.subagentMaxToolCalls = value;
-        if (argument === "--subagent-max-tool-errors")
-          options.subagentMaxToolErrors = value;
-        if (argument === "--subagent-max-input-tokens")
-          options.subagentMaxInputTokens = value;
-        if (argument === "--subagent-max-output-tokens")
-          options.subagentMaxOutputTokens = value;
-        if (argument === "--subagent-max-total-tokens")
-          options.subagentMaxTotalTokens = value;
-        if (argument === "--subagent-timeout-ms")
-          options.subagentTimeoutMs = value;
-        if (argument === "--max-parallel-reviews")
-          options.maxParallelReviews = value;
-        index += 1;
-        break;
-      }
-      case "--oci-max-process-runtime-ms":
-      case "--oci-max-process-output-bytes":
-      case "--oci-max-memory-mb":
-      case "--oci-max-pids":
-      case "--oci-max-cpus":
-      case "--oci-max-workspace-bytes":
-      case "--oci-max-file-write-bytes":
-      case "--oci-tmpfs-mb": {
-        const value = Number(optionValue(argv, index, argument));
-        if (!Number.isSafeInteger(value) || value < 1) {
-          throw new CliUsageError(`${argument} must be a positive integer.`);
-        }
-        if (argument === "--oci-max-process-runtime-ms")
-          options.ociMaxProcessRuntimeMs = value;
-        if (argument === "--oci-max-process-output-bytes")
-          options.ociMaxProcessOutputBytes = value;
-        if (argument === "--oci-max-memory-mb")
-          options.ociMaxMemoryMb = value;
-        if (argument === "--oci-max-pids")
-          options.ociMaxPids = value;
-        if (argument === "--oci-max-cpus")
-          options.ociMaxCpus = value;
-        if (argument === "--oci-max-workspace-bytes")
-          options.ociMaxWorkspaceBytes = value;
-        if (argument === "--oci-max-file-write-bytes")
-          options.ociMaxFileWriteBytes = value;
-        if (argument === "--oci-tmpfs-mb")
-          options.ociTmpfsMb = value;
-        index += 1;
-        break;
-      }
-      case "--search":
-        options.sessionSearch = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--pricing-file":
-        options.pricingFile = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--compaction-model":
-        options.compactionModel = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--compaction-provider":
-        options.compactionProvider = parseProvider(optionValue(argv, index, argument));
-        index += 1;
-        break;
-      case "--usage-limit-usd": {
-        const value = Number(optionValue(argv, index, argument));
-        if (!Number.isFinite(value) || value <= 0)
-          throw new CliUsageError("--usage-limit-usd must be positive USD.");
-        options.usageLimitUsd = value;
-        index += 1;
-        break;
-      }
-      case "--max-cost-usd":
-      case "--input-cost-per-million":
-      case "--output-cost-per-million": {
-        const value = Number(optionValue(argv, index, argument));
-        if (!Number.isFinite(value) || value < 0) {
-          throw new CliUsageError(`${argument} must be a non-negative number.`);
-        }
-        if (argument === "--max-cost-usd")
-          options.maxCostUsd = value;
-        if (argument === "--input-cost-per-million")
-          options.inputCostPerMillion = value;
-        if (argument === "--output-cost-per-million")
-          options.outputCostPerMillion = value;
-        index += 1;
-        break;
-      }
-      case "--allow-check": {
-        const value = optionValue(argv, index, argument);
-        if (!/^[A-Za-z0-9][A-Za-z0-9:_-]{0,63}$/.test(value)) {
-          throw new CliUsageError("--allow-check must use 1-64 letters, digits, colon, underscore, or hyphen.");
-        }
-        options.allowedChecks ??= [];
-        options.allowedChecks.push(value);
-        if (options.allowedChecks.length > 50) {
-          throw new CliUsageError("--allow-check cannot be repeated more than 50 times.");
-        }
-        index += 1;
-        break;
-      }
-      case "--require-capability": {
-        const value = optionValue(argv, index, argument);
-        if (!HARNESS_REQUIRED_CAPABILITIES.includes(value)) {
-          throw new CliUsageError(`--require-capability must be one of: ${HARNESS_REQUIRED_CAPABILITIES.join(", ")}.`);
-        }
-        options.requiredCapabilities ??= [];
-        options.requiredCapabilities.push(value);
-        index += 1;
-        break;
-      }
-      case "--subagent": {
-        const value = optionValue(argv, index, argument);
-        if (!HARNESS_SUBAGENT_PROFILES.includes(value)) {
-          throw new CliUsageError(`--subagent must be one of: ${HARNESS_SUBAGENT_PROFILES.join(", ")}.`);
-        }
-        options.subagentProfiles ??= [];
-        options.subagentProfiles.push(value);
-        index += 1;
-        break;
-      }
-      case "--reviewer": {
-        const value = optionValue(argv, index, argument);
-        if (value !== "explorer" && value !== "reviewer") {
-          throw new CliUsageError("--reviewer must be explorer or reviewer.");
-        }
-        options.reviewers ??= [];
-        options.reviewers.push(value);
-        index += 1;
-        break;
-      }
-      case "--approval-mode": {
-        const mode = optionValue(argv, index, argument);
-        if (mode !== "ask" && mode !== "auto" && mode !== "restricted")
-          throw new CliUsageError("--approval-mode must be ask, auto or restricted.");
-        options.approvalMode = mode;
-        options.yes = mode === "auto";
-        index += 1;
-        break;
-      }
-      case "--yes":
-        options.yes = true;
-        break;
-      case "--approve":
-        if (options.approve === false) {
-          throw new CliUsageError("You cannot combine --approve and --deny.");
-        }
-        options.approve = true;
-        break;
-      case "--deny":
-        if (options.approve === true) {
-          throw new CliUsageError("You cannot combine --approve and --deny.");
-        }
-        options.approve = false;
-        break;
-      case "--json":
-        options.json = true;
-        break;
-      case "--jsonl":
-        options.jsonl = true;
-        break;
-      case "--service":
-        options.serviceFile = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--session":
-        options.sessionId = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--continue":
-        options.continueSession = true;
-        break;
-      case "--status": {
-        const value = optionValue(argv, index, argument);
-        if (!RUN_STATUSES.has(value)) {
-          throw new CliUsageError(`Unsupported run status: ${value}.`);
-        }
-        options.statuses ??= [];
-        options.statuses.push(value);
-        index += 1;
-        break;
-      }
-      case "--limit": {
-        const value = Number(optionValue(argv, index, argument));
-        if (!Number.isSafeInteger(value) || value < 1 || value > 1000) {
-          throw new CliUsageError("--limit must be an integer between 1 and 1000.");
-        }
-        options.limit = value;
-        index += 1;
-        break;
-      }
-      case "--cursor":
-        options.cursor = optionValue(argv, index, argument);
-        index += 1;
-        break;
-      case "--before": {
-        const value = optionValue(argv, index, argument);
-        const timestamp = /^\d+$/.test(value) ? Number(value) : Date.parse(value);
-        if (!Number.isFinite(timestamp) || timestamp < 0) {
-          throw new CliUsageError("--before must be an ISO-8601 date or millisecond timestamp.");
-        }
-        options.before = timestamp;
-        index += 1;
-        break;
-      }
-      case "--reason":
-        options.reason = optionValue(argv, index, argument);
-        if (options.reason.length > 500) {
-          throw new CliUsageError("--reason cannot exceed 500 characters.");
-        }
-        index += 1;
-        break;
-      case "--cascade":
-        options.cascade = true;
-        break;
-      case "--final":
-        options.final = true;
-        break;
-      case "--apply":
-        options.apply = true;
-        break;
-      case "--help":
-      case "-h":
-        options.command = "help";
-        break;
-      case "--version":
-      case "-v":
-        options.command = "version";
-        break;
-      default:
-        if (argument.startsWith("-")) {
-          throw new CliUsageError(`Unknown option: ${argument}`);
-        }
-        positional.push(argument);
-    }
-  }
-  if (options.command === "help") {
-    try {
-      validateCliCommandOptions("help", optionCounts);
-      const topic = resolveHelpTopic(command === "help" ? positional : [command, ...positional], commandWasExplicit);
-      if (topic)
-        options.helpTopic = topic;
-    } catch (error) {
-      throw new CliUsageError(error instanceof Error ? error.message : String(error));
-    }
-    return options;
-  }
-  options.implicitCommand = !commandWasExplicit;
-  if (options.json && options.jsonl) {
-    throw new CliUsageError("You cannot combine --json and --jsonl.");
-  }
-  if (options.sessionId && options.continueSession) {
-    throw new CliUsageError("You cannot combine --session and --continue.");
-  }
-  if (options.jsonl && options.command !== "run" && options.command !== "resume") {
-    throw new CliUsageError("--jsonl is supported by run and resume.");
-  }
-  if (options.command !== "changes" && (options.patchPath || options.preconditionsPath || options.verificationTime)) {
-    throw new CliUsageError("--patch, --preconditions, and --now are supported only by changes.");
-  }
-  if (options.command === "resume") {
-    const runId = positional.shift();
-    if (runId) {
-      options.runId = runId;
-    }
-    if (positional.length > 0) {
-      throw new CliUsageError("resume accepts exactly one runId.");
-    }
-  } else if (options.command === "runs") {
-    const runsCommand = positional.shift();
-    if (!runsCommand || !RUNS_COMMANDS.has(runsCommand)) {
-      throw new CliUsageError("runs requires one of: list, inspect, cancel, cleanup, export.");
-    }
-    options.runsCommand = runsCommand;
-    if (runsCommand === "inspect" || runsCommand === "cancel" || runsCommand === "export") {
-      const runId = positional.shift();
-      if (!runId) {
-        throw new CliUsageError(`runs ${runsCommand} requires a runId.`);
-      }
-      options.runId = runId;
-    }
-    if (positional.length > 0) {
-      throw new CliUsageError(`runs ${runsCommand} received unexpected positional arguments.`);
-    }
-  } else if (options.command === "sessions") {
-    const sessionsCommand = positional.shift();
-    if (!sessionsCommand || !SESSIONS_COMMANDS.has(sessionsCommand)) {
-      throw new CliUsageError("sessions requires one of: list, inspect, rename, fork, archive.");
-    }
-    options.sessionsCommand = sessionsCommand;
-    if (sessionsCommand !== "list") {
-      const sessionId = positional.shift();
-      if (!sessionId)
-        throw new CliUsageError(`sessions ${sessionsCommand} requires a sessionId.`);
-      options.sessionId = sessionId;
-    }
-    if (sessionsCommand === "rename") {
-      const title = positional.join(" ").trim();
-      if (!title)
-        throw new CliUsageError("sessions rename requires a title.");
-      options.sessionTitle = title;
-      positional.length = 0;
-    }
-    if (positional.length > 0) {
-      throw new CliUsageError(`sessions ${sessionsCommand} received unexpected positional arguments.`);
-    }
-  } else if (options.command === "changes") {
-    const changesCommand = positional.shift();
-    if (!changesCommand || !CHANGES_COMMANDS.has(changesCommand)) {
-      throw new CliUsageError("changes requires one of: create, verify.");
-    }
-    options.changesCommand = changesCommand;
-    const artifactPath = positional.shift();
-    if (!artifactPath) {
-      throw new CliUsageError(`changes ${changesCommand} requires an input JSON file.`);
-    }
-    options.artifactPath = artifactPath;
-    if (changesCommand === "create" && (options.preconditionsPath || options.verificationTime)) {
-      throw new CliUsageError("--preconditions and --now are only supported by changes verify.");
-    }
-    if (positional.length > 0) {
-      throw new CliUsageError(`changes ${changesCommand} received unexpected positional arguments.`);
-    }
-  } else if (options.command === "state") {
-    const stateCommand = positional.shift();
-    if (!stateCommand || !STATE_COMMANDS.has(stateCommand)) {
-      throw new CliUsageError("state requires one of: status, export, import.");
-    }
-    options.stateCommand = stateCommand;
-    if (stateCommand !== "status") {
-      const backupPath = positional.shift();
-      if (!backupPath)
-        throw new CliUsageError(`state ${stateCommand} requires a backup JSON path.`);
-      options.backupPath = backupPath;
-    }
-    if (positional.length > 0) {
-      throw new CliUsageError(`state ${stateCommand} received unexpected positional arguments.`);
-    }
-  } else if (options.command === "run" || options.command === "review") {
-    if (positional.includes("-") && positional.length !== 1) {
-      throw new CliUsageError("Use - alone to read the task from stdin, or provide a task argument.");
-    }
-    const prompt = positional.join(" ").trim();
-    if (prompt) {
-      options.prompt = prompt;
-    }
-  } else if (positional.length > 0) {
-    throw new CliUsageError(`${options.command} does not accept positional arguments.`);
-  }
-  if (options.implicitCommand && options.command === "run" && !options.prompt && (options.continueSession || options.sessionId) && !options.json && !options.jsonl)
-    options.command = "chat";
-  if (options.serviceFile) {
-    const allowed = new Set(["--service", "--session", "--idempotency-key", "--yes", "--json", "--jsonl", "--approve", "--deny", "--search", "--continue"]);
-    for (const arg of optionCounts.keys())
-      if (arg.startsWith("--") && !allowed.has(arg))
-        throw new CliUsageError(`Service mode does not accept ${arg}; runtime configuration belongs to the service host.`);
-  } else if (["run", "resume"].includes(options.command) && optionCounts.has("--session")) {
-    throw new CliUsageError("--session for run/resume requires --service.");
-  }
-  const commandKey = options.command === "runs" ? `runs:${options.runsCommand}` : options.command === "sessions" ? `sessions:${options.sessionsCommand}` : options.command === "changes" ? `changes:${options.changesCommand}` : options.command === "state" ? `state:${options.stateCommand}` : options.command;
-  try {
-    validateCliCommandOptions(commandKey, optionCounts);
-  } catch (error) {
-    throw new CliUsageError(error instanceof Error ? error.message : String(error));
-  }
-  if (options.command === "review") {
-    const invalidRoute = options.routes?.map((route) => parseHarnessModelRoute(route)).find((route) => route.profile !== "explorer" && route.profile !== "reviewer");
-    if (invalidRoute) {
-      throw new CliUsageError(`review cannot route the unused ${invalidRoute.profile} profile; use explorer or reviewer.`);
-    }
-  }
-  return options;
-};
-
-// src/cli/terminal/terminal-table.ts
-var segments = new Intl.Segmenter(undefined, { granularity: "grapheme" });
-var graphemes = (value) => [...segments.segment(value)].map((item) => item.segment);
-var terminalCellWidth = (value) => graphemes(value).reduce((width, part) => {
-  if (/^[\p{Mark}\u200d\ufe0f]+$/u.test(part))
-    return width;
-  const code = part.codePointAt(0);
-  const wide = /\p{Extended_Pictographic}|\p{Regional_Indicator}|\u20e3/u.test(part) || code >= 4352 && (code <= 4447 || code === 9001 || code === 9002 || code >= 11904 && code <= 42191 || code >= 44032 && code <= 55203 || code >= 63744 && code <= 64255 || code >= 65040 && code <= 65135 || code >= 65281 && code <= 65376 || code >= 65504 && code <= 65510 || code >= 131072);
-  return width + (wide ? 2 : 1);
-}, 0);
-function tableCells(line) {
-  let text = line.trim();
-  if (text.startsWith("|"))
-    text = text.slice(1);
-  const cells = [];
-  let cell = "", ticks = 0;
-  for (let i = 0;i < text.length; i++) {
-    const char = text[i];
-    if (char === "\\" && text[i + 1] === "|") {
-      cell += "|";
-      i++;
-      continue;
-    }
-    if (char === "`") {
-      let count = 1;
-      while (text[i + count] === "`")
-        count++;
-      ticks = ticks === count ? 0 : ticks || count;
-      cell += "`".repeat(count);
-      i += count - 1;
-      continue;
-    }
-    if (char === "|" && !ticks) {
-      cells.push(cell.trim());
-      cell = "";
-    } else
-      cell += char;
-  }
-  if (cell.trim() || !text.endsWith("|"))
-    cells.push(cell.trim());
-  return cells;
-}
-var isTableSeparator = (line, columns) => {
-  const cells = tableCells(line);
-  return cells.length === columns && cells.every((cell) => /^:?-{3,}:?$/.test(cell));
-};
-var plainCell = (value) => value.replace(/(`+)(.*?)\1/g, "$2").replace(/\*\*(.+?)\*\*/g, "$1").replace(/\s+/g, " ").trim();
-function wrap(value, width) {
-  const lines = [];
-  let line = "", used = 0;
-  for (const word of value.split(" ")) {
-    const size = terminalCellWidth(word);
-    if (line && used + 1 + size > width) {
-      lines.push(line);
-      line = "";
-      used = 0;
-    }
-    if (line) {
-      line += " ";
-      used++;
-    }
-    for (const part of graphemes(word)) {
-      const size2 = terminalCellWidth(part);
-      if (line && used + size2 > width) {
-        lines.push(line);
-        line = "";
-        used = 0;
-      }
-      line += part;
-      used += size2;
-    }
-  }
-  if (line || !lines.length)
-    lines.push(line);
-  return lines;
-}
-function renderTerminalTable(lines, columns, color) {
-  const rows = [lines[0], ...lines.slice(2)].map((line) => tableCells(line).map(plainCell));
-  const count = rows[0].length;
-  const width = Math.max(4, Math.min(240, Number.isFinite(columns) ? Math.floor(columns) - 1 : 79));
-  const bold = (value) => color ? `\x1B[1m${value}\x1B[0m` : value;
-  if (width < count * 7 + 1) {
-    if (rows.length === 1)
-      return rows[0].map((cell) => bold(wrap(cell, width).join(`
-`))).join(`
-`) + `
-`;
-    return rows.slice(1).map((row) => row.map((cell, i) => [bold(wrap(rows[0][i] + ":", width).join(`
-`)), ...wrap(cell, width)].join(`
-`)).join(`
-`)).join(`
-
-`) + `
-`;
-  }
-  const desired = Array.from({ length: count }, (_, i) => Math.max(4, ...rows.map((row) => terminalCellWidth(row[i] ?? ""))));
-  const widths = Array(count).fill(4);
-  let remaining = width - 7 * count - 1;
-  while (remaining-- > 0) {
-    let smallest = -1;
-    for (let i = 0;i < count; i++)
-      if (widths[i] < desired[i] && (smallest < 0 || widths[i] < widths[smallest]))
-        smallest = i;
-    if (smallest < 0)
-      break;
-    widths[smallest]++;
-  }
-  const align = tableCells(lines[1]).map((cell) => cell.endsWith(":") ? cell.startsWith(":") ? "center" : "right" : "left");
-  const border = (left, mid, right) => left + widths.map((size) => "─".repeat(size + 2)).join(mid) + right;
-  const rendered = [border("┌", "┬", "┐")];
-  rows.forEach((row, index) => {
-    const cells = widths.map((size, i) => wrap(row[i] ?? "", size));
-    for (let line = 0;line < Math.max(...cells.map((cell) => cell.length)); line++) {
-      rendered.push("│ " + cells.map((cell, i) => {
-        const text = cell[line] ?? "", spare = widths[i] - terminalCellWidth(text);
-        const left = align[i] === "right" ? spare : align[i] === "center" ? Math.floor(spare / 2) : 0;
-        const padded = " ".repeat(left) + text + " ".repeat(spare - left);
-        return index === 0 ? bold(padded) : padded;
-      }).join(" │ ") + " │");
-    }
-    if (index === 0)
-      rendered.push(border("├", "┼", "┤"));
-  });
-  rendered.push(border("└", "┴", "┘"));
-  return rendered.join(`
-`) + `
-`;
-}
-
-// src/cli/terminal/terminal-markdown.ts
-class TerminalMarkdown {
-  output;
-  color;
-  columns;
-  pending = "";
-  code = false;
-  heading = false;
-  lineStart = true;
-  timer;
-  tableLines = [];
-  constructor(output, color, columns = () => 80) {
-    this.output = output;
-    this.color = color;
-    this.columns = columns;
-  }
-  drain(final = false) {
-    let rendered = "", activeStyle = 0;
-    const emit = (text, style = this.code ? 36 : this.heading ? 1 : 0) => {
-      if (this.color && style !== activeStyle) {
-        if (activeStyle)
-          rendered += "\x1B[0m";
-        if (style)
-          rendered += `\x1B[${style}m`;
-        activeStyle = style;
-      }
-      rendered += text;
-    };
-    const finishTable = () => {
-      if (!this.tableLines.length)
-        return;
-      emit(this.tableLines.length > 1 ? renderTerminalTable(this.tableLines, this.columns(), this.color) : this.tableLines[0], 0);
-      this.tableLines = [];
-    };
-    while (this.pending) {
-      if (!final && this.pending.length === 1 && /[\uD800-\uDBFF]/.test(this.pending))
-        break;
-      if (this.lineStart) {
-        if (!this.code && (this.pending.startsWith("|") || this.tableLines.length)) {
-          const end = this.pending.indexOf(`
-`);
-          if (this.pending.startsWith("|") && end < 0 && !final && this.pending.length < 8192)
-            break;
-          const line = this.pending.slice(0, end < 0 ? this.pending.length : end + 1);
-          const count = this.tableLines.length ? tableCells(this.tableLines[0]).length : 0;
-          const accepted = (end >= 0 || final) && this.pending.startsWith("|") && line.length <= 8192 && (this.tableLines.length === 0 ? tableCells(line).length > 0 : this.tableLines.length === 1 ? isTableSeparator(line, count) : tableCells(line).length === count);
-          if (accepted && this.tableLines.length < 128) {
-            this.tableLines.push(line);
-            this.pending = this.pending.slice(line.length);
-            continue;
-          }
-          finishTable();
-        }
-        if (!final && (/^`{1,2}$/.test(this.pending) || /^#{1,6}$/.test(this.pending)))
-          break;
-        if (this.pending.startsWith("```")) {
-          const end = this.pending.indexOf(`
-`);
-          if (end < 0 && !final && this.pending.length < 128)
-            break;
-          const length = end < 0 ? this.pending.length : end;
-          emit(this.pending.slice(0, length), 90);
-          this.pending = this.pending.slice(length);
-          this.code = !this.code;
-          this.lineStart = false;
-          continue;
-        }
-        if (!this.code) {
-          const heading = /^#{1,6} /.exec(this.pending);
-          if (heading) {
-            this.heading = true;
-            this.pending = this.pending.slice(heading[0].length);
-            this.lineStart = false;
-            continue;
-          }
-        }
-        this.lineStart = false;
-      }
-      if (this.pending[0] === `
-`) {
-        emit(`
-`, 0);
-        this.pending = this.pending.slice(1);
-        this.lineStart = true;
-        this.heading = false;
-        continue;
-      }
-      if (this.color && !this.code) {
-        if (this.pending === "*" && !final)
-          break;
-        const marker = this.pending.startsWith("**") ? "**" : this.pending[0] === "`" ? "`" : undefined;
-        if (marker) {
-          const end = this.pending.indexOf(marker, marker.length);
-          const newline = this.pending.indexOf(`
-`);
-          if (end > marker.length && (newline < 0 || end < newline)) {
-            emit(this.pending.slice(marker.length, end), marker === "`" ? 36 : 1);
-            this.pending = this.pending.slice(end + marker.length);
-            continue;
-          }
-          if (!final && newline < 0 && this.pending.length < 2048)
-            break;
-          emit(marker);
-          this.pending = this.pending.slice(marker.length);
-          continue;
-        }
-      }
-      const point = String.fromCodePoint(this.pending.codePointAt(0));
-      emit(point);
-      this.pending = this.pending.slice(point.length);
-    }
-    if (final)
-      finishTable();
-    if (activeStyle)
-      rendered += "\x1B[0m";
-    if (rendered)
-      this.output(rendered);
-  }
-  write(delta) {
-    this.pending += sanitizeTerminalText(delta);
-    if (this.pending.includes(`
-`) || this.pending.length >= 2048)
-      this.drain();
-    if (this.pending && !this.timer) {
-      this.timer = setTimeout(() => {
-        this.timer = undefined;
-        this.drain();
-      }, 24);
-      this.timer.unref();
-    }
-  }
-  flush() {
-    clearTimeout(this.timer);
-    this.timer = undefined;
-    this.drain(true);
-  }
-}
-
-// src/cli/presentation.ts
-import { createInterface } from "node:readline/promises";
-import {
-  createRedactionPolicy
-} from "@zhivex-ai/agents";
-
-// src/cli/resume-metadata.ts
-var HARNESS_RESUME_METADATA_KEY = "zhivexHarnessResume";
-var HARNESS_RESUME_METADATA_SCHEMA_VERSION = 1;
-var harnessConfigInput = (config) => ({
-  schemaVersion: config.schemaVersion,
-  provider: config.provider,
-  model: config.model,
-  ...config.reasoningEffort ? { reasoningEffort: config.reasoningEffort } : {},
-  workspace: config.workspace,
-  stateDirectory: config.stateDirectory,
-  storeBackend: config.storeBackend,
-  tenantId: config.scope.tenantId,
-  ...config.scope.userId ? { userId: config.scope.userId } : {},
-  ...config.scope.namespace ? { namespace: config.scope.namespace } : {},
-  requireVerifiedDelivery: config.requireVerifiedDelivery,
-  maxSteps: config.maxSteps,
-  timeoutMs: config.timeoutMs,
-  maxToolCalls: config.budget.maxToolCalls,
-  maxToolErrors: config.budget.maxToolErrors,
-  ...config.budget.unlimitedTokens !== undefined ? { unlimitedTokens: config.budget.unlimitedTokens } : {},
-  maxInputTokens: config.budget.maxInputTokens,
-  maxOutputTokens: config.budget.maxOutputTokens,
-  maxTotalTokens: config.budget.maxTotalTokens,
-  ...config.costBudget ? {
-    maxCostUsd: config.costBudget.maxCostUsd,
-    inputCostPerMillion: config.costBudget.inputCostPer1kTokens * 1000,
-    outputCostPerMillion: config.costBudget.outputCostPer1kTokens * 1000
-  } : {},
-  compactionMaxMessages: config.compaction.maxMessages,
-  compactionMaxEstimatedInputTokens: config.compaction.maxEstimatedInputTokens,
-  compactionKeepRecentMessages: config.compaction.keepRecentMessages,
-  ...config.compaction.model ? { compactionModel: config.compaction.model.model, compactionProvider: config.compaction.model.provider } : {},
-  allowedChecks: [...config.allowedChecks],
-  requiredCapabilities: [...config.requiredCapabilities],
-  subagentProfiles: [...config.orchestration.profiles],
-  subagentMaxSteps: config.orchestration.childBudget.maxSteps,
-  subagentMaxToolCalls: config.orchestration.childBudget.maxToolCalls,
-  subagentMaxToolErrors: config.orchestration.childBudget.maxToolErrors,
-  subagentMaxInputTokens: config.orchestration.childBudget.maxInputTokens,
-  subagentMaxOutputTokens: config.orchestration.childBudget.maxOutputTokens,
-  subagentMaxTotalTokens: config.orchestration.childBudget.maxTotalTokens,
-  subagentTimeoutMs: config.orchestration.childTimeoutMs,
-  maxParallelReviews: config.orchestration.maxParallelReviews,
-  projectContext: config.context.enabled,
-  contextConfigPath: config.context.configPath,
-  executionBackend: config.execution.backend,
-  ...config.execution.backend === "oci" ? {
-    ociRuntime: config.execution.runtime,
-    ociImage: config.execution.image,
-    ociAllowedCommands: [...config.execution.allowedCommands],
-    ociShellMode: config.execution.shellMode,
-    ociMaxProcessRuntimeMs: config.execution.maxProcessRuntimeMs,
-    ociMaxProcessOutputBytes: config.execution.maxProcessOutputBytes,
-    ociMaxMemoryMb: config.execution.maxMemoryMb,
-    ociMaxPids: config.execution.maxPids,
-    ociMaxCpus: config.execution.maxCpus,
-    ociMaxWorkspaceBytes: config.execution.maxWorkspaceBytes,
-    ociMaxFileWriteBytes: config.execution.maxFileWriteBytes,
-    ociTmpfsMb: config.execution.tmpfsMb
-  } : {},
-  ...config.mcpConfigPath ? { mcpConfigPath: config.mcpConfigPath } : {}
-});
-var persistedCliOptions = (input) => input ? {
-  ...input,
-  ...input.allowedChecks ? { allowedChecks: [...input.allowedChecks] } : {},
-  ...input.requiredCapabilities ? { requiredCapabilities: [...input.requiredCapabilities] } : {},
-  ...input.subagentProfiles ? { subagentProfiles: [...input.subagentProfiles] } : {},
-  ...input.ociAllowedCommands ? { ociAllowedCommands: [...input.ociAllowedCommands] } : {}
-} : {};
-var createHarnessResumeMetadata = (config, routes) => ({
-  [HARNESS_RESUME_METADATA_KEY]: JSON.parse(JSON.stringify({
-    schemaVersion: HARNESS_RESUME_METADATA_SCHEMA_VERSION,
-    config,
-    ...routes && routes.size > 0 ? { routes: serializeHarnessModelRoutes(routes) } : {}
-  }))
-});
-var readHarnessResumeDocument = (state) => {
-  const value = state.metadata?.[HARNESS_RESUME_METADATA_KEY];
-  if (value === undefined)
-    return;
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("Persisted harness resume metadata is invalid.");
-  }
-  const document = value;
-  if (document.schemaVersion !== HARNESS_RESUME_METADATA_SCHEMA_VERSION || !document.config || typeof document.config !== "object" || Array.isArray(document.config)) {
-    throw new Error("Persisted harness resume metadata is invalid.");
-  }
-  return document;
-};
-var readHarnessResumeConfig = (state) => {
-  const document = readHarnessResumeDocument(state);
-  if (!document)
-    return;
-  try {
-    return harnessConfigInput(document.config);
-  } catch {
-    throw new Error("Persisted harness resume metadata is invalid.");
-  }
-};
-var readHarnessResumeRoutes = (state) => {
-  const document = readHarnessResumeDocument(state);
-  if (!document?.routes)
-    return resolveHarnessModelRoutes();
-  if (typeof document.routes !== "object" || Array.isArray(document.routes)) {
-    throw new Error("Persisted harness routing metadata is invalid.");
-  }
-  try {
-    const values = Object.entries(document.routes).map(([profile, target]) => {
-      if (!target || typeof target !== "object" || Array.isArray(target))
-        throw new Error("invalid");
-      const route = target;
-      if (typeof route.provider !== "string" || typeof route.model !== "string")
-        throw new Error("invalid");
-      return `${profile}=${route.provider}:${route.model}`;
-    });
-    return resolveHarnessModelRoutes(values);
-  } catch {
-    throw new Error("Persisted harness routing metadata is invalid.");
-  }
-};
-var shellArgument = (value) => `'${value.replaceAll("'", `'\\''`)}'`;
-var resumeCommand = (runId, config, approve = true) => [
-  "zhivex-harness",
-  "resume",
-  shellArgument(runId),
-  approve ? "--approve" : "--deny",
-  "--workspace",
-  shellArgument(config.workspace),
-  "--state-dir",
-  shellArgument(config.stateDirectory),
-  "--store",
-  config.storeBackend,
-  "--tenant",
-  shellArgument(config.scope.tenantId),
-  ...config.scope.userId ? ["--user", shellArgument(config.scope.userId)] : [],
-  ...config.scope.namespace ? ["--namespace", shellArgument(config.scope.namespace)] : []
-].join(" ");
-
-// src/cli/presentation.ts
-var CLI_STREAM_ERROR_SEQUENCE = Symbol("cliStreamErrorSequence");
-var terminalErrorRedaction = createRedactionPolicy({ includeEmails: true });
-var annotateCliStreamError = (error, lastSequence) => {
-  const normalized = error instanceof Error ? error : normalizeHarnessError(error);
-  Object.defineProperty(normalized, CLI_STREAM_ERROR_SEQUENCE, {
-    configurable: true,
-    enumerable: false,
-    value: (lastSequence ?? 0) + 1
-  });
-  return normalized;
-};
-var cliStreamErrorSequence = (error) => error && typeof error === "object" && Number.isSafeInteger(error[CLI_STREAM_ERROR_SEQUENCE]) ? error[CLI_STREAM_ERROR_SEQUENCE] : 1;
-var terminalErrorMessage = (error) => terminalErrorRedaction.redactText(error instanceof Error ? error.message : String(error));
-var summarizeApproval = (approval) => {
-  return formatApproval(approval);
-};
-var approvalResponses = (approvals, approve, reason) => approvals.map((approval) => ({
-  provider: approval.provider,
-  approvalRequestId: approval.id,
-  approve,
-  reason
-}));
-var terminalApprovalResolver = (automaticallyApprove, ask, ui) => {
-  return async (approvals) => {
-    if (automaticallyApprove === "restricted")
-      return approvalResponses(approvals, false, "Denied by restricted approval mode.");
-    if (automaticallyApprove === true || automaticallyApprove === "auto") {
-      return approvalResponses(approvals, true, "Approved by automatic mode.");
-    }
-    if (!ask && (!process.stdin.isTTY || !process.stdout.isTTY))
-      return;
-    const readline = ask ? undefined : createInterface({ input: process.stdin, output: process.stdout });
-    try {
-      return await resolveTerminalApprovals(approvals, {
-        ask: ask ?? ((text) => readline.question(text)),
-        write: (text) => process.stderr.write(text),
-        ...ui
-      });
-    } finally {
-      readline?.close();
-    }
-  };
-};
-var printTerminalResult = (result, harness, output, tracker) => {
-  tracker.markdown?.flush();
-  const document = runResultDocument(result, harness);
-  if (output.jsonl) {
-    tracker.sequence = (tracker.sequence ?? 0) + 1;
-    process.stdout.write(`${serializeStreamResult(document, tracker.sequence)}
-`);
-    return;
-  }
-  if (output.json) {
-    process.stdout.write(`${JSON.stringify(document, null, 2)}
-`);
-    return;
-  }
-  if (!tracker.streamedText && result.outputText) {
-    process.stdout.write(sanitizeTerminalText(result.outputText));
-  }
-  if (result.outputText || tracker.streamedText) {
-    process.stdout.write(`
-`);
-  }
-  process.stderr.write(`
-run ${result.state.runId} · ${result.state.provider}/${result.state.modelId} · ${result.status} · ${result.steps.length} steps · ${harness.workspace.mutationAudit().length} mutations
-`);
-  if (result.state.metadata?.[USAGE_LEDGER_KEY])
-    process.stderr.write(formatUsageLedger(result.state.metadata[USAGE_LEDGER_KEY]) + `
-`);
-  process.stderr.write(formatVerificationSummary(result.toolResults) + `
-`);
-  if (result.status === "waiting_approval") {
-    for (const approval of result.state.pendingApprovals) {
-      process.stderr.write(`
-Pending approval:
-${summarizeApproval(approval)}
-`);
-    }
-    process.stderr.write(`The state was persisted. Resume with: ${resumeCommand(result.state.runId, harness.config)}
-`);
-  }
-};
-var proseLineOpen = new WeakSet;
-var conversationStarted = new WeakSet;
-var toolActivities = new WeakMap;
-var lastTerminalFailures = new WeakMap;
-var flushToolActivity = (tracker) => toolActivities.get(tracker)?.flush();
-var streamSink = (output, tracker, compact = false) => async (event) => {
-  if (!output.json && !output.jsonl)
-    tracker.activityHistory?.observe(event);
-  if (output.jsonl) {
-    tracker.sequence = (tracker.sequence ?? 0) + 1;
-    process.stdout.write(`${serializeStreamEvent(event, tracker.sequence)}
-`);
-    return;
-  }
-  if (!output.json && compact && event.type === "agent-run-update")
-    return;
-  if (!output.json && compact) {
-    let activity = toolActivities.get(tracker);
-    if (!activity) {
-      activity = new ToolActivity((text) => {
-        process.stderr.write(text);
-      }, Boolean(process.stderr.isTTY && process.stdout.isTTY), () => process.stderr.columns || 80, tracker.inputStatus);
-      toolActivities.set(tracker, activity);
-    }
-    if (event.type === "agent-compaction") {
-      tracker.markdown?.flush();
-      if (proseLineOpen.has(tracker)) {
-        process.stdout.write(`
-`);
-        proseLineOpen.delete(tracker);
-      }
-      activity.phase("Updating context");
-      return;
-    }
-    if (event.type === "agent-step-start") {
-      tracker.markdown?.flush();
-      if (proseLineOpen.has(tracker)) {
-        process.stdout.write(`
-`);
-        proseLineOpen.delete(tracker);
-      }
-      activity.phase("Waiting for model response", event.stepIndex);
-      return;
-    }
-    if (event.type === "agent-run-start") {
-      lastTerminalFailures.delete(tracker);
-      activity.phase("Waiting for model response", event.currentStep);
-      return;
-    }
-    if (event.type === "tool-call") {
-      tracker.markdown?.flush();
-      if (proseLineOpen.has(tracker)) {
-        process.stdout.write(`
-`);
-        proseLineOpen.delete(tracker);
-      }
-      activity.start(event.toolCall.name);
-      return;
-    }
-    if (event.type === "tool-result") {
-      activity.finish(event.toolResult.toolName, !event.toolResult.isError);
-      const detail = compactToolResult(event.toolResult);
-      const check = ["run_check", "run_environment_command"].includes(event.toolResult.toolName) || event.toolResult.toolName.startsWith("verify_and_apply_");
-      if (detail && !check) {
-        activity.pause();
-        tracker.markdown?.flush();
-        if (proseLineOpen.has(tracker)) {
-          process.stdout.write(`
-`);
-          proseLineOpen.delete(tracker);
-        }
-        process.stderr.write(`${detail}
-`);
-        return;
-      }
-      if (!check)
-        return;
-      activity.pause();
-    } else if (["agent-run-finish", "error", "tool-approval-request", "agent-approval-request"].includes(event.type)) {
-      tracker.markdown?.flush();
-      if (proseLineOpen.has(tracker)) {
-        process.stdout.write(`
-`);
-        proseLineOpen.delete(tracker);
-      }
-      activity.flush();
-    } else if (!["provider-data", "finish", "agent-step-start", "agent-step-finish"].includes(event.type)) {
-      activity.pause();
-    }
-  }
-  if (!output.json && event.type === "text-delta") {
-    if (compact && !conversationStarted.has(tracker)) {
-      process.stdout.write(terminalSupportsColor(Boolean(process.stdout.isTTY)) ? `
-\x1B[1mZhivex\x1B[0m
-` : `
-Zhivex
-`);
-      conversationStarted.add(tracker);
-    }
-    if (event.textDelta.endsWith(`
-`))
-      proseLineOpen.delete(tracker);
-    else if (event.textDelta)
-      proseLineOpen.add(tracker);
-    tracker.streamedText = true;
-    if (process.stdout.isTTY) {
-      tracker.markdown ??= new TerminalMarkdown((text) => {
-        process.stdout.write(text);
-      }, terminalSupportsColor(true), () => process.stdout.columns || 80);
-      tracker.markdown.write(event.textDelta);
-    } else
-      process.stdout.write(sanitizeTerminalText(event.textDelta));
-    return;
-  }
-  if (!output.json) {
-    if (compact && ["provider-data", "finish", "agent-run-start", "agent-step-start", "agent-step-finish", "tool-approval-request", "agent-approval-request", "agent-approval-resolved"].includes(event.type))
-      return;
-    if (compact && event.type === "agent-run-finish" && event.status === "waiting_approval")
-      return;
-    tracker.markdown?.flush();
-    proseLineOpen.delete(tracker);
-    let line = formatTerminalEvent(event, {
-      color: terminalSupportsColor(Boolean(process.stderr.isTTY))
-    });
-    if (compact && event.type === "tool-result" && event.toolResult.isError && line?.endsWith(" · error")) {
-      line = compactToolResult(event.toolResult);
-    }
-    if ((event.type === "error" || event.type === "agent-run-finish" && event.status === "failed") && line) {
-      const cause = terminalRunFailure(event.type === "error" ? event.error : event.state.error);
-      if (lastTerminalFailures.get(tracker) === cause)
-        return;
-      lastTerminalFailures.set(tracker, cause);
-    } else if (event.type === "agent-run-start")
-      lastTerminalFailures.delete(tracker);
-    if (line)
-      process.stderr.write(`
-${line}
-`);
-  }
-};
-var orchestrationObserver = (json) => async (event) => {
-  if (json)
-    return;
-  if (event.type === "subagent-start") {
-    process.stderr.write(`
-subagent start · ${event.childAgentId ?? event.toolName}
-`);
-  } else if (event.type === "subagent-finish") {
-    process.stderr.write(`
-subagent finish · ${event.childRun.agentId ?? event.childRun.toolName} · ${event.childRun.status}
-`);
-  }
-};
-
 // src/cli/setup.ts
 var providersDocument = (env = process.env) => ({
   schemaVersion: CLI_JSON_SCHEMA_VERSION,
@@ -1763,7 +234,7 @@ var initializeCli = async (options, context = {}) => {
   process.stdout.write([
     `${options.updateProfile ? "Updated" : "Created"} personal profile ${profileName} at ${created.path}.`,
     `Provider: ${created.profile.provider} · Model: ${created.profile.model} · Reasoning: ${created.profile.reasoningEffort ?? "default"}`,
-    availability?.configured ? "Provider credential detected; no secret value was stored or printed." : `Open zhx to configure a managed key, or set ${availability?.credentialNames.join(" or ") || "the provider credential"} for automation.`,
+    provider === "vertex" ? "Vertex uses host ADC. Set GOOGLE_CLOUD_PROJECT and VERTEX_LOCATION; route presence does not verify credentials or model access." : availability?.configured ? "Provider credential detected; no secret value was stored or printed." : `Open zhx to configure a managed key, or set ${availability?.credentialNames.join(" or ") || "the provider credential"} for automation.`,
     "Next:",
     `  ${doctorCommand}`,
     `  ${runCommand}`,
@@ -1781,7 +252,7 @@ var listProviders = (json) => {
     return;
   }
   for (const provider of document.providers) {
-    process.stdout.write(`${provider.id.padEnd(7)} ${provider.defaultModel.padEnd(22)} ${provider.support.padEnd(11)} ${provider.configured ? "configured" : `missing ${provider.credentialNames.join("/")}`}
+    process.stdout.write(`${provider.id.padEnd(7)} ${provider.defaultModel.padEnd(22)} ${provider.support.padEnd(11)} ${provider.id === "vertex" ? provider.configured ? "route configured; ADC not checked" : "missing GOOGLE_CLOUD_PROJECT/VERTEX_LOCATION" : provider.configured ? "configured" : `missing ${provider.credentialNames.join("/")}`}
 `);
   }
 };
@@ -1801,13 +272,25 @@ Everyday commands:
   zhx chat [options] [--continue|--session <id>]
   zhx providers [--json]
   zhx doctor [options] [--json]
+  zhx policy [options] [--json]
 
 Advanced operations and automation:
   zhx resume [options] <runId> --approve|--deny
   zhx runs list [--status <status>] [--limit <n>] [--json]
   zhx sessions list|inspect|rename|fork|archive
   zhx sessions list --search <literal title or session ID>
+  zhx checkpoints storage
+  zhx checkpoints prune-review <checkpoint:id|restore:id> [...]
+  zhx checkpoints prune-apply <reviewedPlanId> <checkpoint:id|restore:id> [...]
+  zhx checkpoints list <sessionId>
+  zhx checkpoints capture <sessionId> <turnId> <path> [paths...]
+  zhx checkpoints inspect <checkpointId>
+  zhx checkpoints prepare <checkpointId>
+  zhx checkpoints review <operationId>
+  zhx checkpoints apply <operationId> <reviewedProposalId>
+  zhx checkpoints recover <operationId> <existingForkSessionId>
   zhx run --pricing-file <prices.json> --usage-limit-usd <amount> <task>
+  zhx run --tool-policy <absolute-policy.json> <task>
   zhx changes create <input.json> --patch <artifact>
   zhx changes verify <envelope.json> --patch <artifact> [--preconditions <file>]
   zhx state status
@@ -1905,376 +388,10 @@ Credentials:
   Qwen:   DASHSCOPE_API_KEY or QWEN_API_KEY
   Gemini: GEMINI_API_KEY or GOOGLE_GENERATIVE_AI_API_KEY`;
 
-// src/cli/qwen-connection.ts
-var regions = {
-  singapore: ["Singapore", "ap-southeast-1", "dashscope-intl.aliyuncs.com"],
-  beijing: ["Beijing", "cn-beijing", "dashscope.aliyuncs.com"],
-  "hong-kong": ["Hong Kong", "cn-hongkong", "cn-hongkong.dashscope.aliyuncs.com"],
-  tokyo: ["Tokyo", "ap-northeast-1", ""],
-  frankfurt: ["Frankfurt", "eu-central-1", ""],
-  virginia: ["Virginia", "us-east-1", ""]
-};
-function qwenEndpoint(connection) {
-  if (connection.service === "token-plan")
-    return "https://token-plan.maas.qwencloudapi.com/compatible-mode/v1";
-  if (connection.service !== "api" || !Object.hasOwn(regions, connection.region))
-    throw new Error("Invalid Qwen connection.");
-  const [, region, legacy] = regions[connection.region];
-  if (connection.workspace !== undefined && !/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(connection.workspace))
-    throw new Error("Invalid Qwen workspace ID.");
-  const host = connection.workspace ? `${connection.workspace}.${region}.maas.aliyuncs.com` : legacy;
-  if (!host)
-    throw new Error("This Qwen region requires a workspace ID.");
-  return `https://${host}/compatible-mode/v1`;
-}
-function decodeQwenCredential(value) {
-  if (!value.startsWith("{"))
-    return { key: value, connection: { service: "api", region: "singapore" } };
-  const parsed = JSON.parse(value);
-  if (parsed.version !== 1 || typeof parsed.key !== "string" || !parsed.connection)
-    throw new Error("Invalid Qwen credential record.");
-  qwenEndpoint(parsed.connection);
-  return { key: parsed.key, connection: parsed.connection };
-}
-async function selectQwenConnection(input) {
-  const service = await input.select("Qwen / Service", [
-    { value: "api", label: "Standard API / Alibaba Cloud Model Studio", detail: "Use the region where your API key was created" },
-    { value: "token-plan", label: "QwenCloud Token Plan", detail: "Separate subscription endpoint and credential" }
-  ]);
-  if (!service)
-    return;
-  if (service === "token-plan")
-    return { service };
-  const region = await input.select("Qwen / API region", Object.entries(regions).map(([value, [label]]) => ({ value, label })));
-  if (!region)
-    return;
-  let workspace;
-  const dedicated = !regions[region][2] || await input.select("Qwen / Endpoint", [
-    { value: false, label: "DashScope endpoint", detail: "Existing regional API endpoint" },
-    { value: true, label: "Workspace endpoint", detail: "Enter your workspace ID" },
-    { value: "cancel", label: "Back" }
-  ]);
-  if (dedicated === undefined || dedicated === "cancel")
-    return;
-  if (dedicated) {
-    if (!input.question)
-      throw new Error("Workspace setup requires interactive input.");
-    workspace = (await input.question("Workspace ID (not the API key): ")).trim();
-    if (!workspace)
-      return;
-  }
-  const connection = { service: "api", region, ...workspace ? { workspace } : {} };
-  qwenEndpoint(connection);
-  return connection;
-}
-
-// src/cli/cli-credentials.ts
-class CredentialSetupError extends Error {
-}
-var credentialService = "ai.zhivex.harness.cli";
-var validCredential = (value) => /^[\x21-\x7e]{1,8192}$/.test(value);
-var nativeCredentialEntry = async (provider) => {
-  if (!PROVIDERS.includes(provider))
-    throw new Error("Unsupported credential provider.");
-  if (!["darwin", "linux"].includes(process.platform) || process.env.ZHIVEX_HARNESS_CREDENTIAL_STORE === "disabled") {
-    throw new Error("Secure credential storage is unavailable.");
-  }
-  const { AsyncEntry } = await import("@napi-rs/keyring");
-  const entry = new AsyncEntry(credentialService, provider, { linux: { store: "secret-service" } });
-  return {
-    getPassword: () => entry.getPassword(AbortSignal.timeout(30000)),
-    setPassword: (value) => entry.setPassword(value, AbortSignal.timeout(30000)),
-    deleteCredential: () => entry.deleteCredential(AbortSignal.timeout(30000))
-  };
-};
-
-class CliCredentials {
-  entry;
-  environment;
-  write;
-  temporary = new Map;
-  revision = 0;
-  qwenManaged = false;
-  qwenOverrideAccepted = false;
-  constructor(entry = nativeCredentialEntry, environment = process.env, write = (text) => {
-    process.stderr.write(text);
-  }) {
-    this.entry = entry;
-    this.environment = environment;
-    this.write = write;
-  }
-  environmentKey(provider) {
-    return providerDescriptor(provider).credentialNames.map((name) => this.environment[name]?.trim()).find(Boolean);
-  }
-  validate(value) {
-    if (!validCredential(value))
-      throw new Error("Invalid API key: use 1–8192 printable characters without whitespace.");
-    return value;
-  }
-  async saved(provider) {
-    try {
-      const value = await (await this.entry(provider)).getPassword();
-      if (value == null)
-        return;
-      this.validate(provider === "qwen" ? decodeQwenCredential(value).key : value);
-      return value;
-    } catch {
-      throw new Error("Secure storage is unavailable or locked. Unlock it, use a temporary key, or configure the environment.");
-    }
-  }
-  destinations = new Map;
-  destination(provider) {
-    return this.destinations.get(provider) ?? "environment-defined or provider default";
-  }
-  sources = new Map;
-  source(provider) {
-    return this.sources.get(provider) ?? "missing";
-  }
-  endpointOverride(provider) {
-    const variables = {
-      openai: ["OPENAI_BASE_URL"],
-      meta: ["META_BASE_URL"],
-      gemini: ["GEMINI_BASE_URL"],
-      qwen: ["QWEN_BASE_URL", "QWEN_REGION", "QWEN_WORKSPACE_ID"]
-    };
-    return (variables[provider] ?? []).some((name) => this.environment[name]?.trim());
-  }
-  async inspect(provider) {
-    if (this.environmentKey(provider) && !(provider === "qwen" && this.qwenManaged))
-      return { source: "environment", configured: true };
-    if (this.endpointOverride(provider) && !(provider === "qwen" && this.qwenOverrideAccepted))
-      return { source: "blocked", configured: false };
-    if (this.temporary.has(provider))
-      return { source: "temporary", configured: true };
-    try {
-      return await this.saved(provider) ? { source: "keychain", configured: true } : { source: "missing", configured: false };
-    } catch {
-      return { source: "unavailable", configured: false };
-    }
-  }
-  async configure(provider, input) {
-    for (;; ) {
-      try {
-        return await this.configureOnce(provider, input);
-      } catch (error) {
-        if (!(error instanceof CredentialSetupError) && !(error instanceof Error && error.name === "AbortError"))
-          throw error;
-        this.write(error instanceof CredentialSetupError ? `${error.message}
-` : `Key entry cancelled.
-`);
-        const action = await input.select("Credentials / Recovery", [
-          { value: "temporary", label: "Use a temporary key", detail: "Enter a key for this CLI session only" },
-          { value: "retry", label: "Retry credential setup" },
-          { value: "cancel", label: "Cancel setup" }
-        ]);
-        if (!action || action === "cancel")
-          return false;
-        if (action === "temporary") {
-          try {
-            return await this.configureOnce(provider, input, "temporary");
-          } catch (retryError) {
-            if (!(retryError instanceof CredentialSetupError) && !(retryError instanceof Error && retryError.name === "AbortError"))
-              throw retryError;
-            this.write(`Temporary key entry was not completed. Try again or go back.
-`);
-          }
-        }
-      }
-    }
-  }
-  async configureOnce(provider, input, mode) {
-    if (provider !== "qwen" && this.environmentKey(provider)) {
-      this.write(`An environment key takes precedence. Remove it from the launching shell to use managed credentials.
-`);
-    }
-    const action = mode ?? await input.select(`Credentials / ${provider}`, [
-      { value: "save", label: "Save or replace in system keychain" },
-      { value: "temporary", label: "Temporary key for this CLI session" },
-      { value: "delete", label: "Remove saved and temporary key" },
-      { value: "cancel", label: "Back" }
-    ]);
-    if (!action || action === "cancel")
-      return false;
-    if (action === "delete") {
-      const confirm = await input.select(`Remove managed key for ${provider}?`, [
-        { value: false, label: "Keep key" },
-        { value: true, label: "Remove key" }
-      ]);
-      if (!confirm)
-        return false;
-      try {
-        await (await this.entry(provider)).deleteCredential();
-        this.write(`Saved key removed (or already absent).
-`);
-      } catch {
-        this.write(`Saved key could not be removed: secure storage is unavailable or locked.
-`);
-      }
-      this.temporary.delete(provider);
-      if (provider === "qwen") {
-        this.qwenManaged = false;
-        this.qwenOverrideAccepted = false;
-      }
-      this.revision++;
-      this.write(`Temporary key cleared. Environment credentials are unchanged.
-`);
-      return true;
-    }
-    const connection = provider === "qwen" ? await selectQwenConnection(input) : undefined;
-    if (provider === "qwen" && !connection)
-      return false;
-    if (connection)
-      this.write(`Selected Qwen destination: ${qwenEndpoint(connection)}
-This connection will replace Qwen environment settings for this CLI session.
-`);
-    let target;
-    if (action === "save") {
-      try {
-        target = await this.entry(provider);
-      } catch {
-        throw new CredentialSetupError("Secure storage is unavailable. Unlock it and retry, or choose temporary use.");
-      }
-    }
-    let secret = await input.secret("API key (hidden; Enter submits, Ctrl+C cancels): ");
-    if (!secret)
-      return false;
-    try {
-      secret = this.validate(secret);
-    } catch {
-      throw new CredentialSetupError("Invalid API key. Enter printable characters without whitespace.");
-    }
-    if (connection)
-      secret = JSON.stringify({ version: 1, key: secret, connection });
-    if (action === "save") {
-      try {
-        await target.setPassword(secret);
-      } catch {
-        throw new CredentialSetupError("API key was not saved: secure storage is unavailable or locked. No plaintext fallback was used.");
-      }
-      this.temporary.delete(provider);
-      this.write(`API key saved in the system keychain.
-`);
-    } else {
-      this.temporary.set(provider, secret);
-      this.write(`API key is available only for this CLI session.
-`);
-    }
-    if (connection) {
-      this.qwenManaged = true;
-      this.qwenOverrideAccepted = true;
-    }
-    this.revision++;
-    return true;
-  }
-  async providerEnvironment(provider, input) {
-    if (this.environmentKey(provider) && !(provider === "qwen" && this.qwenManaged)) {
-      this.destinations.delete(provider);
-      this.sources.set(provider, "environment");
-      return { ...this.environment };
-    }
-    if (provider !== "qwen" && this.endpointOverride(provider)) {
-      throw new CredentialSetupError("Managed keys require the provider's default endpoint. Remove endpoint overrides or supply an explicit environment key.");
-    }
-    let key = this.temporary.get(provider);
-    if (!key) {
-      try {
-        key = await this.saved(provider);
-      } catch {
-        this.write(`Secure storage is unavailable or locked; temporary use remains available.
-`);
-      }
-    }
-    if (!key) {
-      this.write(`No API key available for ${provider}.
-`);
-      if (!await this.configure(provider, input))
-        throw new CredentialSetupError("Credential setup cancelled. No provider request was sent.");
-      key = this.temporary.get(provider) ?? await this.saved(provider);
-    }
-    if (!key)
-      throw new CredentialSetupError("No API key available. No provider request was sent.");
-    if (provider === "qwen") {
-      const record = decodeQwenCredential(key);
-      const endpoint = qwenEndpoint(record.connection);
-      if (this.endpointOverride(provider) && !this.qwenOverrideAccepted) {
-        const useManaged = await input.select("Qwen / Environment conflicts with saved connection", [
-          { value: false, label: "Cancel; keep environment settings" },
-          { value: true, label: "Use saved connection for this session", detail: endpoint }
-        ]);
-        if (!useManaged)
-          throw new CredentialSetupError("Qwen connection selection cancelled. No provider request was sent.");
-        this.qwenOverrideAccepted = true;
-      }
-      const env = { ...this.environment };
-      for (const name2 of ["QWEN_BASE_URL", "QWEN_REGION", "QWEN_WORKSPACE_ID", "QWEN_API_KEY", "DASHSCOPE_API_KEY"])
-        delete env[name2];
-      this.destinations.set(provider, endpoint);
-      env.QWEN_BASE_URL = endpoint;
-      env.DASHSCOPE_API_KEY = record.key;
-      this.sources.set(provider, this.temporary.has(provider) ? "temporary" : "keychain");
-      return env;
-    }
-    this.sources.set(provider, this.temporary.has(provider) ? "temporary" : "keychain");
-    const name = providerDescriptor(provider).credentialNames[0];
-    return { ...this.environment, [name]: key };
-  }
-  clear() {
-    this.destinations.clear();
-    this.temporary.clear();
-    this.sources.clear();
-    this.qwenManaged = false;
-    this.qwenOverrideAccepted = false;
-  }
-}
-async function credentialModel(config, env, modelFactory) {
-  const { createProviderModel: createProviderModel2 } = await import("./config-1k9t4jhh.js");
-  const { wrapLanguageModel } = await import("@zhivex-ai/core");
-  const secrets = providerDescriptor(config.provider).credentialNames.map((name) => env[name]).filter((value) => !!value);
-  const safeError = (error) => {
-    let message = error instanceof Error ? error.message : "Provider request failed.";
-    for (const secret of secrets)
-      message = message.split(secret).join("[REDACTED]");
-    const safe = new Error(message);
-    if (error instanceof Error && error.name === "AbortError")
-      safe.name = "AbortError";
-    return safe;
-  };
-  const model = (modelFactory ?? createProviderModel2)(config, env);
-  return wrapLanguageModel(model, [{
-    name: "cli-credential-errors",
-    wrapGenerate: async (_context, next) => {
-      try {
-        return await next();
-      } catch (error) {
-        throw safeError(error);
-      }
-    },
-    wrapStream: async (_context, next) => {
-      let events;
-      try {
-        events = await next();
-      } catch (error) {
-        throw safeError(error);
-      }
-      return async function* () {
-        try {
-          for await (const event of events) {
-            if (event.type === "error")
-              throw safeError(event.error);
-            yield event;
-          }
-        } catch (error) {
-          throw safeError(error);
-        }
-      }();
-    }
-  }]);
-}
-
 // src/cli/doctor.ts
-import { constants as fsConstants2 } from "node:fs";
-import { access, lstat as lstat2, stat } from "node:fs/promises";
-import path2 from "node:path";
+import { constants as fsConstants } from "node:fs";
+import { access, lstat, stat } from "node:fs/promises";
+import path from "node:path";
 
 // src/cli/errors.ts
 var cliRecoveryHint = (error, argv) => {
@@ -2348,7 +465,7 @@ var inspectWorkspace = async (workspace) => {
     if (!workspaceStat.isDirectory()) {
       return diagnostic("workspace", "fail", "Workspace is not a directory.", { path: workspace });
     }
-    await access(workspace, fsConstants2.R_OK);
+    await access(workspace, fsConstants.R_OK);
     return diagnostic("workspace", "pass", "Workspace exists and is readable.", { path: workspace });
   } catch (error) {
     const code = error.code ?? "UNKNOWN";
@@ -2378,7 +495,7 @@ var inspectGit = async (workspace) => {
   }
 };
 var inspectScripts = async (workspace, allowedChecks) => {
-  const packagePath = path2.join(workspace, "package.json");
+  const packagePath = path.join(workspace, "package.json");
   try {
     const packageFile = await readRegularFileNoFollow(packagePath, {
       label: "package.json",
@@ -2407,17 +524,17 @@ var inspectScripts = async (workspace, allowedChecks) => {
   }
 };
 var isInsidePath = (root, candidate) => {
-  const relative = path2.relative(root, candidate);
-  return relative === "" || !relative.startsWith(`..${path2.sep}`) && relative !== ".." && !path2.isAbsolute(relative);
+  const relative = path.relative(root, candidate);
+  return relative === "" || !relative.startsWith(`..${path.sep}`) && relative !== ".." && !path.isAbsolute(relative);
 };
 var containsSymlink = async (candidate, trustedPrefix) => {
-  const parsed = path2.parse(candidate);
-  const parts = trustedPrefix ? path2.relative(trustedPrefix, candidate).split(path2.sep).filter(Boolean) : candidate.slice(parsed.root.length).split(path2.sep).filter(Boolean).slice(1);
-  let current = trustedPrefix ?? path2.join(parsed.root, candidate.slice(parsed.root.length).split(path2.sep).filter(Boolean)[0] ?? "");
+  const parsed = path.parse(candidate);
+  const parts = trustedPrefix ? path.relative(trustedPrefix, candidate).split(path.sep).filter(Boolean) : candidate.slice(parsed.root.length).split(path.sep).filter(Boolean).slice(1);
+  let current = trustedPrefix ?? path.join(parsed.root, candidate.slice(parsed.root.length).split(path.sep).filter(Boolean)[0] ?? "");
   for (const part of parts) {
-    current = path2.join(current, part);
+    current = path.join(current, part);
     try {
-      if ((await lstat2(current)).isSymbolicLink()) {
+      if ((await lstat(current)).isSymbolicLink()) {
         return true;
       }
     } catch (error) {
@@ -2438,7 +555,7 @@ var nearestExistingPath = async (candidate) => {
       if (error.code !== "ENOENT") {
         throw error;
       }
-      const parent = path2.dirname(current);
+      const parent = path.dirname(current);
       if (parent === current) {
         throw error;
       }
@@ -2454,8 +571,8 @@ var inspectStateDirectory = async (workspace, stateDirectory) => {
     });
   }
   if (isInsidePath(workspace, stateDirectory)) {
-    const segments2 = path2.relative(workspace, stateDirectory).split(path2.sep).filter(Boolean);
-    const sensitiveSegment = segments2.find(isSensitiveStateSegment);
+    const segments = path.relative(workspace, stateDirectory).split(path.sep).filter(Boolean);
+    const sensitiveSegment = segments.find(isSensitiveStateSegment);
     if (sensitiveSegment) {
       return diagnostic("state-directory", "fail", "State directory is inside a sensitive workspace path.", {
         path: stateDirectory,
@@ -2479,7 +596,7 @@ var inspectStateDirectory = async (workspace, stateDirectory) => {
         writable: false
       });
     }
-    await access(existing.path, fsConstants2.R_OK | fsConstants2.W_OK);
+    await access(existing.path, fsConstants.R_OK | fsConstants.W_OK);
     return diagnostic("state-directory", "pass", "State directory is safe and writable.", {
       path: stateDirectory,
       exists: existing.path === stateDirectory,
@@ -2501,9 +618,9 @@ var inspectOperationsStore = async (stateDirectory, storeBackend) => {
       migrationAvailable: true
     });
   }
-  const databasePath = path2.join(stateDirectory, "operations.sqlite");
+  const databasePath = path.join(stateDirectory, "operations.sqlite");
   try {
-    const entry = await lstat2(databasePath);
+    const entry = await lstat(databasePath);
     if (entry.isSymbolicLink() || !entry.isFile()) {
       return diagnostic("operations-store", "fail", "SQLite state path is not a regular file.", {
         backend: storeBackend,
@@ -2618,7 +735,7 @@ var inspectProjectContext = async (config) => {
   }
   try {
     const workspace = await Workspace.open(config.workspace);
-    const manifestPath = path2.relative(config.workspace, config.context.configPath).split(path2.sep).join("/");
+    const manifestPath = path.relative(config.workspace, config.context.configPath).split(path.sep).join("/");
     const bundle = await loadHarnessProjectContext(workspace, {
       manifestPath,
       requireManifest: manifestPath !== DEFAULT_HARNESS_CONTEXT_MANIFEST
@@ -2707,7 +824,7 @@ var createDoctorReport = async (options = {}, context = {}) => {
     const credential = selected ? context.credentialStatus : undefined;
     const configured = credential?.configured ?? provider.configured;
     const status = invalidRegion || invalidEndpoint || !configured ? selected ? "fail" : "warn" : provider.support === "provisional" ? "warn" : "pass";
-    const message = invalidEndpoint ? `${provider.name} custom endpoint configuration is invalid.` : invalidRegion ? "Qwen region configuration is invalid." : credential ? credential.configured ? `${provider.name} credential present (${credential.source}); account access has not been checked.${provider.support === "provisional" ? " Live support is provisional." : ""}` : credential.source === "blocked" ? `${provider.name} managed credentials require the default endpoint. Remove endpoint overrides or provide an environment key.` : `${provider.name} credential ${credential.source === "unavailable" ? "could not be checked: keychain unavailable or locked" : "is missing"}. Run zhx to configure a key, or set ${provider.credentialNames.join(" or ")} for automation.` : provider.configured ? provider.support === "provisional" ? `${provider.name} credentials are present, but live support is provisional.` : `${provider.name} credentials are present.` : `${provider.name} credentials are missing. Set ${provider.credentialNames.join(" or ")} in the environment and rerun zhx doctor.`;
+    const message = provider.id === "vertex" ? configured ? "Vertex project/location configured; host ADC and model access have not been checked. Live support is provisional." : "Vertex requires GOOGLE_CLOUD_PROJECT and VERTEX_LOCATION plus host Application Default Credentials. No API key is stored by zhx." : invalidEndpoint ? `${provider.name} custom endpoint configuration is invalid.` : invalidRegion ? "Qwen region configuration is invalid." : credential ? credential.configured ? `${provider.name} credential present (${credential.source}); account access has not been checked.${provider.support === "provisional" ? " Live support is provisional." : ""}` : credential.source === "blocked" ? `${provider.name} managed credentials require the default endpoint. Remove endpoint overrides or provide an environment key.` : `${provider.name} credential ${credential.source === "unavailable" ? "could not be checked: keychain unavailable or locked" : "is missing"}. Run zhx to configure a key, or set ${provider.credentialNames.join(" or ")} for automation.` : provider.configured ? provider.support === "provisional" ? `${provider.name} credentials are present, but live support is provisional.` : `${provider.name} credentials are present.` : `${provider.name} credentials are missing. Set ${provider.credentialNames.join(" or ")} in the environment and rerun zhx doctor.`;
     checks.push(diagnostic(`provider:${provider.id}`, status, message, {
       provider: provider.id,
       selected,
@@ -2911,16 +1028,16 @@ var formatConsoleDiff = (diff, color) => diff.split(`
 class ConsoleAttachments {
   files = new Map;
   list() {
-    return [...this.files.values()].map(({ path: path3, digest, truncated }) => ({ path: path3, digest, truncated }));
+    return [...this.files.values()].map(({ path: path2, digest, truncated }) => ({ path: path2, digest, truncated }));
   }
   clear() {
     this.files.clear();
   }
-  remove(path3) {
-    return this.files.delete(path3);
+  remove(path2) {
+    return this.files.delete(path2);
   }
-  async add(workspace, path3) {
-    const file = await workspace.readFile(path3);
+  async add(workspace, path2) {
+    const file = await workspace.readFile(path2);
     const next = new Map(this.files).set(file.path, file);
     if (next.size > 8 || [...next.values()].reduce((sum, value) => sum + Buffer.byteLength(value.content), 0) > 64 * 1024) {
       throw new Error("Attachments exceed 8 files or 64 KiB; use a smaller selection.");
@@ -2944,7 +1061,7 @@ ${JSON.stringify([...this.files.values()])}`;
 }
 
 // src/cli/console.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID } from "node:crypto";
 
 // src/cli/session-management.ts
 var openSessionStoreForConfig = (config) => openCliSessionStore({
@@ -3060,76 +1177,6 @@ var updateIndexedSessionRun = async (config, runId, status) => {
   }
 };
 
-// src/cli/routing.ts
-var resolvedRouting = (options) => {
-  return resolveHarnessModelRoutes(options.routes);
-};
-var assertRoutePricingIsSafe = (routes, costBudget) => {
-  if (routes.size > 0 && costBudget !== undefined) {
-    throw new CliUsageError("Cost budgets cannot be combined with model routes until pricing is configured per role.");
-  }
-};
-var withTemporaryHarnessProfiles = async (profiles, configure, operation) => {
-  await configure(profiles);
-  try {
-    return await operation();
-  } finally {
-    await configure([]);
-  }
-};
-
-// src/cli/configured-harness.ts
-import path3 from "node:path";
-var createConfiguredHarness = async (options, extraProfiles = [], persistedRoutes, credentials) => {
-  const routes = persistedRoutes ?? resolvedRouting(options);
-  const resolvedConfig = resolveHarnessConfig(options);
-  if (options.usageLimitUsd !== undefined && resolvedConfig.costBudget)
-    throw new CliUsageError("Choose one monetary policy: --usage-limit-usd or the legacy cost budget.");
-  assertRoutePricingIsSafe(routes, resolvedConfig.costBudget);
-  const profiles = [...new Set([
-    ...options.subagentProfiles ?? [],
-    ...extraProfiles,
-    ...routes.keys()
-  ])];
-  const quietTelemetry = options.json || options.jsonl;
-  const providerEnv = credentials ? await credentials.store.providerEnvironment(resolvedConfig.provider, credentials.input) : undefined;
-  const transportEnv = { ...process.env };
-  const bindTransport = (env) => {
-    for (const name of ["QWEN_BASE_URL", "QWEN_REGION", "QWEN_WORKSPACE_ID"]) {
-      if (env[name] === undefined)
-        delete transportEnv[name];
-      else
-        transportEnv[name] = env[name];
-    }
-  };
-  if (providerEnv && resolvedConfig.provider === "qwen")
-    bindTransport(providerEnv);
-  const routeModels = {};
-  for (const [role, route] of routes) {
-    const routeEnv = credentials ? await credentials.store.providerEnvironment(route.provider, credentials.input) : process.env;
-    if (route.provider === "qwen")
-      bindTransport(routeEnv);
-    routeModels[role] = credentials ? await credentialModel(route, routeEnv) : createProviderModel(route, routeEnv);
-  }
-  const compactionEnv = resolvedConfig.compaction.model && credentials ? await credentials.store.providerEnvironment(resolvedConfig.compaction.model.provider, credentials.input) : undefined;
-  if (compactionEnv && resolvedConfig.compaction.model?.provider === "qwen")
-    bindTransport(compactionEnv);
-  const compactionModelInstance = resolvedConfig.compaction.model && compactionEnv ? await credentialModel(resolvedConfig.compaction.model, compactionEnv) : undefined;
-  const harness = await createHarness({
-    ...options,
-    usageAccounting: {
-      ...options.pricingFile ? { pricing: usagePricingSchema.parse(JSON.parse((await readRegularFileNoFollow(path3.resolve(options.pricingFile), { maxBytes: 128 * 1024, label: "Usage pricing" })).contents.toString("utf8"))) } : {},
-      ...options.usageLimitUsd !== undefined ? { limitUsd: options.usageLimitUsd } : {}
-    },
-    subagentProfiles: profiles,
-    subagentModels: routeModels,
-    ...compactionModelInstance ? { compactionModelInstance } : {},
-    ...providerEnv ? { env: transportEnv, modelInstance: await credentialModel(resolvedConfig, providerEnv) } : {},
-    onTelemetryEvent: orchestrationObserver(quietTelemetry)
-  });
-  return { harness, routes };
-};
-
 // src/models/compaction-recommendations.ts
 import { recommendAuxiliaryModel } from "@zhivex-ai/core";
 
@@ -3328,7 +1375,7 @@ async function handleConsoleCompaction(command, deps) {
   const provider = value.slice(0, separator);
   const model = value.slice(separator + 1);
   if (separator < 1 || !PROVIDERS.includes(provider) || !/^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,159}$/.test(model)) {
-    write("Use /compaction provider:model with openai, qwen, gemini or meta; /compaction off disables model-assisted compaction.");
+    write("Use /compaction provider:model with openai, qwen, gemini, meta, anthropic or vertex; /compaction off disables model-assisted compaction.");
     return true;
   }
   await deps.replaceOptions({ ...deps.options, compactionProvider: provider, compactionModel: model });
@@ -3427,7 +1474,7 @@ Stopping the active operation; waiting for durable state and cleanup.
   const consoleApprovals = async (approvals, context) => {
     readline.stopBackground();
     try {
-      return await terminalApprovalResolver(options.approvalMode ?? options.yes, (question) => readline.question(question), { select: (title, items) => readline.select(title, items), workspace: harness.config.workspace, sessionGrants })(approvals, context);
+      return await terminalApprovalResolver(options.approvalMode ?? options.yes, (question) => readline.question(question), { select: (title, items) => readline.select(title, items), workspace: harness.config.workspace, sessionGrants }, harness)(approvals, context);
     } finally {
       if (activeController && !activeController.signal.aborted)
         readline.startBackground();
@@ -3516,14 +1563,37 @@ Stopping the active operation; waiting for durable state and cleanup.
     session = await sessionStore.updateRun(session.sessionId, state.runId, { status: "running" });
     let result;
     try {
-      result = await abortable((abortSignal) => runHarness(harness, {
-        state,
-        toolExecution: { ...harnessToolExecution },
-        abortSignal,
-        approvals: approvalResponses(state.pendingApprovals, approve, approve ? "Approved inline in chat." : "Denied inline in chat.")
-      }, {
-        onEvent,
-        resolveApprovals: consoleApprovals
+      result = await abortable((abortSignal) => observeCliPolicy({}, tracker, async () => {
+        for (const pending of state.pendingApprovals) {
+          await publishPendingPolicyDecision(harness, pending.name, pending.kind === "subagent");
+        }
+        let approvals;
+        if (approve && requiresExplicitHostReview(harness)) {
+          readline.stopBackground();
+          try {
+            approvals = await terminalApprovalResolver("ask", (question) => readline.question(question), {
+              select: (title, items) => readline.select(title, items),
+              workspace: harness.config.workspace,
+              sessionGrants
+            }, harness)(state.pendingApprovals, state);
+          } finally {
+            if (!abortSignal.aborted)
+              readline.startBackground();
+          }
+          if (!approvals)
+            throw new Error("EXPLICIT_REVIEW_REQUIRED");
+        } else {
+          approvals = issueObservedApprovalResponses(harness, state, approvalResponses(state.pendingApprovals, approve, approve ? "Approved inline in chat." : "Denied inline in chat."), "cli-console-command", state.pendingApprovals.map(() => "interactive"));
+        }
+        return runHarness(harness, {
+          state,
+          toolExecution: { ...harnessToolExecution },
+          abortSignal,
+          approvals
+        }, {
+          onEvent,
+          resolveApprovals: consoleApprovals
+        });
       }));
     } catch {
       flushToolActivity(tracker);
@@ -4084,7 +2154,7 @@ ${sanitizeTerminalText(prompt)}
         }
         readline.rememberPrompt(prompt, literalInput || command === "/paste");
         prompt = await attachments.prompt(harness.workspace, prompt);
-        const runId = `run_${randomUUID2()}`;
+        const runId = `run_${randomUUID()}`;
         session = await sessionStore.appendRun(session.sessionId, {
           runId,
           provider: harness.config.provider,
@@ -4097,7 +2167,7 @@ ${sanitizeTerminalText(prompt)}
         let markedRunning = false;
         let result;
         try {
-          result = await abortable((abortSignal) => runHarness(harness, messages.length === 0 ? {
+          result = await abortable((abortSignal) => observeCliPolicy({}, tracker, () => runHarness(harness, messages.length === 0 ? {
             runId,
             toolExecution: { ...harnessToolExecution },
             abortSignal: AbortSignal.any([abortSignal, progress.signal]),
@@ -4143,7 +2213,7 @@ ${sanitizeTerminalText(prompt)}
               await onEvent(event);
             },
             resolveApprovals: consoleApprovals
-          }));
+          })));
         } catch (error) {
           flushToolActivity(tracker);
           tracker.markdown?.flush();
@@ -4214,7 +2284,7 @@ var runOnce = async (options) => {
   const tracker = { streamedText: false };
   let closeAttempted = false;
   try {
-    const result = await runHarness(harness, {
+    const result = await observeCliPolicy(options, tracker, () => runHarness(harness, {
       prompt: options.prompt,
       toolExecution: { ...harnessToolExecution },
       scope: harness.config.scope,
@@ -4222,8 +2292,8 @@ var runOnce = async (options) => {
       ...options.idempotencyKey ? { idempotencyKey: options.idempotencyKey } : {}
     }, {
       onEvent: streamSink(options, tracker),
-      resolveApprovals: terminalApprovalResolver(options.approvalMode ?? options.yes)
-    });
+      resolveApprovals: terminalApprovalResolver(options.approvalMode ?? options.yes, undefined, undefined, harness)
+    }));
     closeAttempted = true;
     await harness.close();
     printTerminalResult(result, harness, options, tracker);
@@ -4362,13 +2432,21 @@ ${summarizeApproval(approval)}
     const tracker = { streamedText: false };
     let harnessCloseAttempted = false;
     try {
-      const result = await runHarness(harness, {
-        state,
-        toolExecution: { ...harnessToolExecution },
-        approvals: approvalResponses(state.pendingApprovals, approve, approve ? "Approved by resume --approve." : "Denied by resume --deny.")
-      }, {
-        onEvent: streamSink(options, tracker),
-        resolveApprovals: terminalApprovalResolver(approve ? "auto" : "restricted")
+      const result = await observeCliPolicy(options, tracker, async () => {
+        for (const pending of state.pendingApprovals)
+          await publishPendingPolicyDecision(harness, pending.name, pending.kind === "subagent");
+        const explicitReview = requiresExplicitHostReview(harness);
+        const resumeApprovals = approve && explicitReview ? await terminalApprovalResolver("ask", undefined, undefined, harness)(state.pendingApprovals, state) : issueAutomaticApprovalResponses(harness, state, approvalResponses(state.pendingApprovals, approve, approve ? "Approved by resume --approve." : "Denied by resume --deny."), "cli-resume");
+        if (!resumeApprovals)
+          throw new CliUsageError("EXPLICIT_REVIEW_REQUIRED: resume needs an interactive review channel; operation remains pending.");
+        return runHarness(harness, {
+          state,
+          toolExecution: { ...harnessToolExecution },
+          approvals: resumeApprovals
+        }, {
+          onEvent: streamSink(options, tracker),
+          resolveApprovals: terminalApprovalResolver(approve ? explicitReview ? "ask" : "auto" : "restricted", undefined, undefined, harness)
+        });
       });
       await updateIndexedSessionRun(harness.config, result.state.runId, result.status);
       harnessCloseAttempted = true;
@@ -4396,6 +2474,505 @@ ${summarizeApproval(approval)}
   }
 };
 
+// src/cli/governance-report.ts
+import path2 from "node:path";
+
+// src/persistence/governance-report.ts
+import { createHash as createHash3 } from "node:crypto";
+import { z as z2 } from "zod";
+
+// src/persistence/governance-context.ts
+import { createHash as createHash2 } from "node:crypto";
+import { z } from "zod";
+var digest = z.string().regex(/^sha256:[a-f0-9]{64}$/);
+var count = z.number().int().nonnegative().safe();
+var governanceReference = (kind, value) => "sha256:" + createHash2("sha256").update(JSON.stringify([kind, value])).digest("hex");
+var governanceSessionSchema = z.strictObject({ availability: z.enum(["recorded", "unavailable"]), reference: digest.nullable(), revision: count.nullable() });
+var governanceHistorySchema = z.strictObject({
+  availability: z.enum(["recorded", "unavailable"]),
+  retention: z.enum(["unknown", "retained", "expired"]),
+  incomplete: z.boolean(),
+  policyDecisions: z.array(z.strictObject({
+    runReference: digest,
+    sequence: count,
+    toolReference: digest,
+    phase: z.enum(["approval-request", "tool-entry"]),
+    decision: z.enum(["allow", "ask_user", "deny"]),
+    policyDigest: digest.nullable(),
+    source: z.enum(["operator-file", "application", "baseline"]),
+    ruleReferences: z.array(digest).max(128),
+    explicitReviewRequired: z.boolean()
+  })).max(512)
+});
+var governanceEnvelopeSchema = z.strictObject({
+  source: z.literal("caller-supplied"),
+  envelopeId: digest.nullable(),
+  patchReference: digest.nullable(),
+  patchDigest: digest.nullable(),
+  linkedRunReferences: z.array(digest).max(64),
+  schemaValid: z.boolean(),
+  integrity: z.enum(["valid", "invalid"]),
+  expiration: z.enum(["unknown", "current", "expired", "not-yet-valid"]),
+  checkedAt: z.iso.datetime(),
+  expiredApprovals: count,
+  authenticity: z.literal("not-verified"),
+  patchBytes: z.literal("not-verified")
+});
+async function readGovernanceSession(source, rootRunId, runIds) {
+  const session = { availability: "unavailable", reference: null, revision: null };
+  const history = { availability: "unavailable", retention: "unknown", incomplete: true, policyDecisions: [] };
+  if (!source)
+    return { session, history, verify: async () => {} };
+  const initial = await source.index.get(source.id);
+  if (!initial || initial.sessionId !== source.id || !initial.runs.some((run) => run.runId === rootRunId))
+    throw new Error("GOVERNANCE_SESSION_MISMATCH");
+  const captured = JSON.stringify(initial);
+  session.availability = "recorded";
+  session.reference = governanceReference("session", initial.sessionId);
+  session.revision = initial.revision;
+  const pages = [];
+  if (source.history) {
+    let cursor = 0;
+    history.availability = "recorded";
+    history.retention = "retained";
+    history.incomplete = false;
+    for (let pageIndex = 0;pageIndex < 50; pageIndex++) {
+      const page = source.history.replay(source.id, cursor);
+      pages.push({ cursor, digest: governanceReference("history-page", JSON.stringify(page)) });
+      if (page.schemaVersion !== 1 || !Number.isSafeInteger(page.nextCursor) || page.nextCursor < cursor || page.events.length > 200)
+        throw new Error("GOVERNANCE_HISTORY_INVALID");
+      if (page.cursorExpired || page.policyEvidenceIncomplete) {
+        history.retention = "expired";
+        history.incomplete = true;
+      }
+      let lastSequence = cursor;
+      for (const event of page.events) {
+        if (event.sessionId !== source.id || !Number.isSafeInteger(event.sequence) || event.sequence <= lastSequence || event.sequence > page.nextCursor)
+          throw new Error("GOVERNANCE_HISTORY_INVALID");
+        lastSequence = event.sequence;
+        if (!runIds.has(event.runId) || event.activity.type !== "policy-decision")
+          continue;
+        const parsed = harnessPolicyDecisionEventSchema.safeParse(event.activity);
+        if (!parsed.success) {
+          history.incomplete = true;
+          continue;
+        }
+        if (history.policyDecisions.length === 512) {
+          history.incomplete = true;
+          continue;
+        }
+        const value = parsed.data;
+        history.policyDecisions.push({
+          runReference: governanceReference("run", event.runId),
+          sequence: event.sequence,
+          toolReference: governanceReference("tool", value.toolName),
+          phase: value.phase,
+          decision: value.decision,
+          policyDigest: value.policyDigest,
+          source: value.source,
+          ruleReferences: value.ruleIds.map((rule) => governanceReference("rule", rule)),
+          explicitReviewRequired: value.explicitReviewRequired
+        });
+      }
+      if (page.cursorExpired || !page.hasMore)
+        break;
+      if (page.nextCursor === cursor)
+        throw new Error("GOVERNANCE_HISTORY_INVALID");
+      cursor = page.nextCursor;
+      if (pageIndex === 49)
+        history.incomplete = true;
+    }
+  }
+  return { session, history, verify: async () => {
+    for (const page of pages)
+      if (governanceReference("history-page", JSON.stringify(source.history.replay(source.id, page.cursor))) !== page.digest)
+        throw new Error("GOVERNANCE_STATE_CHANGED");
+    if (JSON.stringify(await source.index.get(source.id)) !== captured)
+      throw new Error("GOVERNANCE_STATE_CHANGED");
+  } };
+}
+function projectGovernanceEnvelopes(envelopes, patches, now) {
+  if (envelopes.length > 32)
+    throw new Error("GOVERNANCE_ENVELOPE_LIMIT");
+  return envelopes.map((input) => {
+    if (Buffer.byteLength(JSON.stringify(input) ?? "") > 256 * 1024)
+      throw new Error("GOVERNANCE_ENVELOPE_LIMIT");
+    const parsed = changeEnvelopeSchema.safeParse(input);
+    const proof = verifyChangeEnvelope(input, { now });
+    const envelope = parsed.success ? parsed.data : undefined;
+    return governanceEnvelopeSchema.parse({
+      source: "caller-supplied",
+      envelopeId: envelope?.envelopeId ?? null,
+      patchReference: envelope ? governanceReference("patch", envelope.patch.patchId) : null,
+      patchDigest: envelope?.patch.patchDigest ?? null,
+      linkedRunReferences: envelope ? [...patches.get(envelope.patch.patchId) ?? []] : [],
+      schemaValid: parsed.success,
+      integrity: proof.integrity.envelopeDigestValid && proof.integrity.evidenceDigestValid ? "valid" : "invalid",
+      expiration: !envelope ? "unknown" : proof.expiration.envelopeNotYetValid ? "not-yet-valid" : proof.expiration.envelopeExpired ? "expired" : "current",
+      checkedAt: proof.expiration.checkedAt,
+      expiredApprovals: proof.expiration.expiredApprovalIds.length,
+      authenticity: "not-verified",
+      patchBytes: "not-verified"
+    });
+  });
+}
+
+// src/persistence/governance-report.ts
+var digest2 = z2.string().regex(/^sha256:[a-f0-9]{64}$/);
+var version = z2.string().regex(/^\d+\.\d+\.\d+(?:[-+][a-zA-Z0-9.-]+)?$/);
+var bindingSchema = z2.object({ schemaVersion: z2.literal(1), id: z2.literal("zhivex-harness"), version, fingerprint: digest2, algorithm: z2.literal("sha256") });
+var count2 = z2.number().int().nonnegative().safe();
+var status = z2.enum(["created", "running", "waiting_approval", "cancel_requested", "completed", "failed", "cancelled", "timed_out", "unknown"]);
+var availability = z2.enum(["recorded", "unavailable", "invalid"]);
+var providerReason = z2.enum(["empty_arguments", "invalid_json", "arguments_too_large", "incomplete_arguments", "inconsistent_metadata", "response_failed", "response_incomplete", "stream_truncated"]);
+var deliveryReason = z2.enum(["TASK_ACCEPTANCE_NO_DELIVERY_EVIDENCE", "TASK_ACCEPTANCE_SCOPE_VIOLATION", "TASK_ACCEPTANCE_RUN_NOT_COMPLETED", "TASK_ACCEPTANCE_RUN_NOT_FINISHED", "TASK_ACCEPTANCE_IMPORT_UNCONFIRMED", "TASK_ACCEPTANCE_CHECKS_MISSING", "TASK_ACCEPTANCE_DELIVERY_DRIFT", "TASK_ACCEPTANCE_DELIVERY_INSPECTION_FAILED", "TASK_ACCEPTANCE_HUMAN_REVIEW_REQUIRED", "TASK_ACCEPTANCE_VERIFIED"]);
+var deliveryStatus = z2.enum(["pending", "incomplete", "failed", "pending_review", "verified", "unknown"]);
+var checkSchema = z2.strictObject({
+  reference: digest2,
+  argvDigest: digest2,
+  patchId: digest2,
+  snapshotDigest: digest2,
+  exitCode: z2.number().int(),
+  timedOut: z2.boolean(),
+  unchanged: z2.boolean()
+});
+var deliverySchema = z2.object({
+  schemaVersion: z2.literal(1),
+  contractRevision: count2,
+  contractDigest: digest2,
+  status: deliveryStatus,
+  checks: z2.array(taskCheckReceiptSchema).max(32),
+  delivery: z2.object({ runId: z2.string().max(512), executionIdentity: z2.string().max(512), patchId: digest2, snapshotDigest: digest2 }).optional()
+});
+var approvalSchema = z2.strictObject({
+  reference: digest2,
+  toolReference: digest2,
+  approved: z2.boolean(),
+  origin: z2.enum(["interactive", "automatic", "application", "unknown"]),
+  channelReference: digest2,
+  policyDigest: digest2.nullable(),
+  status: z2.enum(["rejected", "approved", "applied", "succeeded", "failed", "unknown"]),
+  proposalId: digest2.nullable(),
+  exitCode: z2.number().int().nullable(),
+  timedOut: z2.boolean().nullable(),
+  effects: z2.array(z2.strictObject({ pathReference: digest2, beforeDigest: digest2.nullable(), afterDigest: digest2.nullable() })).max(50)
+});
+var delegationReason = z2.enum(["valid", "invalid_json", "invalid_schema", "task_mismatch", "incomplete", "duplicate_claim", "path_denied", "evidence_missing", "coverage_missing", "missing_child", "child_identity_unavailable"]);
+var delegationSchema = z2.strictObject({
+  taskReference: digest2,
+  childReference: digest2.nullable(),
+  recordedAcceptance: z2.boolean(),
+  reason: delegationReason,
+  semanticReview: z2.enum(["pending", "not_requested"]),
+  correctionsUsed: count2.nullable()
+});
+var delegationInput = z2.object({ schemaVersion: z2.literal(1), evaluations: z2.array(z2.object({
+  taskId: z2.string().max(128),
+  childRunId: z2.string().max(512).nullable(),
+  childStatus: z2.string().max(32),
+  accepted: z2.boolean(),
+  reason: delegationReason,
+  semanticReview: z2.enum(["pending", "not_requested"]),
+  correctionsUsed: count2.optional()
+})).max(64) });
+var runSchema = z2.strictObject({
+  reference: digest2,
+  parentReference: digest2.nullable(),
+  revision: count2.nullable(),
+  status,
+  finalized: z2.boolean(),
+  failure: z2.enum(["run_failed", "cancelled", "timed_out", "not_reported"]).nullable(),
+  failureDetails: z2.strictObject({ providerToolReason: providerReason.nullable(), diagnosticReference: digest2.nullable(), deliveryReason: deliveryReason.nullable() }),
+  identity: z2.literal("not-verified"),
+  runtimePolicy: z2.enum(["assistant-v3-durable-closure"]).nullable(),
+  contract: z2.strictObject({
+    availability,
+    digest: digest2.nullable(),
+    revision: count2.nullable(),
+    requiredChecks: count2.nullable(),
+    humanReviewsPending: count2.nullable(),
+    allowedWritePathReferences: z2.array(digest2).max(256),
+    protectedPathReferences: z2.array(digest2).max(256),
+    checks: z2.array(z2.strictObject({ reference: digest2, argvDigest: digest2, kind: z2.enum(["argv", "package-script"]), backend: z2.enum(["none", "oci"]), approval: z2.literal("required") })).max(32),
+    humanReviewReferences: z2.array(digest2).max(32)
+  }),
+  delivery: z2.strictObject({
+    availability,
+    status: deliveryStatus,
+    patchId: digest2.nullable(),
+    snapshotDigest: digest2.nullable(),
+    interpretation: z2.literal("recorded-checkpoint-not-current-workspace-verification"),
+    checks: z2.array(checkSchema).max(32)
+  }),
+  approvals: z2.strictObject({ availability, items: z2.array(approvalSchema).max(512) }),
+  usage: z2.strictObject({
+    availability: z2.enum(["recorded", "unavailable"]),
+    calls: count2.nullable(),
+    inputTokens: count2.nullable(),
+    outputTokens: count2.nullable(),
+    complete: z2.boolean().nullable(),
+    estimatedUsd: z2.number().finite().nonnegative().nullable(),
+    costKind: z2.literal("estimate-not-invoice")
+  }),
+  journal: z2.strictObject({ availability: z2.enum(["recorded", "unavailable"]), entries: count2, failed: count2, unfinished: count2 }),
+  delegations: z2.strictObject({ availability, interpretation: z2.literal("recorded-checkpoint-not-semantic-review"), items: z2.array(delegationSchema).max(64) }),
+  children: z2.array(digest2).max(64)
+});
+var harnessGovernanceReportSchema = z2.strictObject({
+  schemaVersion: z2.literal(1),
+  kind: z2.literal("harness-governance-report"),
+  exporterVersion: z2.string().regex(/^\d+\.\d+\.\d+(?:[-+][a-zA-Z0-9.-]+)?$/),
+  executionArtifact: z2.strictObject({ version: version.nullable(), digest: z2.null(), availability: z2.enum(["recorded-version", "unavailable"]), configurationFingerprint: digest2.nullable(), authenticity: z2.literal("not-verified") }),
+  rootReference: digest2,
+  identity: z2.literal("not-verified"),
+  referencePolicy: z2.literal("sha256-domain-separated-pseudonyms-not-anonymity"),
+  session: governanceSessionSchema,
+  eventHistory: governanceHistorySchema,
+  changeEnvelopes: z2.array(governanceEnvelopeSchema).max(32),
+  runs: z2.array(runSchema).max(64),
+  missingChildren: z2.array(digest2).max(64),
+  limitations: z2.array(z2.enum(["tree_limit", "missing_child", "invalid_contract", "invalid_delivery", "invalid_approvals", "journal_unavailable"])).max(6)
+});
+var MAX_JOURNAL = 2048;
+var MAX_REPORT_BYTES = 2 * 1024 * 1024;
+var sameScope = (state, scope) => !state.scope || state.scope.tenantId === scope?.tenantId && state.scope.userId === scope?.userId && state.scope.namespace === scope?.namespace;
+function projectRun(state, journal, limitations) {
+  const runStatus = status.safeParse(state.status);
+  const stateStatus = runStatus.success ? runStatus.data : "unknown";
+  let ledger;
+  let contractAvailability = "unavailable";
+  try {
+    ledger = readTaskAcceptanceLedger(state);
+    if (ledger)
+      contractAvailability = "recorded";
+  } catch {
+    contractAvailability = "invalid";
+    limitations.add("invalid_contract");
+  }
+  const contract = ledger?.revisions.at(-1);
+  const rawDelivery = state.metadata?.[TASK_ACCEPTANCE_EVIDENCE_KEY];
+  const parsedDelivery = deliverySchema.safeParse(rawDelivery);
+  const bound = parsedDelivery.success && contract && parsedDelivery.data.contractDigest === contract.digest && parsedDelivery.data.contractRevision === contract.revision && (!parsedDelivery.data.delivery || parsedDelivery.data.delivery.runId === state.runId);
+  const candidate = bound ? parsedDelivery.data : undefined;
+  const verified = candidate?.status === "verified" || candidate?.status === "pending_review";
+  const validSuccess = !verified || stateStatus === "completed" && candidate.delivery && contract && contract.contract.requiredChecks.every((required) => candidate.checks.some((check) => check.checkId === required.id && check.runId === state.runId && check.argvDigest === "sha256:" + createHash3("sha256").update(JSON.stringify([required.command, ...required.args])).digest("hex") && check.contractDigest === contract.digest && check.contractRevision === contract.revision && check.exitCode === 0 && !check.timedOut && check.unchanged && check.patchId === candidate.delivery.patchId && check.snapshotDigest === candidate.delivery.snapshotDigest && check.executionIdentity === candidate.delivery.executionIdentity)) && candidate.status === "pending_review" === contract.contract.humanReview.length > 0;
+  const delivery = validSuccess ? candidate : undefined;
+  if (rawDelivery !== undefined && !delivery)
+    limitations.add("invalid_delivery");
+  const approvals = { availability: state.metadata?.[APPROVAL_HISTORY_KEY] === undefined ? "unavailable" : "recorded", items: [] };
+  try {
+    for (let offset = 0;offset < 512; offset += 25) {
+      const rows = approvalDecisionViews(state, journal ?? [], offset);
+      for (const row of rows)
+        approvals.items.push({
+          reference: governanceReference("approval", row.approvalId),
+          toolReference: governanceReference("tool", row.name),
+          approved: row.approved,
+          origin: row.provenance?.origin ?? "unknown",
+          channelReference: governanceReference("channel", row.provenance?.channel ?? "unknown"),
+          policyDigest: row.provenance?.policyDigest ?? null,
+          status: row.status,
+          proposalId: row.evidence?.proposalId ?? null,
+          exitCode: row.evidence?.exitCode ?? null,
+          timedOut: row.evidence?.timedOut ?? null,
+          effects: (row.evidence?.effects ?? []).map((effect) => ({ pathReference: governanceReference("path", effect.path), beforeDigest: effect.beforeDigest, afterDigest: effect.afterDigest }))
+        });
+      if (rows.length < 25)
+        break;
+    }
+  } catch {
+    approvals.availability = "invalid";
+    approvals.items = [];
+    limitations.add("invalid_approvals");
+  }
+  const parsedUsage = inspectUsageLedger(state.metadata?.[USAGE_LEDGER_KEY]);
+  const usage = parsedUsage?.runId === state.runId ? parsedUsage : null;
+  const rawDelegations = state.metadata?.zhivexDelegationAcceptanceV1;
+  const delegations = delegationInput.safeParse(rawDelegations);
+  const manifest = inspectRuntimeManifest(state.metadata?.effectiveRuntime);
+  return {
+    reference: governanceReference("run", state.runId),
+    parentReference: state.parentRunId ? governanceReference("run", state.parentRunId) : null,
+    revision: count2.safeParse(state.revision).success ? state.revision : null,
+    status: stateStatus,
+    finalized: ["completed", "failed", "cancelled", "timed_out"].includes(stateStatus),
+    failure: stateStatus === "failed" ? "run_failed" : stateStatus === "cancelled" ? "cancelled" : stateStatus === "timed_out" ? "timed_out" : state.error ? "not_reported" : null,
+    failureDetails: {
+      providerToolReason: providerReason.safeParse(state.error?.reason).success ? state.error.reason : null,
+      diagnosticReference: state.error?.diagnosticCode ? governanceReference("diagnostic", state.error.diagnosticCode) : null,
+      deliveryReason: deliveryReason.safeParse(rawDelivery && typeof rawDelivery === "object" && !Array.isArray(rawDelivery) ? rawDelivery.reason : undefined).success ? rawDelivery.reason : null
+    },
+    identity: "not-verified",
+    runtimePolicy: manifest?.policyVersion ?? null,
+    contract: {
+      availability: contractAvailability,
+      digest: contract?.digest ?? null,
+      revision: contract?.revision ?? null,
+      requiredChecks: contract?.contract.requiredChecks.length ?? null,
+      humanReviewsPending: contract?.contract.humanReview.length ?? null,
+      allowedWritePathReferences: contract?.contract.allowedWritePaths.map((file) => governanceReference("path", file)) ?? [],
+      protectedPathReferences: contract?.contract.protectedFiles.map((file) => governanceReference("path", file)) ?? [],
+      checks: contract?.contract.requiredChecks.map((check) => ({ reference: governanceReference("check", check.id), argvDigest: "sha256:" + createHash3("sha256").update(JSON.stringify([check.command, ...check.args])).digest("hex"), kind: check.kind, backend: check.execution.backend, approval: check.execution.approval })) ?? [],
+      humanReviewReferences: contract?.contract.humanReview.map((review) => governanceReference("review", review.id)) ?? []
+    },
+    delivery: {
+      availability: delivery ? "recorded" : rawDelivery === undefined ? "unavailable" : "invalid",
+      status: delivery?.status ?? "unknown",
+      patchId: delivery?.delivery?.patchId ?? null,
+      snapshotDigest: delivery?.delivery?.snapshotDigest ?? null,
+      interpretation: "recorded-checkpoint-not-current-workspace-verification",
+      checks: (delivery?.checks ?? []).filter((check) => check.runId === state.runId && check.contractDigest === contract?.digest && check.contractRevision === contract?.revision).map((check) => ({ reference: governanceReference("check", check.checkId), argvDigest: check.argvDigest, patchId: check.patchId, snapshotDigest: check.snapshotDigest, exitCode: check.exitCode, timedOut: check.timedOut, unchanged: check.unchanged }))
+    },
+    approvals,
+    usage: {
+      availability: usage ? "recorded" : "unavailable",
+      calls: usage?.calls ?? null,
+      inputTokens: usage?.inputTokens ?? null,
+      outputTokens: usage?.outputTokens ?? null,
+      complete: usage?.usageComplete ?? null,
+      estimatedUsd: usage?.estimatedUsd ?? null,
+      costKind: "estimate-not-invoice"
+    },
+    journal: {
+      availability: journal ? "recorded" : "unavailable",
+      entries: journal?.length ?? 0,
+      failed: journal?.filter((entry) => entry.status === "failed").length ?? 0,
+      unfinished: journal?.filter((entry) => entry.status !== "completed" && entry.status !== "failed").length ?? 0
+    },
+    delegations: {
+      availability: rawDelegations === undefined ? "unavailable" : delegations.success ? "recorded" : "invalid",
+      interpretation: "recorded-checkpoint-not-semantic-review",
+      items: delegations.success ? delegations.data.evaluations.map((item) => ({
+        taskReference: governanceReference("task", item.taskId),
+        childReference: item.childRunId ? governanceReference("run", item.childRunId) : null,
+        recordedAcceptance: item.accepted,
+        reason: item.reason,
+        semanticReview: item.semanticReview,
+        correctionsUsed: item.correctionsUsed ?? null
+      })) : []
+    },
+    children: (state.childRuns ?? []).slice(0, 64).map((child) => governanceReference("run", child.runId))
+  };
+}
+async function exportHarnessGovernanceReport(store, scope, runId, options = {}) {
+  const limitations = new Set;
+  const runs = [], missingChildren = [];
+  const observed = [];
+  const queue = [{ id: runId }], seen = new Set;
+  while (queue.length && runs.length + missingChildren.length < 64) {
+    const item = queue.shift();
+    if (seen.has(item.id))
+      continue;
+    seen.add(item.id);
+    const loaded = await store.load(item.id, scope);
+    const state = loaded ? structuredClone(loaded) : undefined;
+    if (!state || state.runId !== item.id || !sameScope(state, scope) || item.parent !== undefined && state.parentRunId !== item.parent) {
+      if (item.parent === undefined)
+        throw new Error("GOVERNANCE_RUN_UNAVAILABLE");
+      missingChildren.push(governanceReference("run", item.id));
+      limitations.add("missing_child");
+      continue;
+    }
+    const loadedJournal = await store.listToolCalls?.(state.runId, scope);
+    const journal = loadedJournal ? structuredClone(loadedJournal) : undefined;
+    if (journal && journal.length > MAX_JOURNAL)
+      throw new Error("GOVERNANCE_JOURNAL_LIMIT");
+    if (journal?.some((entry) => entry.runId !== state.runId))
+      throw new Error("GOVERNANCE_JOURNAL_SCOPE");
+    if (!journal)
+      limitations.add("journal_unavailable");
+    observed.push({ state, journal });
+    runs.push(projectRun(state, journal, limitations));
+    if ((state.childRuns?.length ?? 0) > 64)
+      limitations.add("tree_limit");
+    for (const child of (state.childRuns ?? []).slice(0, 64))
+      queue.push({ id: child.runId, parent: state.runId });
+  }
+  if (queue.length)
+    limitations.add("tree_limit");
+  const context = await readGovernanceSession(options.session, runId, new Set(observed.map((item) => item.state.runId)));
+  for (const { state, journal } of observed) {
+    const current = await store.load(state.runId, scope);
+    const currentJournal = await store.listToolCalls?.(state.runId, scope);
+    if (!current || JSON.stringify(current) !== JSON.stringify(state) || JSON.stringify(currentJournal) !== JSON.stringify(journal))
+      throw new Error("GOVERNANCE_STATE_CHANGED");
+  }
+  await context.verify();
+  const patches = new Map;
+  for (const run of runs)
+    for (const patch of new Set([run.delivery.patchId, ...run.approvals.items.map((row) => row.proposalId)].filter((id) => id !== null)))
+      patches.set(patch, [...patches.get(patch) ?? [], run.reference]);
+  const binding = bindingSchema.safeParse(observed[0]?.state.harness);
+  const report = harnessGovernanceReportSchema.parse({
+    schemaVersion: 1,
+    kind: "harness-governance-report",
+    exporterVersion: HARNESS_VERSION,
+    executionArtifact: { version: binding.success ? binding.data.version : null, digest: null, availability: binding.success ? "recorded-version" : "unavailable", configurationFingerprint: binding.success ? binding.data.fingerprint : null, authenticity: "not-verified" },
+    rootReference: governanceReference("run", runId),
+    identity: "not-verified",
+    referencePolicy: "sha256-domain-separated-pseudonyms-not-anonymity",
+    session: context.session,
+    eventHistory: context.history,
+    changeEnvelopes: projectGovernanceEnvelopes(options.changeEnvelopes ?? [], patches, options.now ?? Date.now()),
+    runs,
+    missingChildren,
+    limitations: [...limitations].sort()
+  });
+  if (Buffer.byteLength(JSON.stringify(report)) > MAX_REPORT_BYTES)
+    throw new Error("GOVERNANCE_REPORT_LIMIT");
+  return report;
+}
+function renderHarnessGovernanceMarkdown(input) {
+  const report = harnessGovernanceReportSchema.parse(input);
+  return [
+    "# Execution and governance report",
+    "",
+    `Schema: ${report.schemaVersion}. Exporter: ${report.exporterVersion}.`,
+    `Identity: not verified. Recorded execution version: ${report.executionArtifact.version ?? "unavailable"}. Artifact digest: unavailable. Hash references are pseudonyms, not signatures.`,
+    "Delivery describes a recorded checkpoint; export does not recheck the workspace.",
+    "",
+    "| Run reference | Execution | Recorded delivery | Usage |",
+    "| --- | --- | --- | --- |",
+    ...report.runs.map((run) => `| ${run.reference} | ${run.status} | ${run.delivery.status} | ${run.usage.availability === "unavailable" ? "unavailable" : `${run.usage.inputTokens} input / ${run.usage.outputTokens} output (${run.usage.complete ? "complete" : "incomplete"})`} |`),
+    "",
+    `Missing children: ${report.missingChildren.length}. Limitations: ${report.limitations.join(", ") || "none detected"}.`,
+    `Session: ${report.session.availability}. Event history: ${report.eventHistory.availability}. Retention: ${report.eventHistory.retention}. Incomplete: ${report.eventHistory.incomplete}.`,
+    `Change envelopes: ${report.changeEnvelopes.length}. Envelope integrity does not verify patch bytes or authenticity. Estimates are not invoices.`,
+    ""
+  ].join(`
+`);
+}
+
+// src/cli/governance-report.ts
+async function governanceReportCli(options, config, store) {
+  let index;
+  let history;
+  try {
+    const envelopes = [];
+    if (options.reportEnvelopePath) {
+      const data = await readRegularFileNoFollow(path2.resolve(options.reportEnvelopePath), { label: "Governance envelope", maxBytes: 256 * 1024 });
+      try {
+        envelopes.push(JSON.parse(data.contents.toString("utf8")));
+      } catch {
+        throw new CliUsageError("Governance envelope must contain valid JSON.");
+      }
+    }
+    if (options.sessionId) {
+      index = await openCliSessionStore({ workspace: config.workspace, stateDirectory: config.stateDirectory, scope: config.scope });
+      history = await openHarnessActivityStore(config);
+    }
+    const report = await exportHarnessGovernanceReport(store, config.scope, options.runId, {
+      changeEnvelopes: envelopes,
+      ...index && history && options.sessionId ? { session: { id: options.sessionId, index, history } } : {}
+    });
+    return options.json ? JSON.stringify(report, null, 2) + `
+` : renderHarnessGovernanceMarkdown(report);
+  } finally {
+    history?.close();
+    index?.close();
+  }
+}
+
 // src/cli/run-management.ts
 var printRunsDocument = (document, json) => {
   if (json || !document || typeof document !== "object") {
@@ -4448,6 +3025,11 @@ var manageRuns = async (options) => {
       case "inspect":
         document = await inspectHarnessRun(persistence.store, config, options.runId);
         break;
+      case "report": {
+        const report = await governanceReportCli(options, config, persistence.store);
+        process.stdout.write(report);
+        return;
+      }
       case "export": {
         const inspection = await inspectHarnessRun(persistence.store, config, options.runId);
         document = { ...inspection, kind: "run-export" };
@@ -4484,11 +3066,11 @@ var manageRuns = async (options) => {
 };
 
 // src/cli/changes.ts
-import path4 from "node:path";
+import path3 from "node:path";
 var MAX_CHANGE_ENVELOPE_JSON_BYTES = 4 * 1024 * 1024;
 var MAX_CHANGE_ARTIFACT_BYTES = 64 * 1024 * 1024;
 var readStableCliArtifact = async (filePath, maxBytes) => {
-  const absolute = path4.resolve(process.cwd(), filePath);
+  const absolute = path3.resolve(process.cwd(), filePath);
   try {
     return (await readRegularFileNoFollow(absolute, {
       label: `Change artifact ${filePath}`,
@@ -4739,162 +3321,138 @@ async function readBackupTransport(source, legacyMaxBytes) {
   return root;
 }
 
-// src/persistence/workspace-checkpoints.ts
-import { createHash as createHash2, randomUUID as randomUUID3 } from "node:crypto";
-import { z as z3 } from "zod";
-var fileSchema = z3.strictObject({
-  path: workspaceFilePathSchema,
-  digest: fileDigestSchema,
-  content: z3.string().max(65536),
-  mode: z3.number().int().min(0).max(511)
-}).refine((file) => Buffer.byteLength(file.content) <= 65536 && !file.content.includes("\x00") && file.digest === `sha256:${createHash2("sha256").update(file.content).digest("hex")}`, "Invalid checkpoint content identity.");
-var workspaceCheckpointSchema = z3.strictObject({
-  id: z3.string().uuid(),
-  sessionId: z3.string(),
-  turnId: z3.string(),
-  files: z3.array(fileSchema).min(1).max(20)
-});
-var workspaceRestoreOperationSchema = z3.strictObject({
-  id: z3.string().uuid(),
-  checkpoint: workspaceCheckpointSchema,
-  proposalId: fileDigestSchema,
-  expected: z3.record(z3.string(), fileDigestSchema),
-  stage: z3.enum(["prepared", "forking", "forked", "applying", "applied", "completed"]),
-  forkSessionId: z3.string().optional()
-});
-
 // src/persistence/state-backup.ts
-import { createHash as createHash3, randomUUID as randomUUID4 } from "node:crypto";
-import { constants as fsConstants3 } from "node:fs";
-import { chmod, link, lstat as lstat3, open as open2, realpath, unlink as unlink2 } from "node:fs/promises";
-import path5 from "node:path";
-import { z as z4 } from "zod";
+import { createHash as createHash4, randomUUID as randomUUID2 } from "node:crypto";
+import { constants as fsConstants2 } from "node:fs";
+import { chmod, link, lstat as lstat2, open, realpath, unlink } from "node:fs/promises";
+import path4 from "node:path";
+import { z as z3 } from "zod";
 import { normalizeAgentRunState } from "@zhivex-ai/agents";
 import { createSqliteAgentRunStore } from "@zhivex-ai/agents/ops";
 var HARNESS_STATE_BACKUP_SCHEMA_VERSION = 1;
 var HARNESS_STATE_BACKUP_MAX_BYTES = 64 * 1024 * 1024;
 var terminalRunStatuses = new Set(["completed", "failed", "cancelled", "timed_out"]);
 var terminalSessionStatuses = new Set(["completed", "failed", "cancelled", "timed_out"]);
-var digestSchema = z4.string().regex(/^sha256:[a-f0-9]{64}$/);
-var bindingKeySchema = z4.string().regex(/^[a-f0-9]{64}$/);
-var jsonRecordSchema = z4.record(z4.string(), z4.unknown());
-var durableScopeSchema = z4.object({
-  tenantId: z4.string().min(1),
-  userId: z4.string().min(1).optional(),
-  namespace: z4.string().min(1).optional()
+var digestSchema = z3.string().regex(/^sha256:[a-f0-9]{64}$/);
+var bindingKeySchema = z3.string().regex(/^[a-f0-9]{64}$/);
+var jsonRecordSchema = z3.record(z3.string(), z3.unknown());
+var durableScopeSchema = z3.object({
+  tenantId: z3.string().min(1),
+  userId: z3.string().min(1).optional(),
+  namespace: z3.string().min(1).optional()
 }).strict();
-var journalEntrySchema = z4.object({
-  runId: z4.string().min(1),
+var journalEntrySchema = z3.object({
+  runId: z3.string().min(1),
   scope: durableScopeSchema,
-  toolCallId: z4.string().min(1),
-  toolName: z4.string().min(1),
-  status: z4.enum(["pending", "running", "completed", "failed"]),
-  idempotencyKey: z4.string().min(1),
-  revision: z4.number().int().nonnegative(),
-  input: z4.json().optional(),
-  output: z4.json().optional(),
-  error: z4.object({ message: z4.string() }).strict().optional(),
-  startedAt: z4.number().nonnegative().optional(),
-  completedAt: z4.number().nonnegative().optional(),
-  updatedAt: z4.number().nonnegative()
+  toolCallId: z3.string().min(1),
+  toolName: z3.string().min(1),
+  status: z3.enum(["pending", "running", "completed", "failed"]),
+  idempotencyKey: z3.string().min(1),
+  revision: z3.number().int().nonnegative(),
+  input: z3.json().optional(),
+  output: z3.json().optional(),
+  error: z3.object({ message: z3.string() }).strict().optional(),
+  startedAt: z3.number().nonnegative().optional(),
+  completedAt: z3.number().nonnegative().optional(),
+  updatedAt: z3.number().nonnegative()
 }).passthrough();
-var runRecordSchema = z4.object({
-  key: z4.string().min(1).max(1024),
+var runRecordSchema = z3.object({
+  key: z3.string().min(1).max(1024),
   state: jsonRecordSchema,
-  updatedAt: z4.number().int().nonnegative()
+  updatedAt: z3.number().int().nonnegative()
 }).strict();
-var journalRecordSchema = z4.object({
-  runKey: z4.string().min(1).max(1024),
-  toolCallId: z4.string().min(1).max(1024),
+var journalRecordSchema = z3.object({
+  runKey: z3.string().min(1).max(1024),
+  toolCallId: z3.string().min(1).max(1024),
   entry: journalEntrySchema,
-  revision: z4.number().int().nonnegative(),
-  updatedAt: z4.number().int().nonnegative()
+  revision: z3.number().int().nonnegative(),
+  updatedAt: z3.number().int().nonnegative()
 }).strict();
-var idempotencyRecordSchema = z4.object({
-  key: z4.string().min(1).max(1024),
-  runKey: z4.string().min(1).max(1024),
-  updatedAt: z4.number().int().nonnegative()
+var idempotencyRecordSchema = z3.object({
+  key: z3.string().min(1).max(1024),
+  runKey: z3.string().min(1).max(1024),
+  updatedAt: z3.number().int().nonnegative()
 }).strict();
-var parentRecordSchema = z4.object({
-  runKey: z4.string().min(1).max(1024),
-  parentRunKey: z4.string().min(1).max(1024),
-  updatedAt: z4.number().int().nonnegative()
+var parentRecordSchema = z3.object({
+  runKey: z3.string().min(1).max(1024),
+  parentRunKey: z3.string().min(1).max(1024),
+  updatedAt: z3.number().int().nonnegative()
 }).strict();
-var memoryRecordSchema = z4.object({
-  key: z4.string().min(1).max(1024),
-  messages: z4.array(z4.unknown()),
-  updatedAt: z4.number().int().nonnegative()
+var memoryRecordSchema = z3.object({
+  key: z3.string().min(1).max(1024),
+  messages: z3.array(z3.unknown()),
+  updatedAt: z3.number().int().nonnegative()
 }).strict();
-var sessionRecordSchema = z4.object({
-  sessionId: z4.string().min(1).max(260),
+var sessionRecordSchema = z3.object({
+  sessionId: z3.string().min(1).max(260),
   workspaceKey: bindingKeySchema,
   scopeKey: bindingKeySchema,
-  title: z4.string().nullable(),
-  parentSessionId: z4.string().nullable(),
-  forkedFromTurnId: z4.string().nullable(),
-  revision: z4.number().int().nonnegative(),
-  activitySequence: z4.number().int().nonnegative(),
-  createdAt: z4.number().int().nonnegative(),
-  updatedAt: z4.number().int().nonnegative(),
-  archivedAt: z4.number().int().nonnegative().nullable(),
-  deletedAt: z4.number().int().nonnegative().nullable(),
-  metadataBytes: z4.number().int().nonnegative()
+  title: z3.string().nullable(),
+  parentSessionId: z3.string().nullable(),
+  forkedFromTurnId: z3.string().nullable(),
+  revision: z3.number().int().nonnegative(),
+  activitySequence: z3.number().int().nonnegative(),
+  createdAt: z3.number().int().nonnegative(),
+  updatedAt: z3.number().int().nonnegative(),
+  archivedAt: z3.number().int().nonnegative().nullable(),
+  deletedAt: z3.number().int().nonnegative().nullable(),
+  metadataBytes: z3.number().int().nonnegative()
 }).strict();
-var sessionRunRecordSchema = z4.object({
-  turnId: z4.string().min(1).max(260),
-  sourceTurnId: z4.string().nullable(),
-  sessionId: z4.string().min(1).max(260),
-  ordinal: z4.number().int().nonnegative(),
-  runId: z4.string().min(1).max(260),
-  provider: z4.string().min(1).max(260),
-  model: z4.string().min(1).max(260),
-  role: z4.string().nullable(),
-  status: z4.string().min(1),
-  createdAt: z4.number().int().nonnegative(),
-  updatedAt: z4.number().int().nonnegative(),
-  completedAt: z4.number().int().nonnegative().nullable(),
-  metadataBytes: z4.number().int().nonnegative()
+var sessionRunRecordSchema = z3.object({
+  turnId: z3.string().min(1).max(260),
+  sourceTurnId: z3.string().nullable(),
+  sessionId: z3.string().min(1).max(260),
+  ordinal: z3.number().int().nonnegative(),
+  runId: z3.string().min(1).max(260),
+  provider: z3.string().min(1).max(260),
+  model: z3.string().min(1).max(260),
+  role: z3.string().nullable(),
+  status: z3.string().min(1),
+  createdAt: z3.number().int().nonnegative(),
+  updatedAt: z3.number().int().nonnegative(),
+  completedAt: z3.number().int().nonnegative().nullable(),
+  metadataBytes: z3.number().int().nonnegative()
 }).strict();
-var checkpointRecordSchema = z4.discriminatedUnion("kind", [
-  z4.object({
-    id: z4.string().uuid(),
+var checkpointRecordSchema = z3.discriminatedUnion("kind", [
+  z3.object({
+    id: z3.string().uuid(),
     workspaceKey: bindingKeySchema,
     scopeKey: bindingKeySchema,
-    kind: z4.literal("checkpoint"),
+    kind: z3.literal("checkpoint"),
     body: workspaceCheckpointSchema
   }).strict(),
-  z4.object({
-    id: z4.string().uuid(),
+  z3.object({
+    id: z3.string().uuid(),
     workspaceKey: bindingKeySchema,
     scopeKey: bindingKeySchema,
-    kind: z4.literal("restore"),
+    kind: z3.literal("restore"),
     body: workspaceRestoreOperationSchema
   }).strict()
 ]);
 var checkpointTableSql = "CREATE TABLE IF NOT EXISTS zhivex_workspace_checkpoints (id TEXT PRIMARY KEY, workspace_key TEXT NOT NULL, scope_key TEXT NOT NULL, kind TEXT NOT NULL, body TEXT NOT NULL)";
-var stateBackupPayloadSchema = z4.object({
-  schemaVersion: z4.literal(HARNESS_STATE_BACKUP_SCHEMA_VERSION),
-  kind: z4.literal("state-backup"),
-  createdAt: z4.iso.datetime({ precision: 3 }),
-  binding: z4.object({
+var stateBackupPayloadSchema = z3.object({
+  schemaVersion: z3.literal(HARNESS_STATE_BACKUP_SCHEMA_VERSION),
+  kind: z3.literal("state-backup"),
+  createdAt: z3.iso.datetime({ precision: 3 }),
+  binding: z3.object({
     workspaceKey: bindingKeySchema,
     scopeKey: bindingKeySchema,
-    scopePrefix: z4.string().min(1).max(1024)
+    scopePrefix: z3.string().min(1).max(1024)
   }).strict(),
-  schemas: z4.object({
-    operations: z4.literal(HARNESS_OPERATIONS_SCHEMA_VERSION),
-    sessions: z4.literal(HARNESS_SESSION_SCHEMA_VERSION)
+  schemas: z3.object({
+    operations: z3.literal(HARNESS_OPERATIONS_SCHEMA_VERSION),
+    sessions: z3.literal(HARNESS_SESSION_SCHEMA_VERSION)
   }).strict(),
-  records: z4.object({
-    runs: z4.array(runRecordSchema),
-    toolJournal: z4.array(journalRecordSchema),
-    idempotency: z4.array(idempotencyRecordSchema),
-    parents: z4.array(parentRecordSchema),
-    memory: z4.array(memoryRecordSchema),
-    sessions: z4.array(sessionRecordSchema),
-    sessionRuns: z4.array(sessionRunRecordSchema),
-    workspaceCheckpoints: z4.array(checkpointRecordSchema).max(100).optional(),
-    budgetLedgers: z4.array(runRecordSchema).optional()
+  records: z3.object({
+    runs: z3.array(runRecordSchema),
+    toolJournal: z3.array(journalRecordSchema),
+    idempotency: z3.array(idempotencyRecordSchema),
+    parents: z3.array(parentRecordSchema),
+    memory: z3.array(memoryRecordSchema),
+    sessions: z3.array(sessionRecordSchema),
+    sessionRuns: z3.array(sessionRunRecordSchema),
+    workspaceCheckpoints: z3.array(checkpointRecordSchema).max(100).optional(),
+    budgetLedgers: z3.array(runRecordSchema).optional()
   }).strict()
 }).strict();
 var stateBackupBundleSchema = stateBackupPayloadSchema.extend({ checksum: digestSchema }).strict();
@@ -4906,12 +3464,12 @@ var canonicalJson = (value) => {
   return `{${Object.entries(value).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, entry]) => `${JSON.stringify(key)}:${canonicalJson(entry)}`).join(",")}}`;
 };
 var checksumPayload = (payload) => {
-  const hash = createHash3("sha256");
+  const hash = createHash4("sha256");
   for (const chunk of canonicalChunks(payload))
     hash.update(chunk);
   return `sha256:${hash.digest("hex")}`;
 };
-var stableKey = (kind, value) => createHash3("sha256").update(kind).update("\x00").update(value).digest("hex");
+var stableKey = (kind, value) => createHash4("sha256").update(kind).update("\x00").update(value).digest("hex");
 var scopeValue = (config) => `${config.scope.tenantId}\x00${config.scope.userId ?? ""}\x00${config.scope.namespace ?? ""}`;
 var scopePrefix = (config) => `${encodeURIComponent(config.scope.namespace ?? "default")}:${encodeURIComponent(config.scope.tenantId)}:${encodeURIComponent(config.scope.userId ?? "*")}:`;
 var stateMatchesScope = (config, state) => {
@@ -4950,7 +3508,7 @@ var validateBudgetLedger = (config, run, identities) => {
   return identity;
 };
 var bindingForConfig = async (config) => ({
-  workspaceKey: stableKey("workspace", await realpath(path5.resolve(config.workspace))),
+  workspaceKey: stableKey("workspace", await realpath(path4.resolve(config.workspace))),
   scopeKey: stableKey("scope", scopeValue(config)),
   scopePrefix: scopePrefix(config)
 });
@@ -4975,7 +3533,7 @@ var prepareDatabase = async (config) => {
     scope: config.scope
   });
   sessions.close();
-  return path5.join(await realpath(config.stateDirectory), HARNESS_SQLITE_FILE);
+  return path4.join(await realpath(config.stateDirectory), HARNESS_SQLITE_FILE);
 };
 var locateExistingDatabase = async (config) => {
   if (config.storeBackend !== "sqlite") {
@@ -4990,9 +3548,9 @@ var locateExistingDatabase = async (config) => {
       return;
     throw error;
   }
-  const databasePath = path5.join(canonicalStateDirectory, HARNESS_SQLITE_FILE);
+  const databasePath = path4.join(canonicalStateDirectory, HARNESS_SQLITE_FILE);
   try {
-    const entry = await lstat3(databasePath);
+    const entry = await lstat2(databasePath);
     if (entry.isSymbolicLink() || !entry.isFile()) {
       throw new HarnessWorkspaceError(`The SQLite state path must be a real file: ${databasePath}.`);
     }
@@ -5112,7 +3670,7 @@ var readPayload = async (config, recordedWorkspace, accessLease) => {
     const memoryKeys = new Set(runs.map((run) => `${binding.scopePrefix}${String(run.state.runId)}`));
     const memory = database.query("SELECT memory_key, messages_json, updated_at_ms FROM zhivex_agent_memory ORDER BY memory_key").all().filter((row) => memoryKeys.has(row.memory_key)).map((row) => ({
       key: row.memory_key,
-      messages: z4.array(z4.unknown()).parse(JSON.parse(row.messages_json)),
+      messages: z3.array(z3.unknown()).parse(JSON.parse(row.messages_json)),
       updatedAt: row.updated_at_ms
     }));
     const sessionRows = database.query("SELECT * FROM zhivex_cli_sessions ORDER BY session_id").all().filter((row) => row.workspace_key === binding.workspaceKey && row.scope_key === binding.scopeKey);
@@ -5190,11 +3748,11 @@ var createHarnessStateBackup = async (config) => {
   return stateBackupBundleSchema.parse({ ...payload, checksum: checksumPayload(payload) });
 };
 var writePrivateBackup = async (target, contents) => {
-  const requested = path5.resolve(target);
-  const parent = path5.dirname(requested);
+  const requested = path4.resolve(target);
+  const parent = path4.dirname(requested);
   let parentHandle;
   try {
-    parentHandle = await open2(parent, fsConstants3.O_RDONLY | fsConstants3.O_NOFOLLOW);
+    parentHandle = await open(parent, fsConstants2.O_RDONLY | fsConstants2.O_NOFOLLOW);
     if (!(await parentHandle.stat()).isDirectory()) {
       throw new Error("Backup parent is not a directory.");
     }
@@ -5204,12 +3762,12 @@ var writePrivateBackup = async (target, contents) => {
       cause: error
     });
   }
-  const staged = path5.join(parent, `.zhivex-state-backup-${randomUUID4()}.tmp`);
+  const staged = path4.join(parent, `.zhivex-state-backup-${randomUUID2()}.tmp`);
   let handle;
   let published = false;
   let stagedExists = false;
   try {
-    handle = await open2(staged, fsConstants3.O_WRONLY | fsConstants3.O_CREAT | fsConstants3.O_EXCL | fsConstants3.O_NOFOLLOW, 384);
+    handle = await open(staged, fsConstants2.O_WRONLY | fsConstants2.O_CREAT | fsConstants2.O_EXCL | fsConstants2.O_NOFOLLOW, 384);
     stagedExists = true;
     let pending = [];
     let pendingBytes = 0;
@@ -5230,19 +3788,19 @@ var writePrivateBackup = async (target, contents) => {
     handle = undefined;
     await link(staged, requested);
     published = true;
-    await unlink2(staged);
+    await unlink(staged);
     stagedExists = false;
     await parentHandle.sync();
   } catch (error) {
     if (published)
-      await unlink2(requested).catch(() => {
+      await unlink(requested).catch(() => {
         return;
       });
     throw error;
   } finally {
     await handle?.close();
     if (stagedExists)
-      await unlink2(staged).catch(() => {
+      await unlink(staged).catch(() => {
         return;
       });
     await parentHandle.close();
@@ -5260,7 +3818,7 @@ var exportHarnessStateBackup = async (config, target) => {
   return {
     schemaVersion: HARNESS_STATE_BACKUP_SCHEMA_VERSION,
     kind: "state-export",
-    path: path5.resolve(target),
+    path: path4.resolve(target),
     checksum: bundle.checksum,
     counts: Object.fromEntries(Object.entries(bundle.records).map(([name, rows]) => [name, rows?.length ?? 0]))
   };
@@ -5268,7 +3826,7 @@ var exportHarnessStateBackup = async (config, target) => {
 var readHarnessStateBackup = async (source) => {
   let input;
   try {
-    input = await readBackupTransport(path5.resolve(source), HARNESS_STATE_BACKUP_MAX_BYTES);
+    input = await readBackupTransport(path4.resolve(source), HARNESS_STATE_BACKUP_MAX_BYTES);
   } catch (error) {
     if (error instanceof SyntaxError) {
       throw new HarnessStateConflictError("Harness state backup is not valid JSON.", { cause: error });
@@ -5394,7 +3952,7 @@ var validateBundleBinding = async (config, bundle) => {
     const turn = bundle.records.sessionRuns.find((run) => run.turnId === checkpoint.turnId && run.sessionId === checkpoint.sessionId);
     if (!turn || !terminalSessionStatuses.has(turn.status))
       throw new HarnessStateConflictError("Checkpoint targets a missing terminal turn.");
-    if (new Set(checkpoint.files.map((file) => file.path)).size !== checkpoint.files.length || checkpoint.files.some((file) => `sha256:${createHash3("sha256").update(file.content).digest("hex")}` !== file.digest || Buffer.byteLength(file.content) > 65536)) {
+    if (new Set(checkpoint.files.map((file) => file.path)).size !== checkpoint.files.length || checkpoint.files.some((file) => `sha256:${createHash4("sha256").update(file.content).digest("hex")}` !== file.digest || Buffer.byteLength(file.content) > 65536)) {
       throw new HarnessStateConflictError("Checkpoint content identity is invalid.");
     }
     if (record.kind === "restore") {
@@ -5638,6 +4196,134 @@ var manageState = async (options) => {
 `);
 };
 
+// src/cli/checkpoints.ts
+async function checkpointCliDocument(options) {
+  const config = resolveHarnessConfig(options);
+  const workspace = await Workspace.open(config.workspace);
+  const sessions = await openCliSessionStore({ workspace: workspace.root, stateDirectory: config.stateDirectory, scope: config.scope });
+  let store;
+  const [target = "", second, ...paths] = options.checkpointArguments ?? [];
+  if (!target && options.checkpointsCommand !== "storage") {
+    sessions.close();
+    throw new CliUsageError("Checkpoint target is required.");
+  }
+  const assertTerminal = async (sessionId) => {
+    const session = await sessions.get(sessionId);
+    if (!session)
+      throw new Error("Checkpoint conversation was not found.");
+    const persistence = await openHarnessPersistence(config);
+    try {
+      for (const run of session.runs) {
+        const state = await persistence.store.load(run.runId, config.scope);
+        if (!state || !["completed", "failed", "cancelled", "timed_out"].includes(state.status)) {
+          throw new Error("Checkpoint operation requires all conversation runs to be terminal.");
+        }
+      }
+    } finally {
+      persistence.close();
+    }
+    return session;
+  };
+  try {
+    store = await openWorkspaceCheckpointStore(workspace, sessions);
+    switch (options.checkpointsCommand) {
+      case "storage":
+        return { kind: "checkpoint-storage", ...store.storageStatus() };
+      case "prune-review":
+      case "prune-apply": {
+        const applying = options.checkpointsCommand === "prune-apply";
+        const selected = (options.checkpointArguments ?? []).slice(applying ? 1 : 0);
+        const selection = { checkpointIds: [], completedRestoreIds: [] };
+        for (const item of selected) {
+          const match = /^(checkpoint|restore):([0-9a-f-]+)$/i.exec(item);
+          if (!match)
+            throw new CliUsageError("Select exact IDs as checkpoint:<id> or restore:<id>.");
+          (match[1].toLowerCase() === "checkpoint" ? selection.checkpointIds : selection.completedRestoreIds).push(match[2]);
+        }
+        const plan = applying ? await store.applyRetention(selection, fileDigestSchema.parse(target)) : store.prepareRetention(selection);
+        return { kind: applying ? "checkpoint-pruned" : "checkpoint-prune-review", ...plan };
+      }
+      case "list":
+        return { kind: "checkpoints", checkpoints: store.listCheckpoints(target), restores: store.listRestores(target) };
+      case "capture": {
+        await assertTerminal(target);
+        const checkpoint = await store.capture({ sessionId: target, turnId: second, paths });
+        return { kind: "checkpoint", inspection: await store.inspectCheckpoint(checkpoint.id) };
+      }
+      case "inspect":
+        return { kind: "checkpoint", inspection: await store.inspectCheckpoint(target) };
+      case "prepare": {
+        const inspection = await store.inspectCheckpoint(target);
+        await assertTerminal(inspection.checkpoint.sessionId);
+        const expected = {};
+        for (const file of inspection.files) {
+          if (file.status !== "available")
+            throw new Error("Checkpoint contains unavailable files or mode conflicts; inspect it before proceeding.");
+          expected[file.path] = file.expectedDigest;
+        }
+        const { operation } = await store.prepareRestore(target, expected);
+        return {
+          kind: "restore-review",
+          operationId: operation.id,
+          stage: operation.stage,
+          reviewedProposalId: operation.proposalId,
+          diff: await store.previewRestore(operation.id),
+          coverage: inspection.coverage
+        };
+      }
+      case "review": {
+        const operation = store.getOperation(target);
+        let diff;
+        try {
+          diff = await store.previewRestore(target);
+        } catch {}
+        return {
+          kind: "restore-review",
+          operationId: operation.id,
+          stage: operation.stage,
+          reviewedProposalId: operation.proposalId,
+          forkSessionId: operation.forkSessionId,
+          previewStatus: diff ? "available" : "unavailable",
+          ...diff ? { diff } : {},
+          coverage: (await store.inspectCheckpoint(operation.checkpoint.id)).coverage
+        };
+      }
+      case "recover": {
+        const operation = store.getOperation(target);
+        await assertTerminal(operation.checkpoint.sessionId);
+        const recovered = await store.recoverFork(target, second);
+        return { kind: "restore-recovery", operationId: recovered.id, stage: recovered.stage, forkSessionId: recovered.forkSessionId };
+      }
+      case "apply": {
+        const operation = store.getOperation(target);
+        await assertTerminal(operation.checkpoint.sessionId);
+        const completed = await store.applyRestore(target, fileDigestSchema.parse(second));
+        const session = await sessions.get(completed.forkSessionId);
+        if (!session)
+          throw new Error("Restore derivative is unavailable; inspect the operation before retrying.");
+        return { kind: "restore-completed", operationId: completed.id, stage: completed.stage, session };
+      }
+      default:
+        throw new CliUsageError("Unknown checkpoint command.");
+    }
+  } finally {
+    store?.close();
+    sessions.close();
+  }
+}
+async function manageCheckpoints(options) {
+  const document = await checkpointCliDocument(options);
+  const encoded = JSON.stringify({ schemaVersion: 1, ...document }, null, 2);
+  process.stdout.write((options.json ? encoded : sanitizeTerminalText(encoded)) + `
+`);
+  if (document.kind === "restore-completed" && document.session) {
+    if (!options.json)
+      process.stdout.write(`Continue in the restored conversation: zhx --session ${document.session.sessionId}
+`);
+    return document.session;
+  }
+}
+
 // src/cli/task-input.ts
 var MAX_STDIN_TASK_BYTES = 1024 * 1024;
 async function readStdinTask(input = process.stdin) {
@@ -5674,7 +4360,7 @@ var main = async (argv = process.argv.slice(2)) => {
     parsedOptions = { ...parsedOptions, prompt: await readStdinTask() };
   }
   if (parsedOptions.serviceFile) {
-    const { runServiceCli } = await import("./service-client-cli-yx56n0hc.js");
+    const { runServiceCli } = await import("./service-client-cli-kns4mf57.js");
     await runServiceCli(parsedOptions, annotateCliStreamError);
     return;
   }
@@ -5704,6 +4390,9 @@ var main = async (argv = process.argv.slice(2)) => {
     case "providers":
       listProviders(options.json);
       return;
+    case "policy":
+      await inspectCliPolicy(options);
+      return;
     case "doctor":
       await doctor(options);
       return;
@@ -5719,6 +4408,12 @@ var main = async (argv = process.argv.slice(2)) => {
     case "sessions":
       await manageSessions(options);
       return;
+    case "checkpoints": {
+      const restored = await manageCheckpoints(options);
+      if (restored && interactive && !options.json)
+        await chat({ ...options, command: "chat", sessionId: restored.sessionId });
+      return;
+    }
     case "changes":
       await manageChanges(options);
       return;