@zhivex-ai/harness 1.2.0 → 1.3.0-rc.7

package/dist/engine/client.d.ts

@@ -0,0 +1,6 @@
+/** Explicit Harness integration surface. See contracts/engine-api.json for stability tiers. */
+export { HARNESS_CLIENT_PROTOCOL_VERSION, harnessClientCommandSchema, harnessClientRequestSchema } from "../client/protocol.js";
+export type { HarnessClientCommand, HarnessClientRequest, HarnessClientErrorCode, HarnessClientSession, HarnessClientRun, HarnessClientData, HarnessClientResponse, HarnessClientNegotiation, HarnessClientAdapterOptions, HarnessClientAdapter } from "../client/protocol.js";
+export { createHarnessClientAdapter } from "../client/adapter.js";
+export { runResultDocument } from "../client/run-document.js";
+export { terminalContinuationMessages } from "../client/continuation.js";

package/dist/engine/client.js

@@ -0,0 +1,28 @@
+import {
+  createHarnessClientAdapter,
+  runResultDocument,
+  terminalContinuationMessages
+} from "../index-jgrx804e.js";
+import"../index-h0mqx2ed.js";
+import"../index-8zzhggxv.js";
+import"../index-42gp2hy8.js";
+import"../index-t60rva31.js";
+import"../index-z0qxmkm2.js";
+import"../index-yb239ghk.js";
+import"../index-gq9xagx2.js";
+import"../index-8705zxpr.js";
+import"../index-xqxeypt5.js";
+import {
+  HARNESS_CLIENT_PROTOCOL_VERSION,
+  harnessClientCommandSchema,
+  harnessClientRequestSchema
+} from "../index-qfpz5y2v.js";
+import"../index-1bx83sw4.js";
+export {
+  HARNESS_CLIENT_PROTOCOL_VERSION,
+  createHarnessClientAdapter,
+  harnessClientCommandSchema,
+  harnessClientRequestSchema,
+  runResultDocument,
+  terminalContinuationMessages
+};

package/dist/engine/desktop-providers-v1.d.ts

@@ -0,0 +1,4 @@
+/** Host-only integration helpers; never import this entrypoint from a renderer. */
+export { loadModelCatalog } from "../models/catalog-store.js";
+export type { CatalogLoadOptions, CatalogSnapshot } from "../models/catalog-store.js";
+export { vertexConfigured, vertexEnvironment, vertexTokenSource, vertexRoute } from "../providers/vertex-auth.js";

package/dist/engine/desktop-providers-v1.js

@@ -0,0 +1,18 @@
+import {
+  loadModelCatalog
+} from "../index-wg1sd3at.js";
+import {
+  vertexConfigured,
+  vertexEnvironment,
+  vertexRoute,
+  vertexTokenSource
+} from "../index-8705zxpr.js";
+import"../index-xqxeypt5.js";
+import"../index-1bx83sw4.js";
+export {
+  loadModelCatalog,
+  vertexConfigured,
+  vertexEnvironment,
+  vertexRoute,
+  vertexTokenSource
+};

package/dist/engine/desktop-state-v1.d.ts

@@ -0,0 +1,10 @@
+/** Versioned, host-only Desktop update/recovery contract. No renderer or SQL API. */
+export { DESKTOP_DATABASE_BACKUP_LIMIT as HOST_DATABASE_SNAPSHOT_LIMIT, createDesktopDatabaseBackup as createHostDatabaseSnapshot, verifyDesktopDatabaseBackup as verifyHostDatabaseSnapshot, verifyDesktopDatabaseState as verifyHostDatabaseState } from "../persistence/host-database-backup.js";
+export type { DesktopDatabaseBackup as HostDatabaseSnapshot, DesktopBackupConfig as HostDatabaseSnapshotConfig } from "../persistence/host-database-backup.js";
+export { HARNESS_SQLITE_FILE } from "../persistence/operations.js";
+export { validateStateDirectory } from "../persistence/state-directory.js";
+export { validateRecordedWorkspace } from "../persistence/recorded-workspace.js";
+export { acquireSqliteAccess, adoptExclusiveSqliteAccess, exclusiveSqliteAccessDescriptor } from "../persistence/sqlite-access.js";
+export type { SqliteAccessLease } from "../persistence/sqlite-access.js";
+export { protectPersistenceSecret } from "../persistence/persistence-secrets.js";
+export { readRegularFileNoFollow, statRegularFileNoFollow } from "../workspace/file-security.js";

package/dist/engine/desktop-state-v1.js

@@ -0,0 +1,168 @@
+import {
+  createArchivedHarnessStateBackup,
+  createHarnessStateBackup,
+  validateRecordedWorkspace
+} from "../index-a97bezbz.js";
+import {
+  HARNESS_SQLITE_FILE
+} from "../index-h0mqx2ed.js";
+import {
+  validateStateDirectory
+} from "../index-42gp2hy8.js";
+import"../index-z0qxmkm2.js";
+import {
+  SqliteDatabase,
+  acquireSqliteAccess,
+  adoptExclusiveSqliteAccess,
+  exclusiveSqliteAccessDescriptor,
+  protectPersistenceSecret,
+  readRegularFileNoFollow,
+  statRegularFileNoFollow
+} from "../index-yb239ghk.js";
+import"../index-gq9xagx2.js";
+import"../index-8705zxpr.js";
+import"../index-xqxeypt5.js";
+import"../index-1bx83sw4.js";
+
+// src/persistence/host-database-backup.ts
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import { chmod, lstat, mkdir, mkdtemp, open, realpath, rm } from "node:fs/promises";
+import path from "node:path";
+var DESKTOP_DATABASE_BACKUP_LIMIT = 128 * 1024 * 1024;
+function assertIdle(db) {
+  const terminal = "('completed','failed','cancelled','timed_out')";
+  if (db.query(`SELECT count(*) AS n FROM zhivex_agent_runs WHERE json_extract(state_json,'$.status') IS NULL OR json_extract(state_json,'$.status') NOT IN ${terminal} OR coalesce(json_array_length(json_extract(state_json,'$.pendingApprovals')),0)>0`).get().n || db.query("SELECT count(*) AS n FROM zhivex_agent_runs_leases WHERE expires_at_ms > ?").get(Date.now()).n || db.query(`SELECT count(*) AS n FROM zhivex_cli_session_runs WHERE status NOT IN ${terminal}`).get().n || db.query("SELECT count(*) AS n FROM zhivex_agent_runs_tool_journal WHERE json_extract(entry_json,'$.status') IS NULL OR json_extract(entry_json,'$.status') NOT IN ('completed','failed')").get().n)
+    throw new Error("BACKUP_WORK_ACTIVE");
+}
+async function privateDirectory(directory) {
+  const stat = await lstat(directory);
+  if (!stat.isDirectory() || stat.isSymbolicLink() || stat.uid !== process.getuid?.() || stat.mode & 63)
+    throw new Error;
+  return realpath(directory);
+}
+async function createDesktopDatabaseBackup(config, backupRoot) {
+  let directory;
+  try {
+    await validateStateDirectory(config.workspace, config.stateDirectory);
+    const sourceDirectory = await privateDirectory(config.stateDirectory);
+    const source = path.join(sourceDirectory, HARNESS_SQLITE_FILE);
+    const sourceStat = await statRegularFileNoFollow(source, { label: "desktop database", requireSingleLink: true });
+    if (sourceStat.uid !== process.getuid?.() || sourceStat.mode & 63 || sourceStat.size > DESKTOP_DATABASE_BACKUP_LIMIT)
+      throw new Error;
+    await mkdir(backupRoot, { recursive: true, mode: 448 });
+    directory = await mkdtemp(path.join(await privateDirectory(backupRoot), "database-"));
+    const destination = path.join(directory, HARNESS_SQLITE_FILE);
+    const sourceDb = new SqliteDatabase(source, { readonly: true, ...config.accessLease ? { accessLease: config.accessLease } : {} });
+    try {
+      sourceDb.exec("PRAGMA busy_timeout=1000");
+      const before = sourceDb.query("PRAGMA data_version").get().data_version;
+      if (sourceDb.query("PRAGMA page_count").get().page_count * sourceDb.query("PRAGMA page_size").get().page_size > DESKTOP_DATABASE_BACKUP_LIMIT)
+        throw new Error;
+      assertIdle(sourceDb);
+      sourceDb.query("VACUUM INTO ?").run(destination);
+      if (sourceDb.query("PRAGMA data_version").get().data_version !== before)
+        throw new Error;
+    } finally {
+      sourceDb.close();
+    }
+    await chmod(destination, 384);
+    const snapshot = new SqliteDatabase(destination, { readonly: true });
+    try {
+      if (snapshot.query("PRAGMA quick_check").all().some((row) => row.quick_check !== "ok"))
+        throw new Error;
+      assertIdle(snapshot);
+    } finally {
+      snapshot.close();
+    }
+    const logical = await (config.workspaceAbsent ? createArchivedHarnessStateBackup : createHarnessStateBackup)({ ...config, stateDirectory: directory, storeBackend: "sqlite" });
+    const finalDb = new SqliteDatabase(destination);
+    try {
+      const checkpoint = finalDb.query("PRAGMA wal_checkpoint(TRUNCATE)").get();
+      if (checkpoint && checkpoint.busy !== 0)
+        throw new Error;
+    } finally {
+      finalDb.close();
+    }
+    const file = await open(destination, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+      await file.sync();
+    } finally {
+      await file.close();
+    }
+    const contents = await readRegularFileNoFollow(destination, { label: "desktop backup", maxBytes: DESKTOP_DATABASE_BACKUP_LIMIT, requireSingleLink: true });
+    const result = { directory, size: contents.contents.length, sha256: createHash("sha256").update(contents.contents).digest("hex"), logicalChecksum: logical.checksum };
+    const parent = await open(directory, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+      await parent.sync();
+    } finally {
+      await parent.close();
+    }
+    const rootHandle = await open(path.dirname(directory), constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+      await rootHandle.sync();
+    } finally {
+      await rootHandle.close();
+    }
+    return result;
+  } catch {
+    if (directory)
+      try {
+        await rm(directory, { recursive: true, force: true });
+      } catch {
+        throw new Error("DESKTOP_BACKUP_CLEANUP_FAILED");
+      }
+    throw new Error("DESKTOP_BACKUP_FAILED");
+  }
+}
+async function verifyDesktopDatabaseBackup(backup) {
+  try {
+    await privateDirectory(backup.directory);
+    const contents = await readRegularFileNoFollow(path.join(backup.directory, HARNESS_SQLITE_FILE), { label: "desktop backup", maxBytes: DESKTOP_DATABASE_BACKUP_LIMIT, requireSingleLink: true });
+    if (contents.stat.uid !== process.getuid?.() || contents.stat.mode & 63 || contents.contents.length !== backup.size || createHash("sha256").update(contents.contents).digest("hex") !== backup.sha256)
+      throw new Error;
+  } catch {
+    throw new Error("DESKTOP_BACKUP_INVALID");
+  }
+}
+async function verifyDesktopDatabaseState(config) {
+  try {
+    await validateRecordedWorkspace(config.workspace, config.workspaceAbsent === true);
+    await validateStateDirectory(config.workspace, config.stateDirectory);
+    const directory = await privateDirectory(config.stateDirectory), filename = path.join(directory, HARNESS_SQLITE_FILE);
+    const stat = await statRegularFileNoFollow(filename, { label: "desktop state", requireSingleLink: true });
+    if (stat.uid !== process.getuid?.() || stat.mode & 63 || stat.size > DESKTOP_DATABASE_BACKUP_LIMIT)
+      throw new Error;
+    exclusiveSqliteAccessDescriptor(config.accessLease, filename);
+    const db = new SqliteDatabase(filename, { readonly: true, create: false, accessLease: config.accessLease });
+    try {
+      db.exec("PRAGMA busy_timeout=1000");
+      if (db.query("PRAGMA page_count").get().page_count * db.query("PRAGMA page_size").get().page_size > DESKTOP_DATABASE_BACKUP_LIMIT)
+        throw new Error;
+      if (db.query("PRAGMA quick_check").all().some((row) => row.quick_check !== "ok"))
+        throw new Error;
+      assertIdle(db);
+    } finally {
+      db.close();
+    }
+    await createArchivedHarnessStateBackup(config, { accessLease: config.accessLease });
+    exclusiveSqliteAccessDescriptor(config.accessLease, filename);
+  } catch {
+    throw new Error("DESKTOP_DATABASE_STATE_INVALID");
+  }
+}
+export {
+  HARNESS_SQLITE_FILE,
+  DESKTOP_DATABASE_BACKUP_LIMIT as HOST_DATABASE_SNAPSHOT_LIMIT,
+  acquireSqliteAccess,
+  adoptExclusiveSqliteAccess,
+  createDesktopDatabaseBackup as createHostDatabaseSnapshot,
+  exclusiveSqliteAccessDescriptor,
+  protectPersistenceSecret,
+  readRegularFileNoFollow,
+  statRegularFileNoFollow,
+  validateRecordedWorkspace,
+  validateStateDirectory,
+  verifyDesktopDatabaseBackup as verifyHostDatabaseSnapshot,
+  verifyDesktopDatabaseState as verifyHostDatabaseState
+};

package/dist/engine/index.d.ts

@@ -0,0 +1,73 @@
+/** Terminal-free host engine surface. Named aliases retain their historical stability tiers. */
+export { DEFAULT_ALLOWED_CHECKS, DEFAULT_OCI_EXECUTION, DEFAULT_SUBAGENT_BUDGET, HARNESS_CONFIG_MIGRATABLE_SCHEMA_VERSIONS, HARNESS_CONFIG_SCHEMA_VERSION, HARNESS_EXECUTION_BACKENDS, HARNESS_EXECUTION_POLICY_VERSION, HARNESS_OCI_RUNTIMES, HARNESS_OCI_SHELL_MODES, HARNESS_REQUIRED_CAPABILITIES, HARNESS_SUBAGENT_PROFILES, BUILTIN_PROVIDER_REGISTRATIONS, DEFAULT_PROVIDER_REGISTRY, PROVIDERS, PROVIDER_DESCRIPTORS, createProviderModel, createProviderRegistry, defaultHarnessNamespace, migrateHarnessConfigInput, parseProvider, providerAvailability, providerDescriptor, resolveHarnessConfig } from "../runtime/config.js";
+export type { BuiltInHarnessProvider, HarnessBudget, HarnessCompactionConfig, HarnessContextConfig, HarnessConfig, HarnessConfigInput, HarnessConfigMigrationResult, HarnessCostBudget, HarnessExecutionBackend, HarnessExecutionConfig, HarnessOciRuntime, HarnessOciShellMode, HarnessOrchestrationConfig, HarnessProvider, HarnessProviderRegistry, HarnessRequiredCapability, HarnessStoreBackend, HarnessSubagentProfile, ProviderCapability, ProviderAvailability, ProviderCredentials, ProviderDescriptor, ProviderDiagnosticsDescriptor, ProviderEnumDiagnostic, ProviderModelFactory, ProviderModelFactoryContext, ProviderPresenceDiagnostic, ProviderRegistration, ProviderSupport } from "../runtime/config.js";
+export { createHarnessRouteModels, parseHarnessModelRoute, resolveHarnessModelRoutes, serializeHarnessModelRoutes } from "../providers/routing.js";
+export type { HarnessModelRoute } from "../providers/routing.js";
+export { CLI_EVENT_SCHEMA_VERSION, CLI_JSON_SCHEMA_VERSION, serializeStreamEvent, serializeStreamResult, streamEventDocument, streamResultDocument } from "../client/stream.js";
+export type { StreamRunResultSource } from "../client/stream.js";
+export { CLI_COMMAND_OPTION_CONTRACTS, CLI_OPTION_DEFINITIONS, CLI_OPTION_NAMES, validateCliCommandOptions } from "../compat/cli-options.js";
+export type { CliCommandOptionContract, CliCommandOptionContractKey, CliOptionDefinition, CliOptionName } from "../compat/cli-options.js";
+export { cliChangeEnvelopeVerificationDocumentSchema, cliDoctorDocumentSchema, cliErrorDocumentSchema, cliInitDocumentSchema, cliJsonDocumentSchema, cliJsonLineDocumentSchema, cliProviderDocumentSchema, cliReviewGroupDocumentSchema, cliRunCancellationDocumentSchema, cliRunCleanupDocumentSchema, cliRunEventDocumentSchema, cliRunExportDocumentSchema, cliRunInspectionDocumentSchema, cliRunListDocumentSchema, cliRunResultDocumentSchema, cliSessionDocumentSchema, cliSessionListDocumentSchema, cliStateExportDocumentSchema, cliStateImportDocumentSchema, cliStateStatusDocumentSchema, cliStreamErrorDocumentSchema, cliStreamResultDocumentSchema, parseCliJsonDocument, parseCliJsonLineDocument } from "../client/json-contracts.js";
+export type { CliChangeEnvelopeVerificationDocument, CliInitDocument, CliJsonDocument, CliJsonLineDocument, CliReviewGroupDocument, CliRunEventDocument, CliRunInspectionDocument, CliRunListDocument, CliRunResultDocument, CliSessionDocument, CliStreamErrorDocument, CliStreamResultDocument } from "../client/json-contracts.js";
+export { HARNESS_SESSION_INDEX_FILE, HARNESS_SESSION_SCHEMA_VERSION, SESSION_RUN_STATUSES, TERMINAL_SESSION_RUN_STATUSES, openCliSessionStore, openSessionStore } from "../persistence/sessions.js";
+export { HARNESS_STATE_BACKUP_MAX_BYTES, HARNESS_STATE_BACKUP_SCHEMA_VERSION, createHarnessStateBackup, exportHarnessStateBackup, importHarnessStateBackup, importHarnessStateBackupFile, inspectHarnessState, readHarnessStateBackup, stateBackupBundleSchema } from "../persistence/state-backup.js";
+export type { HarnessStateBackupBundle, HarnessStateImportOptions } from "../persistence/state-backup.js";
+export type { AppendSessionRunInput, CliSession, CliSessionStore, CliSessionSummary, CreateSessionInput, ForkSessionInput, ListSessionsQuery, OpenSessionStoreOptions, SessionRetentionResult, SessionRunReference, SessionRunStatus, UpdateSessionInput, UpdateSessionRunInput } from "../persistence/sessions.js";
+export { CliOciRuntimeAdapter, HARNESS_EXECUTION_ARTIFACT_SCHEMA_VERSION, HARNESS_OCI_LABEL, HARNESS_OCI_LABEL_VALUE, cleanupHarnessExecutionArtifacts, createHarnessOciExecutionEnvironment, describeOciCommand, executionFingerprintInput, harnessExecutionSession } from "../execution/execution-environment.js";
+export type { CreateHarnessOciEnvironmentOptions, EnvironmentPatchImportResult, EnvironmentPatchInspection, ExecutionArtifactCleanupResult, HarnessCommandResult, HarnessEnvironmentStatus, HarnessExecutionIoMetrics, HarnessExecutionSession, HarnessOciExecutionEnvironment, HarnessOciRuntimeAdapter, OciCommandBatchResult, OciImageInspection, OciCommandResult, OciPhaseLatencies, OciRunBatchRequest, OciRunRequest } from "../execution/execution-environment.js";
+export { assertHarnessModelCapabilities, inspectHarnessModelCapabilities, selectHarnessModel } from "../providers/capabilities.js";
+export type { HarnessModelCandidate, HarnessModelCapabilityReport, HarnessModelSelection } from "../providers/capabilities.js";
+export { HARNESS_MCP_CONFIG_SCHEMA_VERSION, HARNESS_MCP_PERMISSIONS, createHarnessMcpTools, createHttpMcpClient, loadHarnessMcpConfiguration, normalizeHarnessMcpConfiguration } from "../integrations/mcp.js";
+export type { HarnessMcpClients, HarnessMcpConfiguration, HarnessMcpHttpOptions, HarnessMcpPermission, HarnessMcpServerConfig, HarnessMcpTransport, McpClient, McpListedTool } from "../integrations/mcp.js";
+export { HARNESS_SUBAGENT_PROFILE_DESCRIPTORS, createHarnessSubagents, runHarnessReviewGroup } from "../runtime/orchestration.js";
+export type { HarnessReviewGroupResult, HarnessSubagentProfileDescriptor, HarnessSubagentRuntime } from "../runtime/orchestration.js";
+export { BUN_ENGINE_RANGE, HARNESS_VERSION, NODE_ENGINE_RANGE } from "../version.js";
+export { HARNESS_ERROR_SCHEMA_VERSION, HARNESS_ERROR_CODES, HarnessApprovalError, HarnessConfigError, HarnessError, HarnessExecutionError, HarnessProviderError, HarnessStateConflictError, HarnessWorkspaceError, harnessErrorDocument, normalizeHarnessError } from "../runtime/errors.js";
+export type { HarnessErrorCategory, HarnessErrorCode, HarnessErrorDocument, HarnessErrorOptions } from "../runtime/errors.js";
+export { CHANGE_ENVELOPE_DIGEST_ALGORITHM, CHANGE_ENVELOPE_SCHEMA_VERSION, MAX_CHANGE_ENVELOPE_APPROVALS, MAX_CHANGE_ENVELOPE_APPROVAL_SCOPES, MAX_CHANGE_ENVELOPE_ATTESTATIONS, MAX_CHANGE_ENVELOPE_CHECKS, canonicalizeChangeEnvelope, changeEnvelopeApprovalSchema, changeEnvelopeBaseSchema, changeEnvelopeCheckSchema, changeEnvelopeEvidenceSchema, changeEnvelopeFingerprintsSchema, changeEnvelopeInputSchema, changeEnvelopePatchSchema, changeEnvelopePreconditionsSchema, changeEnvelopeSchema, computeChangeEnvelopeDigest, computeChangeEnvelopeEvidenceDigest, createChangeEnvelope, digestChangeEnvelopeArtifact, externalAttestationReferenceSchema, verifyChangeEnvelope } from "../workspace/change-envelope.js";
+export type { ChangeEnvelope, ChangeEnvelopeApproval, ChangeEnvelopeCheck, ChangeEnvelopeEvidence, ChangeEnvelopePreconditions, ChangeEnvelopeVerificationIssue, ChangeEnvelopeVerificationIssueCode, ChangeEnvelopeVerificationOptions, ChangeEnvelopeVerificationResult, CreateChangeEnvelopeInput, ExternalAttestationReference } from "../workspace/change-envelope.js";
+export { EDIT_CONTRACT_SCHEMA_VERSION, EDIT_DIGEST_ALGORITHM, MAX_EDIT_CHANGES, MAX_EDIT_FILE_BYTES, MAX_EDIT_PROPOSAL_BYTES, applyEditProposalInputSchema, createEditProposal, editContractDocument, editChangeSchema, editChangesSchema, editProposalInputSchema, editProposalChangeSchema, editProposalSchema, fileDigestSchema, moveFileInputSchema, mutationAuditEntrySchema, mutationOperationSchema, quarantineFileInputSchema, restoreFileInputSchema, validateEditProposal, workspaceFilePathSchema } from "../workspace/edit-contracts.js";
+export type { ApplyEditProposalInput, ApplyPatchResult, EditContractDocument, EditChange, EditProposal, EditProposalChange, FileDigest, MoveFileInput, MoveFileResult, MutationAuditEntry, MutationOperation, QuarantineFileInput, QuarantineFileResult, RestoreFileInput, RestoreFileResult } from "../workspace/edit-contracts.js";
+export { HARNESS_INSTRUCTIONS, appendUserMessage, compactHarnessMessages, createExecutionEnvironmentTools, createHarness, estimateMessageTokens, runHarness } from "../runtime/harness.js";
+export { HARNESS_OPERATIONS_SCHEMA_VERSION, HARNESS_SQLITE_FILE, TERMINAL_RUN_STATUSES, cancelHarnessRun, cleanupHarnessRuns, inspectHarnessRun, listHarnessRuns, migrateLegacyFileRuns, openHarnessPersistence } from "../persistence/operations.js";
+export { validateStateDirectory } from "../persistence/state-directory.js";
+export type { HarnessMigrationResult, HarnessPersistence, HarnessRunQuery } from "../persistence/operations.js";
+export type { CreateHarnessOptions, HarnessRunOptions, HarnessRunDiagnostics, ZhivexHarness } from "../runtime/harness.js";
+export { DEFAULT_HARNESS_CONTEXT_MANIFEST, DEFAULT_HARNESS_PROJECT_INSTRUCTIONS, HARNESS_CONTEXT_BUNDLE_SCHEMA_VERSION, HARNESS_CONTEXT_CONFIG_SCHEMA_VERSION, HARNESS_LIFECYCLE_EVENTS, MAX_HARNESS_CONTEXT_FILES, MAX_HARNESS_CONTEXT_FILE_BYTES, MAX_HARNESS_CONTEXT_TOTAL_BYTES, MAX_HARNESS_SKILLS, MAX_HARNESS_SKILL_DIRECTORIES, MAX_HARNESS_SKILL_FILE_BYTES, createEmptyHarnessContextBundle, createHarnessLifecycleDispatcher, harnessContextConfigurationSchema, harnessContextFingerprintInput, harnessLifecycleFingerprintInput, harnessSkillLoadInputSchema, isHarnessContextDigest, loadHarnessProjectContext, loadHarnessSkill, renderHarnessContextInstructions } from "../context/context-engineering.js";
+export type { HarnessContextBundle, HarnessContextConfiguration, HarnessContextManifestIdentity, HarnessContextSource, HarnessLifecycleEvent, HarnessLifecycleEventName, HarnessLifecycleHookFailure, HarnessLifecycleHookRegistration, HarnessLoadedSkill, HarnessSkillIndexEntry, LoadHarnessProjectContextOptions } from "../context/context-engineering.js";
+export { Workspace } from "../workspace/workspace.js";
+export type { CommandResult, HarnessCheck, ListFilesOptions, ListFilesResult, ReadFilesRequest, SearchFilesOptions, SearchManyOptions, SearchManyQuery, SearchMatch, WorkspaceFile, WorkspaceTopologyFile, WorkspaceIndexDiagnostics } from "../workspace/workspace.js";
+export { DEFAULT_TIME_TO_SAFE_FIX_GOAL, TIME_TO_SAFE_FIX_CARRIERS, TIME_TO_SAFE_FIX_DIAGNOSTIC_CODES, TIME_TO_SAFE_FIX_FAILURE_ORIGINS, TIME_TO_SAFE_FIX_FAILURE_STAGES, TIME_TO_SAFE_FIX_GOALS, TIME_TO_SAFE_FIX_PROFILES, TIME_TO_SAFE_FIX_SCHEMA_VERSION, classifyTimeToSafeFixFailure, createTimeToSafeFixCases, createTimeToSafeFixReport, createTimeToSafeFixSample, injectTimeToSafeFixAttack, timeToSafeFixDriverResultSchema, timeToSafeFixLatencyStatistics, timeToSafeFixTaskSchema } from "../runtime/time-to-safe-fix.js";
+export type { TimeToSafeFixAggregate, TimeToSafeFixCarrier, TimeToSafeFixCase, TimeToSafeFixDriverResult, TimeToSafeFixDiagnosticCode, TimeToSafeFixFailureOrigin, TimeToSafeFixFailureStage, TimeToSafeFixGoal, TimeToSafeFixLatencyStatistics, TimeToSafeFixProfile, TimeToSafeFixRate, TimeToSafeFixRatioStatistics, TimeToSafeFixReport, TimeToSafeFixSample, TimeToSafeFixTask } from "../runtime/time-to-safe-fix.js";
+export { HARNESS_CLIENT_PROTOCOL_VERSION, harnessClientCommandSchema, harnessClientRequestSchema, createHarnessClientAdapter } from "../client/index.js";
+export type { HarnessClientCommand, HarnessClientRequest, HarnessClientErrorCode, HarnessClientSession, HarnessClientRun, HarnessClientData, HarnessClientResponse, HarnessClientNegotiation, HarnessClientAdapter } from "../client/index.js";
+export { startHarnessLocalService, recoverHarnessLocalService, readHarnessLocalCredentials, requestHarnessLocalService, harnessLocalCredentialsSchema } from "../client/local-service.js";
+export type { HarnessLocalService, HarnessLocalServiceOptions, HarnessLocalCredentials } from "../client/local-service.js";
+export { openHarnessActivityStore } from "../client/service-events.js";
+export type { HarnessActivityEvent, HarnessActivitySnapshot, HarnessActivityPage, HarnessActivityStore, HarnessActivityOptions } from "../client/service-events.js";
+export type { HarnessClientAdapterOptions } from "../client/index.js";
+export type { HarnessDelegationContract } from "../runtime/delegation-contracts.js";
+export { createSemanticCompactor, SEMANTIC_COMPACTION_VERSION } from "../context/semantic-compaction.js";
+export { recommendCompactionModels } from "../models/compaction-recommendations.js";
+export type { CompactionRecommendationRequest, CompactionModelAssessment, CompactionModelRecommendations } from "../models/compaction-recommendations.js";
+export { createHarnessToolPolicy, applyHarnessToolPolicy, harnessToolPolicySchema } from "../runtime/tool-policy.js";
+export type { HarnessToolPolicy, HarnessToolPolicyDecision } from "../runtime/tool-policy.js";
+export { createProgressMonitor } from "../runtime/progress-monitor.js";
+export type { ProgressMonitorState, ProgressSignal } from "../runtime/progress-monitor.js";
+export { createAcpConnection } from "../client/acp.js";
+export { serveAcpStdio } from "../client/acp-stdio.js";
+export { openWorkspaceCheckpointStore } from "../persistence/workspace-checkpoints.js";
+export type { WorkspaceCheckpoint, WorkspaceRestoreOperation } from "../persistence/workspace-checkpoints.js";
+export type { HarnessMcpResourceClient } from "../integrations/mcp.js";
+/** Experimental read-only host policy view. */
+export { inspectHarnessPolicy } from "../runtime/policy-inspection.js";
+export type { HarnessPolicyInspection } from "../runtime/policy-inspection.js";
+/** Experimental application-owned task acceptance; enforcement is a separate layer. */
+export { taskAcceptanceContractSchema, compileTaskAcceptanceContract } from '../runtime/task-acceptance.js';
+export type { TaskAcceptanceContract } from '../runtime/task-acceptance.js';
+export { inspectHarnessTaskAcceptance, reviseHarnessTaskAcceptance } from '../runtime/task-acceptance-host.js';
+export type { TaskAcceptanceLedger } from '../runtime/task-acceptance-record.js';
+/** Experimental bounded portable governance projection. */
+export { exportHarnessGovernanceReport, harnessGovernanceReportSchema, renderHarnessGovernanceMarkdown } from '../persistence/governance-report.js';
+export type { HarnessGovernanceReport, HarnessGovernanceOptions } from '../persistence/governance-report.js';
+export type { GovernanceSessionSource } from '../persistence/governance-context.js';