@zhivex-ai/harness 1.2.0 → 1.3.0-rc.7

package/dist/approvals/approval-history.d.ts

@@ -3,6 +3,17 @@ import type { AgentRunState, AgentToolCallJournalEntry } from "@zhivex-ai/core";
 import type { AppliedDiff } from "./approval-diff.js";
 export declare const APPROVAL_HISTORY_KEY = "clientApprovalDecisionsV1";
 export declare const approvalInputDigest: (value: unknown) => string;
+export declare const approvalProvenanceSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    origin: z.ZodEnum<{
+        application: "application";
+        automatic: "automatic";
+        interactive: "interactive";
+        unknown: "unknown";
+    }>;
+    channel: z.ZodString;
+    policyDigest: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
 declare const rowSchema: z.ZodObject<{
     approvalId: z.ZodString;
     digest: z.ZodString;
@@ -12,6 +23,17 @@ declare const rowSchema: z.ZodObject<{
     approved: z.ZodBoolean;
     decidedAt: z.ZodNumber;
     reviewedRevision: z.ZodNumber;
+    provenance: z.ZodOptional<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        origin: z.ZodEnum<{
+            application: "application";
+            automatic: "automatic";
+            interactive: "interactive";
+            unknown: "unknown";
+        }>;
+        channel: z.ZodString;
+        policyDigest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ApprovalDecisionRecord = z.infer<typeof rowSchema>;
 export interface ApprovalDecisionView extends ApprovalDecisionRecord {

package/dist/approvals/explicit-review.d.ts

@@ -0,0 +1,24 @@
+import type { AgentApprovalResponse, AgentRunState } from '@zhivex-ai/core';
+import type { AgentRunStore } from '@zhivex-ai/agents/ops';
+type DecisionOrigin = 'interactive' | 'automatic' | 'application';
+/** Presence only; admission still validates and consumes the receipt against durable state. */
+export declare const hasHostApprovalReceipt: (responses: readonly AgentApprovalResponse[]) => boolean;
+/** Trusted host only: call after its review UI confirms the complete snapshot.
+ * No renderer/client flag creates evidence. Cloning or serializing loses authority.
+ * This attests a local channel, not a person's legal or corporate identity. */
+export declare const issueExplicitReviewResponses: (host: object, state: AgentRunState, responses: readonly AgentApprovalResponse[], channel: string, now?: number, reviewedRevision?: number) => AgentApprovalResponse[];
+/** Observed provenance is separate from evidence of complete explicit review. */
+export declare const issueObservedApprovalResponses: (host: object, state: AgentRunState, responses: readonly AgentApprovalResponse[], channel: string, origins: readonly DecisionOrigin[], now?: number) => AgentApprovalResponse[];
+export declare const issueAutomaticApprovalResponses: (host: object, state: AgentRunState, responses: readonly AgentApprovalResponse[], channel: string) => AgentApprovalResponse[];
+/** Internal adapter handoff after its durable intent write; not a protocol field. */
+export declare const issueRecordedApprovalResponses: (host: object, state: AgentRunState, responses: readonly AgentApprovalResponse[]) => AgentApprovalResponse[];
+export declare const consumeExplicitReviewResponses: (host: object, state: AgentRunState, responses: readonly AgentApprovalResponse[], now?: number) => {
+    alreadyRecorded?: boolean;
+    origins: DecisionOrigin[];
+    channel: string;
+    policyDigest: string | null;
+    reviewedRevision: number;
+};
+/** Save review intent before effects; acknowledgement loss does not authorize retry. */
+export declare const admitExplicitReviewResponses: (host: object, store: AgentRunStore, state: AgentRunState, responses: readonly AgentApprovalResponse[]) => Promise<AgentRunState>;
+export {};

package/dist/approvals/host-policy-identity.d.ts

@@ -0,0 +1,3 @@
+export declare const bindHostPolicyIdentity: (host: object, digest: string, explicitReview?: boolean) => void;
+export declare const hostPolicyIdentity: (host: object) => string | null;
+export declare const requiresExplicitHostReview: (host: object) => boolean;

package/dist/cli/arguments.d.ts

@@ -2,8 +2,8 @@ import { type HarnessReasoningEffort } from "../providers/reasoning.js";
 import { type AgentStatus } from "@zhivex-ai/agents";
 import { type HarnessSubagentProfile } from "../runtime/config.js";
 import { HarnessError } from "../runtime/errors.js";
-export declare const CLI_COMMANDS: readonly ["init", "run", "review", "chat", "providers", "doctor", "resume", "runs", "sessions", "changes", "state", "help", "version"];
-export declare const CLI_RUNS_COMMANDS: readonly ["list", "inspect", "cancel", "cleanup", "export"];
+export declare const CLI_COMMANDS: readonly ["init", "run", "review", "chat", "providers", "doctor", "policy", "resume", "runs", "sessions", "checkpoints", "changes", "state", "help", "version"];
+export declare const CLI_RUNS_COMMANDS: readonly ["list", "inspect", "cancel", "cleanup", "export", "report"];
 export declare const CLI_SESSIONS_COMMANDS: readonly ["list", "inspect", "rename", "fork", "archive"];
 export declare const CLI_CHANGES_COMMANDS: readonly ["create", "verify"];
 export declare const CLI_STATE_COMMANDS: readonly ["status", "export", "import"];
@@ -75,7 +75,10 @@ export interface CliOptions {
     runId?: string;
     idempotencyKey?: string;
     runsCommand?: RunsCommand;
+    reportEnvelopePath?: string;
     sessionsCommand?: SessionsCommand;
+    checkpointsCommand?: "list" | "capture" | "inspect" | "prepare" | "review" | "apply" | "recover" | "storage" | "prune-review" | "prune-apply";
+    checkpointArguments?: string[];
     changesCommand?: ChangesCommand;
     stateCommand?: StateCommand;
     artifactPath?: string;
@@ -87,6 +90,7 @@ export interface CliOptions {
     sessionTitle?: string;
     sessionSearch?: string;
     pricingFile?: string;
+    toolPolicyFile?: string;
     usageLimitUsd?: number;
     continueSession: boolean;
     implicitCommand: boolean;

package/dist/cli/checkpoints.d.ts

@@ -0,0 +1,230 @@
+import { type CliSession } from '../persistence/sessions.js';
+import { type CliOptions } from './arguments.js';
+/** Operator CLI over the existing checkpoint API; never constructs a model. */
+export declare function checkpointCliDocument(options: CliOptions): Promise<{
+    policy: 'explicit-reviewed-removal';
+    automaticEviction: false;
+    maxRecords: number;
+    maxRecordBytes: number;
+    maxFilesPerCheckpoint: number;
+    maxFileBytes: number;
+    records: number;
+    availableRecords: number;
+    serializedBytes: number;
+    pendingRestores: number;
+    checkpoints: {
+        id: string;
+        referenced: boolean;
+    }[];
+    kind: string;
+    restores?: never;
+    inspection?: never;
+    reviewedProposalId?: never;
+    diff?: never;
+    coverage?: never;
+    forkSessionId?: never;
+    operationId?: never;
+    stage?: never;
+    session?: never;
+} | {
+    planId: string;
+    selection: {
+        checkpointIds: string[];
+        completedRestoreIds: string[];
+    };
+    records: {
+        id: string;
+        kind: string;
+        sessionId: string;
+        bytes: number;
+    }[];
+    recordsBefore: number;
+    recordsAfter: number;
+    bytesRemoved: number;
+    workspaceFilesChanged: false;
+    conversationsChanged: false;
+    kind: string;
+    checkpoints?: never;
+    restores?: never;
+    inspection?: never;
+    reviewedProposalId?: never;
+    diff?: never;
+    coverage?: never;
+    forkSessionId?: never;
+    operationId?: never;
+    stage?: never;
+    session?: never;
+} | {
+    kind: string;
+    checkpoints: {
+        id: string;
+        sessionId: string;
+        turnId: string;
+        files: {
+            path: string;
+            digest: string;
+            bytes: number;
+            mode: number;
+        }[];
+    }[];
+    restores: {
+        id: string;
+        checkpointId: string;
+        proposalId: string;
+        stage: "applied" | "applying" | "completed" | "forked" | "forking" | "prepared";
+        forkSessionId?: string;
+    }[];
+    inspection?: never;
+    reviewedProposalId?: never;
+    diff?: never;
+    coverage?: never;
+    forkSessionId?: never;
+    operationId?: never;
+    stage?: never;
+    session?: never;
+} | {
+    checkpoints?: never;
+    restores?: never;
+    kind: string;
+    inspection: {
+        checkpoint: {
+            id: string;
+            sessionId: string;
+            turnId: string;
+            files: {
+                path: string;
+                digest: string;
+                bytes: number;
+                mode: number;
+            }[];
+        };
+        files: ({
+            path: string;
+            status: "mode-conflict";
+            before?: never;
+            after?: never;
+            expectedDigest?: never;
+            afterDigest?: never;
+            mode?: never;
+        } | {
+            path: string;
+            status: "available";
+            before: string;
+            after: string;
+            expectedDigest: string;
+            afterDigest: string;
+            mode: number;
+        } | {
+            before?: never;
+            after?: never;
+            expectedDigest?: never;
+            afterDigest?: never;
+            mode?: never;
+            path: string;
+            status: "unavailable";
+        })[];
+        coverage: {
+            existingTextOnly: true;
+            maxFiles: number;
+            maxFileBytes: number;
+            creation: false;
+            deletion: false;
+            binary: false;
+            modeRollback: false;
+            fullWorkspaceSnapshot: false;
+        };
+    };
+    reviewedProposalId?: never;
+    diff?: never;
+    coverage?: never;
+    forkSessionId?: never;
+    operationId?: never;
+    stage?: never;
+    session?: never;
+} | {
+    checkpoints?: never;
+    restores?: never;
+    inspection?: never;
+    kind: string;
+    operationId: string;
+    stage: "applied" | "applying" | "completed" | "forked" | "forking" | "prepared";
+    reviewedProposalId: string;
+    diff: {
+        proposalId: string;
+        files: {
+            path: string;
+            expectedDigest: import("../index.js").FileDigest | null;
+            before: string | null;
+            after: string;
+            afterDigest: import("../index.js").FileDigest;
+        }[];
+    };
+    coverage: {
+        existingTextOnly: true;
+        maxFiles: number;
+        maxFileBytes: number;
+        creation: false;
+        deletion: false;
+        binary: false;
+        modeRollback: false;
+        fullWorkspaceSnapshot: false;
+    };
+    forkSessionId?: never;
+    session?: never;
+} | {
+    checkpoints?: never;
+    restores?: never;
+    inspection?: never;
+    kind: string;
+    operationId: string;
+    stage: "applied" | "applying" | "completed" | "forked" | "forking" | "prepared";
+    reviewedProposalId: string;
+    forkSessionId: string | undefined;
+    previewStatus: string;
+    diff?: {
+        proposalId: string;
+        files: {
+            path: string;
+            expectedDigest: import("../index.js").FileDigest | null;
+            before: string | null;
+            after: string;
+            afterDigest: import("../index.js").FileDigest;
+        }[];
+    };
+    coverage: {
+        existingTextOnly: true;
+        maxFiles: number;
+        maxFileBytes: number;
+        creation: false;
+        deletion: false;
+        binary: false;
+        modeRollback: false;
+        fullWorkspaceSnapshot: false;
+    };
+    session?: never;
+} | {
+    checkpoints?: never;
+    restores?: never;
+    inspection?: never;
+    reviewedProposalId?: never;
+    diff?: never;
+    coverage?: never;
+    kind: string;
+    operationId: string;
+    stage: "applied" | "applying" | "completed" | "forked" | "forking" | "prepared";
+    forkSessionId: string | undefined;
+    session?: never;
+} | {
+    checkpoints?: never;
+    restores?: never;
+    inspection?: never;
+    reviewedProposalId?: never;
+    diff?: never;
+    coverage?: never;
+    forkSessionId?: never;
+    kind: string;
+    operationId: string;
+    stage: "applied" | "applying" | "completed" | "forked" | "forking" | "prepared";
+    session: CliSession;
+}>;
+export declare function manageCheckpoints(options: CliOptions): Promise<CliSession | undefined>;

package/dist/cli/cli-options.d.ts

@@ -1,41 +1,2 @@
-export interface CliOptionDefinition {
-    repeatable: boolean;
-    conflictsWith: readonly string[];
-}
-export interface CliCommandOptionContract {
-    allowed: readonly string[];
-    required: readonly (string | readonly string[])[];
-    repeatable: readonly string[];
-    conflicts: Readonly<Record<string, readonly string[]>>;
-}
-export declare const CLI_OPTION_NAMES: readonly ["--compaction-model", "--compaction-provider", "--provider", "--model", "--reasoning", "--profile", "--route", "--workspace", "--state-dir", "--mcp-config", "--context-config", "--no-project-context", "--patch", "--preconditions", "--now", "--require-verified-delivery", "--execution", "--oci-runtime", "--oci-image", "--oci-allow-command", "--oci-shell", "--oci-max-process-runtime-ms", "--oci-max-process-output-bytes", "--oci-max-memory-mb", "--oci-max-pids", "--oci-max-cpus", "--oci-max-workspace-bytes", "--oci-max-file-write-bytes", "--oci-tmpfs-mb", "--store", "--tenant", "--user", "--namespace", "--idempotency-key", "--token-budget", "--context-tokens", "--no-token-budget", "--max-steps", "--timeout-ms", "--max-tool-calls", "--max-tool-errors", "--max-input-tokens", "--max-output-tokens", "--max-total-tokens", "--subagent-max-steps", "--subagent-max-tool-calls", "--subagent-max-tool-errors", "--subagent-max-input-tokens", "--subagent-max-output-tokens", "--subagent-max-total-tokens", "--subagent-timeout-ms", "--max-parallel-reviews", "--max-cost-usd", "--input-cost-per-million", "--output-cost-per-million", "--allow-check", "--require-capability", "--subagent", "--reviewer", "--approval-mode", "--yes", "--approve", "--deny", "--json", "--jsonl", "--session", "--continue", "--update", "--status", "--limit", "--cursor", "--before", "--reason", "--cascade", "--final", "--service", "--apply", "--help", "--version", "--search", "--pricing-file", "--usage-limit-usd"];
-export type CliOptionName = (typeof CLI_OPTION_NAMES)[number];
-export declare const CLI_OPTION_DEFINITIONS: Readonly<Record<CliOptionName, CliOptionDefinition>>;
-export declare const CLI_COMMAND_OPTION_CONTRACTS: {
-    readonly init: CliCommandOptionContract;
-    readonly run: CliCommandOptionContract;
-    readonly review: CliCommandOptionContract;
-    readonly chat: CliCommandOptionContract;
-    readonly providers: CliCommandOptionContract;
-    readonly doctor: CliCommandOptionContract;
-    readonly resume: CliCommandOptionContract;
-    readonly "runs:list": CliCommandOptionContract;
-    readonly "runs:inspect": CliCommandOptionContract;
-    readonly "runs:cancel": CliCommandOptionContract;
-    readonly "runs:cleanup": CliCommandOptionContract;
-    readonly "runs:export": CliCommandOptionContract;
-    readonly "sessions:list": CliCommandOptionContract;
-    readonly "sessions:inspect": CliCommandOptionContract;
-    readonly "sessions:rename": CliCommandOptionContract;
-    readonly "sessions:fork": CliCommandOptionContract;
-    readonly "sessions:archive": CliCommandOptionContract;
-    readonly "changes:create": CliCommandOptionContract;
-    readonly "changes:verify": CliCommandOptionContract;
-    readonly "state:status": CliCommandOptionContract;
-    readonly "state:export": CliCommandOptionContract;
-    readonly "state:import": CliCommandOptionContract;
-    readonly help: CliCommandOptionContract;
-    readonly version: CliCommandOptionContract;
-};
-export type CliCommandOptionContractKey = keyof typeof CLI_COMMAND_OPTION_CONTRACTS;
-export declare const validateCliCommandOptions: (commandKey: CliCommandOptionContractKey, counts: ReadonlyMap<string, number>) => void;
+/** Harness 1.x compatibility bridge; implementation belongs to the engine. */
+export * from "../compat/cli-options.js";

package/dist/cli/cli-profiles.d.ts

@@ -7,10 +7,12 @@ export declare const MAX_CLI_PROFILE_BYTES: number;
 export declare const cliProfileSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
     provider: z.ZodEnum<{
+        anthropic: "anthropic";
         gemini: "gemini";
         meta: "meta";
         openai: "openai";
         qwen: "qwen";
+        vertex: "vertex";
     }>;
     reasoningEffort: z.ZodOptional<z.ZodEnum<{
         default: "default";
@@ -42,7 +44,7 @@ export declare const createCliProfile: (name: string, input: {
     path: string;
     profile: {
         schemaVersion: 1;
-        provider: "gemini" | "meta" | "openai" | "qwen";
+        provider: "anthropic" | "gemini" | "meta" | "openai" | "qwen" | "vertex";
         reasoningEffort?: "default" | "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh" | undefined;
         model: string;
     };
@@ -56,7 +58,7 @@ export declare const updateCliProfile: (name: string, input: {
     path: string;
     profile: {
         schemaVersion: 1;
-        provider: "gemini" | "meta" | "openai" | "qwen";
+        provider: "anthropic" | "gemini" | "meta" | "openai" | "qwen" | "vertex";
         reasoningEffort?: "default" | "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh" | undefined;
         model: string;
     };

package/dist/cli/cli-stream.d.ts

@@ -1,167 +1,2 @@
-import type { AgentStreamEvent } from "@zhivex-ai/agents";
-export declare const CLI_JSON_SCHEMA_VERSION: 1;
-export declare const CLI_EVENT_SCHEMA_VERSION: 1;
-export interface StreamRunResultSource {
-    runId: string;
-    status: string;
-    provider: string;
-    model: string;
-    steps: number;
-    toolCalls: number;
-    pendingApprovals?: readonly ({
-        id: string;
-        kind: string;
-        name: string;
-        childRunId?: string;
-        childAgentId?: string;
-        [key: string]: unknown;
-    })[];
-    children?: readonly ({
-        runId: string;
-        status: string;
-        [key: string]: unknown;
-    })[];
-    [key: string]: unknown;
-}
-/**
- * Convert runtime events into a stable, line-oriented CLI contract.
- *
- * Tool inputs, tool outputs, provider payloads, model messages, and error text
- * are deliberately omitted: they can contain repository content or secrets.
- */
-export declare const streamEventDocument: (event: AgentStreamEvent, sequence?: number) => {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    textDelta: string;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    toolCallId: string;
-    toolName: string;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    toolCallId: string;
-    toolName: string;
-    isError: boolean;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    approvalRequestId: string;
-    approvalKind: "local-tool" | "provider" | "subagent";
-    toolName: string;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    approvalRequestId: string;
-    approved: boolean;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    provider: string;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    provider: string;
-    partial: boolean;
-    id?: string;
-    index?: number;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    finishReason?: import("@zhivex-ai/core").FinishReason;
-    usage?: import("@zhivex-ai/core").TokenUsage;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    error: string;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    currentStep: number;
-    maxSteps: number;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    stepIndex: number;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    stepIndex: number;
-    status: import("@zhivex-ai/core").AgentStepStatus;
-    toolCalls: number;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    compactionId: string;
-    reasons: import("@zhivex-ai/core").AgentCompactionReason[];
-    messageCountBefore: number;
-    messageCountAfter: number;
-} | {
-    schemaVersion: 1;
-    kind: "run-event";
-    sequence: number;
-    type: "agent-approval-request" | "agent-approval-resolved" | "agent-compaction" | "agent-run-finish" | "agent-run-start" | "agent-run-update" | "agent-step-finish" | "agent-step-start" | "error" | "finish" | "image-generation" | "provider-data" | "text-delta" | "tool-approval-request" | "tool-call" | "tool-result";
-    runId: string;
-    status: import("@zhivex-ai/core").AgentStatus;
-    provider: string;
-    model: string;
-} | undefined;
-export declare const serializeStreamEvent: (event: AgentStreamEvent, sequence?: number) => string;
-/**
- * Project the rich final JSON document onto the redacted JSONL contract.
- *
- * This is deliberately a whitelist. Output text, mutations, approval
- * arguments, scope, paths, provider payloads, and configuration bindings can
- * contain repository or operator data and must remain exclusive to the
- * separate final-document contract.
- */
-export declare const streamResultDocument: (result: StreamRunResultSource, sequence?: number) => {
-    schemaVersion: 1;
-    kind: "run-stream-result";
-    sequence: number;
-    runId: string;
-    status: string;
-    provider: string;
-    model: string;
-    steps: number;
-    toolCalls: number;
-    pendingApprovals: {
-        id: string;
-        kind: string;
-        name: string;
-        childRunId?: string;
-        childAgentId?: string;
-    }[];
-    children: {
-        runId: string;
-        status: string;
-    }[];
-};
-export declare const serializeStreamResult: (result: StreamRunResultSource, sequence?: number) => string;
+/** Harness 1.x compatibility bridge; implementation belongs to the engine. */
+export * from "../client/stream.js";

package/dist/cli/governance-report.d.ts

@@ -0,0 +1,5 @@
+import type { AgentRunStore } from '@zhivex-ai/core';
+import type { HarnessConfig } from '../runtime/config.js';
+import type { CliOptions } from './arguments.js';
+/** Provider-free report command; the optional envelope is bounded data, never a command. */
+export declare function governanceReportCli(options: CliOptions, config: HarnessConfig, store: AgentRunStore): Promise<string>;

package/dist/cli/policy-decisions.d.ts

@@ -0,0 +1,9 @@
+import { type HarnessPolicyDecisionEvent, type PolicyDecisionEvidence } from '../runtime/policy-decisions.js';
+export declare const formatPolicyDecision: (event: HarnessPolicyDecisionEvent) => string;
+export declare function observeCliPolicy<T>(options: {
+    json?: boolean;
+    jsonl?: boolean;
+}, tracker: {
+    sequence?: number;
+    policyEvidence?: PolicyDecisionEvidence;
+}, work: () => Promise<T>): Promise<T>;

package/dist/cli/policy.d.ts

@@ -0,0 +1,5 @@
+import { type HarnessPolicyInspection } from '../runtime/policy-inspection.js';
+import type { CliOptions } from './arguments.js';
+export declare function formatPolicyInspection(policy: HarnessPolicyInspection): string;
+export declare function printPolicyInspection(policy: HarnessPolicyInspection, json: boolean | undefined): void;
+export declare function inspectCliPolicy(options: CliOptions): Promise<void>;

package/dist/cli/presentation.d.ts

@@ -1,3 +1,4 @@
+import type { PolicyDecisionEvidence } from "../runtime/policy-decisions.js";
 import type { ActivityHistory } from "./terminal/activity-history.js";
 import { TerminalMarkdown } from "./terminal/terminal-markdown.js";
 import { type AgentApprovalRequest, type AgentApprovalResponse, type AgentRunOutput, type AgentStreamEvent } from "@zhivex-ai/agents";
@@ -13,11 +14,12 @@ export declare const terminalApprovalResolver: (automaticallyApprove: boolean |
     select: import("./cli-credentials.js").CredentialInput["select"];
     workspace: string;
     sessionGrants?: Set<string>;
-}) => NonNullable<HarnessRunOptions["resolveApprovals"]>;
+}, reviewHost?: ZhivexHarness) => NonNullable<HarnessRunOptions["resolveApprovals"]>;
 export declare const printTerminalResult: (result: AgentRunOutput, harness: ZhivexHarness, output: Pick<CliOptions, "json" | "jsonl">, tracker: {
     streamedText: boolean;
     sequence?: number;
     markdown?: TerminalMarkdown;
+    policyEvidence?: PolicyDecisionEvidence;
 }) => void;
 export declare const flushToolActivity: (tracker: object) => void | undefined;
 export declare const streamSink: (output: Pick<CliOptions, "json" | "jsonl">, tracker: {