@zhivex-ai/harness 1.4.0 → 1.4.1

package/dist/{index-8zjmnyw5.js → index-1265j7t2.js}

@@ -1,11 +1,15 @@
 import {
   VERTEX_ENVIRONMENT,
+  azureOpenAIConfigured,
+  bedrockConfigured,
+  createAzureOpenAIModel,
+  createBedrockModel,
   createVertexModel,
   vertexConfigured
-} from "./index-m49jx72n.js";
+} from "./index-c39197wq.js";
 import {
   bundledDefaultModel
-} from "./index-xqxeypt5.js";
+} from "./index-mzydbzp8.js";
 import {
   HarnessConfigError,
   HarnessProviderError
@@ -323,7 +327,7 @@ import { createAnthropic } from "@zhivex-ai/anthropic";
 import { createGemini } from "@zhivex-ai/gemini";
 import { createOpenAI } from "@zhivex-ai/openai";
 import { createQwen } from "@zhivex-ai/qwen";
-var PROVIDERS = ["meta", "qwen", "openai", "gemini", "anthropic", "vertex"];
+var PROVIDERS = ["meta", "qwen", "openai", "gemini", "anthropic", "vertex", "bedrock", "azure-openai"];
 var HARNESS_PROVIDER_CAPABILITIES = [
   "streaming",
   "tool-calling",
@@ -542,13 +546,13 @@ var createProviderRegistry = (registrations) => {
       const credentials = Object.freeze(registration.descriptor.credentialNames.map((name) => Object.freeze({ name, present: Boolean(env[name]?.trim()) })));
       return Object.freeze({
         ...registration.descriptor,
-        configured: registration.descriptor.id === "vertex" ? vertexConfigured(env) : credentials.length === 0 || credentials.some((credential) => credential.present),
+        configured: builtinConfigured(registration.descriptor.id, env, credentials),
         credentials,
         configuration: providerConfiguration(registration.diagnostics, env)
       });
     })),
     transportFingerprint: (env = process.env) => {
-      const transport = frozenRegistrations.filter((registration) => (registration.descriptor.id !== "anthropic" || Boolean(env.ANTHROPIC_BASE_URL?.trim())) && (registration.descriptor.id !== "vertex" || VERTEX_ENVIRONMENT.some((name) => Boolean(env[name]?.trim())))).map((registration) => {
+      const transport = frozenRegistrations.filter((registration) => includeTransport(registration.descriptor.id, env)).map((registration) => {
         const names = [
           registration.diagnostics.endpointEnvironmentVariable,
           ...(registration.diagnostics.presence ?? []).map((entry) => entry.environmentVariable),
@@ -568,6 +572,27 @@ var createProviderRegistry = (registrations) => {
   });
   return registry;
 };
+var environmentPresent = (env, names) => names.some((name) => Boolean(env[name]?.trim()));
+var builtinConfigured = (id, env, credentials) => {
+  if (id === "vertex")
+    return vertexConfigured(env);
+  if (id === "bedrock")
+    return bedrockConfigured(env);
+  if (id === "azure-openai")
+    return azureOpenAIConfigured(env);
+  return credentials.length === 0 || credentials.some((credential) => credential.present);
+};
+var includeTransport = (id, env) => {
+  if (id === "anthropic")
+    return Boolean(env.ANTHROPIC_BASE_URL?.trim());
+  if (id === "vertex")
+    return environmentPresent(env, VERTEX_ENVIRONMENT);
+  if (id === "bedrock")
+    return bedrockConfigured(env);
+  if (id === "azure-openai")
+    return azureOpenAIConfigured(env);
+  return true;
+};
 var optionalQwenRegion = (value) => {
   if (!value) {
     return;
@@ -797,6 +822,48 @@ var BUILTIN_PROVIDER_REGISTRATIONS = Object.freeze([
         ...baseURL ? { baseURL } : {}
       })(model);
     }
+  },
+  {
+    descriptor: {
+      id: "bedrock",
+      name: "Amazon Bedrock",
+      defaultModel: bundledDefaultModel("bedrock"),
+      credentialNames: ["BEDROCK_API_KEY", "AWS_BEARER_TOKEN_BEDROCK"],
+      capabilities: HARNESS_PROVIDER_CAPABILITIES,
+      support: "provisional"
+    },
+    diagnostics: {
+      endpointEnvironmentVariable: "BEDROCK_OPENAI_BASE_URL",
+      presence: [
+        { key: "region", environmentVariable: "AWS_REGION" },
+        { key: "defaultRegion", environmentVariable: "AWS_DEFAULT_REGION" },
+        { key: "profile", environmentVariable: "AWS_PROFILE" }
+      ],
+      enums: [{
+        key: "runtime",
+        environmentVariable: "BEDROCK_RUNTIME",
+        allowedValues: ["converse", "openai"]
+      }]
+    },
+    factory: ({ model, env }) => createBedrockModel(model, env)
+  },
+  {
+    descriptor: {
+      id: "azure-openai",
+      name: "Azure OpenAI",
+      defaultModel: bundledDefaultModel("azure-openai"),
+      credentialNames: ["AZURE_OPENAI_API_KEY"],
+      capabilities: HARNESS_PROVIDER_CAPABILITIES,
+      support: "provisional"
+    },
+    diagnostics: {
+      endpointEnvironmentVariable: "AZURE_OPENAI_ENDPOINT",
+      presence: [
+        { key: "apiVersion", environmentVariable: "AZURE_OPENAI_API_VERSION" },
+        { key: "deployments", environmentVariable: "AZURE_OPENAI_DEPLOYMENTS" }
+      ]
+    },
+    factory: ({ model, env }) => createAzureOpenAIModel(model, env)
   }
 ]);
 var DEFAULT_PROVIDER_REGISTRY = createProviderRegistry(BUILTIN_PROVIDER_REGISTRATIONS);
@@ -1218,7 +1285,7 @@ var resolveHarnessConfig = (input = {}, registry = DEFAULT_PROVIDER_REGISTRY) =>
 var createProviderModel = (config, env = process.env, registry = DEFAULT_PROVIDER_REGISTRY) => {
   try {
     const model = registry.createModel(config, env);
-    return registry === DEFAULT_PROVIDER_REGISTRY && ["anthropic", "openai", "gemini", "vertex", "qwen"].includes(config.provider) ? markTaskTransportModel(model) : model;
+    return registry === DEFAULT_PROVIDER_REGISTRY && ["anthropic", "openai", "gemini", "vertex", "qwen", "bedrock", "azure-openai"].includes(config.provider) ? markTaskTransportModel(model) : model;
   } catch (error) {
     throw new HarnessProviderError(`Provider ${config.provider} could not be initialized.`, {
       cause: error,

package/dist/index-4fx5f3k5.js

@@ -0,0 +1,269 @@
+// package.json
+var package_default = {
+  name: "@zhivex-ai/harness",
+  version: "1.4.1",
+  description: "Governed, provider-portable runtime for coding agents with durable approvals and isolated repository execution.",
+  type: "module",
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/Zhivex/zhivex-harness.git"
+  },
+  bugs: {
+    url: "https://github.com/Zhivex/zhivex-harness/issues"
+  },
+  homepage: "https://github.com/Zhivex/zhivex-harness#readme",
+  publishConfig: {
+    access: "public",
+    provenance: true,
+    registry: "https://registry.npmjs.org/"
+  },
+  keywords: [
+    "ai",
+    "agents",
+    "coding-agent",
+    "agent-runtime",
+    "agent-governance",
+    "change-control",
+    "policy-as-code",
+    "software-supply-chain",
+    "sandbox",
+    "durable-workflows",
+    "mcp",
+    "docker",
+    "typescript",
+    "node",
+    "bun",
+    "harness",
+    "zhivex"
+  ],
+  bin: {
+    "zhivex-harness": "./dist/cli.js",
+    zhx: "./dist/zhx.js",
+    "zhx-acp": "./dist/acp-cli.js"
+  },
+  exports: {
+    ".": {
+      types: "./dist/index.d.ts",
+      import: "./dist/index.js"
+    },
+    "./engine": {
+      types: "./dist/engine/index.d.ts",
+      import: "./dist/engine/index.js"
+    },
+    "./protocol": {
+      types: "./dist/engine/protocol.d.ts",
+      import: "./dist/engine/protocol.js"
+    },
+    "./client": {
+      types: "./dist/engine/client.d.ts",
+      import: "./dist/engine/client.js"
+    },
+    "./service": {
+      types: "./dist/engine/service.d.ts",
+      import: "./dist/engine/service.js"
+    },
+    "./acp": {
+      types: "./dist/engine/acp.d.ts",
+      import: "./dist/engine/acp.js"
+    },
+    "./code-support": {
+      types: "./dist/compat/code-support.d.ts",
+      import: "./dist/compat/code-support.js"
+    },
+    "./models": {
+      types: "./dist/engine/models.d.ts",
+      import: "./dist/engine/models.js"
+    },
+    "./desktop/v1/state": {
+      types: "./dist/engine/desktop-state-v1.d.ts",
+      import: "./dist/engine/desktop-state-v1.js"
+    },
+    "./desktop/v1/providers": {
+      types: "./dist/engine/desktop-providers-v1.d.ts",
+      import: "./dist/engine/desktop-providers-v1.js"
+    },
+    "./mcp/stdio/v1": {
+      types: "./dist/engine/mcp-stdio-v1.d.ts",
+      import: "./dist/engine/mcp-stdio-v1.js"
+    },
+    "./audit": {
+      types: "./dist/audit/index.d.ts",
+      import: "./dist/audit/index.js"
+    }
+  },
+  files: [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "SECURITY.md",
+    "SUPPORT.md",
+    "LICENSE",
+    "docs/CHANGE_ENVELOPES.md",
+    "docs/CLI.md",
+    "docs/WEB_LIMITS.md",
+    "docs/CODE_RELEASE.md",
+    "docs/CODE_WEB_TASKS.md",
+    "docs/images/cli-conversation.png",
+    "docs/CLIENT_PROTOCOL.md",
+    "docs/CONTEXT_ENGINEERING.md",
+    "docs/CREDENTIALS.md",
+    "docs/MODEL_CATALOG.md",
+    "docs/DEPRECATIONS.md",
+    "docs/DURABLE_OPERATIONS.md",
+    "docs/EXECUTION_ENVIRONMENTS.md",
+    "docs/EXTENSIBILITY.md",
+    "docs/FIRST_USE.md",
+    "docs/FIRST_USE_EXAMPLE.md",
+    "docs/HOSTILE_REPOSITORY_DEMO.md",
+    "docs/LOCAL_SERVICE.md",
+    "docs/PUBLIC_SECURITY.md",
+    "docs/README.md",
+    "docs/REPOSITORY_EDITING.md",
+    "docs/STABILITY.md",
+    "docs/SUPPORT_MATRIX.md",
+    "docs/SUPPORT_MATRIX_1_1.md",
+    "docs/THREAT_MODEL.md",
+    "docs/TIME_TO_SAFE_FIX.md",
+    "docs/USAGE.md",
+    "docs/support-matrix.json",
+    "docs/support-matrix-1.1.json",
+    "contracts",
+    "examples",
+    "fixtures",
+    "evaluations/*.json",
+    "evaluations/*.jsonl",
+    "benchmarks/README.md",
+    "docs/ACP.md",
+    "docs/WORKSPACE_CHECKPOINTS.md",
+    "docs/ENGINE_API.md",
+    "docs/ANTHROPIC.md",
+    "docs/MCP_STDIO.md",
+    "docs/adr/0002-isolated-mcp-stdio.md",
+    "docs/VERTEX.md",
+    "docs/BEDROCK.md",
+    "docs/AZURE_OPENAI.md",
+    "docs/TOOL_POLICY.md",
+    "docs/fixtures/mcp-stdio-contract-v1.json",
+    "docs/PROJECT_MEMORY.md",
+    "docs/MINIMUM_TASK_AUTHORITY.md",
+    "docs/MINIMUM_OFFLINE_EVALS.md",
+    "docs/AUDIT_PACK.md"
+  ],
+  scripts: {
+    "models:check": "bun run scripts/validate-model-catalog.ts",
+    "models:import": "bun run scripts/generate-console-models.ts",
+    dev: "bun run build && node --env-file-if-exists=.env dist/cli.js",
+    start: "node dist/cli.js",
+    build: "bun run scripts/clean-dist.ts && bun build ./src/index.ts ./src/service-cli.ts ./src/acp-cli.ts ./src/audit/index.ts ./src/engine/index.ts ./src/engine/protocol.ts ./src/engine/client.ts ./src/engine/service.ts ./src/engine/acp.ts ./src/engine/models.ts ./src/engine/desktop-state-v1.ts ./src/engine/desktop-providers-v1.ts ./src/compat/code-support.ts ./src/engine/mcp-stdio-v1.ts --root ./src --outdir ./dist --target node --packages external --splitting && bun build ./src/engine/protocol.ts ./src/engine/models.ts --outdir ./dist/engine --target browser --packages external && bun build ./src/cli-entry.ts --outdir ./dist --target node --packages external --splitting && mv ./dist/cli-entry.js ./dist/cli.js && cp ./dist/cli.js ./dist/zhx.js && bun build ./scripts/verify-historical-migrations.ts --outfile ./dist/verify-historical-migrations.js --target node --packages external && bun build ./scripts/hostile-repository-demo.ts --outfile ./dist/hostile-repository-demo.js --target node --packages external && tsc --emitDeclarationOnly",
+    prepack: "bun run build",
+    "architecture:check": "bun run scripts/check-architecture.ts",
+    "docs:check": "bun run scripts/check-docs.ts",
+    "contract:check": "bun run scripts/check-1-0-readiness.ts",
+    "contract:signatures:update": "bun run scripts/generate-stable-api-signatures.ts --write",
+    "migration:check": "bun run scripts/verify-historical-migrations.ts",
+    "readiness:1.0": "bun run scripts/check-1-0-readiness.ts",
+    "readiness:1.0:release": "bun run scripts/check-1-0-readiness.ts --release",
+    typecheck: "tsc --noEmit",
+    test: "bun test --preload ./tests/preload-bedrock-mock.ts ./tests ./desktop/tests",
+    evaluate: "bun run scripts/evaluate.ts",
+    "benchmark:workspace": "bun run scripts/benchmark-workspace.ts",
+    "benchmark:workspace:ci": "bun run scripts/benchmark-workspace.ts --files 1000 --page-size 100 --repetitions 3 --warmups 0",
+    "benchmark:oci": "bun run scripts/benchmark-oci.ts",
+    "benchmark:safe-fix": "bun run scripts/benchmark-time-to-safe-fix.ts",
+    "benchmark:safe-fix:ci": "bun run scripts/benchmark-time-to-safe-fix.ts --tasks 2 --repetitions 1 --profiles direct,governed,optimized --carriers rule_file --summary",
+    "benchmark:safe-fix:live": "bun --env-file=.env run scripts/benchmark-time-to-safe-fix.ts --driver-zhivex",
+    "benchmark:safe-fix:live:smoke": "bun --env-file=.env run scripts/benchmark-time-to-safe-fix.ts --tasks 2 --repetitions 1 --profiles direct,governed,optimized --carriers rule_file --driver-zhivex --summary",
+    "benchmark:safe-fix:live:expanded": "bun --env-file=.env run scripts/benchmark-time-to-safe-fix.ts --dataset evaluations/time-to-safe-fix-expanded.jsonl --dataset-name zhivex-time-to-safe-fix-expanded --tasks 12 --repetitions 3 --profiles direct,governed,optimized --carriers rule_file --driver-zhivex --driver-timeout-ms 300000 --summary",
+    "benchmark:safe-fix:baseline": "bun run scripts/create-time-to-safe-fix-baseline.ts",
+    "benchmark:safe-fix:image:check": "bun run scripts/build-time-to-safe-fix-image.ts --validate-only",
+    "benchmark:safe-fix:image:build": "bun run scripts/build-time-to-safe-fix-image.ts",
+    "smoke:package": "bun run build && bun run scripts/package-smoke.ts",
+    "smoke:artifact": "bun run scripts/package-smoke.ts",
+    "smoke:mcp": "bun run scripts/mcp-interoperability-smoke.ts",
+    "smoke:mcp:official": "bun run scripts/mcp-official-sdk-smoke.ts",
+    "smoke:oci": "bun run scripts/oci-execution-smoke.ts",
+    "smoke:live": "bun --env-file=.env run scripts/live-provider-smoke.ts",
+    "smoke:live:orchestration": "bun --env-file=.env run scripts/live-orchestration-smoke.ts",
+    "smoke:live:routing": "bun --env-file=.env run scripts/live-routing-smoke.ts",
+    "smoke:live:execution": "bun --env-file=.env run scripts/live-execution-smoke.ts",
+    "demo:hostile": "bun run dist/hostile-repository-demo.js",
+    "artifact:check": "bun run scripts/check-release-artifact.ts",
+    "pack:inspect": "bun run build && bun pm pack --dry-run --ignore-scripts",
+    check: "bun run architecture:check && bun run docs:check && bun run contract:check && bun run typecheck && bun run typecheck:tooling && bun run test && bun run migration:check && bun run evaluate && bun run benchmark:workspace:ci && bun run benchmark:safe-fix:image:check && bun run benchmark:safe-fix:ci && bun run smoke:mcp && bun run smoke:mcp:official && bun run smoke:oci && bun run smoke:package",
+    "check:sdk-redaction": "bun run scripts/diagnostics/reproduce-redaction-state-divergence.ts --require-fixed",
+    "release:check": "bun run release:preflight && bun run check:sdk-redaction && bun run check && bun run scripts/audit-dependencies.ts && bun pm untrusted && bun run pack:inspect && bun run scripts/check-release-readiness.ts",
+    "release:status": "bun run scripts/check-registry-release-status.ts",
+    "release:verify": "bun run scripts/verify-registry-release.ts",
+    "benchmark:workspace:scale": "bun run scripts/benchmark-workspace.ts --files 10000 --directories 100 --file-bytes 4096 --page-size 100 --repetitions 5 --warmups 1",
+    "evaluate:continuity": "bun test tests/compaction.test.ts tests/harness.test.ts",
+    "benchmark:swebench": "bun run scripts/benchmark-swebench.ts",
+    "benchmark:swebench:test": "bun test tests/swebench.test.ts",
+    "typecheck:tooling": "tsc -p tsconfig.tooling.json",
+    service: "node dist/service-cli.js",
+    "smoke:console": "bun run build && python3 scripts/console-pty-smoke.py && python3 scripts/console-entry-smoke.py",
+    "smoke:credentials": "node --experimental-strip-types scripts/credential-store-smoke.ts",
+    "release:preflight": "bun run scripts/release-preflight.ts",
+    "release:prepare": "bun run scripts/prepare-release.ts",
+    "build:code": "bun run --cwd packages/code build",
+    "test:code": "bun run --cwd packages/code test",
+    "smoke:engine-code": "bun run scripts/smoke-engine-code.ts",
+    "smoke:state-upgrade": "bun run scripts/smoke-state-upgrade.ts",
+    "smoke:global-code": "node scripts/smoke-global-code.mjs",
+    "dev:code": "bun run build && bun run packages/code/scripts/link-local-engine.ts && bun run build:code",
+    "typecheck:code": "bun run --cwd packages/code typecheck",
+    "evaluate:tasks": "bun run scripts/task-acceptance.ts",
+    "prepare:desktop": "bun run build && bun pm pack --ignore-scripts --quiet --filename desktop/.harness-candidate.tgz && bun run desktop/scripts/prepare-harness.ts desktop/.harness-candidate.tgz",
+    "smoke:mcp:installed": "bun run build && bun scripts/mcp-installed-smoke.ts"
+  },
+  dependencies: {
+    "@zhivex-ai/agents": "1.11.0",
+    "@zhivex-ai/anthropic": "0.14.0",
+    "@zhivex-ai/azure-openai": "0.7.8",
+    "@zhivex-ai/bedrock": "2.0.7",
+    "@zhivex-ai/core": "1.34.0",
+    "@zhivex-ai/gemini": "0.13.0",
+    "@zhivex-ai/meta": "0.2.9",
+    "@zhivex-ai/openai": "0.16.0",
+    "@zhivex-ai/qwen": "0.16.4",
+    "@zhivex-ai/vertex": "1.2.7",
+    "google-auth-library": "11.1.0",
+    zod: "4.6.5"
+  },
+  overrides: {
+    "@zhivex-ai/core": "1.34.0"
+  },
+  devDependencies: {
+    "@agentclientprotocol/sdk": "1.8.0",
+    "@modelcontextprotocol/server": "2.3.1",
+    "@types/bun": "1.4.2",
+    "@types/node": "^26.6.5",
+    typescript: "7.0.2",
+    "typescript-compiler-api": "npm:typescript@6.0.3"
+  },
+  engines: {
+    node: ">=22.13.0",
+    bun: ">=1.4.0"
+  },
+  packageManager: "bun@1.4.0",
+  optionalDependencies: {
+    "@napi-rs/keyring": "2.1.1"
+  }
+};
+
+// src/version.ts
+var packageMetadata = package_default;
+if (typeof packageMetadata.version !== "string" || packageMetadata.version.length === 0) {
+  throw new Error("package.json must contain a non-empty version.");
+}
+if (typeof packageMetadata.engines?.node !== "string" || packageMetadata.engines.node.length === 0) {
+  throw new Error("package.json must contain a non-empty engines.node requirement.");
+}
+if (typeof packageMetadata.engines?.bun !== "string" || packageMetadata.engines.bun.length === 0) {
+  throw new Error("package.json must contain a non-empty engines.bun requirement.");
+}
+var HARNESS_VERSION = packageMetadata.version;
+var NODE_ENGINE_RANGE = packageMetadata.engines.node;
+var BUN_ENGINE_RANGE = packageMetadata.engines.bun;
+
+export { HARNESS_VERSION, NODE_ENGINE_RANGE, BUN_ENGINE_RANGE };

package/dist/{index-nmjdwd4p.js → index-4gt045j0.js}

@@ -160,6 +160,24 @@ var harnessClientCommandSchema = z.discriminatedUnion("method", [
   z.object({ method: z.literal("restore.apply"), ...restore, ...mutation, expectedRevision: revision, reviewedProposalId: fileDigest }).strict(),
   z.object({ method: z.literal("restore.recoverFork"), ...restore, ...mutation, expectedRevision: revision, forkSessionId: id }).strict(),
   z.object({ method: z.literal("run.start"), ...session, ...mutation, expectedRevision: revision, prompt: z.string().min(1).max(64 * 1024) }).strict(),
+  z.object({
+    method: z.literal("task.start"),
+    ...session,
+    ...mutation,
+    expectedRevision: revision,
+    brief: z.strictObject({
+      goal: z.string().trim().min(1).max(2000),
+      paths: z.array(z.string().min(1).max(1024)).min(1).max(20),
+      checks: z.array(id).min(1).max(8),
+      constraints: z.array(z.string().trim().min(1).max(500)).max(8),
+      budget: z.strictObject({ inputTokens: z.number().int().positive().safe(), outputTokens: z.number().int().positive().safe(), totalTokens: z.number().int().positive().safe() })
+    })
+  }).strict(),
+  z.object({ method: z.literal("task.review"), ...run }).strict(),
+  z.object({ method: z.literal("task.keep"), ...run, ...mutation, reviewId: z.string().uuid() }).strict(),
+  z.object({ method: z.literal("task.revise"), ...run, ...mutation, reviewId: z.string().uuid(), correction: z.string().trim().min(1).max(500) }).strict(),
+  z.object({ method: z.literal("task.continue"), ...run, ...mutation, reviewId: z.string().uuid(), prompt: z.string().trim().min(1).max(2000) }).strict(),
+  z.object({ method: z.literal("task.get"), ...run, projectionVersion: z.number().int().nonnegative().safe() }).strict(),
   z.object({ method: z.literal("run.get"), ...run, includeReview: z.boolean().optional(), includeDiff: z.boolean().optional(), decisionOffset: z.number().int().min(0).max(512).optional() }).strict(),
   z.object({
     method: z.literal("approval.resolve"),
@@ -177,4 +195,94 @@ var harnessClientRequestSchema = z.object({
   command: harnessClientCommandSchema
 }).strict();
 
-export { CLI_JSON_SCHEMA_VERSION, CLI_EVENT_SCHEMA_VERSION, streamEventDocument, serializeStreamEvent, streamResultDocument, serializeStreamResult, HARNESS_CLIENT_PROTOCOL_VERSION, harnessClientCommandSchema, harnessClientRequestSchema };
+// src/client/task-projection.ts
+import { z as z2 } from "zod";
+var HARNESS_TASK_PROJECTION_VERSION = 1;
+var id2 = z2.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/);
+var count = z2.number().int().nonnegative().safe();
+var digest = z2.string().regex(/^sha256:[a-f0-9]{64}$/);
+var text = z2.string().max(2048);
+var tokens = z2.strictObject({ inputTokens: count, outputTokens: count, totalTokens: count });
+var harnessTaskProjectionSchema = z2.strictObject({
+  schemaVersion: z2.literal(1),
+  connectionId: id2,
+  sequence: count,
+  projectId: id2,
+  sessionId: id2,
+  runId: id2,
+  task: z2.strictObject({
+    reference: digest,
+    contractRevision: count,
+    contractDigest: digest,
+    runRevision: count,
+    objective: text.nullable(),
+    objectiveSource: z2.enum(["operator_brief", "retained_operator_source", "unavailable"]),
+    observedRunId: id2,
+    historicalRequest: z2.boolean(),
+    execution: z2.enum(["created", "queued", "running", "waiting_approval", "cancel_requested", "completed", "failed", "cancelled", "timed_out", "unknown"]),
+    artifact: z2.strictObject({
+      observedDigest: digest.nullable(),
+      deliveredDigest: digest.nullable(),
+      correspondence: z2.enum(["current", "stale", "missing"]),
+      paths: z2.array(text).max(256),
+      contents: z2.literal("not_included")
+    }),
+    review: z2.strictObject({
+      structure: z2.enum(["verified", "incomplete"]),
+      semantic: z2.literal("pending"),
+      acceptance: z2.literal("not_recorded"),
+      human: z2.array(z2.strictObject({ id: text, requirement: text, status: z2.literal("pending") })).max(32),
+      checks: z2.array(z2.strictObject({ id: text, status: z2.enum(["confirmed", "missing", "missing_or_stale", "host_policy_changed"]), provenance: z2.literal("contract_snapshot_and_tool_journal") })).max(32)
+    }),
+    budget: z2.strictObject({
+      availability: z2.enum(["authoritative", "legacy_not_enabled"]),
+      revision: count.nullable(),
+      confirmed: tokens.nullable(),
+      reserved: tokens.nullable(),
+      unknown: tokens.nullable(),
+      remaining: tokens.nullable(),
+      limits: tokens.nullable(),
+      estimated: z2.null(),
+      estimation: z2.literal("not_separately_recorded"),
+      usageComplete: z2.boolean().nullable(),
+      admissionsClosed: z2.boolean().nullable(),
+      monetary: z2.strictObject({ estimatedConfirmedUsd: z2.number().finite().nonnegative().nullable(), reservedUsd: z2.number().finite().nonnegative().nullable(), unknownHeldUsd: z2.number().finite().nonnegative().nullable(), remainingUsd: z2.number().finite().nonnegative().nullable(), unknown: z2.boolean(), costKind: z2.literal("estimate-not-invoice") })
+    }),
+    effects: z2.strictObject({ readOnly: count, recorded: count, unknown: count, missingEvidence: z2.boolean(), automaticReplay: z2.literal(false), providerStopped: z2.literal("unconfirmed") }),
+    nextAction: z2.strictObject({
+      kind: z2.enum(["wait", "reconcile", "review_approval", "review_delivery", "explicit_continuation"]),
+      permitted: z2.literal("read_only"),
+      authorization: z2.literal("required_for_execution"),
+      preserves: z2.literal("contract_receipts_budget_and_effects"),
+      automaticReplay: z2.literal(false)
+    }),
+    diagnostic: z2.strictObject({ code: z2.enum(["EXECUTION_FAILED", "EXECUTION_CANCELLED", "EXECUTION_TIMED_OUT", "EVIDENCE_INCOMPLETE"]), cause: z2.enum(["execution_terminal_failure", "operator_or_runtime_cancellation", "execution_deadline", "receipts_missing_or_stale"]), impact: z2.literal("acceptance_not_established"), safeAction: z2.enum(["review_configuration", "reconcile", "review_delivery"]) }).nullable(),
+    reasons: z2.array(z2.string().regex(/^[A-Z][A-Z0-9_]{0,95}$/)).max(32),
+    provenance: z2.literal("host_durable_contract_journal_budget_and_fresh_native_snapshot"),
+    textTruncated: z2.boolean()
+  })
+});
+function reduceHarnessTaskProjection(current, incoming, expected) {
+  const inScope = (value) => ["connectionId", "projectId", "sessionId", "runId"].every((key) => value[key] === expected[key]);
+  const previous = harnessTaskProjectionSchema.safeParse(current);
+  const retained = previous.success && inScope(previous.data) ? previous.data : null;
+  let encoded;
+  try {
+    encoded = JSON.stringify(incoming);
+  } catch {
+    return { status: "refresh_required", snapshot: retained };
+  }
+  if (new TextEncoder().encode(encoded).length > 64 * 1024)
+    return { status: "refresh_required", snapshot: retained };
+  const parsed = harnessTaskProjectionSchema.safeParse(incoming);
+  if (!parsed.success || !inScope(parsed.data))
+    return { status: "refresh_required", snapshot: retained };
+  if (retained && parsed.data.sequence <= retained.sequence) {
+    if (parsed.data.sequence === retained.sequence && JSON.stringify(parsed.data) !== JSON.stringify(retained))
+      return { status: "refresh_required", snapshot: retained };
+    return { status: "ignored", snapshot: retained };
+  }
+  return { status: "applied", snapshot: parsed.data };
+}
+
+export { CLI_JSON_SCHEMA_VERSION, CLI_EVENT_SCHEMA_VERSION, streamEventDocument, serializeStreamEvent, streamResultDocument, serializeStreamResult, HARNESS_CLIENT_PROTOCOL_VERSION, harnessClientCommandSchema, harnessClientRequestSchema, HARNESS_TASK_PROJECTION_VERSION, harnessTaskProjectionSchema, reduceHarnessTaskProjection };

package/dist/{index-6dft2vev.js → index-6599mpmy.js}

@@ -1,15 +1,17 @@
+import {
+  withWorkspaceMutation
+} from "./index-d9zkmhz3.js";
 import {
   TERMINAL_SESSION_RUN_STATUSES
-} from "./index-s2k2edts.js";
+} from "./index-zxg4ve4j.js";
 import {
   SqliteDatabase,
   createEditProposal,
   fileDigestSchema,
   readRegularFileNoFollow,
   statRegularFileNoFollow,
-  withWorkspaceMutation,
   workspaceFilePathSchema
-} from "./index-m34q25jj.js";
+} from "./index-xdbkcccf.js";
 
 // src/persistence/workspace-checkpoints.ts
 import { createHash, randomUUID } from "node:crypto";

package/dist/{index-tfzta544.js → index-74kkpyqk.js}

@@ -1,23 +1,25 @@
 import {
   workspaceCheckpointSchema,
   workspaceRestoreOperationSchema
-} from "./index-6dft2vev.js";
+} from "./index-6599mpmy.js";
 import {
   HARNESS_OPERATIONS_SCHEMA_VERSION,
-  HARNESS_SESSION_SCHEMA_VERSION,
   HARNESS_SQLITE_FILE,
-  assertTaskBudgetBackupLinks,
   decodeProjectMemory,
-  openCliSessionStore,
   openHarnessPersistence,
   projectMemoryRecordKey,
-  sqliteAdapter,
+  sqliteAdapter
+} from "./index-f6mqa5gk.js";
+import {
+  HARNESS_SESSION_SCHEMA_VERSION,
+  assertTaskBudgetBackupLinks,
+  openCliSessionStore,
   validateStateDirectory
-} from "./index-s2k2edts.js";
+} from "./index-zxg4ve4j.js";
 import {
   SqliteDatabase,
   readRegularFileChunksNoFollow
-} from "./index-m34q25jj.js";
+} from "./index-xdbkcccf.js";
 import {
   HarnessStateConflictError,
   HarnessWorkspaceError

package/dist/{index-61gthdz6.js → index-8sm2a1wa.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_PROVIDER_REGISTRY,
   HARNESS_SUBAGENT_PROFILES
-} from "./index-8zjmnyw5.js";
+} from "./index-1265j7t2.js";
 
 // src/providers/routing.ts
 var routeError = (value) => new Error(`Invalid route: ${value}. Use <profile>=<provider>[:<model>].`);