@zhivex-ai/harness 1.4.1 → 1.5.0

package/dist/{index-zxg4ve4j.js → index-fqqz1yt8.js}

@@ -5,7 +5,7 @@ import {
   taskAcceptanceOutcome,
   taskCheckReceiptSchema,
   workspaceFilePathSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 import {
   HarnessConfigError,
   HarnessStateConflictError,
@@ -1604,6 +1604,79 @@ function taskAcceptanceCheckpointStore(store, runId, ledger) {
 import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { z as z7 } from "zod";
+
+// src/runtime/budget-ledger-scope.ts
+var BUDGET_LEDGER_NAMESPACE = "__zhivex_budget__";
+var BUDGET_OWNER_NAMESPACE_KEY = "budgetOwnerNamespace";
+var isReservedBudgetNamespace = (namespace) => namespace === BUDGET_LEDGER_NAMESPACE || (namespace?.startsWith(`${BUDGET_LEDGER_NAMESPACE}:`) ?? false);
+var budgetLedgerNamespace = (namespace) => {
+  if (!namespace || isReservedBudgetNamespace(namespace)) {
+    throw new HarnessStateConflictError("The budget ledger namespace is reserved.");
+  }
+  return `${BUDGET_LEDGER_NAMESPACE}:${namespace}`;
+};
+var budgetLedgerScope = (scope) => {
+  if (scope.namespace && isReservedBudgetNamespace(scope.namespace)) {
+    throw new HarnessStateConflictError("The budget ledger namespace is reserved.");
+  }
+  return {
+    tenantId: scope.tenantId,
+    ...scope.userId ? { userId: scope.userId } : {},
+    namespace: scope.namespace ? budgetLedgerNamespace(scope.namespace) : `${BUDGET_LEDGER_NAMESPACE}:`
+  };
+};
+var sameIdentity = (left, right) => left?.tenantId === right.tenantId && (left.userId ?? undefined) === (right.userId ?? undefined);
+var bindBudgetLedgerStore = (primary, scope, budget = primary) => {
+  const bound = budgetLedgerScope(scope);
+  const ownerNamespace = scope.namespace ?? "";
+  const isSdkBudget = (value) => sameIdentity(value, bound) && value?.namespace === BUDGET_LEDGER_NAMESPACE;
+  const isBoundBudget = (value) => sameIdentity(value, bound) && value?.namespace === bound.namespace;
+  const assertId = (id) => {
+    if (!/^budget_[a-f0-9]{64}$/.test(id))
+      throw new HarnessStateConflictError("Invalid budget ledger identity.");
+  };
+  const bindState = (state) => {
+    const metadata = { ...state.metadata ?? {} };
+    const owner = metadata[BUDGET_OWNER_NAMESPACE_KEY];
+    if (owner !== undefined && owner !== ownerNamespace) {
+      throw new HarnessStateConflictError("Budget ledger is bound to another namespace.");
+    }
+    return {
+      ...state,
+      scope: bound,
+      metadata: { ...metadata, [BUDGET_OWNER_NAMESPACE_KEY]: ownerNamespace }
+    };
+  };
+  const assertStored = (state) => {
+    if (!state)
+      return state;
+    const owner = state.metadata?.[BUDGET_OWNER_NAMESPACE_KEY];
+    if (state.scope?.namespace !== bound.namespace || owner !== ownerNamespace) {
+      throw new HarnessStateConflictError("Budget ledger is not bound to this namespace.");
+    }
+    return state;
+  };
+  return {
+    ...primary,
+    load: async (id, requestedScope) => {
+      if (!isSdkBudget(requestedScope) && !isBoundBudget(requestedScope))
+        return primary.load(id, requestedScope);
+      assertId(id);
+      return assertStored(await budget.load(id, bound));
+    },
+    save: async (state, options) => {
+      if (!isSdkBudget(state.scope) && !isBoundBudget(state.scope))
+        return primary.save(state, options);
+      assertId(state.runId);
+      if (state.provider !== "zhivex" || state.modelId !== "budget-coordinator" || state.metadata?.budgetCoordinator !== true) {
+        throw new HarnessStateConflictError("Only SDK budget ledger states may use the reserved namespace.");
+      }
+      return budget.save(bindState(state), options);
+    }
+  };
+};
+
+// src/runtime/task-budget.ts
 import {
   createAgentBudgetCoordinator,
   fingerprintAgentHarness as fingerprintAgentHarness2,
@@ -1751,10 +1824,10 @@ class TaskBudget {
     this.accountRunId = TaskBudget.accountId(scope, taskId);
     this.policy = structuredClone(account.policy);
     const budgetId = this.accountRunId;
-    this.coordinator = createAgentBudgetCoordinator({ store, scope, budgetId, limits: this.policy.limits });
+    this.coordinator = createAgentBudgetCoordinator({ store: bindBudgetLedgerStore(store, scope), scope, budgetId, limits: this.policy.limits });
     this.coordinatorId = this.coordinator.id;
     this.budgetRunId = `budget_${fingerprintAgentHarness2({ budgetId, scope }).slice("sha256:".length)}`;
-    this.budgetScope = { tenantId: scope.tenantId, ...scope.userId ? { userId: scope.userId } : {}, namespace: "__zhivex_budget__" };
+    this.budgetScope = budgetLedgerScope(scope);
   }
   static accountId(scope, taskId) {
     return `task_budget_${fingerprintAgentHarness2({ scope, taskId }).slice("sha256:".length)}`;
@@ -2268,4 +2341,4 @@ class TaskBudget {
   }
 }
 
-export { protectStateFromGit, validateStateDirectory, HARNESS_SESSION_INDEX_FILE, HARNESS_SESSION_SCHEMA_VERSION, SESSION_RUN_STATUSES, TERMINAL_SESSION_RUN_STATUSES, ensurePrivateDatabase, openCliSessionStore, openSessionStore, withRuntimeInstruction, withFreshSystemInstructions, inspectRuntimeDiagnostics, inspectRuntimeManifest, estimateContextTokens, measureContext, MODEL_BUDGET_KEY, estimateRequestTokens, workBudgetReached, createModelBudget, USAGE_LEDGER_KEY, usagePricingSchema, inspectUsageLedger, formatUsageLedger, runUsageLedgerWithPolicy, UsageLedger, inspectTaskMonetaryUsage, taskAcceptanceContractSchema, compileTaskAcceptanceContract, TASK_ACCEPTANCE_KEY, TASK_ACCEPTANCE_EVIDENCE_KEY, readTaskAcceptanceLedger, nextTaskAcceptanceLedger, persistTaskAcceptanceRevision, taskAcceptanceCheckpointStore, TASK_BUDGET_KEY, TASK_BUDGET_ACCOUNT_KEY, inspectTaskBudgetSummary, assertTaskBudgetBackupLinks, TaskBudget };
+export { protectStateFromGit, validateStateDirectory, HARNESS_SESSION_INDEX_FILE, HARNESS_SESSION_SCHEMA_VERSION, SESSION_RUN_STATUSES, TERMINAL_SESSION_RUN_STATUSES, ensurePrivateDatabase, openCliSessionStore, openSessionStore, withRuntimeInstruction, withFreshSystemInstructions, inspectRuntimeDiagnostics, inspectRuntimeManifest, estimateContextTokens, measureContext, MODEL_BUDGET_KEY, estimateRequestTokens, workBudgetReached, createModelBudget, USAGE_LEDGER_KEY, usagePricingSchema, inspectUsageLedger, formatUsageLedger, runUsageLedgerWithPolicy, UsageLedger, inspectTaskMonetaryUsage, taskAcceptanceContractSchema, compileTaskAcceptanceContract, TASK_ACCEPTANCE_KEY, TASK_ACCEPTANCE_EVIDENCE_KEY, readTaskAcceptanceLedger, nextTaskAcceptanceLedger, persistTaskAcceptanceRevision, taskAcceptanceCheckpointStore, BUDGET_LEDGER_NAMESPACE, BUDGET_OWNER_NAMESPACE_KEY, isReservedBudgetNamespace, budgetLedgerNamespace, budgetLedgerScope, bindBudgetLedgerStore, TASK_BUDGET_KEY, TASK_BUDGET_ACCOUNT_KEY, inspectTaskBudgetSummary, assertTaskBudgetBackupLinks, TaskBudget };

package/dist/{index-d9zkmhz3.js → index-ggstwr0v.js}

@@ -20,7 +20,7 @@ import {
   taskAcceptanceChecks,
   validateEditProposal,
   workspaceFilePathSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 import {
   HarnessError,
   HarnessExecutionError,
@@ -406,10 +406,10 @@ import path3 from "node:path";
 // src/workspace/path-policy.ts
 var HARD_IGNORES = new Set([".git", ".next", ".turbo", ".zhivex-harness", "coverage", "dist", "node_modules"]);
 var isSensitiveName = (name) => {
-  const normalized = name.toLocaleLowerCase();
+  const normalized = name.toLowerCase();
   return normalized === ".env" || normalized.startsWith(".env.") && normalized !== ".env.example" || normalized === ".npmrc" || normalized === "id_rsa" || normalized === "id_ed25519" || [".key", ".pem", ".p12", ".pfx"].some((extension) => normalized.endsWith(extension));
 };
-var isHardIgnored = (relativePath) => relativePath.split("/").some((segment) => HARD_IGNORES.has(segment.toLocaleLowerCase()) || isSensitiveName(segment));
+var isHardIgnored = (relativePath) => relativePath.split("/").some((segment) => HARD_IGNORES.has(segment.toLowerCase()) || isSensitiveName(segment));
 
 // src/workspace/workspace.ts
 var IGNORE_FILES = [".gitignore", ".zhivex-harnessignore"];
@@ -689,7 +689,7 @@ class Workspace {
       throw new HarnessWorkspaceError(`The path escapes the workspace: ${relativePath}`);
     const relative = wirePath(path3.relative(this.root, candidate));
     if (relative && isHardIgnored(relative)) {
-      const blocked = relative.split("/").find((segment) => HARD_IGNORES.has(segment.toLocaleLowerCase()) || isSensitiveName(segment));
+      const blocked = relative.split("/").find((segment) => HARD_IGNORES.has(segment.toLowerCase()) || isSensitiveName(segment));
       throw new HarnessWorkspaceError(`The path is protected by the harness policy: ${blocked}`);
     }
     return candidate;
@@ -1672,30 +1672,65 @@ class Workspace {
     const audit = await this.audit({ operation: "quarantine", path: parsed.path, beforeDigest: source.digest, quarantineId });
     return { quarantineId, path: parsed.path, digest: source.digest, audit };
   }
-  async restoreQuarantined(input) {
-    return withWorkspaceMutation(this.root, () => this.restoreQuarantinedLocked(input));
-  }
-  async restoreQuarantinedLocked(input) {
-    const parsed = restoreFileInputSchema.parse(input);
-    this.checkAuditCapacity();
+  async readRestorableQuarantine(quarantineId) {
     const directory = await this.secureQuarantineDirectory(false);
     let manifest;
     try {
-      const manifestFile = await this.readInternalRegularFile(path3.join(directory, `${parsed.quarantineId}.json`), "Quarantine manifest", 64 * 1024);
+      const manifestFile = await this.readInternalRegularFile(path3.join(directory, `${quarantineId}.json`), "Quarantine manifest", 64 * 1024);
       manifest = JSON.parse(manifestFile.contents.toString("utf8"));
     } catch {
-      throw new HarnessWorkspaceError(`Quarantine entry was not found: ${parsed.quarantineId}.`);
+      throw new HarnessWorkspaceError(`Quarantine entry was not found: ${quarantineId}.`);
     }
-    if (manifest.schemaVersion !== 1 || manifest.quarantineId !== parsed.quarantineId || manifest.status !== "quarantined") {
-      throw new HarnessWorkspaceError(`Quarantine entry is not restorable: ${parsed.quarantineId}.`);
+    if (manifest.schemaVersion !== 1 || manifest.quarantineId !== quarantineId || manifest.status !== "quarantined") {
+      throw new HarnessWorkspaceError(`Quarantine entry is not restorable: ${quarantineId}.`);
     }
-    const dataPath = path3.join(directory, `${parsed.quarantineId}.data`);
+    const dataPath = path3.join(directory, `${quarantineId}.data`);
     const dataFile = await this.readInternalRegularFile(dataPath, "Quarantine payload", MAX_FILE_BYTES);
     const digest = digestBytes(dataFile.contents);
-    if (digest !== manifest.digest || parsed.expectedDigest && parsed.expectedDigest !== digest) {
+    if (digest !== manifest.digest) {
+      throw new HarnessWorkspaceError(`Quarantine digest mismatch: ${quarantineId}.`);
+    }
+    return { manifest, dataPath, dataFile, digest };
+  }
+  async previewRestore(input) {
+    const parsed = restoreFileInputSchema.parse(input);
+    const quarantined = await this.readRestorableQuarantine(parsed.quarantineId);
+    if (parsed.expectedDigest !== quarantined.digest) {
+      throw new HarnessWorkspaceError(`Quarantine digest mismatch: ${parsed.quarantineId}.`);
+    }
+    const destination = await this.safePath(parsed.destination, { allowMissing: true });
+    if (destination.exists)
+      throw new HarnessWorkspaceError(`Restore destination already exists: ${parsed.destination}.`);
+    let after;
+    try {
+      after = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(quarantined.dataFile.contents);
+    } catch {
+      throw new HarnessWorkspaceError("Preview requires valid UTF-8 text.");
+    }
+    return {
+      proposalId: parsed.expectedDigest,
+      files: [{
+        path: parsed.destination,
+        expectedDigest: parsed.expectedDigest,
+        before: null,
+        after,
+        afterDigest: quarantined.digest,
+        operation: "restore"
+      }]
+    };
+  }
+  async restoreQuarantined(input) {
+    return withWorkspaceMutation(this.root, () => this.restoreQuarantinedLocked(input));
+  }
+  async restoreQuarantinedLocked(input) {
+    const parsed = restoreFileInputSchema.parse(input);
+    this.checkAuditCapacity();
+    const quarantined = await this.readRestorableQuarantine(parsed.quarantineId);
+    if (parsed.expectedDigest !== quarantined.digest) {
       throw new HarnessWorkspaceError(`Quarantine digest mismatch: ${parsed.quarantineId}.`);
     }
-    const destinationPath = parsed.destination ?? manifest.originalPath;
+    const { manifest, dataPath, dataFile, digest } = quarantined;
+    const destinationPath = parsed.destination;
     const destination = await this.safePath(destinationPath, { allowMissing: true });
     if (destination.exists)
       throw new HarnessWorkspaceError(`Restore destination already exists: ${destinationPath}.`);
@@ -2998,7 +3033,7 @@ var importPatch = async (runId, expectedPatchId, host, base, current, maxFileWri
     const rollbackErrors = [];
     for (const item of [...quarantined].reverse()) {
       try {
-        await host.restoreQuarantined({ quarantineId: item.quarantineId, expectedDigest: item.digest });
+        await host.restoreQuarantined({ quarantineId: item.quarantineId, destination: item.path, expectedDigest: item.digest });
       } catch (rollbackError) {
         rollbackErrors.push(rollbackError);
       }

package/dist/{index-j6zxnc8m.js → index-jpdvn09j.js}

@@ -1,25 +1,25 @@
 import {
   changeEnvelopeSchema,
   verifyChangeEnvelope
-} from "./index-sstgcsr0.js";
+} from "./index-yx52bt4a.js";
 import {
   APPROVAL_HISTORY_KEY,
   approvalDecisionViews,
   harnessPolicyDecisionEventSchema
-} from "./index-wm9xeq1n.js";
+} from "./index-bt2p8x7r.js";
 import {
   TASK_ACCEPTANCE_EVIDENCE_KEY,
   USAGE_LEDGER_KEY,
   inspectRuntimeManifest,
   inspectUsageLedger,
   readTaskAcceptanceLedger
-} from "./index-zxg4ve4j.js";
+} from "./index-fqqz1yt8.js";
 import {
   HARNESS_VERSION
-} from "./index-4fx5f3k5.js";
+} from "./index-pq3kz1r8.js";
 import {
   taskCheckReceiptSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 
 // src/persistence/governance-report.ts
 import { createHash as createHash2 } from "node:crypto";

package/dist/{index-4fx5f3k5.js → index-pq3kz1r8.js}

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "@zhivex-ai/harness",
-  version: "1.4.1",
+  version: "1.5.0",
   description: "Governed, provider-portable runtime for coding agents with durable approvals and isolated repository execution.",
   type: "module",
   license: "MIT",

package/dist/{index-02pqtbbg.js → index-vc7yxz50.js}

@@ -1,6 +1,6 @@
 import {
   openWorkspaceCheckpointStore
-} from "./index-6599mpmy.js";
+} from "./index-63gbp0cz.js";
 import {
   appendUserMessage,
   checkEvidence,
@@ -16,17 +16,17 @@ import {
   reviseHarnessTaskAcceptance,
   runHarness,
   runHarnessTask
-} from "./index-0zs2dz26.js";
+} from "./index-6fp7kdpx.js";
 import {
   ASSISTANT_RESPONSE_KEY,
   TASK_SOURCE_KEY,
   assistantResponses,
   cancelHarnessRun,
   captureTaskSources
-} from "./index-f6mqa5gk.js";
+} from "./index-wwthv10a.js";
 import {
   resolvePackageCheckCommand
-} from "./index-d9zkmhz3.js";
+} from "./index-ggstwr0v.js";
 import {
   APPROVAL_HISTORY_KEY,
   approvalDecisionViews,
@@ -35,7 +35,7 @@ import {
   inspectHarnessPolicy,
   observeHarnessPolicyDecisions,
   readApprovalDecisions
-} from "./index-wm9xeq1n.js";
+} from "./index-bt2p8x7r.js";
 import {
   SESSION_RUN_STATUSES,
   TASK_ACCEPTANCE_KEY,
@@ -48,12 +48,12 @@ import {
   nextTaskAcceptanceLedger,
   openCliSessionStore,
   readTaskAcceptanceLedger
-} from "./index-zxg4ve4j.js";
+} from "./index-fqqz1yt8.js";
 import {
   createEditProposal,
   editProposalInputSchema,
   fileDigestSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 import {
   CLI_JSON_SCHEMA_VERSION,
   harnessClientRequestSchema,
@@ -476,7 +476,7 @@ import { createHash as createHash3 } from "node:crypto";
 import { z } from "zod";
 var APPROVAL_DIFFS_KEY = "clientApprovalDiffsV1";
 var sha2 = z.string().regex(/^sha256:[a-f0-9]{64}$/);
-var file = z.object({ path: z.string().max(1024), expectedDigest: sha2.nullable(), before: z.string().nullable(), after: z.string().nullable(), afterDigest: sha2.nullable(), beforeMode: z.number().int().optional(), afterMode: z.number().int().optional(), operation: z.enum(["create", "update", "delete"]).optional() }).strict();
+var file = z.object({ path: z.string().max(1024), expectedDigest: sha2.nullable(), before: z.string().nullable(), after: z.string().nullable(), afterDigest: sha2.nullable(), beforeMode: z.number().int().optional(), afterMode: z.number().int().optional(), operation: z.enum(["create", "update", "delete", "restore"]).optional() }).strict();
 var archive = z.object({ approvalId: z.string().max(256), digest: z.string().regex(/^[a-f0-9]{64}$/), proposalId: sha2, files: z.array(file).min(1).max(50) }).strict();
 var archives = z.array(archive).max(512);
 var maxBytes = 2 * 1024 * 1024;
@@ -534,14 +534,14 @@ async function attachApprovalPreviews(run, workspace, options = {}) {
   let remaining = 256 * 1024;
   for (const approval of run.approvals) {
     const action = approval.action;
-    if (!action || !["apply_patch", "apply_reviewed_edits", "apply_reviewed_replacement", "apply_environment_patch", "verify_and_apply_environment_patch", "verify_and_apply_reviewed_edits"].includes(String(action.name)))
+    if (!action || !["apply_patch", "apply_reviewed_edits", "apply_reviewed_replacement", "apply_environment_patch", "verify_and_apply_environment_patch", "verify_and_apply_reviewed_edits", "restore_file"].includes(String(action.name)))
       continue;
     approval.filePreview = { status: "unavailable" };
     try {
       if (typeof action.arguments !== "string" || Buffer.byteLength(action.arguments) > 256 * 1024)
         continue;
       const args = JSON.parse(action.arguments);
-      const preview = action.name === "apply_environment_patch" || action.name === "verify_and_apply_environment_patch" ? await (async () => {
+      const preview = action.name === "restore_file" ? await workspace.previewRestore(args) : action.name === "apply_environment_patch" || action.name === "verify_and_apply_environment_patch" ? await (async () => {
         if (!options.environment)
           throw new Error("OCI_REVIEW_UNAVAILABLE");
         const patchId = fileDigestSchema.parse(args?.patchId);

package/dist/{index-crta5wzv.js → index-vvzc5ezz.js}

@@ -1,15 +1,15 @@
 import {
   createHarnessClientAdapter
-} from "./index-02pqtbbg.js";
+} from "./index-vc7yxz50.js";
 import {
   harnessPolicyDecisionEventSchema
-} from "./index-wm9xeq1n.js";
+} from "./index-bt2p8x7r.js";
 import {
   openCliSessionStore
-} from "./index-zxg4ve4j.js";
+} from "./index-fqqz1yt8.js";
 import {
   SqliteDatabase
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 import {
   harnessClientRequestSchema,
   streamEventDocument

package/dist/{index-f6mqa5gk.js → index-wwthv10a.js}

@@ -1,6 +1,6 @@
 import {
   harnessExecutionSession
-} from "./index-d9zkmhz3.js";
+} from "./index-ggstwr0v.js";
 import {
   defaultHarnessNamespace
 } from "./index-1265j7t2.js";
@@ -9,20 +9,23 @@ import {
   TASK_BUDGET_KEY,
   TaskBudget,
   USAGE_LEDGER_KEY,
+  bindBudgetLedgerStore,
+  budgetLedgerScope,
   ensurePrivateDatabase,
   estimateRequestTokens,
   inspectRuntimeDiagnostics,
   inspectRuntimeManifest,
   inspectTaskBudgetSummary,
   inspectUsageLedger,
+  isReservedBudgetNamespace,
   protectStateFromGit,
   readTaskAcceptanceLedger,
   validateStateDirectory,
   withRuntimeInstruction
-} from "./index-zxg4ve4j.js";
+} from "./index-fqqz1yt8.js";
 import {
   SqliteDatabase
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 import {
   HarnessConfigError,
   HarnessStateConflictError,
@@ -869,37 +872,7 @@ import {
   createSqliteAgentRunStore
 } from "@zhivex-ai/agents/ops";
 import { createAgentRunLedger } from "@zhivex-ai/agents/control-plane";
-var budgetScopeFor = (config) => ({
-  tenantId: config.scope.tenantId,
-  ...config.scope.userId ? { userId: config.scope.userId } : {},
-  namespace: "__zhivex_budget__"
-});
-var withBudgetLedgerStore = (primary, budget, config) => {
-  const scope = budgetScopeFor(config);
-  const budgetScope = (value) => value?.namespace === scope.namespace && value.tenantId === scope.tenantId && (value.userId ?? undefined) === (scope.userId ?? undefined);
-  const assertId = (id) => {
-    if (!/^budget_[a-f0-9]{64}$/.test(id))
-      throw new HarnessStateConflictError("Invalid budget ledger identity.");
-  };
-  return {
-    ...primary,
-    load: async (id, requestedScope) => {
-      if (!budgetScope(requestedScope))
-        return primary.load(id, requestedScope);
-      assertId(id);
-      return budget.load(id, requestedScope);
-    },
-    save: async (state, options) => {
-      if (!budgetScope(state.scope))
-        return primary.save(state, options);
-      assertId(state.runId);
-      if (state.provider !== "zhivex" || state.modelId !== "budget-coordinator" || state.metadata?.budgetCoordinator !== true) {
-        throw new HarnessStateConflictError("Only SDK budget ledger states may use the reserved namespace.");
-      }
-      return budget.save(state, options);
-    }
-  };
-};
+var withBudgetLedgerStore = (primary, budget, config) => bindBudgetLedgerStore(primary, config.scope, budget);
 var HARNESS_SQLITE_FILE = "operations.sqlite";
 var HARNESS_OPERATIONS_SCHEMA_VERSION = 1;
 var TERMINAL_RUN_STATUSES = ["completed", "failed", "cancelled", "timed_out"];
@@ -1154,13 +1127,12 @@ var migrateLegacyFileRuns = async (directory, target, config) => {
   return result;
 };
 var openHarnessPersistence = async (config, options = {}) => {
-  if (config.scope.namespace === "__zhivex_budget__")
-    throw new HarnessStateConflictError("The budget ledger namespace is reserved.");
+  const budgetScope = budgetLedgerScope(config.scope);
   await validateStateDirectory(config.workspace, config.stateDirectory);
   await ensurePrivateStateDirectory(config.stateDirectory);
   await protectStateFromGit(config.workspace, config.stateDirectory);
   if (config.storeBackend === "file") {
-    const store = withBudgetLedgerStore(createFileAgentRunStore({ directory: config.stateDirectory, scope: config.scope }), createFileAgentRunStore({ directory: config.stateDirectory, scope: budgetScopeFor(config) }), config);
+    const store = withBudgetLedgerStore(createFileAgentRunStore({ directory: config.stateDirectory, scope: config.scope }), createFileAgentRunStore({ directory: config.stateDirectory, scope: budgetScope }), config);
     const migration = shouldMigrateLegacyRuns(config, options.migrateLegacyFileStore) ? await migrateLegacyFileRuns(config.stateDirectory, store, config) : emptyMigration();
     return {
       backend: "file",
@@ -1205,7 +1177,7 @@ var openHarnessPersistence = async (config, options = {}) => {
     database.exec("PRAGMA foreign_keys = ON");
     await chmod(databasePath, 384);
     const databaseLike = sqliteAdapter(database);
-    const store = withBudgetLedgerStore(createSqliteAgentRunStore({ db: databaseLike, scope: config.scope, history: "incremental" }), createSqliteAgentRunStore({ db: databaseLike, scope: budgetScopeFor(config) }), config);
+    const store = withBudgetLedgerStore(createSqliteAgentRunStore({ db: databaseLike, scope: config.scope, history: "incremental" }), createSqliteAgentRunStore({ db: databaseLike, scope: budgetScope }), config);
     database.exec(`CREATE TRIGGER IF NOT EXISTS zhivex_task_budget_retain_run
       BEFORE DELETE ON zhivex_agent_runs
       WHEN json_type(OLD.state_json, '$.metadata.zhivexTaskBudgetAccountV1') IS NOT NULL
@@ -1302,7 +1274,7 @@ var projectMemoryBinding = (workspace, scope) => {
     segment(scope.userId);
   if (scope.namespace !== undefined)
     segment(scope.namespace);
-  if (scope.namespace === "__zhivex_budget__")
+  if (isReservedBudgetNamespace(scope.namespace))
     throw new HarnessConfigError("Reserved memory namespace.");
   const key = (kind, value) => createHash4("sha256").update(kind).update("\x00").update(value).digest("hex");
   const workspaceKey = key("workspace", workspace);

package/dist/{index-74kkpyqk.js → index-xfedewpt.js}

@@ -1,7 +1,7 @@
 import {
   workspaceCheckpointSchema,
   workspaceRestoreOperationSchema
-} from "./index-6599mpmy.js";
+} from "./index-63gbp0cz.js";
 import {
   HARNESS_OPERATIONS_SCHEMA_VERSION,
   HARNESS_SQLITE_FILE,
@@ -9,17 +9,20 @@ import {
   openHarnessPersistence,
   projectMemoryRecordKey,
   sqliteAdapter
-} from "./index-f6mqa5gk.js";
+} from "./index-wwthv10a.js";
 import {
+  BUDGET_LEDGER_NAMESPACE,
+  BUDGET_OWNER_NAMESPACE_KEY,
   HARNESS_SESSION_SCHEMA_VERSION,
   assertTaskBudgetBackupLinks,
+  budgetLedgerNamespace,
   openCliSessionStore,
   validateStateDirectory
-} from "./index-zxg4ve4j.js";
+} from "./index-fqqz1yt8.js";
 import {
   SqliteDatabase,
   readRegularFileChunksNoFollow
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 import {
   HarnessStateConflictError,
   HarnessWorkspaceError
@@ -398,7 +401,8 @@ var coordinatorIds = (runs) => new Set(runs.flatMap(({ state }) => {
 var validateBudgetLedger = (config, run, identities) => {
   const state = validatedRunState(run.state, `Budget ledger ${run.key}`);
   const identity = state.metadata?.budgetIdentity;
-  if (state.scope?.namespace !== "__zhivex_budget__" || state.scope?.tenantId !== config.scope.tenantId || (state.scope?.userId ?? undefined) !== (config.scope.userId ?? undefined) || state.provider !== "zhivex" || state.modelId !== "budget-coordinator" || state.metadata?.budgetCoordinator !== true || typeof identity !== "string" || !identities.has(identity) || !/^budget_[a-f0-9]{64}$/.test(state.runId) || !sdkRunKeyMatches(run.key, state.scope, state.runId)) {
+  const ownerNamespace = config.scope.namespace;
+  if (!ownerNamespace || state.scope?.namespace !== budgetLedgerNamespace(ownerNamespace) || state.metadata?.[BUDGET_OWNER_NAMESPACE_KEY] !== ownerNamespace || state.scope?.tenantId !== config.scope.tenantId || (state.scope?.userId ?? undefined) !== (config.scope.userId ?? undefined) || state.provider !== "zhivex" || state.modelId !== "budget-coordinator" || state.metadata?.budgetCoordinator !== true || typeof identity !== "string" || !identities.has(identity) || !/^budget_[a-f0-9]{64}$/.test(state.runId) || !sdkRunKeyMatches(run.key, state.scope, state.runId)) {
     throw new HarnessStateConflictError("Budget ledger is not bound to an exported run and durable scope.");
   }
   assertTerminalState(state, `Budget ledger ${run.key}`);
@@ -532,7 +536,9 @@ var readPayload = async (config, recordedWorkspace, accessLease) => {
       const metadata = state.metadata;
       if (typeof metadata?.budgetIdentity !== "string" || !identities.has(metadata.budgetIdentity)) {
         const scope = state.scope;
-        if (scope?.namespace === "__zhivex_budget__" && scope.tenantId === config.scope.tenantId && (scope.userId ?? undefined) === (config.scope.userId ?? undefined)) {
+        const sameTenant = scope?.tenantId === config.scope.tenantId && (scope?.userId ?? undefined) === (config.scope.userId ?? undefined);
+        const boundNamespace = config.scope.namespace ? budgetLedgerNamespace(config.scope.namespace) : undefined;
+        if (sameTenant && (scope?.namespace === BUDGET_LEDGER_NAMESPACE || scope?.namespace === boundNamespace)) {
           throw new HarnessStateConflictError("An unlinked shared budget ledger cannot be safely assigned to this backup scope; retain the original database.");
         }
         return [];

package/dist/{index-sstgcsr0.js → index-yx52bt4a.js}

@@ -1,6 +1,6 @@
 import {
   fileDigestSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 
 // src/workspace/change-envelope.ts
 import { createHash } from "node:crypto";

package/dist/index.js

@@ -52,7 +52,7 @@ import {
   timeToSafeFixDriverResultSchema,
   timeToSafeFixLatencyStatistics,
   timeToSafeFixTaskSchema
-} from "./index-sk3cap35.js";
+} from "./index-eps3c3g6.js";
 import {
   HARNESS_STATE_BACKUP_MAX_BYTES,
   HARNESS_STATE_BACKUP_SCHEMA_VERSION,
@@ -63,7 +63,7 @@ import {
   inspectHarnessState,
   readHarnessStateBackup,
   stateBackupBundleSchema
-} from "./index-74kkpyqk.js";
+} from "./index-xfedewpt.js";
 import {
   CLI_COMMAND_OPTION_CONTRACTS,
   CLI_OPTION_DEFINITIONS,
@@ -101,7 +101,7 @@ import {
   digestChangeEnvelopeArtifact,
   externalAttestationReferenceSchema,
   verifyChangeEnvelope
-} from "./index-sstgcsr0.js";
+} from "./index-yx52bt4a.js";
 import {
   harnessLocalCredentialsSchema,
   openHarnessActivityStore,
@@ -109,13 +109,13 @@ import {
   recoverHarnessLocalService,
   requestHarnessLocalService,
   startHarnessLocalService
-} from "./index-crta5wzv.js";
+} from "./index-vvzc5ezz.js";
 import {
   createHarnessClientAdapter
-} from "./index-02pqtbbg.js";
+} from "./index-vc7yxz50.js";
 import {
   openWorkspaceCheckpointStore
-} from "./index-6599mpmy.js";
+} from "./index-63gbp0cz.js";
 import {
   DEFAULT_HARNESS_CONTEXT_MANIFEST,
   DEFAULT_HARNESS_PROJECT_INSTRUCTIONS,
@@ -154,7 +154,7 @@ import {
   runHarness,
   runHarnessReviewGroup,
   selectHarnessModel
-} from "./index-0zs2dz26.js";
+} from "./index-6fp7kdpx.js";
 import {
   HARNESS_OPERATIONS_SCHEMA_VERSION,
   HARNESS_SQLITE_FILE,
@@ -165,7 +165,7 @@ import {
   listHarnessRuns,
   migrateLegacyFileRuns,
   openHarnessPersistence
-} from "./index-f6mqa5gk.js";
+} from "./index-wwthv10a.js";
 import {
   HARNESS_MCP_CONFIG_SCHEMA_VERSION,
   HARNESS_MCP_PERMISSIONS,
@@ -173,7 +173,7 @@ import {
   createHttpMcpClient,
   loadHarnessMcpConfiguration,
   normalizeHarnessMcpConfiguration
-} from "./index-dtb2c6ds.js";
+} from "./index-5zbq9ztj.js";
 import {
   CliOciRuntimeAdapter,
   HARNESS_EXECUTION_ARTIFACT_SCHEMA_VERSION,
@@ -185,7 +185,7 @@ import {
   describeOciCommand,
   executionFingerprintInput,
   harnessExecutionSession
-} from "./index-d9zkmhz3.js";
+} from "./index-ggstwr0v.js";
 import {
   BUILTIN_PROVIDER_REGISTRATIONS,
   DEFAULT_ALLOWED_CHECKS,
@@ -217,7 +217,7 @@ import {
   applyHarnessToolPolicy,
   createHarnessToolPolicy,
   harnessToolPolicySchema
-} from "./index-wm9xeq1n.js";
+} from "./index-bt2p8x7r.js";
 import {
   HARNESS_SESSION_INDEX_FILE,
   HARNESS_SESSION_SCHEMA_VERSION,
@@ -226,12 +226,12 @@ import {
   openCliSessionStore,
   openSessionStore,
   validateStateDirectory
-} from "./index-zxg4ve4j.js";
+} from "./index-fqqz1yt8.js";
 import {
   BUN_ENGINE_RANGE,
   HARNESS_VERSION,
   NODE_ENGINE_RANGE
-} from "./index-4fx5f3k5.js";
+} from "./index-pq3kz1r8.js";
 import {
   EDIT_CONTRACT_SCHEMA_VERSION,
   EDIT_DIGEST_ALGORITHM,
@@ -254,7 +254,7 @@ import {
   restoreFileInputSchema,
   validateEditProposal,
   workspaceFilePathSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 import {
   CLI_EVENT_SCHEMA_VERSION,
   CLI_JSON_SCHEMA_VERSION,