@zhivex-ai/harness 1.4.1 → 1.6.2

package/dist/{cli-entry-7f0cen32.js → cli-entry-6amx4mcc.js}

@@ -2,7 +2,7 @@ import {
   CLI_OPTION_DEFINITIONS,
   resolveHelpTopic,
   validateCliCommandOptions
-} from "./cli-entry-3s63zn4w.js";
+} from "./cli-entry-10th5awp.js";
 import {
   DEFAULT_PROVIDER_REGISTRY,
   HARNESS_EXECUTION_POLICY_VERSION,
@@ -3656,8 +3656,8 @@ var quarantineFileInputSchema = z10.strictObject({
 });
 var restoreFileInputSchema = z10.strictObject({
   quarantineId: z10.string().min(1).max(200).regex(/^[A-Za-z0-9._:-]+$/),
-  destination: workspaceFilePathSchema.optional(),
-  expectedDigest: fileDigestSchema.optional()
+  destination: workspaceFilePathSchema.describe("Required workspace path for the quarantined bytes. Restore does not fall back to the original path."),
+  expectedDigest: fileDigestSchema.describe("Required sha256 of the quarantined bytes the operator reviewed.")
 });
 var mutationOperationSchema = z10.enum(["create", "update", "move", "quarantine", "restore"]);
 var mutationAuditEntrySchema = z10.strictObject({
@@ -3994,13 +3994,62 @@ var runPortableProcess = async (command, options = {}) => {
   }
 };
 
+// src/workspace/text-integrity.ts
+var controlLabel = (code) => code === 0 ? "NUL byte" : `U+${code.toString(16).padStart(4, "0")}`;
+var firstDisallowedControl = (text) => {
+  let line = 1;
+  for (let index = 0;index < text.length; index += 1) {
+    const code = text.charCodeAt(index);
+    if (code === 10) {
+      line += 1;
+      continue;
+    }
+    if (code === 9 || code === 13)
+      continue;
+    if (code < 32 || code === 127 || code >= 128 && code <= 159)
+      return { line, label: controlLabel(code) };
+  }
+  return;
+};
+var firstDisallowedControlBytes = (bytes) => {
+  let line = 1;
+  for (let index = 0;index < bytes.length; index += 1) {
+    const code = bytes[index] ?? 0;
+    if (code === 10) {
+      line += 1;
+      continue;
+    }
+    if (code === 9 || code === 13)
+      continue;
+    if (code < 32 || code === 127)
+      return { line, label: controlLabel(code) };
+  }
+  return;
+};
+var refuseControlMessage = (hit) => `Refusing to write a control byte into a text file: ${hit.label} at L${hit.line}. The file was not changed. Remove the control byte.`;
+var binaryAfterEditMessage = (hit) => `file is binary after edit: ${hit.label} at L${hit.line}. The edit was reverted. Read the file again before retrying.`;
+var textGuards = {
+  beforeWrite(content, allowControlBytes) {
+    if (allowControlBytes)
+      return;
+    const problem = firstDisallowedControl(content);
+    if (problem)
+      throw new HarnessWorkspaceError(refuseControlMessage(problem));
+  },
+  afterWrite(bytes, allowControlBytes) {
+    if (allowControlBytes)
+      return;
+    return firstDisallowedControlBytes(bytes);
+  }
+};
+
 // src/workspace/path-policy.ts
 var HARD_IGNORES = new Set([".git", ".next", ".turbo", ".zhivex-harness", "coverage", "dist", "node_modules"]);
 var isSensitiveName = (name) => {
-  const normalized = name.toLocaleLowerCase();
+  const normalized = name.toLowerCase();
   return normalized === ".env" || normalized.startsWith(".env.") && normalized !== ".env.example" || normalized === ".npmrc" || normalized === "id_rsa" || normalized === "id_ed25519" || [".key", ".pem", ".p12", ".pfx"].some((extension) => normalized.endsWith(extension));
 };
-var isHardIgnored = (relativePath) => relativePath.split("/").some((segment) => HARD_IGNORES.has(segment.toLocaleLowerCase()) || isSensitiveName(segment));
+var isHardIgnored = (relativePath) => relativePath.split("/").some((segment) => HARD_IGNORES.has(segment.toLowerCase()) || isSensitiveName(segment));
 
 // src/workspace/workspace.ts
 var IGNORE_FILES = [".gitignore", ".zhivex-harnessignore"];
@@ -4280,7 +4329,7 @@ class Workspace {
       throw new HarnessWorkspaceError(`The path escapes the workspace: ${relativePath}`);
     const relative = wirePath(path11.relative(this.root, candidate));
     if (relative && isHardIgnored(relative)) {
-      const blocked = relative.split("/").find((segment) => HARD_IGNORES.has(segment.toLocaleLowerCase()) || isSensitiveName(segment));
+      const blocked = relative.split("/").find((segment) => HARD_IGNORES.has(segment.toLowerCase()) || isSensitiveName(segment));
       throw new HarnessWorkspaceError(`The path is protected by the harness policy: ${blocked}`);
     }
     return candidate;
@@ -4323,8 +4372,11 @@ class Workspace {
       maxBytes: MAX_FILE_BYTES
     });
     const { contents } = file;
-    if (!allowBinary && contents.includes(0))
-      throw new HarnessWorkspaceError("The file appears to be binary and cannot be read as text.");
+    if (!allowBinary && contents.includes(0)) {
+      const hit = firstDisallowedControlBytes(contents);
+      const where = hit ? `: ${hit.label} at L${hit.line}` : "";
+      throw new HarnessWorkspaceError(`The file appears to be binary and cannot be read as text${where}.`);
+    }
     return {
       path: wirePath(path11.relative(this.root, safe.path)),
       absolutePath: safe.path,
@@ -4991,19 +5043,23 @@ class Workspace {
     if (position < 0 || text.indexOf(edit.oldText, position + 1) >= 0) {
       throw new HarnessWorkspaceError("Replacement requires exactly one literal match; include more surrounding context.");
     }
-    return [{ path: edit.path, expectedDigest: edit.expectedDigest, content: text.slice(0, position) + edit.newText + text.slice(position + edit.oldText.length) }];
+    return [{
+      path: edit.path,
+      expectedDigest: edit.expectedDigest,
+      content: text.slice(0, position) + edit.newText + text.slice(position + edit.oldText.length)
+    }];
   }
-  async applyReplacement(input) {
+  async applyReplacement(input, host = {}) {
     const changes = await this.replacementChanges(input);
-    return this.applyPatch({ proposalId: createEditProposal({ changes }).proposalId, changes });
+    return this.applyPatch({ proposalId: createEditProposal({ changes }).proposalId, changes }, host);
   }
-  async applyPatch(input) {
-    return this.applyPatchWithModes(input, new Map);
+  async applyPatch(input, host = {}) {
+    return this.applyPatchWithModes(input, new Map, undefined, host);
   }
-  async applyPatchWithModes(input, modes, assertActive) {
-    return withWorkspaceMutation(this.root, () => this.applyPatchWithModesLocked(input, modes, assertActive));
+  async applyPatchWithModes(input, modes, assertActive, host = {}) {
+    return withWorkspaceMutation(this.root, () => this.applyPatchWithModesLocked(input, modes, assertActive, host));
   }
-  async applyPatchWithModesLocked(input, modes, assertActive) {
+  async applyPatchWithModesLocked(input, modes, assertActive, host = {}) {
     const proposal = validateEditProposal(input);
     this.checkAuditCapacity(proposal.changes.length);
     const targetPaths = new Set(proposal.changes.map((change) => change.path));
@@ -5048,6 +5104,7 @@ class Workspace {
             throw new HarnessWorkspaceError(`Stale patch mode rejected for ${change.path}: expected ${modeBinding.beforeMode.toString(8)}, found ${before.mode.toString(8)}.`);
           }
         }
+        textGuards.beforeWrite(change.content, host.allowControlBytes === true);
         const temporary = await this.stageFile(safe.path, change.content, modeBinding?.afterMode ?? before?.mode ?? 420);
         prepared.push({
           change,
@@ -5087,6 +5144,13 @@ class Workspace {
           await unlink2(item.temporary);
         }
         committed.push(item);
+        const published = await readRegularFileNoFollow(item.target, {
+          label: "The published file",
+          maxBytes: MAX_FILE_BYTES
+        });
+        const corrupt = textGuards.afterWrite(published.contents, host.allowControlBytes === true);
+        if (corrupt)
+          throw new HarnessWorkspaceError(binaryAfterEditMessage(corrupt));
         await assertActive?.();
       }
     } catch (error) {
@@ -5263,30 +5327,65 @@ class Workspace {
     const audit = await this.audit({ operation: "quarantine", path: parsed.path, beforeDigest: source.digest, quarantineId });
     return { quarantineId, path: parsed.path, digest: source.digest, audit };
   }
-  async restoreQuarantined(input) {
-    return withWorkspaceMutation(this.root, () => this.restoreQuarantinedLocked(input));
-  }
-  async restoreQuarantinedLocked(input) {
-    const parsed = restoreFileInputSchema.parse(input);
-    this.checkAuditCapacity();
+  async readRestorableQuarantine(quarantineId) {
     const directory = await this.secureQuarantineDirectory(false);
     let manifest;
     try {
-      const manifestFile = await this.readInternalRegularFile(path11.join(directory, `${parsed.quarantineId}.json`), "Quarantine manifest", 64 * 1024);
+      const manifestFile = await this.readInternalRegularFile(path11.join(directory, `${quarantineId}.json`), "Quarantine manifest", 64 * 1024);
       manifest = JSON.parse(manifestFile.contents.toString("utf8"));
     } catch {
-      throw new HarnessWorkspaceError(`Quarantine entry was not found: ${parsed.quarantineId}.`);
+      throw new HarnessWorkspaceError(`Quarantine entry was not found: ${quarantineId}.`);
     }
-    if (manifest.schemaVersion !== 1 || manifest.quarantineId !== parsed.quarantineId || manifest.status !== "quarantined") {
-      throw new HarnessWorkspaceError(`Quarantine entry is not restorable: ${parsed.quarantineId}.`);
+    if (manifest.schemaVersion !== 1 || manifest.quarantineId !== quarantineId || manifest.status !== "quarantined") {
+      throw new HarnessWorkspaceError(`Quarantine entry is not restorable: ${quarantineId}.`);
     }
-    const dataPath = path11.join(directory, `${parsed.quarantineId}.data`);
+    const dataPath = path11.join(directory, `${quarantineId}.data`);
     const dataFile = await this.readInternalRegularFile(dataPath, "Quarantine payload", MAX_FILE_BYTES);
     const digest3 = digestBytes(dataFile.contents);
-    if (digest3 !== manifest.digest || parsed.expectedDigest && parsed.expectedDigest !== digest3) {
+    if (digest3 !== manifest.digest) {
+      throw new HarnessWorkspaceError(`Quarantine digest mismatch: ${quarantineId}.`);
+    }
+    return { manifest, dataPath, dataFile, digest: digest3 };
+  }
+  async previewRestore(input) {
+    const parsed = restoreFileInputSchema.parse(input);
+    const quarantined = await this.readRestorableQuarantine(parsed.quarantineId);
+    if (parsed.expectedDigest !== quarantined.digest) {
       throw new HarnessWorkspaceError(`Quarantine digest mismatch: ${parsed.quarantineId}.`);
     }
-    const destinationPath = parsed.destination ?? manifest.originalPath;
+    const destination = await this.safePath(parsed.destination, { allowMissing: true });
+    if (destination.exists)
+      throw new HarnessWorkspaceError(`Restore destination already exists: ${parsed.destination}.`);
+    let after;
+    try {
+      after = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(quarantined.dataFile.contents);
+    } catch {
+      throw new HarnessWorkspaceError("Preview requires valid UTF-8 text.");
+    }
+    return {
+      proposalId: parsed.expectedDigest,
+      files: [{
+        path: parsed.destination,
+        expectedDigest: parsed.expectedDigest,
+        before: null,
+        after,
+        afterDigest: quarantined.digest,
+        operation: "restore"
+      }]
+    };
+  }
+  async restoreQuarantined(input) {
+    return withWorkspaceMutation(this.root, () => this.restoreQuarantinedLocked(input));
+  }
+  async restoreQuarantinedLocked(input) {
+    const parsed = restoreFileInputSchema.parse(input);
+    this.checkAuditCapacity();
+    const quarantined = await this.readRestorableQuarantine(parsed.quarantineId);
+    if (parsed.expectedDigest !== quarantined.digest) {
+      throw new HarnessWorkspaceError(`Quarantine digest mismatch: ${parsed.quarantineId}.`);
+    }
+    const { manifest, dataPath, dataFile, digest: digest3 } = quarantined;
+    const destinationPath = parsed.destination;
     const destination = await this.safePath(destinationPath, { allowMissing: true });
     if (destination.exists)
       throw new HarnessWorkspaceError(`Restore destination already exists: ${destinationPath}.`);
@@ -6511,7 +6610,7 @@ var importPatch = async (runId, expectedPatchId, host, base, current2, maxFileWr
     const rollbackErrors = [];
     for (const item of [...quarantined].reverse()) {
       try {
-        await host.restoreQuarantined({ quarantineId: item.quarantineId, expectedDigest: item.digest });
+        await host.restoreQuarantined({ quarantineId: item.quarantineId, destination: item.path, expectedDigest: item.digest });
       } catch (rollbackError) {
         rollbackErrors.push(rollbackError);
       }
@@ -7885,6 +7984,79 @@ import { createAgentRunLedger } from "@zhivex-ai/agents/control-plane";
 import { AsyncLocalStorage as AsyncLocalStorage5 } from "node:async_hooks";
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { z as z17 } from "zod";
+
+// src/runtime/budget-ledger-scope.ts
+var BUDGET_LEDGER_NAMESPACE = "__zhivex_budget__";
+var BUDGET_OWNER_NAMESPACE_KEY = "budgetOwnerNamespace";
+var isReservedBudgetNamespace = (namespace) => namespace === BUDGET_LEDGER_NAMESPACE || (namespace?.startsWith(`${BUDGET_LEDGER_NAMESPACE}:`) ?? false);
+var budgetLedgerNamespace = (namespace) => {
+  if (!namespace || isReservedBudgetNamespace(namespace)) {
+    throw new HarnessStateConflictError("The budget ledger namespace is reserved.");
+  }
+  return `${BUDGET_LEDGER_NAMESPACE}:${namespace}`;
+};
+var budgetLedgerScope = (scope) => {
+  if (scope.namespace && isReservedBudgetNamespace(scope.namespace)) {
+    throw new HarnessStateConflictError("The budget ledger namespace is reserved.");
+  }
+  return {
+    tenantId: scope.tenantId,
+    ...scope.userId ? { userId: scope.userId } : {},
+    namespace: scope.namespace ? budgetLedgerNamespace(scope.namespace) : `${BUDGET_LEDGER_NAMESPACE}:`
+  };
+};
+var sameIdentity = (left, right) => left?.tenantId === right.tenantId && (left.userId ?? undefined) === (right.userId ?? undefined);
+var bindBudgetLedgerStore = (primary, scope, budget = primary) => {
+  const bound = budgetLedgerScope(scope);
+  const ownerNamespace = scope.namespace ?? "";
+  const isSdkBudget = (value) => sameIdentity(value, bound) && value?.namespace === BUDGET_LEDGER_NAMESPACE;
+  const isBoundBudget = (value) => sameIdentity(value, bound) && value?.namespace === bound.namespace;
+  const assertId = (id) => {
+    if (!/^budget_[a-f0-9]{64}$/.test(id))
+      throw new HarnessStateConflictError("Invalid budget ledger identity.");
+  };
+  const bindState = (state) => {
+    const metadata = { ...state.metadata ?? {} };
+    const owner = metadata[BUDGET_OWNER_NAMESPACE_KEY];
+    if (owner !== undefined && owner !== ownerNamespace) {
+      throw new HarnessStateConflictError("Budget ledger is bound to another namespace.");
+    }
+    return {
+      ...state,
+      scope: bound,
+      metadata: { ...metadata, [BUDGET_OWNER_NAMESPACE_KEY]: ownerNamespace }
+    };
+  };
+  const assertStored = (state) => {
+    if (!state)
+      return state;
+    const owner = state.metadata?.[BUDGET_OWNER_NAMESPACE_KEY];
+    if (state.scope?.namespace !== bound.namespace || owner !== ownerNamespace) {
+      throw new HarnessStateConflictError("Budget ledger is not bound to this namespace.");
+    }
+    return state;
+  };
+  return {
+    ...primary,
+    load: async (id, requestedScope) => {
+      if (!isSdkBudget(requestedScope) && !isBoundBudget(requestedScope))
+        return primary.load(id, requestedScope);
+      assertId(id);
+      return assertStored(await budget.load(id, bound));
+    },
+    save: async (state, options) => {
+      if (!isSdkBudget(state.scope) && !isBoundBudget(state.scope))
+        return primary.save(state, options);
+      assertId(state.runId);
+      if (state.provider !== "zhivex" || state.modelId !== "budget-coordinator" || state.metadata?.budgetCoordinator !== true) {
+        throw new HarnessStateConflictError("Only SDK budget ledger states may use the reserved namespace.");
+      }
+      return budget.save(bindState(state), options);
+    }
+  };
+};
+
+// src/runtime/task-budget.ts
 import {
   createAgentBudgetCoordinator,
   fingerprintAgentHarness as fingerprintAgentHarness2,
@@ -8003,10 +8175,10 @@ class TaskBudget {
     this.accountRunId = TaskBudget.accountId(scope, taskId);
     this.policy = structuredClone(account.policy);
     const budgetId = this.accountRunId;
-    this.coordinator = createAgentBudgetCoordinator({ store, scope, budgetId, limits: this.policy.limits });
+    this.coordinator = createAgentBudgetCoordinator({ store: bindBudgetLedgerStore(store, scope), scope, budgetId, limits: this.policy.limits });
     this.coordinatorId = this.coordinator.id;
     this.budgetRunId = `budget_${fingerprintAgentHarness2({ budgetId, scope }).slice("sha256:".length)}`;
-    this.budgetScope = { tenantId: scope.tenantId, ...scope.userId ? { userId: scope.userId } : {}, namespace: "__zhivex_budget__" };
+    this.budgetScope = budgetLedgerScope(scope);
   }
   static accountId(scope, taskId) {
     return `task_budget_${fingerprintAgentHarness2({ scope, taskId }).slice("sha256:".length)}`;
@@ -8521,37 +8693,7 @@ class TaskBudget {
 }
 
 // src/persistence/operations.ts
-var budgetScopeFor = (config) => ({
-  tenantId: config.scope.tenantId,
-  ...config.scope.userId ? { userId: config.scope.userId } : {},
-  namespace: "__zhivex_budget__"
-});
-var withBudgetLedgerStore = (primary, budget, config) => {
-  const scope = budgetScopeFor(config);
-  const budgetScope = (value) => value?.namespace === scope.namespace && value.tenantId === scope.tenantId && (value.userId ?? undefined) === (scope.userId ?? undefined);
-  const assertId = (id) => {
-    if (!/^budget_[a-f0-9]{64}$/.test(id))
-      throw new HarnessStateConflictError("Invalid budget ledger identity.");
-  };
-  return {
-    ...primary,
-    load: async (id, requestedScope) => {
-      if (!budgetScope(requestedScope))
-        return primary.load(id, requestedScope);
-      assertId(id);
-      return budget.load(id, requestedScope);
-    },
-    save: async (state, options) => {
-      if (!budgetScope(state.scope))
-        return primary.save(state, options);
-      assertId(state.runId);
-      if (state.provider !== "zhivex" || state.modelId !== "budget-coordinator" || state.metadata?.budgetCoordinator !== true) {
-        throw new HarnessStateConflictError("Only SDK budget ledger states may use the reserved namespace.");
-      }
-      return budget.save(state, options);
-    }
-  };
-};
+var withBudgetLedgerStore = (primary, budget, config) => bindBudgetLedgerStore(primary, config.scope, budget);
 var HARNESS_SQLITE_FILE = "operations.sqlite";
 var HARNESS_OPERATIONS_SCHEMA_VERSION = 1;
 var TERMINAL_RUN_STATUSES = ["completed", "failed", "cancelled", "timed_out"];
@@ -8806,13 +8948,12 @@ var migrateLegacyFileRuns = async (directory, target, config) => {
   return result;
 };
 var openHarnessPersistence = async (config, options = {}) => {
-  if (config.scope.namespace === "__zhivex_budget__")
-    throw new HarnessStateConflictError("The budget ledger namespace is reserved.");
+  const budgetScope = budgetLedgerScope(config.scope);
   await validateStateDirectory(config.workspace, config.stateDirectory);
   await ensurePrivateStateDirectory(config.stateDirectory);
   await protectStateFromGit(config.workspace, config.stateDirectory);
   if (config.storeBackend === "file") {
-    const store = withBudgetLedgerStore(createFileAgentRunStore({ directory: config.stateDirectory, scope: config.scope }), createFileAgentRunStore({ directory: config.stateDirectory, scope: budgetScopeFor(config) }), config);
+    const store = withBudgetLedgerStore(createFileAgentRunStore({ directory: config.stateDirectory, scope: config.scope }), createFileAgentRunStore({ directory: config.stateDirectory, scope: budgetScope }), config);
     const migration = shouldMigrateLegacyRuns(config, options.migrateLegacyFileStore) ? await migrateLegacyFileRuns(config.stateDirectory, store, config) : emptyMigration();
     return {
       backend: "file",
@@ -8857,7 +8998,7 @@ var openHarnessPersistence = async (config, options = {}) => {
     database.exec("PRAGMA foreign_keys = ON");
     await chmod3(databasePath, 384);
     const databaseLike = sqliteAdapter(database);
-    const store = withBudgetLedgerStore(createSqliteAgentRunStore({ db: databaseLike, scope: config.scope, history: "incremental" }), createSqliteAgentRunStore({ db: databaseLike, scope: budgetScopeFor(config) }), config);
+    const store = withBudgetLedgerStore(createSqliteAgentRunStore({ db: databaseLike, scope: config.scope, history: "incremental" }), createSqliteAgentRunStore({ db: databaseLike, scope: budgetScope }), config);
     database.exec(`CREATE TRIGGER IF NOT EXISTS zhivex_task_budget_retain_run
       BEFORE DELETE ON zhivex_agent_runs
       WHEN json_type(OLD.state_json, '$.metadata.zhivexTaskBudgetAccountV1') IS NOT NULL
@@ -9987,4 +10128,4 @@ var verifyChangeEnvelope = (input, options = {}) => {
   };
 };
 
-export { UnsafeFileTypeError, FileSizeLimitError, FileChangedWhileReadingError, statRegularFileNoFollow, readRegularFileNoFollow, readRegularFileChunksNoFollow, loadCliProfile, createCliProfile, updateCliProfile, applyCliProfile, resolveCliDefaults, parseHarnessModelRoute, resolveHarnessModelRoutes, createHarnessRouteModels, serializeHarnessModelRoutes, CLI_COMMANDS, CLI_RUNS_COMMANDS, CLI_SESSIONS_COMMANDS, CLI_CHANGES_COMMANDS, CLI_STATE_COMMANDS, CliUsageError, parseCliArgs, SqliteDatabase, validateStateDirectory, HARNESS_SESSION_SCHEMA_VERSION, TERMINAL_SESSION_RUN_STATUSES, ensurePrivateDatabase, openCliSessionStore, inspectRuntimeDiagnostics, inspectRuntimeManifest, estimateContextTokens, measureContext, MODEL_BUDGET_KEY, estimateRequestTokens, workBudgetReached, createModelBudget, USAGE_LEDGER_KEY, usagePricingSchema, inspectUsageLedger, formatUsageLedger, runUsageLedgerWithPolicy, UsageLedger, inspectTaskMonetaryUsage, CLI_JSON_SCHEMA_VERSION, CLI_EVENT_SCHEMA_VERSION, serializeStreamEvent, serializeStreamResult, MAX_EDIT_CHANGES, MAX_EDIT_FILE_BYTES, fileDigestSchema, workspaceFilePathSchema, editProposalInputSchema, applyEditProposalInputSchema, moveFileInputSchema, quarantineFileInputSchema, restoreFileInputSchema, createEditProposal, validateEditProposal, editContractDocument, APPROVAL_HISTORY_KEY, approvalInputDigest, readApprovalDecisions, approvalDecisionViews, createHarnessToolPolicy, applyHarnessToolPolicy, bindHarnessPolicyInspection, inspectHarnessPolicy, withRuntimeInstruction, withFreshSystemInstructions, TASK_BUDGET_KEY, TASK_BUDGET_ACCOUNT_KEY, inspectTaskBudgetSummary, assertTaskBudgetBackupLinks, TaskBudget, compileTaskAcceptanceContract, taskCheckReceiptSchema, createTaskAcceptanceChecks, withTaskAcceptanceDelivery, taskAcceptanceChecks, confirmTaskAcceptanceImport, TASK_ACCEPTANCE_KEY, TASK_ACCEPTANCE_EVIDENCE_KEY, readTaskAcceptanceLedger, nextTaskAcceptanceLedger, taskAcceptanceCheckpointStore, TASK_SOURCE_KEY, ASSISTANT_RESPONSE_KEY, assistantResponses, captureAssistantResponses, taskSources, captureTaskSources, createTaskTools, replacementEditSchema, EnvironmentPatchDriftError, harnessToolExecution, effectiveRuntimeBudget, createRuntimeBudget, runtimeManifest, childRuntimeSafety, createCheckpointTokenCap, withWorkspaceMutation, boundedBatches, resolvePackageManager, resolvePackageCheckCommand, runPortableProcess, isHardIgnored, Workspace, CliOciRuntimeAdapter, harnessExecutionSession, createHarnessOciExecutionEnvironment, cleanupHarnessExecutionArtifacts, executionFingerprintInput, createRepairController, createRepairProgress, RUNTIME_DIAGNOSTICS_KEY, assistantResponseCheckpointStore, runtimeCheckpointStore, tokenUsageCheckpointStore, HARNESS_SQLITE_FILE, HARNESS_OPERATIONS_SCHEMA_VERSION, listHarnessRuns, inspectHarnessRun, cancelHarnessRun, cleanupHarnessRuns, sqliteAdapter, openHarnessPersistence, harnessPolicyDecisionEventSchema, observeHarnessPolicyDecisions, publishHarnessPolicyDecision, observeBaselineToolPolicy, publishPendingPolicyDecision, createPolicyDecisionEvidence, changeEnvelopeSchema, digestChangeEnvelopeArtifact, createChangeEnvelope, canonicalizeChangeEnvelope, changeEnvelopePreconditionsSchema, verifyChangeEnvelope, openHarnessActivityStore };
+export { UnsafeFileTypeError, FileSizeLimitError, FileChangedWhileReadingError, statRegularFileNoFollow, readRegularFileNoFollow, readRegularFileChunksNoFollow, loadCliProfile, createCliProfile, updateCliProfile, applyCliProfile, resolveCliDefaults, parseHarnessModelRoute, resolveHarnessModelRoutes, createHarnessRouteModels, serializeHarnessModelRoutes, CLI_COMMANDS, CLI_RUNS_COMMANDS, CLI_SESSIONS_COMMANDS, CLI_CHANGES_COMMANDS, CLI_STATE_COMMANDS, CliUsageError, parseCliArgs, SqliteDatabase, validateStateDirectory, HARNESS_SESSION_SCHEMA_VERSION, TERMINAL_SESSION_RUN_STATUSES, ensurePrivateDatabase, openCliSessionStore, inspectRuntimeDiagnostics, inspectRuntimeManifest, estimateContextTokens, measureContext, MODEL_BUDGET_KEY, estimateRequestTokens, workBudgetReached, createModelBudget, USAGE_LEDGER_KEY, usagePricingSchema, inspectUsageLedger, formatUsageLedger, runUsageLedgerWithPolicy, UsageLedger, inspectTaskMonetaryUsage, CLI_JSON_SCHEMA_VERSION, CLI_EVENT_SCHEMA_VERSION, serializeStreamEvent, serializeStreamResult, MAX_EDIT_CHANGES, MAX_EDIT_FILE_BYTES, fileDigestSchema, workspaceFilePathSchema, editProposalInputSchema, applyEditProposalInputSchema, moveFileInputSchema, quarantineFileInputSchema, restoreFileInputSchema, createEditProposal, validateEditProposal, editContractDocument, APPROVAL_HISTORY_KEY, approvalInputDigest, readApprovalDecisions, approvalDecisionViews, createHarnessToolPolicy, applyHarnessToolPolicy, bindHarnessPolicyInspection, inspectHarnessPolicy, BUDGET_LEDGER_NAMESPACE, BUDGET_OWNER_NAMESPACE_KEY, isReservedBudgetNamespace, budgetLedgerNamespace, withRuntimeInstruction, withFreshSystemInstructions, TASK_BUDGET_KEY, TASK_BUDGET_ACCOUNT_KEY, inspectTaskBudgetSummary, assertTaskBudgetBackupLinks, TaskBudget, compileTaskAcceptanceContract, taskCheckReceiptSchema, createTaskAcceptanceChecks, withTaskAcceptanceDelivery, taskAcceptanceChecks, confirmTaskAcceptanceImport, TASK_ACCEPTANCE_KEY, TASK_ACCEPTANCE_EVIDENCE_KEY, readTaskAcceptanceLedger, nextTaskAcceptanceLedger, taskAcceptanceCheckpointStore, TASK_SOURCE_KEY, ASSISTANT_RESPONSE_KEY, assistantResponses, captureAssistantResponses, taskSources, captureTaskSources, createTaskTools, replacementEditSchema, EnvironmentPatchDriftError, harnessToolExecution, effectiveRuntimeBudget, createRuntimeBudget, runtimeManifest, childRuntimeSafety, createCheckpointTokenCap, withWorkspaceMutation, boundedBatches, resolvePackageManager, resolvePackageCheckCommand, runPortableProcess, isHardIgnored, Workspace, CliOciRuntimeAdapter, harnessExecutionSession, createHarnessOciExecutionEnvironment, cleanupHarnessExecutionArtifacts, executionFingerprintInput, createRepairController, createRepairProgress, RUNTIME_DIAGNOSTICS_KEY, assistantResponseCheckpointStore, runtimeCheckpointStore, tokenUsageCheckpointStore, HARNESS_SQLITE_FILE, HARNESS_OPERATIONS_SCHEMA_VERSION, listHarnessRuns, inspectHarnessRun, cancelHarnessRun, cleanupHarnessRuns, sqliteAdapter, openHarnessPersistence, harnessPolicyDecisionEventSchema, observeHarnessPolicyDecisions, publishHarnessPolicyDecision, observeBaselineToolPolicy, publishPendingPolicyDecision, createPolicyDecisionEvidence, changeEnvelopeSchema, digestChangeEnvelopeArtifact, createChangeEnvelope, canonicalizeChangeEnvelope, changeEnvelopePreconditionsSchema, verifyChangeEnvelope, openHarnessActivityStore };

package/dist/{cli-entry-rgs6bxmy.js → cli-entry-z1pbjrg4.js}

@@ -10,10 +10,10 @@ import {
   readTaskAcceptanceLedger,
   taskCheckReceiptSchema,
   verifyChangeEnvelope
-} from "./cli-entry-7f0cen32.js";
+} from "./cli-entry-6amx4mcc.js";
 import {
   HARNESS_VERSION
-} from "./cli-entry-3s63zn4w.js";
+} from "./cli-entry-10th5awp.js";
 
 // src/persistence/governance-report.ts
 import { createHash as createHash2 } from "node:crypto";

package/dist/cli.js

@@ -3,7 +3,7 @@ import {
   HARNESS_VERSION,
   NODE_ENGINE_RANGE,
   shortCliHelp
-} from "./cli-entry-3s63zn4w.js";
+} from "./cli-entry-10th5awp.js";
 import {
   __require
 } from "./cli-entry-1bx83sw4.js";
@@ -41,6 +41,6 @@ if (argv.length === 1 && ["--version", "-v", "version"].includes(argv[0])) {
   process.stdout.write(`${shortCliHelp(HARNESS_VERSION)}
 `);
 } else {
-  const { runCli } = await import("./cli-1cf4dcnj.js");
+  const { runCli } = await import("./cli-84en174d.js");
   await runCli(argv);
 }

package/dist/compat/code-support.js

@@ -13,18 +13,18 @@ import {
   readHarnessTaskDraft,
   requestHarnessTaskCancellation,
   runHarnessTask
-} from "../index-0zs2dz26.js";
+} from "../index-pf73y4gt.js";
 import {
   TASK_SOURCE_KEY,
   harnessToolExecution,
   taskSources
-} from "../index-f6mqa5gk.js";
-import"../index-dtb2c6ds.js";
+} from "../index-amjttjaj.js";
+import"../index-2r4f0p4n.js";
 import {
   resolvePackageCheckCommand,
   resolvePackageManager,
   runPortableProcess
-} from "../index-d9zkmhz3.js";
+} from "../index-w0m1nckc.js";
 import {
   DEFAULT_HARNESS_MAX_STEPS,
   modelReasoningEfforts,
@@ -36,7 +36,7 @@ import {
   catalogModels,
   modelDescription
 } from "../index-mzydbzp8.js";
-import"../index-wm9xeq1n.js";
+import"../index-bt2p8x7r.js";
 import {
   TASK_ACCEPTANCE_EVIDENCE_KEY,
   TASK_BUDGET_KEY,
@@ -46,15 +46,15 @@ import {
   inspectTaskBudgetSummary,
   inspectUsageLedger,
   usagePricingSchema
-} from "../index-zxg4ve4j.js";
-import"../index-4fx5f3k5.js";
+} from "../index-fqqz1yt8.js";
+import"../index-rz7wmp71.js";
 import {
   FileChangedWhileReadingError,
   FileSizeLimitError,
   SqliteDatabase,
   UnsafeFileTypeError,
   readRegularFileNoFollow
-} from "../index-xdbkcccf.js";
+} from "../index-6dxrbnxm.js";
 import"../index-bpc596v3.js";
 import"../index-fm84men1.js";
 import"../index-1bx83sw4.js";

package/dist/engine/acp.js

@@ -2,7 +2,7 @@ import {
   discardMcpWorkspaceSnapshot,
   launchDockerMcpGroup,
   prepareMcpWorkspaceSnapshot
-} from "../index-mv8sb1ns.js";
+} from "../index-1pn0ecs4.js";
 import {
   createAcpConnection,
   issueAcpMcpSessionProvider,
@@ -10,21 +10,21 @@ import {
 } from "../index-3ah1f369.js";
 import {
   createHarnessClientAdapter
-} from "../index-02pqtbbg.js";
-import"../index-6599mpmy.js";
+} from "../index-paf7z8kn.js";
+import"../index-4mn6m3bq.js";
 import {
   createHarness
-} from "../index-0zs2dz26.js";
-import"../index-f6mqa5gk.js";
-import"../index-dtb2c6ds.js";
-import"../index-d9zkmhz3.js";
+} from "../index-pf73y4gt.js";
+import"../index-amjttjaj.js";
+import"../index-2r4f0p4n.js";
+import"../index-w0m1nckc.js";
 import"../index-1265j7t2.js";
 import"../index-c39197wq.js";
 import"../index-mzydbzp8.js";
-import"../index-wm9xeq1n.js";
-import"../index-zxg4ve4j.js";
-import"../index-4fx5f3k5.js";
-import"../index-xdbkcccf.js";
+import"../index-bt2p8x7r.js";
+import"../index-fqqz1yt8.js";
+import"../index-rz7wmp71.js";
+import"../index-6dxrbnxm.js";
 import"../index-4gt045j0.js";
 import"../index-bpc596v3.js";
 import"../index-fm84men1.js";

package/dist/engine/client.js

@@ -2,19 +2,19 @@ import {
   createHarnessClientAdapter,
   runResultDocument,
   terminalContinuationMessages
-} from "../index-02pqtbbg.js";
-import"../index-6599mpmy.js";
-import"../index-0zs2dz26.js";
-import"../index-f6mqa5gk.js";
-import"../index-dtb2c6ds.js";
-import"../index-d9zkmhz3.js";
+} from "../index-paf7z8kn.js";
+import"../index-4mn6m3bq.js";
+import"../index-pf73y4gt.js";
+import"../index-amjttjaj.js";
+import"../index-2r4f0p4n.js";
+import"../index-w0m1nckc.js";
 import"../index-1265j7t2.js";
 import"../index-c39197wq.js";
 import"../index-mzydbzp8.js";
-import"../index-wm9xeq1n.js";
-import"../index-zxg4ve4j.js";
-import"../index-4fx5f3k5.js";
-import"../index-xdbkcccf.js";
+import"../index-bt2p8x7r.js";
+import"../index-fqqz1yt8.js";
+import"../index-rz7wmp71.js";
+import"../index-6dxrbnxm.js";
 import {
   HARNESS_CLIENT_PROTOCOL_VERSION,
   harnessClientCommandSchema,

package/dist/engine/desktop-state-v1.js

@@ -2,18 +2,18 @@ import {
   createArchivedHarnessStateBackup,
   createHarnessStateBackup,
   validateRecordedWorkspace
-} from "../index-74kkpyqk.js";
-import"../index-6599mpmy.js";
+} from "../index-rgqzdgv6.js";
+import"../index-4mn6m3bq.js";
 import {
   HARNESS_SQLITE_FILE
-} from "../index-f6mqa5gk.js";
-import"../index-d9zkmhz3.js";
+} from "../index-amjttjaj.js";
+import"../index-w0m1nckc.js";
 import"../index-1265j7t2.js";
 import"../index-c39197wq.js";
 import"../index-mzydbzp8.js";
 import {
   validateStateDirectory
-} from "../index-zxg4ve4j.js";
+} from "../index-fqqz1yt8.js";
 import {
   SqliteDatabase,
   acquireSqliteAccess,
@@ -22,7 +22,7 @@ import {
   protectPersistenceSecret,
   readRegularFileNoFollow,
   statRegularFileNoFollow
-} from "../index-xdbkcccf.js";
+} from "../index-6dxrbnxm.js";
 import"../index-bpc596v3.js";
 import"../index-fm84men1.js";
 import"../index-1bx83sw4.js";