@zhivex-ai/harness 1.4.1 → 1.6.2

package/dist/{index-d9zkmhz3.js → index-w0m1nckc.js}

@@ -20,7 +20,7 @@ import {
   taskAcceptanceChecks,
   validateEditProposal,
   workspaceFilePathSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 import {
   HarnessError,
   HarnessExecutionError,
@@ -403,13 +403,62 @@ import { createHash as createHash2, randomUUID } from "node:crypto";
 import { link, lstat as lstat3, mkdir as mkdir2, open as open2, readdir, realpath as realpath2, rename, stat, unlink } from "node:fs/promises";
 import path3 from "node:path";
 
+// src/workspace/text-integrity.ts
+var controlLabel = (code) => code === 0 ? "NUL byte" : `U+${code.toString(16).padStart(4, "0")}`;
+var firstDisallowedControl = (text) => {
+  let line = 1;
+  for (let index = 0;index < text.length; index += 1) {
+    const code = text.charCodeAt(index);
+    if (code === 10) {
+      line += 1;
+      continue;
+    }
+    if (code === 9 || code === 13)
+      continue;
+    if (code < 32 || code === 127 || code >= 128 && code <= 159)
+      return { line, label: controlLabel(code) };
+  }
+  return;
+};
+var firstDisallowedControlBytes = (bytes) => {
+  let line = 1;
+  for (let index = 0;index < bytes.length; index += 1) {
+    const code = bytes[index] ?? 0;
+    if (code === 10) {
+      line += 1;
+      continue;
+    }
+    if (code === 9 || code === 13)
+      continue;
+    if (code < 32 || code === 127)
+      return { line, label: controlLabel(code) };
+  }
+  return;
+};
+var refuseControlMessage = (hit) => `Refusing to write a control byte into a text file: ${hit.label} at L${hit.line}. The file was not changed. Remove the control byte.`;
+var binaryAfterEditMessage = (hit) => `file is binary after edit: ${hit.label} at L${hit.line}. The edit was reverted. Read the file again before retrying.`;
+var textGuards = {
+  beforeWrite(content, allowControlBytes) {
+    if (allowControlBytes)
+      return;
+    const problem = firstDisallowedControl(content);
+    if (problem)
+      throw new HarnessWorkspaceError(refuseControlMessage(problem));
+  },
+  afterWrite(bytes, allowControlBytes) {
+    if (allowControlBytes)
+      return;
+    return firstDisallowedControlBytes(bytes);
+  }
+};
+
 // src/workspace/path-policy.ts
 var HARD_IGNORES = new Set([".git", ".next", ".turbo", ".zhivex-harness", "coverage", "dist", "node_modules"]);
 var isSensitiveName = (name) => {
-  const normalized = name.toLocaleLowerCase();
+  const normalized = name.toLowerCase();
   return normalized === ".env" || normalized.startsWith(".env.") && normalized !== ".env.example" || normalized === ".npmrc" || normalized === "id_rsa" || normalized === "id_ed25519" || [".key", ".pem", ".p12", ".pfx"].some((extension) => normalized.endsWith(extension));
 };
-var isHardIgnored = (relativePath) => relativePath.split("/").some((segment) => HARD_IGNORES.has(segment.toLocaleLowerCase()) || isSensitiveName(segment));
+var isHardIgnored = (relativePath) => relativePath.split("/").some((segment) => HARD_IGNORES.has(segment.toLowerCase()) || isSensitiveName(segment));
 
 // src/workspace/workspace.ts
 var IGNORE_FILES = [".gitignore", ".zhivex-harnessignore"];
@@ -689,7 +738,7 @@ class Workspace {
       throw new HarnessWorkspaceError(`The path escapes the workspace: ${relativePath}`);
     const relative = wirePath(path3.relative(this.root, candidate));
     if (relative && isHardIgnored(relative)) {
-      const blocked = relative.split("/").find((segment) => HARD_IGNORES.has(segment.toLocaleLowerCase()) || isSensitiveName(segment));
+      const blocked = relative.split("/").find((segment) => HARD_IGNORES.has(segment.toLowerCase()) || isSensitiveName(segment));
       throw new HarnessWorkspaceError(`The path is protected by the harness policy: ${blocked}`);
     }
     return candidate;
@@ -732,8 +781,11 @@ class Workspace {
       maxBytes: MAX_FILE_BYTES
     });
     const { contents } = file;
-    if (!allowBinary && contents.includes(0))
-      throw new HarnessWorkspaceError("The file appears to be binary and cannot be read as text.");
+    if (!allowBinary && contents.includes(0)) {
+      const hit = firstDisallowedControlBytes(contents);
+      const where = hit ? `: ${hit.label} at L${hit.line}` : "";
+      throw new HarnessWorkspaceError(`The file appears to be binary and cannot be read as text${where}.`);
+    }
     return {
       path: wirePath(path3.relative(this.root, safe.path)),
       absolutePath: safe.path,
@@ -1400,19 +1452,23 @@ class Workspace {
     if (position < 0 || text.indexOf(edit.oldText, position + 1) >= 0) {
       throw new HarnessWorkspaceError("Replacement requires exactly one literal match; include more surrounding context.");
     }
-    return [{ path: edit.path, expectedDigest: edit.expectedDigest, content: text.slice(0, position) + edit.newText + text.slice(position + edit.oldText.length) }];
+    return [{
+      path: edit.path,
+      expectedDigest: edit.expectedDigest,
+      content: text.slice(0, position) + edit.newText + text.slice(position + edit.oldText.length)
+    }];
   }
-  async applyReplacement(input) {
+  async applyReplacement(input, host = {}) {
     const changes = await this.replacementChanges(input);
-    return this.applyPatch({ proposalId: createEditProposal({ changes }).proposalId, changes });
+    return this.applyPatch({ proposalId: createEditProposal({ changes }).proposalId, changes }, host);
   }
-  async applyPatch(input) {
-    return this.applyPatchWithModes(input, new Map);
+  async applyPatch(input, host = {}) {
+    return this.applyPatchWithModes(input, new Map, undefined, host);
   }
-  async applyPatchWithModes(input, modes, assertActive) {
-    return withWorkspaceMutation(this.root, () => this.applyPatchWithModesLocked(input, modes, assertActive));
+  async applyPatchWithModes(input, modes, assertActive, host = {}) {
+    return withWorkspaceMutation(this.root, () => this.applyPatchWithModesLocked(input, modes, assertActive, host));
   }
-  async applyPatchWithModesLocked(input, modes, assertActive) {
+  async applyPatchWithModesLocked(input, modes, assertActive, host = {}) {
     const proposal = validateEditProposal(input);
     this.checkAuditCapacity(proposal.changes.length);
     const targetPaths = new Set(proposal.changes.map((change) => change.path));
@@ -1457,6 +1513,7 @@ class Workspace {
             throw new HarnessWorkspaceError(`Stale patch mode rejected for ${change.path}: expected ${modeBinding.beforeMode.toString(8)}, found ${before.mode.toString(8)}.`);
           }
         }
+        textGuards.beforeWrite(change.content, host.allowControlBytes === true);
         const temporary = await this.stageFile(safe.path, change.content, modeBinding?.afterMode ?? before?.mode ?? 420);
         prepared.push({
           change,
@@ -1496,6 +1553,13 @@ class Workspace {
           await unlink(item.temporary);
         }
         committed.push(item);
+        const published = await readRegularFileNoFollow(item.target, {
+          label: "The published file",
+          maxBytes: MAX_FILE_BYTES
+        });
+        const corrupt = textGuards.afterWrite(published.contents, host.allowControlBytes === true);
+        if (corrupt)
+          throw new HarnessWorkspaceError(binaryAfterEditMessage(corrupt));
         await assertActive?.();
       }
     } catch (error) {
@@ -1672,30 +1736,65 @@ class Workspace {
     const audit = await this.audit({ operation: "quarantine", path: parsed.path, beforeDigest: source.digest, quarantineId });
     return { quarantineId, path: parsed.path, digest: source.digest, audit };
   }
-  async restoreQuarantined(input) {
-    return withWorkspaceMutation(this.root, () => this.restoreQuarantinedLocked(input));
-  }
-  async restoreQuarantinedLocked(input) {
-    const parsed = restoreFileInputSchema.parse(input);
-    this.checkAuditCapacity();
+  async readRestorableQuarantine(quarantineId) {
     const directory = await this.secureQuarantineDirectory(false);
     let manifest;
     try {
-      const manifestFile = await this.readInternalRegularFile(path3.join(directory, `${parsed.quarantineId}.json`), "Quarantine manifest", 64 * 1024);
+      const manifestFile = await this.readInternalRegularFile(path3.join(directory, `${quarantineId}.json`), "Quarantine manifest", 64 * 1024);
       manifest = JSON.parse(manifestFile.contents.toString("utf8"));
     } catch {
-      throw new HarnessWorkspaceError(`Quarantine entry was not found: ${parsed.quarantineId}.`);
+      throw new HarnessWorkspaceError(`Quarantine entry was not found: ${quarantineId}.`);
     }
-    if (manifest.schemaVersion !== 1 || manifest.quarantineId !== parsed.quarantineId || manifest.status !== "quarantined") {
-      throw new HarnessWorkspaceError(`Quarantine entry is not restorable: ${parsed.quarantineId}.`);
+    if (manifest.schemaVersion !== 1 || manifest.quarantineId !== quarantineId || manifest.status !== "quarantined") {
+      throw new HarnessWorkspaceError(`Quarantine entry is not restorable: ${quarantineId}.`);
     }
-    const dataPath = path3.join(directory, `${parsed.quarantineId}.data`);
+    const dataPath = path3.join(directory, `${quarantineId}.data`);
     const dataFile = await this.readInternalRegularFile(dataPath, "Quarantine payload", MAX_FILE_BYTES);
     const digest = digestBytes(dataFile.contents);
-    if (digest !== manifest.digest || parsed.expectedDigest && parsed.expectedDigest !== digest) {
+    if (digest !== manifest.digest) {
+      throw new HarnessWorkspaceError(`Quarantine digest mismatch: ${quarantineId}.`);
+    }
+    return { manifest, dataPath, dataFile, digest };
+  }
+  async previewRestore(input) {
+    const parsed = restoreFileInputSchema.parse(input);
+    const quarantined = await this.readRestorableQuarantine(parsed.quarantineId);
+    if (parsed.expectedDigest !== quarantined.digest) {
+      throw new HarnessWorkspaceError(`Quarantine digest mismatch: ${parsed.quarantineId}.`);
+    }
+    const destination = await this.safePath(parsed.destination, { allowMissing: true });
+    if (destination.exists)
+      throw new HarnessWorkspaceError(`Restore destination already exists: ${parsed.destination}.`);
+    let after;
+    try {
+      after = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(quarantined.dataFile.contents);
+    } catch {
+      throw new HarnessWorkspaceError("Preview requires valid UTF-8 text.");
+    }
+    return {
+      proposalId: parsed.expectedDigest,
+      files: [{
+        path: parsed.destination,
+        expectedDigest: parsed.expectedDigest,
+        before: null,
+        after,
+        afterDigest: quarantined.digest,
+        operation: "restore"
+      }]
+    };
+  }
+  async restoreQuarantined(input) {
+    return withWorkspaceMutation(this.root, () => this.restoreQuarantinedLocked(input));
+  }
+  async restoreQuarantinedLocked(input) {
+    const parsed = restoreFileInputSchema.parse(input);
+    this.checkAuditCapacity();
+    const quarantined = await this.readRestorableQuarantine(parsed.quarantineId);
+    if (parsed.expectedDigest !== quarantined.digest) {
       throw new HarnessWorkspaceError(`Quarantine digest mismatch: ${parsed.quarantineId}.`);
     }
-    const destinationPath = parsed.destination ?? manifest.originalPath;
+    const { manifest, dataPath, dataFile, digest } = quarantined;
+    const destinationPath = parsed.destination;
     const destination = await this.safePath(destinationPath, { allowMissing: true });
     if (destination.exists)
       throw new HarnessWorkspaceError(`Restore destination already exists: ${destinationPath}.`);
@@ -2998,7 +3097,7 @@ var importPatch = async (runId, expectedPatchId, host, base, current, maxFileWri
     const rollbackErrors = [];
     for (const item of [...quarantined].reverse()) {
       try {
-        await host.restoreQuarantined({ quarantineId: item.quarantineId, expectedDigest: item.digest });
+        await host.restoreQuarantined({ quarantineId: item.quarantineId, destination: item.path, expectedDigest: item.digest });
       } catch (rollbackError) {
         rollbackErrors.push(rollbackError);
       }

package/dist/{index-sstgcsr0.js → index-yx52bt4a.js}

@@ -1,6 +1,6 @@
 import {
   fileDigestSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 
 // src/workspace/change-envelope.ts
 import { createHash } from "node:crypto";

package/dist/{index-j6zxnc8m.js → index-zrz4rs7p.js}

@@ -1,25 +1,25 @@
 import {
   changeEnvelopeSchema,
   verifyChangeEnvelope
-} from "./index-sstgcsr0.js";
+} from "./index-yx52bt4a.js";
 import {
   APPROVAL_HISTORY_KEY,
   approvalDecisionViews,
   harnessPolicyDecisionEventSchema
-} from "./index-wm9xeq1n.js";
+} from "./index-bt2p8x7r.js";
 import {
   TASK_ACCEPTANCE_EVIDENCE_KEY,
   USAGE_LEDGER_KEY,
   inspectRuntimeManifest,
   inspectUsageLedger,
   readTaskAcceptanceLedger
-} from "./index-zxg4ve4j.js";
+} from "./index-fqqz1yt8.js";
 import {
   HARNESS_VERSION
-} from "./index-4fx5f3k5.js";
+} from "./index-rz7wmp71.js";
 import {
   taskCheckReceiptSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 
 // src/persistence/governance-report.ts
 import { createHash as createHash2 } from "node:crypto";

package/dist/index.js

@@ -52,7 +52,7 @@ import {
   timeToSafeFixDriverResultSchema,
   timeToSafeFixLatencyStatistics,
   timeToSafeFixTaskSchema
-} from "./index-sk3cap35.js";
+} from "./index-eps3c3g6.js";
 import {
   HARNESS_STATE_BACKUP_MAX_BYTES,
   HARNESS_STATE_BACKUP_SCHEMA_VERSION,
@@ -63,7 +63,7 @@ import {
   inspectHarnessState,
   readHarnessStateBackup,
   stateBackupBundleSchema
-} from "./index-74kkpyqk.js";
+} from "./index-rgqzdgv6.js";
 import {
   CLI_COMMAND_OPTION_CONTRACTS,
   CLI_OPTION_DEFINITIONS,
@@ -101,7 +101,7 @@ import {
   digestChangeEnvelopeArtifact,
   externalAttestationReferenceSchema,
   verifyChangeEnvelope
-} from "./index-sstgcsr0.js";
+} from "./index-yx52bt4a.js";
 import {
   harnessLocalCredentialsSchema,
   openHarnessActivityStore,
@@ -109,13 +109,13 @@ import {
   recoverHarnessLocalService,
   requestHarnessLocalService,
   startHarnessLocalService
-} from "./index-crta5wzv.js";
+} from "./index-74f9yhfh.js";
 import {
   createHarnessClientAdapter
-} from "./index-02pqtbbg.js";
+} from "./index-paf7z8kn.js";
 import {
   openWorkspaceCheckpointStore
-} from "./index-6599mpmy.js";
+} from "./index-4mn6m3bq.js";
 import {
   DEFAULT_HARNESS_CONTEXT_MANIFEST,
   DEFAULT_HARNESS_PROJECT_INSTRUCTIONS,
@@ -154,7 +154,7 @@ import {
   runHarness,
   runHarnessReviewGroup,
   selectHarnessModel
-} from "./index-0zs2dz26.js";
+} from "./index-pf73y4gt.js";
 import {
   HARNESS_OPERATIONS_SCHEMA_VERSION,
   HARNESS_SQLITE_FILE,
@@ -165,7 +165,7 @@ import {
   listHarnessRuns,
   migrateLegacyFileRuns,
   openHarnessPersistence
-} from "./index-f6mqa5gk.js";
+} from "./index-amjttjaj.js";
 import {
   HARNESS_MCP_CONFIG_SCHEMA_VERSION,
   HARNESS_MCP_PERMISSIONS,
@@ -173,7 +173,7 @@ import {
   createHttpMcpClient,
   loadHarnessMcpConfiguration,
   normalizeHarnessMcpConfiguration
-} from "./index-dtb2c6ds.js";
+} from "./index-2r4f0p4n.js";
 import {
   CliOciRuntimeAdapter,
   HARNESS_EXECUTION_ARTIFACT_SCHEMA_VERSION,
@@ -185,7 +185,7 @@ import {
   describeOciCommand,
   executionFingerprintInput,
   harnessExecutionSession
-} from "./index-d9zkmhz3.js";
+} from "./index-w0m1nckc.js";
 import {
   BUILTIN_PROVIDER_REGISTRATIONS,
   DEFAULT_ALLOWED_CHECKS,
@@ -217,7 +217,7 @@ import {
   applyHarnessToolPolicy,
   createHarnessToolPolicy,
   harnessToolPolicySchema
-} from "./index-wm9xeq1n.js";
+} from "./index-bt2p8x7r.js";
 import {
   HARNESS_SESSION_INDEX_FILE,
   HARNESS_SESSION_SCHEMA_VERSION,
@@ -226,12 +226,12 @@ import {
   openCliSessionStore,
   openSessionStore,
   validateStateDirectory
-} from "./index-zxg4ve4j.js";
+} from "./index-fqqz1yt8.js";
 import {
   BUN_ENGINE_RANGE,
   HARNESS_VERSION,
   NODE_ENGINE_RANGE
-} from "./index-4fx5f3k5.js";
+} from "./index-rz7wmp71.js";
 import {
   EDIT_CONTRACT_SCHEMA_VERSION,
   EDIT_DIGEST_ALGORITHM,
@@ -254,7 +254,7 @@ import {
   restoreFileInputSchema,
   validateEditProposal,
   workspaceFilePathSchema
-} from "./index-xdbkcccf.js";
+} from "./index-6dxrbnxm.js";
 import {
   CLI_EVENT_SCHEMA_VERSION,
   CLI_JSON_SCHEMA_VERSION,

package/dist/integrations/mcp-stdio-tools.d.ts

@@ -1,12 +1,15 @@
 import { type McpClient, type ToolSet } from '@zhivex-ai/core';
 import type { McpStdioLaunchProposal } from './mcp-stdio-admission.js';
 import { createJournaledMcpClient } from '../persistence/mcp-execution-journal.js';
-/** Host tool bridge. Existing agent execution supplies durable interrupt approvals. */
+/** Host tool bridge. Tool results are untrusted data. Existing agent execution supplies durable interrupt approvals.
+ * flagEncodedSecrets is optional. Credential-bearing servers use it to mark encodings and high-entropy tokens; it does not rewrite discovery schemas. */
 export declare function createIsolatedMcpTools(options: {
     client: McpClient & {
         close(): Promise<void>;
     };
     proposal: Readonly<McpStdioLaunchProposal>;
     sensitiveValues?: readonly string[];
+    /** When set, tool results flag known encodings of sensitiveValues and other high-entropy encoded strings. */
+    flagEncodedSecrets?: boolean;
     journal?: Pick<Parameters<typeof createJournaledMcpClient>[0], 'store' | 'runId' | 'scope'>;
 }): Promise<ToolSet>;

package/dist/providers/bedrock.d.ts

@@ -4,7 +4,7 @@ export declare const BEDROCK_TRANSPORT_ENVIRONMENT: readonly ["AWS_REGION", "AWS
 export declare const BEDROCK_CREDENTIAL_ENVIRONMENT: readonly ["BEDROCK_API_KEY", "AWS_BEARER_TOKEN_BEDROCK"];
 /**
  * SDK matrix: Converse is Tier B and `runtime: "openai"` is Tier A.
- * Published `@zhivex-ai/bedrock@2.0.7` reports those labels. Converse includes
+ * Published `@zhivex-ai/bedrock@2.1.0` reports those labels. Converse includes
  * reasoning and `toolChoiceNone`. Harness reports the installed label and
  * does not relabel the model.
  */

package/dist/review/reveal-invisible.d.ts

@@ -0,0 +1,13 @@
+export interface RevealedPiece {
+    text: string;
+    /** The text stands in for a character a terminal or browser would hide. */
+    mark: boolean;
+}
+/**
+ * Show control, zero-width, and bidi characters, and mark tabs and trailing whitespace.
+ * Newlines stay newlines so a diff line remains one row. A second pass leaves the result unchanged.
+ */
+export declare const revealInvisiblePieces: (line: string) => RevealedPiece[];
+export declare const revealInvisible: (line: string) => string;
+/** Reveal each line and keep the newline structure of a whole file. */
+export declare const revealInvisibleText: (value: string) => string;

package/dist/runtime/budget-ledger-scope.d.ts

@@ -0,0 +1,14 @@
+import type { AgentRunStore, AgentStoreScope } from "@zhivex-ai/core";
+/** SDK coordinators address ledgers with this namespace. The durable owner appends the source namespace. */
+export declare const BUDGET_LEDGER_NAMESPACE = "__zhivex_budget__";
+export declare const BUDGET_OWNER_NAMESPACE_KEY = "budgetOwnerNamespace";
+export declare const isReservedBudgetNamespace: (namespace: string | undefined) => boolean;
+/** Bind the caller's full namespace into the ledger owner. Collapsing every namespace to the SDK marker lets one tenant read another's ledger by run id. */
+export declare const budgetLedgerNamespace: (namespace: string) => string;
+/**
+ * A named source becomes `__zhivex_budget__:<namespace>`.
+ * An omitted namespace uses the trailing-colon owner, which `budgetLedgerNamespace` never produces, so it cannot join a named ledger.
+ */
+export declare const budgetLedgerScope: (scope: Pick<AgentStoreScope, "tenantId" | "userId" | "namespace">) => AgentStoreScope;
+/** Translate the SDK's collapsed namespace onto the bound owner before the file or SQLite store. */
+export declare const bindBudgetLedgerStore: (primary: AgentRunStore, scope: AgentStoreScope, budget?: AgentRunStore) => AgentRunStore;

package/dist/service-cli.js

@@ -2,22 +2,22 @@
 import {
   recoverHarnessLocalService,
   startHarnessLocalService
-} from "./index-crta5wzv.js";
-import"./index-02pqtbbg.js";
-import"./index-6599mpmy.js";
+} from "./index-74f9yhfh.js";
+import"./index-paf7z8kn.js";
+import"./index-4mn6m3bq.js";
 import {
   createHarness
-} from "./index-0zs2dz26.js";
-import"./index-f6mqa5gk.js";
-import"./index-dtb2c6ds.js";
-import"./index-d9zkmhz3.js";
+} from "./index-pf73y4gt.js";
+import"./index-amjttjaj.js";
+import"./index-2r4f0p4n.js";
+import"./index-w0m1nckc.js";
 import"./index-1265j7t2.js";
 import"./index-c39197wq.js";
 import"./index-mzydbzp8.js";
-import"./index-wm9xeq1n.js";
-import"./index-zxg4ve4j.js";
-import"./index-4fx5f3k5.js";
-import"./index-xdbkcccf.js";
+import"./index-bt2p8x7r.js";
+import"./index-fqqz1yt8.js";
+import"./index-rz7wmp71.js";
+import"./index-6dxrbnxm.js";
 import"./index-4gt045j0.js";
 import"./index-bpc596v3.js";
 import"./index-fm84men1.js";

package/dist/{service-client-cli-eqrdc9zq.js → service-client-cli-pp5z4dmf.js}

@@ -9,17 +9,17 @@ import {
   navigateConsole,
   printPolicyInspection,
   sanitizeTerminalText
-} from "./cli-entry-a890x3kq.js";
+} from "./cli-entry-4g2ewcnw.js";
 import {
   CLI_EVENT_SCHEMA_VERSION,
   CLI_JSON_SCHEMA_VERSION,
   changeEnvelopeSchema,
   harnessPolicyDecisionEventSchema,
   serializeStreamResult
-} from "./cli-entry-7f0cen32.js";
+} from "./cli-entry-6amx4mcc.js";
 import {
   HARNESS_VERSION
-} from "./cli-entry-3s63zn4w.js";
+} from "./cli-entry-10th5awp.js";
 import {
   HARNESS_ERROR_CODES,
   HARNESS_ERROR_SCHEMA_VERSION,
@@ -195,7 +195,7 @@ var harnessTaskProjectionSchema = z2.strictObject({
 // src/approvals/approval-diff.ts
 import { z as z3 } from "zod";
 var sha = z3.string().regex(/^sha256:[a-f0-9]{64}$/);
-var file = z3.object({ path: z3.string().max(1024), expectedDigest: sha.nullable(), before: z3.string().nullable(), after: z3.string().nullable(), afterDigest: sha.nullable(), beforeMode: z3.number().int().optional(), afterMode: z3.number().int().optional(), operation: z3.enum(["create", "update", "delete"]).optional() }).strict();
+var file = z3.object({ path: z3.string().max(1024), expectedDigest: sha.nullable(), before: z3.string().nullable(), after: z3.string().nullable(), afterDigest: sha.nullable(), beforeMode: z3.number().int().optional(), afterMode: z3.number().int().optional(), operation: z3.enum(["create", "update", "delete", "restore"]).optional() }).strict();
 var archive = z3.object({ approvalId: z3.string().max(256), digest: z3.string().regex(/^[a-f0-9]{64}$/), proposalId: sha, files: z3.array(file).min(1).max(50) }).strict();
 var archives = z3.array(archive).max(512);
 var maxBytes = 2 * 1024 * 1024;

package/dist/tools/workspace.d.ts

@@ -89,8 +89,8 @@ export declare const createWorkspaceTools: (workspace: Workspace, allowedChecks:
     }, z.core.$strict>, import("@zhivex-ai/core").JsonValue, unknown>;
     restore_file: import("@zhivex-ai/core").ToolDefinition<z.ZodObject<{
         quarantineId: z.ZodString;
-        destination: z.ZodOptional<z.ZodString>;
-        expectedDigest: z.ZodOptional<z.ZodString>;
+        destination: z.ZodString;
+        expectedDigest: z.ZodString;
     }, z.core.$strict>, import("@zhivex-ai/core").JsonValue, unknown>;
     run_check: import("@zhivex-ai/core").ToolDefinition<z.ZodObject<{
         check: z.ZodString;