@zhivex-ai/harness 1.5.0 → 1.6.2

package/dist/{index-pq3kz1r8.js → index-rz7wmp71.js}

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "@zhivex-ai/harness",
-  version: "1.5.0",
+  version: "1.6.2",
   description: "Governed, provider-portable runtime for coding agents with durable approvals and isolated repository execution.",
   type: "module",
   license: "MIT",
@@ -101,6 +101,7 @@ var package_default = {
     "LICENSE",
     "docs/CHANGE_ENVELOPES.md",
     "docs/CLI.md",
+    "docs/AUTO_APPROVE.md",
     "docs/WEB_LIMITS.md",
     "docs/CODE_RELEASE.md",
     "docs/CODE_WEB_TASKS.md",
@@ -217,26 +218,26 @@ var package_default = {
     "smoke:mcp:installed": "bun run build && bun scripts/mcp-installed-smoke.ts"
   },
   dependencies: {
-    "@zhivex-ai/agents": "1.11.0",
-    "@zhivex-ai/anthropic": "0.14.0",
-    "@zhivex-ai/azure-openai": "0.7.8",
-    "@zhivex-ai/bedrock": "2.0.7",
-    "@zhivex-ai/core": "1.34.0",
-    "@zhivex-ai/gemini": "0.13.0",
-    "@zhivex-ai/meta": "0.2.9",
-    "@zhivex-ai/openai": "0.16.0",
-    "@zhivex-ai/qwen": "0.16.4",
-    "@zhivex-ai/vertex": "1.2.7",
-    "google-auth-library": "11.1.0",
-    zod: "4.6.5"
+    "@zhivex-ai/agents": "1.12.0",
+    "@zhivex-ai/anthropic": "0.15.0",
+    "@zhivex-ai/azure-openai": "0.8.0",
+    "@zhivex-ai/bedrock": "2.1.0",
+    "@zhivex-ai/core": "1.36.0",
+    "@zhivex-ai/gemini": "0.14.0",
+    "@zhivex-ai/meta": "0.3.0",
+    "@zhivex-ai/openai": "0.17.0",
+    "@zhivex-ai/qwen": "0.18.0",
+    "@zhivex-ai/vertex": "1.3.0",
+    "google-auth-library": "11.3.1",
+    zod: "4.6.7"
   },
   overrides: {
-    "@zhivex-ai/core": "1.34.0"
+    "@zhivex-ai/core": "1.36.0"
   },
   devDependencies: {
     "@agentclientprotocol/sdk": "1.8.0",
     "@modelcontextprotocol/server": "2.3.1",
-    "@types/bun": "1.4.2",
+    "@types/bun": "1.4.3",
     "@types/node": "^26.6.5",
     typescript: "7.0.2",
     "typescript-compiler-api": "npm:typescript@6.0.3"

package/dist/{index-ggstwr0v.js → index-w0m1nckc.js}

@@ -403,6 +403,55 @@ import { createHash as createHash2, randomUUID } from "node:crypto";
 import { link, lstat as lstat3, mkdir as mkdir2, open as open2, readdir, realpath as realpath2, rename, stat, unlink } from "node:fs/promises";
 import path3 from "node:path";
 
+// src/workspace/text-integrity.ts
+var controlLabel = (code) => code === 0 ? "NUL byte" : `U+${code.toString(16).padStart(4, "0")}`;
+var firstDisallowedControl = (text) => {
+  let line = 1;
+  for (let index = 0;index < text.length; index += 1) {
+    const code = text.charCodeAt(index);
+    if (code === 10) {
+      line += 1;
+      continue;
+    }
+    if (code === 9 || code === 13)
+      continue;
+    if (code < 32 || code === 127 || code >= 128 && code <= 159)
+      return { line, label: controlLabel(code) };
+  }
+  return;
+};
+var firstDisallowedControlBytes = (bytes) => {
+  let line = 1;
+  for (let index = 0;index < bytes.length; index += 1) {
+    const code = bytes[index] ?? 0;
+    if (code === 10) {
+      line += 1;
+      continue;
+    }
+    if (code === 9 || code === 13)
+      continue;
+    if (code < 32 || code === 127)
+      return { line, label: controlLabel(code) };
+  }
+  return;
+};
+var refuseControlMessage = (hit) => `Refusing to write a control byte into a text file: ${hit.label} at L${hit.line}. The file was not changed. Remove the control byte.`;
+var binaryAfterEditMessage = (hit) => `file is binary after edit: ${hit.label} at L${hit.line}. The edit was reverted. Read the file again before retrying.`;
+var textGuards = {
+  beforeWrite(content, allowControlBytes) {
+    if (allowControlBytes)
+      return;
+    const problem = firstDisallowedControl(content);
+    if (problem)
+      throw new HarnessWorkspaceError(refuseControlMessage(problem));
+  },
+  afterWrite(bytes, allowControlBytes) {
+    if (allowControlBytes)
+      return;
+    return firstDisallowedControlBytes(bytes);
+  }
+};
+
 // src/workspace/path-policy.ts
 var HARD_IGNORES = new Set([".git", ".next", ".turbo", ".zhivex-harness", "coverage", "dist", "node_modules"]);
 var isSensitiveName = (name) => {
@@ -732,8 +781,11 @@ class Workspace {
       maxBytes: MAX_FILE_BYTES
     });
     const { contents } = file;
-    if (!allowBinary && contents.includes(0))
-      throw new HarnessWorkspaceError("The file appears to be binary and cannot be read as text.");
+    if (!allowBinary && contents.includes(0)) {
+      const hit = firstDisallowedControlBytes(contents);
+      const where = hit ? `: ${hit.label} at L${hit.line}` : "";
+      throw new HarnessWorkspaceError(`The file appears to be binary and cannot be read as text${where}.`);
+    }
     return {
       path: wirePath(path3.relative(this.root, safe.path)),
       absolutePath: safe.path,
@@ -1400,19 +1452,23 @@ class Workspace {
     if (position < 0 || text.indexOf(edit.oldText, position + 1) >= 0) {
       throw new HarnessWorkspaceError("Replacement requires exactly one literal match; include more surrounding context.");
     }
-    return [{ path: edit.path, expectedDigest: edit.expectedDigest, content: text.slice(0, position) + edit.newText + text.slice(position + edit.oldText.length) }];
+    return [{
+      path: edit.path,
+      expectedDigest: edit.expectedDigest,
+      content: text.slice(0, position) + edit.newText + text.slice(position + edit.oldText.length)
+    }];
   }
-  async applyReplacement(input) {
+  async applyReplacement(input, host = {}) {
     const changes = await this.replacementChanges(input);
-    return this.applyPatch({ proposalId: createEditProposal({ changes }).proposalId, changes });
+    return this.applyPatch({ proposalId: createEditProposal({ changes }).proposalId, changes }, host);
   }
-  async applyPatch(input) {
-    return this.applyPatchWithModes(input, new Map);
+  async applyPatch(input, host = {}) {
+    return this.applyPatchWithModes(input, new Map, undefined, host);
   }
-  async applyPatchWithModes(input, modes, assertActive) {
-    return withWorkspaceMutation(this.root, () => this.applyPatchWithModesLocked(input, modes, assertActive));
+  async applyPatchWithModes(input, modes, assertActive, host = {}) {
+    return withWorkspaceMutation(this.root, () => this.applyPatchWithModesLocked(input, modes, assertActive, host));
   }
-  async applyPatchWithModesLocked(input, modes, assertActive) {
+  async applyPatchWithModesLocked(input, modes, assertActive, host = {}) {
     const proposal = validateEditProposal(input);
     this.checkAuditCapacity(proposal.changes.length);
     const targetPaths = new Set(proposal.changes.map((change) => change.path));
@@ -1457,6 +1513,7 @@ class Workspace {
             throw new HarnessWorkspaceError(`Stale patch mode rejected for ${change.path}: expected ${modeBinding.beforeMode.toString(8)}, found ${before.mode.toString(8)}.`);
           }
         }
+        textGuards.beforeWrite(change.content, host.allowControlBytes === true);
         const temporary = await this.stageFile(safe.path, change.content, modeBinding?.afterMode ?? before?.mode ?? 420);
         prepared.push({
           change,
@@ -1496,6 +1553,13 @@ class Workspace {
           await unlink(item.temporary);
         }
         committed.push(item);
+        const published = await readRegularFileNoFollow(item.target, {
+          label: "The published file",
+          maxBytes: MAX_FILE_BYTES
+        });
+        const corrupt = textGuards.afterWrite(published.contents, host.allowControlBytes === true);
+        if (corrupt)
+          throw new HarnessWorkspaceError(binaryAfterEditMessage(corrupt));
         await assertActive?.();
       }
     } catch (error) {

package/dist/{index-jpdvn09j.js → index-zrz4rs7p.js}

@@ -16,7 +16,7 @@ import {
 } from "./index-fqqz1yt8.js";
 import {
   HARNESS_VERSION
-} from "./index-pq3kz1r8.js";
+} from "./index-rz7wmp71.js";
 import {
   taskCheckReceiptSchema
 } from "./index-6dxrbnxm.js";

package/dist/index.js

@@ -63,7 +63,7 @@ import {
   inspectHarnessState,
   readHarnessStateBackup,
   stateBackupBundleSchema
-} from "./index-xfedewpt.js";
+} from "./index-rgqzdgv6.js";
 import {
   CLI_COMMAND_OPTION_CONTRACTS,
   CLI_OPTION_DEFINITIONS,
@@ -109,13 +109,13 @@ import {
   recoverHarnessLocalService,
   requestHarnessLocalService,
   startHarnessLocalService
-} from "./index-vvzc5ezz.js";
+} from "./index-74f9yhfh.js";
 import {
   createHarnessClientAdapter
-} from "./index-vc7yxz50.js";
+} from "./index-paf7z8kn.js";
 import {
   openWorkspaceCheckpointStore
-} from "./index-63gbp0cz.js";
+} from "./index-4mn6m3bq.js";
 import {
   DEFAULT_HARNESS_CONTEXT_MANIFEST,
   DEFAULT_HARNESS_PROJECT_INSTRUCTIONS,
@@ -154,7 +154,7 @@ import {
   runHarness,
   runHarnessReviewGroup,
   selectHarnessModel
-} from "./index-6fp7kdpx.js";
+} from "./index-pf73y4gt.js";
 import {
   HARNESS_OPERATIONS_SCHEMA_VERSION,
   HARNESS_SQLITE_FILE,
@@ -165,7 +165,7 @@ import {
   listHarnessRuns,
   migrateLegacyFileRuns,
   openHarnessPersistence
-} from "./index-wwthv10a.js";
+} from "./index-amjttjaj.js";
 import {
   HARNESS_MCP_CONFIG_SCHEMA_VERSION,
   HARNESS_MCP_PERMISSIONS,
@@ -173,7 +173,7 @@ import {
   createHttpMcpClient,
   loadHarnessMcpConfiguration,
   normalizeHarnessMcpConfiguration
-} from "./index-5zbq9ztj.js";
+} from "./index-2r4f0p4n.js";
 import {
   CliOciRuntimeAdapter,
   HARNESS_EXECUTION_ARTIFACT_SCHEMA_VERSION,
@@ -185,7 +185,7 @@ import {
   describeOciCommand,
   executionFingerprintInput,
   harnessExecutionSession
-} from "./index-ggstwr0v.js";
+} from "./index-w0m1nckc.js";
 import {
   BUILTIN_PROVIDER_REGISTRATIONS,
   DEFAULT_ALLOWED_CHECKS,
@@ -231,7 +231,7 @@ import {
   BUN_ENGINE_RANGE,
   HARNESS_VERSION,
   NODE_ENGINE_RANGE
-} from "./index-pq3kz1r8.js";
+} from "./index-rz7wmp71.js";
 import {
   EDIT_CONTRACT_SCHEMA_VERSION,
   EDIT_DIGEST_ALGORITHM,

package/dist/providers/bedrock.d.ts

@@ -4,7 +4,7 @@ export declare const BEDROCK_TRANSPORT_ENVIRONMENT: readonly ["AWS_REGION", "AWS
 export declare const BEDROCK_CREDENTIAL_ENVIRONMENT: readonly ["BEDROCK_API_KEY", "AWS_BEARER_TOKEN_BEDROCK"];
 /**
  * SDK matrix: Converse is Tier B and `runtime: "openai"` is Tier A.
- * Published `@zhivex-ai/bedrock@2.0.7` reports those labels. Converse includes
+ * Published `@zhivex-ai/bedrock@2.1.0` reports those labels. Converse includes
  * reasoning and `toolChoiceNone`. Harness reports the installed label and
  * does not relabel the model.
  */

package/dist/review/reveal-invisible.d.ts

@@ -0,0 +1,13 @@
+export interface RevealedPiece {
+    text: string;
+    /** The text stands in for a character a terminal or browser would hide. */
+    mark: boolean;
+}
+/**
+ * Show control, zero-width, and bidi characters, and mark tabs and trailing whitespace.
+ * Newlines stay newlines so a diff line remains one row. A second pass leaves the result unchanged.
+ */
+export declare const revealInvisiblePieces: (line: string) => RevealedPiece[];
+export declare const revealInvisible: (line: string) => string;
+/** Reveal each line and keep the newline structure of a whole file. */
+export declare const revealInvisibleText: (value: string) => string;

package/dist/service-cli.js

@@ -2,21 +2,21 @@
 import {
   recoverHarnessLocalService,
   startHarnessLocalService
-} from "./index-vvzc5ezz.js";
-import"./index-vc7yxz50.js";
-import"./index-63gbp0cz.js";
+} from "./index-74f9yhfh.js";
+import"./index-paf7z8kn.js";
+import"./index-4mn6m3bq.js";
 import {
   createHarness
-} from "./index-6fp7kdpx.js";
-import"./index-wwthv10a.js";
-import"./index-5zbq9ztj.js";
-import"./index-ggstwr0v.js";
+} from "./index-pf73y4gt.js";
+import"./index-amjttjaj.js";
+import"./index-2r4f0p4n.js";
+import"./index-w0m1nckc.js";
 import"./index-1265j7t2.js";
 import"./index-c39197wq.js";
 import"./index-mzydbzp8.js";
 import"./index-bt2p8x7r.js";
 import"./index-fqqz1yt8.js";
-import"./index-pq3kz1r8.js";
+import"./index-rz7wmp71.js";
 import"./index-6dxrbnxm.js";
 import"./index-4gt045j0.js";
 import"./index-bpc596v3.js";

package/dist/{service-client-cli-v6qptg9x.js → service-client-cli-pp5z4dmf.js}

@@ -9,17 +9,17 @@ import {
   navigateConsole,
   printPolicyInspection,
   sanitizeTerminalText
-} from "./cli-entry-h2yc9x37.js";
+} from "./cli-entry-4g2ewcnw.js";
 import {
   CLI_EVENT_SCHEMA_VERSION,
   CLI_JSON_SCHEMA_VERSION,
   changeEnvelopeSchema,
   harnessPolicyDecisionEventSchema,
   serializeStreamResult
-} from "./cli-entry-928p8h41.js";
+} from "./cli-entry-6amx4mcc.js";
 import {
   HARNESS_VERSION
-} from "./cli-entry-q8bgkn9m.js";
+} from "./cli-entry-10th5awp.js";
 import {
   HARNESS_ERROR_CODES,
   HARNESS_ERROR_SCHEMA_VERSION,

package/dist/verify-historical-migrations.js

@@ -5905,6 +5905,55 @@ var runPortableProcess = async (command, options = {}) => {
   }
 };
 
+// src/workspace/text-integrity.ts
+var controlLabel = (code) => code === 0 ? "NUL byte" : `U+${code.toString(16).padStart(4, "0")}`;
+var firstDisallowedControl = (text2) => {
+  let line = 1;
+  for (let index = 0;index < text2.length; index += 1) {
+    const code = text2.charCodeAt(index);
+    if (code === 10) {
+      line += 1;
+      continue;
+    }
+    if (code === 9 || code === 13)
+      continue;
+    if (code < 32 || code === 127 || code >= 128 && code <= 159)
+      return { line, label: controlLabel(code) };
+  }
+  return;
+};
+var firstDisallowedControlBytes = (bytes) => {
+  let line = 1;
+  for (let index = 0;index < bytes.length; index += 1) {
+    const code = bytes[index] ?? 0;
+    if (code === 10) {
+      line += 1;
+      continue;
+    }
+    if (code === 9 || code === 13)
+      continue;
+    if (code < 32 || code === 127)
+      return { line, label: controlLabel(code) };
+  }
+  return;
+};
+var refuseControlMessage = (hit) => `Refusing to write a control byte into a text file: ${hit.label} at L${hit.line}. The file was not changed. Remove the control byte.`;
+var binaryAfterEditMessage = (hit) => `file is binary after edit: ${hit.label} at L${hit.line}. The edit was reverted. Read the file again before retrying.`;
+var textGuards = {
+  beforeWrite(content, allowControlBytes) {
+    if (allowControlBytes)
+      return;
+    const problem = firstDisallowedControl(content);
+    if (problem)
+      throw new HarnessWorkspaceError(refuseControlMessage(problem));
+  },
+  afterWrite(bytes, allowControlBytes) {
+    if (allowControlBytes)
+      return;
+    return firstDisallowedControlBytes(bytes);
+  }
+};
+
 // src/workspace/path-policy.ts
 var HARD_IGNORES = new Set([".git", ".next", ".turbo", ".zhivex-harness", "coverage", "dist", "node_modules"]);
 var isSensitiveName = (name) => {
@@ -6234,8 +6283,11 @@ class Workspace {
       maxBytes: MAX_FILE_BYTES
     });
     const { contents } = file;
-    if (!allowBinary && contents.includes(0))
-      throw new HarnessWorkspaceError("The file appears to be binary and cannot be read as text.");
+    if (!allowBinary && contents.includes(0)) {
+      const hit = firstDisallowedControlBytes(contents);
+      const where = hit ? `: ${hit.label} at L${hit.line}` : "";
+      throw new HarnessWorkspaceError(`The file appears to be binary and cannot be read as text${where}.`);
+    }
     return {
       path: wirePath(path11.relative(this.root, safe.path)),
       absolutePath: safe.path,
@@ -6902,19 +6954,23 @@ class Workspace {
     if (position < 0 || text2.indexOf(edit.oldText, position + 1) >= 0) {
       throw new HarnessWorkspaceError("Replacement requires exactly one literal match; include more surrounding context.");
     }
-    return [{ path: edit.path, expectedDigest: edit.expectedDigest, content: text2.slice(0, position) + edit.newText + text2.slice(position + edit.oldText.length) }];
+    return [{
+      path: edit.path,
+      expectedDigest: edit.expectedDigest,
+      content: text2.slice(0, position) + edit.newText + text2.slice(position + edit.oldText.length)
+    }];
   }
-  async applyReplacement(input) {
+  async applyReplacement(input, host = {}) {
     const changes = await this.replacementChanges(input);
-    return this.applyPatch({ proposalId: createEditProposal({ changes }).proposalId, changes });
+    return this.applyPatch({ proposalId: createEditProposal({ changes }).proposalId, changes }, host);
   }
-  async applyPatch(input) {
-    return this.applyPatchWithModes(input, new Map);
+  async applyPatch(input, host = {}) {
+    return this.applyPatchWithModes(input, new Map, undefined, host);
   }
-  async applyPatchWithModes(input, modes, assertActive) {
-    return withWorkspaceMutation(this.root, () => this.applyPatchWithModesLocked(input, modes, assertActive));
+  async applyPatchWithModes(input, modes, assertActive, host = {}) {
+    return withWorkspaceMutation(this.root, () => this.applyPatchWithModesLocked(input, modes, assertActive, host));
   }
-  async applyPatchWithModesLocked(input, modes, assertActive) {
+  async applyPatchWithModesLocked(input, modes, assertActive, host = {}) {
     const proposal = validateEditProposal(input);
     this.checkAuditCapacity(proposal.changes.length);
     const targetPaths = new Set(proposal.changes.map((change) => change.path));
@@ -6959,6 +7015,7 @@ class Workspace {
             throw new HarnessWorkspaceError(`Stale patch mode rejected for ${change.path}: expected ${modeBinding.beforeMode.toString(8)}, found ${before.mode.toString(8)}.`);
           }
         }
+        textGuards.beforeWrite(change.content, host.allowControlBytes === true);
         const temporary = await this.stageFile(safe.path, change.content, modeBinding?.afterMode ?? before?.mode ?? 420);
         prepared.push({
           change,
@@ -6998,6 +7055,13 @@ class Workspace {
           await unlink(item.temporary);
         }
         committed.push(item);
+        const published = await readRegularFileNoFollow(item.target, {
+          label: "The published file",
+          maxBytes: MAX_FILE_BYTES
+        });
+        const corrupt = textGuards.afterWrite(published.contents, host.allowControlBytes === true);
+        if (corrupt)
+          throw new HarnessWorkspaceError(binaryAfterEditMessage(corrupt));
         await assertActive?.();
       }
     } catch (error) {
@@ -13534,6 +13598,7 @@ var record2 = (value) => value !== null && typeof value === "object" && !Array.i
 var LOCAL_TOOLS = LOCAL_TOOL_NAMES;
 var MAX_USER_STEERING = 10;
 var CONTEXT_PRIORITY = "Latest user > chronological user steering > historical objective. Assistant never overrides user facts. Questions retain task.";
+var EARLIER = "[before later user messages] ";
 var summarizeHarnessMessages = (messages, maxCharacters = 4000) => {
   const redaction2 = createRedactionPolicy8({ includeEmails: true });
   const clean = (text3, limit = 512) => redaction2.redactText(text3).replace(/\bBearer\s+\S+/gi, "Bearer [REDACTED]").replace(/\b([A-Z][A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD)|api[_-]?key|access[_-]?token|password)\s*([=:])\s*(?:"[^"]*"|'[^']*'|\S+)/gi, "$1$2[REDACTED]").replace(/\b(?:sk|ghp|gho|github_pat)-[A-Za-z0-9_-]{8,}\b/g, "[REDACTED]").replace(/\s+/g, " ").trim().slice(0, limit);
@@ -13559,6 +13624,12 @@ var summarizeHarnessMessages = (messages, maxCharacters = 4000) => {
       omitted = true;
     }
   };
+  const markRecentEarlier = () => {
+    const marked = recent.map((value) => value.startsWith(EARLIER) ? value : `${EARLIER}${value}`);
+    recent.length = 0;
+    for (const value of marked)
+      add(recent, value, 4);
+  };
   const rememberObservation = (tool3, detail) => {
     if (typeof tool3 !== "string" || !LOCAL_TOOLS.has(tool3) || typeof detail !== "string")
       return;
@@ -13676,6 +13747,7 @@ var summarizeHarnessMessages = (messages, maxCharacters = 4000) => {
           objective = text3;
           if (historicalObjective)
             add(steering, text3, MAX_USER_STEERING);
+          markRecentEarlier();
         } else
           add(recent, `${message.role}: ${text3}`, 4);
       } else if (part.type === "tool-call") {
@@ -15355,7 +15427,7 @@ import { z as z34 } from "zod";
 // package.json
 var package_default = {
   name: "@zhivex-ai/harness",
-  version: "1.5.0",
+  version: "1.6.2",
   description: "Governed, provider-portable runtime for coding agents with durable approvals and isolated repository execution.",
   type: "module",
   license: "MIT",
@@ -15455,6 +15527,7 @@ var package_default = {
     "LICENSE",
     "docs/CHANGE_ENVELOPES.md",
     "docs/CLI.md",
+    "docs/AUTO_APPROVE.md",
     "docs/WEB_LIMITS.md",
     "docs/CODE_RELEASE.md",
     "docs/CODE_WEB_TASKS.md",
@@ -15571,26 +15644,26 @@ var package_default = {
     "smoke:mcp:installed": "bun run build && bun scripts/mcp-installed-smoke.ts"
   },
   dependencies: {
-    "@zhivex-ai/agents": "1.11.0",
-    "@zhivex-ai/anthropic": "0.14.0",
-    "@zhivex-ai/azure-openai": "0.7.8",
-    "@zhivex-ai/bedrock": "2.0.7",
-    "@zhivex-ai/core": "1.34.0",
-    "@zhivex-ai/gemini": "0.13.0",
-    "@zhivex-ai/meta": "0.2.9",
-    "@zhivex-ai/openai": "0.16.0",
-    "@zhivex-ai/qwen": "0.16.4",
-    "@zhivex-ai/vertex": "1.2.7",
-    "google-auth-library": "11.1.0",
-    zod: "4.6.5"
+    "@zhivex-ai/agents": "1.12.0",
+    "@zhivex-ai/anthropic": "0.15.0",
+    "@zhivex-ai/azure-openai": "0.8.0",
+    "@zhivex-ai/bedrock": "2.1.0",
+    "@zhivex-ai/core": "1.36.0",
+    "@zhivex-ai/gemini": "0.14.0",
+    "@zhivex-ai/meta": "0.3.0",
+    "@zhivex-ai/openai": "0.17.0",
+    "@zhivex-ai/qwen": "0.18.0",
+    "@zhivex-ai/vertex": "1.3.0",
+    "google-auth-library": "11.3.1",
+    zod: "4.6.7"
   },
   overrides: {
-    "@zhivex-ai/core": "1.34.0"
+    "@zhivex-ai/core": "1.36.0"
   },
   devDependencies: {
     "@agentclientprotocol/sdk": "1.8.0",
     "@modelcontextprotocol/server": "2.3.1",
-    "@types/bun": "1.4.2",
+    "@types/bun": "1.4.3",
     "@types/node": "^26.6.5",
     typescript: "7.0.2",
     "typescript-compiler-api": "npm:typescript@6.0.3"

package/dist/workspace/text-integrity.d.ts

@@ -0,0 +1,19 @@
+export interface ControlHit {
+    line: number;
+    label: string;
+}
+/** C0 controls other than tab, LF, and CR, plus DEL and Unicode C1 controls. */
+export declare const firstDisallowedControl: (text: string) => ControlHit | undefined;
+/** Raw C0/DEL bytes. UTF-8 continuation bytes are left alone. */
+export declare const firstDisallowedControlBytes: (bytes: Uint8Array) => ControlHit | undefined;
+export declare const refuseControlMessage: (hit: ControlHit) => string;
+export declare const binaryAfterEditMessage: (hit: ControlHit) => string;
+/**
+ * Text edits refuse NUL and other control bytes unless the host passes
+ * allowControlBytes. That switch is not part of the model tool schema.
+ * afterWrite is the publication check; tests replace it to prove the rollback path.
+ */
+export declare const textGuards: {
+    beforeWrite(content: string, allowControlBytes: boolean): void;
+    afterWrite(bytes: Uint8Array, allowControlBytes: boolean): ControlHit | undefined;
+};

package/dist/workspace/workspace.d.ts

@@ -1,5 +1,9 @@
 import { type ReplacementEdit } from "./replacement-edits.js";
 import { type ApplyEditProposalInput, type ApplyPatchResult, type FileDigest, type MoveFileInput, type MoveFileResult, type MutationAuditEntry, type QuarantineFileInput, type QuarantineFileResult, type RestoreFileInput, type RestoreFileResult } from "./edit-contracts.js";
+/** Host-only. Model tool input cannot set this, and the default is off. */
+interface HostTextEditOptions {
+    allowControlBytes?: boolean;
+}
 export type HarnessCheck = string;
 export interface WorkspaceFile {
     path: string;
@@ -188,12 +192,12 @@ export declare class Workspace {
         }[];
     }>;
     private replacementChanges;
-    applyReplacement(input: ReplacementEdit): Promise<ApplyPatchResult>;
-    applyPatch(input: ApplyEditProposalInput): Promise<ApplyPatchResult>;
+    applyReplacement(input: ReplacementEdit, host?: HostTextEditOptions): Promise<ApplyPatchResult>;
+    applyPatch(input: ApplyEditProposalInput, host?: HostTextEditOptions): Promise<ApplyPatchResult>;
     applyPatchWithModes(input: ApplyEditProposalInput, modes: ReadonlyMap<string, {
         beforeMode?: number;
         afterMode: number;
-    }>, assertActive?: () => Promise<void>): Promise<ApplyPatchResult>;
+    }>, assertActive?: () => Promise<void>, host?: HostTextEditOptions): Promise<ApplyPatchResult>;
     private applyPatchWithModesLocked;
     /** @deprecated Use applyPatch with an inspected expectedDigest. */
     writeFile(relativePath: string, content: string, overwrite?: boolean): Promise<{
@@ -236,3 +240,4 @@ export declare class Workspace {
         staged: CommandResult;
     }>;
 }
+export {};

package/dist/zhx.js

@@ -3,7 +3,7 @@ import {
   HARNESS_VERSION,
   NODE_ENGINE_RANGE,
   shortCliHelp
-} from "./cli-entry-q8bgkn9m.js";
+} from "./cli-entry-10th5awp.js";
 import {
   __require
 } from "./cli-entry-1bx83sw4.js";
@@ -41,6 +41,6 @@ if (argv.length === 1 && ["--version", "-v", "version"].includes(argv[0])) {
   process.stdout.write(`${shortCliHelp(HARNESS_VERSION)}
 `);
 } else {
-  const { runCli } = await import("./cli-vyrytn3m.js");
+  const { runCli } = await import("./cli-84en174d.js");
   await runCli(argv);
 }