agentic-engineering-harness 0.5.1 → 0.6.0

package/dist/workers/paseo.js

@@ -1,29 +1,63 @@
 import { validateExecutionCapabilities } from "../agents/permissions.js";
 import { deliveryWorkspaceId } from "../delivery/handoff.js";
+import { detectPaseoCapabilities, buildPaseoBackgroundRunCommand, extractPaseoAgentId } from "../paseo/capabilities.js";
 import { commandExists, runProcess } from "../utils/process.js";
 import { buildRepairPrompt, buildWorkerPrompt } from "./prompt.js";
 export class PaseoWorkerExecutor {
     name = "paseo";
-    async doctor(root, _config, selection) { const ok = await commandExists("paseo", root); if (!ok)
-        return { ok: false, message: "Paseo CLI not found." }; if (selection) {
-        const issues = validateExecutionCapabilities(selection, "paseo");
-        if (issues.length)
-            return { ok: false, message: issues.join("; ") };
-    } return { ok: true, message: "Paseo CLI detected." }; }
+    async doctor(root, _config, selection) {
+        const ok = await commandExists("paseo", root);
+        if (!ok)
+            return { ok: false, message: "Paseo CLI not found." };
+        if (selection) {
+            const issues = validateExecutionCapabilities(selection, "paseo");
+            if (issues.length)
+                return { ok: false, message: issues.join("; ") };
+        }
+        try {
+            const caps = await detectPaseoCapabilities(root);
+            if (!caps.background)
+                return { ok: false, message: `Installed Paseo${caps.version ? ` ${caps.version}` : ""} does not advertise background runs required by the CLI fallback.` };
+            return { ok: true, message: `Paseo CLI detected${caps.version ? ` (${caps.version})` : ""}; launch flags negotiated dynamically.` };
+        }
+        catch (error) {
+            return { ok: false, message: `Paseo capability probe failed: ${String(error)}` };
+        }
+    }
     async start(root, config, contract, selection) { return this.launch(root, config, contract, buildWorkerPrompt(contract, selection), selection); }
-    async repair(root, config, contract, session, packet, selection) { if (session.id && (!selection || session.logicalAgent === selection.logicalAgent)) {
-        const send = await runProcess(`paseo send ${quote(session.id)} --no-wait ${quote(buildRepairPrompt(packet))}`, { cwd: root, timeoutMs: 60_000 });
-        if (send.exitCode !== 0)
-            throw new Error(`Paseo failed to send repair prompt: ${send.stderr || send.stdout}`);
-        return this.waitAndCollect(root, config, session);
-    } return this.launch(root, config, contract, `${buildWorkerPrompt(contract, selection)}\n\n${buildRepairPrompt(packet)}`, selection); }
-    async launch(root, config, contract, prompt, selection) { const worker = config.orchestration?.worker; const provider = selection?.paseoProvider ?? worker?.provider ?? "opencode"; const model = selection ? (selection.runtimeAdapter === "codex" ? selection.modelName : selection.modelId) : worker?.model; const title = `${worker?.titlePrefix ?? "aeh"}-${contract.task.id}-${selection?.logicalAgent ?? "worker"}`; const workspaceId = await deliveryWorkspaceId(root, config, contract.task.id); const parts = ["paseo run --background --quiet", `--title ${quote(title)}`, `--provider ${quote(provider)}`]; if (workspaceId)
-        parts.push(`--workspace ${quote(workspaceId)}`); if (model)
-        parts.push(`--model ${quote(model)}`); parts.push(quote(prompt)); const launch = await runProcess(parts.join(" "), { cwd: root, timeoutMs: 60_000 }); if (launch.exitCode !== 0)
-        throw new Error(`Paseo failed to launch worker: ${launch.stderr || launch.stdout}`); const id = launch.stdout.split(/\r?\n/).map((line) => line.trim()).filter(Boolean).at(-1); if (!id)
-        throw new Error("Paseo returned no agent id for the background worker."); return this.waitAndCollect(root, config, { id, provider, model, logicalAgent: selection?.logicalAgent, nativeAgent: selection?.nativeAgent, runtime: selection?.runtimeName, profile: selection?.profile, exitCode: 0, stdout: launch.stdout, stderr: "" }); }
-    async waitAndCollect(root, config, session) { const timeout = config.orchestration?.worker?.timeoutSeconds ?? 1800; const wait = await runProcess(`paseo wait ${quote(session.id)} --timeout ${timeout}`, { cwd: root, timeoutMs: (timeout + 30) * 1000 }); if (wait.exitCode !== 0)
-        return { ...session, exitCode: wait.exitCode, stderr: wait.stderr || wait.stdout }; const logs = await runProcess(`paseo logs ${quote(session.id)} --tail 30`, { cwd: root, timeoutMs: 60_000 }); return { ...session, exitCode: 0, stdout: logs.stdout || wait.stdout || session.stdout, stderr: [session.stderr, wait.stderr, logs.stderr].filter(Boolean).join("\n") }; }
+    async repair(root, config, contract, session, packet, selection) {
+        if (session.id && (!selection || session.logicalAgent === selection.logicalAgent)) {
+            const send = await runProcess(`paseo send ${quote(session.id)} --no-wait ${quote(buildRepairPrompt(packet))}`, { cwd: root, timeoutMs: 60_000 });
+            if (send.exitCode !== 0)
+                throw new Error(`Paseo failed to send repair prompt: ${send.stderr || send.stdout}`);
+            return this.waitAndCollect(root, config, session);
+        }
+        return this.launch(root, config, contract, `${buildWorkerPrompt(contract, selection)}\n\n${buildRepairPrompt(packet)}`, selection);
+    }
+    async launch(root, config, contract, prompt, selection) {
+        const worker = config.orchestration?.worker;
+        const provider = selection?.paseoProvider ?? worker?.provider ?? "opencode";
+        const model = selection ? (selection.runtimeAdapter === "codex" ? selection.modelName : selection.modelId) : worker?.model;
+        const title = `${worker?.titlePrefix ?? "aeh"}-${contract.task.id}-${selection?.logicalAgent ?? "worker"}`;
+        const workspaceId = await deliveryWorkspaceId(root, config, contract.task.id);
+        const capabilities = await detectPaseoCapabilities(root);
+        const command = buildPaseoBackgroundRunCommand({ title, provider, model, workspaceId, prompt }, capabilities);
+        const launch = await runProcess(command, { cwd: root, timeoutMs: 60_000 });
+        if (launch.exitCode !== 0)
+            throw new Error(`Paseo failed to launch worker${capabilities.version ? ` with ${capabilities.version}` : ""}: ${launch.stderr || launch.stdout}`);
+        const id = extractPaseoAgentId(launch.stdout);
+        if (!id)
+            throw new Error("Paseo returned no parseable agent id for the background worker.");
+        return this.waitAndCollect(root, config, { id, provider, model, logicalAgent: selection?.logicalAgent, nativeAgent: selection?.nativeAgent, runtime: selection?.runtimeName, profile: selection?.profile, exitCode: 0, stdout: launch.stdout, stderr: "" });
+    }
+    async waitAndCollect(root, config, session) {
+        const timeout = config.orchestration?.worker?.timeoutSeconds ?? 1800;
+        const wait = await runProcess(`paseo wait ${quote(session.id)} --timeout ${timeout}`, { cwd: root, timeoutMs: (timeout + 30) * 1000 });
+        if (wait.exitCode !== 0)
+            return { ...session, exitCode: wait.exitCode, stderr: wait.stderr || wait.stdout };
+        const logs = await runProcess(`paseo logs ${quote(session.id)} --tail 30`, { cwd: root, timeoutMs: 60_000 });
+        return { ...session, exitCode: 0, stdout: logs.stdout || wait.stdout || session.stdout, stderr: [session.stderr, wait.stderr, logs.stderr].filter(Boolean).join("\n") };
+    }
 }
 function quote(value) { return `'${value.replaceAll("'", "'\\''")}'`; }
 //# sourceMappingURL=paseo.js.map

package/dist/workers/paseo.js.map

@@ -1 +1 @@
-{"version":3,"file":"paseo.js","sourceRoot":"","sources":["../../src/workers/paseo.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEnE,MAAM,OAAO,mBAAmB;IAAsC,IAAI,GAAG,OAAO,CAAC;IACnF,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAA6B,EAAE,SAAmC,IAA+C,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;QAAC,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAC3c,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,MAA4B,EAAE,QAAsB,EAAE,SAAmC,IAA4B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/O,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAA4B,EAAE,QAAsB,EAAE,OAAsB,EAAE,MAAoB,EAAE,SAAmC,IAA4B,IAAI,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,cAAc,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACtsB,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAA4B,EAAE,QAAsB,EAAE,MAAc,EAAE,SAAmC,IAA4B,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,MAAM,QAAQ,GAAG,SAAS,EAAE,aAAa,IAAI,MAAM,EAAE,QAAQ,IAAI,UAAU,CAAC,CAAC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,GAAG,GAAG,MAAM,EAAE,WAAW,IAAI,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,SAAS,EAAE,YAAY,IAAI,QAAQ,EAAE,CAAC,CAAC,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,gCAAgC,EAAE,WAAW,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC97C,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,MAA4B,EAAE,OAAsB,IAA4B,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,cAAc,KAAK,CAAC,OAAO,CAAC,EAAG,CAAC,cAAc,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,cAAc,KAAK,CAAC,OAAO,CAAC,EAAG,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;CACjtB;AACD,SAAS,KAAK,CAAC,KAAa,IAAY,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC"}
+{"version":3,"file":"paseo.js","sourceRoot":"","sources":["../../src/workers/paseo.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACxH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGnE,MAAM,OAAO,mBAAmB;IACrB,IAAI,GAAG,OAAO,CAAC;IACxB,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAA6B,EAAE,SAAmC;QAC3F,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAC9G,IAAI,SAAS,EAAE,CAAC;YAAC,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAAC,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,CAAC;QACzJ,IAAI,CAAC;YAAC,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,mEAAmE,EAAE,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,wCAAwC,EAAE,CAAC;QAAC,CAAC;QAChX,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAAC,CAAC;IACrG,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,MAA4B,EAAE,QAAsB,EAAE,SAAmC,IAA4B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/O,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAA4B,EAAE,QAAsB,EAAE,OAAsB,EAAE,MAAoB,EAAE,SAAmC;QAChK,IAAI,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,cAAc,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACjJ,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9G,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACrI,CAAC;IACO,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAA4B,EAAE,QAAsB,EAAE,MAAc,EAAE,SAAmC;QAC1I,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC;QAC5C,MAAM,QAAQ,GAAG,SAAS,EAAE,aAAa,IAAI,MAAM,EAAE,QAAQ,IAAI,UAAU,CAAC;QAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC;QAC3H,MAAM,KAAK,GAAG,GAAG,MAAM,EAAE,WAAW,IAAI,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,SAAS,EAAE,YAAY,IAAI,QAAQ,EAAE,CAAC;QAC3G,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,8BAA8B,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7K,MAAM,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9P,CAAC;IACO,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,MAA4B,EAAE,OAAsB;QAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,cAAc,KAAK,CAAC,OAAO,CAAC,EAAG,CAAC,cAAc,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACxI,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5G,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,cAAc,KAAK,CAAC,OAAO,CAAC,EAAG,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9G,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1K,CAAC;CACF;AACD,SAAS,KAAK,CAAC,KAAa,IAAY,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC"}

package/docs/PASEO.md

@@ -1,9 +1,61 @@
 # Paseo Integration
 
-Paseo is the default orchestration control plane because an existing lead agent can spawn an OpenCode subagent in the same workspace and keep controlling it remotely.
+Paseo is AEH's default interactive orchestration surface. In v0.6 the design intentionally separates **agent-local orchestration** from the **external deterministic Harness adapter**.
 
-The executor uses the scriptable flow `paseo run --background --quiet`, `paseo wait`, `paseo logs`, and `paseo send` for repairs. When the lead itself is a Paseo agent, Paseo supplies parent/workspace defaults automatically.
+## Conversational lead
 
-The lead remains responsible for architecture and final semantic review. Paseo is an execution/control primitive, not the source of engineering truth.
+When the lead is running inside Paseo and Paseo exposes its orchestration tools, prefer the native/MCP control surface:
 
-For a directly container-isolated worker, configure `orchestration.provider: podman`. This trades Paseo child-session visibility for stronger process isolation. Advanced setups can instead configure a Paseo custom provider binary/wrapper around a containerized OpenCode CLI.
+- create a bounded agent;
+- send follow-up prompts;
+- inspect agent status/activity;
+- cancel/archive/update agent lifecycle;
+- use `/paseo` for the current tool reference;
+- use `/paseo-handoff` when responsibility moves to a fresh agent.
+
+This keeps the lead as an orchestrator and avoids filling its context with hand-written shell control loops. Committee/advisor skills are advisory reasoning only; deterministic AEH validation remains authoritative.
+
+## External AEH fallback
+
+AEH itself is an external Node control-plane process and cannot assume access to tools injected only into an agent conversation. Therefore it retains a CLI adapter for deterministic launches, waits, logs and repair prompts.
+
+The adapter no longer hard-codes a specific Paseo CLI surface. Before launch it probes:
+
+```text
+paseo --version
+paseo run --help
+paseo daemon status --help
+```
+
+and conditionally uses JSON/quiet/background flags only when supported. This permits older Paseo installations to fail with a precise capability error rather than because AEH blindly passed a newer flag.
+
+Recognized stale/unreachable daemon states are recovered by stop/start + readiness verification before launching a lead/worker.
+
+## Session policy
+
+Default:
+
+```yaml
+orchestration:
+  interactive:
+    sessionPolicy: fresh-on-start
+```
+
+```bash
+aeh start          # fresh lead
+aeh start --resume # explicit compatible reuse
+```
+
+Workspaces and durable AEH state remain reusable even though normal conversational context starts clean.
+
+## Context rotation
+
+Default pressure policy is 70/80/90 percent. `aeh context guard` consumes a context ratio only when Paseo exposes a usable field; AEH does not guess.
+
+At the handoff threshold it writes a deterministic `.harness/paseo/handoffs/*.json` artifact. From a managed Paseo lead it also creates the replacement lead automatically and bootstraps it from the handoff artifact and referenced sealed/run/audit/delivery state. The old lead stops engineering work rather than compacting and continuing normally.
+
+## Trust boundary
+
+Paseo owns communication/process/session lifecycle. It is not normative engineering truth. AEH TaskContracts, seals, deterministic reports, evidence graphs and quality gates continue to decide acceptance.
+
+For stronger direct process isolation configure Podman sandboxing where appropriate; Paseo orchestration and worker sandboxing remain separate policy axes.

package/docs/V0.5.2.md

@@ -0,0 +1,180 @@
+# v0.5.2 — Harness-governed engineering audits
+
+v0.5.2 closes the read-only escape that existed in v0.5.1. A request no longer bypasses AEH merely because it does not mutate files. The interactive entrypoint now distinguishes a purely informational question from a read-only engineering operation.
+
+## Intent model
+
+Every conversational request is classified at the top level as:
+
+```text
+prompt
+  |
+  v
+engineering intent
+  |-- INFORMATIONAL -> direct answer, no mutation
+  |-- AUDIT         -> Harness read-only audit pipeline
+  `-- CHANGE        -> deterministic QUICK | SPEC triage
+```
+
+`AUDIT` is deliberately not a subtype of QUICK. A repository-wide review is valid audit scope even though it would be invalid QUICK scope, and it does not need artificial SDD artifacts merely to run a code review.
+
+Examples:
+
+```text
+"What does src/core/run.ts do?"
+  -> INFORMATIONAL
+
+"review the repo and validate the code for improvements"
+  -> AUDIT
+
+"find bugs and security risks"
+  -> AUDIT
+
+"review this module and fix every bug you find"
+  -> CHANGE -> QUICK | SPEC
+```
+
+The public classifier is:
+
+```bash
+aeh intent "review the repo and validate the code for improvements"
+```
+
+## Audit workflow
+
+Run an audit explicitly with:
+
+```bash
+aeh audit "review the repo and validate the code for improvements"
+```
+
+Optional hints include repeated `--file`, `--domain`, `--reviewer` and `--risk low|medium|high` values.
+
+The pipeline is:
+
+```text
+AUDIT request
+   |
+   v
+worktree checkpoint
+   |
+   v
+transient TaskContract + SHA-256 seal
+   |
+   v
+hard-frozen control plane
+   |
+   v
+configured deterministic validators
+   |
+   v
+failure classification
+   |
+   v
+read-only reviewer wave
+   |
+   v
+finding normalization + deduplication
+   |
+   v
+severity counts + DebtScore + Quality Gate evaluation
+   |
+   v
+AuditReport
+```
+
+Reviewer sessions are clamped to `write=deny`, `gitWrite=deny` and `delegate=deny`. The worktree is also checkpointed before the audit and rolled back afterward, so an accidental tracked mutation by a reviewer or tool does not survive. Any dirty paths that existed before the audit are restored to their exact prior contents.
+
+The transient contract and seal make the audit compatible with the same direct, Paseo and supported Podman execution boundaries used elsewhere in AEH.
+
+## Deterministic failures are evidence
+
+The lead must not silently reinterpret a failing validator as harmless environment noise. Audit reports classify failed checks when possible as:
+
+```text
+ASSERTION_FAILURE
+ENVIRONMENT_FAILURE
+SANDBOX_DENIAL
+MISSING_DEPENDENCY
+TOOL_FAILURE
+```
+
+For example:
+
+```text
+spawnSync git EPERM: operation not permitted
+  -> SANDBOX_DENIAL
+```
+
+That classification does not pretend the affected test passed. The audit remains `DEGRADED` and `productionSafe=false` when a deterministic failure prevents establishing correctness.
+
+## AuditReport
+
+Reports are machine-readable local artifacts:
+
+```text
+.harness/audits/<auditId>.json
+.harness/audits/latest.json
+```
+
+An AuditReport contains:
+
+- frozen controller SHA;
+- audited commit/base ref and pre-existing dirty paths;
+- deterministic checks plus failure classes;
+- reviewer sessions;
+- normalized/deduplicated findings;
+- severity counts;
+- integer DebtPoints and displayed DebtScore;
+- Final Quality Gate evaluation;
+- conservative `productionSafe` status;
+- any paths restored by the read-only rollback boundary.
+
+Audit artifacts are generated state and are gitignored by `aeh init`.
+
+## Audit to remediation
+
+AUDIT itself does not edit files or auto-remediate. If the user later says:
+
+```text
+fix these
+fix all findings
+implement the audit recommendations
+```
+
+the persistent lead reads `.harness/audits/latest.json` and the referenced report, reuses the normalized findings as evidence for a new `CHANGE`, and performs normal deterministic change triage.
+
+```text
+AuditReport
+    |
+    v
+new CHANGE request
+    |
+    v
+QUICK | SPEC
+    |
+    v
+sealed implementation workflow
+```
+
+The audit result does not override safety policy. Security, architecture, schema, public API, cross-module or otherwise unsafe findings still force SPEC when normal change triage requires it.
+
+## Paseo behavior
+
+`aeh start` now writes bootstrap version 2. Existing v0.5.1 lead sessions are intentionally incompatible and are recreated/replaced on the next start so the old broad read-only bypass cannot persist.
+
+The standing interactive invariant is now:
+
+> Every engineering operation must enter through the Harness, whether read-only or mutating. Only purely informational questions may bypass AEH.
+
+Consequently this prompt:
+
+```text
+review the repo and validate the code for improvements
+```
+
+must route to `aeh audit`; the lead must not answer that it skipped AEH because the work is read-only.
+
+## Control-plane freeze
+
+Self-hosted AEH snapshots now explicitly include `src/audit` and `src/paseo` in the controller trust boundary. Audit policy and the interactive routing code therefore cannot modify themselves and take effect inside the same active audit/run; changes govern only a later invocation after validation.

package/docs/V0.6.md

@@ -0,0 +1,148 @@
+# v0.6 — Orchestration & Context Architecture
+
+v0.6 changes the interactive model from a persistent lead that personally performs setup, discovery and specification authoring into a thin semantic orchestrator backed by bounded agents and durable Harness state.
+
+## Thin lead
+
+The interactive lead owns user intent, high-level routing, true ambiguity and final semantic acceptance. It delegates operational work:
+
+```text
+User
+  |
+  v
+AEH Lead
+  |-- explorer              repository discovery
+  |-- environment-manager   doctor/setup/Paseo recovery
+  |-- planner               decomposition + triage evidence
+  |-- spec-manager          OpenSpec authoring
+  `-- AEH                  implementation/validation/review/delivery
+```
+
+The lead should receive compact structured outcomes instead of retaining raw shell logs, full source files or long environment-repair transcripts.
+
+## Paseo-native orchestration first
+
+When the current Paseo agent exposes its orchestration tools, the lead prefers `create_agent`, `send_agent_prompt`, `get_agent_status`, `get_agent_activity` and lifecycle controls, and uses `/paseo-handoff` for responsibility transfer. `/paseo-committee` and `/paseo-advisor` may provide advisory reasoning but never override deterministic AEH gates.
+
+AEH still contains a CLI-based Paseo adapter because an external Node control-plane process cannot invoke tools local to the conversational agent. That adapter is now a compatibility fallback rather than the lead's normal orchestration mechanism.
+
+The fallback negotiates the installed Paseo surface at runtime with `paseo --version` and help output. It does not assume `--quiet`, JSON output or daemon JSON support. This specifically avoids the failure mode where an older Paseo such as 0.3.1 rejects a flag expected by a newer CLI.
+
+Recoverable daemon states such as stale PID, unreachable daemon or connection refused are stopped/restarted and verified before lead/worker launch.
+
+## Fresh lead sessions
+
+`aeh start` now creates a fresh lead by default:
+
+```bash
+aeh start
+```
+
+Explicit reuse is:
+
+```bash
+aeh start --resume
+```
+
+This prevents a new invocation from inheriting stale conversational assumptions, obsolete bootstrap instructions or unnecessary historical context. Durable Git/TaskContract/seal/run/audit/delivery state remains reusable even when the conversation is fresh.
+
+## Context pressure and automatic lead rotation
+
+Default policy:
+
+```text
+<70%     normal
+70-80%   PRESSURE: stop exploratory work and increase delegation
+>=80%    HANDOFF_REQUIRED: write handoff and rotate to a fresh lead
+>=90%    HARD_HANDOFF: no further engineering work in the old lead
+```
+
+The public check is:
+
+```bash
+aeh context guard --agent "$PASEO_AGENT_ID"
+```
+
+When Paseo exposes a usable context ratio and the guard runs inside a managed Paseo lead, AEH writes:
+
+```text
+.harness/paseo/handoffs/lead-<timestamp>.json
+```
+
+and automatically creates a fresh lead. The artifact records prior/new lead IDs, context usage, branch, latest run/audit/delivery references, and an optional semantic brief. The fresh lead is bootstrapped from this deterministic artifact and its referenced sealed state. Normal compaction-and-continue is not the preferred path once the handoff threshold is crossed.
+
+If the installed Paseo version does not expose a stable context ratio, AEH returns `UNKNOWN`; it does not fabricate token usage. Fresh-on-start and delegation-first behavior still reduce accumulation.
+
+## OpenSpec as SPEC authoring backend
+
+For non-QUICK changes, the lead no longer writes proposal/spec/design/tasks itself. `spec-manager` owns SPEC authoring with OpenSpec.
+
+```text
+CHANGE
+  |
+  v
+SPEC
+  |
+  v
+spec-manager
+  |
+  |-- aeh spec prepare
+  |-- openspec status / instructions
+  |-- proposal/specs/design/tasks
+  |-- openspec validate --strict
+  `-- aeh spec compile
+          |
+          v
+      AEH proposal/spec/design/tasks/Gherkin
+      + TaskContract
+      + stable requirement IDs
+      + validator traceability
+          |
+          v
+         seal
+```
+
+Commands:
+
+```bash
+aeh spec prepare READABILITY-001 --title "Improve readability"
+aeh spec compile READABILITY-001 --title "Improve readability"
+aeh sdd validate READABILITY-001
+aeh seal READABILITY-001
+aeh run READABILITY-001
+```
+
+OpenSpec is an **authoring source before freeze**. The compiled native AEH SDD/TaskContract and seal remain normative during implementation. OpenSpec apply commands do not replace AEH's worker, validation, review-convergence or delivery lifecycle.
+
+The compiler records `authoring.provider=openspec`, change name and SHA-256 provenance. It maps OpenSpec `### Requirement:` / `#### Scenario:` content into stable AEH requirement IDs and Gherkin acceptance. Refactor/tooling changes without a delta spec receive an explicit behavior-preservation requirement.
+
+A requirement validator may not be invented. AEH uses configured deterministic validators first, otherwise derives a project test/typecheck/build command from known project metadata. If it cannot establish executable requirement evidence, SPEC compilation fails instead of emitting a phantom validator.
+
+## Built-in orchestration preset
+
+New projects extend:
+
+```jsonc
+{
+  "extends": ["aeh:orchestration"]
+}
+```
+
+This extends `aeh:default`, makes lead/planner delegation-first, and adds:
+
+- `environment-manager`;
+- `spec-manager`.
+
+OpenSpec is included in the declarative toolchain and automatically selected when `sdd.authoring.provider: openspec` is active.
+
+## Trust boundary
+
+The authority order remains unchanged:
+
+1. user intent / true product decisions;
+2. sealed compiled AEH SDD + TaskContract;
+3. deterministic validators/evidence;
+4. quality/review gates;
+5. LLM summaries and advisory tools.
+
+Paseo skills improve communication and lifecycle control; they do not become gate authority. OpenSpec improves specification authoring; it does not become mutable execution truth after the AEH seal.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agentic-engineering-harness",
-  "version": "0.5.1",
-  "description": "OSS-first engineering harness for deterministic, spec-driven and issue-driven multi-agent software delivery.",
+  "version": "0.6.0",
+  "description": "OSS-first engineering harness for deterministic, spec-driven, issue-driven, audit-governed and orchestration-first multi-agent software delivery.",
   "type": "module",
   "bin": { "engineering-harness": "./dist/entry.js", "aeh": "./dist/entry.js" },
   "files": ["dist", "templates", "presets", "policies", "schemas", "skills", "docs"],
@@ -14,5 +14,5 @@
   "bugs": { "url": "https://github.com/JamesMorales04/agentic-engineering-harness/issues" },
   "publishConfig": { "access": "public" },
   "license": "Apache-2.0",
-  "keywords": ["ai-agents", "codex", "opencode", "paseo", "sdd", "github-issues", "issue-driven-development", "quick-contract", "gherkin", "agent-routing", "agent-presets", "mcp", "github-delivery", "worktrees", "multi-model", "multi-worker", "distributed-workers", "quality-convergence", "evidence-graph", "policy-bundles", "sandbox", "toolchain", "mise", "bootstrap", "human-on-exception", "deterministic-validation", "engineering-harness", "slsa", "opentelemetry"]
+  "keywords": ["ai-agents", "codex", "opencode", "paseo", "openspec", "sdd", "audit", "code-review", "github-issues", "issue-driven-development", "quick-contract", "gherkin", "agent-routing", "agent-presets", "orchestration", "context-handoff", "mcp", "github-delivery", "worktrees", "multi-model", "multi-worker", "distributed-workers", "quality-convergence", "evidence-graph", "policy-bundles", "sandbox", "toolchain", "mise", "bootstrap", "human-on-exception", "deterministic-validation", "engineering-harness", "slsa", "opentelemetry"]
 }

package/presets/agents/orchestration.jsonc

@@ -0,0 +1,37 @@
+{
+  "version": 1,
+  "extends": ["aeh:default"],
+  "agents": {
+    "lead": {
+      "description": "Own user intent, semantic decisions, exception handling and final acceptance. Operate as a thin orchestrator: delegate repository discovery, environment repair, specification authoring, planning, implementation and review. Prefer Paseo native/MCP orchestration tools and handoff skills over direct shell orchestration. Do not author SDD/OpenSpec artifacts or debug tooling interactively when a specialist can own that bounded operation.",
+      "skills": ["engineering-workflow", "lead-engineer", "paseo-orchestration", "verification-planning", "worktree-lifecycle"],
+      "permissions": { "read": "allow", "write": "deny", "shell": "allow", "network": "ask", "delegate": "allow", "review": "allow", "validate": "deny", "gitWrite": "deny" }
+    },
+    "planner": {
+      "description": "Produce a read-only delegation DAG and triage evidence. Use explorer/Graphify evidence supplied to you; do not implement, author specifications, repair the environment, or run broad validation. Return bounded scope, dependencies, risks, reviewers and validators to the lead/Harness.",
+      "permissions": { "read": "allow", "write": "deny", "shell": "deny", "network": "deny", "delegate": "allow", "review": "allow", "validate": "deny", "gitWrite": "deny" }
+    },
+    "environment-manager": {
+      "role": "coordinator",
+      "domains": ["environment", "toolchain", "paseo", "build-system"],
+      "description": "Own deterministic environment readiness and recovery delegated by the lead. Run AEH setup/doctor/agents checks, diagnose package-manager and Paseo daemon/provider failures, and return a compact structured outcome. Never implement product code or change normative requirements.",
+      "execution": { "model": "@workhorse" },
+      "skills": ["paseo-orchestration", "recovery-classifier"],
+      "permissions": { "read": "allow", "write": "deny", "shell": "allow", "network": "ask", "delegate": "deny", "review": "deny", "validate": "allow", "gitWrite": "deny" },
+      "outputContract": "recovery"
+    },
+    "spec-manager": {
+      "role": "planner",
+      "domains": ["requirements", "specification", "sdd", "openspec"],
+      "description": "Own SPEC authoring only. Use OpenSpec to create/iterate proposal, delta specs, design and tasks from the user's intent plus repository/planner evidence. Validate OpenSpec strictly, then compile it through AEH into traceable TaskContract/Gherkin artifacts. Do not implement code, run broad validation, perform GitHub delivery or redefine user intent silently.",
+      "execution": { "model": "@brain" },
+      "skills": ["openspec-authoring", "acceptance-traceability", "verification-planning"],
+      "permissions": { "read": "allow", "write": "allow", "shell": "allow", "network": "deny", "delegate": "allow", "review": "deny", "validate": "deny", "gitWrite": "deny" },
+      "outputContract": "planner"
+    }
+  },
+  "routing": [
+    { "id": "environment-readiness", "priority": 100, "when": { "intent": ["environment", "toolchain", "recover-environment"] }, "use": "environment-manager" },
+    { "id": "spec-authoring", "priority": 100, "when": { "intent": ["spec-authoring", "openspec"] }, "use": "spec-manager" }
+  ]
+}

package/schemas/project.schema.json

@@ -27,7 +27,17 @@
       "provider": { "type": "string" },
       "required": { "type": "boolean" },
       "worker": { "type": "object", "properties": { "provider": { "type": "string" }, "model": { "type": "string" }, "maxRepairAttempts": { "type": "integer", "minimum": 0 }, "timeoutSeconds": { "type": "integer", "minimum": 1 }, "titlePrefix": { "type": "string" } } },
-      "interactive": { "type": "object", "properties": { "autoSetup": { "type": "boolean" }, "webUi": { "type": "boolean" }, "leadAgent": { "type": "string", "minLength": 1 }, "reuseSession": { "type": "boolean" }, "stateDir": { "type": "string", "minLength": 1 }, "title": { "type": "string", "minLength": 1 } } }
+      "interactive": { "type": "object", "properties": {
+        "autoSetup": { "type": "boolean" },
+        "webUi": { "type": "boolean" },
+        "leadAgent": { "type": "string", "minLength": 1 },
+        "reuseSession": { "type": "boolean", "deprecated": true },
+        "sessionPolicy": { "enum": ["fresh-on-start", "reuse-compatible", "resume-explicit"] },
+        "usePaseoTools": { "type": "boolean" },
+        "context": { "type": "object", "properties": { "pressureThreshold": { "type": "number", "minimum": 0, "maximum": 1 }, "handoffThreshold": { "type": "number", "minimum": 0, "maximum": 1 }, "hardHandoffThreshold": { "type": "number", "minimum": 0, "maximum": 1 } } },
+        "stateDir": { "type": "string", "minLength": 1 },
+        "title": { "type": "string", "minLength": 1 }
+      } }
     } },
     "toolchain": { "type": "object", "properties": { "configPath": { "type": "string" }, "lockPath": { "type": "string" }, "statePath": { "type": "string" }, "generatedMisePath": { "type": "string" } } },
     "mcp": { "type": "object", "properties": {
@@ -41,7 +51,8 @@
     "evidence": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "outputDir": { "type": "string" }, "requireComplete": { "type": "boolean" } } },
     "organization": { "type": "object", "properties": { "policyBundles": { "type": "object", "properties": { "cacheDir": { "type": "string" }, "required": { "type": "boolean" }, "sources": { "type": "array", "items": { "$ref": "#/$defs/policyBundleSource" } } } } } },
     "distributed": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "provider": { "type": "string" }, "queueDir": { "type": "string" }, "endpoint": { "type": "string", "format": "uri" }, "tokenEnv": { "type": "string" }, "pollIntervalMs": { "type": "integer", "minimum": 1 }, "leaseSeconds": { "type": "integer", "minimum": 1 }, "workerId": { "type": "string" } } },
-    "sdd": { "type": "object" }, "validation": { "type": "object" },
+    "sdd": { "type": "object", "properties": { "specsDir": { "type": "string" }, "contractsDir": { "type": "string" }, "reportsDir": { "type": "string" }, "repairsDir": { "type": "string" }, "runsDir": { "type": "string" }, "authoring": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1 }, "schema": { "type": "string", "minLength": 1 }, "managerAgent": { "type": "string", "minLength": 1 } } } } },
+    "validation": { "type": "object" },
     "security": { "type": "object", "properties": { "sandbox": { "type": "object", "properties": { "provider": { "type": "string" }, "required": { "type": "boolean" }, "image": { "type": "string" }, "imageDigest": { "type": "string" }, "network": { "type": "boolean" }, "extraArgs": { "type": "array", "items": { "type": "string" } }, "readOnlyRoot": { "type": "boolean" }, "ephemeralHome": { "type": "boolean" }, "noNewPrivileges": { "type": "boolean" }, "capDropAll": { "type": "boolean" }, "pidsLimit": { "type": "integer", "minimum": 1 }, "memory": { "type": "string" }, "cpus": { "type": "number", "exclusiveMinimum": 0 }, "tmpfs": { "type": "array", "items": { "type": "string" } }, "forceForRisks": { "type": "array", "items": { "enum": ["low", "medium", "high"] } }, "environmentAllowlist": { "type": "array", "items": { "type": "string" } }, "credentialEnvAllowlist": { "type": "array", "items": { "type": "string" } } } }, "tools": { "type": "array", "items": { "type": "string" } } } },
     "telemetry": { "type": "object" },
     "evals": { "type": "object", "properties": { "corpusDir": { "type": "string" }, "resultsDir": { "type": "string" }, "workspacesDir": { "type": "string" }, "defaultRuns": { "type": "integer", "minimum": 1 }, "confidenceLevel": { "type": "number", "exclusiveMinimum": 0, "exclusiveMaximum": 1 } } },