export declare const TOP_LEVEL_HELP = "hcn - One stable interface to seven coding-agent CLIs\n\nUsage: hcn <command> [options] [prompt]\n\nCommands:\n  run <harness> [prompt]    One-shot headless turn (streamTurn)\n  session <harness>         Interactive session (openSession, claude + pi + antigravity + popeye)\n  interactive <harness>     Strict native terminal resume with a separate control pipe\n  inspect <harness>         Descriptor / argv / capability inspection (no spawn)\n  transcript read <harness> Passive native transcript export (JSONL)\n  transcript ls             List saved native sessions, newest first (JSONL)\n  ls                        List harnesses with verifiedAgainst versions\n  check                     Drift check (published version vs verifiedAgainst)\n\nOptions:\n  -h, --help                Show help\n  -V, --version             Show version\n\nExit codes: 0 ok, 1 failure (harness or transport), 2 usage error or\nrefusal, 4 hcn internal crash (bug; a --json stream gets the failure/done\npair with cause crash). The durable command ledger records every\ninvocation start and end under the hcn state directory.\n\nRun 'hcn <command> --help' for command-specific help.\n";
export declare const INTERACTIVE_HELP = "hcn interactive - Resume a native terminal with process lifecycle evidence\n\nUsage: hcn interactive <harness> --interface <interface> --launch-id <uuid>\n       --resume <session-id> --cwd <absolute-folder> --control-fd <fd> [--env KEY=VALUE] [--startup-prompt <text>]\n\nReturns version 1 NDJSON on the caller's pipe (fd >= 3). Native stdin, stdout,\nand stderr remain on the inherited terminal. Optional --startup-prompt starts one\nnative turn: nonempty UTF-8, at most 8192 bytes, no NUL. It is passed once as data;\ncontrol never contains the prompt or proves receipt/adherence. Omit it for idle resume.\nNo model, fork, fresh session, or native argument passthrough is accepted.\nEmpty --env values remove keys. Duplicate or invalid startup text refuses before spawn.\n\nControl: ready means preflight passed; started identifies the created process;\nclosed reports its exit status and owned cleanup. Started does not prove native\nhistory loaded. A refused record with spawn-not-attempted proves no child was\ncreated. Missing or truncated control is uncertain; do not retry it as a refusal.\n\nCurrent lane: codex-cli on macOS/Linux using a native executable and an exact\nsaved UUID/folder.\nLauncher wrappers, claude-cli, pi-cli, muse-cli and codex-desktop are unavailable\nuntil their separate strict native launch paths are verified.\n\nExit: native terminal exit code on closed; 2 for pre-start refusal; 1 for\nuncertain launch or a signal exit; 4 for an hcn internal crash.\nExit code alone is not no-child evidence.\n";
export declare const RUN_HELP = "hcn run - One-shot headless turn\n\nUsage: hcn run <harness> [prompt] [options]\n\nArguments:\n  <harness>                 claude | codex | pi | muse | cursor | antigravity | popeye\n  [prompt]                  Prompt text (positional). Must not start with '-'.\n                            Use --prompt or --prompt-file for leading '-' or multi-line.\n\nOptions:\n  --prompt <text>           Prompt text (alternative to positional)\n  --prompt-file <path|->    Read prompt from file, or stdin when '-'\n  --model <id>              Model id (validated per harness)\n  --effort <value>          Effort level (validated per harness/model)\n  --sandbox <value>         Sandbox mode (codex; antigravity workspace-write)\n  --context-window <tokens> Context window. codex 1-272000\n                            (launch default 272000); popeye 1-10000000;\n                            claude 100000-1000000 rendered as native\n                            --autocompact, an auto-compact window.\n                            hcn adds no request-token or cost enforcement.\n                            No launch default for claude:\n                            keeps its native default unless a flag or config\n                            sets it. Native env CLAUDE_CODE_AUTO_COMPACT_WINDOW\n                            overrides the flag. Native percentage and\n                            compaction-disable controls are separate;\n                            their interaction here is untested. config: contextWindow\n  --provider <value>        Provider (pi only)\n  --agent <name>            Named agent the harness defines natively - hcn\n                            selects among them, never defines. claude,\n                            antigravity, and popeye; pi when its subagent\n                            extension is installed (verified at run, see\n                            ADR 0010); others refuse. An unknown name is\n                            the harness's own error (native)\n  --tools <a,b>             Tool grant allowlist - canonical names (read, write,\n                            edit, shell, grep, glob, list, web-fetch,\n                            web-search, subagent, skill);\n                            'native:<name>' passes a harness-native or\n                            extension tool through (claude, pi, popeye; a bare\n                            name matching a configured toolset expands\n                            to it)\n  --exclude-tools <a,b>     Complement over known tools - canonical names\n                            (same vocabulary, native:<name> passthrough);\n                            mutually exclusive with --tools (claude, pi, popeye)\n  --autonomy                Enable autonomy flag (claude/codex/muse/cursor/antigravity)\n  --no-autonomy             Disable autonomy\n  --write                   Enable write (muse)\n  --no-write                Disable write\n  --shell                   Enable shell (muse)\n  --no-shell                Disable shell\n  --memory                  Use the harness's native memory setting; remove\n                            hcn's memory-off override. Does not force memory\n                            on when native settings disable it\n  --no-memory               Disable persistent memory (claude: env var;\n                            codex: --disable memories; pi: no-op, no built-in\n                            memory; popeye: no-op (declared divergence);\n                            muse/cursor/antigravity: refuse - no off switch, reported\n                            as divergence by the default profile)\n  --questions <ask|assume|none>\n                            Which preamble to inject: ask = escalation\n                            protocol (DEFAULT, question event +\n                            done cause \"awaiting-input\", exit 0), assume =\n                            never ask, state assumption, none = inject\n                            nothing\n  --system-prompt <text>    Replace the built-in system prompt (claude, pi,\n                            popeye: flag; codex: -c instructions=<text-or-path>;\n                            muse/cursor/antigravity refuse. claude pairs the dynamic-section\n                            exclusion automatically. Opt-in; no default)\n  --append-system-prompt <text>\n                            Append to the built-in prompt (claude, pi, popeye only)\n  --extension <path>        Load this extension file for the turn (pi only;\n                            absolute path to a regular file; repeatable;\n                            loads even with --no-extensions)\n  --access <read|write>     Access preset - read = read-only tool subset\n                            (canonical: read, grep, glob, list, web-fetch,\n                            web-search; claude via a closed --tools set\n                            (Read, Grep, Glob, WebFetch, WebSearch) plus\n                            --permission-mode dontAsk and an explicit\n                            --disallowedTools mcp__* deny, pi/popeye via\n                            --tools, codex via --sandbox read-only, muse via\n                            --disable-write --disable-shell, cursor via\n                            --mode ask --sandbox enabled; antigravity refuses);\n                            write = claude --permission-mode acceptEdits\n                            plus strict native sandbox (auto-approves\n                            sandboxed Bash; no unsandboxed retry;\n                            requests fail-closed startup). codex uses\n                            --sandbox workspace-write; cursor uses --force\n                            (unconfined commands, also bypasses trust);\n                            pi, muse, and popeye add no restrictions.\n                            The sandbox covers Bash, not file or web tools.\n                            Native tool denials, Bash checks and network\n                            limits still apply. Unless managed policy\n                            overrides strict mode, Claude ignores project\n                            domain allowlists; trusted user or managed\n                            domain policy may be needed for installs or tests.\n                            Claude keeps the explicit write sandbox with\n                            --autonomy.\n                            Cursor read with autonomy also adds --force;\n                            precedence is unverified. Use --no-autonomy for\n                            the qualified read preset.\n                            Mutually exclusive with --tools/--exclude-tools\n                            and with --sandbox on codex; no default\n  --max-steps <n>           Max steps (muse, 1-10000)\n  --timeout <seconds>       Wall-clock budget for the run (all harnesses,\n                            hcn-enforced; 0 disables; no default)\n  --isolation <tool-free>   Fresh tool-free turn (claude); no resume, tools,\n                            skills, access, autonomy, discovery, or native passthrough.\n                            Uses bare mode; native authentication must support it.\n  --no-tools                Disable tools discovery facet\n  --no-instruction-files    Disable instructionFiles discovery facet\n  --no-extensions           Disable extensions discovery facet\n  --skills <a,b>            Skill allowlist (names resolved against $HCN_SKILLS_ROOT\n                            or ~/.agents/skills; pi loads, claude and codex narrow)\n  --no-skills               Disable skills discovery facet\n  --cwd <path>              Working directory for spawn\n  --env KEY=VAL             Environment (repeatable; KEY= deletes)\n  --resume <uuid>           Resume session id (UUID). Continues the\n                            conversation where it left off. The answer\n                            path for question escalation: resume with the\n                            chosen answer as the prompt; id continuity per\n                            harness (claude stable, pi/muse caller-assigned,\n                            codex/cursor/antigravity minted via identity event)\n                            Note: hcn refuses an unknown id before spawn\n                            (exit 2) for pi, muse, and cursor. Antigravity\n                            accepts the id and may announce a fresh conversation.\n  --session-id <uuid>       Alias for --resume (mutually exclusive with --resume)\n  --resume-last             Resume the most recent session in the spawn cwd\n                            (claude, codex, pi, cursor, antigravity; muse and popeye refuse).\n                            Mutually exclusive with --resume/--session-id.\n  --native-settings-fingerprint <hash>\n                            Codex or Pi resume only, with explicit --cwd. Re-read saved\n                            model, effort and recorded provider before native spawn.\n                            Get the hash from inspect --native-settings. Refuses\n                            changed/unavailable sources, competing model/effort/provider\n                            options and native passthrough. Grants no permissions.\n  --native-approvals        One verified Codex response through app-server. Requires\n                            --json, --resume, --cwd and the saved fingerprint.\n                            Retains supported read-only/user-review settings.\n                            Refuses explicit --memory and --no-memory overrides.\n                            Stdin carries NDJSON approval decisions, never the prompt.\n                            Answer only offered request/choice IDs; no automatic grants.\n                            Unsupported native interactions end with owned cleanup.\n  --                        Passthrough: native harness args verbatim\n                            (failures surface as labeled native errors)\n  --json                    NDJSON HarnessEvent to stdout\n                            Optional done.denialCount: positive count of denial\n                            observations, not unique calls; omitted when zero.\n                            The count does not change the native exit status or cause\n                            and is not a work-success verdict.\n  -h, --help                Show help\n  -V, --version             Show version\n\nDefaults with no flags:\n  Every launch resolves args > project config (.hcn/config.json at the\n  git root) > user config (~/.config/hcn/config.json) > built-in profile\n  > harness default. The profile pins: effort medium, sandbox\n  workspace-write (codex and antigravity; other harnesses report divergence),\n  context window 272000 (codex and popeye; claude keeps its native\n  auto-compaction default - the profile window does not transfer there;\n  other harnesses report divergence), discovery on,\n  autonomy off, write/shell on. timeout, max-steps and\n  access have no default; no access preset is applied. Explicit access write emits\n  --force on cursor, --sandbox workspace-write on codex, and --permission-mode\n  acceptEdits plus strict sandbox settings on claude; no extra flags on\n  pi, muse, or popeye; antigravity refuses --access. The profile's sandbox\n  setting is separate from access. toolMap is config-only (no flag) - canonical -> native\n  mapping per harness. A bare pi run renders no --tools list: pi's list\n  is a strict allowlist and would drop extension and MCP tools; name\n  them through toolMap or native:<name> when you grant. Question mode defaults to ask (config keys\n  \"questions\"; prompt preamble, never a harness flag).\n  Provenance prints to stderr on every run; see\n  'hcn inspect <harness>' for the resolved argv of a bare run.\n";
export declare const SESSION_HELP = "hcn session - Interactive session (claude, pi, antigravity, popeye, codex)\n\nUsage: hcn session <harness> [options]\n\nArguments:\n  <harness>               claude | pi | antigravity | popeye | codex\n\nOptions:\n  --json                    Machine surface: NDJSON events on stdout, NDJSON\n                            commands on stdin ({\"op\":\"send\",\"id\":..,\"text\":..},\n                            \"answer\", \"close\"). Every send is answered with one\n                            disposition (started | rejected); Pi and Codex wait\n                            for their native command response before reporting\n                            acceptance. The turn a send opens carries its id.\n                            Pi and Codex steer a mid-turn send into the running\n                            turn, which keeps its opening send's id. A Pi prompt\n                            acceptance received after settlement opens a turn\n                            with that send's id.\n                            The stream opens with a session event and ends\n                            with a closed event. Exit 0 clean, 1 otherwise,\n                            2 refusal, 4 hcn internal crash (failure/closed pair,\n                            cause crash).\n                            Optional done.denialCount: positive count of denial\n                            observations, not unique calls; omitted when zero.\n                            The count does not change the native exit status or cause\n                            and is not a work-success verdict.\n  --stall <seconds>         Per-turn inactivity budget; the turn ends and the\n                            session closes reporting a stall. 0 disables\n                            (default: no limit)\n  --provider <value>        Provider (pi only)\n  --agent <name>            Named agent for the session spawn (claude,\n                            antigravity, popeye; pi with its subagent\n                            extension verified at open; others refuse)\n  --model <id>              Model for the session\n  --skills <a,b>            Skill allowlist for the session, resolved against\n                            $HCN_SKILLS_ROOT (or ~/.agents/skills) exactly like\n                            hcn run --skills. pi loads only the picks (--skill\n                            per pick, discovery off); claude narrows via\n                            --settings skillOverrides; codex via -c\n                            skills.config. The allowlist is a spawn property:\n                            it holds for the whole session, every turn, resume\n                            included. antigravity and popeye cannot enforce it\n                            and refuse with exit 2 rather than open with the\n                            full set. Unknown names refuse with exit 2.\n  --effort <value>          Effort level for the session spawn (validated\n                            per harness/model; no default - the harness's\n                            own effort applies without the flag)\n  --context-window <tokens> Context window for the session spawn (claude\n                            100000-1000000 as native --autocompact, an\n                            auto-compact window; codex 1-272000;\n                            popeye 1-10000000; no default - the harness's\n                            own setting applies without the flag)\n  --resume <uuid>           Resume session id (UUID). Continues the\n                            conversation where it left off. --session-id\n                            is an alias (mutually exclusive with --resume).\n                            If no id is given, a fresh session is started\n                            with a new id. hcn refuses an unknown id before\n                            spawn (exit 2) for harnesses that would otherwise\n                            create a fresh session silently (pi)\n  --session-id <uuid>       Alias for --resume (mutually exclusive with --resume)\n  --questions <ask|assume|none>\n                            Which preamble to inject: ask = worker may\n                            ask (DEFAULT, pickable menu), assume = never\n                            ask, none = inject nothing\n  --memory                  Use native memory settings for the session spawn;\n                            remove hcn's memory-off override\n  --no-memory               Disable persistent memory (DEFAULT; claude\n                            spawns with CLAUDE_CODE_DISABLE_AUTO_MEMORY=1,\n                            pi has no built-in memory)\n  --cwd <path>              Working directory\n  --help                    Show help\n  --version                 Show version\n";
export declare const INSPECT_HELP = "hcn inspect - Descriptor / argv inspection\n\nUsage: hcn inspect <harness> [options]\n\nArguments:\n  <harness>                 claude | codex | pi | muse | cursor | antigravity | popeye\n\nOptions:\n  --transcript              Report passive transcript methods and evidence;\n                            exclusive with other inspection modes; no history opened\n  --argv                    Preview argv that would be spawned\n  --native-settings         Read saved model, effort and provider without starting a\n                            process (Codex or Pi). Requires exact --resume and --cwd.\n                            --session-id is the shared alias for --resume.\n                            Returns one JSON object, with or without --json: available\n                            plus a source fingerprint (exit 0), or unavailable plus a\n                            reason (exit 2). Excludes other modes and turn options.\n                            Codex uses latest native settings updates; Pi follows the\n                            saved leaf's parent chain for model and thinking level.\n                            permissions describes recorded local-command limits or\n                            why they are unavailable; it does not promise restoration.\n                            Reads at most 64 MiB, 1 MiB per line, 16384 directory entries.\n                            No conversation text, permission grant or ownership claim.\n  --native-settings-fingerprint <hash>\n                            Require matching saved settings for --argv / --runtime\n                            headless-turn previews. Same restrictions as hcn run.\n  --runtime                 Preview argv and probe the selected executable version;\n                            All harnesses use invocation support in supported modes.\n                            Version metadata never rejects a supported invocation.\n                            A resolved executable is required\n                            (does not run a model or prove the saved session exists)\n  --context                 Inspect complete staged context through a disposable native\n                            process (Claude headless-turn only). Validates the native\n                            operation independently of version metadata.\n                            --json returns accounting plus executable/model provenance.\n                            Native estimate includes recalled history and the composed\n                            prompt. No assistant task is queried. Resume is forked with\n                            persistence disabled; the original session is unchanged.\n                            Unknown adapter/accounting returns unavailable, never a\n                            guessed budget. Callers own reserves and dispatch decisions.\n                            Excludes --argv, --runtime, --capabilities and passthrough.\n                            Maximum serialized prompt: 8 MiB. Probe deadline defaults to\n                            30 seconds; positive --timeout/config timeout overrides it.\n                            Zero retains 30 seconds. Cleanup is bounded separately.\n                            Startup hooks may run. Interruption exits 1 after cleanup.\n                            Invalid requests exit 2 with the standard JSON failure/done\n                            pair when --json is set. An hcn internal crash exits 4\n                            with the same pair (cause crash).\n  --capabilities            Print the capability record (vision, images,\n                            streaming, session, source) as one JSON line\n  --models                  Print installed pi provider/model pairs from\n                            the registry stores as one JSON line with --json\n                            (pi only; mutually exclusive with other modes)\n  --mode <mode>             Mode for --capabilities or --runtime:\n                            headless-turn | headless-session | interactive\n                            (default headless-turn)\n                            --runtime excludes interactive; headless-session requires\n                            --resume and accepts no native passthrough arguments\n                            Session preview needs no prompt; only model,\n                            effort, provider, context-window and cwd\n                            process options are accepted\n  --prompt <text>           Prompt for argv preview\n  --prompt-file <path|->    Read prompt from file\n  --model <id>              Model\n  --effort <value>          Effort\n  --sandbox <value>         Sandbox\n  --context-window <tokens> Context window (codex 1-272000; popeye\n                            1-10000000; claude 100000-1000000 as native\n                            --autocompact, an auto-compact window\n                            with no launch default)\n  --provider <value>        Provider\n  --tools <a,b>             Tools - canonical names (read, write, edit,\n                            shell, grep, glob, list, web-fetch,\n                            web-search, subagent, skill);\n                            'native:<name>' passes through\n  --autonomy / --no-autonomy\n  --write / --no-write\n  --shell / --no-shell\n  --memory / --no-memory\n                            (claude renders an env var, codex --disable\n                            memories; inspect --argv shows it in the spawn\n                            env, not the argv)\n  --questions <ask|assume|none>\n                            (accepted; renders nothing - rides the run prompt)\n  --max-steps <n>\n  --isolation <tool-free> (fresh claude turn only)\n  --no-tools, --no-instruction-files, --no-extensions, --no-skills\n  --questions <ask|assume|none>\n                            Accepted; renders nothing in argv (the mode\n                            rides the run prompt, not a harness flag)\n  --cwd <path>\n  --env KEY=VAL\n  --resume-last\n  --resume <uuid>\n  -h, --help                Show help\n";
export declare const LS_HELP = "hcn ls - List harnesses\n\nUsage: hcn ls\n\nPrints each harness name with its verifiedAgainst version and versionSource.\n";
export declare const CHECK_HELP = "hcn check - Drift check\n\nUsage: hcn check [--json]\n\nCompares each harness's verifiedAgainst against the latest published version.\nExits 0 when no drift, 1 when drift found, 1 on network failure with partial results.\n\nOptions:\n  --json                    Machine-readable output\n  -h, --help                Show help\n";
export declare const TRANSCRIPT_HELP = "hcn transcript - Passive native transcript export\n\nUsage: hcn transcript read <harness> (--id <native-id> | --file <path>) [options]\n       hcn transcript ls [--cwd <dir> | --all-workspaces] [--headless]\n                         [--harness <names>] [--limit <rows>]\n                         [--since-time <utc-instant>]\n\nHarnesses: claude | codex | pi | muse | cursor | antigravity | popeye\nInspect support first: hcn inspect <harness> --transcript\n\nread options:\n  --cwd <directory>         Resolution workspace (default invocation directory)\n  --since <bookmark>        Validate caller-held progress before continuing\n  --limit <entry-count>     Positive whole-entry batch limit\n  --accept-limits <names>   Explicit coverage opt-ins, comma-separated:\n                            history,branches,original-records,embedded-content\n\nls options:\n  --cwd <directory>         Only sessions whose workspace is exactly this\n                            directory (default invocation directory)\n  --all-workspaces          Every workspace; not combinable with --cwd\n  --headless                Also return headless runs (default: omit them)\n  --harness <names>         Comma-separated harnesses (default: all of them)\n  --limit <rows>            Positive row limit; truncates the rows printed,\n                            not the walk\n  --since-time <instant>    Only sources written at or after this UTC instant,\n                            as YYYY-MM-DDTHH:MM:SS[.mmm]Z. An older source is\n                            never opened, so it costs one stat and no parse\n\nCommon options:\n  -h, --help                Show help\n  -V, --version             Show version\n\nStdout is JSONL: source, complete native records, terminal result.\nOnly a complete result and exit 0 establish success. Failure exits 1;\ninvalid arguments or unsupported operations exit 2. Output failures exit 1.\nNo model, resume, instructions, extensions, store writes, or external\nattachment reads. Retained history includes saved branches and pre-compaction\nentries. No HCN index, retention, search, or persistent bookmark state.\n\nEnabled methods: Pi v3 file/ID with batches and bookmarks; Codex uncompressed\nlegacy and paginated rollouts with ID/file lookup, batches and bookmarks.\nEach Codex source reports the cli_version its own header names as its writer\nbuild; the reader gates on the rollout's structure, not on that version.\nCodex inherited ranges are verified across sources; compressed files are unsupported.\nClaude main JSONL and Muse schema-1 session logs support ID/file reads,\nbatches and bookmarks through a passive filesystem clone on supported\nmacOS/Linux filesystems. Native formats and clone prerequisites apply.\nCompatible customized Pi must preserve the declared v3 storage semantics.\nCursor chat stores (chats/*/<id>/store.db) and Antigravity untruncated step\nlogs (brain/<id>/.system_generated/logs/transcript_full.jsonl) support ID/file\nreads, batches and bookmarks through the same clone. A Cursor chat whose\nstore.db-wal holds writes (a running turn) refuses until the turn ends.\n\nls walks each native store on every call and computes the rows from it; there\nis no index, no cache and no persistent state. Stdout is JSONL: one\nsession-list-source header, one session row per saved session newest first,\none session-list-result. A row carries harness, id, file, cwd, lastWriteAt,\nmode and readable. Its id and file are what transcript read --id and --file\naccept. mode is interactive, headless, or unknown where the store carries no\nmarker; treat unknown as interactive unless you know better. Claude reads\nentrypoint and Codex reads session_meta source/originator; Pi, Muse, Cursor\nand Antigravity carry no observed marker. Child conversations are not rows:\nClaude sidechains, Codex spawned agent threads, Muse subagent/ sessions and\nAntigravity nested conversations. A harness with no listing method, and one\nwhose store could not be read, are reported per harness in the result with\nthe reason; the exit code stays 0 and the status reads partial.\n\nWhen HCN_OBSERVER names an executable file, the run streams lifecycle records\n(hcn-observer/1 NDJSON) to that command: one started line, each run event, and\nthe terminal outcome. The harness child receives HCN_INVOCATION_ID. The\nobserver is fire-and-forget and can never fail or slow the run; see\ndocs/observer.md.\n";
//# sourceMappingURL=help.d.ts.map