@claudexor/cli 3.5.0 → 3.8.0

package/dist/accounts-projection.d.ts

@@ -1,15 +1,16 @@
 /**
- * Per-harness ACCOUNTS AUTHORITY projection (INV-135): the native "CLI login"
- * pseudo-row state and the informational `next_up` identity (who an UNPINNED
- * run would route to next), built ONCE on the server so no surface (CLI, macOS)
- * re-derives the accounts symmetry. Native-login detection reads the cached
- * doctor status (a `native_session` source reported available); a probe failure
- * is an honest "not detected", never a thrown listing. `next_up` is computed by
- * the routing owner (`nextUpIdentity`) from enabled profiles + native readiness
- * + quota, so it can never disagree with run-time admission.
+ * Per-harness POOL AUTHORITY projection of the unified account model
+ * (INV-135): every account is a named registry row; `accountPools` carries
+ * the routing facts (who an UNPINNED run routes to next), computed ONCE on
+ * the server by the same pool owner run admission uses so no surface
+ * re-derives it. The legacy `harnessAccounts` carrier stays on the wire as
+ * `[]` for strict old clients; its native "CLI login" pseudo-row is gone —
+ * detected default-store logins are auto-registered as ordinary rows at
+ * daemon start.
  */
-import type { AccountIdentity, ControlHarnessAccounts, CredentialProfile, CredentialProfileStatus, QuotaSnapshot } from "@claudexor/schema";
+import type { AccountIdentity, ControlHarnessAccountPool, CredentialProfile, CredentialProfileStatus, QuotaSnapshot } from "@claudexor/schema";
 import type { HarnessStatus } from "@claudexor/gateway";
+import { credentialProfilePolicyState } from "@claudexor/core";
 /**
  * Non-secret {email, plan} of a config_dir_login PROFILE, read daemon-side from
  * the profile's OWN isolation-locator store (INV-067) — never the ordinary
@@ -22,24 +23,31 @@ export declare function profileAccountIdentity(profile: CredentialProfile): Acco
  * live probe the accounts response and the profile mutation receipts share.
  * Adapters without profile support report an honest unknown.
  */
-export declare function profileDoctorStatus(profile: CredentialProfile): Promise<CredentialProfileStatus>;
+export declare function profileDoctorStatus(profile: CredentialProfile, platform?: NodeJS.Platform): Promise<CredentialProfileStatus>;
+export declare function disabledProfileSharesOsUserCredential(state: ReturnType<typeof credentialProfilePolicyState>): boolean;
 /**
  * Accounts projection for one named profile. A rich adapter owns readiness and
  * identity in ONE call; adapters without it keep the existing doctor + owned-
  * store identity path. A malformed rich receipt loses identity and fails
  * closed through the shared readiness wrapper.
  */
-export declare function profileAccountProjection(profile: CredentialProfile): Promise<{
+export declare function profileAccountProjection(profile: CredentialProfile, registry?: readonly CredentialProfile[], platform?: NodeJS.Platform): Promise<{
     profile: CredentialProfile;
     status: CredentialProfileStatus;
     identity: AccountIdentity | null;
 }>;
-export declare function harnessAccountsProjection(repoRoot: string, quotaSnapshots?: readonly QuotaSnapshot[], snapshot?: {
+/**
+ * The per-harness pool routing verdict (`GET /v2/account-pools` and the
+ * additive `accountPools` key of the credential-profiles response). Routing
+ * facts ONLY — account facts live on the profile rows. The API-key ROUTE
+ * appears exclusively here (`api_key_route`) so legacy strict `next_up`
+ * decoders never see an unknown kind.
+ */
+export declare function accountPoolsProjection(repoRoot: string, quotaSnapshots?: readonly QuotaSnapshot[], snapshot?: {
     statuses?: readonly HarnessStatus[];
     profiles?: readonly {
         profile: CredentialProfile;
         status: CredentialProfileStatus;
     }[];
-    accountIdentities?: ReadonlyMap<string, AccountIdentity | null>;
-}): Promise<ControlHarnessAccounts[]>;
+}): Promise<ControlHarnessAccountPool[]>;
 //# sourceMappingURL=accounts-projection.d.ts.map

package/dist/accounts-projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accounts-projection.d.ts","sourceRoot":"","sources":["../src/accounts-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACd,MAAM,mBAAmB,CAAC;AAU3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAiBxD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI,CAKzF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,uBAAuB,CAAC,CAGlC;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC;IAClF,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,uBAAuB,CAAC;IAChC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CAClC,CAAC,CAyBD;AAED,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,MAAM,EAChB,cAAc,GAAE,SAAS,aAAa,EAAO,EAC7C,QAAQ,CAAC,EAAE;IACT,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,uBAAuB,CAAA;KAAE,EAAE,CAAC;IACtF,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC,CAAC;CACjE,GACA,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAoEnC"}
+{"version":3,"file":"accounts-projection.d.ts","sourceRoot":"","sources":["../src/accounts-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EACV,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACd,MAAM,mBAAmB,CAAC;AAY3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAK/D;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI,CAKzF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAAC,uBAAuB,CAAC,CAOlC;AAiBD,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,UAAU,CAAC,OAAO,4BAA4B,CAAC,GACrD,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,GAAE,SAAS,iBAAiB,EAAc,EAClD,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAAC;IACT,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,uBAAuB,CAAC;IAChC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CAClC,CAAC,CA2CD;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,cAAc,GAAE,SAAS,aAAa,EAAO,EAC7C,QAAQ,CAAC,EAAE;IACT,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,uBAAuB,CAAA;KAAE,EAAE,CAAC;CACvF,GACA,OAAO,CAAC,yBAAyB,EAAE,CAAC,CA6FtC"}

package/dist/accounts-projection.js

@@ -1,22 +1,10 @@
-import { AccountIdentity as AccountIdentitySchema } from "@claudexor/schema";
+import { AccountIdentity as AccountIdentitySchema, estimateEffectiveAuthRoute, } from "@claudexor/schema";
 import { loadConfig } from "@claudexor/config";
-import { defaultCredentialRoute, effectiveAuthPreference, nextUpIdentity, probeCredentialProfileStatus, profileStatusAdmits, } from "@claudexor/orchestrator";
-import { codexAccountIdentity, defaultNativeCodexHome } from "@claudexor/harness-codex";
-import { claudeAccountIdentity, defaultNativeClaudeConfigDir } from "@claudexor/harness-claude";
+import { effectiveAuthPreference, probeCredentialProfileStatus, profileStatusAdmits, selectFromAccountPool, } from "@claudexor/orchestrator";
+import { credentialProfilePolicyState } from "@claudexor/core";
+import { codexAccountIdentity } from "@claudexor/harness-codex";
+import { claudeAccountIdentity } from "@claudexor/harness-claude";
 import { buildGateway, buildRegistry } from "./registry.js";
-/**
- * Non-secret {email, plan} of a harness's NATIVE/CLI login, read daemon-side
- * from the Claudexor-owned native store (never the ordinary vendor home).
- * Cursor's CLI-reported identity arrives through the Accounts-only doctor
- * receipt instead; this helper remains the static-store owner for codex/claude.
- */
-function nativeAccountIdentity(harnessId) {
-    if (harnessId === "codex")
-        return codexAccountIdentity(defaultNativeCodexHome());
-    if (harnessId === "claude")
-        return claudeAccountIdentity(defaultNativeClaudeConfigDir());
-    return null;
-}
 /**
  * Non-secret {email, plan} of a config_dir_login PROFILE, read daemon-side from
  * the profile's OWN isolation-locator store (INV-067) — never the ordinary
@@ -37,18 +25,51 @@ export function profileAccountIdentity(profile) {
  * live probe the accounts response and the profile mutation receipts share.
  * Adapters without profile support report an honest unknown.
  */
-export async function profileDoctorStatus(profile) {
+export async function profileDoctorStatus(profile, platform = process.platform) {
     const adapter = buildRegistry().get(profile.harness_id);
+    const policy = credentialProfilePolicyState({ adapter, registry: [profile], platform });
+    if (!profile.enabled && disabledProfileSharesOsUserCredential(policy)) {
+        return inactiveProfileStatus(profile, "This profile is disabled and was not probed.");
+    }
     return probeCredentialProfileStatus(profile, adapter?.probeCredentialProfile?.bind(adapter));
 }
+function inactiveProfileStatus(profile, detail) {
+    return {
+        profile_id: profile.profile_id,
+        harness_id: profile.harness_id,
+        availability: "unavailable",
+        verification: "not_run",
+        verification_source: "local_store",
+        detail,
+        last_verified_at: null,
+    };
+}
+export function disabledProfileSharesOsUserCredential(state) {
+    return state.policy.identity_scope === "os_user";
+}
 /**
  * Accounts projection for one named profile. A rich adapter owns readiness and
  * identity in ONE call; adapters without it keep the existing doctor + owned-
  * store identity path. A malformed rich receipt loses identity and fails
  * closed through the shared readiness wrapper.
  */
-export async function profileAccountProjection(profile) {
+export async function profileAccountProjection(profile, registry = [profile], platform = process.platform) {
     const adapter = buildRegistry().get(profile.harness_id);
+    const cardinality = credentialProfilePolicyState({ adapter, registry, platform });
+    if (!profile.enabled && disabledProfileSharesOsUserCredential(cardinality)) {
+        return {
+            profile,
+            status: inactiveProfileStatus(profile, "This profile is disabled and was not probed."),
+            identity: profileAccountIdentity(profile),
+        };
+    }
+    if (profile.enabled && cardinality.ambiguous) {
+        return {
+            profile,
+            status: inactiveProfileStatus(profile, `${profile.harness_id} has ${cardinality.enabledProfileCount} enabled bindings on ${cardinality.platform}; disable extra profiles before this OS-user-scoped credential can be selected or probed.`),
+            identity: profileAccountIdentity(profile),
+        };
+    }
     if (!adapter?.probeCredentialAccount) {
         return {
             profile,
@@ -68,34 +89,26 @@ export async function profileAccountProjection(profile) {
     });
     return { profile, status, identity };
 }
-export async function harnessAccountsProjection(repoRoot, quotaSnapshots = [], snapshot) {
+/**
+ * The per-harness pool routing verdict (`GET /v2/account-pools` and the
+ * additive `accountPools` key of the credential-profiles response). Routing
+ * facts ONLY — account facts live on the profile rows. The API-key ROUTE
+ * appears exclusively here (`api_key_route`) so legacy strict `next_up`
+ * decoders never see an unknown kind.
+ */
+export async function accountPoolsProjection(repoRoot, quotaSnapshots = [], snapshot) {
     const cfg = loadConfig(repoRoot).global;
     const harnessIds = [...buildRegistry({ includeFakes: false }).keys()].sort();
-    const nativeDetected = new Map();
     let statuses = snapshot?.statuses ?? [];
-    const accountIdentities = new Map(snapshot?.accountIdentities ?? []);
     if (!snapshot?.statuses) {
         try {
-            const receipts = await buildGateway({ includeFakes: false }).statusAllForAccounts({ cwd: repoRoot, fresh: true }, harnessIds);
-            statuses = receipts.map((receipt) => receipt.status);
-            for (const receipt of receipts) {
-                accountIdentities.set(receipt.status.id, receipt.identity);
-            }
+            statuses = await buildGateway({ includeFakes: false }).statusAll({ cwd: repoRoot }, harnessIds);
         }
         catch {
             statuses = [];
         }
     }
-    const defaultRoutes = new Map();
-    for (const s of statuses) {
-        const native = s.authSources.find((source) => source.source === "native_session");
-        const detected = native?.availability === "available";
-        nativeDetected.set(s.id, detected);
-        const harness = cfg.harnesses[s.id];
-        const route = defaultCredentialRoute(s, effectiveAuthPreference(harness?.auth_preference, cfg.routing.auth_preference));
-        if (route)
-            defaultRoutes.set(s.id, route);
-    }
+    const statusById = new Map(statuses.map((status) => [status.id, status]));
     const readyProfiles = new Map();
     for (const entry of snapshot?.profiles ?? []) {
         if (!entry.profile.enabled || !profileStatusAdmits(entry.profile, entry.status))
@@ -106,31 +119,70 @@ export async function harnessAccountsProjection(repoRoot, quotaSnapshots = [], s
     }
     return harnessIds.map((harnessId) => {
         const h = cfg.harnesses[harnessId];
-        const nativeEnabled = h?.native_credentials_enabled ?? true;
-        const defaultEnabled = (h?.enabled ?? true) && nativeEnabled;
-        const defaultRoute = defaultRoutes.get(harnessId) ?? null;
+        if (h?.enabled === false) {
+            return {
+                harness_id: harnessId,
+                next_up: {
+                    kind: "none",
+                    reason: `harness is disabled in settings (harnesses.${harnessId}.enabled=false)`,
+                },
+            };
+        }
+        const cardinality = credentialProfilePolicyState({
+            adapter: buildRegistry({ includeFakes: false }).get(harnessId),
+            registry: cfg.credential_profiles,
+        });
+        if (cardinality.ambiguous) {
+            return {
+                harness_id: harnessId,
+                next_up: {
+                    kind: "none",
+                    reason: `${harnessId} has an ambiguous enabled profile set; disable extra profiles before routing`,
+                },
+            };
+        }
+        // next_up must never advertise a row the runtime would not select: a
+        // NON-EMPTY rotation_eligible list restricts the runtime's candidates
+        // (staticRotationCandidates), so the projection applies the same filter.
+        const rotationEligible = h?.profile_policy?.rotation_eligible ?? [];
+        const ready = readyProfiles.get(harnessId) ?? new Set();
+        const eligibleReady = rotationEligible.length > 0
+            ? new Set([...ready].filter((id) => rotationEligible.includes(id)))
+            : ready;
+        const selection = selectFromAccountPool({
+            registry: cfg.credential_profiles,
+            harnessId,
+            snapshots: quotaSnapshots,
+            readyProfileIds: eligibleReady,
+            headroomThreshold: h?.profile_policy?.headroom_threshold ?? 0.9,
+            model: h?.default_model ?? null,
+        });
+        if (selection.outcome === "selected") {
+            return {
+                harness_id: harnessId,
+                next_up: { kind: "profile", profileId: selection.candidate.profile.profile_id },
+            };
+        }
+        // Pool exhaustion is the typed `credential_pool_exhausted` terminal at
+        // run time (owner Q3=A): the paid API-key ROUTE serves it ONLY under the
+        // EXPLICIT api_key preference — never silently under auto — so next_up
+        // advertises the paid route exactly when the runtime would take it.
+        const preference = effectiveAuthPreference(h?.auth_preference, cfg.routing.auth_preference);
+        const status = statusById.get(harnessId);
+        const keyRouteReady = preference === "api_key" &&
+            status !== undefined &&
+            estimateEffectiveAuthRoute("api_key", status.authSources) === "api_key";
+        if (keyRouteReady) {
+            return { harness_id: harnessId, next_up: { kind: "api_key_route" } };
+        }
         return {
             harness_id: harnessId,
-            native_credentials_enabled: nativeEnabled,
-            native_login_detected: nativeDetected.get(harnessId) ?? false,
-            identity: accountIdentities.get(harnessId) ?? nativeAccountIdentity(harnessId),
-            // The routing owner computes who an unpinned run routes to next — the
-            // accounts projection never re-derives it (INV-135).
-            next_up: nextUpIdentity({
-                registry: cfg.credential_profiles,
-                harnessId,
-                policy: h?.profile_policy ?? {
-                    limit_action: "fail",
-                    rotation_eligible: [],
-                    headroom_threshold: 0.9,
-                },
-                snapshots: quotaSnapshots,
-                defaultEnabled,
-                defaultReady: defaultRoute !== null,
-                defaultRoute,
-                readyProfileIds: readyProfiles.get(harnessId) ?? new Set(),
-                model: h?.default_model ?? null,
-            }),
+            next_up: {
+                kind: "none",
+                reason: selection.outcome === "exhausted"
+                    ? `every enabled account is over its quota window${selection.resets_at ? ` (earliest reset ${selection.resets_at})` : ""}; unpinned runs wait for the reset (the paid API-key route requires the explicit api_key preference)`
+                    : "no enabled account is signed in for this harness; connect an account or pin one per-run (--profile)",
+            },
         };
     });
 }

package/dist/accounts-projection.js.map

@@ -1 +1 @@
-{"version":3,"file":"accounts-projection.js","sourceRoot":"","sources":["../src/accounts-projection.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,eAAe,IAAI,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE5D;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,oBAAoB,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACjF,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO;QAAE,OAAO,oBAAoB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA0B;IAE1B,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,OAAO,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA0B;IAKvE,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;QACrC,OAAO;YACL,OAAO;YACP,MAAM,EAAE,MAAM,4BAA4B,CACxC,OAAO,EACP,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,CAC/C;YACD,QAAQ,EAAE,sBAAsB,CAAC,OAAO,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC7E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,sBAAuB,CAAC,SAAS,CAAC,CAAC;QACjE,IACE,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;YAClD,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5F,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,cAAc,GAA6B,EAAE,EAC7C,QAIC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAmB,CAAC;IAClD,IAAI,QAAQ,GAA6B,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;IAClE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAC/E,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAC9B,UAAU,CACX,CAAC;YACF,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuC,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,MAAM,EAAE,YAAY,KAAK,WAAW,CAAC;QACtD,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,sBAAsB,CAClC,CAAC,EACD,uBAAuB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAC/E,CAAC;QACF,IAAI,KAAK;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1F,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC/E,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAA0B,EAAE;QAC1D,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,aAAa,GAAG,CAAC,EAAE,0BAA0B,IAAI,IAAI,CAAC;QAC5D,MAAM,cAAc,GAAG,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,aAAa,CAAC;QAC7D,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;QAC1D,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,0BAA0B,EAAE,aAAa;YACzC,qBAAqB,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK;YAC7D,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC,SAAS,CAAC;YAC9E,sEAAsE;YACtE,qDAAqD;YACrD,OAAO,EAAE,cAAc,CAAC;gBACtB,QAAQ,EAAE,GAAG,CAAC,mBAAmB;gBACjC,SAAS;gBACT,MAAM,EAAE,CAAC,EAAE,cAAc,IAAI;oBAC3B,YAAY,EAAE,MAAM;oBACpB,iBAAiB,EAAE,EAAE;oBACrB,kBAAkB,EAAE,GAAG;iBACxB;gBACD,SAAS,EAAE,cAAc;gBACzB,cAAc;gBACd,YAAY,EAAE,YAAY,KAAK,IAAI;gBACnC,YAAY;gBACZ,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAE;gBAC1D,KAAK,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI;aAChC,CAAC;SACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"accounts-projection.js","sourceRoot":"","sources":["../src/accounts-projection.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO;QAAE,OAAO,oBAAoB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA0B,EAC1B,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,qCAAqC,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,OAAO,qBAAqB,CAAC,OAAO,EAAE,8CAA8C,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA0B,EAC1B,MAAc;IAEd,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,aAAa;QAC3B,YAAY,EAAE,SAAS;QACvB,mBAAmB,EAAE,aAAa;QAClC,MAAM;QACN,gBAAgB,EAAE,IAAI;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,KAAsD;IAEtD,OAAO,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAA0B,EAC1B,QAAQ,GAAiC,CAAC,OAAO,CAAC,EAClD,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAM5C,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,qCAAqC,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3E,OAAO;YACL,OAAO;YACP,MAAM,EAAE,qBAAqB,CAAC,OAAO,EAAE,8CAA8C,CAAC;YACtF,QAAQ,EAAE,sBAAsB,CAAC,OAAO,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QAC7C,OAAO;YACL,OAAO;YACP,MAAM,EAAE,qBAAqB,CAC3B,OAAO,EACP,GAAG,OAAO,CAAC,UAAU,QAAQ,WAAW,CAAC,mBAAmB,wBAAwB,WAAW,CAAC,QAAQ,2FAA2F,CACpM;YACD,QAAQ,EAAE,sBAAsB,CAAC,OAAO,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,CAAC;QACrC,OAAO;YACL,OAAO;YACP,MAAM,EAAE,MAAM,4BAA4B,CACxC,OAAO,EACP,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,CAC/C;YACD,QAAQ,EAAE,sBAAsB,CAAC,OAAO,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC7E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,sBAAuB,CAAC,SAAS,CAAC,CAAC;QACjE,IACE,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;YAClD,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5F,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,cAAc,GAA6B,EAAE,EAC7C,QAGC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,QAAQ,GAA6B,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAC9D,EAAE,GAAG,EAAE,QAAQ,EAAE,EACjB,UAAU,CACX,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1F,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC/E,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAA6B,EAAE;QAC7D,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO;gBACL,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,8CAA8C,SAAS,iBAAiB;iBACjF;aACF,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,4BAA4B,CAAC;YAC/C,OAAO,EAAE,aAAa,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;YAC9D,QAAQ,EAAE,GAAG,CAAC,mBAAmB;SAClC,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO;gBACL,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,GAAG,SAAS,8EAA8E;iBACnG;aACF,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,sEAAsE;QACtE,yEAAyE;QACzE,MAAM,gBAAgB,GAAG,CAAC,EAAE,cAAc,EAAE,iBAAiB,IAAI,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAChE,MAAM,aAAa,GACjB,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,KAAK,CAAC;QACZ,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACtC,QAAQ,EAAE,GAAG,CAAC,mBAAmB;YACjC,SAAS;YACT,SAAS,EAAE,cAAc;YACzB,eAAe,EAAE,aAAa;YAC9B,iBAAiB,EAAE,CAAC,EAAE,cAAc,EAAE,kBAAkB,IAAI,GAAG;YAC/D,KAAK,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI;SAChC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACrC,OAAO;gBACL,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE;aAChF,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,UAAU,GAAG,uBAAuB,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,aAAa,GACjB,UAAU,KAAK,SAAS;YACxB,MAAM,KAAK,SAAS;YACpB,0BAA0B,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;QAC1E,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC;QACvE,CAAC;QACD,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE;gBACP,IAAI,EAAE,MAAM;gBACZ,MAAM,EACJ,SAAS,CAAC,OAAO,KAAK,WAAW;oBAC/B,CAAC,CAAC,iDAAiD,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,sGAAsG;oBAC9N,CAAC,CAAC,qGAAqG;aAC5G;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/accounts-services.d.ts

@@ -28,6 +28,9 @@ export declare function projectHarnessStatuses(statuses: readonly HarnessStatus[
         remediation: string | null;
         requiresFullAccess: boolean;
     };
+    setupLogin: {
+        mode: "external_terminal" | "in_app";
+    } | null;
     readiness: {
         id: string;
         kind: "auth" | "binary" | "model" | "probe" | "smoke";
@@ -38,140 +41,149 @@ export declare function projectHarnessStatuses(statuses: readonly HarnessStatus[
 }[]>;
 /** One server-owned Accounts response builder. The opt-in form refreshes quota
  * first and then derives next_up from that exact returned response; no client
- * can accidentally pair a newer quota card with an older routing identity. */
-export declare function createCredentialProfilesService(quotaRegistry: () => QuotaRegistry): (input?: {
-    snapshot?: boolean;
-}) => Promise<{
-    profiles: {
-        profile: CredentialProfile;
-        status: CredentialProfileStatus;
-        identity: import("@claudexor/schema").AccountIdentity | null;
-    }[];
-    harnessAccounts: {
-        harness_id: string;
-        native_credentials_enabled: boolean;
-        native_login_detected: boolean;
-        identity: {
-            email?: string | undefined;
-            plan?: string | undefined;
-        } | null;
-        next_up: {
-            kind: "profile";
-            profileId: string;
-        } | {
-            kind: "native";
-            route?: "api_key" | "local_session" | undefined;
-        } | {
-            kind: "none";
-            reason: string;
-        };
-    }[];
-} | {
-    profiles: {
-        profile: CredentialProfile;
-        status: CredentialProfileStatus;
-        identity: import("@claudexor/schema").AccountIdentity | null;
-    }[];
-    harnessAccounts: {
-        harness_id: string;
-        native_credentials_enabled: boolean;
-        native_login_detected: boolean;
-        identity: {
-            email?: string | undefined;
-            plan?: string | undefined;
-        } | null;
-        next_up: {
-            kind: "profile";
-            profileId: string;
-        } | {
-            kind: "native";
-            route?: "api_key" | "local_session" | undefined;
-        } | {
-            kind: "none";
-            reason: string;
-        };
-    }[];
-    harnesses: {
-        id: string;
-        available: boolean;
-        status: "ok" | "degraded" | "unavailable";
-        manifest: import("@claudexor/schema").HarnessManifest | null;
-        enabledIntents: import("@claudexor/schema").Intent[];
-        routableIntents: import("@claudexor/schema").Intent[];
-        disabledIntents: import("@claudexor/schema").Intent[];
-        checks: import("@claudexor/schema").ConformanceCheck[];
-        reasons: string[];
-        authSources: import("@claudexor/schema").AuthSourceReadiness[];
-        configuredModel: string | null;
-        configuredModelCheck: {
-            status: "ok" | "rejected";
-            message?: string | null;
-        } | null;
-        delegation: {
-            available: boolean;
-            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
-            remediation: string | null;
-            requiresFullAccess: boolean;
-        };
-        readiness: {
-            id: string;
-            kind: "auth" | "binary" | "model" | "probe" | "smoke";
-            title: string;
-            status: "fail" | "pass" | "skip";
-            detail: string | null;
+ * can accidentally pair a newer quota card with an older routing identity.
+ * Returns the listing service plus the pool-authority read
+ * (`GET /v2/account-pools`) so both share one cached projection. */
+export declare function createCredentialProfilesService(quotaRegistry: () => QuotaRegistry): {
+    credentialProfiles: (input?: {
+        snapshot?: boolean;
+    }) => Promise<{
+        profiles: {
+            profile: CredentialProfile;
+            status: CredentialProfileStatus;
+            identity: import("@claudexor/schema").AccountIdentity | null;
         }[];
-    }[];
-    git: {
-        status: "available" | "developer_tools_stub" | "failed" | "missing";
-        version: string | null;
-        detail: string | null;
-        remediation: string | null;
-    };
-    quota: {
-        snapshots: {
-            subject: {
-                harness: string;
-                credential_route: "local" | "managed_api_key" | "vendor_native";
-                plan_label: string | null;
-                subject_id: string | null;
+        harnessAccounts: never[];
+        accountPools: {
+            harness_id: string;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "api_key_route";
+            } | {
+                kind: "none";
+                reason: string;
             };
-            constraints: {
+        }[];
+    } | {
+        profiles: {
+            profile: CredentialProfile;
+            status: CredentialProfileStatus;
+            identity: import("@claudexor/schema").AccountIdentity | null;
+        }[];
+        harnessAccounts: never[];
+        accountPools: {
+            harness_id: string;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "api_key_route";
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }[];
+        harnesses: {
+            id: string;
+            available: boolean;
+            status: "ok" | "degraded" | "unavailable";
+            manifest: import("@claudexor/schema").HarnessManifest | null;
+            enabledIntents: import("@claudexor/schema").Intent[];
+            routableIntents: import("@claudexor/schema").Intent[];
+            disabledIntents: import("@claudexor/schema").Intent[];
+            checks: import("@claudexor/schema").ConformanceCheck[];
+            reasons: string[];
+            authSources: import("@claudexor/schema").AuthSourceReadiness[];
+            configuredModel: string | null;
+            configuredModelCheck: {
+                status: "ok" | "rejected";
+                message?: string | null;
+            } | null;
+            delegation: {
+                available: boolean;
+                reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+                remediation: string | null;
+                requiresFullAccess: boolean;
+            };
+            setupLogin: {
+                mode: "external_terminal" | "in_app";
+            } | null;
+            readiness: {
                 id: string;
-                label: string;
-                applies_to_models?: string[] | null | undefined;
-                applies_to_unspecified_model?: boolean | undefined;
-                used_ratio: number | null;
-                window_seconds: number | null;
-                resets_at: string | null;
-                cooldown_until: string | null;
+                kind: "auth" | "binary" | "model" | "probe" | "smoke";
+                title: string;
+                status: "fail" | "pass" | "skip";
+                detail: string | null;
             }[];
-            source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
-            observed_at: string;
-            freshness: "fresh" | "stale" | "unknown";
-            availability?: {
-                state: "available" | "cooldown" | "exhausted";
-                blocking_constraints: string[];
-                resets_at: string | null;
-                model_scoped_exhaustions: {
-                    constraint_id: string;
-                    applies_to_models: string[];
+        }[];
+        git: {
+            status: "available" | "developer_tools_stub" | "failed" | "missing";
+            version: string | null;
+            detail: string | null;
+            remediation: string | null;
+        };
+        quota: {
+            snapshots: {
+                subject: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                };
+                constraints: {
+                    id: string;
+                    label: string;
+                    applies_to_models?: string[] | null | undefined;
+                    applies_to_unspecified_model?: boolean | undefined;
+                    used_ratio: number | null;
+                    window_seconds: number | null;
                     resets_at: string | null;
+                    cooldown_until: string | null;
                 }[];
-            } | undefined;
-        }[];
-        absences: {
-            subject: {
-                harness: string;
-                credential_route: "local" | "managed_api_key" | "vendor_native";
-                plan_label: string | null;
-                subject_id: string | null;
+                source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
+                observed_at: string;
+                freshness: "fresh" | "stale" | "unknown";
+                availability?: {
+                    state: "available" | "cooldown" | "exhausted";
+                    blocking_constraints: string[];
+                    resets_at: string | null;
+                    model_scoped_exhaustions: {
+                        constraint_id: string;
+                        applies_to_models: string[];
+                        resets_at: string | null;
+                    }[];
+                } | undefined;
+            }[];
+            absences: {
+                subject: {
+                    harness: string;
+                    credential_route: "local" | "managed_api_key" | "vendor_native";
+                    plan_label: string | null;
+                    subject_id: string | null;
+                };
+                reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+                detail: string | null;
+                observed_at: string;
+            }[];
+            refreshed_at: string | null;
+        };
+        quotaEventCursor: string;
+    }>;
+    accountPools: () => Promise<{
+        accountPools: {
+            harness_id: string;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "api_key_route";
+            } | {
+                kind: "none";
+                reason: string;
             };
-            reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
-            detail: string | null;
-            observed_at: string;
         }[];
-        refreshed_at: string | null;
-    };
-    quotaEventCursor: string;
-}>;
+    }>;
+};
 //# sourceMappingURL=accounts-services.d.ts.map

package/dist/accounts-services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accounts-services.d.ts","sourceRoot":"","sources":["../src/accounts-services.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAI5E,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EAGxB,MAAM,mBAAmB,CAAC;AAS3B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE;;;;;;;;;;;;;gBAKpD,IAAI,GAAG,UAAU;kBAAY,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;KAuBpE;AAED;;8EAE8E;AAC9E,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,MAAM,aAAa,YAyB1D;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBArDnB,IAAI,GAAG,UAAU;sBAAY,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFpE"}
+{"version":3,"file":"accounts-services.d.ts","sourceRoot":"","sources":["../src/accounts-services.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAI5E,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EAGxB,MAAM,mBAAmB,CAAC;AAU3B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE;;;;;;;;;;;;;gBAMpD,IAAI,GAAG,UAAU;kBAAY,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;KA0BpE;AAED;;;;oEAIoE;AACpE,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,MAAM,aAAa;iCA4BtC;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA7DvC,IAAI,GAAG,UAAU;0BAAY,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkGpE"}