@claudexor/schema 2.0.0 → 2.1.1

package/dist/credential-profile.d.ts

@@ -0,0 +1,454 @@
+import { z } from "zod";
+/**
+ * The credential transport a profile isolates (INV-135). `config_dir_login` is
+ * a vendor-owned login living in a Claudexor-scoped config dir (claude
+ * CLAUDE_CONFIG_DIR / codex CODEX_HOME); `oauth_token` and `api_key` are
+ * secret-store references. The default vendor dirs (~/.claude, native codex
+ * home) are NEVER a profile's isolation locator — profiles are additive.
+ */
+export declare const CredentialKind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+export type CredentialKind = z.infer<typeof CredentialKind>;
+/**
+ * Durable, NON-SECRET registry entry for one credential identity of one
+ * harness (INV-135). Secret material never lives here: `config_dir_login`
+ * points at a vendor-owned directory, token/key kinds point at a namespaced
+ * secret-store name. Readiness is intentionally NOT durable — it is the
+ * doctor's `CredentialProfileStatus` projection.
+ */
+export declare const CredentialProfile: z.ZodEffects<z.ZodObject<{
+    profile_id: z.ZodString;
+    harness_id: z.ZodString;
+    display_name: z.ZodString;
+    credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+    isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, "strict", z.ZodTypeAny, {
+    profile_id: string;
+    harness_id: string;
+    display_name: string;
+    credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+    isolation_locator: string | null;
+    secret_ref: string | null;
+    enabled: boolean;
+    created_at: string | null;
+}, {
+    profile_id: string;
+    harness_id: string;
+    display_name: string;
+    credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+    isolation_locator?: string | null | undefined;
+    secret_ref?: string | null | undefined;
+    enabled?: boolean | undefined;
+    created_at?: string | null | undefined;
+}>, {
+    profile_id: string;
+    harness_id: string;
+    display_name: string;
+    credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+    isolation_locator: string | null;
+    secret_ref: string | null;
+    enabled: boolean;
+    created_at: string | null;
+}, {
+    profile_id: string;
+    harness_id: string;
+    display_name: string;
+    credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+    isolation_locator?: string | null | undefined;
+    secret_ref?: string | null | undefined;
+    enabled?: boolean | undefined;
+    created_at?: string | null | undefined;
+}>;
+export type CredentialProfile = z.infer<typeof CredentialProfile>;
+/**
+ * Doctor-owned readiness projection for one profile — deliberately separate
+ * from the durable registry entry so stored config never asserts liveness.
+ */
+export declare const CredentialProfileStatus: z.ZodObject<{
+    profile_id: z.ZodString;
+    harness_id: z.ZodString;
+    availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+    verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+    detail: z.ZodOptional<z.ZodString>;
+    last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, "strict", z.ZodTypeAny, {
+    availability: "unknown" | "available" | "unavailable";
+    verification: "passed" | "failed" | "not_run";
+    profile_id: string;
+    harness_id: string;
+    last_verified_at: string | null;
+    detail?: string | undefined;
+}, {
+    availability: "unknown" | "available" | "unavailable";
+    verification: "passed" | "failed" | "not_run";
+    profile_id: string;
+    harness_id: string;
+    detail?: string | undefined;
+    last_verified_at?: string | null | undefined;
+}>;
+export type CredentialProfileStatus = z.infer<typeof CredentialProfileStatus>;
+/** Control response: every registered profile with its doctor projection. */
+export declare const ControlCredentialProfilesResponse: z.ZodObject<{
+    profiles: z.ZodArray<z.ZodObject<{
+        profile: z.ZodEffects<z.ZodObject<{
+            profile_id: z.ZodString;
+            harness_id: z.ZodString;
+            display_name: z.ZodString;
+            credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+            isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>;
+        status: z.ZodObject<{
+            profile_id: z.ZodString;
+            harness_id: z.ZodString;
+            availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+            verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+            detail: z.ZodOptional<z.ZodString>;
+            last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            profile_id: string;
+            harness_id: string;
+            last_verified_at: string | null;
+            detail?: string | undefined;
+        }, {
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            profile_id: string;
+            harness_id: string;
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        status: {
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            profile_id: string;
+            harness_id: string;
+            last_verified_at: string | null;
+            detail?: string | undefined;
+        };
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        };
+    }, {
+        status: {
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            profile_id: string;
+            harness_id: string;
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        };
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        };
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    profiles: {
+        status: {
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            profile_id: string;
+            harness_id: string;
+            last_verified_at: string | null;
+            detail?: string | undefined;
+        };
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        };
+    }[];
+}, {
+    profiles: {
+        status: {
+            availability: "unknown" | "available" | "unavailable";
+            verification: "passed" | "failed" | "not_run";
+            profile_id: string;
+            harness_id: string;
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        };
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        };
+    }[];
+}>;
+export type ControlCredentialProfilesResponse = z.infer<typeof ControlCredentialProfilesResponse>;
+/** Register a config-dir login profile (claude/codex) from a UI surface —
+ * the same ONE locked registration owner `claudexor profiles add` uses. */
+export declare const ControlCredentialProfileCreateRequest: z.ZodObject<{
+    harnessId: z.ZodString;
+    profileId: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    harnessId: string;
+    profileId: string;
+    displayName?: string | undefined;
+}, {
+    harnessId: string;
+    profileId: string;
+    displayName?: string | undefined;
+}>;
+export type ControlCredentialProfileCreateRequest = z.infer<typeof ControlCredentialProfileCreateRequest>;
+/** DELETE /credential-profiles/:harness/:id — removes the registry entry and
+ * the profile's OWN credential material (its scoped login dir, or its
+ * namespaced secret). The default vendor store is untouchable by design. */
+export declare const ControlCredentialProfileDeleteResponse: z.ZodObject<{
+    profile: z.ZodEffects<z.ZodObject<{
+        profile_id: z.ZodString;
+        harness_id: z.ZodString;
+        display_name: z.ZodString;
+        credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+        isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>;
+    removed: z.ZodLiteral<true>;
+    credentialCleanup: z.ZodEnum<["config_dir_removed", "secret_deleted", "none"]>;
+    cleanupWarning: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    profile: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    };
+    removed: true;
+    credentialCleanup: "none" | "config_dir_removed" | "secret_deleted";
+    cleanupWarning?: string | undefined;
+}, {
+    profile: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    };
+    removed: true;
+    credentialCleanup: "none" | "config_dir_removed" | "secret_deleted";
+    cleanupWarning?: string | undefined;
+}>;
+export type ControlCredentialProfileDeleteResponse = z.infer<typeof ControlCredentialProfileDeleteResponse>;
+export declare const ControlCredentialProfileCreateResponse: z.ZodObject<{
+    profile: z.ZodEffects<z.ZodObject<{
+        profile_id: z.ZodString;
+        harness_id: z.ZodString;
+        display_name: z.ZodString;
+        credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+        isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    }, {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    }>;
+    status: z.ZodObject<{
+        profile_id: z.ZodString;
+        harness_id: z.ZodString;
+        availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+        verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+        detail: z.ZodOptional<z.ZodString>;
+        last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        profile_id: string;
+        harness_id: string;
+        last_verified_at: string | null;
+        detail?: string | undefined;
+    }, {
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        profile_id: string;
+        harness_id: string;
+        detail?: string | undefined;
+        last_verified_at?: string | null | undefined;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    status: {
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        profile_id: string;
+        harness_id: string;
+        last_verified_at: string | null;
+        detail?: string | undefined;
+    };
+    profile: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator: string | null;
+        secret_ref: string | null;
+        enabled: boolean;
+        created_at: string | null;
+    };
+}, {
+    status: {
+        availability: "unknown" | "available" | "unavailable";
+        verification: "passed" | "failed" | "not_run";
+        profile_id: string;
+        harness_id: string;
+        detail?: string | undefined;
+        last_verified_at?: string | null | undefined;
+    };
+    profile: {
+        profile_id: string;
+        harness_id: string;
+        display_name: string;
+        credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+        isolation_locator?: string | null | undefined;
+        secret_ref?: string | null | undefined;
+        enabled?: boolean | undefined;
+        created_at?: string | null | undefined;
+    };
+}>;
+export type ControlCredentialProfileCreateResponse = z.infer<typeof ControlCredentialProfileCreateResponse>;
+//# sourceMappingURL=credential-profile.d.ts.map

package/dist/credential-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-profile.d.ts","sourceRoot":"","sources":["../src/credential-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,2DAIxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6D3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;EAY8D,CAAC;AACnG,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,6EAA6E;AAC7E,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOuC,CAAC;AACtF,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAElG;2EAC2E;AAC3E,eAAO,MAAM,qCAAqC;;;;;;;;;;;;EAWQ,CAAC;AAC3D,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CACzD,OAAO,qCAAqC,CAC7C,CAAC;AAEF;;4EAE4E;AAC5E,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAaK,CAAC;AACzD,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,sCAAsC,CAC9C,CAAC;AAEF,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGgC,CAAC;AACpF,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,sCAAsC,CAC9C,CAAC"}

package/dist/credential-profile.js

@@ -0,0 +1,140 @@
+import { z } from "zod";
+import { namespacedSecretRefBase } from "@claudexor/util";
+import { Id, IsoTimestamp } from "./primitives.js";
+import { AuthAvailability, AuthVerification } from "./auth.js";
+/**
+ * The credential transport a profile isolates (INV-135). `config_dir_login` is
+ * a vendor-owned login living in a Claudexor-scoped config dir (claude
+ * CLAUDE_CONFIG_DIR / codex CODEX_HOME); `oauth_token` and `api_key` are
+ * secret-store references. The default vendor dirs (~/.claude, native codex
+ * home) are NEVER a profile's isolation locator — profiles are additive.
+ */
+export const CredentialKind = z
+    .enum(["config_dir_login", "oauth_token", "api_key"])
+    .describe("Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key.");
+/**
+ * Durable, NON-SECRET registry entry for one credential identity of one
+ * harness (INV-135). Secret material never lives here: `config_dir_login`
+ * points at a vendor-owned directory, token/key kinds point at a namespaced
+ * secret-store name. Readiness is intentionally NOT durable — it is the
+ * doctor's `CredentialProfileStatus` projection.
+ */
+export const CredentialProfile = z
+    .object({
+    profile_id: Id.describe("Stable user-chosen profile identifier (unique per harness)."),
+    harness_id: Id.describe("Harness family this profile belongs to."),
+    display_name: z.string().min(1).describe("Human label shown wherever the profile appears."),
+    credential_kind: CredentialKind,
+    isolation_locator: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."),
+    secret_ref: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Namespaced secret-store name (e.g. claude_oauth:work) for oauth_token/api_key profiles; null for config_dir_login."),
+    enabled: z.boolean().default(true).describe("Disabled profiles are never routable."),
+    created_at: IsoTimestamp.nullable()
+        .default(null)
+        .describe("When the profile was registered; null for hand-written config entries."),
+})
+    .strict()
+    .superRefine((profile, ctx) => {
+    if (profile.credential_kind === "config_dir_login") {
+        if (!profile.isolation_locator)
+            ctx.addIssue({
+                code: "custom",
+                message: "config_dir_login profiles require isolation_locator (the scoped config dir)",
+            });
+        if (profile.secret_ref)
+            ctx.addIssue({
+                code: "custom",
+                message: "config_dir_login profiles must not carry secret_ref",
+            });
+    }
+    else {
+        if (!profile.secret_ref)
+            ctx.addIssue({
+                code: "custom",
+                message: `${profile.credential_kind} profiles require secret_ref`,
+            });
+        // Release wave round-15 #5: a profile's ref must be NAMESPACED
+        // (`base:profile`). A bare engine-default slot (e.g. "anthropic") would
+        // silently alias the default credential — profiles are ADDITIVE.
+        else if (namespacedSecretRefBase(profile.secret_ref) === null)
+            ctx.addIssue({
+                code: "custom",
+                message: `secret_ref "${profile.secret_ref}" must be a namespaced managed slot (base:profile, e.g. claude_oauth:work); bare engine-default slots would alias the default credential`,
+            });
+        if (profile.isolation_locator)
+            ctx.addIssue({
+                code: "custom",
+                message: `${profile.credential_kind} profiles must not carry isolation_locator`,
+            });
+    }
+})
+    .describe("Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here.");
+/**
+ * Doctor-owned readiness projection for one profile — deliberately separate
+ * from the durable registry entry so stored config never asserts liveness.
+ */
+export const CredentialProfileStatus = z
+    .object({
+    profile_id: Id,
+    harness_id: Id,
+    availability: AuthAvailability,
+    verification: AuthVerification,
+    detail: z.string().optional().describe("Redacted human-readable probe evidence."),
+    last_verified_at: IsoTimestamp.nullable()
+        .default(null)
+        .describe("When a probe last verified this profile; null = never verified."),
+})
+    .strict()
+    .describe("Doctor-owned readiness projection for one credential profile; never durable config.");
+/** Control response: every registered profile with its doctor projection. */
+export const ControlCredentialProfilesResponse = z
+    .object({
+    profiles: z
+        .array(z.object({ profile: CredentialProfile, status: CredentialProfileStatus }).strict())
+        .describe("Every registered credential profile paired with its doctor readiness projection."),
+})
+    .strict()
+    .describe("Credential-profile registry listing with per-profile doctor readiness.");
+/** Register a config-dir login profile (claude/codex) from a UI surface —
+ * the same ONE locked registration owner `claudexor profiles add` uses. */
+export const ControlCredentialProfileCreateRequest = z
+    .object({
+    harnessId: Id.describe("Harness family (claude | codex) for the config-dir login profile."),
+    profileId: Id.describe("New profile id (bounded slug, unique per harness)."),
+    displayName: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Human label shown wherever the account appears; defaults to the id."),
+})
+    .strict()
+    .describe("Request body for POST /credential-profiles.");
+/** DELETE /credential-profiles/:harness/:id — removes the registry entry and
+ * the profile's OWN credential material (its scoped login dir, or its
+ * namespaced secret). The default vendor store is untouchable by design. */
+export const ControlCredentialProfileDeleteResponse = z
+    .object({
+    profile: CredentialProfile.describe("The removed registry entry."),
+    removed: z.literal(true),
+    credentialCleanup: z
+        .enum(["config_dir_removed", "secret_deleted", "none"])
+        .describe("What credential material was deleted alongside the registry entry."),
+    cleanupWarning: z
+        .string()
+        .optional()
+        .describe("Present when the registry entry was removed but cleanup failed (orphan left)."),
+})
+    .strict()
+    .describe("Receipt for a credential-profile removal.");
+export const ControlCredentialProfileCreateResponse = z
+    .object({ profile: CredentialProfile, status: CredentialProfileStatus })
+    .strict()
+    .describe("The registered profile with its initial doctor readiness projection.");
+//# sourceMappingURL=credential-profile.js.map

package/dist/credential-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-profile.js","sourceRoot":"","sources":["../src/credential-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,IAAI,CAAC,CAAC,kBAAkB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;KACpD,QAAQ,CACP,uHAAuH,CACxH,CAAC;AAGJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IACtF,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAClE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC3F,eAAe,EAAE,cAAc;IAC/B,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,8FAA8F,CAC/F;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,oHAAoH,CACrH;IACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACpF,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE;SAChC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,OAAO,CAAC,eAAe,KAAK,kBAAkB,EAAE,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,iBAAiB;YAC5B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,6EAA6E;aACvF,CAAC,CAAC;QACL,IAAI,OAAO,CAAC,UAAU;YACpB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;IACP,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,UAAU;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,GAAG,OAAO,CAAC,eAAe,8BAA8B;aAClE,CAAC,CAAC;QACL,+DAA+D;QAC/D,wEAAwE;QACxE,iEAAiE;aAC5D,IAAI,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI;YAC3D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,eAAe,OAAO,CAAC,UAAU,0IAA0I;aACrL,CAAC,CAAC;QACL,IAAI,OAAO,CAAC,iBAAiB;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,GAAG,OAAO,CAAC,eAAe,4CAA4C;aAChF,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,CACP,wJAAwJ,CACzJ,CAAC;AAGJ;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,gBAAgB;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACjF,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE;SACtC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,iEAAiE,CAAC;CAC/E,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,qFAAqF,CAAC,CAAC;AAGnG,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SACzF,QAAQ,CAAC,kFAAkF,CAAC;CAChG,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,wEAAwE,CAAC,CAAC;AAGtF;2EAC2E;AAC3E,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC3F,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC5E,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,6CAA6C,CAAC,CAAC;AAK3D;;4EAE4E;AAC5E,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC;IACN,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,iBAAiB,EAAE,CAAC;SACjB,IAAI,CAAC,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;SACtD,QAAQ,CAAC,oEAAoE,CAAC;IACjF,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+EAA+E,CAAC;CAC7F,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,2CAA2C,CAAC,CAAC;AAKzD,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;KACvE,MAAM,EAAE;KACR,QAAQ,CAAC,sEAAsE,CAAC,CAAC"}