@claudexor/schema 2.0.0 → 2.1.2

package/dist/readiness.js

@@ -0,0 +1,87 @@
+import { z } from "zod";
+import { AdapterStatus, ConformanceCheck, HarnessManifest } from "./harness.js";
+import { AuthSourceReadiness } from "./auth.js";
+/**
+ * ONE display-ready readiness check (W4.7 sol #18): the daemon normalizes raw
+ * doctor probes, auth-source readiness, and the configured-model verdict into
+ * this typed list so every surface (Settings, Onboarding, AuthSheet) renders
+ * the SAME rows — icon from `status`, name from `title`, evidence from
+ * `detail` — and never parses strings or matches id substrings again. Raw
+ * checks/reasons stay on the DTO for "copy raw" evidence.
+ */
+export const ReadinessCheckDto = z
+    .object({
+    id: z.string().describe("Stable machine id of the check (adapter probe id or auth source)."),
+    kind: z
+        .enum(["binary", "auth", "smoke", "model", "probe"])
+        .describe("What KIND of readiness this is: binary presence, credential source, isolated smoke, configured-model validity, or a generic capability probe."),
+    title: z.string().describe("Human display name of the check."),
+    status: z.enum(["pass", "fail", "skip"]).describe("Outcome; skip = not run / not applicable."),
+    detail: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Redacted human-readable evidence for the outcome."),
+})
+    .describe("One display-ready readiness check row (daemon-normalized).");
+export const HarnessStatusDto = z
+    .object({
+    id: z.string().describe("Harness id."),
+    status: AdapterStatus,
+    manifest: HarnessManifest.nullable()
+        .optional()
+        .describe("The harness's declared manifest, when available."),
+    enabledIntents: z
+        .array(z.string())
+        .default([])
+        .describe("Intents the gateway will route to this harness."),
+    /** Intents this harness is ACTUALLY routable for right now: enabledIntents
+     * gated by doctor readiness (a degraded/unauth'd harness routes nothing).
+     * The SERVER-side availability truth — surfaces read this field and never
+     * re-derive availability from status+intents business logic (R8). */
+    routableIntents: z
+        .array(z.string())
+        .default([])
+        .describe("Intents the harness is actually routable for right now (doctor-gated); the server-side availability truth surfaces must read instead of re-deriving."),
+    disabledIntents: z.array(z.string()).default([]).describe("Intents the doctor disabled."),
+    checks: z.array(ConformanceCheck).default([]).describe("Doctor probe results."),
+    reasons: z
+        .array(z.string())
+        .default([])
+        .describe("Human-readable reasons for degraded/unavailable status."),
+    authSources: z
+        .array(AuthSourceReadiness)
+        .default([])
+        .describe("Doctor-backed readiness by authentication source; an empty array means readiness was not reported."),
+    /** Daemon-normalized display list (W4.7): what surfaces RENDER. Derived
+     * from checks + authSources + configuredModelCheck by one producer. */
+    readiness: z
+        .array(ReadinessCheckDto)
+        .default([])
+        .describe("Display-ready readiness checks, daemon-normalized from the raw evidence."),
+    /** The user's configured per-harness default model, if any. */
+    configuredModel: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("The user's configured per-harness default model, if any."),
+    /** Strict truth-source check of `configuredModel`: null when no model
+     * is configured; a rejection carries the actionable message so UIs render
+     * the same honesty `claudexor doctor` prints. */
+    configuredModelCheck: z
+        .object({
+        status: z
+            .enum(["ok", "rejected"])
+            .describe("Whether the configured model passes the strict truth-source check."),
+        message: z
+            .string()
+            .nullable()
+            .default(null)
+            .describe("Actionable rejection message, when rejected."),
+    })
+        .nullable()
+        .default(null)
+        .describe("Strict truth-source check of configuredModel; null when no model is configured."),
+})
+    .describe("Doctor-backed status row for one harness: status, intents, checks, and configured-model validity.");
+//# sourceMappingURL=readiness.js.map

package/dist/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC5F,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;SACnD,QAAQ,CACP,+IAA+I,CAChJ;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC9F,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,QAAQ,CAAC,4DAA4D,CAAC,CAAC;AAG1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACtC,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;SACjC,QAAQ,EAAE;SACV,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,iDAAiD,CAAC;IAC9D;;;yEAGqE;IACrE,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,sJAAsJ,CACvJ;IACH,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACzF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC/E,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,yDAAyD,CAAC;IACtE,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,mBAAmB,CAAC;SAC1B,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,oGAAoG,CACrG;IACH;2EACuE;IACvE,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,iBAAiB,CAAC;SACxB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,0EAA0E,CAAC;IACvF,+DAA+D;IAC/D,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,0DAA0D,CAAC;IACvE;;qDAEiD;IACjD,oBAAoB,EAAE,CAAC;SACpB,MAAM,CAAC;QACN,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;aACxB,QAAQ,CAAC,oEAAoE,CAAC;QACjF,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,8CAA8C,CAAC;KAC5D,CAAC;SACD,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,iFAAiF,CAAC;CAC/F,CAAC;KACD,QAAQ,CACP,mGAAmG,CACpG,CAAC"}

package/dist/request-requirements.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 /** Why one selected lane did or did not receive a requested capability. */
-export declare const RequestRequirementReason: z.ZodEnum<["not_requested", "effective", "manifest_unsupported", "web_policy_off", "access_profile_incompatible"]>;
+export declare const RequestRequirementReason: z.ZodEnum<["not_requested", "effective", "manifest_unsupported", "web_policy_off", "access_profile_incompatible", "postdiff_only"]>;
 export type RequestRequirementReason = z.infer<typeof RequestRequirementReason>;
 /**
  * Preflight truth for one requested capability on one selected harness lane.
@@ -8,28 +8,28 @@ export type RequestRequirementReason = z.infer<typeof RequestRequirementReason>;
  * effective there; consumers must use `effective`, never infer from manifest.
  */
 export declare const RequestRequirementResolution: z.ZodObject<{
-    capability: z.ZodLiteral<"browser">;
+    capability: z.ZodEnum<["browser", "path_deny"]>;
     harness_id: z.ZodString;
     eligible: z.ZodBoolean;
     requested: z.ZodBoolean;
     effective: z.ZodBoolean;
-    reason: z.ZodEnum<["not_requested", "effective", "manifest_unsupported", "web_policy_off", "access_profile_incompatible"]>;
+    reason: z.ZodEnum<["not_requested", "effective", "manifest_unsupported", "web_policy_off", "access_profile_incompatible", "postdiff_only"]>;
     evidence_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
     requested: boolean;
     effective: boolean;
-    reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
-    evidence_refs: string[];
     harness_id: string;
+    reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible" | "postdiff_only";
+    evidence_refs: string[];
     eligible: boolean;
-    capability: "browser";
+    capability: "browser" | "path_deny";
 }, {
     requested: boolean;
     effective: boolean;
-    reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
     harness_id: string;
+    reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible" | "postdiff_only";
     eligible: boolean;
-    capability: "browser";
+    capability: "browser" | "path_deny";
     evidence_refs?: string[] | undefined;
 }>;
 export type RequestRequirementResolution = z.infer<typeof RequestRequirementResolution>;

package/dist/request-requirements.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-requirements.d.ts","sourceRoot":"","sources":["../src/request-requirements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,oHAMnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;EAUoD,CAAC;AAC9F,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"request-requirements.d.ts","sourceRoot":"","sources":["../src/request-requirements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,qIASnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;EAUoD,CAAC;AAC9F,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/request-requirements.js

@@ -6,6 +6,9 @@ export const RequestRequirementReason = z.enum([
     "manifest_unsupported",
     "web_policy_off",
     "access_profile_incompatible",
+    /** No selected lane can enforce the capability natively; the engine's
+     * post-diff policy gate is the authoritative enforcement instead. */
+    "postdiff_only",
 ]);
 /**
  * Preflight truth for one requested capability on one selected harness lane.
@@ -14,7 +17,7 @@ export const RequestRequirementReason = z.enum([
  */
 export const RequestRequirementResolution = z
     .object({
-    capability: z.literal("browser"),
+    capability: z.enum(["browser", "path_deny"]),
     harness_id: z.string().min(1),
     eligible: z.boolean(),
     requested: z.boolean(),

package/dist/request-requirements.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-requirements.js","sourceRoot":"","sources":["../src/request-requirements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,eAAe;IACf,WAAW;IACX,sBAAsB;IACtB,gBAAgB;IAChB,6BAA6B;CAC9B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,MAAM,EAAE,wBAAwB;IAChC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/C,CAAC;KACD,QAAQ,CAAC,gFAAgF,CAAC,CAAC"}
+{"version":3,"file":"request-requirements.js","sourceRoot":"","sources":["../src/request-requirements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,eAAe;IACf,WAAW;IACX,sBAAsB;IACtB,gBAAgB;IAChB,6BAA6B;IAC7B;yEACqE;IACrE,eAAe;CAChB,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,MAAM,EAAE,wBAAwB;IAChC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/C,CAAC;KACD,QAAQ,CAAC,gFAAgF,CAAC,CAAC"}

package/dist/route.d.ts

@@ -13,12 +13,12 @@ export declare const RouteProof: z.ZodObject<{
         provider_family: z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>;
         model_hint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     }, "strip", z.ZodTypeAny, {
-        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         harness_id: string;
+        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         model_hint: string | null;
     }, {
-        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         harness_id: string;
+        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         model_hint?: string | null | undefined;
     }>;
     observed: z.ZodObject<{
@@ -39,8 +39,8 @@ export declare const RouteProof: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     status: "unverified" | "verified" | "accepted_model_arg" | "same_model_fallback";
     requested: {
-        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         harness_id: string;
+        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         model_hint: string | null;
     };
     observed: {
@@ -52,8 +52,8 @@ export declare const RouteProof: z.ZodObject<{
 }, {
     status: "unverified" | "verified" | "accepted_model_arg" | "same_model_fallback";
     requested: {
-        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         harness_id: string;
+        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
         model_hint?: string | null | undefined;
     };
     observed: {

package/dist/setup.d.ts

@@ -428,20 +428,29 @@ export declare const ControlSetupJobCreateRequest: z.ZodObject<{
     harness: z.ZodEnum<["codex", "claude", "cursor"]>;
     action: z.ZodLiteral<"login">;
     authRequest: z.ZodLiteral<"subscription">;
+    /** Target a REGISTERED config-dir credential profile (INV-135): the
+     * vendor login runs scoped to the profile's own dir and verification
+     * probes THE PROFILE — the default native store is never touched.
+     * Absent = the harness's default session (unchanged behavior). */
+    profileId: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     authRequest: "subscription";
     harness: "cursor" | "codex" | "claude";
     action: "login";
+    profileId?: string | undefined;
 }, {
     authRequest: "subscription";
     harness: "cursor" | "codex" | "claude";
     action: "login";
+    profileId?: string | undefined;
 }>;
 export type ControlSetupJobCreateRequest = z.infer<typeof ControlSetupJobCreateRequest>;
 export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     jobId: z.ZodString;
     harness: z.ZodEnum<["codex", "claude", "cursor"]>;
     action: z.ZodLiteral<"login">;
+    /** Credential profile this login job targets; null = the default session. */
+    profileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     state: z.ZodEnum<["queued", "running", "waiting_for_input", "succeeded", "failed", "cancelled", "timed_out", "interrupted_unknown", "not_supported"]>;
     phase: z.ZodEnum<["preparing", "launching", "awaiting_user", "verifying", "cancelling", "completed"]>;
     deadlineAt: z.ZodOptional<z.ZodString>;
@@ -1604,8 +1613,9 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     harness: "cursor" | "codex" | "claude";
     startedAt: string | null;
     state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-    createdAt: string;
+    profileId: string | null;
     command: string | null;
+    createdAt: string;
     jobId: string;
     phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
     finishedAt: string | null;
@@ -1783,13 +1793,14 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     harness: "cursor" | "codex" | "claude";
     startedAt: string | null;
     state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-    createdAt: string;
     command: string | null;
+    createdAt: string;
     jobId: string;
     phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
     finishedAt: string | null;
     action: "login";
     guideUrl: string | null;
+    profileId?: string | null | undefined;
     outcome?: {
         reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
         exitCode?: number | null | undefined;
@@ -1962,8 +1973,9 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     harness: "cursor" | "codex" | "claude";
     startedAt: string | null;
     state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-    createdAt: string;
+    profileId: string | null;
     command: string | null;
+    createdAt: string;
     jobId: string;
     phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
     finishedAt: string | null;
@@ -2141,13 +2153,14 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     harness: "cursor" | "codex" | "claude";
     startedAt: string | null;
     state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-    createdAt: string;
     command: string | null;
+    createdAt: string;
     jobId: string;
     phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
     finishedAt: string | null;
     action: "login";
     guideUrl: string | null;
+    profileId?: string | null | undefined;
     outcome?: {
         reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
         exitCode?: number | null | undefined;
@@ -2347,6 +2360,8 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         jobId: z.ZodString;
         harness: z.ZodEnum<["codex", "claude", "cursor"]>;
         action: z.ZodLiteral<"login">;
+        /** Credential profile this login job targets; null = the default session. */
+        profileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         state: z.ZodEnum<["queued", "running", "waiting_for_input", "succeeded", "failed", "cancelled", "timed_out", "interrupted_unknown", "not_supported"]>;
         phase: z.ZodEnum<["preparing", "launching", "awaiting_user", "verifying", "cancelling", "completed"]>;
         deadlineAt: z.ZodOptional<z.ZodString>;
@@ -3509,8 +3524,9 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -3688,13 +3704,14 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -3867,8 +3884,9 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -4046,13 +4064,14 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -4235,8 +4254,9 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -4424,13 +4444,14 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -4613,8 +4634,9 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -4802,13 +4824,14 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -4984,6 +5007,8 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         jobId: z.ZodString;
         harness: z.ZodEnum<["codex", "claude", "cursor"]>;
         action: z.ZodLiteral<"login">;
+        /** Credential profile this login job targets; null = the default session. */
+        profileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         state: z.ZodEnum<["queued", "running", "waiting_for_input", "succeeded", "failed", "cancelled", "timed_out", "interrupted_unknown", "not_supported"]>;
         phase: z.ZodEnum<["preparing", "launching", "awaiting_user", "verifying", "cancelling", "completed"]>;
         deadlineAt: z.ZodOptional<z.ZodString>;
@@ -6146,8 +6171,9 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -6325,13 +6351,14 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -6504,8 +6531,9 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -6683,13 +6711,14 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -6868,8 +6897,9 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -7051,13 +7081,14 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -7233,6 +7264,8 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         jobId: z.ZodString;
         harness: z.ZodEnum<["codex", "claude", "cursor"]>;
         action: z.ZodLiteral<"login">;
+        /** Credential profile this login job targets; null = the default session. */
+        profileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         state: z.ZodEnum<["queued", "running", "waiting_for_input", "succeeded", "failed", "cancelled", "timed_out", "interrupted_unknown", "not_supported"]>;
         phase: z.ZodEnum<["preparing", "launching", "awaiting_user", "verifying", "cancelling", "completed"]>;
         deadlineAt: z.ZodOptional<z.ZodString>;
@@ -8395,8 +8428,9 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -8574,13 +8608,14 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -8753,8 +8788,9 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -8932,13 +8968,14 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -9113,8 +9150,9 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
+        profileId: string | null;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
@@ -9294,13 +9332,14 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         harness: "cursor" | "codex" | "claude";
         startedAt: string | null;
         state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
-        createdAt: string;
         command: string | null;
+        createdAt: string;
         jobId: string;
         phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
         finishedAt: string | null;
         action: "login";
         guideUrl: string | null;
+        profileId?: string | null | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
             exitCode?: number | null | undefined;
@@ -9482,6 +9521,10 @@ export declare const SetupLoginManifest: z.ZodObject<{
     binary: z.ZodString;
     args: z.ZodArray<z.ZodString, "many">;
     cwd: z.ZodString;
+    /** Scoped config dir for an INV-135 profile login (claude CLAUDE_CONFIG_DIR /
+     * codex CODEX_HOME). OPTIONAL, not defaulted: absent on default-store jobs so
+     * pre-existing manifests keep their sealed digest across a daemon upgrade. */
+    profileConfigDir: z.ZodOptional<z.ZodString>;
     statePath: z.ZodString;
     resultPath: z.ZodString;
     permitPath: z.ZodString;
@@ -9533,6 +9576,7 @@ export declare const SetupLoginManifest: z.ZodObject<{
     resultPath: string;
     permitPath: string;
     permitDeadlineAt: string;
+    profileConfigDir?: string | undefined;
 }, {
     harness: "cursor" | "codex" | "claude";
     binary: string;
@@ -9556,6 +9600,7 @@ export declare const SetupLoginManifest: z.ZodObject<{
     resultPath: string;
     permitPath: string;
     permitDeadlineAt: string;
+    profileConfigDir?: string | undefined;
 }>;
 export type SetupLoginManifest = z.infer<typeof SetupLoginManifest>;
 export declare const SetupLoginRunnerState: z.ZodObject<{