@claudexor/schema 2.0.0 → 2.1.2

package/dist/control.d.ts

@@ -28,6 +28,11 @@ export declare const ControlReviewerPanelEntry: z.ZodObject<{
 export type ControlReviewerPanelEntry = z.infer<typeof ControlReviewerPanelEntry>;
 export declare const ControlRunStartRequest: z.ZodObject<{
     prompt: z.ZodDefault<z.ZodString>;
+    /** Caller-supplied system-level instructions layered onto every
+     * task-producing lane (primary, candidate, planner, explorer,
+     * orchestrate-planner) — never reviewers, synthesis, or the auth smoke.
+     * Scanned by the inline-secret fence like the prompt (INV-062). */
+    instructions: z.ZodOptional<z.ZodString>;
     /** Immutable daemon resource ids; upload/finalize happens before enqueue. */
     attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
         resourceId: z.ZodString;
@@ -176,6 +181,10 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     }>, "many">>;
     /** Per-run auth route override (subscription/api_key/auto). */
     authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+    /** Explicit per-run credential profile (INV-135); resolved against the
+     * durable registry by the engine — an unknown/disabled/mismatched id is a
+     * typed refusal, never a silent default. */
+    credentialProfileId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     /** How much the orchestrate planner may act without confirmation
      * (suggest/auto_safe/auto_full). Only meaningful for mode=orchestrate;
      * consumed by the executor in runOrchestrate. */
@@ -183,6 +192,31 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     /** Orchestrate executor: cap on plan tool calls. Only meaningful for
      * mode=orchestrate; consumed by executeOrchestratePlan. */
     maxToolCalls: z.ZodOptional<z.ZodNumber>;
+    /** Hard wall-clock deadline for the WHOLE run, measured from scheduler
+     * start. On expiry the run is cooperatively cancelled (hard-kill fallback)
+     * and ends `cancelled` with reason `wall_clock_exceeded`, preserving partial
+     * artifacts. Distinct from the inactivity watchdog (per-attempt silence). */
+    maxSeconds: z.ZodOptional<z.ZodNumber>;
+    /** Per-run globs no candidate may touch at all (create/modify/delete).
+     * Envelope/isolated runs only: enforced by the engine's authoritative
+     * post-diff policy gate (violation → blocking finding → blocked, patch
+     * undelivered); an in-place run with denyPaths is refused at preflight
+     * because a live tree cannot guarantee pre-delivery containment. Native
+     * per-lane enforcement is disclosed via path_deny receipts (postdiff_only
+     * until an adapter supports native deny). accept_risk MAY still deliver a
+     * violating patch (INV-111: the human is the final authority). */
+    denyPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** JSON Schema the run's final answer must conform to. MANDATORY when
+     * present: a selected lane that cannot natively constrain its output is a
+     * typed preflight refusal, never best-effort. The engine validates the
+     * winner's answer once, writes final/output.json, and reports a typed
+     * conformance receipt (outputConformance); a non-conformant answer ends
+     * success-with-warnings so the embedder can retry. Unsupported schema
+     * shapes ($ref, non-object root) are refused at the boundary. */
+    outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    /** Per-run turn cap; beats per-harness settings, and a lane without native
+     * max_turns support discloses the ignored knob instead of dropping it. */
+    maxTurns: z.ZodOptional<z.ZodNumber>;
 }, "strict", z.ZodTypeAny, {
     mode: "ask" | "plan" | "audit" | "agent" | "orchestrate";
     prompt: string;
@@ -196,8 +230,9 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     execution: {
         isolation: "live" | "envelope";
     };
-    access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     web?: "off" | "auto" | "cached" | "live" | undefined;
+    instructions?: string | undefined;
+    access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     attachments?: {
         resourceId: string;
     }[] | undefined;
@@ -248,12 +283,18 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }[] | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
+    credentialProfileId?: string | null | undefined;
     maxToolCalls?: number | undefined;
+    maxSeconds?: number | undefined;
+    denyPaths?: string[] | undefined;
+    outputSchema?: Record<string, unknown> | undefined;
+    maxTurns?: number | undefined;
 }, {
+    web?: "off" | "auto" | "cached" | "live" | undefined;
+    instructions?: string | undefined;
     mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     prompt?: string | undefined;
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
-    web?: "off" | "auto" | "cached" | "live" | undefined;
     attachments?: {
         resourceId: string;
     }[] | undefined;
@@ -314,7 +355,12 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
     }[] | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
+    credentialProfileId?: string | null | undefined;
     maxToolCalls?: number | undefined;
+    maxSeconds?: number | undefined;
+    denyPaths?: string[] | undefined;
+    outputSchema?: Record<string, unknown> | undefined;
+    maxTurns?: number | undefined;
 }>;
 export type ControlRunStartRequest = z.infer<typeof ControlRunStartRequest>;
 export declare const ControlRunStartInfo: z.ZodObject<{
@@ -357,6 +403,11 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
     sourceRunId: z.ZodString;
     request: z.ZodObject<{
         prompt: z.ZodDefault<z.ZodString>;
+        /** Caller-supplied system-level instructions layered onto every
+         * task-producing lane (primary, candidate, planner, explorer,
+         * orchestrate-planner) — never reviewers, synthesis, or the auth smoke.
+         * Scanned by the inline-secret fence like the prompt (INV-062). */
+        instructions: z.ZodOptional<z.ZodString>;
         /** Immutable daemon resource ids; upload/finalize happens before enqueue. */
         attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
             resourceId: z.ZodString;
@@ -505,6 +556,10 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         }>, "many">>;
         /** Per-run auth route override (subscription/api_key/auto). */
         authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+        /** Explicit per-run credential profile (INV-135); resolved against the
+         * durable registry by the engine — an unknown/disabled/mismatched id is a
+         * typed refusal, never a silent default. */
+        credentialProfileId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         /** How much the orchestrate planner may act without confirmation
          * (suggest/auto_safe/auto_full). Only meaningful for mode=orchestrate;
          * consumed by the executor in runOrchestrate. */
@@ -512,6 +567,31 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         /** Orchestrate executor: cap on plan tool calls. Only meaningful for
          * mode=orchestrate; consumed by executeOrchestratePlan. */
         maxToolCalls: z.ZodOptional<z.ZodNumber>;
+        /** Hard wall-clock deadline for the WHOLE run, measured from scheduler
+         * start. On expiry the run is cooperatively cancelled (hard-kill fallback)
+         * and ends `cancelled` with reason `wall_clock_exceeded`, preserving partial
+         * artifacts. Distinct from the inactivity watchdog (per-attempt silence). */
+        maxSeconds: z.ZodOptional<z.ZodNumber>;
+        /** Per-run globs no candidate may touch at all (create/modify/delete).
+         * Envelope/isolated runs only: enforced by the engine's authoritative
+         * post-diff policy gate (violation → blocking finding → blocked, patch
+         * undelivered); an in-place run with denyPaths is refused at preflight
+         * because a live tree cannot guarantee pre-delivery containment. Native
+         * per-lane enforcement is disclosed via path_deny receipts (postdiff_only
+         * until an adapter supports native deny). accept_risk MAY still deliver a
+         * violating patch (INV-111: the human is the final authority). */
+        denyPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /** JSON Schema the run's final answer must conform to. MANDATORY when
+         * present: a selected lane that cannot natively constrain its output is a
+         * typed preflight refusal, never best-effort. The engine validates the
+         * winner's answer once, writes final/output.json, and reports a typed
+         * conformance receipt (outputConformance); a non-conformant answer ends
+         * success-with-warnings so the embedder can retry. Unsupported schema
+         * shapes ($ref, non-object root) are refused at the boundary. */
+        outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        /** Per-run turn cap; beats per-harness settings, and a lane without native
+         * max_turns support discloses the ignored knob instead of dropping it. */
+        maxTurns: z.ZodOptional<z.ZodNumber>;
     }, "strict", z.ZodTypeAny, {
         mode: "ask" | "plan" | "audit" | "agent" | "orchestrate";
         prompt: string;
@@ -525,8 +605,9 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         execution: {
             isolation: "live" | "envelope";
         };
-        access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
         web?: "off" | "auto" | "cached" | "live" | undefined;
+        instructions?: string | undefined;
+        access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
         attachments?: {
             resourceId: string;
         }[] | undefined;
@@ -577,12 +658,18 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         }[] | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        credentialProfileId?: string | null | undefined;
         maxToolCalls?: number | undefined;
+        maxSeconds?: number | undefined;
+        denyPaths?: string[] | undefined;
+        outputSchema?: Record<string, unknown> | undefined;
+        maxTurns?: number | undefined;
     }, {
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        instructions?: string | undefined;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
         prompt?: string | undefined;
         access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
-        web?: "off" | "auto" | "cached" | "live" | undefined;
         attachments?: {
             resourceId: string;
         }[] | undefined;
@@ -643,7 +730,12 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         }[] | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        credentialProfileId?: string | null | undefined;
         maxToolCalls?: number | undefined;
+        maxSeconds?: number | undefined;
+        denyPaths?: string[] | undefined;
+        outputSchema?: Record<string, unknown> | undefined;
+        maxTurns?: number | undefined;
     }>;
     differences: z.ZodDefault<z.ZodArray<z.ZodObject<{
         field: z.ZodString;
@@ -673,8 +765,9 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         execution: {
             isolation: "live" | "envelope";
         };
-        access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
         web?: "off" | "auto" | "cached" | "live" | undefined;
+        instructions?: string | undefined;
+        access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
         attachments?: {
             resourceId: string;
         }[] | undefined;
@@ -725,7 +818,12 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         }[] | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        credentialProfileId?: string | null | undefined;
         maxToolCalls?: number | undefined;
+        maxSeconds?: number | undefined;
+        denyPaths?: string[] | undefined;
+        outputSchema?: Record<string, unknown> | undefined;
+        maxTurns?: number | undefined;
     };
     differences: {
         reason: string;
@@ -735,10 +833,11 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
 }, {
     sourceRunId: string;
     request: {
+        web?: "off" | "auto" | "cached" | "live" | undefined;
+        instructions?: string | undefined;
         mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
         prompt?: string | undefined;
         access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
-        web?: "off" | "auto" | "cached" | "live" | undefined;
         attachments?: {
             resourceId: string;
         }[] | undefined;
@@ -799,7 +898,12 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             effort?: "low" | "medium" | "high" | "xhigh" | "max" | undefined;
         }[] | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        credentialProfileId?: string | null | undefined;
         maxToolCalls?: number | undefined;
+        maxSeconds?: number | undefined;
+        denyPaths?: string[] | undefined;
+        outputSchema?: Record<string, unknown> | undefined;
+        maxTurns?: number | undefined;
     };
     differences?: {
         reason: string;
@@ -893,8 +997,8 @@ export declare const ControlWebEvidence: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     status: "failed" | "none" | "attempted" | "satisfied" | "unverified";
     available: boolean;
-    mode: "off" | "auto" | "cached" | "live";
     target: string | null;
+    mode: "off" | "auto" | "cached" | "live";
     tool: string | null;
     required: boolean;
     attempted: boolean;
@@ -905,8 +1009,8 @@ export declare const ControlWebEvidence: z.ZodObject<{
 }, {
     status?: "failed" | "none" | "attempted" | "satisfied" | "unverified" | undefined;
     available?: boolean | undefined;
-    mode?: "off" | "auto" | "cached" | "live" | undefined;
     target?: string | null | undefined;
+    mode?: "off" | "auto" | "cached" | "live" | undefined;
     tool?: string | null | undefined;
     required?: boolean | undefined;
     attempted?: boolean | undefined;
@@ -1117,6 +1221,63 @@ export declare const ControlRunSummary: z.ZodObject<{
     }>]>>;
     spendUsd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     spendEstimated: z.ZodOptional<z.ZodBoolean>;
+    /** Token usage summed across every attempt (money stays in spendUsd). Each
+     * field null until a harness reported it — never render null as 0, and never
+     * sum into a grand total (codex cached ⊆ input; claude cached disjoint). */
+    inputTokens: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    outputTokens: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    cachedInputTokens: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    /** Typed conformance receipt for a run started with outputSchema: passed =
+     * final/output.json conforms; failed = the answer was missing, unparsable,
+     * or non-conformant (the run still ends success-with-warnings — the
+     * embedder retries). Null when the run had no structured-output contract. */
+    outputConformance: z.ZodOptional<z.ZodNullable<z.ZodEnum<["passed", "failed"]>>>;
+    /** Auth ROUTE RECEIPT (INV-061 disclosure) projected verbatim from the
+     * engine telemetry: requested preference, effective route/source the
+     * deciding attempt disclosed, and a deterministic typed reason. Null on
+     * runs whose telemetry predates the receipt. */
+    authRoute: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        requested: z.ZodEnum<["subscription", "api_key", "auto"]>;
+        effective: z.ZodDefault<z.ZodNullable<z.ZodEnum<["local_session", "api_key", "unknown"]>>>;
+        source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+        reason: z.ZodEnum<["as_requested", "native_first", "no_native_session_fallback", "requested_route_unavailable", "undisclosed"]>;
+        harnessId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        attemptId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        /** Requested-vs-observed model mismatch on the deciding attempt; null
+         * when they match or either side is unknown. */
+        modelMismatch: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            requested: z.ZodString;
+            observed: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            requested: string;
+            observed: string;
+        }, {
+            requested: string;
+            observed: string;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
+        harnessId: string | null;
+        requested: "auto" | "subscription" | "api_key";
+        attemptId: string | null;
+        effective: "unknown" | "api_key" | "local_session" | null;
+        reason: "as_requested" | "native_first" | "no_native_session_fallback" | "requested_route_unavailable" | "undisclosed";
+        modelMismatch: {
+            requested: string;
+            observed: string;
+        } | null;
+    }, {
+        requested: "auto" | "subscription" | "api_key";
+        reason: "as_requested" | "native_first" | "no_native_session_fallback" | "requested_route_unavailable" | "undisclosed";
+        source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
+        harnessId?: string | null | undefined;
+        attemptId?: string | null | undefined;
+        effective?: "unknown" | "api_key" | "local_session" | null | undefined;
+        modelMismatch?: {
+            requested: string;
+            observed: string;
+        } | null | undefined;
+    }>>>;
     access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
     requestedAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
     effectiveAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
@@ -1141,8 +1302,8 @@ export declare const ControlRunSummary: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         status: "failed" | "none" | "attempted" | "satisfied" | "unverified";
         available: boolean;
-        mode: "off" | "auto" | "cached" | "live";
         target: string | null;
+        mode: "off" | "auto" | "cached" | "live";
         tool: string | null;
         required: boolean;
         attempted: boolean;
@@ -1153,8 +1314,8 @@ export declare const ControlRunSummary: z.ZodObject<{
     }, {
         status?: "failed" | "none" | "attempted" | "satisfied" | "unverified" | undefined;
         available?: boolean | undefined;
-        mode?: "off" | "auto" | "cached" | "live" | undefined;
         target?: string | null | undefined;
+        mode?: "off" | "auto" | "cached" | "live" | undefined;
         tool?: string | null | undefined;
         required?: boolean | undefined;
         attempted?: boolean | undefined;
@@ -1164,28 +1325,28 @@ export declare const ControlRunSummary: z.ZodObject<{
         errorSummary?: string | null | undefined;
     }>>;
     requestRequirements: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        capability: z.ZodLiteral<"browser">;
+        capability: z.ZodEnum<["browser", "path_deny"]>;
         harness_id: z.ZodString;
         eligible: z.ZodBoolean;
         requested: z.ZodBoolean;
         effective: z.ZodBoolean;
-        reason: z.ZodEnum<["not_requested", "effective", "manifest_unsupported", "web_policy_off", "access_profile_incompatible"]>;
+        reason: z.ZodEnum<["not_requested", "effective", "manifest_unsupported", "web_policy_off", "access_profile_incompatible", "postdiff_only"]>;
         evidence_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
         requested: boolean;
         effective: boolean;
-        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
-        evidence_refs: string[];
         harness_id: string;
+        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible" | "postdiff_only";
+        evidence_refs: string[];
         eligible: boolean;
-        capability: "browser";
+        capability: "browser" | "path_deny";
     }, {
         requested: boolean;
         effective: boolean;
-        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
         harness_id: string;
+        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible" | "postdiff_only";
         eligible: boolean;
-        capability: "browser";
+        capability: "browser" | "path_deny";
         evidence_refs?: string[] | undefined;
     }>, "many">>;
     toolPermissionPolicy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -1315,8 +1476,8 @@ export declare const ControlRunSummary: z.ZodObject<{
     webEvidence: {
         status: "failed" | "none" | "attempted" | "satisfied" | "unverified";
         available: boolean;
-        mode: "off" | "auto" | "cached" | "live";
         target: string | null;
+        mode: "off" | "auto" | "cached" | "live";
         tool: string | null;
         required: boolean;
         attempted: boolean;
@@ -1328,11 +1489,11 @@ export declare const ControlRunSummary: z.ZodObject<{
     requestRequirements: {
         requested: boolean;
         effective: boolean;
-        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
-        evidence_refs: string[];
         harness_id: string;
+        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible" | "postdiff_only";
+        evidence_refs: string[];
         eligible: boolean;
-        capability: "browser";
+        capability: "browser" | "path_deny";
     }[];
     outputReadyState: "pending" | "finalizing" | "ready" | "diagnostic";
     toolWarningsTotal: number;
@@ -1359,11 +1520,11 @@ export declare const ControlRunSummary: z.ZodObject<{
         verified: boolean;
     } | null;
     startedAt?: string | undefined;
+    error?: string | undefined;
     createdAt?: string | undefined;
     mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     prompt?: string | undefined;
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
-    error?: string | undefined;
     harnesses?: string[] | undefined;
     runDir?: string | undefined;
     model?: string | undefined;
@@ -1398,6 +1559,22 @@ export declare const ControlRunSummary: z.ZodObject<{
     strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
     spendUsd?: number | null | undefined;
     spendEstimated?: boolean | undefined;
+    inputTokens?: number | null | undefined;
+    outputTokens?: number | null | undefined;
+    cachedInputTokens?: number | null | undefined;
+    outputConformance?: "passed" | "failed" | null | undefined;
+    authRoute?: {
+        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
+        harnessId: string | null;
+        requested: "auto" | "subscription" | "api_key";
+        attemptId: string | null;
+        effective: "unknown" | "api_key" | "local_session" | null;
+        reason: "as_requested" | "native_first" | "no_native_session_fallback" | "requested_route_unavailable" | "undisclosed";
+        modelMismatch: {
+            requested: string;
+            observed: string;
+        } | null;
+    } | null | undefined;
     requestedAccess?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     effectiveAccess?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     webRequired?: boolean | undefined;
@@ -1409,11 +1586,11 @@ export declare const ControlRunSummary: z.ZodObject<{
     runId: string;
     jobId: string;
     startedAt?: string | undefined;
+    error?: string | undefined;
     createdAt?: string | undefined;
     mode?: "ask" | "plan" | "audit" | "agent" | "orchestrate" | undefined;
     prompt?: string | undefined;
     access?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
-    error?: string | undefined;
     harnesses?: string[] | undefined;
     runDir?: string | undefined;
     model?: string | undefined;
@@ -1466,6 +1643,22 @@ export declare const ControlRunSummary: z.ZodObject<{
     strategy?: "race" | "attempts" | "swarm" | "create" | "until_clean" | null | undefined;
     spendUsd?: number | null | undefined;
     spendEstimated?: boolean | undefined;
+    inputTokens?: number | null | undefined;
+    outputTokens?: number | null | undefined;
+    cachedInputTokens?: number | null | undefined;
+    outputConformance?: "passed" | "failed" | null | undefined;
+    authRoute?: {
+        requested: "auto" | "subscription" | "api_key";
+        reason: "as_requested" | "native_first" | "no_native_session_fallback" | "requested_route_unavailable" | "undisclosed";
+        source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
+        harnessId?: string | null | undefined;
+        attemptId?: string | null | undefined;
+        effective?: "unknown" | "api_key" | "local_session" | null | undefined;
+        modelMismatch?: {
+            requested: string;
+            observed: string;
+        } | null | undefined;
+    } | null | undefined;
     requestedAccess?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     effectiveAccess?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
     webRequired?: boolean | undefined;
@@ -1473,8 +1666,8 @@ export declare const ControlRunSummary: z.ZodObject<{
     webEvidence?: {
         status?: "failed" | "none" | "attempted" | "satisfied" | "unverified" | undefined;
         available?: boolean | undefined;
-        mode?: "off" | "auto" | "cached" | "live" | undefined;
         target?: string | null | undefined;
+        mode?: "off" | "auto" | "cached" | "live" | undefined;
         tool?: string | null | undefined;
         required?: boolean | undefined;
         attempted?: boolean | undefined;
@@ -1486,10 +1679,10 @@ export declare const ControlRunSummary: z.ZodObject<{
     requestRequirements?: {
         requested: boolean;
         effective: boolean;
-        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible";
         harness_id: string;
+        reason: "effective" | "not_requested" | "manifest_unsupported" | "web_policy_off" | "access_profile_incompatible" | "postdiff_only";
         eligible: boolean;
-        capability: "browser";
+        capability: "browser" | "path_deny";
         evidence_refs?: string[] | undefined;
     }[] | undefined;
     toolPermissionPolicy?: Record<string, unknown> | undefined;
@@ -1521,18 +1714,18 @@ export declare const ControlRunSummary: z.ZodObject<{
 }>;
 export type ControlRunSummary = z.infer<typeof ControlRunSummary>;
 export declare const ControlPrimaryOutput: z.ZodObject<{
-    kind: z.ZodEnum<["answer", "report", "plan", "summary", "patch", "diagnostic"]>;
+    kind: z.ZodEnum<["answer", "report", "plan", "summary", "patch", "diagnostic", "structured_output"]>;
     path: z.ZodString;
     text: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     bytes: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     path: string;
-    kind: "diagnostic" | "plan" | "summary" | "patch" | "answer" | "report";
+    kind: "diagnostic" | "plan" | "summary" | "patch" | "answer" | "report" | "structured_output";
     text: string | null;
     bytes?: number | undefined;
 }, {
     path: string;
-    kind: "diagnostic" | "plan" | "summary" | "patch" | "answer" | "report";
+    kind: "diagnostic" | "plan" | "summary" | "patch" | "answer" | "report" | "structured_output";
     bytes?: number | undefined;
     text?: string | null | undefined;
 }>;
@@ -1754,11 +1947,11 @@ export declare const ControlInteractionAnswerResponse: z.ZodObject<{
     status: z.ZodEnum<["delivered", "not_found", "already_resolved", "rejected"]>;
     message: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    status: "delivered" | "not_found" | "already_resolved" | "rejected";
+    status: "rejected" | "delivered" | "not_found" | "already_resolved";
     accepted: boolean;
     message?: string | undefined;
 }, {
-    status: "delivered" | "not_found" | "already_resolved" | "rejected";
+    status: "rejected" | "delivered" | "not_found" | "already_resolved";
     accepted: boolean;
     message?: string | undefined;
 }>;
@@ -1810,13 +2003,13 @@ export declare const RunControl: z.ZodObject<{
     reason?: string | undefined;
 }, {
     kind: "cancel";
-    reason?: string | undefined;
     target?: {
         harnessId?: string | undefined;
         attemptId?: string | undefined;
         sessionId?: string | undefined;
         requestId?: string | undefined;
     } | undefined;
+    reason?: string | undefined;
 }>;
 export type RunControl = z.infer<typeof RunControl>;
 export declare const ControlRunControlRequest: z.ZodObject<{
@@ -1850,13 +2043,13 @@ export declare const ControlRunControlRequest: z.ZodObject<{
         reason?: string | undefined;
     }, {
         kind: "cancel";
-        reason?: string | undefined;
         target?: {
             harnessId?: string | undefined;
             attemptId?: string | undefined;
             sessionId?: string | undefined;
             requestId?: string | undefined;
         } | undefined;
+        reason?: string | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     control: {
@@ -1872,13 +2065,13 @@ export declare const ControlRunControlRequest: z.ZodObject<{
 }, {
     control: {
         kind: "cancel";
-        reason?: string | undefined;
         target?: {
             harnessId?: string | undefined;
             attemptId?: string | undefined;
             sessionId?: string | undefined;
             requestId?: string | undefined;
         } | undefined;
+        reason?: string | undefined;
     };
 }>;
 export type ControlRunControlRequest = z.infer<typeof ControlRunControlRequest>;
@@ -1888,14 +2081,14 @@ export declare const ControlRunControlResponse: z.ZodObject<{
     runId: z.ZodOptional<z.ZodString>;
     message: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    status: "queued" | "applied" | "rejected" | "unsupported";
+    status: "rejected" | "queued" | "applied" | "unsupported";
     accepted: boolean;
     message?: string | undefined;
     runId?: string | undefined;
 }, {
     accepted: boolean;
     message?: string | undefined;
-    status?: "queued" | "applied" | "rejected" | "unsupported" | undefined;
+    status?: "rejected" | "queued" | "applied" | "unsupported" | undefined;
     runId?: string | undefined;
 }>;
 export type ControlRunControlResponse = z.infer<typeof ControlRunControlResponse>;
@@ -1970,24 +2163,24 @@ export declare const ControlApplyRequest: z.ZodObject<{
     branch: z.ZodOptional<z.ZodString>;
     message: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
-    mode: "apply" | "commit" | "branch" | "pr" | "artifact_only";
     target: {
         kind: "original_project";
     } | {
         kind: "project";
         root: string;
     };
+    mode: "apply" | "commit" | "branch" | "pr" | "artifact_only";
     message?: string | undefined;
     branch?: string | undefined;
 }, {
     message?: string | undefined;
-    mode?: "apply" | "commit" | "branch" | "pr" | "artifact_only" | undefined;
     target?: {
         kind: "original_project";
     } | {
         kind: "project";
         root: string;
     } | undefined;
+    mode?: "apply" | "commit" | "branch" | "pr" | "artifact_only" | undefined;
     branch?: string | undefined;
 }>;
 export type ControlApplyRequest = z.infer<typeof ControlApplyRequest>;
@@ -2057,12 +2250,12 @@ export declare const ControlRunDecisionResponse: z.ZodObject<{
     newRunId: z.ZodOptional<z.ZodString>;
     message: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    status: "applied" | "rejected" | "unsupported" | "requeued";
+    status: "rejected" | "applied" | "unsupported" | "requeued";
     accepted: boolean;
     message?: string | undefined;
     newRunId?: string | undefined;
 }, {
-    status: "applied" | "rejected" | "unsupported" | "requeued";
+    status: "rejected" | "applied" | "unsupported" | "requeued";
     accepted: boolean;
     message?: string | undefined;
     newRunId?: string | undefined;
@@ -2079,6 +2272,9 @@ export declare const ControlThread: z.ZodObject<{
     primaryHarness: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     /** Sticky eligible pool for the thread (empty => engine auto-pools). */
     eligibleHarnesses: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Sticky credential profile (INV-135): clients can SET it via
+     * create/PATCH, so the projection must report it back (round-15 #3). */
+    credentialProfileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     state: z.ZodDefault<z.ZodEnum<["active", "closed", "trashed", "purged"]>>;
     trashedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     purgeAfter: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -2095,6 +2291,7 @@ export declare const ControlThread: z.ZodObject<{
     title: string | null;
     primaryHarness: string | null;
     authPreference: "auto" | "subscription" | "api_key";
+    credentialProfileId: string | null;
     repoRoot: string | null;
     workspaceMode: "in_place" | "isolated";
     eligibleHarnesses: string[];
@@ -2114,6 +2311,7 @@ export declare const ControlThread: z.ZodObject<{
     title?: string | null | undefined;
     primaryHarness?: string | null | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
+    credentialProfileId?: string | null | undefined;
     repoRoot?: string | null | undefined;
     workspaceMode?: "in_place" | "isolated" | undefined;
     eligibleHarnesses?: string[] | undefined;
@@ -2130,10 +2328,15 @@ export declare const ControlSession: z.ZodObject<{
     harnessId: z.ZodString;
     nativeSessionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     observedModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    /** Credential profile the vendor session was created under (INV-135):
+     * resume never crosses profiles, so clients must be able to SEE the
+     * binding they are subject to (round-15 #3). */
+    profileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     state: z.ZodDefault<z.ZodEnum<["live", "stale", "rebound"]>>;
 }, "strip", z.ZodTypeAny, {
     harnessId: string;
     state: "live" | "stale" | "rebound";
+    profileId: string | null;
     id: string;
     threadId: string;
     observedModel: string | null;
@@ -2143,6 +2346,7 @@ export declare const ControlSession: z.ZodObject<{
     id: string;
     threadId: string;
     state?: "live" | "stale" | "rebound" | undefined;
+    profileId?: string | null | undefined;
     observedModel?: string | null | undefined;
     nativeSessionId?: string | null | undefined;
 }>;
@@ -2521,6 +2725,7 @@ export declare const ControlThreadCreateRequest: z.ZodObject<{
     mode: z.ZodOptional<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>>;
     workspace: z.ZodOptional<z.ZodEnum<["in_place", "isolated"]>>;
     authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+    credentialProfileId: z.ZodOptional<z.ZodString>;
     primaryHarness: z.ZodOptional<z.ZodString>;
     /** Sticky eligible pool for the thread; turns inherit it when unset. */
     eligibleHarnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -2537,6 +2742,7 @@ export declare const ControlThreadCreateRequest: z.ZodObject<{
     title?: string | undefined;
     primaryHarness?: string | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
+    credentialProfileId?: string | undefined;
     eligibleHarnesses?: string[] | undefined;
 }, {
     workspace?: "in_place" | "isolated" | undefined;
@@ -2551,6 +2757,7 @@ export declare const ControlThreadCreateRequest: z.ZodObject<{
     } | undefined;
     primaryHarness?: string | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
+    credentialProfileId?: string | undefined;
     eligibleHarnesses?: string[] | undefined;
 }>;
 export type ControlThreadCreateRequest = z.infer<typeof ControlThreadCreateRequest>;
@@ -2560,16 +2767,19 @@ export declare const ControlThreadUpdateRequest: z.ZodObject<{
     title: z.ZodOptional<z.ZodString>;
     state: z.ZodOptional<z.ZodEnum<["active", "closed"]>>;
     primaryHarness: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    credentialProfileId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     eligibleHarnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, "strict", z.ZodTypeAny, {
     state?: "active" | "closed" | undefined;
     title?: string | undefined;
     primaryHarness?: string | null | undefined;
+    credentialProfileId?: string | null | undefined;
     eligibleHarnesses?: string[] | undefined;
 }, {
     state?: "active" | "closed" | undefined;
     title?: string | undefined;
     primaryHarness?: string | null | undefined;
+    credentialProfileId?: string | null | undefined;
     eligibleHarnesses?: string[] | undefined;
 }>;
 export type ControlThreadUpdateRequest = z.infer<typeof ControlThreadUpdateRequest>;
@@ -2585,6 +2795,9 @@ export declare const ControlThreadListResponse: z.ZodObject<{
         primaryHarness: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** Sticky eligible pool for the thread (empty => engine auto-pools). */
         eligibleHarnesses: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Sticky credential profile (INV-135): clients can SET it via
+         * create/PATCH, so the projection must report it back (round-15 #3). */
+        credentialProfileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         state: z.ZodDefault<z.ZodEnum<["active", "closed", "trashed", "purged"]>>;
         trashedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         purgeAfter: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -2601,6 +2814,7 @@ export declare const ControlThreadListResponse: z.ZodObject<{
         title: string | null;
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
+        credentialProfileId: string | null;
         repoRoot: string | null;
         workspaceMode: "in_place" | "isolated";
         eligibleHarnesses: string[];
@@ -2620,6 +2834,7 @@ export declare const ControlThreadListResponse: z.ZodObject<{
         title?: string | null | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        credentialProfileId?: string | null | undefined;
         repoRoot?: string | null | undefined;
         workspaceMode?: "in_place" | "isolated" | undefined;
         eligibleHarnesses?: string[] | undefined;
@@ -2637,6 +2852,7 @@ export declare const ControlThreadListResponse: z.ZodObject<{
         title: string | null;
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
+        credentialProfileId: string | null;
         repoRoot: string | null;
         workspaceMode: "in_place" | "isolated";
         eligibleHarnesses: string[];
@@ -2658,6 +2874,7 @@ export declare const ControlThreadListResponse: z.ZodObject<{
         title?: string | null | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        credentialProfileId?: string | null | undefined;
         repoRoot?: string | null | undefined;
         workspaceMode?: "in_place" | "isolated" | undefined;
         eligibleHarnesses?: string[] | undefined;
@@ -2681,6 +2898,9 @@ export declare const ControlThreadDetail: z.ZodObject<{
         primaryHarness: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** Sticky eligible pool for the thread (empty => engine auto-pools). */
         eligibleHarnesses: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Sticky credential profile (INV-135): clients can SET it via
+         * create/PATCH, so the projection must report it back (round-15 #3). */
+        credentialProfileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         state: z.ZodDefault<z.ZodEnum<["active", "closed", "trashed", "purged"]>>;
         trashedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         purgeAfter: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -2697,6 +2917,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
         title: string | null;
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
+        credentialProfileId: string | null;
         repoRoot: string | null;
         workspaceMode: "in_place" | "isolated";
         eligibleHarnesses: string[];
@@ -2716,6 +2937,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
         title?: string | null | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        credentialProfileId?: string | null | undefined;
         repoRoot?: string | null | undefined;
         workspaceMode?: "in_place" | "isolated" | undefined;
         eligibleHarnesses?: string[] | undefined;
@@ -2731,10 +2953,15 @@ export declare const ControlThreadDetail: z.ZodObject<{
         harnessId: z.ZodString;
         nativeSessionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         observedModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        /** Credential profile the vendor session was created under (INV-135):
+         * resume never crosses profiles, so clients must be able to SEE the
+         * binding they are subject to (round-15 #3). */
+        profileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         state: z.ZodDefault<z.ZodEnum<["live", "stale", "rebound"]>>;
     }, "strip", z.ZodTypeAny, {
         harnessId: string;
         state: "live" | "stale" | "rebound";
+        profileId: string | null;
         id: string;
         threadId: string;
         observedModel: string | null;
@@ -2744,6 +2971,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
         id: string;
         threadId: string;
         state?: "live" | "stale" | "rebound" | undefined;
+        profileId?: string | null | undefined;
         observedModel?: string | null | undefined;
         nativeSessionId?: string | null | undefined;
     }>, "many">>;
@@ -2984,6 +3212,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
         title: string | null;
         primaryHarness: string | null;
         authPreference: "auto" | "subscription" | "api_key";
+        credentialProfileId: string | null;
         repoRoot: string | null;
         workspaceMode: "in_place" | "isolated";
         eligibleHarnesses: string[];
@@ -2998,6 +3227,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
     sessions: {
         harnessId: string;
         state: "live" | "stale" | "rebound";
+        profileId: string | null;
         id: string;
         threadId: string;
         observedModel: string | null;
@@ -3054,6 +3284,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
         title?: string | null | undefined;
         primaryHarness?: string | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
+        credentialProfileId?: string | null | undefined;
         repoRoot?: string | null | undefined;
         workspaceMode?: "in_place" | "isolated" | undefined;
         eligibleHarnesses?: string[] | undefined;
@@ -3068,6 +3299,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
         id: string;
         threadId: string;
         state?: "live" | "stale" | "rebound" | undefined;
+        profileId?: string | null | undefined;
         observedModel?: string | null | undefined;
         nativeSessionId?: string | null | undefined;
     }[] | undefined;
@@ -3114,503 +3346,6 @@ export declare const ControlThreadDetail: z.ZodObject<{
     }[] | undefined;
 }>;
 export type ControlThreadDetail = z.infer<typeof ControlThreadDetail>;
-export declare const HarnessStatusDto: z.ZodObject<{
-    id: z.ZodString;
-    status: z.ZodEnum<["ok", "degraded", "unavailable"]>;
-    manifest: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-        id: z.ZodString;
-        display_name: z.ZodString;
-        kind: z.ZodEnum<["local_cli", "remote_api", "fake"]>;
-        version: z.ZodOptional<z.ZodString>;
-        adapter_version: z.ZodOptional<z.ZodString>;
-        provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
-        capability_profile: z.ZodDefault<z.ZodObject<{
-            auth: z.ZodDefault<z.ZodObject<{
-                supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-                preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
-                credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-                    source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
-                    kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
-                    relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
-                }, "strip", z.ZodTypeAny, {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
-                }, {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
-                }>, "many">>;
-            }, "strip", z.ZodTypeAny, {
-                supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
-                preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
-                credential_transports: {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
-                }[];
-            }, {
-                supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
-                preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
-                credential_transports?: {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
-                }[] | undefined;
-            }>>;
-            access_control: z.ZodDefault<z.ZodObject<{
-                readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
-            }, "strip", z.ZodTypeAny, {
-                readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
-            }, {
-                readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
-            }>>;
-            isolation: z.ZodDefault<z.ZodObject<{
-                supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
-            }, "strip", z.ZodTypeAny, {
-                supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
-            }, {
-                supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
-            }>>;
-            attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
-                kind: z.ZodEnum<["image", "file"]>;
-                mime_types: z.ZodArray<z.ZodString, "many">;
-                max_bytes: z.ZodNumber;
-                max_count: z.ZodNumber;
-                transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
-            }, "strict", z.ZodTypeAny, {
-                kind: "image" | "file";
-                mime_types: string[];
-                max_bytes: number;
-                max_count: number;
-                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
-            }, {
-                kind: "image" | "file";
-                mime_types: string[];
-                max_bytes: number;
-                max_count: number;
-                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
-            }>, "many">>;
-        }, "strip", z.ZodTypeAny, {
-            auth: {
-                supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
-                preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
-                credential_transports: {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
-                }[];
-            };
-            access_control: {
-                readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
-            };
-            isolation: {
-                supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
-            };
-            attachment_inputs: {
-                kind: "image" | "file";
-                mime_types: string[];
-                max_bytes: number;
-                max_count: number;
-                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
-            }[];
-        }, {
-            auth?: {
-                supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
-                preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
-                credential_transports?: {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
-                }[] | undefined;
-            } | undefined;
-            access_control?: {
-                readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
-            } | undefined;
-            isolation?: {
-                supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
-            } | undefined;
-            attachment_inputs?: {
-                kind: "image" | "file";
-                mime_types: string[];
-                max_bytes: number;
-                max_count: number;
-                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
-            }[] | undefined;
-        }>>;
-        capabilities: z.ZodObject<{
-            plan: z.ZodDefault<z.ZodBoolean>;
-            implement: z.ZodDefault<z.ZodBoolean>;
-            implementation_transport: z.ZodDefault<z.ZodEnum<["workspace", "git_patch_envelope"]>>;
-            create_from_scratch: z.ZodDefault<z.ZodBoolean>;
-            review: z.ZodDefault<z.ZodBoolean>;
-            verify: z.ZodDefault<z.ZodBoolean>;
-            synthesize: z.ZodDefault<z.ZodBoolean>;
-            read_files: z.ZodDefault<z.ZodBoolean>;
-            browser_tool: z.ZodDefault<z.ZodBoolean>;
-            web_policy: z.ZodDefault<z.ZodEnum<["native", "tools", "uncontrolled", "none"]>>;
-            max_turns: z.ZodDefault<z.ZodBoolean>;
-            tool_lists: z.ZodDefault<z.ZodBoolean>;
-            interactive: z.ZodDefault<z.ZodBoolean>;
-            orchestrate: z.ZodDefault<z.ZodBoolean>;
-            json_schema_output: z.ZodDefault<z.ZodBoolean>;
-            effort_levels: z.ZodDefault<z.ZodArray<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>, "many">>;
-            known_models: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-            known_models_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        }, "strip", z.ZodTypeAny, {
-            plan: boolean;
-            orchestrate: boolean;
-            implement: boolean;
-            create_from_scratch: boolean;
-            review: boolean;
-            verify: boolean;
-            synthesize: boolean;
-            implementation_transport: "workspace" | "git_patch_envelope";
-            read_files: boolean;
-            browser_tool: boolean;
-            web_policy: "none" | "native" | "tools" | "uncontrolled";
-            max_turns: boolean;
-            tool_lists: boolean;
-            interactive: boolean;
-            json_schema_output: boolean;
-            effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-            known_models: string[];
-            known_models_verified_against: string | null;
-        }, {
-            plan?: boolean | undefined;
-            orchestrate?: boolean | undefined;
-            implement?: boolean | undefined;
-            create_from_scratch?: boolean | undefined;
-            review?: boolean | undefined;
-            verify?: boolean | undefined;
-            synthesize?: boolean | undefined;
-            implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
-            read_files?: boolean | undefined;
-            browser_tool?: boolean | undefined;
-            web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
-            max_turns?: boolean | undefined;
-            tool_lists?: boolean | undefined;
-            interactive?: boolean | undefined;
-            json_schema_output?: boolean | undefined;
-            effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-            known_models?: string[] | undefined;
-            known_models_verified_against?: string | null | undefined;
-        }>;
-        auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
-        access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        kind: "local_cli" | "remote_api" | "fake";
-        id: string;
-        display_name: string;
-        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
-        capability_profile: {
-            auth: {
-                supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
-                preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
-                credential_transports: {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
-                }[];
-            };
-            access_control: {
-                readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
-            };
-            isolation: {
-                supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
-            };
-            attachment_inputs: {
-                kind: "image" | "file";
-                mime_types: string[];
-                max_bytes: number;
-                max_count: number;
-                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
-            }[];
-        };
-        capabilities: {
-            plan: boolean;
-            orchestrate: boolean;
-            implement: boolean;
-            create_from_scratch: boolean;
-            review: boolean;
-            verify: boolean;
-            synthesize: boolean;
-            implementation_transport: "workspace" | "git_patch_envelope";
-            read_files: boolean;
-            browser_tool: boolean;
-            web_policy: "none" | "native" | "tools" | "uncontrolled";
-            max_turns: boolean;
-            tool_lists: boolean;
-            interactive: boolean;
-            json_schema_output: boolean;
-            effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-            known_models: string[];
-            known_models_verified_against: string | null;
-        };
-        auth_modes: ("api_key" | "none" | "local_session")[];
-        access_profiles_supported: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
-        version?: string | undefined;
-        adapter_version?: string | undefined;
-    }, {
-        kind: "local_cli" | "remote_api" | "fake";
-        id: string;
-        display_name: string;
-        capabilities: {
-            plan?: boolean | undefined;
-            orchestrate?: boolean | undefined;
-            implement?: boolean | undefined;
-            create_from_scratch?: boolean | undefined;
-            review?: boolean | undefined;
-            verify?: boolean | undefined;
-            synthesize?: boolean | undefined;
-            implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
-            read_files?: boolean | undefined;
-            browser_tool?: boolean | undefined;
-            web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
-            max_turns?: boolean | undefined;
-            tool_lists?: boolean | undefined;
-            interactive?: boolean | undefined;
-            json_schema_output?: boolean | undefined;
-            effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-            known_models?: string[] | undefined;
-            known_models_verified_against?: string | null | undefined;
-        };
-        version?: string | undefined;
-        adapter_version?: string | undefined;
-        provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
-        capability_profile?: {
-            auth?: {
-                supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
-                preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
-                credential_transports?: {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
-                }[] | undefined;
-            } | undefined;
-            access_control?: {
-                readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
-            } | undefined;
-            isolation?: {
-                supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
-            } | undefined;
-            attachment_inputs?: {
-                kind: "image" | "file";
-                mime_types: string[];
-                max_bytes: number;
-                max_count: number;
-                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
-            }[] | undefined;
-        } | undefined;
-        auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
-        access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
-    }>>>;
-    enabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    disabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    checks: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        status: z.ZodEnum<["pass", "fail", "skip"]>;
-        detail: z.ZodOptional<z.ZodString>;
-        duration_ms: z.ZodOptional<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-        status: "pass" | "fail" | "skip";
-        id: string;
-        detail?: string | undefined;
-        duration_ms?: number | undefined;
-    }, {
-        status: "pass" | "fail" | "skip";
-        id: string;
-        detail?: string | undefined;
-        duration_ms?: number | undefined;
-    }>, "many">>;
-    reasons: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    authSources: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
-        availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
-        verification: z.ZodEnum<["passed", "failed", "not_run"]>;
-        detail: z.ZodOptional<z.ZodString>;
-    }, "strict", z.ZodTypeAny, {
-        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-        availability: "unknown" | "available" | "unavailable";
-        verification: "passed" | "failed" | "not_run";
-        detail?: string | undefined;
-    }, {
-        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-        availability: "unknown" | "available" | "unavailable";
-        verification: "passed" | "failed" | "not_run";
-        detail?: string | undefined;
-    }>, "many">>;
-    /** The user's configured per-harness default model, if any. */
-    configuredModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    /** Strict truth-source check of `configuredModel`: null when no model
-     * is configured; a rejection carries the actionable message so UIs render
-     * the same honesty `claudexor doctor` prints. */
-    configuredModelCheck: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-        status: z.ZodEnum<["ok", "rejected"]>;
-        message: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        message: string | null;
-        status: "ok" | "rejected";
-    }, {
-        status: "ok" | "rejected";
-        message?: string | null | undefined;
-    }>>>;
-}, "strip", z.ZodTypeAny, {
-    status: "unavailable" | "ok" | "degraded";
-    id: string;
-    checks: {
-        status: "pass" | "fail" | "skip";
-        id: string;
-        detail?: string | undefined;
-        duration_ms?: number | undefined;
-    }[];
-    reasons: string[];
-    enabledIntents: string[];
-    disabledIntents: string[];
-    configuredModel: string | null;
-    authSources: {
-        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-        availability: "unknown" | "available" | "unavailable";
-        verification: "passed" | "failed" | "not_run";
-        detail?: string | undefined;
-    }[];
-    configuredModelCheck: {
-        message: string | null;
-        status: "ok" | "rejected";
-    } | null;
-    manifest?: {
-        kind: "local_cli" | "remote_api" | "fake";
-        id: string;
-        display_name: string;
-        provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
-        capability_profile: {
-            auth: {
-                supported_sources: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[];
-                preferred_source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
-                credential_transports: {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[];
-                }[];
-            };
-            access_control: {
-                readonly_mechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
-            };
-            isolation: {
-                supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
-            };
-            attachment_inputs: {
-                kind: "image" | "file";
-                mime_types: string[];
-                max_bytes: number;
-                max_count: number;
-                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
-            }[];
-        };
-        capabilities: {
-            plan: boolean;
-            orchestrate: boolean;
-            implement: boolean;
-            create_from_scratch: boolean;
-            review: boolean;
-            verify: boolean;
-            synthesize: boolean;
-            implementation_transport: "workspace" | "git_patch_envelope";
-            read_files: boolean;
-            browser_tool: boolean;
-            web_policy: "none" | "native" | "tools" | "uncontrolled";
-            max_turns: boolean;
-            tool_lists: boolean;
-            interactive: boolean;
-            json_schema_output: boolean;
-            effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-            known_models: string[];
-            known_models_verified_against: string | null;
-        };
-        auth_modes: ("api_key" | "none" | "local_session")[];
-        access_profiles_supported: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
-        version?: string | undefined;
-        adapter_version?: string | undefined;
-    } | null | undefined;
-}, {
-    status: "unavailable" | "ok" | "degraded";
-    id: string;
-    checks?: {
-        status: "pass" | "fail" | "skip";
-        id: string;
-        detail?: string | undefined;
-        duration_ms?: number | undefined;
-    }[] | undefined;
-    reasons?: string[] | undefined;
-    manifest?: {
-        kind: "local_cli" | "remote_api" | "fake";
-        id: string;
-        display_name: string;
-        capabilities: {
-            plan?: boolean | undefined;
-            orchestrate?: boolean | undefined;
-            implement?: boolean | undefined;
-            create_from_scratch?: boolean | undefined;
-            review?: boolean | undefined;
-            verify?: boolean | undefined;
-            synthesize?: boolean | undefined;
-            implementation_transport?: "workspace" | "git_patch_envelope" | undefined;
-            read_files?: boolean | undefined;
-            browser_tool?: boolean | undefined;
-            web_policy?: "none" | "native" | "tools" | "uncontrolled" | undefined;
-            max_turns?: boolean | undefined;
-            tool_lists?: boolean | undefined;
-            interactive?: boolean | undefined;
-            json_schema_output?: boolean | undefined;
-            effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-            known_models?: string[] | undefined;
-            known_models_verified_against?: string | null | undefined;
-        };
-        version?: string | undefined;
-        adapter_version?: string | undefined;
-        provider_family?: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown" | undefined;
-        capability_profile?: {
-            auth?: {
-                supported_sources?: ("native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none")[] | undefined;
-                preferred_source?: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null | undefined;
-                credential_transports?: {
-                    source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-                    kind: "oauth_token_env" | "none" | "config_file" | "env_var" | "os_keychain" | "http_header";
-                    relocatable_by?: ("none" | "HOME" | "CONFIG_DIR" | "ENV")[] | undefined;
-                }[] | undefined;
-            } | undefined;
-            access_control?: {
-                readonly_mechanism?: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist" | undefined;
-            } | undefined;
-            isolation?: {
-                supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
-            } | undefined;
-            attachment_inputs?: {
-                kind: "image" | "file";
-                mime_types: string[];
-                max_bytes: number;
-                max_count: number;
-                transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
-            }[] | undefined;
-        } | undefined;
-        auth_modes?: ("api_key" | "none" | "local_session")[] | undefined;
-        access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
-    } | null | undefined;
-    enabledIntents?: string[] | undefined;
-    disabledIntents?: string[] | undefined;
-    configuredModel?: string | null | undefined;
-    authSources?: {
-        source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
-        availability: "unknown" | "available" | "unavailable";
-        verification: "passed" | "failed" | "not_run";
-        detail?: string | undefined;
-    }[] | undefined;
-    configuredModelCheck?: {
-        status: "ok" | "rejected";
-        message?: string | null | undefined;
-    } | null | undefined;
-}>;
-export type HarnessStatusDto = z.infer<typeof HarnessStatusDto>;
 export declare const ControlHarnessListResponse: z.ZodObject<{
     harnesses: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -3677,13 +3412,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                     max_count: z.ZodNumber;
                     transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
                 }, "strict", z.ZodTypeAny, {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
                     transport: "file_path" | "base64_stream" | "base64_inline" | "text_inline";
                 }, {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
@@ -3706,7 +3441,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                     supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
                 };
                 attachment_inputs: {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
@@ -3729,7 +3464,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                     supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
                 } | undefined;
                 attachment_inputs?: {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
@@ -3753,7 +3488,16 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 orchestrate: z.ZodDefault<z.ZodBoolean>;
                 json_schema_output: z.ZodDefault<z.ZodBoolean>;
                 effort_levels: z.ZodDefault<z.ZodArray<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>, "many">>;
-                known_models: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                known_models: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
+                    id: z.ZodString;
+                    routes: z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">;
+                }, "strict", z.ZodTypeAny, {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                }, {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                }>]>, "many">>;
                 known_models_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             }, "strip", z.ZodTypeAny, {
                 plan: boolean;
@@ -3772,7 +3516,10 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 interactive: boolean;
                 json_schema_output: boolean;
                 effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-                known_models: string[];
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
                 known_models_verified_against: string | null;
             }, {
                 plan?: boolean | undefined;
@@ -3791,15 +3538,18 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 interactive?: boolean | undefined;
                 json_schema_output?: boolean | undefined;
                 effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-                known_models?: string[] | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
                 known_models_verified_against?: string | null | undefined;
             }>;
             auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
             access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
         }, "strip", z.ZodTypeAny, {
+            display_name: string;
             kind: "local_cli" | "remote_api" | "fake";
             id: string;
-            display_name: string;
             provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
             capability_profile: {
                 auth: {
@@ -3818,7 +3568,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                     supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
                 };
                 attachment_inputs: {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
@@ -3842,7 +3592,10 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 interactive: boolean;
                 json_schema_output: boolean;
                 effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-                known_models: string[];
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
                 known_models_verified_against: string | null;
             };
             auth_modes: ("api_key" | "none" | "local_session")[];
@@ -3850,9 +3603,9 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             version?: string | undefined;
             adapter_version?: string | undefined;
         }, {
+            display_name: string;
             kind: "local_cli" | "remote_api" | "fake";
             id: string;
-            display_name: string;
             capabilities: {
                 plan?: boolean | undefined;
                 orchestrate?: boolean | undefined;
@@ -3870,7 +3623,10 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 interactive?: boolean | undefined;
                 json_schema_output?: boolean | undefined;
                 effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-                known_models?: string[] | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
                 known_models_verified_against?: string | null | undefined;
             };
             version?: string | undefined;
@@ -3893,7 +3649,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                     supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
                 } | undefined;
                 attachment_inputs?: {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
@@ -3904,6 +3660,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             access_profiles_supported?: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[] | undefined;
         }>>>;
         enabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        routableIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         disabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         checks: z.ZodDefault<z.ZodArray<z.ZodObject<{
             id: z.ZodString;
@@ -3938,11 +3695,26 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             verification: "passed" | "failed" | "not_run";
             detail?: string | undefined;
         }>, "many">>;
-        /** The user's configured per-harness default model, if any. */
+        readiness: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodEnum<["binary", "auth", "smoke", "model", "probe"]>;
+            title: z.ZodString;
+            status: z.ZodEnum<["pass", "fail", "skip"]>;
+            detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            status: "pass" | "fail" | "skip";
+            detail: string | null;
+            kind: "binary" | "auth" | "model" | "smoke" | "probe";
+            id: string;
+            title: string;
+        }, {
+            status: "pass" | "fail" | "skip";
+            kind: "binary" | "auth" | "model" | "smoke" | "probe";
+            id: string;
+            title: string;
+            detail?: string | null | undefined;
+        }>, "many">>;
         configuredModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        /** Strict truth-source check of `configuredModel`: null when no model
-         * is configured; a rejection carries the actionable message so UIs render
-         * the same honesty `claudexor doctor` prints. */
         configuredModelCheck: z.ZodDefault<z.ZodNullable<z.ZodObject<{
             status: z.ZodEnum<["ok", "rejected"]>;
             message: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -3955,6 +3727,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         }>>>;
     }, "strip", z.ZodTypeAny, {
         status: "unavailable" | "ok" | "degraded";
+        readiness: {
+            status: "pass" | "fail" | "skip";
+            detail: string | null;
+            kind: "binary" | "auth" | "model" | "smoke" | "probe";
+            id: string;
+            title: string;
+        }[];
         id: string;
         checks: {
             status: "pass" | "fail" | "skip";
@@ -3966,6 +3745,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         enabledIntents: string[];
         disabledIntents: string[];
         configuredModel: string | null;
+        routableIntents: string[];
         authSources: {
             source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
             availability: "unknown" | "available" | "unavailable";
@@ -3977,9 +3757,9 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             status: "ok" | "rejected";
         } | null;
         manifest?: {
+            display_name: string;
             kind: "local_cli" | "remote_api" | "fake";
             id: string;
-            display_name: string;
             provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
             capability_profile: {
                 auth: {
@@ -3998,7 +3778,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                     supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
                 };
                 attachment_inputs: {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
@@ -4022,7 +3802,10 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 interactive: boolean;
                 json_schema_output: boolean;
                 effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-                known_models: string[];
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
                 known_models_verified_against: string | null;
             };
             auth_modes: ("api_key" | "none" | "local_session")[];
@@ -4033,6 +3816,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
     }, {
         status: "unavailable" | "ok" | "degraded";
         id: string;
+        readiness?: {
+            status: "pass" | "fail" | "skip";
+            kind: "binary" | "auth" | "model" | "smoke" | "probe";
+            id: string;
+            title: string;
+            detail?: string | null | undefined;
+        }[] | undefined;
         checks?: {
             status: "pass" | "fail" | "skip";
             id: string;
@@ -4041,9 +3831,9 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         }[] | undefined;
         reasons?: string[] | undefined;
         manifest?: {
+            display_name: string;
             kind: "local_cli" | "remote_api" | "fake";
             id: string;
-            display_name: string;
             capabilities: {
                 plan?: boolean | undefined;
                 orchestrate?: boolean | undefined;
@@ -4061,7 +3851,10 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 interactive?: boolean | undefined;
                 json_schema_output?: boolean | undefined;
                 effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-                known_models?: string[] | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
                 known_models_verified_against?: string | null | undefined;
             };
             version?: string | undefined;
@@ -4084,7 +3877,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                     supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
                 } | undefined;
                 attachment_inputs?: {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
@@ -4097,6 +3890,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         enabledIntents?: string[] | undefined;
         disabledIntents?: string[] | undefined;
         configuredModel?: string | null | undefined;
+        routableIntents?: string[] | undefined;
         authSources?: {
             source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
             availability: "unknown" | "available" | "unavailable";
@@ -4111,6 +3905,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     harnesses: {
         status: "unavailable" | "ok" | "degraded";
+        readiness: {
+            status: "pass" | "fail" | "skip";
+            detail: string | null;
+            kind: "binary" | "auth" | "model" | "smoke" | "probe";
+            id: string;
+            title: string;
+        }[];
         id: string;
         checks: {
             status: "pass" | "fail" | "skip";
@@ -4122,6 +3923,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         enabledIntents: string[];
         disabledIntents: string[];
         configuredModel: string | null;
+        routableIntents: string[];
         authSources: {
             source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
             availability: "unknown" | "available" | "unavailable";
@@ -4133,9 +3935,9 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
             status: "ok" | "rejected";
         } | null;
         manifest?: {
+            display_name: string;
             kind: "local_cli" | "remote_api" | "fake";
             id: string;
-            display_name: string;
             provider_family: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
             capability_profile: {
                 auth: {
@@ -4154,7 +3956,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                     supported_containment: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[];
                 };
                 attachment_inputs: {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
@@ -4178,7 +3980,10 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 interactive: boolean;
                 json_schema_output: boolean;
                 effort_levels: ("low" | "medium" | "high" | "xhigh" | "max")[];
-                known_models: string[];
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
                 known_models_verified_against: string | null;
             };
             auth_modes: ("api_key" | "none" | "local_session")[];
@@ -4191,6 +3996,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
     harnesses?: {
         status: "unavailable" | "ok" | "degraded";
         id: string;
+        readiness?: {
+            status: "pass" | "fail" | "skip";
+            kind: "binary" | "auth" | "model" | "smoke" | "probe";
+            id: string;
+            title: string;
+            detail?: string | null | undefined;
+        }[] | undefined;
         checks?: {
             status: "pass" | "fail" | "skip";
             id: string;
@@ -4199,9 +4011,9 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         }[] | undefined;
         reasons?: string[] | undefined;
         manifest?: {
+            display_name: string;
             kind: "local_cli" | "remote_api" | "fake";
             id: string;
-            display_name: string;
             capabilities: {
                 plan?: boolean | undefined;
                 orchestrate?: boolean | undefined;
@@ -4219,7 +4031,10 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                 interactive?: boolean | undefined;
                 json_schema_output?: boolean | undefined;
                 effort_levels?: ("low" | "medium" | "high" | "xhigh" | "max")[] | undefined;
-                known_models?: string[] | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
                 known_models_verified_against?: string | null | undefined;
             };
             version?: string | undefined;
@@ -4242,7 +4057,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
                     supported_containment?: ("env_or_file_injection" | "scoped_home_keychain_bridge" | "host_user_context" | "process_sandbox" | "container")[] | undefined;
                 } | undefined;
                 attachment_inputs?: {
-                    kind: "image" | "file";
+                    kind: "file" | "image";
                     mime_types: string[];
                     max_bytes: number;
                     max_count: number;
@@ -4255,6 +4070,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
         enabledIntents?: string[] | undefined;
         disabledIntents?: string[] | undefined;
         configuredModel?: string | null | undefined;
+        routableIntents?: string[] | undefined;
         authSources?: {
             source: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
             availability: "unknown" | "available" | "unavailable";
@@ -4281,13 +4097,16 @@ export declare const ControlHarnessModelsResponse: z.ZodObject<{
         id: z.ZodString;
         label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         context_window: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        routes: z.ZodDefault<z.ZodNullable<z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">>>;
     }, "strip", z.ZodTypeAny, {
         id: string;
         label: string | null;
+        routes: ("api_key" | "local_session")[] | null;
         context_window: number | null;
     }, {
         id: string;
         label?: string | null | undefined;
+        routes?: ("api_key" | "local_session")[] | null | undefined;
         context_window?: number | null | undefined;
     }>, "many">>;
     source: z.ZodEnum<["api", "manifest", "none"]>;
@@ -4301,6 +4120,7 @@ export declare const ControlHarnessModelsResponse: z.ZodObject<{
     models: {
         id: string;
         label: string | null;
+        routes: ("api_key" | "local_session")[] | null;
         context_window: number | null;
     }[];
 }, {
@@ -4310,6 +4130,7 @@ export declare const ControlHarnessModelsResponse: z.ZodObject<{
     models?: {
         id: string;
         label?: string | null | undefined;
+        routes?: ("api_key" | "local_session")[] | null | undefined;
         context_window?: number | null | undefined;
     }[] | undefined;
 }>;
@@ -4442,41 +4263,48 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
         fallbackModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         web: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
         authPreference: z.ZodDefault<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+        /** Profile-selection policy (INV-135): what happens when the
+         * selected account hits its quota. Drives the app's auto-switch
+         * toggle read-back. */
+        profileLimitAction: z.ZodDefault<z.ZodEnum<["fail", "ask", "rotate"]>>;
     }, "strip", z.ZodTypeAny, {
-        web: "off" | "auto" | "cached" | "live";
         enabled: boolean;
+        web: "off" | "auto" | "cached" | "live";
         effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
         authPreference: "auto" | "subscription" | "api_key";
-        defaultModel: string | null;
         maxTurns: number | null;
+        defaultModel: string | null;
         maxRounds: number | null;
         toolsAllow: string[];
         toolsDeny: string[];
         fallbackModel: string | null;
+        profileLimitAction: "ask" | "fail" | "rotate";
     }, {
-        web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
-        defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
+        defaultModel?: string | null | undefined;
         maxRounds?: number | null | undefined;
         toolsAllow?: string[] | undefined;
         toolsDeny?: string[] | undefined;
         fallbackModel?: string | null | undefined;
+        profileLimitAction?: "ask" | "fail" | "rotate" | undefined;
     }>>>;
 }, "strip", z.ZodTypeAny, {
     harnesses: Record<string, {
-        web: "off" | "auto" | "cached" | "live";
         enabled: boolean;
+        web: "off" | "auto" | "cached" | "live";
         effort: "low" | "medium" | "high" | "xhigh" | "max" | null;
         authPreference: "auto" | "subscription" | "api_key";
-        defaultModel: string | null;
         maxTurns: number | null;
+        defaultModel: string | null;
         maxRounds: number | null;
         toolsAllow: string[];
         toolsDeny: string[];
         fallbackModel: string | null;
+        profileLimitAction: "ask" | "fail" | "rotate";
     }>;
     budget: {
         paidBudgetPerRun: {
@@ -4513,16 +4341,17 @@ export declare const ControlSettingsSnapshot: z.ZodObject<{
     interactionTimeoutMs: number;
 }, {
     harnesses?: Record<string, {
-        web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
-        defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
+        defaultModel?: string | null | undefined;
         maxRounds?: number | null | undefined;
         toolsAllow?: string[] | undefined;
         toolsDeny?: string[] | undefined;
         fallbackModel?: string | null | undefined;
+        profileLimitAction?: "ask" | "fail" | "rotate" | undefined;
     }> | undefined;
     budget?: {
         paidBudgetPerRun?: {
@@ -4574,28 +4403,33 @@ export declare const ControlHarnessSettingsPatch: z.ZodObject<{
     fallbackModel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     web: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
     authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+    /** Auto-switch accounts on quota limits (INV-135): rotate enables the
+     * profile-rotation engine for this harness; fail restores the default. */
+    profileLimitAction: z.ZodOptional<z.ZodEnum<["fail", "ask", "rotate"]>>;
 }, "strict", z.ZodTypeAny, {
-    web?: "off" | "auto" | "cached" | "live" | undefined;
     enabled?: boolean | undefined;
+    web?: "off" | "auto" | "cached" | "live" | undefined;
     effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
-    defaultModel?: string | null | undefined;
     maxTurns?: number | null | undefined;
+    defaultModel?: string | null | undefined;
     maxRounds?: number | null | undefined;
     toolsAllow?: string[] | undefined;
     toolsDeny?: string[] | undefined;
     fallbackModel?: string | null | undefined;
+    profileLimitAction?: "ask" | "fail" | "rotate" | undefined;
 }, {
-    web?: "off" | "auto" | "cached" | "live" | undefined;
     enabled?: boolean | undefined;
+    web?: "off" | "auto" | "cached" | "live" | undefined;
     effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
     authPreference?: "auto" | "subscription" | "api_key" | undefined;
-    defaultModel?: string | null | undefined;
     maxTurns?: number | null | undefined;
+    defaultModel?: string | null | undefined;
     maxRounds?: number | null | undefined;
     toolsAllow?: string[] | undefined;
     toolsDeny?: string[] | undefined;
     fallbackModel?: string | null | undefined;
+    profileLimitAction?: "ask" | "fail" | "rotate" | undefined;
 }>;
 export type ControlHarnessSettingsPatch = z.infer<typeof ControlHarnessSettingsPatch>;
 export declare const ControlSettingsUpdateRequest: z.ZodObject<{
@@ -4647,41 +4481,47 @@ export declare const ControlSettingsUpdateRequest: z.ZodObject<{
         fallbackModel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         web: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
         authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+        /** Auto-switch accounts on quota limits (INV-135): rotate enables the
+         * profile-rotation engine for this harness; fail restores the default. */
+        profileLimitAction: z.ZodOptional<z.ZodEnum<["fail", "ask", "rotate"]>>;
     }, "strict", z.ZodTypeAny, {
-        web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
-        defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
+        defaultModel?: string | null | undefined;
         maxRounds?: number | null | undefined;
         toolsAllow?: string[] | undefined;
         toolsDeny?: string[] | undefined;
         fallbackModel?: string | null | undefined;
+        profileLimitAction?: "ask" | "fail" | "rotate" | undefined;
     }, {
-        web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
-        defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
+        defaultModel?: string | null | undefined;
         maxRounds?: number | null | undefined;
         toolsAllow?: string[] | undefined;
         toolsDeny?: string[] | undefined;
         fallbackModel?: string | null | undefined;
+        profileLimitAction?: "ask" | "fail" | "rotate" | undefined;
     }>>>;
 }, "strict", z.ZodTypeAny, {
     harnesses?: Record<string, {
-        web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
-        defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
+        defaultModel?: string | null | undefined;
         maxRounds?: number | null | undefined;
         toolsAllow?: string[] | undefined;
         toolsDeny?: string[] | undefined;
         fallbackModel?: string | null | undefined;
+        profileLimitAction?: "ask" | "fail" | "rotate" | undefined;
     }> | undefined;
     primaryHarness?: string | null | undefined;
     routingGoal?: "auto" | "quality" | "economy" | undefined;
@@ -4704,16 +4544,17 @@ export declare const ControlSettingsUpdateRequest: z.ZodObject<{
     routingPolicy?: "auto" | "primary" | undefined;
 }, {
     harnesses?: Record<string, {
-        web?: "off" | "auto" | "cached" | "live" | undefined;
         enabled?: boolean | undefined;
+        web?: "off" | "auto" | "cached" | "live" | undefined;
         effort?: "low" | "medium" | "high" | "xhigh" | "max" | null | undefined;
         authPreference?: "auto" | "subscription" | "api_key" | undefined;
-        defaultModel?: string | null | undefined;
         maxTurns?: number | null | undefined;
+        defaultModel?: string | null | undefined;
         maxRounds?: number | null | undefined;
         toolsAllow?: string[] | undefined;
         toolsDeny?: string[] | undefined;
         fallbackModel?: string | null | undefined;
+        profileLimitAction?: "ask" | "fail" | "rotate" | undefined;
     }> | undefined;
     primaryHarness?: string | null | undefined;
     routingGoal?: "auto" | "quality" | "economy" | undefined;