@claudexor/schema 3.1.1 → 3.2.0

package/generated/ControlCredentialProfilesQueryResponse.schema.json

@@ -0,0 +1,1333 @@
+{
+  "$ref": "#/definitions/ControlCredentialProfilesQueryResponse",
+  "definitions": {
+    "ControlCredentialProfilesQueryResponse": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "profiles": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "profile": {
+                    "type": "object",
+                    "properties": {
+                      "profile_id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Stable user-chosen profile identifier (unique per harness)."
+                      },
+                      "harness_id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Harness family this profile belongs to."
+                      },
+                      "display_name": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Human label shown wherever the profile appears."
+                      },
+                      "credential_kind": {
+                        "type": "string",
+                        "enum": [
+                          "config_dir_login",
+                          "oauth_token",
+                          "api_key"
+                        ],
+                        "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+                      },
+                      "isolation_locator": {
+                        "type": [
+                          "string",
+                          "null"
+                        ],
+                        "default": null,
+                        "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+                      },
+                      "secret_ref": {
+                        "type": [
+                          "string",
+                          "null"
+                        ],
+                        "default": null,
+                        "description": "Namespaced secret-store name (e.g. claude_oauth:work) for oauth_token/api_key profiles; null for config_dir_login."
+                      },
+                      "enabled": {
+                        "type": "boolean",
+                        "default": true,
+                        "description": "Disabled profiles are never routable."
+                      },
+                      "created_at": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "ISO-8601 timestamp string."
+                          },
+                          {
+                            "type": "null"
+                          }
+                        ],
+                        "description": "When the profile was registered; null for hand-written config entries.",
+                        "default": null
+                      }
+                    },
+                    "required": [
+                      "profile_id",
+                      "harness_id",
+                      "display_name",
+                      "credential_kind"
+                    ],
+                    "additionalProperties": false,
+                    "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+                  },
+                  "status": {
+                    "type": "object",
+                    "properties": {
+                      "profile_id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Non-empty identifier string."
+                      },
+                      "harness_id": {
+                        "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles/items/properties/status/properties/profile_id"
+                      },
+                      "availability": {
+                        "type": "string",
+                        "enum": [
+                          "available",
+                          "unavailable",
+                          "unknown"
+                        ]
+                      },
+                      "verification": {
+                        "type": "string",
+                        "enum": [
+                          "passed",
+                          "failed",
+                          "not_run"
+                        ]
+                      },
+                      "detail": {
+                        "type": "string",
+                        "description": "Redacted human-readable probe evidence."
+                      },
+                      "last_verified_at": {
+                        "anyOf": [
+                          {
+                            "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles/items/properties/profile/properties/created_at/anyOf/0"
+                          },
+                          {
+                            "type": "null"
+                          }
+                        ],
+                        "description": "When a probe last verified this profile; null = never verified.",
+                        "default": null
+                      }
+                    },
+                    "required": [
+                      "profile_id",
+                      "harness_id",
+                      "availability",
+                      "verification"
+                    ],
+                    "additionalProperties": false,
+                    "description": "Doctor-owned readiness projection for one credential profile; never durable config."
+                  },
+                  "identity": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "email": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Login email of the account (codex id_token `email` / claude oauthAccount `emailAddress`)."
+                          },
+                          "plan": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Subscription/plan label (codex `chatgpt_plan_type` / claude oauthAccount `organizationType`)."
+                          }
+                        },
+                        "additionalProperties": false,
+                        "description": "Non-secret {email, plan} identity of one account, derived daemon-side from its OWN Claudexor-owned store; never carries token material."
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "description": "Non-secret {email, plan} of this profile, derived daemon-side from its OWN isolation-locator store; null when absent/undisclosed.",
+                    "default": null
+                  }
+                },
+                "required": [
+                  "profile",
+                  "status"
+                ],
+                "additionalProperties": false
+              },
+              "description": "Every registered credential profile paired with its doctor readiness projection and non-secret identity."
+            },
+            "harnessAccounts": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "harness_id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Harness family these accounts belong to."
+                  },
+                  "native_credentials_enabled": {
+                    "type": "boolean",
+                    "description": "Whether the native/CLI login participates in this harness's credential ladder."
+                  },
+                  "native_login_detected": {
+                    "type": "boolean",
+                    "description": "Whether a native/default vendor login is currently detected available (the CLI login pseudo-row state)."
+                  },
+                  "identity": {
+                    "anyOf": [
+                      {
+                        "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles/items/properties/identity/anyOf/0"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "description": "Non-secret {email, plan} of the native/CLI login, derived daemon-side from the Claudexor-owned native store; null when absent/undisclosed.",
+                    "default": null
+                  },
+                  "next_up": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "kind": {
+                            "type": "string",
+                            "const": "profile"
+                          },
+                          "profileId": {
+                            "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles/items/properties/status/properties/profile_id"
+                          }
+                        },
+                        "required": [
+                          "kind",
+                          "profileId"
+                        ],
+                        "additionalProperties": false,
+                        "description": "An enabled credential profile is who an unpinned run routes to next."
+                      },
+                      {
+                        "type": "object",
+                        "properties": {
+                          "kind": {
+                            "type": "string",
+                            "const": "native"
+                          },
+                          "route": {
+                            "type": "string",
+                            "enum": [
+                              "local_session",
+                              "api_key"
+                            ],
+                            "description": "Effective route of the unprofiled/default subject; omitted by older daemons."
+                          }
+                        },
+                        "required": [
+                          "kind"
+                        ],
+                        "additionalProperties": false,
+                        "description": "The unprofiled/default credential is the subject of an unpinned run."
+                      },
+                      {
+                        "type": "object",
+                        "properties": {
+                          "kind": {
+                            "type": "string",
+                            "const": "none"
+                          },
+                          "reason": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "kind",
+                          "reason"
+                        ],
+                        "additionalProperties": false,
+                        "description": "An unpinned run has nothing routable (the default credential is disabled and no account is pinned)."
+                      }
+                    ],
+                    "description": "Server-computed identity an unpinned run of this harness would route to next."
+                  }
+                },
+                "required": [
+                  "harness_id",
+                  "native_credentials_enabled",
+                  "native_login_detected",
+                  "next_up"
+                ],
+                "additionalProperties": false,
+                "description": "Per-harness accounts authority: native CLI-login state + the informational next-up identity."
+              },
+              "default": [],
+              "description": "Per-harness accounts authority (INV-135): the native CLI-login pseudo-row state and the server-computed Active identity, so no surface re-derives the accounts symmetry."
+            }
+          },
+          "required": [
+            "profiles"
+          ],
+          "additionalProperties": false,
+          "description": "Credential-profile registry listing with per-profile doctor readiness and per-harness accounts authority."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "profiles": {
+              "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles"
+            },
+            "harnessAccounts": {
+              "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/harnessAccounts"
+            },
+            "harnesses": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "id": {
+                    "type": "string",
+                    "description": "Harness id."
+                  },
+                  "status": {
+                    "type": "string",
+                    "enum": [
+                      "ok",
+                      "degraded",
+                      "unavailable"
+                    ],
+                    "description": "Doctor verdict for a harness: ok (usable), degraded (usable with limitations), or unavailable."
+                  },
+                  "manifest": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "id": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Harness id (codex, claude, cursor, opencode, raw-api, ...)."
+                          },
+                          "display_name": {
+                            "type": "string",
+                            "description": "Human display name of the harness."
+                          },
+                          "kind": {
+                            "type": "string",
+                            "enum": [
+                              "local_cli",
+                              "remote_api",
+                              "fake"
+                            ],
+                            "description": "Kind of harness adapter: a local vendor CLI, a remote API, or a fake used for tests."
+                          },
+                          "version": {
+                            "type": "string",
+                            "description": "Vendor CLI/API version, when discovered."
+                          },
+                          "adapter_version": {
+                            "type": "string",
+                            "description": "Version of the Claudexor adapter itself."
+                          },
+                          "provider_family": {
+                            "type": "string",
+                            "enum": [
+                              "openai",
+                              "anthropic",
+                              "google",
+                              "cursor",
+                              "opencode",
+                              "xai",
+                              "local",
+                              "unknown"
+                            ],
+                            "description": "Vendor/provider family a harness routes to, used for route-diversity reasoning; open-ended via \"unknown\".",
+                            "default": "unknown"
+                          },
+                          "capability_profile": {
+                            "type": "object",
+                            "properties": {
+                              "auth": {
+                                "type": "object",
+                                "properties": {
+                                  "supported_sources": {
+                                    "type": "array",
+                                    "items": {
+                                      "type": "string",
+                                      "enum": [
+                                        "native_session",
+                                        "oauth_token_env",
+                                        "api_key_env",
+                                        "api_key_flag",
+                                        "provider_auth_file",
+                                        "none"
+                                      ],
+                                      "description": "Concrete credential source used or probed by a harness."
+                                    },
+                                    "default": [],
+                                    "description": "Auth sources this harness supports."
+                                  },
+                                  "preferred_source": {
+                                    "anyOf": [
+                                      {
+                                        "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/1/properties/harnesses/items/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/supported_sources/items"
+                                      },
+                                      {
+                                        "type": "null"
+                                      }
+                                    ],
+                                    "description": "Auth source the adapter prefers; null when it has no preference.",
+                                    "default": null
+                                  },
+                                  "credential_transports": {
+                                    "type": "array",
+                                    "items": {
+                                      "type": "object",
+                                      "properties": {
+                                        "source": {
+                                          "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/1/properties/harnesses/items/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/supported_sources/items"
+                                        },
+                                        "kind": {
+                                          "type": "string",
+                                          "enum": [
+                                            "config_file",
+                                            "env_var",
+                                            "oauth_token_env",
+                                            "os_keychain",
+                                            "http_header",
+                                            "none"
+                                          ],
+                                          "description": "Mechanism that carries a credential to the harness process (config file, env var, OAuth token env, OS keychain, HTTP header, or none)."
+                                        },
+                                        "relocatable_by": {
+                                          "type": "array",
+                                          "items": {
+                                            "type": "string",
+                                            "enum": [
+                                              "HOME",
+                                              "CONFIG_DIR",
+                                              "ENV",
+                                              "none"
+                                            ],
+                                            "description": "Which relocation lever moves the credential into a scoped environment (HOME, a config dir override, env injection, or none)."
+                                          },
+                                          "default": [],
+                                          "description": "Relocation levers that can move this transport into a scoped environment."
+                                        }
+                                      },
+                                      "required": [
+                                        "source",
+                                        "kind"
+                                      ],
+                                      "additionalProperties": false,
+                                      "description": "How a credential from one auth source physically reaches the harness process."
+                                    },
+                                    "default": [],
+                                    "description": "Declared credential transports per auth source."
+                                  }
+                                },
+                                "additionalProperties": false,
+                                "default": {},
+                                "description": "Declared auth routing facts for a harness."
+                              },
+                              "access_control": {
+                                "type": "object",
+                                "properties": {
+                                  "readonly_mechanism": {
+                                    "type": "string",
+                                    "enum": [
+                                      "fs_sandbox",
+                                      "permission_deny",
+                                      "tool_allowlist",
+                                      "none"
+                                    ],
+                                    "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                                    "default": "none"
+                                  }
+                                },
+                                "additionalProperties": false,
+                                "default": {},
+                                "description": "Declared access-control facts for a harness."
+                              },
+                              "isolation": {
+                                "type": "object",
+                                "properties": {
+                                  "supported_containment": {
+                                    "type": "array",
+                                    "items": {
+                                      "type": "string",
+                                      "enum": [
+                                        "env_or_file_injection",
+                                        "scoped_home_keychain_bridge",
+                                        "host_user_context",
+                                        "process_sandbox",
+                                        "container"
+                                      ],
+                                      "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                                    },
+                                    "default": [
+                                      "env_or_file_injection"
+                                    ],
+                                    "description": "Containment mechanisms the adapter can run under."
+                                  }
+                                },
+                                "additionalProperties": false,
+                                "default": {},
+                                "description": "Declared isolation containment facts for a harness."
+                              },
+                              "attachment_inputs": {
+                                "type": "array",
+                                "items": {
+                                  "type": "object",
+                                  "properties": {
+                                    "kind": {
+                                      "type": "string",
+                                      "enum": [
+                                        "image",
+                                        "file"
+                                      ],
+                                      "description": "Kind of attached resource: image input or generic file bytes."
+                                    },
+                                    "mime_types": {
+                                      "type": "array",
+                                      "items": {
+                                        "type": "string",
+                                        "minLength": 1
+                                      },
+                                      "minItems": 1
+                                    },
+                                    "max_bytes": {
+                                      "type": "integer",
+                                      "exclusiveMinimum": 0
+                                    },
+                                    "max_count": {
+                                      "type": "integer",
+                                      "exclusiveMinimum": 0
+                                    },
+                                    "transport": {
+                                      "type": "string",
+                                      "enum": [
+                                        "file_path",
+                                        "base64_stream",
+                                        "base64_inline",
+                                        "text_inline"
+                                      ],
+                                      "description": "Native adapter transport used for one supported attachment class."
+                                    }
+                                  },
+                                  "required": [
+                                    "kind",
+                                    "mime_types",
+                                    "max_bytes",
+                                    "max_count",
+                                    "transport"
+                                  ],
+                                  "additionalProperties": false,
+                                  "description": "Finite MIME, size, count and transport limits declared by one adapter."
+                                },
+                                "default": []
+                              },
+                              "mcp_injection": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The adapter can inject engine-owned MCP servers into the harness sandbox (browser tool, delegation belt); false = browser MCP is refused and Delegate degrades to ordinary Agent with a durable typed receipt."
+                              },
+                              "mcp_injection_requires_full_access": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "An injected MCP server can only reach the daemon (belt) at full access; below it the harness sandbox cancels the call. true => Delegate below full access degrades to ordinary Agent with a durable typed receipt."
+                              }
+                            },
+                            "additionalProperties": false,
+                            "default": {},
+                            "description": "Structured per-harness facts the engine consumes: auth routing, isolation containment, readonly mechanism, finite attachment inputs, and MCP injection."
+                          },
+                          "capabilities": {
+                            "type": "object",
+                            "properties": {
+                              "plan": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The harness can produce plans (plan intent)."
+                              },
+                              "implement": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The harness can implement code changes (implement intent)."
+                              },
+                              "implementation_transport": {
+                                "type": "string",
+                                "enum": [
+                                  "workspace",
+                                  "git_patch_envelope"
+                                ],
+                                "description": "Typed producer/consumer transport used when implement=true.",
+                                "default": "workspace"
+                              },
+                              "create_from_scratch": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The harness can scaffold new projects (create_from_scratch intent)."
+                              },
+                              "review": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The harness can act as a reviewer (review intent)."
+                              },
+                              "verify": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The harness can act as the FinalVerifier (verify intent)."
+                              },
+                              "synthesize": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The harness can synthesize across candidate outputs (synthesize intent)."
+                              },
+                              "read_files": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The harness can read project files."
+                              },
+                              "browser_tool": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The adapter can inject a browser-automation MCP server (Playwright MCP) the harness drives as browser_* tools; never injected when web policy is off."
+                              },
+                              "web_policy": {
+                                "type": "string",
+                                "enum": [
+                                  "native",
+                                  "tools",
+                                  "uncontrolled",
+                                  "none"
+                                ],
+                                "description": "How a harness can honor the external web policy: native (a native config surface), tools (permissioned tools the adapter can allow/deny), uncontrolled (can reach the web but exposes no enforceable switch), or none (no web access at all).",
+                                "default": "none"
+                              },
+                              "max_turns": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "Honors HarnessRunSpec.max_turns (e.g. a native --max-turns flag)."
+                              },
+                              "tool_lists": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "Honors tool_permission_policy allow/deny lists (e.g. a native --allowedTools flag)."
+                              },
+                              "interactive": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The adapter can surface interactive user questions (interaction_requested events) and deliver typed answers back into the live session."
+                              },
+                              "json_schema_output": {
+                                "type": "boolean",
+                                "default": false,
+                                "description": "The harness can constrain its final message to a caller-supplied JSON Schema (native structured-output flag)."
+                              },
+                              "work_report_transport": {
+                                "type": "string",
+                                "enum": [
+                                  "constrained",
+                                  "validated",
+                                  "unsupported"
+                                ],
+                                "default": "unsupported",
+                                "description": "How the harness carries the D-16 WorkReport envelope: constrained (native schema transport), validated (instructed terminal metadata), or unsupported (work_state stays unverified)."
+                              },
+                              "structured_output_channel": {
+                                "type": "string",
+                                "enum": [
+                                  "side_tool",
+                                  "final_message"
+                                ],
+                                "default": "final_message",
+                                "description": "Where a schema-constrained answer surfaces: side_tool (rides a tool; final message stays markdown) or final_message (constrains the final message itself)."
+                              },
+                              "effort_levels": {
+                                "type": "array",
+                                "items": {
+                                  "type": "string",
+                                  "minLength": 1,
+                                  "maxLength": 32,
+                                  "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
+                                  "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen."
+                                },
+                                "default": [],
+                                "description": "Ordered (weakest to strongest) reasoning-effort levels this harness accepts across all its models; empty means effort is not a tunable surface."
+                              },
+                              "model_effort_levels": {
+                                "type": "object",
+                                "additionalProperties": {
+                                  "type": "object",
+                                  "properties": {
+                                    "levels": {
+                                      "type": "array",
+                                      "items": {
+                                        "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/1/properties/harnesses/items/properties/manifest/anyOf/0/properties/capabilities/properties/effort_levels/items"
+                                      },
+                                      "default": [],
+                                      "description": "Ordered (weakest to strongest) reasoning-effort levels this model advertises, in the vendor's own order."
+                                    },
+                                    "default": {
+                                      "anyOf": [
+                                        {
+                                          "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/1/properties/harnesses/items/properties/manifest/anyOf/0/properties/capabilities/properties/effort_levels/items"
+                                        },
+                                        {
+                                          "type": "null"
+                                        }
+                                      ],
+                                      "description": "The effort level the vendor uses for this model when none is requested.",
+                                      "default": null
+                                    }
+                                  },
+                                  "additionalProperties": false,
+                                  "description": "Reasoning-effort vocabulary a single model advertises."
+                                },
+                                "default": {},
+                                "description": "Per-model advertised reasoning-effort vocabulary keyed by model id; a model absent here falls back to the harness-wide effort_levels union."
+                              },
+                              "effort_levels_verified_against": {
+                                "type": [
+                                  "string",
+                                  "null"
+                                ],
+                                "default": null,
+                                "description": "Vendor CLI version the effort ladders were last verified against; null = never verified / not applicable."
+                              },
+                              "known_models": {
+                                "type": "array",
+                                "items": {
+                                  "anyOf": [
+                                    {
+                                      "type": "string"
+                                    },
+                                    {
+                                      "type": "object",
+                                      "properties": {
+                                        "id": {
+                                          "type": "string",
+                                          "minLength": 1,
+                                          "description": "Model id/alias."
+                                        },
+                                        "routes": {
+                                          "type": "array",
+                                          "items": {
+                                            "type": "string",
+                                            "enum": [
+                                              "local_session",
+                                              "api_key"
+                                            ]
+                                          },
+                                          "minItems": 1,
+                                          "description": "Credential routes this model is available on."
+                                        }
+                                      },
+                                      "required": [
+                                        "id",
+                                        "routes"
+                                      ],
+                                      "additionalProperties": false
+                                    }
+                                  ]
+                                },
+                                "default": [],
+                                "description": "Manifest-declared model ids/aliases this harness accepts (bare string = every credential route; object form scopes a model to specific routes), used as the model truth source when the adapter has no live inventory; explicit models outside the truth source are refused."
+                              },
+                              "known_models_verified_against": {
+                                "type": [
+                                  "string",
+                                  "null"
+                                ],
+                                "default": null,
+                                "description": "Vendor CLI version the known_models hints were last verified against; null = never verified / not applicable."
+                              }
+                            },
+                            "additionalProperties": false,
+                            "description": "Declared harness capabilities the engine actually consumes for intent gating, routing, knob support, and disclosure."
+                          },
+                          "auth_modes": {
+                            "type": "array",
+                            "items": {
+                              "type": "string",
+                              "enum": [
+                                "local_session",
+                                "api_key",
+                                "none"
+                              ]
+                            },
+                            "default": [],
+                            "description": "Auth modes the harness supports (availability only, not readiness)."
+                          },
+                          "access_profiles_supported": {
+                            "type": "array",
+                            "items": {
+                              "type": "string",
+                              "enum": [
+                                "readonly",
+                                "workspace_write",
+                                "full",
+                                "external_sandbox_full",
+                                "inherit_native"
+                              ],
+                              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (full access inside an external sandbox), inherit_native (defer to the harness's own native sandbox settings)."
+                            },
+                            "default": [],
+                            "description": "Access profiles the adapter can enforce."
+                          }
+                        },
+                        "required": [
+                          "id",
+                          "display_name",
+                          "kind",
+                          "capabilities"
+                        ],
+                        "additionalProperties": false,
+                        "description": "Static manifest an adapter declares for its harness: identity, kind, capabilities, auth modes, and access profiles."
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "description": "The harness's declared manifest, when available."
+                  },
+                  "enabledIntents": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "default": [],
+                    "description": "Intents the gateway will route to this harness."
+                  },
+                  "routableIntents": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "default": [],
+                    "description": "Intents the harness is actually routable for right now (doctor-gated); the server-side availability truth surfaces must read instead of re-deriving."
+                  },
+                  "disabledIntents": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "default": [],
+                    "description": "Intents the doctor disabled."
+                  },
+                  "checks": {
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "id": {
+                          "type": "string",
+                          "description": "Check id."
+                        },
+                        "status": {
+                          "type": "string",
+                          "enum": [
+                            "pass",
+                            "fail",
+                            "skip"
+                          ],
+                          "description": "Outcome of the check: pass, fail, or skip."
+                        },
+                        "detail": {
+                          "type": "string",
+                          "description": "Human-readable detail for the outcome."
+                        },
+                        "duration_ms": {
+                          "type": "integer",
+                          "minimum": 0,
+                          "description": "How long the check took, in milliseconds."
+                        }
+                      },
+                      "required": [
+                        "id",
+                        "status"
+                      ],
+                      "additionalProperties": false,
+                      "description": "Result of a conformance probe for one capability check."
+                    },
+                    "default": [],
+                    "description": "Doctor probe results."
+                  },
+                  "reasons": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "default": [],
+                    "description": "Human-readable reasons for degraded/unavailable status."
+                  },
+                  "authSources": {
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "source": {
+                          "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/1/properties/harnesses/items/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/supported_sources/items"
+                        },
+                        "availability": {
+                          "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles/items/properties/status/properties/availability"
+                        },
+                        "verification": {
+                          "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles/items/properties/status/properties/verification"
+                        },
+                        "detail": {
+                          "type": "string",
+                          "description": "Redacted human-readable source evidence."
+                        }
+                      },
+                      "required": [
+                        "source",
+                        "availability",
+                        "verification"
+                      ],
+                      "additionalProperties": false,
+                      "description": "Doctor-backed readiness for one exact credential source."
+                    },
+                    "default": [],
+                    "description": "Doctor-backed readiness by authentication source; an empty array means readiness was not reported."
+                  },
+                  "readiness": {
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "id": {
+                          "type": "string",
+                          "description": "Stable machine id of the check (adapter probe id or auth source)."
+                        },
+                        "kind": {
+                          "type": "string",
+                          "enum": [
+                            "binary",
+                            "auth",
+                            "smoke",
+                            "model",
+                            "probe"
+                          ],
+                          "description": "What KIND of readiness this is: binary presence, credential source, isolated smoke, configured-model validity, or a generic capability probe."
+                        },
+                        "title": {
+                          "type": "string",
+                          "description": "Human display name of the check."
+                        },
+                        "status": {
+                          "type": "string",
+                          "enum": [
+                            "pass",
+                            "fail",
+                            "skip"
+                          ],
+                          "description": "Outcome; skip = not run / not applicable."
+                        },
+                        "detail": {
+                          "type": [
+                            "string",
+                            "null"
+                          ],
+                          "default": null,
+                          "description": "Redacted human-readable evidence for the outcome."
+                        }
+                      },
+                      "required": [
+                        "id",
+                        "kind",
+                        "title",
+                        "status"
+                      ],
+                      "additionalProperties": false,
+                      "description": "One display-ready readiness check row (daemon-normalized)."
+                    },
+                    "default": [],
+                    "description": "Display-ready readiness checks, daemon-normalized from the raw evidence."
+                  },
+                  "configuredModel": {
+                    "type": [
+                      "string",
+                      "null"
+                    ],
+                    "default": null,
+                    "description": "The user's configured per-harness default model, if any."
+                  },
+                  "configuredModelCheck": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "status": {
+                            "type": "string",
+                            "enum": [
+                              "ok",
+                              "rejected"
+                            ],
+                            "description": "Whether the configured model passes the strict truth-source check."
+                          },
+                          "message": {
+                            "type": [
+                              "string",
+                              "null"
+                            ],
+                            "default": null,
+                            "description": "Actionable rejection message, when rejected."
+                          }
+                        },
+                        "required": [
+                          "status"
+                        ],
+                        "additionalProperties": false
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "default": null,
+                    "description": "Strict truth-source check of configuredModel; null when no model is configured."
+                  },
+                  "delegation": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "available": {
+                            "type": "boolean",
+                            "description": "Whether this harness can receive the packaged delegation belt."
+                          },
+                          "reason": {
+                            "type": "string",
+                            "enum": [
+                              "ready",
+                              "runtime_unavailable",
+                              "manifest_unsupported"
+                            ],
+                            "description": "Stable reason for the current delegation capability verdict."
+                          },
+                          "remediation": {
+                            "type": [
+                              "string",
+                              "null"
+                            ],
+                            "default": null,
+                            "description": "Concrete update/repair guidance when unavailable; null when ready."
+                          },
+                          "requiresFullAccess": {
+                            "type": "boolean",
+                            "default": false,
+                            "description": "Whether this harness can reach the belt only under a full-access profile."
+                          }
+                        },
+                        "required": [
+                          "available",
+                          "reason"
+                        ],
+                        "additionalProperties": false,
+                        "description": "Engine-owned Delegate capability projection for one harness and installed runtime."
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "description": "Engine-owned Delegate capability for this harness and installed runtime; null on legacy status rows.",
+                    "default": null
+                  }
+                },
+                "required": [
+                  "id",
+                  "status"
+                ],
+                "additionalProperties": false,
+                "description": "Doctor-backed status row for one harness: status, intents, checks, and configured-model validity."
+              },
+              "description": "Fresh harness readiness used for the account next-up projection."
+            },
+            "git": {
+              "type": "object",
+              "properties": {
+                "status": {
+                  "type": "string",
+                  "enum": [
+                    "available",
+                    "missing",
+                    "developer_tools_stub",
+                    "failed"
+                  ]
+                },
+                "version": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                },
+                "detail": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                },
+                "remediation": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                }
+              },
+              "required": [
+                "status",
+                "version",
+                "detail",
+                "remediation"
+              ],
+              "additionalProperties": false,
+              "description": "Git readiness from the same Accounts refresh cycle."
+            },
+            "quota": {
+              "type": "object",
+              "properties": {
+                "snapshots": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "subject": {
+                        "type": "object",
+                        "properties": {
+                          "harness": {
+                            "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles/items/properties/status/properties/profile_id"
+                          },
+                          "credential_route": {
+                            "type": "string",
+                            "enum": [
+                              "vendor_native",
+                              "managed_api_key",
+                              "local"
+                            ]
+                          },
+                          "plan_label": {
+                            "type": [
+                              "string",
+                              "null"
+                            ],
+                            "default": null
+                          },
+                          "subject_id": {
+                            "type": [
+                              "string",
+                              "null"
+                            ],
+                            "default": null
+                          }
+                        },
+                        "required": [
+                          "harness",
+                          "credential_route"
+                        ],
+                        "additionalProperties": false,
+                        "description": "Quota owner and credential route; subject_id is the credential-profile id (null = the engine-default credential)."
+                      },
+                      "constraints": {
+                        "type": "array",
+                        "items": {
+                          "type": "object",
+                          "properties": {
+                            "id": {
+                              "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles/items/properties/status/properties/profile_id"
+                            },
+                            "label": {
+                              "type": "string",
+                              "minLength": 1
+                            },
+                            "used_ratio": {
+                              "anyOf": [
+                                {
+                                  "type": "number",
+                                  "minimum": 0,
+                                  "maximum": 1
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "window_seconds": {
+                              "anyOf": [
+                                {
+                                  "type": "number",
+                                  "exclusiveMinimum": 0
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "resets_at": {
+                              "anyOf": [
+                                {
+                                  "type": "string",
+                                  "format": "date-time"
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "cooldown_until": {
+                              "anyOf": [
+                                {
+                                  "type": "string",
+                                  "format": "date-time"
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ],
+                              "default": null
+                            }
+                          },
+                          "required": [
+                            "id",
+                            "label",
+                            "used_ratio",
+                            "window_seconds",
+                            "resets_at"
+                          ],
+                          "additionalProperties": false,
+                          "description": "One independent vendor quota window; null usage stays unknown."
+                        }
+                      },
+                      "source": {
+                        "type": "string",
+                        "enum": [
+                          "codex_app_server",
+                          "codex_rollout",
+                          "claude_statusline",
+                          "claude_api_retry",
+                          "claude_oauth_usage"
+                        ],
+                        "description": "Vendor-owned machine-readable source of a quota snapshot."
+                      },
+                      "observed_at": {
+                        "type": "string",
+                        "format": "date-time"
+                      },
+                      "freshness": {
+                        "type": "string",
+                        "enum": [
+                          "fresh",
+                          "stale",
+                          "unknown"
+                        ],
+                        "description": "Freshness of a quota snapshot at read time."
+                      }
+                    },
+                    "required": [
+                      "subject",
+                      "constraints",
+                      "source",
+                      "observed_at",
+                      "freshness"
+                    ],
+                    "additionalProperties": false,
+                    "description": "All independently reported quota windows for one vendor-owned subject."
+                  }
+                },
+                "absences": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "subject": {
+                        "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/1/properties/quota/properties/snapshots/items/properties/subject"
+                      },
+                      "reason": {
+                        "type": "string",
+                        "enum": [
+                          "not_logged_in",
+                          "transport_unavailable",
+                          "platform_unsupported",
+                          "refresh_failed",
+                          "no_source"
+                        ],
+                        "description": "Why a registered subject has no quota snapshot, in the source's own vocabulary."
+                      },
+                      "detail": {
+                        "type": [
+                          "string",
+                          "null"
+                        ],
+                        "default": null
+                      },
+                      "observed_at": {
+                        "type": "string",
+                        "format": "date-time"
+                      }
+                    },
+                    "required": [
+                      "subject",
+                      "reason",
+                      "observed_at"
+                    ],
+                    "additionalProperties": false,
+                    "description": "A registered subject's typed missing-snapshot — absence is stated, never inferred."
+                  },
+                  "default": [],
+                  "description": "Every registered subject reports either a snapshot or a typed absence — absence is never silent emptiness (zen: absence ≠ empty)."
+                },
+                "refreshed_at": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "format": "date-time"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                }
+              },
+              "required": [
+                "snapshots",
+                "refreshed_at"
+              ],
+              "additionalProperties": false,
+              "description": "Fresh quota response used to compute next-up in this exact Accounts snapshot epoch."
+            },
+            "quotaEventCursor": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 4096,
+              "description": "Opaque global-journal cursor fencing the returned quota response; pass it verbatim as Last-Event-ID only for the dedicated quota event observer, never the general stream."
+            }
+          },
+          "required": [
+            "profiles",
+            "harnesses",
+            "git",
+            "quota",
+            "quotaEventCursor"
+          ],
+          "additionalProperties": false,
+          "description": "Atomic Accounts snapshot: profiles, next-up authority, fresh harness readiness, Git capability, and quota from one server-authored epoch."
+        }
+      ],
+      "description": "Legacy credential-profile listing or the opt-in atomic Accounts snapshot."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}