@claudexor/schema 3.1.2 → 3.2.1

package/dist/credential-profile-snapshot.d.ts

@@ -0,0 +1,3203 @@
+import { z } from "zod/v3";
+/** Opt-in atomic Accounts snapshot (`GET /credential-profiles?snapshot=true`).
+ * The legacy response stays byte/shape compatible for older strict clients. */
+export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
+    profiles: z.ZodArray<z.ZodObject<{
+        profile: z.ZodEffects<z.ZodObject<{
+            profile_id: z.ZodString;
+            harness_id: z.ZodString;
+            display_name: z.ZodString;
+            credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+            isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>;
+        status: z.ZodObject<{
+            profile_id: z.ZodString;
+            harness_id: z.ZodString;
+            availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+            verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+            detail: z.ZodOptional<z.ZodString>;
+            last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        }>;
+        identity: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            email: z.ZodOptional<z.ZodString>;
+            plan: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }>>>;
+    }, "strict", z.ZodTypeAny, {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at: string | null;
+        };
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+    }, {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        };
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+    }>, "many">;
+    harnessAccounts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        harness_id: z.ZodString;
+        native_credentials_enabled: z.ZodBoolean;
+        native_login_detected: z.ZodBoolean;
+        identity: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            email: z.ZodOptional<z.ZodString>;
+            plan: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }>>>;
+        next_up: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"profile">;
+            profileId: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            kind: "profile";
+            profileId: string;
+        }, {
+            kind: "profile";
+            profileId: string;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"native">;
+            route: z.ZodOptional<z.ZodEnum<["local_session", "api_key"]>>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        }, {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"none">;
+            reason: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            kind: "none";
+            reason: string;
+        }, {
+            kind: "none";
+            reason: string;
+        }>]>;
+    }, "strict", z.ZodTypeAny, {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }, {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }>, "many">>;
+} & {
+    harnesses: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        status: z.ZodEnum<["ok", "degraded", "unavailable"]>;
+        manifest: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            id: z.ZodString;
+            display_name: z.ZodString;
+            kind: z.ZodEnum<["local_cli", "remote_api", "fake"]>;
+            version: z.ZodOptional<z.ZodString>;
+            adapter_version: z.ZodOptional<z.ZodString>;
+            provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
+            capability_profile: z.ZodDefault<z.ZodObject<{
+                auth: z.ZodDefault<z.ZodObject<{
+                    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+                    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+                    credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                        kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
+                        relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+                    }, "strip", z.ZodTypeAny, {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }, {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }>, "many">>;
+                }, "strip", z.ZodTypeAny, {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                }, {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                }>>;
+                access_control: z.ZodDefault<z.ZodObject<{
+                    readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
+                }, "strip", z.ZodTypeAny, {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                }, {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                }>>;
+                isolation: z.ZodDefault<z.ZodObject<{
+                    supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+                }, "strip", z.ZodTypeAny, {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                }, {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                }>>;
+                attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    kind: z.ZodEnum<["image", "file"]>;
+                    mime_types: z.ZodArray<z.ZodString, "many">;
+                    max_bytes: z.ZodNumber;
+                    max_count: z.ZodNumber;
+                    transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
+                }, "strict", z.ZodTypeAny, {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }, {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }>, "many">>;
+                mcp_injection: z.ZodDefault<z.ZodBoolean>;
+                mcp_injection_requires_full_access: z.ZodDefault<z.ZodBoolean>;
+            }, "strip", z.ZodTypeAny, {
+                auth: {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                };
+                access_control: {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                };
+                isolation: {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                };
+                attachment_inputs: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[];
+                mcp_injection: boolean;
+                mcp_injection_requires_full_access: boolean;
+            }, {
+                auth?: {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                } | undefined;
+                access_control?: {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                } | undefined;
+                isolation?: {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                } | undefined;
+                attachment_inputs?: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[] | undefined;
+                mcp_injection?: boolean | undefined;
+                mcp_injection_requires_full_access?: boolean | undefined;
+            }>>;
+            capabilities: z.ZodObject<{
+                plan: z.ZodDefault<z.ZodBoolean>;
+                implement: z.ZodDefault<z.ZodBoolean>;
+                implementation_transport: z.ZodDefault<z.ZodEnum<["workspace", "git_patch_envelope"]>>;
+                create_from_scratch: z.ZodDefault<z.ZodBoolean>;
+                review: z.ZodDefault<z.ZodBoolean>;
+                verify: z.ZodDefault<z.ZodBoolean>;
+                synthesize: z.ZodDefault<z.ZodBoolean>;
+                read_files: z.ZodDefault<z.ZodBoolean>;
+                browser_tool: z.ZodDefault<z.ZodBoolean>;
+                web_policy: z.ZodDefault<z.ZodEnum<["native", "tools", "uncontrolled", "none"]>>;
+                max_turns: z.ZodDefault<z.ZodBoolean>;
+                tool_lists: z.ZodDefault<z.ZodBoolean>;
+                interactive: z.ZodDefault<z.ZodBoolean>;
+                json_schema_output: z.ZodDefault<z.ZodBoolean>;
+                work_report_transport: z.ZodDefault<z.ZodEnum<["constrained", "validated", "unsupported"]>>;
+                structured_output_channel: z.ZodDefault<z.ZodEnum<["side_tool", "final_message"]>>;
+                effort_levels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                model_effort_levels: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    levels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                    default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                }, "strict", z.ZodTypeAny, {
+                    levels: string[];
+                    default: string | null;
+                }, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }>>>;
+                effort_levels_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                known_models: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
+                    id: z.ZodString;
+                    routes: z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">;
+                }, "strict", z.ZodTypeAny, {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                }, {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                }>]>, "many">>;
+                known_models_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strip", z.ZodTypeAny, {
+                plan: boolean;
+                implement: boolean;
+                implementation_transport: "git_patch_envelope" | "workspace";
+                create_from_scratch: boolean;
+                review: boolean;
+                verify: boolean;
+                synthesize: boolean;
+                read_files: boolean;
+                browser_tool: boolean;
+                web_policy: "native" | "none" | "tools" | "uncontrolled";
+                max_turns: boolean;
+                tool_lists: boolean;
+                interactive: boolean;
+                json_schema_output: boolean;
+                work_report_transport: "constrained" | "unsupported" | "validated";
+                structured_output_channel: "final_message" | "side_tool";
+                effort_levels: string[];
+                model_effort_levels: Record<string, {
+                    levels: string[];
+                    default: string | null;
+                }>;
+                effort_levels_verified_against: string | null;
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
+                known_models_verified_against: string | null;
+            }, {
+                plan?: boolean | undefined;
+                implement?: boolean | undefined;
+                implementation_transport?: "git_patch_envelope" | "workspace" | undefined;
+                create_from_scratch?: boolean | undefined;
+                review?: boolean | undefined;
+                verify?: boolean | undefined;
+                synthesize?: boolean | undefined;
+                read_files?: boolean | undefined;
+                browser_tool?: boolean | undefined;
+                web_policy?: "native" | "none" | "tools" | "uncontrolled" | undefined;
+                max_turns?: boolean | undefined;
+                tool_lists?: boolean | undefined;
+                interactive?: boolean | undefined;
+                json_schema_output?: boolean | undefined;
+                work_report_transport?: "constrained" | "unsupported" | "validated" | undefined;
+                structured_output_channel?: "final_message" | "side_tool" | undefined;
+                effort_levels?: string[] | undefined;
+                model_effort_levels?: Record<string, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }> | undefined;
+                effort_levels_verified_against?: string | null | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
+                known_models_verified_against?: string | null | undefined;
+            }>;
+            auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
+            access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai";
+            capability_profile: {
+                auth: {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                };
+                access_control: {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                };
+                isolation: {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                };
+                attachment_inputs: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[];
+                mcp_injection: boolean;
+                mcp_injection_requires_full_access: boolean;
+            };
+            capabilities: {
+                plan: boolean;
+                implement: boolean;
+                implementation_transport: "git_patch_envelope" | "workspace";
+                create_from_scratch: boolean;
+                review: boolean;
+                verify: boolean;
+                synthesize: boolean;
+                read_files: boolean;
+                browser_tool: boolean;
+                web_policy: "native" | "none" | "tools" | "uncontrolled";
+                max_turns: boolean;
+                tool_lists: boolean;
+                interactive: boolean;
+                json_schema_output: boolean;
+                work_report_transport: "constrained" | "unsupported" | "validated";
+                structured_output_channel: "final_message" | "side_tool";
+                effort_levels: string[];
+                model_effort_levels: Record<string, {
+                    levels: string[];
+                    default: string | null;
+                }>;
+                effort_levels_verified_against: string | null;
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
+                known_models_verified_against: string | null;
+            };
+            auth_modes: ("api_key" | "local_session" | "none")[];
+            access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+        }, {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family?: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai" | undefined;
+            capability_profile?: {
+                auth?: {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                } | undefined;
+                access_control?: {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                } | undefined;
+                isolation?: {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                } | undefined;
+                attachment_inputs?: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[] | undefined;
+                mcp_injection?: boolean | undefined;
+                mcp_injection_requires_full_access?: boolean | undefined;
+            } | undefined;
+            capabilities: {
+                plan?: boolean | undefined;
+                implement?: boolean | undefined;
+                implementation_transport?: "git_patch_envelope" | "workspace" | undefined;
+                create_from_scratch?: boolean | undefined;
+                review?: boolean | undefined;
+                verify?: boolean | undefined;
+                synthesize?: boolean | undefined;
+                read_files?: boolean | undefined;
+                browser_tool?: boolean | undefined;
+                web_policy?: "native" | "none" | "tools" | "uncontrolled" | undefined;
+                max_turns?: boolean | undefined;
+                tool_lists?: boolean | undefined;
+                interactive?: boolean | undefined;
+                json_schema_output?: boolean | undefined;
+                work_report_transport?: "constrained" | "unsupported" | "validated" | undefined;
+                structured_output_channel?: "final_message" | "side_tool" | undefined;
+                effort_levels?: string[] | undefined;
+                model_effort_levels?: Record<string, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }> | undefined;
+                effort_levels_verified_against?: string | null | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
+                known_models_verified_against?: string | null | undefined;
+            };
+            auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
+            access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+        }>>>;
+        enabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        routableIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        disabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        checks: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            status: z.ZodEnum<["pass", "fail", "skip"]>;
+            detail: z.ZodOptional<z.ZodString>;
+            duration_ms: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }, {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }>, "many">>;
+        reasons: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        authSources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+            availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+            verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }, {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }>, "many">>;
+        readiness: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodEnum<["binary", "auth", "smoke", "model", "probe"]>;
+            title: z.ZodString;
+            status: z.ZodEnum<["pass", "fail", "skip"]>;
+            detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail: string | null;
+        }, {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | null | undefined;
+        }>, "many">>;
+        configuredModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        configuredModelCheck: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            status: z.ZodEnum<["ok", "rejected"]>;
+            message: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            status: "ok" | "rejected";
+            message: string | null;
+        }, {
+            status: "ok" | "rejected";
+            message?: string | null | undefined;
+        }>>>;
+        delegation: z.ZodDefault<z.ZodNullable<z.ZodEffects<z.ZodObject<{
+            available: z.ZodBoolean;
+            reason: z.ZodEnum<["ready", "runtime_unavailable", "manifest_unsupported"]>;
+            remediation: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            requiresFullAccess: z.ZodDefault<z.ZodBoolean>;
+        }, "strict", z.ZodTypeAny, {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation: string | null;
+            requiresFullAccess: boolean;
+        }, {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation?: string | null | undefined;
+            requiresFullAccess?: boolean | undefined;
+        }>, {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation: string | null;
+            requiresFullAccess: boolean;
+        }, {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation?: string | null | undefined;
+            requiresFullAccess?: boolean | undefined;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        status: "degraded" | "ok" | "unavailable";
+        manifest?: {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai";
+            capability_profile: {
+                auth: {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                };
+                access_control: {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                };
+                isolation: {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                };
+                attachment_inputs: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[];
+                mcp_injection: boolean;
+                mcp_injection_requires_full_access: boolean;
+            };
+            capabilities: {
+                plan: boolean;
+                implement: boolean;
+                implementation_transport: "git_patch_envelope" | "workspace";
+                create_from_scratch: boolean;
+                review: boolean;
+                verify: boolean;
+                synthesize: boolean;
+                read_files: boolean;
+                browser_tool: boolean;
+                web_policy: "native" | "none" | "tools" | "uncontrolled";
+                max_turns: boolean;
+                tool_lists: boolean;
+                interactive: boolean;
+                json_schema_output: boolean;
+                work_report_transport: "constrained" | "unsupported" | "validated";
+                structured_output_channel: "final_message" | "side_tool";
+                effort_levels: string[];
+                model_effort_levels: Record<string, {
+                    levels: string[];
+                    default: string | null;
+                }>;
+                effort_levels_verified_against: string | null;
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
+                known_models_verified_against: string | null;
+            };
+            auth_modes: ("api_key" | "local_session" | "none")[];
+            access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+        } | null | undefined;
+        enabledIntents: string[];
+        routableIntents: string[];
+        disabledIntents: string[];
+        checks: {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }[];
+        reasons: string[];
+        authSources: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }[];
+        readiness: {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail: string | null;
+        }[];
+        configuredModel: string | null;
+        configuredModelCheck: {
+            status: "ok" | "rejected";
+            message: string | null;
+        } | null;
+        delegation: {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation: string | null;
+            requiresFullAccess: boolean;
+        } | null;
+    }, {
+        id: string;
+        status: "degraded" | "ok" | "unavailable";
+        manifest?: {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family?: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai" | undefined;
+            capability_profile?: {
+                auth?: {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                } | undefined;
+                access_control?: {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                } | undefined;
+                isolation?: {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                } | undefined;
+                attachment_inputs?: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[] | undefined;
+                mcp_injection?: boolean | undefined;
+                mcp_injection_requires_full_access?: boolean | undefined;
+            } | undefined;
+            capabilities: {
+                plan?: boolean | undefined;
+                implement?: boolean | undefined;
+                implementation_transport?: "git_patch_envelope" | "workspace" | undefined;
+                create_from_scratch?: boolean | undefined;
+                review?: boolean | undefined;
+                verify?: boolean | undefined;
+                synthesize?: boolean | undefined;
+                read_files?: boolean | undefined;
+                browser_tool?: boolean | undefined;
+                web_policy?: "native" | "none" | "tools" | "uncontrolled" | undefined;
+                max_turns?: boolean | undefined;
+                tool_lists?: boolean | undefined;
+                interactive?: boolean | undefined;
+                json_schema_output?: boolean | undefined;
+                work_report_transport?: "constrained" | "unsupported" | "validated" | undefined;
+                structured_output_channel?: "final_message" | "side_tool" | undefined;
+                effort_levels?: string[] | undefined;
+                model_effort_levels?: Record<string, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }> | undefined;
+                effort_levels_verified_against?: string | null | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
+                known_models_verified_against?: string | null | undefined;
+            };
+            auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
+            access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+        } | null | undefined;
+        enabledIntents?: string[] | undefined;
+        routableIntents?: string[] | undefined;
+        disabledIntents?: string[] | undefined;
+        checks?: {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }[] | undefined;
+        reasons?: string[] | undefined;
+        authSources?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }[] | undefined;
+        readiness?: {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | null | undefined;
+        }[] | undefined;
+        configuredModel?: string | null | undefined;
+        configuredModelCheck?: {
+            status: "ok" | "rejected";
+            message?: string | null | undefined;
+        } | null | undefined;
+        delegation?: {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation?: string | null | undefined;
+            requiresFullAccess?: boolean | undefined;
+        } | null | undefined;
+    }>, "many">;
+    git: z.ZodObject<{
+        status: z.ZodEnum<["available", "missing", "developer_tools_stub", "failed"]>;
+        version: z.ZodNullable<z.ZodString>;
+        detail: z.ZodNullable<z.ZodString>;
+        remediation: z.ZodNullable<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        status: "available" | "developer_tools_stub" | "failed" | "missing";
+        version: string | null;
+        detail: string | null;
+        remediation: string | null;
+    }, {
+        status: "available" | "developer_tools_stub" | "failed" | "missing";
+        version: string | null;
+        detail: string | null;
+        remediation: string | null;
+    }>;
+    quota: z.ZodObject<{
+        snapshots: z.ZodArray<z.ZodObject<{
+            subject: z.ZodObject<{
+                harness: z.ZodString;
+                credential_route: z.ZodEnum<["vendor_native", "managed_api_key", "local"]>;
+                plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            }, {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            }>;
+            constraints: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                label: z.ZodString;
+                applies_to_models: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+                used_ratio: z.ZodNullable<z.ZodNumber>;
+                window_seconds: z.ZodNullable<z.ZodNumber>;
+                resets_at: z.ZodNullable<z.ZodString>;
+                cooldown_until: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until: string | null;
+            }, {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until?: string | null | undefined;
+            }>, "many">;
+            source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage"]>;
+            observed_at: z.ZodString;
+            freshness: z.ZodEnum<["fresh", "stale", "unknown"]>;
+        }, "strict", z.ZodTypeAny, {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until: string | null;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }, {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until?: string | null | undefined;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }>, "many">;
+        absences: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            subject: z.ZodObject<{
+                harness: z.ZodString;
+                credential_route: z.ZodEnum<["vendor_native", "managed_api_key", "local"]>;
+                plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            }, {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            }>;
+            reason: z.ZodEnum<["not_logged_in", "transport_unavailable", "platform_unsupported", "refresh_failed", "no_source"]>;
+            detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            observed_at: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail: string | null;
+            observed_at: string;
+        }, {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail?: string | null | undefined;
+            observed_at: string;
+        }>, "many">>;
+        refreshed_at: z.ZodNullable<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        snapshots: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until: string | null;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }[];
+        absences: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail: string | null;
+            observed_at: string;
+        }[];
+        refreshed_at: string | null;
+    }, {
+        snapshots: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until?: string | null | undefined;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }[];
+        absences?: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail?: string | null | undefined;
+            observed_at: string;
+        }[] | undefined;
+        refreshed_at: string | null;
+    }>;
+    quotaEventCursor: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    profiles: {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at: string | null;
+        };
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+    }[];
+    harnessAccounts: {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }[];
+    harnesses: {
+        id: string;
+        status: "degraded" | "ok" | "unavailable";
+        manifest?: {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai";
+            capability_profile: {
+                auth: {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                };
+                access_control: {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                };
+                isolation: {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                };
+                attachment_inputs: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[];
+                mcp_injection: boolean;
+                mcp_injection_requires_full_access: boolean;
+            };
+            capabilities: {
+                plan: boolean;
+                implement: boolean;
+                implementation_transport: "git_patch_envelope" | "workspace";
+                create_from_scratch: boolean;
+                review: boolean;
+                verify: boolean;
+                synthesize: boolean;
+                read_files: boolean;
+                browser_tool: boolean;
+                web_policy: "native" | "none" | "tools" | "uncontrolled";
+                max_turns: boolean;
+                tool_lists: boolean;
+                interactive: boolean;
+                json_schema_output: boolean;
+                work_report_transport: "constrained" | "unsupported" | "validated";
+                structured_output_channel: "final_message" | "side_tool";
+                effort_levels: string[];
+                model_effort_levels: Record<string, {
+                    levels: string[];
+                    default: string | null;
+                }>;
+                effort_levels_verified_against: string | null;
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
+                known_models_verified_against: string | null;
+            };
+            auth_modes: ("api_key" | "local_session" | "none")[];
+            access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+        } | null | undefined;
+        enabledIntents: string[];
+        routableIntents: string[];
+        disabledIntents: string[];
+        checks: {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }[];
+        reasons: string[];
+        authSources: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }[];
+        readiness: {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail: string | null;
+        }[];
+        configuredModel: string | null;
+        configuredModelCheck: {
+            status: "ok" | "rejected";
+            message: string | null;
+        } | null;
+        delegation: {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation: string | null;
+            requiresFullAccess: boolean;
+        } | null;
+    }[];
+    git: {
+        status: "available" | "developer_tools_stub" | "failed" | "missing";
+        version: string | null;
+        detail: string | null;
+        remediation: string | null;
+    };
+    quota: {
+        snapshots: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until: string | null;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }[];
+        absences: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail: string | null;
+            observed_at: string;
+        }[];
+        refreshed_at: string | null;
+    };
+    quotaEventCursor: string;
+}, {
+    profiles: {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        };
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+    }[];
+    harnessAccounts?: {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }[] | undefined;
+    harnesses: {
+        id: string;
+        status: "degraded" | "ok" | "unavailable";
+        manifest?: {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family?: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai" | undefined;
+            capability_profile?: {
+                auth?: {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                } | undefined;
+                access_control?: {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                } | undefined;
+                isolation?: {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                } | undefined;
+                attachment_inputs?: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[] | undefined;
+                mcp_injection?: boolean | undefined;
+                mcp_injection_requires_full_access?: boolean | undefined;
+            } | undefined;
+            capabilities: {
+                plan?: boolean | undefined;
+                implement?: boolean | undefined;
+                implementation_transport?: "git_patch_envelope" | "workspace" | undefined;
+                create_from_scratch?: boolean | undefined;
+                review?: boolean | undefined;
+                verify?: boolean | undefined;
+                synthesize?: boolean | undefined;
+                read_files?: boolean | undefined;
+                browser_tool?: boolean | undefined;
+                web_policy?: "native" | "none" | "tools" | "uncontrolled" | undefined;
+                max_turns?: boolean | undefined;
+                tool_lists?: boolean | undefined;
+                interactive?: boolean | undefined;
+                json_schema_output?: boolean | undefined;
+                work_report_transport?: "constrained" | "unsupported" | "validated" | undefined;
+                structured_output_channel?: "final_message" | "side_tool" | undefined;
+                effort_levels?: string[] | undefined;
+                model_effort_levels?: Record<string, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }> | undefined;
+                effort_levels_verified_against?: string | null | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
+                known_models_verified_against?: string | null | undefined;
+            };
+            auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
+            access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+        } | null | undefined;
+        enabledIntents?: string[] | undefined;
+        routableIntents?: string[] | undefined;
+        disabledIntents?: string[] | undefined;
+        checks?: {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }[] | undefined;
+        reasons?: string[] | undefined;
+        authSources?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }[] | undefined;
+        readiness?: {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | null | undefined;
+        }[] | undefined;
+        configuredModel?: string | null | undefined;
+        configuredModelCheck?: {
+            status: "ok" | "rejected";
+            message?: string | null | undefined;
+        } | null | undefined;
+        delegation?: {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation?: string | null | undefined;
+            requiresFullAccess?: boolean | undefined;
+        } | null | undefined;
+    }[];
+    git: {
+        status: "available" | "developer_tools_stub" | "failed" | "missing";
+        version: string | null;
+        detail: string | null;
+        remediation: string | null;
+    };
+    quota: {
+        snapshots: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until?: string | null | undefined;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }[];
+        absences?: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail?: string | null | undefined;
+            observed_at: string;
+        }[] | undefined;
+        refreshed_at: string | null;
+    };
+    quotaEventCursor: string;
+}>;
+export type ControlCredentialProfilesSnapshotResponse = z.infer<typeof ControlCredentialProfilesSnapshotResponse>;
+/** Operation-catalog response contract for the query-shaped endpoint. The
+ * actual route selects exactly one member from the validated `snapshot` query;
+ * this union keeps discovery/docs honest without changing the legacy shape. */
+export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodObject<{
+    profiles: z.ZodArray<z.ZodObject<{
+        profile: z.ZodEffects<z.ZodObject<{
+            profile_id: z.ZodString;
+            harness_id: z.ZodString;
+            display_name: z.ZodString;
+            credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+            isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>;
+        status: z.ZodObject<{
+            profile_id: z.ZodString;
+            harness_id: z.ZodString;
+            availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+            verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+            detail: z.ZodOptional<z.ZodString>;
+            last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        }>;
+        identity: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            email: z.ZodOptional<z.ZodString>;
+            plan: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }>>>;
+    }, "strict", z.ZodTypeAny, {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at: string | null;
+        };
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+    }, {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        };
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+    }>, "many">;
+    harnessAccounts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        harness_id: z.ZodString;
+        native_credentials_enabled: z.ZodBoolean;
+        native_login_detected: z.ZodBoolean;
+        identity: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            email: z.ZodOptional<z.ZodString>;
+            plan: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }>>>;
+        next_up: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"profile">;
+            profileId: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            kind: "profile";
+            profileId: string;
+        }, {
+            kind: "profile";
+            profileId: string;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"native">;
+            route: z.ZodOptional<z.ZodEnum<["local_session", "api_key"]>>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        }, {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"none">;
+            reason: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            kind: "none";
+            reason: string;
+        }, {
+            kind: "none";
+            reason: string;
+        }>]>;
+    }, "strict", z.ZodTypeAny, {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }, {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    profiles: {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at: string | null;
+        };
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+    }[];
+    harnessAccounts: {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }[];
+}, {
+    profiles: {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        };
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+    }[];
+    harnessAccounts?: {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }[] | undefined;
+}>, z.ZodObject<{
+    profiles: z.ZodArray<z.ZodObject<{
+        profile: z.ZodEffects<z.ZodObject<{
+            profile_id: z.ZodString;
+            harness_id: z.ZodString;
+            display_name: z.ZodString;
+            credential_kind: z.ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+            isolation_locator: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            secret_ref: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            created_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        }>;
+        status: z.ZodObject<{
+            profile_id: z.ZodString;
+            harness_id: z.ZodString;
+            availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+            verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+            detail: z.ZodOptional<z.ZodString>;
+            last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strict", z.ZodTypeAny, {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at: string | null;
+        }, {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        }>;
+        identity: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            email: z.ZodOptional<z.ZodString>;
+            plan: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }>>>;
+    }, "strict", z.ZodTypeAny, {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at: string | null;
+        };
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+    }, {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        };
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+    }>, "many">;
+    harnessAccounts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        harness_id: z.ZodString;
+        native_credentials_enabled: z.ZodBoolean;
+        native_login_detected: z.ZodBoolean;
+        identity: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            email: z.ZodOptional<z.ZodString>;
+            plan: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }, {
+            email?: string | undefined;
+            plan?: string | undefined;
+        }>>>;
+        next_up: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"profile">;
+            profileId: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            kind: "profile";
+            profileId: string;
+        }, {
+            kind: "profile";
+            profileId: string;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"native">;
+            route: z.ZodOptional<z.ZodEnum<["local_session", "api_key"]>>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        }, {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"none">;
+            reason: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            kind: "none";
+            reason: string;
+        }, {
+            kind: "none";
+            reason: string;
+        }>]>;
+    }, "strict", z.ZodTypeAny, {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }, {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }>, "many">>;
+} & {
+    harnesses: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        status: z.ZodEnum<["ok", "degraded", "unavailable"]>;
+        manifest: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            id: z.ZodString;
+            display_name: z.ZodString;
+            kind: z.ZodEnum<["local_cli", "remote_api", "fake"]>;
+            version: z.ZodOptional<z.ZodString>;
+            adapter_version: z.ZodOptional<z.ZodString>;
+            provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
+            capability_profile: z.ZodDefault<z.ZodObject<{
+                auth: z.ZodDefault<z.ZodObject<{
+                    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
+                    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
+                    credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                        kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
+                        relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+                    }, "strip", z.ZodTypeAny, {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }, {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }>, "many">>;
+                }, "strip", z.ZodTypeAny, {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                }, {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                }>>;
+                access_control: z.ZodDefault<z.ZodObject<{
+                    readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
+                }, "strip", z.ZodTypeAny, {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                }, {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                }>>;
+                isolation: z.ZodDefault<z.ZodObject<{
+                    supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+                }, "strip", z.ZodTypeAny, {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                }, {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                }>>;
+                attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    kind: z.ZodEnum<["image", "file"]>;
+                    mime_types: z.ZodArray<z.ZodString, "many">;
+                    max_bytes: z.ZodNumber;
+                    max_count: z.ZodNumber;
+                    transport: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "text_inline"]>;
+                }, "strict", z.ZodTypeAny, {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }, {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }>, "many">>;
+                mcp_injection: z.ZodDefault<z.ZodBoolean>;
+                mcp_injection_requires_full_access: z.ZodDefault<z.ZodBoolean>;
+            }, "strip", z.ZodTypeAny, {
+                auth: {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                };
+                access_control: {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                };
+                isolation: {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                };
+                attachment_inputs: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[];
+                mcp_injection: boolean;
+                mcp_injection_requires_full_access: boolean;
+            }, {
+                auth?: {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                } | undefined;
+                access_control?: {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                } | undefined;
+                isolation?: {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                } | undefined;
+                attachment_inputs?: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[] | undefined;
+                mcp_injection?: boolean | undefined;
+                mcp_injection_requires_full_access?: boolean | undefined;
+            }>>;
+            capabilities: z.ZodObject<{
+                plan: z.ZodDefault<z.ZodBoolean>;
+                implement: z.ZodDefault<z.ZodBoolean>;
+                implementation_transport: z.ZodDefault<z.ZodEnum<["workspace", "git_patch_envelope"]>>;
+                create_from_scratch: z.ZodDefault<z.ZodBoolean>;
+                review: z.ZodDefault<z.ZodBoolean>;
+                verify: z.ZodDefault<z.ZodBoolean>;
+                synthesize: z.ZodDefault<z.ZodBoolean>;
+                read_files: z.ZodDefault<z.ZodBoolean>;
+                browser_tool: z.ZodDefault<z.ZodBoolean>;
+                web_policy: z.ZodDefault<z.ZodEnum<["native", "tools", "uncontrolled", "none"]>>;
+                max_turns: z.ZodDefault<z.ZodBoolean>;
+                tool_lists: z.ZodDefault<z.ZodBoolean>;
+                interactive: z.ZodDefault<z.ZodBoolean>;
+                json_schema_output: z.ZodDefault<z.ZodBoolean>;
+                work_report_transport: z.ZodDefault<z.ZodEnum<["constrained", "validated", "unsupported"]>>;
+                structured_output_channel: z.ZodDefault<z.ZodEnum<["side_tool", "final_message"]>>;
+                effort_levels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                model_effort_levels: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    levels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                    default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                }, "strict", z.ZodTypeAny, {
+                    levels: string[];
+                    default: string | null;
+                }, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }>>>;
+                effort_levels_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                known_models: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
+                    id: z.ZodString;
+                    routes: z.ZodArray<z.ZodEnum<["local_session", "api_key"]>, "many">;
+                }, "strict", z.ZodTypeAny, {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                }, {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                }>]>, "many">>;
+                known_models_verified_against: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strip", z.ZodTypeAny, {
+                plan: boolean;
+                implement: boolean;
+                implementation_transport: "git_patch_envelope" | "workspace";
+                create_from_scratch: boolean;
+                review: boolean;
+                verify: boolean;
+                synthesize: boolean;
+                read_files: boolean;
+                browser_tool: boolean;
+                web_policy: "native" | "none" | "tools" | "uncontrolled";
+                max_turns: boolean;
+                tool_lists: boolean;
+                interactive: boolean;
+                json_schema_output: boolean;
+                work_report_transport: "constrained" | "unsupported" | "validated";
+                structured_output_channel: "final_message" | "side_tool";
+                effort_levels: string[];
+                model_effort_levels: Record<string, {
+                    levels: string[];
+                    default: string | null;
+                }>;
+                effort_levels_verified_against: string | null;
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
+                known_models_verified_against: string | null;
+            }, {
+                plan?: boolean | undefined;
+                implement?: boolean | undefined;
+                implementation_transport?: "git_patch_envelope" | "workspace" | undefined;
+                create_from_scratch?: boolean | undefined;
+                review?: boolean | undefined;
+                verify?: boolean | undefined;
+                synthesize?: boolean | undefined;
+                read_files?: boolean | undefined;
+                browser_tool?: boolean | undefined;
+                web_policy?: "native" | "none" | "tools" | "uncontrolled" | undefined;
+                max_turns?: boolean | undefined;
+                tool_lists?: boolean | undefined;
+                interactive?: boolean | undefined;
+                json_schema_output?: boolean | undefined;
+                work_report_transport?: "constrained" | "unsupported" | "validated" | undefined;
+                structured_output_channel?: "final_message" | "side_tool" | undefined;
+                effort_levels?: string[] | undefined;
+                model_effort_levels?: Record<string, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }> | undefined;
+                effort_levels_verified_against?: string | null | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
+                known_models_verified_against?: string | null | undefined;
+            }>;
+            auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
+            access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai";
+            capability_profile: {
+                auth: {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                };
+                access_control: {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                };
+                isolation: {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                };
+                attachment_inputs: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[];
+                mcp_injection: boolean;
+                mcp_injection_requires_full_access: boolean;
+            };
+            capabilities: {
+                plan: boolean;
+                implement: boolean;
+                implementation_transport: "git_patch_envelope" | "workspace";
+                create_from_scratch: boolean;
+                review: boolean;
+                verify: boolean;
+                synthesize: boolean;
+                read_files: boolean;
+                browser_tool: boolean;
+                web_policy: "native" | "none" | "tools" | "uncontrolled";
+                max_turns: boolean;
+                tool_lists: boolean;
+                interactive: boolean;
+                json_schema_output: boolean;
+                work_report_transport: "constrained" | "unsupported" | "validated";
+                structured_output_channel: "final_message" | "side_tool";
+                effort_levels: string[];
+                model_effort_levels: Record<string, {
+                    levels: string[];
+                    default: string | null;
+                }>;
+                effort_levels_verified_against: string | null;
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
+                known_models_verified_against: string | null;
+            };
+            auth_modes: ("api_key" | "local_session" | "none")[];
+            access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+        }, {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family?: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai" | undefined;
+            capability_profile?: {
+                auth?: {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                } | undefined;
+                access_control?: {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                } | undefined;
+                isolation?: {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                } | undefined;
+                attachment_inputs?: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[] | undefined;
+                mcp_injection?: boolean | undefined;
+                mcp_injection_requires_full_access?: boolean | undefined;
+            } | undefined;
+            capabilities: {
+                plan?: boolean | undefined;
+                implement?: boolean | undefined;
+                implementation_transport?: "git_patch_envelope" | "workspace" | undefined;
+                create_from_scratch?: boolean | undefined;
+                review?: boolean | undefined;
+                verify?: boolean | undefined;
+                synthesize?: boolean | undefined;
+                read_files?: boolean | undefined;
+                browser_tool?: boolean | undefined;
+                web_policy?: "native" | "none" | "tools" | "uncontrolled" | undefined;
+                max_turns?: boolean | undefined;
+                tool_lists?: boolean | undefined;
+                interactive?: boolean | undefined;
+                json_schema_output?: boolean | undefined;
+                work_report_transport?: "constrained" | "unsupported" | "validated" | undefined;
+                structured_output_channel?: "final_message" | "side_tool" | undefined;
+                effort_levels?: string[] | undefined;
+                model_effort_levels?: Record<string, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }> | undefined;
+                effort_levels_verified_against?: string | null | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
+                known_models_verified_against?: string | null | undefined;
+            };
+            auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
+            access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+        }>>>;
+        enabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        routableIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        disabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        checks: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            status: z.ZodEnum<["pass", "fail", "skip"]>;
+            detail: z.ZodOptional<z.ZodString>;
+            duration_ms: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }, {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }>, "many">>;
+        reasons: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        authSources: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+            availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
+            verification: z.ZodEnum<["passed", "failed", "not_run"]>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }, {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }>, "many">>;
+        readiness: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodEnum<["binary", "auth", "smoke", "model", "probe"]>;
+            title: z.ZodString;
+            status: z.ZodEnum<["pass", "fail", "skip"]>;
+            detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail: string | null;
+        }, {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | null | undefined;
+        }>, "many">>;
+        configuredModel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        configuredModelCheck: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            status: z.ZodEnum<["ok", "rejected"]>;
+            message: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            status: "ok" | "rejected";
+            message: string | null;
+        }, {
+            status: "ok" | "rejected";
+            message?: string | null | undefined;
+        }>>>;
+        delegation: z.ZodDefault<z.ZodNullable<z.ZodEffects<z.ZodObject<{
+            available: z.ZodBoolean;
+            reason: z.ZodEnum<["ready", "runtime_unavailable", "manifest_unsupported"]>;
+            remediation: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            requiresFullAccess: z.ZodDefault<z.ZodBoolean>;
+        }, "strict", z.ZodTypeAny, {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation: string | null;
+            requiresFullAccess: boolean;
+        }, {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation?: string | null | undefined;
+            requiresFullAccess?: boolean | undefined;
+        }>, {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation: string | null;
+            requiresFullAccess: boolean;
+        }, {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation?: string | null | undefined;
+            requiresFullAccess?: boolean | undefined;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        status: "degraded" | "ok" | "unavailable";
+        manifest?: {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai";
+            capability_profile: {
+                auth: {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                };
+                access_control: {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                };
+                isolation: {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                };
+                attachment_inputs: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[];
+                mcp_injection: boolean;
+                mcp_injection_requires_full_access: boolean;
+            };
+            capabilities: {
+                plan: boolean;
+                implement: boolean;
+                implementation_transport: "git_patch_envelope" | "workspace";
+                create_from_scratch: boolean;
+                review: boolean;
+                verify: boolean;
+                synthesize: boolean;
+                read_files: boolean;
+                browser_tool: boolean;
+                web_policy: "native" | "none" | "tools" | "uncontrolled";
+                max_turns: boolean;
+                tool_lists: boolean;
+                interactive: boolean;
+                json_schema_output: boolean;
+                work_report_transport: "constrained" | "unsupported" | "validated";
+                structured_output_channel: "final_message" | "side_tool";
+                effort_levels: string[];
+                model_effort_levels: Record<string, {
+                    levels: string[];
+                    default: string | null;
+                }>;
+                effort_levels_verified_against: string | null;
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
+                known_models_verified_against: string | null;
+            };
+            auth_modes: ("api_key" | "local_session" | "none")[];
+            access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+        } | null | undefined;
+        enabledIntents: string[];
+        routableIntents: string[];
+        disabledIntents: string[];
+        checks: {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }[];
+        reasons: string[];
+        authSources: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }[];
+        readiness: {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail: string | null;
+        }[];
+        configuredModel: string | null;
+        configuredModelCheck: {
+            status: "ok" | "rejected";
+            message: string | null;
+        } | null;
+        delegation: {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation: string | null;
+            requiresFullAccess: boolean;
+        } | null;
+    }, {
+        id: string;
+        status: "degraded" | "ok" | "unavailable";
+        manifest?: {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family?: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai" | undefined;
+            capability_profile?: {
+                auth?: {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                } | undefined;
+                access_control?: {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                } | undefined;
+                isolation?: {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                } | undefined;
+                attachment_inputs?: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[] | undefined;
+                mcp_injection?: boolean | undefined;
+                mcp_injection_requires_full_access?: boolean | undefined;
+            } | undefined;
+            capabilities: {
+                plan?: boolean | undefined;
+                implement?: boolean | undefined;
+                implementation_transport?: "git_patch_envelope" | "workspace" | undefined;
+                create_from_scratch?: boolean | undefined;
+                review?: boolean | undefined;
+                verify?: boolean | undefined;
+                synthesize?: boolean | undefined;
+                read_files?: boolean | undefined;
+                browser_tool?: boolean | undefined;
+                web_policy?: "native" | "none" | "tools" | "uncontrolled" | undefined;
+                max_turns?: boolean | undefined;
+                tool_lists?: boolean | undefined;
+                interactive?: boolean | undefined;
+                json_schema_output?: boolean | undefined;
+                work_report_transport?: "constrained" | "unsupported" | "validated" | undefined;
+                structured_output_channel?: "final_message" | "side_tool" | undefined;
+                effort_levels?: string[] | undefined;
+                model_effort_levels?: Record<string, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }> | undefined;
+                effort_levels_verified_against?: string | null | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
+                known_models_verified_against?: string | null | undefined;
+            };
+            auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
+            access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+        } | null | undefined;
+        enabledIntents?: string[] | undefined;
+        routableIntents?: string[] | undefined;
+        disabledIntents?: string[] | undefined;
+        checks?: {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }[] | undefined;
+        reasons?: string[] | undefined;
+        authSources?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }[] | undefined;
+        readiness?: {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | null | undefined;
+        }[] | undefined;
+        configuredModel?: string | null | undefined;
+        configuredModelCheck?: {
+            status: "ok" | "rejected";
+            message?: string | null | undefined;
+        } | null | undefined;
+        delegation?: {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation?: string | null | undefined;
+            requiresFullAccess?: boolean | undefined;
+        } | null | undefined;
+    }>, "many">;
+    git: z.ZodObject<{
+        status: z.ZodEnum<["available", "missing", "developer_tools_stub", "failed"]>;
+        version: z.ZodNullable<z.ZodString>;
+        detail: z.ZodNullable<z.ZodString>;
+        remediation: z.ZodNullable<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        status: "available" | "developer_tools_stub" | "failed" | "missing";
+        version: string | null;
+        detail: string | null;
+        remediation: string | null;
+    }, {
+        status: "available" | "developer_tools_stub" | "failed" | "missing";
+        version: string | null;
+        detail: string | null;
+        remediation: string | null;
+    }>;
+    quota: z.ZodObject<{
+        snapshots: z.ZodArray<z.ZodObject<{
+            subject: z.ZodObject<{
+                harness: z.ZodString;
+                credential_route: z.ZodEnum<["vendor_native", "managed_api_key", "local"]>;
+                plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            }, {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            }>;
+            constraints: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                label: z.ZodString;
+                applies_to_models: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+                used_ratio: z.ZodNullable<z.ZodNumber>;
+                window_seconds: z.ZodNullable<z.ZodNumber>;
+                resets_at: z.ZodNullable<z.ZodString>;
+                cooldown_until: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until: string | null;
+            }, {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until?: string | null | undefined;
+            }>, "many">;
+            source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage"]>;
+            observed_at: z.ZodString;
+            freshness: z.ZodEnum<["fresh", "stale", "unknown"]>;
+        }, "strict", z.ZodTypeAny, {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until: string | null;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }, {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until?: string | null | undefined;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }>, "many">;
+        absences: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            subject: z.ZodObject<{
+                harness: z.ZodString;
+                credential_route: z.ZodEnum<["vendor_native", "managed_api_key", "local"]>;
+                plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strict", z.ZodTypeAny, {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            }, {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            }>;
+            reason: z.ZodEnum<["not_logged_in", "transport_unavailable", "platform_unsupported", "refresh_failed", "no_source"]>;
+            detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            observed_at: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail: string | null;
+            observed_at: string;
+        }, {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail?: string | null | undefined;
+            observed_at: string;
+        }>, "many">>;
+        refreshed_at: z.ZodNullable<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        snapshots: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until: string | null;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }[];
+        absences: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail: string | null;
+            observed_at: string;
+        }[];
+        refreshed_at: string | null;
+    }, {
+        snapshots: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until?: string | null | undefined;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }[];
+        absences?: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail?: string | null | undefined;
+            observed_at: string;
+        }[] | undefined;
+        refreshed_at: string | null;
+    }>;
+    quotaEventCursor: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    profiles: {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator: string | null;
+            secret_ref: string | null;
+            enabled: boolean;
+            created_at: string | null;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at: string | null;
+        };
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+    }[];
+    harnessAccounts: {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }[];
+    harnesses: {
+        id: string;
+        status: "degraded" | "ok" | "unavailable";
+        manifest?: {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai";
+            capability_profile: {
+                auth: {
+                    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                    credential_transports: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    }[];
+                };
+                access_control: {
+                    readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
+                };
+                isolation: {
+                    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                };
+                attachment_inputs: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[];
+                mcp_injection: boolean;
+                mcp_injection_requires_full_access: boolean;
+            };
+            capabilities: {
+                plan: boolean;
+                implement: boolean;
+                implementation_transport: "git_patch_envelope" | "workspace";
+                create_from_scratch: boolean;
+                review: boolean;
+                verify: boolean;
+                synthesize: boolean;
+                read_files: boolean;
+                browser_tool: boolean;
+                web_policy: "native" | "none" | "tools" | "uncontrolled";
+                max_turns: boolean;
+                tool_lists: boolean;
+                interactive: boolean;
+                json_schema_output: boolean;
+                work_report_transport: "constrained" | "unsupported" | "validated";
+                structured_output_channel: "final_message" | "side_tool";
+                effort_levels: string[];
+                model_effort_levels: Record<string, {
+                    levels: string[];
+                    default: string | null;
+                }>;
+                effort_levels_verified_against: string | null;
+                known_models: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[];
+                known_models_verified_against: string | null;
+            };
+            auth_modes: ("api_key" | "local_session" | "none")[];
+            access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+        } | null | undefined;
+        enabledIntents: string[];
+        routableIntents: string[];
+        disabledIntents: string[];
+        checks: {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }[];
+        reasons: string[];
+        authSources: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }[];
+        readiness: {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail: string | null;
+        }[];
+        configuredModel: string | null;
+        configuredModelCheck: {
+            status: "ok" | "rejected";
+            message: string | null;
+        } | null;
+        delegation: {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation: string | null;
+            requiresFullAccess: boolean;
+        } | null;
+    }[];
+    git: {
+        status: "available" | "developer_tools_stub" | "failed" | "missing";
+        version: string | null;
+        detail: string | null;
+        remediation: string | null;
+    };
+    quota: {
+        snapshots: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until: string | null;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }[];
+        absences: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label: string | null;
+                subject_id: string | null;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail: string | null;
+            observed_at: string;
+        }[];
+        refreshed_at: string | null;
+    };
+    quotaEventCursor: string;
+}, {
+    profiles: {
+        profile: {
+            profile_id: string;
+            harness_id: string;
+            display_name: string;
+            credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+            isolation_locator?: string | null | undefined;
+            secret_ref?: string | null | undefined;
+            enabled?: boolean | undefined;
+            created_at?: string | null | undefined;
+        };
+        status: {
+            profile_id: string;
+            harness_id: string;
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+            last_verified_at?: string | null | undefined;
+        };
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+    }[];
+    harnessAccounts?: {
+        harness_id: string;
+        native_credentials_enabled: boolean;
+        native_login_detected: boolean;
+        identity?: {
+            email?: string | undefined;
+            plan?: string | undefined;
+        } | null | undefined;
+        next_up: {
+            kind: "profile";
+            profileId: string;
+        } | {
+            kind: "native";
+            route?: "api_key" | "local_session" | undefined;
+        } | {
+            kind: "none";
+            reason: string;
+        };
+    }[] | undefined;
+    harnesses: {
+        id: string;
+        status: "degraded" | "ok" | "unavailable";
+        manifest?: {
+            id: string;
+            display_name: string;
+            kind: "fake" | "local_cli" | "remote_api";
+            version?: string | undefined;
+            adapter_version?: string | undefined;
+            provider_family?: "anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai" | undefined;
+            capability_profile?: {
+                auth?: {
+                    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                    credential_transports?: {
+                        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    }[] | undefined;
+                } | undefined;
+                access_control?: {
+                    readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
+                } | undefined;
+                isolation?: {
+                    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                } | undefined;
+                attachment_inputs?: {
+                    kind: "file" | "image";
+                    mime_types: string[];
+                    max_bytes: number;
+                    max_count: number;
+                    transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
+                }[] | undefined;
+                mcp_injection?: boolean | undefined;
+                mcp_injection_requires_full_access?: boolean | undefined;
+            } | undefined;
+            capabilities: {
+                plan?: boolean | undefined;
+                implement?: boolean | undefined;
+                implementation_transport?: "git_patch_envelope" | "workspace" | undefined;
+                create_from_scratch?: boolean | undefined;
+                review?: boolean | undefined;
+                verify?: boolean | undefined;
+                synthesize?: boolean | undefined;
+                read_files?: boolean | undefined;
+                browser_tool?: boolean | undefined;
+                web_policy?: "native" | "none" | "tools" | "uncontrolled" | undefined;
+                max_turns?: boolean | undefined;
+                tool_lists?: boolean | undefined;
+                interactive?: boolean | undefined;
+                json_schema_output?: boolean | undefined;
+                work_report_transport?: "constrained" | "unsupported" | "validated" | undefined;
+                structured_output_channel?: "final_message" | "side_tool" | undefined;
+                effort_levels?: string[] | undefined;
+                model_effort_levels?: Record<string, {
+                    levels?: string[] | undefined;
+                    default?: string | null | undefined;
+                }> | undefined;
+                effort_levels_verified_against?: string | null | undefined;
+                known_models?: (string | {
+                    id: string;
+                    routes: ("api_key" | "local_session")[];
+                })[] | undefined;
+                known_models_verified_against?: string | null | undefined;
+            };
+            auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
+            access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+        } | null | undefined;
+        enabledIntents?: string[] | undefined;
+        routableIntents?: string[] | undefined;
+        disabledIntents?: string[] | undefined;
+        checks?: {
+            id: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | undefined;
+            duration_ms?: number | undefined;
+        }[] | undefined;
+        reasons?: string[] | undefined;
+        authSources?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            availability: "available" | "unavailable" | "unknown";
+            verification: "failed" | "not_run" | "passed";
+            detail?: string | undefined;
+        }[] | undefined;
+        readiness?: {
+            id: string;
+            kind: "auth" | "binary" | "model" | "probe" | "smoke";
+            title: string;
+            status: "fail" | "pass" | "skip";
+            detail?: string | null | undefined;
+        }[] | undefined;
+        configuredModel?: string | null | undefined;
+        configuredModelCheck?: {
+            status: "ok" | "rejected";
+            message?: string | null | undefined;
+        } | null | undefined;
+        delegation?: {
+            available: boolean;
+            reason: "manifest_unsupported" | "ready" | "runtime_unavailable";
+            remediation?: string | null | undefined;
+            requiresFullAccess?: boolean | undefined;
+        } | null | undefined;
+    }[];
+    git: {
+        status: "available" | "developer_tools_stub" | "failed" | "missing";
+        version: string | null;
+        detail: string | null;
+        remediation: string | null;
+    };
+    quota: {
+        snapshots: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            constraints: {
+                id: string;
+                label: string;
+                applies_to_models?: string[] | null | undefined;
+                used_ratio: number | null;
+                window_seconds: number | null;
+                resets_at: string | null;
+                cooldown_until?: string | null | undefined;
+            }[];
+            source: "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+            observed_at: string;
+            freshness: "fresh" | "stale" | "unknown";
+        }[];
+        absences?: {
+            subject: {
+                harness: string;
+                credential_route: "local" | "managed_api_key" | "vendor_native";
+                plan_label?: string | null | undefined;
+                subject_id?: string | null | undefined;
+            };
+            reason: "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
+            detail?: string | null | undefined;
+            observed_at: string;
+        }[] | undefined;
+        refreshed_at: string | null;
+    };
+    quotaEventCursor: string;
+}>]>;
+export type ControlCredentialProfilesQueryResponse = z.infer<typeof ControlCredentialProfilesQueryResponse>;
+//# sourceMappingURL=credential-profile-snapshot.d.ts.map