@claudexor/schema 3.5.0 → 3.8.0

package/dist/accounts-migration.d.ts

@@ -0,0 +1,112 @@
+import { z } from "zod/v3";
+/**
+ * Unified-accounts startup migration state (INV-135 rewrite, plan §L.3).
+ *
+ * The per-harness record lives in `~/.claudexor/v3/migration/accounts-unified.json`
+ * — deliberately a SEPARATE file, never a config.yaml key: the 3.5.0 strict
+ * config parser must keep reading the migrated config, and a downgraded engine
+ * simply never opens this file. Phases are restart-idempotent; an INCOMPLETE
+ * record is a typed refusal of that harness's runs only (other harnesses keep
+ * working) until the next daemon start finishes the remaining phases.
+ */
+export declare const AccountsMigrationPhase: z.ZodEnum<["reserved", "registry_written", "continuity_migrated", "completed", "rolling_back"]>;
+export type AccountsMigrationPhase = z.infer<typeof AccountsMigrationPhase>;
+export declare const AccountsHarnessMigration: z.ZodObject<{
+    phase: z.ZodEnum<["reserved", "registry_written", "continuity_migrated", "completed", "rolling_back"]>;
+    row_id: z.ZodString;
+    legacy_aliases: z.ZodArray<z.ZodNullable<z.ZodString>, "many">;
+    locator: z.ZodString;
+    backup_ref: z.ZodNullable<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    phase: "completed" | "continuity_migrated" | "registry_written" | "reserved" | "rolling_back";
+    row_id: string;
+    legacy_aliases: (string | null)[];
+    locator: string;
+    backup_ref: string | null;
+}, {
+    phase: "completed" | "continuity_migrated" | "registry_written" | "reserved" | "rolling_back";
+    row_id: string;
+    legacy_aliases: (string | null)[];
+    locator: string;
+    backup_ref: string | null;
+}>;
+export type AccountsHarnessMigration = z.infer<typeof AccountsHarnessMigration>;
+/** The whole migration file: harness id → its migration record. */
+export declare const AccountsUnifiedMigrationFile: z.ZodRecord<z.ZodString, z.ZodObject<{
+    phase: z.ZodEnum<["reserved", "registry_written", "continuity_migrated", "completed", "rolling_back"]>;
+    row_id: z.ZodString;
+    legacy_aliases: z.ZodArray<z.ZodNullable<z.ZodString>, "many">;
+    locator: z.ZodString;
+    backup_ref: z.ZodNullable<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    phase: "completed" | "continuity_migrated" | "registry_written" | "reserved" | "rolling_back";
+    row_id: string;
+    legacy_aliases: (string | null)[];
+    locator: string;
+    backup_ref: string | null;
+}, {
+    phase: "completed" | "continuity_migrated" | "registry_written" | "reserved" | "rolling_back";
+    row_id: string;
+    legacy_aliases: (string | null)[];
+    locator: string;
+    backup_ref: string | null;
+}>>;
+export type AccountsUnifiedMigrationFile = z.infer<typeof AccountsUnifiedMigrationFile>;
+/** POST /accounts-migration/rollback — the supported downgrade path's first
+ * step (run BEFORE installing 3.5.0, whose canonicalizers refuse the migrated
+ * row's native locator). Surgically reverses the migration: sessions,
+ * checkpoints, and lane homes return to the null engine-default keys, the
+ * auto-registered row leaves the registry, and its `enabled` state returns to
+ * the `native_credentials_enabled` setting. */
+export declare const ControlAccountsMigrationRollbackRequest: z.ZodObject<{
+    harnessId: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    harnessId?: string | undefined;
+}, {
+    harnessId?: string | undefined;
+}>;
+export type ControlAccountsMigrationRollbackRequest = z.infer<typeof ControlAccountsMigrationRollbackRequest>;
+export declare const ControlAccountsMigrationRollbackResponse: z.ZodObject<{
+    rolledBack: z.ZodArray<z.ZodObject<{
+        harness_id: z.ZodString;
+        row_id: z.ZodString;
+        sessions: z.ZodNumber;
+        checkpoints: z.ZodNumber;
+        lanes: z.ZodNumber;
+        skipped_partitions: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        harness_id: string;
+        row_id: string;
+        sessions: number;
+        checkpoints: number;
+        lanes: number;
+        skipped_partitions: string[];
+    }, {
+        harness_id: string;
+        row_id: string;
+        sessions: number;
+        checkpoints: number;
+        lanes: number;
+        skipped_partitions: string[];
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    rolledBack: {
+        harness_id: string;
+        row_id: string;
+        sessions: number;
+        checkpoints: number;
+        lanes: number;
+        skipped_partitions: string[];
+    }[];
+}, {
+    rolledBack: {
+        harness_id: string;
+        row_id: string;
+        sessions: number;
+        checkpoints: number;
+        lanes: number;
+        skipped_partitions: string[];
+    }[];
+}>;
+export type ControlAccountsMigrationRollbackResponse = z.infer<typeof ControlAccountsMigrationRollbackResponse>;
+//# sourceMappingURL=accounts-migration.d.ts.map

package/dist/accounts-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts-migration.d.ts","sourceRoot":"","sources":["../src/accounts-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,iGAIhC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;EAwBwB,CAAC;AAC9D,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,mEAAmE;AACnE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;GAE4C,CAAC;AACtF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAExF;;;;;+CAK+C;AAC/C,eAAO,MAAM,uCAAuC;;;;;;EAOc,CAAC;AACnE,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAC3D,OAAO,uCAAuC,CAC/C,CAAC;AAEF,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BY,CAAC;AAClE,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAC5D,OAAO,wCAAwC,CAChD,CAAC"}

package/dist/accounts-migration.js

@@ -0,0 +1,74 @@
+import { z } from "zod/v3";
+import { Id } from "./primitives.js";
+/**
+ * Unified-accounts startup migration state (INV-135 rewrite, plan §L.3).
+ *
+ * The per-harness record lives in `~/.claudexor/v3/migration/accounts-unified.json`
+ * — deliberately a SEPARATE file, never a config.yaml key: the 3.5.0 strict
+ * config parser must keep reading the migrated config, and a downgraded engine
+ * simply never opens this file. Phases are restart-idempotent; an INCOMPLETE
+ * record is a typed refusal of that harness's runs only (other harnesses keep
+ * working) until the next daemon start finishes the remaining phases.
+ */
+export const AccountsMigrationPhase = z
+    .enum(["reserved", "registry_written", "continuity_migrated", "completed", "rolling_back"])
+    .describe("Crash-recoverable migration phase for one harness: reserved (id + backup persisted) → registry_written (row in config) → continuity_migrated (sessions/checkpoints/lane homes on the row id) → completed (legacy null quota subject retired). rolling_back marks an in-flight rollback: the startup migration never resumes it forward; re-running the rollback command finishes it.");
+export const AccountsHarnessMigration = z
+    .object({
+    phase: AccountsMigrationPhase,
+    row_id: Id.describe("The reserved registry row id (claude-default / codex-default, deterministic -2 suffix on collision) — persisted BEFORE any other phase so a crash can never re-reserve a different id."),
+    legacy_aliases: z
+        .array(z.string().nullable())
+        .describe("Every legacy identity this row absorbed — [null] for the engine-default subject. Deletion of the row must retire the canonical id PLUS these aliases in one lifecycle operation."),
+    locator: z
+        .string()
+        .describe("The exact legacy native store dir registered as the row's isolation_locator (bytes never move). Also the delete fence's exact-path allowlist entry for this row."),
+    backup_ref: z
+        .string()
+        .nullable()
+        .describe("Pre-migration backup directory (config.yaml copy), the manual-recovery half of the supported downgrade path; null when the backup could not be written."),
+})
+    .strict()
+    .describe("Per-harness unified-accounts migration record.");
+/** The whole migration file: harness id → its migration record. */
+export const AccountsUnifiedMigrationFile = z
+    .record(z.string(), AccountsHarnessMigration)
+    .describe("accounts-unified.json: harness id → unified-accounts migration record.");
+/** POST /accounts-migration/rollback — the supported downgrade path's first
+ * step (run BEFORE installing 3.5.0, whose canonicalizers refuse the migrated
+ * row's native locator). Surgically reverses the migration: sessions,
+ * checkpoints, and lane homes return to the null engine-default keys, the
+ * auto-registered row leaves the registry, and its `enabled` state returns to
+ * the `native_credentials_enabled` setting. */
+export const ControlAccountsMigrationRollbackRequest = z
+    .object({
+    harnessId: Id.optional().describe("Roll back one harness's migration; omitted = every migrated harness."),
+})
+    .strict()
+    .describe("Request body for POST /accounts-migration/rollback.");
+export const ControlAccountsMigrationRollbackResponse = z
+    .object({
+    rolledBack: z
+        .array(z
+        .object({
+        harness_id: Id,
+        row_id: Id.describe("The auto-registered row the rollback removed."),
+        sessions: z
+            .number()
+            .int()
+            .describe("Thread sessions returned to the null engine-default subject."),
+        checkpoints: z
+            .number()
+            .int()
+            .describe("Lane checkpoints re-seeded onto the null lane."),
+        lanes: z.number().int().describe("Durable lane home dirs renamed back."),
+        skipped_partitions: z
+            .array(z.string())
+            .describe("Quarantined project partitions whose sessions could NOT be rolled back (disclosed residual: recover them and rerun the rollback before downgrading)."),
+    })
+        .strict())
+        .describe("Per-harness rollback receipts (empty when nothing was migrated)."),
+})
+    .strict()
+    .describe("Receipt for a unified-accounts migration rollback.");
+//# sourceMappingURL=accounts-migration.js.map

package/dist/accounts-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts-migration.js","sourceRoot":"","sources":["../src/accounts-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAErC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,IAAI,CAAC,CAAC,UAAU,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;KAC1F,QAAQ,CACP,sXAAsX,CACvX,CAAC;AAGJ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,KAAK,EAAE,sBAAsB;IAC7B,MAAM,EAAE,EAAE,CAAC,QAAQ,CACjB,wLAAwL,CACzL;IACD,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;SAC5B,QAAQ,CACP,kLAAkL,CACnL;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,CACP,kKAAkK,CACnK;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,yJAAyJ,CAC1J;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,gDAAgD,CAAC,CAAC;AAG9D,mEAAmE;AACnE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC;KAC5C,QAAQ,CAAC,wEAAwE,CAAC,CAAC;AAGtF;;;;;+CAK+C;AAC/C,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC;KACrD,MAAM,CAAC;IACN,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC/B,sEAAsE,CACvE;CACF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,qDAAqD,CAAC,CAAC;AAKnE,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC;KACtD,MAAM,CAAC;IACN,UAAU,EAAE,CAAC;SACV,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QACpE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,CAAC,8DAA8D,CAAC;QAC3E,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,CAAC,gDAAgD,CAAC;QAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxE,kBAAkB,EAAE,CAAC;aAClB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,CACP,sJAAsJ,CACvJ;KACJ,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,CAAC,kEAAkE,CAAC;CAChF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,oDAAoD,CAAC,CAAC"}

package/dist/agent-capabilities.d.ts

@@ -120,6 +120,13 @@ export declare const CatalogHarness: z.ZodObject<{
         remediation?: string | null | undefined;
         requiresFullAccess?: boolean | undefined;
     }>;
+    setupLogin: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        mode: z.ZodEnum<["in_app", "external_terminal"]>;
+    }, "strict", z.ZodTypeAny, {
+        mode: "external_terminal" | "in_app";
+    }, {
+        mode: "external_terminal" | "in_app";
+    }>>>;
 }, "strip", z.ZodTypeAny, {
     id: string;
     enabled: boolean;
@@ -153,6 +160,9 @@ export declare const CatalogHarness: z.ZodObject<{
         remediation: string | null;
         requiresFullAccess: boolean;
     };
+    setupLogin?: {
+        mode: "external_terminal" | "in_app";
+    } | null | undefined;
 }, {
     id: string;
     enabled: boolean;
@@ -186,6 +196,9 @@ export declare const CatalogHarness: z.ZodObject<{
         remediation?: string | null | undefined;
         requiresFullAccess?: boolean | undefined;
     };
+    setupLogin?: {
+        mode: "external_terminal" | "in_app";
+    } | null | undefined;
 }>;
 export type CatalogHarness = z.infer<typeof CatalogHarness>;
 export declare const CatalogCliCommand: z.ZodObject<{
@@ -335,6 +348,13 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
             remediation?: string | null | undefined;
             requiresFullAccess?: boolean | undefined;
         }>;
+        setupLogin: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            mode: z.ZodEnum<["in_app", "external_terminal"]>;
+        }, "strict", z.ZodTypeAny, {
+            mode: "external_terminal" | "in_app";
+        }, {
+            mode: "external_terminal" | "in_app";
+        }>>>;
     }, "strip", z.ZodTypeAny, {
         id: string;
         enabled: boolean;
@@ -368,6 +388,9 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
             remediation: string | null;
             requiresFullAccess: boolean;
         };
+        setupLogin?: {
+            mode: "external_terminal" | "in_app";
+        } | null | undefined;
     }, {
         id: string;
         enabled: boolean;
@@ -401,6 +424,9 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
             remediation?: string | null | undefined;
             requiresFullAccess?: boolean | undefined;
         };
+        setupLogin?: {
+            mode: "external_terminal" | "in_app";
+        } | null | undefined;
     }>, "many">;
     availableHarnesses: z.ZodArray<z.ZodString, "many">;
     modes: z.ZodArray<z.ZodEnum<["ask", "plan", "agent"]>, "many">;
@@ -501,6 +527,9 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
             remediation: string | null;
             requiresFullAccess: boolean;
         };
+        setupLogin?: {
+            mode: "external_terminal" | "in_app";
+        } | null | undefined;
     }[];
     availableHarnesses: string[];
     modes: ("agent" | "ask" | "plan")[];
@@ -569,6 +598,9 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
             remediation?: string | null | undefined;
             requiresFullAccess?: boolean | undefined;
         };
+        setupLogin?: {
+            mode: "external_terminal" | "in_app";
+        } | null | undefined;
     }[];
     availableHarnesses: string[];
     modes: ("agent" | "ask" | "plan")[];

package/dist/agent-capabilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-capabilities.d.ts","sourceRoot":"","sources":["../src/agent-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAiB,QAAQ,EAAkB,MAAM,iBAAiB,CAAC;AAQ1E;;;;;;;;GAQG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,8BAA8B,YACzC,UAAU,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,SAAS,EACT,aAAa,EACb,oBAAoB,CACZ,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAI9E,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAmBkE,CAAC;AACnG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsDsD,CAAC;AAClF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAe3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;EAyBjC,CAAC;AACJ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;EAQ4C,CAAC;AACpF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2ChC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"agent-capabilities.d.ts","sourceRoot":"","sources":["../src/agent-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAiB,QAAQ,EAAkB,MAAM,iBAAiB,CAAC;AAS1E;;;;;;;;GAQG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,8BAA8B,YACzC,UAAU,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,SAAS,EACT,aAAa,EACb,oBAAoB,CACZ,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAI9E,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAmBkE,CAAC;AACnG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2DsD,CAAC;AAClF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAe3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;EAyBjC,CAAC;AACJ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;EAQ4C,CAAC;AACpF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2ChC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/agent-capabilities.js

@@ -6,6 +6,7 @@ import { AttachmentInputClass } from "./attachment.js";
 import { OutputSchemaDialect } from "./output-schema-dialect.js";
 import { DelegationCapability } from "./delegation.js";
 import { GitCapability } from "./git-capability.js";
+import { SetupLoginCapability } from "./readiness.js";
 /**
  * AgentCapabilityCatalog — the machine-readable answer to "what can this
  * Claudexor install do RIGHT NOW", for external agents (MCP hosts, scripts,
@@ -110,6 +111,9 @@ export const CatalogHarness = z
         .describe("Access profiles the adapter can enforce."),
     readonlyMechanism: ReadonlyMechanism.describe("HOW read-only is enforced (fs_sandbox | permission_deny | tool_allowlist | none) — none means read-only intent is advisory for this harness."),
     delegation: DelegationCapability.describe("Whether this installed runtime can offer Delegate through this harness."),
+    setupLogin: SetupLoginCapability.nullable()
+        .optional()
+        .describe("Effective setup-login flow for this harness on the current host; current producers emit null or an object, while omission identifies a legacy catalog row."),
 })
     .describe("Per-harness live capability row (manifest + doctor + model truth).");
 export const CatalogCliCommand = z

package/dist/agent-capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-capabilities.js","sourceRoot":"","sources":["../src/agent-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;;;;;;GAQG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,QAAQ;IACR,WAAW;IACX,SAAS;IACT,SAAS;IACT,aAAa;IACb,oBAAoB;CACZ,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuD;IACjF,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;SACjC,QAAQ,CACP,iKAAiK,CAClK;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,4EAA4E,CAAC;IACzF,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+FAA+F,CAChG;CACJ,CAAC;KACD,QAAQ,CAAC,qFAAqF,CAAC,CAAC;AAGnG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,QAAQ,CAAC,yEAAyE,CAAC;IACtF,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CACP,4HAA4H,CAC7H;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACzE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAC5B,2EAA2E,CAC5E;IACD,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC/E,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,2DAA2D,CAAC;IACxE,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,0DAA0D,CAAC;IACvE,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,6EAA6E,CAAC;IAC1F,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,0FAA0F,CAC3F;IACH,oBAAoB,EAAE,CAAC;SACpB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,kFAAkF,CAAC;IAC/F,MAAM,EAAE,mBAAmB;IAC3B,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;SACjD,QAAQ,CAAC,yDAAyD,CAAC;IACtE,gBAAgB,EAAE,CAAC;SAChB,KAAK,CAAC,oBAAoB,CAAC;SAC3B,QAAQ,CAAC,uEAAuE,CAAC;IACpF,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,UAAU,CAAC;SACjB,QAAQ,CAAC,0EAA0E,CAAC;IACvF,uBAAuB,EAAE,CAAC;SACvB,KAAK,CAAC,aAAa,CAAC;SACpB,QAAQ,CAAC,0CAA0C,CAAC;IACvD,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,CAC3C,8IAA8I,CAC/I;IACD,UAAU,EAAE,oBAAoB,CAAC,QAAQ,CACvC,yEAAyE,CAC1E;CACF,CAAC;KACD,QAAQ,CAAC,oEAAoE,CAAC,CAAC;AAGlF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;IACpC,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;SAC1C,QAAQ,CACP,kLAAkL,CACnL;IACH,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACzF,QAAQ,EAAE,CAAC;SACR,OAAO,EAAE;SACT,QAAQ,CAAC,mEAAmE,CAAC;CACjF,CAAC;KACD,QAAQ,CACP,2FAA2F,CAC5F,CAAC;AAGJ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC;SACb,KAAK,CAAC,QAAQ,CAAC;SACf,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACzF,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;SACnC,QAAQ,CACP,sIAAsI,CACvI;IACH,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,aAAa,CAAC;SACpB,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,aAAa,CAAC;SACpB,QAAQ,CACP,iHAAiH,CAClH;IACH,UAAU,EAAE,CAAC;SACV,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;SAClD,QAAQ,CAAC,iEAAiE,CAAC;CAC/E,CAAC;KACD,QAAQ,CACP,uHAAuH,CACxH,CAAC;AAGJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,OAAO,EAAE,mBAAmB,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC9F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAClF,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,QAAQ,CAAC,+EAA+E,CAAC;CAC7F,CAAC;KACD,QAAQ,CAAC,sEAAsE,CAAC,CAAC;AAGpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAClF,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,CACP,uGAAuG,CACxG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAChF,GAAG,EAAE,aAAa,CAAC,QAAQ,CACzB,iGAAiG,CAClG;IACD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAC7F,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC3F,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,QAAQ,CAAC;SACf,QAAQ,CACP,uFAAuF,CACxF;IACH,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CACP,uIAAuI,CACxI;IACH,oBAAoB,EAAE,CAAC;SACpB,KAAK,CAAC,0BAA0B,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,UAAU,EAAE,uBAAuB;IACnC,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,iBAAiB,CAAC;SACxB,QAAQ,CACP,qFAAqF,CACtF;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IACvF,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CACP,gMAAgM,CACjM;CACJ,CAAC;KACD,QAAQ,CACP,2FAA2F,CAC5F,CAAC"}
+{"version":3,"file":"agent-capabilities.js","sourceRoot":"","sources":["../src/agent-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD;;;;;;;;GAQG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,QAAQ;IACR,WAAW;IACX,SAAS;IACT,SAAS;IACT,aAAa;IACb,oBAAoB;CACZ,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuD;IACjF,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;SACjC,QAAQ,CACP,iKAAiK,CAClK;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,4EAA4E,CAAC;IACzF,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+FAA+F,CAChG;CACJ,CAAC;KACD,QAAQ,CAAC,qFAAqF,CAAC,CAAC;AAGnG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,QAAQ,CAAC,yEAAyE,CAAC;IACtF,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CACP,4HAA4H,CAC7H;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACzE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAC5B,2EAA2E,CAC5E;IACD,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC/E,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,2DAA2D,CAAC;IACxE,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,0DAA0D,CAAC;IACvE,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,6EAA6E,CAAC;IAC1F,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,0FAA0F,CAC3F;IACH,oBAAoB,EAAE,CAAC;SACpB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,kFAAkF,CAAC;IAC/F,MAAM,EAAE,mBAAmB;IAC3B,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;SACjD,QAAQ,CAAC,yDAAyD,CAAC;IACtE,gBAAgB,EAAE,CAAC;SAChB,KAAK,CAAC,oBAAoB,CAAC;SAC3B,QAAQ,CAAC,uEAAuE,CAAC;IACpF,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,UAAU,CAAC;SACjB,QAAQ,CAAC,0EAA0E,CAAC;IACvF,uBAAuB,EAAE,CAAC;SACvB,KAAK,CAAC,aAAa,CAAC;SACpB,QAAQ,CAAC,0CAA0C,CAAC;IACvD,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,CAC3C,8IAA8I,CAC/I;IACD,UAAU,EAAE,oBAAoB,CAAC,QAAQ,CACvC,yEAAyE,CAC1E;IACD,UAAU,EAAE,oBAAoB,CAAC,QAAQ,EAAE;SACxC,QAAQ,EAAE;SACV,QAAQ,CACP,4JAA4J,CAC7J;CACJ,CAAC;KACD,QAAQ,CAAC,oEAAoE,CAAC,CAAC;AAGlF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;IACpC,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;SAC1C,QAAQ,CACP,kLAAkL,CACnL;IACH,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACzF,QAAQ,EAAE,CAAC;SACR,OAAO,EAAE;SACT,QAAQ,CAAC,mEAAmE,CAAC;CACjF,CAAC;KACD,QAAQ,CACP,2FAA2F,CAC5F,CAAC;AAGJ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC;SACb,KAAK,CAAC,QAAQ,CAAC;SACf,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACzF,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;SACnC,QAAQ,CACP,sIAAsI,CACvI;IACH,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,aAAa,CAAC;SACpB,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,aAAa,CAAC;SACpB,QAAQ,CACP,iHAAiH,CAClH;IACH,UAAU,EAAE,CAAC;SACV,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;SAClD,QAAQ,CAAC,iEAAiE,CAAC;CAC/E,CAAC;KACD,QAAQ,CACP,uHAAuH,CACxH,CAAC;AAGJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,OAAO,EAAE,mBAAmB,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC9F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAClF,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,QAAQ,CAAC,+EAA+E,CAAC;CAC7F,CAAC;KACD,QAAQ,CAAC,sEAAsE,CAAC,CAAC;AAGpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAClF,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,CACP,uGAAuG,CACxG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAChF,GAAG,EAAE,aAAa,CAAC,QAAQ,CACzB,iGAAiG,CAClG;IACD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAC7F,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC3F,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,QAAQ,CAAC;SACf,QAAQ,CACP,uFAAuF,CACxF;IACH,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CACP,uIAAuI,CACxI;IACH,oBAAoB,EAAE,CAAC;SACpB,KAAK,CAAC,0BAA0B,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,UAAU,EAAE,uBAAuB;IACnC,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,iBAAiB,CAAC;SACxB,QAAQ,CACP,qFAAqF,CACtF;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IACvF,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CACP,gMAAgM,CACjM;CACJ,CAAC;KACD,QAAQ,CACP,2FAA2F,CAC5F,CAAC"}

package/dist/config.d.ts

@@ -371,10 +371,11 @@ export declare const GlobalConfig: z.ZodObject<{
         keep_last_runs_per_project?: number | undefined;
     }>>;
     /**
-     * Durable NON-SECRET credential-profile registry (INV-135): additional
-     * credential identities per harness beyond the engine default. Uniqueness
-     * of (harness_id, profile_id) is enforced here; secret material lives in
-     * the vendor dir or the secret store, never in config.
+     * Durable NON-SECRET named-binding registry (INV-135): additional routing
+     * bindings per harness beyond the engine default. Uniqueness of
+     * (harness_id, profile_id) is enforced here; credential material may live
+     * in Claudexor-owned scoped state, a managed secret store, or a
+     * platform-declared vendor/OS-user store, never in config.
      */
     credential_profiles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
         profile_id: z.ZodString;
@@ -460,20 +461,28 @@ export declare const GlobalConfig: z.ZodObject<{
         /**
          * ONE typed profile-selection policy (INV-135, W5.4): what happens
          * when the selected credential profile hits its vendor limit.
-         * Rotation is OPT-IN and rotates only on typed vendor-limit
-         * signals or proactive headroom breaches — never on ordinary
-         * network errors.
+         * `auto` is the stored default and resolves BY CREDENTIAL KIND at
+         * decision time (`effectiveLimitAction`): rotate for subscription
+         * (`local_session`) subjects, fail for metered API-key or unknown
+         * routes. This SUPERSEDES the earlier "rotation is opt-in" lock
+         * (CONCEPT-CHANGE(INV-135), owner decision 2026-08-17): a spent
+         * subscription window fails over by default, while explicitly
+         * persisted `fail`/`ask`/`rotate` values keep their exact meaning
+         * and are never rewritten — only the interpretation of an ABSENT
+         * key changed. Rotation still fires only on typed vendor-limit
+         * signals, proactive headroom breaches, or the structural
+         * pre-progress predicate — never on ordinary network errors.
          */
         profile_policy: z.ZodDefault<z.ZodObject<{
-            limit_action: z.ZodDefault<z.ZodEnum<["fail", "ask", "rotate"]>>;
+            limit_action: z.ZodDefault<z.ZodEnum<["auto", "fail", "ask", "rotate"]>>;
             rotation_eligible: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
             headroom_threshold: z.ZodDefault<z.ZodNumber>;
         }, "strict", z.ZodTypeAny, {
-            limit_action: "ask" | "fail" | "rotate";
+            limit_action: "ask" | "auto" | "fail" | "rotate";
             rotation_eligible: string[];
             headroom_threshold: number;
         }, {
-            limit_action?: "ask" | "fail" | "rotate" | undefined;
+            limit_action?: "ask" | "auto" | "fail" | "rotate" | undefined;
             rotation_eligible?: string[] | undefined;
             headroom_threshold?: number | undefined;
         }>>;
@@ -491,7 +500,7 @@ export declare const GlobalConfig: z.ZodObject<{
         max_turns: number | null;
         max_rounds: number | null;
         profile_policy: {
-            limit_action: "ask" | "fail" | "rotate";
+            limit_action: "ask" | "auto" | "fail" | "rotate";
             rotation_eligible: string[];
             headroom_threshold: number;
         };
@@ -508,7 +517,7 @@ export declare const GlobalConfig: z.ZodObject<{
         max_turns?: number | null | undefined;
         max_rounds?: number | null | undefined;
         profile_policy?: {
-            limit_action?: "ask" | "fail" | "rotate" | undefined;
+            limit_action?: "ask" | "auto" | "fail" | "rotate" | undefined;
             rotation_eligible?: string[] | undefined;
             headroom_threshold?: number | undefined;
         } | undefined;
@@ -575,7 +584,7 @@ export declare const GlobalConfig: z.ZodObject<{
         max_turns: number | null;
         max_rounds: number | null;
         profile_policy: {
-            limit_action: "ask" | "fail" | "rotate";
+            limit_action: "ask" | "auto" | "fail" | "rotate";
             rotation_eligible: string[];
             headroom_threshold: number;
         };
@@ -642,7 +651,7 @@ export declare const GlobalConfig: z.ZodObject<{
         max_turns?: number | null | undefined;
         max_rounds?: number | null | undefined;
         profile_policy?: {
-            limit_action?: "ask" | "fail" | "rotate" | undefined;
+            limit_action?: "ask" | "auto" | "fail" | "rotate" | undefined;
             rotation_eligible?: string[] | undefined;
             headroom_threshold?: number | undefined;
         } | undefined;
@@ -1003,10 +1012,11 @@ export declare const ResolvedConfig: z.ZodObject<{
             keep_last_runs_per_project?: number | undefined;
         }>>;
         /**
-         * Durable NON-SECRET credential-profile registry (INV-135): additional
-         * credential identities per harness beyond the engine default. Uniqueness
-         * of (harness_id, profile_id) is enforced here; secret material lives in
-         * the vendor dir or the secret store, never in config.
+         * Durable NON-SECRET named-binding registry (INV-135): additional routing
+         * bindings per harness beyond the engine default. Uniqueness of
+         * (harness_id, profile_id) is enforced here; credential material may live
+         * in Claudexor-owned scoped state, a managed secret store, or a
+         * platform-declared vendor/OS-user store, never in config.
          */
         credential_profiles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
             profile_id: z.ZodString;
@@ -1092,20 +1102,28 @@ export declare const ResolvedConfig: z.ZodObject<{
             /**
              * ONE typed profile-selection policy (INV-135, W5.4): what happens
              * when the selected credential profile hits its vendor limit.
-             * Rotation is OPT-IN and rotates only on typed vendor-limit
-             * signals or proactive headroom breaches — never on ordinary
-             * network errors.
+             * `auto` is the stored default and resolves BY CREDENTIAL KIND at
+             * decision time (`effectiveLimitAction`): rotate for subscription
+             * (`local_session`) subjects, fail for metered API-key or unknown
+             * routes. This SUPERSEDES the earlier "rotation is opt-in" lock
+             * (CONCEPT-CHANGE(INV-135), owner decision 2026-08-17): a spent
+             * subscription window fails over by default, while explicitly
+             * persisted `fail`/`ask`/`rotate` values keep their exact meaning
+             * and are never rewritten — only the interpretation of an ABSENT
+             * key changed. Rotation still fires only on typed vendor-limit
+             * signals, proactive headroom breaches, or the structural
+             * pre-progress predicate — never on ordinary network errors.
              */
             profile_policy: z.ZodDefault<z.ZodObject<{
-                limit_action: z.ZodDefault<z.ZodEnum<["fail", "ask", "rotate"]>>;
+                limit_action: z.ZodDefault<z.ZodEnum<["auto", "fail", "ask", "rotate"]>>;
                 rotation_eligible: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
                 headroom_threshold: z.ZodDefault<z.ZodNumber>;
             }, "strict", z.ZodTypeAny, {
-                limit_action: "ask" | "fail" | "rotate";
+                limit_action: "ask" | "auto" | "fail" | "rotate";
                 rotation_eligible: string[];
                 headroom_threshold: number;
             }, {
-                limit_action?: "ask" | "fail" | "rotate" | undefined;
+                limit_action?: "ask" | "auto" | "fail" | "rotate" | undefined;
                 rotation_eligible?: string[] | undefined;
                 headroom_threshold?: number | undefined;
             }>>;
@@ -1123,7 +1141,7 @@ export declare const ResolvedConfig: z.ZodObject<{
             max_turns: number | null;
             max_rounds: number | null;
             profile_policy: {
-                limit_action: "ask" | "fail" | "rotate";
+                limit_action: "ask" | "auto" | "fail" | "rotate";
                 rotation_eligible: string[];
                 headroom_threshold: number;
             };
@@ -1140,7 +1158,7 @@ export declare const ResolvedConfig: z.ZodObject<{
             max_turns?: number | null | undefined;
             max_rounds?: number | null | undefined;
             profile_policy?: {
-                limit_action?: "ask" | "fail" | "rotate" | undefined;
+                limit_action?: "ask" | "auto" | "fail" | "rotate" | undefined;
                 rotation_eligible?: string[] | undefined;
                 headroom_threshold?: number | undefined;
             } | undefined;
@@ -1207,7 +1225,7 @@ export declare const ResolvedConfig: z.ZodObject<{
             max_turns: number | null;
             max_rounds: number | null;
             profile_policy: {
-                limit_action: "ask" | "fail" | "rotate";
+                limit_action: "ask" | "auto" | "fail" | "rotate";
                 rotation_eligible: string[];
                 headroom_threshold: number;
             };
@@ -1274,7 +1292,7 @@ export declare const ResolvedConfig: z.ZodObject<{
             max_turns?: number | null | undefined;
             max_rounds?: number | null | undefined;
             profile_policy?: {
-                limit_action?: "ask" | "fail" | "rotate" | undefined;
+                limit_action?: "ask" | "auto" | "fail" | "rotate" | undefined;
                 rotation_eligible?: string[] | undefined;
                 headroom_threshold?: number | undefined;
             } | undefined;
@@ -1382,7 +1400,7 @@ export declare const ResolvedConfig: z.ZodObject<{
             max_turns: number | null;
             max_rounds: number | null;
             profile_policy: {
-                limit_action: "ask" | "fail" | "rotate";
+                limit_action: "ask" | "auto" | "fail" | "rotate";
                 rotation_eligible: string[];
                 headroom_threshold: number;
             };
@@ -1490,7 +1508,7 @@ export declare const ResolvedConfig: z.ZodObject<{
             max_turns?: number | null | undefined;
             max_rounds?: number | null | undefined;
             profile_policy?: {
-                limit_action?: "ask" | "fail" | "rotate" | undefined;
+                limit_action?: "ask" | "auto" | "fail" | "rotate" | undefined;
                 rotation_eligible?: string[] | undefined;
                 headroom_threshold?: number | undefined;
             } | undefined;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAY3B;;6EAE6E;AAC7E,eAAO,MAAM,0BAA0B,mBAAwB,CAAC;AAEhE;;uCAEuC;AACvC,eAAO,MAAM,uBAAuB,4BAMvB,CAAC;AAEd;;;;;;kEAMkE;AAClE,eAAO,MAAM,qCAAqC,UAAY,CAAC;AAW/D;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiDvB,CAAC;AACJ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,8EAA8E;AAC9E,eAAO,MAAM,WAAW;;;;IAUpB;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBJ,CAAC;AACJ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,qEAAqE;AACrE,eAAO,MAAM,YAAY;;IAGrB;8EAC0E;;;;;QAetE;;;;WAIG;;QAOH,iEAAiE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAYjE;;;;;;;;WAQG;;;;;;;;;;;;;;;;;;;;QAcH;;;WAGG;;;;;;;;;;;;;;;QAkCH;;;;;;;;;;;;;WAaG;;;;;;;;;;;;;;;;;;;IAaP;;;;;;OAMG;;;;;;;;;;;;;;IAyBH;;;;;OAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA4BK;;;;;;;;;WASG;;;;;;QA6BH;;;;;;WAMG;;;;;;;;;;;;;;;;;;QA2CH,4EAA4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYrF,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,kEAAkE;AAClE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAhUvB;;;;;;WAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAuBH;kFAC0E;;;;;YAetE;;;;eAIG;;YAOH,iEAAiE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAYjE;;;;;;;;eAQG;;;;;;;;;;;;;;;;;;;;YAcH;;;eAGG;;;;;;;;;;;;;;;YAkCH;;;;;;;;;;;;;eAaG;;;;;;;;;;;;;;;;;;;QAaP;;;;;;WAMG;;;;;;;;;;;;;;QAyBH;;;;;WAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA4BK;;;;;;;;;eASG;;;;;;YA6BH;;;;;;eAMG;;;;;;;;;;;;;;;;;;YA2CH,4EAA4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0Bd,CAAC;AAC3E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAY3B;;6EAE6E;AAC7E,eAAO,MAAM,0BAA0B,mBAAwB,CAAC;AAEhE;;uCAEuC;AACvC,eAAO,MAAM,uBAAuB,4BAMvB,CAAC;AAEd;;;;;;kEAMkE;AAClE,eAAO,MAAM,qCAAqC,UAAY,CAAC;AAW/D;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiDvB,CAAC;AACJ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,8EAA8E;AAC9E,eAAO,MAAM,WAAW;;;;IAUpB;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBJ,CAAC;AACJ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,qEAAqE;AACrE,eAAO,MAAM,YAAY;;IAGrB;8EAC0E;;;;;QAetE;;;;WAIG;;QAOH,iEAAiE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAYjE;;;;;;;;WAQG;;;;;;;;;;;;;;;;;;;;QAcH;;;WAGG;;;;;;;;;;;;;;;QAkCH;;;;;;;;;;;;;WAaG;;;;;;;;;;;;;;;;;;;IAaP;;;;;;OAMG;;;;;;;;;;;;;;IAyBH;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAwCK;;;;;;;;;WASG;;;;;;QA6BH;;;;;;;;;;;;;;WAcG;;;;;;;;;;;;;;;;;;QA2CH,4EAA4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYrF,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,kEAAkE;AAClE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QArVvB;;;;;;WAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAuBH;kFAC0E;;;;;YAetE;;;;eAIG;;YAOH,iEAAiE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAYjE;;;;;;;;eAQG;;;;;;;;;;;;;;;;;;;;YAcH;;;eAGG;;;;;;;;;;;;;;;YAkCH;;;;;;;;;;;;;eAaG;;;;;;;;;;;;;;;;;;;QAaP;;;;;;WAMG;;;;;;;;;;;;;;QAyBH;;;;;;WAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAwCK;;;;;;;;;eASG;;;;;;YA6BH;;;;;;;;;;;;;;eAcG;;;;;;;;;;;;;;;;;;YA2CH,4EAA4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0Bd,CAAC;AAC3E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/config.js

@@ -258,16 +258,18 @@ export const GlobalConfig = z
         .default({})
         .describe("Disk retention policy for engine-owned runtime artifacts."),
     /**
-     * Durable NON-SECRET credential-profile registry (INV-135): additional
-     * credential identities per harness beyond the engine default. Uniqueness
-     * of (harness_id, profile_id) is enforced here; secret material lives in
-     * the vendor dir or the secret store, never in config.
+     * Durable NON-SECRET named-binding registry (INV-135): additional routing
+     * bindings per harness beyond the engine default. Uniqueness of
+     * (harness_id, profile_id) is enforced here; credential material may live
+     * in Claudexor-owned scoped state, a managed secret store, or a
+     * platform-declared vendor/OS-user store, never in config.
      */
     credential_profiles: z
         .array(CredentialProfile)
         .default([])
         .superRefine((profiles, ctx) => {
         const seen = new Set();
+        const locators = new Set();
         for (const p of profiles) {
             const key = `${p.harness_id}\u0000${p.profile_id}`;
             if (seen.has(key))
@@ -276,9 +278,20 @@ export const GlobalConfig = z
                     message: `duplicate credential profile ${p.profile_id} for harness ${p.harness_id}`,
                 });
             seen.add(key);
+            // Locator uniqueness (unified account model): two rows sharing one
+            // config dir would be two names for ONE scoped state root — deletion,
+            // routing, and quota attribution could not tell them apart.
+            if (p.isolation_locator) {
+                if (locators.has(p.isolation_locator))
+                    ctx.addIssue({
+                        code: "custom",
+                        message: `credential profiles must not share isolation_locator ${p.isolation_locator}`,
+                    });
+                locators.add(p.isolation_locator);
+            }
         }
     })
-        .describe("Durable non-secret credential-profile registry; secret material lives in the vendor dir or the secret store, never in config."),
+        .describe("Durable non-secret named-binding registry; credential material may live in Claudexor-owned scoped state, a managed secret store, or a platform-declared vendor/OS-user store, never in config."),
     harnesses: z
         .record(z.string(), z
         .object({
@@ -325,16 +338,24 @@ export const GlobalConfig = z
         /**
          * ONE typed profile-selection policy (INV-135, W5.4): what happens
          * when the selected credential profile hits its vendor limit.
-         * Rotation is OPT-IN and rotates only on typed vendor-limit
-         * signals or proactive headroom breaches — never on ordinary
-         * network errors.
+         * `auto` is the stored default and resolves BY CREDENTIAL KIND at
+         * decision time (`effectiveLimitAction`): rotate for subscription
+         * (`local_session`) subjects, fail for metered API-key or unknown
+         * routes. This SUPERSEDES the earlier "rotation is opt-in" lock
+         * (CONCEPT-CHANGE(INV-135), owner decision 2026-08-17): a spent
+         * subscription window fails over by default, while explicitly
+         * persisted `fail`/`ask`/`rotate` values keep their exact meaning
+         * and are never rewritten — only the interpretation of an ABSENT
+         * key changed. Rotation still fires only on typed vendor-limit
+         * signals, proactive headroom breaches, or the structural
+         * pre-progress predicate — never on ordinary network errors.
          */
         profile_policy: z
             .object({
             limit_action: z
-                .enum(["fail", "ask", "rotate"])
-                .default("fail")
-                .describe("On a typed vendor limit: fail the attempt, surface a typed ask, or rotate to the next eligible profile."),
+                .enum(["auto", "fail", "ask", "rotate"])
+                .default("auto")
+                .describe("On a typed vendor limit: auto (kind-aware default — rotate for subscription subjects, fail for metered), fail the attempt, surface a typed ask, or rotate to the next eligible profile."),
             rotation_eligible: z
                 .array(z.string())
                 .default([])