@claudexor/schema 3.5.0 → 3.8.0

package/dist/harness.d.ts

@@ -1,4 +1,5 @@
 import { z } from "zod/v3";
+export * from "./platform-auth.js";
 export { EffortHint } from "./effort.js";
 /** Quality of a usage/quota signal a harness can emit. */
 export declare const SignalQuality: z.ZodEnum<["exact", "native", "observed", "manual", "unknown"]>;
@@ -206,58 +207,6 @@ export type KnownModelEntry = HarnessCapabilities["known_models"][number];
  * `route: null` (undecidable pre-spawn) returns only the route-UNRESTRICTED
  * ids — fail-closed, a route-scoped model never leaks past an unknown route. */
 export declare function knownModelIdsForRoute(entries: readonly KnownModelEntry[], route: "local_session" | "api_key" | null): string[];
-export declare const CredentialTransportKind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
-export type CredentialTransportKind = z.infer<typeof CredentialTransportKind>;
-export declare const CredentialRelocation: z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>;
-export type CredentialRelocation = z.infer<typeof CredentialRelocation>;
-export declare const CredentialTransport: z.ZodObject<{
-    source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
-    kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
-    relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-    kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-    relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
-}, {
-    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-    kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-    relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
-}>;
-export type CredentialTransport = z.infer<typeof CredentialTransport>;
-export declare const AuthCapabilities: z.ZodDefault<z.ZodObject<{
-    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
-    credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
-        kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
-        relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
-    }, {
-        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
-    }>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
-    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
-    credential_transports: {
-        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
-    }[];
-}, {
-    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
-    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
-    credential_transports?: {
-        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
-    }[] | undefined;
-}>>;
-export type AuthCapabilities = z.infer<typeof AuthCapabilities>;
 export declare const ReadonlyMechanism: z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>;
 export type ReadonlyMechanism = z.infer<typeof ReadonlyMechanism>;
 export declare const AccessControlCapabilities: z.ZodDefault<z.ZodObject<{
@@ -277,22 +226,51 @@ export type AccessControlCapabilities = z.infer<typeof AccessControlCapabilities
  * only WITH its consumer in the same change.
  */
 export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
-    auth: z.ZodDefault<z.ZodObject<{
+    auth: z.ZodDefault<z.ZodEffects<z.ZodObject<{
         supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
         preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
         credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
             source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
             kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
             relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+            platforms: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">>, ("darwin" | "linux" | "win32")[] | undefined, ("darwin" | "linux" | "win32")[] | undefined>;
         }, "strip", z.ZodTypeAny, {
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }, {
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }>, "many">>;
+        credential_profile_policies: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+            platforms: z.ZodEffects<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">, ("darwin" | "linux" | "win32")[], ("darwin" | "linux" | "win32")[]>;
+            identity_scope: z.ZodEnum<["profile", "os_user"]>;
+            max_enabled_profiles: z.ZodNullable<z.ZodNumber>;
+            cleanup_owner: z.ZodEnum<["claudexor", "vendor"]>;
+        }, "strict", z.ZodTypeAny, {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }, {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }>, "many">>;
+        managed_login: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            stdin: z.ZodEnum<["none", "pipe", "terminal"]>;
+        }, "strict", z.ZodTypeAny, {
+            stdin: "none" | "pipe" | "terminal";
+        }, {
+            stdin: "none" | "pipe" | "terminal";
+        }>>>;
     }, "strip", z.ZodTypeAny, {
         supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
         preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
@@ -300,7 +278,56 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+        }[];
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
+    }, {
+        supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+        preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+        credential_transports?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+            relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+        }[] | undefined;
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
+    }>, {
+        supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+        preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+        credential_transports: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+            relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }[];
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
     }, {
         supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
         preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
@@ -308,7 +335,18 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+        }[] | undefined;
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
         }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
     }>>;
     access_control: z.ZodDefault<z.ZodObject<{
         readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
@@ -370,7 +408,18 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }[];
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
     };
     access_control: {
         readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
@@ -395,7 +444,18 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }[] | undefined;
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
     } | undefined;
     access_control?: {
         readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
@@ -447,22 +507,51 @@ export declare const HarnessManifest: z.ZodObject<{
     adapter_version: z.ZodOptional<z.ZodString>;
     provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
     capability_profile: z.ZodDefault<z.ZodObject<{
-        auth: z.ZodDefault<z.ZodObject<{
+        auth: z.ZodDefault<z.ZodEffects<z.ZodObject<{
             supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
             preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
             credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
                 kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
                 relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+                platforms: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">>, ("darwin" | "linux" | "win32")[] | undefined, ("darwin" | "linux" | "win32")[] | undefined>;
             }, "strip", z.ZodTypeAny, {
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }, {
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }>, "many">>;
+            credential_profile_policies: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                platforms: z.ZodEffects<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">, ("darwin" | "linux" | "win32")[], ("darwin" | "linux" | "win32")[]>;
+                identity_scope: z.ZodEnum<["profile", "os_user"]>;
+                max_enabled_profiles: z.ZodNullable<z.ZodNumber>;
+                cleanup_owner: z.ZodEnum<["claudexor", "vendor"]>;
+            }, "strict", z.ZodTypeAny, {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }, {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }>, "many">>;
+            managed_login: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                stdin: z.ZodEnum<["none", "pipe", "terminal"]>;
+            }, "strict", z.ZodTypeAny, {
+                stdin: "none" | "pipe" | "terminal";
+            }, {
+                stdin: "none" | "pipe" | "terminal";
+            }>>>;
         }, "strip", z.ZodTypeAny, {
             supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
             preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
@@ -470,7 +559,18 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }[];
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         }, {
             supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
             preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
@@ -478,7 +578,56 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+            }[] | undefined;
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
             }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
+        }>, {
+            supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+            preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+            credential_transports: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+            }[];
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
+        }, {
+            supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+            preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+            credential_transports?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+            }[] | undefined;
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         }>>;
         access_control: z.ZodDefault<z.ZodObject<{
             readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
@@ -540,7 +689,18 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }[];
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         };
         access_control: {
             readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
@@ -565,7 +725,18 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }[] | undefined;
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         } | undefined;
         access_control?: {
             readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
@@ -774,7 +945,18 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }[];
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         };
         access_control: {
             readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
@@ -838,7 +1020,18 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+            }[] | undefined;
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
             }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         } | undefined;
         access_control?: {
             readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
@@ -1869,7 +2062,7 @@ export declare const HarnessEvent: z.ZodObject<{
     credential_profile_id: z.ZodOptional<z.ZodString>;
     /** Vendor-owned quota windows. All reported windows remain independent. */
     quota: z.ZodOptional<z.ZodObject<{
-        source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage"]>;
+        source: z.ZodEnum<["codex_app_server", "codex_rollout", "claude_statusline", "claude_api_retry", "claude_oauth_usage", "agy_command_usage", "cursor_rate_limit"]>;
         plan_label: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         subject_id: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         constraints: z.ZodArray<z.ZodObject<{
@@ -1901,7 +2094,7 @@ export declare const HarnessEvent: z.ZodObject<{
             cooldown_until?: string | null | undefined;
         }>, "many">;
     }, "strict", z.ZodTypeAny, {
-        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
         plan_label: string | null;
         subject_id: string | null;
         constraints: {
@@ -1915,7 +2108,7 @@ export declare const HarnessEvent: z.ZodObject<{
             cooldown_until: string | null;
         }[];
     }, {
-        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
         plan_label?: string | null | undefined;
         subject_id?: string | null | undefined;
         constraints: {
@@ -2114,7 +2307,7 @@ export declare const HarnessEvent: z.ZodObject<{
     credential_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | undefined;
     credential_profile_id?: string | undefined;
     quota?: {
-        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
         plan_label: string | null;
         subject_id: string | null;
         constraints: {
@@ -2217,7 +2410,7 @@ export declare const HarnessEvent: z.ZodObject<{
     credential_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | undefined;
     credential_profile_id?: string | undefined;
     quota?: {
-        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout";
+        source: "agy_command_usage" | "claude_api_retry" | "claude_oauth_usage" | "claude_statusline" | "codex_app_server" | "codex_rollout" | "cursor_rate_limit";
         plan_label?: string | null | undefined;
         subject_id?: string | null | undefined;
         constraints: {

package/dist/harness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAwB3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,0DAA0D;AAC1D,eAAO,MAAM,aAAa,iEAIvB,CAAC;AACJ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAK1D,eAAO,MAAM,WAAW,gDAE2E,CAAC;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,wDAI1B,CAAC;AACJ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;;;;;;IAkB5B,8EAA8E;;;;IAU9E;;;;OAIG;;;IAQH,iEAAiE;;IAKjE,mFAAmF;;IAOnF;;;;OAIG;;IAOH;;;;;OAKG;;IAOH;;;;;;;;;;;OAWG;;IAOH;;;;;;;;;OASG;;IAOH;;;;;OAKG;;IAOH;;;;;;OAMG;;;;;;;;;;;IAOH;;;;;OAKG;;IAQH;;;;;;;;OAQG;;;QAQO;sDAC8C;;;;;;;;;IAaxD;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWJ,CAAC;AACJ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E;;;gFAGgF;AAChF,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,KAAK,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,GACxC,MAAM,EAAE,CAMV;AAED,eAAO,MAAM,uBAAuB,gGAIjC,CAAC;AACJ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,eAAO,MAAM,oBAAoB,kDAI9B,CAAC;AACJ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAS4D,CAAC;AAC7F,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAe4B,CAAC;AAC1D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,iBAAiB,wEAI3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,yBAAyB;;;;;;GAKqB,CAAC;AAC5D,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAKjC,qFAAqF;;;;;;;;;;;;;;;;;;;;IAErF;;;;;;;OAOG;;IAOH;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAWJ,CAAC;AACJ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;IAerB;wDACoD;;;;;;;;;;;;EASrD,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAvExB,qFAAqF;;;;;;;;;;;;;;;;;;;;QAErF;;;;;;;WAOG;;QAOH;;;;;;;WAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyDH,yFAAyF;;;;;;;QA1VzF,8EAA8E;;;;QAU9E;;;;WAIG;;;QAQH,iEAAiE;;QAKjE,mFAAmF;;QAOnF;;;;WAIG;;QAOH;;;;;WAKG;;QAOH;;;;;;;;;;;WAWG;;QAOH;;;;;;;;;WASG;;QAOH;;;;;WAKG;;QAOH;;;;;;WAMG;;;;;;;;;;;QAOH;;;;;WAKG;;QAQH;;;;;;;;WAQG;;;YAQO;0DAC8C;;;;;;;;;QAaxD;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoMJ,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,8DAA8D;AAC9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;EAYyC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,aAAa,8CAIvB,CAAC;AACJ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuB3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,eAAe;;;;;;;;;EAkBzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,sFAAsF;AACtF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;EAyBxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,gDAAgD;AAChD,eAAO,MAAM,cAAc;;;;IAKvB;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;IAkCH;;;OAGG;;IAEH;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAMH;;;OAGG;;IAMH;;;;OAIG;;;IAaH;;;;;;OAMG;;;IAWH;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;IAOH;;;;OAIG;;;;;;;;;;;IAIH;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;IAKH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAUH;gFAC4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAa7E,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;EASuC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,mBAAmB;;;IAI5B,kEAAkE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYL,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;QApB3B,kEAAkE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA2BlE,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOc,CAAC;AACvF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAU+B,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKmD,CAAC;AACrF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,8EAA8E;AAC9E,eAAO,MAAM,YAAY;;;;;IAwBrB;;;;;OAKG;;IAOH,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEpE,6CAA6C;;;;;;YAjG7C,kEAAkE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA2BlE,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA8FhE,gFAAgF;;;;;;;;;;;;;;;;;;IAepF;;6EAEyE;;IAIzE,2EAA2E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAa3E;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAoBH;;;;;OAKG;;;;;;;;;;;;;;;;;IAIH;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;IAsCH;;;;OAIG;;;;;;;;;;;IAmBH;;;;;;;;;OASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0D+E,CAAC;AACvF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAwB3B,cAAc,oBAAoB,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,0DAA0D;AAC1D,eAAO,MAAM,aAAa,iEAIvB,CAAC;AACJ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAK1D,eAAO,MAAM,WAAW,gDAE2E,CAAC;AACpG,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,wDAI1B,CAAC;AACJ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;;;;;;IAkB5B,8EAA8E;;;;IAU9E;;;;OAIG;;;IAQH,iEAAiE;;IAKjE,mFAAmF;;IAOnF;;;;OAIG;;IAOH;;;;;OAKG;;IAOH;;;;;;;;;;;OAWG;;IAOH;;;;;;;;;OASG;;IAOH;;;;;OAKG;;IAOH;;;;;;OAMG;;;;;;;;;;;IAOH;;;;;OAKG;;IAQH;;;;;;;;OAQG;;;QAQO;sDAC8C;;;;;;;;;IAaxD;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWJ,CAAC;AACJ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E;;;gFAGgF;AAChF,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,KAAK,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,GACxC,MAAM,EAAE,CAMV;AAED,eAAO,MAAM,iBAAiB,wEAI3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,yBAAyB;;;;;;GAKqB,CAAC;AAC5D,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAKjC,qFAAqF;;;;;;;;;;;;;;;;;;;;IAErF;;;;;;;OAOG;;IAOH;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAWJ,CAAC;AACJ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;IAerB;wDACoD;;;;;;;;;;;;EASrD,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAvExB,qFAAqF;;;;;;;;;;;;;;;;;;;;QAErF;;;;;;;WAOG;;QAOH;;;;;;;WAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyDH,yFAAyF;;;;;;;QA9SzF,8EAA8E;;;;QAU9E;;;;WAIG;;;QAQH,iEAAiE;;QAKjE,mFAAmF;;QAOnF;;;;WAIG;;QAOH;;;;;WAKG;;QAOH;;;;;;;;;;;WAWG;;QAOH;;;;;;;;;WASG;;QAOH;;;;;WAKG;;QAOH;;;;;;WAMG;;;;;;;;;;;QAOH;;;;;WAKG;;QAQH;;;;;;;;WAQG;;;YAQO;0DAC8C;;;;;;;;;QAaxD;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwJJ,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,8DAA8D;AAC9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;EAYyC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,aAAa,8CAIvB,CAAC;AACJ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuB3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,eAAe;;;;;;;;;EAkBzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,sFAAsF;AACtF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;EAyBxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,gDAAgD;AAChD,eAAO,MAAM,cAAc;;;;IAKvB;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;IAkCH;;;OAGG;;IAEH;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAMH;;;OAGG;;IAMH;;;;OAIG;;;IAaH;;;;;;OAMG;;;IAWH;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;IAOH;;;;OAIG;;;;;;;;;;;IAIH;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;IAKH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAUH;gFAC4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAa7E,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;EASuC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,mBAAmB;;;IAI5B,kEAAkE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYL,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;QApB3B,kEAAkE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA2BlE,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOc,CAAC;AACvF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAU+B,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKmD,CAAC;AACrF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,8EAA8E;AAC9E,eAAO,MAAM,YAAY;;;;;IAwBrB;;;;;OAKG;;IAOH,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEpE,6CAA6C;;;;;;YAjG7C,kEAAkE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA2BlE,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA8FhE,gFAAgF;;;;;;;;;;;;;;;;;;IAepF;;6EAEyE;;IAIzE,2EAA2E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAa3E;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAoBH;;;;;OAKG;;;;;;;;;;;;;;;;;IAIH;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;IAsCH;;;;OAIG;;;;;;;;;;;IAmBH;;;;;;;;;OASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0D+E,CAAC;AACvF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/harness.js

@@ -9,6 +9,8 @@ import { ImplementationTransport, RawContextPacket, RawGitPatchEnvelope, RawPatc
 import { QuotaConstraint, QuotaSource } from "./quota.js";
 import { RateLimitSignal } from "./rate-limit.js";
 import { EffortHint, ModelEffortCapability } from "./effort.js";
+import { AuthCapabilities } from "./platform-auth.js";
+export * from "./platform-auth.js";
 // Re-exported so sibling contract modules keep one import path for the type.
 export { EffortHint } from "./effort.js";
 /** Quality of a usage/quota signal a harness can emit. */
@@ -217,38 +219,6 @@ export function knownModelIdsForRoute(entries, route) {
         .filter((entry) => typeof entry === "string" ? true : route !== null && entry.routes.includes(route))
         .map((entry) => (typeof entry === "string" ? entry : entry.id));
 }
-export const CredentialTransportKind = z
-    .enum(["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"])
-    .describe("Mechanism that carries a credential to the harness process (config file, env var, OAuth token env, OS keychain, HTTP header, or none).");
-export const CredentialRelocation = z
-    .enum(["HOME", "CONFIG_DIR", "ENV", "none"])
-    .describe("Which relocation lever moves the credential into a scoped environment (HOME, a config dir override, env injection, or none).");
-export const CredentialTransport = z
-    .object({
-    source: AuthSourceKind,
-    kind: CredentialTransportKind,
-    relocatable_by: z
-        .array(CredentialRelocation)
-        .default([])
-        .describe("Relocation levers that can move this transport into a scoped environment."),
-})
-    .describe("How a credential from one auth source physically reaches the harness process.");
-export const AuthCapabilities = z
-    .object({
-    supported_sources: z
-        .array(AuthSourceKind)
-        .default([])
-        .describe("Auth sources this harness supports."),
-    preferred_source: AuthSourceKind.nullable()
-        .default(null)
-        .describe("Auth source the adapter prefers; null when it has no preference."),
-    credential_transports: z
-        .array(CredentialTransport)
-        .default([])
-        .describe("Declared credential transports per auth source."),
-})
-    .default({})
-    .describe("Declared auth routing facts for a harness.");
 export const ReadonlyMechanism = z
     .enum(["fs_sandbox", "permission_deny", "tool_allowlist", "none"])
     .describe("How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).");