@claudexor/schema 3.6.0 → 3.8.1

package/dist/harness.d.ts

@@ -1,4 +1,5 @@
 import { z } from "zod/v3";
+export * from "./platform-auth.js";
 export { EffortHint } from "./effort.js";
 /** Quality of a usage/quota signal a harness can emit. */
 export declare const SignalQuality: z.ZodEnum<["exact", "native", "observed", "manual", "unknown"]>;
@@ -206,58 +207,6 @@ export type KnownModelEntry = HarnessCapabilities["known_models"][number];
  * `route: null` (undecidable pre-spawn) returns only the route-UNRESTRICTED
  * ids — fail-closed, a route-scoped model never leaks past an unknown route. */
 export declare function knownModelIdsForRoute(entries: readonly KnownModelEntry[], route: "local_session" | "api_key" | null): string[];
-export declare const CredentialTransportKind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
-export type CredentialTransportKind = z.infer<typeof CredentialTransportKind>;
-export declare const CredentialRelocation: z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>;
-export type CredentialRelocation = z.infer<typeof CredentialRelocation>;
-export declare const CredentialTransport: z.ZodObject<{
-    source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
-    kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
-    relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-    kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-    relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
-}, {
-    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-    kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-    relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
-}>;
-export type CredentialTransport = z.infer<typeof CredentialTransport>;
-export declare const AuthCapabilities: z.ZodDefault<z.ZodObject<{
-    supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
-    preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
-    credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
-        kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
-        relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
-    }, {
-        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
-    }>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
-    preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
-    credential_transports: {
-        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-        relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
-    }[];
-}, {
-    supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
-    preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
-    credential_transports?: {
-        source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
-        kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
-        relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
-    }[] | undefined;
-}>>;
-export type AuthCapabilities = z.infer<typeof AuthCapabilities>;
 export declare const ReadonlyMechanism: z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>;
 export type ReadonlyMechanism = z.infer<typeof ReadonlyMechanism>;
 export declare const AccessControlCapabilities: z.ZodDefault<z.ZodObject<{
@@ -277,22 +226,51 @@ export type AccessControlCapabilities = z.infer<typeof AccessControlCapabilities
  * only WITH its consumer in the same change.
  */
 export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
-    auth: z.ZodDefault<z.ZodObject<{
+    auth: z.ZodDefault<z.ZodEffects<z.ZodObject<{
         supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
         preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
         credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
             source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
             kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
             relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+            platforms: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">>, ("darwin" | "linux" | "win32")[] | undefined, ("darwin" | "linux" | "win32")[] | undefined>;
         }, "strip", z.ZodTypeAny, {
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }, {
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+        }>, "many">>;
+        credential_profile_policies: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+            platforms: z.ZodEffects<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">, ("darwin" | "linux" | "win32")[], ("darwin" | "linux" | "win32")[]>;
+            identity_scope: z.ZodEnum<["profile", "os_user"]>;
+            max_enabled_profiles: z.ZodNullable<z.ZodNumber>;
+            cleanup_owner: z.ZodEnum<["claudexor", "vendor"]>;
+        }, "strict", z.ZodTypeAny, {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }, {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
         }>, "many">>;
+        managed_login: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            stdin: z.ZodEnum<["none", "pipe", "terminal"]>;
+        }, "strict", z.ZodTypeAny, {
+            stdin: "none" | "pipe" | "terminal";
+        }, {
+            stdin: "none" | "pipe" | "terminal";
+        }>>>;
     }, "strip", z.ZodTypeAny, {
         supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
         preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
@@ -300,7 +278,56 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+        }[];
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
+    }, {
+        supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+        preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+        credential_transports?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+            relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+        }[] | undefined;
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
+    }>, {
+        supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+        preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+        credential_transports: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+            relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }[];
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
     }, {
         supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
         preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
@@ -308,7 +335,18 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }[] | undefined;
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
     }>>;
     access_control: z.ZodDefault<z.ZodObject<{
         readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
@@ -318,11 +356,11 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
     }>>;
     isolation: z.ZodDefault<z.ZodObject<{
-        supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+        supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+        supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
     }, {
-        supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+        supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
     }>>;
     /** Every accepted media class has a finite MIME/size/count/transport declaration. */
     attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -370,13 +408,24 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }[];
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
     };
     access_control: {
         readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
     };
     isolation: {
-        supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+        supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
     };
     attachment_inputs: {
         kind: "file" | "image";
@@ -395,13 +444,24 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
             source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
             kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
             relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+            platforms?: ("darwin" | "linux" | "win32")[] | undefined;
         }[] | undefined;
+        credential_profile_policies?: {
+            source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+            platforms: ("darwin" | "linux" | "win32")[];
+            identity_scope: "os_user" | "profile";
+            max_enabled_profiles: number | null;
+            cleanup_owner: "claudexor" | "vendor";
+        }[] | undefined;
+        managed_login?: {
+            stdin: "none" | "pipe" | "terminal";
+        } | null | undefined;
     } | undefined;
     access_control?: {
         readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
     } | undefined;
     isolation?: {
-        supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+        supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
     } | undefined;
     attachment_inputs?: {
         kind: "file" | "image";
@@ -447,22 +507,51 @@ export declare const HarnessManifest: z.ZodObject<{
     adapter_version: z.ZodOptional<z.ZodString>;
     provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
     capability_profile: z.ZodDefault<z.ZodObject<{
-        auth: z.ZodDefault<z.ZodObject<{
+        auth: z.ZodDefault<z.ZodEffects<z.ZodObject<{
             supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
             preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
             credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
                 kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
                 relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+                platforms: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">>, ("darwin" | "linux" | "win32")[] | undefined, ("darwin" | "linux" | "win32")[] | undefined>;
             }, "strip", z.ZodTypeAny, {
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }, {
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+            }>, "many">>;
+            credential_profile_policies: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                platforms: z.ZodEffects<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">, ("darwin" | "linux" | "win32")[], ("darwin" | "linux" | "win32")[]>;
+                identity_scope: z.ZodEnum<["profile", "os_user"]>;
+                max_enabled_profiles: z.ZodNullable<z.ZodNumber>;
+                cleanup_owner: z.ZodEnum<["claudexor", "vendor"]>;
+            }, "strict", z.ZodTypeAny, {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }, {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
             }>, "many">>;
+            managed_login: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                stdin: z.ZodEnum<["none", "pipe", "terminal"]>;
+            }, "strict", z.ZodTypeAny, {
+                stdin: "none" | "pipe" | "terminal";
+            }, {
+                stdin: "none" | "pipe" | "terminal";
+            }>>>;
         }, "strip", z.ZodTypeAny, {
             supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
             preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
@@ -470,7 +559,18 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }[];
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         }, {
             supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
             preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
@@ -478,7 +578,56 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+            }[] | undefined;
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
+        }>, {
+            supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+            preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+            credential_transports: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+            }[];
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
             }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
+        }, {
+            supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+            preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+            credential_transports?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+            }[] | undefined;
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         }>>;
         access_control: z.ZodDefault<z.ZodObject<{
             readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
@@ -488,11 +637,11 @@ export declare const HarnessManifest: z.ZodObject<{
             readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
         }>>;
         isolation: z.ZodDefault<z.ZodObject<{
-            supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+            supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
         }, "strip", z.ZodTypeAny, {
-            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
         }, {
-            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
         }>>;
         /** Every accepted media class has a finite MIME/size/count/transport declaration. */
         attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -540,13 +689,24 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }[];
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         };
         access_control: {
             readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
         };
         isolation: {
-            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
         };
         attachment_inputs: {
             kind: "file" | "image";
@@ -565,13 +725,24 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }[] | undefined;
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         } | undefined;
         access_control?: {
             readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
         } | undefined;
         isolation?: {
-            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
         } | undefined;
         attachment_inputs?: {
             kind: "file" | "image";
@@ -758,7 +929,7 @@ export declare const HarnessManifest: z.ZodObject<{
         known_models_verified_against?: string | null | undefined;
     }>;
     auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
-    access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
+    access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
     id: string;
     display_name: string;
@@ -774,13 +945,24 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
             }[];
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
+            }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         };
         access_control: {
             readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
         };
         isolation: {
-            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
         };
         attachment_inputs: {
             kind: "file" | "image";
@@ -822,7 +1004,7 @@ export declare const HarnessManifest: z.ZodObject<{
         known_models_verified_against: string | null;
     };
     auth_modes: ("api_key" | "local_session" | "none")[];
-    access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+    access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
 }, {
     id: string;
     display_name: string;
@@ -838,13 +1020,24 @@ export declare const HarnessManifest: z.ZodObject<{
                 source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                 kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                 relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+            }[] | undefined;
+            credential_profile_policies?: {
+                source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                platforms: ("darwin" | "linux" | "win32")[];
+                identity_scope: "os_user" | "profile";
+                max_enabled_profiles: number | null;
+                cleanup_owner: "claudexor" | "vendor";
             }[] | undefined;
+            managed_login?: {
+                stdin: "none" | "pipe" | "terminal";
+            } | null | undefined;
         } | undefined;
         access_control?: {
             readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
         } | undefined;
         isolation?: {
-            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
         } | undefined;
         attachment_inputs?: {
             kind: "file" | "image";
@@ -886,7 +1079,7 @@ export declare const HarnessManifest: z.ZodObject<{
         known_models_verified_against?: string | null | undefined;
     };
     auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
-    access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+    access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
 }>;
 export type HarnessManifest = z.infer<typeof HarnessManifest>;
 /** Result of a conformance probe for one capability check. */
@@ -1031,7 +1224,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
      */
     instructions: z.ZodOptional<z.ZodString>;
     cwd: z.ZodString;
-    access: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+    access: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>;
     external_context_policy: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
     tool_permission_policy: z.ZodDefault<z.ZodObject<{
         web: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
@@ -1324,24 +1517,6 @@ export declare const HarnessRunSpec: z.ZodObject<{
         }[];
         evidence_refs: string[];
     }>>>;
-    /** The APPLIED OS boundary this process starts inside; null = none (every
-     * ordinary run). Consumed by the shared CLI run loop, never by adapters. */
-    confinement: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-        mechanism: z.ZodString;
-        profile: z.ZodString;
-        profile_digest: z.ZodString;
-        verified_denied_path: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        mechanism: string;
-        profile: string;
-        profile_digest: string;
-        verified_denied_path: string;
-    }, {
-        mechanism: string;
-        profile: string;
-        profile_digest: string;
-        verified_denied_path: string;
-    }>>>;
     extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
     session_id: string;
@@ -1349,7 +1524,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
     prompt: string;
     instructions?: string | undefined;
     cwd: string;
-    access: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
+    access: "full" | "inherit_native" | "readonly" | "workspace_write";
     external_context_policy: "auto" | "cached" | "live" | "off";
     tool_permission_policy: {
         web: "auto" | "cached" | "live" | "off";
@@ -1425,12 +1600,6 @@ export declare const HarnessRunSpec: z.ZodObject<{
         }[];
         evidence_refs: string[];
     } | null | undefined;
-    confinement: {
-        mechanism: string;
-        profile: string;
-        profile_digest: string;
-        verified_denied_path: string;
-    } | null;
     extra: Record<string, unknown>;
 }, {
     session_id: string;
@@ -1438,7 +1607,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
     prompt: string;
     instructions?: string | undefined;
     cwd: string;
-    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
     external_context_policy?: "auto" | "cached" | "live" | "off" | undefined;
     tool_permission_policy?: {
         web?: "auto" | "cached" | "live" | "off" | undefined;
@@ -1514,12 +1683,6 @@ export declare const HarnessRunSpec: z.ZodObject<{
         }[];
         evidence_refs: string[];
     } | null | undefined;
-    confinement?: {
-        mechanism: string;
-        profile: string;
-        profile_digest: string;
-        verified_denied_path: string;
-    } | null | undefined;
     extra?: Record<string, unknown> | undefined;
 }>;
 export type HarnessRunSpec = z.infer<typeof HarnessRunSpec>;