@claudexor/schema 3.6.0 → 3.8.1

package/dist/readiness.d.ts

@@ -1,4 +1,13 @@
 import { z } from "zod/v3";
+/** Effective host login flow a thin client may request for one harness. */
+export declare const SetupLoginCapability: z.ZodObject<{
+    mode: z.ZodEnum<["in_app", "external_terminal"]>;
+}, "strict", z.ZodTypeAny, {
+    mode: "external_terminal" | "in_app";
+}, {
+    mode: "external_terminal" | "in_app";
+}>;
+export type SetupLoginCapability = z.infer<typeof SetupLoginCapability>;
 /**
  * ONE display-ready readiness check (W4.7 sol #18): the daemon normalizes raw
  * doctor probes, auth-source readiness, and the configured-model verdict into
@@ -38,22 +47,51 @@ export declare const HarnessStatusDto: z.ZodObject<{
         adapter_version: z.ZodOptional<z.ZodString>;
         provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
         capability_profile: z.ZodDefault<z.ZodObject<{
-            auth: z.ZodDefault<z.ZodObject<{
+            auth: z.ZodDefault<z.ZodEffects<z.ZodObject<{
                 supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
                 preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
                 credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
                     source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
                     kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
                     relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
+                    platforms: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">>, ("darwin" | "linux" | "win32")[] | undefined, ("darwin" | "linux" | "win32")[] | undefined>;
                 }, "strip", z.ZodTypeAny, {
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
                 }, {
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+                }>, "many">>;
+                credential_profile_policies: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
+                    platforms: z.ZodEffects<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">, ("darwin" | "linux" | "win32")[], ("darwin" | "linux" | "win32")[]>;
+                    identity_scope: z.ZodEnum<["profile", "os_user"]>;
+                    max_enabled_profiles: z.ZodNullable<z.ZodNumber>;
+                    cleanup_owner: z.ZodEnum<["claudexor", "vendor"]>;
+                }, "strict", z.ZodTypeAny, {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
+                }, {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
                 }>, "many">>;
+                managed_login: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                    stdin: z.ZodEnum<["none", "pipe", "terminal"]>;
+                }, "strict", z.ZodTypeAny, {
+                    stdin: "none" | "pipe" | "terminal";
+                }, {
+                    stdin: "none" | "pipe" | "terminal";
+                }>>>;
             }, "strip", z.ZodTypeAny, {
                 supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
                 preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
@@ -61,7 +99,56 @@ export declare const HarnessStatusDto: z.ZodObject<{
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+                }[];
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
+                }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
+            }, {
+                supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
+                preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
+                credential_transports?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                    relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+                }[] | undefined;
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
+                }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
+            }>, {
+                supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
+                preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
+                credential_transports: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
+                    relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
                 }[];
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
+                }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
             }, {
                 supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
                 preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
@@ -69,7 +156,18 @@ export declare const HarnessStatusDto: z.ZodObject<{
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+                }[] | undefined;
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
                 }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
             }>>;
             access_control: z.ZodDefault<z.ZodObject<{
                 readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
@@ -79,11 +177,11 @@ export declare const HarnessStatusDto: z.ZodObject<{
                 readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
             }>>;
             isolation: z.ZodDefault<z.ZodObject<{
-                supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+                supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
             }, "strip", z.ZodTypeAny, {
-                supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
             }, {
-                supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
             }>>;
             attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 kind: z.ZodEnum<["image", "file"]>;
@@ -114,13 +212,24 @@ export declare const HarnessStatusDto: z.ZodObject<{
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
                 }[];
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
+                }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
             };
             access_control: {
                 readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
             };
             isolation: {
-                supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
             };
             attachment_inputs: {
                 kind: "file" | "image";
@@ -139,13 +248,24 @@ export declare const HarnessStatusDto: z.ZodObject<{
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
                 }[] | undefined;
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
+                }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
             } | undefined;
             access_control?: {
                 readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
             } | undefined;
             isolation?: {
-                supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
             } | undefined;
             attachment_inputs?: {
                 kind: "file" | "image";
@@ -255,7 +375,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             known_models_verified_against?: string | null | undefined;
         }>;
         auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
-        access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
+        access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">>;
     }, "strip", z.ZodTypeAny, {
         id: string;
         display_name: string;
@@ -271,13 +391,24 @@ export declare const HarnessStatusDto: z.ZodObject<{
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
                 }[];
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
+                }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
             };
             access_control: {
                 readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
             };
             isolation: {
-                supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
             };
             attachment_inputs: {
                 kind: "file" | "image";
@@ -319,7 +450,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             known_models_verified_against: string | null;
         };
         auth_modes: ("api_key" | "local_session" | "none")[];
-        access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+        access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
     }, {
         id: string;
         display_name: string;
@@ -335,13 +466,24 @@ export declare const HarnessStatusDto: z.ZodObject<{
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
+                }[] | undefined;
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
                 }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
             } | undefined;
             access_control?: {
                 readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
             } | undefined;
             isolation?: {
-                supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
             } | undefined;
             attachment_inputs?: {
                 kind: "file" | "image";
@@ -383,7 +525,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             known_models_verified_against?: string | null | undefined;
         };
         auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
-        access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+        access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
     }>>>;
     enabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     /** Intents this harness is ACTUALLY routable for right now: enabledIntents
@@ -487,6 +629,13 @@ export declare const HarnessStatusDto: z.ZodObject<{
         remediation?: string | null | undefined;
         requiresFullAccess?: boolean | undefined;
     }>>>;
+    setupLogin: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        mode: z.ZodEnum<["in_app", "external_terminal"]>;
+    }, "strict", z.ZodTypeAny, {
+        mode: "external_terminal" | "in_app";
+    }, {
+        mode: "external_terminal" | "in_app";
+    }>>>;
 }, "strip", z.ZodTypeAny, {
     id: string;
     status: "degraded" | "ok" | "unavailable";
@@ -505,13 +654,24 @@ export declare const HarnessStatusDto: z.ZodObject<{
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
                 }[];
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
+                }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
             };
             access_control: {
                 readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
             };
             isolation: {
-                supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+                supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
             };
             attachment_inputs: {
                 kind: "file" | "image";
@@ -553,7 +713,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             known_models_verified_against: string | null;
         };
         auth_modes: ("api_key" | "local_session" | "none")[];
-        access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+        access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
     } | null | undefined;
     enabledIntents: string[];
     routableIntents: string[];
@@ -589,6 +749,9 @@ export declare const HarnessStatusDto: z.ZodObject<{
         remediation: string | null;
         requiresFullAccess: boolean;
     } | null;
+    setupLogin?: {
+        mode: "external_terminal" | "in_app";
+    } | null | undefined;
 }, {
     id: string;
     status: "degraded" | "ok" | "unavailable";
@@ -607,13 +770,24 @@ export declare const HarnessStatusDto: z.ZodObject<{
                     source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
                     kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
                     relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
+                    platforms?: ("darwin" | "linux" | "win32")[] | undefined;
                 }[] | undefined;
+                credential_profile_policies?: {
+                    source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
+                    platforms: ("darwin" | "linux" | "win32")[];
+                    identity_scope: "os_user" | "profile";
+                    max_enabled_profiles: number | null;
+                    cleanup_owner: "claudexor" | "vendor";
+                }[] | undefined;
+                managed_login?: {
+                    stdin: "none" | "pipe" | "terminal";
+                } | null | undefined;
             } | undefined;
             access_control?: {
                 readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
             } | undefined;
             isolation?: {
-                supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+                supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
             } | undefined;
             attachment_inputs?: {
                 kind: "file" | "image";
@@ -655,7 +829,7 @@ export declare const HarnessStatusDto: z.ZodObject<{
             known_models_verified_against?: string | null | undefined;
         };
         auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
-        access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+        access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
     } | null | undefined;
     enabledIntents?: string[] | undefined;
     routableIntents?: string[] | undefined;
@@ -691,6 +865,9 @@ export declare const HarnessStatusDto: z.ZodObject<{
         remediation?: string | null | undefined;
         requiresFullAccess?: boolean | undefined;
     } | null | undefined;
+    setupLogin?: {
+        mode: "external_terminal" | "in_app";
+    } | null | undefined;
 }>;
 export type HarnessStatusDto = z.infer<typeof HarnessStatusDto>;
 //# sourceMappingURL=readiness.d.ts.map

package/dist/readiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAK3B;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;EAgB2C,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAWzB;;;yEAGqE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmBrE;2EACuE;;;;;;;;;;;;;;;;;;;;IAKvE,+DAA+D;;IAM/D;;qDAEiD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBlD,CAAC;AACJ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAK3B,2EAA2E;AAC3E,eAAO,MAAM,oBAAoB;;;;;;EAS8C,CAAC;AAChF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;EAgB2C,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAWzB;;;yEAGqE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmBrE;2EACuE;;;;;;;;;;;;;;;;;;;;IAKvE,+DAA+D;;IAM/D;;qDAEiD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BlD,CAAC;AACJ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/readiness.js

@@ -2,6 +2,15 @@ import { z } from "zod/v3";
 import { AdapterStatus, ConformanceCheck, HarnessManifest } from "./harness.js";
 import { AuthSourceReadiness } from "./auth.js";
 import { DelegationCapability } from "./delegation.js";
+/** Effective host login flow a thin client may request for one harness. */
+export const SetupLoginCapability = z
+    .object({
+    mode: z
+        .enum(["in_app", "external_terminal"])
+        .describe("in_app requests the daemon-hosted login flow; external_terminal requests the existing client PTY flow."),
+})
+    .strict()
+    .describe("Effective setup-login flow for this harness on the current host.");
 /**
  * ONE display-ready readiness check (W4.7 sol #18): the daemon normalizes raw
  * doctor probes, auth-source readiness, and the configured-model verdict into
@@ -86,6 +95,9 @@ export const HarnessStatusDto = z
     delegation: DelegationCapability.nullable()
         .default(null)
         .describe("Engine-owned Delegate capability for this harness and installed runtime; null on legacy status rows."),
+    setupLogin: SetupLoginCapability.nullable()
+        .optional()
+        .describe("Effective setup-login flow for this harness on the current host; current producers emit null or an object, while omission identifies a legacy row."),
 })
     .describe("Doctor-backed status row for one harness: status, intents, checks, and configured-model validity.");
 //# sourceMappingURL=readiness.js.map

package/dist/readiness.js.map

@@ -1 +1 @@
-{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC5F,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;SACnD,QAAQ,CACP,+IAA+I,CAChJ;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC9F,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,QAAQ,CAAC,4DAA4D,CAAC,CAAC;AAG1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACtC,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;SACjC,QAAQ,EAAE;SACV,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,iDAAiD,CAAC;IAC9D;;;yEAGqE;IACrE,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,sJAAsJ,CACvJ;IACH,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACzF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC/E,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,yDAAyD,CAAC;IACtE,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,mBAAmB,CAAC;SAC1B,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,oGAAoG,CACrG;IACH;2EACuE;IACvE,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,iBAAiB,CAAC;SACxB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,0EAA0E,CAAC;IACvF,+DAA+D;IAC/D,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,0DAA0D,CAAC;IACvE;;qDAEiD;IACjD,oBAAoB,EAAE,CAAC;SACpB,MAAM,CAAC;QACN,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;aACxB,QAAQ,CAAC,oEAAoE,CAAC;QACjF,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,8CAA8C,CAAC;KAC5D,CAAC;SACD,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,UAAU,EAAE,oBAAoB,CAAC,QAAQ,EAAE;SACxC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,sGAAsG,CACvG;CACJ,CAAC;KACD,QAAQ,CACP,mGAAmG,CACpG,CAAC"}
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;SACrC,QAAQ,CACP,wGAAwG,CACzG;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,kEAAkE,CAAC,CAAC;AAGhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC5F,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;SACnD,QAAQ,CACP,+IAA+I,CAChJ;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC9F,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,QAAQ,CAAC,4DAA4D,CAAC,CAAC;AAG1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACtC,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;SACjC,QAAQ,EAAE;SACV,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,iDAAiD,CAAC;IAC9D;;;yEAGqE;IACrE,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,sJAAsJ,CACvJ;IACH,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACzF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC/E,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,yDAAyD,CAAC;IACtE,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,mBAAmB,CAAC;SAC1B,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,oGAAoG,CACrG;IACH;2EACuE;IACvE,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,iBAAiB,CAAC;SACxB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,0EAA0E,CAAC;IACvF,+DAA+D;IAC/D,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,0DAA0D,CAAC;IACvE;;qDAEiD;IACjD,oBAAoB,EAAE,CAAC;SACpB,MAAM,CAAC;QACN,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;aACxB,QAAQ,CAAC,oEAAoE,CAAC;QACjF,OAAO,EAAE,CAAC;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,8CAA8C,CAAC;KAC5D,CAAC;SACD,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,UAAU,EAAE,oBAAoB,CAAC,QAAQ,EAAE;SACxC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,sGAAsG,CACvG;IACH,UAAU,EAAE,oBAAoB,CAAC,QAAQ,EAAE;SACxC,QAAQ,EAAE;SACV,QAAQ,CACP,oJAAoJ,CACrJ;CACJ,CAAC;KACD,QAAQ,CACP,mGAAmG,CACpG,CAAC"}

package/dist/run-strategy.d.ts

@@ -1,4 +1,48 @@
-import type { ModeKind } from "./primitives.js";
+import type { AccessProfile, ModeKind } from "./primitives.js";
+/**
+ * Resolve the requested/effective access pair once for every run producer.
+ * Ask and Plan clamp to readonly; Agent inherits the configured default only
+ * when the caller omitted an explicit access profile.
+ */
+export declare function resolveRunAccess(value: {
+    mode?: ModeKind;
+    access?: AccessProfile;
+}, accessDefault: AccessProfile): {
+    requested: AccessProfile;
+    effective: AccessProfile;
+};
+export interface RunAccessStrategyViolation {
+    code: "strategy_access_incompatible";
+    message: string;
+    retryable: false;
+    requiredActions: readonly [string];
+}
+export interface RunExecutionWorkspaceViolation {
+    code: "execution_workspace_required";
+    message: string;
+    retryable: false;
+    requiredActions: readonly [string];
+}
+/**
+ * A fresh delegated live write must name the caller-owned execution tree.
+ * Exact Retry may replay the bounded historical shape whose stable scope root
+ * was itself the frozen execution tree.
+ */
+export declare function runExecutionWorkspaceViolation(value: {
+    mode?: ModeKind;
+    retryOf?: string | null;
+    execution?: {
+        isolation?: "envelope" | "live";
+        delegated?: boolean;
+        workspaceRoot?: string;
+    };
+}, effectiveAccess: AccessProfile): RunExecutionWorkspaceViolation | null;
+/** Write-backed strategy controls cannot honestly run under readonly access. */
+export declare function runAccessStrategyViolation(value: {
+    attempts?: number | null;
+    untilClean?: boolean;
+    tests?: readonly unknown[] | null;
+}, effectiveAccess: AccessProfile): RunAccessStrategyViolation | null;
 export interface RunControlApplicabilityItem {
     applicable: boolean;
     reason?: string;
@@ -39,13 +83,15 @@ export declare function runStartStrategyViolations(value: {
 }): string[];
 /**
  * Whether this run shape needs a Git-backed workspace before a provider can
- * start. Read-only modes do not unless their durable thread itself lives in a
- * worktree. Agent race/create/single always do; the one existing non-Git write
+ * start. Read-only runs never require Git; an already-materialized durable
+ * thread worktree can be read directly without provisioning it. Agent
+ * race/create/single always do; the one existing non-Git write
  * path is live convergence, whose copy-baseline workspace is explicitly
  * implemented by the engine.
  */
 export declare function runStartRequiresGit(value: {
     mode?: ModeKind;
+    access?: AccessProfile;
     untilClean?: boolean;
     attempts?: number | null;
     execution?: {
@@ -53,5 +99,7 @@ export declare function runStartRequiresGit(value: {
     };
 }, context?: {
     effectiveWorkspaceRequiresGit?: boolean;
+    accessDefault?: AccessProfile;
+    effectiveAccess?: AccessProfile;
 }): boolean;
 //# sourceMappingURL=run-strategy.d.ts.map

package/dist/run-strategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-strategy.d.ts","sourceRoot":"","sources":["../src/run-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,2BAA2B,CAAC;IAC3C,sBAAsB,EAAE,2BAA2B,CAAC;CACrD;AAOD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAA;CAAE,GAAG,uBAAuB,CAU3F;AAED;;;6EAG6E;AAC7E,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,MAAM,EAAE,CA6EX;AAYD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE;IACL,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,UAAU,GAAG,MAAM,CAAA;KAAE,CAAC;CACjD,EACD,OAAO,GAAE;IAAE,6BAA6B,CAAC,EAAE,OAAO,CAAA;CAAO,GACxD,OAAO,CAUT"}
+{"version":3,"file":"run-strategy.d.ts","sourceRoot":"","sources":["../src/run-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE/D;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,aAAa,CAAA;CAAE,EAClD,aAAa,EAAE,aAAa,GAC3B;IAAE,SAAS,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,CAQxD;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,8BAA8B,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,KAAK,CAAC;IACjB,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,8BAA8B,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,KAAK,CAAC;IACjB,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE;IACL,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE;QACV,SAAS,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAChC,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH,EACD,eAAe,EAAE,aAAa,GAC7B,8BAA8B,GAAG,IAAI,CAoBvC;AAED,gFAAgF;AAChF,wBAAgB,0BAA0B,CACxC,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAAA;CAAE,EAC5F,eAAe,EAAE,aAAa,GAC7B,0BAA0B,GAAG,IAAI,CAcnC;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,2BAA2B,CAAC;IAC3C,sBAAsB,EAAE,2BAA2B,CAAC;CACrD;AAOD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAA;CAAE,GAAG,uBAAuB,CAU3F;AAED;;;6EAG6E;AAC7E,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,MAAM,EAAE,CA6EX;AAYD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE;IACL,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,UAAU,GAAG,MAAM,CAAA;KAAE,CAAC;CACjD,EACD,OAAO,GAAE;IACP,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,aAAa,CAAC;CAC5B,GACL,OAAO,CAcT"}

package/dist/run-strategy.js

@@ -1,3 +1,54 @@
+/**
+ * Resolve the requested/effective access pair once for every run producer.
+ * Ask and Plan clamp to readonly; Agent inherits the configured default only
+ * when the caller omitted an explicit access profile.
+ */
+export function resolveRunAccess(value, accessDefault) {
+    const mode = value.mode ?? "agent";
+    const readOnlyMode = mode === "ask" || mode === "plan";
+    const requested = value.access ?? (readOnlyMode ? "readonly" : accessDefault);
+    return {
+        requested,
+        effective: readOnlyMode ? "readonly" : requested,
+    };
+}
+/**
+ * A fresh delegated live write must name the caller-owned execution tree.
+ * Exact Retry may replay the bounded historical shape whose stable scope root
+ * was itself the frozen execution tree.
+ */
+export function runExecutionWorkspaceViolation(value, effectiveAccess) {
+    if (effectiveAccess !== "readonly" &&
+        (value.mode ?? "agent") === "agent" &&
+        value.execution?.delegated === true &&
+        value.execution.isolation === "live" &&
+        value.execution.workspaceRoot === undefined &&
+        !value.retryOf) {
+        return {
+            code: "execution_workspace_required",
+            message: "execution.workspaceRoot is required for a new delegated live run with mutating access",
+            retryable: false,
+            requiredActions: [
+                "Provide execution.workspaceRoot as an absolute existing directory for this delegated live run.",
+            ],
+        };
+    }
+    return null;
+}
+/** Write-backed strategy controls cannot honestly run under readonly access. */
+export function runAccessStrategyViolation(value, effectiveAccess) {
+    const convergence = value.untilClean === true || (value.attempts !== undefined && value.attempts !== null);
+    const gates = (value.tests?.length ?? 0) > 0;
+    if (effectiveAccess === "readonly" && (convergence || gates)) {
+        return {
+            code: "strategy_access_incompatible",
+            message: "readonly access cannot use write-backed controls (attempts/untilClean/tests); drop those controls or choose workspace_write/full",
+            retryable: false,
+            requiredActions: ["Drop attempts/untilClean/tests, or choose workspace_write/full access."],
+        };
+    }
+    return null;
+}
 const REVIEWER_UNAVAILABLE_REASON = "Reviewer controls only apply to Agent runs; Council is the Plan critique path.";
 const APPROVAL_UNAVAILABLE_REASON = "Protected-path approvals only apply to Agent runs; Ask and Plan are read-only.";
 /**
@@ -93,12 +144,17 @@ function hasArrayEntries(value) {
 }
 /**
  * Whether this run shape needs a Git-backed workspace before a provider can
- * start. Read-only modes do not unless their durable thread itself lives in a
- * worktree. Agent race/create/single always do; the one existing non-Git write
+ * start. Read-only runs never require Git; an already-materialized durable
+ * thread worktree can be read directly without provisioning it. Agent
+ * race/create/single always do; the one existing non-Git write
  * path is live convergence, whose copy-baseline workspace is explicitly
  * implemented by the engine.
  */
 export function runStartRequiresGit(value, context = {}) {
+    const effectiveAccess = context.effectiveAccess ??
+        resolveRunAccess(value, context.accessDefault ?? "workspace_write").effective;
+    if (effectiveAccess === "readonly")
+        return false;
     // A thread may execute "live" *inside a worktree*: isolated threads and
     // protected-path promotion are resolved by the daemon from durable thread /
     // project state, not from the wire isolation flag. That effective workspace