@claudexor/schema 3.6.0 → 3.8.1

package/generated/ControlCredentialProfilesQueryResponse.schema.json

@@ -36,7 +36,7 @@
                           "oauth_token",
                           "api_key"
                         ],
-                        "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+                        "description": "Binding kind for a profile: Claudexor-owned scoped vendor state, a managed OAuth secret, or a managed API-key secret; a vendor OS-user credential may remain outside that state."
                       },
                       "isolation_locator": {
                         "type": [
@@ -44,7 +44,7 @@
                           "null"
                         ],
                         "default": null,
-                        "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+                        "description": "Canonical absolute path to Claudexor-owned scoped vendor state for config_dir_login bindings; null for secret-ref kinds."
                       },
                       "secret_ref": {
                         "type": [
@@ -81,7 +81,7 @@
                       "credential_kind"
                     ],
                     "additionalProperties": false,
-                    "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+                    "description": "Durable non-secret named binding for one harness; credential material may live in Claudexor-owned scoped state, a managed secret store, or a platform-declared vendor/OS-user store, never in this row."
                   },
                   "status": {
                     "type": "object",
@@ -117,7 +117,16 @@
                           "vendor"
                         ],
                         "default": "local_store",
-                        "description": "How the verification verdict was reached: local_store = the profile's credential material is present locally (says nothing about the token being live); vendor = the vendor answered a request made with this profile's own credential."
+                        "description": "How the verification verdict was reached: local_store = the binding's required local state or managed secret is present (says nothing about a token being live); vendor = the vendor answered under the exact binding environment and effective platform credential policy."
+                      },
+                      "stale": {
+                        "type": "boolean",
+                        "description": "True only for a bounded stale last-known-good observation; stale is never a fresh passed verification."
+                      },
+                      "stale_age_ms": {
+                        "type": "integer",
+                        "minimum": 0,
+                        "description": "Age in milliseconds of the bounded stale observation, when stale is true."
                       },
                       "detail": {
                         "type": "string",
@@ -514,6 +523,20 @@
                                           },
                                           "default": [],
                                           "description": "Relocation levers that can move this transport into a scoped environment."
+                                        },
+                                        "platforms": {
+                                          "type": "array",
+                                          "items": {
+                                            "type": "string",
+                                            "enum": [
+                                              "darwin",
+                                              "linux",
+                                              "win32"
+                                            ],
+                                            "description": "Host platform used to resolve credential and managed-login policy."
+                                          },
+                                          "minItems": 1,
+                                          "description": "Host platforms on which this physical credential transport applies; absent means every supported platform for backward compatibility."
                                         }
                                       },
                                       "required": [
@@ -525,6 +548,90 @@
                                     },
                                     "default": [],
                                     "description": "Declared credential transports per auth source."
+                                  },
+                                  "credential_profile_policies": {
+                                    "type": "array",
+                                    "items": {
+                                      "type": "object",
+                                      "properties": {
+                                        "source": {
+                                          "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/1/properties/harnesses/items/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/supported_sources/items"
+                                        },
+                                        "platforms": {
+                                          "type": "array",
+                                          "items": {
+                                            "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/1/properties/harnesses/items/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/credential_transports/items/properties/platforms/items"
+                                          },
+                                          "minItems": 1,
+                                          "description": "Nonempty host-platform set governed by this policy row."
+                                        },
+                                        "identity_scope": {
+                                          "type": "string",
+                                          "enum": [
+                                            "profile",
+                                            "os_user"
+                                          ],
+                                          "description": "Identity boundary selected by a credential profile: the named profile itself or the host OS user/login vault."
+                                        },
+                                        "max_enabled_profiles": {
+                                          "anyOf": [
+                                            {
+                                              "type": "integer",
+                                              "exclusiveMinimum": 0
+                                            },
+                                            {
+                                              "type": "null"
+                                            }
+                                          ],
+                                          "description": "Maximum enabled profile bindings on these platforms; null means unbounded."
+                                        },
+                                        "cleanup_owner": {
+                                          "type": "string",
+                                          "enum": [
+                                            "claudexor",
+                                            "vendor"
+                                          ],
+                                          "description": "Who owns cleanup of the credential when its Claudexor profile binding is removed."
+                                        }
+                                      },
+                                      "required": [
+                                        "source",
+                                        "platforms",
+                                        "identity_scope",
+                                        "max_enabled_profiles",
+                                        "cleanup_owner"
+                                      ],
+                                      "additionalProperties": false,
+                                      "description": "Platform-specific identity scope, enabled-profile cardinality, and credential cleanup ownership for one auth source."
+                                    },
+                                    "description": "Platform-specific profile identity/cardinality/cleanup policy; absent uses the backward-compatible profile-scoped, unbounded, Claudexor-owned defaults."
+                                  },
+                                  "managed_login": {
+                                    "anyOf": [
+                                      {
+                                        "type": "object",
+                                        "properties": {
+                                          "stdin": {
+                                            "type": "string",
+                                            "enum": [
+                                              "none",
+                                              "pipe",
+                                              "terminal"
+                                            ],
+                                            "description": "Input transport the vendor login command requires."
+                                          }
+                                        },
+                                        "required": [
+                                          "stdin"
+                                        ],
+                                        "additionalProperties": false,
+                                        "description": "Managed-login input requirement; command, argv, flow, and time window remain owned by the native-login registry."
+                                      },
+                                      {
+                                        "type": "null"
+                                      }
+                                    ],
+                                    "description": "Managed subscription-login input requirement; null means this harness defines no managed login, absent is a legacy manifest."
                                   }
                                 },
                                 "additionalProperties": false,
@@ -560,11 +667,12 @@
                                       "enum": [
                                         "env_or_file_injection",
                                         "scoped_home_keychain_bridge",
+                                        "private_per_profile_keychain",
                                         "host_user_context",
                                         "process_sandbox",
                                         "container"
                                       ],
-                                      "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                                      "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers."
                                     },
                                     "default": [
                                       "env_or_file_injection"
@@ -869,10 +977,9 @@
                                 "readonly",
                                 "workspace_write",
                                 "full",
-                                "external_sandbox_full",
                                 "inherit_native"
                               ],
-                              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                              "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
                             },
                             "default": [],
                             "description": "Access profiles the adapter can enforce."
@@ -1134,6 +1241,32 @@
                     ],
                     "description": "Engine-owned Delegate capability for this harness and installed runtime; null on legacy status rows.",
                     "default": null
+                  },
+                  "setupLogin": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "mode": {
+                            "type": "string",
+                            "enum": [
+                              "in_app",
+                              "external_terminal"
+                            ],
+                            "description": "in_app requests the daemon-hosted login flow; external_terminal requests the existing client PTY flow."
+                          }
+                        },
+                        "required": [
+                          "mode"
+                        ],
+                        "additionalProperties": false,
+                        "description": "Effective setup-login flow for this harness on the current host."
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "description": "Effective setup-login flow for this harness on the current host; current producers emit null or an object, while omission identifies a legacy row."
                   }
                 },
                 "required": [
@@ -1447,7 +1580,8 @@
                           "platform_unsupported",
                           "refresh_failed",
                           "no_source",
-                          "auth_revoked"
+                          "auth_revoked",
+                          "credential_profile_ambiguous"
                         ],
                         "description": "Why a registered subject has no quota snapshot, in the source's own vocabulary."
                       },

package/generated/ControlCredentialProfilesResponse.schema.json

@@ -34,7 +34,7 @@
                       "oauth_token",
                       "api_key"
                     ],
-                    "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+                    "description": "Binding kind for a profile: Claudexor-owned scoped vendor state, a managed OAuth secret, or a managed API-key secret; a vendor OS-user credential may remain outside that state."
                   },
                   "isolation_locator": {
                     "type": [
@@ -42,7 +42,7 @@
                       "null"
                     ],
                     "default": null,
-                    "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+                    "description": "Canonical absolute path to Claudexor-owned scoped vendor state for config_dir_login bindings; null for secret-ref kinds."
                   },
                   "secret_ref": {
                     "type": [
@@ -79,7 +79,7 @@
                   "credential_kind"
                 ],
                 "additionalProperties": false,
-                "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+                "description": "Durable non-secret named binding for one harness; credential material may live in Claudexor-owned scoped state, a managed secret store, or a platform-declared vendor/OS-user store, never in this row."
               },
               "status": {
                 "type": "object",
@@ -115,7 +115,16 @@
                       "vendor"
                     ],
                     "default": "local_store",
-                    "description": "How the verification verdict was reached: local_store = the profile's credential material is present locally (says nothing about the token being live); vendor = the vendor answered a request made with this profile's own credential."
+                    "description": "How the verification verdict was reached: local_store = the binding's required local state or managed secret is present (says nothing about a token being live); vendor = the vendor answered under the exact binding environment and effective platform credential policy."
+                  },
+                  "stale": {
+                    "type": "boolean",
+                    "description": "True only for a bounded stale last-known-good observation; stale is never a fresh passed verification."
+                  },
+                  "stale_age_ms": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Age in milliseconds of the bounded stale observation, when stale is true."
                   },
                   "detail": {
                     "type": "string",

package/generated/ControlCredentialProfilesSnapshotResponse.schema.json

@@ -34,7 +34,7 @@
                       "oauth_token",
                       "api_key"
                     ],
-                    "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+                    "description": "Binding kind for a profile: Claudexor-owned scoped vendor state, a managed OAuth secret, or a managed API-key secret; a vendor OS-user credential may remain outside that state."
                   },
                   "isolation_locator": {
                     "type": [
@@ -42,7 +42,7 @@
                       "null"
                     ],
                     "default": null,
-                    "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+                    "description": "Canonical absolute path to Claudexor-owned scoped vendor state for config_dir_login bindings; null for secret-ref kinds."
                   },
                   "secret_ref": {
                     "type": [
@@ -79,7 +79,7 @@
                   "credential_kind"
                 ],
                 "additionalProperties": false,
-                "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+                "description": "Durable non-secret named binding for one harness; credential material may live in Claudexor-owned scoped state, a managed secret store, or a platform-declared vendor/OS-user store, never in this row."
               },
               "status": {
                 "type": "object",
@@ -115,7 +115,16 @@
                       "vendor"
                     ],
                     "default": "local_store",
-                    "description": "How the verification verdict was reached: local_store = the profile's credential material is present locally (says nothing about the token being live); vendor = the vendor answered a request made with this profile's own credential."
+                    "description": "How the verification verdict was reached: local_store = the binding's required local state or managed secret is present (says nothing about a token being live); vendor = the vendor answered under the exact binding environment and effective platform credential policy."
+                  },
+                  "stale": {
+                    "type": "boolean",
+                    "description": "True only for a bounded stale last-known-good observation; stale is never a fresh passed verification."
+                  },
+                  "stale_age_ms": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Age in milliseconds of the bounded stale observation, when stale is true."
                   },
                   "detail": {
                     "type": "string",
@@ -493,6 +502,20 @@
                                       },
                                       "default": [],
                                       "description": "Relocation levers that can move this transport into a scoped environment."
+                                    },
+                                    "platforms": {
+                                      "type": "array",
+                                      "items": {
+                                        "type": "string",
+                                        "enum": [
+                                          "darwin",
+                                          "linux",
+                                          "win32"
+                                        ],
+                                        "description": "Host platform used to resolve credential and managed-login policy."
+                                      },
+                                      "minItems": 1,
+                                      "description": "Host platforms on which this physical credential transport applies; absent means every supported platform for backward compatibility."
                                     }
                                   },
                                   "required": [
@@ -504,6 +527,90 @@
                                 },
                                 "default": [],
                                 "description": "Declared credential transports per auth source."
+                              },
+                              "credential_profile_policies": {
+                                "type": "array",
+                                "items": {
+                                  "type": "object",
+                                  "properties": {
+                                    "source": {
+                                      "$ref": "#/definitions/ControlCredentialProfilesSnapshotResponse/properties/harnesses/items/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/supported_sources/items"
+                                    },
+                                    "platforms": {
+                                      "type": "array",
+                                      "items": {
+                                        "$ref": "#/definitions/ControlCredentialProfilesSnapshotResponse/properties/harnesses/items/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/credential_transports/items/properties/platforms/items"
+                                      },
+                                      "minItems": 1,
+                                      "description": "Nonempty host-platform set governed by this policy row."
+                                    },
+                                    "identity_scope": {
+                                      "type": "string",
+                                      "enum": [
+                                        "profile",
+                                        "os_user"
+                                      ],
+                                      "description": "Identity boundary selected by a credential profile: the named profile itself or the host OS user/login vault."
+                                    },
+                                    "max_enabled_profiles": {
+                                      "anyOf": [
+                                        {
+                                          "type": "integer",
+                                          "exclusiveMinimum": 0
+                                        },
+                                        {
+                                          "type": "null"
+                                        }
+                                      ],
+                                      "description": "Maximum enabled profile bindings on these platforms; null means unbounded."
+                                    },
+                                    "cleanup_owner": {
+                                      "type": "string",
+                                      "enum": [
+                                        "claudexor",
+                                        "vendor"
+                                      ],
+                                      "description": "Who owns cleanup of the credential when its Claudexor profile binding is removed."
+                                    }
+                                  },
+                                  "required": [
+                                    "source",
+                                    "platforms",
+                                    "identity_scope",
+                                    "max_enabled_profiles",
+                                    "cleanup_owner"
+                                  ],
+                                  "additionalProperties": false,
+                                  "description": "Platform-specific identity scope, enabled-profile cardinality, and credential cleanup ownership for one auth source."
+                                },
+                                "description": "Platform-specific profile identity/cardinality/cleanup policy; absent uses the backward-compatible profile-scoped, unbounded, Claudexor-owned defaults."
+                              },
+                              "managed_login": {
+                                "anyOf": [
+                                  {
+                                    "type": "object",
+                                    "properties": {
+                                      "stdin": {
+                                        "type": "string",
+                                        "enum": [
+                                          "none",
+                                          "pipe",
+                                          "terminal"
+                                        ],
+                                        "description": "Input transport the vendor login command requires."
+                                      }
+                                    },
+                                    "required": [
+                                      "stdin"
+                                    ],
+                                    "additionalProperties": false,
+                                    "description": "Managed-login input requirement; command, argv, flow, and time window remain owned by the native-login registry."
+                                  },
+                                  {
+                                    "type": "null"
+                                  }
+                                ],
+                                "description": "Managed subscription-login input requirement; null means this harness defines no managed login, absent is a legacy manifest."
                               }
                             },
                             "additionalProperties": false,
@@ -539,11 +646,12 @@
                                   "enum": [
                                     "env_or_file_injection",
                                     "scoped_home_keychain_bridge",
+                                    "private_per_profile_keychain",
                                     "host_user_context",
                                     "process_sandbox",
                                     "container"
                                   ],
-                                  "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                                  "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers."
                                 },
                                 "default": [
                                   "env_or_file_injection"
@@ -848,10 +956,9 @@
                             "readonly",
                             "workspace_write",
                             "full",
-                            "external_sandbox_full",
                             "inherit_native"
                           ],
-                          "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                          "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
                         },
                         "default": [],
                         "description": "Access profiles the adapter can enforce."
@@ -1113,6 +1220,32 @@
                 ],
                 "description": "Engine-owned Delegate capability for this harness and installed runtime; null on legacy status rows.",
                 "default": null
+              },
+              "setupLogin": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "mode": {
+                        "type": "string",
+                        "enum": [
+                          "in_app",
+                          "external_terminal"
+                        ],
+                        "description": "in_app requests the daemon-hosted login flow; external_terminal requests the existing client PTY flow."
+                      }
+                    },
+                    "required": [
+                      "mode"
+                    ],
+                    "additionalProperties": false,
+                    "description": "Effective setup-login flow for this harness on the current host."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Effective setup-login flow for this harness on the current host; current producers emit null or an object, while omission identifies a legacy row."
               }
             },
             "required": [
@@ -1426,7 +1559,8 @@
                       "platform_unsupported",
                       "refresh_failed",
                       "no_source",
-                      "auth_revoked"
+                      "auth_revoked",
+                      "credential_profile_ambiguous"
                     ],
                     "description": "Why a registered subject has no quota snapshot, in the source's own vocabulary."
                   },