@claudexor/schema 3.6.0 → 3.8.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (125) hide show
  1. package/dist/agent-capabilities.d.ts +48 -16
  2. package/dist/agent-capabilities.d.ts.map +1 -1
  3. package/dist/agent-capabilities.js +4 -0
  4. package/dist/agent-capabilities.js.map +1 -1
  5. package/dist/config.d.ts +30 -28
  6. package/dist/config.d.ts.map +1 -1
  7. package/dist/config.js +7 -6
  8. package/dist/config.js.map +1 -1
  9. package/dist/control-harness-list.d.ts +215 -19
  10. package/dist/control-harness-list.d.ts.map +1 -1
  11. package/dist/control-operation-responses.d.ts +16 -13
  12. package/dist/control-operation-responses.d.ts.map +1 -1
  13. package/dist/control-run-detail.d.ts +33 -46
  14. package/dist/control-run-detail.d.ts.map +1 -1
  15. package/dist/control-run-detail.js +10 -19
  16. package/dist/control-run-detail.js.map +1 -1
  17. package/dist/control-run-execution.d.ts +16 -0
  18. package/dist/control-run-execution.d.ts.map +1 -0
  19. package/dist/control-run-execution.js +19 -0
  20. package/dist/control-run-execution.js.map +1 -0
  21. package/dist/control-run-failure.d.ts +4 -4
  22. package/dist/control-run-failure.d.ts.map +1 -1
  23. package/dist/control-run-failure.js +6 -4
  24. package/dist/control-run-failure.js.map +1 -1
  25. package/dist/control-run-retry.d.ts +21 -0
  26. package/dist/control-run-retry.d.ts.map +1 -1
  27. package/dist/control-run-retry.js +6 -0
  28. package/dist/control-run-retry.js.map +1 -1
  29. package/dist/control-trust.d.ts +13 -13
  30. package/dist/control.d.ts +365 -36
  31. package/dist/control.d.ts.map +1 -1
  32. package/dist/control.js +12 -18
  33. package/dist/control.js.map +1 -1
  34. package/dist/credential-profile-snapshot.d.ts +486 -52
  35. package/dist/credential-profile-snapshot.d.ts.map +1 -1
  36. package/dist/credential-profile.d.ts +113 -42
  37. package/dist/credential-profile.d.ts.map +1 -1
  38. package/dist/credential-profile.js +58 -30
  39. package/dist/credential-profile.js.map +1 -1
  40. package/dist/harness-confinement.d.ts +37 -30
  41. package/dist/harness-confinement.d.ts.map +1 -1
  42. package/dist/harness-confinement.js +18 -26
  43. package/dist/harness-confinement.js.map +1 -1
  44. package/dist/harness.d.ts +265 -102
  45. package/dist/harness.d.ts.map +1 -1
  46. package/dist/harness.js +3 -38
  47. package/dist/harness.js.map +1 -1
  48. package/dist/mcp-run-result.d.ts +10 -10
  49. package/dist/platform-auth.d.ts +196 -0
  50. package/dist/platform-auth.d.ts.map +1 -0
  51. package/dist/platform-auth.js +142 -0
  52. package/dist/platform-auth.js.map +1 -0
  53. package/dist/primitives.d.ts +6 -1
  54. package/dist/primitives.d.ts.map +1 -1
  55. package/dist/primitives.js +8 -2
  56. package/dist/primitives.js.map +1 -1
  57. package/dist/quota.d.ts +9 -9
  58. package/dist/quota.d.ts.map +1 -1
  59. package/dist/quota.js +3 -0
  60. package/dist/quota.js.map +1 -1
  61. package/dist/readiness.d.ts +192 -15
  62. package/dist/readiness.d.ts.map +1 -1
  63. package/dist/readiness.js +12 -0
  64. package/dist/readiness.js.map +1 -1
  65. package/dist/run-strategy.d.ts +51 -3
  66. package/dist/run-strategy.d.ts.map +1 -1
  67. package/dist/run-strategy.js +58 -2
  68. package/dist/run-strategy.js.map +1 -1
  69. package/dist/setup-login.d.ts +5 -5
  70. package/dist/setup.d.ts +102 -95
  71. package/dist/setup.d.ts.map +1 -1
  72. package/dist/setup.js +29 -5
  73. package/dist/setup.js.map +1 -1
  74. package/dist/task.d.ts +641 -19
  75. package/dist/task.d.ts.map +1 -1
  76. package/dist/task.js +40 -5
  77. package/dist/task.js.map +1 -1
  78. package/dist/telemetry.d.ts +2 -2
  79. package/dist/telemetry.js +3 -3
  80. package/dist/telemetry.js.map +1 -1
  81. package/dist/thread.d.ts +1 -1
  82. package/dist/thread.js +2 -2
  83. package/dist/thread.js.map +1 -1
  84. package/generated/AgentCapabilityCatalog.schema.json +27 -2
  85. package/generated/ControlCredentialProfileCreateRequest.schema.json +1 -1
  86. package/generated/ControlCredentialProfileCreateResponse.schema.json +13 -4
  87. package/generated/ControlCredentialProfileDeleteResponse.schema.json +27 -3
  88. package/generated/ControlCredentialProfileUpdateResponse.schema.json +13 -4
  89. package/generated/ControlCredentialProfilesQueryResponse.schema.json +142 -8
  90. package/generated/ControlCredentialProfilesResponse.schema.json +13 -4
  91. package/generated/ControlCredentialProfilesSnapshotResponse.schema.json +142 -8
  92. package/generated/ControlHarnessListResponse.schema.json +127 -3
  93. package/generated/ControlQuotaResponse.schema.json +2 -1
  94. package/generated/ControlRunAgainDraft.schema.json +20 -3
  95. package/generated/ControlRunDetail.schema.json +10 -8
  96. package/generated/ControlRunListResponse.schema.json +6 -4
  97. package/generated/ControlRunStartRequest.schema.json +5 -2
  98. package/generated/ControlRunSummary.schema.json +6 -4
  99. package/generated/ControlSetupJob.schema.json +5 -1
  100. package/generated/ControlSetupJobCreateRequest.schema.json +1 -1
  101. package/generated/ControlSetupJobEvent.schema.json +5 -1
  102. package/generated/ControlSetupJobListResponse.schema.json +5 -1
  103. package/generated/ControlSetupJobSnapshot.schema.json +5 -1
  104. package/generated/ControlThread.schema.json +3 -3
  105. package/generated/ControlThreadCreateRequest.schema.json +0 -1
  106. package/generated/ControlThreadDetail.schema.json +3 -3
  107. package/generated/ControlThreadListResponse.schema.json +3 -3
  108. package/generated/ControlThreadTurnRequest.schema.json +0 -1
  109. package/generated/ControlThreadUpdateRequest.schema.json +1 -2
  110. package/generated/ControlTrustListResponse.schema.json +0 -1
  111. package/generated/ControlTrustState.schema.json +0 -1
  112. package/generated/ControlTrustUpdateRequest.schema.json +0 -1
  113. package/generated/CredentialProfile.schema.json +3 -3
  114. package/generated/CredentialProfileStatus.schema.json +10 -1
  115. package/generated/GlobalConfig.schema.json +4 -4
  116. package/generated/HarnessManifest.schema.json +101 -3
  117. package/generated/HarnessStatusDto.schema.json +127 -3
  118. package/generated/McpRunHandleResult.schema.json +4 -2
  119. package/generated/McpRunToolResult.schema.json +4 -2
  120. package/generated/RunFailure.schema.json +4 -2
  121. package/generated/RunTelemetry.schema.json +5 -5
  122. package/generated/TaskContract.schema.json +8 -8
  123. package/generated/Thread.schema.json +3 -3
  124. package/generated/TrustConfig.schema.json +0 -2
  125. package/package.json +2 -2
package/dist/control-harness-list.d.ts CHANGED
@@ -11,22 +11,51 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
11
11
  adapter_version: z.ZodOptional<z.ZodString>;
12
12
  provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
13
13
  capability_profile: z.ZodDefault<z.ZodObject<{
14
- auth: z.ZodDefault<z.ZodObject<{
14
+ auth: z.ZodDefault<z.ZodEffects<z.ZodObject<{
15
15
  supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
16
16
  preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
17
17
  credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
18
18
  source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
19
19
  kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
20
20
  relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
21
+ platforms: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">>, ("darwin" | "linux" | "win32")[] | undefined, ("darwin" | "linux" | "win32")[] | undefined>;
21
22
  }, "strip", z.ZodTypeAny, {
22
23
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
23
24
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
24
25
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
26
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
25
27
  }, {
26
28
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
27
29
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
28
30
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
31
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
29
32
  }>, "many">>;
33
+ credential_profile_policies: z.ZodOptional<z.ZodArray<z.ZodObject<{
34
+ source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
35
+ platforms: z.ZodEffects<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">, ("darwin" | "linux" | "win32")[], ("darwin" | "linux" | "win32")[]>;
36
+ identity_scope: z.ZodEnum<["profile", "os_user"]>;
37
+ max_enabled_profiles: z.ZodNullable<z.ZodNumber>;
38
+ cleanup_owner: z.ZodEnum<["claudexor", "vendor"]>;
39
+ }, "strict", z.ZodTypeAny, {
40
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
41
+ platforms: ("darwin" | "linux" | "win32")[];
42
+ identity_scope: "os_user" | "profile";
43
+ max_enabled_profiles: number | null;
44
+ cleanup_owner: "claudexor" | "vendor";
45
+ }, {
46
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
47
+ platforms: ("darwin" | "linux" | "win32")[];
48
+ identity_scope: "os_user" | "profile";
49
+ max_enabled_profiles: number | null;
50
+ cleanup_owner: "claudexor" | "vendor";
51
+ }>, "many">>;
52
+ managed_login: z.ZodOptional<z.ZodNullable<z.ZodObject<{
53
+ stdin: z.ZodEnum<["none", "pipe", "terminal"]>;
54
+ }, "strict", z.ZodTypeAny, {
55
+ stdin: "none" | "pipe" | "terminal";
56
+ }, {
57
+ stdin: "none" | "pipe" | "terminal";
58
+ }>>>;
30
59
  }, "strip", z.ZodTypeAny, {
31
60
  supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
32
61
  preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
@@ -34,7 +63,56 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
34
63
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
35
64
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
36
65
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
66
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
67
+ }[];
68
+ credential_profile_policies?: {
69
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
70
+ platforms: ("darwin" | "linux" | "win32")[];
71
+ identity_scope: "os_user" | "profile";
72
+ max_enabled_profiles: number | null;
73
+ cleanup_owner: "claudexor" | "vendor";
74
+ }[] | undefined;
75
+ managed_login?: {
76
+ stdin: "none" | "pipe" | "terminal";
77
+ } | null | undefined;
78
+ }, {
79
+ supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
80
+ preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
81
+ credential_transports?: {
82
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
83
+ kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
84
+ relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
85
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
86
+ }[] | undefined;
87
+ credential_profile_policies?: {
88
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
89
+ platforms: ("darwin" | "linux" | "win32")[];
90
+ identity_scope: "os_user" | "profile";
91
+ max_enabled_profiles: number | null;
92
+ cleanup_owner: "claudexor" | "vendor";
93
+ }[] | undefined;
94
+ managed_login?: {
95
+ stdin: "none" | "pipe" | "terminal";
96
+ } | null | undefined;
97
+ }>, {
98
+ supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
99
+ preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
100
+ credential_transports: {
101
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
102
+ kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
103
+ relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
104
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
37
105
  }[];
106
+ credential_profile_policies?: {
107
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
108
+ platforms: ("darwin" | "linux" | "win32")[];
109
+ identity_scope: "os_user" | "profile";
110
+ max_enabled_profiles: number | null;
111
+ cleanup_owner: "claudexor" | "vendor";
112
+ }[] | undefined;
113
+ managed_login?: {
114
+ stdin: "none" | "pipe" | "terminal";
115
+ } | null | undefined;
38
116
  }, {
39
117
  supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
40
118
  preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
@@ -42,7 +120,18 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
42
120
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
43
121
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
44
122
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
123
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
124
+ }[] | undefined;
125
+ credential_profile_policies?: {
126
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
127
+ platforms: ("darwin" | "linux" | "win32")[];
128
+ identity_scope: "os_user" | "profile";
129
+ max_enabled_profiles: number | null;
130
+ cleanup_owner: "claudexor" | "vendor";
45
131
  }[] | undefined;
132
+ managed_login?: {
133
+ stdin: "none" | "pipe" | "terminal";
134
+ } | null | undefined;
46
135
  }>>;
47
136
  access_control: z.ZodDefault<z.ZodObject<{
48
137
  readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
@@ -52,11 +141,11 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
52
141
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
53
142
  }>>;
54
143
  isolation: z.ZodDefault<z.ZodObject<{
55
- supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
144
+ supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
56
145
  }, "strip", z.ZodTypeAny, {
57
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
146
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
58
147
  }, {
59
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
148
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
60
149
  }>>;
61
150
  attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
62
151
  kind: z.ZodEnum<["image", "file"]>;
@@ -87,13 +176,24 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
87
176
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
88
177
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
89
178
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
179
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
90
180
  }[];
181
+ credential_profile_policies?: {
182
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
183
+ platforms: ("darwin" | "linux" | "win32")[];
184
+ identity_scope: "os_user" | "profile";
185
+ max_enabled_profiles: number | null;
186
+ cleanup_owner: "claudexor" | "vendor";
187
+ }[] | undefined;
188
+ managed_login?: {
189
+ stdin: "none" | "pipe" | "terminal";
190
+ } | null | undefined;
91
191
  };
92
192
  access_control: {
93
193
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
94
194
  };
95
195
  isolation: {
96
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
196
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
97
197
  };
98
198
  attachment_inputs: {
99
199
  kind: "file" | "image";
@@ -112,13 +212,24 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
112
212
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
113
213
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
114
214
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
215
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
216
+ }[] | undefined;
217
+ credential_profile_policies?: {
218
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
219
+ platforms: ("darwin" | "linux" | "win32")[];
220
+ identity_scope: "os_user" | "profile";
221
+ max_enabled_profiles: number | null;
222
+ cleanup_owner: "claudexor" | "vendor";
115
223
  }[] | undefined;
224
+ managed_login?: {
225
+ stdin: "none" | "pipe" | "terminal";
226
+ } | null | undefined;
116
227
  } | undefined;
117
228
  access_control?: {
118
229
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
119
230
  } | undefined;
120
231
  isolation?: {
121
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
232
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
122
233
  } | undefined;
123
234
  attachment_inputs?: {
124
235
  kind: "file" | "image";
@@ -228,7 +339,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
228
339
  known_models_verified_against?: string | null | undefined;
229
340
  }>;
230
341
  auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
231
- access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
342
+ access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">>;
232
343
  }, "strip", z.ZodTypeAny, {
233
344
  id: string;
234
345
  display_name: string;
@@ -244,13 +355,24 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
244
355
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
245
356
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
246
357
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
358
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
247
359
  }[];
360
+ credential_profile_policies?: {
361
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
362
+ platforms: ("darwin" | "linux" | "win32")[];
363
+ identity_scope: "os_user" | "profile";
364
+ max_enabled_profiles: number | null;
365
+ cleanup_owner: "claudexor" | "vendor";
366
+ }[] | undefined;
367
+ managed_login?: {
368
+ stdin: "none" | "pipe" | "terminal";
369
+ } | null | undefined;
248
370
  };
249
371
  access_control: {
250
372
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
251
373
  };
252
374
  isolation: {
253
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
375
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
254
376
  };
255
377
  attachment_inputs: {
256
378
  kind: "file" | "image";
@@ -292,7 +414,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
292
414
  known_models_verified_against: string | null;
293
415
  };
294
416
  auth_modes: ("api_key" | "local_session" | "none")[];
295
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
417
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
296
418
  }, {
297
419
  id: string;
298
420
  display_name: string;
@@ -308,13 +430,24 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
308
430
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
309
431
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
310
432
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
433
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
434
+ }[] | undefined;
435
+ credential_profile_policies?: {
436
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
437
+ platforms: ("darwin" | "linux" | "win32")[];
438
+ identity_scope: "os_user" | "profile";
439
+ max_enabled_profiles: number | null;
440
+ cleanup_owner: "claudexor" | "vendor";
311
441
  }[] | undefined;
442
+ managed_login?: {
443
+ stdin: "none" | "pipe" | "terminal";
444
+ } | null | undefined;
312
445
  } | undefined;
313
446
  access_control?: {
314
447
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
315
448
  } | undefined;
316
449
  isolation?: {
317
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
450
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
318
451
  } | undefined;
319
452
  attachment_inputs?: {
320
453
  kind: "file" | "image";
@@ -356,7 +489,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
356
489
  known_models_verified_against?: string | null | undefined;
357
490
  };
358
491
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
359
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
492
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
360
493
  }>>>;
361
494
  enabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
362
495
  routableIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -450,6 +583,13 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
450
583
  remediation?: string | null | undefined;
451
584
  requiresFullAccess?: boolean | undefined;
452
585
  }>>>;
586
+ setupLogin: z.ZodOptional<z.ZodNullable<z.ZodObject<{
587
+ mode: z.ZodEnum<["in_app", "external_terminal"]>;
588
+ }, "strict", z.ZodTypeAny, {
589
+ mode: "external_terminal" | "in_app";
590
+ }, {
591
+ mode: "external_terminal" | "in_app";
592
+ }>>>;
453
593
  }, "strip", z.ZodTypeAny, {
454
594
  id: string;
455
595
  status: "degraded" | "ok" | "unavailable";
@@ -468,13 +608,24 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
468
608
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
469
609
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
470
610
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
611
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
471
612
  }[];
613
+ credential_profile_policies?: {
614
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
615
+ platforms: ("darwin" | "linux" | "win32")[];
616
+ identity_scope: "os_user" | "profile";
617
+ max_enabled_profiles: number | null;
618
+ cleanup_owner: "claudexor" | "vendor";
619
+ }[] | undefined;
620
+ managed_login?: {
621
+ stdin: "none" | "pipe" | "terminal";
622
+ } | null | undefined;
472
623
  };
473
624
  access_control: {
474
625
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
475
626
  };
476
627
  isolation: {
477
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
628
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
478
629
  };
479
630
  attachment_inputs: {
480
631
  kind: "file" | "image";
@@ -516,7 +667,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
516
667
  known_models_verified_against: string | null;
517
668
  };
518
669
  auth_modes: ("api_key" | "local_session" | "none")[];
519
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
670
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
520
671
  } | null | undefined;
521
672
  enabledIntents: string[];
522
673
  routableIntents: string[];
@@ -552,6 +703,9 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
552
703
  remediation: string | null;
553
704
  requiresFullAccess: boolean;
554
705
  } | null;
706
+ setupLogin?: {
707
+ mode: "external_terminal" | "in_app";
708
+ } | null | undefined;
555
709
  }, {
556
710
  id: string;
557
711
  status: "degraded" | "ok" | "unavailable";
@@ -570,13 +724,24 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
570
724
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
571
725
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
572
726
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
727
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
573
728
  }[] | undefined;
729
+ credential_profile_policies?: {
730
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
731
+ platforms: ("darwin" | "linux" | "win32")[];
732
+ identity_scope: "os_user" | "profile";
733
+ max_enabled_profiles: number | null;
734
+ cleanup_owner: "claudexor" | "vendor";
735
+ }[] | undefined;
736
+ managed_login?: {
737
+ stdin: "none" | "pipe" | "terminal";
738
+ } | null | undefined;
574
739
  } | undefined;
575
740
  access_control?: {
576
741
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
577
742
  } | undefined;
578
743
  isolation?: {
579
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
744
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
580
745
  } | undefined;
581
746
  attachment_inputs?: {
582
747
  kind: "file" | "image";
@@ -618,7 +783,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
618
783
  known_models_verified_against?: string | null | undefined;
619
784
  };
620
785
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
621
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
786
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
622
787
  } | null | undefined;
623
788
  enabledIntents?: string[] | undefined;
624
789
  routableIntents?: string[] | undefined;
@@ -654,6 +819,9 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
654
819
  remediation?: string | null | undefined;
655
820
  requiresFullAccess?: boolean | undefined;
656
821
  } | null | undefined;
822
+ setupLogin?: {
823
+ mode: "external_terminal" | "in_app";
824
+ } | null | undefined;
657
825
  }>, "many">>;
658
826
  git: z.ZodOptional<z.ZodObject<{
659
827
  status: z.ZodEnum<["available", "missing", "developer_tools_stub", "failed"]>;
@@ -690,13 +858,24 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
690
858
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
691
859
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
692
860
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
861
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
693
862
  }[];
863
+ credential_profile_policies?: {
864
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
865
+ platforms: ("darwin" | "linux" | "win32")[];
866
+ identity_scope: "os_user" | "profile";
867
+ max_enabled_profiles: number | null;
868
+ cleanup_owner: "claudexor" | "vendor";
869
+ }[] | undefined;
870
+ managed_login?: {
871
+ stdin: "none" | "pipe" | "terminal";
872
+ } | null | undefined;
694
873
  };
695
874
  access_control: {
696
875
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
697
876
  };
698
877
  isolation: {
699
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
878
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
700
879
  };
701
880
  attachment_inputs: {
702
881
  kind: "file" | "image";
@@ -738,7 +917,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
738
917
  known_models_verified_against: string | null;
739
918
  };
740
919
  auth_modes: ("api_key" | "local_session" | "none")[];
741
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
920
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
742
921
  } | null | undefined;
743
922
  enabledIntents: string[];
744
923
  routableIntents: string[];
@@ -774,6 +953,9 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
774
953
  remediation: string | null;
775
954
  requiresFullAccess: boolean;
776
955
  } | null;
956
+ setupLogin?: {
957
+ mode: "external_terminal" | "in_app";
958
+ } | null | undefined;
777
959
  }[];
778
960
  git?: {
779
961
  status: "available" | "developer_tools_stub" | "failed" | "missing";
@@ -800,13 +982,24 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
800
982
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
801
983
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
802
984
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
985
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
803
986
  }[] | undefined;
987
+ credential_profile_policies?: {
988
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
989
+ platforms: ("darwin" | "linux" | "win32")[];
990
+ identity_scope: "os_user" | "profile";
991
+ max_enabled_profiles: number | null;
992
+ cleanup_owner: "claudexor" | "vendor";
993
+ }[] | undefined;
994
+ managed_login?: {
995
+ stdin: "none" | "pipe" | "terminal";
996
+ } | null | undefined;
804
997
  } | undefined;
805
998
  access_control?: {
806
999
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
807
1000
  } | undefined;
808
1001
  isolation?: {
809
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
1002
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
810
1003
  } | undefined;
811
1004
  attachment_inputs?: {
812
1005
  kind: "file" | "image";
@@ -848,7 +1041,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
848
1041
  known_models_verified_against?: string | null | undefined;
849
1042
  };
850
1043
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
851
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
1044
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
852
1045
  } | null | undefined;
853
1046
  enabledIntents?: string[] | undefined;
854
1047
  routableIntents?: string[] | undefined;
@@ -884,6 +1077,9 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
884
1077
  remediation?: string | null | undefined;
885
1078
  requiresFullAccess?: boolean | undefined;
886
1079
  } | null | undefined;
1080
+ setupLogin?: {
1081
+ mode: "external_terminal" | "in_app";
1082
+ } | null | undefined;
887
1083
  }[] | undefined;
888
1084
  git?: {
889
1085
  status: "available" | "developer_tools_stub" | "failed" | "missing";
package/dist/control-harness-list.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"control-harness-list.d.ts","sourceRoot":"","sources":["../src/control-harness-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAI3B,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUI,CAAC;AAC5C,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
1
+ {"version":3,"file":"control-harness-list.d.ts","sourceRoot":"","sources":["../src/control-harness-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAI3B,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUI,CAAC;AAC5C,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
package/dist/control-operation-responses.d.ts CHANGED
@@ -106,7 +106,7 @@ export declare const ControlRunListResponse: z.ZodObject<{
106
106
  failure: z.ZodDefault<z.ZodNullable<z.ZodObject<{
107
107
  phase: z.ZodDefault<z.ZodString>;
108
108
  category: z.ZodDefault<z.ZodEnum<["validation", "project", "auth", "harness_unavailable", "harness_error", "config_error", "budget", "policy", "cancelled", "internal", "unknown"]>>;
109
- code: z.ZodDefault<z.ZodNullable<z.ZodEnum<["finite_zero", "hard_cap", "estimate_headroom", "unknown_paid_in_flight", "budget_overshoot", "cost_unverifiable", "delegation_child_drain_timeout", "subscription_window_exhausted", "credential_pool_exhausted", "delegated_home_unavailable", "delegated_confinement_unavailable", "delegated_evidence_incomplete"]>>>;
109
+ code: z.ZodDefault<z.ZodNullable<z.ZodEnum<["finite_zero", "hard_cap", "estimate_headroom", "unknown_paid_in_flight", "budget_overshoot", "cost_unverifiable", "delegation_child_drain_timeout", "subscription_window_exhausted", "credential_pool_exhausted", "delegated_home_unavailable", "delegated_confinement_unavailable", "delegated_evidence_incomplete", "access_profile_incompatible", "retired_access_profile"]>>>;
110
110
  harnessId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
111
111
  attemptId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
112
112
  safeMessage: z.ZodString;
@@ -119,7 +119,7 @@ export declare const ControlRunListResponse: z.ZodObject<{
119
119
  }, "strip", z.ZodTypeAny, {
120
120
  phase: string;
121
121
  category: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation";
122
- code: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
122
+ code: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
123
123
  harnessId: string | null;
124
124
  attemptId: string | null;
125
125
  safeMessage: string;
@@ -132,7 +132,7 @@ export declare const ControlRunListResponse: z.ZodObject<{
132
132
  }, {
133
133
  phase?: string | undefined;
134
134
  category?: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation" | undefined;
135
- code?: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
135
+ code?: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
136
136
  harnessId?: string | null | undefined;
137
137
  attemptId?: string | null | undefined;
138
138
  safeMessage: string;
@@ -255,9 +255,9 @@ export declare const ControlRunListResponse: z.ZodObject<{
255
255
  observed: string;
256
256
  } | null | undefined;
257
257
  }>>>;
258
- access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
259
- requestedAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
260
- effectiveAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
258
+ access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>;
259
+ requestedAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>;
260
+ effectiveAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>;
261
261
  externalContextPolicy: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
262
262
  webRequired: z.ZodOptional<z.ZodBoolean>;
263
263
  webMode: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
@@ -549,7 +549,7 @@ export declare const ControlRunListResponse: z.ZodObject<{
549
549
  failure: {
550
550
  phase: string;
551
551
  category: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation";
552
- code: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
552
+ code: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
553
553
  harnessId: string | null;
554
554
  attemptId: string | null;
555
555
  safeMessage: string;
@@ -718,7 +718,7 @@ export declare const ControlRunListResponse: z.ZodObject<{
718
718
  failure?: {
719
719
  phase?: string | undefined;
720
720
  category?: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation" | undefined;
721
- code?: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
721
+ code?: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
722
722
  harnessId?: string | null | undefined;
723
723
  attemptId?: string | null | undefined;
724
724
  safeMessage: string;
@@ -897,7 +897,7 @@ export declare const ControlRunListResponse: z.ZodObject<{
897
897
  failure: {
898
898
  phase: string;
899
899
  category: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation";
900
- code: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
900
+ code: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
901
901
  harnessId: string | null;
902
902
  attemptId: string | null;
903
903
  safeMessage: string;
@@ -1070,7 +1070,7 @@ export declare const ControlRunListResponse: z.ZodObject<{
1070
1070
  failure?: {
1071
1071
  phase?: string | undefined;
1072
1072
  category?: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation" | undefined;
1073
- code?: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
1073
+ code?: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
1074
1074
  harnessId?: string | null | undefined;
1075
1075
  attemptId?: string | null | undefined;
1076
1076
  safeMessage: string;
@@ -1457,12 +1457,15 @@ export declare const ControlThreadTurnRequest: z.ZodObject<Omit<{
1457
1457
  execution: z.ZodDefault<z.ZodObject<{
1458
1458
  isolation: z.ZodDefault<z.ZodEnum<["envelope", "live"]>>;
1459
1459
  delegated: z.ZodDefault<z.ZodBoolean>;
1460
+ workspaceRoot: z.ZodOptional<z.ZodString>;
1460
1461
  }, "strict", z.ZodTypeAny, {
1461
1462
  isolation: "envelope" | "live";
1462
1463
  delegated: boolean;
1464
+ workspaceRoot?: string | undefined;
1463
1465
  }, {
1464
1466
  isolation?: "envelope" | "live" | undefined;
1465
1467
  delegated?: boolean | undefined;
1468
+ workspaceRoot?: string | undefined;
1466
1469
  }>>;
1467
1470
  harnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1468
1471
  primaryHarness: z.ZodOptional<z.ZodString>;
@@ -1496,7 +1499,7 @@ export declare const ControlThreadTurnRequest: z.ZodObject<Omit<{
1496
1499
  kind: "finite";
1497
1500
  maxUsd: number;
1498
1501
  }>]>>;
1499
- access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
1502
+ access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>;
1500
1503
  web: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
1501
1504
  externalContextPolicy: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
1502
1505
  browser: z.ZodOptional<z.ZodBoolean>;
@@ -1601,7 +1604,7 @@ export declare const ControlThreadTurnRequest: z.ZodObject<Omit<{
1601
1604
  kind: "finite";
1602
1605
  maxUsd: number;
1603
1606
  } | undefined;
1604
- access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
1607
+ access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
1605
1608
  web?: "auto" | "cached" | "live" | "off" | undefined;
1606
1609
  externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
1607
1610
  browser?: boolean | undefined;
@@ -1659,7 +1662,7 @@ export declare const ControlThreadTurnRequest: z.ZodObject<Omit<{
1659
1662
  kind: "finite";
1660
1663
  maxUsd: number;
1661
1664
  } | undefined;
1662
- access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
1665
+ access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
1663
1666
  web?: "auto" | "cached" | "live" | "off" | undefined;
1664
1667
  externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
1665
1668
  browser?: boolean | undefined;