@claudexor/schema 3.6.0 → 3.8.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (125) hide show
  1. package/dist/agent-capabilities.d.ts +48 -16
  2. package/dist/agent-capabilities.d.ts.map +1 -1
  3. package/dist/agent-capabilities.js +4 -0
  4. package/dist/agent-capabilities.js.map +1 -1
  5. package/dist/config.d.ts +30 -28
  6. package/dist/config.d.ts.map +1 -1
  7. package/dist/config.js +7 -6
  8. package/dist/config.js.map +1 -1
  9. package/dist/control-harness-list.d.ts +215 -19
  10. package/dist/control-harness-list.d.ts.map +1 -1
  11. package/dist/control-operation-responses.d.ts +16 -13
  12. package/dist/control-operation-responses.d.ts.map +1 -1
  13. package/dist/control-run-detail.d.ts +33 -46
  14. package/dist/control-run-detail.d.ts.map +1 -1
  15. package/dist/control-run-detail.js +10 -19
  16. package/dist/control-run-detail.js.map +1 -1
  17. package/dist/control-run-execution.d.ts +16 -0
  18. package/dist/control-run-execution.d.ts.map +1 -0
  19. package/dist/control-run-execution.js +19 -0
  20. package/dist/control-run-execution.js.map +1 -0
  21. package/dist/control-run-failure.d.ts +4 -4
  22. package/dist/control-run-failure.d.ts.map +1 -1
  23. package/dist/control-run-failure.js +6 -4
  24. package/dist/control-run-failure.js.map +1 -1
  25. package/dist/control-run-retry.d.ts +21 -0
  26. package/dist/control-run-retry.d.ts.map +1 -1
  27. package/dist/control-run-retry.js +6 -0
  28. package/dist/control-run-retry.js.map +1 -1
  29. package/dist/control-trust.d.ts +13 -13
  30. package/dist/control.d.ts +365 -36
  31. package/dist/control.d.ts.map +1 -1
  32. package/dist/control.js +12 -18
  33. package/dist/control.js.map +1 -1
  34. package/dist/credential-profile-snapshot.d.ts +486 -52
  35. package/dist/credential-profile-snapshot.d.ts.map +1 -1
  36. package/dist/credential-profile.d.ts +113 -42
  37. package/dist/credential-profile.d.ts.map +1 -1
  38. package/dist/credential-profile.js +58 -30
  39. package/dist/credential-profile.js.map +1 -1
  40. package/dist/harness-confinement.d.ts +37 -30
  41. package/dist/harness-confinement.d.ts.map +1 -1
  42. package/dist/harness-confinement.js +18 -26
  43. package/dist/harness-confinement.js.map +1 -1
  44. package/dist/harness.d.ts +265 -102
  45. package/dist/harness.d.ts.map +1 -1
  46. package/dist/harness.js +3 -38
  47. package/dist/harness.js.map +1 -1
  48. package/dist/mcp-run-result.d.ts +10 -10
  49. package/dist/platform-auth.d.ts +196 -0
  50. package/dist/platform-auth.d.ts.map +1 -0
  51. package/dist/platform-auth.js +142 -0
  52. package/dist/platform-auth.js.map +1 -0
  53. package/dist/primitives.d.ts +6 -1
  54. package/dist/primitives.d.ts.map +1 -1
  55. package/dist/primitives.js +8 -2
  56. package/dist/primitives.js.map +1 -1
  57. package/dist/quota.d.ts +9 -9
  58. package/dist/quota.d.ts.map +1 -1
  59. package/dist/quota.js +3 -0
  60. package/dist/quota.js.map +1 -1
  61. package/dist/readiness.d.ts +192 -15
  62. package/dist/readiness.d.ts.map +1 -1
  63. package/dist/readiness.js +12 -0
  64. package/dist/readiness.js.map +1 -1
  65. package/dist/run-strategy.d.ts +51 -3
  66. package/dist/run-strategy.d.ts.map +1 -1
  67. package/dist/run-strategy.js +58 -2
  68. package/dist/run-strategy.js.map +1 -1
  69. package/dist/setup-login.d.ts +5 -5
  70. package/dist/setup.d.ts +102 -95
  71. package/dist/setup.d.ts.map +1 -1
  72. package/dist/setup.js +29 -5
  73. package/dist/setup.js.map +1 -1
  74. package/dist/task.d.ts +641 -19
  75. package/dist/task.d.ts.map +1 -1
  76. package/dist/task.js +40 -5
  77. package/dist/task.js.map +1 -1
  78. package/dist/telemetry.d.ts +2 -2
  79. package/dist/telemetry.js +3 -3
  80. package/dist/telemetry.js.map +1 -1
  81. package/dist/thread.d.ts +1 -1
  82. package/dist/thread.js +2 -2
  83. package/dist/thread.js.map +1 -1
  84. package/generated/AgentCapabilityCatalog.schema.json +27 -2
  85. package/generated/ControlCredentialProfileCreateRequest.schema.json +1 -1
  86. package/generated/ControlCredentialProfileCreateResponse.schema.json +13 -4
  87. package/generated/ControlCredentialProfileDeleteResponse.schema.json +27 -3
  88. package/generated/ControlCredentialProfileUpdateResponse.schema.json +13 -4
  89. package/generated/ControlCredentialProfilesQueryResponse.schema.json +142 -8
  90. package/generated/ControlCredentialProfilesResponse.schema.json +13 -4
  91. package/generated/ControlCredentialProfilesSnapshotResponse.schema.json +142 -8
  92. package/generated/ControlHarnessListResponse.schema.json +127 -3
  93. package/generated/ControlQuotaResponse.schema.json +2 -1
  94. package/generated/ControlRunAgainDraft.schema.json +20 -3
  95. package/generated/ControlRunDetail.schema.json +10 -8
  96. package/generated/ControlRunListResponse.schema.json +6 -4
  97. package/generated/ControlRunStartRequest.schema.json +5 -2
  98. package/generated/ControlRunSummary.schema.json +6 -4
  99. package/generated/ControlSetupJob.schema.json +5 -1
  100. package/generated/ControlSetupJobCreateRequest.schema.json +1 -1
  101. package/generated/ControlSetupJobEvent.schema.json +5 -1
  102. package/generated/ControlSetupJobListResponse.schema.json +5 -1
  103. package/generated/ControlSetupJobSnapshot.schema.json +5 -1
  104. package/generated/ControlThread.schema.json +3 -3
  105. package/generated/ControlThreadCreateRequest.schema.json +0 -1
  106. package/generated/ControlThreadDetail.schema.json +3 -3
  107. package/generated/ControlThreadListResponse.schema.json +3 -3
  108. package/generated/ControlThreadTurnRequest.schema.json +0 -1
  109. package/generated/ControlThreadUpdateRequest.schema.json +1 -2
  110. package/generated/ControlTrustListResponse.schema.json +0 -1
  111. package/generated/ControlTrustState.schema.json +0 -1
  112. package/generated/ControlTrustUpdateRequest.schema.json +0 -1
  113. package/generated/CredentialProfile.schema.json +3 -3
  114. package/generated/CredentialProfileStatus.schema.json +10 -1
  115. package/generated/GlobalConfig.schema.json +4 -4
  116. package/generated/HarnessManifest.schema.json +101 -3
  117. package/generated/HarnessStatusDto.schema.json +127 -3
  118. package/generated/McpRunHandleResult.schema.json +4 -2
  119. package/generated/McpRunToolResult.schema.json +4 -2
  120. package/generated/RunFailure.schema.json +4 -2
  121. package/generated/RunTelemetry.schema.json +5 -5
  122. package/generated/TaskContract.schema.json +8 -8
  123. package/generated/Thread.schema.json +3 -3
  124. package/generated/TrustConfig.schema.json +0 -2
  125. package/package.json +2 -2
package/dist/credential-profile-snapshot.d.ts CHANGED
@@ -55,6 +55,8 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
55
55
  availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
56
56
  verification: z.ZodEnum<["passed", "failed", "not_run"]>;
57
57
  verification_source: z.ZodDefault<z.ZodEnum<["local_store", "vendor"]>>;
58
+ stale: z.ZodOptional<z.ZodBoolean>;
59
+ stale_age_ms: z.ZodOptional<z.ZodNumber>;
58
60
  detail: z.ZodOptional<z.ZodString>;
59
61
  last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
60
62
  }, "strict", z.ZodTypeAny, {
@@ -63,6 +65,8 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
63
65
  availability: "available" | "unavailable" | "unknown";
64
66
  verification: "failed" | "not_run" | "passed";
65
67
  verification_source: "local_store" | "vendor";
68
+ stale?: boolean | undefined;
69
+ stale_age_ms?: number | undefined;
66
70
  detail?: string | undefined;
67
71
  last_verified_at: string | null;
68
72
  }, {
@@ -71,6 +75,8 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
71
75
  availability: "available" | "unavailable" | "unknown";
72
76
  verification: "failed" | "not_run" | "passed";
73
77
  verification_source?: "local_store" | "vendor" | undefined;
78
+ stale?: boolean | undefined;
79
+ stale_age_ms?: number | undefined;
74
80
  detail?: string | undefined;
75
81
  last_verified_at?: string | null | undefined;
76
82
  }>;
@@ -101,6 +107,8 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
101
107
  availability: "available" | "unavailable" | "unknown";
102
108
  verification: "failed" | "not_run" | "passed";
103
109
  verification_source: "local_store" | "vendor";
110
+ stale?: boolean | undefined;
111
+ stale_age_ms?: number | undefined;
104
112
  detail?: string | undefined;
105
113
  last_verified_at: string | null;
106
114
  };
@@ -125,6 +133,8 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
125
133
  availability: "available" | "unavailable" | "unknown";
126
134
  verification: "failed" | "not_run" | "passed";
127
135
  verification_source?: "local_store" | "vendor" | undefined;
136
+ stale?: boolean | undefined;
137
+ stale_age_ms?: number | undefined;
128
138
  detail?: string | undefined;
129
139
  last_verified_at?: string | null | undefined;
130
140
  };
@@ -274,22 +284,51 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
274
284
  adapter_version: z.ZodOptional<z.ZodString>;
275
285
  provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
276
286
  capability_profile: z.ZodDefault<z.ZodObject<{
277
- auth: z.ZodDefault<z.ZodObject<{
287
+ auth: z.ZodDefault<z.ZodEffects<z.ZodObject<{
278
288
  supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
279
289
  preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
280
290
  credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
281
291
  source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
282
292
  kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
283
293
  relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
294
+ platforms: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">>, ("darwin" | "linux" | "win32")[] | undefined, ("darwin" | "linux" | "win32")[] | undefined>;
284
295
  }, "strip", z.ZodTypeAny, {
285
296
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
286
297
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
287
298
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
299
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
288
300
  }, {
289
301
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
290
302
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
291
303
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
304
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
292
305
  }>, "many">>;
306
+ credential_profile_policies: z.ZodOptional<z.ZodArray<z.ZodObject<{
307
+ source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
308
+ platforms: z.ZodEffects<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">, ("darwin" | "linux" | "win32")[], ("darwin" | "linux" | "win32")[]>;
309
+ identity_scope: z.ZodEnum<["profile", "os_user"]>;
310
+ max_enabled_profiles: z.ZodNullable<z.ZodNumber>;
311
+ cleanup_owner: z.ZodEnum<["claudexor", "vendor"]>;
312
+ }, "strict", z.ZodTypeAny, {
313
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
314
+ platforms: ("darwin" | "linux" | "win32")[];
315
+ identity_scope: "os_user" | "profile";
316
+ max_enabled_profiles: number | null;
317
+ cleanup_owner: "claudexor" | "vendor";
318
+ }, {
319
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
320
+ platforms: ("darwin" | "linux" | "win32")[];
321
+ identity_scope: "os_user" | "profile";
322
+ max_enabled_profiles: number | null;
323
+ cleanup_owner: "claudexor" | "vendor";
324
+ }>, "many">>;
325
+ managed_login: z.ZodOptional<z.ZodNullable<z.ZodObject<{
326
+ stdin: z.ZodEnum<["none", "pipe", "terminal"]>;
327
+ }, "strict", z.ZodTypeAny, {
328
+ stdin: "none" | "pipe" | "terminal";
329
+ }, {
330
+ stdin: "none" | "pipe" | "terminal";
331
+ }>>>;
293
332
  }, "strip", z.ZodTypeAny, {
294
333
  supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
295
334
  preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
@@ -297,7 +336,56 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
297
336
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
298
337
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
299
338
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
339
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
340
+ }[];
341
+ credential_profile_policies?: {
342
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
343
+ platforms: ("darwin" | "linux" | "win32")[];
344
+ identity_scope: "os_user" | "profile";
345
+ max_enabled_profiles: number | null;
346
+ cleanup_owner: "claudexor" | "vendor";
347
+ }[] | undefined;
348
+ managed_login?: {
349
+ stdin: "none" | "pipe" | "terminal";
350
+ } | null | undefined;
351
+ }, {
352
+ supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
353
+ preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
354
+ credential_transports?: {
355
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
356
+ kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
357
+ relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
358
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
359
+ }[] | undefined;
360
+ credential_profile_policies?: {
361
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
362
+ platforms: ("darwin" | "linux" | "win32")[];
363
+ identity_scope: "os_user" | "profile";
364
+ max_enabled_profiles: number | null;
365
+ cleanup_owner: "claudexor" | "vendor";
366
+ }[] | undefined;
367
+ managed_login?: {
368
+ stdin: "none" | "pipe" | "terminal";
369
+ } | null | undefined;
370
+ }>, {
371
+ supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
372
+ preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
373
+ credential_transports: {
374
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
375
+ kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
376
+ relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
377
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
300
378
  }[];
379
+ credential_profile_policies?: {
380
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
381
+ platforms: ("darwin" | "linux" | "win32")[];
382
+ identity_scope: "os_user" | "profile";
383
+ max_enabled_profiles: number | null;
384
+ cleanup_owner: "claudexor" | "vendor";
385
+ }[] | undefined;
386
+ managed_login?: {
387
+ stdin: "none" | "pipe" | "terminal";
388
+ } | null | undefined;
301
389
  }, {
302
390
  supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
303
391
  preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
@@ -305,7 +393,18 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
305
393
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
306
394
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
307
395
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
396
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
397
+ }[] | undefined;
398
+ credential_profile_policies?: {
399
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
400
+ platforms: ("darwin" | "linux" | "win32")[];
401
+ identity_scope: "os_user" | "profile";
402
+ max_enabled_profiles: number | null;
403
+ cleanup_owner: "claudexor" | "vendor";
308
404
  }[] | undefined;
405
+ managed_login?: {
406
+ stdin: "none" | "pipe" | "terminal";
407
+ } | null | undefined;
309
408
  }>>;
310
409
  access_control: z.ZodDefault<z.ZodObject<{
311
410
  readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
@@ -315,11 +414,11 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
315
414
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
316
415
  }>>;
317
416
  isolation: z.ZodDefault<z.ZodObject<{
318
- supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
417
+ supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
319
418
  }, "strip", z.ZodTypeAny, {
320
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
419
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
321
420
  }, {
322
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
421
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
323
422
  }>>;
324
423
  attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
325
424
  kind: z.ZodEnum<["image", "file"]>;
@@ -350,13 +449,24 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
350
449
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
351
450
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
352
451
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
452
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
353
453
  }[];
454
+ credential_profile_policies?: {
455
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
456
+ platforms: ("darwin" | "linux" | "win32")[];
457
+ identity_scope: "os_user" | "profile";
458
+ max_enabled_profiles: number | null;
459
+ cleanup_owner: "claudexor" | "vendor";
460
+ }[] | undefined;
461
+ managed_login?: {
462
+ stdin: "none" | "pipe" | "terminal";
463
+ } | null | undefined;
354
464
  };
355
465
  access_control: {
356
466
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
357
467
  };
358
468
  isolation: {
359
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
469
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
360
470
  };
361
471
  attachment_inputs: {
362
472
  kind: "file" | "image";
@@ -375,13 +485,24 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
375
485
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
376
486
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
377
487
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
488
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
489
+ }[] | undefined;
490
+ credential_profile_policies?: {
491
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
492
+ platforms: ("darwin" | "linux" | "win32")[];
493
+ identity_scope: "os_user" | "profile";
494
+ max_enabled_profiles: number | null;
495
+ cleanup_owner: "claudexor" | "vendor";
378
496
  }[] | undefined;
497
+ managed_login?: {
498
+ stdin: "none" | "pipe" | "terminal";
499
+ } | null | undefined;
379
500
  } | undefined;
380
501
  access_control?: {
381
502
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
382
503
  } | undefined;
383
504
  isolation?: {
384
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
505
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
385
506
  } | undefined;
386
507
  attachment_inputs?: {
387
508
  kind: "file" | "image";
@@ -491,7 +612,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
491
612
  known_models_verified_against?: string | null | undefined;
492
613
  }>;
493
614
  auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
494
- access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
615
+ access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">>;
495
616
  }, "strip", z.ZodTypeAny, {
496
617
  id: string;
497
618
  display_name: string;
@@ -507,13 +628,24 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
507
628
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
508
629
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
509
630
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
631
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
510
632
  }[];
633
+ credential_profile_policies?: {
634
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
635
+ platforms: ("darwin" | "linux" | "win32")[];
636
+ identity_scope: "os_user" | "profile";
637
+ max_enabled_profiles: number | null;
638
+ cleanup_owner: "claudexor" | "vendor";
639
+ }[] | undefined;
640
+ managed_login?: {
641
+ stdin: "none" | "pipe" | "terminal";
642
+ } | null | undefined;
511
643
  };
512
644
  access_control: {
513
645
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
514
646
  };
515
647
  isolation: {
516
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
648
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
517
649
  };
518
650
  attachment_inputs: {
519
651
  kind: "file" | "image";
@@ -555,7 +687,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
555
687
  known_models_verified_against: string | null;
556
688
  };
557
689
  auth_modes: ("api_key" | "local_session" | "none")[];
558
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
690
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
559
691
  }, {
560
692
  id: string;
561
693
  display_name: string;
@@ -571,13 +703,24 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
571
703
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
572
704
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
573
705
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
706
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
707
+ }[] | undefined;
708
+ credential_profile_policies?: {
709
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
710
+ platforms: ("darwin" | "linux" | "win32")[];
711
+ identity_scope: "os_user" | "profile";
712
+ max_enabled_profiles: number | null;
713
+ cleanup_owner: "claudexor" | "vendor";
574
714
  }[] | undefined;
715
+ managed_login?: {
716
+ stdin: "none" | "pipe" | "terminal";
717
+ } | null | undefined;
575
718
  } | undefined;
576
719
  access_control?: {
577
720
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
578
721
  } | undefined;
579
722
  isolation?: {
580
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
723
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
581
724
  } | undefined;
582
725
  attachment_inputs?: {
583
726
  kind: "file" | "image";
@@ -619,7 +762,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
619
762
  known_models_verified_against?: string | null | undefined;
620
763
  };
621
764
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
622
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
765
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
623
766
  }>>>;
624
767
  enabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
625
768
  routableIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -713,6 +856,13 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
713
856
  remediation?: string | null | undefined;
714
857
  requiresFullAccess?: boolean | undefined;
715
858
  }>>>;
859
+ setupLogin: z.ZodOptional<z.ZodNullable<z.ZodObject<{
860
+ mode: z.ZodEnum<["in_app", "external_terminal"]>;
861
+ }, "strict", z.ZodTypeAny, {
862
+ mode: "external_terminal" | "in_app";
863
+ }, {
864
+ mode: "external_terminal" | "in_app";
865
+ }>>>;
716
866
  }, "strip", z.ZodTypeAny, {
717
867
  id: string;
718
868
  status: "degraded" | "ok" | "unavailable";
@@ -731,13 +881,24 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
731
881
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
732
882
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
733
883
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
884
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
734
885
  }[];
886
+ credential_profile_policies?: {
887
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
888
+ platforms: ("darwin" | "linux" | "win32")[];
889
+ identity_scope: "os_user" | "profile";
890
+ max_enabled_profiles: number | null;
891
+ cleanup_owner: "claudexor" | "vendor";
892
+ }[] | undefined;
893
+ managed_login?: {
894
+ stdin: "none" | "pipe" | "terminal";
895
+ } | null | undefined;
735
896
  };
736
897
  access_control: {
737
898
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
738
899
  };
739
900
  isolation: {
740
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
901
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
741
902
  };
742
903
  attachment_inputs: {
743
904
  kind: "file" | "image";
@@ -779,7 +940,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
779
940
  known_models_verified_against: string | null;
780
941
  };
781
942
  auth_modes: ("api_key" | "local_session" | "none")[];
782
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
943
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
783
944
  } | null | undefined;
784
945
  enabledIntents: string[];
785
946
  routableIntents: string[];
@@ -815,6 +976,9 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
815
976
  remediation: string | null;
816
977
  requiresFullAccess: boolean;
817
978
  } | null;
979
+ setupLogin?: {
980
+ mode: "external_terminal" | "in_app";
981
+ } | null | undefined;
818
982
  }, {
819
983
  id: string;
820
984
  status: "degraded" | "ok" | "unavailable";
@@ -833,13 +997,24 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
833
997
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
834
998
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
835
999
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
1000
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
836
1001
  }[] | undefined;
1002
+ credential_profile_policies?: {
1003
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
1004
+ platforms: ("darwin" | "linux" | "win32")[];
1005
+ identity_scope: "os_user" | "profile";
1006
+ max_enabled_profiles: number | null;
1007
+ cleanup_owner: "claudexor" | "vendor";
1008
+ }[] | undefined;
1009
+ managed_login?: {
1010
+ stdin: "none" | "pipe" | "terminal";
1011
+ } | null | undefined;
837
1012
  } | undefined;
838
1013
  access_control?: {
839
1014
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
840
1015
  } | undefined;
841
1016
  isolation?: {
842
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
1017
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
843
1018
  } | undefined;
844
1019
  attachment_inputs?: {
845
1020
  kind: "file" | "image";
@@ -881,7 +1056,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
881
1056
  known_models_verified_against?: string | null | undefined;
882
1057
  };
883
1058
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
884
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
1059
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
885
1060
  } | null | undefined;
886
1061
  enabledIntents?: string[] | undefined;
887
1062
  routableIntents?: string[] | undefined;
@@ -917,6 +1092,9 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
917
1092
  remediation?: string | null | undefined;
918
1093
  requiresFullAccess?: boolean | undefined;
919
1094
  } | null | undefined;
1095
+ setupLogin?: {
1096
+ mode: "external_terminal" | "in_app";
1097
+ } | null | undefined;
920
1098
  }>, "many">;
921
1099
  git: z.ZodObject<{
922
1100
  status: z.ZodEnum<["available", "missing", "developer_tools_stub", "failed"]>;
@@ -1098,7 +1276,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1098
1276
  plan_label?: string | null | undefined;
1099
1277
  subject_id?: string | null | undefined;
1100
1278
  }>;
1101
- reason: z.ZodEnum<["not_logged_in", "transport_unavailable", "platform_unsupported", "refresh_failed", "no_source", "auth_revoked"]>;
1279
+ reason: z.ZodEnum<["not_logged_in", "transport_unavailable", "platform_unsupported", "refresh_failed", "no_source", "auth_revoked", "credential_profile_ambiguous"]>;
1102
1280
  detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
1103
1281
  observed_at: z.ZodString;
1104
1282
  }, "strict", z.ZodTypeAny, {
@@ -1108,7 +1286,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1108
1286
  plan_label: string | null;
1109
1287
  subject_id: string | null;
1110
1288
  };
1111
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1289
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1112
1290
  detail: string | null;
1113
1291
  observed_at: string;
1114
1292
  }, {
@@ -1118,7 +1296,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1118
1296
  plan_label?: string | null | undefined;
1119
1297
  subject_id?: string | null | undefined;
1120
1298
  };
1121
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1299
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1122
1300
  detail?: string | null | undefined;
1123
1301
  observed_at: string;
1124
1302
  }>, "many">>;
@@ -1162,7 +1340,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1162
1340
  plan_label: string | null;
1163
1341
  subject_id: string | null;
1164
1342
  };
1165
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1343
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1166
1344
  detail: string | null;
1167
1345
  observed_at: string;
1168
1346
  }[];
@@ -1206,7 +1384,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1206
1384
  plan_label?: string | null | undefined;
1207
1385
  subject_id?: string | null | undefined;
1208
1386
  };
1209
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1387
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1210
1388
  detail?: string | null | undefined;
1211
1389
  observed_at: string;
1212
1390
  }[] | undefined;
@@ -1231,6 +1409,8 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1231
1409
  availability: "available" | "unavailable" | "unknown";
1232
1410
  verification: "failed" | "not_run" | "passed";
1233
1411
  verification_source: "local_store" | "vendor";
1412
+ stale?: boolean | undefined;
1413
+ stale_age_ms?: number | undefined;
1234
1414
  detail?: string | undefined;
1235
1415
  last_verified_at: string | null;
1236
1416
  };
@@ -1288,13 +1468,24 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1288
1468
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
1289
1469
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
1290
1470
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
1471
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
1291
1472
  }[];
1473
+ credential_profile_policies?: {
1474
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
1475
+ platforms: ("darwin" | "linux" | "win32")[];
1476
+ identity_scope: "os_user" | "profile";
1477
+ max_enabled_profiles: number | null;
1478
+ cleanup_owner: "claudexor" | "vendor";
1479
+ }[] | undefined;
1480
+ managed_login?: {
1481
+ stdin: "none" | "pipe" | "terminal";
1482
+ } | null | undefined;
1292
1483
  };
1293
1484
  access_control: {
1294
1485
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
1295
1486
  };
1296
1487
  isolation: {
1297
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
1488
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
1298
1489
  };
1299
1490
  attachment_inputs: {
1300
1491
  kind: "file" | "image";
@@ -1336,7 +1527,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1336
1527
  known_models_verified_against: string | null;
1337
1528
  };
1338
1529
  auth_modes: ("api_key" | "local_session" | "none")[];
1339
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
1530
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
1340
1531
  } | null | undefined;
1341
1532
  enabledIntents: string[];
1342
1533
  routableIntents: string[];
@@ -1372,6 +1563,9 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1372
1563
  remediation: string | null;
1373
1564
  requiresFullAccess: boolean;
1374
1565
  } | null;
1566
+ setupLogin?: {
1567
+ mode: "external_terminal" | "in_app";
1568
+ } | null | undefined;
1375
1569
  }[];
1376
1570
  git: {
1377
1571
  status: "available" | "developer_tools_stub" | "failed" | "missing";
@@ -1418,7 +1612,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1418
1612
  plan_label: string | null;
1419
1613
  subject_id: string | null;
1420
1614
  };
1421
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1615
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1422
1616
  detail: string | null;
1423
1617
  observed_at: string;
1424
1618
  }[];
@@ -1443,6 +1637,8 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1443
1637
  availability: "available" | "unavailable" | "unknown";
1444
1638
  verification: "failed" | "not_run" | "passed";
1445
1639
  verification_source?: "local_store" | "vendor" | undefined;
1640
+ stale?: boolean | undefined;
1641
+ stale_age_ms?: number | undefined;
1446
1642
  detail?: string | undefined;
1447
1643
  last_verified_at?: string | null | undefined;
1448
1644
  };
@@ -1500,13 +1696,24 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1500
1696
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
1501
1697
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
1502
1698
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
1699
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
1503
1700
  }[] | undefined;
1701
+ credential_profile_policies?: {
1702
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
1703
+ platforms: ("darwin" | "linux" | "win32")[];
1704
+ identity_scope: "os_user" | "profile";
1705
+ max_enabled_profiles: number | null;
1706
+ cleanup_owner: "claudexor" | "vendor";
1707
+ }[] | undefined;
1708
+ managed_login?: {
1709
+ stdin: "none" | "pipe" | "terminal";
1710
+ } | null | undefined;
1504
1711
  } | undefined;
1505
1712
  access_control?: {
1506
1713
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
1507
1714
  } | undefined;
1508
1715
  isolation?: {
1509
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
1716
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
1510
1717
  } | undefined;
1511
1718
  attachment_inputs?: {
1512
1719
  kind: "file" | "image";
@@ -1548,7 +1755,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1548
1755
  known_models_verified_against?: string | null | undefined;
1549
1756
  };
1550
1757
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
1551
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
1758
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
1552
1759
  } | null | undefined;
1553
1760
  enabledIntents?: string[] | undefined;
1554
1761
  routableIntents?: string[] | undefined;
@@ -1584,6 +1791,9 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1584
1791
  remediation?: string | null | undefined;
1585
1792
  requiresFullAccess?: boolean | undefined;
1586
1793
  } | null | undefined;
1794
+ setupLogin?: {
1795
+ mode: "external_terminal" | "in_app";
1796
+ } | null | undefined;
1587
1797
  }[];
1588
1798
  git: {
1589
1799
  status: "available" | "developer_tools_stub" | "failed" | "missing";
@@ -1630,7 +1840,7 @@ export declare const ControlCredentialProfilesSnapshotResponse: z.ZodObject<{
1630
1840
  plan_label?: string | null | undefined;
1631
1841
  subject_id?: string | null | undefined;
1632
1842
  };
1633
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1843
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
1634
1844
  detail?: string | null | undefined;
1635
1845
  observed_at: string;
1636
1846
  }[] | undefined;
@@ -1696,6 +1906,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
1696
1906
  availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
1697
1907
  verification: z.ZodEnum<["passed", "failed", "not_run"]>;
1698
1908
  verification_source: z.ZodDefault<z.ZodEnum<["local_store", "vendor"]>>;
1909
+ stale: z.ZodOptional<z.ZodBoolean>;
1910
+ stale_age_ms: z.ZodOptional<z.ZodNumber>;
1699
1911
  detail: z.ZodOptional<z.ZodString>;
1700
1912
  last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
1701
1913
  }, "strict", z.ZodTypeAny, {
@@ -1704,6 +1916,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
1704
1916
  availability: "available" | "unavailable" | "unknown";
1705
1917
  verification: "failed" | "not_run" | "passed";
1706
1918
  verification_source: "local_store" | "vendor";
1919
+ stale?: boolean | undefined;
1920
+ stale_age_ms?: number | undefined;
1707
1921
  detail?: string | undefined;
1708
1922
  last_verified_at: string | null;
1709
1923
  }, {
@@ -1712,6 +1926,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
1712
1926
  availability: "available" | "unavailable" | "unknown";
1713
1927
  verification: "failed" | "not_run" | "passed";
1714
1928
  verification_source?: "local_store" | "vendor" | undefined;
1929
+ stale?: boolean | undefined;
1930
+ stale_age_ms?: number | undefined;
1715
1931
  detail?: string | undefined;
1716
1932
  last_verified_at?: string | null | undefined;
1717
1933
  }>;
@@ -1742,6 +1958,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
1742
1958
  availability: "available" | "unavailable" | "unknown";
1743
1959
  verification: "failed" | "not_run" | "passed";
1744
1960
  verification_source: "local_store" | "vendor";
1961
+ stale?: boolean | undefined;
1962
+ stale_age_ms?: number | undefined;
1745
1963
  detail?: string | undefined;
1746
1964
  last_verified_at: string | null;
1747
1965
  };
@@ -1766,6 +1984,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
1766
1984
  availability: "available" | "unavailable" | "unknown";
1767
1985
  verification: "failed" | "not_run" | "passed";
1768
1986
  verification_source?: "local_store" | "vendor" | undefined;
1987
+ stale?: boolean | undefined;
1988
+ stale_age_ms?: number | undefined;
1769
1989
  detail?: string | undefined;
1770
1990
  last_verified_at?: string | null | undefined;
1771
1991
  };
@@ -1921,6 +2141,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
1921
2141
  availability: "available" | "unavailable" | "unknown";
1922
2142
  verification: "failed" | "not_run" | "passed";
1923
2143
  verification_source: "local_store" | "vendor";
2144
+ stale?: boolean | undefined;
2145
+ stale_age_ms?: number | undefined;
1924
2146
  detail?: string | undefined;
1925
2147
  last_verified_at: string | null;
1926
2148
  };
@@ -1978,6 +2200,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
1978
2200
  availability: "available" | "unavailable" | "unknown";
1979
2201
  verification: "failed" | "not_run" | "passed";
1980
2202
  verification_source?: "local_store" | "vendor" | undefined;
2203
+ stale?: boolean | undefined;
2204
+ stale_age_ms?: number | undefined;
1981
2205
  detail?: string | undefined;
1982
2206
  last_verified_at?: string | null | undefined;
1983
2207
  };
@@ -2071,6 +2295,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2071
2295
  availability: z.ZodEnum<["available", "unavailable", "unknown"]>;
2072
2296
  verification: z.ZodEnum<["passed", "failed", "not_run"]>;
2073
2297
  verification_source: z.ZodDefault<z.ZodEnum<["local_store", "vendor"]>>;
2298
+ stale: z.ZodOptional<z.ZodBoolean>;
2299
+ stale_age_ms: z.ZodOptional<z.ZodNumber>;
2074
2300
  detail: z.ZodOptional<z.ZodString>;
2075
2301
  last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
2076
2302
  }, "strict", z.ZodTypeAny, {
@@ -2079,6 +2305,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2079
2305
  availability: "available" | "unavailable" | "unknown";
2080
2306
  verification: "failed" | "not_run" | "passed";
2081
2307
  verification_source: "local_store" | "vendor";
2308
+ stale?: boolean | undefined;
2309
+ stale_age_ms?: number | undefined;
2082
2310
  detail?: string | undefined;
2083
2311
  last_verified_at: string | null;
2084
2312
  }, {
@@ -2087,6 +2315,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2087
2315
  availability: "available" | "unavailable" | "unknown";
2088
2316
  verification: "failed" | "not_run" | "passed";
2089
2317
  verification_source?: "local_store" | "vendor" | undefined;
2318
+ stale?: boolean | undefined;
2319
+ stale_age_ms?: number | undefined;
2090
2320
  detail?: string | undefined;
2091
2321
  last_verified_at?: string | null | undefined;
2092
2322
  }>;
@@ -2117,6 +2347,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2117
2347
  availability: "available" | "unavailable" | "unknown";
2118
2348
  verification: "failed" | "not_run" | "passed";
2119
2349
  verification_source: "local_store" | "vendor";
2350
+ stale?: boolean | undefined;
2351
+ stale_age_ms?: number | undefined;
2120
2352
  detail?: string | undefined;
2121
2353
  last_verified_at: string | null;
2122
2354
  };
@@ -2141,6 +2373,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2141
2373
  availability: "available" | "unavailable" | "unknown";
2142
2374
  verification: "failed" | "not_run" | "passed";
2143
2375
  verification_source?: "local_store" | "vendor" | undefined;
2376
+ stale?: boolean | undefined;
2377
+ stale_age_ms?: number | undefined;
2144
2378
  detail?: string | undefined;
2145
2379
  last_verified_at?: string | null | undefined;
2146
2380
  };
@@ -2290,22 +2524,51 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2290
2524
  adapter_version: z.ZodOptional<z.ZodString>;
2291
2525
  provider_family: z.ZodDefault<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>>;
2292
2526
  capability_profile: z.ZodDefault<z.ZodObject<{
2293
- auth: z.ZodDefault<z.ZodObject<{
2527
+ auth: z.ZodDefault<z.ZodEffects<z.ZodObject<{
2294
2528
  supported_sources: z.ZodDefault<z.ZodArray<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>, "many">>;
2295
2529
  preferred_source: z.ZodDefault<z.ZodNullable<z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>>>;
2296
2530
  credential_transports: z.ZodDefault<z.ZodArray<z.ZodObject<{
2297
2531
  source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
2298
2532
  kind: z.ZodEnum<["config_file", "env_var", "oauth_token_env", "os_keychain", "http_header", "none"]>;
2299
2533
  relocatable_by: z.ZodDefault<z.ZodArray<z.ZodEnum<["HOME", "CONFIG_DIR", "ENV", "none"]>, "many">>;
2534
+ platforms: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">>, ("darwin" | "linux" | "win32")[] | undefined, ("darwin" | "linux" | "win32")[] | undefined>;
2300
2535
  }, "strip", z.ZodTypeAny, {
2301
2536
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2302
2537
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2303
2538
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
2539
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2304
2540
  }, {
2305
2541
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2306
2542
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2307
2543
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
2544
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2308
2545
  }>, "many">>;
2546
+ credential_profile_policies: z.ZodOptional<z.ZodArray<z.ZodObject<{
2547
+ source: z.ZodEnum<["native_session", "oauth_token_env", "api_key_env", "api_key_flag", "provider_auth_file", "none"]>;
2548
+ platforms: z.ZodEffects<z.ZodArray<z.ZodEnum<["darwin", "linux", "win32"]>, "many">, ("darwin" | "linux" | "win32")[], ("darwin" | "linux" | "win32")[]>;
2549
+ identity_scope: z.ZodEnum<["profile", "os_user"]>;
2550
+ max_enabled_profiles: z.ZodNullable<z.ZodNumber>;
2551
+ cleanup_owner: z.ZodEnum<["claudexor", "vendor"]>;
2552
+ }, "strict", z.ZodTypeAny, {
2553
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2554
+ platforms: ("darwin" | "linux" | "win32")[];
2555
+ identity_scope: "os_user" | "profile";
2556
+ max_enabled_profiles: number | null;
2557
+ cleanup_owner: "claudexor" | "vendor";
2558
+ }, {
2559
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2560
+ platforms: ("darwin" | "linux" | "win32")[];
2561
+ identity_scope: "os_user" | "profile";
2562
+ max_enabled_profiles: number | null;
2563
+ cleanup_owner: "claudexor" | "vendor";
2564
+ }>, "many">>;
2565
+ managed_login: z.ZodOptional<z.ZodNullable<z.ZodObject<{
2566
+ stdin: z.ZodEnum<["none", "pipe", "terminal"]>;
2567
+ }, "strict", z.ZodTypeAny, {
2568
+ stdin: "none" | "pipe" | "terminal";
2569
+ }, {
2570
+ stdin: "none" | "pipe" | "terminal";
2571
+ }>>>;
2309
2572
  }, "strip", z.ZodTypeAny, {
2310
2573
  supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
2311
2574
  preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
@@ -2313,7 +2576,56 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2313
2576
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2314
2577
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2315
2578
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
2579
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2580
+ }[];
2581
+ credential_profile_policies?: {
2582
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2583
+ platforms: ("darwin" | "linux" | "win32")[];
2584
+ identity_scope: "os_user" | "profile";
2585
+ max_enabled_profiles: number | null;
2586
+ cleanup_owner: "claudexor" | "vendor";
2587
+ }[] | undefined;
2588
+ managed_login?: {
2589
+ stdin: "none" | "pipe" | "terminal";
2590
+ } | null | undefined;
2591
+ }, {
2592
+ supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
2593
+ preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
2594
+ credential_transports?: {
2595
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2596
+ kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2597
+ relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
2598
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2599
+ }[] | undefined;
2600
+ credential_profile_policies?: {
2601
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2602
+ platforms: ("darwin" | "linux" | "win32")[];
2603
+ identity_scope: "os_user" | "profile";
2604
+ max_enabled_profiles: number | null;
2605
+ cleanup_owner: "claudexor" | "vendor";
2606
+ }[] | undefined;
2607
+ managed_login?: {
2608
+ stdin: "none" | "pipe" | "terminal";
2609
+ } | null | undefined;
2610
+ }>, {
2611
+ supported_sources: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[];
2612
+ preferred_source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null;
2613
+ credential_transports: {
2614
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2615
+ kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2616
+ relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
2617
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2316
2618
  }[];
2619
+ credential_profile_policies?: {
2620
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2621
+ platforms: ("darwin" | "linux" | "win32")[];
2622
+ identity_scope: "os_user" | "profile";
2623
+ max_enabled_profiles: number | null;
2624
+ cleanup_owner: "claudexor" | "vendor";
2625
+ }[] | undefined;
2626
+ managed_login?: {
2627
+ stdin: "none" | "pipe" | "terminal";
2628
+ } | null | undefined;
2317
2629
  }, {
2318
2630
  supported_sources?: ("api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file")[] | undefined;
2319
2631
  preferred_source?: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file" | null | undefined;
@@ -2321,7 +2633,18 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2321
2633
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2322
2634
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2323
2635
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
2636
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2637
+ }[] | undefined;
2638
+ credential_profile_policies?: {
2639
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2640
+ platforms: ("darwin" | "linux" | "win32")[];
2641
+ identity_scope: "os_user" | "profile";
2642
+ max_enabled_profiles: number | null;
2643
+ cleanup_owner: "claudexor" | "vendor";
2324
2644
  }[] | undefined;
2645
+ managed_login?: {
2646
+ stdin: "none" | "pipe" | "terminal";
2647
+ } | null | undefined;
2325
2648
  }>>;
2326
2649
  access_control: z.ZodDefault<z.ZodObject<{
2327
2650
  readonly_mechanism: z.ZodDefault<z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>>;
@@ -2331,11 +2654,11 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2331
2654
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
2332
2655
  }>>;
2333
2656
  isolation: z.ZodDefault<z.ZodObject<{
2334
- supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
2657
+ supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
2335
2658
  }, "strip", z.ZodTypeAny, {
2336
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
2659
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
2337
2660
  }, {
2338
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
2661
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
2339
2662
  }>>;
2340
2663
  attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
2341
2664
  kind: z.ZodEnum<["image", "file"]>;
@@ -2366,13 +2689,24 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2366
2689
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2367
2690
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2368
2691
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
2692
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2369
2693
  }[];
2694
+ credential_profile_policies?: {
2695
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2696
+ platforms: ("darwin" | "linux" | "win32")[];
2697
+ identity_scope: "os_user" | "profile";
2698
+ max_enabled_profiles: number | null;
2699
+ cleanup_owner: "claudexor" | "vendor";
2700
+ }[] | undefined;
2701
+ managed_login?: {
2702
+ stdin: "none" | "pipe" | "terminal";
2703
+ } | null | undefined;
2370
2704
  };
2371
2705
  access_control: {
2372
2706
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
2373
2707
  };
2374
2708
  isolation: {
2375
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
2709
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
2376
2710
  };
2377
2711
  attachment_inputs: {
2378
2712
  kind: "file" | "image";
@@ -2391,13 +2725,24 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2391
2725
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2392
2726
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2393
2727
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
2728
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2729
+ }[] | undefined;
2730
+ credential_profile_policies?: {
2731
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2732
+ platforms: ("darwin" | "linux" | "win32")[];
2733
+ identity_scope: "os_user" | "profile";
2734
+ max_enabled_profiles: number | null;
2735
+ cleanup_owner: "claudexor" | "vendor";
2394
2736
  }[] | undefined;
2737
+ managed_login?: {
2738
+ stdin: "none" | "pipe" | "terminal";
2739
+ } | null | undefined;
2395
2740
  } | undefined;
2396
2741
  access_control?: {
2397
2742
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
2398
2743
  } | undefined;
2399
2744
  isolation?: {
2400
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
2745
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
2401
2746
  } | undefined;
2402
2747
  attachment_inputs?: {
2403
2748
  kind: "file" | "image";
@@ -2507,7 +2852,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2507
2852
  known_models_verified_against?: string | null | undefined;
2508
2853
  }>;
2509
2854
  auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
2510
- access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
2855
+ access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">>;
2511
2856
  }, "strip", z.ZodTypeAny, {
2512
2857
  id: string;
2513
2858
  display_name: string;
@@ -2523,13 +2868,24 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2523
2868
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2524
2869
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2525
2870
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
2871
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2526
2872
  }[];
2873
+ credential_profile_policies?: {
2874
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2875
+ platforms: ("darwin" | "linux" | "win32")[];
2876
+ identity_scope: "os_user" | "profile";
2877
+ max_enabled_profiles: number | null;
2878
+ cleanup_owner: "claudexor" | "vendor";
2879
+ }[] | undefined;
2880
+ managed_login?: {
2881
+ stdin: "none" | "pipe" | "terminal";
2882
+ } | null | undefined;
2527
2883
  };
2528
2884
  access_control: {
2529
2885
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
2530
2886
  };
2531
2887
  isolation: {
2532
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
2888
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
2533
2889
  };
2534
2890
  attachment_inputs: {
2535
2891
  kind: "file" | "image";
@@ -2571,7 +2927,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2571
2927
  known_models_verified_against: string | null;
2572
2928
  };
2573
2929
  auth_modes: ("api_key" | "local_session" | "none")[];
2574
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
2930
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
2575
2931
  }, {
2576
2932
  id: string;
2577
2933
  display_name: string;
@@ -2587,13 +2943,24 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2587
2943
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2588
2944
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2589
2945
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
2946
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2947
+ }[] | undefined;
2948
+ credential_profile_policies?: {
2949
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2950
+ platforms: ("darwin" | "linux" | "win32")[];
2951
+ identity_scope: "os_user" | "profile";
2952
+ max_enabled_profiles: number | null;
2953
+ cleanup_owner: "claudexor" | "vendor";
2590
2954
  }[] | undefined;
2955
+ managed_login?: {
2956
+ stdin: "none" | "pipe" | "terminal";
2957
+ } | null | undefined;
2591
2958
  } | undefined;
2592
2959
  access_control?: {
2593
2960
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
2594
2961
  } | undefined;
2595
2962
  isolation?: {
2596
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
2963
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
2597
2964
  } | undefined;
2598
2965
  attachment_inputs?: {
2599
2966
  kind: "file" | "image";
@@ -2635,7 +3002,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2635
3002
  known_models_verified_against?: string | null | undefined;
2636
3003
  };
2637
3004
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
2638
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
3005
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
2639
3006
  }>>>;
2640
3007
  enabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
2641
3008
  routableIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -2729,6 +3096,13 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2729
3096
  remediation?: string | null | undefined;
2730
3097
  requiresFullAccess?: boolean | undefined;
2731
3098
  }>>>;
3099
+ setupLogin: z.ZodOptional<z.ZodNullable<z.ZodObject<{
3100
+ mode: z.ZodEnum<["in_app", "external_terminal"]>;
3101
+ }, "strict", z.ZodTypeAny, {
3102
+ mode: "external_terminal" | "in_app";
3103
+ }, {
3104
+ mode: "external_terminal" | "in_app";
3105
+ }>>>;
2732
3106
  }, "strip", z.ZodTypeAny, {
2733
3107
  id: string;
2734
3108
  status: "degraded" | "ok" | "unavailable";
@@ -2747,13 +3121,24 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2747
3121
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2748
3122
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2749
3123
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
3124
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2750
3125
  }[];
3126
+ credential_profile_policies?: {
3127
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
3128
+ platforms: ("darwin" | "linux" | "win32")[];
3129
+ identity_scope: "os_user" | "profile";
3130
+ max_enabled_profiles: number | null;
3131
+ cleanup_owner: "claudexor" | "vendor";
3132
+ }[] | undefined;
3133
+ managed_login?: {
3134
+ stdin: "none" | "pipe" | "terminal";
3135
+ } | null | undefined;
2751
3136
  };
2752
3137
  access_control: {
2753
3138
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
2754
3139
  };
2755
3140
  isolation: {
2756
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
3141
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
2757
3142
  };
2758
3143
  attachment_inputs: {
2759
3144
  kind: "file" | "image";
@@ -2795,7 +3180,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2795
3180
  known_models_verified_against: string | null;
2796
3181
  };
2797
3182
  auth_modes: ("api_key" | "local_session" | "none")[];
2798
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
3183
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
2799
3184
  } | null | undefined;
2800
3185
  enabledIntents: string[];
2801
3186
  routableIntents: string[];
@@ -2831,6 +3216,9 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2831
3216
  remediation: string | null;
2832
3217
  requiresFullAccess: boolean;
2833
3218
  } | null;
3219
+ setupLogin?: {
3220
+ mode: "external_terminal" | "in_app";
3221
+ } | null | undefined;
2834
3222
  }, {
2835
3223
  id: string;
2836
3224
  status: "degraded" | "ok" | "unavailable";
@@ -2849,13 +3237,24 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2849
3237
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
2850
3238
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
2851
3239
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
3240
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
2852
3241
  }[] | undefined;
3242
+ credential_profile_policies?: {
3243
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
3244
+ platforms: ("darwin" | "linux" | "win32")[];
3245
+ identity_scope: "os_user" | "profile";
3246
+ max_enabled_profiles: number | null;
3247
+ cleanup_owner: "claudexor" | "vendor";
3248
+ }[] | undefined;
3249
+ managed_login?: {
3250
+ stdin: "none" | "pipe" | "terminal";
3251
+ } | null | undefined;
2853
3252
  } | undefined;
2854
3253
  access_control?: {
2855
3254
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
2856
3255
  } | undefined;
2857
3256
  isolation?: {
2858
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
3257
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
2859
3258
  } | undefined;
2860
3259
  attachment_inputs?: {
2861
3260
  kind: "file" | "image";
@@ -2897,7 +3296,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2897
3296
  known_models_verified_against?: string | null | undefined;
2898
3297
  };
2899
3298
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
2900
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
3299
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
2901
3300
  } | null | undefined;
2902
3301
  enabledIntents?: string[] | undefined;
2903
3302
  routableIntents?: string[] | undefined;
@@ -2933,6 +3332,9 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
2933
3332
  remediation?: string | null | undefined;
2934
3333
  requiresFullAccess?: boolean | undefined;
2935
3334
  } | null | undefined;
3335
+ setupLogin?: {
3336
+ mode: "external_terminal" | "in_app";
3337
+ } | null | undefined;
2936
3338
  }>, "many">;
2937
3339
  git: z.ZodObject<{
2938
3340
  status: z.ZodEnum<["available", "missing", "developer_tools_stub", "failed"]>;
@@ -3114,7 +3516,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3114
3516
  plan_label?: string | null | undefined;
3115
3517
  subject_id?: string | null | undefined;
3116
3518
  }>;
3117
- reason: z.ZodEnum<["not_logged_in", "transport_unavailable", "platform_unsupported", "refresh_failed", "no_source", "auth_revoked"]>;
3519
+ reason: z.ZodEnum<["not_logged_in", "transport_unavailable", "platform_unsupported", "refresh_failed", "no_source", "auth_revoked", "credential_profile_ambiguous"]>;
3118
3520
  detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
3119
3521
  observed_at: z.ZodString;
3120
3522
  }, "strict", z.ZodTypeAny, {
@@ -3124,7 +3526,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3124
3526
  plan_label: string | null;
3125
3527
  subject_id: string | null;
3126
3528
  };
3127
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3529
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3128
3530
  detail: string | null;
3129
3531
  observed_at: string;
3130
3532
  }, {
@@ -3134,7 +3536,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3134
3536
  plan_label?: string | null | undefined;
3135
3537
  subject_id?: string | null | undefined;
3136
3538
  };
3137
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3539
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3138
3540
  detail?: string | null | undefined;
3139
3541
  observed_at: string;
3140
3542
  }>, "many">>;
@@ -3178,7 +3580,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3178
3580
  plan_label: string | null;
3179
3581
  subject_id: string | null;
3180
3582
  };
3181
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3583
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3182
3584
  detail: string | null;
3183
3585
  observed_at: string;
3184
3586
  }[];
@@ -3222,7 +3624,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3222
3624
  plan_label?: string | null | undefined;
3223
3625
  subject_id?: string | null | undefined;
3224
3626
  };
3225
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3627
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3226
3628
  detail?: string | null | undefined;
3227
3629
  observed_at: string;
3228
3630
  }[] | undefined;
@@ -3247,6 +3649,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3247
3649
  availability: "available" | "unavailable" | "unknown";
3248
3650
  verification: "failed" | "not_run" | "passed";
3249
3651
  verification_source: "local_store" | "vendor";
3652
+ stale?: boolean | undefined;
3653
+ stale_age_ms?: number | undefined;
3250
3654
  detail?: string | undefined;
3251
3655
  last_verified_at: string | null;
3252
3656
  };
@@ -3304,13 +3708,24 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3304
3708
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
3305
3709
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
3306
3710
  relocatable_by: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[];
3711
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
3307
3712
  }[];
3713
+ credential_profile_policies?: {
3714
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
3715
+ platforms: ("darwin" | "linux" | "win32")[];
3716
+ identity_scope: "os_user" | "profile";
3717
+ max_enabled_profiles: number | null;
3718
+ cleanup_owner: "claudexor" | "vendor";
3719
+ }[] | undefined;
3720
+ managed_login?: {
3721
+ stdin: "none" | "pipe" | "terminal";
3722
+ } | null | undefined;
3308
3723
  };
3309
3724
  access_control: {
3310
3725
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
3311
3726
  };
3312
3727
  isolation: {
3313
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
3728
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
3314
3729
  };
3315
3730
  attachment_inputs: {
3316
3731
  kind: "file" | "image";
@@ -3352,7 +3767,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3352
3767
  known_models_verified_against: string | null;
3353
3768
  };
3354
3769
  auth_modes: ("api_key" | "local_session" | "none")[];
3355
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
3770
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
3356
3771
  } | null | undefined;
3357
3772
  enabledIntents: string[];
3358
3773
  routableIntents: string[];
@@ -3388,6 +3803,9 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3388
3803
  remediation: string | null;
3389
3804
  requiresFullAccess: boolean;
3390
3805
  } | null;
3806
+ setupLogin?: {
3807
+ mode: "external_terminal" | "in_app";
3808
+ } | null | undefined;
3391
3809
  }[];
3392
3810
  git: {
3393
3811
  status: "available" | "developer_tools_stub" | "failed" | "missing";
@@ -3434,7 +3852,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3434
3852
  plan_label: string | null;
3435
3853
  subject_id: string | null;
3436
3854
  };
3437
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3855
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3438
3856
  detail: string | null;
3439
3857
  observed_at: string;
3440
3858
  }[];
@@ -3459,6 +3877,8 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3459
3877
  availability: "available" | "unavailable" | "unknown";
3460
3878
  verification: "failed" | "not_run" | "passed";
3461
3879
  verification_source?: "local_store" | "vendor" | undefined;
3880
+ stale?: boolean | undefined;
3881
+ stale_age_ms?: number | undefined;
3462
3882
  detail?: string | undefined;
3463
3883
  last_verified_at?: string | null | undefined;
3464
3884
  };
@@ -3516,13 +3936,24 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3516
3936
  source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
3517
3937
  kind: "config_file" | "env_var" | "http_header" | "none" | "oauth_token_env" | "os_keychain";
3518
3938
  relocatable_by?: ("CONFIG_DIR" | "ENV" | "HOME" | "none")[] | undefined;
3939
+ platforms?: ("darwin" | "linux" | "win32")[] | undefined;
3519
3940
  }[] | undefined;
3941
+ credential_profile_policies?: {
3942
+ source: "api_key_env" | "api_key_flag" | "native_session" | "none" | "oauth_token_env" | "provider_auth_file";
3943
+ platforms: ("darwin" | "linux" | "win32")[];
3944
+ identity_scope: "os_user" | "profile";
3945
+ max_enabled_profiles: number | null;
3946
+ cleanup_owner: "claudexor" | "vendor";
3947
+ }[] | undefined;
3948
+ managed_login?: {
3949
+ stdin: "none" | "pipe" | "terminal";
3950
+ } | null | undefined;
3520
3951
  } | undefined;
3521
3952
  access_control?: {
3522
3953
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
3523
3954
  } | undefined;
3524
3955
  isolation?: {
3525
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
3956
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
3526
3957
  } | undefined;
3527
3958
  attachment_inputs?: {
3528
3959
  kind: "file" | "image";
@@ -3564,7 +3995,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3564
3995
  known_models_verified_against?: string | null | undefined;
3565
3996
  };
3566
3997
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
3567
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
3998
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
3568
3999
  } | null | undefined;
3569
4000
  enabledIntents?: string[] | undefined;
3570
4001
  routableIntents?: string[] | undefined;
@@ -3600,6 +4031,9 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3600
4031
  remediation?: string | null | undefined;
3601
4032
  requiresFullAccess?: boolean | undefined;
3602
4033
  } | null | undefined;
4034
+ setupLogin?: {
4035
+ mode: "external_terminal" | "in_app";
4036
+ } | null | undefined;
3603
4037
  }[];
3604
4038
  git: {
3605
4039
  status: "available" | "developer_tools_stub" | "failed" | "missing";
@@ -3646,7 +4080,7 @@ export declare const ControlCredentialProfilesQueryResponse: z.ZodUnion<[z.ZodOb
3646
4080
  plan_label?: string | null | undefined;
3647
4081
  subject_id?: string | null | undefined;
3648
4082
  };
3649
- reason: "auth_revoked" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
4083
+ reason: "auth_revoked" | "credential_profile_ambiguous" | "no_source" | "not_logged_in" | "platform_unsupported" | "refresh_failed" | "transport_unavailable";
3650
4084
  detail?: string | null | undefined;
3651
4085
  observed_at: string;
3652
4086
  }[] | undefined;