@claudexor/schema 3.8.0 → 3.8.2

package/dist/control.d.ts

@@ -1,16 +1,6 @@
 import { z } from "zod/v3";
 export { ControlQuotaResponse } from "./quota.js";
-export declare const RunExecution: z.ZodObject<{
-    isolation: z.ZodDefault<z.ZodEnum<["envelope", "live"]>>;
-    delegated: z.ZodDefault<z.ZodBoolean>;
-}, "strict", z.ZodTypeAny, {
-    isolation: "envelope" | "live";
-    delegated: boolean;
-}, {
-    isolation?: "envelope" | "live" | undefined;
-    delegated?: boolean | undefined;
-}>;
-export type RunExecution = z.infer<typeof RunExecution>;
+export { RunExecution } from "./control-run-execution.js";
 export declare const ControlReviewerPanelEntry: z.ZodObject<{
     /** Explicit reviewer harness id. Repeated harness ids are allowed so one
      * native provider can review through multiple requested models. */
@@ -19,14 +9,17 @@ export declare const ControlReviewerPanelEntry: z.ZodObject<{
     model: z.ZodOptional<z.ZodString>;
     /** Optional per-reviewer effort hint, passed to that harness only. */
     effort: z.ZodOptional<z.ZodString>;
+    credentialProfileId: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     harness: string;
     model?: string | undefined;
     effort?: string | undefined;
+    credentialProfileId?: string | undefined;
 }, {
     harness: string;
     model?: string | undefined;
     effort?: string | undefined;
+    credentialProfileId?: string | undefined;
 }>;
 export type ControlReviewerPanelEntry = z.infer<typeof ControlReviewerPanelEntry>;
 export declare const ControlRunStartRequest: z.ZodObject<{
@@ -70,12 +63,15 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     execution: z.ZodDefault<z.ZodObject<{
         isolation: z.ZodDefault<z.ZodEnum<["envelope", "live"]>>;
         delegated: z.ZodDefault<z.ZodBoolean>;
+        workspaceRoot: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
         isolation: "envelope" | "live";
         delegated: boolean;
+        workspaceRoot?: string | undefined;
     }, {
         isolation?: "envelope" | "live" | undefined;
         delegated?: boolean | undefined;
+        workspaceRoot?: string | undefined;
     }>>;
     harnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     primaryHarness: z.ZodOptional<z.ZodString>;
@@ -132,7 +128,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         maxUsd: number;
     }>]>>;
     /** Requested access profile. Effective access is derived by the engine and never client-supplied. */
-    access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+    access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>;
     web: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
     externalContextPolicy: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
     /** Opt this run into the agent-driven browser (Playwright MCP). */
@@ -207,14 +203,17 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         model: z.ZodOptional<z.ZodString>;
         /** Optional per-reviewer effort hint, passed to that harness only. */
         effort: z.ZodOptional<z.ZodString>;
+        credentialProfileId: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
         harness: string;
         model?: string | undefined;
         effort?: string | undefined;
+        credentialProfileId?: string | undefined;
     }, {
         harness: string;
         model?: string | undefined;
         effort?: string | undefined;
+        credentialProfileId?: string | undefined;
     }>, "many">>;
     /** Per-run auth route override (subscription/api_key/auto). */
     authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
@@ -273,6 +272,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     execution: {
         isolation: "envelope" | "live";
         delegated: boolean;
+        workspaceRoot?: string | undefined;
     };
     harnesses?: string[] | undefined;
     primaryHarness?: string | undefined;
@@ -296,7 +296,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         kind: "finite";
         maxUsd: number;
     } | undefined;
-    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
     web?: "auto" | "cached" | "live" | "off" | undefined;
     externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
     browser?: boolean | undefined;
@@ -325,6 +325,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         harness: string;
         model?: string | undefined;
         effort?: string | undefined;
+        credentialProfileId?: string | undefined;
     }[] | undefined;
     authPreference?: "api_key" | "auto" | "subscription" | undefined;
     credentialProfileId?: string | null | undefined;
@@ -351,6 +352,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     execution?: {
         isolation?: "envelope" | "live" | undefined;
         delegated?: boolean | undefined;
+        workspaceRoot?: string | undefined;
     } | undefined;
     harnesses?: string[] | undefined;
     primaryHarness?: string | undefined;
@@ -374,7 +376,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         kind: "finite";
         maxUsd: number;
     } | undefined;
-    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
     web?: "auto" | "cached" | "live" | "off" | undefined;
     externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
     browser?: boolean | undefined;
@@ -403,6 +405,7 @@ export declare const ControlRunStartRequest: z.ZodObject<{
         harness: string;
         model?: string | undefined;
         effort?: string | undefined;
+        credentialProfileId?: string | undefined;
     }[] | undefined;
     authPreference?: "api_key" | "auto" | "subscription" | undefined;
     credentialProfileId?: string | null | undefined;
@@ -413,6 +416,325 @@ export declare const ControlRunStartRequest: z.ZodObject<{
     maxTurns?: number | undefined;
 }>;
 export type ControlRunStartRequest = z.infer<typeof ControlRunStartRequest>;
+/** Bounded decoder for immutable accepted request bodies. Active ingress must
+ * continue to parse with ControlRunStartRequest. */
+export declare const RecordedControlRunStartRequest: z.ZodObject<{
+    prompt: z.ZodDefault<z.ZodString>;
+    instructions: z.ZodOptional<z.ZodString>;
+    attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        resourceId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        resourceId: string;
+    }, {
+        resourceId: string;
+    }>, "many">>;
+    mode: z.ZodDefault<z.ZodEnum<["ask", "plan", "agent"]>>;
+    scope: z.ZodDefault<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"project">;
+        root: z.ZodString;
+        context: z.ZodDefault<z.ZodEnum<["auto"]>>;
+        ephemeral: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "project";
+        root: string;
+        context: "auto";
+        ephemeral: boolean;
+    }, {
+        kind: "project";
+        root: string;
+        context?: "auto" | undefined;
+        ephemeral?: boolean | undefined;
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"none">;
+    }, "strict", z.ZodTypeAny, {
+        kind: "none";
+    }, {
+        kind: "none";
+    }>]>>;
+    execution: z.ZodDefault<z.ZodObject<{
+        isolation: z.ZodDefault<z.ZodEnum<["envelope", "live"]>>;
+        delegated: z.ZodDefault<z.ZodBoolean>;
+        workspaceRoot: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        isolation: "envelope" | "live";
+        delegated: boolean;
+        workspaceRoot?: string | undefined;
+    }, {
+        isolation?: "envelope" | "live" | undefined;
+        delegated?: boolean | undefined;
+        workspaceRoot?: string | undefined;
+    }>>;
+    harnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    primaryHarness: z.ZodOptional<z.ZodString>;
+    routingGoal: z.ZodOptional<z.ZodEnum<["auto", "quality", "economy"]>>;
+    model: z.ZodOptional<z.ZodString>;
+    models: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    effort: z.ZodOptional<z.ZodString>;
+    efforts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    reviewerModels: z.ZodOptional<z.ZodRecord<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>, z.ZodString>>;
+    reviewerEfforts: z.ZodOptional<z.ZodRecord<z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>, z.ZodString>>;
+    n: z.ZodOptional<z.ZodNumber>;
+    attempts: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    untilClean: z.ZodOptional<z.ZodBoolean>;
+    deepScan: z.ZodOptional<z.ZodBoolean>;
+    create: z.ZodOptional<z.ZodBoolean>;
+    council: z.ZodOptional<z.ZodBoolean>;
+    synthesis: z.ZodOptional<z.ZodEnum<["auto", "always", "never"]>>;
+    paidBudget: z.ZodOptional<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"unlimited">;
+    }, "strict", z.ZodTypeAny, {
+        kind: "unlimited";
+    }, {
+        kind: "unlimited";
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"finite">;
+        maxUsd: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        kind: "finite";
+        maxUsd: number;
+    }, {
+        kind: "finite";
+        maxUsd: number;
+    }>]>>;
+    web: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+    externalContextPolicy: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
+    browser: z.ZodOptional<z.ZodBoolean>;
+    tests: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        program: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        cwd: z.ZodOptional<z.ZodString>;
+        envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        program: string;
+        args: string[];
+        cwd?: string | undefined;
+        envAllowlist: string[];
+    }, {
+        program: string;
+        args?: string[] | undefined;
+        cwd?: string | undefined;
+        envAllowlist?: string[] | undefined;
+    }>, "many">>;
+    protectedPathApprovals: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        reason: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        path: string;
+        reason?: string | undefined;
+    }, {
+        path: string;
+        reason?: string | undefined;
+    }>, "many">>;
+    threadId: z.ZodOptional<z.ZodString>;
+    turnId: z.ZodOptional<z.ZodString>;
+    parentRunId: z.ZodOptional<z.ZodString>;
+    delegatedFromRunId: z.ZodOptional<z.ZodString>;
+    retryOf: z.ZodOptional<z.ZodString>;
+    planRunId: z.ZodOptional<z.ZodString>;
+    planRef: z.ZodOptional<z.ZodObject<{
+        runId: z.ZodString;
+        sha256: z.ZodString;
+        path: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        runId: string;
+        sha256: string;
+        path: string;
+    }, {
+        runId: string;
+        sha256: string;
+        path: string;
+    }>>;
+    reviewerPanel: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        /** Explicit reviewer harness id. Repeated harness ids are allowed so one
+         * native provider can review through multiple requested models. */
+        harness: z.ZodString;
+        /** Optional per-reviewer model hint, passed to that harness only. */
+        model: z.ZodOptional<z.ZodString>;
+        /** Optional per-reviewer effort hint, passed to that harness only. */
+        effort: z.ZodOptional<z.ZodString>;
+        credentialProfileId: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        harness: string;
+        model?: string | undefined;
+        effort?: string | undefined;
+        credentialProfileId?: string | undefined;
+    }, {
+        harness: string;
+        model?: string | undefined;
+        effort?: string | undefined;
+        credentialProfileId?: string | undefined;
+    }>, "many">>;
+    authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
+    credentialProfileId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    delegate: z.ZodOptional<z.ZodBoolean>;
+    maxSeconds: z.ZodOptional<z.ZodNumber>;
+    denyPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    maxTurns: z.ZodOptional<z.ZodNumber>;
+} & {
+    access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>;
+}, "strict", z.ZodTypeAny, {
+    prompt: string;
+    instructions?: string | undefined;
+    attachments?: {
+        resourceId: string;
+    }[] | undefined;
+    mode: "agent" | "ask" | "plan";
+    scope: {
+        kind: "project";
+        root: string;
+        context: "auto";
+        ephemeral: boolean;
+    } | {
+        kind: "none";
+    };
+    execution: {
+        isolation: "envelope" | "live";
+        delegated: boolean;
+        workspaceRoot?: string | undefined;
+    };
+    harnesses?: string[] | undefined;
+    primaryHarness?: string | undefined;
+    routingGoal?: "auto" | "economy" | "quality" | undefined;
+    model?: string | undefined;
+    models?: Record<string, string> | undefined;
+    effort?: string | undefined;
+    efforts?: Record<string, string> | undefined;
+    reviewerModels?: Partial<Record<"anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai", string>> | undefined;
+    reviewerEfforts?: Partial<Record<"anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai", string>> | undefined;
+    n?: number | undefined;
+    attempts?: number | null | undefined;
+    untilClean?: boolean | undefined;
+    deepScan?: boolean | undefined;
+    create?: boolean | undefined;
+    council?: boolean | undefined;
+    synthesis?: "always" | "auto" | "never" | undefined;
+    paidBudget?: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    } | undefined;
+    web?: "auto" | "cached" | "live" | "off" | undefined;
+    externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
+    browser?: boolean | undefined;
+    tests?: {
+        program: string;
+        args: string[];
+        cwd?: string | undefined;
+        envAllowlist: string[];
+    }[] | undefined;
+    protectedPathApprovals?: {
+        path: string;
+        reason?: string | undefined;
+    }[] | undefined;
+    threadId?: string | undefined;
+    turnId?: string | undefined;
+    parentRunId?: string | undefined;
+    delegatedFromRunId?: string | undefined;
+    retryOf?: string | undefined;
+    planRunId?: string | undefined;
+    planRef?: {
+        runId: string;
+        sha256: string;
+        path: string;
+    } | undefined;
+    reviewerPanel?: {
+        harness: string;
+        model?: string | undefined;
+        effort?: string | undefined;
+        credentialProfileId?: string | undefined;
+    }[] | undefined;
+    authPreference?: "api_key" | "auto" | "subscription" | undefined;
+    credentialProfileId?: string | null | undefined;
+    delegate?: boolean | undefined;
+    maxSeconds?: number | undefined;
+    denyPaths?: string[] | undefined;
+    outputSchema?: Record<string, unknown> | undefined;
+    maxTurns?: number | undefined;
+    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+}, {
+    prompt?: string | undefined;
+    instructions?: string | undefined;
+    attachments?: {
+        resourceId: string;
+    }[] | undefined;
+    mode?: "agent" | "ask" | "plan" | undefined;
+    scope?: {
+        kind: "project";
+        root: string;
+        context?: "auto" | undefined;
+        ephemeral?: boolean | undefined;
+    } | {
+        kind: "none";
+    } | undefined;
+    execution?: {
+        isolation?: "envelope" | "live" | undefined;
+        delegated?: boolean | undefined;
+        workspaceRoot?: string | undefined;
+    } | undefined;
+    harnesses?: string[] | undefined;
+    primaryHarness?: string | undefined;
+    routingGoal?: "auto" | "economy" | "quality" | undefined;
+    model?: string | undefined;
+    models?: Record<string, string> | undefined;
+    effort?: string | undefined;
+    efforts?: Record<string, string> | undefined;
+    reviewerModels?: Partial<Record<"anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai", string>> | undefined;
+    reviewerEfforts?: Partial<Record<"anthropic" | "cursor" | "google" | "local" | "openai" | "opencode" | "unknown" | "xai", string>> | undefined;
+    n?: number | undefined;
+    attempts?: number | null | undefined;
+    untilClean?: boolean | undefined;
+    deepScan?: boolean | undefined;
+    create?: boolean | undefined;
+    council?: boolean | undefined;
+    synthesis?: "always" | "auto" | "never" | undefined;
+    paidBudget?: {
+        kind: "unlimited";
+    } | {
+        kind: "finite";
+        maxUsd: number;
+    } | undefined;
+    web?: "auto" | "cached" | "live" | "off" | undefined;
+    externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
+    browser?: boolean | undefined;
+    tests?: {
+        program: string;
+        args?: string[] | undefined;
+        cwd?: string | undefined;
+        envAllowlist?: string[] | undefined;
+    }[] | undefined;
+    protectedPathApprovals?: {
+        path: string;
+        reason?: string | undefined;
+    }[] | undefined;
+    threadId?: string | undefined;
+    turnId?: string | undefined;
+    parentRunId?: string | undefined;
+    delegatedFromRunId?: string | undefined;
+    retryOf?: string | undefined;
+    planRunId?: string | undefined;
+    planRef?: {
+        runId: string;
+        sha256: string;
+        path: string;
+    } | undefined;
+    reviewerPanel?: {
+        harness: string;
+        model?: string | undefined;
+        effort?: string | undefined;
+        credentialProfileId?: string | undefined;
+    }[] | undefined;
+    authPreference?: "api_key" | "auto" | "subscription" | undefined;
+    credentialProfileId?: string | null | undefined;
+    delegate?: boolean | undefined;
+    maxSeconds?: number | undefined;
+    denyPaths?: string[] | undefined;
+    outputSchema?: Record<string, unknown> | undefined;
+    maxTurns?: number | undefined;
+    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+}>;
+export type RecordedControlRunStartRequest = z.infer<typeof RecordedControlRunStartRequest>;
 export declare const ControlRunStartInfo: z.ZodObject<{
     jobId: z.ZodOptional<z.ZodString>;
     runId: z.ZodString;
@@ -492,12 +814,15 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         execution: z.ZodDefault<z.ZodObject<{
             isolation: z.ZodDefault<z.ZodEnum<["envelope", "live"]>>;
             delegated: z.ZodDefault<z.ZodBoolean>;
+            workspaceRoot: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
             isolation: "envelope" | "live";
             delegated: boolean;
+            workspaceRoot?: string | undefined;
         }, {
             isolation?: "envelope" | "live" | undefined;
             delegated?: boolean | undefined;
+            workspaceRoot?: string | undefined;
         }>>;
         harnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         primaryHarness: z.ZodOptional<z.ZodString>;
@@ -554,7 +879,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             maxUsd: number;
         }>]>>;
         /** Requested access profile. Effective access is derived by the engine and never client-supplied. */
-        access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+        access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>;
         web: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
         externalContextPolicy: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
         /** Opt this run into the agent-driven browser (Playwright MCP). */
@@ -629,14 +954,17 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             model: z.ZodOptional<z.ZodString>;
             /** Optional per-reviewer effort hint, passed to that harness only. */
             effort: z.ZodOptional<z.ZodString>;
+            credentialProfileId: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
             harness: string;
             model?: string | undefined;
             effort?: string | undefined;
+            credentialProfileId?: string | undefined;
         }, {
             harness: string;
             model?: string | undefined;
             effort?: string | undefined;
+            credentialProfileId?: string | undefined;
         }>, "many">>;
         /** Per-run auth route override (subscription/api_key/auto). */
         authPreference: z.ZodOptional<z.ZodEnum<["subscription", "api_key", "auto"]>>;
@@ -695,6 +1023,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         execution: {
             isolation: "envelope" | "live";
             delegated: boolean;
+            workspaceRoot?: string | undefined;
         };
         harnesses?: string[] | undefined;
         primaryHarness?: string | undefined;
@@ -718,7 +1047,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             kind: "finite";
             maxUsd: number;
         } | undefined;
-        access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+        access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
         web?: "auto" | "cached" | "live" | "off" | undefined;
         externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
         browser?: boolean | undefined;
@@ -747,6 +1076,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             harness: string;
             model?: string | undefined;
             effort?: string | undefined;
+            credentialProfileId?: string | undefined;
         }[] | undefined;
         authPreference?: "api_key" | "auto" | "subscription" | undefined;
         credentialProfileId?: string | null | undefined;
@@ -773,6 +1103,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         execution?: {
             isolation?: "envelope" | "live" | undefined;
             delegated?: boolean | undefined;
+            workspaceRoot?: string | undefined;
         } | undefined;
         harnesses?: string[] | undefined;
         primaryHarness?: string | undefined;
@@ -796,7 +1127,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             kind: "finite";
             maxUsd: number;
         } | undefined;
-        access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+        access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
         web?: "auto" | "cached" | "live" | "off" | undefined;
         externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
         browser?: boolean | undefined;
@@ -825,6 +1156,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             harness: string;
             model?: string | undefined;
             effort?: string | undefined;
+            credentialProfileId?: string | undefined;
         }[] | undefined;
         authPreference?: "api_key" | "auto" | "subscription" | undefined;
         credentialProfileId?: string | null | undefined;
@@ -834,6 +1166,13 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         outputSchema?: Record<string, unknown> | undefined;
         maxTurns?: number | undefined;
     }>;
+    accessChoice: z.ZodObject<{
+        required: z.ZodBoolean;
+    }, "strict", z.ZodTypeAny, {
+        required: boolean;
+    }, {
+        required: boolean;
+    }>;
     differences: z.ZodDefault<z.ZodArray<z.ZodObject<{
         field: z.ZodString;
         change: z.ZodLiteral<"omitted">;
@@ -867,6 +1206,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         execution: {
             isolation: "envelope" | "live";
             delegated: boolean;
+            workspaceRoot?: string | undefined;
         };
         harnesses?: string[] | undefined;
         primaryHarness?: string | undefined;
@@ -890,7 +1230,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             kind: "finite";
             maxUsd: number;
         } | undefined;
-        access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+        access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
         web?: "auto" | "cached" | "live" | "off" | undefined;
         externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
         browser?: boolean | undefined;
@@ -919,6 +1259,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             harness: string;
             model?: string | undefined;
             effort?: string | undefined;
+            credentialProfileId?: string | undefined;
         }[] | undefined;
         authPreference?: "api_key" | "auto" | "subscription" | undefined;
         credentialProfileId?: string | null | undefined;
@@ -928,6 +1269,9 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         outputSchema?: Record<string, unknown> | undefined;
         maxTurns?: number | undefined;
     };
+    accessChoice: {
+        required: boolean;
+    };
     differences: {
         field: string;
         change: "omitted";
@@ -953,6 +1297,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         execution?: {
             isolation?: "envelope" | "live" | undefined;
             delegated?: boolean | undefined;
+            workspaceRoot?: string | undefined;
         } | undefined;
         harnesses?: string[] | undefined;
         primaryHarness?: string | undefined;
@@ -976,7 +1321,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             kind: "finite";
             maxUsd: number;
         } | undefined;
-        access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+        access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
         web?: "auto" | "cached" | "live" | "off" | undefined;
         externalContextPolicy?: "auto" | "cached" | "live" | "off" | undefined;
         browser?: boolean | undefined;
@@ -1005,6 +1350,7 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
             harness: string;
             model?: string | undefined;
             effort?: string | undefined;
+            credentialProfileId?: string | undefined;
         }[] | undefined;
         authPreference?: "api_key" | "auto" | "subscription" | undefined;
         credentialProfileId?: string | null | undefined;
@@ -1014,6 +1360,9 @@ export declare const ControlRunAgainDraft: z.ZodObject<{
         outputSchema?: Record<string, unknown> | undefined;
         maxTurns?: number | undefined;
     };
+    accessChoice: {
+        required: boolean;
+    };
     differences?: {
         field: string;
         change: "omitted";
@@ -1251,7 +1600,7 @@ export declare const ControlRunSummary: z.ZodObject<{
     failure: z.ZodDefault<z.ZodNullable<z.ZodObject<{
         phase: z.ZodDefault<z.ZodString>;
         category: z.ZodDefault<z.ZodEnum<["validation", "project", "auth", "harness_unavailable", "harness_error", "config_error", "budget", "policy", "cancelled", "internal", "unknown"]>>;
-        code: z.ZodDefault<z.ZodNullable<z.ZodEnum<["finite_zero", "hard_cap", "estimate_headroom", "unknown_paid_in_flight", "budget_overshoot", "cost_unverifiable", "delegation_child_drain_timeout", "subscription_window_exhausted", "credential_pool_exhausted", "delegated_home_unavailable", "delegated_confinement_unavailable", "delegated_evidence_incomplete"]>>>;
+        code: z.ZodDefault<z.ZodNullable<z.ZodEnum<["finite_zero", "hard_cap", "estimate_headroom", "unknown_paid_in_flight", "budget_overshoot", "cost_unverifiable", "delegation_child_drain_timeout", "subscription_window_exhausted", "credential_pool_exhausted", "delegated_home_unavailable", "delegated_confinement_unavailable", "delegated_evidence_incomplete", "access_profile_incompatible", "retired_access_profile"]>>>;
         harnessId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         attemptId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         safeMessage: z.ZodString;
@@ -1264,7 +1613,7 @@ export declare const ControlRunSummary: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         phase: string;
         category: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation";
-        code: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
+        code: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
         harnessId: string | null;
         attemptId: string | null;
         safeMessage: string;
@@ -1277,7 +1626,7 @@ export declare const ControlRunSummary: z.ZodObject<{
     }, {
         phase?: string | undefined;
         category?: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation" | undefined;
-        code?: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
+        code?: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
         harnessId?: string | null | undefined;
         attemptId?: string | null | undefined;
         safeMessage: string;
@@ -1320,14 +1669,17 @@ export declare const ControlRunSummary: z.ZodObject<{
         model: z.ZodOptional<z.ZodString>;
         /** Optional per-reviewer effort hint, passed to that harness only. */
         effort: z.ZodOptional<z.ZodString>;
+        credentialProfileId: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
         harness: string;
         model?: string | undefined;
         effort?: string | undefined;
+        credentialProfileId?: string | undefined;
     }, {
         harness: string;
         model?: string | undefined;
         effort?: string | undefined;
+        credentialProfileId?: string | undefined;
     }>, "many">>;
     protectedPathApprovals: z.ZodOptional<z.ZodArray<z.ZodObject<{
         path: z.ZodString;
@@ -1416,9 +1768,9 @@ export declare const ControlRunSummary: z.ZodObject<{
             observed: string;
         } | null | undefined;
     }>>>;
-    access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
-    requestedAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
-    effectiveAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+    access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>;
+    requestedAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>;
+    effectiveAccess: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>;
     externalContextPolicy: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
     webRequired: z.ZodOptional<z.ZodBoolean>;
     webMode: z.ZodOptional<z.ZodEnum<["off", "auto", "cached", "live"]>>;
@@ -1730,7 +2082,7 @@ export declare const ControlRunSummary: z.ZodObject<{
     failure: {
         phase: string;
         category: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation";
-        code: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
+        code: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
         harnessId: string | null;
         attemptId: string | null;
         safeMessage: string;
@@ -1758,6 +2110,7 @@ export declare const ControlRunSummary: z.ZodObject<{
         harness: string;
         model?: string | undefined;
         effort?: string | undefined;
+        credentialProfileId?: string | undefined;
     }[] | undefined;
     protectedPathApprovals?: {
         path: string;
@@ -1899,7 +2252,7 @@ export declare const ControlRunSummary: z.ZodObject<{
     failure?: {
         phase?: string | undefined;
         category?: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation" | undefined;
-        code?: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
+        code?: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
         harnessId?: string | null | undefined;
         attemptId?: string | null | undefined;
         safeMessage: string;
@@ -1927,6 +2280,7 @@ export declare const ControlRunSummary: z.ZodObject<{
         harness: string;
         model?: string | undefined;
         effort?: string | undefined;
+        credentialProfileId?: string | undefined;
     }[] | undefined;
     protectedPathApprovals?: {
         path: string;
@@ -2591,7 +2945,7 @@ export declare const ControlThread: z.ZodObject<{
      * create/PATCH, so the projection must report it back (round-15 #3). */
     credentialProfileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     /** Sticky write scope for write turns (D26); null = repo trust default. */
-    access: z.ZodDefault<z.ZodNullable<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>>;
+    access: z.ZodDefault<z.ZodNullable<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>>;
     state: z.ZodDefault<z.ZodEnum<["active", "closed", "trashed", "purged"]>>;
     trashedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     purgeAfter: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -3479,7 +3833,7 @@ export declare const ControlThreadCreateRequest: z.ZodObject<{
     primaryHarness: z.ZodOptional<z.ZodString>;
     /** Sticky eligible pool for the thread; turns inherit it when unset. */
     eligibleHarnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+    access: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>;
 }, "strict", z.ZodTypeAny, {
     title?: string | undefined;
     scope: {
@@ -3496,7 +3850,7 @@ export declare const ControlThreadCreateRequest: z.ZodObject<{
     credentialProfileId?: string | undefined;
     primaryHarness?: string | undefined;
     eligibleHarnesses?: string[] | undefined;
-    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
 }, {
     title?: string | undefined;
     scope?: {
@@ -3513,7 +3867,7 @@ export declare const ControlThreadCreateRequest: z.ZodObject<{
     credentialProfileId?: string | undefined;
     primaryHarness?: string | undefined;
     eligibleHarnesses?: string[] | undefined;
-    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
 }>;
 export type ControlThreadCreateRequest = z.infer<typeof ControlThreadCreateRequest>;
 /** Mutate a thread's title, open/closed state, or sticky routing (rename,
@@ -3524,21 +3878,21 @@ export declare const ControlThreadUpdateRequest: z.ZodObject<{
     primaryHarness: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     credentialProfileId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     eligibleHarnesses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    access: z.ZodOptional<z.ZodNullable<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>>;
+    access: z.ZodOptional<z.ZodNullable<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>>;
 }, "strict", z.ZodTypeAny, {
     title?: string | undefined;
     state?: "active" | "closed" | undefined;
     primaryHarness?: string | null | undefined;
     credentialProfileId?: string | null | undefined;
     eligibleHarnesses?: string[] | undefined;
-    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | null | undefined;
+    access?: "full" | "inherit_native" | "readonly" | "workspace_write" | null | undefined;
 }, {
     title?: string | undefined;
     state?: "active" | "closed" | undefined;
     primaryHarness?: string | null | undefined;
     credentialProfileId?: string | null | undefined;
     eligibleHarnesses?: string[] | undefined;
-    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | null | undefined;
+    access?: "full" | "inherit_native" | "readonly" | "workspace_write" | null | undefined;
 }>;
 export type ControlThreadUpdateRequest = z.infer<typeof ControlThreadUpdateRequest>;
 /** A registered project skipped during thread listing because its root is no
@@ -3577,7 +3931,7 @@ export declare const ControlThreadListResponse: z.ZodObject<{
          * create/PATCH, so the projection must report it back (round-15 #3). */
         credentialProfileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** Sticky write scope for write turns (D26); null = repo trust default. */
-        access: z.ZodDefault<z.ZodNullable<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>>;
+        access: z.ZodDefault<z.ZodNullable<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>>;
         state: z.ZodDefault<z.ZodEnum<["active", "closed", "trashed", "purged"]>>;
         trashedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         purgeAfter: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -3714,7 +4068,7 @@ export declare const ControlThreadDetail: z.ZodObject<{
          * create/PATCH, so the projection must report it back (round-15 #3). */
         credentialProfileId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         /** Sticky write scope for write turns (D26); null = repo trust default. */
-        access: z.ZodDefault<z.ZodNullable<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>>;
+        access: z.ZodDefault<z.ZodNullable<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>>>;
         state: z.ZodDefault<z.ZodEnum<["active", "closed", "trashed", "purged"]>>;
         trashedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         purgeAfter: z.ZodDefault<z.ZodNullable<z.ZodString>>;