@claudexor/schema 3.8.0 → 3.8.2

package/dist/credential-profile.d.ts

@@ -89,6 +89,9 @@ export declare const CredentialProfileStatus: z.ZodObject<{
      * AND healthy" must read this alongside `verification`; `passed` +
      * `local_store` promises strictly less than it sounds. */
     verification_source: z.ZodDefault<z.ZodEnum<["local_store", "vendor"]>>;
+    /** A bounded last-known-good transport observation. */
+    stale: z.ZodOptional<z.ZodBoolean>;
+    stale_age_ms: z.ZodOptional<z.ZodNumber>;
     detail: z.ZodOptional<z.ZodString>;
     last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
 }, "strict", z.ZodTypeAny, {
@@ -97,6 +100,8 @@ export declare const CredentialProfileStatus: z.ZodObject<{
     availability: "available" | "unavailable" | "unknown";
     verification: "failed" | "not_run" | "passed";
     verification_source: "local_store" | "vendor";
+    stale?: boolean | undefined;
+    stale_age_ms?: number | undefined;
     detail?: string | undefined;
     last_verified_at: string | null;
 }, {
@@ -105,6 +110,8 @@ export declare const CredentialProfileStatus: z.ZodObject<{
     availability: "available" | "unavailable" | "unknown";
     verification: "failed" | "not_run" | "passed";
     verification_source?: "local_store" | "vendor" | undefined;
+    stale?: boolean | undefined;
+    stale_age_ms?: number | undefined;
     detail?: string | undefined;
     last_verified_at?: string | null | undefined;
 }>;
@@ -538,6 +545,9 @@ export declare const ControlCredentialProfilesResponse: z.ZodObject<{
              * AND healthy" must read this alongside `verification`; `passed` +
              * `local_store` promises strictly less than it sounds. */
             verification_source: z.ZodDefault<z.ZodEnum<["local_store", "vendor"]>>;
+            /** A bounded last-known-good transport observation. */
+            stale: z.ZodOptional<z.ZodBoolean>;
+            stale_age_ms: z.ZodOptional<z.ZodNumber>;
             detail: z.ZodOptional<z.ZodString>;
             last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         }, "strict", z.ZodTypeAny, {
@@ -546,6 +556,8 @@ export declare const ControlCredentialProfilesResponse: z.ZodObject<{
             availability: "available" | "unavailable" | "unknown";
             verification: "failed" | "not_run" | "passed";
             verification_source: "local_store" | "vendor";
+            stale?: boolean | undefined;
+            stale_age_ms?: number | undefined;
             detail?: string | undefined;
             last_verified_at: string | null;
         }, {
@@ -554,6 +566,8 @@ export declare const ControlCredentialProfilesResponse: z.ZodObject<{
             availability: "available" | "unavailable" | "unknown";
             verification: "failed" | "not_run" | "passed";
             verification_source?: "local_store" | "vendor" | undefined;
+            stale?: boolean | undefined;
+            stale_age_ms?: number | undefined;
             detail?: string | undefined;
             last_verified_at?: string | null | undefined;
         }>;
@@ -584,6 +598,8 @@ export declare const ControlCredentialProfilesResponse: z.ZodObject<{
             availability: "available" | "unavailable" | "unknown";
             verification: "failed" | "not_run" | "passed";
             verification_source: "local_store" | "vendor";
+            stale?: boolean | undefined;
+            stale_age_ms?: number | undefined;
             detail?: string | undefined;
             last_verified_at: string | null;
         };
@@ -608,6 +624,8 @@ export declare const ControlCredentialProfilesResponse: z.ZodObject<{
             availability: "available" | "unavailable" | "unknown";
             verification: "failed" | "not_run" | "passed";
             verification_source?: "local_store" | "vendor" | undefined;
+            stale?: boolean | undefined;
+            stale_age_ms?: number | undefined;
             detail?: string | undefined;
             last_verified_at?: string | null | undefined;
         };
@@ -763,6 +781,8 @@ export declare const ControlCredentialProfilesResponse: z.ZodObject<{
             availability: "available" | "unavailable" | "unknown";
             verification: "failed" | "not_run" | "passed";
             verification_source: "local_store" | "vendor";
+            stale?: boolean | undefined;
+            stale_age_ms?: number | undefined;
             detail?: string | undefined;
             last_verified_at: string | null;
         };
@@ -820,6 +840,8 @@ export declare const ControlCredentialProfilesResponse: z.ZodObject<{
             availability: "available" | "unavailable" | "unknown";
             verification: "failed" | "not_run" | "passed";
             verification_source?: "local_store" | "vendor" | undefined;
+            stale?: boolean | undefined;
+            stale_age_ms?: number | undefined;
             detail?: string | undefined;
             last_verified_at?: string | null | undefined;
         };
@@ -934,6 +956,9 @@ export declare const ControlCredentialProfileUpdateResponse: z.ZodObject<{
          * AND healthy" must read this alongside `verification`; `passed` +
          * `local_store` promises strictly less than it sounds. */
         verification_source: z.ZodDefault<z.ZodEnum<["local_store", "vendor"]>>;
+        /** A bounded last-known-good transport observation. */
+        stale: z.ZodOptional<z.ZodBoolean>;
+        stale_age_ms: z.ZodOptional<z.ZodNumber>;
         detail: z.ZodOptional<z.ZodString>;
         last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     }, "strict", z.ZodTypeAny, {
@@ -942,6 +967,8 @@ export declare const ControlCredentialProfileUpdateResponse: z.ZodObject<{
         availability: "available" | "unavailable" | "unknown";
         verification: "failed" | "not_run" | "passed";
         verification_source: "local_store" | "vendor";
+        stale?: boolean | undefined;
+        stale_age_ms?: number | undefined;
         detail?: string | undefined;
         last_verified_at: string | null;
     }, {
@@ -950,6 +977,8 @@ export declare const ControlCredentialProfileUpdateResponse: z.ZodObject<{
         availability: "available" | "unavailable" | "unknown";
         verification: "failed" | "not_run" | "passed";
         verification_source?: "local_store" | "vendor" | undefined;
+        stale?: boolean | undefined;
+        stale_age_ms?: number | undefined;
         detail?: string | undefined;
         last_verified_at?: string | null | undefined;
     }>;
@@ -970,6 +999,8 @@ export declare const ControlCredentialProfileUpdateResponse: z.ZodObject<{
         availability: "available" | "unavailable" | "unknown";
         verification: "failed" | "not_run" | "passed";
         verification_source: "local_store" | "vendor";
+        stale?: boolean | undefined;
+        stale_age_ms?: number | undefined;
         detail?: string | undefined;
         last_verified_at: string | null;
     };
@@ -990,6 +1021,8 @@ export declare const ControlCredentialProfileUpdateResponse: z.ZodObject<{
         availability: "available" | "unavailable" | "unknown";
         verification: "failed" | "not_run" | "passed";
         verification_source?: "local_store" | "vendor" | undefined;
+        stale?: boolean | undefined;
+        stale_age_ms?: number | undefined;
         detail?: string | undefined;
         last_verified_at?: string | null | undefined;
     };
@@ -1179,6 +1212,9 @@ export declare const ControlCredentialProfileCreateResponse: z.ZodObject<{
          * AND healthy" must read this alongside `verification`; `passed` +
          * `local_store` promises strictly less than it sounds. */
         verification_source: z.ZodDefault<z.ZodEnum<["local_store", "vendor"]>>;
+        /** A bounded last-known-good transport observation. */
+        stale: z.ZodOptional<z.ZodBoolean>;
+        stale_age_ms: z.ZodOptional<z.ZodNumber>;
         detail: z.ZodOptional<z.ZodString>;
         last_verified_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     }, "strict", z.ZodTypeAny, {
@@ -1187,6 +1223,8 @@ export declare const ControlCredentialProfileCreateResponse: z.ZodObject<{
         availability: "available" | "unavailable" | "unknown";
         verification: "failed" | "not_run" | "passed";
         verification_source: "local_store" | "vendor";
+        stale?: boolean | undefined;
+        stale_age_ms?: number | undefined;
         detail?: string | undefined;
         last_verified_at: string | null;
     }, {
@@ -1195,6 +1233,8 @@ export declare const ControlCredentialProfileCreateResponse: z.ZodObject<{
         availability: "available" | "unavailable" | "unknown";
         verification: "failed" | "not_run" | "passed";
         verification_source?: "local_store" | "vendor" | undefined;
+        stale?: boolean | undefined;
+        stale_age_ms?: number | undefined;
         detail?: string | undefined;
         last_verified_at?: string | null | undefined;
     }>;
@@ -1215,6 +1255,8 @@ export declare const ControlCredentialProfileCreateResponse: z.ZodObject<{
         availability: "available" | "unavailable" | "unknown";
         verification: "failed" | "not_run" | "passed";
         verification_source: "local_store" | "vendor";
+        stale?: boolean | undefined;
+        stale_age_ms?: number | undefined;
         detail?: string | undefined;
         last_verified_at: string | null;
     };
@@ -1235,6 +1277,8 @@ export declare const ControlCredentialProfileCreateResponse: z.ZodObject<{
         availability: "available" | "unavailable" | "unknown";
         verification: "failed" | "not_run" | "passed";
         verification_source?: "local_store" | "vendor" | undefined;
+        stale?: boolean | undefined;
+        stale_age_ms?: number | undefined;
         detail?: string | undefined;
         last_verified_at?: string | null | undefined;
     };

package/dist/credential-profile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-profile.d.ts","sourceRoot":"","sources":["../src/credential-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAK3B;wEACwE;AACxE,eAAO,MAAM,4BAA4B,8IAKvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAExF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,cAAc,2DAIxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6D3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;IAMhC;;;;;;8DAM0D;;;;;;;;;;;;;;;;;;;;EAeoC,CAAC;AACnG,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;uCAKuC;AACvC,eAAO,MAAM,sBAAsB,0EAIhC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B;;;IAMtC;;+DAE2D;;;;;;;;;;;;;;;;;;;;;;;;;EAsB5D,CAAC;AACJ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE1F;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe;;;;;;;;;EAoBzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuB0D,CAAC;AAC7F,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;IAmB3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;mDACmD;AACnD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQnC,CAAC;AACJ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;yEACyE;AACzE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO0C,CAAC;AACnF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEtF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBhC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;mFACmF;AACnF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA9O1C;;;;;;sEAM0D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2Q3D,CAAC;AACJ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAElG;;wEAEwE;AACxE,eAAO,MAAM,qCAAqC;;;;;;EAOsB,CAAC;AACzE,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CACzD,OAAO,qCAAqC,CAC7C,CAAC;AAEF;kCACkC;AAClC,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QArS/C;;;;;;kEAM0D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkSqB,CAAC;AACpF,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,sCAAsC,CAC9C,CAAC;AAEF;2EAC2E;AAC3E,eAAO,MAAM,qCAAqC;;;;;;;;;;;;EAaQ,CAAC;AAC3D,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CACzD,OAAO,qCAAqC,CAC7C,CAAC;AAEF;;;;yDAIyD;AACzD,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BK,CAAC;AACzD,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,sCAAsC,CAC9C,CAAC;AAEF,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAvW/C;;;;;;kEAM0D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoWqB,CAAC;AACpF,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,sCAAsC,CAC9C,CAAC"}
+{"version":3,"file":"credential-profile.d.ts","sourceRoot":"","sources":["../src/credential-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAK3B;wEACwE;AACxE,eAAO,MAAM,4BAA4B,8IAKvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAExF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,cAAc,2DAIxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6D3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;IAMhC;;;;;;8DAM0D;;IAO1D,uDAAuD;;;;;;;;;;;;;;;;;;;;;;;;;EAqBuC,CAAC;AACnG,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;uCAKuC;AACvC,eAAO,MAAM,sBAAsB,0EAIhC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B;;;IAMtC;;+DAE2D;;;;;;;;;;;;;;;;;;;;;;;;;EAsB5D,CAAC;AACJ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE1F;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe;;;;;;;;;EAoBzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuB0D,CAAC;AAC7F,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;IAmB3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;mDACmD;AACnD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQnC,CAAC;AACJ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;yEACyE;AACzE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO0C,CAAC;AACnF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEtF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBhC,CAAC;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;mFACmF;AACnF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA3P1C;;;;;;sEAM0D;;YAO1D,uDAAuD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiRxD,CAAC;AACJ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAElG;;wEAEwE;AACxE,eAAO,MAAM,qCAAqC;;;;;;EAOsB,CAAC;AACzE,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CACzD,OAAO,qCAAqC,CAC7C,CAAC;AAEF;kCACkC;AAClC,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAlT/C;;;;;;kEAM0D;;QAO1D,uDAAuD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwSwB,CAAC;AACpF,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,sCAAsC,CAC9C,CAAC;AAEF;2EAC2E;AAC3E,eAAO,MAAM,qCAAqC;;;;;;;;;;;;EAaQ,CAAC;AAC3D,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CACzD,OAAO,qCAAqC,CAC7C,CAAC;AAEF;;;;yDAIyD;AACzD,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BK,CAAC;AACzD,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,sCAAsC,CAC9C,CAAC;AAEF,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QApX/C;;;;;;kEAM0D;;QAO1D,uDAAuD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0WwB,CAAC;AACpF,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,sCAAsC,CAC9C,CAAC"}

package/dist/credential-profile.js

@@ -111,6 +111,17 @@ export const CredentialProfileStatus = z
         .enum(["local_store", "vendor"])
         .default("local_store")
         .describe("How the verification verdict was reached: local_store = the binding's required local state or managed secret is present (says nothing about a token being live); vendor = the vendor answered under the exact binding environment and effective platform credential policy."),
+    /** A bounded last-known-good transport observation. */
+    stale: z
+        .boolean()
+        .optional()
+        .describe("True only for a bounded stale last-known-good observation; stale is never a fresh passed verification."),
+    stale_age_ms: z
+        .number()
+        .int()
+        .nonnegative()
+        .optional()
+        .describe("Age in milliseconds of the bounded stale observation, when stale is true."),
     detail: z.string().optional().describe("Redacted human-readable probe evidence."),
     last_verified_at: IsoTimestamp.nullable()
         .default(null)

package/dist/credential-profile.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-profile.js","sourceRoot":"","sources":["../src/credential-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE/D;wEACwE;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC;IACjD,6BAA6B;IAC7B,2BAA2B;IAC3B,mCAAmC;IACnC,8BAA8B;CAC/B,CAAC,CAAC;AAGH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,IAAI,CAAC,CAAC,kBAAkB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;KACpD,QAAQ,CACP,kLAAkL,CACnL,CAAC;AAGJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IACtF,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAClE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC3F,eAAe,EAAE,cAAc;IAC/B,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,0HAA0H,CAC3H;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,oHAAoH,CACrH;IACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACpF,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE;SAChC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,OAAO,CAAC,eAAe,KAAK,kBAAkB,EAAE,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,iBAAiB;YAC5B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,6EAA6E;aACvF,CAAC,CAAC;QACL,IAAI,OAAO,CAAC,UAAU;YACpB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;IACP,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,UAAU;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,GAAG,OAAO,CAAC,eAAe,8BAA8B;aAClE,CAAC,CAAC;QACL,+DAA+D;QAC/D,wEAAwE;QACxE,iEAAiE;aAC5D,IAAI,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI;YAC3D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,eAAe,OAAO,CAAC,UAAU,0IAA0I;aACrL,CAAC,CAAC;QACL,IAAI,OAAO,CAAC,iBAAiB;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,GAAG,OAAO,CAAC,eAAe,4CAA4C;aAChF,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,CACP,yMAAyM,CAC1M,CAAC;AAGJ;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,gBAAgB;IAC9B;;;;;;8DAM0D;IAC1D,mBAAmB,EAAE,CAAC;SACnB,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;SAC/B,OAAO,CAAC,aAAa,CAAC;SACtB,QAAQ,CACP,6QAA6Q,CAC9Q;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACjF,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE;SACtC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,mHAAmH,CACpH;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,qFAAqF,CAAC,CAAC;AAGnG;;;;;uCAKuC;AACvC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,IAAI,CAAC,CAAC,cAAc,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;KACnE,QAAQ,CACP,iIAAiI,CAClI,CAAC;AAGJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC1E,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChC,yEAAyE,CAC1E;IACD;;+DAE2D;IAC3D,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+GAA+G,CAChH;IACH,IAAI,EAAE,sBAAsB;IAC5B,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;SACxD,QAAQ,CACP,2IAA2I,CAC5I;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC3E,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC7E,UAAU,EAAE,YAAY,CAAC,QAAQ,CAC/B,2EAA2E,CAC5E;CACF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,4IAA4I,CAC7I,CAAC;AAGJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,4IAA4I,CAC7I;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,+FAA+F,CAChG;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,gNAAgN,CACjN,CAAC;AAGJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,kBAAkB,CAAC,MAAM,EAAE;IAC1B,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;SACrD,MAAM,EAAE;SACR,QAAQ,CAAC,sEAAsE,CAAC;IACnF,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;aAClC,QAAQ,EAAE;aACV,QAAQ,CAAC,8EAA8E,CAAC;KAC5F,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,CAAC,sEAAsE,CAAC;IACnF,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;SACvD,MAAM,EAAE;SACR,QAAQ,CACP,qGAAqG,CACtG;CACJ,CAAC;KACD,QAAQ,CAAC,+EAA+E,CAAC,CAAC;AAG7F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,kBAAkB,CAAC,MAAM,EAAE;IAC1B,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;SACrD,MAAM,EAAE;SACR,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;SAC5C,MAAM,EAAE;SACR,QAAQ,CACP,sIAAsI,CACvI;IACH,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;SACvD,MAAM,EAAE;SACR,QAAQ,CAAC,4DAA4D,CAAC;CAC1E,CAAC;KACD,QAAQ,CACP,+FAA+F,CAChG,CAAC;AAGJ;mDACmD;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACvE,OAAO,EAAE,iBAAiB;CAC3B,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,yFAAyF,CAC1F,CAAC;AAGJ;yEACyE;AACzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,yBAAyB,CAAC;SAChC,QAAQ,CAAC,kEAAkE,CAAC;CAChF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,qEAAqE,CAAC,CAAC;AAGnF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACnE,0BAA0B,EAAE,CAAC;SAC1B,OAAO,EAAE;SACT,QAAQ,CAAC,gFAAgF,CAAC;IAC7F,qBAAqB,EAAE,CAAC;SACrB,OAAO,EAAE;SACT,QAAQ,CACP,yGAAyG,CAC1G;IACH,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;SACjC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,wLAAwL,CACzL;IACH,OAAO,EAAE,qBAAqB;CAC/B,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,8FAA8F,CAC/F,CAAC;AAGJ;mFACmF;AACnF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;aACjC,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CACP,8KAA8K,CAC/K;KACJ,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,CACP,0GAA0G,CAC3G;IACH,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,sBAAsB,CAAC;SAC7B,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,wTAAwT,CACzT;IACH,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,yBAAyB,CAAC;SAChC,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,0NAA0N,CAC3N;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,2GAA2G,CAC5G,CAAC;AAGJ;;wEAEwE;AACxE,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CAAC,mEAAmE,CAAC;CACjF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,2DAA2D,CAAC,CAAC;AAKzE;kCACkC;AAClC,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;KACvE,MAAM,EAAE;KACR,QAAQ,CAAC,sEAAsE,CAAC,CAAC;AAKpF;2EAC2E;AAC3E,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,SAAS,EAAE,EAAE,CAAC,QAAQ,CACpB,kFAAkF,CACnF;IACD,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC5E,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,6CAA6C,CAAC,CAAC;AAK3D;;;;yDAIyD;AACzD,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC;IACN,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,iBAAiB,EAAE,CAAC;SACjB,IAAI,CAAC,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;SACtD,QAAQ,CACP,2IAA2I,CAC5I;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,8JAA8J,CAC/J;IACH,2BAA2B,EAAE,CAAC;SAC3B,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;KAC5B,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oIAAoI,CACrI;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,2CAA2C,CAAC,CAAC;AAKzD,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;KACvE,MAAM,EAAE;KACR,QAAQ,CAAC,sEAAsE,CAAC,CAAC"}
+{"version":3,"file":"credential-profile.js","sourceRoot":"","sources":["../src/credential-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE/D;wEACwE;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC;IACjD,6BAA6B;IAC7B,2BAA2B;IAC3B,mCAAmC;IACnC,8BAA8B;CAC/B,CAAC,CAAC;AAGH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,IAAI,CAAC,CAAC,kBAAkB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;KACpD,QAAQ,CACP,kLAAkL,CACnL,CAAC;AAGJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IACtF,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAClE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC3F,eAAe,EAAE,cAAc;IAC/B,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,0HAA0H,CAC3H;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,oHAAoH,CACrH;IACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACpF,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE;SAChC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,OAAO,CAAC,eAAe,KAAK,kBAAkB,EAAE,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,iBAAiB;YAC5B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,6EAA6E;aACvF,CAAC,CAAC;QACL,IAAI,OAAO,CAAC,UAAU;YACpB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;IACP,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,UAAU;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,GAAG,OAAO,CAAC,eAAe,8BAA8B;aAClE,CAAC,CAAC;QACL,+DAA+D;QAC/D,wEAAwE;QACxE,iEAAiE;aAC5D,IAAI,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI;YAC3D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,eAAe,OAAO,CAAC,UAAU,0IAA0I;aACrL,CAAC,CAAC;QACL,IAAI,OAAO,CAAC,iBAAiB;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,GAAG,OAAO,CAAC,eAAe,4CAA4C;aAChF,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,CACP,yMAAyM,CAC1M,CAAC;AAGJ;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,gBAAgB;IAC9B;;;;;;8DAM0D;IAC1D,mBAAmB,EAAE,CAAC;SACnB,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;SAC/B,OAAO,CAAC,aAAa,CAAC;SACtB,QAAQ,CACP,6QAA6Q,CAC9Q;IACH,uDAAuD;IACvD,KAAK,EAAE,CAAC;SACL,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,wGAAwG,CACzG;IACH,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;IACxF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACjF,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE;SACtC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,mHAAmH,CACpH;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,qFAAqF,CAAC,CAAC;AAGnG;;;;;uCAKuC;AACvC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,IAAI,CAAC,CAAC,cAAc,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;KACnE,QAAQ,CACP,iIAAiI,CAClI,CAAC;AAGJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC1E,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChC,yEAAyE,CAC1E;IACD;;+DAE2D;IAC3D,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+GAA+G,CAChH;IACH,IAAI,EAAE,sBAAsB;IAC5B,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;SACxD,QAAQ,CACP,2IAA2I,CAC5I;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC3E,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC7E,UAAU,EAAE,YAAY,CAAC,QAAQ,CAC/B,2EAA2E,CAC5E;CACF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,4IAA4I,CAC7I,CAAC;AAGJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,4IAA4I,CAC7I;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,+FAA+F,CAChG;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,gNAAgN,CACjN,CAAC;AAGJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,kBAAkB,CAAC,MAAM,EAAE;IAC1B,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;SACrD,MAAM,EAAE;SACR,QAAQ,CAAC,sEAAsE,CAAC;IACnF,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;aAClC,QAAQ,EAAE;aACV,QAAQ,CAAC,8EAA8E,CAAC;KAC5F,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,CAAC,sEAAsE,CAAC;IACnF,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;SACvD,MAAM,EAAE;SACR,QAAQ,CACP,qGAAqG,CACtG;CACJ,CAAC;KACD,QAAQ,CAAC,+EAA+E,CAAC,CAAC;AAG7F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,kBAAkB,CAAC,MAAM,EAAE;IAC1B,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;SACrD,MAAM,EAAE;SACR,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;SAC5C,MAAM,EAAE;SACR,QAAQ,CACP,sIAAsI,CACvI;IACH,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;SACvD,MAAM,EAAE;SACR,QAAQ,CAAC,4DAA4D,CAAC;CAC1E,CAAC;KACD,QAAQ,CACP,+FAA+F,CAChG,CAAC;AAGJ;mDACmD;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACvE,OAAO,EAAE,iBAAiB;CAC3B,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,yFAAyF,CAC1F,CAAC;AAGJ;yEACyE;AACzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,yBAAyB,CAAC;SAChC,QAAQ,CAAC,kEAAkE,CAAC;CAChF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,qEAAqE,CAAC,CAAC;AAGnF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACnE,0BAA0B,EAAE,CAAC;SAC1B,OAAO,EAAE;SACT,QAAQ,CAAC,gFAAgF,CAAC;IAC7F,qBAAqB,EAAE,CAAC;SACrB,OAAO,EAAE;SACT,QAAQ,CACP,yGAAyG,CAC1G;IACH,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;SACjC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,wLAAwL,CACzL;IACH,OAAO,EAAE,qBAAqB;CAC/B,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,8FAA8F,CAC/F,CAAC;AAGJ;mFACmF;AACnF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;aACjC,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CACP,8KAA8K,CAC/K;KACJ,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,CACP,0GAA0G,CAC3G;IACH,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,sBAAsB,CAAC;SAC7B,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,wTAAwT,CACzT;IACH,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,yBAAyB,CAAC;SAChC,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,0NAA0N,CAC3N;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,2GAA2G,CAC5G,CAAC;AAGJ;;wEAEwE;AACxE,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CAAC,mEAAmE,CAAC;CACjF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,2DAA2D,CAAC,CAAC;AAKzE;kCACkC;AAClC,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;KACvE,MAAM,EAAE;KACR,QAAQ,CAAC,sEAAsE,CAAC,CAAC;AAKpF;2EAC2E;AAC3E,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,SAAS,EAAE,EAAE,CAAC,QAAQ,CACpB,kFAAkF,CACnF;IACD,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC5E,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,6CAA6C,CAAC,CAAC;AAK3D;;;;yDAIyD;AACzD,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC;IACN,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,iBAAiB,EAAE,CAAC;SACjB,IAAI,CAAC,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;SACtD,QAAQ,CACP,2IAA2I,CAC5I;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,8JAA8J,CAC/J;IACH,2BAA2B,EAAE,CAAC;SAC3B,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;KAC5B,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oIAAoI,CACrI;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,2CAA2C,CAAC,CAAC;AAKzD,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;KACvE,MAAM,EAAE;KACR,QAAQ,CAAC,sEAAsE,CAAC,CAAC"}

package/dist/harness-confinement.d.ts

@@ -1,30 +1,6 @@
 import { z } from "zod/v3";
-/**
- * An APPLIED filesystem boundary, not a request for one.
- *
- * `verified_denied_path` is the path the profile was executed against before
- * the harness ran: the read was refused on this host, for this attempt. A field
- * that only said "confined: true" would be the promise this whole mechanism
- * exists to replace — which is why the two fields are REQUIRED together and a
- * mechanism name without its proof is not representable in this type.
- */
-export declare const HarnessConfinement: z.ZodObject<{
-    mechanism: z.ZodString;
-    profile: z.ZodString;
-    profile_digest: z.ZodString;
-    verified_denied_path: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    mechanism: string;
-    profile: string;
-    profile_digest: string;
-    verified_denied_path: string;
-}, {
-    mechanism: string;
-    profile: string;
-    profile_digest: string;
-    verified_denied_path: string;
-}>;
-export type HarnessConfinement = z.infer<typeof HarnessConfinement>;
+/** One schema-owned statement used by every new delegated mutating attempt. */
+export declare const DELIBERATE_NO_OUTER_BOUNDARY_REASON = "Claudexor deliberately applies no additional outer OS filesystem boundary; the native harness access mode remains in effect.";
 /**
  * The confinement half of an attempt record, as every reader sees it.
  *
@@ -41,6 +17,37 @@ export interface AppliedConfinementRecord {
     /** Why NO boundary was applied; present exactly when the boundary is absent. */
     confinement_unavailable_reason?: unknown;
 }
+/** Bounded decoder for the access/evidence block in historical attempt.yaml
+ * artifacts. New writers still accept active AccessProfile only. */
+export declare const RecordedAppliedAttemptFacts: z.ZodObject<{
+    harness_home_isolated: z.ZodOptional<z.ZodBoolean>;
+    harness_home_dir: z.ZodNullable<z.ZodString>;
+    access_applied: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>;
+    credential_profile_applied: z.ZodNullable<z.ZodString>;
+    confinement_mechanism: z.ZodNullable<z.ZodString>;
+    confinement_profile_digest: z.ZodNullable<z.ZodString>;
+    confinement_verified_denied_path: z.ZodNullable<z.ZodString>;
+    confinement_unavailable_reason: z.ZodNullable<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    harness_home_isolated: z.ZodOptional<z.ZodBoolean>;
+    harness_home_dir: z.ZodNullable<z.ZodString>;
+    access_applied: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>;
+    credential_profile_applied: z.ZodNullable<z.ZodString>;
+    confinement_mechanism: z.ZodNullable<z.ZodString>;
+    confinement_profile_digest: z.ZodNullable<z.ZodString>;
+    confinement_verified_denied_path: z.ZodNullable<z.ZodString>;
+    confinement_unavailable_reason: z.ZodNullable<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    harness_home_isolated: z.ZodOptional<z.ZodBoolean>;
+    harness_home_dir: z.ZodNullable<z.ZodString>;
+    access_applied: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>;
+    credential_profile_applied: z.ZodNullable<z.ZodString>;
+    confinement_mechanism: z.ZodNullable<z.ZodString>;
+    confinement_profile_digest: z.ZodNullable<z.ZodString>;
+    confinement_verified_denied_path: z.ZodNullable<z.ZodString>;
+    confinement_unavailable_reason: z.ZodNullable<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type RecordedAppliedAttemptFacts = z.infer<typeof RecordedAppliedAttemptFacts>;
 /**
  * Whether an attempt record proves a boundary was actually enforced.
  *
@@ -51,14 +58,14 @@ export interface AppliedConfinementRecord {
  * the mechanism's name.
  */
 export declare function confinementBoundaryProven(record: AppliedConfinementRecord | null): boolean;
-export declare const ContainmentKind: z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>;
+export declare const ContainmentKind: z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>;
 export type ContainmentKind = z.infer<typeof ContainmentKind>;
 export declare const IsolationCapabilities: z.ZodDefault<z.ZodObject<{
-    supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+    supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
 }, {
-    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
 }>>;
 export type IsolationCapabilities = z.infer<typeof IsolationCapabilities>;
 //# sourceMappingURL=harness-confinement.d.ts.map

package/dist/harness-confinement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness-confinement.d.ts","sourceRoot":"","sources":["../src/harness-confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAkBmD,CAAC;AACnF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,gCAAgC,CAAC,EAAE,OAAO,CAAC;IAC3C,gFAAgF;IAChF,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAC1C;AAID;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAO1F;AAED,eAAO,MAAM,eAAe,0HAUzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;GAQgC,CAAC;AACnE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"harness-confinement.d.ts","sourceRoot":"","sources":["../src/harness-confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,+EAA+E;AAC/E,eAAO,MAAM,mCAAmC,iIACgF,CAAC;AAEjI;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,gCAAgC,CAAC,EAAE,OAAO,CAAC;IAC3C,gFAAgF;IAChF,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED;oEACoE;AACpE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAYoD,CAAC;AAC7F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAItF;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAO1F;AAED,eAAO,MAAM,eAAe,0JAWzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;GAQgC,CAAC;AACnE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/harness-confinement.js

@@ -1,31 +1,22 @@
 import { z } from "zod/v3";
-import { ContentHash } from "./primitives.js";
-/**
- * An APPLIED filesystem boundary, not a request for one.
- *
- * `verified_denied_path` is the path the profile was executed against before
- * the harness ran: the read was refused on this host, for this attempt. A field
- * that only said "confined: true" would be the promise this whole mechanism
- * exists to replace — which is why the two fields are REQUIRED together and a
- * mechanism name without its proof is not representable in this type.
- */
-export const HarnessConfinement = z
+import { RecordedAccessProfile } from "./primitives.js";
+/** One schema-owned statement used by every new delegated mutating attempt. */
+export const DELIBERATE_NO_OUTER_BOUNDARY_REASON = "Claudexor deliberately applies no additional outer OS filesystem boundary; the native harness access mode remains in effect.";
+/** Bounded decoder for the access/evidence block in historical attempt.yaml
+ * artifacts. New writers still accept active AccessProfile only. */
+export const RecordedAppliedAttemptFacts = z
     .object({
-    mechanism: z
-        .string()
-        .min(1)
-        .describe("OPAQUE identifier of the OS mechanism that enforced the boundary. A reader must never branch on this value or on the host platform; the only question it may ask is whether a PROVEN boundary exists, which is this field AND verified_denied_path both present."),
-    profile: z
-        .string()
-        .min(1)
-        .describe("The exact policy the process was started under, in the mechanism's own encoding."),
-    profile_digest: ContentHash.describe("Digest of the policy text, for the attempt record."),
-    verified_denied_path: z
-        .string()
-        .min(1)
-        .describe("Path proven unreadable under this policy before the harness was spawned."),
+    harness_home_isolated: z.boolean().optional(),
+    harness_home_dir: z.string().nullable(),
+    access_applied: RecordedAccessProfile,
+    credential_profile_applied: z.string().nullable(),
+    confinement_mechanism: z.string().nullable(),
+    confinement_profile_digest: z.string().nullable(),
+    confinement_verified_denied_path: z.string().nullable(),
+    confinement_unavailable_reason: z.string().nullable(),
 })
-    .describe("An applied OS-enforced filesystem boundary for one harness process.");
+    .passthrough()
+    .describe("Applied access and boundary evidence read from a historical attempt artifact.");
 const nonEmpty = (value) => typeof value === "string" && value.length > 0;
 /**
  * Whether an attempt record proves a boundary was actually enforced.
@@ -47,11 +38,12 @@ export const ContainmentKind = z
     .enum([
     "env_or_file_injection",
     "scoped_home_keychain_bridge",
+    "private_per_profile_keychain",
     "host_user_context",
     "process_sandbox",
     "container",
 ])
-    .describe("Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers.");
+    .describe("Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers.");
 export const IsolationCapabilities = z
     .object({
     supported_containment: z

package/dist/harness-confinement.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness-confinement.js","sourceRoot":"","sources":["../src/harness-confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,kQAAkQ,CACnQ;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,kFAAkF,CAAC;IAC/F,cAAc,EAAE,WAAW,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC1F,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,0EAA0E,CAAC;CACxF,CAAC;KACD,QAAQ,CAAC,qEAAqE,CAAC,CAAC;AAoBnF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAE5F;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAuC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,CAAC;QAC3C,QAAQ,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,IAAI,CAAC;IACJ,uBAAuB;IACvB,6BAA6B;IAC7B,mBAAmB;IACnB,iBAAiB;IACjB,WAAW;CACZ,CAAC;KACD,QAAQ,CACP,0KAA0K,CAC3K,CAAC;AAGJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC;SACrB,KAAK,CAAC,eAAe,CAAC;SACtB,OAAO,CAAC,CAAC,uBAAuB,CAAC,CAAC;SAClC,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,OAAO,CAAC,EAAE,CAAC;KACX,QAAQ,CAAC,qDAAqD,CAAC,CAAC"}
+{"version":3,"file":"harness-confinement.js","sourceRoot":"","sources":["../src/harness-confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAC9C,8HAA8H,CAAC;AAmBjI;oEACoE;AACpE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,qBAAqB;IACrC,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,gCAAgC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvD,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,WAAW,EAAE;KACb,QAAQ,CAAC,+EAA+E,CAAC,CAAC;AAG7F,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAE5F;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAuC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,CAAC;QAC3C,QAAQ,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,IAAI,CAAC;IACJ,uBAAuB;IACvB,6BAA6B;IAC7B,8BAA8B;IAC9B,mBAAmB;IACnB,iBAAiB;IACjB,WAAW;CACZ,CAAC;KACD,QAAQ,CACP,4MAA4M,CAC7M,CAAC;AAGJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC;SACrB,KAAK,CAAC,eAAe,CAAC;SACtB,OAAO,CAAC,CAAC,uBAAuB,CAAC,CAAC;SAClC,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,OAAO,CAAC,EAAE,CAAC;KACX,QAAQ,CAAC,qDAAqD,CAAC,CAAC"}

package/dist/harness.d.ts

@@ -356,11 +356,11 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
     }>>;
     isolation: z.ZodDefault<z.ZodObject<{
-        supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+        supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+        supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
     }, {
-        supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+        supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
     }>>;
     /** Every accepted media class has a finite MIME/size/count/transport declaration. */
     attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -425,7 +425,7 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
     };
     isolation: {
-        supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+        supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
     };
     attachment_inputs: {
         kind: "file" | "image";
@@ -461,7 +461,7 @@ export declare const HarnessCapabilityProfile: z.ZodDefault<z.ZodObject<{
         readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
     } | undefined;
     isolation?: {
-        supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+        supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
     } | undefined;
     attachment_inputs?: {
         kind: "file" | "image";
@@ -637,11 +637,11 @@ export declare const HarnessManifest: z.ZodObject<{
             readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
         }>>;
         isolation: z.ZodDefault<z.ZodObject<{
-            supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+            supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
         }, "strip", z.ZodTypeAny, {
-            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
         }, {
-            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
         }>>;
         /** Every accepted media class has a finite MIME/size/count/transport declaration. */
         attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -706,7 +706,7 @@ export declare const HarnessManifest: z.ZodObject<{
             readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
         };
         isolation: {
-            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
         };
         attachment_inputs: {
             kind: "file" | "image";
@@ -742,7 +742,7 @@ export declare const HarnessManifest: z.ZodObject<{
             readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
         } | undefined;
         isolation?: {
-            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
         } | undefined;
         attachment_inputs?: {
             kind: "file" | "image";
@@ -929,7 +929,7 @@ export declare const HarnessManifest: z.ZodObject<{
         known_models_verified_against?: string | null | undefined;
     }>;
     auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
-    access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
+    access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
     id: string;
     display_name: string;
@@ -962,7 +962,7 @@ export declare const HarnessManifest: z.ZodObject<{
             readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
         };
         isolation: {
-            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+            supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
         };
         attachment_inputs: {
             kind: "file" | "image";
@@ -1004,7 +1004,7 @@ export declare const HarnessManifest: z.ZodObject<{
         known_models_verified_against: string | null;
     };
     auth_modes: ("api_key" | "local_session" | "none")[];
-    access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
+    access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
 }, {
     id: string;
     display_name: string;
@@ -1037,7 +1037,7 @@ export declare const HarnessManifest: z.ZodObject<{
             readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
         } | undefined;
         isolation?: {
-            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+            supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
         } | undefined;
         attachment_inputs?: {
             kind: "file" | "image";
@@ -1079,7 +1079,7 @@ export declare const HarnessManifest: z.ZodObject<{
         known_models_verified_against?: string | null | undefined;
     };
     auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
-    access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
+    access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
 }>;
 export type HarnessManifest = z.infer<typeof HarnessManifest>;
 /** Result of a conformance probe for one capability check. */
@@ -1224,7 +1224,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
      */
     instructions: z.ZodOptional<z.ZodString>;
     cwd: z.ZodString;
-    access: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+    access: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>;
     external_context_policy: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
     tool_permission_policy: z.ZodDefault<z.ZodObject<{
         web: z.ZodDefault<z.ZodEnum<["off", "auto", "cached", "live"]>>;
@@ -1517,24 +1517,6 @@ export declare const HarnessRunSpec: z.ZodObject<{
         }[];
         evidence_refs: string[];
     }>>>;
-    /** The APPLIED OS boundary this process starts inside; null = none (every
-     * ordinary run). Consumed by the shared CLI run loop, never by adapters. */
-    confinement: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-        mechanism: z.ZodString;
-        profile: z.ZodString;
-        profile_digest: z.ZodString;
-        verified_denied_path: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        mechanism: string;
-        profile: string;
-        profile_digest: string;
-        verified_denied_path: string;
-    }, {
-        mechanism: string;
-        profile: string;
-        profile_digest: string;
-        verified_denied_path: string;
-    }>>>;
     extra: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
     session_id: string;
@@ -1542,7 +1524,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
     prompt: string;
     instructions?: string | undefined;
     cwd: string;
-    access: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
+    access: "full" | "inherit_native" | "readonly" | "workspace_write";
     external_context_policy: "auto" | "cached" | "live" | "off";
     tool_permission_policy: {
         web: "auto" | "cached" | "live" | "off";
@@ -1618,12 +1600,6 @@ export declare const HarnessRunSpec: z.ZodObject<{
         }[];
         evidence_refs: string[];
     } | null | undefined;
-    confinement: {
-        mechanism: string;
-        profile: string;
-        profile_digest: string;
-        verified_denied_path: string;
-    } | null;
     extra: Record<string, unknown>;
 }, {
     session_id: string;
@@ -1631,7 +1607,7 @@ export declare const HarnessRunSpec: z.ZodObject<{
     prompt: string;
     instructions?: string | undefined;
     cwd: string;
-    access?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    access?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
     external_context_policy?: "auto" | "cached" | "live" | "off" | undefined;
     tool_permission_policy?: {
         web?: "auto" | "cached" | "live" | "off" | undefined;
@@ -1707,12 +1683,6 @@ export declare const HarnessRunSpec: z.ZodObject<{
         }[];
         evidence_refs: string[];
     } | null | undefined;
-    confinement?: {
-        mechanism: string;
-        profile: string;
-        profile_digest: string;
-        verified_denied_path: string;
-    } | null | undefined;
     extra?: Record<string, unknown> | undefined;
 }>;
 export type HarnessRunSpec = z.infer<typeof HarnessRunSpec>;