> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bluee.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Return the trusted compiled harness registry



## OpenAPI

````yaml /openapi/next.yaml get /harness-metadata
openapi: 3.1.0
info:
  title: Blue — Service Contract
  version: 0.1.0
  description: >
    The client-side contract the `blue` CLI expects from the provisioned
    service. The reference `control-api` implements it; any BYO service that
    honors these shapes can be swapped in. Gateway-mode inference JWT issuance
    is OPTIONAL — governance-only deployments need only `GET
    /governance-config`. CLI callers use OAuth 2.0 access tokens issued through
    RFC 8628 device authorization; dashboard callers use an HTTP-only Better
    Auth session cookie.
servers:
  - url: https://harness.example.com
    description: Replace with the Control API URL for your deployment.
security:
  - oauthDevice: []
tags:
  - name: System
    description: Service health and authenticated identity.
  - name: Configuration
    description: Personalized governance policy and client reconciliation state.
  - name: Gateway
    description: Per-user managed inference-gateway credential lifecycle.
  - name: Sessions
    description: Raw-session upload, metadata, and download lifecycle.
  - name: Administration
    description: Organization-administrator policy and client operations.
  - name: User management
    description: >-
      Organization user lifecycle, session revocation, and invitation
      operations.
  - name: Identity provisioning
    description: SCIM 2.0 user and group provisioning for an external identity provider.
paths:
  /harness-metadata:
    get:
      tags:
        - Configuration
      summary: Return the trusted compiled harness registry
      operationId: getHarnessMetadata
      responses:
        '200':
          description: Harness aliases, labels, capabilities, and generation boundaries
          content:
            application/json:
              schema:
                type: object
                required:
                  - contract_version
                  - harnesses
                properties:
                  contract_version:
                    type: integer
                  harnesses:
                    type: array
                    items:
                      $ref: '#/components/schemas/HarnessMetadata'
        '401':
          description: Missing/invalid session token
components:
  schemas:
    HarnessMetadata:
      type: object
      required:
        - key
        - aliases
        - label
        - description
        - binary_names
        - install_command_template
        - capabilities
        - component_rules
        - generations
      properties:
        key:
          type: string
        aliases:
          type: array
          items:
            type: string
        label:
          type: string
        description:
          type: string
        binary_names:
          type: array
          items:
            type: string
        install_command_template:
          type: string
        capabilities:
          type: array
          description: Backward-compatible union derived from all generation specifications
          items:
            type: string
        component_rules:
          type: object
          description: >-
            Backward-compatible summary derived from the current generation;
            prefer generations[].component_rules.
          required:
            - agents_require_plugin
            - hooks_require_plugin
            - hooks_as_plugin_modules
          properties:
            agents_require_plugin:
              type: boolean
            hooks_require_plugin:
              type: boolean
            hooks_as_plugin_modules:
              type: boolean
        generations:
          type: array
          items:
            type: object
            required:
              - profile
              - introduced
              - verified_before
              - lifecycle
              - capabilities
              - component_rules
            properties:
              profile:
                type: string
              introduced:
                type: string
              before:
                type:
                  - string
                  - 'null'
                description: Exclusive upper bound of the breaking compatibility generation
              verified_before:
                type: string
                description: >-
                  Exclusive upper bound of releases certified against this
                  implementation
              lifecycle:
                type: string
                enum:
                  - supported
                  - deprecated
              capabilities:
                type: array
                items:
                  type: string
              component_rules:
                type: object
                required:
                  - agents_require_plugin
                  - hooks_require_plugin
                  - hooks_as_plugin_modules
                properties:
                  agents_require_plugin:
                    type: boolean
                  hooks_require_plugin:
                    type: boolean
                  hooks_as_plugin_modules:
                    type: boolean
  securitySchemes:
    oauthDevice:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >
        OAuth 2.0 access token obtained through RFC 8628 at
        /api/auth/device/code and /api/auth/oauth2/token. The API enforces
        governance:read, session:write, and client-status:write as appropriate.

````