Sync main 1a1af99e into the feature branch

.env.example

@@ -4,46 +4,3 @@ OAC_WEB_DEV_PROXY_TARGET=http://127.0.0.1:8091
 
 # Core reads its own environment, not this file. Core settings, including
 # Runtime history sampling and export, are in docs/configuration.md.
-
-# Public, non-secret opt-in for the reviewed Codex self_hosted Session profile.
-# Leave unset unless Core execution, its executor registry, and executor origin
-# are configured. This flag is presentation policy, not capability discovery.
-# OAC_WEB_SELF_HOSTED_SESSIONS=1
-
-# Public, non-secret opt-in for the operator-qualified basic Codex
-# openai_hosted Session profile. Leave unset unless Core was started with a
-# qualified managed Runtime provider. This flag does not probe runtime readiness.
-# OAC_WEB_OPENAI_HOSTED_SESSIONS=1
-
-# Public, non-secret opt-in for the complete Environment Files profile. Leave
-# unset for older Core revisions. Enable only after the connected Core has been
-# qualified for Files.list and managed Files.create; self_hosted reads use its
-# exact workspace_directory root.
-# OAC_WEB_ENVIRONMENT_FILES=1
-
-# Optional local-only Docker backend recovery guide shown in the connection
-# panel. Web renders copyable `docker start` and loopback health commands; it
-# never accesses the Docker socket or executes them. Values are compiled into
-# the browser bundle and must contain non-secret container names only.
-# OAC_WEB_DOCKER_BACKEND_GUIDE=1
-# OAC_WEB_DOCKER_DATABASE_CONTAINER=oac-web-smoke-db
-# OAC_WEB_DOCKER_API_CONTAINER=oac-web-smoke-api
-# OAC_WEB_DOCKER_DAEMON_CONTAINER=oac-web-smoke-daemon
-# OAC_WEB_DOCKER_CORE_PORT=8091
-
-# Optional local-only Docker connection recipe. This renders a copyable command;
-# it never gives the browser Docker access or reads the credential file. Every
-# value below is compiled into the browser bundle, so values must be non-secret.
-# Enable only for the matching operator-controlled local stack.
-# OAC_WEB_DOCKER_GUIDE=1
-# OAC_WEB_DOCKER_IMAGE=oac-web-smoke-executor:2b34ea46-codex-0.153.4
-# OAC_WEB_DOCKER_API_CONTAINER=oac-web-smoke-api
-# OAC_WEB_DOCKER_USER=501:20
-# OAC_WEB_DOCKER_CREDENTIALS_HOME_PATH=.oac/web-smoke/executor-key.json
-# OAC_WEB_DOCKER_RUNTIME_HOME_PATH=.oac/web-smoke/executors
-
-# Public, non-secret suggestions shown by the Create Agent model picker. The
-# first entry is the default unless VITE_AGENT_DEFAULT_MODEL overrides it. These
-# do not claim live availability; the connected runtime remains authoritative.
-VITE_AGENT_MODEL_PRESETS=gpt-6-astra,gpt-5.6-sol,gpt-5.6-terra,gpt-5.6-luna,gpt-5.5,gpt-5.3-codex-spark
-VITE_AGENT_DEFAULT_MODEL=gpt-5.6-sol

AGENTS.md

@@ -58,7 +58,7 @@ Do not multiply entities without necessity. The long-term goal is minimal code,
 
 Each setting and each piece of data is written in one place and read from that place: no second copy, no environment-variable or file fallback and no alias. A new setting joins its category and lives beside its peers.
 
-The categories are [process settings](docs/configuration.md#process-settings-configjson), [derived files](docs/configuration.md#how-oac-apply-works), [secrets](docs/configuration.md#installation-directory), and Core's database for [runtime settings](docs/configuration.md#runtime-settings-web) and execution data. [Configuration](docs/configuration.md) owns the installation layout and the settings themselves.
+The categories are [process settings](docs/configuration.md#process-settings), [derived files](docs/configuration.md#how-oac-apply-works), [secrets](docs/configuration.md#installation-directory), and Core's database for [runtime settings](docs/configuration.md#runtime-settings-web) and execution data. [Configuration](docs/configuration.md) owns the installation layout and the settings themselves.
 
 ### Pre-release: no compatibility layers
 

CONTRIBUTING.md

@@ -8,7 +8,7 @@ This guide owns how to work in the repository: documentation ownership, the repo
 | --- | --- |
 | Design principles, public API fidelity, settings and data ownership, documentation rules | [AGENTS.md](AGENTS.md) |
 | Protocol code and documents at each component boundary | [Protocol map](AGENTS.md#protocols-at-every-boundary) |
-| Projects, keys, resource isolation, administrator authority, secrets and audit concepts | [Concepts and ownership](docs/concepts.md) |
+| Projects, keys, resource isolation, administrator authority, secrets and audit concepts | [Concepts](docs/concepts.md) |
 | Component responsibilities and Session flow | [Architecture](docs/architecture.md) |
 | Developer setup, repository map and focused checks | [Develop OpenAgentCore](docs/development.md) |
 | API callers, credentials and route inventory | [API index](docs/api/index.md) |
@@ -115,7 +115,7 @@ The role needs `CREATE DATABASE`: tests of database-wide state, such as the exec
 
 ### Contract and schema rules
 
-- `internal/harnessconfig/builtin/catalog.json` is the single authored public Harness registration list. `make generate-harness-catalog` generates Go configuration/profile registration, client identifiers/names and the reference; `make openapi` derives the matching enums. `make check-harness-catalog` verifies freshness in the full gate. Native configuration rules stay in their adapter declarations; Core qualification and Runtime availability stay separate.
+- `internal/harnessconfig/builtin/catalog.json` is the single authored public Harness registration list. `make generate-harness-catalog` generates Go configuration/profile registration, client identifiers/names and the reference, and projects the model-provider protocol names of `internal/modelprovider/config.go` to the client; `make openapi` derives the matching enums. `make check-harness-catalog` verifies freshness in the full gate. Native configuration rules stay in their adapter declarations; Core qualification and Runtime availability stay separate.
 - `make sqlc-generate` owns only `services/core/internal/db/sqlc` (sqlc v1.29.0). Do not rewrite landed migrations.
 - `make check-runtime-contract` is the focused Core–Runtime contract entry point; see [Contract verification](docs/runtime-protocol.md#contract-verification). It also runs through `check-go` and `check-core`.