@claudexor/schema 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 joi-lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,16 @@
+# @claudexor/schema
+
+The data-shape single source of truth of
+[Claudexor](https://github.com/razzant/claudexor): Zod schemas, TypeScript
+types, and the generated draft-07 JSON Schemas under `generated/`.
+
+Unlike the engine-internal packages, the SHAPES here are part of Claudexor's
+stable 1.0 contract: the control API DTOs and the generated
+`generated/<Name>.schema.json` files evolve add-only within a major version
+(see "Stability at 1.0" in the repository README). The generated files carry
+field-level `description`s and are referenced by name from
+`docs/reference/endpoints.json`.
+
+The package follows the monorepo's lockstep version. Use the `claudexor` CLI
+as the supported entry point for driving runs; consume this package when you
+need the typed shapes or the JSON Schemas themselves.

package/dist/agent-capabilities.d.ts

@@ -0,0 +1,366 @@
+import { z } from "zod";
+import { ModeKind } from "./primitives.js";
+/**
+ * AgentCapabilityCatalog — the machine-readable answer to "what can this
+ * Claudexor install do RIGHT NOW", for external agents (MCP hosts, scripts,
+ * other CLIs). It is a DERIVED projection over existing truth sources —
+ * harness manifests + doctor status (gateway.statusAll), the model-truth
+ * service, the CLI command registry, and the schema's own closed vocabularies.
+ * Nothing in it is hand-maintained; a catalog field without a live producer
+ * must not exist (staged-field rule).
+ */
+/**
+ * ControlRunStartRequest keys a DIRECT client may NOT send to POST /runs —
+ * they belong to the daemon-internal thread-turn pipeline (POST
+ * /threads/:id/turns pre-creates the turn and wires plan lineage). The
+ * daemon-server 400-guards these; the capability catalog must exclude them
+ * from the advertised run-control keys, or the catalog would lie to agents.
+ * ONE list, two consumers — keep them in lockstep here.
+ */
+export declare const RUN_START_CLIENT_REJECTED_KEYS: readonly ["turnId", "planRunId"];
+/**
+ * Mode -> tree mutability. ask/plan/audit are read-only BY CONSTRUCTION
+ * (Bible invariant); agent writes; orchestrate may write above suggest
+ * autonomy. The catalog derives its readOnlyModes/writeModes split from this
+ * single map instead of re-encoding the split at each consumer.
+ */
+export declare const MODE_MUTABILITY: Record<z.infer<typeof ModeKind>, "read" | "write">;
+export declare const CatalogModelSummary: z.ZodObject<{
+    source: z.ZodEnum<["api", "manifest", "none"]>;
+    count: z.ZodNumber;
+    verifiedAgainst: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    source: "none" | "api" | "manifest";
+    count: number;
+    verifiedAgainst: string | null;
+}, {
+    source: "none" | "api" | "manifest";
+    count: number;
+    verifiedAgainst: string | null;
+}>;
+export type CatalogModelSummary = z.infer<typeof CatalogModelSummary>;
+export declare const CatalogHarness: z.ZodObject<{
+    id: z.ZodString;
+    enabled: z.ZodBoolean;
+    displayName: z.ZodString;
+    status: z.ZodEnum<["ok", "degraded", "unavailable"]>;
+    providerFamily: z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>;
+    enabledIntents: z.ZodArray<z.ZodString, "many">;
+    disabledIntents: z.ZodArray<z.ZodString, "many">;
+    reasons: z.ZodArray<z.ZodString, "many">;
+    configuredModel: z.ZodNullable<z.ZodString>;
+    configuredModelValid: z.ZodNullable<z.ZodBoolean>;
+    models: z.ZodObject<{
+        source: z.ZodEnum<["api", "manifest", "none"]>;
+        count: z.ZodNumber;
+        verifiedAgainst: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        source: "none" | "api" | "manifest";
+        count: number;
+        verifiedAgainst: string | null;
+    }, {
+        source: "none" | "api" | "manifest";
+        count: number;
+        verifiedAgainst: string | null;
+    }>;
+    webPolicy: z.ZodEnum<["native", "tools", "uncontrolled", "none"]>;
+    imageInput: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>;
+    effortLevels: z.ZodArray<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>, "many">;
+    accessProfilesSupported: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">;
+    readonlyMechanism: z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>;
+}, "strip", z.ZodTypeAny, {
+    status: "ok" | "degraded" | "unavailable";
+    id: string;
+    reasons: string[];
+    enabled: boolean;
+    displayName: string;
+    providerFamily: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
+    enabledIntents: string[];
+    disabledIntents: string[];
+    configuredModel: string | null;
+    configuredModelValid: boolean | null;
+    models: {
+        source: "none" | "api" | "manifest";
+        count: number;
+        verifiedAgainst: string | null;
+    };
+    webPolicy: "none" | "native" | "tools" | "uncontrolled";
+    imageInput: "file_path" | "base64_stream" | "base64_inline" | "none";
+    effortLevels: ("low" | "medium" | "high" | "xhigh" | "max")[];
+    accessProfilesSupported: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+    readonlyMechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+}, {
+    status: "ok" | "degraded" | "unavailable";
+    id: string;
+    reasons: string[];
+    enabled: boolean;
+    displayName: string;
+    providerFamily: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
+    enabledIntents: string[];
+    disabledIntents: string[];
+    configuredModel: string | null;
+    configuredModelValid: boolean | null;
+    models: {
+        source: "none" | "api" | "manifest";
+        count: number;
+        verifiedAgainst: string | null;
+    };
+    webPolicy: "none" | "native" | "tools" | "uncontrolled";
+    imageInput: "file_path" | "base64_stream" | "base64_inline" | "none";
+    effortLevels: ("low" | "medium" | "high" | "xhigh" | "max")[];
+    accessProfilesSupported: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+    readonlyMechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+}>;
+export type CatalogHarness = z.infer<typeof CatalogHarness>;
+export declare const CatalogCliCommand: z.ZodObject<{
+    id: z.ZodString;
+    mutability: z.ZodEnum<["read", "write", "delivery", "ops"]>;
+    stability: z.ZodEnum<["stable", "experimental"]>;
+    recovery: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    mutability: "read" | "write" | "delivery" | "ops";
+    stability: "stable" | "experimental";
+    recovery: boolean;
+}, {
+    id: string;
+    mutability: "read" | "write" | "delivery" | "ops";
+    stability: "stable" | "experimental";
+    recovery: boolean;
+}>;
+export type CatalogCliCommand = z.infer<typeof CatalogCliCommand>;
+export declare const CatalogMutabilityMatrix: z.ZodObject<{
+    readOnlyModes: z.ZodArray<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>, "many">;
+    writeModes: z.ZodArray<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>, "many">;
+    isolationKinds: z.ZodArray<z.ZodEnum<["envelope", "live"]>, "many">;
+    workspaceModes: z.ZodArray<z.ZodEnum<["in_place", "isolated"]>, "many">;
+    accessProfiles: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">;
+    applyModes: z.ZodArray<z.ZodEnum<["apply", "commit", "branch", "pr"]>, "many">;
+}, "strip", z.ZodTypeAny, {
+    readOnlyModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+    writeModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+    isolationKinds: ("live" | "envelope")[];
+    workspaceModes: ("in_place" | "isolated")[];
+    accessProfiles: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+    applyModes: ("apply" | "commit" | "branch" | "pr")[];
+}, {
+    readOnlyModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+    writeModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+    isolationKinds: ("live" | "envelope")[];
+    workspaceModes: ("in_place" | "isolated")[];
+    accessProfiles: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+    applyModes: ("apply" | "commit" | "branch" | "pr")[];
+}>;
+export type CatalogMutabilityMatrix = z.infer<typeof CatalogMutabilityMatrix>;
+export declare const AgentCapabilityCatalog: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    version: z.ZodString;
+    generatedAt: z.ZodString;
+    harnesses: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        enabled: z.ZodBoolean;
+        displayName: z.ZodString;
+        status: z.ZodEnum<["ok", "degraded", "unavailable"]>;
+        providerFamily: z.ZodEnum<["openai", "anthropic", "google", "cursor", "opencode", "xai", "local", "unknown"]>;
+        enabledIntents: z.ZodArray<z.ZodString, "many">;
+        disabledIntents: z.ZodArray<z.ZodString, "many">;
+        reasons: z.ZodArray<z.ZodString, "many">;
+        configuredModel: z.ZodNullable<z.ZodString>;
+        configuredModelValid: z.ZodNullable<z.ZodBoolean>;
+        models: z.ZodObject<{
+            source: z.ZodEnum<["api", "manifest", "none"]>;
+            count: z.ZodNumber;
+            verifiedAgainst: z.ZodNullable<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            source: "none" | "api" | "manifest";
+            count: number;
+            verifiedAgainst: string | null;
+        }, {
+            source: "none" | "api" | "manifest";
+            count: number;
+            verifiedAgainst: string | null;
+        }>;
+        webPolicy: z.ZodEnum<["native", "tools", "uncontrolled", "none"]>;
+        imageInput: z.ZodEnum<["file_path", "base64_stream", "base64_inline", "none"]>;
+        effortLevels: z.ZodArray<z.ZodEnum<["low", "medium", "high", "xhigh", "max"]>, "many">;
+        accessProfilesSupported: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">;
+        readonlyMechanism: z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>;
+    }, "strip", z.ZodTypeAny, {
+        status: "ok" | "degraded" | "unavailable";
+        id: string;
+        reasons: string[];
+        enabled: boolean;
+        displayName: string;
+        providerFamily: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
+        enabledIntents: string[];
+        disabledIntents: string[];
+        configuredModel: string | null;
+        configuredModelValid: boolean | null;
+        models: {
+            source: "none" | "api" | "manifest";
+            count: number;
+            verifiedAgainst: string | null;
+        };
+        webPolicy: "none" | "native" | "tools" | "uncontrolled";
+        imageInput: "file_path" | "base64_stream" | "base64_inline" | "none";
+        effortLevels: ("low" | "medium" | "high" | "xhigh" | "max")[];
+        accessProfilesSupported: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+        readonlyMechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+    }, {
+        status: "ok" | "degraded" | "unavailable";
+        id: string;
+        reasons: string[];
+        enabled: boolean;
+        displayName: string;
+        providerFamily: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
+        enabledIntents: string[];
+        disabledIntents: string[];
+        configuredModel: string | null;
+        configuredModelValid: boolean | null;
+        models: {
+            source: "none" | "api" | "manifest";
+            count: number;
+            verifiedAgainst: string | null;
+        };
+        webPolicy: "none" | "native" | "tools" | "uncontrolled";
+        imageInput: "file_path" | "base64_stream" | "base64_inline" | "none";
+        effortLevels: ("low" | "medium" | "high" | "xhigh" | "max")[];
+        accessProfilesSupported: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+        readonlyMechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+    }>, "many">;
+    availableHarnesses: z.ZodArray<z.ZodString, "many">;
+    modes: z.ZodArray<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>, "many">;
+    runControlKeys: z.ZodArray<z.ZodString, "many">;
+    mutability: z.ZodObject<{
+        readOnlyModes: z.ZodArray<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>, "many">;
+        writeModes: z.ZodArray<z.ZodEnum<["ask", "plan", "audit", "agent", "orchestrate"]>, "many">;
+        isolationKinds: z.ZodArray<z.ZodEnum<["envelope", "live"]>, "many">;
+        workspaceModes: z.ZodArray<z.ZodEnum<["in_place", "isolated"]>, "many">;
+        accessProfiles: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">;
+        applyModes: z.ZodArray<z.ZodEnum<["apply", "commit", "branch", "pr"]>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        readOnlyModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+        writeModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+        isolationKinds: ("live" | "envelope")[];
+        workspaceModes: ("in_place" | "isolated")[];
+        accessProfiles: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+        applyModes: ("apply" | "commit" | "branch" | "pr")[];
+    }, {
+        readOnlyModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+        writeModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+        isolationKinds: ("live" | "envelope")[];
+        workspaceModes: ("in_place" | "isolated")[];
+        accessProfiles: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+        applyModes: ("apply" | "commit" | "branch" | "pr")[];
+    }>;
+    cliCommands: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        mutability: z.ZodEnum<["read", "write", "delivery", "ops"]>;
+        stability: z.ZodEnum<["stable", "experimental"]>;
+        recovery: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        mutability: "read" | "write" | "delivery" | "ops";
+        stability: "stable" | "experimental";
+        recovery: boolean;
+    }, {
+        id: string;
+        mutability: "read" | "write" | "delivery" | "ops";
+        stability: "stable" | "experimental";
+        recovery: boolean;
+    }>, "many">;
+    mcpTools: z.ZodArray<z.ZodString, "many">;
+    runApplyStates: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    version: string;
+    ok: true;
+    mutability: {
+        readOnlyModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+        writeModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+        isolationKinds: ("live" | "envelope")[];
+        workspaceModes: ("in_place" | "isolated")[];
+        accessProfiles: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+        applyModes: ("apply" | "commit" | "branch" | "pr")[];
+    };
+    generatedAt: string;
+    harnesses: {
+        status: "ok" | "degraded" | "unavailable";
+        id: string;
+        reasons: string[];
+        enabled: boolean;
+        displayName: string;
+        providerFamily: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
+        enabledIntents: string[];
+        disabledIntents: string[];
+        configuredModel: string | null;
+        configuredModelValid: boolean | null;
+        models: {
+            source: "none" | "api" | "manifest";
+            count: number;
+            verifiedAgainst: string | null;
+        };
+        webPolicy: "none" | "native" | "tools" | "uncontrolled";
+        imageInput: "file_path" | "base64_stream" | "base64_inline" | "none";
+        effortLevels: ("low" | "medium" | "high" | "xhigh" | "max")[];
+        accessProfilesSupported: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+        readonlyMechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+    }[];
+    availableHarnesses: string[];
+    modes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+    runControlKeys: string[];
+    cliCommands: {
+        id: string;
+        mutability: "read" | "write" | "delivery" | "ops";
+        stability: "stable" | "experimental";
+        recovery: boolean;
+    }[];
+    mcpTools: string[];
+    runApplyStates: string[];
+}, {
+    version: string;
+    ok: true;
+    mutability: {
+        readOnlyModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+        writeModes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+        isolationKinds: ("live" | "envelope")[];
+        workspaceModes: ("in_place" | "isolated")[];
+        accessProfiles: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+        applyModes: ("apply" | "commit" | "branch" | "pr")[];
+    };
+    generatedAt: string;
+    harnesses: {
+        status: "ok" | "degraded" | "unavailable";
+        id: string;
+        reasons: string[];
+        enabled: boolean;
+        displayName: string;
+        providerFamily: "openai" | "anthropic" | "google" | "cursor" | "opencode" | "xai" | "local" | "unknown";
+        enabledIntents: string[];
+        disabledIntents: string[];
+        configuredModel: string | null;
+        configuredModelValid: boolean | null;
+        models: {
+            source: "none" | "api" | "manifest";
+            count: number;
+            verifiedAgainst: string | null;
+        };
+        webPolicy: "none" | "native" | "tools" | "uncontrolled";
+        imageInput: "file_path" | "base64_stream" | "base64_inline" | "none";
+        effortLevels: ("low" | "medium" | "high" | "xhigh" | "max")[];
+        accessProfilesSupported: ("readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native")[];
+        readonlyMechanism: "none" | "fs_sandbox" | "permission_deny" | "tool_allowlist";
+    }[];
+    availableHarnesses: string[];
+    modes: ("ask" | "plan" | "audit" | "agent" | "orchestrate")[];
+    runControlKeys: string[];
+    cliCommands: {
+        id: string;
+        mutability: "read" | "write" | "delivery" | "ops";
+        stability: "stable" | "experimental";
+        recovery: boolean;
+    }[];
+    mcpTools: string[];
+    runApplyStates: string[];
+}>;
+export type AgentCapabilityCatalog = z.infer<typeof AgentCapabilityCatalog>;
+//# sourceMappingURL=agent-capabilities.d.ts.map

package/dist/agent-capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-capabilities.d.ts","sourceRoot":"","sources":["../src/agent-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAiB,QAAQ,EAAkB,MAAM,iBAAiB,CAAC;AAI1E;;;;;;;;GAQG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,kCAAmC,CAAC;AAE/E;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAM9E,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAWkE,CAAC;AACnG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+BsD,CAAC;AAClF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAS0E,CAAC;AACzG,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;EAmBgG,CAAC;AACrI,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBqE,CAAC;AACzG,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/agent-capabilities.js

@@ -0,0 +1,125 @@
+import { z } from "zod";
+import { AccessProfile, ModeKind, ProviderFamily } from "./primitives.js";
+import { AdapterStatus, EffortHint, ReadonlyMechanism } from "./harness.js";
+import { WorkspaceMode } from "./thread.js";
+/**
+ * AgentCapabilityCatalog — the machine-readable answer to "what can this
+ * Claudexor install do RIGHT NOW", for external agents (MCP hosts, scripts,
+ * other CLIs). It is a DERIVED projection over existing truth sources —
+ * harness manifests + doctor status (gateway.statusAll), the model-truth
+ * service, the CLI command registry, and the schema's own closed vocabularies.
+ * Nothing in it is hand-maintained; a catalog field without a live producer
+ * must not exist (staged-field rule).
+ */
+/**
+ * ControlRunStartRequest keys a DIRECT client may NOT send to POST /runs —
+ * they belong to the daemon-internal thread-turn pipeline (POST
+ * /threads/:id/turns pre-creates the turn and wires plan lineage). The
+ * daemon-server 400-guards these; the capability catalog must exclude them
+ * from the advertised run-control keys, or the catalog would lie to agents.
+ * ONE list, two consumers — keep them in lockstep here.
+ */
+export const RUN_START_CLIENT_REJECTED_KEYS = ["turnId", "planRunId"];
+/**
+ * Mode -> tree mutability. ask/plan/audit are read-only BY CONSTRUCTION
+ * (Bible invariant); agent writes; orchestrate may write above suggest
+ * autonomy. The catalog derives its readOnlyModes/writeModes split from this
+ * single map instead of re-encoding the split at each consumer.
+ */
+export const MODE_MUTABILITY = {
+    ask: "read",
+    plan: "read",
+    audit: "read",
+    agent: "write",
+    orchestrate: "write",
+};
+export const CatalogModelSummary = z
+    .object({
+    source: z.enum(["api", "manifest", "none"]).describe("Where the model list comes from: a live vendor API enumeration, the adapter manifest's curated hints, or nothing (model overrides are refused for source=none)."),
+    count: z.number().int().min(0).describe("Number of enumerable models (GET /harnesses/:id/models has the full list)."),
+    verifiedAgainst: z
+        .string()
+        .nullable()
+        .describe("Vendor CLI version the manifest hints were last verified against (null for api/none sources)."),
+})
+    .describe("Summary of a harness's model truth source (full list via the models endpoint/verb).");
+export const CatalogHarness = z
+    .object({
+    id: z.string().describe("Harness id (codex, claude, cursor, opencode, raw-api, openrouter, ...)."),
+    enabled: z.boolean().describe("False when settings disable this harness (harnesses.<id>.enabled=false) — routing excludes it regardless of doctor status."),
+    displayName: z.string().describe("Human display name from the manifest."),
+    status: AdapterStatus.describe("Doctor verdict: ok | degraded | unavailable (doctor-backed, cached ~90s)."),
+    providerFamily: ProviderFamily.describe("Vendor family the harness routes to."),
+    enabledIntents: z.array(z.string()).describe("Intents the gateway will route to this harness right now."),
+    disabledIntents: z.array(z.string()).describe("Intents the doctor disabled (with reasons in `reasons`)."),
+    reasons: z.array(z.string()).describe("Human-readable doctor/discovery reasons for degraded or unavailable status."),
+    configuredModel: z
+        .string()
+        .nullable()
+        .describe("The user's configured per-harness default model, if any (null = engine default routing)."),
+    configuredModelValid: z
+        .boolean()
+        .nullable()
+        .describe("Strict truth-source check of configuredModel (null when no model is configured)."),
+    models: CatalogModelSummary,
+    webPolicy: z
+        .enum(["native", "tools", "uncontrolled", "none"])
+        .describe("How external web/search is controlled for this harness."),
+    imageInput: z
+        .enum(["file_path", "base64_stream", "base64_inline", "none"])
+        .describe("Attachment/vision delivery mechanism the adapter supports."),
+    effortLevels: z.array(EffortHint).describe("Reasoning-effort ladder the adapter declares (normalized by the engine)."),
+    accessProfilesSupported: z.array(AccessProfile).describe("Access profiles the adapter can enforce."),
+    readonlyMechanism: ReadonlyMechanism.describe("HOW read-only is enforced (fs_sandbox | permission_deny | tool_allowlist | none) — none means read-only intent is advisory for this harness."),
+})
+    .describe("Per-harness live capability row (manifest + doctor + model truth).");
+export const CatalogCliCommand = z
+    .object({
+    id: z.string().describe("CLI verb."),
+    mutability: z
+        .enum(["read", "write", "delivery", "ops"])
+        .describe("read = never mutates the tree; write = produces tree changes (envelope or live); delivery = moves an existing WorkProduct into the tree/VCS; ops = local config/daemon plumbing."),
+    stability: z.enum(["stable", "experimental"]).describe("Contract stability of the verb."),
+    recovery: z.boolean().describe("True for post-run recovery verbs (inspect/follow/apply/decision)."),
+})
+    .describe("CLI verb projection from the command registry (same data `claudexor help --json` serves).");
+export const CatalogMutabilityMatrix = z
+    .object({
+    readOnlyModes: z
+        .array(ModeKind)
+        .describe("Canonical modes that never mutate the project tree (ask/plan/audit; orchestrate in suggest autonomy is also read-only)."),
+    writeModes: z
+        .array(ModeKind)
+        .describe("Canonical modes that may mutate a tree (agent always; orchestrate only above suggest autonomy)."),
+    isolationKinds: z
+        .array(z.enum(["envelope", "live"]))
+        .describe("Run isolation: envelope = isolated worktree under .claudexor/workspaces (default), live = the project tree itself."),
+    workspaceModes: z.array(WorkspaceMode).describe("Thread workspace modes (in_place | isolated)."),
+    accessProfiles: z
+        .array(AccessProfile)
+        .describe("Access vocabulary; `full` additionally requires the per-repo trust allow (claudexor trust --allow-full-access)."),
+    applyModes: z
+        .array(z.enum(["apply", "commit", "branch", "pr"]))
+        .describe("Delivery modes for applying a run's WorkProduct to the project."),
+})
+    .describe("The mutability matrix: every way a Claudexor run can (or cannot) touch a tree, from the schema's closed vocabularies.");
+export const AgentCapabilityCatalog = z
+    .object({
+    ok: z.literal(true).describe("Envelope marker (matches the CLI JSON convention)."),
+    version: z.string().describe("Claudexor version serving this catalog (compare with CLAUDEXOR_PLUGIN_VERSION to detect plugin skew)."),
+    generatedAt: z.string().describe("ISO timestamp when the catalog was composed."),
+    harnesses: z.array(CatalogHarness).describe("Live per-harness capabilities (doctor-backed)."),
+    availableHarnesses: z.array(z.string()).describe("Convenience: ids with doctor status ok."),
+    modes: z.array(ModeKind).describe("Canonical run modes (strategies like --n/--until-clean/--swarm are flags, not modes)."),
+    runControlKeys: z
+        .array(z.string())
+        .describe("Accepted POST /runs request keys (derived from the ControlRunStartRequest schema; the CLI/MCP/ACP surfaces project subsets of these)."),
+    mutability: CatalogMutabilityMatrix,
+    cliCommands: z.array(CatalogCliCommand).describe("CLI verbs with mutability/stability (full flag detail via `claudexor help --json`)."),
+    mcpTools: z.array(z.string()).describe("MCP tool names `claudexor mcp serve` exposes."),
+    runApplyStates: z
+        .array(z.string())
+        .describe("RunApplyState vocabulary an agent can encounter on run results (not_applied | applied | applied_review_blocked | reverted) — distinct from the ApplyEligibility verdict object on run details."),
+})
+    .describe("Machine-readable capability catalog for external agents — derived, never hand-maintained.");
+//# sourceMappingURL=agent-capabilities.js.map

package/dist/agent-capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-capabilities.js","sourceRoot":"","sources":["../src/agent-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;;;;GAQG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAU,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuD;IACjF,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,OAAO;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAClD,iKAAiK,CAClK;IACD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4EAA4E,CAAC;IACrH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+FAA+F,CAAC;CAC7G,CAAC;KACD,QAAQ,CAAC,qFAAqF,CAAC,CAAC;AAGnG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yEAAyE,CAAC;IAClG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4HAA4H,CAAC;IAC3J,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACzE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,2EAA2E,CAAC;IAC3G,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC/E,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACzG,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACzG,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IACpH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,0FAA0F,CAAC;IACvG,oBAAoB,EAAE,CAAC;SACpB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,kFAAkF,CAAC;IAC/F,MAAM,EAAE,mBAAmB;IAC3B,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;SACjD,QAAQ,CAAC,yDAAyD,CAAC;IACtE,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;SAC7D,QAAQ,CAAC,4DAA4D,CAAC;IACzE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,0EAA0E,CAAC;IACtH,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACpG,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,CAC3C,8IAA8I,CAC/I;CACF,CAAC;KACD,QAAQ,CAAC,oEAAoE,CAAC,CAAC;AAGlF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;IACpC,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;SAC1C,QAAQ,CAAC,kLAAkL,CAAC;IAC/L,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACzF,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;CACpG,CAAC;KACD,QAAQ,CAAC,2FAA2F,CAAC,CAAC;AAGzG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC;SACb,KAAK,CAAC,QAAQ,CAAC;SACf,QAAQ,CAAC,yHAAyH,CAAC;IACtI,UAAU,EAAE,CAAC;SACV,KAAK,CAAC,QAAQ,CAAC;SACf,QAAQ,CAAC,iGAAiG,CAAC;IAC9G,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;SACnC,QAAQ,CAAC,oHAAoH,CAAC;IACjI,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAChG,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,aAAa,CAAC;SACpB,QAAQ,CAAC,iHAAiH,CAAC;IAC9H,UAAU,EAAE,CAAC;SACV,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;SAClD,QAAQ,CAAC,iEAAiE,CAAC;CAC/E,CAAC;KACD,QAAQ,CAAC,uHAAuH,CAAC,CAAC;AAGrI,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAClF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uGAAuG,CAAC;IACrI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAChF,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAC7F,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC3F,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,uFAAuF,CAAC;IAC1H,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,uIAAuI,CAAC;IACpJ,UAAU,EAAE,uBAAuB;IACnC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,qFAAqF,CAAC;IACvI,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IACvF,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,gMAAgM,CAAC;CAC9M,CAAC;KACD,QAAQ,CAAC,2FAA2F,CAAC,CAAC"}

package/dist/apply-eligibility.d.ts

@@ -0,0 +1,76 @@
+import { z } from "zod";
+/**
+ * ApplyEligibility — the derived "can this run's WorkProduct be applied RIGHT
+ * NOW, and if not, what unblocks it" verdict. ONE producer (the delivery
+ * gate's deriveApplyEligibility over validateApplyGate + the apply hint);
+ * projected on GET /runs/:id, MCP structured results, and CLI --json output
+ * so every surface answers identically instead of re-implying eligibility
+ * from raw state fields.
+ */
+export declare const ApplyEligibility: z.ZodObject<{
+    eligible: z.ZodBoolean;
+    state: z.ZodNullable<z.ZodString>;
+    reason: z.ZodNullable<z.ZodString>;
+    requiredAction: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    state: string | null;
+    reason: string | null;
+    eligible: boolean;
+    requiredAction: string | null;
+}, {
+    state: string | null;
+    reason: string | null;
+    eligible: boolean;
+    requiredAction: string | null;
+}>;
+export type ApplyEligibility = z.infer<typeof ApplyEligibility>;
+/**
+ * The structured result shape MCP run tools return (structuredContent).
+ * Text content mirrors it for hosts without structured-output support.
+ */
+export declare const McpRunToolResult: z.ZodObject<{
+    summary: z.ZodString;
+    runId: z.ZodNullable<z.ZodString>;
+    runDir: z.ZodNullable<z.ZodString>;
+    status: z.ZodNullable<z.ZodString>;
+    applyEligibility: z.ZodNullable<z.ZodObject<{
+        eligible: z.ZodBoolean;
+        state: z.ZodNullable<z.ZodString>;
+        reason: z.ZodNullable<z.ZodString>;
+        requiredAction: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        state: string | null;
+        reason: string | null;
+        eligible: boolean;
+        requiredAction: string | null;
+    }, {
+        state: string | null;
+        reason: string | null;
+        eligible: boolean;
+        requiredAction: string | null;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    status: string | null;
+    summary: string;
+    runId: string | null;
+    runDir: string | null;
+    applyEligibility: {
+        state: string | null;
+        reason: string | null;
+        eligible: boolean;
+        requiredAction: string | null;
+    } | null;
+}, {
+    status: string | null;
+    summary: string;
+    runId: string | null;
+    runDir: string | null;
+    applyEligibility: {
+        state: string | null;
+        reason: string | null;
+        eligible: boolean;
+        requiredAction: string | null;
+    } | null;
+}>;
+export type McpRunToolResult = z.infer<typeof McpRunToolResult>;
+//# sourceMappingURL=apply-eligibility.d.ts.map

package/dist/apply-eligibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-eligibility.d.ts","sourceRoot":"","sources":["../src/apply-eligibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;EAa4E,CAAC;AAC1G,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQqC,CAAC;AACnE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}