@claudexor/schema 1.0.0 → 2.0.0

package/generated/RawContextPacket.schema.json

@@ -0,0 +1,184 @@
+{
+  "$ref": "#/definitions/RawContextPacket",
+  "definitions": {
+    "RawContextPacket": {
+      "type": "object",
+      "properties": {
+        "schema_version": {
+          "type": "number",
+          "const": 1
+        },
+        "packet_hash": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Content hash in algo:hex form, e.g. \"sha256:abcd...\"."
+        },
+        "base_commit_sha": {
+          "type": "string",
+          "minLength": 1
+        },
+        "base_tree_sha": {
+          "type": "string",
+          "minLength": 1
+        },
+        "readable_files": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Exact repo-relative readable/editable path."
+              },
+              "mode": {
+                "type": "string",
+                "description": "Git object mode at the bound base tree."
+              },
+              "blob_oid": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Git blob oid at the bound base tree."
+              },
+              "content_hash": {
+                "$ref": "#/definitions/RawContextPacket/properties/packet_hash"
+              },
+              "content": {
+                "type": "string",
+                "description": "Complete text content; never truncated."
+              }
+            },
+            "required": [
+              "path",
+              "mode",
+              "blob_oid",
+              "content_hash",
+              "content"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "editable_paths": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "creatable_roots": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "default": [],
+          "description": "Exact repo-relative roots where a patch may add a new path; '.' means the project root."
+        },
+        "file_manifest": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "description": "Repo-relative path."
+              },
+              "disposition": {
+                "type": "string",
+                "enum": [
+                  "full",
+                  "included",
+                  "manifest_only",
+                  "excluded",
+                  "sensitive",
+                  "binary",
+                  "vendored",
+                  "oversized",
+                  "read_error",
+                  "omitted"
+                ],
+                "description": "How a tracked path was accounted for in the Scope Atlas (full/included content, manifest_only, or excluded/sensitive/binary/vendored/oversized/read_error/omitted); no path is ever silently dropped."
+              },
+              "hash": {
+                "$ref": "#/definitions/RawContextPacket/properties/packet_hash",
+                "description": "Content hash of the path, when read."
+              },
+              "bytes": {
+                "type": "integer",
+                "minimum": 0,
+                "description": "Size of the path in bytes, when known."
+              },
+              "reason": {
+                "type": "string",
+                "description": "Why the path got this disposition."
+              }
+            },
+            "required": [
+              "path",
+              "disposition"
+            ],
+            "additionalProperties": false,
+            "description": "Accounting entry for one tracked path in the Scope Atlas."
+          }
+        },
+        "omissions": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "description": "Repo-relative path that was omitted."
+              },
+              "reason": {
+                "type": "string",
+                "description": "Why the path was omitted."
+              },
+              "replacement": {
+                "type": "string",
+                "enum": [
+                  "summary",
+                  "map",
+                  "index",
+                  "none"
+                ],
+                "default": "none",
+                "description": "What stands in for the omitted content: a summary, a map, an index, or nothing."
+              },
+              "hash": {
+                "$ref": "#/definitions/RawContextPacket/properties/packet_hash",
+                "description": "Content hash of the omitted file, when known."
+              }
+            },
+            "required": [
+              "path",
+              "reason"
+            ],
+            "additionalProperties": false,
+            "description": "Explicit record of a file omitted from the context; nothing is silently cut."
+          }
+        },
+        "evidence_refs": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        }
+      },
+      "required": [
+        "schema_version",
+        "packet_hash",
+        "base_commit_sha",
+        "base_tree_sha",
+        "readable_files",
+        "editable_paths",
+        "file_manifest",
+        "omissions",
+        "evidence_refs"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/RawGitPatchEnvelope.schema.json

@@ -0,0 +1,70 @@
+{
+  "$ref": "#/definitions/RawGitPatchEnvelope",
+  "definitions": {
+    "RawGitPatchEnvelope": {
+      "type": "object",
+      "properties": {
+        "schema_version": {
+          "type": "number",
+          "const": 1
+        },
+        "context_packet_hash": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Content hash in algo:hex form, e.g. \"sha256:abcd...\"."
+        },
+        "base_tree_sha": {
+          "type": "string",
+          "minLength": 1
+        },
+        "patch": {
+          "type": "string",
+          "minLength": 1
+        },
+        "patch_hash": {
+          "$ref": "#/definitions/RawGitPatchEnvelope/properties/context_packet_hash"
+        },
+        "touched_paths": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "minLength": 1
+              },
+              "expected_blob_oid": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Base-tree blob oid, or null only when the path is absent in the base tree."
+              }
+            },
+            "required": [
+              "path",
+              "expected_blob_oid"
+            ],
+            "additionalProperties": false
+          },
+          "minItems": 1
+        }
+      },
+      "required": [
+        "schema_version",
+        "context_packet_hash",
+        "base_tree_sha",
+        "patch",
+        "patch_hash",
+        "touched_paths"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/RunTelemetry.schema.json

@@ -188,6 +188,78 @@
                 "default": null,
                 "description": "Model the harness stream actually reported; null when never disclosed (rendered as unverified, never guessed)."
               },
+              "auth_mode": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "local_session",
+                      "api_key",
+                      "unknown"
+                    ],
+                    "description": "Auth mode a route runs under: a native local session, an API key, or unknown."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Auth route the attempt actually ran under (local_session subscription vs api_key), disclosed by the adapter's typed started payload; null when never disclosed (treated as unknown, never guessed).",
+                "default": null
+              },
+              "request_requirements": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "capability": {
+                      "type": "string",
+                      "const": "browser"
+                    },
+                    "harness_id": {
+                      "type": "string",
+                      "minLength": 1
+                    },
+                    "eligible": {
+                      "type": "boolean"
+                    },
+                    "requested": {
+                      "type": "boolean"
+                    },
+                    "effective": {
+                      "type": "boolean"
+                    },
+                    "reason": {
+                      "type": "string",
+                      "enum": [
+                        "not_requested",
+                        "effective",
+                        "manifest_unsupported",
+                        "web_policy_off",
+                        "access_profile_incompatible"
+                      ]
+                    },
+                    "evidence_refs": {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      },
+                      "default": []
+                    }
+                  },
+                  "required": [
+                    "capability",
+                    "harness_id",
+                    "eligible",
+                    "requested",
+                    "effective",
+                    "reason"
+                  ],
+                  "additionalProperties": false,
+                  "description": "Preflight resolution of one requested capability on one selected harness lane."
+                },
+                "default": [],
+                "description": "Per-lane requested/effective capability receipts computed at preflight; never inferred by surfaces."
+              },
               "web": {
                 "type": "object",
                 "properties": {
@@ -401,6 +473,14 @@
           "default": [],
           "description": "Per-attempt telemetry records."
         },
+        "request_requirements": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/RunTelemetry/properties/attempts/items/properties/request_requirements/items"
+          },
+          "default": [],
+          "description": "All selected-lane capability receipts for this run."
+        },
         "tool_warnings_total": {
           "type": "integer",
           "minimum": 0,

package/generated/SecretMetadata.schema.json

@@ -10,16 +10,13 @@
         },
         "backend": {
           "type": "string",
-          "enum": [
-            "keychain",
-            "file"
-          ],
-          "description": "Where the secret is stored: the OS keychain or a file store."
+          "const": "file",
+          "description": "Claudexor v2 file secret store."
         },
         "present": {
           "type": "boolean",
           "default": true,
-          "description": "Whether a value is actually stored."
+          "description": "Whether a value is stored."
         }
       },
       "required": [
@@ -27,7 +24,7 @@
         "backend"
       ],
       "additionalProperties": false,
-      "description": "Secret list row: name, storage backend, and presence — never the value."
+      "description": "Secret metadata; never the value."
     }
   },
   "$schema": "http://json-schema.org/draft-07/schema#"

package/generated/SpecPack.schema.json

@@ -128,27 +128,138 @@
           "items": {
             "type": "object",
             "properties": {
-              "id": {
+              "program": {
                 "type": "string",
                 "minLength": 1,
-                "description": "Test command id."
+                "pattern": "\\S",
+                "description": "Executable invoked directly without an implicit shell."
+              },
+              "args": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "default": [],
+                "description": "Exact argv passed to the executable."
+              },
+              "cwd": {
+                "type": "string",
+                "description": "Optional project-relative working directory for the command."
               },
-              "command": {
+              "envAllowlist": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1,
+                  "pattern": "\\S",
+                  "description": "User-supplied string that must contain visible content, not just whitespace."
+                },
+                "default": [],
+                "description": "Non-secret parent environment names explicitly forwarded to the command."
+              },
+              "id": {
                 "type": "string",
-                "description": "Shell command executed as a deterministic gate."
+                "minLength": 1,
+                "description": "Test command id."
               },
               "required": {
                 "type": "boolean",
                 "default": true,
                 "description": "Whether this test must pass (vs advisory)."
+              },
+              "trust_required": {
+                "type": "boolean",
+                "default": false,
+                "description": "Whether this command originated in versioned project config."
+              },
+              "trust_grant": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "projectDigest": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Digest of the canonical project identity."
+                      },
+                      "configDigest": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Digest of the parsed versioned project config blob."
+                      },
+                      "commandDigest": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Digest of the canonical command invocation."
+                      },
+                      "executablePath": {
+                        "type": "string",
+                        "description": "Resolved executable path approved by the operator."
+                      },
+                      "executableDigest": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Digest of the resolved executable bytes."
+                      },
+                      "scriptPath": {
+                        "type": [
+                          "string",
+                          "null"
+                        ],
+                        "default": null,
+                        "description": "Resolved script path, when any."
+                      },
+                      "scriptDigest": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Content hash in algo:hex form, e.g. \"sha256:abcd...\"."
+                          },
+                          {
+                            "type": "null"
+                          }
+                        ],
+                        "description": "Digest of the script bytes.",
+                        "default": null
+                      },
+                      "accessProfile": {
+                        "type": "string",
+                        "enum": [
+                          "readonly",
+                          "workspace_write",
+                          "full",
+                          "external_sandbox_full",
+                          "inherit_native"
+                        ],
+                        "description": "Effective access profile covered by this grant."
+                      }
+                    },
+                    "required": [
+                      "projectDigest",
+                      "configDigest",
+                      "commandDigest",
+                      "executablePath",
+                      "executableDigest",
+                      "accessProfile"
+                    ],
+                    "additionalProperties": false,
+                    "description": "External exact grant for one versioned project test command."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Matching external grant; null when none was found.",
+                "default": null
               }
             },
             "required": [
-              "id",
-              "command"
+              "program",
+              "id"
             ],
             "additionalProperties": false,
-            "description": "A deterministic test command used as a verification gate."
+            "description": "A deterministic typed-argv test command used as a verification gate."
           },
           "default": [],
           "description": "Deterministic test commands frozen into the spec."