@claudexor/schema 1.0.0

package/dist/control-run-detail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-run-detail.d.ts","sourceRoot":"","sources":["../src/control-run-detail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB;;;gCAGgC;AAChC,eAAO,MAAM,gBAAgB;;;;;;;;;IAUzB,0DAA0D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAeoD,CAAC;AACnH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAGzB;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAeH,6GAA6G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAU7G,gHAAgH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAMhH;;4CAEwC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIxC;;;0BAGsB;;;;;;;;;;QAjEtB,0DAA0D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsE1D;yCACqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBuF,CAAC;AACjI,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/control-run-detail.js

@@ -0,0 +1,107 @@
+import { z } from "zod";
+import { ApplyEligibility } from "./apply-eligibility.js";
+import { DecisionRecord } from "./decision.js";
+import { WorkProduct } from "./workproduct.js";
+import { ReviewFinding } from "./review.js";
+import { OrchestratePlanProgress } from "./orchestrate.js";
+import { ControlArtifactInfo, ControlBudgetSnapshot, ControlPendingInteraction, ControlPrimaryOutput, ControlRunSummary, ControlTimelineEvent, RunFailure, } from "./control.js";
+/** Per-candidate evidence card for a race run (projected from
+ * attempts/<id>/attempt.yaml + reviews/<id>.yaml + the decision winner).
+ * The macOS Candidates tab renders these; SSE freshness rides the client's
+ * existing refresh-on-event. */
+export const ControlCandidate = z
+    .object({
+    attemptId: z.string().describe("Attempt id of the candidate."),
+    harnessId: z.string().describe("Harness that produced the candidate."),
+    label: z.string().nullable().default(null).describe("Human-readable candidate label, when set."),
+    costUsd: z.number().default(0).describe("Spend attributed to the candidate, in USD."),
+    costEstimated: z.boolean().default(false).describe("True when the cost is token-derived rather than natively reported."),
+    errored: z.boolean().default(false).describe("True when the candidate's attempt errored."),
+    gatesPassed: z.number().int().nonnegative().default(0).describe("Number of deterministic gates that passed."),
+    gatesTotal: z.number().int().nonnegative().default(0).describe("Total deterministic gates run for the candidate."),
+    /** Blocking review findings count (accepted blockers). */
+    blockers: z.number().int().nonnegative().default(0).describe("Count of accepted blocking review findings."),
+    reviewVerified: z.boolean().default(false).describe("Whether the candidate's review route was verified."),
+    finalReviewClean: z.boolean().nullable().default(null).describe("Whether the final review was clean; null when no final review ran."),
+    winner: z.boolean().default(false).describe("True for the adopted/winning candidate."),
+    diffstat: z
+        .object({
+        files: z.number().int().nonnegative().default(0).describe("Files changed."),
+        additions: z.number().int().nonnegative().default(0).describe("Lines added."),
+        deletions: z.number().int().nonnegative().default(0).describe("Lines deleted."),
+    })
+        .nullable()
+        .default(null)
+        .describe("Diff statistics of the candidate's patch; null when there is no patch."),
+})
+    .describe("Per-candidate evidence card for a race run, projected from attempt, review, and decision artifacts.");
+export const ControlRunDetail = z
+    .object({
+    summary: ControlRunSummary,
+    /**
+     * Highest event seq included in this snapshot. Clients subscribe to the
+     * event stream from this cursor; events with seq <= lastSeq are already
+     * reflected in the snapshot (snapshot-then-subscribe, no gaps, no dupes).
+     */
+    lastSeq: z
+        .number()
+        .int()
+        .nonnegative()
+        .default(0)
+        .describe("Highest event seq included in this snapshot; clients subscribe to the event stream from this cursor (snapshot-then-subscribe, no gaps, no dupes)."),
+    artifacts: z.array(ControlArtifactInfo).default([]).describe("Artifacts recorded in the run tree."),
+    primaryOutput: ControlPrimaryOutput.nullable().default(null).describe("The run's primary user-facing output; null while pending."),
+    timeline: z.array(ControlTimelineEvent).default([]).describe("Projected timeline of run events."),
+    budget: ControlBudgetSnapshot.default({}),
+    finalSummary: z.string().nullable().default(null).describe("Final summary text; null when the run has none."),
+    decision: DecisionRecord.nullable().default(null).describe("The arbitration decision; null before arbitration."),
+    /** Persisted operator unblock decision (accept_risk/override), hash-bound; server-owned apply affordance. */
+    operatorDecision: z
+        .object({
+        action: z.string().describe("Operator decision action (e.g. accept_risk, override)."),
+        decidedAt: z.string().nullable().default(null).describe("When the decision was made."),
+    })
+        .nullable()
+        .default(null)
+        .describe("Persisted operator unblock decision (accept_risk/override), hash-bound; null when none was made."),
+    workProduct: WorkProduct.nullable().default(null).describe("The run's work product; null when none was produced."),
+    /** Derived apply-gate verdict (single producer: the delivery gate); null when the run has no patch artifact. */
+    applyEligibility: ApplyEligibility.nullable()
+        .default(null)
+        .describe("Derived apply-gate verdict (single producer: the delivery gate); null when the run has no patch artifact."),
+    reviewFindings: z.array(ReviewFinding).default([]).describe("Review findings recorded for the run."),
+    pendingInteractions: z.array(ControlPendingInteraction).default([]).describe("Interactive questions currently awaiting answers."),
+    /** Typed executor progress for an orchestrate run (auto_safe/auto_full);
+     * null for non-orchestrate runs or suggest autonomy. Projected from
+     * final/orchestration_progress.yaml. */
+    orchestrate: OrchestratePlanProgress.nullable()
+        .default(null)
+        .describe("Typed executor progress for an orchestrate run; null for non-orchestrate runs or suggest autonomy."),
+    /** Per-candidate evidence cards. Present for EVERY envelope-producing
+     * mode (races show N lanes; single-candidate turns and convergence
+     * refinements project their attempts too); empty only when no attempt
+     * artifacts exist. */
+    candidates: z
+        .array(ControlCandidate)
+        .default([])
+        .describe("Per-candidate evidence cards for every envelope-producing mode; empty only when no attempt artifacts exist."),
+    /** Live plan checklist: the LAST plan.progress event's items, or null
+     * when the run never emitted one. */
+    planProgress: z
+        .object({
+        items: z
+            .array(z.object({
+            id: z.string().describe("Plan item id."),
+            title: z.string().describe("Plan item title."),
+            status: z.enum(["pending", "in_progress", "completed"]).describe("Progress state of the item."),
+        }))
+            .default([])
+            .describe("Plan items, last-wins."),
+    })
+        .nullable()
+        .default(null)
+        .describe("Live plan checklist from the last plan.progress event; null when the run never emitted one."),
+    failure: RunFailure.nullable().default(null).describe("Typed failure info; null unless the run failed."),
+})
+    .describe("Full run detail snapshot served by GET /runs/:id: summary, artifacts, timeline, decision, findings, and progress.");
+//# sourceMappingURL=control-run-detail.js.map

package/dist/control-run-detail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-run-detail.js","sourceRoot":"","sources":["../src/control-run-detail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB;;;gCAGgC;AAChC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACtE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAChG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACrF,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IACxH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAC1F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAC7G,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAClH,0DAA0D;IAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC3G,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IACzG,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IACrI,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC3E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC7E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KAChF,CAAC;SACD,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;KACD,QAAQ,CAAC,qGAAqG,CAAC,CAAC;AAGnH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,OAAO,EAAE,iBAAiB;IAC1B;;;;OAIG;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CACP,mJAAmJ,CACpJ;IACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACnG,aAAa,EAAE,oBAAoB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IAClI,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACjG,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC7G,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAChH,6GAA6G;IAC7G,gBAAgB,EAAE,CAAC;SAChB,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QACrF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KACvF,CAAC;SACD,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,kGAAkG,CAAC;IAC/G,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAClH,gHAAgH;IAChH,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;SAC1C,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,2GAA2G,CAAC;IACxH,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACpG,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IACjI;;4CAEwC;IACxC,WAAW,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SAC5C,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,oGAAoG,CAAC;IACjH;;;0BAGsB;IACtB,UAAU,EAAE,CAAC;SACV,KAAK,CAAC,gBAAgB,CAAC;SACvB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,6GAA6G,CAAC;IAC1H;yCACqC;IACrC,YAAY,EAAE,CAAC;SACZ,MAAM,CAAC;QACN,KAAK,EAAE,CAAC;aACL,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;YACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;YACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC9C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;SAChG,CAAC,CACH;aACA,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CAAC,wBAAwB,CAAC;KACtC,CAAC;SACD,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,6FAA6F,CAAC;IAC1G,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CACzG,CAAC;KACD,QAAQ,CAAC,mHAAmH,CAAC,CAAC"}

package/dist/control-trust.d.ts

@@ -0,0 +1,79 @@
+/**
+ * User-level trust control DTOs (INV-122): the NARROW surface over the
+ * per-repo trust files. Split from control.ts (INV-124 ratchet).
+ */
+import { z } from "zod";
+/**
+ * NARROW trust update (the ONLY trust field the control API exposes): grant or
+ * revoke unsandboxed full access for one repo in the USER-LEVEL trust file —
+ * the same file `claudexor trust` writes. Everything else about trust stays
+ * CLI-only; unknown fields are refused (strict).
+ */
+export declare const ControlTrustUpdateRequest: z.ZodObject<{
+    repoRoot: z.ZodString;
+    allowFullAccess: z.ZodBoolean;
+}, "strict", z.ZodTypeAny, {
+    repoRoot: string;
+    allowFullAccess: boolean;
+}, {
+    repoRoot: string;
+    allowFullAccess: boolean;
+}>;
+export type ControlTrustUpdateRequest = z.infer<typeof ControlTrustUpdateRequest>;
+export declare const ControlTrustState: z.ZodObject<{
+    /** Repo root recorded in the trust file; null for legacy files written
+     * before provenance stamping (revocable only via CLI in the repo). */
+    repoRoot: z.ZodNullable<z.ZodString>;
+    /** The user-level trust file backing this state (path disclosure, no content). */
+    path: z.ZodString;
+    allowFullAccess: z.ZodBoolean;
+    accessDefault: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    repoRoot: string | null;
+    allowFullAccess: boolean;
+    accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+}, {
+    path: string;
+    repoRoot: string | null;
+    allowFullAccess: boolean;
+    accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+}>;
+export type ControlTrustState = z.infer<typeof ControlTrustState>;
+export declare const ControlTrustListResponse: z.ZodObject<{
+    entries: z.ZodArray<z.ZodObject<{
+        /** Repo root recorded in the trust file; null for legacy files written
+         * before provenance stamping (revocable only via CLI in the repo). */
+        repoRoot: z.ZodNullable<z.ZodString>;
+        /** The user-level trust file backing this state (path disclosure, no content). */
+        path: z.ZodString;
+        allowFullAccess: z.ZodBoolean;
+        accessDefault: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+    }, "strip", z.ZodTypeAny, {
+        path: string;
+        repoRoot: string | null;
+        allowFullAccess: boolean;
+        accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }, {
+        path: string;
+        repoRoot: string | null;
+        allowFullAccess: boolean;
+        accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    entries: {
+        path: string;
+        repoRoot: string | null;
+        allowFullAccess: boolean;
+        accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }[];
+}, {
+    entries: {
+        path: string;
+        repoRoot: string | null;
+        allowFullAccess: boolean;
+        accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    }[];
+}>;
+export type ControlTrustListResponse = z.infer<typeof ControlTrustListResponse>;
+//# sourceMappingURL=control-trust.d.ts.map

package/dist/control-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-trust.d.ts","sourceRoot":"","sources":["../src/control-trust.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;EAQnC,CAAC;AACJ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,eAAO,MAAM,iBAAiB;IAE1B;0EACsE;;IAKtE,kFAAkF;;;;;;;;;;;;;;EAKhB,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,wBAAwB;;QAdjC;8EACsE;;QAKtE,kFAAkF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY5B,CAAC;AAC3D,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/control-trust.js

@@ -0,0 +1,39 @@
+/**
+ * User-level trust control DTOs (INV-122): the NARROW surface over the
+ * per-repo trust files. Split from control.ts (INV-124 ratchet).
+ */
+import { z } from "zod";
+import { AccessProfile } from "./primitives.js";
+/**
+ * NARROW trust update (the ONLY trust field the control API exposes): grant or
+ * revoke unsandboxed full access for one repo in the USER-LEVEL trust file —
+ * the same file `claudexor trust` writes. Everything else about trust stays
+ * CLI-only; unknown fields are refused (strict).
+ */
+export const ControlTrustUpdateRequest = z
+    .object({
+    repoRoot: z.string().min(1).describe("Absolute repo root the trust change applies to."),
+    allowFullAccess: z.boolean().describe("Grant (true) or revoke (false) unsandboxed full access for the repo."),
+})
+    .strict()
+    .describe("Narrow trust update — the only trust field the control API exposes: grant or revoke unsandboxed full access for one repo in the user-level trust file.");
+export const ControlTrustState = z
+    .object({
+    /** Repo root recorded in the trust file; null for legacy files written
+     * before provenance stamping (revocable only via CLI in the repo). */
+    repoRoot: z
+        .string()
+        .nullable()
+        .describe("Repo root recorded in the trust file; null for legacy files written before provenance stamping."),
+    /** The user-level trust file backing this state (path disclosure, no content). */
+    path: z.string().describe("The user-level trust file backing this state (path disclosure, no content)."),
+    allowFullAccess: z.boolean().describe("Whether unsandboxed full access is allowed for the repo."),
+    accessDefault: AccessProfile.describe("Default access profile for runs in the repo."),
+})
+    .describe("Trust state of one repo from its user-level trust file.");
+export const ControlTrustListResponse = z
+    .object({
+    entries: z.array(ControlTrustState).describe("Trust states for all known repos."),
+})
+    .describe("Response for listing per-repo trust states.");
+//# sourceMappingURL=control-trust.js.map

package/dist/control-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-trust.js","sourceRoot":"","sources":["../src/control-trust.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACvF,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sEAAsE,CAAC;CAC9G,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,wJAAwJ,CACzJ,CAAC;AAGJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN;0EACsE;IACtE,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iGAAiG,CAAC;IAC9G,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IACxG,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACjG,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC,8CAA8C,CAAC;CACtF,CAAC;KACD,QAAQ,CAAC,yDAAyD,CAAC,CAAC;AAGvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CAClF,CAAC;KACD,QAAQ,CAAC,6CAA6C,CAAC,CAAC"}