@claudexor/schema 1.0.1 → 2.0.0

package/dist/control-thread-apply.d.ts

@@ -0,0 +1,175 @@
+import { z } from "zod";
+/** Apply an isolated thread's accumulated worktree diff to the project. */
+export declare const ControlThreadApplyRequest: z.ZodObject<{
+    mode: z.ZodDefault<z.ZodEnum<["apply", "branch", "commit", "pr"]>>;
+    branch: z.ZodOptional<z.ZodString>;
+    message: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    mode: "apply" | "commit" | "branch" | "pr";
+    message?: string | undefined;
+    branch?: string | undefined;
+}, {
+    message?: string | undefined;
+    mode?: "apply" | "commit" | "branch" | "pr" | undefined;
+    branch?: string | undefined;
+}>;
+export type ControlThreadApplyRequest = z.infer<typeof ControlThreadApplyRequest>;
+export declare const ControlThreadApplyResponse: z.ZodObject<{
+    applied: z.ZodBoolean;
+    status: z.ZodEnum<["applied", "branched", "committed", "pr_opened", "empty", "conflict", "rejected"]>;
+    headMoved: z.ZodDefault<z.ZodBoolean>;
+    detail: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    delivery: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        mode: z.ZodEnum<["artifact_only", "apply", "branch", "commit", "pr"]>;
+        applied: z.ZodBoolean;
+        branch: z.ZodOptional<z.ZodString>;
+        commit: z.ZodOptional<z.ZodString>;
+        prUrl: z.ZodOptional<z.ZodString>;
+        detail: z.ZodOptional<z.ZodString>;
+        treeMutated: z.ZodOptional<z.ZodBoolean>;
+        refused: z.ZodOptional<z.ZodBoolean>;
+        finalVerify: z.ZodObject<{
+            attempted: z.ZodBoolean;
+            base_sha: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            applied_cleanly: z.ZodDefault<z.ZodNullable<z.ZodBoolean>>;
+            gates_passed: z.ZodDefault<z.ZodNullable<z.ZodBoolean>>;
+            gates: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                status: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                status: string;
+                id: string;
+            }, {
+                status: string;
+                id: string;
+            }>, "many">>;
+            duration_ms: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+            reason: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            reason: string | null;
+            duration_ms: number | null;
+            base_sha: string | null;
+            attempted: boolean;
+            applied_cleanly: boolean | null;
+            gates_passed: boolean | null;
+            gates: {
+                status: string;
+                id: string;
+            }[];
+        }, {
+            attempted: boolean;
+            reason?: string | null | undefined;
+            duration_ms?: number | null | undefined;
+            base_sha?: string | null | undefined;
+            applied_cleanly?: boolean | null | undefined;
+            gates_passed?: boolean | null | undefined;
+            gates?: {
+                status: string;
+                id: string;
+            }[] | undefined;
+        }>;
+        targetPreimageSha: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        mode: "apply" | "commit" | "branch" | "pr" | "artifact_only";
+        applied: boolean;
+        finalVerify: {
+            reason: string | null;
+            duration_ms: number | null;
+            base_sha: string | null;
+            attempted: boolean;
+            applied_cleanly: boolean | null;
+            gates_passed: boolean | null;
+            gates: {
+                status: string;
+                id: string;
+            }[];
+        };
+        targetPreimageSha: string;
+        detail?: string | undefined;
+        commit?: string | undefined;
+        branch?: string | undefined;
+        prUrl?: string | undefined;
+        treeMutated?: boolean | undefined;
+        refused?: boolean | undefined;
+    }, {
+        mode: "apply" | "commit" | "branch" | "pr" | "artifact_only";
+        applied: boolean;
+        finalVerify: {
+            attempted: boolean;
+            reason?: string | null | undefined;
+            duration_ms?: number | null | undefined;
+            base_sha?: string | null | undefined;
+            applied_cleanly?: boolean | null | undefined;
+            gates_passed?: boolean | null | undefined;
+            gates?: {
+                status: string;
+                id: string;
+            }[] | undefined;
+        };
+        targetPreimageSha: string;
+        detail?: string | undefined;
+        commit?: string | undefined;
+        branch?: string | undefined;
+        prUrl?: string | undefined;
+        treeMutated?: boolean | undefined;
+        refused?: boolean | undefined;
+    }>>>;
+}, "strip", z.ZodTypeAny, {
+    status: "applied" | "rejected" | "branched" | "committed" | "pr_opened" | "empty" | "conflict";
+    detail: string | null;
+    delivery: {
+        mode: "apply" | "commit" | "branch" | "pr" | "artifact_only";
+        applied: boolean;
+        finalVerify: {
+            reason: string | null;
+            duration_ms: number | null;
+            base_sha: string | null;
+            attempted: boolean;
+            applied_cleanly: boolean | null;
+            gates_passed: boolean | null;
+            gates: {
+                status: string;
+                id: string;
+            }[];
+        };
+        targetPreimageSha: string;
+        detail?: string | undefined;
+        commit?: string | undefined;
+        branch?: string | undefined;
+        prUrl?: string | undefined;
+        treeMutated?: boolean | undefined;
+        refused?: boolean | undefined;
+    } | null;
+    applied: boolean;
+    headMoved: boolean;
+}, {
+    status: "applied" | "rejected" | "branched" | "committed" | "pr_opened" | "empty" | "conflict";
+    applied: boolean;
+    detail?: string | null | undefined;
+    delivery?: {
+        mode: "apply" | "commit" | "branch" | "pr" | "artifact_only";
+        applied: boolean;
+        finalVerify: {
+            attempted: boolean;
+            reason?: string | null | undefined;
+            duration_ms?: number | null | undefined;
+            base_sha?: string | null | undefined;
+            applied_cleanly?: boolean | null | undefined;
+            gates_passed?: boolean | null | undefined;
+            gates?: {
+                status: string;
+                id: string;
+            }[] | undefined;
+        };
+        targetPreimageSha: string;
+        detail?: string | undefined;
+        commit?: string | undefined;
+        branch?: string | undefined;
+        prUrl?: string | undefined;
+        treeMutated?: boolean | undefined;
+        refused?: boolean | undefined;
+    } | null | undefined;
+    headMoved?: boolean | undefined;
+}>;
+export type ControlThreadApplyResponse = z.infer<typeof ControlThreadApplyResponse>;
+//# sourceMappingURL=control-thread-apply.d.ts.map

package/dist/control-thread-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-thread-apply.d.ts","sourceRoot":"","sources":["../src/control-thread-apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB;;;;;;;;;;;;EAU6D,CAAC;AACpG,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBG,CAAC;AAC3C,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/control-thread-apply.js

@@ -0,0 +1,31 @@
+import { z } from "zod";
+import { DeliveryReceipt } from "./delivery.js";
+/** Apply an isolated thread's accumulated worktree diff to the project. */
+export const ControlThreadApplyRequest = z
+    .object({
+    mode: z
+        .enum(["apply", "branch", "commit", "pr"])
+        .default("apply")
+        .describe("Delivery mode: apply to the tree, or as a branch, commit, or PR."),
+    branch: z.string().optional().describe("Branch name for branch/pr modes."),
+    message: z.string().optional().describe("Commit message for commit/pr modes."),
+})
+    .strict()
+    .describe("Request body applying an isolated thread's accumulated worktree diff to the project.");
+export const ControlThreadApplyResponse = z
+    .object({
+    applied: z.boolean().describe("Whether anything was delivered."),
+    status: z
+        .enum(["applied", "branched", "committed", "pr_opened", "empty", "conflict", "rejected"])
+        .describe("Delivery outcome: applied, branched, committed, pr_opened, empty (no diff), conflict, or rejected."),
+    headMoved: z
+        .boolean()
+        .default(false)
+        .describe("True when the project HEAD moved past the thread base since the thread started."),
+    detail: z.string().nullable().default(null).describe("Human-readable detail."),
+    delivery: DeliveryReceipt.nullable()
+        .default(null)
+        .describe("Fresh verifier, target preimage, and mutation receipt; null when no delivery ran."),
+})
+    .describe("Response to a thread apply.");
+//# sourceMappingURL=control-thread-apply.js.map

package/dist/control-thread-apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-thread-apply.js","sourceRoot":"","sources":["../src/control-thread-apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;SACzC,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CAAC,kEAAkE,CAAC;IAC/E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC1E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CAC/E,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,sFAAsF,CAAC,CAAC;AAGpG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAChE,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;SACxF,QAAQ,CACP,oGAAoG,CACrG;IACH,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC9E,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;SACjC,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,mFAAmF,CACpF;CACJ,CAAC;KACD,QAAQ,CAAC,6BAA6B,CAAC,CAAC"}

package/dist/control-trust.d.ts

@@ -3,21 +3,77 @@
  * per-repo trust files. Split from control.ts (INV-124 ratchet).
  */
 import { z } from "zod";
-/**
- * NARROW trust update (the ONLY trust field the control API exposes): grant or
- * revoke unsandboxed full access for one repo in the USER-LEVEL trust file —
- * the same file `claudexor trust` writes. Everything else about trust stays
- * CLI-only; unknown fields are refused (strict).
- */
-export declare const ControlTrustUpdateRequest: z.ZodObject<{
+/** User-level trust update; versioned repo config cannot grant either field. */
+export declare const ControlTrustUpdateRequest: z.ZodEffects<z.ZodObject<{
     repoRoot: z.ZodString;
-    allowFullAccess: z.ZodBoolean;
+    allowFullAccess: z.ZodOptional<z.ZodBoolean>;
+    accessDefault: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write"]>>;
+    grantTestCommand: z.ZodOptional<z.ZodObject<{
+        program: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        cwd: z.ZodOptional<z.ZodString>;
+        envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        program: string;
+        args: string[];
+        envAllowlist: string[];
+        cwd?: string | undefined;
+    }, {
+        program: string;
+        cwd?: string | undefined;
+        args?: string[] | undefined;
+        envAllowlist?: string[] | undefined;
+    }>>;
+    grantAccessProfile: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+    revokeTestCommandDigest: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     repoRoot: string;
-    allowFullAccess: boolean;
+    allowFullAccess?: boolean | undefined;
+    accessDefault?: "readonly" | "workspace_write" | undefined;
+    grantTestCommand?: {
+        program: string;
+        args: string[];
+        envAllowlist: string[];
+        cwd?: string | undefined;
+    } | undefined;
+    grantAccessProfile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+    revokeTestCommandDigest?: string | undefined;
 }, {
     repoRoot: string;
-    allowFullAccess: boolean;
+    allowFullAccess?: boolean | undefined;
+    accessDefault?: "readonly" | "workspace_write" | undefined;
+    grantTestCommand?: {
+        program: string;
+        cwd?: string | undefined;
+        args?: string[] | undefined;
+        envAllowlist?: string[] | undefined;
+    } | undefined;
+    grantAccessProfile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+    revokeTestCommandDigest?: string | undefined;
+}>, {
+    repoRoot: string;
+    allowFullAccess?: boolean | undefined;
+    accessDefault?: "readonly" | "workspace_write" | undefined;
+    grantTestCommand?: {
+        program: string;
+        args: string[];
+        envAllowlist: string[];
+        cwd?: string | undefined;
+    } | undefined;
+    grantAccessProfile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+    revokeTestCommandDigest?: string | undefined;
+}, {
+    repoRoot: string;
+    allowFullAccess?: boolean | undefined;
+    accessDefault?: "readonly" | "workspace_write" | undefined;
+    grantTestCommand?: {
+        program: string;
+        cwd?: string | undefined;
+        args?: string[] | undefined;
+        envAllowlist?: string[] | undefined;
+    } | undefined;
+    grantAccessProfile?: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native" | undefined;
+    revokeTestCommandDigest?: string | undefined;
 }>;
 export type ControlTrustUpdateRequest = z.infer<typeof ControlTrustUpdateRequest>;
 export declare const ControlTrustState: z.ZodObject<{
@@ -28,16 +84,19 @@ export declare const ControlTrustState: z.ZodObject<{
     path: z.ZodString;
     allowFullAccess: z.ZodBoolean;
     accessDefault: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+    testCommandGrantCount: z.ZodDefault<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     path: string;
     repoRoot: string | null;
     allowFullAccess: boolean;
     accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    testCommandGrantCount: number;
 }, {
     path: string;
     repoRoot: string | null;
     allowFullAccess: boolean;
     accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+    testCommandGrantCount?: number | undefined;
 }>;
 export type ControlTrustState = z.infer<typeof ControlTrustState>;
 export declare const ControlTrustListResponse: z.ZodObject<{
@@ -49,16 +108,19 @@ export declare const ControlTrustListResponse: z.ZodObject<{
         path: z.ZodString;
         allowFullAccess: z.ZodBoolean;
         accessDefault: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+        testCommandGrantCount: z.ZodDefault<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
         path: string;
         repoRoot: string | null;
         allowFullAccess: boolean;
         accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        testCommandGrantCount: number;
     }, {
         path: string;
         repoRoot: string | null;
         allowFullAccess: boolean;
         accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        testCommandGrantCount?: number | undefined;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     entries: {
@@ -66,6 +128,7 @@ export declare const ControlTrustListResponse: z.ZodObject<{
         repoRoot: string | null;
         allowFullAccess: boolean;
         accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        testCommandGrantCount: number;
     }[];
 }, {
     entries: {
@@ -73,6 +136,7 @@ export declare const ControlTrustListResponse: z.ZodObject<{
         repoRoot: string | null;
         allowFullAccess: boolean;
         accessDefault: "readonly" | "workspace_write" | "full" | "external_sandbox_full" | "inherit_native";
+        testCommandGrantCount?: number | undefined;
     }[];
 }>;
 export type ControlTrustListResponse = z.infer<typeof ControlTrustListResponse>;

package/dist/control-trust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-trust.d.ts","sourceRoot":"","sources":["../src/control-trust.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;EAQnC,CAAC;AACJ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,eAAO,MAAM,iBAAiB;IAE1B;0EACsE;;IAKtE,kFAAkF;;;;;;;;;;;;;;EAKhB,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,wBAAwB;;QAdjC;8EACsE;;QAKtE,kFAAkF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY5B,CAAC;AAC3D,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"control-trust.d.ts","sourceRoot":"","sources":["../src/control-trust.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,gFAAgF;AAChF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCnC,CAAC;AACJ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,eAAO,MAAM,iBAAiB;IAE1B;0EACsE;;IAOtE,kFAAkF;;;;;;;;;;;;;;;;;EAehB,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,wBAAwB;;QA1BjC;8EACsE;;QAOtE,kFAAkF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsB5B,CAAC;AAC3D,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/control-trust.js

@@ -3,20 +3,30 @@
  * per-repo trust files. Split from control.ts (INV-124 ratchet).
  */
 import { z } from "zod";
-import { AccessProfile } from "./primitives.js";
-/**
- * NARROW trust update (the ONLY trust field the control API exposes): grant or
- * revoke unsandboxed full access for one repo in the USER-LEVEL trust file —
- * the same file `claudexor trust` writes. Everything else about trust stays
- * CLI-only; unknown fields are refused (strict).
- */
+import { AccessProfile, ContentHash } from "./primitives.js";
+import { TestCommandInvocation } from "./task.js";
+/** User-level trust update; versioned repo config cannot grant either field. */
 export const ControlTrustUpdateRequest = z
     .object({
     repoRoot: z.string().min(1).describe("Absolute repo root the trust change applies to."),
-    allowFullAccess: z.boolean().describe("Grant (true) or revoke (false) unsandboxed full access for the repo."),
+    allowFullAccess: z
+        .boolean()
+        .optional()
+        .describe("Grant (true) or revoke (false) unsandboxed full access for the repo."),
+    accessDefault: z
+        .enum(["readonly", "workspace_write"])
+        .optional()
+        .describe("Default access profile for runs in the repo."),
+    grantTestCommand: TestCommandInvocation.optional().describe("Typed command to grant against the current project config and executable/script bytes."),
+    grantAccessProfile: AccessProfile.optional().describe("Effective access profile covered by grantTestCommand; defaults to the trust default."),
+    revokeTestCommandDigest: ContentHash.optional().describe("Revoke grants for this canonical command digest."),
 })
     .strict()
-    .describe("Narrow trust update — the only trust field the control API exposes: grant or revoke unsandboxed full access for one repo in the user-level trust file.");
+    .refine((value) => value.allowFullAccess !== undefined ||
+    value.accessDefault !== undefined ||
+    value.grantTestCommand !== undefined ||
+    value.revokeTestCommandDigest !== undefined, { message: "a trust mutation is required" })
+    .describe("User-level trust update: grant/revoke full access and/or set the readonly/workspace-write default.");
 export const ControlTrustState = z
     .object({
     /** Repo root recorded in the trust file; null for legacy files written
@@ -26,9 +36,19 @@ export const ControlTrustState = z
         .nullable()
         .describe("Repo root recorded in the trust file; null for legacy files written before provenance stamping."),
     /** The user-level trust file backing this state (path disclosure, no content). */
-    path: z.string().describe("The user-level trust file backing this state (path disclosure, no content)."),
-    allowFullAccess: z.boolean().describe("Whether unsandboxed full access is allowed for the repo."),
+    path: z
+        .string()
+        .describe("The user-level trust file backing this state (path disclosure, no content)."),
+    allowFullAccess: z
+        .boolean()
+        .describe("Whether unsandboxed full access is allowed for the repo."),
     accessDefault: AccessProfile.describe("Default access profile for runs in the repo."),
+    testCommandGrantCount: z
+        .number()
+        .int()
+        .nonnegative()
+        .default(0)
+        .describe("Number of exact external test-command grants for this repo."),
 })
     .describe("Trust state of one repo from its user-level trust file.");
 export const ControlTrustListResponse = z

package/dist/control-trust.js.map

@@ -1 +1 @@
-{"version":3,"file":"control-trust.js","sourceRoot":"","sources":["../src/control-trust.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACvF,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sEAAsE,CAAC;CAC9G,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,wJAAwJ,CACzJ,CAAC;AAGJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN;0EACsE;IACtE,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iGAAiG,CAAC;IAC9G,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;IACxG,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACjG,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC,8CAA8C,CAAC;CACtF,CAAC;KACD,QAAQ,CAAC,yDAAyD,CAAC,CAAC;AAGvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CAClF,CAAC;KACD,QAAQ,CAAC,6CAA6C,CAAC,CAAC"}
+{"version":3,"file":"control-trust.js","sourceRoot":"","sources":["../src/control-trust.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElD,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACvF,eAAe,EAAE,CAAC;SACf,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,sEAAsE,CAAC;IACnF,aAAa,EAAE,CAAC;SACb,IAAI,CAAC,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;SACrC,QAAQ,EAAE;SACV,QAAQ,CAAC,8CAA8C,CAAC;IAC3D,gBAAgB,EAAE,qBAAqB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACzD,wFAAwF,CACzF;IACD,kBAAkB,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACnD,sFAAsF,CACvF;IACD,uBAAuB,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACtD,kDAAkD,CACnD;CACF,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,eAAe,KAAK,SAAS;IACnC,KAAK,CAAC,aAAa,KAAK,SAAS;IACjC,KAAK,CAAC,gBAAgB,KAAK,SAAS;IACpC,KAAK,CAAC,uBAAuB,KAAK,SAAS,EAC7C,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAC5C;KACA,QAAQ,CACP,oGAAoG,CACrG,CAAC;AAGJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN;0EACsE;IACtE,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,iGAAiG,CAClG;IACH,kFAAkF;IAClF,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,CAAC,6EAA6E,CAAC;IAC1F,eAAe,EAAE,CAAC;SACf,OAAO,EAAE;SACT,QAAQ,CAAC,0DAA0D,CAAC;IACvE,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACrF,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,6DAA6D,CAAC;CAC3E,CAAC;KACD,QAAQ,CAAC,yDAAyD,CAAC,CAAC;AAGvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CAClF,CAAC;KACD,QAAQ,CAAC,6CAA6C,CAAC,CAAC"}