@claudexor/schema 1.0.1 → 2.0.0

package/generated/TaskContract.schema.json

@@ -280,27 +280,135 @@
               "items": {
                 "type": "object",
                 "properties": {
-                  "id": {
+                  "program": {
                     "type": "string",
                     "minLength": 1,
-                    "description": "Test command id."
+                    "pattern": "\\S",
+                    "description": "Executable invoked directly without an implicit shell."
+                  },
+                  "args": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "default": [],
+                    "description": "Exact argv passed to the executable."
+                  },
+                  "cwd": {
+                    "type": "string",
+                    "description": "Optional project-relative working directory for the command."
                   },
-                  "command": {
+                  "envAllowlist": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/definitions/TaskContract/properties/constraints/properties/protected_path_approvals/items/properties/reason"
+                    },
+                    "default": [],
+                    "description": "Non-secret parent environment names explicitly forwarded to the command."
+                  },
+                  "id": {
                     "type": "string",
-                    "description": "Shell command executed as a deterministic gate."
+                    "minLength": 1,
+                    "description": "Test command id."
                   },
                   "required": {
                     "type": "boolean",
                     "default": true,
                     "description": "Whether this test must pass (vs advisory)."
+                  },
+                  "trust_required": {
+                    "type": "boolean",
+                    "default": false,
+                    "description": "Whether this command originated in versioned project config."
+                  },
+                  "trust_grant": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "projectDigest": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Digest of the canonical project identity."
+                          },
+                          "configDigest": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Digest of the parsed versioned project config blob."
+                          },
+                          "commandDigest": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Digest of the canonical command invocation."
+                          },
+                          "executablePath": {
+                            "type": "string",
+                            "description": "Resolved executable path approved by the operator."
+                          },
+                          "executableDigest": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Digest of the resolved executable bytes."
+                          },
+                          "scriptPath": {
+                            "type": [
+                              "string",
+                              "null"
+                            ],
+                            "default": null,
+                            "description": "Resolved script path, when any."
+                          },
+                          "scriptDigest": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "minLength": 1,
+                                "description": "Content hash in algo:hex form, e.g. \"sha256:abcd...\"."
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ],
+                            "description": "Digest of the script bytes.",
+                            "default": null
+                          },
+                          "accessProfile": {
+                            "type": "string",
+                            "enum": [
+                              "readonly",
+                              "workspace_write",
+                              "full",
+                              "external_sandbox_full",
+                              "inherit_native"
+                            ],
+                            "description": "Effective access profile covered by this grant."
+                          }
+                        },
+                        "required": [
+                          "projectDigest",
+                          "configDigest",
+                          "commandDigest",
+                          "executablePath",
+                          "executableDigest",
+                          "accessProfile"
+                        ],
+                        "additionalProperties": false,
+                        "description": "External exact grant for one versioned project test command."
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "description": "Matching external grant; null when none was found.",
+                    "default": null
                   }
                 },
                 "required": [
-                  "id",
-                  "command"
+                  "program",
+                  "id"
                 ],
                 "additionalProperties": false,
-                "description": "A deterministic test command used as a verification gate."
+                "description": "A deterministic typed-argv test command used as a verification gate."
               },
               "default": [],
               "description": "Deterministic test commands configured as gates."
@@ -409,34 +517,59 @@
         "budget": {
           "type": "object",
           "properties": {
-            "portfolio": {
+            "routing_goal": {
               "type": "string",
               "enum": [
-                "daily-rich",
-                "balanced",
-                "cheapest",
-                "strongest",
-                "burn",
-                "subscription-first",
-                "api-overflow",
-                "conserve-claude",
-                "conserve-codex"
+                "auto",
+                "quality",
+                "economy"
               ],
-              "description": "Budget portfolio weighting the harness router's quality/cost/latency and subscription-vs-API preferences (e.g. cheapest minimizes spend, burn maximizes quality, conserve-* deprioritizes one vendor).",
-              "default": "subscription-first"
+              "description": "Routing objective: pace expiring quota, choose the highest declared quality tier, or minimize incremental paid spend.",
+              "default": "auto"
             },
-            "max_usd": {
-              "type": [
-                "number",
-                "null"
+            "paid_budget": {
+              "anyOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "unlimited"
+                    }
+                  },
+                  "required": [
+                    "kind"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "finite"
+                    },
+                    "maxUsd": {
+                      "type": "number",
+                      "minimum": 0
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "maxUsd"
+                  ],
+                  "additionalProperties": false
+                }
               ],
-              "default": null,
-              "description": "Hard USD cap for the run; null = no cap."
+              "description": "Incremental-cash budget: explicitly unlimited or a finite non-negative USD cap.",
+              "default": {
+                "kind": "unlimited"
+              }
             }
           },
           "additionalProperties": false,
           "default": {},
-          "description": "Budget portfolio and spend cap for the run."
+          "description": "Routing goal and explicit incremental-cash budget for the run."
         },
         "routing_models": {
           "type": "object",

package/generated/TestCommandInvocation.schema.json

@@ -0,0 +1,45 @@
+{
+  "$ref": "#/definitions/TestCommandInvocation",
+  "definitions": {
+    "TestCommandInvocation": {
+      "type": "object",
+      "properties": {
+        "program": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S",
+          "description": "Executable invoked directly without an implicit shell."
+        },
+        "args": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "default": [],
+          "description": "Exact argv passed to the executable."
+        },
+        "cwd": {
+          "type": "string",
+          "description": "Optional project-relative working directory for the command."
+        },
+        "envAllowlist": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S",
+            "description": "User-supplied string that must contain visible content, not just whitespace."
+          },
+          "default": [],
+          "description": "Non-secret parent environment names explicitly forwarded to the command."
+        }
+      },
+      "required": [
+        "program"
+      ],
+      "additionalProperties": false,
+      "description": "Canonical deterministic command invocation; no implicit shell parsing."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/Thread.schema.json

@@ -124,6 +124,20 @@
               ],
               "default": null,
               "description": "Snapshot SHA the isolated worktree (or last apply) is based on."
+            },
+            "delivered_through_run_id": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Non-empty identifier string."
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Last run in the lineage prefix already delivered from this isolated thread.",
+              "default": null
             }
           },
           "additionalProperties": false,
@@ -133,9 +147,7 @@
         "run_ids": {
           "type": "array",
           "items": {
-            "type": "string",
-            "minLength": 1,
-            "description": "Non-empty identifier string."
+            "$ref": "#/definitions/Thread/properties/workspace/properties/delivered_through_run_id/anyOf/0"
           },
           "default": [],
           "description": "Ordered run lineage (each run is a turn move)."
@@ -143,7 +155,7 @@
         "head_run_id": {
           "anyOf": [
             {
-              "$ref": "#/definitions/Thread/properties/run_ids/items"
+              "$ref": "#/definitions/Thread/properties/workspace/properties/delivered_through_run_id/anyOf/0"
             },
             {
               "type": "null"
@@ -156,10 +168,54 @@
           "type": "string",
           "enum": [
             "active",
-            "closed"
+            "closed",
+            "trashed",
+            "purged"
           ],
-          "description": "Thread lifecycle state: active or explicitly closed (archived). Blocked is a live projection, not a thread state.",
+          "description": "Thread lifecycle state: active, closed, trashed for recovery, or terminally purged.",
           "default": "active"
+        },
+        "trashed_at": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "ISO-8601 timestamp string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "When the thread entered recoverable trash.",
+          "default": null
+        },
+        "purge_after": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/Thread/properties/trashed_at/anyOf/0"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Earliest automatic purge time; 30 days after trash.",
+          "default": null
+        },
+        "pre_trash_state": {
+          "anyOf": [
+            {
+              "type": "string",
+              "enum": [
+                "active",
+                "closed"
+              ]
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Lifecycle state restored while the trash retention window remains open."
         }
       },
       "required": [

package/generated/ThreadTurn.schema.json

@@ -72,10 +72,10 @@
           "items": {
             "type": "object",
             "properties": {
-              "id": {
+              "resource_id": {
                 "type": "string",
                 "minLength": 1,
-                "description": "Attachment id."
+                "description": "Immutable daemon resource id."
               },
               "kind": {
                 "type": "string",
@@ -83,30 +83,43 @@
                   "image",
                   "file"
                 ],
-                "description": "Kind of attachment: image (vision input) or file (generic bytes).",
-                "default": "file"
+                "description": "Kind of attached resource: image input or generic file bytes."
               },
               "mime": {
                 "type": "string",
-                "default": "application/octet-stream",
-                "description": "MIME type of the attachment content."
+                "minLength": 1,
+                "description": "Declared MIME type validated against adapter limits."
               },
               "name": {
                 "type": "string",
-                "default": "",
-                "description": "Original file name as provided by the user or agent."
+                "description": "Original display name."
+              },
+              "sha256": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Exact sha256 digest of the immutable bytes."
+              },
+              "size_bytes": {
+                "type": "integer",
+                "minimum": 0,
+                "description": "Exact byte length."
               },
               "path": {
                 "type": "string",
-                "description": "Resolved local path in the scoped attachment store (kept outside any worktree)."
+                "description": "Daemon-owned immutable blob path; internal adapter input only."
               }
             },
             "required": [
-              "id",
+              "resource_id",
+              "kind",
+              "mime",
+              "name",
+              "sha256",
+              "size_bytes",
               "path"
             ],
             "additionalProperties": false,
-            "description": "A user- or agent-provided file/image attached to a turn, stored in the scoped attachment store and forwarded to harnesses in their native shape."
+            "description": "Daemon-resolved immutable resource supplied to a harness adapter."
           },
           "default": [],
           "description": "Files/images the user attached to this turn (resolved scoped paths)."

package/generated/TrustConfig.schema.json

@@ -34,6 +34,83 @@
           ],
           "default": null,
           "description": "Provenance only: repo root this trust file was written for; never gates anything. Null on legacy files written before this field."
+        },
+        "test_command_grants": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "projectDigest": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Digest of the canonical project identity."
+              },
+              "configDigest": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Digest of the parsed versioned project config blob."
+              },
+              "commandDigest": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Digest of the canonical command invocation."
+              },
+              "executablePath": {
+                "type": "string",
+                "description": "Resolved executable path approved by the operator."
+              },
+              "executableDigest": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Digest of the resolved executable bytes."
+              },
+              "scriptPath": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "default": null,
+                "description": "Resolved script path, when any."
+              },
+              "scriptDigest": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Content hash in algo:hex form, e.g. \"sha256:abcd...\"."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Digest of the script bytes.",
+                "default": null
+              },
+              "accessProfile": {
+                "type": "string",
+                "enum": [
+                  "readonly",
+                  "workspace_write",
+                  "full",
+                  "external_sandbox_full",
+                  "inherit_native"
+                ],
+                "description": "Effective access profile covered by this grant."
+              }
+            },
+            "required": [
+              "projectDigest",
+              "configDigest",
+              "commandDigest",
+              "executablePath",
+              "executableDigest",
+              "accessProfile"
+            ],
+            "additionalProperties": false,
+            "description": "External exact grant for one versioned project test command."
+          },
+          "default": [],
+          "description": "External exact grants for versioned project test commands."
         }
       },
       "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/schema",
-  "version": "1.0.1",
+  "version": "2.0.0",
   "license": "MIT",
   "description": "Single source of truth for all Claudexor data shapes (Zod + generated JSON Schema).",
   "type": "module",

package/generated/ControlSetupJobConfirmRequest.schema.json

@@ -1,18 +0,0 @@
-{
-  "$ref": "#/definitions/ControlSetupJobConfirmRequest",
-  "definitions": {
-    "ControlSetupJobConfirmRequest": {
-      "type": "object",
-      "properties": {
-        "confirmed": {
-          "type": "boolean",
-          "default": true,
-          "description": "Whether the user confirmed the pending action."
-        }
-      },
-      "additionalProperties": false,
-      "description": "Request body confirming a setup job that waits for user confirmation."
-    }
-  },
-  "$schema": "http://json-schema.org/draft-07/schema#"
-}

package/generated/ControlSpecFreezeRequest.schema.json

@@ -1,83 +0,0 @@
-{
-  "$ref": "#/definitions/ControlSpecFreezeRequest",
-  "definitions": {
-    "ControlSpecFreezeRequest": {
-      "type": "object",
-      "properties": {
-        "prompt": {
-          "type": "string",
-          "description": "The user's request the spec captures."
-        },
-        "scope": {
-          "type": "object",
-          "properties": {
-            "kind": {
-              "type": "string",
-              "const": "project"
-            },
-            "root": {
-              "type": "string",
-              "description": "Absolute path of the project root."
-            },
-            "context": {
-              "type": "string",
-              "enum": [
-                "auto"
-              ],
-              "description": "Project context depth; auto is the only mode.",
-              "default": "auto"
-            }
-          },
-          "required": [
-            "kind",
-            "root"
-          ],
-          "additionalProperties": false,
-          "description": "Project the spec is about."
-        },
-        "planDir": {
-          "type": "string",
-          "description": "Directory to write the frozen spec artifacts into."
-        },
-        "plan": {
-          "type": "string",
-          "description": "Plan text to fold into the spec."
-        },
-        "answers": {
-          "type": "array",
-          "items": {},
-          "description": "Interview answers for the current tier."
-        },
-        "priorDecisions": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "question": {
-                "type": "string",
-                "description": "Question asked in a prior tier."
-              },
-              "answer": {
-                "type": "string",
-                "description": "The user's answer."
-              }
-            },
-            "required": [
-              "question",
-              "answer"
-            ],
-            "additionalProperties": false
-          },
-          "description": "Accumulated prior-tier interview decisions, folded into the frozen SpecPack's decided tradeoffs."
-        }
-      },
-      "required": [
-        "prompt",
-        "scope"
-      ],
-      "additionalProperties": false,
-      "description": "Request body to freeze a SpecPack from the interview."
-    }
-  },
-  "$schema": "http://json-schema.org/draft-07/schema#"
-}