@claudexor/schema 1.0.1 → 2.1.1

package/generated/ConformanceReport.schema.json

@@ -93,6 +93,55 @@
           },
           "default": [],
           "description": "Human-readable reasons for degraded/unavailable status or disabled intents."
+        },
+        "auth_sources": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "source": {
+                "type": "string",
+                "enum": [
+                  "native_session",
+                  "oauth_token_env",
+                  "api_key_env",
+                  "api_key_flag",
+                  "provider_auth_file",
+                  "none"
+                ],
+                "description": "Concrete credential source used or probed by a harness."
+              },
+              "availability": {
+                "type": "string",
+                "enum": [
+                  "available",
+                  "unavailable",
+                  "unknown"
+                ]
+              },
+              "verification": {
+                "type": "string",
+                "enum": [
+                  "passed",
+                  "failed",
+                  "not_run"
+                ]
+              },
+              "detail": {
+                "type": "string",
+                "description": "Redacted human-readable source evidence."
+              }
+            },
+            "required": [
+              "source",
+              "availability",
+              "verification"
+            ],
+            "additionalProperties": false,
+            "description": "Doctor-backed readiness for one exact credential source."
+          },
+          "default": [],
+          "description": "Doctor-backed readiness by authentication source; an empty array means the adapter did not report source readiness."
         }
       },
       "required": [

package/generated/ControlApplyCheckResponse.schema.json

@@ -0,0 +1,34 @@
+{
+  "$ref": "#/definitions/ControlApplyCheckResponse",
+  "definitions": {
+    "ControlApplyCheckResponse": {
+      "type": "object",
+      "properties": {
+        "ok": {
+          "type": "boolean"
+        },
+        "code": {
+          "anyOf": [
+            {
+              "type": "integer"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "stderr": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "ok",
+        "code",
+        "stderr"
+      ],
+      "additionalProperties": false,
+      "description": "Mechanical git apply --check result."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlArtifactListResponse.schema.json

@@ -0,0 +1,57 @@
+{
+  "$ref": "#/definitions/ControlArtifactListResponse",
+  "definitions": {
+    "ControlArtifactListResponse": {
+      "type": "object",
+      "properties": {
+        "runId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Non-empty identifier string."
+        },
+        "artifacts": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "description": "Artifact path relative to the run directory."
+              },
+              "kind": {
+                "type": "string",
+                "enum": [
+                  "file",
+                  "directory"
+                ],
+                "description": "Whether the artifact is a file or a directory."
+              },
+              "bytes": {
+                "type": "integer",
+                "minimum": 0,
+                "description": "Size in bytes; absent for directories."
+              },
+              "mime": {
+                "type": "string",
+                "description": "MIME type derived from the extension; absent for directories."
+              }
+            },
+            "required": [
+              "path",
+              "kind"
+            ],
+            "additionalProperties": false,
+            "description": "One artifact in the run's artifact tree."
+          },
+          "default": []
+        }
+      },
+      "required": [
+        "runId"
+      ],
+      "additionalProperties": false,
+      "description": "Run-keyed technical artifact or produced-output listing."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlAuthReadinessRefreshRequest.schema.json

@@ -0,0 +1,38 @@
+{
+  "$ref": "#/definitions/ControlAuthReadinessRefreshRequest",
+  "definitions": {
+    "ControlAuthReadinessRefreshRequest": {
+      "type": "object",
+      "properties": {
+        "authRequest": {
+          "type": "string",
+          "enum": [
+            "subscription",
+            "api_key",
+            "auto"
+          ],
+          "description": "Requested credential behavior: exact subscription, exact managed API key, or policy-governed auto selection."
+        },
+        "source": {
+          "type": "string",
+          "enum": [
+            "native_session",
+            "oauth_token_env",
+            "api_key_env",
+            "api_key_flag",
+            "provider_auth_file",
+            "none"
+          ],
+          "description": "Concrete credential source used or probed by a harness."
+        }
+      },
+      "required": [
+        "authRequest",
+        "source"
+      ],
+      "additionalProperties": false,
+      "description": "Request to refresh one exact harness authentication source without probing unrelated routes."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlAuthReadinessRefreshResponse.schema.json

@@ -0,0 +1,85 @@
+{
+  "$ref": "#/definitions/ControlAuthReadinessRefreshResponse",
+  "definitions": {
+    "ControlAuthReadinessRefreshResponse": {
+      "type": "object",
+      "properties": {
+        "harnessId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Non-empty identifier string."
+        },
+        "authRequest": {
+          "type": "string",
+          "enum": [
+            "subscription",
+            "api_key",
+            "auto"
+          ],
+          "description": "Requested credential behavior: exact subscription, exact managed API key, or policy-governed auto selection."
+        },
+        "requestedSource": {
+          "type": "string",
+          "enum": [
+            "native_session",
+            "oauth_token_env",
+            "api_key_env",
+            "api_key_flag",
+            "provider_auth_file",
+            "none"
+          ],
+          "description": "Concrete credential source used or probed by a harness."
+        },
+        "observedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "readiness": {
+          "type": "object",
+          "properties": {
+            "source": {
+              "$ref": "#/definitions/ControlAuthReadinessRefreshResponse/properties/requestedSource"
+            },
+            "availability": {
+              "type": "string",
+              "enum": [
+                "available",
+                "unavailable",
+                "unknown"
+              ]
+            },
+            "verification": {
+              "type": "string",
+              "enum": [
+                "passed",
+                "failed",
+                "not_run"
+              ]
+            },
+            "detail": {
+              "type": "string",
+              "description": "Redacted human-readable source evidence."
+            }
+          },
+          "required": [
+            "source",
+            "availability",
+            "verification"
+          ],
+          "additionalProperties": false,
+          "description": "Doctor-backed readiness for one exact credential source."
+        }
+      },
+      "required": [
+        "harnessId",
+        "authRequest",
+        "requestedSource",
+        "observedAt",
+        "readiness"
+      ],
+      "additionalProperties": false,
+      "description": "Point-in-time readiness evidence for one exact harness credential source."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlCredentialProfileCreateRequest.schema.json

@@ -0,0 +1,32 @@
+{
+  "$ref": "#/definitions/ControlCredentialProfileCreateRequest",
+  "definitions": {
+    "ControlCredentialProfileCreateRequest": {
+      "type": "object",
+      "properties": {
+        "harnessId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Harness family (claude | codex) for the config-dir login profile."
+        },
+        "profileId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "New profile id (bounded slug, unique per harness)."
+        },
+        "displayName": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Human label shown wherever the account appears; defaults to the id."
+        }
+      },
+      "required": [
+        "harnessId",
+        "profileId"
+      ],
+      "additionalProperties": false,
+      "description": "Request body for POST /credential-profiles."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlCredentialProfileCreateResponse.schema.json

@@ -0,0 +1,142 @@
+{
+  "$ref": "#/definitions/ControlCredentialProfileCreateResponse",
+  "definitions": {
+    "ControlCredentialProfileCreateResponse": {
+      "type": "object",
+      "properties": {
+        "profile": {
+          "type": "object",
+          "properties": {
+            "profile_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Stable user-chosen profile identifier (unique per harness)."
+            },
+            "harness_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Harness family this profile belongs to."
+            },
+            "display_name": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Human label shown wherever the profile appears."
+            },
+            "credential_kind": {
+              "type": "string",
+              "enum": [
+                "config_dir_login",
+                "oauth_token",
+                "api_key"
+              ],
+              "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+            },
+            "isolation_locator": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+            },
+            "secret_ref": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Namespaced secret-store name (e.g. claude_oauth:work) for oauth_token/api_key profiles; null for config_dir_login."
+            },
+            "enabled": {
+              "type": "boolean",
+              "default": true,
+              "description": "Disabled profiles are never routable."
+            },
+            "created_at": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "ISO-8601 timestamp string."
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "When the profile was registered; null for hand-written config entries.",
+              "default": null
+            }
+          },
+          "required": [
+            "profile_id",
+            "harness_id",
+            "display_name",
+            "credential_kind"
+          ],
+          "additionalProperties": false,
+          "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+        },
+        "status": {
+          "type": "object",
+          "properties": {
+            "profile_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            },
+            "harness_id": {
+              "$ref": "#/definitions/ControlCredentialProfileCreateResponse/properties/status/properties/profile_id"
+            },
+            "availability": {
+              "type": "string",
+              "enum": [
+                "available",
+                "unavailable",
+                "unknown"
+              ]
+            },
+            "verification": {
+              "type": "string",
+              "enum": [
+                "passed",
+                "failed",
+                "not_run"
+              ]
+            },
+            "detail": {
+              "type": "string",
+              "description": "Redacted human-readable probe evidence."
+            },
+            "last_verified_at": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ControlCredentialProfileCreateResponse/properties/profile/properties/created_at/anyOf/0"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "When a probe last verified this profile; null = never verified.",
+              "default": null
+            }
+          },
+          "required": [
+            "profile_id",
+            "harness_id",
+            "availability",
+            "verification"
+          ],
+          "additionalProperties": false,
+          "description": "Doctor-owned readiness projection for one credential profile; never durable config."
+        }
+      },
+      "required": [
+        "profile",
+        "status"
+      ],
+      "additionalProperties": false,
+      "description": "The registered profile with its initial doctor readiness projection."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlCredentialProfileDeleteResponse.schema.json

@@ -0,0 +1,107 @@
+{
+  "$ref": "#/definitions/ControlCredentialProfileDeleteResponse",
+  "definitions": {
+    "ControlCredentialProfileDeleteResponse": {
+      "type": "object",
+      "properties": {
+        "profile": {
+          "type": "object",
+          "properties": {
+            "profile_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Stable user-chosen profile identifier (unique per harness)."
+            },
+            "harness_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Harness family this profile belongs to."
+            },
+            "display_name": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Human label shown wherever the profile appears."
+            },
+            "credential_kind": {
+              "type": "string",
+              "enum": [
+                "config_dir_login",
+                "oauth_token",
+                "api_key"
+              ],
+              "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+            },
+            "isolation_locator": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+            },
+            "secret_ref": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Namespaced secret-store name (e.g. claude_oauth:work) for oauth_token/api_key profiles; null for config_dir_login."
+            },
+            "enabled": {
+              "type": "boolean",
+              "default": true,
+              "description": "Disabled profiles are never routable."
+            },
+            "created_at": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "ISO-8601 timestamp string."
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "When the profile was registered; null for hand-written config entries.",
+              "default": null
+            }
+          },
+          "required": [
+            "profile_id",
+            "harness_id",
+            "display_name",
+            "credential_kind"
+          ],
+          "additionalProperties": false,
+          "description": "The removed registry entry."
+        },
+        "removed": {
+          "type": "boolean",
+          "const": true
+        },
+        "credentialCleanup": {
+          "type": "string",
+          "enum": [
+            "config_dir_removed",
+            "secret_deleted",
+            "none"
+          ],
+          "description": "What credential material was deleted alongside the registry entry."
+        },
+        "cleanupWarning": {
+          "type": "string",
+          "description": "Present when the registry entry was removed but cleanup failed (orphan left)."
+        }
+      },
+      "required": [
+        "profile",
+        "removed",
+        "credentialCleanup"
+      ],
+      "additionalProperties": false,
+      "description": "Receipt for a credential-profile removal."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}