@claudexor/schema 1.0.1 → 2.1.1

package/generated/ControlTrustUpdateRequest.schema.json

@@ -12,14 +12,76 @@
         "allowFullAccess": {
           "type": "boolean",
           "description": "Grant (true) or revoke (false) unsandboxed full access for the repo."
+        },
+        "accessDefault": {
+          "type": "string",
+          "enum": [
+            "readonly",
+            "workspace_write"
+          ],
+          "description": "Default access profile for runs in the repo."
+        },
+        "grantTestCommand": {
+          "type": "object",
+          "properties": {
+            "program": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "\\S",
+              "description": "Executable invoked directly without an implicit shell."
+            },
+            "args": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "default": [],
+              "description": "Exact argv passed to the executable."
+            },
+            "cwd": {
+              "type": "string",
+              "description": "Optional project-relative working directory for the command."
+            },
+            "envAllowlist": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "\\S",
+                "description": "User-supplied string that must contain visible content, not just whitespace."
+              },
+              "default": [],
+              "description": "Non-secret parent environment names explicitly forwarded to the command."
+            }
+          },
+          "required": [
+            "program"
+          ],
+          "additionalProperties": false,
+          "description": "Typed command to grant against the current project config and executable/script bytes."
+        },
+        "grantAccessProfile": {
+          "type": "string",
+          "enum": [
+            "readonly",
+            "workspace_write",
+            "full",
+            "external_sandbox_full",
+            "inherit_native"
+          ],
+          "description": "Effective access profile covered by grantTestCommand; defaults to the trust default."
+        },
+        "revokeTestCommandDigest": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Revoke grants for this canonical command digest."
         }
       },
       "required": [
-        "repoRoot",
-        "allowFullAccess"
+        "repoRoot"
       ],
       "additionalProperties": false,
-      "description": "Narrow trust update — the only trust field the control API exposes: grant or revoke unsandboxed full access for one repo in the user-level trust file."
+      "description": "User-level trust update: grant/revoke full access and/or set the readonly/workspace-write default."
     }
   },
   "$schema": "http://json-schema.org/draft-07/schema#"

package/generated/ControlUploadCreateRequest.schema.json

@@ -0,0 +1,37 @@
+{
+  "$ref": "#/definitions/ControlUploadCreateRequest",
+  "definitions": {
+    "ControlUploadCreateRequest": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "type": "string",
+          "enum": [
+            "image",
+            "file"
+          ],
+          "description": "Kind of attached resource: image input or generic file bytes."
+        },
+        "mime": {
+          "type": "string",
+          "minLength": 1
+        },
+        "name": {
+          "type": "string",
+          "default": ""
+        },
+        "sizeBytes": {
+          "type": "integer",
+          "minimum": 0
+        }
+      },
+      "required": [
+        "kind",
+        "mime",
+        "sizeBytes"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlUploadFinalizeRequest.schema.json

@@ -0,0 +1,17 @@
+{
+  "$ref": "#/definitions/ControlUploadFinalizeRequest",
+  "definitions": {
+    "ControlUploadFinalizeRequest": {
+      "type": "object",
+      "properties": {
+        "expectedSha256": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Content hash in algo:hex form, e.g. \"sha256:abcd...\"."
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlUploadStatus.schema.json

@@ -0,0 +1,40 @@
+{
+  "$ref": "#/definitions/ControlUploadStatus",
+  "definitions": {
+    "ControlUploadStatus": {
+      "type": "object",
+      "properties": {
+        "uploadId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Non-empty identifier string."
+        },
+        "state": {
+          "type": "string",
+          "enum": [
+            "open",
+            "uploading",
+            "uploaded",
+            "cancelled"
+          ]
+        },
+        "receivedBytes": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "expectedBytes": {
+          "type": "integer",
+          "minimum": 0
+        }
+      },
+      "required": [
+        "uploadId",
+        "state",
+        "receivedBytes",
+        "expectedBytes"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/CredentialProfile.schema.json

@@ -0,0 +1,78 @@
+{
+  "$ref": "#/definitions/CredentialProfile",
+  "definitions": {
+    "CredentialProfile": {
+      "type": "object",
+      "properties": {
+        "profile_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Stable user-chosen profile identifier (unique per harness)."
+        },
+        "harness_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Harness family this profile belongs to."
+        },
+        "display_name": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Human label shown wherever the profile appears."
+        },
+        "credential_kind": {
+          "type": "string",
+          "enum": [
+            "config_dir_login",
+            "oauth_token",
+            "api_key"
+          ],
+          "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+        },
+        "isolation_locator": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+        },
+        "secret_ref": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Namespaced secret-store name (e.g. claude_oauth:work) for oauth_token/api_key profiles; null for config_dir_login."
+        },
+        "enabled": {
+          "type": "boolean",
+          "default": true,
+          "description": "Disabled profiles are never routable."
+        },
+        "created_at": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "ISO-8601 timestamp string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "When the profile was registered; null for hand-written config entries.",
+          "default": null
+        }
+      },
+      "required": [
+        "profile_id",
+        "harness_id",
+        "display_name",
+        "credential_kind"
+      ],
+      "additionalProperties": false,
+      "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/CredentialProfileStatus.schema.json

@@ -0,0 +1,61 @@
+{
+  "$ref": "#/definitions/CredentialProfileStatus",
+  "definitions": {
+    "CredentialProfileStatus": {
+      "type": "object",
+      "properties": {
+        "profile_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Non-empty identifier string."
+        },
+        "harness_id": {
+          "$ref": "#/definitions/CredentialProfileStatus/properties/profile_id"
+        },
+        "availability": {
+          "type": "string",
+          "enum": [
+            "available",
+            "unavailable",
+            "unknown"
+          ]
+        },
+        "verification": {
+          "type": "string",
+          "enum": [
+            "passed",
+            "failed",
+            "not_run"
+          ]
+        },
+        "detail": {
+          "type": "string",
+          "description": "Redacted human-readable probe evidence."
+        },
+        "last_verified_at": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "ISO-8601 timestamp string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "When a probe last verified this profile; null = never verified.",
+          "default": null
+        }
+      },
+      "required": [
+        "profile_id",
+        "harness_id",
+        "availability",
+        "verification"
+      ],
+      "additionalProperties": false,
+      "description": "Doctor-owned readiness projection for one credential profile; never durable config."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/DecisionRecord.schema.json

@@ -25,13 +25,16 @@
             "ungated",
             "review_not_run",
             "blocked",
-            "not_converged",
-            "stuck_no_progress",
             "failed",
+            "interrupted_unknown",
+            "cost_unverifiable",
+            "exhausted_overshoot",
             "exhausted",
+            "not_converged",
+            "stuck_no_progress",
             "cancelled"
           ],
-          "description": "Terminal status of a run: success, no_op (nothing to change), ungated (no gates configured), review_not_run, blocked (accepted blocking findings), not_converged, stuck_no_progress, failed, exhausted (attempt/budget caps), or cancelled."
+          "description": "Terminal status of a run, including truthful blocked, interrupted-unknown, cost-unverifiable, overshoot, exhaustion, non-convergence, failure, and cancellation outcomes."
         },
         "outcome": {
           "type": "string",