@claudexor/schema 1.0.1 → 2.1.1

package/generated/TaskContract.schema.json

@@ -90,12 +90,65 @@
           "additionalProperties": false,
           "description": "The user's request this run is held to."
         },
+        "instructions": {
+          "type": "string",
+          "description": "Caller-supplied per-run system-level instructions for task-producing lanes."
+        },
+        "output_schema": {
+          "anyOf": [
+            {
+              "type": "object",
+              "additionalProperties": {}
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Normalized caller-supplied JSON Schema for the final answer; null when the run has no structured-output contract."
+        },
+        "auth_preference": {
+          "type": "string",
+          "enum": [
+            "subscription",
+            "api_key",
+            "auto"
+          ],
+          "description": "Requested auth route for the run (subscription/api_key/auto); the telemetry auth_route receipt carries the effective truth.",
+          "default": "auto"
+        },
+        "credential_profile_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Requested credential profile for the run; null = engine-default credentials (INV-135 route evidence).",
+          "default": null
+        },
+        "max_turns": {
+          "anyOf": [
+            {
+              "type": "integer",
+              "exclusiveMinimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Per-run turn cap (beats per-harness settings); null when the caller set none."
+        },
         "spec": {
           "type": "object",
           "properties": {
             "id": {
-              "type": "string",
-              "minLength": 1,
+              "$ref": "#/definitions/TaskContract/properties/credential_profile_id/anyOf/0",
               "description": "SpecPack id."
             },
             "hash": {
@@ -187,7 +240,7 @@
                       "depends_on": {
                         "type": "array",
                         "items": {
-                          "$ref": "#/definitions/TaskContract/properties/spec/properties/id"
+                          "$ref": "#/definitions/TaskContract/properties/credential_profile_id/anyOf/0"
                         },
                         "default": [],
                         "description": "Ids of tasks this node depends on (graph edges)."
@@ -205,7 +258,7 @@
                 "order": {
                   "type": "array",
                   "items": {
-                    "$ref": "#/definitions/TaskContract/properties/spec/properties/id"
+                    "$ref": "#/definitions/TaskContract/properties/credential_profile_id/anyOf/0"
                   },
                   "default": [],
                   "description": "Topological execution order (node ids); empty when there are no tasks."
@@ -232,6 +285,14 @@
               "default": [],
               "description": "Spec/config-owned globs whose changes escalate risk to a human-approval gate; cannot be suppressed by per-run protected-path approvals."
             },
+            "deny_paths": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "default": [],
+              "description": "Per-run globs no candidate may touch at all; enforced by the engine post-diff gate on envelope runs (in-place runs with deny_paths are refused). accept_risk may still deliver (INV-111)."
+            },
             "auto_protected_paths": {
               "type": "array",
               "items": {
@@ -280,27 +341,135 @@
               "items": {
                 "type": "object",
                 "properties": {
-                  "id": {
+                  "program": {
                     "type": "string",
                     "minLength": 1,
-                    "description": "Test command id."
+                    "pattern": "\\S",
+                    "description": "Executable invoked directly without an implicit shell."
+                  },
+                  "args": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "default": [],
+                    "description": "Exact argv passed to the executable."
+                  },
+                  "cwd": {
+                    "type": "string",
+                    "description": "Optional project-relative working directory for the command."
+                  },
+                  "envAllowlist": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/definitions/TaskContract/properties/constraints/properties/protected_path_approvals/items/properties/reason"
+                    },
+                    "default": [],
+                    "description": "Non-secret parent environment names explicitly forwarded to the command."
                   },
-                  "command": {
+                  "id": {
                     "type": "string",
-                    "description": "Shell command executed as a deterministic gate."
+                    "minLength": 1,
+                    "description": "Test command id."
                   },
                   "required": {
                     "type": "boolean",
                     "default": true,
                     "description": "Whether this test must pass (vs advisory)."
+                  },
+                  "trust_required": {
+                    "type": "boolean",
+                    "default": false,
+                    "description": "Whether this command originated in versioned project config."
+                  },
+                  "trust_grant": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "projectDigest": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Digest of the canonical project identity."
+                          },
+                          "configDigest": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Digest of the parsed versioned project config blob."
+                          },
+                          "commandDigest": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Digest of the canonical command invocation."
+                          },
+                          "executablePath": {
+                            "type": "string",
+                            "description": "Resolved executable path approved by the operator."
+                          },
+                          "executableDigest": {
+                            "type": "string",
+                            "minLength": 1,
+                            "description": "Digest of the resolved executable bytes."
+                          },
+                          "scriptPath": {
+                            "type": [
+                              "string",
+                              "null"
+                            ],
+                            "default": null,
+                            "description": "Resolved script path, when any."
+                          },
+                          "scriptDigest": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "minLength": 1,
+                                "description": "Content hash in algo:hex form, e.g. \"sha256:abcd...\"."
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ],
+                            "description": "Digest of the script bytes.",
+                            "default": null
+                          },
+                          "accessProfile": {
+                            "type": "string",
+                            "enum": [
+                              "readonly",
+                              "workspace_write",
+                              "full",
+                              "external_sandbox_full",
+                              "inherit_native"
+                            ],
+                            "description": "Effective access profile covered by this grant."
+                          }
+                        },
+                        "required": [
+                          "projectDigest",
+                          "configDigest",
+                          "commandDigest",
+                          "executablePath",
+                          "executableDigest",
+                          "accessProfile"
+                        ],
+                        "additionalProperties": false,
+                        "description": "External exact grant for one versioned project test command."
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "description": "Matching external grant; null when none was found.",
+                    "default": null
                   }
                 },
                 "required": [
-                  "id",
-                  "command"
+                  "program",
+                  "id"
                 ],
                 "additionalProperties": false,
-                "description": "A deterministic test command used as a verification gate."
+                "description": "A deterministic typed-argv test command used as a verification gate."
               },
               "default": [],
               "description": "Deterministic test commands configured as gates."
@@ -409,34 +578,59 @@
         "budget": {
           "type": "object",
           "properties": {
-            "portfolio": {
+            "routing_goal": {
               "type": "string",
               "enum": [
-                "daily-rich",
-                "balanced",
-                "cheapest",
-                "strongest",
-                "burn",
-                "subscription-first",
-                "api-overflow",
-                "conserve-claude",
-                "conserve-codex"
+                "auto",
+                "quality",
+                "economy"
               ],
-              "description": "Budget portfolio weighting the harness router's quality/cost/latency and subscription-vs-API preferences (e.g. cheapest minimizes spend, burn maximizes quality, conserve-* deprioritizes one vendor).",
-              "default": "subscription-first"
+              "description": "Routing objective: pace expiring quota, choose the highest declared quality tier, or minimize incremental paid spend.",
+              "default": "auto"
             },
-            "max_usd": {
-              "type": [
-                "number",
-                "null"
+            "paid_budget": {
+              "anyOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "unlimited"
+                    }
+                  },
+                  "required": [
+                    "kind"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "const": "finite"
+                    },
+                    "maxUsd": {
+                      "type": "number",
+                      "minimum": 0
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "maxUsd"
+                  ],
+                  "additionalProperties": false
+                }
               ],
-              "default": null,
-              "description": "Hard USD cap for the run; null = no cap."
+              "description": "Incremental-cash budget: explicitly unlimited or a finite non-negative USD cap.",
+              "default": {
+                "kind": "unlimited"
+              }
             }
           },
           "additionalProperties": false,
           "default": {},
-          "description": "Budget portfolio and spend cap for the run."
+          "description": "Routing goal and explicit incremental-cash budget for the run."
         },
         "routing_models": {
           "type": "object",

package/generated/TestCommandInvocation.schema.json

@@ -0,0 +1,45 @@
+{
+  "$ref": "#/definitions/TestCommandInvocation",
+  "definitions": {
+    "TestCommandInvocation": {
+      "type": "object",
+      "properties": {
+        "program": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S",
+          "description": "Executable invoked directly without an implicit shell."
+        },
+        "args": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "default": [],
+          "description": "Exact argv passed to the executable."
+        },
+        "cwd": {
+          "type": "string",
+          "description": "Optional project-relative working directory for the command."
+        },
+        "envAllowlist": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S",
+            "description": "User-supplied string that must contain visible content, not just whitespace."
+          },
+          "default": [],
+          "description": "Non-secret parent environment names explicitly forwarded to the command."
+        }
+      },
+      "required": [
+        "program"
+      ],
+      "additionalProperties": false,
+      "description": "Canonical deterministic command invocation; no implicit shell parsing."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/Thread.schema.json

@@ -81,6 +81,20 @@
           "description": "Preferred auth route: subscription (native/OAuth session), api_key (a stored API key), or auto (engine picks subscription-first with policy fallback). A preference, not a secret.",
           "default": "auto"
         },
+        "credential_profile_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Sticky credential profile for the thread; per-turn selection wins, null = engine-default credentials.",
+          "default": null
+        },
         "primary_harness": {
           "type": [
             "string",
@@ -124,6 +138,18 @@
               ],
               "default": null,
               "description": "Snapshot SHA the isolated worktree (or last apply) is based on."
+            },
+            "delivered_through_run_id": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/Thread/properties/credential_profile_id/anyOf/0"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Last run in the lineage prefix already delivered from this isolated thread.",
+              "default": null
             }
           },
           "additionalProperties": false,
@@ -133,9 +159,7 @@
         "run_ids": {
           "type": "array",
           "items": {
-            "type": "string",
-            "minLength": 1,
-            "description": "Non-empty identifier string."
+            "$ref": "#/definitions/Thread/properties/credential_profile_id/anyOf/0"
           },
           "default": [],
           "description": "Ordered run lineage (each run is a turn move)."
@@ -143,7 +167,7 @@
         "head_run_id": {
           "anyOf": [
             {
-              "$ref": "#/definitions/Thread/properties/run_ids/items"
+              "$ref": "#/definitions/Thread/properties/credential_profile_id/anyOf/0"
             },
             {
               "type": "null"
@@ -156,10 +180,54 @@
           "type": "string",
           "enum": [
             "active",
-            "closed"
+            "closed",
+            "trashed",
+            "purged"
           ],
-          "description": "Thread lifecycle state: active or explicitly closed (archived). Blocked is a live projection, not a thread state.",
+          "description": "Thread lifecycle state: active, closed, trashed for recovery, or terminally purged.",
           "default": "active"
+        },
+        "trashed_at": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "ISO-8601 timestamp string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "When the thread entered recoverable trash.",
+          "default": null
+        },
+        "purge_after": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/Thread/properties/trashed_at/anyOf/0"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Earliest automatic purge time; 30 days after trash.",
+          "default": null
+        },
+        "pre_trash_state": {
+          "anyOf": [
+            {
+              "type": "string",
+              "enum": [
+                "active",
+                "closed"
+              ]
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Lifecycle state restored while the trash retention window remains open."
         }
       },
       "required": [

package/generated/ThreadHeadPing.schema.json

@@ -0,0 +1,40 @@
+{
+  "$ref": "#/definitions/ThreadHeadPing",
+  "definitions": {
+    "ThreadHeadPing": {
+      "type": "object",
+      "properties": {
+        "thread_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Non-empty identifier string."
+        },
+        "project_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Owning project id, or null for a no-project (global-partition) thread."
+        },
+        "revision": {
+          "type": "integer",
+          "exclusiveMinimum": 0,
+          "description": "Monotonic per-thread mutation counter; consumers drop stale/duplicate pings."
+        }
+      },
+      "required": [
+        "thread_id",
+        "project_id",
+        "revision"
+      ],
+      "additionalProperties": false,
+      "description": "Payload of the `thread.head.updated` GLOBAL-partition journal event: a content-free sidebar invalidation ping emitted on every thread mutation (create / rename / archive / turn-add / run-terminal, from any surface). It carries identity only — consumers refetch the authoritative thread summary instead of trusting event content."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ThreadTurn.schema.json

@@ -72,10 +72,10 @@
           "items": {
             "type": "object",
             "properties": {
-              "id": {
+              "resource_id": {
                 "type": "string",
                 "minLength": 1,
-                "description": "Attachment id."
+                "description": "Immutable daemon resource id."
               },
               "kind": {
                 "type": "string",
@@ -83,30 +83,43 @@
                   "image",
                   "file"
                 ],
-                "description": "Kind of attachment: image (vision input) or file (generic bytes).",
-                "default": "file"
+                "description": "Kind of attached resource: image input or generic file bytes."
               },
               "mime": {
                 "type": "string",
-                "default": "application/octet-stream",
-                "description": "MIME type of the attachment content."
+                "minLength": 1,
+                "description": "Declared MIME type validated against adapter limits."
               },
               "name": {
                 "type": "string",
-                "default": "",
-                "description": "Original file name as provided by the user or agent."
+                "description": "Original display name."
+              },
+              "sha256": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Exact sha256 digest of the immutable bytes."
+              },
+              "size_bytes": {
+                "type": "integer",
+                "minimum": 0,
+                "description": "Exact byte length."
               },
               "path": {
                 "type": "string",
-                "description": "Resolved local path in the scoped attachment store (kept outside any worktree)."
+                "description": "Daemon-owned immutable blob path; internal adapter input only."
               }
             },
             "required": [
-              "id",
+              "resource_id",
+              "kind",
+              "mime",
+              "name",
+              "sha256",
+              "size_bytes",
               "path"
             ],
             "additionalProperties": false,
-            "description": "A user- or agent-provided file/image attached to a turn, stored in the scoped attachment store and forwarded to harnesses in their native shape."
+            "description": "Daemon-resolved immutable resource supplied to a harness adapter."
           },
           "default": [],
           "description": "Files/images the user attached to this turn (resolved scoped paths)."

package/generated/TrustConfig.schema.json

@@ -34,6 +34,83 @@
           ],
           "default": null,
           "description": "Provenance only: repo root this trust file was written for; never gates anything. Null on legacy files written before this field."
+        },
+        "test_command_grants": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "projectDigest": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Digest of the canonical project identity."
+              },
+              "configDigest": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Digest of the parsed versioned project config blob."
+              },
+              "commandDigest": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Digest of the canonical command invocation."
+              },
+              "executablePath": {
+                "type": "string",
+                "description": "Resolved executable path approved by the operator."
+              },
+              "executableDigest": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Digest of the resolved executable bytes."
+              },
+              "scriptPath": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "default": null,
+                "description": "Resolved script path, when any."
+              },
+              "scriptDigest": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Content hash in algo:hex form, e.g. \"sha256:abcd...\"."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Digest of the script bytes.",
+                "default": null
+              },
+              "accessProfile": {
+                "type": "string",
+                "enum": [
+                  "readonly",
+                  "workspace_write",
+                  "full",
+                  "external_sandbox_full",
+                  "inherit_native"
+                ],
+                "description": "Effective access profile covered by this grant."
+              }
+            },
+            "required": [
+              "projectDigest",
+              "configDigest",
+              "commandDigest",
+              "executablePath",
+              "executableDigest",
+              "accessProfile"
+            ],
+            "additionalProperties": false,
+            "description": "External exact grant for one versioned project test command."
+          },
+          "default": [],
+          "description": "External exact grants for versioned project test commands."
         }
       },
       "additionalProperties": false,