@claudexor/schema 2.0.0 → 2.1.1

package/generated/ControlHarnessListResponse.schema.json

@@ -363,10 +363,41 @@
                           "known_models": {
                             "type": "array",
                             "items": {
-                              "type": "string"
+                              "anyOf": [
+                                {
+                                  "type": "string"
+                                },
+                                {
+                                  "type": "object",
+                                  "properties": {
+                                    "id": {
+                                      "type": "string",
+                                      "minLength": 1,
+                                      "description": "Model id/alias."
+                                    },
+                                    "routes": {
+                                      "type": "array",
+                                      "items": {
+                                        "type": "string",
+                                        "enum": [
+                                          "local_session",
+                                          "api_key"
+                                        ]
+                                      },
+                                      "minItems": 1,
+                                      "description": "Credential routes this model is available on."
+                                    }
+                                  },
+                                  "required": [
+                                    "id",
+                                    "routes"
+                                  ],
+                                  "additionalProperties": false
+                                }
+                              ]
                             },
                             "default": [],
-                            "description": "Manifest-declared model ids/aliases this harness accepts, used as the model truth source when the adapter has no live inventory; explicit models outside the truth source are refused."
+                            "description": "Manifest-declared model ids/aliases this harness accepts (bare string = every credential route; object form scopes a model to specific routes), used as the model truth source when the adapter has no live inventory; explicit models outside the truth source are refused."
                           },
                           "known_models_verified_against": {
                             "type": [
@@ -433,6 +464,14 @@
                 "default": [],
                 "description": "Intents the gateway will route to this harness."
               },
+              "routableIntents": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "default": [],
+                "description": "Intents the harness is actually routable for right now (doctor-gated); the server-side availability truth surfaces must read instead of re-deriving."
+              },
               "disabledIntents": {
                 "type": "array",
                 "items": {
@@ -527,6 +566,60 @@
                 "default": [],
                 "description": "Doctor-backed readiness by authentication source; an empty array means readiness was not reported."
               },
+              "readiness": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "id": {
+                      "type": "string",
+                      "description": "Stable machine id of the check (adapter probe id or auth source)."
+                    },
+                    "kind": {
+                      "type": "string",
+                      "enum": [
+                        "binary",
+                        "auth",
+                        "smoke",
+                        "model",
+                        "probe"
+                      ],
+                      "description": "What KIND of readiness this is: binary presence, credential source, isolated smoke, configured-model validity, or a generic capability probe."
+                    },
+                    "title": {
+                      "type": "string",
+                      "description": "Human display name of the check."
+                    },
+                    "status": {
+                      "type": "string",
+                      "enum": [
+                        "pass",
+                        "fail",
+                        "skip"
+                      ],
+                      "description": "Outcome; skip = not run / not applicable."
+                    },
+                    "detail": {
+                      "type": [
+                        "string",
+                        "null"
+                      ],
+                      "default": null,
+                      "description": "Redacted human-readable evidence for the outcome."
+                    }
+                  },
+                  "required": [
+                    "id",
+                    "kind",
+                    "title",
+                    "status"
+                  ],
+                  "additionalProperties": false,
+                  "description": "One display-ready readiness check row (daemon-normalized)."
+                },
+                "default": [],
+                "description": "Display-ready readiness checks, daemon-normalized from the raw evidence."
+              },
               "configuredModel": {
                 "type": [
                   "string",

package/generated/ControlHarnessModelsResponse.schema.json

@@ -37,6 +37,25 @@
                 ],
                 "default": null,
                 "description": "Context window in tokens; null when the enumeration source does not report it."
+              },
+              "routes": {
+                "anyOf": [
+                  {
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "enum": [
+                        "local_session",
+                        "api_key"
+                      ]
+                    }
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "default": null,
+                "description": "Credential routes the model is scoped to; null = every route."
               }
             },
             "required": [

package/generated/ControlHarnessSettingsPatch.schema.json

@@ -108,6 +108,15 @@
             "auto"
           ],
           "description": "New auth route preference."
+        },
+        "profileLimitAction": {
+          "type": "string",
+          "enum": [
+            "fail",
+            "ask",
+            "rotate"
+          ],
+          "description": "New profile-selection limit action (fail | ask | rotate)."
         }
       },
       "additionalProperties": false,

package/generated/ControlQuotaResponse.schema.json

@@ -45,7 +45,7 @@
                   "credential_route"
                 ],
                 "additionalProperties": false,
-                "description": "Quota owner and credential route; subject ids are opaque and optional."
+                "description": "Quota owner and credential route; subject_id is the credential-profile id (null = the engine-default credential)."
               },
               "constraints": {
                 "type": "array",
@@ -123,7 +123,8 @@
                   "codex_app_server",
                   "codex_rollout",
                   "claude_statusline",
-                  "claude_api_retry"
+                  "claude_api_retry",
+                  "claude_oauth_usage"
                 ],
                 "description": "Vendor-owned machine-readable source of a quota snapshot."
               },

package/generated/ControlRunAgainDraft.schema.json

@@ -17,6 +17,10 @@
               "default": "",
               "description": "The user's prompt for the run."
             },
+            "instructions": {
+              "type": "string",
+              "description": "System-level instructions layered onto every task-producing lane; delivered natively (append-system-prompt / developer_instructions) or as a delimited prompt prefix."
+            },
             "attachments": {
               "type": "array",
               "items": {
@@ -441,6 +445,18 @@
               ],
               "description": "Per-run auth route override."
             },
+            "credentialProfileId": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "minLength": 1
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Explicit per-run credential profile id; null FORCES the engine-default ladder past a thread-sticky profile; unknown/disabled ids refuse, never default."
+            },
             "autonomy": {
               "type": "string",
               "enum": [
@@ -454,6 +470,30 @@
               "type": "integer",
               "exclusiveMinimum": 0,
               "description": "Cap on orchestrate plan tool calls; only meaningful for mode=orchestrate."
+            },
+            "maxSeconds": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "maximum": 604800,
+              "description": "Hard wall-clock deadline for the whole run (seconds, from scheduler start, max 7 days); on expiry the run is cancelled with reason wall_clock_exceeded and partial artifacts are kept."
+            },
+            "denyPaths": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              },
+              "description": "Per-run globs no candidate may touch at all; envelope-only (in-place runs are refused), enforced by the engine post-diff gate, disclosed per lane via path_deny receipts. accept_risk may still deliver (INV-111)."
+            },
+            "outputSchema": {
+              "type": "object",
+              "additionalProperties": {},
+              "description": "JSON Schema for the run's final answer; mandatory (incapable lane => preflight refusal), engine-validated into final/output.json with a typed outputConformance receipt."
+            },
+            "maxTurns": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "description": "Per-run turn cap (beats per-harness settings)."
             }
           },
           "additionalProperties": false,

package/generated/ControlRunDetail.schema.json

@@ -354,12 +354,179 @@
                 "number",
                 "null"
               ],
-              "description": "Settled spend in USD; null when unknown."
+              "description": "Settled cash in USD; null when unknown."
             },
             "spendEstimated": {
               "type": "boolean",
               "description": "True when spend is token-derived rather than natively reported."
             },
+            "inputTokens": {
+              "anyOf": [
+                {
+                  "type": "integer",
+                  "minimum": 0
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Input tokens summed across all attempts; null when no harness reported them."
+            },
+            "outputTokens": {
+              "anyOf": [
+                {
+                  "type": "integer",
+                  "minimum": 0
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Output tokens summed across all attempts; null when no harness reported them."
+            },
+            "cachedInputTokens": {
+              "anyOf": [
+                {
+                  "type": "integer",
+                  "minimum": 0
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Cached input tokens summed across all attempts; null when no harness reported them."
+            },
+            "outputConformance": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "passed",
+                    "failed"
+                  ]
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Structured-output conformance receipt (passed/failed); null when the run had no outputSchema."
+            },
+            "authRoute": {
+              "anyOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "requested": {
+                      "type": "string",
+                      "enum": [
+                        "subscription",
+                        "api_key",
+                        "auto"
+                      ],
+                      "description": "Preferred auth route: subscription (native/OAuth session), api_key (a stored API key), or auto (engine picks subscription-first with policy fallback). A preference, not a secret."
+                    },
+                    "effective": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "enum": [
+                            "local_session",
+                            "api_key",
+                            "unknown"
+                          ],
+                          "description": "Auth mode a route runs under: a native local session, an API key, or unknown."
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "description": "Auth mode a route runs under: a native local session, an API key, or unknown.",
+                      "default": null
+                    },
+                    "source": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "enum": [
+                            "native_session",
+                            "oauth_token_env",
+                            "api_key_env",
+                            "api_key_flag",
+                            "provider_auth_file",
+                            "none"
+                          ],
+                          "description": "Concrete credential source used or probed by a harness."
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "description": "Concrete credential source used or probed by a harness.",
+                      "default": null
+                    },
+                    "reason": {
+                      "type": "string",
+                      "enum": [
+                        "as_requested",
+                        "native_first",
+                        "no_native_session_fallback",
+                        "requested_route_unavailable",
+                        "undisclosed"
+                      ],
+                      "description": "Deterministic reason for the effective auth route: as_requested, native_first (auto, INV-061), no_native_session_fallback (auto downgraded to api_key), requested_route_unavailable (explicit preference contradicted), or undisclosed."
+                    },
+                    "harnessId": {
+                      "type": [
+                        "string",
+                        "null"
+                      ],
+                      "default": null
+                    },
+                    "attemptId": {
+                      "type": [
+                        "string",
+                        "null"
+                      ],
+                      "default": null
+                    },
+                    "modelMismatch": {
+                      "anyOf": [
+                        {
+                          "type": "object",
+                          "properties": {
+                            "requested": {
+                              "type": "string"
+                            },
+                            "observed": {
+                              "type": "string"
+                            }
+                          },
+                          "required": [
+                            "requested",
+                            "observed"
+                          ],
+                          "additionalProperties": false
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "default": null,
+                      "description": "Requested-vs-observed model mismatch; null when none."
+                    }
+                  },
+                  "required": [
+                    "requested",
+                    "reason"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Auth route receipt (requested/effective/source/reason + disclosing attempt), projected verbatim from telemetry; null when unavailable."
+            },
             "access": {
               "type": "string",
               "enum": [
@@ -486,7 +653,10 @@
                 "properties": {
                   "capability": {
                     "type": "string",
-                    "const": "browser"
+                    "enum": [
+                      "browser",
+                      "path_deny"
+                    ]
                   },
                   "harness_id": {
                     "type": "string",
@@ -508,7 +678,8 @@
                       "effective",
                       "manifest_unsupported",
                       "web_policy_off",
-                      "access_profile_incompatible"
+                      "access_profile_incompatible",
+                      "postdiff_only"
                     ]
                   },
                   "evidence_refs": {
@@ -840,9 +1011,10 @@
                     "plan",
                     "summary",
                     "patch",
-                    "diagnostic"
+                    "diagnostic",
+                    "structured_output"
                   ],
-                  "description": "What kind of output this is: answer, report, plan, summary, patch, or diagnostic."
+                  "description": "What kind of output this is: answer, report, plan, summary, patch, diagnostic, or structured_output (schema-conformant final/output.json)."
                 },
                 "path": {
                   "type": "string",
@@ -986,7 +1158,7 @@
                 "null"
               ],
               "default": null,
-              "description": "Spend so far in USD; null when unknown."
+              "description": "CASH spend so far in USD; null when unknown."
             },
             "remainingUsd": {
               "type": [

package/generated/ControlRunListResponse.schema.json

@@ -356,12 +356,179 @@
                   "number",
                   "null"
                 ],
-                "description": "Settled spend in USD; null when unknown."
+                "description": "Settled cash in USD; null when unknown."
               },
               "spendEstimated": {
                 "type": "boolean",
                 "description": "True when spend is token-derived rather than natively reported."
               },
+              "inputTokens": {
+                "anyOf": [
+                  {
+                    "type": "integer",
+                    "minimum": 0
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Input tokens summed across all attempts; null when no harness reported them."
+              },
+              "outputTokens": {
+                "anyOf": [
+                  {
+                    "type": "integer",
+                    "minimum": 0
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Output tokens summed across all attempts; null when no harness reported them."
+              },
+              "cachedInputTokens": {
+                "anyOf": [
+                  {
+                    "type": "integer",
+                    "minimum": 0
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Cached input tokens summed across all attempts; null when no harness reported them."
+              },
+              "outputConformance": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "passed",
+                      "failed"
+                    ]
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Structured-output conformance receipt (passed/failed); null when the run had no outputSchema."
+              },
+              "authRoute": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "requested": {
+                        "type": "string",
+                        "enum": [
+                          "subscription",
+                          "api_key",
+                          "auto"
+                        ],
+                        "description": "Preferred auth route: subscription (native/OAuth session), api_key (a stored API key), or auto (engine picks subscription-first with policy fallback). A preference, not a secret."
+                      },
+                      "effective": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "enum": [
+                              "local_session",
+                              "api_key",
+                              "unknown"
+                            ],
+                            "description": "Auth mode a route runs under: a native local session, an API key, or unknown."
+                          },
+                          {
+                            "type": "null"
+                          }
+                        ],
+                        "description": "Auth mode a route runs under: a native local session, an API key, or unknown.",
+                        "default": null
+                      },
+                      "source": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "enum": [
+                              "native_session",
+                              "oauth_token_env",
+                              "api_key_env",
+                              "api_key_flag",
+                              "provider_auth_file",
+                              "none"
+                            ],
+                            "description": "Concrete credential source used or probed by a harness."
+                          },
+                          {
+                            "type": "null"
+                          }
+                        ],
+                        "description": "Concrete credential source used or probed by a harness.",
+                        "default": null
+                      },
+                      "reason": {
+                        "type": "string",
+                        "enum": [
+                          "as_requested",
+                          "native_first",
+                          "no_native_session_fallback",
+                          "requested_route_unavailable",
+                          "undisclosed"
+                        ],
+                        "description": "Deterministic reason for the effective auth route: as_requested, native_first (auto, INV-061), no_native_session_fallback (auto downgraded to api_key), requested_route_unavailable (explicit preference contradicted), or undisclosed."
+                      },
+                      "harnessId": {
+                        "type": [
+                          "string",
+                          "null"
+                        ],
+                        "default": null
+                      },
+                      "attemptId": {
+                        "type": [
+                          "string",
+                          "null"
+                        ],
+                        "default": null
+                      },
+                      "modelMismatch": {
+                        "anyOf": [
+                          {
+                            "type": "object",
+                            "properties": {
+                              "requested": {
+                                "type": "string"
+                              },
+                              "observed": {
+                                "type": "string"
+                              }
+                            },
+                            "required": [
+                              "requested",
+                              "observed"
+                            ],
+                            "additionalProperties": false
+                          },
+                          {
+                            "type": "null"
+                          }
+                        ],
+                        "default": null,
+                        "description": "Requested-vs-observed model mismatch; null when none."
+                      }
+                    },
+                    "required": [
+                      "requested",
+                      "reason"
+                    ],
+                    "additionalProperties": false
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Auth route receipt (requested/effective/source/reason + disclosing attempt), projected verbatim from telemetry; null when unavailable."
+              },
               "access": {
                 "type": "string",
                 "enum": [
@@ -488,7 +655,10 @@
                   "properties": {
                     "capability": {
                       "type": "string",
-                      "const": "browser"
+                      "enum": [
+                        "browser",
+                        "path_deny"
+                      ]
                     },
                     "harness_id": {
                       "type": "string",
@@ -510,7 +680,8 @@
                         "effective",
                         "manifest_unsupported",
                         "web_policy_off",
-                        "access_profile_incompatible"
+                        "access_profile_incompatible",
+                        "postdiff_only"
                       ]
                     },
                     "evidence_refs": {