@claudexor/schema 2.0.0 → 2.1.2

package/generated/ControlRunStartRequest.schema.json

@@ -9,6 +9,10 @@
           "default": "",
           "description": "The user's prompt for the run."
         },
+        "instructions": {
+          "type": "string",
+          "description": "System-level instructions layered onto every task-producing lane; delivered natively (append-system-prompt / developer_instructions) or as a delimited prompt prefix."
+        },
         "attachments": {
           "type": "array",
           "items": {
@@ -434,6 +438,18 @@
           ],
           "description": "Per-run auth route override."
         },
+        "credentialProfileId": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Explicit per-run credential profile id; null FORCES the engine-default ladder past a thread-sticky profile; unknown/disabled ids refuse, never default."
+        },
         "autonomy": {
           "type": "string",
           "enum": [
@@ -447,6 +463,30 @@
           "type": "integer",
           "exclusiveMinimum": 0,
           "description": "Cap on orchestrate plan tool calls; only meaningful for mode=orchestrate."
+        },
+        "maxSeconds": {
+          "type": "integer",
+          "exclusiveMinimum": 0,
+          "maximum": 604800,
+          "description": "Hard wall-clock deadline for the whole run (seconds, from scheduler start, max 7 days); on expiry the run is cancelled with reason wall_clock_exceeded and partial artifacts are kept."
+        },
+        "denyPaths": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "Per-run globs no candidate may touch at all; envelope-only (in-place runs are refused), enforced by the engine post-diff gate, disclosed per lane via path_deny receipts. accept_risk may still deliver (INV-111)."
+        },
+        "outputSchema": {
+          "type": "object",
+          "additionalProperties": {},
+          "description": "JSON Schema for the run's final answer; mandatory (incapable lane => preflight refusal), engine-validated into final/output.json with a typed outputConformance receipt."
+        },
+        "maxTurns": {
+          "type": "integer",
+          "exclusiveMinimum": 0,
+          "description": "Per-run turn cap (beats per-harness settings)."
         }
       },
       "additionalProperties": false,

package/generated/ControlRunSummary.schema.json

@@ -351,12 +351,179 @@
             "number",
             "null"
           ],
-          "description": "Settled spend in USD; null when unknown."
+          "description": "Settled cash in USD; null when unknown."
         },
         "spendEstimated": {
           "type": "boolean",
           "description": "True when spend is token-derived rather than natively reported."
         },
+        "inputTokens": {
+          "anyOf": [
+            {
+              "type": "integer",
+              "minimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Input tokens summed across all attempts; null when no harness reported them."
+        },
+        "outputTokens": {
+          "anyOf": [
+            {
+              "type": "integer",
+              "minimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Output tokens summed across all attempts; null when no harness reported them."
+        },
+        "cachedInputTokens": {
+          "anyOf": [
+            {
+              "type": "integer",
+              "minimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Cached input tokens summed across all attempts; null when no harness reported them."
+        },
+        "outputConformance": {
+          "anyOf": [
+            {
+              "type": "string",
+              "enum": [
+                "passed",
+                "failed"
+              ]
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Structured-output conformance receipt (passed/failed); null when the run had no outputSchema."
+        },
+        "authRoute": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "requested": {
+                  "type": "string",
+                  "enum": [
+                    "subscription",
+                    "api_key",
+                    "auto"
+                  ],
+                  "description": "Preferred auth route: subscription (native/OAuth session), api_key (a stored API key), or auto (engine picks subscription-first with policy fallback). A preference, not a secret."
+                },
+                "effective": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "enum": [
+                        "local_session",
+                        "api_key",
+                        "unknown"
+                      ],
+                      "description": "Auth mode a route runs under: a native local session, an API key, or unknown."
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Auth mode a route runs under: a native local session, an API key, or unknown.",
+                  "default": null
+                },
+                "source": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "enum": [
+                        "native_session",
+                        "oauth_token_env",
+                        "api_key_env",
+                        "api_key_flag",
+                        "provider_auth_file",
+                        "none"
+                      ],
+                      "description": "Concrete credential source used or probed by a harness."
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Concrete credential source used or probed by a harness.",
+                  "default": null
+                },
+                "reason": {
+                  "type": "string",
+                  "enum": [
+                    "as_requested",
+                    "native_first",
+                    "no_native_session_fallback",
+                    "requested_route_unavailable",
+                    "undisclosed"
+                  ],
+                  "description": "Deterministic reason for the effective auth route: as_requested, native_first (auto, INV-061), no_native_session_fallback (auto downgraded to api_key), requested_route_unavailable (explicit preference contradicted), or undisclosed."
+                },
+                "harnessId": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "default": null
+                },
+                "attemptId": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "default": null
+                },
+                "modelMismatch": {
+                  "anyOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "requested": {
+                          "type": "string"
+                        },
+                        "observed": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "requested",
+                        "observed"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "default": null,
+                  "description": "Requested-vs-observed model mismatch; null when none."
+                }
+              },
+              "required": [
+                "requested",
+                "reason"
+              ],
+              "additionalProperties": false
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Auth route receipt (requested/effective/source/reason + disclosing attempt), projected verbatim from telemetry; null when unavailable."
+        },
         "access": {
           "type": "string",
           "enum": [
@@ -483,7 +650,10 @@
             "properties": {
               "capability": {
                 "type": "string",
-                "const": "browser"
+                "enum": [
+                  "browser",
+                  "path_deny"
+                ]
               },
               "harness_id": {
                 "type": "string",
@@ -505,7 +675,8 @@
                   "effective",
                   "manifest_unsupported",
                   "web_policy_off",
-                  "access_profile_incompatible"
+                  "access_profile_incompatible",
+                  "postdiff_only"
                 ]
               },
               "evidence_refs": {

package/generated/ControlSettingsSnapshot.schema.json

@@ -338,6 +338,16 @@
                 "$ref": "#/definitions/ControlSettingsSnapshot/properties/routing/properties/authPreference",
                 "default": "auto",
                 "description": "Preferred auth route: subscription (native/OAuth session), api_key (a stored API key), or auto (engine picks subscription-first with policy fallback). A preference, not a secret."
+              },
+              "profileLimitAction": {
+                "type": "string",
+                "enum": [
+                  "fail",
+                  "ask",
+                  "rotate"
+                ],
+                "default": "fail",
+                "description": "Profile-selection limit action: fail (stop), ask (record), rotate (auto-switch to the next eligible account)."
               }
             },
             "additionalProperties": false,

package/generated/ControlSettingsUpdateRequest.schema.json

@@ -262,6 +262,15 @@
               "authPreference": {
                 "$ref": "#/definitions/ControlSettingsUpdateRequest/properties/authPreference",
                 "description": "New auth route preference."
+              },
+              "profileLimitAction": {
+                "type": "string",
+                "enum": [
+                  "fail",
+                  "ask",
+                  "rotate"
+                ],
+                "description": "New profile-selection limit action (fail | ask | rotate)."
               }
             },
             "additionalProperties": false,

package/generated/ControlSetupJob.schema.json

@@ -23,6 +23,14 @@
           "const": "login",
           "description": "The daemon-managed native-login action."
         },
+        "profileId": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Registered profile this login targets; null = the default session."
+        },
         "state": {
           "type": "string",
           "enum": [

package/generated/ControlSetupJobCreateRequest.schema.json

@@ -21,6 +21,11 @@
         "authRequest": {
           "type": "string",
           "const": "subscription"
+        },
+        "profileId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Registered config_dir_login profile to log in; absent = the default session."
         }
       },
       "required": [

package/generated/ControlSetupJobEvent.schema.json

@@ -88,6 +88,14 @@
               "const": "login",
               "description": "The daemon-managed native-login action."
             },
+            "profileId": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Registered profile this login targets; null = the default session."
+            },
             "state": {
               "$ref": "#/definitions/ControlSetupJobEvent/properties/state"
             },

package/generated/ControlSetupJobListResponse.schema.json

@@ -28,6 +28,14 @@
                 "const": "login",
                 "description": "The daemon-managed native-login action."
               },
+              "profileId": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "default": null,
+                "description": "Registered profile this login targets; null = the default session."
+              },
               "state": {
                 "type": "string",
                 "enum": [

package/generated/ControlSetupJobSnapshot.schema.json

@@ -26,6 +26,14 @@
               "const": "login",
               "description": "The daemon-managed native-login action."
             },
+            "profileId": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Registered profile this login targets; null = the default session."
+            },
             "state": {
               "type": "string",
               "enum": [

package/generated/ControlThread.schema.json

@@ -71,6 +71,20 @@
           "default": [],
           "description": "Sticky eligible harness pool; empty = the engine auto-pools."
         },
+        "credentialProfileId": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Sticky credential profile for the thread; per-turn selection wins, null = engine-default credentials.",
+          "default": null
+        },
         "state": {
           "type": "string",
           "enum": [
@@ -101,9 +115,7 @@
         "runIds": {
           "type": "array",
           "items": {
-            "type": "string",
-            "minLength": 1,
-            "description": "Non-empty identifier string."
+            "$ref": "#/definitions/ControlThread/properties/credentialProfileId/anyOf/0"
           },
           "default": [],
           "description": "Ordered run lineage of the thread."
@@ -111,7 +123,7 @@
         "headRunId": {
           "anyOf": [
             {
-              "$ref": "#/definitions/ControlThread/properties/runIds/items"
+              "$ref": "#/definitions/ControlThread/properties/credentialProfileId/anyOf/0"
             },
             {
               "type": "null"

package/generated/ControlThreadCreateRequest.schema.json

@@ -85,16 +85,20 @@
           ],
           "description": "Per-thread auth preference override."
         },
-        "primaryHarness": {
+        "credentialProfileId": {
           "type": "string",
           "minLength": 1,
           "pattern": "\\S",
+          "description": "Sticky credential profile for the thread (INV-135); per-turn selection wins."
+        },
+        "primaryHarness": {
+          "$ref": "#/definitions/ControlThreadCreateRequest/properties/credentialProfileId",
           "description": "Sticky primary harness for the thread."
         },
         "eligibleHarnesses": {
           "type": "array",
           "items": {
-            "$ref": "#/definitions/ControlThreadCreateRequest/properties/primaryHarness"
+            "$ref": "#/definitions/ControlThreadCreateRequest/properties/credentialProfileId"
           },
           "description": "Sticky eligible harness pool; turns inherit it when unset."
         }

package/generated/ControlThreadDetail.schema.json

@@ -74,6 +74,20 @@
               "default": [],
               "description": "Sticky eligible harness pool; empty = the engine auto-pools."
             },
+            "credentialProfileId": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Non-empty identifier string."
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Sticky credential profile for the thread; per-turn selection wins, null = engine-default credentials.",
+              "default": null
+            },
             "state": {
               "type": "string",
               "enum": [
@@ -104,9 +118,7 @@
             "runIds": {
               "type": "array",
               "items": {
-                "type": "string",
-                "minLength": 1,
-                "description": "Non-empty identifier string."
+                "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/credentialProfileId/anyOf/0"
               },
               "default": [],
               "description": "Ordered run lineage of the thread."
@@ -114,7 +126,7 @@
             "headRunId": {
               "anyOf": [
                 {
-                  "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/runIds/items"
+                  "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/credentialProfileId/anyOf/0"
                 },
                 {
                   "type": "null"
@@ -181,6 +193,18 @@
                 "default": null,
                 "description": "Model last observed on the session's stream."
               },
+              "profileId": {
+                "anyOf": [
+                  {
+                    "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/credentialProfileId/anyOf/0"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Credential profile the vendor session was created under; resume never crosses profiles (null = engine-default credentials).",
+                "default": null
+              },
               "state": {
                 "type": "string",
                 "enum": [
@@ -221,7 +245,7 @@
               "runId": {
                 "anyOf": [
                   {
-                    "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/runIds/items"
+                    "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/credentialProfileId/anyOf/0"
                   },
                   {
                     "type": "null"
@@ -233,7 +257,7 @@
               "parentRunId": {
                 "anyOf": [
                   {
-                    "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/runIds/items"
+                    "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/credentialProfileId/anyOf/0"
                   },
                   {
                     "type": "null"
@@ -245,7 +269,7 @@
               "planRunId": {
                 "anyOf": [
                   {
-                    "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/runIds/items"
+                    "$ref": "#/definitions/ControlThreadDetail/properties/thread/properties/credentialProfileId/anyOf/0"
                   },
                   {
                     "type": "null"
@@ -435,7 +459,7 @@
                           "number",
                           "null"
                         ],
-                        "description": "Settled spend in USD; null when unknown."
+                        "description": "Settled cash in USD; null when unknown."
                       },
                       "outputReadyState": {
                         "type": "string",

package/generated/ControlThreadListResponse.schema.json

@@ -76,6 +76,20 @@
                 "default": [],
                 "description": "Sticky eligible harness pool; empty = the engine auto-pools."
               },
+              "credentialProfileId": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Non-empty identifier string."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Sticky credential profile for the thread; per-turn selection wins, null = engine-default credentials.",
+                "default": null
+              },
               "state": {
                 "type": "string",
                 "enum": [
@@ -106,9 +120,7 @@
               "runIds": {
                 "type": "array",
                 "items": {
-                  "type": "string",
-                  "minLength": 1,
-                  "description": "Non-empty identifier string."
+                  "$ref": "#/definitions/ControlThreadListResponse/properties/threads/items/properties/credentialProfileId/anyOf/0"
                 },
                 "default": [],
                 "description": "Ordered run lineage of the thread."
@@ -116,7 +128,7 @@
               "headRunId": {
                 "anyOf": [
                   {
-                    "$ref": "#/definitions/ControlThreadListResponse/properties/threads/items/properties/runIds/items"
+                    "$ref": "#/definitions/ControlThreadListResponse/properties/threads/items/properties/credentialProfileId/anyOf/0"
                   },
                   {
                     "type": "null"

package/generated/ControlThreadTurnRequest.schema.json

@@ -9,6 +9,10 @@
           "default": "",
           "description": "The user's prompt for the run."
         },
+        "instructions": {
+          "type": "string",
+          "description": "System-level instructions layered onto every task-producing lane; delivered natively (append-system-prompt / developer_instructions) or as a delimited prompt prefix."
+        },
         "attachments": {
           "type": "array",
           "items": {
@@ -350,6 +354,18 @@
           ],
           "description": "Per-run auth route override."
         },
+        "credentialProfileId": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Explicit per-run credential profile id; null FORCES the engine-default ladder past a thread-sticky profile; unknown/disabled ids refuse, never default."
+        },
         "autonomy": {
           "type": "string",
           "enum": [
@@ -363,6 +379,30 @@
           "type": "integer",
           "exclusiveMinimum": 0,
           "description": "Cap on orchestrate plan tool calls; only meaningful for mode=orchestrate."
+        },
+        "maxSeconds": {
+          "type": "integer",
+          "exclusiveMinimum": 0,
+          "maximum": 604800,
+          "description": "Hard wall-clock deadline for the whole run (seconds, from scheduler start, max 7 days); on expiry the run is cancelled with reason wall_clock_exceeded and partial artifacts are kept."
+        },
+        "denyPaths": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "Per-run globs no candidate may touch at all; envelope-only (in-place runs are refused), enforced by the engine post-diff gate, disclosed per lane via path_deny receipts. accept_risk may still deliver (INV-111)."
+        },
+        "outputSchema": {
+          "type": "object",
+          "additionalProperties": {},
+          "description": "JSON Schema for the run's final answer; mandatory (incapable lane => preflight refusal), engine-validated into final/output.json with a typed outputConformance receipt."
+        },
+        "maxTurns": {
+          "type": "integer",
+          "exclusiveMinimum": 0,
+          "description": "Per-run turn cap (beats per-harness settings)."
         }
       },
       "additionalProperties": false,

package/generated/ControlThreadUpdateRequest.schema.json

@@ -30,6 +30,17 @@
           ],
           "description": "New sticky primary harness; null clears back to engine routing."
         },
+        "credentialProfileId": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ControlThreadUpdateRequest/properties/primaryHarness/anyOf/0"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "New sticky credential profile; null clears back to engine-default credentials."
+        },
         "eligibleHarnesses": {
           "type": "array",
           "items": {