@claudexor/schema 2.0.0 → 2.1.2

package/generated/CredentialProfile.schema.json

@@ -0,0 +1,78 @@
+{
+  "$ref": "#/definitions/CredentialProfile",
+  "definitions": {
+    "CredentialProfile": {
+      "type": "object",
+      "properties": {
+        "profile_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Stable user-chosen profile identifier (unique per harness)."
+        },
+        "harness_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Harness family this profile belongs to."
+        },
+        "display_name": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Human label shown wherever the profile appears."
+        },
+        "credential_kind": {
+          "type": "string",
+          "enum": [
+            "config_dir_login",
+            "oauth_token",
+            "api_key"
+          ],
+          "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+        },
+        "isolation_locator": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+        },
+        "secret_ref": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Namespaced secret-store name (e.g. claude_oauth:work) for oauth_token/api_key profiles; null for config_dir_login."
+        },
+        "enabled": {
+          "type": "boolean",
+          "default": true,
+          "description": "Disabled profiles are never routable."
+        },
+        "created_at": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "ISO-8601 timestamp string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "When the profile was registered; null for hand-written config entries.",
+          "default": null
+        }
+      },
+      "required": [
+        "profile_id",
+        "harness_id",
+        "display_name",
+        "credential_kind"
+      ],
+      "additionalProperties": false,
+      "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/CredentialProfileStatus.schema.json

@@ -0,0 +1,61 @@
+{
+  "$ref": "#/definitions/CredentialProfileStatus",
+  "definitions": {
+    "CredentialProfileStatus": {
+      "type": "object",
+      "properties": {
+        "profile_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Non-empty identifier string."
+        },
+        "harness_id": {
+          "$ref": "#/definitions/CredentialProfileStatus/properties/profile_id"
+        },
+        "availability": {
+          "type": "string",
+          "enum": [
+            "available",
+            "unavailable",
+            "unknown"
+          ]
+        },
+        "verification": {
+          "type": "string",
+          "enum": [
+            "passed",
+            "failed",
+            "not_run"
+          ]
+        },
+        "detail": {
+          "type": "string",
+          "description": "Redacted human-readable probe evidence."
+        },
+        "last_verified_at": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "ISO-8601 timestamp string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "When a probe last verified this profile; null = never verified.",
+          "default": null
+        }
+      },
+      "required": [
+        "profile_id",
+        "harness_id",
+        "availability",
+        "verification"
+      ],
+      "additionalProperties": false,
+      "description": "Doctor-owned readiness projection for one credential profile; never durable config."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/GlobalConfig.schema.json

@@ -248,6 +248,109 @@
           "default": {},
           "description": "Global runtime timeouts and retry policy."
         },
+        "retention": {
+          "type": "object",
+          "properties": {
+            "runs_max_age_days": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "default": 30,
+              "description": "Delete terminal, unreferenced run trees older than this many days."
+            },
+            "reviews_max_age_days": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "default": 14,
+              "description": "Delete standalone diff-review trees older than this many days."
+            },
+            "keep_last_runs_per_project": {
+              "type": "integer",
+              "minimum": 0,
+              "default": 20,
+              "description": "The newest N runs per project always survive, regardless of age."
+            }
+          },
+          "additionalProperties": false,
+          "default": {},
+          "description": "Disk retention policy for engine-owned runtime artifacts."
+        },
+        "credential_profiles": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "profile_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Stable user-chosen profile identifier (unique per harness)."
+              },
+              "harness_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Harness family this profile belongs to."
+              },
+              "display_name": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Human label shown wherever the profile appears."
+              },
+              "credential_kind": {
+                "type": "string",
+                "enum": [
+                  "config_dir_login",
+                  "oauth_token",
+                  "api_key"
+                ],
+                "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+              },
+              "isolation_locator": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "default": null,
+                "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+              },
+              "secret_ref": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "default": null,
+                "description": "Namespaced secret-store name (e.g. claude_oauth:work) for oauth_token/api_key profiles; null for config_dir_login."
+              },
+              "enabled": {
+                "type": "boolean",
+                "default": true,
+                "description": "Disabled profiles are never routable."
+              },
+              "created_at": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "ISO-8601 timestamp string."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "When the profile was registered; null for hand-written config entries.",
+                "default": null
+              }
+            },
+            "required": [
+              "profile_id",
+              "harness_id",
+              "display_name",
+              "credential_kind"
+            ],
+            "additionalProperties": false,
+            "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+          },
+          "default": [],
+          "description": "Durable non-secret credential-profile registry; secret material lives in the vendor dir or the secret store, never in config."
+        },
         "harnesses": {
           "type": "object",
           "additionalProperties": {
@@ -304,6 +407,39 @@
                 "default": null,
                 "description": "Default max convergence rounds; null = engine default."
               },
+              "profile_policy": {
+                "type": "object",
+                "properties": {
+                  "limit_action": {
+                    "type": "string",
+                    "enum": [
+                      "fail",
+                      "ask",
+                      "rotate"
+                    ],
+                    "default": "fail",
+                    "description": "On a typed vendor limit: fail the attempt, surface a typed ask, or rotate to the next eligible profile."
+                  },
+                  "rotation_eligible": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "default": [],
+                    "description": "Priority-ordered profile ids eligible for rotation; empty = every enabled profile of this harness in registry order."
+                  },
+                  "headroom_threshold": {
+                    "type": "number",
+                    "minimum": 0,
+                    "maximum": 1,
+                    "default": 0.9,
+                    "description": "Preflight headroom bound: a selected profile whose active window is at/over this ratio triggers the limit action BEFORE spawn."
+                  }
+                },
+                "additionalProperties": false,
+                "default": {},
+                "description": "Typed profile-selection policy for this harness (INV-135)."
+              },
               "tools_allow": {
                 "type": "array",
                 "items": {

package/generated/HarnessEvent.schema.json

@@ -17,9 +17,10 @@
             "patch_produced",
             "usage",
             "error",
+            "status",
             "completed"
           ],
-          "description": "Normalized event type covering session lifecycle, output, tool use, interaction, file changes, usage, and errors."
+          "description": "Normalized event type covering session lifecycle, output, tool use, interaction, file changes, usage, transient status, and errors."
         },
         "session_id": {
           "type": "string",
@@ -34,6 +35,10 @@
           "type": "string",
           "description": "Text content for thinking/message/error events."
         },
+        "final": {
+          "type": "boolean",
+          "description": "True on the harness's typed final-answer message (vendor terminal result); mid-run narration never sets it."
+        },
         "tool": {
           "type": "object",
           "properties": {
@@ -317,6 +322,11 @@
           ],
           "description": "Concrete credential source selected before spawn; exact native subscription requires native_session, never an OAuth token or API key."
         },
+        "credential_profile_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Credential profile the attempt runs under; absent = engine-default credentials (INV-135 attribution)."
+        },
         "quota": {
           "type": "object",
           "properties": {
@@ -326,7 +336,8 @@
                 "codex_app_server",
                 "codex_rollout",
                 "claude_statusline",
-                "claude_api_retry"
+                "claude_api_retry",
+                "claude_oauth_usage"
               ],
               "description": "Vendor-owned machine-readable source of a quota snapshot."
             },
@@ -350,9 +361,7 @@
                 "type": "object",
                 "properties": {
                   "id": {
-                    "type": "string",
-                    "minLength": 1,
-                    "description": "Non-empty identifier string."
+                    "$ref": "#/definitions/HarnessEvent/properties/credential_profile_id"
                   },
                   "label": {
                     "type": "string",
@@ -492,6 +501,54 @@
           "additionalProperties": false,
           "description": "Typed rate-limit/quota signal set by the adapter when the native CLI reports a 429/quota/overload."
         },
+        "status": {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "enum": [
+                "api_retry"
+              ],
+              "description": "Kind of transient status."
+            },
+            "attempt": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Retry attempt number."
+            },
+            "max_retries": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Vendor's configured retry ceiling."
+            },
+            "retry_delay_ms": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Delay before the retry, when reported."
+            },
+            "error_category": {
+              "type": "string",
+              "enum": [
+                "authentication_failed",
+                "oauth_org_not_allowed",
+                "billing_error",
+                "rate_limit",
+                "overloaded",
+                "invalid_request",
+                "model_not_found",
+                "server_error",
+                "max_output_tokens",
+                "unknown"
+              ],
+              "description": "Vendor's error category mapped onto the documented enum; unrecognized values collapse to 'unknown' (never free-form prose)."
+            }
+          },
+          "required": [
+            "kind"
+          ],
+          "additionalProperties": false,
+          "description": "Typed transient-status detail set by the adapter on status events."
+        },
         "transient": {
           "type": "object",
           "properties": {

package/generated/HarnessManifest.schema.json

@@ -340,10 +340,41 @@
             "known_models": {
               "type": "array",
               "items": {
-                "type": "string"
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Model id/alias."
+                      },
+                      "routes": {
+                        "type": "array",
+                        "items": {
+                          "type": "string",
+                          "enum": [
+                            "local_session",
+                            "api_key"
+                          ]
+                        },
+                        "minItems": 1,
+                        "description": "Credential routes this model is available on."
+                      }
+                    },
+                    "required": [
+                      "id",
+                      "routes"
+                    ],
+                    "additionalProperties": false
+                  }
+                ]
               },
               "default": [],
-              "description": "Manifest-declared model ids/aliases this harness accepts, used as the model truth source when the adapter has no live inventory; explicit models outside the truth source are refused."
+              "description": "Manifest-declared model ids/aliases this harness accepts (bare string = every credential route; object form scopes a model to specific routes), used as the model truth source when the adapter has no live inventory; explicit models outside the truth source are refused."
             },
             "known_models_verified_against": {
               "type": [

package/generated/HarnessModel.schema.json

@@ -28,6 +28,25 @@
           ],
           "default": null,
           "description": "Context window in tokens; null when the enumeration source does not report it."
+        },
+        "routes": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "enum": [
+                  "local_session",
+                  "api_key"
+                ]
+              }
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Credential routes the model is scoped to; null = every route."
         }
       },
       "required": [

package/generated/HarnessStatusDto.schema.json

@@ -358,10 +358,41 @@
                     "known_models": {
                       "type": "array",
                       "items": {
-                        "type": "string"
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "object",
+                            "properties": {
+                              "id": {
+                                "type": "string",
+                                "minLength": 1,
+                                "description": "Model id/alias."
+                              },
+                              "routes": {
+                                "type": "array",
+                                "items": {
+                                  "type": "string",
+                                  "enum": [
+                                    "local_session",
+                                    "api_key"
+                                  ]
+                                },
+                                "minItems": 1,
+                                "description": "Credential routes this model is available on."
+                              }
+                            },
+                            "required": [
+                              "id",
+                              "routes"
+                            ],
+                            "additionalProperties": false
+                          }
+                        ]
                       },
                       "default": [],
-                      "description": "Manifest-declared model ids/aliases this harness accepts, used as the model truth source when the adapter has no live inventory; explicit models outside the truth source are refused."
+                      "description": "Manifest-declared model ids/aliases this harness accepts (bare string = every credential route; object form scopes a model to specific routes), used as the model truth source when the adapter has no live inventory; explicit models outside the truth source are refused."
                     },
                     "known_models_verified_against": {
                       "type": [
@@ -428,6 +459,14 @@
           "default": [],
           "description": "Intents the gateway will route to this harness."
         },
+        "routableIntents": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "default": [],
+          "description": "Intents the harness is actually routable for right now (doctor-gated); the server-side availability truth surfaces must read instead of re-deriving."
+        },
         "disabledIntents": {
           "type": "array",
           "items": {
@@ -522,6 +561,60 @@
           "default": [],
           "description": "Doctor-backed readiness by authentication source; an empty array means readiness was not reported."
         },
+        "readiness": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string",
+                "description": "Stable machine id of the check (adapter probe id or auth source)."
+              },
+              "kind": {
+                "type": "string",
+                "enum": [
+                  "binary",
+                  "auth",
+                  "smoke",
+                  "model",
+                  "probe"
+                ],
+                "description": "What KIND of readiness this is: binary presence, credential source, isolated smoke, configured-model validity, or a generic capability probe."
+              },
+              "title": {
+                "type": "string",
+                "description": "Human display name of the check."
+              },
+              "status": {
+                "type": "string",
+                "enum": [
+                  "pass",
+                  "fail",
+                  "skip"
+                ],
+                "description": "Outcome; skip = not run / not applicable."
+              },
+              "detail": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "default": null,
+                "description": "Redacted human-readable evidence for the outcome."
+              }
+            },
+            "required": [
+              "id",
+              "kind",
+              "title",
+              "status"
+            ],
+            "additionalProperties": false,
+            "description": "One display-ready readiness check row (daemon-normalized)."
+          },
+          "default": [],
+          "description": "Display-ready readiness checks, daemon-normalized from the raw evidence."
+        },
         "configuredModel": {
           "type": [
             "string",

package/generated/RunEvent.schema.json

@@ -37,6 +37,7 @@
             "project.git.initialized",
             "budget.lease.created",
             "budget.observation",
+            "budget.cash",
             "policy.web.upgraded",
             "harness.started",
             "harness.event",
@@ -46,6 +47,8 @@
             "route.fallback.exhausted",
             "route.transient.detected",
             "route.transient.retry_scheduled",
+            "route.profile.headroom_exceeded",
+            "route.profile.rotated",
             "route.transient.exhausted",
             "route.fallback.auth_switched",
             "session.rebound",