@claudexor/schema 2.0.0 → 2.1.2

package/generated/RunTelemetry.schema.json

@@ -206,6 +206,43 @@
                 "description": "Auth route the attempt actually ran under (local_session subscription vs api_key), disclosed by the adapter's typed started payload; null when never disclosed (treated as unknown, never guessed).",
                 "default": null
               },
+              "auth_source": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "native_session",
+                      "oauth_token_env",
+                      "api_key_env",
+                      "api_key_flag",
+                      "provider_auth_file",
+                      "none"
+                    ],
+                    "description": "Concrete credential source used or probed by a harness."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Concrete credential source the attempt disclosed (native_session/api_key_env/...); null when never disclosed.",
+                "default": null
+              },
+              "profile_id": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "default": null,
+                "description": "Credential profile the attempt actually ran under (adapter-stamped); null = engine default or undisclosed."
+              },
+              "requested_model": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "default": null,
+                "description": "Model hint the engine sent the attempt; null when the route ran on its default."
+              },
               "request_requirements": {
                 "type": "array",
                 "items": {
@@ -213,7 +250,10 @@
                   "properties": {
                     "capability": {
                       "type": "string",
-                      "const": "browser"
+                      "enum": [
+                        "browser",
+                        "path_deny"
+                      ]
                     },
                     "harness_id": {
                       "type": "string",
@@ -235,7 +275,8 @@
                         "effective",
                         "manifest_unsupported",
                         "web_policy_off",
-                        "access_profile_incompatible"
+                        "access_profile_incompatible",
+                        "postdiff_only"
                       ]
                     },
                     "evidence_refs": {
@@ -460,6 +501,50 @@
                 "additionalProperties": false,
                 "description": "Contract/outcome truth for one attempt; tool errors are tracked separately from deliverable production.",
                 "default": {}
+              },
+              "usage": {
+                "type": "object",
+                "properties": {
+                  "input_tokens": {
+                    "anyOf": [
+                      {
+                        "type": "integer",
+                        "minimum": 0
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "default": null
+                  },
+                  "output_tokens": {
+                    "anyOf": [
+                      {
+                        "type": "integer",
+                        "minimum": 0
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "default": null
+                  },
+                  "cached_input_tokens": {
+                    "anyOf": [
+                      {
+                        "type": "integer",
+                        "minimum": 0
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "default": null
+                  }
+                },
+                "additionalProperties": false,
+                "description": "Token usage summed from harness usage events; money is tracked separately in the budget ledger, not here. Each field is null until a harness reports it (cursor reports cost only; raw-api has no cached), so unreported never reads as 0. Do NOT sum into a grand total: codex cached is a subset of input while claude cached is disjoint from input.",
+                "default": {}
               }
             },
             "required": [
@@ -487,6 +572,121 @@
           "default": 0,
           "description": "Sum of attempt tool warnings; rendered separately from terminal state."
         },
+        "usage_totals": {
+          "$ref": "#/definitions/RunTelemetry/properties/attempts/items/properties/usage",
+          "default": {},
+          "description": "Token usage summed from harness usage events; money is tracked separately in the budget ledger, not here. Each field is null until a harness reports it (cursor reports cost only; raw-api has no cached), so unreported never reads as 0. Do NOT sum into a grand total: codex cached is a subset of input while claude cached is disjoint from input."
+        },
+        "auth_route": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "requested": {
+                  "type": "string",
+                  "enum": [
+                    "subscription",
+                    "api_key",
+                    "auto"
+                  ],
+                  "description": "Preferred auth route: subscription (native/OAuth session), api_key (a stored API key), or auto (engine picks subscription-first with policy fallback). A preference, not a secret."
+                },
+                "effective": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/definitions/RunTelemetry/properties/attempts/items/properties/auth_mode/anyOf/0"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Auth mode a route runs under: a native local session, an API key, or unknown.",
+                  "default": null
+                },
+                "source": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/definitions/RunTelemetry/properties/attempts/items/properties/auth_source/anyOf/0"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Concrete credential source used or probed by a harness.",
+                  "default": null
+                },
+                "reason": {
+                  "type": "string",
+                  "enum": [
+                    "as_requested",
+                    "native_first",
+                    "no_native_session_fallback",
+                    "requested_route_unavailable",
+                    "undisclosed"
+                  ],
+                  "description": "Deterministic reason for the effective auth route: as_requested, native_first (auto, INV-061), no_native_session_fallback (auto downgraded to api_key), requested_route_unavailable (explicit preference contradicted), or undisclosed."
+                },
+                "harness_id": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "default": null
+                },
+                "attempt_id": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "default": null
+                },
+                "profile_id": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "default": null,
+                  "description": "Credential profile the deciding attempt ran under; null = engine-default credentials."
+                },
+                "model_mismatch": {
+                  "anyOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "requested": {
+                          "type": "string"
+                        },
+                        "observed": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "requested",
+                        "observed"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "default": null,
+                  "description": "Requested-vs-observed model mismatch on the deciding attempt; null when they match or either side is unknown."
+                }
+              },
+              "required": [
+                "requested",
+                "reason"
+              ],
+              "additionalProperties": false
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Auth route receipt: requested preference, disclosed effective route/source, deterministic reason, and the disclosing attempt; surfaces project it verbatim."
+        },
         "generated_at": {
           "type": "string",
           "minLength": 1,

package/generated/Session.schema.json

@@ -36,6 +36,20 @@
           "description": "How the session can be continued on its native CLI: resume_by_id when a native session id exists, none otherwise.",
           "default": "none"
         },
+        "profile_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Credential profile the vendor session was created under; resume never crosses profiles (null = engine-default credentials).",
+          "default": null
+        },
         "last_observed_model": {
           "type": [
             "string",

package/generated/TaskContract.schema.json

@@ -90,12 +90,65 @@
           "additionalProperties": false,
           "description": "The user's request this run is held to."
         },
+        "instructions": {
+          "type": "string",
+          "description": "Caller-supplied per-run system-level instructions for task-producing lanes."
+        },
+        "output_schema": {
+          "anyOf": [
+            {
+              "type": "object",
+              "additionalProperties": {}
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Normalized caller-supplied JSON Schema for the final answer; null when the run has no structured-output contract."
+        },
+        "auth_preference": {
+          "type": "string",
+          "enum": [
+            "subscription",
+            "api_key",
+            "auto"
+          ],
+          "description": "Requested auth route for the run (subscription/api_key/auto); the telemetry auth_route receipt carries the effective truth.",
+          "default": "auto"
+        },
+        "credential_profile_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Requested credential profile for the run; null = engine-default credentials (INV-135 route evidence).",
+          "default": null
+        },
+        "max_turns": {
+          "anyOf": [
+            {
+              "type": "integer",
+              "exclusiveMinimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Per-run turn cap (beats per-harness settings); null when the caller set none."
+        },
         "spec": {
           "type": "object",
           "properties": {
             "id": {
-              "type": "string",
-              "minLength": 1,
+              "$ref": "#/definitions/TaskContract/properties/credential_profile_id/anyOf/0",
               "description": "SpecPack id."
             },
             "hash": {
@@ -187,7 +240,7 @@
                       "depends_on": {
                         "type": "array",
                         "items": {
-                          "$ref": "#/definitions/TaskContract/properties/spec/properties/id"
+                          "$ref": "#/definitions/TaskContract/properties/credential_profile_id/anyOf/0"
                         },
                         "default": [],
                         "description": "Ids of tasks this node depends on (graph edges)."
@@ -205,7 +258,7 @@
                 "order": {
                   "type": "array",
                   "items": {
-                    "$ref": "#/definitions/TaskContract/properties/spec/properties/id"
+                    "$ref": "#/definitions/TaskContract/properties/credential_profile_id/anyOf/0"
                   },
                   "default": [],
                   "description": "Topological execution order (node ids); empty when there are no tasks."
@@ -232,6 +285,14 @@
               "default": [],
               "description": "Spec/config-owned globs whose changes escalate risk to a human-approval gate; cannot be suppressed by per-run protected-path approvals."
             },
+            "deny_paths": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "default": [],
+              "description": "Per-run globs no candidate may touch at all; enforced by the engine post-diff gate on envelope runs (in-place runs with deny_paths are refused). accept_risk may still deliver (INV-111)."
+            },
             "auto_protected_paths": {
               "type": "array",
               "items": {

package/generated/Thread.schema.json

@@ -81,6 +81,20 @@
           "description": "Preferred auth route: subscription (native/OAuth session), api_key (a stored API key), or auto (engine picks subscription-first with policy fallback). A preference, not a secret.",
           "default": "auto"
         },
+        "credential_profile_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Sticky credential profile for the thread; per-turn selection wins, null = engine-default credentials.",
+          "default": null
+        },
         "primary_harness": {
           "type": [
             "string",
@@ -128,9 +142,7 @@
             "delivered_through_run_id": {
               "anyOf": [
                 {
-                  "type": "string",
-                  "minLength": 1,
-                  "description": "Non-empty identifier string."
+                  "$ref": "#/definitions/Thread/properties/credential_profile_id/anyOf/0"
                 },
                 {
                   "type": "null"
@@ -147,7 +159,7 @@
         "run_ids": {
           "type": "array",
           "items": {
-            "$ref": "#/definitions/Thread/properties/workspace/properties/delivered_through_run_id/anyOf/0"
+            "$ref": "#/definitions/Thread/properties/credential_profile_id/anyOf/0"
           },
           "default": [],
           "description": "Ordered run lineage (each run is a turn move)."
@@ -155,7 +167,7 @@
         "head_run_id": {
           "anyOf": [
             {
-              "$ref": "#/definitions/Thread/properties/workspace/properties/delivered_through_run_id/anyOf/0"
+              "$ref": "#/definitions/Thread/properties/credential_profile_id/anyOf/0"
             },
             {
               "type": "null"

package/generated/ThreadHeadPing.schema.json

@@ -0,0 +1,40 @@
+{
+  "$ref": "#/definitions/ThreadHeadPing",
+  "definitions": {
+    "ThreadHeadPing": {
+      "type": "object",
+      "properties": {
+        "thread_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Non-empty identifier string."
+        },
+        "project_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Owning project id, or null for a no-project (global-partition) thread."
+        },
+        "revision": {
+          "type": "integer",
+          "exclusiveMinimum": 0,
+          "description": "Monotonic per-thread mutation counter; consumers drop stale/duplicate pings."
+        }
+      },
+      "required": [
+        "thread_id",
+        "project_id",
+        "revision"
+      ],
+      "additionalProperties": false,
+      "description": "Payload of the `thread.head.updated` GLOBAL-partition journal event: a content-free sidebar invalidation ping emitted on every thread mutation (create / rename / archive / turn-add / run-terminal, from any surface). It carries identity only — consumers refetch the authoritative thread summary instead of trusting event content."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/schema",
-  "version": "2.0.0",
+  "version": "2.1.2",
   "license": "MIT",
   "description": "Single source of truth for all Claudexor data shapes (Zod + generated JSON Schema).",
   "type": "module",
@@ -19,7 +19,8 @@
   ],
   "dependencies": {
     "zod": "^3.24.1",
-    "zod-to-json-schema": "^3.24.1"
+    "zod-to-json-schema": "^3.24.1",
+    "@claudexor/util": "2.1.2"
   },
   "repository": {
     "type": "git",