@claudexor/schema 2.1.2 → 3.0.0

package/generated/ContinuityDisclosure.schema.json

@@ -0,0 +1,74 @@
+{
+  "$ref": "#/definitions/ContinuityDisclosure",
+  "definitions": {
+    "ContinuityDisclosure": {
+      "type": "object",
+      "properties": {
+        "kind": {
+          "type": "string",
+          "enum": [
+            "native_resume",
+            "packet",
+            "fresh"
+          ],
+          "description": "How a turn's lane was continued: native_resume (the lane's own vendor session already held the delta), packet (a continuation packet hydrated a lane switch/gap), or fresh (nothing to carry — the thread's first turn on any lane)."
+        },
+        "packet_turns": {
+          "type": "integer",
+          "minimum": 0,
+          "default": 0,
+          "description": "Number of delta turns carried in the continuation packet (0 for native_resume/fresh)."
+        },
+        "summarized": {
+          "type": "boolean",
+          "default": false,
+          "description": "True when the packet collapsed an older prefix to one-line entries (mechanical fallback)."
+        },
+        "lane_switched_from": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "harness_id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Harness of the prior lane."
+                },
+                "profile_id": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "minLength": 1,
+                      "description": "Non-empty identifier string."
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Credential profile of the prior lane (null = engine default).",
+                  "default": null
+                }
+              },
+              "required": [
+                "harness_id"
+              ],
+              "additionalProperties": false,
+              "description": "A (harness, profile) lane reference; the null profile is the engine default."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "The lane this turn switched away from, when the continuation crossed lanes; null otherwise.",
+          "default": null
+        }
+      },
+      "required": [
+        "kind"
+      ],
+      "additionalProperties": false,
+      "description": "How a turn's lane was continued from the conversation (native resume / continuation packet / fresh), disclosed visibly per INV-137."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlApplyRequest.schema.json

@@ -48,14 +48,13 @@
         "mode": {
           "type": "string",
           "enum": [
-            "artifact_only",
             "apply",
             "branch",
             "commit",
             "pr"
           ],
           "default": "apply",
-          "description": "Delivery mode: artifact_only (export only), apply to the tree, or as a branch, commit, or PR."
+          "description": "Delivery mode: apply to the tree, or as a branch, commit, or PR."
         },
         "branch": {
           "type": "string",

package/generated/ControlCredentialProfileUpdateRequest.schema.json

@@ -0,0 +1,20 @@
+{
+  "$ref": "#/definitions/ControlCredentialProfileUpdateRequest",
+  "definitions": {
+    "ControlCredentialProfileUpdateRequest": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Whether this credential profile is routable (the Enabled toggle)."
+        }
+      },
+      "required": [
+        "enabled"
+      ],
+      "additionalProperties": false,
+      "description": "Request body for PATCH /credential-profiles/:harness/:id."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlCredentialProfileUpdateResponse.schema.json

@@ -0,0 +1,142 @@
+{
+  "$ref": "#/definitions/ControlCredentialProfileUpdateResponse",
+  "definitions": {
+    "ControlCredentialProfileUpdateResponse": {
+      "type": "object",
+      "properties": {
+        "profile": {
+          "type": "object",
+          "properties": {
+            "profile_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Stable user-chosen profile identifier (unique per harness)."
+            },
+            "harness_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Harness family this profile belongs to."
+            },
+            "display_name": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Human label shown wherever the profile appears."
+            },
+            "credential_kind": {
+              "type": "string",
+              "enum": [
+                "config_dir_login",
+                "oauth_token",
+                "api_key"
+              ],
+              "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+            },
+            "isolation_locator": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+            },
+            "secret_ref": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Namespaced secret-store name (e.g. claude_oauth:work) for oauth_token/api_key profiles; null for config_dir_login."
+            },
+            "enabled": {
+              "type": "boolean",
+              "default": true,
+              "description": "Disabled profiles are never routable."
+            },
+            "created_at": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "ISO-8601 timestamp string."
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "When the profile was registered; null for hand-written config entries.",
+              "default": null
+            }
+          },
+          "required": [
+            "profile_id",
+            "harness_id",
+            "display_name",
+            "credential_kind"
+          ],
+          "additionalProperties": false,
+          "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+        },
+        "status": {
+          "type": "object",
+          "properties": {
+            "profile_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            },
+            "harness_id": {
+              "$ref": "#/definitions/ControlCredentialProfileUpdateResponse/properties/status/properties/profile_id"
+            },
+            "availability": {
+              "type": "string",
+              "enum": [
+                "available",
+                "unavailable",
+                "unknown"
+              ]
+            },
+            "verification": {
+              "type": "string",
+              "enum": [
+                "passed",
+                "failed",
+                "not_run"
+              ]
+            },
+            "detail": {
+              "type": "string",
+              "description": "Redacted human-readable probe evidence."
+            },
+            "last_verified_at": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ControlCredentialProfileUpdateResponse/properties/profile/properties/created_at/anyOf/0"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "When a probe last verified this profile; null = never verified.",
+              "default": null
+            }
+          },
+          "required": [
+            "profile_id",
+            "harness_id",
+            "availability",
+            "verification"
+          ],
+          "additionalProperties": false,
+          "description": "Doctor-owned readiness projection for one credential profile; never durable config."
+        }
+      },
+      "required": [
+        "profile",
+        "status"
+      ],
+      "additionalProperties": false,
+      "description": "The updated credential profile with its doctor readiness projection."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlCredentialProfilesResponse.schema.json

@@ -133,6 +133,32 @@
                 ],
                 "additionalProperties": false,
                 "description": "Doctor-owned readiness projection for one credential profile; never durable config."
+              },
+              "identity": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "email": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Login email of the account (codex id_token `email` / claude oauthAccount `emailAddress`)."
+                      },
+                      "plan": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Subscription/plan label (codex `chatgpt_plan_type` / claude oauthAccount `organizationType`)."
+                      }
+                    },
+                    "additionalProperties": false,
+                    "description": "Non-secret {email, plan} identity of one account, derived daemon-side from its OWN Claudexor-owned store; never carries token material."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Non-secret {email, plan} of this profile, derived daemon-side from its OWN isolation-locator store; null when absent/undisclosed.",
+                "default": null
               }
             },
             "required": [
@@ -141,14 +167,112 @@
             ],
             "additionalProperties": false
           },
-          "description": "Every registered credential profile paired with its doctor readiness projection."
+          "description": "Every registered credential profile paired with its doctor readiness projection and non-secret identity."
+        },
+        "harnessAccounts": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "harness_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Harness family these accounts belong to."
+              },
+              "native_credentials_enabled": {
+                "type": "boolean",
+                "description": "Whether the native/CLI login participates in this harness's credential ladder."
+              },
+              "native_login_detected": {
+                "type": "boolean",
+                "description": "Whether a native/default vendor login is currently detected available (the CLI login pseudo-row state)."
+              },
+              "identity": {
+                "anyOf": [
+                  {
+                    "$ref": "#/definitions/ControlCredentialProfilesResponse/properties/profiles/items/properties/identity/anyOf/0"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Non-secret {email, plan} of the native/CLI login, derived daemon-side from the Claudexor-owned native store; null when absent/undisclosed.",
+                "default": null
+              },
+              "next_up": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "profile"
+                      },
+                      "profileId": {
+                        "$ref": "#/definitions/ControlCredentialProfilesResponse/properties/profiles/items/properties/status/properties/profile_id"
+                      }
+                    },
+                    "required": [
+                      "kind",
+                      "profileId"
+                    ],
+                    "additionalProperties": false,
+                    "description": "An enabled credential profile is who an unpinned run routes to next."
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "native"
+                      }
+                    },
+                    "required": [
+                      "kind"
+                    ],
+                    "additionalProperties": false,
+                    "description": "The native/CLI login is the default subject of an unpinned run."
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "none"
+                      },
+                      "reason": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "kind",
+                      "reason"
+                    ],
+                    "additionalProperties": false,
+                    "description": "An unpinned run has nothing routable (the CLI login is disabled and no account is pinned)."
+                  }
+                ],
+                "description": "Server-computed identity an unpinned run of this harness would route to next."
+              }
+            },
+            "required": [
+              "harness_id",
+              "native_credentials_enabled",
+              "native_login_detected",
+              "next_up"
+            ],
+            "additionalProperties": false,
+            "description": "Per-harness accounts authority: native CLI-login state + the informational next-up identity."
+          },
+          "default": [],
+          "description": "Per-harness accounts authority (INV-135): the native CLI-login pseudo-row state and the server-computed Active identity, so no surface re-derives the accounts symmetry."
         }
       },
       "required": [
         "profiles"
       ],
       "additionalProperties": false,
-      "description": "Credential-profile registry listing with per-profile doctor readiness."
+      "description": "Credential-profile registry listing with per-profile doctor readiness and per-harness accounts authority."
     }
   },
   "$schema": "http://json-schema.org/draft-07/schema#"

package/generated/ControlDeliveryResponse.schema.json

@@ -7,7 +7,6 @@
         "mode": {
           "type": "string",
           "enum": [
-            "artifact_only",
             "apply",
             "branch",
             "commit",

package/generated/ControlHandshakeResponse.schema.json

@@ -6,7 +6,7 @@
       "properties": {
         "protocolMajor": {
           "type": "number",
-          "const": 2
+          "const": 3
         },
         "compatible": {
           "type": "boolean",
@@ -15,15 +15,43 @@
         "operationsPath": {
           "type": "string",
           "const": "/v2/operations"
+        },
+        "engine": {
+          "type": "object",
+          "properties": {
+            "version": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Lockstep workspace version."
+            },
+            "sha": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Git commit SHA of the build; 'unknown' outside a stamped package or git checkout."
+            },
+            "entry": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Resolved entry path of the serving process."
+            }
+          },
+          "required": [
+            "version",
+            "sha",
+            "entry"
+          ],
+          "additionalProperties": false,
+          "description": "Build identity of the serving engine."
         }
       },
       "required": [
         "protocolMajor",
         "compatible",
-        "operationsPath"
+        "operationsPath",
+        "engine"
       ],
       "additionalProperties": false,
-      "description": "Successful v2 control-plane negotiation."
+      "description": "Successful control-plane negotiation."
     }
   },
   "$schema": "http://json-schema.org/draft-07/schema#"

package/generated/ControlHarnessListResponse.schema.json

@@ -250,11 +250,21 @@
                               "description": "Finite MIME, size, count and transport limits declared by one adapter."
                             },
                             "default": []
+                          },
+                          "mcp_injection": {
+                            "type": "boolean",
+                            "default": false,
+                            "description": "The adapter can inject engine-owned MCP servers into the harness sandbox (browser tool, delegation belt); false = extra_mcp_servers and the delegate toggle are refused."
+                          },
+                          "mcp_injection_requires_full_access": {
+                            "type": "boolean",
+                            "default": false,
+                            "description": "An injected MCP server can only reach the daemon (belt) at full access; below it the harness sandbox cancels the call. true => --delegate below full access is refused for this harness."
                           }
                         },
                         "additionalProperties": false,
                         "default": {},
-                        "description": "Structured per-harness facts the engine consumes: auth routing, isolation containment, readonly mechanism, and finite attachment inputs."
+                        "description": "Structured per-harness facts the engine consumes: auth routing, isolation containment, readonly mechanism, finite attachment inputs, and MCP injection."
                       },
                       "capabilities": {
                         "type": "object",
@@ -334,11 +344,6 @@
                             "default": false,
                             "description": "The adapter can surface interactive user questions (interaction_requested events) and deliver typed answers back into the live session."
                           },
-                          "orchestrate": {
-                            "type": "boolean",
-                            "default": false,
-                            "description": "The harness can play the autonomous orchestrate planner intent, planning multi-harness work over the typed tool belt; not a privileged role."
-                          },
                           "json_schema_output": {
                             "type": "boolean",
                             "default": false,

package/generated/ControlHarnessSettingsPatch.schema.json

@@ -8,6 +8,10 @@
           "type": "boolean",
           "description": "Enable/disable the harness for routing."
         },
+        "nativeCredentialsEnabled": {
+          "type": "boolean",
+          "description": "Whether the native/CLI login participates in this harness's credential ladder."
+        },
         "defaultModel": {
           "anyOf": [
             {

package/generated/ControlOperationCatalog.schema.json

@@ -6,7 +6,7 @@
       "properties": {
         "protocolMajor": {
           "type": "number",
-          "const": 2
+          "const": 3
         },
         "operations": {
           "type": "array",
@@ -31,6 +31,19 @@
                 "type": "string",
                 "pattern": "^\\/v2\\/"
               },
+              "summary": {
+                "type": "string",
+                "minLength": 1,
+                "description": "One-line human summary of the operation."
+              },
+              "auth": {
+                "type": "string",
+                "enum": [
+                  "loopback_bearer",
+                  "loopback_only"
+                ],
+                "description": "Auth boundary: loopback + bearer token, or loopback-only."
+              },
               "requestSchema": {
                 "anyOf": [
                   {
@@ -102,6 +115,8 @@
               "id",
               "method",
               "path",
+              "summary",
+              "auth",
               "requestSchema",
               "responseSchema",
               "errorSchema",

package/generated/ControlOperationDescriptor.schema.json

@@ -22,6 +22,19 @@
           "type": "string",
           "pattern": "^\\/v2\\/"
         },
+        "summary": {
+          "type": "string",
+          "minLength": 1,
+          "description": "One-line human summary of the operation."
+        },
+        "auth": {
+          "type": "string",
+          "enum": [
+            "loopback_bearer",
+            "loopback_only"
+          ],
+          "description": "Auth boundary: loopback + bearer token, or loopback-only."
+        },
         "requestSchema": {
           "anyOf": [
             {
@@ -93,6 +106,8 @@
         "id",
         "method",
         "path",
+        "summary",
+        "auth",
         "requestSchema",
         "responseSchema",
         "errorSchema",

package/generated/ControlProject.schema.json

@@ -25,6 +25,41 @@
         },
         "updatedAt": {
           "$ref": "#/definitions/ControlProject/properties/createdAt"
+        },
+        "nesting": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "relation": {
+                "type": "string",
+                "enum": [
+                  "inside",
+                  "contains"
+                ],
+                "description": "How this project overlaps the other."
+              },
+              "root": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The other registered project's root."
+              },
+              "projectId": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The other registered project's id."
+              }
+            },
+            "required": [
+              "relation",
+              "root",
+              "projectId"
+            ],
+            "additionalProperties": false,
+            "description": "A disclosed (never refused) nesting relation with another registered project."
+          },
+          "default": [],
+          "description": "Disclosed nesting relations with other registered projects (F3) — informational, never a refusal."
         }
       },
       "required": [

package/generated/ControlProjectListResponse.schema.json

@@ -30,6 +30,41 @@
               },
               "updatedAt": {
                 "$ref": "#/definitions/ControlProjectListResponse/properties/projects/items/properties/createdAt"
+              },
+              "nesting": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "relation": {
+                      "type": "string",
+                      "enum": [
+                        "inside",
+                        "contains"
+                      ],
+                      "description": "How this project overlaps the other."
+                    },
+                    "root": {
+                      "type": "string",
+                      "minLength": 1,
+                      "description": "The other registered project's root."
+                    },
+                    "projectId": {
+                      "type": "string",
+                      "minLength": 1,
+                      "description": "The other registered project's id."
+                    }
+                  },
+                  "required": [
+                    "relation",
+                    "root",
+                    "projectId"
+                  ],
+                  "additionalProperties": false,
+                  "description": "A disclosed (never refused) nesting relation with another registered project."
+                },
+                "default": [],
+                "description": "Disclosed nesting relations with other registered projects (F3) — informational, never a refusal."
               }
             },
             "required": [