@claudexor/schema 2.1.2 → 3.0.0

package/generated/GlobalConfig.schema.json

@@ -19,15 +19,6 @@
         "routing": {
           "type": "object",
           "properties": {
-            "default_policy": {
-              "type": "string",
-              "enum": [
-                "auto",
-                "primary"
-              ],
-              "description": "Default routing policy: auto (engine picks) or primary (prefer the configured primary harness).",
-              "default": "auto"
-            },
             "primary_harness": {
               "type": [
                 "string",
@@ -136,8 +127,7 @@
                   "verify",
                   "synthesize",
                   "explain",
-                  "audit",
-                  "orchestrate"
+                  "audit"
                 ]
               },
               "default": {},
@@ -361,6 +351,11 @@
                 "default": true,
                 "description": "Whether the harness participates in routing."
               },
+              "native_credentials_enabled": {
+                "type": "boolean",
+                "default": true,
+                "description": "Whether the native/default vendor credential (the CLI login) participates in this harness's credential ladder."
+              },
               "default_model": {
                 "type": [
                   "string",
@@ -489,7 +484,7 @@
         }
       },
       "additionalProperties": false,
-      "description": "Claudexor v2 global user config (~/.claudexor/v2/config.yaml): routing, budget, runtime, and per-harness settings."
+      "description": "Claudexor v3 global user config (~/.claudexor/v3/config.yaml): routing, budget, runtime, and per-harness settings."
     }
   },
   "$schema": "http://json-schema.org/draft-07/schema#"

package/generated/HarnessManifest.schema.json

@@ -227,11 +227,21 @@
                 "description": "Finite MIME, size, count and transport limits declared by one adapter."
               },
               "default": []
+            },
+            "mcp_injection": {
+              "type": "boolean",
+              "default": false,
+              "description": "The adapter can inject engine-owned MCP servers into the harness sandbox (browser tool, delegation belt); false = extra_mcp_servers and the delegate toggle are refused."
+            },
+            "mcp_injection_requires_full_access": {
+              "type": "boolean",
+              "default": false,
+              "description": "An injected MCP server can only reach the daemon (belt) at full access; below it the harness sandbox cancels the call. true => --delegate below full access is refused for this harness."
             }
           },
           "additionalProperties": false,
           "default": {},
-          "description": "Structured per-harness facts the engine consumes: auth routing, isolation containment, readonly mechanism, and finite attachment inputs."
+          "description": "Structured per-harness facts the engine consumes: auth routing, isolation containment, readonly mechanism, finite attachment inputs, and MCP injection."
         },
         "capabilities": {
           "type": "object",
@@ -311,11 +321,6 @@
               "default": false,
               "description": "The adapter can surface interactive user questions (interaction_requested events) and deliver typed answers back into the live session."
             },
-            "orchestrate": {
-              "type": "boolean",
-              "default": false,
-              "description": "The harness can play the autonomous orchestrate planner intent, planning multi-harness work over the typed tool belt; not a privileged role."
-            },
             "json_schema_output": {
               "type": "boolean",
               "default": false,

package/generated/HarnessStatusDto.schema.json

@@ -245,11 +245,21 @@
                         "description": "Finite MIME, size, count and transport limits declared by one adapter."
                       },
                       "default": []
+                    },
+                    "mcp_injection": {
+                      "type": "boolean",
+                      "default": false,
+                      "description": "The adapter can inject engine-owned MCP servers into the harness sandbox (browser tool, delegation belt); false = extra_mcp_servers and the delegate toggle are refused."
+                    },
+                    "mcp_injection_requires_full_access": {
+                      "type": "boolean",
+                      "default": false,
+                      "description": "An injected MCP server can only reach the daemon (belt) at full access; below it the harness sandbox cancels the call. true => --delegate below full access is refused for this harness."
                     }
                   },
                   "additionalProperties": false,
                   "default": {},
-                  "description": "Structured per-harness facts the engine consumes: auth routing, isolation containment, readonly mechanism, and finite attachment inputs."
+                  "description": "Structured per-harness facts the engine consumes: auth routing, isolation containment, readonly mechanism, finite attachment inputs, and MCP injection."
                 },
                 "capabilities": {
                   "type": "object",
@@ -329,11 +339,6 @@
                       "default": false,
                       "description": "The adapter can surface interactive user questions (interaction_requested events) and deliver typed answers back into the live session."
                     },
-                    "orchestrate": {
-                      "type": "boolean",
-                      "default": false,
-                      "description": "The harness can play the autonomous orchestrate planner intent, planning multi-harness work over the typed tool belt; not a privileged role."
-                    },
                     "json_schema_output": {
                       "type": "boolean",
                       "default": false,

package/generated/LaneCheckpoint.schema.json

@@ -0,0 +1,59 @@
+{
+  "$ref": "#/definitions/LaneCheckpoint",
+  "definitions": {
+    "LaneCheckpoint": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Composite lane id (thread::harness::profileOrDefault)."
+        },
+        "thread_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Thread the lane belongs to."
+        },
+        "harness_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Harness of the lane."
+        },
+        "profile_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Credential profile of the lane (null = engine default).",
+          "default": null
+        },
+        "turn_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The last turn this lane has seen."
+        },
+        "updated_at": {
+          "type": "string",
+          "minLength": 1,
+          "description": "When the checkpoint last advanced."
+        }
+      },
+      "required": [
+        "id",
+        "thread_id",
+        "harness_id",
+        "turn_id",
+        "updated_at"
+      ],
+      "additionalProperties": false,
+      "description": "Per-lane checkpoint: the last turn a (thread, harness, profile) lane has seen; journaled in the thread store."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/McpRunHandleResult.schema.json

@@ -0,0 +1,234 @@
+{
+  "$ref": "#/definitions/McpRunHandleResult",
+  "definitions": {
+    "McpRunHandleResult": {
+      "type": "object",
+      "properties": {
+        "summary": {
+          "type": "string",
+          "description": "Human-readable outcome/status text (same as the tool's text content)."
+        },
+        "runId": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "The daemon run id, when known."
+        },
+        "runDir": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Artifact directory; null when absent."
+        },
+        "status": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "The run's terminal or in-flight lifecycle state, when known."
+        },
+        "decisionStatus": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "The arbitration decision status, when the run reached arbitration."
+        },
+        "pendingInteractions": {
+          "anyOf": [
+            {
+              "type": "integer",
+              "minimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Count of questions still awaiting answers, when known."
+        },
+        "outcomeFacts": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "lifecycle": {
+                  "type": "string",
+                  "enum": [
+                    "succeeded",
+                    "failed",
+                    "cancelled",
+                    "interrupted"
+                  ],
+                  "description": "Terminal lifecycle of the run."
+                },
+                "noChanges": {
+                  "type": "boolean",
+                  "default": false,
+                  "description": "True when the run finished without changing any files (the ex no_op fact)."
+                },
+                "checks": {
+                  "type": "string",
+                  "enum": [
+                    "passed",
+                    "failed",
+                    "not_configured"
+                  ],
+                  "description": "Deterministic checks axis: configured project checks passed, failed, or none are configured (a named state, never a stand-in for review results).",
+                  "default": "not_configured"
+                },
+                "review": {
+                  "type": "string",
+                  "enum": [
+                    "approved",
+                    "blocked",
+                    "not_run"
+                  ],
+                  "description": "Review axis: approved (clean cross-family verified review), blocked (open accepted findings), or not_run.",
+                  "default": "not_run"
+                },
+                "reason": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "enum": [
+                        "harness_failed",
+                        "no_changes",
+                        "review_blocked",
+                        "checks_failed",
+                        "budget_exhausted",
+                        "budget_overshoot",
+                        "cost_unverifiable",
+                        "not_converged",
+                        "stuck_no_progress",
+                        "wall_clock_exceeded",
+                        "user_cancelled",
+                        "crash_interrupted"
+                      ],
+                      "description": "Typed reason qualifying a non-clean terminal; null on a clean success."
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Typed reason qualifying a non-clean terminal; null on a clean success.",
+                  "default": null
+                }
+              },
+              "required": [
+                "lifecycle"
+              ],
+              "additionalProperties": false,
+              "description": "Independent terminal outcome axes of a run (D8/D18)."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "The D8 terminal outcome axes (checks/review/reason/noChanges), when terminal.",
+          "default": null
+        },
+        "outcomeBanner": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Server-owned outcome headline (D18); null while non-terminal."
+        },
+        "applyEligibility": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "eligible": {
+                  "type": "boolean",
+                  "description": "True when the apply gate would accept this run's patch right now."
+                },
+                "state": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "description": "The gate's apply-eligibility classification (e.g. needs_review | not_verified | no_changes | ok) when known."
+                },
+                "reason": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "description": "The gate's refusal text when not eligible (null when eligible)."
+                },
+                "requiredAction": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "description": "Honest guidance for what actually unblocks apply (typed operator decision, add gates, re-run, or nothing to apply)."
+                }
+              },
+              "required": [
+                "eligible",
+                "state",
+                "reason",
+                "requiredAction"
+              ],
+              "additionalProperties": false,
+              "description": "Derived apply-gate verdict for a run's WorkProduct (single producer in the delivery gate)."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Derived apply-gate verdict; null for read-only runs or when no patch exists.",
+          "default": null
+        },
+        "planReadiness": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "state": {
+                  "type": "string",
+                  "enum": [
+                    "ready",
+                    "needs_answers",
+                    "unverified"
+                  ],
+                  "description": "Derived plan readiness: ready (block parsed, zero open questions), needs_answers (open questions remain), unverified (no parseable block — the planner ignored the format)."
+                },
+                "questionCount": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "default": 0
+                }
+              },
+              "required": [
+                "state"
+              ],
+              "additionalProperties": false,
+              "description": "Server-derived readiness of a plan run (one derivation owner; D17)."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Derived plan readiness (plan runs only, D17); null otherwise.",
+          "default": null
+        }
+      },
+      "required": [
+        "summary"
+      ],
+      "additionalProperties": false,
+      "description": "Structured MCP result for Claudexor durable-run read tools (inspect/status/result)."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/McpRunToolResult.schema.json

@@ -27,7 +27,88 @@
             "string",
             "null"
           ],
-          "description": "Terminal run status (success | blocked | failed | cancelled | ...)."
+          "description": "Terminal run LIFECYCLE (succeeded | failed | cancelled | interrupted)."
+        },
+        "outcomeFacts": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "lifecycle": {
+                  "type": "string",
+                  "enum": [
+                    "succeeded",
+                    "failed",
+                    "cancelled",
+                    "interrupted"
+                  ],
+                  "description": "Terminal lifecycle of the run."
+                },
+                "noChanges": {
+                  "type": "boolean",
+                  "default": false,
+                  "description": "True when the run finished without changing any files (the ex no_op fact)."
+                },
+                "checks": {
+                  "type": "string",
+                  "enum": [
+                    "passed",
+                    "failed",
+                    "not_configured"
+                  ],
+                  "description": "Deterministic checks axis: configured project checks passed, failed, or none are configured (a named state, never a stand-in for review results).",
+                  "default": "not_configured"
+                },
+                "review": {
+                  "type": "string",
+                  "enum": [
+                    "approved",
+                    "blocked",
+                    "not_run"
+                  ],
+                  "description": "Review axis: approved (clean cross-family verified review), blocked (open accepted findings), or not_run.",
+                  "default": "not_run"
+                },
+                "reason": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "enum": [
+                        "harness_failed",
+                        "no_changes",
+                        "review_blocked",
+                        "checks_failed",
+                        "budget_exhausted",
+                        "budget_overshoot",
+                        "cost_unverifiable",
+                        "not_converged",
+                        "stuck_no_progress",
+                        "wall_clock_exceeded",
+                        "user_cancelled",
+                        "crash_interrupted"
+                      ],
+                      "description": "Typed reason qualifying a non-clean terminal; null on a clean success."
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Typed reason qualifying a non-clean terminal; null on a clean success.",
+                  "default": null
+                }
+              },
+              "required": [
+                "lifecycle"
+              ],
+              "additionalProperties": false,
+              "description": "Independent terminal outcome axes of a run (D8/D18)."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "The D8 terminal outcome axes (checks/review/reason/noChanges); null for non-terminal or read-only routes.",
+          "default": null
         },
         "applyEligibility": {
           "anyOf": [
@@ -43,7 +124,7 @@
                     "string",
                     "null"
                   ],
-                  "description": "The gate's state classification (e.g. blocked | ungated | review_not_run | no_op | ok) when known."
+                  "description": "The gate's apply-eligibility classification (e.g. needs_review | not_verified | no_changes | ok) when known."
                 },
                 "reason": {
                   "type": [
@@ -74,6 +155,47 @@
             }
           ],
           "description": "Apply-gate verdict for mutating runs; null for read-only routes or when no patch exists."
+        },
+        "outcomeBanner": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Server-owned outcome headline (D18); the single honest one-line verdict, null while non-terminal or unavailable."
+        },
+        "planReadiness": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "state": {
+                  "type": "string",
+                  "enum": [
+                    "ready",
+                    "needs_answers",
+                    "unverified"
+                  ],
+                  "description": "Derived plan readiness: ready (block parsed, zero open questions), needs_answers (open questions remain), unverified (no parseable block — the planner ignored the format)."
+                },
+                "questionCount": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "default": 0
+                }
+              },
+              "required": [
+                "state"
+              ],
+              "additionalProperties": false,
+              "description": "Server-derived readiness of a plan run (one derivation owner; D17)."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Derived plan readiness for plan tools (D17); null for non-plan tools.",
+          "default": null
         }
       },
       "required": [

package/generated/RoutePrimaryDivergedPayload.schema.json

@@ -0,0 +1,56 @@
+{
+  "$ref": "#/definitions/RoutePrimaryDivergedPayload",
+  "definitions": {
+    "RoutePrimaryDivergedPayload": {
+      "type": "object",
+      "properties": {
+        "requested": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The requested/sticky primary harness the chip showed."
+        },
+        "effective": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "The harness that actually ran first, or null when nothing remained routable."
+        },
+        "reason": {
+          "type": "string",
+          "enum": [
+            "quota_exhausted",
+            "money_exhausted",
+            "subscription_exhausted",
+            "rate_limited",
+            "harness_error",
+            "stall",
+            "web_evidence_unsatisfied",
+            "fallback_model",
+            "not_portable",
+            "auth_unavailable",
+            "readiness_preferred",
+            "manual"
+          ],
+          "description": "Typed reason an auto-fallback (route/auth switch) or session re-host happened, driven by typed budget/quota signals and events, never by regex over prose.",
+          "default": "quota_exhausted"
+        },
+        "detail": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Redacted human reason the primary was dropped (e.g. cooldown, unavailable)."
+        }
+      },
+      "required": [
+        "requested"
+      ],
+      "additionalProperties": false,
+      "description": "Typed payload for route.primary.diverged, validated before being stamped onto the RunEvent payload so a pre-attempt primary divergence is always evidence-backed."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/RunEvent.schema.json

@@ -49,14 +49,22 @@
             "route.transient.retry_scheduled",
             "route.profile.headroom_exceeded",
             "route.profile.rotated",
+            "route.profile.rotation_exhausted",
             "route.transient.exhausted",
             "route.fallback.auth_switched",
-            "session.rebound",
+            "route.primary.diverged",
+            "session.continuity",
             "interaction.requested",
             "interaction.answered",
             "interaction.timeout",
             "interaction.answer_discarded",
             "plan.progress",
+            "plan.questions",
+            "plan.brief.materialized",
+            "council.started",
+            "council.draft",
+            "council.member.failed",
+            "council.merged",
             "budget.quota_pressure",
             "output.ready",
             "gate.started",
@@ -73,9 +81,6 @@
             "arbitration.completed",
             "work_product.emitted",
             "work_product.adopted",
-            "orchestrate.subrun.started",
-            "orchestrate.step.done",
-            "orchestrate.step.blocked",
             "control.requested",
             "control.applied",
             "control.rejected",
@@ -83,7 +88,7 @@
             "run.completed",
             "run.failed"
           ],
-          "description": "Type of an append-only run event, covering run lifecycle, contract/context creation, budget, routing fallbacks, harness activity, interactions, gates, review, arbitration, work products, orchestrate steps, and control verbs."
+          "description": "Type of an append-only run event, covering run lifecycle, contract/context creation, budget, routing fallbacks, harness activity, interactions, gates, review, arbitration, work products, and control verbs."
         },
         "payload": {
           "type": "object",

package/generated/RunTelemetry.schema.json

@@ -24,11 +24,9 @@
           "enum": [
             "ask",
             "plan",
-            "audit",
-            "agent",
-            "orchestrate"
+            "agent"
           ],
-          "description": "Canonical run mode: ask, plan, and audit are read-only; agent writes; orchestrate is the autonomous coordinator intent. Engine strategies (race, attempts, swarm, create) are flags on a mode, not modes."
+          "description": "Canonical run mode: ask and plan are read-only, agent writes. Engine strategies (race width, attempts, deep_scan, create, delegate) are flags on a mode, not modes."
         },
         "requested_access": {
           "type": "string",