@claudexor/schema 3.0.4 → 3.1.1

package/dist/work-report.js

@@ -0,0 +1,124 @@
+import { z } from "zod";
+/**
+ * D-16: the model-authored WorkReport — the typed self-assessment an attempt
+ * emits alongside its deliverable so the finalizer can tell "I finished" from
+ * "I need input / I ran out of room" WITHOUT prose matching. It rides the
+ * existing structured-output seam inside a compiled envelope (see
+ * `buildWorkReportEnvelope` in output-schema.ts) and is validated by the
+ * attempt finalizer, never by a Zod refinement on the wire type: the wire
+ * shape is deliberately permissive (a malformed report is a typed
+ * `work_report_contract` failure the finalizer raises, not a parse throw that
+ * loses the whole answer).
+ */
+/** What state the model says its own work reached. Cross-field rules
+ * (completed ⇒ no required_inputs; needs_input ⇒ ≥1) are enforced by the
+ * finalizer, not here — the wire type stays permissive for transport. */
+export const WorkReportState = z
+    .enum(["completed", "needs_input", "incomplete"])
+    .describe("Model-authored work state: completed (the task is done), needs_input (blocked on a listed input), or incomplete (partial, more work remains).");
+/** The category of a blocking input the model needs to proceed. */
+export const RequiredInputKind = z
+    .enum(["file", "context", "credential", "permission", "decision", "external_dependency"])
+    .describe("Category of a missing input a needs_input/incomplete report lists: a file, additional context, a credential, a permission, a human decision, or an external dependency.");
+/** One blocking input the model reports it needs. `locator` points at the
+ * concrete missing thing (a path, a URL, an env var name) when it can name it. */
+export const RequiredInput = z
+    .object({
+    kind: RequiredInputKind,
+    locator: z
+        .string()
+        .max(512)
+        .nullable()
+        .default(null)
+        .describe("Concrete pointer to the missing thing (path/url/name); null when unnameable."),
+    description: z
+        .string()
+        .max(1024)
+        .describe("Human-readable description of what is needed and why."),
+})
+    .describe("One blocking input a needs_input/incomplete WorkReport lists.");
+/** The model-authored work self-assessment (D-16). */
+export const WorkReport = z
+    .object({
+    state: WorkReportState,
+    required_inputs: z
+        .array(RequiredInput)
+        .max(16)
+        .default([])
+        .describe("Blocking inputs the model needs to proceed; empty for a completed report, ≥1 for needs_input (finalizer-enforced)."),
+})
+    .describe("Model-authored WorkReport (D-16): a typed self-assessment of whether the attempt completed, needs input, or is incomplete, riding the structured-output envelope and validated by the attempt finalizer.");
+/**
+ * How the engine OBTAINED (or failed to obtain) a WorkReport for an attempt —
+ * the provenance of the work_state axis:
+ * - `constrained`: a native schema-constrained transport carried it (codex
+ *   --output-schema, claude StructuredOutput tool).
+ * - `validated`: a whole-answer validated-JSON transport carried it (cursor).
+ * - `absent`: the route could not carry one (transport unsupported or a lane
+ *   gated the structured transport off) — a DISCLOSED absence, not a failure.
+ */
+export const WorkReportSource = z
+    .enum(["constrained", "validated", "absent"])
+    .describe("Provenance of a WorkReport: constrained (native schema transport), validated (whole-answer JSON), or absent (no transport could carry one — a disclosed absence, not a failure).");
+/**
+ * The D-16 work_state axis attached to attempt/run outcomes, ORTHOGONAL to the
+ * process lifecycle (INV-116). `state` folds the WorkReport state with an
+ * `unverified` value for the disclosed-absence case (transport unsupported /
+ * lane gated). A `needs_input`/`incomplete` work_state VETOES applyability and
+ * forces a non-zero CLI exit even when the process lifecycle succeeded, but it
+ * NEVER flips the lifecycle itself.
+ */
+export const WorkState = z
+    .object({
+    state: z
+        .enum(["completed", "needs_input", "incomplete", "unverified"])
+        .describe("Folded work state: the WorkReport state, or unverified when no report was obtainable (transport unsupported / lane gated)."),
+    source: WorkReportSource,
+    required_inputs: z
+        .array(RequiredInput)
+        .max(16)
+        .optional()
+        .describe("Carried through from a needs_input/incomplete WorkReport for honest disclosure."),
+})
+    .describe("D-16 work_state axis: the model-attested work outcome, orthogonal to process lifecycle (INV-116); a needs_input/incomplete state vetoes applyability and exit 0 without flipping the lifecycle.");
+/**
+ * Strict transport form of the WorkReport, hand-authored to match the Zod shape
+ * (every key required, additionalProperties:false, optional locator expressed
+ * as string|null — the vendor strict-mode recipe). This is the WorkReport half
+ * of the compiled envelope that rides `HarnessRunSpec.output_schema`. A unit
+ * test pins it against a fresh strictify of the generated WorkReport schema so
+ * drift is caught.
+ */
+export const WORK_REPORT_TRANSPORT_SCHEMA = {
+    type: "object",
+    properties: {
+        state: { type: "string", enum: ["completed", "needs_input", "incomplete"] },
+        required_inputs: {
+            type: "array",
+            maxItems: 16,
+            items: {
+                type: "object",
+                properties: {
+                    kind: {
+                        type: "string",
+                        enum: [
+                            "file",
+                            "context",
+                            "credential",
+                            "permission",
+                            "decision",
+                            "external_dependency",
+                        ],
+                    },
+                    locator: { type: ["string", "null"], maxLength: 512 },
+                    description: { type: "string", maxLength: 1024 },
+                },
+                required: ["kind", "locator", "description"],
+                additionalProperties: false,
+            },
+        },
+    },
+    required: ["state", "required_inputs"],
+    additionalProperties: false,
+};
+//# sourceMappingURL=work-report.js.map

package/dist/work-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-report.js","sourceRoot":"","sources":["../src/work-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AAEH;;yEAEyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;KAChD,QAAQ,CACP,+IAA+I,CAChJ,CAAC;AAGJ,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;KACxF,QAAQ,CACP,yKAAyK,CAC1K,CAAC;AAGJ;kFACkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,CAAC,uDAAuD,CAAC;CACrE,CAAC;KACD,QAAQ,CAAC,+DAA+D,CAAC,CAAC;AAG7E,sDAAsD;AACtD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,KAAK,EAAE,eAAe;IACtB,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,aAAa,CAAC;SACpB,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,oHAAoH,CACrH;CACJ,CAAC;KACD,QAAQ,CACP,0MAA0M,CAC3M,CAAC;AAGJ;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;KAC5C,QAAQ,CACP,kLAAkL,CACnL,CAAC;AAGJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;SAC9D,QAAQ,CACP,4HAA4H,CAC7H;IACH,MAAM,EAAE,gBAAgB;IACxB,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,aAAa,CAAC;SACpB,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;SACV,QAAQ,CAAC,iFAAiF,CAAC;CAC/F,CAAC;KACD,QAAQ,CACP,iMAAiM,CAClM,CAAC;AAGJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA4B;IACnE,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE;QAC3E,eAAe,EAAE;YACf,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE;4BACJ,MAAM;4BACN,SAAS;4BACT,YAAY;4BACZ,YAAY;4BACZ,UAAU;4BACV,qBAAqB;yBACtB;qBACF;oBACD,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;oBACrD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;iBACjD;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC;gBAC5C,oBAAoB,EAAE,KAAK;aAC5B;SACF;KACF;IACD,QAAQ,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACtC,oBAAoB,EAAE,KAAK;CAC5B,CAAC"}

package/dist/workspace.d.ts

@@ -26,8 +26,8 @@ export declare const WorkspaceEnvelope: z.ZodObject<{
     worktree_path: string;
     base_sha: string | null;
     base_ref: string;
-    task_id: string;
     attempt_id: string;
+    task_id: string;
     dirty_policy: "refuse" | "snapshot";
     repo_root: string;
     branch_name: string;
@@ -39,8 +39,8 @@ export declare const WorkspaceEnvelope: z.ZodObject<{
     id: string;
     worktree_path: string;
     base_ref: string;
-    task_id: string;
     attempt_id: string;
+    task_id: string;
     repo_root: string;
     branch_name: string;
     home_dir: string;

package/generated/AgentCapabilityCatalog.schema.json

@@ -191,14 +191,10 @@
                 "type": "array",
                 "items": {
                   "type": "string",
-                  "enum": [
-                    "low",
-                    "medium",
-                    "high",
-                    "xhigh",
-                    "max"
-                  ],
-                  "description": "Cross-harness reasoning-effort level, weakest to strongest; adapters declare the subset they support and a shared normalizer clamps requests onto the nearest supported level."
+                  "minLength": 1,
+                  "maxLength": 32,
+                  "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
+                  "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen."
                 },
                 "description": "Reasoning-effort ladder the adapter declares (normalized by the engine)."
               },
@@ -278,6 +274,40 @@
           },
           "description": "Accepted POST /runs request keys (derived from the ControlRunStartRequest schema; the CLI/MCP/ACP surfaces project subsets of these)."
         },
+        "outputSchemaDialects": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "dialect": {
+                "type": "string",
+                "enum": [
+                  "draft-07",
+                  "draft-2020-12"
+                ],
+                "description": "Stable dialect id used in structured-output receipts."
+              },
+              "uri": {
+                "type": "string",
+                "format": "uri",
+                "description": "Canonical $schema URI accepted for this dialect."
+              },
+              "defaultWhenOmitted": {
+                "type": "boolean",
+                "description": "True when this dialect is selected for schemas without a $schema declaration."
+              }
+            },
+            "required": [
+              "dialect",
+              "uri",
+              "defaultWhenOmitted"
+            ],
+            "additionalProperties": false,
+            "description": "One JSON Schema dialect accepted by the structured-output validator."
+          },
+          "minItems": 1,
+          "description": "Supported structured-output JSON Schema dialects and canonical $schema URIs."
+        },
         "mutability": {
           "type": "object",
           "properties": {
@@ -416,6 +446,7 @@
         "availableHarnesses",
         "modes",
         "runControlKeys",
+        "outputSchemaDialects",
         "mutability",
         "cliCommands",
         "mcpTools",

package/generated/ControlApplyCheckResponse.schema.json

@@ -19,6 +19,11 @@
         },
         "stderr": {
           "type": "string"
+        },
+        "alreadyApplied": {
+          "type": "boolean",
+          "default": false,
+          "description": "True when the clean check is an already-applied idempotent no-op."
         }
       },
       "required": [

package/generated/ControlDeliveryResponse.schema.json

@@ -34,6 +34,20 @@
         "refused": {
           "type": "boolean"
         },
+        "alreadyApplied": {
+          "type": "boolean",
+          "default": false,
+          "description": "True when delivery was an idempotent already-applied no-op (no files changed)."
+        },
+        "deliveryStatus": {
+          "type": "string",
+          "enum": [
+            "applied",
+            "already_applied",
+            "refused"
+          ],
+          "description": "Coarse typed delivery disposition (applied / already_applied / refused)."
+        },
         "finalVerify": {
           "type": "object",
           "properties": {

package/generated/ControlHarnessListResponse.schema.json

@@ -349,21 +349,76 @@
                             "default": false,
                             "description": "The harness can constrain its final message to a caller-supplied JSON Schema (native structured-output flag)."
                           },
+                          "work_report_transport": {
+                            "type": "string",
+                            "enum": [
+                              "constrained",
+                              "validated",
+                              "unsupported"
+                            ],
+                            "default": "unsupported",
+                            "description": "How the harness carries the D-16 WorkReport envelope: constrained (native schema transport), validated (whole-answer JSON), or unsupported (work_state stays unverified)."
+                          },
+                          "structured_output_channel": {
+                            "type": "string",
+                            "enum": [
+                              "side_tool",
+                              "final_message"
+                            ],
+                            "default": "final_message",
+                            "description": "Where a schema-constrained answer surfaces: side_tool (rides a tool; final message stays markdown) or final_message (constrains the final message itself)."
+                          },
                           "effort_levels": {
                             "type": "array",
                             "items": {
                               "type": "string",
-                              "enum": [
-                                "low",
-                                "medium",
-                                "high",
-                                "xhigh",
-                                "max"
-                              ],
-                              "description": "Cross-harness reasoning-effort level, weakest to strongest; adapters declare the subset they support and a shared normalizer clamps requests onto the nearest supported level."
+                              "minLength": 1,
+                              "maxLength": 32,
+                              "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
+                              "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen."
                             },
                             "default": [],
-                            "description": "Ordered (weakest to strongest) reasoning-effort levels this harness actually accepts; empty means effort is not a tunable surface."
+                            "description": "Ordered (weakest to strongest) reasoning-effort levels this harness accepts across all its models; empty means effort is not a tunable surface."
+                          },
+                          "model_effort_levels": {
+                            "type": "object",
+                            "additionalProperties": {
+                              "type": "object",
+                              "properties": {
+                                "levels": {
+                                  "type": "array",
+                                  "items": {
+                                    "$ref": "#/definitions/ControlHarnessListResponse/properties/harnesses/items/properties/manifest/anyOf/0/properties/capabilities/properties/effort_levels/items"
+                                  },
+                                  "default": [],
+                                  "description": "Ordered (weakest to strongest) reasoning-effort levels this model advertises, in the vendor's own order."
+                                },
+                                "default": {
+                                  "anyOf": [
+                                    {
+                                      "$ref": "#/definitions/ControlHarnessListResponse/properties/harnesses/items/properties/manifest/anyOf/0/properties/capabilities/properties/effort_levels/items"
+                                    },
+                                    {
+                                      "type": "null"
+                                    }
+                                  ],
+                                  "description": "The effort level the vendor uses for this model when none is requested.",
+                                  "default": null
+                                }
+                              },
+                              "additionalProperties": false,
+                              "description": "Reasoning-effort vocabulary a single model advertises."
+                            },
+                            "default": {},
+                            "description": "Per-model advertised reasoning-effort vocabulary keyed by model id; a model absent here falls back to the harness-wide effort_levels union."
+                          },
+                          "effort_levels_verified_against": {
+                            "type": [
+                              "string",
+                              "null"
+                            ],
+                            "default": null,
+                            "description": "Vendor CLI version the effort ladders were last verified against; null = never verified / not applicable."
                           },
                           "known_models": {
                             "type": "array",

package/generated/ControlHarnessSettingsPatch.schema.json

@@ -30,14 +30,10 @@
           "anyOf": [
             {
               "type": "string",
-              "enum": [
-                "low",
-                "medium",
-                "high",
-                "xhigh",
-                "max"
-              ],
-              "description": "Cross-harness reasoning-effort level, weakest to strongest; adapters declare the subset they support and a shared normalizer clamps requests onto the nearest supported level."
+              "minLength": 1,
+              "maxLength": 32,
+              "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
+              "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen."
             },
             {
               "type": "null"

package/generated/ControlOperationCatalog.schema.json

@@ -55,6 +55,80 @@
                   }
                 ]
               },
+              "parameters": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "name": {
+                      "type": "string",
+                      "minLength": 1,
+                      "description": "Wire name of the parameter: the query key or the (case-insensitive) header field name."
+                    },
+                    "location": {
+                      "type": "string",
+                      "enum": [
+                        "query",
+                        "header"
+                      ],
+                      "description": "Where the parameter travels: the URL query string or a request header."
+                    },
+                    "required": {
+                      "type": "boolean",
+                      "description": "Whether the operation requires the parameter to be present."
+                    },
+                    "repeatable": {
+                      "type": "boolean",
+                      "default": false,
+                      "description": "Whether the parameter may appear more than once (e.g. a repeated query filter)."
+                    },
+                    "enum": {
+                      "anyOf": [
+                        {
+                          "type": "array",
+                          "items": {
+                            "type": "string",
+                            "minLength": 1
+                          }
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "default": null,
+                      "description": "Closed set of accepted values when the grammar is a fixed enum; null otherwise."
+                    },
+                    "schemaRef": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "minLength": 1
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "default": null,
+                      "description": "Generated schema name (optionally a `Name#/properties/field` pointer) that types this parameter's value when it is not a simple enum; null otherwise."
+                    },
+                    "description": {
+                      "type": "string",
+                      "minLength": 1,
+                      "description": "One-line human semantics of the parameter."
+                    }
+                  },
+                  "required": [
+                    "name",
+                    "location",
+                    "required",
+                    "description"
+                  ],
+                  "additionalProperties": false,
+                  "description": "A query or header request parameter an operation reads (never the JSON body)."
+                },
+                "default": [],
+                "description": "Query/header request parameters (body shape is `requestSchema`)."
+              },
               "responseSchema": {
                 "anyOf": [
                   {

package/generated/ControlOperationDescriptor.schema.json

@@ -46,6 +46,80 @@
             }
           ]
         },
+        "parameters": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Wire name of the parameter: the query key or the (case-insensitive) header field name."
+              },
+              "location": {
+                "type": "string",
+                "enum": [
+                  "query",
+                  "header"
+                ],
+                "description": "Where the parameter travels: the URL query string or a request header."
+              },
+              "required": {
+                "type": "boolean",
+                "description": "Whether the operation requires the parameter to be present."
+              },
+              "repeatable": {
+                "type": "boolean",
+                "default": false,
+                "description": "Whether the parameter may appear more than once (e.g. a repeated query filter)."
+              },
+              "enum": {
+                "anyOf": [
+                  {
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "minLength": 1
+                    }
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "default": null,
+                "description": "Closed set of accepted values when the grammar is a fixed enum; null otherwise."
+              },
+              "schemaRef": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "default": null,
+                "description": "Generated schema name (optionally a `Name#/properties/field` pointer) that types this parameter's value when it is not a simple enum; null otherwise."
+              },
+              "description": {
+                "type": "string",
+                "minLength": 1,
+                "description": "One-line human semantics of the parameter."
+              }
+            },
+            "required": [
+              "name",
+              "location",
+              "required",
+              "description"
+            ],
+            "additionalProperties": false,
+            "description": "A query or header request parameter an operation reads (never the JSON body)."
+          },
+          "default": [],
+          "description": "Query/header request parameters (body shape is `requestSchema`)."
+        },
         "responseSchema": {
           "anyOf": [
             {

package/generated/ControlOperationParameter.schema.json

@@ -0,0 +1,75 @@
+{
+  "$ref": "#/definitions/ControlOperationParameter",
+  "definitions": {
+    "ControlOperationParameter": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Wire name of the parameter: the query key or the (case-insensitive) header field name."
+        },
+        "location": {
+          "type": "string",
+          "enum": [
+            "query",
+            "header"
+          ],
+          "description": "Where the parameter travels: the URL query string or a request header."
+        },
+        "required": {
+          "type": "boolean",
+          "description": "Whether the operation requires the parameter to be present."
+        },
+        "repeatable": {
+          "type": "boolean",
+          "default": false,
+          "description": "Whether the parameter may appear more than once (e.g. a repeated query filter)."
+        },
+        "enum": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Closed set of accepted values when the grammar is a fixed enum; null otherwise."
+        },
+        "schemaRef": {
+          "anyOf": [
+            {
+              "type": "string",
+              "minLength": 1
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "Generated schema name (optionally a `Name#/properties/field` pointer) that types this parameter's value when it is not a simple enum; null otherwise."
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1,
+          "description": "One-line human semantics of the parameter."
+        }
+      },
+      "required": [
+        "name",
+        "location",
+        "required",
+        "description"
+      ],
+      "additionalProperties": false,
+      "description": "A query or header request parameter an operation reads (never the JSON body)."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlProjectRemoveReceipt.schema.json

@@ -0,0 +1,58 @@
+{
+  "$ref": "#/definitions/ControlProjectRemoveReceipt",
+  "definitions": {
+    "ControlProjectRemoveReceipt": {
+      "type": "object",
+      "properties": {
+        "projectId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The retired project's stable id."
+        },
+        "root": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The project's canonical root at removal time."
+        },
+        "registryRemoved": {
+          "type": "boolean",
+          "const": true,
+          "description": "The durable global-registry entry (and its indexes) were removed."
+        },
+        "journalPartitionArchived": {
+          "type": "boolean",
+          "description": "Whether the project's journal partition directory was archived (renamed out of the active journal tree). False only when the partition never materialized on disk."
+        },
+        "archivedPartitionPath": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Absolute path the partition journal was archived to, or null when there was no partition directory to archive."
+        },
+        "artifactsRetained": {
+          "type": "boolean",
+          "const": true,
+          "description": "Run artifact trees are left in place for normal GC/retention — remove never deletes run bytes or the user's project directory."
+        },
+        "activeRunCheck": {
+          "type": "string",
+          "const": "snapshot",
+          "description": "How the live/queued-run fence was evaluated. Always 'snapshot': the active-run set is read once (an async daemon IPC job-list read) BEFORE the synchronous removal, so a run that starts in the narrow window between the snapshot and the removal is NOT fenced. Honest disclosure of a TOCTOU race the current architecture cannot close inside the sync section; see docs/ARCHITECTURE.md."
+        }
+      },
+      "required": [
+        "projectId",
+        "root",
+        "registryRemoved",
+        "journalPartitionArchived",
+        "archivedPartitionPath",
+        "artifactsRetained",
+        "activeRunCheck"
+      ],
+      "additionalProperties": false,
+      "description": "DELETE /v2/projects/:id receipt: registry entry removed, journal partition archived, artifacts left to GC."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}