@claudexor/schema 3.1.2 → 3.3.7-rc.0

package/generated/ControlRunListResponse.schema.json

@@ -161,9 +161,13 @@
                               "unknown_paid_in_flight",
                               "budget_overshoot",
                               "cost_unverifiable",
-                              "delegation_child_drain_timeout"
+                              "delegation_child_drain_timeout",
+                              "subscription_window_exhausted",
+                              "delegated_home_unavailable",
+                              "delegated_confinement_unavailable",
+                              "delegated_evidence_incomplete"
                             ],
-                            "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons and Delegate child-drain timeout)."
+                            "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                           },
                           {
                             "type": "null"
@@ -224,6 +228,19 @@
                         "default": null,
                         "description": "Run artifact directory."
                       },
+                      "resetsAt": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "format": "date-time"
+                          },
+                          {
+                            "type": "null"
+                          }
+                        ],
+                        "default": null,
+                        "description": "When the refused window reopens (a spent subscription quota window), or null when the failure has no such time. Callers schedule a retry off this field, never off safeMessage."
+                      },
                       "nextActions": {
                         "type": "array",
                         "items": {
@@ -580,6 +597,14 @@
                         ],
                         "default": null
                       },
+                      "profileId": {
+                        "type": [
+                          "string",
+                          "null"
+                        ],
+                        "default": null,
+                        "description": "Credential profile the deciding attempt ran under; null = engine-default credentials."
+                      },
                       "modelMismatch": {
                         "anyOf": [
                           {
@@ -985,6 +1010,7 @@
                               "wall_clock_exceeded",
                               "user_cancelled",
                               "crash_interrupted",
+                              "workspace_unavailable",
                               "input_required",
                               "work_incomplete",
                               "context_capacity_exhausted",
@@ -1019,7 +1045,7 @@
                               "validated",
                               "absent"
                             ],
-                            "description": "Provenance of a WorkReport: constrained (native schema transport), validated (whole-answer JSON), or absent (no transport could carry one — a disclosed absence, not a failure)."
+                            "description": "Provenance of a WorkReport: constrained (native schema transport), validated (instructed terminal metadata), or absent (no transport could carry one — a disclosed absence, not a failure)."
                           },
                           "required_inputs": {
                             "type": "array",
@@ -1092,7 +1118,7 @@
               "waitingOnUser": {
                 "type": "boolean",
                 "default": false,
-                "description": "True while at least one interactive question is awaiting the user's answer."
+                "description": "True while at least one interactive question awaits answer, timeout, run-terminal, or interruption release."
               },
               "route": {
                 "anyOf": [

package/generated/ControlRunStartRequest.schema.json

@@ -62,6 +62,11 @@
                   ],
                   "description": "Project context depth; auto is the only mode.",
                   "default": "auto"
+                },
+                "ephemeral": {
+                  "type": "boolean",
+                  "default": false,
+                  "description": "Declare the root one-shot: it anchors this run only, is never entered into the durable project registry, and its commands/run events live in the global no-project partition."
                 }
               },
               "required": [
@@ -102,10 +107,15 @@
               ],
               "default": "envelope",
               "description": "Run isolation: envelope (isolated worktree in the external per-project runtime namespace, the default) or live (the project tree itself)."
+            },
+            "delegated": {
+              "type": "boolean",
+              "default": false,
+              "description": "Marks a run driven by an EXTERNAL orchestrator that owns the workspace, not by the operator at a surface. Such a run is confined to a scoped harness HOME even under isolation='live' (an in-place delegated attempt therefore cannot resume a native vendor session stored under the real HOME). Unrelated to the `delegate` belt flag and to `delegatedFromRunId` (belt-child provenance)."
             }
           },
           "additionalProperties": false,
-          "description": "Execution isolation settings for a run.",
+          "description": "Execution isolation and delegation settings for a run.",
           "default": {
             "isolation": "envelope"
           }
@@ -450,7 +460,7 @@
             "description": "One reviewer of an explicit reviewer panel — a harness plus optional model and effort. The CLI spells one entry `harness=model:effort` (e.g. `claude=claude-opus-4-8:max`)."
           },
           "minItems": 1,
-          "description": "Explicit reviewer panel — who reviews the change, one entry per reviewer as `harness=model:effort` (CLI `--reviewers \"claude=claude-opus-4-8:max,cursor=gemini-3.1-pro\"`). Duplicate harness entries are kept so one provider can review through several models; overrides the legacy reviewerModels/reviewerEfforts maps."
+          "description": "Explicit Agent reviewer panel — who reviews the change, one entry per reviewer as `harness=model:effort` (CLI `--reviewer-panel \"claude=claude-opus-4-8:max,cursor=gemini-3.1-pro\"`). Duplicate harness entries are kept so one provider can review through several models; overrides the legacy reviewerModels/reviewerEfforts maps."
         },
         "authPreference": {
           "type": "string",

package/generated/ControlRunSummary.schema.json

@@ -156,9 +156,13 @@
                         "unknown_paid_in_flight",
                         "budget_overshoot",
                         "cost_unverifiable",
-                        "delegation_child_drain_timeout"
+                        "delegation_child_drain_timeout",
+                        "subscription_window_exhausted",
+                        "delegated_home_unavailable",
+                        "delegated_confinement_unavailable",
+                        "delegated_evidence_incomplete"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons and Delegate child-drain timeout)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                     },
                     {
                       "type": "null"
@@ -219,6 +223,19 @@
                   "default": null,
                   "description": "Run artifact directory."
                 },
+                "resetsAt": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "format": "date-time"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "default": null,
+                  "description": "When the refused window reopens (a spent subscription quota window), or null when the failure has no such time. Callers schedule a retry off this field, never off safeMessage."
+                },
                 "nextActions": {
                   "type": "array",
                   "items": {
@@ -575,6 +592,14 @@
                   ],
                   "default": null
                 },
+                "profileId": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "default": null,
+                  "description": "Credential profile the deciding attempt ran under; null = engine-default credentials."
+                },
                 "modelMismatch": {
                   "anyOf": [
                     {
@@ -980,6 +1005,7 @@
                         "wall_clock_exceeded",
                         "user_cancelled",
                         "crash_interrupted",
+                        "workspace_unavailable",
                         "input_required",
                         "work_incomplete",
                         "context_capacity_exhausted",
@@ -1014,7 +1040,7 @@
                         "validated",
                         "absent"
                       ],
-                      "description": "Provenance of a WorkReport: constrained (native schema transport), validated (whole-answer JSON), or absent (no transport could carry one — a disclosed absence, not a failure)."
+                      "description": "Provenance of a WorkReport: constrained (native schema transport), validated (instructed terminal metadata), or absent (no transport could carry one — a disclosed absence, not a failure)."
                     },
                     "required_inputs": {
                       "type": "array",
@@ -1087,7 +1113,7 @@
         "waitingOnUser": {
           "type": "boolean",
           "default": false,
-          "description": "True while at least one interactive question is awaiting the user's answer."
+          "description": "True while at least one interactive question awaits answer, timeout, run-terminal, or interruption release."
         },
         "route": {
           "anyOf": [

package/generated/ControlSettingsSnapshot.schema.json

@@ -13,10 +13,19 @@
           "description": "Config file paths that contributed to the snapshot."
         },
         "interactionTimeoutMs": {
-          "type": "integer",
-          "exclusiveMinimum": 0,
+          "anyOf": [
+            {
+              "type": "integer",
+              "minimum": -9007199254740991,
+              "maximum": 8000000000000000,
+              "exclusiveMinimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
           "default": 900000,
-          "description": "How long a run waits for an interactive answer before a benign decline, in milliseconds."
+          "description": "Automatic-expiry policy for an interactive answer: positive milliseconds deliver a benign decline at the deadline; null disables automatic expiry."
         },
         "routing": {
           "type": "object",

package/generated/ControlSettingsUpdateRequest.schema.json

@@ -78,9 +78,18 @@
           "description": "Per-intent quality tiers ordered highest to lowest; no provider or benchmark priors are inferred."
         },
         "interactionTimeoutMs": {
-          "type": "integer",
-          "exclusiveMinimum": 0,
-          "description": "New interactive-answer timeout, in milliseconds."
+          "anyOf": [
+            {
+              "type": "integer",
+              "minimum": -9007199254740991,
+              "maximum": 8000000000000000,
+              "exclusiveMinimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "New interactive-answer timeout in milliseconds; null disables automatic expiry."
         },
         "primaryHarness": {
           "anyOf": [

package/generated/ControlSetupJob.schema.json

@@ -23,6 +23,15 @@
           "const": "login",
           "description": "The daemon-managed native-login action."
         },
+        "transport": {
+          "type": "string",
+          "enum": [
+            "daemon",
+            "client_pty"
+          ],
+          "description": "Who owns the interactive terminal: daemon opens a local Terminal, or the client attaches its PTY.",
+          "default": "daemon"
+        },
         "profileId": {
           "type": [
             "string",

package/generated/ControlSetupJobCreateRequest.schema.json

@@ -35,6 +35,15 @@
             "browser_redirect"
           ],
           "description": "Codex-only: device_auth (default; app-server device-code, isolated browser window), browser_callback (app-server browser-callback opt-in), or browser_redirect (legacy Terminal localhost callback / fallback)."
+        },
+        "transport": {
+          "type": "string",
+          "enum": [
+            "daemon",
+            "client_pty"
+          ],
+          "description": "Additive terminal handoff. client_pty prepares a sealed login job for `claudexor setup attach`.",
+          "default": "daemon"
         }
       },
       "required": [