@claudexor/schema 3.2.1 → 3.3.7

package/generated/ControlThreadCreateRequest.schema.json

@@ -28,6 +28,11 @@
                   ],
                   "description": "Project context depth; auto is the only mode.",
                   "default": "auto"
+                },
+                "ephemeral": {
+                  "type": "boolean",
+                  "default": false,
+                  "description": "Declare the root one-shot: it anchors this run only, is never entered into the durable project registry, and its commands/run events live in the global no-project partition."
                 }
               },
               "required": [

package/generated/ControlThreadDetail.schema.json

@@ -97,7 +97,7 @@
                     "external_sandbox_full",
                     "inherit_native"
                   ],
-                  "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (full access inside an external sandbox), inherit_native (defer to the harness's own native sandbox settings)."
+                  "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
                 },
                 {
                   "type": "null"

package/generated/ControlThreadListResponse.schema.json

@@ -99,7 +99,7 @@
                       "external_sandbox_full",
                       "inherit_native"
                     ],
-                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (full access inside an external sandbox), inherit_native (defer to the harness's own native sandbox settings)."
+                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
                   },
                   {
                     "type": "null"

package/generated/ControlThreadUpdateRequest.schema.json

@@ -59,7 +59,7 @@
                 "external_sandbox_full",
                 "inherit_native"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (full access inside an external sandbox), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
             },
             {
               "type": "null"

package/generated/CredentialProfileStatus.schema.json

@@ -28,6 +28,15 @@
             "not_run"
           ]
         },
+        "verification_source": {
+          "type": "string",
+          "enum": [
+            "local_store",
+            "vendor"
+          ],
+          "default": "local_store",
+          "description": "How the verification verdict was reached: local_store = the profile's credential material is present locally (says nothing about the token being live); vendor = the vendor answered a request made with this profile's own credential."
+        },
         "detail": {
           "type": "string",
           "description": "Redacted human-readable probe evidence."
@@ -43,7 +52,7 @@
               "type": "null"
             }
           ],
-          "description": "When a probe last verified this profile; null = never verified.",
+          "description": "When the verification verdict was established, by the method named in verification_source; null = never verified.",
           "default": null
         }
       },

package/generated/HarnessManifest.schema.json

@@ -472,7 +472,7 @@
               "external_sandbox_full",
               "inherit_native"
             ],
-            "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (full access inside an external sandbox), inherit_native (defer to the harness's own native sandbox settings)."
+            "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
           },
           "default": [],
           "description": "Access profiles the adapter can enforce."

package/generated/HarnessStatusDto.schema.json

@@ -490,7 +490,7 @@
                       "external_sandbox_full",
                       "inherit_native"
                     ],
-                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (full access inside an external sandbox), inherit_native (defer to the harness's own native sandbox settings)."
+                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
                   },
                   "default": [],
                   "description": "Access profiles the adapter can enforce."

package/generated/McpRunHandleResult.schema.json

@@ -254,9 +254,13 @@
                         "unknown_paid_in_flight",
                         "budget_overshoot",
                         "cost_unverifiable",
-                        "delegation_child_drain_timeout"
+                        "delegation_child_drain_timeout",
+                        "subscription_window_exhausted",
+                        "delegated_home_unavailable",
+                        "delegated_confinement_unavailable",
+                        "delegated_evidence_incomplete"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons and Delegate child-drain timeout)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                     },
                     {
                       "type": "null"
@@ -317,6 +321,19 @@
                   "default": null,
                   "description": "Run artifact directory."
                 },
+                "resetsAt": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "format": "date-time"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "default": null,
+                  "description": "When the refused window reopens (a spent subscription quota window), or null when the failure has no such time. Callers schedule a retry off this field, never off safeMessage."
+                },
                 "nextActions": {
                   "type": "array",
                   "items": {

package/generated/McpRunToolResult.schema.json

@@ -230,9 +230,13 @@
                         "unknown_paid_in_flight",
                         "budget_overshoot",
                         "cost_unverifiable",
-                        "delegation_child_drain_timeout"
+                        "delegation_child_drain_timeout",
+                        "subscription_window_exhausted",
+                        "delegated_home_unavailable",
+                        "delegated_confinement_unavailable",
+                        "delegated_evidence_incomplete"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons and Delegate child-drain timeout)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                     },
                     {
                       "type": "null"
@@ -293,6 +297,19 @@
                   "default": null,
                   "description": "Run artifact directory."
                 },
+                "resetsAt": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "format": "date-time"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "default": null,
+                  "description": "When the refused window reopens (a spent subscription quota window), or null when the failure has no such time. Callers schedule a retry off this field, never off safeMessage."
+                },
                 "nextActions": {
                   "type": "array",
                   "items": {

package/generated/RunFailure.schema.json

@@ -38,9 +38,13 @@
                 "unknown_paid_in_flight",
                 "budget_overshoot",
                 "cost_unverifiable",
-                "delegation_child_drain_timeout"
+                "delegation_child_drain_timeout",
+                "subscription_window_exhausted",
+                "delegated_home_unavailable",
+                "delegated_confinement_unavailable",
+                "delegated_evidence_incomplete"
               ],
-              "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons and Delegate child-drain timeout)."
+              "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
             },
             {
               "type": "null"
@@ -101,6 +105,19 @@
           "default": null,
           "description": "Run artifact directory."
         },
+        "resetsAt": {
+          "anyOf": [
+            {
+              "type": "string",
+              "format": "date-time"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "default": null,
+          "description": "When the refused window reopens (a spent subscription quota window), or null when the failure has no such time. Callers schedule a retry off this field, never off safeMessage."
+        },
         "nextActions": {
           "type": "array",
           "items": {

package/generated/Thread.schema.json

@@ -90,7 +90,7 @@
                 "external_sandbox_full",
                 "inherit_native"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (full access inside an external sandbox), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
             },
             {
               "type": "null"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/schema",
-  "version": "3.2.1",
+  "version": "3.3.7",
   "license": "MIT",
   "description": "Single source of truth for all Claudexor data shapes (Zod + generated JSON Schema).",
   "type": "module",
@@ -20,7 +20,7 @@
   "dependencies": {
     "zod": "^4.4.3",
     "zod-to-json-schema": "^3.24.1",
-    "@claudexor/util": "3.2.1"
+    "@claudexor/util": "3.3.7"
   },
   "repository": {
     "type": "git",