@claudexor/schema 3.20.1 → 3.23.0

package/generated/ControlRunSummary.schema.json

@@ -93,6 +93,390 @@
           "description": "Durable Delegate requested/effective/used receipt projected from engine telemetry; null when legacy telemetry has no receipt.",
           "default": null
         },
+        "continueFrom": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ControlRunSummary/properties/parentRunId/anyOf/0"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Predecessor run this run continues (continueFrom); null for ordinary runs.",
+          "default": null
+        },
+        "resumable": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "cause": {
+                  "type": "string",
+                  "enum": [
+                    "vendor_limit",
+                    "pool_exhausted",
+                    "pinned_limit",
+                    "transport",
+                    "context_exhausted",
+                    "wall_clock",
+                    "cancelled",
+                    "host_restart",
+                    "input_required",
+                    "other"
+                  ],
+                  "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+                },
+                "resetsAt": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "description": "When the spent vendor window reopens, only from a vendor signal; never fabricated."
+                },
+                "limitWindow": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "description": "The vendor's own name for the spent window (e.g. five_hour, seven_day_opus), when known."
+                },
+                "limitEvidence": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "enum": [
+                        "window",
+                        "unspecified"
+                      ],
+                      "description": "window: the vendor named the spent window (a reset instant or a constraint id); unspecified: a typed limit without a window — a bare backoff frame is transport, not a limit."
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "window: the vendor named the spent window (a reset instant or a constraint id); unspecified: a typed limit without a window — a bare backoff frame is transport, not a limit."
+                },
+                "carriers": {
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "enum": [
+                      "native",
+                      "native_moved",
+                      "packet"
+                    ],
+                    "description": "A continuity representation still available for a stopped run."
+                  },
+                  "description": "Continuity representations still available (NOT quota readiness; readiness is described by the limit facts)."
+                },
+                "limitCode": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "description": "The typed vendor limit code that ended the work, when any."
+                },
+                "session": {
+                  "anyOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "harness": {
+                          "$ref": "#/definitions/ControlRunSummary/properties/parentRunId/anyOf/0"
+                        },
+                        "nativeSessionId": {
+                          "type": "string",
+                          "minLength": 1
+                        },
+                        "holderProfileId": {
+                          "anyOf": [
+                            {
+                              "$ref": "#/definitions/ControlRunSummary/properties/parentRunId/anyOf/0"
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ],
+                          "description": "Non-empty identifier string."
+                        }
+                      },
+                      "required": [
+                        "harness",
+                        "nativeSessionId",
+                        "holderProfileId"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "The native session a continuation can resume, when one exists."
+                },
+                "workspace": {
+                  "type": "object",
+                  "properties": {
+                    "kind": {
+                      "type": "string",
+                      "enum": [
+                        "in_place",
+                        "retained_envelope",
+                        "none"
+                      ]
+                    },
+                    "root": {
+                      "type": [
+                        "string",
+                        "null"
+                      ]
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "root"
+                  ],
+                  "additionalProperties": false,
+                  "description": "Where the stopped work's tree is: the live root, a retained envelope, or gone."
+                }
+              },
+              "required": [
+                "cause",
+                "resetsAt",
+                "limitWindow",
+                "limitEvidence",
+                "carriers",
+                "limitCode",
+                "session",
+                "workspace"
+              ],
+              "additionalProperties": false,
+              "description": "Terminal facts of a stopped run that can be continued: cause, limit evidence, available carriers, the native session and the workspace."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Terminal facts of unfinished work that continueFrom can continue; null when the work finished or the run is not terminal.",
+          "default": null
+        },
+        "continuity": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "tryIndex": {
+                "type": "integer",
+                "minimum": 0,
+                "description": "Native try within the attempt; joins the receipt to its try."
+              },
+              "attemptId": {
+                "$ref": "#/definitions/ControlRunSummary/properties/parentRunId/anyOf/0"
+              },
+              "carrier": {
+                "type": "string",
+                "enum": [
+                  "native",
+                  "native_moved",
+                  "packet",
+                  "fresh"
+                ],
+                "description": "Carrier of a continued try: native (the vendor's own session, same account), native_moved (the session file made visible in the next account's store, then resumed there), packet (a fresh session re-grounded by an evidence index), or fresh (nothing to carry — a replay of the original prompt)."
+              },
+              "cause": {
+                "$ref": "#/definitions/ControlRunSummary/properties/resumable/anyOf/0/properties/cause"
+              },
+              "from": {
+                "type": "object",
+                "properties": {
+                  "runId": {
+                    "$ref": "#/definitions/ControlRunSummary/properties/parentRunId/anyOf/0"
+                  },
+                  "attemptId": {
+                    "$ref": "#/definitions/ControlRunSummary/properties/parentRunId/anyOf/0"
+                  },
+                  "profileId": {
+                    "anyOf": [
+                      {
+                        "$ref": "#/definitions/ControlRunSummary/properties/parentRunId/anyOf/0"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "description": "Non-empty identifier string."
+                  }
+                },
+                "required": [
+                  "runId",
+                  "attemptId",
+                  "profileId"
+                ],
+                "additionalProperties": false
+              },
+              "to": {
+                "type": "object",
+                "properties": {
+                  "profileId": {
+                    "anyOf": [
+                      {
+                        "$ref": "#/definitions/ControlRunSummary/properties/parentRunId/anyOf/0"
+                      },
+                      {
+                        "type": "null"
+                      }
+                    ],
+                    "description": "Non-empty identifier string."
+                  }
+                },
+                "required": [
+                  "profileId"
+                ],
+                "additionalProperties": false
+              },
+              "workspace": {
+                "type": "string",
+                "enum": [
+                  "same_root",
+                  "different_root"
+                ],
+                "description": "Whether the continued try runs in the predecessor's execution root."
+              },
+              "memory": {
+                "type": "string",
+                "enum": [
+                  "full",
+                  "partial",
+                  "unknown"
+                ],
+                "description": "Its own fact: a native resume carries the whole history (full); a packet re-brief is partial; a native resume that lost history (e.g. a rejected compacted item) is partial/unknown."
+              },
+              "instructions": {
+                "type": "string",
+                "enum": [
+                  "as_sent",
+                  "vendor_snapshot"
+                ],
+                "description": "as_sent: the successor's instructions equal the predecessor's; vendor_snapshot: they differ, and the vendor may resend its recorded system prompt instead (claude records it on the first request)."
+              },
+              "reingestedTokens": {
+                "anyOf": [
+                  {
+                    "type": "integer",
+                    "minimum": 0
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Input + cache-creation tokens of the first resumed request, when known."
+              },
+              "observedModel": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "description": "THIS try's attested model (never borrowed from another try)."
+              },
+              "modelMismatch": {
+                "type": [
+                  "boolean",
+                  "null"
+                ]
+              },
+              "identityCheck": {
+                "type": "string",
+                "enum": [
+                  "matched_before_effects",
+                  "mismatch_before_effects",
+                  "mismatch_after_possible_effects",
+                  "not_applicable"
+                ],
+                "description": "Whether the resumed vendor session was the one requested, judged at the earliest handshake (codex thread/resume before turn/start; claude system/init): matched, mismatch caught before the child could act, mismatch caught after it may have acted, or not applicable (no resume was requested, or a harness without the continuity capability answered with another session id, which is recorded as before)."
+              },
+              "inputDelivery": {
+                "type": "string",
+                "enum": [
+                  "confirmed",
+                  "uncertain",
+                  "not_applicable"
+                ],
+                "description": "Whether the predecessor's last input (its turn prompt or an admitted steering message) is known to be in the vendor history: confirmed, uncertain (carried in the notice as a reference to reconcile, never replayed blindly), or not applicable."
+              }
+            },
+            "required": [
+              "tryIndex",
+              "attemptId",
+              "carrier",
+              "cause",
+              "from",
+              "to",
+              "workspace",
+              "memory",
+              "instructions",
+              "reingestedTokens",
+              "observedModel",
+              "modelMismatch",
+              "identityCheck",
+              "inputDelivery"
+            ],
+            "additionalProperties": false,
+            "description": "Receipt of one continued try: carrier, cause, accounts, memory, model attestation."
+          },
+          "description": "One receipt per continued try (carrier, cause, accounts, memory, model), from the run's event log: projected on run detail (GET /runs/:id), omitted from list rows."
+        },
+        "retainedEnvelope": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "root": {
+                  "type": "string",
+                  "description": "Absolute path of the kept working tree."
+                },
+                "bytes": {
+                  "anyOf": [
+                    {
+                      "type": "integer",
+                      "minimum": 0
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Disk use of the kept envelope (tree + scoped home); null when not measured."
+                },
+                "retainedAt": {
+                  "type": "string",
+                  "description": "When the envelope was kept."
+                },
+                "cause": {
+                  "anyOf": [
+                    {
+                      "$ref": "#/definitions/ControlRunSummary/properties/resumable/anyOf/0/properties/cause"
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Why the run stopped, when recorded."
+                }
+              },
+              "required": [
+                "root",
+                "bytes",
+                "retainedAt",
+                "cause"
+              ],
+              "additionalProperties": false,
+              "description": "An isolated envelope kept for continuation: continue it with continueFrom, or release it with the discard decision."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Isolated envelope kept for continuation (disk use visible); null when none.",
+          "default": null
+        },
         "taskId": {
           "type": "string",
           "description": "Task id, when allocated."
@@ -470,6 +854,14 @@
           "description": "Project metadata projected onto a run summary.",
           "default": {}
         },
+        "executionRoot": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Tree this run's file references resolve in: a delegated run's recorded execution.workspaceRoot, otherwise project.root; null without a project. The stable identity stays project.root."
+        },
         "mode": {
           "type": "string",
           "enum": [
@@ -1274,7 +1666,7 @@
                         "incomplete",
                         "unverified"
                       ],
-                      "description": "Folded work state: the WorkReport state, or unverified when no report was obtainable (transport unsupported / lane gated)."
+                      "description": "Folded work state: the WorkReport state, or unverified when no valid report was obtained (transport unsupported / lane gated, or an instructed footer missing or broken)."
                     },
                     "source": {
                       "type": "string",
@@ -1330,6 +1722,19 @@
                       },
                       "maxItems": 16,
                       "description": "Carried through from a needs_input/incomplete WorkReport for honest disclosure."
+                    },
+                    "unverified_reason": {
+                      "type": "string",
+                      "enum": [
+                        "footer_missing",
+                        "footer_not_json",
+                        "footer_not_object",
+                        "report_missing",
+                        "report_malformed",
+                        "report_contradictory",
+                        "legacy_output_invalid"
+                      ],
+                      "description": "Present only with state unverified on a validated (instructed footer) source: the disclosed cause of the missing report."
                     }
                   },
                   "required": [

package/generated/ControlSettingsSnapshot.schema.json

@@ -108,7 +108,7 @@
                         "minLength": 1,
                         "maxLength": 32,
                         "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
-                        "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen."
+                        "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, places a word the vendor order lacks by the shared preference order (none < minimal < low < medium < high < xhigh < max < ultra) onto an advertised level, and refuses words neither order places."
                       }
                     },
                     "required": [

package/generated/ControlSettingsUpdateRequest.schema.json

@@ -45,7 +45,7 @@
                     "minLength": 1,
                     "maxLength": 32,
                     "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
-                    "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen."
+                    "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, places a word the vendor order lacks by the shared preference order (none < minimal < low < medium < high < xhigh < max < ultra) onto an advertised level, and refuses words neither order places."
                   }
                 },
                 "required": [

package/generated/ControlThread.schema.json

@@ -53,11 +53,20 @@
           "type": "string",
           "enum": [
             "in_place",
-            "isolated"
+            "isolated",
+            "delegated"
           ],
-          "description": "Per-thread workspace mode: in_place mutates the live project tree directly (the default); isolated keeps a persistent git worktree per thread that apply merges into the project.",
+          "description": "Per-thread workspace mode: in_place mutates the live project tree directly (the default); isolated keeps a persistent git worktree per thread that apply merges into the project; delegated runs every turn in one caller-owned workspace bound at creation, which Claudexor never applies to the project or deletes.",
           "default": "in_place"
         },
+        "workspaceRoot": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "default": null,
+          "description": "Caller-owned workspace a delegated thread executes in; null for in_place and isolated threads."
+        },
         "authPreference": {
           "type": "string",
           "enum": [

package/generated/ControlThreadCreateRequest.schema.json

@@ -81,9 +81,14 @@
           "type": "string",
           "enum": [
             "in_place",
-            "isolated"
+            "isolated",
+            "delegated"
           ],
-          "description": "Workspace mode for the thread (in_place or isolated)."
+          "description": "Workspace mode for the thread (in_place, isolated, or delegated)."
+        },
+        "workspaceRoot": {
+          "type": "string",
+          "description": "Absolute existing caller-owned directory every turn of a workspace='delegated' thread executes in. Required exactly for that workspace, project scope only, and immutable after creation; scope.root stays the stable project identity."
         },
         "authPreference": {
           "type": "string",

package/generated/ControlThreadDetail.schema.json

@@ -56,11 +56,20 @@
               "type": "string",
               "enum": [
                 "in_place",
-                "isolated"
+                "isolated",
+                "delegated"
               ],
-              "description": "Per-thread workspace mode: in_place mutates the live project tree directly (the default); isolated keeps a persistent git worktree per thread that apply merges into the project.",
+              "description": "Per-thread workspace mode: in_place mutates the live project tree directly (the default); isolated keeps a persistent git worktree per thread that apply merges into the project; delegated runs every turn in one caller-owned workspace bound at creation, which Claudexor never applies to the project or deletes.",
               "default": "in_place"
             },
+            "workspaceRoot": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Caller-owned workspace a delegated thread executes in; null for in_place and isolated threads."
+            },
             "authPreference": {
               "type": "string",
               "enum": [
@@ -597,7 +606,7 @@
                                       "incomplete",
                                       "unverified"
                                     ],
-                                    "description": "Folded work state: the WorkReport state, or unverified when no report was obtainable (transport unsupported / lane gated)."
+                                    "description": "Folded work state: the WorkReport state, or unverified when no valid report was obtained (transport unsupported / lane gated, or an instructed footer missing or broken)."
                                   },
                                   "source": {
                                     "type": "string",
@@ -653,6 +662,19 @@
                                     },
                                     "maxItems": 16,
                                     "description": "Carried through from a needs_input/incomplete WorkReport for honest disclosure."
+                                  },
+                                  "unverified_reason": {
+                                    "type": "string",
+                                    "enum": [
+                                      "footer_missing",
+                                      "footer_not_json",
+                                      "footer_not_object",
+                                      "report_missing",
+                                      "report_malformed",
+                                      "report_contradictory",
+                                      "legacy_output_invalid"
+                                    ],
+                                    "description": "Present only with state unverified on a validated (instructed footer) source: the disclosed cause of the missing report."
                                   }
                                 },
                                 "required": [

package/generated/ControlThreadListResponse.schema.json

@@ -58,11 +58,20 @@
                 "type": "string",
                 "enum": [
                   "in_place",
-                  "isolated"
+                  "isolated",
+                  "delegated"
                 ],
-                "description": "Per-thread workspace mode: in_place mutates the live project tree directly (the default); isolated keeps a persistent git worktree per thread that apply merges into the project.",
+                "description": "Per-thread workspace mode: in_place mutates the live project tree directly (the default); isolated keeps a persistent git worktree per thread that apply merges into the project; delegated runs every turn in one caller-owned workspace bound at creation, which Claudexor never applies to the project or deletes.",
                 "default": "in_place"
               },
+              "workspaceRoot": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "default": null,
+                "description": "Caller-owned workspace a delegated thread executes in; null for in_place and isolated threads."
+              },
               "authPreference": {
                 "type": "string",
                 "enum": [

package/generated/ControlThreadTurnRequest.schema.json

@@ -320,6 +320,10 @@
           },
           "description": "Typed per-run approvals for changing auto-protected gate/test paths; does not bypass built-in critical/security path human gates."
         },
+        "continueModelInherited": {
+          "type": "boolean",
+          "description": "Internal continuation model provenance; direct POST /runs rejects it."
+        },
         "planRunId": {
           "type": "string",
           "minLength": 1,

package/generated/DecisionRecord.schema.json

@@ -107,7 +107,7 @@
                     "incomplete",
                     "unverified"
                   ],
-                  "description": "Folded work state: the WorkReport state, or unverified when no report was obtainable (transport unsupported / lane gated)."
+                  "description": "Folded work state: the WorkReport state, or unverified when no valid report was obtained (transport unsupported / lane gated, or an instructed footer missing or broken)."
                 },
                 "source": {
                   "type": "string",
@@ -163,6 +163,19 @@
                   },
                   "maxItems": 16,
                   "description": "Carried through from a needs_input/incomplete WorkReport for honest disclosure."
+                },
+                "unverified_reason": {
+                  "type": "string",
+                  "enum": [
+                    "footer_missing",
+                    "footer_not_json",
+                    "footer_not_object",
+                    "report_missing",
+                    "report_malformed",
+                    "report_contradictory",
+                    "legacy_output_invalid"
+                  ],
+                  "description": "Present only with state unverified on a validated (instructed footer) source: the disclosed cause of the missing report."
                 }
               },
               "required": [