@claudexor/schema 3.20.1 → 3.23.0

package/generated/EnvelopeCustody.schema.json

@@ -0,0 +1,195 @@
+{
+  "$ref": "#/definitions/EnvelopeCustody",
+  "definitions": {
+    "EnvelopeCustody": {
+      "type": "object",
+      "properties": {
+        "version": {
+          "type": "number",
+          "const": 1
+        },
+        "state": {
+          "type": "string",
+          "enum": [
+            "live",
+            "retained"
+          ]
+        },
+        "holder_run_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Run that holds the envelope."
+        },
+        "holder_run_dir": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Absolute run directory of the holder."
+        },
+        "envelope": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Envelope id."
+            },
+            "task_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Task the envelope belongs to."
+            },
+            "attempt_id": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Attempt the envelope belongs to."
+            },
+            "repo_root": {
+              "type": "string",
+              "description": "Absolute path of the source repository root."
+            },
+            "base_ref": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Git base ref; null for directory execution."
+            },
+            "base_sha": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "default": null,
+              "description": "Resolved base commit SHA; null when not recorded."
+            },
+            "worktree_path": {
+              "type": "string",
+              "description": "Absolute actual execution directory, whether Git-backed or plain."
+            },
+            "branch_name": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Clone-local branch; null for directory execution."
+            },
+            "workspace_kind": {
+              "type": "string",
+              "enum": [
+                "git",
+                "directory"
+              ]
+            },
+            "scope_paths": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "home_dir": {
+              "type": "string",
+              "description": "Scoped HOME directory for the harness process (kept outside the checkout)."
+            },
+            "harness_config_dirs": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              },
+              "default": {},
+              "description": "Scoped per-harness config directories keyed by harness id (kept outside the checkout)."
+            },
+            "policy_profile": {
+              "type": "string",
+              "default": "workspace_write",
+              "description": "Access profile the envelope enforces."
+            },
+            "dirty_policy": {
+              "type": "string",
+              "enum": [
+                "refuse",
+                "snapshot"
+              ],
+              "description": "How a dirty working tree is handled when creating an envelope: snapshot captures the dirty state as the base SHA without touching the live tree; refuse fails loudly.",
+              "default": "refuse"
+            },
+            "created_at": {
+              "type": "string",
+              "minLength": 1,
+              "description": "When the envelope was created."
+            }
+          },
+          "required": [
+            "id",
+            "task_id",
+            "attempt_id",
+            "repo_root",
+            "base_ref",
+            "worktree_path",
+            "branch_name",
+            "home_dir",
+            "created_at"
+          ],
+          "additionalProperties": false,
+          "description": "The envelope exactly as created (adoption reuses it)."
+        },
+        "cause": {
+          "anyOf": [
+            {
+              "type": "string",
+              "enum": [
+                "vendor_limit",
+                "pool_exhausted",
+                "pinned_limit",
+                "transport",
+                "context_exhausted",
+                "wall_clock",
+                "cancelled",
+                "host_restart",
+                "input_required",
+                "other"
+              ],
+              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Why the holder stopped; null while live."
+        },
+        "retained_at": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "When custody became retained; null while live."
+        },
+        "bytes": {
+          "anyOf": [
+            {
+              "type": "integer",
+              "minimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Disk use measured when retained (the kept envelope is not written to); null while live or unmeasured."
+        }
+      },
+      "required": [
+        "version",
+        "state",
+        "holder_run_id",
+        "holder_run_dir",
+        "envelope",
+        "cause",
+        "retained_at",
+        "bytes"
+      ],
+      "additionalProperties": false,
+      "description": "Durable custody record of an isolated envelope (live or retained for continuation)."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/GlobalConfig.schema.json

@@ -106,7 +106,7 @@
                         "minLength": 1,
                         "maxLength": 32,
                         "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
-                        "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen."
+                        "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, places a word the vendor order lacks by the shared preference order (none < minimal < low < medium < high < xhigh < max < ultra) onto an advertised level, and refuses words neither order places."
                       }
                     },
                     "required": [

package/generated/HarnessEvent.schema.json

@@ -601,7 +601,6 @@
             "raw_patch_outside_scope",
             "raw_patch_stale_preimage",
             "raw_patch_binary_unsupported",
-            "raw_patch_sensitive_content",
             "raw_patch_truncated",
             "raw_patch_apply_failed"
           ],
@@ -792,6 +791,12 @@
                       }
                     ]
                   },
+                  "applies_to_model_prefixes": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/definitions/HarnessEvent/properties/credential_profile_id"
+                    }
+                  },
                   "applies_to_unspecified_model": {
                     "type": "boolean"
                   },
@@ -850,7 +855,7 @@
                   "resets_at"
                 ],
                 "additionalProperties": false,
-                "description": "One independent vendor quota window; omitted/null applies_to_models means every model, and null usage stays unknown."
+                "description": "One independent vendor quota window; without model ids or declared prefixes it applies to every model, and null usage stays unknown."
               }
             }
           },

package/generated/HarnessManifest.schema.json

@@ -525,7 +525,7 @@
                 "minLength": 1,
                 "maxLength": 32,
                 "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
-                "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen."
+                "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, places a word the vendor order lacks by the shared preference order (none < minimal < low < medium < high < xhigh < max < ultra) onto an advertised level, and refuses words neither order places."
               },
               "default": [],
               "description": "Ordered (weakest to strongest) reasoning-effort levels this harness accepts across all its models; empty means effort is not a tunable surface."

package/generated/HarnessStatusDto.schema.json

@@ -543,7 +543,7 @@
                         "minLength": 1,
                         "maxLength": 32,
                         "pattern": "^[a-z0-9]+(?:[_-][a-z0-9]+)*$",
-                        "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen."
+                        "description": "Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, places a word the vendor order lacks by the shared preference order (none < minimal < low < medium < high < xhigh < max < ultra) onto an advertised level, and refuses words neither order places."
                       },
                       "default": [],
                       "description": "Ordered (weakest to strongest) reasoning-effort levels this harness accepts across all its models; empty means effort is not a tunable surface."

package/generated/McpRunHandleResult.schema.json

@@ -331,7 +331,7 @@
                             "incomplete",
                             "unverified"
                           ],
-                          "description": "Folded work state: the WorkReport state, or unverified when no report was obtainable (transport unsupported / lane gated)."
+                          "description": "Folded work state: the WorkReport state, or unverified when no valid report was obtained (transport unsupported / lane gated, or an instructed footer missing or broken)."
                         },
                         "source": {
                           "type": "string",
@@ -387,6 +387,19 @@
                           },
                           "maxItems": 16,
                           "description": "Carried through from a needs_input/incomplete WorkReport for honest disclosure."
+                        },
+                        "unverified_reason": {
+                          "type": "string",
+                          "enum": [
+                            "footer_missing",
+                            "footer_not_json",
+                            "footer_not_object",
+                            "report_missing",
+                            "report_malformed",
+                            "report_contradictory",
+                            "legacy_output_invalid"
+                          ],
+                          "description": "Present only with state unverified on a validated (instructed footer) source: the disclosed cause of the missing report."
                         }
                       },
                       "required": [
@@ -1517,6 +1530,101 @@
           ],
           "description": "Typed post-terminal detail-read problem (the durable run handle survives); null when the detail read succeeded.",
           "default": null
+        },
+        "secretLike": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "totalMatches": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "description": "Strings hidden across patch and answer."
+                },
+                "answerMatches": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "description": "Strings hidden in the answer."
+                },
+                "files": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "path": {
+                        "type": "string",
+                        "description": "Changed file whose saved diff hides strings."
+                      },
+                      "matches": {
+                        "type": "integer",
+                        "minimum": 0,
+                        "description": "Strings hidden in that file's diff."
+                      },
+                      "kinds": {
+                        "type": "array",
+                        "items": {
+                          "type": "string"
+                        },
+                        "description": "Content-rule ids that matched."
+                      }
+                    },
+                    "required": [
+                      "path",
+                      "matches",
+                      "kinds"
+                    ],
+                    "additionalProperties": false
+                  },
+                  "description": "Changed files with hidden strings in the saved patch copy."
+                },
+                "binaryPaths": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  },
+                  "description": "Binary files whose payload the saved patch omits."
+                },
+                "mediaWithheld": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  },
+                  "description": "Images that were not saved as produced outputs."
+                },
+                "persistedPatch": {
+                  "type": "string",
+                  "enum": [
+                    "exact",
+                    "redacted"
+                  ],
+                  "description": "Whether the saved final/patch.diff is byte-exact or a display-only redacted copy."
+                },
+                "exactPatchRecorded": {
+                  "type": [
+                    "boolean",
+                    "null"
+                  ],
+                  "description": "For a redacted copy: whether the private exact patch object was recorded (false = deferred Apply answers patch_exact_bytes_unavailable); null for an exact copy."
+                }
+              },
+              "required": [
+                "totalMatches",
+                "answerMatches",
+                "files",
+                "binaryPaths",
+                "mediaWithheld",
+                "persistedPatch",
+                "exactPatchRecorded"
+              ],
+              "additionalProperties": false,
+              "description": "What a run's saved copies hide: secret-like strings kept in the work, hidden on disk."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "INV-062 disclosure: secret-like strings kept in the work but hidden in saved copies (paths and counts only); null when nothing was hidden.",
+          "default": null
         }
       },
       "required": [

package/generated/McpRunToolResult.schema.json

@@ -328,7 +328,7 @@
                             "incomplete",
                             "unverified"
                           ],
-                          "description": "Folded work state: the WorkReport state, or unverified when no report was obtainable (transport unsupported / lane gated)."
+                          "description": "Folded work state: the WorkReport state, or unverified when no valid report was obtained (transport unsupported / lane gated, or an instructed footer missing or broken)."
                         },
                         "source": {
                           "type": "string",
@@ -384,6 +384,19 @@
                           },
                           "maxItems": 16,
                           "description": "Carried through from a needs_input/incomplete WorkReport for honest disclosure."
+                        },
+                        "unverified_reason": {
+                          "type": "string",
+                          "enum": [
+                            "footer_missing",
+                            "footer_not_json",
+                            "footer_not_object",
+                            "report_missing",
+                            "report_malformed",
+                            "report_contradictory",
+                            "legacy_output_invalid"
+                          ],
+                          "description": "Present only with state unverified on a validated (instructed footer) source: the disclosed cause of the missing report."
                         }
                       },
                       "required": [

package/generated/RunContinuityReceipt.schema.json

@@ -0,0 +1,182 @@
+{
+  "$ref": "#/definitions/RunContinuityReceipt",
+  "definitions": {
+    "RunContinuityReceipt": {
+      "type": "object",
+      "properties": {
+        "tryIndex": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Native try within the attempt; joins the receipt to its try."
+        },
+        "attemptId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Non-empty identifier string."
+        },
+        "carrier": {
+          "type": "string",
+          "enum": [
+            "native",
+            "native_moved",
+            "packet",
+            "fresh"
+          ],
+          "description": "Carrier of a continued try: native (the vendor's own session, same account), native_moved (the session file made visible in the next account's store, then resumed there), packet (a fresh session re-grounded by an evidence index), or fresh (nothing to carry — a replay of the original prompt)."
+        },
+        "cause": {
+          "type": "string",
+          "enum": [
+            "vendor_limit",
+            "pool_exhausted",
+            "pinned_limit",
+            "transport",
+            "context_exhausted",
+            "wall_clock",
+            "cancelled",
+            "host_restart",
+            "input_required",
+            "other"
+          ],
+          "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+        },
+        "from": {
+          "type": "object",
+          "properties": {
+            "runId": {
+              "$ref": "#/definitions/RunContinuityReceipt/properties/attemptId"
+            },
+            "attemptId": {
+              "$ref": "#/definitions/RunContinuityReceipt/properties/attemptId"
+            },
+            "profileId": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/RunContinuityReceipt/properties/attemptId"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Non-empty identifier string."
+            }
+          },
+          "required": [
+            "runId",
+            "attemptId",
+            "profileId"
+          ],
+          "additionalProperties": false
+        },
+        "to": {
+          "type": "object",
+          "properties": {
+            "profileId": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/RunContinuityReceipt/properties/attemptId"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Non-empty identifier string."
+            }
+          },
+          "required": [
+            "profileId"
+          ],
+          "additionalProperties": false
+        },
+        "workspace": {
+          "type": "string",
+          "enum": [
+            "same_root",
+            "different_root"
+          ],
+          "description": "Whether the continued try runs in the predecessor's execution root."
+        },
+        "memory": {
+          "type": "string",
+          "enum": [
+            "full",
+            "partial",
+            "unknown"
+          ],
+          "description": "Its own fact: a native resume carries the whole history (full); a packet re-brief is partial; a native resume that lost history (e.g. a rejected compacted item) is partial/unknown."
+        },
+        "instructions": {
+          "type": "string",
+          "enum": [
+            "as_sent",
+            "vendor_snapshot"
+          ],
+          "description": "as_sent: the successor's instructions equal the predecessor's; vendor_snapshot: they differ, and the vendor may resend its recorded system prompt instead (claude records it on the first request)."
+        },
+        "reingestedTokens": {
+          "anyOf": [
+            {
+              "type": "integer",
+              "minimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Input + cache-creation tokens of the first resumed request, when known."
+        },
+        "observedModel": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "THIS try's attested model (never borrowed from another try)."
+        },
+        "modelMismatch": {
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "identityCheck": {
+          "type": "string",
+          "enum": [
+            "matched_before_effects",
+            "mismatch_before_effects",
+            "mismatch_after_possible_effects",
+            "not_applicable"
+          ],
+          "description": "Whether the resumed vendor session was the one requested, judged at the earliest handshake (codex thread/resume before turn/start; claude system/init): matched, mismatch caught before the child could act, mismatch caught after it may have acted, or not applicable (no resume was requested, or a harness without the continuity capability answered with another session id, which is recorded as before)."
+        },
+        "inputDelivery": {
+          "type": "string",
+          "enum": [
+            "confirmed",
+            "uncertain",
+            "not_applicable"
+          ],
+          "description": "Whether the predecessor's last input (its turn prompt or an admitted steering message) is known to be in the vendor history: confirmed, uncertain (carried in the notice as a reference to reconcile, never replayed blindly), or not applicable."
+        }
+      },
+      "required": [
+        "tryIndex",
+        "attemptId",
+        "carrier",
+        "cause",
+        "from",
+        "to",
+        "workspace",
+        "memory",
+        "instructions",
+        "reingestedTokens",
+        "observedModel",
+        "modelMismatch",
+        "identityCheck",
+        "inputDelivery"
+      ],
+      "additionalProperties": false,
+      "description": "Receipt of one continued try: carrier, cause, accounts, memory, model attestation."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/RunEvent.schema.json

@@ -101,7 +101,9 @@
             "run.completed",
             "run.failed",
             "run.continuation",
-            "run.continuation.denied"
+            "run.continuation.denied",
+            "run.continuity",
+            "workspace.retained"
           ],
           "description": "Type of an append-only run event, covering run lifecycle, contract/context creation, budget, routing fallbacks, harness activity, interactions, gates, review, arbitration, work products, and control verbs."
         },

package/generated/RunFacts.schema.json

@@ -116,7 +116,7 @@
                     "incomplete",
                     "unverified"
                   ],
-                  "description": "Folded work state: the WorkReport state, or unverified when no report was obtainable (transport unsupported / lane gated)."
+                  "description": "Folded work state: the WorkReport state, or unverified when no valid report was obtained (transport unsupported / lane gated, or an instructed footer missing or broken)."
                 },
                 "source": {
                   "type": "string",
@@ -172,6 +172,19 @@
                   },
                   "maxItems": 16,
                   "description": "Carried through from a needs_input/incomplete WorkReport for honest disclosure."
+                },
+                "unverified_reason": {
+                  "type": "string",
+                  "enum": [
+                    "footer_missing",
+                    "footer_not_json",
+                    "footer_not_object",
+                    "report_missing",
+                    "report_malformed",
+                    "report_contradictory",
+                    "legacy_output_invalid"
+                  ],
+                  "description": "Present only with state unverified on a validated (instructed footer) source: the disclosed cause of the missing report."
                 }
               },
               "required": [