@claudexor/schema 3.4.2 → 3.6.0

package/generated/ControlCredentialProfilesQueryResponse.schema.json

@@ -284,7 +284,83 @@
                 "description": "Per-harness accounts authority: native CLI-login state + the informational next-up identity."
               },
               "default": [],
-              "description": "Per-harness accounts authority (INV-135): the native CLI-login pseudo-row state and the server-computed Active identity, so no surface re-derives the accounts symmetry."
+              "description": "Per-harness accounts authority (INV-135): the native CLI-login pseudo-row state and the server-computed Active identity, so no surface re-derives the accounts symmetry. A unified-model engine emits [] here (the key must stay present for legacy strict clients) and carries routing facts in accountPools instead."
+            },
+            "accountPools": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "harness_id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Harness family this pool verdict belongs to."
+                  },
+                  "next_up": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "kind": {
+                            "type": "string",
+                            "const": "profile"
+                          },
+                          "profileId": {
+                            "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/profiles/items/properties/status/properties/profile_id"
+                          }
+                        },
+                        "required": [
+                          "kind",
+                          "profileId"
+                        ],
+                        "additionalProperties": false,
+                        "description": "An enabled account row is who an unpinned run routes to next."
+                      },
+                      {
+                        "type": "object",
+                        "properties": {
+                          "kind": {
+                            "type": "string",
+                            "const": "api_key_route"
+                          }
+                        },
+                        "required": [
+                          "kind"
+                        ],
+                        "additionalProperties": false,
+                        "description": "The account pool is empty or exhausted; the unpinned route is the policy-governed API key (INV-061) — a route, never an account row."
+                      },
+                      {
+                        "type": "object",
+                        "properties": {
+                          "kind": {
+                            "type": "string",
+                            "const": "none"
+                          },
+                          "reason": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "kind",
+                          "reason"
+                        ],
+                        "additionalProperties": false,
+                        "description": "An unpinned run has nothing routable, with a human reason."
+                      }
+                    ],
+                    "description": "Server-computed pool routing verdict for one harness's unpinned runs (unified account model)."
+                  }
+                },
+                "required": [
+                  "harness_id",
+                  "next_up"
+                ],
+                "additionalProperties": false,
+                "description": "Per-harness pool authority (unified account model): who an unpinned run routes to next."
+              },
+              "default": [],
+              "description": "Additive per-harness pool authority of the unified account model: routing facts (next_up incl. the api_key_route kind) live here so legacy strict next_up decoders never see unknown kinds. Old clients ignore this key."
             }
           },
           "required": [
@@ -302,6 +378,9 @@
             "harnessAccounts": {
               "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/harnessAccounts"
             },
+            "accountPools": {
+              "$ref": "#/definitions/ControlCredentialProfilesQueryResponse/anyOf/0/properties/accountPools"
+            },
             "harnesses": {
               "type": "array",
               "items": {
@@ -1175,6 +1254,9 @@
                                 }
                               ]
                             },
+                            "applies_to_unspecified_model": {
+                              "type": "boolean"
+                            },
                             "used_ratio": {
                               "anyOf": [
                                 {
@@ -1240,7 +1322,9 @@
                           "codex_rollout",
                           "claude_statusline",
                           "claude_api_retry",
-                          "claude_oauth_usage"
+                          "claude_oauth_usage",
+                          "agy_command_usage",
+                          "cursor_rate_limit"
                         ],
                         "description": "Machine-readable source of quota evidence, classified by schema-owned traits."
                       },
@@ -1321,7 +1405,7 @@
                                 "resets_at"
                               ],
                               "additionalProperties": false,
-                              "description": "A spent or cooling window that applies only to the named models. Without a requested model it never sets the whole subject exhausted; when the request names a model it covers, it blocks that request too (and is then also listed in blocking_constraints). resets_at is its earliest known release instant (null = unknown)."
+                              "description": "A spent or cooling window that applies only to the named models. Without a requested model only a window that DECLARES it governs the unspecified-model route can exhaust the subject; when the request names a model it covers, it blocks that request too (and is then also listed in blocking_constraints). resets_at is its earliest known release instant (null = unknown)."
                             },
                             "description": "Every spent/cooling model-scoped window, listed regardless of state so consumers see partial exhaustion without re-deriving constraint scope."
                           }

package/generated/ControlCredentialProfilesResponse.schema.json

@@ -282,7 +282,83 @@
             "description": "Per-harness accounts authority: native CLI-login state + the informational next-up identity."
           },
           "default": [],
-          "description": "Per-harness accounts authority (INV-135): the native CLI-login pseudo-row state and the server-computed Active identity, so no surface re-derives the accounts symmetry."
+          "description": "Per-harness accounts authority (INV-135): the native CLI-login pseudo-row state and the server-computed Active identity, so no surface re-derives the accounts symmetry. A unified-model engine emits [] here (the key must stay present for legacy strict clients) and carries routing facts in accountPools instead."
+        },
+        "accountPools": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "harness_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Harness family this pool verdict belongs to."
+              },
+              "next_up": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "profile"
+                      },
+                      "profileId": {
+                        "$ref": "#/definitions/ControlCredentialProfilesResponse/properties/profiles/items/properties/status/properties/profile_id"
+                      }
+                    },
+                    "required": [
+                      "kind",
+                      "profileId"
+                    ],
+                    "additionalProperties": false,
+                    "description": "An enabled account row is who an unpinned run routes to next."
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "api_key_route"
+                      }
+                    },
+                    "required": [
+                      "kind"
+                    ],
+                    "additionalProperties": false,
+                    "description": "The account pool is empty or exhausted; the unpinned route is the policy-governed API key (INV-061) — a route, never an account row."
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "none"
+                      },
+                      "reason": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "kind",
+                      "reason"
+                    ],
+                    "additionalProperties": false,
+                    "description": "An unpinned run has nothing routable, with a human reason."
+                  }
+                ],
+                "description": "Server-computed pool routing verdict for one harness's unpinned runs (unified account model)."
+              }
+            },
+            "required": [
+              "harness_id",
+              "next_up"
+            ],
+            "additionalProperties": false,
+            "description": "Per-harness pool authority (unified account model): who an unpinned run routes to next."
+          },
+          "default": [],
+          "description": "Additive per-harness pool authority of the unified account model: routing facts (next_up incl. the api_key_route kind) live here so legacy strict next_up decoders never see unknown kinds. Old clients ignore this key."
         }
       },
       "required": [

package/generated/ControlCredentialProfilesSnapshotResponse.schema.json

@@ -282,7 +282,83 @@
             "description": "Per-harness accounts authority: native CLI-login state + the informational next-up identity."
           },
           "default": [],
-          "description": "Per-harness accounts authority (INV-135): the native CLI-login pseudo-row state and the server-computed Active identity, so no surface re-derives the accounts symmetry."
+          "description": "Per-harness accounts authority (INV-135): the native CLI-login pseudo-row state and the server-computed Active identity, so no surface re-derives the accounts symmetry. A unified-model engine emits [] here (the key must stay present for legacy strict clients) and carries routing facts in accountPools instead."
+        },
+        "accountPools": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "harness_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Harness family this pool verdict belongs to."
+              },
+              "next_up": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "profile"
+                      },
+                      "profileId": {
+                        "$ref": "#/definitions/ControlCredentialProfilesSnapshotResponse/properties/profiles/items/properties/status/properties/profile_id"
+                      }
+                    },
+                    "required": [
+                      "kind",
+                      "profileId"
+                    ],
+                    "additionalProperties": false,
+                    "description": "An enabled account row is who an unpinned run routes to next."
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "api_key_route"
+                      }
+                    },
+                    "required": [
+                      "kind"
+                    ],
+                    "additionalProperties": false,
+                    "description": "The account pool is empty or exhausted; the unpinned route is the policy-governed API key (INV-061) — a route, never an account row."
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "none"
+                      },
+                      "reason": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "kind",
+                      "reason"
+                    ],
+                    "additionalProperties": false,
+                    "description": "An unpinned run has nothing routable, with a human reason."
+                  }
+                ],
+                "description": "Server-computed pool routing verdict for one harness's unpinned runs (unified account model)."
+              }
+            },
+            "required": [
+              "harness_id",
+              "next_up"
+            ],
+            "additionalProperties": false,
+            "description": "Per-harness pool authority (unified account model): who an unpinned run routes to next."
+          },
+          "default": [],
+          "description": "Additive per-harness pool authority of the unified account model: routing facts (next_up incl. the api_key_route kind) live here so legacy strict next_up decoders never see unknown kinds. Old clients ignore this key."
         },
         "harnesses": {
           "type": "array",
@@ -1157,6 +1233,9 @@
                             }
                           ]
                         },
+                        "applies_to_unspecified_model": {
+                          "type": "boolean"
+                        },
                         "used_ratio": {
                           "anyOf": [
                             {
@@ -1222,7 +1301,9 @@
                       "codex_rollout",
                       "claude_statusline",
                       "claude_api_retry",
-                      "claude_oauth_usage"
+                      "claude_oauth_usage",
+                      "agy_command_usage",
+                      "cursor_rate_limit"
                     ],
                     "description": "Machine-readable source of quota evidence, classified by schema-owned traits."
                   },
@@ -1303,7 +1384,7 @@
                             "resets_at"
                           ],
                           "additionalProperties": false,
-                          "description": "A spent or cooling window that applies only to the named models. Without a requested model it never sets the whole subject exhausted; when the request names a model it covers, it blocks that request too (and is then also listed in blocking_constraints). resets_at is its earliest known release instant (null = unknown)."
+                          "description": "A spent or cooling window that applies only to the named models. Without a requested model only a window that DECLARES it governs the unspecified-model route can exhaust the subject; when the request names a model it covers, it blocks that request too (and is then also listed in blocking_constraints). resets_at is its earliest known release instant (null = unknown)."
                         },
                         "description": "Every spent/cooling model-scoped window, listed regardless of state so consumers see partial exhaustion without re-deriving constraint scope."
                       }

package/generated/ControlHarnessAccountPool.schema.json

@@ -0,0 +1,79 @@
+{
+  "$ref": "#/definitions/ControlHarnessAccountPool",
+  "definitions": {
+    "ControlHarnessAccountPool": {
+      "type": "object",
+      "properties": {
+        "harness_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Harness family this pool verdict belongs to."
+        },
+        "next_up": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "const": "profile"
+                },
+                "profileId": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Non-empty identifier string."
+                }
+              },
+              "required": [
+                "kind",
+                "profileId"
+              ],
+              "additionalProperties": false,
+              "description": "An enabled account row is who an unpinned run routes to next."
+            },
+            {
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "const": "api_key_route"
+                }
+              },
+              "required": [
+                "kind"
+              ],
+              "additionalProperties": false,
+              "description": "The account pool is empty or exhausted; the unpinned route is the policy-governed API key (INV-061) — a route, never an account row."
+            },
+            {
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "const": "none"
+                },
+                "reason": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "kind",
+                "reason"
+              ],
+              "additionalProperties": false,
+              "description": "An unpinned run has nothing routable, with a human reason."
+            }
+          ],
+          "description": "Server-computed pool routing verdict for one harness's unpinned runs (unified account model)."
+        }
+      },
+      "required": [
+        "harness_id",
+        "next_up"
+      ],
+      "additionalProperties": false,
+      "description": "Per-harness pool authority (unified account model): who an unpinned run routes to next."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlHarnessSettingsPatch.schema.json

@@ -112,11 +112,12 @@
         "profileLimitAction": {
           "type": "string",
           "enum": [
+            "auto",
             "fail",
             "ask",
             "rotate"
           ],
-          "description": "New profile-selection limit action (fail | ask | rotate)."
+          "description": "New profile-selection limit action (auto | fail | ask | rotate)."
         }
       },
       "additionalProperties": false,

package/generated/ControlPoolNextUp.schema.json

@@ -0,0 +1,63 @@
+{
+  "$ref": "#/definitions/ControlPoolNextUp",
+  "definitions": {
+    "ControlPoolNextUp": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "profile"
+            },
+            "profileId": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            }
+          },
+          "required": [
+            "kind",
+            "profileId"
+          ],
+          "additionalProperties": false,
+          "description": "An enabled account row is who an unpinned run routes to next."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "api_key_route"
+            }
+          },
+          "required": [
+            "kind"
+          ],
+          "additionalProperties": false,
+          "description": "The account pool is empty or exhausted; the unpinned route is the policy-governed API key (INV-061) — a route, never an account row."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "none"
+            },
+            "reason": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "kind",
+            "reason"
+          ],
+          "additionalProperties": false,
+          "description": "An unpinned run has nothing routable, with a human reason."
+        }
+      ],
+      "description": "Server-computed pool routing verdict for one harness's unpinned runs (unified account model)."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlQuotaResponse.schema.json

@@ -72,6 +72,9 @@
                         }
                       ]
                     },
+                    "applies_to_unspecified_model": {
+                      "type": "boolean"
+                    },
                     "used_ratio": {
                       "anyOf": [
                         {
@@ -137,7 +140,9 @@
                   "codex_rollout",
                   "claude_statusline",
                   "claude_api_retry",
-                  "claude_oauth_usage"
+                  "claude_oauth_usage",
+                  "agy_command_usage",
+                  "cursor_rate_limit"
                 ],
                 "description": "Machine-readable source of quota evidence, classified by schema-owned traits."
               },
@@ -218,7 +223,7 @@
                         "resets_at"
                       ],
                       "additionalProperties": false,
-                      "description": "A spent or cooling window that applies only to the named models. Without a requested model it never sets the whole subject exhausted; when the request names a model it covers, it blocks that request too (and is then also listed in blocking_constraints). resets_at is its earliest known release instant (null = unknown)."
+                      "description": "A spent or cooling window that applies only to the named models. Without a requested model only a window that DECLARES it governs the unspecified-model route can exhaust the subject; when the request names a model it covers, it blocks that request too (and is then also listed in blocking_constraints). resets_at is its earliest known release instant (null = unknown)."
                     },
                     "description": "Every spent/cooling model-scoped window, listed regardless of state so consumers see partial exhaustion without re-deriving constraint scope."
                   }

package/generated/ControlRunDetail.schema.json

@@ -161,11 +161,12 @@
                             "cost_unverifiable",
                             "delegation_child_drain_timeout",
                             "subscription_window_exhausted",
+                            "credential_pool_exhausted",
                             "delegated_home_unavailable",
                             "delegated_confinement_unavailable",
                             "delegated_evidence_incomplete"
                           ],
-                          "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                          "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                         },
                         {
                           "type": "null"

package/generated/ControlRunListResponse.schema.json

@@ -163,11 +163,12 @@
                               "cost_unverifiable",
                               "delegation_child_drain_timeout",
                               "subscription_window_exhausted",
+                              "credential_pool_exhausted",
                               "delegated_home_unavailable",
                               "delegated_confinement_unavailable",
                               "delegated_evidence_incomplete"
                             ],
-                            "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                            "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                           },
                           {
                             "type": "null"

package/generated/ControlRunSummary.schema.json

@@ -158,11 +158,12 @@
                         "cost_unverifiable",
                         "delegation_child_drain_timeout",
                         "subscription_window_exhausted",
+                        "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
                         "delegated_evidence_incomplete"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                     },
                     {
                       "type": "null"

package/generated/ControlSettingsSnapshot.schema.json

@@ -342,12 +342,13 @@
               "profileLimitAction": {
                 "type": "string",
                 "enum": [
+                  "auto",
                   "fail",
                   "ask",
                   "rotate"
                 ],
-                "default": "fail",
-                "description": "Profile-selection limit action: fail (stop), ask (record), rotate (auto-switch to the next eligible account)."
+                "default": "auto",
+                "description": "Profile-selection limit action: auto (kind-aware default — rotate for subscription subjects, fail for metered), fail (stop), ask (record), rotate (auto-switch to the next eligible account)."
               }
             },
             "additionalProperties": false,

package/generated/ControlSettingsUpdateRequest.schema.json

@@ -266,11 +266,12 @@
               "profileLimitAction": {
                 "type": "string",
                 "enum": [
+                  "auto",
                   "fail",
                   "ask",
                   "rotate"
                 ],
-                "description": "New profile-selection limit action (fail | ask | rotate)."
+                "description": "New profile-selection limit action (auto | fail | ask | rotate)."
               }
             },
             "additionalProperties": false,

package/generated/ControlSetupJob.schema.json

@@ -14,7 +14,8 @@
           "enum": [
             "codex",
             "claude",
-            "cursor"
+            "cursor",
+            "agy"
           ],
           "description": "Harness ids with a managed native-login flow."
         },
@@ -72,6 +73,10 @@
           "format": "date-time",
           "description": "Current native-login deadline when the job has one."
         },
+        "deadlineFixed": {
+          "type": "boolean",
+          "description": "Whether the deadline is the VENDOR's own window and cannot be extended (agy waits exactly 60s for its pasted code); absent = the engine owns the window and extending it is honest."
+        },
         "outcome": {
           "type": "object",
           "properties": {

package/generated/ControlSetupJobCreateRequest.schema.json

@@ -9,7 +9,8 @@
           "enum": [
             "codex",
             "claude",
-            "cursor"
+            "cursor",
+            "agy"
           ],
           "description": "Harness ids with a managed native-login flow."
         },

package/generated/ControlSetupJobEvent.schema.json

@@ -81,7 +81,8 @@
                   "enum": [
                     "codex",
                     "claude",
-                    "cursor"
+                    "cursor",
+                    "agy"
                   ],
                   "description": "Harness ids with a managed native-login flow."
                 },
@@ -127,6 +128,10 @@
                   "format": "date-time",
                   "description": "Current native-login deadline when the job has one."
                 },
+                "deadlineFixed": {
+                  "type": "boolean",
+                  "description": "Whether the deadline is the VENDOR's own window and cannot be extended (agy waits exactly 60s for its pasted code); absent = the engine owns the window and extending it is honest."
+                },
                 "outcome": {
                   "type": "object",
                   "properties": {