@claudexor/schema 3.5.0 → 3.6.0

package/generated/ControlHarnessAccountPool.schema.json

@@ -0,0 +1,79 @@
+{
+  "$ref": "#/definitions/ControlHarnessAccountPool",
+  "definitions": {
+    "ControlHarnessAccountPool": {
+      "type": "object",
+      "properties": {
+        "harness_id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Harness family this pool verdict belongs to."
+        },
+        "next_up": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "const": "profile"
+                },
+                "profileId": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "Non-empty identifier string."
+                }
+              },
+              "required": [
+                "kind",
+                "profileId"
+              ],
+              "additionalProperties": false,
+              "description": "An enabled account row is who an unpinned run routes to next."
+            },
+            {
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "const": "api_key_route"
+                }
+              },
+              "required": [
+                "kind"
+              ],
+              "additionalProperties": false,
+              "description": "The account pool is empty or exhausted; the unpinned route is the policy-governed API key (INV-061) — a route, never an account row."
+            },
+            {
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "const": "none"
+                },
+                "reason": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "kind",
+                "reason"
+              ],
+              "additionalProperties": false,
+              "description": "An unpinned run has nothing routable, with a human reason."
+            }
+          ],
+          "description": "Server-computed pool routing verdict for one harness's unpinned runs (unified account model)."
+        }
+      },
+      "required": [
+        "harness_id",
+        "next_up"
+      ],
+      "additionalProperties": false,
+      "description": "Per-harness pool authority (unified account model): who an unpinned run routes to next."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlHarnessSettingsPatch.schema.json

@@ -112,11 +112,12 @@
         "profileLimitAction": {
           "type": "string",
           "enum": [
+            "auto",
             "fail",
             "ask",
             "rotate"
           ],
-          "description": "New profile-selection limit action (fail | ask | rotate)."
+          "description": "New profile-selection limit action (auto | fail | ask | rotate)."
         }
       },
       "additionalProperties": false,

package/generated/ControlPoolNextUp.schema.json

@@ -0,0 +1,63 @@
+{
+  "$ref": "#/definitions/ControlPoolNextUp",
+  "definitions": {
+    "ControlPoolNextUp": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "profile"
+            },
+            "profileId": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Non-empty identifier string."
+            }
+          },
+          "required": [
+            "kind",
+            "profileId"
+          ],
+          "additionalProperties": false,
+          "description": "An enabled account row is who an unpinned run routes to next."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "api_key_route"
+            }
+          },
+          "required": [
+            "kind"
+          ],
+          "additionalProperties": false,
+          "description": "The account pool is empty or exhausted; the unpinned route is the policy-governed API key (INV-061) — a route, never an account row."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "none"
+            },
+            "reason": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "kind",
+            "reason"
+          ],
+          "additionalProperties": false,
+          "description": "An unpinned run has nothing routable, with a human reason."
+        }
+      ],
+      "description": "Server-computed pool routing verdict for one harness's unpinned runs (unified account model)."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlQuotaResponse.schema.json

@@ -141,7 +141,8 @@
                   "claude_statusline",
                   "claude_api_retry",
                   "claude_oauth_usage",
-                  "agy_command_usage"
+                  "agy_command_usage",
+                  "cursor_rate_limit"
                 ],
                 "description": "Machine-readable source of quota evidence, classified by schema-owned traits."
               },

package/generated/ControlRunDetail.schema.json

@@ -161,11 +161,12 @@
                             "cost_unverifiable",
                             "delegation_child_drain_timeout",
                             "subscription_window_exhausted",
+                            "credential_pool_exhausted",
                             "delegated_home_unavailable",
                             "delegated_confinement_unavailable",
                             "delegated_evidence_incomplete"
                           ],
-                          "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                          "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                         },
                         {
                           "type": "null"

package/generated/ControlRunListResponse.schema.json

@@ -163,11 +163,12 @@
                               "cost_unverifiable",
                               "delegation_child_drain_timeout",
                               "subscription_window_exhausted",
+                              "credential_pool_exhausted",
                               "delegated_home_unavailable",
                               "delegated_confinement_unavailable",
                               "delegated_evidence_incomplete"
                             ],
-                            "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                            "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                           },
                           {
                             "type": "null"

package/generated/ControlRunSummary.schema.json

@@ -158,11 +158,12 @@
                         "cost_unverifiable",
                         "delegation_child_drain_timeout",
                         "subscription_window_exhausted",
+                        "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
                         "delegated_evidence_incomplete"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                     },
                     {
                       "type": "null"

package/generated/ControlSettingsSnapshot.schema.json

@@ -342,12 +342,13 @@
               "profileLimitAction": {
                 "type": "string",
                 "enum": [
+                  "auto",
                   "fail",
                   "ask",
                   "rotate"
                 ],
-                "default": "fail",
-                "description": "Profile-selection limit action: fail (stop), ask (record), rotate (auto-switch to the next eligible account)."
+                "default": "auto",
+                "description": "Profile-selection limit action: auto (kind-aware default — rotate for subscription subjects, fail for metered), fail (stop), ask (record), rotate (auto-switch to the next eligible account)."
               }
             },
             "additionalProperties": false,

package/generated/ControlSettingsUpdateRequest.schema.json

@@ -266,11 +266,12 @@
               "profileLimitAction": {
                 "type": "string",
                 "enum": [
+                  "auto",
                   "fail",
                   "ask",
                   "rotate"
                 ],
-                "description": "New profile-selection limit action (fail | ask | rotate)."
+                "description": "New profile-selection limit action (auto | fail | ask | rotate)."
               }
             },
             "additionalProperties": false,

package/generated/GlobalConfig.schema.json

@@ -413,12 +413,13 @@
                   "limit_action": {
                     "type": "string",
                     "enum": [
+                      "auto",
                       "fail",
                       "ask",
                       "rotate"
                     ],
-                    "default": "fail",
-                    "description": "On a typed vendor limit: fail the attempt, surface a typed ask, or rotate to the next eligible profile."
+                    "default": "auto",
+                    "description": "On a typed vendor limit: auto (kind-aware default — rotate for subscription subjects, fail for metered), fail the attempt, surface a typed ask, or rotate to the next eligible profile."
                   },
                   "rotation_eligible": {
                     "type": "array",

package/generated/HarnessEvent.schema.json

@@ -348,7 +348,8 @@
                 "claude_statusline",
                 "claude_api_retry",
                 "claude_oauth_usage",
-                "agy_command_usage"
+                "agy_command_usage",
+                "cursor_rate_limit"
               ],
               "description": "Machine-readable source of quota evidence, classified by schema-owned traits."
             },

package/generated/McpRunHandleResult.schema.json

@@ -678,11 +678,12 @@
                         "cost_unverifiable",
                         "delegation_child_drain_timeout",
                         "subscription_window_exhausted",
+                        "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
                         "delegated_evidence_incomplete"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                     },
                     {
                       "type": "null"

package/generated/McpRunToolResult.schema.json

@@ -654,11 +654,12 @@
                         "cost_unverifiable",
                         "delegation_child_drain_timeout",
                         "subscription_window_exhausted",
+                        "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
                         "delegated_evidence_incomplete"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
                     },
                     {
                       "type": "null"

package/generated/RunEvent.schema.json

@@ -51,6 +51,10 @@
             "route.profile.headroom_exceeded",
             "route.profile.rotated",
             "route.profile.rotation_exhausted",
+            "route.profile.credential_unusable",
+            "route.account.pool_selected",
+            "route.account.lane_switch",
+            "route.account.pool_exhausted",
             "route.transient.exhausted",
             "route.fallback.auth_switched",
             "route.primary.diverged",

package/generated/RunFailure.schema.json

@@ -40,11 +40,12 @@
                 "cost_unverifiable",
                 "delegation_child_drain_timeout",
                 "subscription_window_exhausted",
+                "credential_pool_exhausted",
                 "delegated_home_unavailable",
                 "delegated_confinement_unavailable",
                 "delegated_evidence_incomplete"
               ],
-              "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+              "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
             },
             {
               "type": "null"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/schema",
-  "version": "3.5.0",
+  "version": "3.6.0",
   "license": "MIT",
   "description": "Single source of truth for all Claudexor data shapes (Zod + generated JSON Schema).",
   "type": "module",
@@ -20,7 +20,7 @@
   "dependencies": {
     "zod": "^4.4.3",
     "zod-to-json-schema": "^3.24.1",
-    "@claudexor/util": "3.5.0"
+    "@claudexor/util": "3.6.0"
   },
   "repository": {
     "type": "git",