@claudexor/schema 3.6.0 → 3.8.1

package/generated/HarnessManifest.schema.json

@@ -114,6 +114,20 @@
                         },
                         "default": [],
                         "description": "Relocation levers that can move this transport into a scoped environment."
+                      },
+                      "platforms": {
+                        "type": "array",
+                        "items": {
+                          "type": "string",
+                          "enum": [
+                            "darwin",
+                            "linux",
+                            "win32"
+                          ],
+                          "description": "Host platform used to resolve credential and managed-login policy."
+                        },
+                        "minItems": 1,
+                        "description": "Host platforms on which this physical credential transport applies; absent means every supported platform for backward compatibility."
                       }
                     },
                     "required": [
@@ -125,6 +139,90 @@
                   },
                   "default": [],
                   "description": "Declared credential transports per auth source."
+                },
+                "credential_profile_policies": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "$ref": "#/definitions/HarnessManifest/properties/capability_profile/properties/auth/properties/supported_sources/items"
+                      },
+                      "platforms": {
+                        "type": "array",
+                        "items": {
+                          "$ref": "#/definitions/HarnessManifest/properties/capability_profile/properties/auth/properties/credential_transports/items/properties/platforms/items"
+                        },
+                        "minItems": 1,
+                        "description": "Nonempty host-platform set governed by this policy row."
+                      },
+                      "identity_scope": {
+                        "type": "string",
+                        "enum": [
+                          "profile",
+                          "os_user"
+                        ],
+                        "description": "Identity boundary selected by a credential profile: the named profile itself or the host OS user/login vault."
+                      },
+                      "max_enabled_profiles": {
+                        "anyOf": [
+                          {
+                            "type": "integer",
+                            "exclusiveMinimum": 0
+                          },
+                          {
+                            "type": "null"
+                          }
+                        ],
+                        "description": "Maximum enabled profile bindings on these platforms; null means unbounded."
+                      },
+                      "cleanup_owner": {
+                        "type": "string",
+                        "enum": [
+                          "claudexor",
+                          "vendor"
+                        ],
+                        "description": "Who owns cleanup of the credential when its Claudexor profile binding is removed."
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "platforms",
+                      "identity_scope",
+                      "max_enabled_profiles",
+                      "cleanup_owner"
+                    ],
+                    "additionalProperties": false,
+                    "description": "Platform-specific identity scope, enabled-profile cardinality, and credential cleanup ownership for one auth source."
+                  },
+                  "description": "Platform-specific profile identity/cardinality/cleanup policy; absent uses the backward-compatible profile-scoped, unbounded, Claudexor-owned defaults."
+                },
+                "managed_login": {
+                  "anyOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "stdin": {
+                          "type": "string",
+                          "enum": [
+                            "none",
+                            "pipe",
+                            "terminal"
+                          ],
+                          "description": "Input transport the vendor login command requires."
+                        }
+                      },
+                      "required": [
+                        "stdin"
+                      ],
+                      "additionalProperties": false,
+                      "description": "Managed-login input requirement; command, argv, flow, and time window remain owned by the native-login registry."
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "Managed subscription-login input requirement; null means this harness defines no managed login, absent is a legacy manifest."
                 }
               },
               "additionalProperties": false,
@@ -160,11 +258,12 @@
                     "enum": [
                       "env_or_file_injection",
                       "scoped_home_keychain_bridge",
+                      "private_per_profile_keychain",
                       "host_user_context",
                       "process_sandbox",
                       "container"
                     ],
-                    "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                    "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers."
                   },
                   "default": [
                     "env_or_file_injection"
@@ -469,10 +568,9 @@
               "readonly",
               "workspace_write",
               "full",
-              "external_sandbox_full",
               "inherit_native"
             ],
-            "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+            "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
           },
           "default": [],
           "description": "Access profiles the adapter can enforce."

package/generated/HarnessStatusDto.schema.json

@@ -132,6 +132,20 @@
                                 },
                                 "default": [],
                                 "description": "Relocation levers that can move this transport into a scoped environment."
+                              },
+                              "platforms": {
+                                "type": "array",
+                                "items": {
+                                  "type": "string",
+                                  "enum": [
+                                    "darwin",
+                                    "linux",
+                                    "win32"
+                                  ],
+                                  "description": "Host platform used to resolve credential and managed-login policy."
+                                },
+                                "minItems": 1,
+                                "description": "Host platforms on which this physical credential transport applies; absent means every supported platform for backward compatibility."
                               }
                             },
                             "required": [
@@ -143,6 +157,90 @@
                           },
                           "default": [],
                           "description": "Declared credential transports per auth source."
+                        },
+                        "credential_profile_policies": {
+                          "type": "array",
+                          "items": {
+                            "type": "object",
+                            "properties": {
+                              "source": {
+                                "$ref": "#/definitions/HarnessStatusDto/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/supported_sources/items"
+                              },
+                              "platforms": {
+                                "type": "array",
+                                "items": {
+                                  "$ref": "#/definitions/HarnessStatusDto/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/credential_transports/items/properties/platforms/items"
+                                },
+                                "minItems": 1,
+                                "description": "Nonempty host-platform set governed by this policy row."
+                              },
+                              "identity_scope": {
+                                "type": "string",
+                                "enum": [
+                                  "profile",
+                                  "os_user"
+                                ],
+                                "description": "Identity boundary selected by a credential profile: the named profile itself or the host OS user/login vault."
+                              },
+                              "max_enabled_profiles": {
+                                "anyOf": [
+                                  {
+                                    "type": "integer",
+                                    "exclusiveMinimum": 0
+                                  },
+                                  {
+                                    "type": "null"
+                                  }
+                                ],
+                                "description": "Maximum enabled profile bindings on these platforms; null means unbounded."
+                              },
+                              "cleanup_owner": {
+                                "type": "string",
+                                "enum": [
+                                  "claudexor",
+                                  "vendor"
+                                ],
+                                "description": "Who owns cleanup of the credential when its Claudexor profile binding is removed."
+                              }
+                            },
+                            "required": [
+                              "source",
+                              "platforms",
+                              "identity_scope",
+                              "max_enabled_profiles",
+                              "cleanup_owner"
+                            ],
+                            "additionalProperties": false,
+                            "description": "Platform-specific identity scope, enabled-profile cardinality, and credential cleanup ownership for one auth source."
+                          },
+                          "description": "Platform-specific profile identity/cardinality/cleanup policy; absent uses the backward-compatible profile-scoped, unbounded, Claudexor-owned defaults."
+                        },
+                        "managed_login": {
+                          "anyOf": [
+                            {
+                              "type": "object",
+                              "properties": {
+                                "stdin": {
+                                  "type": "string",
+                                  "enum": [
+                                    "none",
+                                    "pipe",
+                                    "terminal"
+                                  ],
+                                  "description": "Input transport the vendor login command requires."
+                                }
+                              },
+                              "required": [
+                                "stdin"
+                              ],
+                              "additionalProperties": false,
+                              "description": "Managed-login input requirement; command, argv, flow, and time window remain owned by the native-login registry."
+                            },
+                            {
+                              "type": "null"
+                            }
+                          ],
+                          "description": "Managed subscription-login input requirement; null means this harness defines no managed login, absent is a legacy manifest."
                         }
                       },
                       "additionalProperties": false,
@@ -178,11 +276,12 @@
                             "enum": [
                               "env_or_file_injection",
                               "scoped_home_keychain_bridge",
+                              "private_per_profile_keychain",
                               "host_user_context",
                               "process_sandbox",
                               "container"
                             ],
-                            "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                            "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers."
                           },
                           "default": [
                             "env_or_file_injection"
@@ -487,10 +586,9 @@
                       "readonly",
                       "workspace_write",
                       "full",
-                      "external_sandbox_full",
                       "inherit_native"
                     ],
-                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                    "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
                   },
                   "default": [],
                   "description": "Access profiles the adapter can enforce."
@@ -762,6 +860,32 @@
           ],
           "description": "Engine-owned Delegate capability for this harness and installed runtime; null on legacy status rows.",
           "default": null
+        },
+        "setupLogin": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "mode": {
+                  "type": "string",
+                  "enum": [
+                    "in_app",
+                    "external_terminal"
+                  ],
+                  "description": "in_app requests the daemon-hosted login flow; external_terminal requests the existing client PTY flow."
+                }
+              },
+              "required": [
+                "mode"
+              ],
+              "additionalProperties": false,
+              "description": "Effective setup-login flow for this harness on the current host."
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "Effective setup-login flow for this harness on the current host; current producers emit null or an object, while omission identifies a legacy row."
         }
       },
       "required": [

package/generated/McpRunHandleResult.schema.json

@@ -681,9 +681,11 @@
                         "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
-                        "delegated_evidence_incomplete"
+                        "delegated_evidence_incomplete",
+                        "access_profile_incompatible",
+                        "retired_access_profile"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                     },
                     {
                       "type": "null"

package/generated/McpRunToolResult.schema.json

@@ -657,9 +657,11 @@
                         "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
-                        "delegated_evidence_incomplete"
+                        "delegated_evidence_incomplete",
+                        "access_profile_incompatible",
+                        "retired_access_profile"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                     },
                     {
                       "type": "null"

package/generated/RunFailure.schema.json

@@ -43,9 +43,11 @@
                 "credential_pool_exhausted",
                 "delegated_home_unavailable",
                 "delegated_confinement_unavailable",
-                "delegated_evidence_incomplete"
+                "delegated_evidence_incomplete",
+                "access_profile_incompatible",
+                "retired_access_profile"
               ],
-              "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+              "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
             },
             {
               "type": "null"

package/generated/RunTelemetry.schema.json

@@ -34,8 +34,8 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
-            "inherit_native"
+            "inherit_native",
+            "external_sandbox_full"
           ],
           "description": "Access profile the caller requested."
         },
@@ -45,10 +45,10 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
-            "inherit_native"
+            "inherit_native",
+            "external_sandbox_full"
           ],
-          "description": "Access profile actually enforced by the engine."
+          "description": "Access profile enforced by the engine."
         },
         "external_context_policy": {
           "type": "string",

package/generated/TaskContract.schema.json

@@ -347,10 +347,10 @@
                               "readonly",
                               "workspace_write",
                               "full",
-                              "external_sandbox_full",
-                              "inherit_native"
+                              "inherit_native",
+                              "external_sandbox_full"
                             ],
-                            "description": "Effective access profile covered by this grant."
+                            "description": "Effective access profile recorded by this historical grant."
                           }
                         },
                         "required": [
@@ -362,13 +362,13 @@
                           "accessProfile"
                         ],
                         "additionalProperties": false,
-                        "description": "External exact grant for one versioned project test command."
+                        "description": "Historical exact grant for one versioned project test command."
                       },
                       {
                         "type": "null"
                       }
                     ],
-                    "description": "Matching external grant; null when none was found.",
+                    "description": "Matching historical external grant; null when none was found.",
                     "default": null
                   }
                 },
@@ -377,7 +377,7 @@
                   "id"
                 ],
                 "additionalProperties": false,
-                "description": "A deterministic typed-argv test command used as a verification gate."
+                "description": "A deterministic typed-argv test command recorded in an immutable TaskContract."
               },
               "default": [],
               "description": "Deterministic test commands configured as gates."
@@ -398,8 +398,8 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
               "description": "Access profile the caller requested.",
               "default": "workspace_write"

package/generated/Thread.schema.json

@@ -87,10 +87,10 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
             },
             {
               "type": "null"

package/generated/TrustConfig.schema.json

@@ -16,7 +16,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Default access profile for runs in this repo.",
@@ -92,7 +91,6 @@
                   "readonly",
                   "workspace_write",
                   "full",
-                  "external_sandbox_full",
                   "inherit_native"
                 ],
                 "description": "Effective access profile covered by this grant."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/schema",
-  "version": "3.6.0",
+  "version": "3.8.1",
   "license": "MIT",
   "description": "Single source of truth for all Claudexor data shapes (Zod + generated JSON Schema).",
   "type": "module",
@@ -20,7 +20,7 @@
   "dependencies": {
     "zod": "^4.4.3",
     "zod-to-json-schema": "^3.24.1",
-    "@claudexor/util": "3.6.0"
+    "@claudexor/util": "3.8.1"
   },
   "repository": {
     "type": "git",