@claudexor/schema 3.6.0 → 3.8.1

package/dist/harness-confinement.d.ts

@@ -1,30 +1,6 @@
 import { z } from "zod/v3";
-/**
- * An APPLIED filesystem boundary, not a request for one.
- *
- * `verified_denied_path` is the path the profile was executed against before
- * the harness ran: the read was refused on this host, for this attempt. A field
- * that only said "confined: true" would be the promise this whole mechanism
- * exists to replace — which is why the two fields are REQUIRED together and a
- * mechanism name without its proof is not representable in this type.
- */
-export declare const HarnessConfinement: z.ZodObject<{
-    mechanism: z.ZodString;
-    profile: z.ZodString;
-    profile_digest: z.ZodString;
-    verified_denied_path: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    mechanism: string;
-    profile: string;
-    profile_digest: string;
-    verified_denied_path: string;
-}, {
-    mechanism: string;
-    profile: string;
-    profile_digest: string;
-    verified_denied_path: string;
-}>;
-export type HarnessConfinement = z.infer<typeof HarnessConfinement>;
+/** One schema-owned statement used by every new delegated mutating attempt. */
+export declare const DELIBERATE_NO_OUTER_BOUNDARY_REASON = "Claudexor deliberately applies no additional outer OS filesystem boundary; the native harness access mode remains in effect.";
 /**
  * The confinement half of an attempt record, as every reader sees it.
  *
@@ -41,6 +17,37 @@ export interface AppliedConfinementRecord {
     /** Why NO boundary was applied; present exactly when the boundary is absent. */
     confinement_unavailable_reason?: unknown;
 }
+/** Bounded decoder for the access/evidence block in historical attempt.yaml
+ * artifacts. New writers still accept active AccessProfile only. */
+export declare const RecordedAppliedAttemptFacts: z.ZodObject<{
+    harness_home_isolated: z.ZodOptional<z.ZodBoolean>;
+    harness_home_dir: z.ZodNullable<z.ZodString>;
+    access_applied: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>;
+    credential_profile_applied: z.ZodNullable<z.ZodString>;
+    confinement_mechanism: z.ZodNullable<z.ZodString>;
+    confinement_profile_digest: z.ZodNullable<z.ZodString>;
+    confinement_verified_denied_path: z.ZodNullable<z.ZodString>;
+    confinement_unavailable_reason: z.ZodNullable<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    harness_home_isolated: z.ZodOptional<z.ZodBoolean>;
+    harness_home_dir: z.ZodNullable<z.ZodString>;
+    access_applied: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>;
+    credential_profile_applied: z.ZodNullable<z.ZodString>;
+    confinement_mechanism: z.ZodNullable<z.ZodString>;
+    confinement_profile_digest: z.ZodNullable<z.ZodString>;
+    confinement_verified_denied_path: z.ZodNullable<z.ZodString>;
+    confinement_unavailable_reason: z.ZodNullable<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    harness_home_isolated: z.ZodOptional<z.ZodBoolean>;
+    harness_home_dir: z.ZodNullable<z.ZodString>;
+    access_applied: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native", "external_sandbox_full"]>;
+    credential_profile_applied: z.ZodNullable<z.ZodString>;
+    confinement_mechanism: z.ZodNullable<z.ZodString>;
+    confinement_profile_digest: z.ZodNullable<z.ZodString>;
+    confinement_verified_denied_path: z.ZodNullable<z.ZodString>;
+    confinement_unavailable_reason: z.ZodNullable<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type RecordedAppliedAttemptFacts = z.infer<typeof RecordedAppliedAttemptFacts>;
 /**
  * Whether an attempt record proves a boundary was actually enforced.
  *
@@ -51,14 +58,14 @@ export interface AppliedConfinementRecord {
  * the mechanism's name.
  */
 export declare function confinementBoundaryProven(record: AppliedConfinementRecord | null): boolean;
-export declare const ContainmentKind: z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>;
+export declare const ContainmentKind: z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>;
 export type ContainmentKind = z.infer<typeof ContainmentKind>;
 export declare const IsolationCapabilities: z.ZodDefault<z.ZodObject<{
-    supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
+    supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
+    supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
 }, {
-    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
+    supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
 }>>;
 export type IsolationCapabilities = z.infer<typeof IsolationCapabilities>;
 //# sourceMappingURL=harness-confinement.d.ts.map

package/dist/harness-confinement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness-confinement.d.ts","sourceRoot":"","sources":["../src/harness-confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAkBmD,CAAC;AACnF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,gCAAgC,CAAC,EAAE,OAAO,CAAC;IAC3C,gFAAgF;IAChF,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAC1C;AAID;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAO1F;AAED,eAAO,MAAM,eAAe,0HAUzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;GAQgC,CAAC;AACnE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"harness-confinement.d.ts","sourceRoot":"","sources":["../src/harness-confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,+EAA+E;AAC/E,eAAO,MAAM,mCAAmC,iIACgF,CAAC;AAEjI;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,gCAAgC,CAAC,EAAE,OAAO,CAAC;IAC3C,gFAAgF;IAChF,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED;oEACoE;AACpE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAYoD,CAAC;AAC7F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAItF;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAO1F;AAED,eAAO,MAAM,eAAe,0JAWzB,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;GAQgC,CAAC;AACnE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/harness-confinement.js

@@ -1,31 +1,22 @@
 import { z } from "zod/v3";
-import { ContentHash } from "./primitives.js";
-/**
- * An APPLIED filesystem boundary, not a request for one.
- *
- * `verified_denied_path` is the path the profile was executed against before
- * the harness ran: the read was refused on this host, for this attempt. A field
- * that only said "confined: true" would be the promise this whole mechanism
- * exists to replace — which is why the two fields are REQUIRED together and a
- * mechanism name without its proof is not representable in this type.
- */
-export const HarnessConfinement = z
+import { RecordedAccessProfile } from "./primitives.js";
+/** One schema-owned statement used by every new delegated mutating attempt. */
+export const DELIBERATE_NO_OUTER_BOUNDARY_REASON = "Claudexor deliberately applies no additional outer OS filesystem boundary; the native harness access mode remains in effect.";
+/** Bounded decoder for the access/evidence block in historical attempt.yaml
+ * artifacts. New writers still accept active AccessProfile only. */
+export const RecordedAppliedAttemptFacts = z
     .object({
-    mechanism: z
-        .string()
-        .min(1)
-        .describe("OPAQUE identifier of the OS mechanism that enforced the boundary. A reader must never branch on this value or on the host platform; the only question it may ask is whether a PROVEN boundary exists, which is this field AND verified_denied_path both present."),
-    profile: z
-        .string()
-        .min(1)
-        .describe("The exact policy the process was started under, in the mechanism's own encoding."),
-    profile_digest: ContentHash.describe("Digest of the policy text, for the attempt record."),
-    verified_denied_path: z
-        .string()
-        .min(1)
-        .describe("Path proven unreadable under this policy before the harness was spawned."),
+    harness_home_isolated: z.boolean().optional(),
+    harness_home_dir: z.string().nullable(),
+    access_applied: RecordedAccessProfile,
+    credential_profile_applied: z.string().nullable(),
+    confinement_mechanism: z.string().nullable(),
+    confinement_profile_digest: z.string().nullable(),
+    confinement_verified_denied_path: z.string().nullable(),
+    confinement_unavailable_reason: z.string().nullable(),
 })
-    .describe("An applied OS-enforced filesystem boundary for one harness process.");
+    .passthrough()
+    .describe("Applied access and boundary evidence read from a historical attempt artifact.");
 const nonEmpty = (value) => typeof value === "string" && value.length > 0;
 /**
  * Whether an attempt record proves a boundary was actually enforced.
@@ -47,11 +38,12 @@ export const ContainmentKind = z
     .enum([
     "env_or_file_injection",
     "scoped_home_keychain_bridge",
+    "private_per_profile_keychain",
     "host_user_context",
     "process_sandbox",
     "container",
 ])
-    .describe("Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers.");
+    .describe("Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers.");
 export const IsolationCapabilities = z
     .object({
     supported_containment: z

package/dist/harness-confinement.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness-confinement.js","sourceRoot":"","sources":["../src/harness-confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,kQAAkQ,CACnQ;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,kFAAkF,CAAC;IAC/F,cAAc,EAAE,WAAW,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC1F,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,0EAA0E,CAAC;CACxF,CAAC;KACD,QAAQ,CAAC,qEAAqE,CAAC,CAAC;AAoBnF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAE5F;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAuC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,CAAC;QAC3C,QAAQ,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,IAAI,CAAC;IACJ,uBAAuB;IACvB,6BAA6B;IAC7B,mBAAmB;IACnB,iBAAiB;IACjB,WAAW;CACZ,CAAC;KACD,QAAQ,CACP,0KAA0K,CAC3K,CAAC;AAGJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC;SACrB,KAAK,CAAC,eAAe,CAAC;SACtB,OAAO,CAAC,CAAC,uBAAuB,CAAC,CAAC;SAClC,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,OAAO,CAAC,EAAE,CAAC;KACX,QAAQ,CAAC,qDAAqD,CAAC,CAAC"}
+{"version":3,"file":"harness-confinement.js","sourceRoot":"","sources":["../src/harness-confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAC9C,8HAA8H,CAAC;AAmBjI;oEACoE;AACpE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,qBAAqB;IACrC,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,gCAAgC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvD,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,WAAW,EAAE;KACb,QAAQ,CAAC,+EAA+E,CAAC,CAAC;AAG7F,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAE5F;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAuC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,CAAC;QAC3C,QAAQ,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,IAAI,CAAC;IACJ,uBAAuB;IACvB,6BAA6B;IAC7B,8BAA8B;IAC9B,mBAAmB;IACnB,iBAAiB;IACjB,WAAW;CACZ,CAAC;KACD,QAAQ,CACP,4MAA4M,CAC7M,CAAC;AAGJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC;SACrB,KAAK,CAAC,eAAe,CAAC;SACtB,OAAO,CAAC,CAAC,uBAAuB,CAAC,CAAC;SAClC,QAAQ,CAAC,mDAAmD,CAAC;CACjE,CAAC;KACD,OAAO,CAAC,EAAE,CAAC;KACX,QAAQ,CAAC,qDAAqD,CAAC,CAAC"}