@claudexor/schema 3.8.0 → 3.8.1

package/generated/ControlRunListResponse.schema.json

@@ -166,9 +166,11 @@
                               "credential_pool_exhausted",
                               "delegated_home_unavailable",
                               "delegated_confinement_unavailable",
-                              "delegated_evidence_incomplete"
+                              "delegated_evidence_incomplete",
+                              "access_profile_incompatible",
+                              "retired_access_profile"
                             ],
-                            "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                            "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                           },
                           {
                             "type": "null"
@@ -650,8 +652,8 @@
                   "readonly",
                   "workspace_write",
                   "full",
-                  "external_sandbox_full",
-                  "inherit_native"
+                  "inherit_native",
+                  "external_sandbox_full"
                 ],
                 "description": "Access profile of the run: the effective profile when known, else the requested one (prefer requestedAccess/effectiveAccess)."
               },

package/generated/ControlRunStartRequest.schema.json

@@ -111,7 +111,11 @@
             "delegated": {
               "type": "boolean",
               "default": false,
-              "description": "Marks a run driven by an EXTERNAL orchestrator that owns the workspace, not by the operator at a surface. Such a run is confined to a scoped harness HOME even under isolation='live' (an in-place delegated attempt therefore cannot resume a native vendor session stored under the real HOME). Unrelated to the `delegate` belt flag and to `delegatedFromRunId` (belt-child provenance)."
+              "description": "Marks a run driven by an EXTERNAL orchestrator that owns the workspace, not by the operator at a surface. Such a run uses a scoped harness HOME even under isolation='live' (an in-place delegated attempt therefore cannot resume a native vendor session stored under the real HOME). Unrelated to the `delegate` belt flag and to `delegatedFromRunId` (belt-child provenance)."
+            },
+            "workspaceRoot": {
+              "type": "string",
+              "description": "Absolute existing execution workspace for a project-scoped delegated agent live run. The stable project identity remains scope.root."
             }
           },
           "additionalProperties": false,
@@ -298,7 +302,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Requested access profile; effective access is derived by the engine and never client-supplied."

package/generated/ControlRunSummary.schema.json

@@ -161,9 +161,11 @@
                         "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
-                        "delegated_evidence_incomplete"
+                        "delegated_evidence_incomplete",
+                        "access_profile_incompatible",
+                        "retired_access_profile"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                     },
                     {
                       "type": "null"
@@ -645,8 +647,8 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
-            "inherit_native"
+            "inherit_native",
+            "external_sandbox_full"
           ],
           "description": "Access profile of the run: the effective profile when known, else the requested one (prefer requestedAccess/effectiveAccess)."
         },

package/generated/ControlThread.schema.json

@@ -91,10 +91,10 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
             },
             {
               "type": "null"

package/generated/ControlThreadCreateRequest.schema.json

@@ -111,7 +111,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Sticky write scope for the thread's write turns; omit = the repo trust default."

package/generated/ControlThreadDetail.schema.json

@@ -94,10 +94,10 @@
                     "readonly",
                     "workspace_write",
                     "full",
-                    "external_sandbox_full",
-                    "inherit_native"
+                    "inherit_native",
+                    "external_sandbox_full"
                   ],
-                  "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                  "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
                 },
                 {
                   "type": "null"

package/generated/ControlThreadListResponse.schema.json

@@ -96,10 +96,10 @@
                       "readonly",
                       "workspace_write",
                       "full",
-                      "external_sandbox_full",
-                      "inherit_native"
+                      "inherit_native",
+                      "external_sandbox_full"
                     ],
-                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                    "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
                   },
                   {
                     "type": "null"

package/generated/ControlThreadTurnRequest.schema.json

@@ -220,7 +220,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Requested access profile; effective access is derived by the engine and never client-supplied."

package/generated/ControlThreadUpdateRequest.schema.json

@@ -56,10 +56,9 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
                 "inherit_native"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
             },
             {
               "type": "null"

package/generated/ControlTrustListResponse.schema.json

@@ -30,7 +30,6 @@
                   "readonly",
                   "workspace_write",
                   "full",
-                  "external_sandbox_full",
                   "inherit_native"
                 ],
                 "description": "Default access profile for runs in the repo."

package/generated/ControlTrustState.schema.json

@@ -25,7 +25,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Default access profile for runs in the repo."

package/generated/ControlTrustUpdateRequest.schema.json

@@ -66,7 +66,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Effective access profile covered by grantTestCommand; defaults to the trust default."

package/generated/CredentialProfileStatus.schema.json

@@ -37,6 +37,15 @@
           "default": "local_store",
           "description": "How the verification verdict was reached: local_store = the binding's required local state or managed secret is present (says nothing about a token being live); vendor = the vendor answered under the exact binding environment and effective platform credential policy."
         },
+        "stale": {
+          "type": "boolean",
+          "description": "True only for a bounded stale last-known-good observation; stale is never a fresh passed verification."
+        },
+        "stale_age_ms": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Age in milliseconds of the bounded stale observation, when stale is true."
+        },
         "detail": {
           "type": "string",
           "description": "Redacted human-readable probe evidence."

package/generated/HarnessManifest.schema.json

@@ -258,11 +258,12 @@
                     "enum": [
                       "env_or_file_injection",
                       "scoped_home_keychain_bridge",
+                      "private_per_profile_keychain",
                       "host_user_context",
                       "process_sandbox",
                       "container"
                     ],
-                    "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                    "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers."
                   },
                   "default": [
                     "env_or_file_injection"
@@ -567,10 +568,9 @@
               "readonly",
               "workspace_write",
               "full",
-              "external_sandbox_full",
               "inherit_native"
             ],
-            "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+            "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
           },
           "default": [],
           "description": "Access profiles the adapter can enforce."

package/generated/HarnessStatusDto.schema.json

@@ -276,11 +276,12 @@
                             "enum": [
                               "env_or_file_injection",
                               "scoped_home_keychain_bridge",
+                              "private_per_profile_keychain",
                               "host_user_context",
                               "process_sandbox",
                               "container"
                             ],
-                            "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                            "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers."
                           },
                           "default": [
                             "env_or_file_injection"
@@ -585,10 +586,9 @@
                       "readonly",
                       "workspace_write",
                       "full",
-                      "external_sandbox_full",
                       "inherit_native"
                     ],
-                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                    "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
                   },
                   "default": [],
                   "description": "Access profiles the adapter can enforce."

package/generated/McpRunHandleResult.schema.json

@@ -681,9 +681,11 @@
                         "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
-                        "delegated_evidence_incomplete"
+                        "delegated_evidence_incomplete",
+                        "access_profile_incompatible",
+                        "retired_access_profile"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                     },
                     {
                       "type": "null"

package/generated/McpRunToolResult.schema.json

@@ -657,9 +657,11 @@
                         "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
-                        "delegated_evidence_incomplete"
+                        "delegated_evidence_incomplete",
+                        "access_profile_incompatible",
+                        "retired_access_profile"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                     },
                     {
                       "type": "null"

package/generated/RunFailure.schema.json

@@ -43,9 +43,11 @@
                 "credential_pool_exhausted",
                 "delegated_home_unavailable",
                 "delegated_confinement_unavailable",
-                "delegated_evidence_incomplete"
+                "delegated_evidence_incomplete",
+                "access_profile_incompatible",
+                "retired_access_profile"
               ],
-              "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+              "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
             },
             {
               "type": "null"

package/generated/RunTelemetry.schema.json

@@ -34,8 +34,8 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
-            "inherit_native"
+            "inherit_native",
+            "external_sandbox_full"
           ],
           "description": "Access profile the caller requested."
         },
@@ -45,10 +45,10 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
-            "inherit_native"
+            "inherit_native",
+            "external_sandbox_full"
           ],
-          "description": "Access profile actually enforced by the engine."
+          "description": "Access profile enforced by the engine."
         },
         "external_context_policy": {
           "type": "string",

package/generated/TaskContract.schema.json

@@ -347,10 +347,10 @@
                               "readonly",
                               "workspace_write",
                               "full",
-                              "external_sandbox_full",
-                              "inherit_native"
+                              "inherit_native",
+                              "external_sandbox_full"
                             ],
-                            "description": "Effective access profile covered by this grant."
+                            "description": "Effective access profile recorded by this historical grant."
                           }
                         },
                         "required": [
@@ -362,13 +362,13 @@
                           "accessProfile"
                         ],
                         "additionalProperties": false,
-                        "description": "External exact grant for one versioned project test command."
+                        "description": "Historical exact grant for one versioned project test command."
                       },
                       {
                         "type": "null"
                       }
                     ],
-                    "description": "Matching external grant; null when none was found.",
+                    "description": "Matching historical external grant; null when none was found.",
                     "default": null
                   }
                 },
@@ -377,7 +377,7 @@
                   "id"
                 ],
                 "additionalProperties": false,
-                "description": "A deterministic typed-argv test command used as a verification gate."
+                "description": "A deterministic typed-argv test command recorded in an immutable TaskContract."
               },
               "default": [],
               "description": "Deterministic test commands configured as gates."
@@ -398,8 +398,8 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
               "description": "Access profile the caller requested.",
               "default": "workspace_write"

package/generated/Thread.schema.json

@@ -87,10 +87,10 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
             },
             {
               "type": "null"

package/generated/TrustConfig.schema.json

@@ -16,7 +16,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Default access profile for runs in this repo.",
@@ -92,7 +91,6 @@
                   "readonly",
                   "workspace_write",
                   "full",
-                  "external_sandbox_full",
                   "inherit_native"
                 ],
                 "description": "Effective access profile covered by this grant."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/schema",
-  "version": "3.8.0",
+  "version": "3.8.1",
   "license": "MIT",
   "description": "Single source of truth for all Claudexor data shapes (Zod + generated JSON Schema).",
   "type": "module",
@@ -20,7 +20,7 @@
   "dependencies": {
     "zod": "^4.4.3",
     "zod-to-json-schema": "^3.24.1",
-    "@claudexor/util": "3.8.0"
+    "@claudexor/util": "3.8.1"
   },
   "repository": {
     "type": "git",