@claudexor/schema 3.8.0 → 3.8.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (106) hide show
  1. package/dist/agent-capabilities.d.ts +16 -16
  2. package/dist/config.d.ts +20 -20
  3. package/dist/control-harness-list.d.ts +18 -18
  4. package/dist/control-operation-responses.d.ts +28 -13
  5. package/dist/control-operation-responses.d.ts.map +1 -1
  6. package/dist/control-run-detail.d.ts +61 -46
  7. package/dist/control-run-detail.d.ts.map +1 -1
  8. package/dist/control-run-detail.js +10 -19
  9. package/dist/control-run-detail.js.map +1 -1
  10. package/dist/control-run-execution.d.ts +16 -0
  11. package/dist/control-run-execution.d.ts.map +1 -0
  12. package/dist/control-run-execution.js +19 -0
  13. package/dist/control-run-execution.js.map +1 -0
  14. package/dist/control-run-failure.d.ts +4 -4
  15. package/dist/control-run-failure.d.ts.map +1 -1
  16. package/dist/control-run-failure.js +6 -4
  17. package/dist/control-run-failure.js.map +1 -1
  18. package/dist/control-run-retry.d.ts +21 -0
  19. package/dist/control-run-retry.d.ts.map +1 -1
  20. package/dist/control-run-retry.js +6 -0
  21. package/dist/control-run-retry.js.map +1 -1
  22. package/dist/control-trust.d.ts +13 -13
  23. package/dist/control.d.ts +390 -36
  24. package/dist/control.d.ts.map +1 -1
  25. package/dist/control.js +15 -20
  26. package/dist/control.js.map +1 -1
  27. package/dist/credential-profile-snapshot.d.ts +78 -36
  28. package/dist/credential-profile-snapshot.d.ts.map +1 -1
  29. package/dist/credential-profile.d.ts +44 -0
  30. package/dist/credential-profile.d.ts.map +1 -1
  31. package/dist/credential-profile.js +11 -0
  32. package/dist/credential-profile.js.map +1 -1
  33. package/dist/harness-confinement.d.ts +37 -30
  34. package/dist/harness-confinement.d.ts.map +1 -1
  35. package/dist/harness-confinement.js +18 -26
  36. package/dist/harness-confinement.js.map +1 -1
  37. package/dist/harness.d.ts +18 -48
  38. package/dist/harness.d.ts.map +1 -1
  39. package/dist/harness.js +1 -6
  40. package/dist/harness.js.map +1 -1
  41. package/dist/mcp-run-result.d.ts +10 -10
  42. package/dist/primitives.d.ts +6 -1
  43. package/dist/primitives.d.ts.map +1 -1
  44. package/dist/primitives.js +8 -2
  45. package/dist/primitives.js.map +1 -1
  46. package/dist/readiness.d.ts +14 -14
  47. package/dist/review.d.ts +10 -0
  48. package/dist/review.d.ts.map +1 -1
  49. package/dist/review.js +10 -0
  50. package/dist/review.js.map +1 -1
  51. package/dist/route.d.ts +10 -0
  52. package/dist/route.d.ts.map +1 -1
  53. package/dist/route.js +10 -0
  54. package/dist/route.js.map +1 -1
  55. package/dist/run-strategy.d.ts +51 -3
  56. package/dist/run-strategy.d.ts.map +1 -1
  57. package/dist/run-strategy.js +58 -2
  58. package/dist/run-strategy.js.map +1 -1
  59. package/dist/surface-run-controls.d.ts.map +1 -1
  60. package/dist/surface-run-controls.js +4 -1
  61. package/dist/surface-run-controls.js.map +1 -1
  62. package/dist/task.d.ts +641 -19
  63. package/dist/task.d.ts.map +1 -1
  64. package/dist/task.js +40 -5
  65. package/dist/task.js.map +1 -1
  66. package/dist/telemetry.d.ts +2 -2
  67. package/dist/telemetry.js +3 -3
  68. package/dist/telemetry.js.map +1 -1
  69. package/dist/thread.d.ts +5 -3
  70. package/dist/thread.d.ts.map +1 -1
  71. package/dist/thread.js +7 -5
  72. package/dist/thread.js.map +1 -1
  73. package/generated/AgentCapabilityCatalog.schema.json +1 -2
  74. package/generated/ControlCredentialProfileCreateResponse.schema.json +9 -0
  75. package/generated/ControlCredentialProfileUpdateResponse.schema.json +9 -0
  76. package/generated/ControlCredentialProfilesQueryResponse.schema.json +12 -3
  77. package/generated/ControlCredentialProfilesResponse.schema.json +9 -0
  78. package/generated/ControlCredentialProfilesSnapshotResponse.schema.json +12 -3
  79. package/generated/ControlHarnessListResponse.schema.json +3 -3
  80. package/generated/ControlRunAgainDraft.schema.json +26 -5
  81. package/generated/ControlRunDetail.schema.json +29 -9
  82. package/generated/ControlRunListResponse.schema.json +11 -5
  83. package/generated/ControlRunStartRequest.schema.json +11 -4
  84. package/generated/ControlRunSummary.schema.json +11 -5
  85. package/generated/ControlThread.schema.json +3 -3
  86. package/generated/ControlThreadCreateRequest.schema.json +0 -1
  87. package/generated/ControlThreadDetail.schema.json +3 -3
  88. package/generated/ControlThreadListResponse.schema.json +3 -3
  89. package/generated/ControlThreadTurnRequest.schema.json +6 -3
  90. package/generated/ControlThreadUpdateRequest.schema.json +1 -2
  91. package/generated/ControlTrustListResponse.schema.json +0 -1
  92. package/generated/ControlTrustState.schema.json +0 -1
  93. package/generated/ControlTrustUpdateRequest.schema.json +0 -1
  94. package/generated/CredentialProfileStatus.schema.json +9 -0
  95. package/generated/HarnessManifest.schema.json +3 -3
  96. package/generated/HarnessStatusDto.schema.json +3 -3
  97. package/generated/McpRunHandleResult.schema.json +4 -2
  98. package/generated/McpRunToolResult.schema.json +4 -2
  99. package/generated/ReviewFinding.schema.json +14 -0
  100. package/generated/RouteProof.schema.json +14 -0
  101. package/generated/RunFailure.schema.json +4 -2
  102. package/generated/RunTelemetry.schema.json +5 -5
  103. package/generated/TaskContract.schema.json +8 -8
  104. package/generated/Thread.schema.json +4 -4
  105. package/generated/TrustConfig.schema.json +0 -2
  106. package/package.json +2 -2
package/dist/agent-capabilities.d.ts CHANGED
@@ -92,7 +92,7 @@ export declare const CatalogHarness: z.ZodObject<{
92
92
  transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
93
93
  }>, "many">;
94
94
  effortLevels: z.ZodArray<z.ZodString, "many">;
95
- accessProfilesSupported: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">;
95
+ accessProfilesSupported: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">;
96
96
  readonlyMechanism: z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>;
97
97
  delegation: z.ZodEffects<z.ZodObject<{
98
98
  available: z.ZodBoolean;
@@ -152,7 +152,7 @@ export declare const CatalogHarness: z.ZodObject<{
152
152
  transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
153
153
  }[];
154
154
  effortLevels: string[];
155
- accessProfilesSupported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
155
+ accessProfilesSupported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
156
156
  readonlyMechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
157
157
  delegation: {
158
158
  available: boolean;
@@ -188,7 +188,7 @@ export declare const CatalogHarness: z.ZodObject<{
188
188
  transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
189
189
  }[];
190
190
  effortLevels: string[];
191
- accessProfilesSupported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
191
+ accessProfilesSupported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
192
192
  readonlyMechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
193
193
  delegation: {
194
194
  available: boolean;
@@ -223,21 +223,21 @@ export declare const CatalogMutabilityMatrix: z.ZodObject<{
223
223
  writeModes: z.ZodArray<z.ZodEnum<["ask", "plan", "agent"]>, "many">;
224
224
  isolationKinds: z.ZodArray<z.ZodEnum<["envelope", "live"]>, "many">;
225
225
  workspaceModes: z.ZodArray<z.ZodEnum<["in_place", "isolated"]>, "many">;
226
- accessProfiles: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">;
226
+ accessProfiles: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">;
227
227
  applyModes: z.ZodArray<z.ZodEnum<["apply", "commit", "branch", "pr"]>, "many">;
228
228
  }, "strip", z.ZodTypeAny, {
229
229
  readOnlyModes: ("agent" | "ask" | "plan")[];
230
230
  writeModes: ("agent" | "ask" | "plan")[];
231
231
  isolationKinds: ("envelope" | "live")[];
232
232
  workspaceModes: ("in_place" | "isolated")[];
233
- accessProfiles: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
233
+ accessProfiles: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
234
234
  applyModes: ("apply" | "branch" | "commit" | "pr")[];
235
235
  }, {
236
236
  readOnlyModes: ("agent" | "ask" | "plan")[];
237
237
  writeModes: ("agent" | "ask" | "plan")[];
238
238
  isolationKinds: ("envelope" | "live")[];
239
239
  workspaceModes: ("in_place" | "isolated")[];
240
- accessProfiles: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
240
+ accessProfiles: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
241
241
  applyModes: ("apply" | "branch" | "commit" | "pr")[];
242
242
  }>;
243
243
  export type CatalogMutabilityMatrix = z.infer<typeof CatalogMutabilityMatrix>;
@@ -320,7 +320,7 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
320
320
  transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
321
321
  }>, "many">;
322
322
  effortLevels: z.ZodArray<z.ZodString, "many">;
323
- accessProfilesSupported: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">;
323
+ accessProfilesSupported: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">;
324
324
  readonlyMechanism: z.ZodEnum<["fs_sandbox", "permission_deny", "tool_allowlist", "none"]>;
325
325
  delegation: z.ZodEffects<z.ZodObject<{
326
326
  available: z.ZodBoolean;
@@ -380,7 +380,7 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
380
380
  transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
381
381
  }[];
382
382
  effortLevels: string[];
383
- accessProfilesSupported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
383
+ accessProfilesSupported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
384
384
  readonlyMechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
385
385
  delegation: {
386
386
  available: boolean;
@@ -416,7 +416,7 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
416
416
  transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
417
417
  }[];
418
418
  effortLevels: string[];
419
- accessProfilesSupported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
419
+ accessProfilesSupported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
420
420
  readonlyMechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
421
421
  delegation: {
422
422
  available: boolean;
@@ -449,21 +449,21 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
449
449
  writeModes: z.ZodArray<z.ZodEnum<["ask", "plan", "agent"]>, "many">;
450
450
  isolationKinds: z.ZodArray<z.ZodEnum<["envelope", "live"]>, "many">;
451
451
  workspaceModes: z.ZodArray<z.ZodEnum<["in_place", "isolated"]>, "many">;
452
- accessProfiles: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">;
452
+ accessProfiles: z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">;
453
453
  applyModes: z.ZodArray<z.ZodEnum<["apply", "commit", "branch", "pr"]>, "many">;
454
454
  }, "strip", z.ZodTypeAny, {
455
455
  readOnlyModes: ("agent" | "ask" | "plan")[];
456
456
  writeModes: ("agent" | "ask" | "plan")[];
457
457
  isolationKinds: ("envelope" | "live")[];
458
458
  workspaceModes: ("in_place" | "isolated")[];
459
- accessProfiles: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
459
+ accessProfiles: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
460
460
  applyModes: ("apply" | "branch" | "commit" | "pr")[];
461
461
  }, {
462
462
  readOnlyModes: ("agent" | "ask" | "plan")[];
463
463
  writeModes: ("agent" | "ask" | "plan")[];
464
464
  isolationKinds: ("envelope" | "live")[];
465
465
  workspaceModes: ("in_place" | "isolated")[];
466
- accessProfiles: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
466
+ accessProfiles: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
467
467
  applyModes: ("apply" | "branch" | "commit" | "pr")[];
468
468
  }>;
469
469
  cliCommands: z.ZodArray<z.ZodObject<{
@@ -519,7 +519,7 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
519
519
  transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
520
520
  }[];
521
521
  effortLevels: string[];
522
- accessProfilesSupported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
522
+ accessProfilesSupported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
523
523
  readonlyMechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
524
524
  delegation: {
525
525
  available: boolean;
@@ -544,7 +544,7 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
544
544
  writeModes: ("agent" | "ask" | "plan")[];
545
545
  isolationKinds: ("envelope" | "live")[];
546
546
  workspaceModes: ("in_place" | "isolated")[];
547
- accessProfiles: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
547
+ accessProfiles: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
548
548
  applyModes: ("apply" | "branch" | "commit" | "pr")[];
549
549
  };
550
550
  cliCommands: {
@@ -590,7 +590,7 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
590
590
  transport: "base64_inline" | "base64_stream" | "file_path" | "text_inline";
591
591
  }[];
592
592
  effortLevels: string[];
593
- accessProfilesSupported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
593
+ accessProfilesSupported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
594
594
  readonlyMechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
595
595
  delegation: {
596
596
  available: boolean;
@@ -615,7 +615,7 @@ export declare const AgentCapabilityCatalog: z.ZodObject<{
615
615
  writeModes: ("agent" | "ask" | "plan")[];
616
616
  isolationKinds: ("envelope" | "live")[];
617
617
  workspaceModes: ("in_place" | "isolated")[];
618
- accessProfiles: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
618
+ accessProfiles: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
619
619
  applyModes: ("apply" | "branch" | "commit" | "pr")[];
620
620
  };
621
621
  cliCommands: {
package/dist/config.d.ts CHANGED
@@ -128,7 +128,7 @@ export type ProjectConfig = z.infer<typeof ProjectConfig>;
128
128
  /** Sensitive trust settings — only valid in global/user-local/trust files. */
129
129
  export declare const TrustConfig: z.ZodObject<{
130
130
  version: z.ZodDefault<z.ZodLiteral<1>>;
131
- access_default: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
131
+ access_default: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>;
132
132
  allow_full_access: z.ZodDefault<z.ZodBoolean>;
133
133
  /**
134
134
  * Provenance ONLY: which repo root this file was written for. The file's
@@ -146,7 +146,7 @@ export declare const TrustConfig: z.ZodObject<{
146
146
  executableDigest: z.ZodString;
147
147
  scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
148
148
  scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
149
- accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
149
+ accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>;
150
150
  }, "strict", z.ZodTypeAny, {
151
151
  projectDigest: string;
152
152
  configDigest: string;
@@ -155,7 +155,7 @@ export declare const TrustConfig: z.ZodObject<{
155
155
  executableDigest: string;
156
156
  scriptPath: string | null;
157
157
  scriptDigest: string | null;
158
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
158
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
159
159
  }, {
160
160
  projectDigest: string;
161
161
  configDigest: string;
@@ -164,11 +164,11 @@ export declare const TrustConfig: z.ZodObject<{
164
164
  executableDigest: string;
165
165
  scriptPath?: string | null | undefined;
166
166
  scriptDigest?: string | null | undefined;
167
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
167
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
168
168
  }>, "many">>;
169
169
  }, "strict", z.ZodTypeAny, {
170
170
  version: 1;
171
- access_default: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
171
+ access_default: "full" | "inherit_native" | "readonly" | "workspace_write";
172
172
  allow_full_access: boolean;
173
173
  repo_root: string | null;
174
174
  test_command_grants: {
@@ -179,11 +179,11 @@ export declare const TrustConfig: z.ZodObject<{
179
179
  executableDigest: string;
180
180
  scriptPath: string | null;
181
181
  scriptDigest: string | null;
182
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
182
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
183
183
  }[];
184
184
  }, {
185
185
  version?: 1 | undefined;
186
- access_default?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
186
+ access_default?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
187
187
  allow_full_access?: boolean | undefined;
188
188
  repo_root?: string | null | undefined;
189
189
  test_command_grants?: {
@@ -194,7 +194,7 @@ export declare const TrustConfig: z.ZodObject<{
194
194
  executableDigest: string;
195
195
  scriptPath?: string | null | undefined;
196
196
  scriptDigest?: string | null | undefined;
197
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
197
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
198
198
  }[] | undefined;
199
199
  }>;
200
200
  export type TrustConfig = z.infer<typeof TrustConfig>;
@@ -771,7 +771,7 @@ export declare const ResolvedConfig: z.ZodObject<{
771
771
  }>;
772
772
  trust: z.ZodObject<{
773
773
  version: z.ZodDefault<z.ZodLiteral<1>>;
774
- access_default: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
774
+ access_default: z.ZodDefault<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>;
775
775
  allow_full_access: z.ZodDefault<z.ZodBoolean>;
776
776
  /**
777
777
  * Provenance ONLY: which repo root this file was written for. The file's
@@ -789,7 +789,7 @@ export declare const ResolvedConfig: z.ZodObject<{
789
789
  executableDigest: z.ZodString;
790
790
  scriptPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
791
791
  scriptDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
792
- accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
792
+ accessProfile: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>;
793
793
  }, "strict", z.ZodTypeAny, {
794
794
  projectDigest: string;
795
795
  configDigest: string;
@@ -798,7 +798,7 @@ export declare const ResolvedConfig: z.ZodObject<{
798
798
  executableDigest: string;
799
799
  scriptPath: string | null;
800
800
  scriptDigest: string | null;
801
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
801
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
802
802
  }, {
803
803
  projectDigest: string;
804
804
  configDigest: string;
@@ -807,11 +807,11 @@ export declare const ResolvedConfig: z.ZodObject<{
807
807
  executableDigest: string;
808
808
  scriptPath?: string | null | undefined;
809
809
  scriptDigest?: string | null | undefined;
810
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
810
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
811
811
  }>, "many">>;
812
812
  }, "strict", z.ZodTypeAny, {
813
813
  version: 1;
814
- access_default: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
814
+ access_default: "full" | "inherit_native" | "readonly" | "workspace_write";
815
815
  allow_full_access: boolean;
816
816
  repo_root: string | null;
817
817
  test_command_grants: {
@@ -822,11 +822,11 @@ export declare const ResolvedConfig: z.ZodObject<{
822
822
  executableDigest: string;
823
823
  scriptPath: string | null;
824
824
  scriptDigest: string | null;
825
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
825
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
826
826
  }[];
827
827
  }, {
828
828
  version?: 1 | undefined;
829
- access_default?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
829
+ access_default?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
830
830
  allow_full_access?: boolean | undefined;
831
831
  repo_root?: string | null | undefined;
832
832
  test_command_grants?: {
@@ -837,7 +837,7 @@ export declare const ResolvedConfig: z.ZodObject<{
837
837
  executableDigest: string;
838
838
  scriptPath?: string | null | undefined;
839
839
  scriptDigest?: string | null | undefined;
840
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
840
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
841
841
  }[] | undefined;
842
842
  }>;
843
843
  global: z.ZodObject<{
@@ -1329,7 +1329,7 @@ export declare const ResolvedConfig: z.ZodObject<{
1329
1329
  };
1330
1330
  trust: {
1331
1331
  version: 1;
1332
- access_default: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
1332
+ access_default: "full" | "inherit_native" | "readonly" | "workspace_write";
1333
1333
  allow_full_access: boolean;
1334
1334
  repo_root: string | null;
1335
1335
  test_command_grants: {
@@ -1340,7 +1340,7 @@ export declare const ResolvedConfig: z.ZodObject<{
1340
1340
  executableDigest: string;
1341
1341
  scriptPath: string | null;
1342
1342
  scriptDigest: string | null;
1343
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
1343
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
1344
1344
  }[];
1345
1345
  };
1346
1346
  global: {
@@ -1437,7 +1437,7 @@ export declare const ResolvedConfig: z.ZodObject<{
1437
1437
  };
1438
1438
  trust: {
1439
1439
  version?: 1 | undefined;
1440
- access_default?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
1440
+ access_default?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
1441
1441
  allow_full_access?: boolean | undefined;
1442
1442
  repo_root?: string | null | undefined;
1443
1443
  test_command_grants?: {
@@ -1448,7 +1448,7 @@ export declare const ResolvedConfig: z.ZodObject<{
1448
1448
  executableDigest: string;
1449
1449
  scriptPath?: string | null | undefined;
1450
1450
  scriptDigest?: string | null | undefined;
1451
- accessProfile: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
1451
+ accessProfile: "full" | "inherit_native" | "readonly" | "workspace_write";
1452
1452
  }[] | undefined;
1453
1453
  };
1454
1454
  global: {
package/dist/control-harness-list.d.ts CHANGED
@@ -141,11 +141,11 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
141
141
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
142
142
  }>>;
143
143
  isolation: z.ZodDefault<z.ZodObject<{
144
- supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "host_user_context", "process_sandbox", "container"]>, "many">>;
144
+ supported_containment: z.ZodDefault<z.ZodArray<z.ZodEnum<["env_or_file_injection", "scoped_home_keychain_bridge", "private_per_profile_keychain", "host_user_context", "process_sandbox", "container"]>, "many">>;
145
145
  }, "strip", z.ZodTypeAny, {
146
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
146
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
147
147
  }, {
148
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
148
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
149
149
  }>>;
150
150
  attachment_inputs: z.ZodDefault<z.ZodArray<z.ZodObject<{
151
151
  kind: z.ZodEnum<["image", "file"]>;
@@ -193,7 +193,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
193
193
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
194
194
  };
195
195
  isolation: {
196
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
196
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
197
197
  };
198
198
  attachment_inputs: {
199
199
  kind: "file" | "image";
@@ -229,7 +229,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
229
229
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
230
230
  } | undefined;
231
231
  isolation?: {
232
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
232
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
233
233
  } | undefined;
234
234
  attachment_inputs?: {
235
235
  kind: "file" | "image";
@@ -339,7 +339,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
339
339
  known_models_verified_against?: string | null | undefined;
340
340
  }>;
341
341
  auth_modes: z.ZodDefault<z.ZodArray<z.ZodEnum<["local_session", "api_key", "none"]>, "many">>;
342
- access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>, "many">>;
342
+ access_profiles_supported: z.ZodDefault<z.ZodArray<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>, "many">>;
343
343
  }, "strip", z.ZodTypeAny, {
344
344
  id: string;
345
345
  display_name: string;
@@ -372,7 +372,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
372
372
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
373
373
  };
374
374
  isolation: {
375
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
375
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
376
376
  };
377
377
  attachment_inputs: {
378
378
  kind: "file" | "image";
@@ -414,7 +414,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
414
414
  known_models_verified_against: string | null;
415
415
  };
416
416
  auth_modes: ("api_key" | "local_session" | "none")[];
417
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
417
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
418
418
  }, {
419
419
  id: string;
420
420
  display_name: string;
@@ -447,7 +447,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
447
447
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
448
448
  } | undefined;
449
449
  isolation?: {
450
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
450
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
451
451
  } | undefined;
452
452
  attachment_inputs?: {
453
453
  kind: "file" | "image";
@@ -489,7 +489,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
489
489
  known_models_verified_against?: string | null | undefined;
490
490
  };
491
491
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
492
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
492
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
493
493
  }>>>;
494
494
  enabledIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
495
495
  routableIntents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -625,7 +625,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
625
625
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
626
626
  };
627
627
  isolation: {
628
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
628
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
629
629
  };
630
630
  attachment_inputs: {
631
631
  kind: "file" | "image";
@@ -667,7 +667,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
667
667
  known_models_verified_against: string | null;
668
668
  };
669
669
  auth_modes: ("api_key" | "local_session" | "none")[];
670
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
670
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
671
671
  } | null | undefined;
672
672
  enabledIntents: string[];
673
673
  routableIntents: string[];
@@ -741,7 +741,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
741
741
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
742
742
  } | undefined;
743
743
  isolation?: {
744
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
744
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
745
745
  } | undefined;
746
746
  attachment_inputs?: {
747
747
  kind: "file" | "image";
@@ -783,7 +783,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
783
783
  known_models_verified_against?: string | null | undefined;
784
784
  };
785
785
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
786
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
786
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
787
787
  } | null | undefined;
788
788
  enabledIntents?: string[] | undefined;
789
789
  routableIntents?: string[] | undefined;
@@ -875,7 +875,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
875
875
  readonly_mechanism: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist";
876
876
  };
877
877
  isolation: {
878
- supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[];
878
+ supported_containment: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[];
879
879
  };
880
880
  attachment_inputs: {
881
881
  kind: "file" | "image";
@@ -917,7 +917,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
917
917
  known_models_verified_against: string | null;
918
918
  };
919
919
  auth_modes: ("api_key" | "local_session" | "none")[];
920
- access_profiles_supported: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[];
920
+ access_profiles_supported: ("full" | "inherit_native" | "readonly" | "workspace_write")[];
921
921
  } | null | undefined;
922
922
  enabledIntents: string[];
923
923
  routableIntents: string[];
@@ -999,7 +999,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
999
999
  readonly_mechanism?: "fs_sandbox" | "none" | "permission_deny" | "tool_allowlist" | undefined;
1000
1000
  } | undefined;
1001
1001
  isolation?: {
1002
- supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
1002
+ supported_containment?: ("container" | "env_or_file_injection" | "host_user_context" | "private_per_profile_keychain" | "process_sandbox" | "scoped_home_keychain_bridge")[] | undefined;
1003
1003
  } | undefined;
1004
1004
  attachment_inputs?: {
1005
1005
  kind: "file" | "image";
@@ -1041,7 +1041,7 @@ export declare const ControlHarnessListResponse: z.ZodObject<{
1041
1041
  known_models_verified_against?: string | null | undefined;
1042
1042
  };
1043
1043
  auth_modes?: ("api_key" | "local_session" | "none")[] | undefined;
1044
- access_profiles_supported?: ("external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
1044
+ access_profiles_supported?: ("full" | "inherit_native" | "readonly" | "workspace_write")[] | undefined;
1045
1045
  } | null | undefined;
1046
1046
  enabledIntents?: string[] | undefined;
1047
1047
  routableIntents?: string[] | undefined;