@claudexor/schema 3.8.0 → 3.8.2

package/dist/control-run-failure.d.ts

@@ -8,12 +8,12 @@ import { z } from "zod/v3";
  * Re-exported through `index.ts` like the other `control-*` splits, so every
  * caller keeps importing it from `@claudexor/schema`.
  */
-export declare const RunFailureCode: z.ZodEnum<["finite_zero", "hard_cap", "estimate_headroom", "unknown_paid_in_flight", "budget_overshoot", "cost_unverifiable", "delegation_child_drain_timeout", "subscription_window_exhausted", "credential_pool_exhausted", "delegated_home_unavailable", "delegated_confinement_unavailable", "delegated_evidence_incomplete"]>;
+export declare const RunFailureCode: z.ZodEnum<["finite_zero", "hard_cap", "estimate_headroom", "unknown_paid_in_flight", "budget_overshoot", "cost_unverifiable", "delegation_child_drain_timeout", "subscription_window_exhausted", "credential_pool_exhausted", "delegated_home_unavailable", "delegated_confinement_unavailable", "delegated_evidence_incomplete", "access_profile_incompatible", "retired_access_profile"]>;
 export type RunFailureCode = z.infer<typeof RunFailureCode>;
 export declare const RunFailure: z.ZodObject<{
     phase: z.ZodDefault<z.ZodString>;
     category: z.ZodDefault<z.ZodEnum<["validation", "project", "auth", "harness_unavailable", "harness_error", "config_error", "budget", "policy", "cancelled", "internal", "unknown"]>>;
-    code: z.ZodDefault<z.ZodNullable<z.ZodEnum<["finite_zero", "hard_cap", "estimate_headroom", "unknown_paid_in_flight", "budget_overshoot", "cost_unverifiable", "delegation_child_drain_timeout", "subscription_window_exhausted", "credential_pool_exhausted", "delegated_home_unavailable", "delegated_confinement_unavailable", "delegated_evidence_incomplete"]>>>;
+    code: z.ZodDefault<z.ZodNullable<z.ZodEnum<["finite_zero", "hard_cap", "estimate_headroom", "unknown_paid_in_flight", "budget_overshoot", "cost_unverifiable", "delegation_child_drain_timeout", "subscription_window_exhausted", "credential_pool_exhausted", "delegated_home_unavailable", "delegated_confinement_unavailable", "delegated_evidence_incomplete", "access_profile_incompatible", "retired_access_profile"]>>>;
     harnessId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     attemptId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     safeMessage: z.ZodString;
@@ -29,7 +29,7 @@ export declare const RunFailure: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     phase: string;
     category: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation";
-    code: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
+    code: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null;
     harnessId: string | null;
     attemptId: string | null;
     safeMessage: string;
@@ -42,7 +42,7 @@ export declare const RunFailure: z.ZodObject<{
 }, {
     phase?: string | undefined;
     category?: "auth" | "budget" | "cancelled" | "config_error" | "harness_error" | "harness_unavailable" | "internal" | "policy" | "project" | "unknown" | "validation" | undefined;
-    code?: "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
+    code?: "access_profile_incompatible" | "budget_overshoot" | "cost_unverifiable" | "credential_pool_exhausted" | "delegated_confinement_unavailable" | "delegated_evidence_incomplete" | "delegated_home_unavailable" | "delegation_child_drain_timeout" | "estimate_headroom" | "finite_zero" | "hard_cap" | "retired_access_profile" | "subscription_window_exhausted" | "unknown_paid_in_flight" | null | undefined;
     harnessId?: string | null | undefined;
     attemptId?: string | null | undefined;
     safeMessage: string;

package/dist/control-run-failure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-run-failure.d.ts","sourceRoot":"","sources":["../src/control-run-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,oUA0BxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,UAAU;;;;;;;;;;;IAmDnB;;iEAE6D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAa9D,CAAC;AACJ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC"}
+{"version":3,"file":"control-run-failure.d.ts","sourceRoot":"","sources":["../src/control-run-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,6XA4BxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,UAAU;;;;;;;;;;;IAmDnB;;iEAE6D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAa9D,CAAC;AACJ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC"}

package/dist/control-run-failure.js

@@ -24,15 +24,17 @@ export const RunFailureCode = z
      * the EARLIEST known release inside the pool — the first instant any
      * member reopens — or null when any member's reset is unknown. */
     "credential_pool_exhausted",
-    /* A delegated run's confinement preconditions. Each is thrown as a typed
-     * error deep in the attempt loop, so it must be listed here or
-     * `declaredFailure` drops it to `code: null` and the terminal states less
+    /* Active scoped-HOME/evidence refusals plus the historical confinement
+     * decoder code. Attempt-loop failures must be listed here or
+     * `declaredFailure` drops them to `code: null` and the terminal states less
      * than the thrower knew. See docs/DELEGATED_CONFINEMENT.md. */
     "delegated_home_unavailable",
     "delegated_confinement_unavailable",
     "delegated_evidence_incomplete",
+    "access_profile_incompatible",
+    "retired_access_profile",
 ])
-    .describe("Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence).");
+    .describe("Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals.");
 export const RunFailure = z
     .object({
     phase: z.string().default("unknown").describe("Pipeline phase where the failure happened."),

package/dist/control-run-failure.js.map

@@ -1 +1 @@
-{"version":3,"file":"control-run-failure.js","sourceRoot":"","sources":["../src/control-run-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,IAAI,CAAC;IACJ,aAAa;IACb,UAAU;IACV,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,mBAAmB;IACnB,gCAAgC;IAChC,+BAA+B;IAC/B;;;;sEAIkE;IAClE,2BAA2B;IAC3B;;;mEAG+D;IAC/D,4BAA4B;IAC5B,mCAAmC;IACnC,+BAA+B;CAChC,CAAC;KACD,QAAQ,CACP,uaAAua,CACxa,CAAC;AAGJ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAC3F,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC;QACJ,YAAY;QACZ,SAAS;QACT,MAAM;QACN,qBAAqB;QACrB,eAAe;QACf,cAAc;QACd,QAAQ;QACR,QAAQ;QACR,WAAW;QACX,UAAU;QACV,SAAS;KACV,CAAC;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,QAAQ,CACP,sSAAsS,CACvS;IACH,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE;SAC5B,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,yKAAyK,CAC1K;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,8CAA8C,CAAC;IAC3D,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,8CAA8C,CAAC;IAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAC5E,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,0DAA0D,CAAC;IACvE,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,2CAA2C,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC/E;;iEAE6D;IAC7D,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC1B,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,iLAAiL,CAClL;IACH,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CAC1F,CAAC;KACD,QAAQ,CACP,mGAAmG,CACpG,CAAC"}
+{"version":3,"file":"control-run-failure.js","sourceRoot":"","sources":["../src/control-run-failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,IAAI,CAAC;IACJ,aAAa;IACb,UAAU;IACV,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,mBAAmB;IACnB,gCAAgC;IAChC,+BAA+B;IAC/B;;;;sEAIkE;IAClE,2BAA2B;IAC3B;;;mEAG+D;IAC/D,4BAA4B;IAC5B,mCAAmC;IACnC,+BAA+B;IAC/B,6BAA6B;IAC7B,wBAAwB;CACzB,CAAC;KACD,QAAQ,CACP,iJAAiJ,CAClJ,CAAC;AAGJ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAC3F,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC;QACJ,YAAY;QACZ,SAAS;QACT,MAAM;QACN,qBAAqB;QACrB,eAAe;QACf,cAAc;QACd,QAAQ;QACR,QAAQ;QACR,WAAW;QACX,UAAU;QACV,SAAS;KACV,CAAC;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,QAAQ,CACP,sSAAsS,CACvS;IACH,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE;SAC5B,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,yKAAyK,CAC1K;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,8CAA8C,CAAC;IAC3D,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,8CAA8C,CAAC;IAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAC5E,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,0DAA0D,CAAC;IACvE,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,2CAA2C,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC/E;;iEAE6D;IAC7D,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC1B,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,iLAAiL,CAClL;IACH,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CAC1F,CAAC;KACD,QAAQ,CACP,mGAAmG,CACpG,CAAC"}

package/dist/control-run-retry.d.ts

@@ -38,6 +38,13 @@ export declare function makeControlRunRetrySchemas<T extends z.ZodTypeAny>(runRe
     draft: z.ZodObject<{
         sourceRunId: z.ZodString;
         request: T;
+        accessChoice: z.ZodObject<{
+            required: z.ZodBoolean;
+        }, "strict", z.ZodTypeAny, {
+            required: boolean;
+        }, {
+            required: boolean;
+        }>;
         differences: z.ZodDefault<z.ZodArray<z.ZodObject<{
             field: z.ZodString;
             change: z.ZodLiteral<"omitted">;
@@ -54,6 +61,13 @@ export declare function makeControlRunRetrySchemas<T extends z.ZodTypeAny>(runRe
     }, "strict", z.ZodTypeAny, z.objectUtil.addQuestionMarks<z.baseObjectOutputType<{
         sourceRunId: z.ZodString;
         request: T;
+        accessChoice: z.ZodObject<{
+            required: z.ZodBoolean;
+        }, "strict", z.ZodTypeAny, {
+            required: boolean;
+        }, {
+            required: boolean;
+        }>;
         differences: z.ZodDefault<z.ZodArray<z.ZodObject<{
             field: z.ZodString;
             change: z.ZodLiteral<"omitted">;
@@ -70,6 +84,13 @@ export declare function makeControlRunRetrySchemas<T extends z.ZodTypeAny>(runRe
     }>, any> extends infer T_1 ? { [k in keyof T_1]: T_1[k]; } : never, z.baseObjectInputType<{
         sourceRunId: z.ZodString;
         request: T;
+        accessChoice: z.ZodObject<{
+            required: z.ZodBoolean;
+        }, "strict", z.ZodTypeAny, {
+            required: boolean;
+        }, {
+            required: boolean;
+        }>;
         differences: z.ZodDefault<z.ZodArray<z.ZodObject<{
             field: z.ZodString;
             change: z.ZodLiteral<"omitted">;

package/dist/control-run-retry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-run-retry.d.ts","sourceRoot":"","sources":["../src/control-run-retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsC/E"}
+{"version":3,"file":"control-run-retry.d.ts","sourceRoot":"","sources":["../src/control-run-retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4C/E"}

package/dist/control-run-retry.js

@@ -23,6 +23,12 @@ export function makeControlRunRetrySchemas(runRequest) {
         .object({
         sourceRunId: Id,
         request: runRequest,
+        accessChoice: z
+            .object({
+            required: z.boolean(),
+        })
+            .strict()
+            .describe("Whether Run Again requires an explicit active access choice."),
         differences: z
             .array(z
             .object({

package/dist/control-run-retry.js.map

@@ -1 +1 @@
-{"version":3,"file":"control-run-retry.js","sourceRoot":"","sources":["../src/control-run-retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAErC,MAAM,UAAU,0BAA0B,CAAyB,UAAa;IAC9E,MAAM,SAAS,GAAG,CAAC;SAChB,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QACvE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;KAC/D,CAAC;SACD,QAAQ,CAAC,2CAA2C,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,CAAC;SACf,MAAM,CAAC;QACN,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,CAAC,qEAAqE,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,CAAC;SACZ,MAAM,CAAC;QACN,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,UAAU;QACnB,WAAW,EAAE,CAAC;aACX,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;YAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC1B,CAAC;aACD,MAAM,EAAE,CACZ;aACA,OAAO,CAAC,EAAE,CAAC;KACf,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,CAAC,2EAA2E,CAAC,CAAC;IACzF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC"}
+{"version":3,"file":"control-run-retry.js","sourceRoot":"","sources":["../src/control-run-retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAErC,MAAM,UAAU,0BAA0B,CAAyB,UAAa;IAC9E,MAAM,SAAS,GAAG,CAAC;SAChB,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QACvE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;KAC/D,CAAC;SACD,QAAQ,CAAC,2CAA2C,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,CAAC;SACf,MAAM,CAAC;QACN,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,CAAC,qEAAqE,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,CAAC;SACZ,MAAM,CAAC;QACN,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,CAAC;aACZ,MAAM,CAAC;YACN,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;SACtB,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,CAAC,8DAA8D,CAAC;QAC3E,WAAW,EAAE,CAAC;aACX,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;YAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC1B,CAAC;aACD,MAAM,EAAE,CACZ;aACA,OAAO,CAAC,EAAE,CAAC;KACf,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,CAAC,2EAA2E,CAAC,CAAC;IACzF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC"}

package/dist/control-trust.d.ts

@@ -24,7 +24,7 @@ export declare const ControlTrustUpdateRequest: z.ZodEffects<z.ZodObject<{
         cwd?: string | undefined;
         envAllowlist?: string[] | undefined;
     }>>;
-    grantAccessProfile: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>>;
+    grantAccessProfile: z.ZodOptional<z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>>;
     revokeTestCommandDigest: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     repoRoot: string;
@@ -36,7 +36,7 @@ export declare const ControlTrustUpdateRequest: z.ZodEffects<z.ZodObject<{
         cwd?: string | undefined;
         envAllowlist: string[];
     } | undefined;
-    grantAccessProfile?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    grantAccessProfile?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
     revokeTestCommandDigest?: string | undefined;
 }, {
     repoRoot: string;
@@ -48,7 +48,7 @@ export declare const ControlTrustUpdateRequest: z.ZodEffects<z.ZodObject<{
         cwd?: string | undefined;
         envAllowlist?: string[] | undefined;
     } | undefined;
-    grantAccessProfile?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    grantAccessProfile?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
     revokeTestCommandDigest?: string | undefined;
 }>, {
     repoRoot: string;
@@ -60,7 +60,7 @@ export declare const ControlTrustUpdateRequest: z.ZodEffects<z.ZodObject<{
         cwd?: string | undefined;
         envAllowlist: string[];
     } | undefined;
-    grantAccessProfile?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    grantAccessProfile?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
     revokeTestCommandDigest?: string | undefined;
 }, {
     repoRoot: string;
@@ -72,7 +72,7 @@ export declare const ControlTrustUpdateRequest: z.ZodEffects<z.ZodObject<{
         cwd?: string | undefined;
         envAllowlist?: string[] | undefined;
     } | undefined;
-    grantAccessProfile?: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
+    grantAccessProfile?: "full" | "inherit_native" | "readonly" | "workspace_write" | undefined;
     revokeTestCommandDigest?: string | undefined;
 }>;
 export type ControlTrustUpdateRequest = z.infer<typeof ControlTrustUpdateRequest>;
@@ -83,19 +83,19 @@ export declare const ControlTrustState: z.ZodObject<{
     /** The user-level trust file backing this state (path disclosure, no content). */
     path: z.ZodString;
     allowFullAccess: z.ZodBoolean;
-    accessDefault: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+    accessDefault: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>;
     testCommandGrantCount: z.ZodDefault<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     repoRoot: string | null;
     path: string;
     allowFullAccess: boolean;
-    accessDefault: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
+    accessDefault: "full" | "inherit_native" | "readonly" | "workspace_write";
     testCommandGrantCount: number;
 }, {
     repoRoot: string | null;
     path: string;
     allowFullAccess: boolean;
-    accessDefault: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
+    accessDefault: "full" | "inherit_native" | "readonly" | "workspace_write";
     testCommandGrantCount?: number | undefined;
 }>;
 export type ControlTrustState = z.infer<typeof ControlTrustState>;
@@ -107,19 +107,19 @@ export declare const ControlTrustListResponse: z.ZodObject<{
         /** The user-level trust file backing this state (path disclosure, no content). */
         path: z.ZodString;
         allowFullAccess: z.ZodBoolean;
-        accessDefault: z.ZodEnum<["readonly", "workspace_write", "full", "external_sandbox_full", "inherit_native"]>;
+        accessDefault: z.ZodEnum<["readonly", "workspace_write", "full", "inherit_native"]>;
         testCommandGrantCount: z.ZodDefault<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
         repoRoot: string | null;
         path: string;
         allowFullAccess: boolean;
-        accessDefault: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
+        accessDefault: "full" | "inherit_native" | "readonly" | "workspace_write";
         testCommandGrantCount: number;
     }, {
         repoRoot: string | null;
         path: string;
         allowFullAccess: boolean;
-        accessDefault: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
+        accessDefault: "full" | "inherit_native" | "readonly" | "workspace_write";
         testCommandGrantCount?: number | undefined;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
@@ -127,7 +127,7 @@ export declare const ControlTrustListResponse: z.ZodObject<{
         repoRoot: string | null;
         path: string;
         allowFullAccess: boolean;
-        accessDefault: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
+        accessDefault: "full" | "inherit_native" | "readonly" | "workspace_write";
         testCommandGrantCount: number;
     }[];
 }, {
@@ -135,7 +135,7 @@ export declare const ControlTrustListResponse: z.ZodObject<{
         repoRoot: string | null;
         path: string;
         allowFullAccess: boolean;
-        accessDefault: "external_sandbox_full" | "full" | "inherit_native" | "readonly" | "workspace_write";
+        accessDefault: "full" | "inherit_native" | "readonly" | "workspace_write";
         testCommandGrantCount?: number | undefined;
     }[];
 }>;