@claudexor/schema 4.2.0 → 4.3.0

package/generated/ControlModelOperationDetail.schema.json

@@ -428,6 +428,11 @@
                     },
                     "source": {
                       "$ref": "#/definitions/ControlModelOperationDetail/properties/cost/anyOf/0/properties/processing/properties/nativeMode/anyOf/0"
+                    },
+                    "debit": {
+                      "type": "string",
+                      "const": "unobserved",
+                      "description": "The route reports no actual cash or purchased-credit debit. Included service still admits the work, but its cash stays unknown instead of zero and is outside the finite cap; absence keeps proven ordinary inclusion as zero cash."
                     }
                   },
                   "required": [

package/generated/ControlQuotaQueryResponse.schema.json

@@ -425,6 +425,53 @@
                             "items": {
                               "type": "object",
                               "properties": {
+                                "scope": {
+                                  "type": "string",
+                                  "enum": [
+                                    "personal",
+                                    "team"
+                                  ]
+                                },
+                                "usage_kind": {
+                                  "type": "string",
+                                  "enum": [
+                                    "included",
+                                    "bonus",
+                                    "on_demand",
+                                    "total"
+                                  ]
+                                },
+                                "period": {
+                                  "type": "object",
+                                  "properties": {
+                                    "starts_at": {
+                                      "anyOf": [
+                                        {
+                                          "type": "string",
+                                          "format": "date-time"
+                                        },
+                                        {
+                                          "type": "null"
+                                        }
+                                      ]
+                                    },
+                                    "ends_at": {
+                                      "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
+                                    }
+                                  },
+                                  "required": [
+                                    "starts_at",
+                                    "ends_at"
+                                  ],
+                                  "additionalProperties": false
+                                },
+                                "fee_included": {
+                                  "type": [
+                                    "boolean",
+                                    "null"
+                                  ],
+                                  "description": "Whether the reported amount includes fees; null means the source did not establish this."
+                                },
                                 "id": {
                                   "type": "string"
                                 },
@@ -495,15 +542,7 @@
                         ]
                       },
                       "observed_at": {
-                        "anyOf": [
-                          {
-                            "type": "string",
-                            "format": "date-time"
-                          },
-                          {
-                            "type": "null"
-                          }
-                        ]
+                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                       },
                       "freshness": {
                         "type": "string",
@@ -514,7 +553,7 @@
                         ]
                       },
                       "last_attempt_at": {
-                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                       },
                       "last_error": {
                         "type": [
@@ -543,6 +582,18 @@
                             "items": {
                               "type": "object",
                               "properties": {
+                                "scope": {
+                                  "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/scope"
+                                },
+                                "usage_kind": {
+                                  "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/usage_kind"
+                                },
+                                "period": {
+                                  "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period"
+                                },
+                                "fee_included": {
+                                  "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/fee_included"
+                                },
                                 "id": {
                                   "type": "string"
                                 },
@@ -588,7 +639,7 @@
                                   ]
                                 },
                                 "resets_at": {
-                                  "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                                  "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                                 },
                                 "reason": {
                                   "type": [
@@ -624,7 +675,7 @@
                         ]
                       },
                       "observed_at": {
-                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                       },
                       "freshness": {
                         "type": "string",
@@ -635,7 +686,7 @@
                         ]
                       },
                       "last_attempt_at": {
-                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                       },
                       "last_error": {
                         "type": [
@@ -713,7 +764,7 @@
                                   ]
                                 },
                                 "resets_at": {
-                                  "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                                  "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                                 },
                                 "weekly_limit_applies": {
                                   "type": "boolean"
@@ -766,10 +817,10 @@
                                             ]
                                           },
                                           "starts_at": {
-                                            "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                                            "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                                           },
                                           "expires_at": {
-                                            "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                                            "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                                           },
                                           "clears": {
                                             "type": "array",
@@ -826,7 +877,7 @@
                         ]
                       },
                       "observed_at": {
-                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                       },
                       "freshness": {
                         "type": "string",
@@ -837,7 +888,7 @@
                         ]
                       },
                       "last_attempt_at": {
-                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                       },
                       "last_error": {
                         "type": [
@@ -895,7 +946,7 @@
                         ]
                       },
                       "observed_at": {
-                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                       },
                       "freshness": {
                         "type": "string",
@@ -906,7 +957,7 @@
                         ]
                       },
                       "last_attempt_at": {
-                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/observed_at"
+                        "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items/properties/balances/properties/value/anyOf/0/items/properties/period/properties/starts_at"
                       },
                       "last_error": {
                         "type": [
@@ -1056,6 +1107,66 @@
           ],
           "additionalProperties": false,
           "description": "Opt-in GET /v2/quota?view=constraint_freshness response. Adds constraint freshness while preserving aggregate snapshot freshness and all observed values. No refresh or durable write."
+        },
+        {
+          "type": "object",
+          "properties": {
+            "snapshots": {
+              "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/2/properties/snapshots"
+            },
+            "absences": {
+              "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/0/properties/absences"
+            },
+            "refreshed_at": {
+              "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/0/properties/refreshed_at"
+            },
+            "refresh_skipped": {
+              "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/0/properties/refresh_skipped"
+            },
+            "resources": {
+              "type": "array",
+              "items": {
+                "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/1/properties/resources/items"
+              }
+            },
+            "availability_scope": {
+              "type": "object",
+              "properties": {
+                "basis": {
+                  "type": "string",
+                  "const": "quota_block"
+                },
+                "model": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "minLength": 1
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ]
+                },
+                "requestKind": {
+                  "$ref": "#/definitions/ControlQuotaQueryResponse/anyOf/0/properties/snapshots/items/properties/constraints/items/properties/applies_to_request_kinds/items"
+                }
+              },
+              "required": [
+                "basis",
+                "model",
+                "requestKind"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "snapshots",
+            "refreshed_at",
+            "resources",
+            "availability_scope"
+          ],
+          "additionalProperties": false,
+          "description": "Negotiated resources_freshness view: complete passive account resources, per-constraint freshness and the quota_block availability_scope applied by the engine."
         }
       ]
     }

package/generated/ControlQuotaReadRequest.schema.json

@@ -21,7 +21,8 @@
           "type": "string",
           "enum": [
             "resources",
-            "constraint_freshness"
+            "constraint_freshness",
+            "resources_freshness"
           ]
         }
       },

package/generated/ControlRetainedEnvelope.schema.json

@@ -33,6 +33,7 @@
                 "pool_exhausted",
                 "pinned_limit",
                 "transport",
+                "permission_denied",
                 "context_exhausted",
                 "wall_clock",
                 "cancelled",
@@ -40,7 +41,7 @@
                 "input_required",
                 "other"
               ],
-              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
             },
             {
               "type": "null"

package/generated/ControlRunAgainDraft.schema.json

@@ -556,7 +556,15 @@
               "type": "integer",
               "exclusiveMinimum": 0,
               "maximum": 604800,
-              "description": "Hard wall-clock deadline for the whole run (seconds, from scheduler start, max 7 days); on expiry the run is cancelled with reason wall_clock_exceeded and partial artifacts are kept."
+              "description": "Wall-clock limit for the whole run (seconds, max seven days). Omission disables the clock. Explicit limits cancel by default; soft mode warns and continues."
+            },
+            "timeLimitMode": {
+              "type": "string",
+              "enum": [
+                "soft",
+                "hard"
+              ],
+              "description": "Initial timer mode: soft warns and continues; hard cancels. Omission is hard with maxSeconds and soft without it."
             },
             "denyPaths": {
               "type": "array",

package/generated/ControlRunDetail.schema.json

@@ -131,6 +131,11 @@
                   },
                   "source": {
                     "$ref": "#/definitions/ControlRunDetail/properties/attemptExecution/items/properties/processing/properties/submittedNative/anyOf/0"
+                  },
+                  "debit": {
+                    "type": "string",
+                    "const": "unobserved",
+                    "description": "The route reports no actual cash or purchased-credit debit. Included service still admits the work, but its cash stays unknown instead of zero and is outside the finite cap; absence keeps proven ordinary inclusion as zero cash."
                   }
                 },
                 "required": [
@@ -177,7 +182,7 @@
                   "valuationKnowledge"
                 ],
                 "additionalProperties": false,
-                "description": "Observed usage components. An amount of unknown meaning is not charged cash; separately proven included service can still establish exact zero incremental cash."
+                "description": "Observed usage components. An amount of unknown meaning is not charged cash; separately proven included service can still establish exact zero incremental cash unless its route reports no actual debit."
               }
             },
             "required": [
@@ -302,6 +307,7 @@
                         "pool_exhausted",
                         "pinned_limit",
                         "transport",
+                        "permission_denied",
                         "context_exhausted",
                         "wall_clock",
                         "cancelled",
@@ -309,7 +315,7 @@
                         "input_required",
                         "other"
                       ],
-                      "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+                      "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
                     },
                     "resetsAt": {
                       "type": [
@@ -3080,6 +3086,14 @@
               "default": null,
               "description": "CASH spend so far in USD; null when unknown."
             },
+            "controllableSpendUsd": {
+              "type": [
+                "number",
+                "null"
+              ],
+              "default": null,
+              "description": "Cash governed by the finite cap: settled amounts on routes Claudexor controls; null when that cash is unknown. spendUsd can still be null when an included subscription reports no actual debit."
+            },
             "valuationUsd": {
               "type": [
                 "number",
@@ -3104,7 +3118,7 @@
                 "null"
               ],
               "default": null,
-              "description": "Remaining budget in USD; null when no cap or unknown spend."
+              "description": "Remaining finite cap after controllableSpendUsd; null when no cap or unknown."
             },
             "estimated": {
               "type": "boolean",
@@ -3301,7 +3315,14 @@
                         "null"
                       ],
                       "default": null,
-                      "description": "Settled cash spend in USD (0 on native-subscription routes); null when unknown."
+                      "description": "Settled cash spend in USD (0 on proven included routes); null when unknown, including an included subscription that reports no actual debit."
+                    },
+                    "controllable_cash_usd": {
+                      "type": [
+                        "number",
+                        "null"
+                      ],
+                      "description": "Cash governed by the finite cap: settled amounts on routes Claudexor controls; null when that cash is unknown. spend_usd and cash_usd stay null when an included subscription reports no actual debit. Absent on legacy decisions."
                     },
                     "valuation_usd": {
                       "type": [

package/generated/ControlRunListResponse.schema.json

@@ -122,6 +122,7 @@
                           "pool_exhausted",
                           "pinned_limit",
                           "transport",
+                          "permission_denied",
                           "context_exhausted",
                           "wall_clock",
                           "cancelled",
@@ -129,7 +130,7 @@
                           "input_required",
                           "other"
                         ],
-                        "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+                        "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
                       },
                       "resetsAt": {
                         "type": [

package/generated/ControlRunStartRequest.schema.json

@@ -549,7 +549,15 @@
           "type": "integer",
           "exclusiveMinimum": 0,
           "maximum": 604800,
-          "description": "Hard wall-clock deadline for the whole run (seconds, from scheduler start, max 7 days); on expiry the run is cancelled with reason wall_clock_exceeded and partial artifacts are kept."
+          "description": "Wall-clock limit for the whole run (seconds, max seven days). Omission disables the clock. Explicit limits cancel by default; soft mode warns and continues."
+        },
+        "timeLimitMode": {
+          "type": "string",
+          "enum": [
+            "soft",
+            "hard"
+          ],
+          "description": "Initial timer mode: soft warns and continues; hard cancels. Omission is hard with maxSeconds and soft without it."
         },
         "denyPaths": {
           "type": "array",

package/generated/ControlRunSummary.schema.json

@@ -117,6 +117,7 @@
                     "pool_exhausted",
                     "pinned_limit",
                     "transport",
+                    "permission_denied",
                     "context_exhausted",
                     "wall_clock",
                     "cancelled",
@@ -124,7 +125,7 @@
                     "input_required",
                     "other"
                   ],
-                  "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+                  "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
                 },
                 "resetsAt": {
                   "type": [

package/generated/ControlSettingsSnapshot.schema.json

@@ -202,10 +202,17 @@
               "description": "Wall-clock timeout for a reviewer run, in milliseconds."
             },
             "harnessInactivityTimeoutMs": {
-              "type": "integer",
-              "exclusiveMinimum": 0,
+              "anyOf": [
+                {
+                  "type": "integer",
+                  "exclusiveMinimum": 0
+                },
+                {
+                  "type": "null"
+                }
+              ],
               "default": 3600000,
-              "description": "Inactivity watchdog for harness streams, in milliseconds."
+              "description": "Inactivity watchdog in milliseconds; null disables inactivity timing, not cancellation or cleanup."
             },
             "concurrency": {
               "type": "object",

package/generated/ControlThreadTurnRequest.schema.json

@@ -395,7 +395,15 @@
           "type": "integer",
           "exclusiveMinimum": 0,
           "maximum": 604800,
-          "description": "Hard wall-clock deadline for the whole run (seconds, from scheduler start, max 7 days); on expiry the run is cancelled with reason wall_clock_exceeded and partial artifacts are kept."
+          "description": "Wall-clock limit for the whole run (seconds, max seven days). Omission disables the clock. Explicit limits cancel by default; soft mode warns and continues."
+        },
+        "timeLimitMode": {
+          "type": "string",
+          "enum": [
+            "soft",
+            "hard"
+          ],
+          "description": "Initial timer mode: soft warns and continues; hard cancels. Omission is hard with maxSeconds and soft without it."
         },
         "denyPaths": {
           "type": "array",

package/generated/DecisionRecord.schema.json

@@ -329,7 +329,14 @@
                 "null"
               ],
               "default": null,
-              "description": "Settled cash spend in USD (0 on native-subscription routes); null when unknown."
+              "description": "Settled cash spend in USD (0 on proven included routes); null when unknown, including an included subscription that reports no actual debit."
+            },
+            "controllable_cash_usd": {
+              "type": [
+                "number",
+                "null"
+              ],
+              "description": "Cash governed by the finite cap: settled amounts on routes Claudexor controls; null when that cash is unknown. spend_usd and cash_usd stay null when an included subscription reports no actual debit. Absent on legacy decisions."
             },
             "valuation_usd": {
               "type": [

package/generated/EnvelopeCustody.schema.json

@@ -146,6 +146,7 @@
                 "pool_exhausted",
                 "pinned_limit",
                 "transport",
+                "permission_denied",
                 "context_exhausted",
                 "wall_clock",
                 "cancelled",
@@ -153,7 +154,7 @@
                 "input_required",
                 "other"
               ],
-              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
             },
             {
               "type": "null"

package/generated/GlobalConfig.schema.json

@@ -233,10 +233,17 @@
               "description": "Wall-clock timeout for a reviewer run, in milliseconds."
             },
             "harness_inactivity_timeout_ms": {
-              "type": "integer",
-              "exclusiveMinimum": 0,
+              "anyOf": [
+                {
+                  "type": "integer",
+                  "exclusiveMinimum": 0
+                },
+                {
+                  "type": "null"
+                }
+              ],
               "default": 3600000,
-              "description": "Inactivity watchdog for harness streams: no events for this window aborts the stream and fails the attempt with a typed timeout."
+              "description": "Inactivity watchdog for harness streams: no events for this window aborts the stream; null disables inactivity timing without changing cancellation or cleanup."
             },
             "max_concurrent": {
               "anyOf": [

package/generated/HarnessEvent.schema.json

@@ -325,6 +325,11 @@
             },
             "source": {
               "$ref": "#/definitions/HarnessEvent/properties/effort_resolution/properties/requested/anyOf/0"
+            },
+            "debit": {
+              "type": "string",
+              "const": "unobserved",
+              "description": "The route reports no actual cash or purchased-credit debit. Included service still admits the work, but its cash stays unknown instead of zero and is outside the finite cap; absence keeps proven ordinary inclusion as zero cash."
             }
           },
           "required": [
@@ -606,6 +611,25 @@
           ],
           "description": "Typed refusal code for a rejected raw patch contract."
         },
+        "permission_denial": {
+          "type": "object",
+          "properties": {
+            "permission": {
+              "type": "string",
+              "minLength": 1
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "permission",
+            "source"
+          ],
+          "additionalProperties": false,
+          "description": "Adapter-attested native tool permission refusal, not a claim inferred from model prose or empty output. Does not grant broader access."
+        },
         "usage": {
           "type": "object",
           "properties": {

package/generated/HarnessManifest.schema.json

@@ -250,7 +250,7 @@
                     "tool_policy",
                     "none"
                   ],
-                  "description": "How workspace_write access is CONFINED for a harness: a filesystem/network sandbox (codex seatbelt), a tool-permission policy with no FS/network fence (claude — an allowed shell is unconfined), or none (write intent is advisory).",
+                  "description": "How workspace_write access is CONFINED for a harness: a filesystem/network base sandbox (codex seatbelt; the harness's native automatic reviewer may still admit individual actions outside it, so fs_sandbox does not mean every admitted action stays inside), a tool-permission policy with no FS/network fence (claude — an allowed shell is unconfined), or none (write intent is advisory).",
                   "default": "none"
                 }
               },

package/generated/HarnessStatusDto.schema.json

@@ -268,7 +268,7 @@
                             "tool_policy",
                             "none"
                           ],
-                          "description": "How workspace_write access is CONFINED for a harness: a filesystem/network sandbox (codex seatbelt), a tool-permission policy with no FS/network fence (claude — an allowed shell is unconfined), or none (write intent is advisory).",
+                          "description": "How workspace_write access is CONFINED for a harness: a filesystem/network base sandbox (codex seatbelt; the harness's native automatic reviewer may still admit individual actions outside it, so fs_sandbox does not mean every admitted action stays inside), a tool-permission policy with no FS/network fence (claude — an allowed shell is unconfined), or none (write intent is advisory).",
                           "default": "none"
                         }
                       },

package/generated/ImageCallResult.schema.json

@@ -236,6 +236,11 @@
                 },
                 "source": {
                   "$ref": "#/definitions/ImageCallResult/properties/appliedOptions/properties/size"
+                },
+                "debit": {
+                  "type": "string",
+                  "const": "unobserved",
+                  "description": "The route reports no actual cash or purchased-credit debit. Included service still admits the work, but its cash stays unknown instead of zero and is outside the finite cap; absence keeps proven ordinary inclusion as zero cash."
                 }
               },
               "required": [