@claudexor/schema 5.0.1 → 5.1.0

package/generated/ControlAccountRoutingEvidenceResponse.schema.json

@@ -70,6 +70,66 @@
           },
           "description": "Temporary capability marks; absent from engines that predate them. A mark clears on a success there or a catalog or credential change; after expires_at one operation may probe the account."
         },
+        "credentialUnusable": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "harness_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Harness family of the account."
+              },
+              "profile_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Registered account row the refusal was observed on."
+              },
+              "model": {
+                "type": "string",
+                "description": "Model the refused run requested, exactly as requested; a vendor-reported id that differs from it does not clear the observation."
+              },
+              "code": {
+                "type": "string",
+                "enum": [
+                  "auth_revoked",
+                  "capability_refused",
+                  "verification_failed"
+                ],
+                "description": "Typed reason an observed credential is unusable: vendor rejection, entitlement refusal, or a failed profile verification probe."
+              },
+              "detail": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "description": "Redacted typed evidence of the refusal, such as the vendor's error category; null when none was observed."
+              },
+              "observed_at": {
+                "type": "string",
+                "minLength": 1,
+                "description": "When the refusal was observed."
+              },
+              "expires_at": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Self-expiry of the observation (bounded retention, not a vendor reset time)."
+              }
+            },
+            "required": [
+              "harness_id",
+              "profile_id",
+              "model",
+              "code",
+              "detail",
+              "observed_at",
+              "expires_at"
+            ],
+            "additionalProperties": false,
+            "description": "A live typed refusal of one model on one registered account. It affects routing for that model only and never changes the account's status, Enabled state or order."
+          },
+          "description": "Live model-scoped credential refusals of the registered rows, most recent first per account, present only when the client asked (includeCredentialUnusable=true). One clears on a later service of exactly that model, a credential change, or expiry."
+        },
         "refusals": {
           "type": "array",
           "items": {
@@ -160,7 +220,7 @@
         "lastService"
       ],
       "additionalProperties": false,
-      "description": "Model-scoped account routing evidence: live refusal marks, temporary capability marks and the durable last-served order."
+      "description": "Model-scoped account routing evidence: live refusal marks, temporary capability marks, model-scoped credential refusals and the durable last-served order."
     }
   },
   "$schema": "http://json-schema.org/draft-07/schema#"

package/generated/ControlCredentialProfilesQueryResponse.schema.json

@@ -656,7 +656,7 @@
                                       "tool_allowlist",
                                       "none"
                                     ],
-                                    "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                                    "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                                     "default": "none"
                                   },
                                   "write_mechanism": {
@@ -1157,7 +1157,7 @@
                               "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                             },
                             "default": [],
-                            "description": "Access profiles the adapter can enforce."
+                            "description": "Access profiles the adapter can translate to its harness."
                           }
                         },
                         "required": [

package/generated/ControlCredentialProfilesResourcesResponse.schema.json

@@ -635,7 +635,7 @@
                                   "tool_allowlist",
                                   "none"
                                 ],
-                                "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                                "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                                 "default": "none"
                               },
                               "write_mechanism": {
@@ -1136,7 +1136,7 @@
                           "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                         },
                         "default": [],
-                        "description": "Access profiles the adapter can enforce."
+                        "description": "Access profiles the adapter can translate to its harness."
                       }
                     },
                     "required": [

package/generated/ControlCredentialProfilesSnapshotResponse.schema.json

@@ -635,7 +635,7 @@
                                   "tool_allowlist",
                                   "none"
                                 ],
-                                "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                                "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                                 "default": "none"
                               },
                               "write_mechanism": {
@@ -1136,7 +1136,7 @@
                           "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                         },
                         "default": [],
-                        "description": "Access profiles the adapter can enforce."
+                        "description": "Access profiles the adapter can translate to its harness."
                       }
                     },
                     "required": [

package/generated/ControlGcLastResponse.schema.json

@@ -24,10 +24,32 @@
                 "finished_at": {
                   "type": "string"
                 },
+                "last_completed_at": {
+                  "type": [
+                    "string",
+                    "null"
+                  ],
+                  "default": null,
+                  "description": "Last completed non-preview pass time, or null when no completion is known."
+                },
+                "failed_or_held_streak": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "default": 0,
+                  "description": "Failed or held passes since the last completion; truncated passes preserve the count. Only a completed pass resets it."
+                },
                 "freed_bytes": {
                   "type": "integer",
                   "minimum": 0
                 },
+                "effects": {
+                  "type": "string",
+                  "enum": [
+                    "measured",
+                    "unknown"
+                  ],
+                  "description": "measured: freed_bytes counts this pass's deletions; unknown: the pass stopped before its receipt, or a deletion stopped partway, so freed_bytes is only a lower bound and earlier steps may already have had effects. Absent on records written before the field."
+                },
                 "kept": {
                   "type": "object",
                   "properties": {

package/generated/ControlGcReceipt.schema.json

@@ -158,7 +158,8 @@
                 "exclusiveMinimum": 0
               },
               "example": {
-                "type": "string"
+                "type": "string",
+                "description": "Named cause and affected owner, such as a changed registration, unreadable row or pending recovery partition."
               }
             },
             "required": [
@@ -197,11 +198,22 @@
           "default": [],
           "description": "Standalone diff-review trees deleted (or would-be under dry_run)."
         },
+        "deleted_lanes": {
+          "type": "integer",
+          "minimum": 0,
+          "default": 0,
+          "description": "Number of orphan lane directories removed during this pass."
+        },
         "freed_bytes": {
           "type": "integer",
           "minimum": 0,
           "description": "Total bytes freed (or reclaimable under dry_run)."
         },
+        "effects": {
+          "type": "string",
+          "const": "unknown",
+          "description": "Present only when a deletion committed and then stopped partway: freed_bytes is a lower bound and a later pass finishes that tree. Absent: freed_bytes counts this pass's deletions."
+        },
         "errors": {
           "type": "array",
           "items": {

package/generated/ControlHarnessListResponse.schema.json

@@ -263,7 +263,7 @@
                                   "tool_allowlist",
                                   "none"
                                 ],
-                                "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                                "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                                 "default": "none"
                               },
                               "write_mechanism": {
@@ -764,7 +764,7 @@
                           "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                         },
                         "default": [],
-                        "description": "Access profiles the adapter can enforce."
+                        "description": "Access profiles the adapter can translate to its harness."
                       }
                     },
                     "required": [

package/generated/ControlQueuedRunInfo.schema.json

@@ -12,7 +12,7 @@
         "storeId": {
           "type": "string",
           "minLength": 1,
-          "description": "Identity of the durable engine store that accepted this group member, stable across restarts."
+          "description": "Identity of the durable engine store that accepted this command, stable across restarts. A group member always carries it; an ordinary receipt carries it only for a request sending `X-Claudexor-Store-Identity: 1`, and it stays absent, meaning unknown, when the store has no identity to give."
         },
         "jobId": {
           "type": "string",

package/generated/ControlResource.schema.json

@@ -14,6 +14,11 @@
           "const": "model",
           "description": "Immutable model-operation purpose; absent means a legacy or ordinary attachment."
         },
+        "lifetime": {
+          "type": "string",
+          "const": "managed",
+          "description": "managed: its caller may later release the ID (POST /v2/resources/:id/release), after which no new reference is admitted while already accepted work keeps the bytes. Absent: indefinite reuse."
+        },
         "kind": {
           "type": "string",
           "enum": [

package/generated/ControlResourceRelease.schema.json

@@ -0,0 +1,44 @@
+{
+  "$ref": "#/definitions/ControlResourceRelease",
+  "definitions": {
+    "ControlResourceRelease": {
+      "type": "object",
+      "properties": {
+        "storeId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Durable store that released the resource."
+        },
+        "resourceId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Non-empty identifier string."
+        },
+        "sha256": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Content hash in algo:hex form, e.g. \"sha256:abcd...\"."
+        },
+        "state": {
+          "type": "string",
+          "const": "released"
+        },
+        "releasedAt": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The first release; a repeat answers the same instant."
+        }
+      },
+      "required": [
+        "storeId",
+        "resourceId",
+        "sha256",
+        "state",
+        "releasedAt"
+      ],
+      "additionalProperties": false,
+      "description": "Receipt of a released managed resource. Not a deletion: bytes stay while accepted commands, turns or drafts hold them or another live resource shares the digest."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlResourceReleaseRequest.schema.json

@@ -0,0 +1,27 @@
+{
+  "$ref": "#/definitions/ControlResourceReleaseRequest",
+  "definitions": {
+    "ControlResourceReleaseRequest": {
+      "type": "object",
+      "properties": {
+        "expectedStoreId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Store UUID saved with the import; a different store is refused before any effect."
+        },
+        "sha256": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Digest of the resource receipt being released."
+        }
+      },
+      "required": [
+        "expectedStoreId",
+        "sha256"
+      ],
+      "additionalProperties": false,
+      "description": "Release a managed resource: no new run, turn, retry, continuation or draft may reference it afterwards; already accepted work keeps its bytes. Naturally idempotent."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlRetainedEnvelope.schema.json

@@ -35,13 +35,14 @@
                 "transport",
                 "permission_denied",
                 "context_exhausted",
+                "turn_limit",
                 "wall_clock",
                 "cancelled",
                 "host_restart",
                 "input_required",
                 "other"
               ],
-              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, an error without a typed cause (`transport`: a crash, an inactivity timeout or a harness-reported error; not proof that a process died or the network failed), a confirmed native tool permission refusal, context exhaustion, the run's max-turns cap, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
             },
             {
               "type": "null"

package/generated/ControlRouteHealth.schema.json

@@ -61,7 +61,7 @@
                   "inherit_native",
                   "unknown"
                 ],
-                "description": "Effective access profile the engine enforced; unknown when the run recorded none. The retired external_sandbox_full counts as full."
+                "description": "Effective access profile the engine passed to the route; unknown when the run recorded none. The retired external_sandbox_full counts as full."
               },
               "runs": {
                 "type": "integer",
@@ -128,8 +128,20 @@
                             "raw_context_mandatory_unavailable",
                             "raw_context_exceeds_window",
                             "model_catalog_unavailable",
+                            "model_selection_required",
+                            "raw_patch_requires_isolation",
+                            "raw_patch_missing_evidence",
+                            "raw_patch_digest_mismatch",
+                            "raw_patch_base_mismatch",
+                            "raw_patch_path_traversal",
+                            "raw_patch_outside_scope",
+                            "raw_patch_stale_preimage",
+                            "raw_patch_binary_unsupported",
+                            "raw_patch_truncated",
+                            "raw_patch_apply_failed",
                             "vendor_cli_too_old",
                             "credential_source_unconfirmed",
+                            "vendor_not_retryable",
                             "delegated_home_unavailable",
                             "delegated_confinement_unavailable",
                             "delegated_evidence_incomplete",

package/generated/ControlRunControlResponse.schema.json

@@ -118,7 +118,7 @@
                         "retryable": {
                           "type": "boolean",
                           "default": true,
-                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay."
+                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay or a managed resource it names was released."
                         },
                         "required_actions": {
                           "type": "array",
@@ -149,13 +149,51 @@
                     "code"
                   ],
                   "additionalProperties": false,
-                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
                 },
                 {
                   "type": "null"
                 }
               ],
-              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
+            },
+            "resumed": {
+              "type": "object",
+              "properties": {
+                "from": {
+                  "type": "object",
+                  "properties": {
+                    "code": {
+                      "$ref": "#/definitions/ControlRunControlResponse/properties/deferredMessage/properties/hold/anyOf/0/properties/code"
+                    },
+                    "problem": {
+                      "$ref": "#/definitions/ControlRunControlResponse/properties/deferredMessage/properties/hold/anyOf/0/properties/problem"
+                    }
+                  },
+                  "required": [
+                    "code"
+                  ],
+                  "additionalProperties": false,
+                  "description": "The hold the draft was returned from."
+                },
+                "reason": {
+                  "type": "string",
+                  "const": "process_scope_settled",
+                  "description": "A later settlement of the predecessor's run proved its processes gone; the draft was unchanged, not cleared, replaced or stopped."
+                },
+                "at": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "ISO-8601 timestamp string."
+                }
+              },
+              "required": [
+                "from",
+                "reason",
+                "at"
+              ],
+              "additionalProperties": false,
+              "description": "Why this draft left its hold automatically. It then took the existing revision and admission path; any other reason holds it again."
             },
             "dispatchedRevision": {
               "anyOf": [

package/generated/ControlRunDecisionRequest.schema.json

@@ -12,9 +12,10 @@
             "accept_risk",
             "override_needs_human",
             "revert_run",
-            "discard"
+            "discard",
+            "taken"
           ],
-          "description": "Operator decision: apply an accepted result, rerun with feedback, accept risk, override needs-human, revert a recorded Git effect, or discard remaining copied files without applying them."
+          "description": "Operator decision: apply an accepted result, rerun with feedback, accept risk, override needs-human, revert a recorded Git effect, acknowledge a captured terminal patch result, or discard remaining copied files without applying them."
         },
         "findingIds": {
           "type": "array",
@@ -85,6 +86,11 @@
             }
           ],
           "description": "Delivery target for accept_clean_patch."
+        },
+        "reason": {
+          "type": "string",
+          "const": "captured_result",
+          "description": "Reason for the taken decision; required only for action=taken."
         }
       },
       "required": [

package/generated/ControlRunDecisionResponse.schema.json

@@ -15,9 +15,10 @@
             "requeued",
             "rejected",
             "unsupported",
-            "discarded"
+            "discarded",
+            "taken"
           ],
-          "description": "Outcome: applied, requeued (a new turn was enqueued), rejected, or unsupported."
+          "description": "Outcome: applied, requeued (a new turn was enqueued), rejected, unsupported, discarded, or taken."
         },
         "newRunId": {
           "type": "string",
@@ -36,7 +37,7 @@
         "storeId": {
           "type": "string",
           "minLength": 1,
-          "description": "Identity of the durable engine store that accepted this group member, stable across restarts."
+          "description": "Identity of the durable engine store that accepted this command, stable across restarts. A group member always carries it; an ordinary receipt carries it only for a request sending `X-Claudexor-Store-Identity: 1`, and it stays absent, meaning unknown, when the store has no identity to give."
         },
         "message": {
           "type": "string",