@claudexor/schema 5.0.2 → 5.1.0

package/generated/DeferredMessageProjection.schema.json

@@ -85,7 +85,7 @@
                     "retryable": {
                       "type": "boolean",
                       "default": true,
-                      "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay."
+                      "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay or a managed resource it names was released."
                     },
                     "required_actions": {
                       "type": "array",
@@ -116,13 +116,51 @@
                 "code"
               ],
               "additionalProperties": false,
-              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
             },
             {
               "type": "null"
             }
           ],
-          "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+          "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
+        },
+        "resumed": {
+          "type": "object",
+          "properties": {
+            "from": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "$ref": "#/definitions/DeferredMessageProjection/properties/hold/anyOf/0/properties/code"
+                },
+                "problem": {
+                  "$ref": "#/definitions/DeferredMessageProjection/properties/hold/anyOf/0/properties/problem"
+                }
+              },
+              "required": [
+                "code"
+              ],
+              "additionalProperties": false,
+              "description": "The hold the draft was returned from."
+            },
+            "reason": {
+              "type": "string",
+              "const": "process_scope_settled",
+              "description": "A later settlement of the predecessor's run proved its processes gone; the draft was unchanged, not cleared, replaced or stopped."
+            },
+            "at": {
+              "type": "string",
+              "minLength": 1,
+              "description": "ISO-8601 timestamp string."
+            }
+          },
+          "required": [
+            "from",
+            "reason",
+            "at"
+          ],
+          "additionalProperties": false,
+          "description": "Why this draft left its hold automatically. It then took the existing revision and admission path; any other reason holds it again."
         },
         "dispatchedRevision": {
           "anyOf": [

package/generated/DeferredMessageReadResult.schema.json

@@ -88,7 +88,7 @@
                         "retryable": {
                           "type": "boolean",
                           "default": true,
-                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay."
+                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay or a managed resource it names was released."
                         },
                         "required_actions": {
                           "type": "array",
@@ -119,13 +119,51 @@
                     "code"
                   ],
                   "additionalProperties": false,
-                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
                 },
                 {
                   "type": "null"
                 }
               ],
-              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
+            },
+            "resumed": {
+              "type": "object",
+              "properties": {
+                "from": {
+                  "type": "object",
+                  "properties": {
+                    "code": {
+                      "$ref": "#/definitions/DeferredMessageReadResult/properties/draft/properties/hold/anyOf/0/properties/code"
+                    },
+                    "problem": {
+                      "$ref": "#/definitions/DeferredMessageReadResult/properties/draft/properties/hold/anyOf/0/properties/problem"
+                    }
+                  },
+                  "required": [
+                    "code"
+                  ],
+                  "additionalProperties": false,
+                  "description": "The hold the draft was returned from."
+                },
+                "reason": {
+                  "type": "string",
+                  "const": "process_scope_settled",
+                  "description": "A later settlement of the predecessor's run proved its processes gone; the draft was unchanged, not cleared, replaced or stopped."
+                },
+                "at": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "ISO-8601 timestamp string."
+                }
+              },
+              "required": [
+                "from",
+                "reason",
+                "at"
+              ],
+              "additionalProperties": false,
+              "description": "Why this draft left its hold automatically. It then took the existing revision and admission path; any other reason holds it again."
             },
             "dispatchedRevision": {
               "anyOf": [
@@ -245,7 +283,7 @@
                                   "null"
                                 ],
                                 "default": null,
-                                "description": "Per-harness default model; null = the harness's own default."
+                                "description": "Per-harness default model; null = the harness's own default, or no model on a route whose request must name one."
                               },
                               "effort": {
                                 "anyOf": [

package/generated/DeferredMessageReceipt.schema.json

@@ -94,7 +94,7 @@
                         "retryable": {
                           "type": "boolean",
                           "default": true,
-                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay."
+                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay or a managed resource it names was released."
                         },
                         "required_actions": {
                           "type": "array",
@@ -125,13 +125,51 @@
                     "code"
                   ],
                   "additionalProperties": false,
-                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
                 },
                 {
                   "type": "null"
                 }
               ],
-              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
+            },
+            "resumed": {
+              "type": "object",
+              "properties": {
+                "from": {
+                  "type": "object",
+                  "properties": {
+                    "code": {
+                      "$ref": "#/definitions/DeferredMessageReceipt/properties/draft/properties/hold/anyOf/0/properties/code"
+                    },
+                    "problem": {
+                      "$ref": "#/definitions/DeferredMessageReceipt/properties/draft/properties/hold/anyOf/0/properties/problem"
+                    }
+                  },
+                  "required": [
+                    "code"
+                  ],
+                  "additionalProperties": false,
+                  "description": "The hold the draft was returned from."
+                },
+                "reason": {
+                  "type": "string",
+                  "const": "process_scope_settled",
+                  "description": "A later settlement of the predecessor's run proved its processes gone; the draft was unchanged, not cleared, replaced or stopped."
+                },
+                "at": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "ISO-8601 timestamp string."
+                }
+              },
+              "required": [
+                "from",
+                "reason",
+                "at"
+              ],
+              "additionalProperties": false,
+              "description": "Why this draft left its hold automatically. It then took the existing revision and admission path; any other reason holds it again."
             },
             "dispatchedRevision": {
               "anyOf": [

package/generated/EnvelopeCustody.schema.json

@@ -106,7 +106,7 @@
             "policy_profile": {
               "type": "string",
               "default": "workspace_write",
-              "description": "Access profile the envelope enforces."
+              "description": "Access profile recorded for the envelope."
             },
             "dirty_policy": {
               "type": "string",
@@ -148,13 +148,14 @@
                 "transport",
                 "permission_denied",
                 "context_exhausted",
+                "turn_limit",
                 "wall_clock",
                 "cancelled",
                 "host_restart",
                 "input_required",
                 "other"
               ],
-              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, an error without a typed cause (`transport`: a crash, an inactivity timeout or a harness-reported error; not proof that a process died or the network failed), a confirmed native tool permission refusal, context exhaustion, the run's max-turns cap, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
             },
             {
               "type": "null"

package/generated/GlobalConfig.schema.json

@@ -418,7 +418,7 @@
                   "null"
                 ],
                 "default": null,
-                "description": "Per-harness default model; null = the harness's own default."
+                "description": "Per-harness default model; null = the harness's own default, or no model on a route whose request must name one."
               },
               "effort": {
                 "anyOf": [

package/generated/HarnessEvent.schema.json

@@ -142,9 +142,41 @@
                 "reported_source"
               ],
               "additionalProperties": false
+            },
+            {
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "const": "vendor_not_retryable"
+                },
+                "source": {
+                  "type": "string",
+                  "const": "agy_stderr"
+                },
+                "error_id": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "minLength": 1,
+                      "maxLength": 128
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "The vendor's own error id from the same record, verbatim; null when absent."
+                }
+              },
+              "required": [
+                "kind",
+                "source",
+                "error_id"
+              ],
+              "additionalProperties": false
             }
           ],
-          "description": "Vendor-attested request refusal that stops retries and account rotation on its harness; input, executable and credential-source causes carry their own evidence."
+          "description": "Vendor-attested request refusal that stops retries and account rotation on its harness; input, executable and credential-source causes and an explicit vendor not-retryable verdict carry their own evidence."
         },
         "effort_resolution": {
           "type": "object",
@@ -456,6 +488,58 @@
           "additionalProperties": false,
           "description": "Requested, configured and observed prompt-cache lifetime facts for one attempt. Lifecycle, outcome and cost are separate facts and never derive from this receipt."
         },
+        "route_controls": {
+          "type": "object",
+          "properties": {
+            "web_mechanism": {
+              "type": "string",
+              "enum": [
+                "native",
+                "tools",
+                "uncontrolled",
+                "none"
+              ],
+              "description": "How this route's own web tools are switched for its web policy (the manifest's web_policy)."
+            },
+            "access": {
+              "type": "string",
+              "enum": [
+                "readonly",
+                "workspace_write",
+                "full",
+                "inherit_native"
+              ],
+              "description": "Access profile handed to this spawn."
+            },
+            "native_access": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "The vendor access setting the adapter builds for that profile, in the vendor's own spelling (argv or request parameters) and from the helper that passes it; null when it passes none or does not disclose it."
+            },
+            "access_mechanism": {
+              "type": "string",
+              "enum": [
+                "fs_sandbox",
+                "permission_deny",
+                "tool_allowlist",
+                "tool_policy",
+                "native_settings",
+                "none"
+              ],
+              "description": "How the route's access profile reaches the harness: fs_sandbox (the vendor's own file-system sandbox, as the vendor applies it), permission_deny, tool_allowlist or tool_policy (vendor tool permissions; the manifest declares no OS file boundary), native_settings (inherit_native: Claudexor passes no access profile, so the harness's own configuration decides and what it confines is unknown here), or none (full access, or a route that declares no control)."
+            }
+          },
+          "required": [
+            "web_mechanism",
+            "access",
+            "native_access",
+            "access_mechanism"
+          ],
+          "additionalProperties": false,
+          "description": "Per-spawn receipt of the native web and access controls prepared for a route, recorded just before dispatch; not proof that a native process ran with them. Claudexor adds no outer boundary."
+        },
         "type": {
           "type": "string",
           "enum": [
@@ -584,9 +668,10 @@
                     "exited",
                     "timed_out",
                     "backgrounded",
+                    "completion_reported",
                     "unknown"
                   ],
-                  "description": "exited: the tool observed the command end; timed_out: the tool's timeout elapsed before an observed end (the process may still run or may have been signalled); backgrounded: the command was handed to a background shell and was still running when the result returned; unknown: the native result established none of these."
+                  "description": "exited: the tool observed the command end; timed_out: the tool's timeout elapsed before an observed end (the process may still run or may have been signalled); backgrounded: the command was handed to a background shell and was still running when the result returned; completion_reported: after such a handoff, a later vendor notification reported that the command ended, without an exit code; unknown: the native result established none of these."
                 },
                 "signal": {
                   "type": "string",
@@ -615,6 +700,15 @@
                   "type": "integer",
                   "exclusiveMinimum": 0,
                   "description": "Vendor-reported process id."
+                },
+                "completion_status": {
+                  "type": "string",
+                  "enum": [
+                    "success",
+                    "error",
+                    "aborted"
+                  ],
+                  "description": "What the vendor reported about a completion_reported command; never an exit code."
                 }
               },
               "required": [
@@ -631,13 +725,21 @@
                 "failed"
               ],
               "description": "Adapter-stamped web/browser retrieval outcome (verified/dispatched/failed), distinct from the tool-call status lifecycle."
+            },
+            "web_content": {
+              "type": "string",
+              "enum": [
+                "page",
+                "search_results"
+              ],
+              "description": "What a verified web retrieval returned: page (a fetched or loaded page) or search_results (a web search's results, not a fetched page)."
             }
           },
           "required": [
             "name"
           ],
           "additionalProperties": false,
-          "description": "Typed tool info; set on tool_call and tool_result events."
+          "description": "Typed tool info; set on tool_call and tool_result events, and on a status event with payload.code command_outcome_refined, where it names the earlier call (use_id) and carries its refined command_outcome."
         },
         "interaction": {
           "type": "object",
@@ -769,7 +871,7 @@
                         "type": "null"
                       }
                     ],
-                    "description": "Base-tree blob oid, or null only when the path is absent in the base tree."
+                    "description": "Blob oid in the packet's exact tree, or null only when that tree lacks the path."
                   }
                 },
                 "required": [
@@ -1384,6 +1486,13 @@
               ],
               "default": null,
               "description": "Suggested retry delay in milliseconds, when reported."
+            },
+            "reopening": {
+              "type": "string",
+              "enum": [
+                "unknown"
+              ],
+              "description": "unknown: the vendor's own typed code refused further usage on this account and named no reopening time, and the refusal is not known to be a timed window (Codex usage_limit_exceeded also covers a workspace out of credits). No reset is derived from it and the same account is never retried for it. Absent: resets_at, retry_delay_ms and the vendor's window say when to come back, as before."
             }
           },
           "additionalProperties": false,
@@ -1538,6 +1647,33 @@
           "additionalProperties": false,
           "description": "Typed context-management signal (compaction boundary / capacity exhaustion) set by the adapter; orthogonal to the transient-retry taxonomy."
         },
+        "turn_limit": {
+          "type": "object",
+          "properties": {
+            "native_code": {
+              "type": "string",
+              "description": "The vendor's own terminal subtype, verbatim."
+            },
+            "num_turns": {
+              "anyOf": [
+                {
+                  "type": "integer",
+                  "minimum": 0
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Turns the vendor counted."
+            }
+          },
+          "required": [
+            "native_code",
+            "num_turns"
+          ],
+          "additionalProperties": false,
+          "description": "Typed max-turns stop set by the adapter on the error event that ends a capped native turn; orthogonal to the transient-retry taxonomy."
+        },
         "error": {
           "type": "string",
           "description": "Error text for error events."

package/generated/HarnessManifest.schema.json

@@ -240,7 +240,7 @@
                     "tool_allowlist",
                     "none"
                   ],
-                  "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                  "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                   "default": "none"
                 },
                 "write_mechanism": {
@@ -741,7 +741,7 @@
             "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
           },
           "default": [],
-          "description": "Access profiles the adapter can enforce."
+          "description": "Access profiles the adapter can translate to its harness."
         }
       },
       "required": [

package/generated/HarnessStatusDto.schema.json

@@ -258,7 +258,7 @@
                             "tool_allowlist",
                             "none"
                           ],
-                          "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                          "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                           "default": "none"
                         },
                         "write_mechanism": {
@@ -759,7 +759,7 @@
                     "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                   },
                   "default": [],
-                  "description": "Access profiles the adapter can enforce."
+                  "description": "Access profiles the adapter can translate to its harness."
                 }
               },
               "required": [

package/generated/McpAccountsToolResult.schema.json

@@ -447,6 +447,66 @@
                   },
                   "description": "Temporary capability marks; absent from engines that predate them. A mark clears on a success there or a catalog or credential change; after expires_at one operation may probe the account."
                 },
+                "credentialUnusable": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "harness_id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Harness family of the account."
+                      },
+                      "profile_id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Registered account row the refusal was observed on."
+                      },
+                      "model": {
+                        "type": "string",
+                        "description": "Model the refused run requested, exactly as requested; a vendor-reported id that differs from it does not clear the observation."
+                      },
+                      "code": {
+                        "type": "string",
+                        "enum": [
+                          "auth_revoked",
+                          "capability_refused",
+                          "verification_failed"
+                        ],
+                        "description": "Typed reason an observed credential is unusable: vendor rejection, entitlement refusal, or a failed profile verification probe."
+                      },
+                      "detail": {
+                        "type": [
+                          "string",
+                          "null"
+                        ],
+                        "description": "Redacted typed evidence of the refusal, such as the vendor's error category; null when none was observed."
+                      },
+                      "observed_at": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "When the refusal was observed."
+                      },
+                      "expires_at": {
+                        "type": "string",
+                        "minLength": 1,
+                        "description": "Self-expiry of the observation (bounded retention, not a vendor reset time)."
+                      }
+                    },
+                    "required": [
+                      "harness_id",
+                      "profile_id",
+                      "model",
+                      "code",
+                      "detail",
+                      "observed_at",
+                      "expires_at"
+                    ],
+                    "additionalProperties": false,
+                    "description": "A live typed refusal of one model on one registered account. It affects routing for that model only and never changes the account's status, Enabled state or order."
+                  },
+                  "description": "Live model-scoped credential refusals of the registered rows, most recent first per account, present only when the client asked (includeCredentialUnusable=true). One clears on a later service of exactly that model, a credential change, or expiry."
+                },
                 "refusals": {
                   "type": "array",
                   "items": {
@@ -821,7 +881,7 @@
                                       "tool_allowlist",
                                       "none"
                                     ],
-                                    "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                                    "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                                     "default": "none"
                                   },
                                   "write_mechanism": {
@@ -1322,7 +1382,7 @@
                               "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
                             },
                             "default": [],
-                            "description": "Access profiles the adapter can enforce."
+                            "description": "Access profiles the adapter can translate to its harness."
                           }
                         },
                         "required": [