@claudexor/schema 5.0.2 → 6.0.0

package/generated/DeferredMessageProjection.schema.json

@@ -85,7 +85,7 @@
                     "retryable": {
                       "type": "boolean",
                       "default": true,
-                      "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay."
+                      "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay or a managed resource it names was released."
                     },
                     "required_actions": {
                       "type": "array",
@@ -116,13 +116,51 @@
                 "code"
               ],
               "additionalProperties": false,
-              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
             },
             {
               "type": "null"
             }
           ],
-          "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+          "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
+        },
+        "resumed": {
+          "type": "object",
+          "properties": {
+            "from": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "$ref": "#/definitions/DeferredMessageProjection/properties/hold/anyOf/0/properties/code"
+                },
+                "problem": {
+                  "$ref": "#/definitions/DeferredMessageProjection/properties/hold/anyOf/0/properties/problem"
+                }
+              },
+              "required": [
+                "code"
+              ],
+              "additionalProperties": false,
+              "description": "The hold the draft was returned from."
+            },
+            "reason": {
+              "type": "string",
+              "const": "process_scope_settled",
+              "description": "A later settlement of the predecessor's run proved its processes gone; the draft was unchanged, not cleared, replaced or stopped."
+            },
+            "at": {
+              "type": "string",
+              "minLength": 1,
+              "description": "ISO-8601 timestamp string."
+            }
+          },
+          "required": [
+            "from",
+            "reason",
+            "at"
+          ],
+          "additionalProperties": false,
+          "description": "Why this draft left its hold automatically. It then took the existing revision and admission path; any other reason holds it again."
         },
         "dispatchedRevision": {
           "anyOf": [

package/generated/DeferredMessageReadResult.schema.json

@@ -88,7 +88,7 @@
                         "retryable": {
                           "type": "boolean",
                           "default": true,
-                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay."
+                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay or a managed resource it names was released."
                         },
                         "required_actions": {
                           "type": "array",
@@ -119,13 +119,51 @@
                     "code"
                   ],
                   "additionalProperties": false,
-                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
                 },
                 {
                   "type": "null"
                 }
               ],
-              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
+            },
+            "resumed": {
+              "type": "object",
+              "properties": {
+                "from": {
+                  "type": "object",
+                  "properties": {
+                    "code": {
+                      "$ref": "#/definitions/DeferredMessageReadResult/properties/draft/properties/hold/anyOf/0/properties/code"
+                    },
+                    "problem": {
+                      "$ref": "#/definitions/DeferredMessageReadResult/properties/draft/properties/hold/anyOf/0/properties/problem"
+                    }
+                  },
+                  "required": [
+                    "code"
+                  ],
+                  "additionalProperties": false,
+                  "description": "The hold the draft was returned from."
+                },
+                "reason": {
+                  "type": "string",
+                  "const": "process_scope_settled",
+                  "description": "A later settlement of the predecessor's run proved its processes gone; the draft was unchanged, not cleared, replaced or stopped."
+                },
+                "at": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "ISO-8601 timestamp string."
+                }
+              },
+              "required": [
+                "from",
+                "reason",
+                "at"
+              ],
+              "additionalProperties": false,
+              "description": "Why this draft left its hold automatically. It then took the existing revision and admission path; any other reason holds it again."
             },
             "dispatchedRevision": {
               "anyOf": [
@@ -245,7 +283,7 @@
                                   "null"
                                 ],
                                 "default": null,
-                                "description": "Per-harness default model; null = the harness's own default."
+                                "description": "Per-harness default model; null = the harness's own default, or no model on a route whose request must name one."
                               },
                               "effort": {
                                 "anyOf": [

package/generated/DeferredMessageReceipt.schema.json

@@ -94,7 +94,7 @@
                         "retryable": {
                           "type": "boolean",
                           "default": true,
-                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay."
+                          "description": "True when retry can replay this turn (a job was recorded before the failure); false when no job exists to replay or a managed resource it names was released."
                         },
                         "required_actions": {
                           "type": "array",
@@ -125,13 +125,51 @@
                     "code"
                   ],
                   "additionalProperties": false,
-                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+                  "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
                 },
                 {
                   "type": "null"
                 }
               ],
-              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation."
+              "description": "Stable hold. Editing, observation and readiness restoration never rearm it; inspect the predecessor result and clear before an ordinary continuation. One exception: an unchanged settlement_unknown draft returns by itself when a later settlement of the predecessor's run, by the live daemon that ran it, proves its processes gone (see resumed); a Stop first keeps it held."
+            },
+            "resumed": {
+              "type": "object",
+              "properties": {
+                "from": {
+                  "type": "object",
+                  "properties": {
+                    "code": {
+                      "$ref": "#/definitions/DeferredMessageReceipt/properties/draft/properties/hold/anyOf/0/properties/code"
+                    },
+                    "problem": {
+                      "$ref": "#/definitions/DeferredMessageReceipt/properties/draft/properties/hold/anyOf/0/properties/problem"
+                    }
+                  },
+                  "required": [
+                    "code"
+                  ],
+                  "additionalProperties": false,
+                  "description": "The hold the draft was returned from."
+                },
+                "reason": {
+                  "type": "string",
+                  "const": "process_scope_settled",
+                  "description": "A later settlement of the predecessor's run proved its processes gone; the draft was unchanged, not cleared, replaced or stopped."
+                },
+                "at": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "ISO-8601 timestamp string."
+                }
+              },
+              "required": [
+                "from",
+                "reason",
+                "at"
+              ],
+              "additionalProperties": false,
+              "description": "Why this draft left its hold automatically. It then took the existing revision and admission path; any other reason holds it again."
             },
             "dispatchedRevision": {
               "anyOf": [

package/generated/EnvelopeCustody.schema.json

@@ -106,7 +106,7 @@
             "policy_profile": {
               "type": "string",
               "default": "workspace_write",
-              "description": "Access profile the envelope enforces."
+              "description": "Access profile recorded for the envelope."
             },
             "dirty_policy": {
               "type": "string",
@@ -148,13 +148,14 @@
                 "transport",
                 "permission_denied",
                 "context_exhausted",
+                "turn_limit",
                 "wall_clock",
                 "cancelled",
                 "host_restart",
                 "input_required",
                 "other"
               ],
-              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+              "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, an error without a typed cause (`transport`: a crash, an inactivity timeout or a harness-reported error; not proof that a process died or the network failed), a confirmed native tool permission refusal, context exhaustion, the run's max-turns cap, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
             },
             {
               "type": "null"

package/generated/GlobalConfig.schema.json

@@ -418,7 +418,7 @@
                   "null"
                 ],
                 "default": null,
-                "description": "Per-harness default model; null = the harness's own default."
+                "description": "Per-harness default model; null = the harness's own default, or no model on a route whose request must name one."
               },
               "effort": {
                 "anyOf": [

package/generated/HarnessEvent.schema.json

@@ -4,6 +4,38 @@
     "HarnessEvent": {
       "type": "object",
       "properties": {
+        "program": {
+          "type": "object",
+          "properties": {
+            "path": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "version": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "versionSource": {
+              "type": "string",
+              "enum": [
+                "vendor_stream",
+                "version_probe",
+                "remembered",
+                "unknown"
+              ]
+            }
+          },
+          "required": [
+            "path",
+            "version",
+            "versionSource"
+          ],
+          "additionalProperties": false
+        },
         "request_refusal": {
           "anyOf": [
             {
@@ -142,9 +174,41 @@
                 "reported_source"
               ],
               "additionalProperties": false
+            },
+            {
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "const": "vendor_not_retryable"
+                },
+                "source": {
+                  "type": "string",
+                  "const": "agy_stderr"
+                },
+                "error_id": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "minLength": 1,
+                      "maxLength": 128
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "The vendor's own error id from the same record, verbatim; null when absent."
+                }
+              },
+              "required": [
+                "kind",
+                "source",
+                "error_id"
+              ],
+              "additionalProperties": false
             }
           ],
-          "description": "Vendor-attested request refusal that stops retries and account rotation on its harness; input, executable and credential-source causes carry their own evidence."
+          "description": "Vendor-attested request refusal that stops retries and account rotation on its harness; input, executable and credential-source causes and an explicit vendor not-retryable verdict carry their own evidence."
         },
         "effort_resolution": {
           "type": "object",
@@ -456,6 +520,58 @@
           "additionalProperties": false,
           "description": "Requested, configured and observed prompt-cache lifetime facts for one attempt. Lifecycle, outcome and cost are separate facts and never derive from this receipt."
         },
+        "route_controls": {
+          "type": "object",
+          "properties": {
+            "web_mechanism": {
+              "type": "string",
+              "enum": [
+                "native",
+                "tools",
+                "uncontrolled",
+                "none"
+              ],
+              "description": "How this route's own web tools are switched for its web policy (the manifest's web_policy)."
+            },
+            "access": {
+              "type": "string",
+              "enum": [
+                "readonly",
+                "workspace_write",
+                "full",
+                "inherit_native"
+              ],
+              "description": "Access profile handed to this spawn."
+            },
+            "native_access": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "The vendor access setting the adapter builds for that profile, in the vendor's own spelling (argv or request parameters) and from the helper that passes it; null when it passes none or does not disclose it."
+            },
+            "access_mechanism": {
+              "type": "string",
+              "enum": [
+                "fs_sandbox",
+                "permission_deny",
+                "tool_allowlist",
+                "tool_policy",
+                "native_settings",
+                "none"
+              ],
+              "description": "How the route's access profile reaches the harness: fs_sandbox (the vendor's own file-system sandbox, as the vendor applies it), permission_deny, tool_allowlist or tool_policy (vendor tool permissions; the manifest declares no OS file boundary), native_settings (inherit_native: Claudexor passes no access profile, so the harness's own configuration decides and what it confines is unknown here), or none (full access, or a route that declares no control)."
+            }
+          },
+          "required": [
+            "web_mechanism",
+            "access",
+            "native_access",
+            "access_mechanism"
+          ],
+          "additionalProperties": false,
+          "description": "Per-spawn receipt of the native web and access controls prepared for a route, recorded just before dispatch; not proof that a native process ran with them. Claudexor adds no outer boundary."
+        },
         "type": {
           "type": "string",
           "enum": [
@@ -584,9 +700,10 @@
                     "exited",
                     "timed_out",
                     "backgrounded",
+                    "completion_reported",
                     "unknown"
                   ],
-                  "description": "exited: the tool observed the command end; timed_out: the tool's timeout elapsed before an observed end (the process may still run or may have been signalled); backgrounded: the command was handed to a background shell and was still running when the result returned; unknown: the native result established none of these."
+                  "description": "exited: the tool observed the command end; timed_out: the tool's timeout elapsed before an observed end (the process may still run or may have been signalled); backgrounded: the command was handed to a background shell and was still running when the result returned; completion_reported: after such a handoff, a later vendor notification reported that the command ended, without an exit code; unknown: the native result established none of these."
                 },
                 "signal": {
                   "type": "string",
@@ -615,6 +732,15 @@
                   "type": "integer",
                   "exclusiveMinimum": 0,
                   "description": "Vendor-reported process id."
+                },
+                "completion_status": {
+                  "type": "string",
+                  "enum": [
+                    "success",
+                    "error",
+                    "aborted"
+                  ],
+                  "description": "What the vendor reported about a completion_reported command; never an exit code."
                 }
               },
               "required": [
@@ -631,13 +757,21 @@
                 "failed"
               ],
               "description": "Adapter-stamped web/browser retrieval outcome (verified/dispatched/failed), distinct from the tool-call status lifecycle."
+            },
+            "web_content": {
+              "type": "string",
+              "enum": [
+                "page",
+                "search_results"
+              ],
+              "description": "What a verified web retrieval returned: page (a fetched or loaded page) or search_results (a web search's results, not a fetched page)."
             }
           },
           "required": [
             "name"
           ],
           "additionalProperties": false,
-          "description": "Typed tool info; set on tool_call and tool_result events."
+          "description": "Typed tool info; set on tool_call and tool_result events, and on a status event with payload.code command_outcome_refined, where it names the earlier call (use_id) and carries its refined command_outcome."
         },
         "interaction": {
           "type": "object",
@@ -719,6 +853,15 @@
               ],
               "default": null,
               "description": "Native tool that raised the request (e.g. \"AskUserQuestion\")."
+            },
+            "delivery": {
+              "type": "string",
+              "enum": [
+                "blocking",
+                "async"
+              ],
+              "description": "How the asking agent waits for the answer: blocking (its native tool call waits until the question is answered, declined, expired or released) or async (the agent keeps working and an answer reaches it later as its next user message). Silence, expiry and the run's end never answer either kind.",
+              "default": "blocking"
             }
           },
           "required": [
@@ -769,7 +912,7 @@
                         "type": "null"
                       }
                     ],
-                    "description": "Base-tree blob oid, or null only when the path is absent in the base tree."
+                    "description": "Blob oid in the packet's exact tree, or null only when that tree lacks the path."
                   }
                 },
                 "required": [
@@ -1384,6 +1527,13 @@
               ],
               "default": null,
               "description": "Suggested retry delay in milliseconds, when reported."
+            },
+            "reopening": {
+              "type": "string",
+              "enum": [
+                "unknown"
+              ],
+              "description": "unknown: the vendor's own typed code refused further usage on this account and named no reopening time, and the refusal is not known to be a timed window (Codex usage_limit_exceeded and AGY's structured `Individual quota reached` also cover refusals whose scope is not a timed window). No reset is derived from it; the vendor's original failure evidence remains alongside the signal. Admission/continuation consumers decide whether the account is retried, and a typed refusal must not be mistaken for a transport failure. Absent: resets_at, retry_delay_ms and the vendor's window say when to come back, as before."
             }
           },
           "additionalProperties": false,
@@ -1538,6 +1688,33 @@
           "additionalProperties": false,
           "description": "Typed context-management signal (compaction boundary / capacity exhaustion) set by the adapter; orthogonal to the transient-retry taxonomy."
         },
+        "turn_limit": {
+          "type": "object",
+          "properties": {
+            "native_code": {
+              "type": "string",
+              "description": "The vendor's own terminal subtype, verbatim."
+            },
+            "num_turns": {
+              "anyOf": [
+                {
+                  "type": "integer",
+                  "minimum": 0
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Turns the vendor counted."
+            }
+          },
+          "required": [
+            "native_code",
+            "num_turns"
+          ],
+          "additionalProperties": false,
+          "description": "Typed max-turns stop set by the adapter on the error event that ends a capped native turn; orthogonal to the transient-retry taxonomy."
+        },
         "error": {
           "type": "string",
           "description": "Error text for error events."

package/generated/HarnessManifest.schema.json

@@ -4,6 +4,32 @@
     "HarnessManifest": {
       "type": "object",
       "properties": {
+        "sourceProgram": {
+          "anyOf": [
+            {
+              "type": "object",
+              "properties": {
+                "path": {
+                  "type": "string"
+                },
+                "version": {
+                  "type": [
+                    "string",
+                    "null"
+                  ]
+                }
+              },
+              "required": [
+                "path",
+                "version"
+              ],
+              "additionalProperties": false
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "id": {
           "type": "string",
           "minLength": 1,
@@ -240,7 +266,7 @@
                     "tool_allowlist",
                     "none"
                   ],
-                  "description": "How read-only access is enforced for a harness: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
+                  "description": "How a harness applies read-only access: a filesystem sandbox, permission denial, a tool allowlist, or none (read-only intent is advisory).",
                   "default": "none"
                 },
                 "write_mechanism": {
@@ -741,7 +767,7 @@
             "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow for a run an operator starts at a surface, not for an execution.delegated run), inherit_native (defer to the harness's own native settings)."
           },
           "default": [],
-          "description": "Access profiles the adapter can enforce."
+          "description": "Access profiles the adapter can translate to its harness."
         }
       },
       "required": [