@claudexor/schema 5.0.2 → 6.0.0

package/generated/RoutePoolDegradedPayload.schema.json

@@ -45,7 +45,8 @@
                   "capability",
                   "access",
                   "web",
-                  "attachment"
+                  "attachment",
+                  "model"
                 ],
                 "description": "The routing stage at which an auto-pool lane was dropped."
               },

package/generated/RunContinuityReceipt.schema.json

@@ -33,13 +33,14 @@
             "transport",
             "permission_denied",
             "context_exhausted",
+            "turn_limit",
             "wall_clock",
             "cancelled",
             "host_restart",
             "input_required",
             "other"
           ],
-          "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+          "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, an error without a typed cause (`transport`: a crash, an inactivity timeout or a harness-reported error; not proof that a process died or the network failed), a confirmed native tool permission refusal, context exhaustion, the run's max-turns cap, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
         },
         "from": {
           "type": "object",

package/generated/RunFacts.schema.json

@@ -95,6 +95,7 @@
                     "input_required",
                     "work_incomplete",
                     "context_capacity_exhausted",
+                    "turn_limit_reached",
                     "work_report_contract"
                   ],
                   "description": "Typed reason qualifying a non-clean terminal; null on a clean success."

package/generated/RunFailure.schema.json

@@ -4,6 +4,17 @@
     "RunFailure": {
       "type": "object",
       "properties": {
+        "lastVendorError": {
+          "anyOf": [
+            {
+              "type": "string",
+              "maxLength": 1000
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "requestRefusal": {
           "anyOf": [
             {
@@ -142,9 +153,41 @@
                 "reported_source"
               ],
               "additionalProperties": false
+            },
+            {
+              "type": "object",
+              "properties": {
+                "kind": {
+                  "type": "string",
+                  "const": "vendor_not_retryable"
+                },
+                "source": {
+                  "type": "string",
+                  "const": "agy_stderr"
+                },
+                "error_id": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "minLength": 1,
+                      "maxLength": 128
+                    },
+                    {
+                      "type": "null"
+                    }
+                  ],
+                  "description": "The vendor's own error id from the same record, verbatim; null when absent."
+                }
+              },
+              "required": [
+                "kind",
+                "source",
+                "error_id"
+              ],
+              "additionalProperties": false
             }
           ],
-          "description": "Vendor-attested request refusal that stops retries and account rotation on its harness; input, executable and credential-source causes carry their own evidence."
+          "description": "Vendor-attested request refusal that stops retries and account rotation on its harness; input, executable and credential-source causes and an explicit vendor not-retryable verdict carry their own evidence."
         },
         "rawContextShortfall": {
           "type": "object",
@@ -395,8 +438,20 @@
                 "raw_context_mandatory_unavailable",
                 "raw_context_exceeds_window",
                 "model_catalog_unavailable",
+                "model_selection_required",
+                "raw_patch_requires_isolation",
+                "raw_patch_missing_evidence",
+                "raw_patch_digest_mismatch",
+                "raw_patch_base_mismatch",
+                "raw_patch_path_traversal",
+                "raw_patch_outside_scope",
+                "raw_patch_stale_preimage",
+                "raw_patch_binary_unsupported",
+                "raw_patch_truncated",
+                "raw_patch_apply_failed",
                 "vendor_cli_too_old",
                 "credential_source_unconfirmed",
+                "vendor_not_retryable",
                 "delegated_home_unavailable",
                 "delegated_confinement_unavailable",
                 "delegated_evidence_incomplete",
@@ -525,7 +580,7 @@
             "threshold"
           ],
           "additionalProperties": false,
-          "description": "Present when quota admission refused the account (code subscription_window_exhausted): separates the owner's saved reserve from provider exhaustion. Absent on other failures and on records written before this field existed."
+          "description": "Present when quota admission or a typed provider limit refused the account: with code subscription_window_exhausted it separates the owner's saved reserve from provider exhaustion; with a null code the provider refused usage and no reopening time is known, so no timer is implied. Absent on other failures and on records written before this field existed."
         },
         "vendorFailure": {
           "anyOf": [
@@ -584,6 +639,11 @@
           "items": {
             "type": "object",
             "properties": {
+              "lastVendorError": {
+                "type": "string",
+                "maxLength": 1000,
+                "description": "Last vendor diagnostic line, bounded and redacted; never classified."
+              },
               "harnessId": {
                 "type": "string",
                 "minLength": 1,

package/generated/RunResumable.schema.json

@@ -13,13 +13,14 @@
             "transport",
             "permission_denied",
             "context_exhausted",
+            "turn_limit",
             "wall_clock",
             "cancelled",
             "host_restart",
             "input_required",
             "other"
           ],
-          "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, a transport death (crash, timeout, watchdog), a confirmed native tool permission refusal, context exhaustion, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
+          "description": "Typed reason the previous process stopped: a vendor limit (next account eligible), the whole pool spent, a pinned account's limit, an error without a typed cause (`transport`: a crash, an inactivity timeout or a harness-reported error; not proof that a process died or the network failed), a confirmed native tool permission refusal, context exhaustion, the run's max-turns cap, the wall-clock deadline, a cancel, a daemon/host restart, a model that asked for input, or another typed cause."
         },
         "resetsAt": {
           "type": [

package/generated/RunTelemetry.schema.json

@@ -48,7 +48,7 @@
             "inherit_native",
             "external_sandbox_full"
           ],
-          "description": "Access profile enforced by the engine."
+          "description": "Access profile the engine resolved and passed to its routes; each route's native setting is in attempts[].route_controls."
         },
         "external_context_policy": {
           "type": "string",
@@ -68,7 +68,7 @@
             "cached",
             "live"
           ],
-          "description": "Web policy actually executed by the selected route."
+          "description": "Web policy given to the selected route, after disclosed upgrades (e.g. cached to live); not proof that a native session ran."
         },
         "web_required": {
           "type": "boolean",
@@ -111,12 +111,12 @@
             "effective_mode": {
               "$ref": "#/definitions/RunTelemetry/properties/web/properties/policy",
               "default": "auto",
-              "description": "Policy actually executed by the harness route (disclosed upgrades, e.g. cached to live)."
+              "description": "Policy given to the harness route, after disclosed upgrades (e.g. cached to live); not proof that a native session ran."
             },
             "attempted": {
               "type": "boolean",
               "default": false,
-              "description": "Whether any web activity was attempted."
+              "description": "Whether a web tool call or engine Browser call was observed; not a network measurement (see observation)."
             },
             "satisfied": {
               "type": "boolean",
@@ -143,7 +143,23 @@
                 "none"
               ],
               "default": "none",
-              "description": "Retrieval-proof strength of observed web activity: verified (typed successful retrieval; content proven), dispatched (operation completed but no typed retrieval outcome; content not proven), or none."
+              "description": "Retrieval-proof strength of observed web activity: verified (a typed successful retrieval; verified_content says of what), dispatched (a web call completed without a typed retrieval result), or none (no search or page retrieval observed, though a Browser action may have completed)."
+            },
+            "verified_content": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "page",
+                    "search_results"
+                  ]
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "default": null,
+              "description": "What the verified retrieval returned: page (a fetched or loaded page; it outranks search results) or search_results (a web search's results, not a fetched page); null when nothing was verified or the record predates this field."
             },
             "tool": {
               "type": [
@@ -168,6 +184,31 @@
               ],
               "default": null,
               "description": "Redacted error detail when web activity failed."
+            },
+            "observation": {
+              "type": "object",
+              "properties": {
+                "evidence": {
+                  "type": "string",
+                  "const": "tool_calls",
+                  "description": "Web evidence comes from typed web tool calls and engine Browser MCP calls."
+                },
+                "network": {
+                  "type": "string",
+                  "const": "not_measured",
+                  "description": "Process network traffic is not measured: vendor API traffic, shell commands and other tools can use the network without appearing here."
+                }
+              },
+              "required": [
+                "evidence",
+                "network"
+              ],
+              "additionalProperties": false,
+              "description": "Scope of the web evidence: observed tool calls only, never a network measurement.",
+              "default": {
+                "evidence": "tool_calls",
+                "network": "not_measured"
+              }
             }
           },
           "additionalProperties": false,
@@ -178,6 +219,41 @@
           "items": {
             "type": "object",
             "properties": {
+              "programs": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "path": {
+                      "type": [
+                        "string",
+                        "null"
+                      ]
+                    },
+                    "version": {
+                      "type": [
+                        "string",
+                        "null"
+                      ]
+                    },
+                    "versionSource": {
+                      "type": "string",
+                      "enum": [
+                        "vendor_stream",
+                        "version_probe",
+                        "remembered",
+                        "unknown"
+                      ]
+                    }
+                  },
+                  "required": [
+                    "path",
+                    "version",
+                    "versionSource"
+                  ],
+                  "additionalProperties": false
+                }
+              },
               "request_refusal": {
                 "anyOf": [
                   {
@@ -316,9 +392,41 @@
                       "reported_source"
                     ],
                     "additionalProperties": false
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "const": "vendor_not_retryable"
+                      },
+                      "source": {
+                        "type": "string",
+                        "const": "agy_stderr"
+                      },
+                      "error_id": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 128
+                          },
+                          {
+                            "type": "null"
+                          }
+                        ],
+                        "description": "The vendor's own error id from the same record, verbatim; null when absent."
+                      }
+                    },
+                    "required": [
+                      "kind",
+                      "source",
+                      "error_id"
+                    ],
+                    "additionalProperties": false
                   }
                 ],
-                "description": "Vendor-attested request refusal that stops retries and account rotation on its harness; input, executable and credential-source causes carry their own evidence."
+                "description": "Vendor-attested request refusal that stops retries and account rotation on its harness; input, executable and credential-source causes and an explicit vendor not-retryable verdict carry their own evidence."
               },
               "effort_resolution": {
                 "type": "object",
@@ -998,6 +1106,9 @@
                   "verification": {
                     "$ref": "#/definitions/RunTelemetry/properties/web/properties/verification"
                   },
+                  "verified_content": {
+                    "$ref": "#/definitions/RunTelemetry/properties/web/properties/verified_content"
+                  },
                   "tool": {
                     "$ref": "#/definitions/RunTelemetry/properties/web/properties/tool"
                   },
@@ -1006,11 +1117,74 @@
                   },
                   "error_summary": {
                     "$ref": "#/definitions/RunTelemetry/properties/web/properties/error_summary"
+                  },
+                  "observation": {
+                    "$ref": "#/definitions/RunTelemetry/properties/web/properties/observation"
                   }
                 },
                 "additionalProperties": false,
                 "description": "Typed web-evidence record computed by the orchestrator; surfaces project it and never re-derive evidence from raw events."
               },
+              "route_controls": {
+                "type": "object",
+                "properties": {
+                  "web_mechanism": {
+                    "type": "string",
+                    "enum": [
+                      "native",
+                      "tools",
+                      "uncontrolled",
+                      "none"
+                    ],
+                    "description": "How this route's own web tools are switched for its web policy (the manifest's web_policy)."
+                  },
+                  "access": {
+                    "type": "string",
+                    "enum": [
+                      "readonly",
+                      "workspace_write",
+                      "full",
+                      "inherit_native"
+                    ],
+                    "description": "Access profile handed to this spawn."
+                  },
+                  "native_access": {
+                    "type": [
+                      "string",
+                      "null"
+                    ],
+                    "description": "The vendor access setting the adapter builds for that profile, in the vendor's own spelling (argv or request parameters) and from the helper that passes it; null when it passes none or does not disclose it."
+                  },
+                  "access_mechanism": {
+                    "type": "string",
+                    "enum": [
+                      "fs_sandbox",
+                      "permission_deny",
+                      "tool_allowlist",
+                      "tool_policy",
+                      "native_settings",
+                      "none"
+                    ],
+                    "description": "How the route's access profile reaches the harness: fs_sandbox (the vendor's own file-system sandbox, as the vendor applies it), permission_deny, tool_allowlist or tool_policy (vendor tool permissions; the manifest declares no OS file boundary), native_settings (inherit_native: Claudexor passes no access profile, so the harness's own configuration decides and what it confines is unknown here), or none (full access, or a route that declares no control)."
+                  }
+                },
+                "required": [
+                  "web_mechanism",
+                  "access",
+                  "native_access",
+                  "access_mechanism"
+                ],
+                "additionalProperties": false,
+                "description": "Native web and access controls prepared for this attempt's last spawn (#118, #413); absent on older records and when no spawn was dispatched."
+              },
+              "native_session_started": {
+                "type": "boolean",
+                "description": "Present with route_controls: whether an adapter reported a native session started during this attempt (the typed started event, which an adapter's own pre-spawn refusal never emits). False means none was observed: refused before launch, or stopped or ended before a start was reported. It does not prove that no process ran."
+              },
+              "harness_home_isolated": {
+                "type": "boolean",
+                "description": "The attempt's applied HOME fact (same producer as attempt.yaml): true when the engine assigned its child a Claudexor-owned HOME, false when the engine did not replace HOME, so the child inherits the engine's own environment. Absent where the lane records none, never inferred."
+              },
               "tool_errors": {
                 "type": "array",
                 "items": {
@@ -1081,6 +1255,112 @@
                 "default": 0,
                 "description": "Tool errors with no later successful recovery."
               },
+              "reported_command_outcomes": {
+                "type": "object",
+                "properties": {
+                  "total": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "True count of reports in this attempt."
+                  },
+                  "recent": {
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "tool": {
+                          "type": "string",
+                          "description": "Native tool name of the reported call."
+                        },
+                        "target": {
+                          "type": [
+                            "string",
+                            "null"
+                          ],
+                          "default": null,
+                          "description": "Target of the call as issued, when known."
+                        },
+                        "tool_use_id": {
+                          "type": "string",
+                          "minLength": 1,
+                          "description": "The exact call the report refined."
+                        },
+                        "command_outcome": {
+                          "type": "object",
+                          "properties": {
+                            "state": {
+                              "type": "string",
+                              "enum": [
+                                "exited",
+                                "timed_out",
+                                "backgrounded",
+                                "completion_reported",
+                                "unknown"
+                              ],
+                              "description": "exited: the tool observed the command end; timed_out: the tool's timeout elapsed before an observed end (the process may still run or may have been signalled); backgrounded: the command was handed to a background shell and was still running when the result returned; completion_reported: after such a handoff, a later vendor notification reported that the command ended, without an exit code; unknown: the native result established none of these."
+                            },
+                            "signal": {
+                              "type": "string",
+                              "minLength": 1,
+                              "description": "Vendor-reported signal name of an exited command."
+                            },
+                            "timeout_ms": {
+                              "type": "integer",
+                              "minimum": 0,
+                              "description": "The elapsed tool timeout behind timed_out or a timeout-driven background handoff."
+                            },
+                            "background_reason": {
+                              "type": "string",
+                              "enum": [
+                                "timeout",
+                                "requested"
+                              ],
+                              "description": "Why a backgrounded command left the foreground: its timeout or a request."
+                            },
+                            "shell_id": {
+                              "type": "string",
+                              "minLength": 1,
+                              "description": "Vendor handle of the background shell that kept the command."
+                            },
+                            "pid": {
+                              "type": "integer",
+                              "exclusiveMinimum": 0,
+                              "description": "Vendor-reported process id."
+                            },
+                            "completion_status": {
+                              "type": "string",
+                              "enum": [
+                                "success",
+                                "error",
+                                "aborted"
+                              ],
+                              "description": "What the vendor reported about a completion_reported command; never an exit code."
+                            }
+                          },
+                          "required": [
+                            "state"
+                          ],
+                          "additionalProperties": false,
+                          "description": "The call's refined facts: the vendor's word and the handoff, never an exit code."
+                        }
+                      },
+                      "required": [
+                        "tool",
+                        "tool_use_id",
+                        "command_outcome"
+                      ],
+                      "additionalProperties": false
+                    },
+                    "description": "The most recent reports, bounded by the writer."
+                  }
+                },
+                "required": [
+                  "total",
+                  "recent"
+                ],
+                "additionalProperties": false,
+                "description": "Vendor reports about handed-off commands, kept apart from tool errors."
+              },
               "statusless_tool_results": {
                 "type": "integer",
                 "minimum": 0,
@@ -1389,6 +1669,41 @@
                     "type": "boolean",
                     "default": false,
                     "description": "The browser was armed but never called while generic web evidence satisfied the run (disclosure only; not a failure)."
+                  },
+                  "startup": {
+                    "type": "object",
+                    "properties": {
+                      "status": {
+                        "type": "string",
+                        "enum": [
+                          "ready",
+                          "failed",
+                          "cancelled",
+                          "starting",
+                          "not_observed"
+                        ],
+                        "description": "Startup state when the first model request was allowed: ready (Codex reported the server started), failed, cancelled, starting (still starting when the hold ended: Codex's 90 s limit plus a 5 s grace for its status), or not_observed (no startup status at all)."
+                      },
+                      "waited_ms": {
+                        "type": "integer",
+                        "minimum": 0,
+                        "description": "How long the adapter held the first model request for this outcome."
+                      },
+                      "error": {
+                        "type": [
+                          "string",
+                          "null"
+                        ],
+                        "default": null,
+                        "description": "The vendor's own reason for a failed or cancelled startup, masked."
+                      }
+                    },
+                    "required": [
+                      "status",
+                      "waited_ms"
+                    ],
+                    "additionalProperties": false,
+                    "description": "The selected Browser's startup outcome as the adapter reported it before the first model request (#215); absent when the route reported none."
                   }
                 },
                 "additionalProperties": false,
@@ -1926,6 +2241,7 @@
                             "input_required",
                             "work_incomplete",
                             "context_capacity_exhausted",
+                            "turn_limit_reached",
                             "work_report_contract"
                           ],
                           "description": "Typed reason qualifying a non-clean terminal; null on a clean success."
@@ -2339,7 +2655,7 @@
               "type": "null"
             }
           ],
-          "description": "Exact validated terminal receipt; null before terminalization or on legacy runs.",
+          "description": "Legacy-compatible nullable terminal-fact mirror; null for new terminalized runs and legacy runs because the canonical receipt is final/run_facts.yaml.",
           "default": null
         },
         "generated_at": {

package/generated/RunWaitManyInput.schema.json

@@ -41,6 +41,10 @@
           "minimum": 0,
           "maximum": 50000,
           "default": 25000
+        },
+        "includeBlocking": {
+          "type": "boolean",
+          "description": "true adds `blocking` to each summary with pending questions; omitted or false returns the compact rows unchanged."
         }
       },
       "required": [

package/generated/RunWaitManyResult.schema.json

@@ -62,6 +62,36 @@
                 ],
                 "additionalProperties": false
               },
+              {
+                "type": "object",
+                "properties": {
+                  "status": {
+                    "$ref": "#/definitions/RunWaitManyResult/properties/summaries/items/anyOf/0/properties/status"
+                  },
+                  "pending": {
+                    "type": "boolean",
+                    "const": true
+                  },
+                  "token": {
+                    "$ref": "#/definitions/RunWaitManyResult/properties/summaries/items/anyOf/0/properties/token"
+                  },
+                  "problem": {
+                    "$ref": "#/definitions/RunWaitManyResult/properties/summaries/items/anyOf/0/properties/problem"
+                  },
+                  "blocking": {
+                    "type": "boolean",
+                    "description": "true while any pending question holds its agent until answered, or its kind is unknown; false when every pending question is async and the agent keeps working."
+                  }
+                },
+                "required": [
+                  "status",
+                  "pending",
+                  "token",
+                  "problem",
+                  "blocking"
+                ],
+                "additionalProperties": false
+              },
               {
                 "type": "object",
                 "properties": {