跳到內容
Workflow Skill Router

MCP Tools

本頁直接呈現由 MCP server contracts 產生的 site/src/data/mcp-tools.generated.json，不另外手寫重複的 description 或 readiness。

plan_work 會把 deterministic automatic classification 與 optional deterministic Profile 當成兩種不同來源回傳。Planned Skill intent 與 actual activation 明確分開；Runtime Capability Discovery 尚未提供證據前，activation 維持 unverified。Explicit Skill Lock 與 scoped consent 仍然有效。本機 bundled R0 core 不是 semantic model，不會啟用 Skills、不會修改 native Codex Goal，也不會授予 deployment/production authority。

Runtime profile

Section titled “Runtime profile”

目前產生的 profile：bundled-local-r0

此 generated profile 描述 已準備的 GA candidate，能力 not included in published beta.3。它清楚區分 4 always local-ready + 3 Router-owned conditional-local，不能寫成 7/12 local-ready。Conditional-local 僅適用於已驗證的 Router-owned work graph，且不能帶有 Native Goal authority。Explicit Skill Lock 與 consent 不受影響；Local gate 只是 advisory，不代表 Skill activation、deployment、production approval 或 Host evidence。

Native Goal boundary 依工具區分：next work 使用 verified-host-scheduler，formal progress 使用 verified-event-store 與 activation-receipt-verifier，gate 使用 verified-evidence-store 與 gate-authority。缺少 graph 時透過 router-owned-work-graph 要求本機建立或 replay；graph 損毀則回傳已清理的 internal-error。所有不可用或不安全分支都必須 fail closed。

Availability 意義
local-ready 可在 bundled local R0 control plane 執行
conditional-local 僅限 Router-owned work graph；local progress 與 local gate evidence 都是 advisory
verified-host-required 需要已驗證的 Host authority 或 stores
configured-adapter-required 需要 server 端已設定的 evaluation adapter

Tool contracts

Section titled “Tool contracts”
sync_runtime_context — verified-host-required

Synchronize a verified host capability snapshot before routing or resuming work. This mutation requires verified-host authority and fails closed in the bundled local R0 runtime.

  • Risk: R1
  • Runtime requirement: verified-host
  • Required capabilities: verified-host-runtime, runtime-authority-receipt
  • Local conditions: not conditional-local
  • Fallback: Continue in bundled local R0 mode or initialize a verified host integration.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "correlation_id": {
      "description": "Public-safe correlation identifier for tracing one command flow.",
      "minLength": 1,
      "type": "string"
    },
    "expected_state_version": {
      "description": "Expected aggregate state version for compare-and-swap protection.",
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "idempotency_key": {
      "description": "Caller-stable key that safely replays the same semantic command.",
      "minLength": 1,
      "type": "string"
    },
    "intent": {
      "additionalProperties": false,
      "description": "Inputs to verified runtime capability discovery.",
      "properties": {
        "agent_runtime_snapshot": {
          "additionalProperties": false,
          "description": "Runtime capabilities directly observed by the active agent.",
          "properties": {
            "artifact_kind": {
              "description": "Artifact discriminator for the runtime snapshot.",
              "type": "string"
            },
            "capabilities": {
              "description": "Capabilities directly observable from the current agent runtime.",
              "items": {
                "additionalProperties": false,
                "properties": {
                  "aliases": {
                    "description": "Alternative identifiers observed for this capability.",
                    "items": {
                      "type": "string"
                    },
                    "type": "array"
                  },
                  "canonical_id": {
                    "description": "Canonical capability identifier.",
                    "type": "string"
                  },
                  "display_name": {
                    "description": "Human-readable capability name.",
                    "type": "string"
                  },
                  "exposure": {
                    "description": "How the capability is exposed to the current agent runtime.",
                    "type": "string"
                  },
                  "kind": {
                    "description": "Capability kind such as Skill, Plugin, MCP tool, or app.",
                    "type": "string"
                  }
                },
                "required": [
                  "canonical_id",
                  "kind",
                  "display_name",
                  "exposure",
                  "aliases"
                ],
                "type": "object"
              },
              "type": "array"
            },
            "runtime_revision": {
              "description": "Host-observed revision of the available runtime surface.",
              "type": "string"
            },
            "schema_id": {
              "description": "Registered schema identifier for the agent runtime snapshot.",
              "type": "string"
            },
            "schema_version": {
              "description": "Version of the registered runtime snapshot schema.",
              "type": "string"
            }
          },
          "required": [
            "schema_id",
            "schema_version",
            "artifact_kind",
            "runtime_revision",
            "capabilities"
          ],
          "type": "object"
        },
        "host_snapshot_ref": {
          "anyOf": [
            {
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "description": "Verified host snapshot reference, or null when unavailable."
        },
        "plugin_handshake_ref": {
          "anyOf": [
            {
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "description": "Verified Plugin handshake reference, or null when unavailable."
        }
      },
      "required": [
        "host_snapshot_ref",
        "plugin_handshake_ref",
        "agent_runtime_snapshot"
      ],
      "type": "object"
    }
  },
  "required": [
    "context",
    "expected_state_version",
    "idempotency_key",
    "correlation_id",
    "intent"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "cache_used": {
      "type": "boolean"
    },
    "degraded": {
      "type": "boolean"
    },
    "drift": {
      "items": {
        "additionalProperties": {},
        "propertyNames": {
          "type": "string"
        },
        "type": "object"
      },
      "type": "array"
    },
    "provider_failures": {
      "items": {
        "additionalProperties": {},
        "propertyNames": {
          "type": "string"
        },
        "type": "object"
      },
      "type": "array"
    },
    "snapshot": {
      "additionalProperties": {},
      "propertyNames": {
        "type": "string"
      },
      "type": "object"
    }
  },
  "required": [
    "snapshot",
    "drift",
    "provider_failures",
    "cache_used",
    "degraded"
  ],
  "type": "object"
}
plan_work — local-ready

Create or replay a durable Single, Phased, or Managed Goal plan using deterministic automatic classification plus an optional deterministic Profile from user-owned configuration. The result exposes both sources and planned Skill intent; activation remains unverified until Runtime Discovery supplies evidence. Explicit Skill Lock and scoped consent still apply. This local planner is not a semantic model, does not activate Skills or mutate a native Codex Goal, and grants no deployment or production authority.

  • Risk: R0
  • Runtime requirement: local-r0
  • Required capabilities: bundled-local-control-plane
  • Local conditions: not conditional-local
  • Fallback: Use the bundled durable local planner.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "correlation_id": {
      "description": "Public-safe correlation identifier for tracing one command flow.",
      "minLength": 1,
      "type": "string"
    },
    "expected_state_version": {
      "description": "Expected aggregate state version for compare-and-swap protection.",
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "explicit_semantics": {
      "anyOf": [
        {
          "enum": [
            "use",
            "only",
            "all"
          ],
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "description": "How explicit Skill IDs constrain routing; null when no explicit lock exists."
    },
    "explicit_skill_ids": {
      "description": "Skill IDs explicitly selected by the user and protected by Explicit Skill Lock; an empty array allows automatic planning without proving activation.",
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "goal_binding_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "description": "Native Goal identifier when this request progresses or steers an existing Goal."
    },
    "idempotency_key": {
      "description": "Caller-stable key that safely replays the same semantic command.",
      "minLength": 1,
      "type": "string"
    },
    "objective": {
      "description": "The user-visible outcome inspected by the structural deterministic classifier; it is not a semantic-model or authority input.",
      "minLength": 1,
      "type": "string"
    },
    "requested_work_mode": {
      "anyOf": [
        {
          "enum": [
            "single",
            "phased",
            "managed-goal"
          ],
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "description": "Explicit envelope hint; null allows deterministic automatic classification."
    },
    "routing_context": {
      "additionalProperties": false,
      "description": "Context for an optional deterministic Profile match. Omission preserves the V2 beta.1 request contract; these values grant no runtime or deployment authority.",
      "properties": {
        "current_phase_id": {
          "anyOf": [
            {
              "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "description": "Current Phase identifier; only that Phase's Primary and immediate support become current intent."
        },
        "domains": {
          "description": "Deterministic domain identifiers used by profile matchers.",
          "items": {
            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
            "type": "string"
          },
          "maxItems": 32,
          "type": "array"
        },
        "tags": {
          "description": "Deterministic task tags used by profile matchers.",
          "items": {
            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
            "type": "string"
          },
          "maxItems": 32,
          "type": "array"
        },
        "workspace_root": {
          "anyOf": [
            {
              "minLength": 1,
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "description": "Workspace root whose fixed .codex/workflow-skill-router.json may be loaded after MCP Client-root or operator-root authorization."
        }
      },
      "required": [
        "workspace_root",
        "domains",
        "tags",
        "current_phase_id"
      ],
      "type": "object"
    }
  },
  "required": [
    "context",
    "expected_state_version",
    "idempotency_key",
    "correlation_id",
    "objective",
    "goal_binding_id",
    "requested_work_mode",
    "explicit_skill_ids",
    "explicit_semantics"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "activation_status": {
      "description": "Planning evidence only; intended-unverified never proves actual activation.",
      "enum": [
        "not-planned",
        "intended-unverified"
      ],
      "type": "string"
    },
    "classification": {
      "additionalProperties": false,
      "description": "Deterministic classification trace for the work envelope only; it neither selects runtime capabilities nor grants authority.",
      "properties": {
        "classifier_revision": {
          "type": "string"
        },
        "confidence": {
          "enum": [
            "high",
            "medium",
            "low"
          ],
          "type": "string"
        },
        "reason_codes": {
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "source": {
          "description": "Authoritative source for the deterministic work-envelope decision.",
          "enum": [
            "native-goal-binding",
            "caller-work-mode-hint",
            "deterministic-analyzer",
            "profile-route",
            "builtin-fallback",
            "legacy-replay"
          ],
          "type": "string"
        }
      },
      "required": [
        "source",
        "confidence",
        "classifier_revision",
        "reason_codes"
      ],
      "type": "object"
    },
    "created_work_items": {
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "matched_profile_rule_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "planned_skill_ids": {
      "description": "Planned Skill intent from an explicit lock or deterministic Profile; it does not prove runtime activation.",
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "planned_skill_tree": {
      "items": {
        "additionalProperties": false,
        "properties": {
          "exit_gate": {
            "type": "string"
          },
          "phase_id": {
            "type": "string"
          },
          "primary_skill_id": {
            "type": "string"
          },
          "support_skill_ids": {
            "items": {
              "type": "string"
            },
            "maxItems": 3,
            "type": "array"
          }
        },
        "required": [
          "phase_id",
          "primary_skill_id",
          "support_skill_ids",
          "exit_gate"
        ],
        "type": "object"
      },
      "type": "array"
    },
    "profile_warnings": {
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "route_source": {
      "description": "Source of planned Skill intent, distinct from work-envelope classification.",
      "enum": [
        "user-explicit",
        "workspace-profile",
        "personal-profile",
        "builtin-default"
      ],
      "type": "string"
    },
    "routing_envelope": {
      "type": "string"
    },
    "routing_profile_digest": {
      "anyOf": [
        {
          "pattern": "^sha256:[0-9a-f]{64}$",
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "routing_profile_ids": {
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "runtime_mode": {
      "type": "string"
    },
    "selection_mode": {
      "type": "string"
    },
    "status": {
      "type": "string"
    },
    "support_consent_required": {
      "type": "boolean"
    },
    "work_graph_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "workflow_run_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    }
  },
  "required": [
    "status",
    "workflow_run_id",
    "work_graph_id",
    "created_work_items",
    "routing_envelope",
    "selection_mode",
    "support_consent_required",
    "planned_skill_ids",
    "runtime_mode",
    "route_source",
    "routing_profile_ids",
    "routing_profile_digest",
    "matched_profile_rule_id",
    "planned_skill_tree",
    "activation_status",
    "profile_warnings",
    "classification"
  ],
  "type": "object"
}
propose_support_consent — local-ready

Persist one concrete Phase-scoped support SKILL set for an explicit-locked plan before asking the user. The bundled local R0 runtime binds the route, scope, revisions, and material context.

  • Risk: R0
  • Runtime requirement: local-r0
  • Required capabilities: bundled-local-control-plane, explicit-skill-plan
  • Local conditions: not conditional-local
  • Fallback: Persist a Phase-scoped support proposal before asking for user consent.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "context_fingerprint": {
      "description": "Material context fingerprint that invalidates stale consent.",
      "pattern": "^sha256:[0-9a-f]{64}$",
      "type": "string"
    },
    "correlation_id": {
      "description": "Public-safe correlation identifier for tracing one command flow.",
      "minLength": 1,
      "type": "string"
    },
    "expected_state_version": {
      "description": "Expected aggregate state version for compare-and-swap protection.",
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "goal_revision": {
      "anyOf": [
        {
          "maximum": 9007199254740991,
          "minimum": 0,
          "type": "integer"
        },
        {
          "type": "null"
        }
      ],
      "description": "Current native Goal revision, or null outside Goal mode."
    },
    "idempotency_key": {
      "description": "Caller-stable key that safely replays the same semantic command.",
      "minLength": 1,
      "type": "string"
    },
    "phase_id": {
      "description": "Current Phase to which the proposal is strictly scoped.",
      "minLength": 1,
      "type": "string"
    },
    "plan_revision": {
      "description": "Current Router plan revision bound to the proposal.",
      "exclusiveMinimum": 0,
      "maximum": 9007199254740991,
      "type": "integer"
    },
    "primary_skill_id": {
      "description": "User-locked primary SKILL from the persisted plan.",
      "minLength": 1,
      "type": "string"
    },
    "scope_anchor_id": {
      "description": "Stable scope anchor for the current Phase.",
      "minLength": 1,
      "type": "string"
    },
    "support_skill_ids": {
      "description": "Concrete distinct supporting SKILLs proposed for this Phase.",
      "items": {
        "minLength": 1,
        "type": "string"
      },
      "maxItems": 3,
      "minItems": 1,
      "type": "array"
    },
    "workflow_run_id": {
      "description": "Existing explicit-locked workflow plan receiving the concrete support proposal.",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "context",
    "expected_state_version",
    "idempotency_key",
    "correlation_id",
    "workflow_run_id",
    "phase_id",
    "scope_anchor_id",
    "goal_revision",
    "plan_revision",
    "primary_skill_id",
    "support_skill_ids",
    "context_fingerprint"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "consent_action": {
      "enum": [
        "proposal-required",
        "approved",
        "rejected"
      ],
      "type": "string"
    },
    "decision_ref": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "goal_relation": {
      "enum": [
        "none",
        "progress"
      ],
      "type": "string"
    },
    "phase_id": {
      "type": "string"
    },
    "primary_skill": {
      "type": "string"
    },
    "proposal_id": {
      "type": "string"
    },
    "replayed": {
      "type": "boolean"
    },
    "routing_envelope": {
      "enum": [
        "single",
        "phased",
        "managed-goal"
      ],
      "type": "string"
    },
    "runtime_mode": {
      "type": "string"
    },
    "selection_mode": {
      "const": "explicit-locked",
      "type": "string"
    },
    "state_version": {
      "exclusiveMinimum": 0,
      "maximum": 9007199254740991,
      "type": "integer"
    },
    "status": {
      "enum": [
        "proposal-required",
        "approved",
        "rejected"
      ],
      "type": "string"
    },
    "support_skills": {
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "workflow_run_id": {
      "type": "string"
    }
  },
  "required": [
    "status",
    "proposal_id",
    "workflow_run_id",
    "phase_id",
    "routing_envelope",
    "selection_mode",
    "primary_skill",
    "support_skills",
    "consent_action",
    "goal_relation",
    "decision_ref",
    "state_version",
    "replayed",
    "runtime_mode"
  ],
  "type": "object"
}
transition_support_consent — local-ready

Apply an approve or reject intent to a persisted support proposal. The bundled local R0 runtime preserves the bound route, rejects stale scope or revisions, and fails closed on conflicting replays.

  • Risk: R0
  • Runtime requirement: local-r0
  • Required capabilities: bundled-local-control-plane, persisted-support-proposal
  • Local conditions: not conditional-local
  • Fallback: Apply approve or reject intent to the bound proposal without rewriting its route.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "action": {
      "description": "User consent intent; route fields cannot be supplied here.",
      "enum": [
        "approve",
        "reject"
      ],
      "type": "string"
    },
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "correlation_id": {
      "description": "Public-safe correlation identifier for tracing one command flow.",
      "minLength": 1,
      "type": "string"
    },
    "current_context_fingerprint": {
      "description": "Current material context fingerprint.",
      "pattern": "^sha256:[0-9a-f]{64}$",
      "type": "string"
    },
    "current_goal_revision": {
      "anyOf": [
        {
          "maximum": 9007199254740991,
          "minimum": 0,
          "type": "integer"
        },
        {
          "type": "null"
        }
      ],
      "description": "Current native Goal revision, or null outside Goal mode."
    },
    "current_phase_id": {
      "description": "Host-observed current Phase used for fail-closed scope validation.",
      "minLength": 1,
      "type": "string"
    },
    "current_plan_revision": {
      "description": "Current Router plan revision.",
      "exclusiveMinimum": 0,
      "maximum": 9007199254740991,
      "type": "integer"
    },
    "current_scope_anchor_id": {
      "description": "Host-observed current Phase scope anchor.",
      "minLength": 1,
      "type": "string"
    },
    "expected_state_version": {
      "description": "Expected aggregate state version for compare-and-swap protection.",
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "idempotency_key": {
      "description": "Caller-stable key that safely replays the same semantic command.",
      "minLength": 1,
      "type": "string"
    },
    "proposal_id": {
      "description": "Persisted support proposal receiving the user decision.",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "context",
    "expected_state_version",
    "idempotency_key",
    "correlation_id",
    "proposal_id",
    "action",
    "current_phase_id",
    "current_scope_anchor_id",
    "current_goal_revision",
    "current_plan_revision",
    "current_context_fingerprint"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "consent_action": {
      "enum": [
        "proposal-required",
        "approved",
        "rejected"
      ],
      "type": "string"
    },
    "decision_ref": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "goal_relation": {
      "enum": [
        "none",
        "progress"
      ],
      "type": "string"
    },
    "phase_id": {
      "type": "string"
    },
    "primary_skill": {
      "type": "string"
    },
    "proposal_id": {
      "type": "string"
    },
    "replayed": {
      "type": "boolean"
    },
    "routing_envelope": {
      "enum": [
        "single",
        "phased",
        "managed-goal"
      ],
      "type": "string"
    },
    "runtime_mode": {
      "type": "string"
    },
    "selection_mode": {
      "const": "explicit-locked",
      "type": "string"
    },
    "state_version": {
      "exclusiveMinimum": 0,
      "maximum": 9007199254740991,
      "type": "integer"
    },
    "status": {
      "enum": [
        "proposal-required",
        "approved",
        "rejected"
      ],
      "type": "string"
    },
    "support_skills": {
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "workflow_run_id": {
      "type": "string"
    }
  },
  "required": [
    "status",
    "proposal_id",
    "workflow_run_id",
    "phase_id",
    "routing_envelope",
    "selection_mode",
    "primary_skill",
    "support_skills",
    "consent_action",
    "goal_relation",
    "decision_ref",
    "state_version",
    "replayed",
    "runtime_mode"
  ],
  "type": "object"
}
get_next_work — conditional-local

For a validated Router-owned work graph with no Native Goal authority, return the next local item with authority_mode=router-local and host_goal_mutated=false. Native Goal scheduling requires verified-host-scheduler. A missing graph requests Router-owned graph creation or replay; a corrupt graph returns only a sanitized internal-error correlation. All unavailable or unsafe branches fail closed.

  • Risk: R0
  • Runtime requirement: conditional-local
  • Required capabilities: router-owned-work-graph, no-native-goal-authority-required
  • Local conditions: router-owned-work-graph, no-native-goal-authority-required
  • Fallback: Use a validated Router-owned graph or initialize the verified host scheduler.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "workflow_run_id": {
      "description": "Workflow run whose next host-scheduled work item is requested.",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "context",
    "workflow_run_id"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "authority_mode": {
      "enum": [
        "router-local",
        "verified-host"
      ],
      "type": "string"
    },
    "host_goal_mutated": {
      "type": "boolean"
    },
    "refresh_requirements": {
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "status": {
      "type": "string"
    },
    "work_item": {
      "anyOf": [
        {
          "anyOf": [
            {
              "additionalProperties": false,
              "properties": {
                "authority_mode": {
                  "const": "router-local",
                  "type": "string"
                },
                "dependency_ids": {
                  "items": {
                    "type": "string"
                  },
                  "type": "array"
                },
                "phase_id": {
                  "type": "string"
                },
                "primary_skill_id": {
                  "anyOf": [
                    {
                      "type": "string"
                    },
                    {
                      "type": "null"
                    }
                  ]
                },
                "status": {
                  "enum": [
                    "pending",
                    "ready",
                    "active",
                    "verifying",
                    "paused",
                    "completed",
                    "failed",
                    "decomposition-required",
                    "host-scheduler-required"
                  ],
                  "type": "string"
                },
                "support_skill_ids": {
                  "items": {
                    "type": "string"
                  },
                  "maxItems": 3,
                  "type": "array"
                },
                "work_item_id": {
                  "type": "string"
                },
                "workflow_run_id": {
                  "type": "string"
                }
              },
              "required": [
                "work_item_id",
                "workflow_run_id",
                "phase_id",
                "dependency_ids",
                "primary_skill_id",
                "support_skill_ids",
                "status",
                "authority_mode"
              ],
              "type": "object"
            },
            {
              "anyOf": [
                {
                  "additionalProperties": false,
                  "properties": {
                    "routing_envelope": {
                      "enum": [
                        "single",
                        "phased",
                        "managed-goal"
                      ],
                      "type": "string"
                    },
                    "status": {
                      "type": "string"
                    },
                    "work_item_id": {
                      "type": "string"
                    }
                  },
                  "required": [
                    "work_item_id",
                    "routing_envelope",
                    "status"
                  ],
                  "type": "object"
                },
                {
                  "additionalProperties": false,
                  "properties": {
                    "dependency_ids": {
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "envelope": {
                      "enum": [
                        "single",
                        "phased",
                        "managed-goal"
                      ],
                      "type": "string"
                    },
                    "milestone_id": {
                      "type": "string"
                    },
                    "phase_ids": {
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "read_resources": {
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "required": {
                      "type": "boolean"
                    },
                    "scope": {
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "skill_policy_ref": {
                      "type": "string"
                    },
                    "status": {
                      "type": "string"
                    },
                    "title": {
                      "type": "string"
                    },
                    "work_item_id": {
                      "type": "string"
                    },
                    "write_resources": {
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    }
                  },
                  "required": [
                    "work_item_id",
                    "milestone_id",
                    "title",
                    "required",
                    "status",
                    "envelope",
                    "dependency_ids",
                    "read_resources",
                    "write_resources",
                    "scope",
                    "skill_policy_ref",
                    "phase_ids"
                  ],
                  "type": "object"
                }
              ]
            }
          ]
        },
        {
          "type": "null"
        }
      ]
    }
  },
  "required": [
    "status",
    "refresh_requirements",
    "work_item",
    "authority_mode",
    "host_goal_mutated"
  ],
  "type": "object"
}
validate_route — verified-host-required

Validate a concrete route and any proposed support capability against current policy, consent, risk, and runtime evidence. This mutation requires verified-host snapshots and activation authority.

  • Risk: R1
  • Runtime requirement: verified-host
  • Required capabilities: verified-capability-snapshot, route-validation-authority
  • Local conditions: not conditional-local
  • Fallback: Preserve the route proposal and validate it after verified host initialization.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "capability_snapshot_id": {
      "description": "Verified capability snapshot used for route validation.",
      "minLength": 1,
      "type": "string"
    },
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "correlation_id": {
      "description": "Public-safe correlation identifier for tracing one command flow.",
      "minLength": 1,
      "type": "string"
    },
    "expected_state_version": {
      "description": "Expected aggregate state version for compare-and-swap protection.",
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "idempotency_key": {
      "description": "Caller-stable key that safely replays the same semantic command.",
      "minLength": 1,
      "type": "string"
    },
    "policy_revision": {
      "description": "Immutable routing policy revision expected by the caller.",
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "route_proposal": {
      "additionalProperties": {},
      "description": "Complete route proposal evaluated against current policy and capability state.",
      "propertyNames": {
        "type": "string"
      },
      "type": "object"
    }
  },
  "required": [
    "context",
    "expected_state_version",
    "idempotency_key",
    "correlation_id",
    "route_proposal",
    "capability_snapshot_id",
    "policy_revision"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "exit_gate": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "lease": {
      "anyOf": [
        {},
        {
          "type": "null"
        }
      ]
    },
    "outcome_mode": {
      "type": "string"
    },
    "requires_runtime_approval": {
      "type": "boolean"
    },
    "route": {
      "anyOf": [
        {},
        {
          "type": "null"
        }
      ]
    },
    "valid": {
      "type": "boolean"
    },
    "violations": {
      "items": {
        "additionalProperties": {},
        "propertyNames": {
          "type": "string"
        },
        "type": "object"
      },
      "type": "array"
    }
  },
  "required": [
    "valid",
    "violations",
    "requires_runtime_approval",
    "route",
    "lease",
    "outcome_mode",
    "exit_gate"
  ],
  "type": "object"
}
record_work_event — conditional-local

For a validated Router-owned work graph with no Native Goal authority, append only user-or-agent-reported-local progress and return host_transition_authorized=false. Native Goal work requires verified-event-store and activation-receipt-verifier. A missing graph requests local graph creation or replay; a corrupt graph returns a sanitized internal-error. All unavailable or unsafe branches fail closed.

  • Risk: R0
  • Runtime requirement: conditional-local
  • Required capabilities: router-owned-work-graph, no-native-goal-authority-required
  • Local conditions: router-owned-work-graph, no-native-goal-authority-required
  • Fallback: Record advisory local progress or continue through the verified host event store.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "activation_receipt_ref": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "description": "Single-use activation receipt when the observation reports execution."
    },
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "correlation_id": {
      "description": "Public-safe correlation identifier for tracing one command flow.",
      "minLength": 1,
      "type": "string"
    },
    "expected_state_version": {
      "description": "Expected aggregate state version for compare-and-swap protection.",
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "idempotency_key": {
      "description": "Caller-stable key that safely replays the same semantic command.",
      "minLength": 1,
      "type": "string"
    },
    "observation": {
      "additionalProperties": {},
      "description": "Versioned work observation validated by the core codec.",
      "propertyNames": {
        "type": "string"
      },
      "type": "object"
    },
    "phase_id": {
      "description": "Phase receiving the semantic observation.",
      "minLength": 1,
      "type": "string"
    },
    "workflow_run_id": {
      "description": "Workflow run receiving the semantic observation.",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "context",
    "expected_state_version",
    "idempotency_key",
    "correlation_id",
    "workflow_run_id",
    "phase_id",
    "observation",
    "activation_receipt_ref"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "authority_mode": {
      "const": "router-local",
      "type": "string"
    },
    "event_ids": {
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "evidence_class": {
      "const": "user-or-agent-reported-local",
      "type": "string"
    },
    "host_transition_authorized": {
      "const": false,
      "type": "boolean"
    },
    "replayed": {
      "type": "boolean"
    },
    "resulting_state_version": {
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    }
  },
  "required": [
    "event_ids",
    "resulting_state_version",
    "replayed"
  ],
  "type": "object"
}
evaluate_gate — conditional-local

For a validated Router-owned work graph with no Native Goal authority, evaluate only persisted local check IDs as a router-local advisory gate with host_transition_authorized=false. A local pass is not Skill activation, Native Goal completion, deployment, or production approval. Native Goal gates require verified-evidence-store and gate-authority; missing graphs request local creation or replay, while corrupt graphs return a sanitized internal-error. All unavailable or unsafe branches fail closed.

  • Risk: R0
  • Runtime requirement: conditional-local
  • Required capabilities: router-owned-work-graph, no-native-goal-authority-required
  • Local conditions: router-owned-work-graph, no-native-goal-authority-required
  • Fallback: Evaluate an advisory local gate or continue through verified host evidence authority.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "correlation_id": {
      "description": "Public-safe correlation identifier for tracing one command flow.",
      "minLength": 1,
      "type": "string"
    },
    "evidence_refs": {
      "description": "Content-addressed evidence references considered by the gate.",
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "expected_evidence_digest": {
      "description": "Evidence digest expected before evaluating mandatory checks.",
      "minLength": 1,
      "type": "string"
    },
    "expected_plan_revision": {
      "description": "Plan revision bound to this gate decision.",
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "expected_state_version": {
      "description": "Expected aggregate state version for compare-and-swap protection.",
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "idempotency_key": {
      "description": "Caller-stable key that safely replays the same semantic command.",
      "minLength": 1,
      "type": "string"
    },
    "phase_id": {
      "description": "Phase whose exit gate is evaluated.",
      "minLength": 1,
      "type": "string"
    },
    "workflow_run_id": {
      "description": "Workflow run whose phase gate is evaluated.",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "context",
    "expected_state_version",
    "idempotency_key",
    "correlation_id",
    "workflow_run_id",
    "phase_id",
    "expected_plan_revision",
    "expected_evidence_digest",
    "evidence_refs"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "authority_mode": {
      "const": "router-local",
      "type": "string"
    },
    "evidence_class": {
      "const": "user-or-agent-reported-local",
      "type": "string"
    },
    "evidence_digest": {
      "pattern": "^sha256:[0-9a-f]{64}$",
      "type": "string"
    },
    "failures": {
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "gate_scope": {
      "const": "router-local",
      "type": "string"
    },
    "host_transition_authorized": {
      "const": false,
      "type": "boolean"
    },
    "mandatory_failures": {
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "passed": {
      "type": "boolean"
    },
    "replayed": {
      "type": "boolean"
    },
    "resulting_state_version": {
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "status": {
      "type": "string"
    }
  },
  "required": [
    "status",
    "passed",
    "evidence_digest"
  ],
  "type": "object"
}
get_router_status — local-ready

Read durable Router plan counts and native Goal status candidates without mutating the host Goal. This read is available from the bundled local R0 control plane.

  • Risk: R0
  • Runtime requirement: local-r0
  • Required capabilities: bundled-local-control-plane
  • Local conditions: not conditional-local
  • Fallback: Read the bundled local planner status.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "goal_binding_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "description": "Native Goal binding to filter, or null for session scope."
    },
    "workflow_run_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "description": "Workflow run to filter, or null for session scope."
    }
  },
  "required": [
    "context",
    "goal_binding_id",
    "workflow_run_id"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "created_work_items": {
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "goal_binding_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "goal_status_candidate": {
      "anyOf": [
        {
          "additionalProperties": false,
          "properties": {
            "candidate_id": {
              "type": "string"
            },
            "candidate_type": {
              "type": "string"
            },
            "evidence_digest": {
              "type": "string"
            }
          },
          "required": [
            "candidate_id",
            "candidate_type",
            "evidence_digest"
          ],
          "type": "object"
        },
        {
          "type": "null"
        }
      ]
    },
    "host_goal_mutated": {
      "type": "boolean"
    },
    "workflow_run_id": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    }
  },
  "required": [
    "goal_binding_id",
    "workflow_run_id",
    "created_work_items",
    "goal_status_candidate",
    "host_goal_mutated"
  ],
  "type": "object"
}
run_model_evaluation — configured-adapter-required

Run fresh attempts from a sealed case through a server-configured evaluation adapter. This quota-consuming operation requires configured-adapter authority and never accepts executable paths from model input.

  • Risk: R2
  • Runtime requirement: configured-adapter
  • Required capabilities: configured-evaluation-adapter, sealed-evaluation-case, trusted-subprocess-adapter-config
  • Local conditions: not conditional-local
  • Fallback: Configure a trusted host-side adapter or report manual-required evidence.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "authorization_ref": {
      "description": "Trusted server-side authorization selecting a configured evaluation adapter.",
      "minLength": 1,
      "type": "string"
    },
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "correlation_id": {
      "description": "Public-safe evaluation correlation identifier.",
      "minLength": 1,
      "type": "string"
    },
    "idempotency_key": {
      "description": "Caller-stable key for this authorized evaluation request.",
      "minLength": 1,
      "type": "string"
    },
    "repeats": {
      "description": "Fresh attempt count requested for each selected evaluation case.",
      "maximum": 9007199254740991,
      "minimum": 1,
      "type": "integer"
    },
    "sealed_case_ref": {
      "description": "Reference to a sealed evaluation package with isolated scoring data.",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "context",
    "authorization_ref",
    "sealed_case_ref",
    "repeats",
    "idempotency_key",
    "correlation_id"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "adapter_kind": {
      "type": "string"
    },
    "attempts": {
      "items": {
        "additionalProperties": {},
        "propertyNames": {
          "type": "string"
        },
        "type": "object"
      },
      "type": "array"
    },
    "evidence_class": {
      "type": "string"
    },
    "manifest_digest": {
      "type": "string"
    },
    "profile": {
      "type": "string"
    },
    "run_id": {
      "type": "string"
    },
    "status": {
      "type": "string"
    }
  },
  "required": [
    "run_id",
    "status",
    "profile",
    "adapter_kind",
    "attempts",
    "manifest_digest",
    "evidence_class"
  ],
  "type": "object"
}
compare_evaluations — configured-adapter-required

Compare authorized baseline and candidate evaluation runs without fabricating unavailable metrics. This read requires configured evaluation evidence and remains review-required until attested.

  • Risk: R1
  • Runtime requirement: configured-adapter
  • Required capabilities: verified-evaluation-runs, evaluation-authorization
  • Local conditions: not conditional-local
  • Fallback: Import or run two authorized evaluation arms before comparison.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "authorization_ref": {
      "description": "Trusted authorization permitting comparison of the selected runs.",
      "minLength": 1,
      "type": "string"
    },
    "baseline_run_id": {
      "description": "Completed baseline evaluation run identifier.",
      "minLength": 1,
      "type": "string"
    },
    "candidate_run_id": {
      "description": "Completed candidate evaluation run identifier.",
      "minLength": 1,
      "type": "string"
    },
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "correlation_id": {
      "description": "Public-safe comparison correlation identifier.",
      "minLength": 1,
      "type": "string"
    },
    "idempotency_key": {
      "description": "Caller-stable key for the comparison request.",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "context",
    "authorization_ref",
    "baseline_run_id",
    "candidate_run_id",
    "idempotency_key",
    "correlation_id"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "baseline_run_id": {
      "type": "string"
    },
    "candidate_release_eligible": {
      "type": "boolean"
    },
    "candidate_run_id": {
      "type": "string"
    },
    "hard_violation_difference": {
      "maximum": 9007199254740991,
      "minimum": -9007199254740991,
      "type": "integer"
    },
    "paired_count": {
      "maximum": 9007199254740991,
      "minimum": 0,
      "type": "integer"
    },
    "pass_rate_difference": {
      "type": "number"
    }
  },
  "required": [
    "baseline_run_id",
    "candidate_run_id",
    "paired_count",
    "pass_rate_difference",
    "hard_violation_difference",
    "candidate_release_eligible"
  ],
  "type": "object"
}
export_router_artifact — configured-adapter-required

Export a sanitized evaluation artifact from a validated comparison and optional trusted attestation. This operation requires configured-adapter evidence and cannot self-approve publication.

  • Risk: R2
  • Runtime requirement: configured-adapter
  • Required capabilities: reviewed-evaluation-comparison, export-attestation
  • Local conditions: not conditional-local
  • Fallback: Keep the artifact review-required until trusted attestation is available.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "attestation_ref": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "description": "Human or trusted verifier attestation, or null for review-required output."
    },
    "authorization_ref": {
      "description": "Trusted authorization permitting sanitized artifact export.",
      "minLength": 1,
      "type": "string"
    },
    "comparison_ref": {
      "description": "Validated evaluation comparison used to build the artifact.",
      "minLength": 1,
      "type": "string"
    },
    "context": {
      "additionalProperties": false,
      "description": "Authority context supplied by the Codex host.",
      "properties": {
        "actor": {
          "description": "Verified user or host actor responsible for this request.",
          "minLength": 1,
          "type": "string"
        },
        "runtime_policy_snapshot_id": {
          "description": "Host policy snapshot governing authority and runtime behavior.",
          "minLength": 1,
          "type": "string"
        },
        "session_id": {
          "description": "Stable session identifier used to isolate Router state and idempotency.",
          "minLength": 1,
          "type": "string"
        }
      },
      "required": [
        "session_id",
        "actor",
        "runtime_policy_snapshot_id"
      ],
      "type": "object"
    },
    "correlation_id": {
      "description": "Public-safe export correlation identifier.",
      "minLength": 1,
      "type": "string"
    },
    "export_kind": {
      "description": "Supported sanitized export format requested by the caller.",
      "minLength": 1,
      "type": "string"
    },
    "idempotency_key": {
      "description": "Caller-stable key for the export request.",
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "context",
    "authorization_ref",
    "comparison_ref",
    "export_kind",
    "attestation_ref",
    "idempotency_key",
    "correlation_id"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "artifact_digest": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "evidence_class": {
      "type": "string"
    },
    "review_authority": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "review_subject_digest": {
      "type": "string"
    },
    "reviewed_at": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    },
    "schema_version": {
      "type": "string"
    },
    "status": {
      "type": "string"
    },
    "summary": {
      "additionalProperties": {},
      "propertyNames": {
        "type": "string"
      },
      "type": "object"
    }
  },
  "required": [
    "schema_version",
    "status",
    "evidence_class",
    "summary",
    "review_subject_digest",
    "review_authority",
    "reviewed_at",
    "artifact_digest"
  ],
  "type": "object"
}

重新產生

Section titled “重新產生”
Terminal window
node scripts/build-mcp-reference-data.mjs
node scripts/build-mcp-reference-data.mjs --check