tutti/packages/agent/daemon/runtime/codexproto/schema/json/v2/ItemGuardianApprovalReviewCompletedNotification.json

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "definitions": {
    "AbsolutePathBuf": {
      "description": "A path that is guaranteed to be absolute and normalized (though it is not guaranteed to be canonicalized or exist on the filesystem).\n\nIMPORTANT: When deserializing an `AbsolutePathBuf`, a base path must be set using [AbsolutePathBufGuard::new]. If no base path is set, the deserialization will fail unless the path being deserialized is already absolute.",
      "type": "string"
    },
    "AdditionalFileSystemPermissions": {
      "properties": {
        "entries": {
          "items": {
            "$ref": "#/definitions/FileSystemSandboxEntry"
          },
          "type": ["array", "null"]
        },
        "globScanMaxDepth": {
          "format": "uint",
          "minimum": 1.0,
          "type": ["integer", "null"]
        },
        "read": {
          "description": "This will be removed in favor of `entries`.",
          "items": {
            "$ref": "#/definitions/LegacyAppPathString"
          },
          "type": ["array", "null"]
        },
        "write": {
          "description": "This will be removed in favor of `entries`.",
          "items": {
            "$ref": "#/definitions/LegacyAppPathString"
          },
          "type": ["array", "null"]
        }
      },
      "type": "object"
    },
    "AdditionalNetworkPermissions": {
      "properties": {
        "enabled": {
          "type": ["boolean", "null"]
        }
      },
      "type": "object"
    },
    "AutoReviewDecisionSource": {
      "description": "[UNSTABLE] Source that produced a terminal approval auto-review decision.",
      "enum": ["agent"],
      "type": "string"
    },
    "FileSystemAccessMode": {
      "enum": ["read", "write", "deny"],
      "type": "string"
    },
    "FileSystemPath": {
      "oneOf": [
        {
          "properties": {
            "path": {
              "$ref": "#/definitions/LegacyAppPathString"
            },
            "type": {
              "enum": ["path"],
              "title": "PathFileSystemPathType",
              "type": "string"
            }
          },
          "required": ["path", "type"],
          "title": "PathFileSystemPath",
          "type": "object"
        },
        {
          "properties": {
            "pattern": {
              "type": "string"
            },
            "type": {
              "enum": ["glob_pattern"],
              "title": "GlobPatternFileSystemPathType",
              "type": "string"
            }
          },
          "required": ["pattern", "type"],
          "title": "GlobPatternFileSystemPath",
          "type": "object"
        },
        {
          "properties": {
            "type": {
              "enum": ["special"],
              "title": "SpecialFileSystemPathType",
              "type": "string"
            },
            "value": {
              "$ref": "#/definitions/FileSystemSpecialPath"
            }
          },
          "required": ["type", "value"],
          "title": "SpecialFileSystemPath",
          "type": "object"
        }
      ]
    },
    "FileSystemSandboxEntry": {
      "properties": {
        "access": {
          "$ref": "#/definitions/FileSystemAccessMode"
        },
        "path": {
          "$ref": "#/definitions/FileSystemPath"
        }
      },
      "required": ["access", "path"],
      "type": "object"
    },
    "FileSystemSpecialPath": {
      "oneOf": [
        {
          "properties": {
            "kind": {
              "enum": ["root"],
              "type": "string"
            }
          },
          "required": ["kind"],
          "title": "RootFileSystemSpecialPath",
          "type": "object"
        },
        {
          "properties": {
            "kind": {
              "enum": ["minimal"],
              "type": "string"
            }
          },
          "required": ["kind"],
          "title": "MinimalFileSystemSpecialPath",
          "type": "object"
        },
        {
          "properties": {
            "kind": {
              "enum": ["project_roots"],
              "type": "string"
            },
            "subpath": {
              "type": ["string", "null"]
            }
          },
          "required": ["kind"],
          "title": "KindFileSystemSpecialPath",
          "type": "object"
        },
        {
          "properties": {
            "kind": {
              "enum": ["tmpdir"],
              "type": "string"
            }
          },
          "required": ["kind"],
          "title": "TmpdirFileSystemSpecialPath",
          "type": "object"
        },
        {
          "properties": {
            "kind": {
              "enum": ["slash_tmp"],
              "type": "string"
            }
          },
          "required": ["kind"],
          "title": "SlashTmpFileSystemSpecialPath",
          "type": "object"
        },
        {
          "properties": {
            "kind": {
              "enum": ["unknown"],
              "type": "string"
            },
            "path": {
              "type": "string"
            },
            "subpath": {
              "type": ["string", "null"]
            }
          },
          "required": ["kind", "path"],
          "type": "object"
        }
      ]
    },
    "GuardianApprovalReview": {
      "description": "[UNSTABLE] Temporary approval auto-review payload used by `item/autoApprovalReview/*` notifications. This shape is expected to change soon.",
      "properties": {
        "rationale": {
          "type": ["string", "null"]
        },
        "riskLevel": {
          "anyOf": [
            {
              "$ref": "#/definitions/GuardianRiskLevel"
            },
            {
              "type": "null"
            }
          ]
        },
        "status": {
          "$ref": "#/definitions/GuardianApprovalReviewStatus"
        },
        "userAuthorization": {
          "anyOf": [
            {
              "$ref": "#/definitions/GuardianUserAuthorization"
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "required": ["status"],
      "type": "object"
    },
    "GuardianApprovalReviewAction": {
      "oneOf": [
        {
          "properties": {
            "command": {
              "type": "string"
            },
            "cwd": {
              "$ref": "#/definitions/AbsolutePathBuf"
            },
            "source": {
              "$ref": "#/definitions/GuardianCommandSource"
            },
            "type": {
              "enum": ["command"],
              "title": "CommandGuardianApprovalReviewActionType",
              "type": "string"
            }
          },
          "required": ["command", "cwd", "source", "type"],
          "title": "CommandGuardianApprovalReviewAction",
          "type": "object"
        },
        {
          "properties": {
            "argv": {
              "items": {
                "type": "string"
              },
              "type": "array"
            },
            "cwd": {
              "$ref": "#/definitions/AbsolutePathBuf"
            },
            "program": {
              "type": "string"
            },
            "source": {
              "$ref": "#/definitions/GuardianCommandSource"
            },
            "type": {
              "enum": ["execve"],
              "title": "ExecveGuardianApprovalReviewActionType",
              "type": "string"
            }
          },
          "required": ["argv", "cwd", "program", "source", "type"],
          "title": "ExecveGuardianApprovalReviewAction",
          "type": "object"
        },
        {
          "properties": {
            "cwd": {
              "$ref": "#/definitions/AbsolutePathBuf"
            },
            "files": {
              "items": {
                "$ref": "#/definitions/AbsolutePathBuf"
              },
              "type": "array"
            },
            "type": {
              "enum": ["applyPatch"],
              "title": "ApplyPatchGuardianApprovalReviewActionType",
              "type": "string"
            }
          },
          "required": ["cwd", "files", "type"],
          "title": "ApplyPatchGuardianApprovalReviewAction",
          "type": "object"
        },
        {
          "properties": {
            "host": {
              "type": "string"
            },
            "port": {
              "format": "uint16",
              "minimum": 0.0,
              "type": "integer"
            },
            "protocol": {
              "$ref": "#/definitions/NetworkApprovalProtocol"
            },
            "target": {
              "type": "string"
            },
            "type": {
              "enum": ["networkAccess"],
              "title": "NetworkAccessGuardianApprovalReviewActionType",
              "type": "string"
            }
          },
          "required": ["host", "port", "protocol", "target", "type"],
          "title": "NetworkAccessGuardianApprovalReviewAction",
          "type": "object"
        },
        {
          "properties": {
            "connectorId": {
              "type": ["string", "null"]
            },
            "connectorName": {
              "type": ["string", "null"]
            },
            "server": {
              "type": "string"
            },
            "toolName": {
              "type": "string"
            },
            "toolTitle": {
              "type": ["string", "null"]
            },
            "type": {
              "enum": ["mcpToolCall"],
              "title": "McpToolCallGuardianApprovalReviewActionType",
              "type": "string"
            }
          },
          "required": ["server", "toolName", "type"],
          "title": "McpToolCallGuardianApprovalReviewAction",
          "type": "object"
        },
        {
          "properties": {
            "permissions": {
              "$ref": "#/definitions/RequestPermissionProfile"
            },
            "reason": {
              "type": ["string", "null"]
            },
            "type": {
              "enum": ["requestPermissions"],
              "title": "RequestPermissionsGuardianApprovalReviewActionType",
              "type": "string"
            }
          },
          "required": ["permissions", "type"],
          "title": "RequestPermissionsGuardianApprovalReviewAction",
          "type": "object"
        }
      ]
    },
    "GuardianApprovalReviewStatus": {
      "description": "[UNSTABLE] Lifecycle state for an approval auto-review.",
      "enum": ["inProgress", "approved", "denied", "timedOut", "aborted"],
      "type": "string"
    },
    "GuardianCommandSource": {
      "enum": ["shell", "unifiedExec"],
      "type": "string"
    },
    "GuardianRiskLevel": {
      "description": "[UNSTABLE] Risk level assigned by approval auto-review.",
      "enum": ["low", "medium", "high", "critical"],
      "type": "string"
    },
    "GuardianUserAuthorization": {
      "description": "[UNSTABLE] Authorization level assigned by approval auto-review.",
      "enum": ["unknown", "low", "medium", "high"],
      "type": "string"
    },
    "LegacyAppPathString": {
      "type": "string"
    },
    "NetworkApprovalProtocol": {
      "enum": ["http", "https", "socks5Tcp", "socks5Udp"],
      "type": "string"
    },
    "RequestPermissionProfile": {
      "additionalProperties": false,
      "properties": {
        "fileSystem": {
          "anyOf": [
            {
              "$ref": "#/definitions/AdditionalFileSystemPermissions"
            },
            {
              "type": "null"
            }
          ]
        },
        "network": {
          "anyOf": [
            {
              "$ref": "#/definitions/AdditionalNetworkPermissions"
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "type": "object"
    }
  },
  "description": "[UNSTABLE] Temporary notification payload for approval auto-review. This shape is expected to change soon.",
  "properties": {
    "action": {
      "$ref": "#/definitions/GuardianApprovalReviewAction"
    },
    "completedAtMs": {
      "description": "Unix timestamp (in milliseconds) when this review completed.",
      "format": "int64",
      "type": "integer"
    },
    "decisionSource": {
      "$ref": "#/definitions/AutoReviewDecisionSource"
    },
    "review": {
      "$ref": "#/definitions/GuardianApprovalReview"
    },
    "reviewId": {
      "description": "Stable identifier for this review.",
      "type": "string"
    },
    "startedAtMs": {
      "description": "Unix timestamp (in milliseconds) when this review started.",
      "format": "int64",
      "type": "integer"
    },
    "targetItemId": {
      "description": "Identifier for the reviewed item or tool call when one exists.\n\nIn most cases, one review maps to one target item. The exceptions are - execve reviews, where a single command may contain multiple execve calls to review (only possible when using the shell_zsh_fork feature) - network policy reviews, where there is no target item\n\nA network call is triggered by a CommandExecution item, so having a target_item_id set to the CommandExecution item would be misleading because the review is about the network call, not the command execution. Therefore, target_item_id is set to None for network policy reviews.",
      "type": ["string", "null"]
    },
    "threadId": {
      "type": "string"
    },
    "turnId": {
      "type": "string"
    }
  },
  "required": [
    "action",
    "completedAtMs",
    "decisionSource",
    "review",
    "reviewId",
    "startedAtMs",
    "threadId",
    "turnId"
  ],
  "title": "ItemGuardianApprovalReviewCompletedNotification",
  "type": "object"
}