chore: sync api from Mono

.repository-projection.json

@@ -3,11 +3,11 @@
   "projection": "api",
   "projectionSchemaVersion": 1,
   "sourceRepository": "dx-corp/mono",
-  "sourceSha": "7f322bbd03a590ed5a478b12303369ea8d48c00a",
+  "sourceSha": "c3fe404d7c05f9d3b39f6e0d56659c6f020c7159",
   "destinationRepository": "dx-corp/api",
-  "priorProjectedBase": "5600cfa72fda9a25825e3b72c756b4ab8fcdea92",
+  "priorProjectedBase": "e952e97a51e1d3f285a0c2728b6d24ffc1b591c2",
   "definitionDigest": "144b18a5c1f3e7ee6e2d1abc32f80a97adfeacd088911ec659d63622fe85d18c",
   "toolDigest": "898e8657d9153a2a51d7c283bf83bb3350b5d1e6",
-  "contentDigest": "c7b3e94ab12c7c9cfbf16f5cfe0dcaf59e8910e82c4ce5ebcc4d30f80cfbb966",
+  "contentDigest": "2ce0a7275253550d7b0e069d50deb3bab21b14f884e771e934036784dd04c658",
   "publicationEligible": true
 }

openapi/toolexecution/v1/toolexecution.openapi.yaml

@@ -511,6 +511,32 @@ components:
          workspace authority in the surrounding request, while a resolver owned by
          the resource's service decides whether a reference yields metadata, VFS
          identity, or a short-lived byte-access grant.
+    toolexecution.v1.CommandAuditReceipt:
+      type: object
+      properties:
+        eventId:
+          type: string
+          title: event_id
+        runnerSessionId:
+          type: string
+          title: runner_session_id
+        sequence:
+          type:
+            - integer
+            - string
+          title: sequence
+          format: int64
+        eventType:
+          type: string
+          title: event_type
+        occurredAt:
+          title: occurred_at
+          $ref: '#/components/schemas/google.protobuf.Timestamp'
+        payloadDigestSha256:
+          type: string
+          title: payload_digest_sha256
+      title: CommandAuditReceipt
+      additionalProperties: false
     toolexecution.v1.ConnectorRef:
       type: object
       properties:
@@ -1272,6 +1298,12 @@ components:
           additionalProperties:
             type: string
             title: value
+        commandAuditReceipt:
+          title: command_audit_receipt
+          description: |-
+            Owner-persisted acknowledgement of a Runner Host event append. This
+             binds a recording to the execution, not the producer of the event.
+          $ref: '#/components/schemas/toolexecution.v1.CommandAuditReceipt'
       title: ToolExecutionProvenance
       additionalProperties: false
       description: |-

proto/toolexecution/v1/toolexecution.proto

@@ -319,6 +319,18 @@ message ToolExecutionProvenance {
   string input_digest = 10;
   string output_digest = 11;
   map<string, string> metadata = 12;
+  // Owner-persisted acknowledgement of a Runner Host event append. This
+  // binds a recording to the execution, not the producer of the event.
+  CommandAuditReceipt command_audit_receipt = 13;
+}
+
+message CommandAuditReceipt {
+  string event_id = 1;
+  string runner_session_id = 2;
+  int64 sequence = 3;
+  string event_type = 4;
+  google.protobuf.Timestamp occurred_at = 5;
+  string payload_digest_sha256 = 6;
 }
 
 // ToolExecutionFailureCode is the bounded, owner-assigned terminal failure