@agentdocumentformat/cli 0.7.2

package/dist/chunks/chunk-HWLWPXQ7.mjs

@@ -0,0 +1,721 @@
+import { createRequire as __adfCreateRequire } from 'node:module';
+import { fileURLToPath as __adfFileURLToPath } from 'node:url';
+import { dirname as __adfDirname } from 'node:path';
+const require = __adfCreateRequire(import.meta.url);
+const __filename = __adfFileURLToPath(import.meta.url);
+const __dirname = __adfDirname(__filename);
+import {
+  external_exports
+} from "./chunk-ZJKXHM4Q.mjs";
+import {
+  AGENT_STATES,
+  LOOP_PROHIBITED_TOOLS,
+  MESSAGING_MODES,
+  RESERVED_AGENT_PATH_SEGMENTS,
+  START_IN_STATES
+} from "./chunk-WFQUVXML.mjs";
+
+// src/shared/types/umbilical-events.ts
+var UMBILICAL_EVENT_TYPES = [
+  // --- agent lifecycle ---------------------------------------------------
+  "agent.loaded",
+  "agent.unloaded",
+  "agent.state.changed",
+  "agent.error",
+  // An auth-bricked loop left `error` because its provider's sign-in
+  // completed (no turn is re-run; the next trigger works normally).
+  "agent.recovered",
+  // Sealed credential envelopes re-checked after the owner identity became
+  // ready (or on the periodic re-check): the agent's `degraded` was recomputed.
+  "agent.credentials.unlocked",
+  // --- turn --------------------------------------------------------------
+  "turn.completed",
+  // --- tools -------------------------------------------------------------
+  "tool.started",
+  "tool.completed",
+  "tool.failed",
+  // --- model calls -------------------------------------------------------
+  "llm.completed",
+  "llm.failed",
+  // --- lambdas -----------------------------------------------------------
+  "lambda.started",
+  "lambda.completed",
+  "lambda.failed",
+  // --- triggers / timers -------------------------------------------------
+  "trigger.fired",
+  "timer.fired",
+  // --- messaging ---------------------------------------------------------
+  "message.received",
+  "message.sent",
+  "message.delivery_failed",
+  // --- filesystem --------------------------------------------------------
+  "file.read",
+  "file.written",
+  "file.deleted",
+  // --- database ----------------------------------------------------------
+  "db.read",
+  "db.write",
+  // --- websockets --------------------------------------------------------
+  "ws.opened",
+  "ws.closed",
+  // --- stream bindings ---------------------------------------------------
+  "binding.created",
+  "binding.materialized",
+  "binding.pending",
+  "binding.reconnecting",
+  "binding.error",
+  "binding.threshold_exceeded",
+  "binding.flow_summary",
+  "binding.terminated",
+  // --- channel adapters / MCP -------------------------------------------
+  "adapter.status.changed",
+  "adapter.log",
+  "mcp.status.changed",
+  "mcp.tools.discovered",
+  "mcp.log",
+  // --- daemon ------------------------------------------------------------
+  "daemon.started",
+  "daemon.autostart.report",
+  // --- lifecycle / control-plane -----------------------------------------
+  // These are emitted by the runtime (HIL, asks, suspend, config/context,
+  // loop lifecycle, mesh queueing, trigger drops, WS reconnect, turn deltas).
+  //
+  // Exception: `umbilical.checkpoint` is the signed epoch/checkpoint marker
+  // from the deferred sealed-epochs design (docs/design/sealed-epochs.md) and
+  // is reserved — declared up front so tap filters validate cleanly, but
+  // nothing emits it today.
+  "umbilical.checkpoint",
+  "hil.requested",
+  "hil.resolved",
+  "ask.requested",
+  "ask.resolved",
+  "suspend.requested",
+  "suspend.resolved",
+  "config.changed",
+  "context.injected",
+  "loop.compacted",
+  "loop.compaction_failed",
+  "loop.compaction_superseded",
+  "loop.cleared",
+  "loop.recovered",
+  "message.queued",
+  "trigger.dropped",
+  // Automatic recovery from transient provider errors (config.recovery):
+  // scheduled → armed a backoff retry; started → retry turn began;
+  // cancelled → disarmed (fresh work, abort, or owner state change).
+  "provider.retry_scheduled",
+  "provider.retry_started",
+  "provider.retry_cancelled",
+  // Recovery from the terminal `error` state: an incoming agent-scope trigger
+  // may spend itself as a recovery turn (recovery_trigger); once the attempt
+  // cap is hit and the cooldown has not elapsed, triggers are dropped and the
+  // suppression is announced once per episode (recovery_suppressed).
+  "error.recovery_trigger",
+  "error.recovery_suppressed",
+  "ws.reconnecting",
+  "turn.delta"
+], KNOWN_EVENT_TYPES = new Set(UMBILICAL_EVENT_TYPES), CUSTOM_EVENT_PREFIX = "custom.";
+function isKnownUmbilicalEventType(type) {
+  return typeof type != "string" || type.length === 0 ? !1 : type.startsWith(CUSTOM_EVENT_PREFIX) && type.length > CUSTOM_EVENT_PREFIX.length ? !0 : KNOWN_EVENT_TYPES.has(type);
+}
+var UMBILICAL_EVENT_PREFIXES = Array.from(
+  new Set(UMBILICAL_EVENT_TYPES.map((type) => type.slice(0, type.indexOf("."))))
+).concat("custom");
+function isUmbilicalEventWildcard(entry) {
+  if (entry === "*") return !0;
+  if (!entry.endsWith(".*")) return !1;
+  let prefix = entry.slice(0, -2);
+  return UMBILICAL_EVENT_PREFIXES.includes(prefix);
+}
+
+// src/main/adf/adf-schema.ts
+function warnUnknownEventTypes(label, eventTypes) {
+  if (eventTypes)
+    for (let entry of eventTypes)
+      entry !== "*" && (isUmbilicalEventWildcard(entry) || isKnownUmbilicalEventType(entry) || console.warn(`[ADF] ${label} filters on unknown umbilical event type "${entry}". Known types: src/shared/types/umbilical-events.ts (docs/guides/umbilical-events.md).`));
+}
+var TOOL_NAME_RENAMES = {
+  msg_list_agents: "agent_discover"
+}, ToolDeclarationSchema = external_exports.object({
+  name: external_exports.string().min(1),
+  // A declaration with a MISSING flag is treated as disabled/hidden everywhere
+  // at runtime (shell gate `!decl.enabled`, getToolsForAgent `enabled && visible`,
+  // UI checkboxes). The validation schema must agree: defaulting missing flags to
+  // true would silently grant capability the runtime then refuses, making the
+  // config lie in whichever direction the consumer parsed it.
+  enabled: external_exports.boolean().default(!1),
+  visible: external_exports.boolean().default(!1),
+  restricted: external_exports.boolean().optional(),
+  mcp_tool_hash: external_exports.string().optional(),
+  mcp_tool_status: external_exports.enum(["new", "changed", "removed"]).optional()
+}).transform((decl) => {
+  let renamed = TOOL_NAME_RENAMES[decl.name];
+  return renamed ? { ...decl, name: renamed } : decl;
+}), TriggerFilterSchema = external_exports.object({
+  source: external_exports.union([external_exports.string(), external_exports.array(external_exports.string())]).optional(),
+  sender: external_exports.string().optional(),
+  to: external_exports.string().optional(),
+  watch: external_exports.string().optional(),
+  include_self: external_exports.boolean().optional(),
+  tools: external_exports.array(external_exports.string()).optional(),
+  status: external_exports.string().optional(),
+  level: external_exports.array(external_exports.enum(["debug", "info", "warn", "error"])).optional(),
+  origin: external_exports.array(external_exports.string()).optional(),
+  event: external_exports.array(external_exports.string()).optional(),
+  provider: external_exports.array(external_exports.string()).optional()
+}).strict().optional(), TriggerTargetSchema = external_exports.object({
+  scope: external_exports.enum(["system", "agent"]),
+  lambda: external_exports.string().optional(),
+  command: external_exports.string().optional(),
+  warm: external_exports.boolean().optional(),
+  filter: TriggerFilterSchema,
+  debounce_ms: external_exports.number().int().positive().optional(),
+  interval_ms: external_exports.number().int().positive().optional(),
+  batch_ms: external_exports.number().int().positive().optional(),
+  batch_count: external_exports.number().int().positive().optional(),
+  // Cognition stream this target wakes. Absent → 'main'. Existence of the
+  // named loop is a runtime concern (the router falls back to main), not a
+  // schema one — a config may legitimately be validated before its loops load.
+  loop: external_exports.string().min(1).optional()
+}).refine(
+  (t) => [t.debounce_ms, t.interval_ms, t.batch_ms].filter((v) => v !== void 0).length <= 1,
+  { message: "Only one timing modifier allowed per target" }
+).refine(
+  (t) => t.batch_count === void 0 || t.batch_ms !== void 0,
+  { message: "batch_count requires batch_ms" }
+).refine(
+  (t) => t.scope === "system" || !t.lambda && !t.command && t.warm === void 0,
+  { message: "lambda, command, and warm only allowed on system scope targets" }
+).refine(
+  (t) => !t.lambda || !t.command,
+  { message: "lambda and command are mutually exclusive" }
+), TriggerConfigSchema = external_exports.object({
+  enabled: external_exports.boolean(),
+  targets: external_exports.array(TriggerTargetSchema).default([])
+}), TriggersConfigV3Schema = external_exports.object({
+  on_startup: TriggerConfigSchema.optional(),
+  on_inbox: TriggerConfigSchema.optional(),
+  on_outbox: TriggerConfigSchema.optional(),
+  on_file_change: TriggerConfigSchema.optional(),
+  on_chat: TriggerConfigSchema.optional(),
+  on_timer: TriggerConfigSchema.optional(),
+  on_tool_call: TriggerConfigSchema.optional(),
+  on_task_create: TriggerConfigSchema.optional(),
+  on_task_complete: TriggerConfigSchema.optional(),
+  on_logs: TriggerConfigSchema.optional(),
+  on_llm_call: TriggerConfigSchema.optional()
+}), LoggingRuleSchema = external_exports.object({
+  origin: external_exports.string().min(1),
+  min_level: external_exports.enum(["debug", "info", "warn", "error"])
+}), LoggingConfigSchema = external_exports.object({
+  default_level: external_exports.enum(["debug", "info", "warn", "error"]).default("info"),
+  rules: external_exports.array(LoggingRuleSchema).optional(),
+  max_rows: external_exports.number().int().positive().nullable().optional()
+}), MiddlewareRefSchema = external_exports.object({
+  lambda: external_exports.string().min(1)
+}), ServingApiRouteSchema = external_exports.object({
+  method: external_exports.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "WS"]),
+  path: external_exports.string().min(1),
+  lambda: external_exports.string().optional(),
+  warm: external_exports.boolean().optional(),
+  cache_ttl_ms: external_exports.number().int().positive().optional(),
+  on_card: external_exports.boolean().optional(),
+  middleware: external_exports.array(MiddlewareRefSchema).optional(),
+  high_water_mark_bytes: external_exports.number().int().positive().optional()
+}).superRefine((route, ctx) => {
+  route.method === "WS" && !route.lambda && ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: "WS routes require a lambda handler", path: ["lambda"] }), route.method !== "WS" && !route.lambda && ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: "HTTP routes require a lambda handler", path: ["lambda"] });
+  let firstSegment = route.path.replace(/^\/+/, "").split("/")[0];
+  RESERVED_AGENT_PATH_SEGMENTS.includes(firstSegment) && ctx.addIssue({
+    code: external_exports.ZodIssueCode.custom,
+    message: `Path segment "${firstSegment}" is reserved for the agent's protocol mailbox and cannot be used by a serving route`,
+    path: ["path"]
+  });
+}), WsConnectionConfigSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  url: external_exports.string().url(),
+  did: external_exports.string().optional(),
+  enabled: external_exports.boolean(),
+  lambda: external_exports.string().optional(),
+  auth: external_exports.enum(["auto", "required", "none"]).optional(),
+  auto_reconnect: external_exports.boolean().optional(),
+  reconnect_delay_ms: external_exports.number().int().positive().optional(),
+  keepalive_interval_ms: external_exports.number().int().positive().optional(),
+  connect_timeout_ms: external_exports.number().int().positive().optional(),
+  high_water_mark_bytes: external_exports.number().int().positive().optional()
+}), UmbilicalFilterSchema = external_exports.object({
+  event_types: external_exports.array(external_exports.string()).optional(),
+  when: external_exports.string().optional(),
+  allow_wildcard: external_exports.boolean().optional().describe('Required to subscribe to "*" or bare "prefix.*" event_types, matching the umbilical_tap gate.'),
+  max_rate_per_sec: external_exports.number().int().positive().optional().describe("Token-bucket ceiling. Frames beyond it are dropped and counted in binding.flow_summary.frames_dropped."),
+  exclude_source: external_exports.string().optional().describe('Suppress events whose "source" equals this value, e.g. "lambda:lib/tap.ts:onEvent".')
+});
+function usesWildcardEventTypes(eventTypes) {
+  return eventTypes.some((type) => type === "*" || type.endsWith(".*"));
+}
+var StreamBindEndpointSchema = external_exports.union([
+  external_exports.object({
+    kind: external_exports.literal("ws"),
+    connection_id: external_exports.string().min(1)
+  }),
+  external_exports.object({
+    kind: external_exports.literal("process"),
+    isolation: external_exports.enum(["host", "container_shared", "container_isolated"]),
+    image: external_exports.string().optional(),
+    command: external_exports.array(external_exports.string()).min(1),
+    env: external_exports.record(external_exports.string()).optional(),
+    cwd: external_exports.string().optional()
+  }).superRefine((endpoint, ctx) => {
+    endpoint.isolation === "container_isolated" && !endpoint.image && ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "container_isolated process bindings require image",
+      path: ["image"]
+    });
+  }),
+  external_exports.object({
+    kind: external_exports.literal("tcp"),
+    host: external_exports.string().min(1),
+    port: external_exports.number().int().min(1).max(65535)
+  }),
+  external_exports.object({
+    kind: external_exports.literal("umbilical"),
+    filter: UmbilicalFilterSchema.optional()
+  })
+]), BindOptionsSchema = external_exports.object({
+  idle_timeout_ms: external_exports.number().int().positive().optional(),
+  max_duration_ms: external_exports.number().int().positive().optional(),
+  max_bytes: external_exports.number().int().positive().optional(),
+  flow_summary_interval_ms: external_exports.number().int().positive().optional(),
+  close_a_on_b_close: external_exports.boolean().optional(),
+  close_b_on_a_close: external_exports.boolean().optional(),
+  queue_high_water_bytes: external_exports.number().int().positive().optional().describe("Per-direction cap on queued-but-unwritten bytes (default 4194304). At the cap the source is paused and resumes at half; unpausable sources drop frames instead."),
+  drain_timeout_ms: external_exports.number().int().positive().optional().describe("How long termination waits for in-flight writes to flush (default 1000).")
+}), StreamBindingDeclarationSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  a: StreamBindEndpointSchema,
+  b: StreamBindEndpointSchema,
+  bidirectional: external_exports.boolean().optional(),
+  reconnect: external_exports.boolean().optional(),
+  options: BindOptionsSchema.optional()
+}).superRefine((binding, ctx) => {
+  binding.b.kind === "umbilical" && ctx.addIssue({
+    code: external_exports.ZodIssueCode.custom,
+    message: "umbilical endpoints are read-only and cannot appear as b",
+    path: ["b"]
+  });
+  for (let side of ["a", "b"]) {
+    let endpoint = binding[side];
+    if (endpoint?.kind !== "umbilical") continue;
+    warnUnknownEventTypes(`stream_binding "${binding.id}" endpoint ${side}`, endpoint.filter?.event_types);
+    let eventTypes = endpoint.filter?.event_types?.length ? endpoint.filter.event_types : ["*"];
+    usesWildcardEventTypes(eventTypes) && !endpoint.filter?.allow_wildcard && ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: `stream_binding "${binding.id}" endpoint ${side} subscribes to wildcard event_types (${eventTypes.join(", ")}) but filter.allow_wildcard is not true.`,
+      path: [side, "filter", "allow_wildcard"]
+    });
+  }
+}), StreamBindConfigSchema = external_exports.object({
+  host_process_bind: external_exports.boolean().optional(),
+  container_shared_bind: external_exports.boolean().optional(),
+  container_isolated_bind: external_exports.boolean().optional(),
+  allow_tcp_bind: external_exports.boolean().optional().describe("Enables TCP stream binding. Fails closed on its own \u2014 every bind is denied until tcp_allowlist has at least one rule."),
+  tcp_allowlist: external_exports.array(external_exports.object({
+    host: external_exports.string().min(1).describe('Exact hostname/IP, or "*" to match every host.'),
+    port: external_exports.number().int().min(1).max(65535).optional(),
+    ports: external_exports.array(external_exports.number().int().min(1).max(65535)).optional(),
+    min_port: external_exports.number().int().min(1).max(65535).optional(),
+    max_port: external_exports.number().int().min(1).max(65535).optional()
+  })).optional().describe('Required whenever allow_tcp_bind is true. A rule with no port constraint allows every port on that host; use { host: "*" } to allow everything explicitly.')
+}), ServingPublicConfigSchema = external_exports.object({
+  enabled: external_exports.boolean(),
+  index: external_exports.string().optional()
+}), ServingSharedConfigSchema = external_exports.object({
+  enabled: external_exports.boolean(),
+  patterns: external_exports.array(external_exports.string()).optional().refine(
+    (arr) => !arr || arr.every((s) => !RESERVED_AGENT_PATH_SEGMENTS.includes(s.replace(/^\/+/, "").split("/")[0])),
+    { message: `Shared entries must not start with a reserved segment (${RESERVED_AGENT_PATH_SEGMENTS.join("/")})` }
+  )
+}), ServingConfigSchema = external_exports.object({
+  shared: ServingSharedConfigSchema.optional(),
+  public: ServingPublicConfigSchema.optional(),
+  api: external_exports.array(ServingApiRouteSchema).optional()
+}), ResolutionSchema = external_exports.object({
+  method: external_exports.string().min(1),
+  endpoint: external_exports.string().optional(),
+  network: external_exports.string().optional(),
+  contract: external_exports.string().optional(),
+  chain_id: external_exports.number().int().optional(),
+  domain: external_exports.string().optional(),
+  selector: external_exports.string().optional()
+}), CardOverridesSchema = external_exports.object({
+  endpoints: external_exports.object({
+    inbox: external_exports.string().url().optional(),
+    card: external_exports.string().url().optional(),
+    health: external_exports.string().url().optional(),
+    ws: external_exports.string().optional()
+  }).optional(),
+  resolution: ResolutionSchema.optional(),
+  publish_attestations: external_exports.boolean().optional()
+}), AdapterInstanceConfigSchema = external_exports.object({
+  enabled: external_exports.boolean(),
+  config: external_exports.record(external_exports.unknown()).optional(),
+  policy: external_exports.object({
+    dm: external_exports.enum(["all", "allowlist", "none"]).optional(),
+    groups: external_exports.enum(["all", "mention", "none"]).optional(),
+    allow_from: external_exports.array(external_exports.string()).optional()
+  }).optional(),
+  limits: external_exports.object({
+    max_attachment_size: external_exports.number().int().positive().optional()
+  }).optional()
+}), ModelConfigSchema = external_exports.object({
+  provider: external_exports.string().min(1),
+  model_id: external_exports.string().default(""),
+  temperature: external_exports.number().min(0).max(2).nullable().default(0.7),
+  max_tokens: external_exports.number().int().positive().nullable().default(4096),
+  top_p: external_exports.number().min(0).max(1).nullable().optional(),
+  /** @deprecated folded into `reasoning.max_tokens` on config load. */
+  thinking_budget: external_exports.number().int().positive().nullable().optional(),
+  reasoning: external_exports.object({
+    enabled: external_exports.boolean().optional(),
+    effort: external_exports.enum(["minimal", "low", "medium", "high", "xhigh"]).optional(),
+    max_tokens: external_exports.number().int().positive().optional(),
+    exclude: external_exports.boolean().optional(),
+    preserve: external_exports.boolean().optional(),
+    summary: external_exports.enum(["auto", "concise", "detailed"]).optional()
+  }).optional(),
+  compact_threshold: external_exports.number().int().positive().nullable().optional(),
+  /** @deprecated Use multimodal.image instead. Kept for backward compatibility. */
+  vision: external_exports.boolean().default(!1),
+  multimodal: external_exports.object({
+    image: external_exports.boolean().optional(),
+    audio: external_exports.boolean().optional(),
+    video: external_exports.boolean().optional()
+  }).optional(),
+  params: external_exports.array(external_exports.object({ key: external_exports.string(), value: external_exports.string() })).optional(),
+  provider_params: external_exports.record(external_exports.unknown()).optional()
+}), PROHIBITED_LOOP_TOOL_NAMES = LOOP_PROHIBITED_TOOLS, LOOP_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]{0,31}$/, LOOP_NAME_RULE = 'loop name must be 1-32 characters of lowercase letters, digits, "_" or "-", starting with a letter or digit', LOOP_GOAL_MAX_CHARS = 4e3, LOOP_TOOLS_MAX = 64, MAX_SIDE_LOOPS = 16, LoopConfigSchema = external_exports.object({
+  name: external_exports.string().regex(LOOP_NAME_PATTERN, { message: LOOP_NAME_RULE }).refine((n) => n !== "main", {
+    message: "'main' is the implicit host loop and cannot be declared as an inner loop"
+  }),
+  goal: external_exports.string().min(1).max(LOOP_GOAL_MAX_CHARS),
+  enabled: external_exports.boolean(),
+  autostart: external_exports.boolean().optional().describe("Run a first turn on the goal at create and whenever the agent starts, instead of waiting to be addressed."),
+  autonomous: external_exports.boolean().optional().describe("Keep turning after text-only responses until the loop calls sys_set_state. Per-loop; not inherited from the host. Default false."),
+  model: ModelConfigSchema.optional().describe(
+    "Overrides the parent's model for this loop only. Absent = inherit. `provider` may name a different configured provider than the parent's (e.g. a grok-subscription loop under a chatgpt-subscription host); credentials are resolved by that provider id. A loop whose provider cannot be built does not start."
+  ),
+  // Same bounds as the host's `context.compact_threshold` (positive integer,
+  // nullable, optional) — it lands in exactly that field of the derived config,
+  // so a rule the host rejects must not be reachable through a loop.
+  compact_threshold: external_exports.number().int().positive().nullable().optional().describe(
+    "Token count at which this loop auto-compacts its own history. Absent = inherit the parent's `context.compact_threshold`. Exists for the `model` override: a different model has a different context window, so the host trigger point may not suit this loop."
+  ),
+  tools: external_exports.array(external_exports.string().min(1)).max(LOOP_TOOLS_MAX).optional().describe("Absolute allow-list, intersected with host-enabled tools at derive time. Nothing is implicit \u2014 loop_send/loop_list must be listed to be granted.")
+}).superRefine((loop, ctx) => {
+  for (let tool of loop.tools ?? [])
+    PROHIBITED_LOOP_TOOL_NAMES.includes(tool) && ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: `loop "${loop.name}" requests prohibited tool "${tool}" (never grantable to an inner loop)`,
+      path: ["tools"]
+    });
+}), LoopsConfigSchema = external_exports.array(LoopConfigSchema).superRefine((loops, ctx) => {
+  let seen = /* @__PURE__ */ new Set();
+  loops.forEach((loop, index) => {
+    let key = loop.name.toLowerCase();
+    seen.has(key) && ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: `duplicate loop name "${loop.name}"`,
+      path: [index, "name"]
+    }), seen.add(key);
+  });
+}), PreLlmHookConfigSchema = external_exports.object({
+  source: external_exports.string().min(1),
+  scope: external_exports.enum(["all", "main", "loops"]).default("all"),
+  loops: external_exports.array(external_exports.string().regex(/^[a-z0-9][a-z0-9_-]{0,31}$/)).min(1).max(64).optional(),
+  include_main: external_exports.boolean().optional(),
+  timeout_ms: external_exports.number().int().min(1e3).max(3e5).optional()
+}).superRefine((hook, ctx) => {
+  if (hook.scope === "loops") {
+    if (!hook.loops || hook.loops.length === 0) {
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: 'loops is required when pre_llm_hook.scope is "loops"', path: ["loops"] });
+      return;
+    }
+    let seen = /* @__PURE__ */ new Set();
+    hook.loops.forEach((name, index) => {
+      name === "main" && ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: 'main is not an inner-loop target; use scope "main" or "all"', path: ["loops", index] }), seen.has(name) && ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: `duplicate loop name "${name}"`, path: ["loops", index] }), seen.add(name);
+    });
+  } else hook.loops !== void 0 && ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: 'loops is only allowed when pre_llm_hook.scope is "loops"', path: ["loops"] });
+  hook.scope !== "loops" && hook.include_main !== void 0 && ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: 'include_main is only allowed when pre_llm_hook.scope is "loops"', path: ["include_main"] });
+}), AgentConfigSchema = external_exports.object({
+  adf_version: external_exports.literal("0.2"),
+  id: external_exports.string().min(1),
+  name: external_exports.string().min(1).max(100),
+  description: external_exports.string().max(2e3).default(""),
+  icon: external_exports.string().optional(),
+  handle: external_exports.string().regex(/^[a-z0-9][a-z0-9-]*$/).max(64).optional(),
+  reply_to: external_exports.string().optional(),
+  // deprecated — use card.endpoints.inbox
+  card: CardOverridesSchema.optional(),
+  state: external_exports.enum(AGENT_STATES).default("active"),
+  start_in_state: external_exports.enum(START_IN_STATES).optional(),
+  autonomous: external_exports.boolean().default(!1),
+  autostart: external_exports.boolean().optional(),
+  model: ModelConfigSchema,
+  instructions: external_exports.string().min(1),
+  include_base_prompt: external_exports.boolean().optional(),
+  bare_prompt: external_exports.boolean().optional(),
+  context: external_exports.object({
+    compact_threshold: external_exports.number().int().positive().nullable().optional(),
+    audit: external_exports.object({
+      loop: external_exports.boolean().default(!0),
+      inbox: external_exports.boolean().default(!1),
+      outbox: external_exports.boolean().default(!1),
+      files: external_exports.boolean().default(!1)
+    }).optional(),
+    dynamic_instructions: external_exports.object({
+      inbox_hints: external_exports.boolean().optional(),
+      context_warning: external_exports.boolean().optional(),
+      idle_reminder: external_exports.boolean().optional(),
+      mesh_updates: external_exports.boolean().optional()
+    }).optional()
+  }),
+  tools: external_exports.array(ToolDeclarationSchema).default([]),
+  triggers: TriggersConfigV3Schema,
+  security: external_exports.object({
+    allow_unsigned: external_exports.boolean().default(!0),
+    level: external_exports.union([external_exports.literal(0), external_exports.literal(1), external_exports.literal(2), external_exports.literal(3)]).optional(),
+    require_signature: external_exports.boolean().optional(),
+    require_payload_signature: external_exports.boolean().optional(),
+    middleware: external_exports.object({
+      inbox: external_exports.array(MiddlewareRefSchema).optional(),
+      outbox: external_exports.array(MiddlewareRefSchema).optional()
+    }).optional(),
+    fetch_middleware: external_exports.array(MiddlewareRefSchema).optional(),
+    require_middleware_authorization: external_exports.boolean().default(!0),
+    allow_local_fetch: external_exports.boolean().optional().describe("Opt out of the sys_fetch SSRF guard. When false/absent, sys_fetch refuses loopback, link-local and RFC1918/CGNAT destinations (including after DNS resolution and across redirects)."),
+    table_protections: external_exports.record(external_exports.enum(["none", "append_only", "authorized"])).optional()
+  }),
+  limits: external_exports.object({
+    execution_timeout_ms: external_exports.number().int().positive().default(6e4),
+    max_file_read_tokens: external_exports.number().int().positive().default(3e4),
+    max_file_write_bytes: external_exports.number().int().positive().default(5e6),
+    max_tool_result_tokens: external_exports.number().int().positive().default(16e3),
+    max_tool_result_preview_chars: external_exports.number().int().positive().default(5e3),
+    max_active_turns: external_exports.number().int().positive().nullable().default(null),
+    max_image_size_bytes: external_exports.number().int().positive().optional(),
+    max_audio_size_bytes: external_exports.number().int().positive().optional(),
+    max_video_size_bytes: external_exports.number().int().positive().optional(),
+    suspend_timeout_ms: external_exports.number().int().positive().optional(),
+    hibernate_nudge: external_exports.object({
+      enabled: external_exports.boolean(),
+      interval_ms: external_exports.number().int().positive()
+    }).optional()
+  }),
+  recovery: external_exports.object({
+    auto_retry: external_exports.boolean().default(!0).describe("Retry the failed turn automatically after a transient provider error (rate limit, overload, network)."),
+    max_attempts: external_exports.number().int().positive().max(100).default(5),
+    // Bounded: values past ~2^31 ms overflow Node's setTimeout to 1ms, turning
+    // backoff into a hot retry loop against an already-failing provider.
+    base_delay_ms: external_exports.number().int().positive().max(36e5).default(15e3),
+    max_delay_ms: external_exports.number().int().positive().max(864e5).default(3e5)
+  }).optional(),
+  pre_llm_hook: PreLlmHookConfigSchema.optional(),
+  messaging: external_exports.object({
+    receive: external_exports.boolean().optional().default(!0).describe("Whether the agent participates in the mesh and can receive messages."),
+    mode: external_exports.enum(MESSAGING_MODES).default("proactive"),
+    visibility: external_exports.enum(["directory", "localhost", "lan", "public", "off"]).default("localhost"),
+    inbox_mode: external_exports.boolean().optional(),
+    allow_list: external_exports.array(external_exports.string()).optional(),
+    block_list: external_exports.array(external_exports.string()).optional(),
+    network: external_exports.string().optional().describe("ALF network identifier. Default: 'devnet'.")
+  }),
+  audit: external_exports.object({
+    loop: external_exports.boolean().default(!0),
+    inbox: external_exports.boolean().default(!1),
+    outbox: external_exports.boolean().default(!1),
+    files: external_exports.boolean().default(!1)
+  }).optional(),
+  code_execution: external_exports.object({
+    model_invoke: external_exports.boolean().default(!0),
+    sys_lambda: external_exports.boolean().default(!0),
+    task_resolve: external_exports.boolean().default(!0),
+    loop_inject: external_exports.boolean().default(!0),
+    identity_status: external_exports.boolean().default(!0),
+    get_identity: external_exports.boolean().default(!0),
+    set_identity: external_exports.boolean().default(!0),
+    attestation_list: external_exports.boolean().default(!0),
+    attestation_add: external_exports.boolean().default(!0),
+    attestation_issue: external_exports.boolean().default(!0),
+    network: external_exports.boolean().optional(),
+    packages: external_exports.array(external_exports.object({
+      name: external_exports.string().min(1),
+      version: external_exports.string().min(1)
+    })).max(50).optional(),
+    restricted_methods: external_exports.array(external_exports.string()).optional()
+  }).optional(),
+  /** @deprecated Packages moved to code_execution.packages. */
+  sandbox: external_exports.object({
+    packages: external_exports.array(external_exports.object({
+      name: external_exports.string().min(1),
+      version: external_exports.string().optional(),
+      enabled: external_exports.boolean()
+    })).optional()
+  }).optional(),
+  compute: external_exports.object({
+    enabled: external_exports.boolean().default(!1),
+    packages: external_exports.object({
+      npm: external_exports.array(external_exports.string()).max(100).optional(),
+      pip: external_exports.array(external_exports.string()).max(100).optional()
+    }).optional(),
+    target: external_exports.string().min(1).optional(),
+    allowed_targets: external_exports.array(external_exports.string().min(1)).max(20).optional(),
+    default_target: external_exports.string().min(1).optional(),
+    host_access: external_exports.boolean().optional(),
+    browser: external_exports.boolean().optional().describe("Run the visible desktop (X server, Openbox, tint2, noVNC, managed Chromium) in the isolated container and show the Computer tab (default true). false = headless-only, no viewer.")
+  }).optional(),
+  logging: LoggingConfigSchema.optional(),
+  adapters: external_exports.record(AdapterInstanceConfigSchema).optional(),
+  serving: ServingConfigSchema.optional(),
+  ws_connections: external_exports.array(WsConnectionConfigSchema).optional(),
+  stream_bind: StreamBindConfigSchema.optional(),
+  stream_bindings: external_exports.array(StreamBindingDeclarationSchema).optional(),
+  umbilical_taps: external_exports.array(external_exports.object({
+    name: external_exports.string().min(1),
+    lambda: external_exports.string().min(1),
+    filter: external_exports.object({
+      event_types: external_exports.array(external_exports.string()).default(["*"]),
+      when: external_exports.string().optional(),
+      allow_wildcard: external_exports.boolean().default(!1)
+    }).default({ event_types: ["*"], allow_wildcard: !1 }),
+    exclude_own_origin: external_exports.boolean().default(!0),
+    max_rate_per_sec: external_exports.number().int().positive().default(100)
+  }).superRefine((tap, ctx) => {
+    usesWildcardEventTypes(tap.filter.event_types) && !tap.filter.allow_wildcard && ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: `umbilical_tap "${tap.name}" uses wildcard event_types (${tap.filter.event_types.join(", ")}) but allow_wildcard is not true.`,
+      path: ["filter", "allow_wildcard"]
+    }), warnUnknownEventTypes(`umbilical_tap "${tap.name}"`, tap.filter.event_types);
+  })).default([]),
+  // Opt-in umbilical emission knobs. Absent/false keeps the default (quiet) behaviour.
+  umbilical: external_exports.object({
+    stream_deltas: external_exports.boolean().optional(),
+    // In-memory replay window for reconnecting observers. Nothing is persisted.
+    log: external_exports.object({
+      enabled: external_exports.boolean().optional(),
+      max_events: external_exports.number().int().positive().optional(),
+      exclude_types: external_exports.array(external_exports.string()).optional()
+    }).optional()
+  }).optional(),
+  providers: external_exports.array(external_exports.object({
+    id: external_exports.string().min(1),
+    type: external_exports.enum(["anthropic", "openai", "openai-compatible", "openrouter"]),
+    name: external_exports.string(),
+    baseUrl: external_exports.string(),
+    preset: external_exports.string().optional(),
+    defaultModel: external_exports.string().optional(),
+    params: external_exports.array(external_exports.object({ key: external_exports.string(), value: external_exports.string() })).optional(),
+    requestDelayMs: external_exports.number().optional()
+  })).optional(),
+  // Side loops only; 'main' is implicit. Absent = none — pre-loops files stay
+  // byte-identical because nothing writes the empty array back.
+  loops: LoopsConfigSchema.optional(),
+  mcp: external_exports.object({
+    servers: external_exports.array(external_exports.object({
+      name: external_exports.string(),
+      transport: external_exports.enum(["stdio", "http"]),
+      command: external_exports.string().optional(),
+      args: external_exports.array(external_exports.string()).optional(),
+      url: external_exports.string().optional(),
+      // Remote HTTP endpoint uses interactive OAuth (browser sign-in) instead
+      // of a static bearer/header token. Must survive `.adf` round-trips — the
+      // connect paths key their sealed token by the pinned url when this is set.
+      oauth: external_exports.boolean().optional(),
+      headers: external_exports.record(external_exports.string()).optional(),
+      header_env: external_exports.array(external_exports.object({
+        header: external_exports.string(),
+        env: external_exports.string(),
+        required: external_exports.boolean().optional(),
+        credential_ref: external_exports.string().optional()
+      })).optional(),
+      bearer_token_env_var: external_exports.string().optional(),
+      env: external_exports.record(external_exports.string()).optional(),
+      env_keys: external_exports.array(external_exports.string()).optional(),
+      env_schema: external_exports.array(external_exports.object({
+        key: external_exports.string(),
+        scope: external_exports.enum(["agent", "app"]),
+        required: external_exports.boolean().optional(),
+        description: external_exports.string().optional(),
+        credential_ref: external_exports.string().optional()
+      })).optional(),
+      npm_package: external_exports.string().optional(),
+      pypi_package: external_exports.string().optional(),
+      source: external_exports.string().optional(),
+      tool_call_timeout_ms: external_exports.number().positive().optional(),
+      available_tools: external_exports.array(external_exports.object({
+        name: external_exports.string(),
+        description: external_exports.string().optional(),
+        input_schema: external_exports.record(external_exports.unknown())
+      })).optional(),
+      restricted: external_exports.boolean().optional(),
+      host_requested: external_exports.boolean().optional(),
+      run_location: external_exports.enum(["host", "shared"]).optional(),
+      credential_files: external_exports.array(external_exports.object({
+        path: external_exports.string().min(1),
+        required: external_exports.boolean().optional(),
+        write_back: external_exports.boolean().optional()
+      })).optional()
+    })),
+    new_tools_restricted: external_exports.boolean().optional()
+  }).optional(),
+  metadata: external_exports.object({
+    created_at: external_exports.string(),
+    updated_at: external_exports.string(),
+    author: external_exports.string().optional(),
+    tags: external_exports.array(external_exports.string()).optional(),
+    version: external_exports.string().optional()
+  })
+}), TimerOnceSchema = external_exports.object({
+  mode: external_exports.literal("once"),
+  at: external_exports.number().int().positive()
+}), TimerIntervalSchema = external_exports.object({
+  mode: external_exports.literal("interval"),
+  every_ms: external_exports.number().int().positive(),
+  start_at: external_exports.number().int().positive().optional(),
+  end_at: external_exports.number().int().positive().optional(),
+  max_runs: external_exports.number().int().positive().optional()
+}), TimerCronSchema = external_exports.object({
+  mode: external_exports.literal("cron"),
+  cron: external_exports.string(),
+  end_at: external_exports.number().int().positive().optional(),
+  max_runs: external_exports.number().int().positive().optional()
+}), TimerScheduleSchema = external_exports.discriminatedUnion("mode", [
+  TimerOnceSchema,
+  TimerIntervalSchema,
+  TimerCronSchema
+]);
+
+export {
+  ToolDeclarationSchema,
+  TriggersConfigV3Schema,
+  ServingApiRouteSchema,
+  WsConnectionConfigSchema,
+  UmbilicalFilterSchema,
+  StreamBindEndpointSchema,
+  BindOptionsSchema,
+  StreamBindingDeclarationSchema,
+  StreamBindConfigSchema,
+  ServingPublicConfigSchema,
+  ServingSharedConfigSchema,
+  ServingConfigSchema,
+  AdapterInstanceConfigSchema,
+  ModelConfigSchema,
+  LOOP_NAME_PATTERN,
+  LOOP_NAME_RULE,
+  LOOP_GOAL_MAX_CHARS,
+  LOOP_TOOLS_MAX,
+  MAX_SIDE_LOOPS,
+  LoopConfigSchema,
+  LoopsConfigSchema,
+  PreLlmHookConfigSchema,
+  AgentConfigSchema,
+  TimerScheduleSchema
+};