@gestaltrun/dsh-workspace-bundle 0.0.0-stage → 0.1.1

package/lib/types/agent-config-contract/agent-configs.d.ts

@@ -0,0 +1,621 @@
+/** 内置 workspace Agent 配置：查询本人当前店铺租户的分配，兼容性由 Host 检查。 @module */
+import { z } from 'zod';
+/** 可扩展的内置 workspace 种类；首个种类为 cs-hosting。 */
+export declare const WorkspaceKind: z.ZodString;
+/** Agent 配置登记的完整元数据；sha256 来自经 PR 审阅的规则文件。 */
+export declare const AgentConfig: z.ZodObject<{
+    workspaceKind: z.ZodString;
+    version: z.ZodString;
+    sha256: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    downloadUrl: z.ZodURL;
+    hostContentApiRange: z.ZodString;
+    releaseNotes: z.ZodString;
+}, z.core.$strip>;
+/** builtin 表示没有分配：已有下载版本时保留当前版本，从未下载时使用安装包内置版本。 */
+export declare const AgentConfigAssignment: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    source: z.ZodLiteral<"builtin">;
+    tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+    userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+    workspaceKind: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    source: z.ZodLiteral<"registry">;
+    tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+    userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+    workspaceKind: z.ZodString;
+    agentConfig: z.ZodObject<{
+        workspaceKind: z.ZodString;
+        version: z.ZodString;
+        sha256: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        downloadUrl: z.ZodURL;
+        hostContentApiRange: z.ZodString;
+        releaseNotes: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>], "source">;
+/** Host 查询结果。 */
+export type AgentConfigAssignment = z.infer<typeof AgentConfigAssignment>;
+/** 路径中的租户必须是会话当前租户；用户由会话确定，不接受调用方指定。 */
+export declare const AgentConfigParams: z.ZodObject<{
+    tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+    workspaceKind: z.ZodString;
+}, z.core.$strip>;
+/** Host 在启动和轮询时查询；不按版本大小排序，回退可返回更低版本；服务不可达时保留当前版本。 */
+export declare const getAgentConfigAssignment: {
+    readonly method: "get";
+    readonly path: "/v1/tenants/{tenantId}/agent-configs/{workspaceKind}";
+    readonly summary: "查询本人内置 workspace Agent 配置分配";
+    readonly auth: "tenant";
+    readonly request: {
+        readonly params: z.ZodObject<{
+            tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+            workspaceKind: z.ZodString;
+        }, z.core.$strip>;
+        readonly query: z.ZodObject<{}, z.core.$strict>;
+    };
+    readonly responses: {
+        readonly 200: {
+            readonly description: "分配版本或使用内置版本；Host 检查兼容范围并核对下载字节的 sha256";
+            readonly schema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                source: z.ZodLiteral<"builtin">;
+                tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+                userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+                workspaceKind: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                source: z.ZodLiteral<"registry">;
+                tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+                userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+                workspaceKind: z.ZodString;
+                agentConfig: z.ZodObject<{
+                    workspaceKind: z.ZodString;
+                    version: z.ZodString;
+                    sha256: z.ZodString;
+                    sizeBytes: z.ZodNumber;
+                    downloadUrl: z.ZodURL;
+                    hostContentApiRange: z.ZodString;
+                    releaseNotes: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>], "source">;
+            readonly headers: {
+                readonly 'Cache-Control': {
+                    readonly description: "每次读取当前分配，及时观察回退";
+                    readonly schema: z.ZodLiteral<"no-store">;
+                };
+            };
+        };
+    };
+    readonly problems: {
+        readonly 401: readonly ["SESSION_REQUIRED", "SESSION_EXPIRED"];
+        readonly 403: readonly ["NO_CURRENT_TENANT", "NOT_A_MEMBER", "AGENT_CONFIGS_UNAVAILABLE"];
+        readonly 409: readonly ["TENANT_NOT_CURRENT"];
+    };
+};
+/** 双模块观测与控制仅支持已实现的模块；不设默认种类。 */
+export declare const AgentConfigModule: z.ZodEnum<{
+    "cs-hosting": "cs-hosting";
+    "resource-intake": "resource-intake";
+}>;
+export type AgentConfigModule = z.infer<typeof AgentConfigModule>;
+export declare const AgentConfigDigest: z.ZodString;
+/** 完整身份包括 build metadata；builtin 没有远端归档摘要。 */
+export declare const AgentConfigCommitted: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    source: z.ZodLiteral<"builtin">;
+    version: z.ZodString;
+    sha256: z.ZodNull;
+}, z.core.$strict>, z.ZodObject<{
+    source: z.ZodLiteral<"registry">;
+    version: z.ZodString;
+    sha256: z.ZodString;
+}, z.core.$strict>], "source">;
+export declare const AgentConfigTarget: z.ZodObject<{
+    version: z.ZodString;
+    sha256: z.ZodString;
+}, z.core.$strict>;
+/** 已提交版本恢复/采用的独立阻断原因；不随候选目标拒绝变化，不含诊断正文。 */
+export declare const AgentConfigBlockingFailure: z.ZodObject<{
+    code: z.ZodEnum<{
+        AGENT_CONFIG_QUERY_FAILED: "AGENT_CONFIG_QUERY_FAILED";
+        AGENT_CONFIG_INVALID: "AGENT_CONFIG_INVALID";
+        AGENT_CONFIG_INCOMPATIBLE: "AGENT_CONFIG_INCOMPATIBLE";
+        AGENT_CONFIG_DIGEST_MISMATCH: "AGENT_CONFIG_DIGEST_MISMATCH";
+        AGENT_CONFIG_DOWNLOAD_FAILED: "AGENT_CONFIG_DOWNLOAD_FAILED";
+        AGENT_CONFIG_APPLY_FAILED: "AGENT_CONFIG_APPLY_FAILED";
+        AGENT_CONFIG_SCOPE_CHANGED: "AGENT_CONFIG_SCOPE_CHANGED";
+    }>;
+    committed: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"builtin">;
+        version: z.ZodString;
+        sha256: z.ZodNull;
+    }, z.core.$strict>, z.ZodObject<{
+        source: z.ZodLiteral<"registry">;
+        version: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>], "source">;
+}, z.core.$strict>;
+export type AgentConfigBlockingFailure = z.infer<typeof AgentConfigBlockingFailure>;
+/** 固定码与精确目标归因；查询失败不能作为采用拒绝。 */
+export declare const ModuleAgentConfigSnapshot: z.ZodObject<{
+    hostAgentConfigApiVersion: z.ZodString;
+    runtimeApiVersion: z.ZodNullable<z.ZodString>;
+    current: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"builtin">;
+        version: z.ZodString;
+        sha256: z.ZodNull;
+    }, z.core.$strict>, z.ZodObject<{
+        source: z.ZodLiteral<"registry">;
+        version: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>], "source">;
+    pending: z.ZodNullable<z.ZodObject<{
+        version: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>>;
+    blocked: z.ZodBoolean;
+    lastRejection: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            AGENT_CONFIG_QUERY_FAILED: "AGENT_CONFIG_QUERY_FAILED";
+            AGENT_CONFIG_INVALID: "AGENT_CONFIG_INVALID";
+            AGENT_CONFIG_INCOMPATIBLE: "AGENT_CONFIG_INCOMPATIBLE";
+            AGENT_CONFIG_DIGEST_MISMATCH: "AGENT_CONFIG_DIGEST_MISMATCH";
+            AGENT_CONFIG_DOWNLOAD_FAILED: "AGENT_CONFIG_DOWNLOAD_FAILED";
+            AGENT_CONFIG_APPLY_FAILED: "AGENT_CONFIG_APPLY_FAILED";
+            AGENT_CONFIG_SCOPE_CHANGED: "AGENT_CONFIG_SCOPE_CHANGED";
+        }>;
+        target: z.ZodNullable<z.ZodObject<{
+            version: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    blockingFailure: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            AGENT_CONFIG_QUERY_FAILED: "AGENT_CONFIG_QUERY_FAILED";
+            AGENT_CONFIG_INVALID: "AGENT_CONFIG_INVALID";
+            AGENT_CONFIG_INCOMPATIBLE: "AGENT_CONFIG_INCOMPATIBLE";
+            AGENT_CONFIG_DIGEST_MISMATCH: "AGENT_CONFIG_DIGEST_MISMATCH";
+            AGENT_CONFIG_DOWNLOAD_FAILED: "AGENT_CONFIG_DOWNLOAD_FAILED";
+            AGENT_CONFIG_APPLY_FAILED: "AGENT_CONFIG_APPLY_FAILED";
+            AGENT_CONFIG_SCOPE_CHANGED: "AGENT_CONFIG_SCOPE_CHANGED";
+        }>;
+        committed: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"builtin">;
+            version: z.ZodString;
+            sha256: z.ZodNull;
+        }, z.core.$strict>, z.ZodObject<{
+            source: z.ZodLiteral<"registry">;
+            version: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>], "source">;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type ModuleAgentConfigSnapshot = z.infer<typeof ModuleAgentConfigSnapshot>;
+/** 服务端从当前有效 sandbox 会话和活动 placement key 解析的绑定；不是调用方可指定的身份。 */
+export declare const AgentConfigSandboxBinding: z.ZodObject<{
+    sandboxId: z.ZodUUID;
+    instanceId: z.ZodString;
+    sandboxGeneration: z.ZodNumber;
+}, z.core.$strict>;
+export type AgentConfigSandboxBinding = z.infer<typeof AgentConfigSandboxBinding>;
+/** 云端读回只要求现有 sandbox/instance 配置；代次由服务端提供。 */
+export declare const ReadAgentConfigSandboxHostQuery: z.ZodObject<{
+    sandboxId: z.ZodUUID;
+    instanceId: z.ZodString;
+}, z.core.$strict>;
+export type ReadAgentConfigSandboxHostQuery = z.infer<typeof ReadAgentConfigSandboxHostQuery>;
+/** 外层绑定为本次认证的当前实例；内层为已存注册，可来自旧实例。null 表示尚无注册。 */
+export declare const AgentConfigSandboxHostReadback: z.ZodObject<{
+    tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+    userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+    workspaceKind: z.ZodEnum<{
+        "cs-hosting": "cs-hosting";
+        "resource-intake": "resource-intake";
+    }>;
+    sandboxBinding: z.ZodObject<{
+        sandboxId: z.ZodUUID;
+        instanceId: z.ZodString;
+        sandboxGeneration: z.ZodNumber;
+    }, z.core.$strict>;
+    registration: z.ZodNullable<z.ZodObject<{
+        hostId: z.ZodUUID;
+        generation: z.ZodNumber;
+        bootSequence: z.ZodNumber;
+        sandboxBinding: z.ZodObject<{
+            sandboxId: z.ZodUUID;
+            instanceId: z.ZodString;
+            sandboxGeneration: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type AgentConfigSandboxHostReadback = z.infer<typeof AgentConfigSandboxHostReadback>;
+/** bootSequence 随 device 持久递增；sandbox 丢失状态时先在本地锁内读回，再携带绑定与明确代次 CAS，不盲目重试。 */
+export declare const RegisterAgentConfigHostRequest: z.ZodObject<{
+    hostId: z.ZodUUID;
+    bootId: z.ZodUUID;
+    requestId: z.ZodUUID;
+    bootSequence: z.ZodNumber;
+    expectedGeneration: z.ZodNumber;
+    explicitActivation: z.ZodOptional<z.ZodBoolean>;
+    sandboxBinding: z.ZodOptional<z.ZodObject<{
+        sandboxId: z.ZodUUID;
+        instanceId: z.ZodString;
+        sandboxGeneration: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type RegisterAgentConfigHostRequest = z.infer<typeof RegisterAgentConfigHostRequest>;
+export declare const AgentConfigHostRegistration: z.ZodObject<{
+    workspaceKind: z.ZodEnum<{
+        "cs-hosting": "cs-hosting";
+        "resource-intake": "resource-intake";
+    }>;
+    hostId: z.ZodUUID;
+    generation: z.ZodNumber;
+    holder: z.ZodObject<{
+        kind: z.ZodEnum<{
+            installation: "installation";
+            sandbox: "sandbox";
+        }>;
+        id: z.ZodUUID;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const ReportAgentConfigHostRequest: z.ZodObject<{
+    hostAgentConfigApiVersion: z.ZodString;
+    runtimeApiVersion: z.ZodNullable<z.ZodString>;
+    current: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"builtin">;
+        version: z.ZodString;
+        sha256: z.ZodNull;
+    }, z.core.$strict>, z.ZodObject<{
+        source: z.ZodLiteral<"registry">;
+        version: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>], "source">;
+    pending: z.ZodNullable<z.ZodObject<{
+        version: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>>;
+    blocked: z.ZodBoolean;
+    lastRejection: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            AGENT_CONFIG_QUERY_FAILED: "AGENT_CONFIG_QUERY_FAILED";
+            AGENT_CONFIG_INVALID: "AGENT_CONFIG_INVALID";
+            AGENT_CONFIG_INCOMPATIBLE: "AGENT_CONFIG_INCOMPATIBLE";
+            AGENT_CONFIG_DIGEST_MISMATCH: "AGENT_CONFIG_DIGEST_MISMATCH";
+            AGENT_CONFIG_DOWNLOAD_FAILED: "AGENT_CONFIG_DOWNLOAD_FAILED";
+            AGENT_CONFIG_APPLY_FAILED: "AGENT_CONFIG_APPLY_FAILED";
+            AGENT_CONFIG_SCOPE_CHANGED: "AGENT_CONFIG_SCOPE_CHANGED";
+        }>;
+        target: z.ZodNullable<z.ZodObject<{
+            version: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    blockingFailure: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            AGENT_CONFIG_QUERY_FAILED: "AGENT_CONFIG_QUERY_FAILED";
+            AGENT_CONFIG_INVALID: "AGENT_CONFIG_INVALID";
+            AGENT_CONFIG_INCOMPATIBLE: "AGENT_CONFIG_INCOMPATIBLE";
+            AGENT_CONFIG_DIGEST_MISMATCH: "AGENT_CONFIG_DIGEST_MISMATCH";
+            AGENT_CONFIG_DOWNLOAD_FAILED: "AGENT_CONFIG_DOWNLOAD_FAILED";
+            AGENT_CONFIG_APPLY_FAILED: "AGENT_CONFIG_APPLY_FAILED";
+            AGENT_CONFIG_SCOPE_CHANGED: "AGENT_CONFIG_SCOPE_CHANGED";
+        }>;
+        committed: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"builtin">;
+            version: z.ZodString;
+            sha256: z.ZodNull;
+        }, z.core.$strict>, z.ZodObject<{
+            source: z.ZodLiteral<"registry">;
+            version: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>], "source">;
+    }, z.core.$strict>>>;
+    generation: z.ZodNumber;
+    sequence: z.ZodNumber;
+}, z.core.$strict>;
+export type ReportAgentConfigHostRequest = z.infer<typeof ReportAgentConfigHostRequest>;
+export declare const AgentConfigHostReceipt: z.ZodObject<{
+    generation: z.ZodNumber;
+    sequence: z.ZodNumber;
+    reportedAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export declare const getAgentConfigSandboxHost: {
+    readonly method: "get";
+    readonly path: "/v1/tenants/{tenantId}/agent-configs/{workspaceKind}/hosts/current";
+    readonly summary: "只读本人当前沙箱模块 Host 注册，不允许本机安装调用";
+    readonly auth: "tenant";
+    readonly request: {
+        readonly params: z.ZodObject<{
+            tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+            workspaceKind: z.ZodString;
+        }, z.core.$strip>;
+        readonly query: z.ZodObject<{
+            sandboxId: z.ZodUUID;
+            instanceId: z.ZodString;
+        }, z.core.$strict>;
+    };
+    readonly responses: {
+        readonly 200: {
+            readonly description: "sandboxId/instanceId 须匹配当前已认证 sandbox；返回服务端代次及已存注册，读回不授予业务权限，重新注册须携带完整 sandboxBinding 和明确 expectedGeneration";
+            readonly schema: z.ZodObject<{
+                tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+                userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+                workspaceKind: z.ZodEnum<{
+                    "cs-hosting": "cs-hosting";
+                    "resource-intake": "resource-intake";
+                }>;
+                sandboxBinding: z.ZodObject<{
+                    sandboxId: z.ZodUUID;
+                    instanceId: z.ZodString;
+                    sandboxGeneration: z.ZodNumber;
+                }, z.core.$strict>;
+                registration: z.ZodNullable<z.ZodObject<{
+                    hostId: z.ZodUUID;
+                    generation: z.ZodNumber;
+                    bootSequence: z.ZodNumber;
+                    sandboxBinding: z.ZodObject<{
+                        sandboxId: z.ZodUUID;
+                        instanceId: z.ZodString;
+                        sandboxGeneration: z.ZodNumber;
+                    }, z.core.$strict>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>;
+            readonly headers: {
+                readonly 'Cache-Control': {
+                    readonly description: "观测与回执不得缓存";
+                    readonly schema: z.ZodLiteral<"no-store">;
+                };
+            };
+        };
+    };
+    readonly problems: {
+        readonly 401: readonly ["SESSION_REQUIRED", "SESSION_EXPIRED"];
+        readonly 403: readonly ["NO_CURRENT_TENANT", "NOT_A_MEMBER", "AGENT_CONFIGS_UNAVAILABLE", "SANDBOX_SESSION_UNBOUND"];
+        readonly 404: readonly ["NOT_FOUND"];
+        readonly 409: readonly ["TENANT_NOT_CURRENT", "VERSION_CONFLICT", "OPERATION_CONFLICT", "LOCAL_HOST_REPLACED"];
+        readonly 503: readonly ["SERVICE_UNAVAILABLE"];
+    };
+};
+export declare const registerAgentConfigHost: {
+    readonly method: "post";
+    readonly path: "/v1/tenants/{tenantId}/agent-configs/{workspaceKind}/hosts/register";
+    readonly summary: "注册本人模块 Host 运行，不取得业务写权限";
+    readonly auth: "tenant";
+    readonly request: {
+        readonly params: z.ZodObject<{
+            tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+            workspaceKind: z.ZodString;
+        }, z.core.$strip>;
+        readonly body: z.ZodObject<{
+            hostId: z.ZodUUID;
+            bootId: z.ZodUUID;
+            requestId: z.ZodUUID;
+            bootSequence: z.ZodNumber;
+            expectedGeneration: z.ZodNumber;
+            explicitActivation: z.ZodOptional<z.ZodBoolean>;
+            sandboxBinding: z.ZodOptional<z.ZodObject<{
+                sandboxId: z.ZodUUID;
+                instanceId: z.ZodString;
+                sandboxGeneration: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+    };
+    readonly responses: {
+        readonly 200: {
+            readonly description: "服务端绑定 holder；提供 sandboxBinding 时须在事务内匹配当前 sandbox/instance/代次，installation 不接受该字段；新运行以 bootSequence 和 expectedGeneration 比较更新，旧运行不可复活";
+            readonly schema: z.ZodObject<{
+                workspaceKind: z.ZodEnum<{
+                    "cs-hosting": "cs-hosting";
+                    "resource-intake": "resource-intake";
+                }>;
+                hostId: z.ZodUUID;
+                generation: z.ZodNumber;
+                holder: z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        installation: "installation";
+                        sandbox: "sandbox";
+                    }>;
+                    id: z.ZodUUID;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            readonly headers: {
+                readonly 'Cache-Control': {
+                    readonly description: "观测与回执不得缓存";
+                    readonly schema: z.ZodLiteral<"no-store">;
+                };
+            };
+        };
+    };
+    readonly problems: {
+        readonly 401: readonly ["SESSION_REQUIRED", "SESSION_EXPIRED"];
+        readonly 403: readonly ["NO_CURRENT_TENANT", "NOT_A_MEMBER", "AGENT_CONFIGS_UNAVAILABLE", "SANDBOX_SESSION_UNBOUND"];
+        readonly 404: readonly ["NOT_FOUND"];
+        readonly 409: readonly ["TENANT_NOT_CURRENT", "VERSION_CONFLICT", "OPERATION_CONFLICT", "LOCAL_HOST_REPLACED"];
+        readonly 503: readonly ["SERVICE_UNAVAILABLE"];
+    };
+};
+export declare const reportAgentConfigHost: {
+    readonly method: "put";
+    readonly path: "/v1/tenants/{tenantId}/agent-configs/{workspaceKind}/hosts/{hostId}/observation";
+    readonly summary: "上报本人模块 Host 的完整采用快照";
+    readonly auth: "tenant";
+    readonly request: {
+        readonly params: z.ZodObject<{
+            tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+            workspaceKind: z.ZodString;
+            hostId: z.ZodUUID;
+        }, z.core.$strip>;
+        readonly body: z.ZodObject<{
+            hostAgentConfigApiVersion: z.ZodString;
+            runtimeApiVersion: z.ZodNullable<z.ZodString>;
+            current: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                source: z.ZodLiteral<"builtin">;
+                version: z.ZodString;
+                sha256: z.ZodNull;
+            }, z.core.$strict>, z.ZodObject<{
+                source: z.ZodLiteral<"registry">;
+                version: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>], "source">;
+            pending: z.ZodNullable<z.ZodObject<{
+                version: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>>;
+            blocked: z.ZodBoolean;
+            lastRejection: z.ZodNullable<z.ZodObject<{
+                code: z.ZodEnum<{
+                    AGENT_CONFIG_QUERY_FAILED: "AGENT_CONFIG_QUERY_FAILED";
+                    AGENT_CONFIG_INVALID: "AGENT_CONFIG_INVALID";
+                    AGENT_CONFIG_INCOMPATIBLE: "AGENT_CONFIG_INCOMPATIBLE";
+                    AGENT_CONFIG_DIGEST_MISMATCH: "AGENT_CONFIG_DIGEST_MISMATCH";
+                    AGENT_CONFIG_DOWNLOAD_FAILED: "AGENT_CONFIG_DOWNLOAD_FAILED";
+                    AGENT_CONFIG_APPLY_FAILED: "AGENT_CONFIG_APPLY_FAILED";
+                    AGENT_CONFIG_SCOPE_CHANGED: "AGENT_CONFIG_SCOPE_CHANGED";
+                }>;
+                target: z.ZodNullable<z.ZodObject<{
+                    version: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            blockingFailure: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                code: z.ZodEnum<{
+                    AGENT_CONFIG_QUERY_FAILED: "AGENT_CONFIG_QUERY_FAILED";
+                    AGENT_CONFIG_INVALID: "AGENT_CONFIG_INVALID";
+                    AGENT_CONFIG_INCOMPATIBLE: "AGENT_CONFIG_INCOMPATIBLE";
+                    AGENT_CONFIG_DIGEST_MISMATCH: "AGENT_CONFIG_DIGEST_MISMATCH";
+                    AGENT_CONFIG_DOWNLOAD_FAILED: "AGENT_CONFIG_DOWNLOAD_FAILED";
+                    AGENT_CONFIG_APPLY_FAILED: "AGENT_CONFIG_APPLY_FAILED";
+                    AGENT_CONFIG_SCOPE_CHANGED: "AGENT_CONFIG_SCOPE_CHANGED";
+                }>;
+                committed: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    source: z.ZodLiteral<"builtin">;
+                    version: z.ZodString;
+                    sha256: z.ZodNull;
+                }, z.core.$strict>, z.ZodObject<{
+                    source: z.ZodLiteral<"registry">;
+                    version: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>], "source">;
+            }, z.core.$strict>>>;
+            generation: z.ZodNumber;
+            sequence: z.ZodNumber;
+        }, z.core.$strict>;
+    };
+    readonly responses: {
+        readonly 200: {
+            readonly description: "同序同内容返回原接收时间，同序异内容或旧代次冲突；时间由服务端确定";
+            readonly schema: z.ZodObject<{
+                generation: z.ZodNumber;
+                sequence: z.ZodNumber;
+                reportedAt: z.ZodISODateTime;
+            }, z.core.$strict>;
+            readonly headers: {
+                readonly 'Cache-Control': {
+                    readonly description: "观测与回执不得缓存";
+                    readonly schema: z.ZodLiteral<"no-store">;
+                };
+            };
+        };
+    };
+    readonly problems: {
+        readonly 401: readonly ["SESSION_REQUIRED", "SESSION_EXPIRED"];
+        readonly 403: readonly ["NO_CURRENT_TENANT", "NOT_A_MEMBER", "AGENT_CONFIGS_UNAVAILABLE", "SANDBOX_SESSION_UNBOUND"];
+        readonly 404: readonly ["NOT_FOUND"];
+        readonly 409: readonly ["TENANT_NOT_CURRENT", "VERSION_CONFLICT", "OPERATION_CONFLICT", "LOCAL_HOST_REPLACED"];
+        readonly 503: readonly ["SERVICE_UNAVAILABLE"];
+    };
+};
+/** 仅新模块契约暴露可选runtime要求；旧assignment显式投影原AgentConfig。 */
+export declare const ModuleAgentConfigMetadata: z.ZodObject<{
+    workspaceKind: z.ZodString;
+    version: z.ZodString;
+    sha256: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    downloadUrl: z.ZodURL;
+    hostContentApiRange: z.ZodString;
+    releaseNotes: z.ZodString;
+    runtimeApiRange: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const ModuleAgentConfigAssignment: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    source: z.ZodLiteral<"builtin">;
+    tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+    userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+    workspaceKind: z.ZodEnum<{
+        "cs-hosting": "cs-hosting";
+        "resource-intake": "resource-intake";
+    }>;
+}, z.core.$strip>, z.ZodObject<{
+    source: z.ZodLiteral<"registry">;
+    tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+    userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+    workspaceKind: z.ZodEnum<{
+        "cs-hosting": "cs-hosting";
+        "resource-intake": "resource-intake";
+    }>;
+    agentConfig: z.ZodObject<{
+        workspaceKind: z.ZodString;
+        version: z.ZodString;
+        sha256: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        downloadUrl: z.ZodURL;
+        hostContentApiRange: z.ZodString;
+        releaseNotes: z.ZodString;
+        runtimeApiRange: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>], "source">;
+export declare const getModuleAgentConfigAssignment: {
+    readonly path: "/v1/tenants/{tenantId}/agent-configs/{workspaceKind}/module";
+    readonly summary: "查询显式模块分配与runtime要求";
+    readonly responses: {
+        readonly 200: {
+            readonly schema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                source: z.ZodLiteral<"builtin">;
+                tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+                userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+                workspaceKind: z.ZodEnum<{
+                    "cs-hosting": "cs-hosting";
+                    "resource-intake": "resource-intake";
+                }>;
+            }, z.core.$strip>, z.ZodObject<{
+                source: z.ZodLiteral<"registry">;
+                tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+                userId: z.core.$ZodBranded<z.ZodUUID, "UserId", "out">;
+                workspaceKind: z.ZodEnum<{
+                    "cs-hosting": "cs-hosting";
+                    "resource-intake": "resource-intake";
+                }>;
+                agentConfig: z.ZodObject<{
+                    workspaceKind: z.ZodString;
+                    version: z.ZodString;
+                    sha256: z.ZodString;
+                    sizeBytes: z.ZodNumber;
+                    downloadUrl: z.ZodURL;
+                    hostContentApiRange: z.ZodString;
+                    releaseNotes: z.ZodString;
+                    runtimeApiRange: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>], "source">;
+            readonly description: "分配版本或使用内置版本；Host 检查兼容范围并核对下载字节的 sha256";
+            readonly headers: {
+                readonly 'Cache-Control': {
+                    readonly description: "每次读取当前分配，及时观察回退";
+                    readonly schema: z.ZodLiteral<"no-store">;
+                };
+            };
+        };
+    };
+    readonly problems: {
+        readonly 401: readonly ["SESSION_REQUIRED", "SESSION_EXPIRED"];
+        readonly 403: readonly ["NO_CURRENT_TENANT", "NOT_A_MEMBER", "AGENT_CONFIGS_UNAVAILABLE", "SANDBOX_SESSION_UNBOUND"];
+        readonly 404: readonly ["NOT_FOUND"];
+        readonly 409: readonly ["TENANT_NOT_CURRENT", "VERSION_CONFLICT", "OPERATION_CONFLICT", "LOCAL_HOST_REPLACED"];
+        readonly 503: readonly ["SERVICE_UNAVAILABLE"];
+    };
+    readonly method: "get";
+    readonly auth: "tenant";
+    readonly request: {
+        readonly params: z.ZodObject<{
+            tenantId: z.core.$ZodBranded<z.ZodUUID, "TenantId", "out">;
+            workspaceKind: z.ZodString;
+        }, z.core.$strip>;
+        readonly query: z.ZodObject<{}, z.core.$strict>;
+    };
+};