@husk-ai/core 0.1.1

package/dist/spec.d.ts

@@ -0,0 +1,832 @@
+import { z } from 'zod';
+/**
+ * husk.yaml -- the whole agent in one file.
+ *
+ * This is the artifact a chat becomes. It is portable, diffable, reviewable,
+ * and it is the only thing the runtime needs in order to bring a bot up.
+ */
+export declare const NetworkPolicySchema: z.ZodObject<{
+    mode: z.ZodDefault<z.ZodEnum<["none", "egress", "full"]>>;
+    allow: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    deny: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    mode: "none" | "egress" | "full";
+    deny?: string[] | undefined;
+    allow?: string[] | undefined;
+}, {
+    deny?: string[] | undefined;
+    mode?: "none" | "egress" | "full" | undefined;
+    allow?: string[] | undefined;
+}>;
+export declare const ComputerConfigSchema: z.ZodObject<{
+    /** false disables the machine entirely; true accepts every default. */
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    provider: z.ZodOptional<z.ZodString>;
+    flavor: z.ZodDefault<z.ZodEnum<["base", "python", "node", "full"]>>;
+    image: z.ZodOptional<z.ZodString>;
+    cpus: z.ZodOptional<z.ZodNumber>;
+    memoryMb: z.ZodOptional<z.ZodNumber>;
+    diskMb: z.ZodOptional<z.ZodNumber>;
+    idleTimeoutSec: z.ZodDefault<z.ZodNumber>;
+    maxLifetimeSec: z.ZodDefault<z.ZodNumber>;
+    network: z.ZodDefault<z.ZodObject<{
+        mode: z.ZodDefault<z.ZodEnum<["none", "egress", "full"]>>;
+        allow: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        deny: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        mode: "none" | "egress" | "full";
+        deny?: string[] | undefined;
+        allow?: string[] | undefined;
+    }, {
+        deny?: string[] | undefined;
+        mode?: "none" | "egress" | "full" | undefined;
+        allow?: string[] | undefined;
+    }>>;
+    packages: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    setup: z.ZodOptional<z.ZodString>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    workdir: z.ZodDefault<z.ZodString>;
+    persist: z.ZodDefault<z.ZodBoolean>;
+    mounts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        source: z.ZodString;
+        target: z.ZodString;
+        readonly: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        source: string;
+        target: string;
+        readonly: boolean;
+    }, {
+        source: string;
+        target: string;
+        readonly?: boolean | undefined;
+    }>, "many">>;
+    /**
+     * Unprivileged user inside the machine. Omitted means "whatever the provider
+     * defaults to" (`husk` on the container images), which is why there is no
+     * default here: writing one in would override a provider that knows better.
+     */
+    user: z.ZodOptional<z.ZodString>;
+    /**
+     * Provider-specific configuration, carried through to `ComputerSpec.labels`.
+     *
+     * This is how a single husk.yaml points itself at a particular box or Fly app
+     * without an environment variable: `husk.ssh`, `husk.ssh.key`, `husk.fly.app`,
+     * `husk.fly.region`, `husk.fly.ports`. The ssh and fly providers read these
+     * first and fall back to the environment.
+     *
+     * Optional rather than `.default({})` so a spec that never mentions labels
+     * serialises exactly as it did before.
+     */
+    labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    flavor: "full" | "base" | "python" | "node";
+    idleTimeoutSec: number;
+    maxLifetimeSec: number;
+    network: {
+        mode: "none" | "egress" | "full";
+        deny?: string[] | undefined;
+        allow?: string[] | undefined;
+    };
+    packages: string[];
+    env: Record<string, string>;
+    workdir: string;
+    persist: boolean;
+    mounts: {
+        source: string;
+        target: string;
+        readonly: boolean;
+    }[];
+    provider?: string | undefined;
+    image?: string | undefined;
+    cpus?: number | undefined;
+    memoryMb?: number | undefined;
+    diskMb?: number | undefined;
+    setup?: string | undefined;
+    user?: string | undefined;
+    labels?: Record<string, string> | undefined;
+}, {
+    enabled?: boolean | undefined;
+    provider?: string | undefined;
+    flavor?: "full" | "base" | "python" | "node" | undefined;
+    image?: string | undefined;
+    cpus?: number | undefined;
+    memoryMb?: number | undefined;
+    diskMb?: number | undefined;
+    idleTimeoutSec?: number | undefined;
+    maxLifetimeSec?: number | undefined;
+    network?: {
+        deny?: string[] | undefined;
+        mode?: "none" | "egress" | "full" | undefined;
+        allow?: string[] | undefined;
+    } | undefined;
+    packages?: string[] | undefined;
+    setup?: string | undefined;
+    env?: Record<string, string> | undefined;
+    workdir?: string | undefined;
+    persist?: boolean | undefined;
+    mounts?: {
+        source: string;
+        target: string;
+        readonly?: boolean | undefined;
+    }[] | undefined;
+    user?: string | undefined;
+    labels?: Record<string, string> | undefined;
+}>;
+export declare const LimitsSchema: z.ZodObject<{
+    maxSteps: z.ZodDefault<z.ZodNumber>;
+    maxCostUsd: z.ZodDefault<z.ZodNumber>;
+    maxTokens: z.ZodDefault<z.ZodNumber>;
+    timeoutSec: z.ZodDefault<z.ZodNumber>;
+    /** Per-exec ceiling inside the machine. */
+    execTimeoutSec: z.ZodDefault<z.ZodNumber>;
+    maxOutputBytes: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    maxSteps: number;
+    maxCostUsd: number;
+    maxTokens: number;
+    timeoutSec: number;
+    execTimeoutSec: number;
+    maxOutputBytes: number;
+}, {
+    maxSteps?: number | undefined;
+    maxCostUsd?: number | undefined;
+    maxTokens?: number | undefined;
+    timeoutSec?: number | undefined;
+    execTimeoutSec?: number | undefined;
+    maxOutputBytes?: number | undefined;
+}>;
+export declare const GuardrailsSchema: z.ZodObject<{
+    approvalMode: z.ZodDefault<z.ZodEnum<["auto", "ask", "readonly"]>>;
+    /** Regexes matched against a shell command before it runs. */
+    denyCommands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    allowCommands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Refuse and explain, rather than answering. */
+    refuse: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Strip credential-shaped strings from tool output before the model sees them. */
+    redactSecrets: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    approvalMode: "auto" | "readonly" | "ask";
+    denyCommands: string[];
+    allowCommands: string[];
+    refuse: string[];
+    redactSecrets: boolean;
+}, {
+    approvalMode?: "auto" | "readonly" | "ask" | undefined;
+    denyCommands?: string[] | undefined;
+    allowCommands?: string[] | undefined;
+    refuse?: string[] | undefined;
+    redactSecrets?: boolean | undefined;
+}>;
+export declare const TriggerSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"http">;
+    path: z.ZodDefault<z.ZodString>;
+    auth: z.ZodDefault<z.ZodEnum<["none", "token"]>>;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    type: "http";
+    auth: "none" | "token";
+}, {
+    type: "http";
+    path?: string | undefined;
+    auth?: "none" | "token" | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"cron">;
+    schedule: z.ZodString;
+    prompt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "cron";
+    schedule: string;
+    prompt: string;
+}, {
+    type: "cron";
+    schedule: string;
+    prompt: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"discord">;
+    channels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    mentionOnly: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    type: "discord";
+    channels: string[];
+    mentionOnly: boolean;
+}, {
+    type: "discord";
+    channels?: string[] | undefined;
+    mentionOnly?: boolean | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"slack">;
+    channels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    mentionOnly: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    type: "slack";
+    channels: string[];
+    mentionOnly: boolean;
+}, {
+    type: "slack";
+    channels?: string[] | undefined;
+    mentionOnly?: boolean | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"telegram">;
+    allowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    type: "telegram";
+    allowlist: string[];
+}, {
+    type: "telegram";
+    allowlist?: string[] | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"webhook">;
+    path: z.ZodString;
+    secret: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    type: "webhook";
+    secret?: string | undefined;
+}, {
+    path: string;
+    type: "webhook";
+    secret?: string | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"cli">;
+}, "strip", z.ZodTypeAny, {
+    type: "cli";
+}, {
+    type: "cli";
+}>]>;
+export declare const MemorySchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    backend: z.ZodDefault<z.ZodEnum<["sqlite", "memory", "file"]>>;
+    /** Turns of raw history kept verbatim before older turns get summarised. */
+    windowTurns: z.ZodDefault<z.ZodNumber>;
+    summarise: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    backend: "file" | "sqlite" | "memory";
+    windowTurns: number;
+    summarise: boolean;
+}, {
+    enabled?: boolean | undefined;
+    backend?: "file" | "sqlite" | "memory" | undefined;
+    windowTurns?: number | undefined;
+    summarise?: boolean | undefined;
+}>;
+export declare const KnowledgeItemSchema: z.ZodObject<{
+    title: z.ZodString;
+    content: z.ZodString;
+    source: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    title: string;
+    content: string;
+    source?: string | undefined;
+}, {
+    title: string;
+    content: string;
+    source?: string | undefined;
+}>;
+export declare const ExampleSchema: z.ZodObject<{
+    user: z.ZodString;
+    assistant: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    user: string;
+    assistant: string;
+}, {
+    user: string;
+    assistant: string;
+}>;
+export declare const HuskSpecSchema: z.ZodObject<{
+    /** Schema version. Bumped only on breaking changes. */
+    apiVersion: z.ZodDefault<z.ZodLiteral<"husk/v1">>;
+    name: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+    version: z.ZodDefault<z.ZodString>;
+    description: z.ZodDefault<z.ZodString>;
+    /** Primary model, by alias or fully-qualified id. */
+    model: z.ZodDefault<z.ZodString>;
+    /** Tried in order when the primary is unavailable, rate limited, or over budget. */
+    fallbackModels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    temperature: z.ZodOptional<z.ZodNumber>;
+    /** The system prompt. Supports {{var}} interpolation from RunOptions.vars. */
+    persona: z.ZodDefault<z.ZodString>;
+    knowledge: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        title: z.ZodString;
+        content: z.ZodString;
+        source: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        title: string;
+        content: string;
+        source?: string | undefined;
+    }, {
+        title: string;
+        content: string;
+        source?: string | undefined;
+    }>, "many">>;
+    examples: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        user: z.ZodString;
+        assistant: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        user: string;
+        assistant: string;
+    }, {
+        user: string;
+        assistant: string;
+    }>, "many">>;
+    /** Tool names, or the computer / files / web / http bundles. */
+    tools: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    computer: z.ZodDefault<z.ZodObject<{
+        /** false disables the machine entirely; true accepts every default. */
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodOptional<z.ZodString>;
+        flavor: z.ZodDefault<z.ZodEnum<["base", "python", "node", "full"]>>;
+        image: z.ZodOptional<z.ZodString>;
+        cpus: z.ZodOptional<z.ZodNumber>;
+        memoryMb: z.ZodOptional<z.ZodNumber>;
+        diskMb: z.ZodOptional<z.ZodNumber>;
+        idleTimeoutSec: z.ZodDefault<z.ZodNumber>;
+        maxLifetimeSec: z.ZodDefault<z.ZodNumber>;
+        network: z.ZodDefault<z.ZodObject<{
+            mode: z.ZodDefault<z.ZodEnum<["none", "egress", "full"]>>;
+            allow: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            deny: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            mode: "none" | "egress" | "full";
+            deny?: string[] | undefined;
+            allow?: string[] | undefined;
+        }, {
+            deny?: string[] | undefined;
+            mode?: "none" | "egress" | "full" | undefined;
+            allow?: string[] | undefined;
+        }>>;
+        packages: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        setup: z.ZodOptional<z.ZodString>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        workdir: z.ZodDefault<z.ZodString>;
+        persist: z.ZodDefault<z.ZodBoolean>;
+        mounts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            source: z.ZodString;
+            target: z.ZodString;
+            readonly: z.ZodDefault<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            source: string;
+            target: string;
+            readonly: boolean;
+        }, {
+            source: string;
+            target: string;
+            readonly?: boolean | undefined;
+        }>, "many">>;
+        /**
+         * Unprivileged user inside the machine. Omitted means "whatever the provider
+         * defaults to" (`husk` on the container images), which is why there is no
+         * default here: writing one in would override a provider that knows better.
+         */
+        user: z.ZodOptional<z.ZodString>;
+        /**
+         * Provider-specific configuration, carried through to `ComputerSpec.labels`.
+         *
+         * This is how a single husk.yaml points itself at a particular box or Fly app
+         * without an environment variable: `husk.ssh`, `husk.ssh.key`, `husk.fly.app`,
+         * `husk.fly.region`, `husk.fly.ports`. The ssh and fly providers read these
+         * first and fall back to the environment.
+         *
+         * Optional rather than `.default({})` so a spec that never mentions labels
+         * serialises exactly as it did before.
+         */
+        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        flavor: "full" | "base" | "python" | "node";
+        idleTimeoutSec: number;
+        maxLifetimeSec: number;
+        network: {
+            mode: "none" | "egress" | "full";
+            deny?: string[] | undefined;
+            allow?: string[] | undefined;
+        };
+        packages: string[];
+        env: Record<string, string>;
+        workdir: string;
+        persist: boolean;
+        mounts: {
+            source: string;
+            target: string;
+            readonly: boolean;
+        }[];
+        provider?: string | undefined;
+        image?: string | undefined;
+        cpus?: number | undefined;
+        memoryMb?: number | undefined;
+        diskMb?: number | undefined;
+        setup?: string | undefined;
+        user?: string | undefined;
+        labels?: Record<string, string> | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        provider?: string | undefined;
+        flavor?: "full" | "base" | "python" | "node" | undefined;
+        image?: string | undefined;
+        cpus?: number | undefined;
+        memoryMb?: number | undefined;
+        diskMb?: number | undefined;
+        idleTimeoutSec?: number | undefined;
+        maxLifetimeSec?: number | undefined;
+        network?: {
+            deny?: string[] | undefined;
+            mode?: "none" | "egress" | "full" | undefined;
+            allow?: string[] | undefined;
+        } | undefined;
+        packages?: string[] | undefined;
+        setup?: string | undefined;
+        env?: Record<string, string> | undefined;
+        workdir?: string | undefined;
+        persist?: boolean | undefined;
+        mounts?: {
+            source: string;
+            target: string;
+            readonly?: boolean | undefined;
+        }[] | undefined;
+        user?: string | undefined;
+        labels?: Record<string, string> | undefined;
+    }>>;
+    limits: z.ZodDefault<z.ZodObject<{
+        maxSteps: z.ZodDefault<z.ZodNumber>;
+        maxCostUsd: z.ZodDefault<z.ZodNumber>;
+        maxTokens: z.ZodDefault<z.ZodNumber>;
+        timeoutSec: z.ZodDefault<z.ZodNumber>;
+        /** Per-exec ceiling inside the machine. */
+        execTimeoutSec: z.ZodDefault<z.ZodNumber>;
+        maxOutputBytes: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        maxSteps: number;
+        maxCostUsd: number;
+        maxTokens: number;
+        timeoutSec: number;
+        execTimeoutSec: number;
+        maxOutputBytes: number;
+    }, {
+        maxSteps?: number | undefined;
+        maxCostUsd?: number | undefined;
+        maxTokens?: number | undefined;
+        timeoutSec?: number | undefined;
+        execTimeoutSec?: number | undefined;
+        maxOutputBytes?: number | undefined;
+    }>>;
+    guardrails: z.ZodDefault<z.ZodObject<{
+        approvalMode: z.ZodDefault<z.ZodEnum<["auto", "ask", "readonly"]>>;
+        /** Regexes matched against a shell command before it runs. */
+        denyCommands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        allowCommands: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Refuse and explain, rather than answering. */
+        refuse: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Strip credential-shaped strings from tool output before the model sees them. */
+        redactSecrets: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        approvalMode: "auto" | "readonly" | "ask";
+        denyCommands: string[];
+        allowCommands: string[];
+        refuse: string[];
+        redactSecrets: boolean;
+    }, {
+        approvalMode?: "auto" | "readonly" | "ask" | undefined;
+        denyCommands?: string[] | undefined;
+        allowCommands?: string[] | undefined;
+        refuse?: string[] | undefined;
+        redactSecrets?: boolean | undefined;
+    }>>;
+    memory: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        backend: z.ZodDefault<z.ZodEnum<["sqlite", "memory", "file"]>>;
+        /** Turns of raw history kept verbatim before older turns get summarised. */
+        windowTurns: z.ZodDefault<z.ZodNumber>;
+        summarise: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        backend: "file" | "sqlite" | "memory";
+        windowTurns: number;
+        summarise: boolean;
+    }, {
+        enabled?: boolean | undefined;
+        backend?: "file" | "sqlite" | "memory" | undefined;
+        windowTurns?: number | undefined;
+        summarise?: boolean | undefined;
+    }>>;
+    triggers: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"http">;
+        path: z.ZodDefault<z.ZodString>;
+        auth: z.ZodDefault<z.ZodEnum<["none", "token"]>>;
+    }, "strip", z.ZodTypeAny, {
+        path: string;
+        type: "http";
+        auth: "none" | "token";
+    }, {
+        type: "http";
+        path?: string | undefined;
+        auth?: "none" | "token" | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"cron">;
+        schedule: z.ZodString;
+        prompt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: "cron";
+        schedule: string;
+        prompt: string;
+    }, {
+        type: "cron";
+        schedule: string;
+        prompt: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"discord">;
+        channels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        mentionOnly: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        type: "discord";
+        channels: string[];
+        mentionOnly: boolean;
+    }, {
+        type: "discord";
+        channels?: string[] | undefined;
+        mentionOnly?: boolean | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"slack">;
+        channels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        mentionOnly: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        type: "slack";
+        channels: string[];
+        mentionOnly: boolean;
+    }, {
+        type: "slack";
+        channels?: string[] | undefined;
+        mentionOnly?: boolean | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"telegram">;
+        allowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        type: "telegram";
+        allowlist: string[];
+    }, {
+        type: "telegram";
+        allowlist?: string[] | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"webhook">;
+        path: z.ZodString;
+        secret: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        path: string;
+        type: "webhook";
+        secret?: string | undefined;
+    }, {
+        path: string;
+        type: "webhook";
+        secret?: string | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"cli">;
+    }, "strip", z.ZodTypeAny, {
+        type: "cli";
+    }, {
+        type: "cli";
+    }>]>, "many">>;
+    /** Free-form, carried through untouched. */
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    /** Provenance: which transcript this husk was distilled from. */
+    origin: z.ZodOptional<z.ZodObject<{
+        source: z.ZodString;
+        transcriptId: z.ZodOptional<z.ZodString>;
+        importedAt: z.ZodOptional<z.ZodString>;
+        messageCount: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        source: string;
+        transcriptId?: string | undefined;
+        importedAt?: string | undefined;
+        messageCount?: number | undefined;
+    }, {
+        source: string;
+        transcriptId?: string | undefined;
+        importedAt?: string | undefined;
+        messageCount?: number | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    guardrails: {
+        approvalMode: "auto" | "readonly" | "ask";
+        denyCommands: string[];
+        allowCommands: string[];
+        refuse: string[];
+        redactSecrets: boolean;
+    };
+    memory: {
+        enabled: boolean;
+        backend: "file" | "sqlite" | "memory";
+        windowTurns: number;
+        summarise: boolean;
+    };
+    apiVersion: "husk/v1";
+    name: string;
+    version: string;
+    description: string;
+    model: string;
+    fallbackModels: string[];
+    persona: string;
+    knowledge: {
+        title: string;
+        content: string;
+        source?: string | undefined;
+    }[];
+    examples: {
+        user: string;
+        assistant: string;
+    }[];
+    computer: {
+        enabled: boolean;
+        flavor: "full" | "base" | "python" | "node";
+        idleTimeoutSec: number;
+        maxLifetimeSec: number;
+        network: {
+            mode: "none" | "egress" | "full";
+            deny?: string[] | undefined;
+            allow?: string[] | undefined;
+        };
+        packages: string[];
+        env: Record<string, string>;
+        workdir: string;
+        persist: boolean;
+        mounts: {
+            source: string;
+            target: string;
+            readonly: boolean;
+        }[];
+        provider?: string | undefined;
+        image?: string | undefined;
+        cpus?: number | undefined;
+        memoryMb?: number | undefined;
+        diskMb?: number | undefined;
+        setup?: string | undefined;
+        user?: string | undefined;
+        labels?: Record<string, string> | undefined;
+    };
+    tools: string[];
+    limits: {
+        maxSteps: number;
+        maxCostUsd: number;
+        maxTokens: number;
+        timeoutSec: number;
+        execTimeoutSec: number;
+        maxOutputBytes: number;
+    };
+    triggers: ({
+        path: string;
+        type: "http";
+        auth: "none" | "token";
+    } | {
+        type: "cron";
+        schedule: string;
+        prompt: string;
+    } | {
+        type: "discord";
+        channels: string[];
+        mentionOnly: boolean;
+    } | {
+        type: "slack";
+        channels: string[];
+        mentionOnly: boolean;
+    } | {
+        type: "telegram";
+        allowlist: string[];
+    } | {
+        path: string;
+        type: "webhook";
+        secret?: string | undefined;
+    } | {
+        type: "cli";
+    })[];
+    metadata: Record<string, unknown>;
+    displayName?: string | undefined;
+    temperature?: number | undefined;
+    origin?: {
+        source: string;
+        transcriptId?: string | undefined;
+        importedAt?: string | undefined;
+        messageCount?: number | undefined;
+    } | undefined;
+}, {
+    name: string;
+    guardrails?: {
+        approvalMode?: "auto" | "readonly" | "ask" | undefined;
+        denyCommands?: string[] | undefined;
+        allowCommands?: string[] | undefined;
+        refuse?: string[] | undefined;
+        redactSecrets?: boolean | undefined;
+    } | undefined;
+    memory?: {
+        enabled?: boolean | undefined;
+        backend?: "file" | "sqlite" | "memory" | undefined;
+        windowTurns?: number | undefined;
+        summarise?: boolean | undefined;
+    } | undefined;
+    apiVersion?: "husk/v1" | undefined;
+    displayName?: string | undefined;
+    version?: string | undefined;
+    description?: string | undefined;
+    model?: string | undefined;
+    fallbackModels?: string[] | undefined;
+    temperature?: number | undefined;
+    persona?: string | undefined;
+    knowledge?: {
+        title: string;
+        content: string;
+        source?: string | undefined;
+    }[] | undefined;
+    examples?: {
+        user: string;
+        assistant: string;
+    }[] | undefined;
+    computer?: {
+        enabled?: boolean | undefined;
+        provider?: string | undefined;
+        flavor?: "full" | "base" | "python" | "node" | undefined;
+        image?: string | undefined;
+        cpus?: number | undefined;
+        memoryMb?: number | undefined;
+        diskMb?: number | undefined;
+        idleTimeoutSec?: number | undefined;
+        maxLifetimeSec?: number | undefined;
+        network?: {
+            deny?: string[] | undefined;
+            mode?: "none" | "egress" | "full" | undefined;
+            allow?: string[] | undefined;
+        } | undefined;
+        packages?: string[] | undefined;
+        setup?: string | undefined;
+        env?: Record<string, string> | undefined;
+        workdir?: string | undefined;
+        persist?: boolean | undefined;
+        mounts?: {
+            source: string;
+            target: string;
+            readonly?: boolean | undefined;
+        }[] | undefined;
+        user?: string | undefined;
+        labels?: Record<string, string> | undefined;
+    } | undefined;
+    tools?: string[] | undefined;
+    limits?: {
+        maxSteps?: number | undefined;
+        maxCostUsd?: number | undefined;
+        maxTokens?: number | undefined;
+        timeoutSec?: number | undefined;
+        execTimeoutSec?: number | undefined;
+        maxOutputBytes?: number | undefined;
+    } | undefined;
+    triggers?: ({
+        type: "http";
+        path?: string | undefined;
+        auth?: "none" | "token" | undefined;
+    } | {
+        type: "cron";
+        schedule: string;
+        prompt: string;
+    } | {
+        type: "discord";
+        channels?: string[] | undefined;
+        mentionOnly?: boolean | undefined;
+    } | {
+        type: "slack";
+        channels?: string[] | undefined;
+        mentionOnly?: boolean | undefined;
+    } | {
+        type: "telegram";
+        allowlist?: string[] | undefined;
+    } | {
+        path: string;
+        type: "webhook";
+        secret?: string | undefined;
+    } | {
+        type: "cli";
+    })[] | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    origin?: {
+        source: string;
+        transcriptId?: string | undefined;
+        importedAt?: string | undefined;
+        messageCount?: number | undefined;
+    } | undefined;
+}>;
+export type HuskSpec = z.infer<typeof HuskSpecSchema>;
+export type HuskSpecInput = z.input<typeof HuskSpecSchema>;
+export type ComputerConfig = z.infer<typeof ComputerConfigSchema>;
+export type Limits = z.infer<typeof LimitsSchema>;
+export type Guardrails = z.infer<typeof GuardrailsSchema>;
+export type Trigger = z.infer<typeof TriggerSchema>;
+/** Parse and normalise. Throws a HuskError carrying every field-level problem. */
+export declare function parseSpec(input: unknown): HuskSpec;
+export declare function safeParseSpec(input: unknown): {
+    ok: true;
+    spec: HuskSpec;
+} | {
+    ok: false;
+    issues: string[];
+};
+/** A minimal, valid husk. Used by `husk init` and by tests. */
+export declare function defaultSpec(name: string): HuskSpec;
+/** Interpolate {{var}} placeholders in the persona. Unknown vars are left intact. */
+export declare function renderPersona(spec: HuskSpec, vars?: Record<string, string>): string;
+//# sourceMappingURL=spec.d.ts.map