@kya-os/cli 1.8.3 → 2.0.2

package/node_modules/@kya-os/contracts/dist/compute.d.ts

@@ -0,0 +1,474 @@
+/**
+ * Compute Process Contracts
+ *
+ * Schemas for the @kya-os/compute <-> AgentShield API communication.
+ * These define the heartbeat protocol, config bundle format,
+ * and control server status frames.
+ *
+ * @package @kya-os/contracts/compute
+ */
+import { z } from "zod";
+/**
+ * Heartbeat request body.
+ * Sent by compute process: POST /api/v1/molti/agents/{did}/heartbeat
+ * Auth: X-Heartbeat-Token header
+ */
+export declare const HeartbeatRequestSchema: z.ZodObject<{
+    /** Agent DID this heartbeat is for */
+    agentDid: z.ZodString;
+    /** Current compute process status */
+    status: z.ZodEnum<["starting", "running", "error", "stopping"]>;
+    /** @kya-os/compute package version (from package.json) */
+    computeVersion: z.ZodString;
+    /** Installed OpenClaw version (from npm ls) */
+    openclawVersion: z.ZodOptional<z.ZodString>;
+    /** Fly machine ID (from FLY_MACHINE_ID env var) */
+    machineId: z.ZodOptional<z.ZodString>;
+    /** Seconds since compute process started */
+    uptimeSeconds: z.ZodOptional<z.ZodNumber>;
+    /** Current RSS memory in MB */
+    memoryMb: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    status: "starting" | "running" | "stopping" | "error";
+    agentDid: string;
+    computeVersion: string;
+    openclawVersion?: string | undefined;
+    machineId?: string | undefined;
+    uptimeSeconds?: number | undefined;
+    memoryMb?: number | undefined;
+}, {
+    status: "starting" | "running" | "stopping" | "error";
+    agentDid: string;
+    computeVersion: string;
+    openclawVersion?: string | undefined;
+    machineId?: string | undefined;
+    uptimeSeconds?: number | undefined;
+    memoryMb?: number | undefined;
+}>;
+export type HeartbeatRequest = z.infer<typeof HeartbeatRequestSchema>;
+/**
+ * Stop command — graceful shutdown, no payload accepted.
+ */
+export declare const StopCommandSchema: z.ZodObject<{
+    type: z.ZodLiteral<"stop">;
+}, "strict", z.ZodTypeAny, {
+    type: "stop";
+}, {
+    type: "stop";
+}>;
+/**
+ * Restart command — restart the compute process, no payload accepted.
+ */
+export declare const RestartCommandSchema: z.ZodObject<{
+    type: z.ZodLiteral<"restart">;
+}, "strict", z.ZodTypeAny, {
+    type: "restart";
+}, {
+    type: "restart";
+}>;
+/**
+ * Update config command — triggers config re-fetch, no payload accepted.
+ */
+export declare const UpdateConfigCommandSchema: z.ZodObject<{
+    type: z.ZodLiteral<"update_config">;
+}, "strict", z.ZodTypeAny, {
+    type: "update_config";
+}, {
+    type: "update_config";
+}>;
+/**
+ * Update version command — requires target version in payload.
+ */
+export declare const UpdateVersionCommandSchema: z.ZodObject<{
+    type: z.ZodLiteral<"update_version">;
+    payload: z.ZodObject<{
+        /** Target OpenClaw version to install */
+        version: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        version: string;
+    }, {
+        version: string;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    type: "update_version";
+    payload: {
+        version: string;
+    };
+}, {
+    type: "update_version";
+    payload: {
+        version: string;
+    };
+}>;
+/**
+ * Command that Agent Shield can send to the compute process
+ * via the heartbeat response.
+ *
+ * Discriminated union by `type` field:
+ * - `stop` / `restart` / `update_config` — no payload
+ * - `update_version` — requires `{ version: string }` payload
+ */
+export declare const ComputeCommandSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"stop">;
+}, "strict", z.ZodTypeAny, {
+    type: "stop";
+}, {
+    type: "stop";
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"restart">;
+}, "strict", z.ZodTypeAny, {
+    type: "restart";
+}, {
+    type: "restart";
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"update_config">;
+}, "strict", z.ZodTypeAny, {
+    type: "update_config";
+}, {
+    type: "update_config";
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"update_version">;
+    payload: z.ZodObject<{
+        /** Target OpenClaw version to install */
+        version: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        version: string;
+    }, {
+        version: string;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    type: "update_version";
+    payload: {
+        version: string;
+    };
+}, {
+    type: "update_version";
+    payload: {
+        version: string;
+    };
+}>]>;
+export type ComputeCommand = z.infer<typeof ComputeCommandSchema>;
+/**
+ * Heartbeat response from Agent Shield.
+ * Returned by: POST /api/v1/molti/agents/{did}/heartbeat
+ */
+export declare const HeartbeatResponseSchema: z.ZodObject<{
+    /** Always true for successful heartbeats */
+    ack: z.ZodLiteral<true>;
+    /** Pending commands for the compute process to execute */
+    commands: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"stop">;
+    }, "strict", z.ZodTypeAny, {
+        type: "stop";
+    }, {
+        type: "stop";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"restart">;
+    }, "strict", z.ZodTypeAny, {
+        type: "restart";
+    }, {
+        type: "restart";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"update_config">;
+    }, "strict", z.ZodTypeAny, {
+        type: "update_config";
+    }, {
+        type: "update_config";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"update_version">;
+        payload: z.ZodObject<{
+            /** Target OpenClaw version to install */
+            version: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            version: string;
+        }, {
+            version: string;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        type: "update_version";
+        payload: {
+            version: string;
+        };
+    }, {
+        type: "update_version";
+        payload: {
+            version: string;
+        };
+    }>]>, "many">>;
+    /** ISO timestamp of last config change (compute compares to detect updates) */
+    configUpdatedAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    ack: true;
+    commands: ({
+        type: "stop";
+    } | {
+        type: "restart";
+    } | {
+        type: "update_config";
+    } | {
+        type: "update_version";
+        payload: {
+            version: string;
+        };
+    })[];
+    configUpdatedAt?: string | undefined;
+}, {
+    ack: true;
+    commands?: ({
+        type: "stop";
+    } | {
+        type: "restart";
+    } | {
+        type: "update_config";
+    } | {
+        type: "update_version";
+        payload: {
+            version: string;
+        };
+    })[] | undefined;
+    configUpdatedAt?: string | undefined;
+}>;
+export type HeartbeatResponse = z.infer<typeof HeartbeatResponseSchema>;
+/**
+ * Config bundle returned by Agent Shield to the compute process.
+ * Fetched on boot: GET /api/v1/molti/deployments/{did}/config-bundle
+ * Auth: X-Heartbeat-Token header (for managed) or X-API-Key (for BYOK)
+ *
+ * IMPORTANT: This extends the existing config-bundle endpoint.
+ * BYOK deployments continue to use the existing shape (version 1).
+ * Managed deployments use this shape (version 2+).
+ *
+ * **Private Key Delivery**: The agent's private key is NOT included in the config bundle.
+ * It is delivered as the `AGENT_PRIVATE_KEY` environment variable at Fly machine creation
+ * time and persists in the machine's env. This avoids transmitting the key on every
+ * config fetch and keeps it out of the config-bundle response surface.
+ */
+export declare const ConfigBundleSchema: z.ZodObject<{
+    /** Schema version — 2 for managed bundles */
+    version: z.ZodNumber;
+    /** Kill switch — if true, compute must exit immediately */
+    killed: z.ZodBoolean;
+    /** Target OpenClaw version to install */
+    openclawVersion: z.ZodString;
+    /** Agent personality/system prompt file contents (max 100KB) */
+    soulFile: z.ZodNullable<z.ZodString>;
+    /** Gateway auth token for OpenClaw */
+    gatewayToken: z.ZodString;
+    /** Channel configurations */
+    channels: z.ZodObject<{
+        telegram: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodBoolean;
+            token: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            token?: string | undefined;
+        }, {
+            enabled: boolean;
+            token?: string | undefined;
+        }>>;
+        discord: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodBoolean;
+            token: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            token?: string | undefined;
+        }, {
+            enabled: boolean;
+            token?: string | undefined;
+        }>>;
+        slack: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodBoolean;
+            token: z.ZodOptional<z.ZodString>;
+            appToken: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            token?: string | undefined;
+            appToken?: string | undefined;
+        }, {
+            enabled: boolean;
+            token?: string | undefined;
+            appToken?: string | undefined;
+        }>>;
+        whatsapp: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodBoolean;
+        }, "strict", z.ZodTypeAny, {
+            enabled: boolean;
+        }, {
+            enabled: boolean;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        telegram?: {
+            enabled: boolean;
+            token?: string | undefined;
+        } | undefined;
+        discord?: {
+            enabled: boolean;
+            token?: string | undefined;
+        } | undefined;
+        slack?: {
+            enabled: boolean;
+            token?: string | undefined;
+            appToken?: string | undefined;
+        } | undefined;
+        whatsapp?: {
+            enabled: boolean;
+        } | undefined;
+    }, {
+        telegram?: {
+            enabled: boolean;
+            token?: string | undefined;
+        } | undefined;
+        discord?: {
+            enabled: boolean;
+            token?: string | undefined;
+        } | undefined;
+        slack?: {
+            enabled: boolean;
+            token?: string | undefined;
+            appToken?: string | undefined;
+        } | undefined;
+        whatsapp?: {
+            enabled: boolean;
+        } | undefined;
+    }>;
+    /** AI provider configuration — key is decrypted, sent over TLS */
+    aiProvider: z.ZodObject<{
+        type: z.ZodEnum<["anthropic", "openai"]>;
+        apiKey: z.ZodString;
+        /**
+         * Optional base URL override. When set, OpenClaw routes all provider
+         * traffic through this URL instead of the provider's default endpoint.
+         * Used by managed deployments where AgentShield issues a per-deployment
+         * gateway token and proxies to the upstream provider with budget tracking.
+         */
+        baseUrl: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "anthropic" | "openai";
+        apiKey: string;
+        baseUrl?: string | undefined;
+    }, {
+        type: "anthropic" | "openai";
+        apiKey: string;
+        baseUrl?: string | undefined;
+    }>;
+    /**
+     * Optional OpenClaw heartbeat interval (`agents.defaults.heartbeat.every`).
+     * Drives how often OpenClaw wakes the agent for HEARTBEAT.md processing —
+     * the primary token-cost lever. Examples: "30m" (active), "6h" (idle),
+     * "off" (dormant — heartbeat disabled entirely). When absent, the patcher
+     * preserves whatever value already lives in openclaw.json (OpenClaw's
+     * built-in default of "30m").
+     */
+    heartbeatEvery: z.ZodOptional<z.ZodString>;
+    /**
+     * Optional override for `agents.defaults.model.primary` (e.g.
+     * "anthropic/claude-haiku-4-5" for idle agents). When absent, the patcher
+     * derives the model from `aiProvider.type` as before. Format must be
+     * "<provider>/<model-id>".
+     */
+    modelOverride: z.ZodOptional<z.ZodString>;
+    /** ISO timestamp of last config modification */
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    aiProvider: {
+        type: "anthropic" | "openai";
+        apiKey: string;
+        baseUrl?: string | undefined;
+    };
+    version: number;
+    channels: {
+        telegram?: {
+            enabled: boolean;
+            token?: string | undefined;
+        } | undefined;
+        discord?: {
+            enabled: boolean;
+            token?: string | undefined;
+        } | undefined;
+        slack?: {
+            enabled: boolean;
+            token?: string | undefined;
+            appToken?: string | undefined;
+        } | undefined;
+        whatsapp?: {
+            enabled: boolean;
+        } | undefined;
+    };
+    openclawVersion: string;
+    killed: boolean;
+    soulFile: string | null;
+    gatewayToken: string;
+    updatedAt: string;
+    heartbeatEvery?: string | undefined;
+    modelOverride?: string | undefined;
+}, {
+    aiProvider: {
+        type: "anthropic" | "openai";
+        apiKey: string;
+        baseUrl?: string | undefined;
+    };
+    version: number;
+    channels: {
+        telegram?: {
+            enabled: boolean;
+            token?: string | undefined;
+        } | undefined;
+        discord?: {
+            enabled: boolean;
+            token?: string | undefined;
+        } | undefined;
+        slack?: {
+            enabled: boolean;
+            token?: string | undefined;
+            appToken?: string | undefined;
+        } | undefined;
+        whatsapp?: {
+            enabled: boolean;
+        } | undefined;
+    };
+    openclawVersion: string;
+    killed: boolean;
+    soulFile: string | null;
+    gatewayToken: string;
+    updatedAt: string;
+    heartbeatEvery?: string | undefined;
+    modelOverride?: string | undefined;
+}>;
+export type ConfigBundle = z.infer<typeof ConfigBundleSchema>;
+/**
+ * Status frame pushed from compute control server to dashboard.
+ * Sent on connect + every 5 seconds.
+ */
+export declare const ControlStatusSchema: z.ZodObject<{
+    /** Whether the agent runtime is healthy */
+    healthy: z.ZodBoolean;
+    /** Seconds since compute process started */
+    uptimeSeconds: z.ZodNumber;
+    /** Installed OpenClaw version */
+    openclawVersion: z.ZodString;
+    /** @kya-os/compute version */
+    computeVersion: z.ZodString;
+    /** Number of active WS connections to control server */
+    activeConnections: z.ZodNumber;
+    /** Current RSS memory in MB */
+    memoryMb: z.ZodNumber;
+    /** CPU usage percentage (0-100) */
+    cpuPercent: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    computeVersion: string;
+    openclawVersion: string;
+    uptimeSeconds: number;
+    memoryMb: number;
+    healthy: boolean;
+    activeConnections: number;
+    cpuPercent: number;
+}, {
+    computeVersion: string;
+    openclawVersion: string;
+    uptimeSeconds: number;
+    memoryMb: number;
+    healthy: boolean;
+    activeConnections: number;
+    cpuPercent: number;
+}>;
+export type ControlStatus = z.infer<typeof ControlStatusSchema>;

package/node_modules/@kya-os/contracts/dist/compute.js

@@ -0,0 +1,213 @@
+"use strict";
+/**
+ * Compute Process Contracts
+ *
+ * Schemas for the @kya-os/compute <-> AgentShield API communication.
+ * These define the heartbeat protocol, config bundle format,
+ * and control server status frames.
+ *
+ * @package @kya-os/contracts/compute
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ControlStatusSchema = exports.ConfigBundleSchema = exports.HeartbeatResponseSchema = exports.ComputeCommandSchema = exports.UpdateVersionCommandSchema = exports.UpdateConfigCommandSchema = exports.RestartCommandSchema = exports.StopCommandSchema = exports.HeartbeatRequestSchema = void 0;
+const zod_1 = require("zod");
+const agent_deployment_js_1 = require("./agent-deployment.js");
+// ============================================================================
+// Heartbeat Protocol
+// ============================================================================
+/**
+ * Heartbeat request body.
+ * Sent by compute process: POST /api/v1/molti/agents/{did}/heartbeat
+ * Auth: X-Heartbeat-Token header
+ */
+exports.HeartbeatRequestSchema = zod_1.z.object({
+    /** Agent DID this heartbeat is for */
+    agentDid: agent_deployment_js_1.DidStringSchema,
+    /** Current compute process status */
+    status: zod_1.z.enum(["starting", "running", "error", "stopping"]),
+    /** @kya-os/compute package version (from package.json) */
+    computeVersion: zod_1.z.string().min(1).max(50),
+    /** Installed OpenClaw version (from npm ls) */
+    openclawVersion: zod_1.z.string().max(50).optional(),
+    /** Fly machine ID (from FLY_MACHINE_ID env var) */
+    machineId: zod_1.z.string().max(255).optional(),
+    /** Seconds since compute process started */
+    uptimeSeconds: zod_1.z.number().nonnegative().optional(),
+    /** Current RSS memory in MB */
+    memoryMb: zod_1.z.number().nonnegative().optional(),
+});
+// ============================================================================
+// Compute Commands (Discriminated Union)
+// ============================================================================
+/**
+ * Stop command — graceful shutdown, no payload accepted.
+ */
+exports.StopCommandSchema = zod_1.z
+    .object({
+    type: zod_1.z.literal("stop"),
+})
+    .strict();
+/**
+ * Restart command — restart the compute process, no payload accepted.
+ */
+exports.RestartCommandSchema = zod_1.z
+    .object({
+    type: zod_1.z.literal("restart"),
+})
+    .strict();
+/**
+ * Update config command — triggers config re-fetch, no payload accepted.
+ */
+exports.UpdateConfigCommandSchema = zod_1.z
+    .object({
+    type: zod_1.z.literal("update_config"),
+})
+    .strict();
+/**
+ * Update version command — requires target version in payload.
+ */
+exports.UpdateVersionCommandSchema = zod_1.z
+    .object({
+    type: zod_1.z.literal("update_version"),
+    payload: zod_1.z.object({
+        /** Target OpenClaw version to install */
+        version: zod_1.z.string().min(1).max(50),
+    }),
+})
+    .strict();
+/**
+ * Command that Agent Shield can send to the compute process
+ * via the heartbeat response.
+ *
+ * Discriminated union by `type` field:
+ * - `stop` / `restart` / `update_config` — no payload
+ * - `update_version` — requires `{ version: string }` payload
+ */
+exports.ComputeCommandSchema = zod_1.z.discriminatedUnion("type", [
+    exports.StopCommandSchema,
+    exports.RestartCommandSchema,
+    exports.UpdateConfigCommandSchema,
+    exports.UpdateVersionCommandSchema,
+]);
+/**
+ * Heartbeat response from Agent Shield.
+ * Returned by: POST /api/v1/molti/agents/{did}/heartbeat
+ */
+exports.HeartbeatResponseSchema = zod_1.z.object({
+    /** Always true for successful heartbeats */
+    ack: zod_1.z.literal(true),
+    /** Pending commands for the compute process to execute */
+    commands: zod_1.z.array(exports.ComputeCommandSchema).default([]),
+    /** ISO timestamp of last config change (compute compares to detect updates) */
+    configUpdatedAt: zod_1.z.string().datetime().optional(),
+});
+// ============================================================================
+// Config Bundle
+// ============================================================================
+/**
+ * Config bundle returned by Agent Shield to the compute process.
+ * Fetched on boot: GET /api/v1/molti/deployments/{did}/config-bundle
+ * Auth: X-Heartbeat-Token header (for managed) or X-API-Key (for BYOK)
+ *
+ * IMPORTANT: This extends the existing config-bundle endpoint.
+ * BYOK deployments continue to use the existing shape (version 1).
+ * Managed deployments use this shape (version 2+).
+ *
+ * **Private Key Delivery**: The agent's private key is NOT included in the config bundle.
+ * It is delivered as the `AGENT_PRIVATE_KEY` environment variable at Fly machine creation
+ * time and persists in the machine's env. This avoids transmitting the key on every
+ * config fetch and keeps it out of the config-bundle response surface.
+ */
+exports.ConfigBundleSchema = zod_1.z.object({
+    /** Schema version — 2 for managed bundles */
+    version: zod_1.z.number().int().positive(),
+    /** Kill switch — if true, compute must exit immediately */
+    killed: zod_1.z.boolean(),
+    /** Target OpenClaw version to install */
+    openclawVersion: zod_1.z.string().min(1).max(50),
+    /** Agent personality/system prompt file contents (max 100KB) */
+    soulFile: zod_1.z.string().max(100000).nullable(),
+    /** Gateway auth token for OpenClaw */
+    gatewayToken: zod_1.z.string().min(1).max(500),
+    /** Channel configurations */
+    channels: zod_1.z.object({
+        telegram: zod_1.z
+            .object({
+            enabled: zod_1.z.boolean(),
+            token: zod_1.z.string().optional(),
+        })
+            .optional(),
+        discord: zod_1.z
+            .object({
+            enabled: zod_1.z.boolean(),
+            token: zod_1.z.string().optional(),
+        })
+            .optional(),
+        slack: zod_1.z
+            .object({
+            enabled: zod_1.z.boolean(),
+            token: zod_1.z.string().optional(),
+            appToken: zod_1.z.string().optional(),
+        })
+            .optional(),
+        whatsapp: zod_1.z
+            .object({
+            enabled: zod_1.z.boolean(),
+        })
+            .strict()
+            .optional(),
+    }),
+    /** AI provider configuration — key is decrypted, sent over TLS */
+    aiProvider: zod_1.z.object({
+        type: zod_1.z.enum(["anthropic", "openai"]),
+        apiKey: zod_1.z.string().min(1).max(500),
+        /**
+         * Optional base URL override. When set, OpenClaw routes all provider
+         * traffic through this URL instead of the provider's default endpoint.
+         * Used by managed deployments where AgentShield issues a per-deployment
+         * gateway token and proxies to the upstream provider with budget tracking.
+         */
+        baseUrl: zod_1.z.string().url().optional(),
+    }),
+    /**
+     * Optional OpenClaw heartbeat interval (`agents.defaults.heartbeat.every`).
+     * Drives how often OpenClaw wakes the agent for HEARTBEAT.md processing —
+     * the primary token-cost lever. Examples: "30m" (active), "6h" (idle),
+     * "off" (dormant — heartbeat disabled entirely). When absent, the patcher
+     * preserves whatever value already lives in openclaw.json (OpenClaw's
+     * built-in default of "30m").
+     */
+    heartbeatEvery: zod_1.z.string().min(1).max(20).optional(),
+    /**
+     * Optional override for `agents.defaults.model.primary` (e.g.
+     * "anthropic/claude-haiku-4-5" for idle agents). When absent, the patcher
+     * derives the model from `aiProvider.type` as before. Format must be
+     * "<provider>/<model-id>".
+     */
+    modelOverride: zod_1.z.string().min(1).max(100).optional(),
+    /** ISO timestamp of last config modification */
+    updatedAt: zod_1.z.string().datetime(),
+});
+// ============================================================================
+// Control Server (WebSocket :18790)
+// ============================================================================
+/**
+ * Status frame pushed from compute control server to dashboard.
+ * Sent on connect + every 5 seconds.
+ */
+exports.ControlStatusSchema = zod_1.z.object({
+    /** Whether the agent runtime is healthy */
+    healthy: zod_1.z.boolean(),
+    /** Seconds since compute process started */
+    uptimeSeconds: zod_1.z.number().nonnegative(),
+    /** Installed OpenClaw version */
+    openclawVersion: zod_1.z.string().min(1).max(50),
+    /** @kya-os/compute version */
+    computeVersion: zod_1.z.string().min(1).max(50),
+    /** Number of active WS connections to control server */
+    activeConnections: zod_1.z.number().int().nonnegative(),
+    /** Current RSS memory in MB */
+    memoryMb: zod_1.z.number().nonnegative(),
+    /** CPU usage percentage (0-100) */
+    cpuPercent: zod_1.z.number().nonnegative().max(100),
+});