@opengeni/contracts 0.30.0 → 0.31.0

package/dist/{chunk-YWKPXSLB.js → chunk-H4NRLOOX.js}

@@ -6154,6 +6154,15 @@ var CapabilityPack = z7.preprocess(
     // in. At most one enabled pack per workspace may declare one; with none,
     // sessions use the deployment-wide image settings.
     sandboxImage: z7.string().trim().min(1).max(512).optional(),
+    // Optional provider-native immutable identities for the exact logical
+    // sandboxImage above. These avoid re-importing a private registry image on
+    // every provider while preserving sandboxImage as the cross-provider image
+    // provenance and lease-conflict identity.
+    sandboxProviderImages: z7.object({
+      modal: z7.object({
+        imageId: z7.string().trim().regex(/^im-[A-Za-z0-9]{22}$/)
+      }).strict().optional()
+    }).strict().optional(),
     // Skills delivered into the sandbox skill index when the pack is enabled.
     skills: z7.array(CapabilityPackSkill).max(32).superRefine((skills, ctx) => {
       const seen = /* @__PURE__ */ new Set();
@@ -6175,6 +6184,25 @@ var CapabilityPack = z7.preprocess(
     scheduledTaskTemplates: z7.array(CapabilityPackScheduledTaskTemplate).default([]),
     variableSet: CapabilityPackVariableSet.optional(),
     metadata: z7.record(z7.string(), z7.unknown()).default({})
+  }).superRefine((pack, ctx) => {
+    if (!pack.sandboxProviderImages?.modal) {
+      return;
+    }
+    if (!pack.sandboxImage) {
+      ctx.addIssue({
+        code: "custom",
+        message: "sandboxProviderImages.modal requires sandboxImage",
+        path: ["sandboxProviderImages", "modal"]
+      });
+      return;
+    }
+    if (!/@sha256:[0-9a-f]{64}$/i.test(pack.sandboxImage)) {
+      ctx.addIssue({
+        code: "custom",
+        message: "sandboxProviderImages.modal requires sandboxImage to be pinned by an OCI sha256 digest",
+        path: ["sandboxImage"]
+      });
+    }
   })
 );
 var RegisterCapabilityPackRequest = CapabilityPack;
@@ -10062,4 +10090,4 @@ export {
   ClientConfig,
   evaluateWorkspaceModelPolicy
 };
-//# sourceMappingURL=chunk-YWKPXSLB.js.map
+//# sourceMappingURL=chunk-H4NRLOOX.js.map