@tangle-network/agent-app 0.42.14 → 0.42.15

package/dist/chunk-E7QYOOON.js

@@ -0,0 +1,73 @@
+// src/harness/index.ts
+import {
+  harnessSupportsModel,
+  modelProvider,
+  preferredHarnessForModel,
+  snapHarnessToModel as aiSnapHarnessToModel,
+  snapModelToHarness as aiSnapModelToHarness
+} from "@tangle-network/agent-interface";
+var KNOWN_HARNESSES = [
+  "opencode",
+  "claude-code",
+  "kimi-code",
+  "codex",
+  "amp",
+  "factory-droids",
+  "pi",
+  "hermes",
+  "forge",
+  "openclaw",
+  "acp",
+  "cursor",
+  "cli-base"
+];
+var DEFAULT_HARNESS = "opencode";
+var HARNESS_SET = new Set(KNOWN_HARNESSES);
+function isHarness(value) {
+  return typeof value === "string" && HARNESS_SET.has(value);
+}
+function coerceHarness(value, fallback = DEFAULT_HARNESS) {
+  return isHarness(value) ? value : fallback;
+}
+function resolveSessionHarness(input = {}) {
+  const fallback = input.fallback ?? DEFAULT_HARNESS;
+  if (isHarness(input.sessionHarness)) {
+    const locked = input.sessionHarness;
+    const swapAttempted = isHarness(input.requested) && input.requested !== locked;
+    return { harness: locked, locked: true, swapAttempted };
+  }
+  const harness = coerceHarness(input.requested, coerceHarness(input.workspaceDefault, fallback));
+  return { harness, locked: false, swapAttempted: false };
+}
+function isModelCompatibleWithHarness(harness, modelId) {
+  return harnessSupportsModel(harness, modelId);
+}
+function snapModelToHarness(harness, modelId, canonicalIds) {
+  return aiSnapModelToHarness(harness, modelId, canonicalIds);
+}
+function snapHarnessToModel(harness, modelId) {
+  return aiSnapHarnessToModel(harness, modelId);
+}
+function assertHarnessModelCompatible(harness, modelId) {
+  if (!isModelCompatibleWithHarness(harness, modelId)) {
+    const provider = modelProvider(modelId);
+    const native = preferredHarnessForModel(modelId);
+    throw new Error(
+      `Harness "${harness}" cannot run model "${modelId}" (provider "${provider}"). Use ${native ?? "a router-backed harness (opencode)"} or an allowed model.`
+    );
+  }
+}
+
+export {
+  modelProvider,
+  KNOWN_HARNESSES,
+  DEFAULT_HARNESS,
+  isHarness,
+  coerceHarness,
+  resolveSessionHarness,
+  isModelCompatibleWithHarness,
+  snapModelToHarness,
+  snapHarnessToModel,
+  assertHarnessModelCompatible
+};
+//# sourceMappingURL=chunk-E7QYOOON.js.map

package/dist/chunk-E7QYOOON.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/harness/index.ts"],"sourcesContent":["/**\n * Coding-agent harness selection — taxonomy, coercion, and the session-lock invariant.\n *\n * A \"harness\" is the coding-agent CLI a sandbox drives (opencode / codex /\n * claude-code / …). The shell governs WHICH harness a chat session uses and\n * enforces that a session is LOCKED to the harness it started with — the model\n * may change mid-session, the harness may not (swapping it mid-session would\n * orphan the session's running agent state). Every product otherwise hand-rolls\n * this and hard-codes a single harness; this is the one place the rule lives.\n *\n * Substrate-free: the harness list mirrors the sandbox SDK's `BackendType` as a\n * plain string union (no sandbox dependency). The consumer owns storage — which\n * harness a workspace defaults to, which one a session locked — and maps the\n * resolved value onto the SDK's `backend.type`.\n *\n * Harness↔model COMPATIBILITY (which models a harness can run, snapping) is NOT defined here — it\n * comes from `@tangle-network/agent-interface`, the single source of truth shared with the\n * sandbox-ui pickers and the cli-bridge backends. This module owns the harness TAXONOMY + the\n * session lock.\n */\n\nimport {\n  harnessSupportsModel,\n  modelProvider,\n  preferredHarnessForModel,\n  snapHarnessToModel as aiSnapHarnessToModel,\n  snapModelToHarness as aiSnapModelToHarness,\n  type HarnessType,\n} from '@tangle-network/agent-interface'\n\n/** The known coding-agent backends. Mirrors `@tangle-network/sandbox`'s\n *  `BackendType`; kept structural so this module needs no sandbox dependency. */\nexport const KNOWN_HARNESSES = [\n  'opencode',\n  'claude-code',\n  'kimi-code',\n  'codex',\n  'amp',\n  'factory-droids',\n  'pi',\n  'hermes',\n  'forge',\n  'openclaw',\n  'acp',\n  'cursor',\n  'cli-base',\n] as const\n\nexport type Harness = (typeof KNOWN_HARNESSES)[number]\n\nexport const DEFAULT_HARNESS: Harness = 'opencode'\n\nconst HARNESS_SET: ReadonlySet<string> = new Set(KNOWN_HARNESSES)\n\nexport function isHarness(value: unknown): value is Harness {\n  return typeof value === 'string' && HARNESS_SET.has(value)\n}\n\n/** Coerce an arbitrary value to a known harness, falling back (default `opencode`). */\nexport function coerceHarness(value: unknown, fallback: Harness = DEFAULT_HARNESS): Harness {\n  return isHarness(value) ? value : fallback\n}\n\nexport interface ResolveSessionHarnessInput {\n  /** The harness already locked to this session (recorded at its first turn). */\n  sessionHarness?: unknown\n  /** The harness requested now — a new session's choice, or a turn's attempt to switch. */\n  requested?: unknown\n  /** The workspace's default harness, used only when starting a fresh session. */\n  workspaceDefault?: unknown\n  /** Final fallback when nothing else resolves (default `opencode`). */\n  fallback?: Harness\n}\n\nexport interface ResolvedSessionHarness {\n  /** The harness to actually run — the locked one when the session already has it. */\n  harness: Harness\n  /** True when the session already had a locked harness (this turn did not pick it). */\n  locked: boolean\n  /** True when `requested` differs from the locked harness — a forbidden mid-session\n   *  swap the caller should reject or warn on. The lock always wins regardless. */\n  swapAttempted: boolean\n}\n\n/**\n * Resolve the harness for a turn, enforcing the session lock.\n *\n * - **Session already started** (`sessionHarness` is a known harness): that harness\n *   wins (`locked: true`); a differing `requested` sets `swapAttempted` so the caller\n *   can reject the swap. The model is a separate per-turn concern and is unaffected.\n * - **Fresh session**: pick `requested → workspaceDefault → fallback`. The caller\n *   persists the result as the session's lock for every subsequent turn.\n */\nexport function resolveSessionHarness(input: ResolveSessionHarnessInput = {}): ResolvedSessionHarness {\n  const fallback = input.fallback ?? DEFAULT_HARNESS\n  if (isHarness(input.sessionHarness)) {\n    const locked = input.sessionHarness\n    const swapAttempted = isHarness(input.requested) && input.requested !== locked\n    return { harness: locked, locked: true, swapAttempted }\n  }\n  const harness = coerceHarness(input.requested, coerceHarness(input.workspaceDefault, fallback))\n  return { harness, locked: false, swapAttempted: false }\n}\n\n/**\n * Harness ↔ model compatibility + snapping — delegated to `@tangle-network/agent-interface`.\n *\n * agent-app's `Harness` taxonomy is a superset of agent-interface's `HarnessType` (it carries\n * `forge`/`cursor`, which agent-interface doesn't list). Those extra runners have no provider lock\n * there, so they resolve as router-backed (any model) — the correct behavior — which makes the\n * `as HarnessType` casts safe. The snap helpers only ever return a vendor-locked harness or\n * `opencode`, all of which are valid `Harness` values.\n */\n\nexport { modelProvider }\n\n/** Provider-less ids (sentinels like \"default\", or a session's own config) are\n *  compatible everywhere — every harness honors its own configuration. */\nexport function isModelCompatibleWithHarness(harness: Harness, modelId: string): boolean {\n  return harnessSupportsModel(harness as HarnessType, modelId)\n}\n\n/** Keep `modelId` when the harness can run it; else the harness's best compatible\n *  catalog id (preferred patterns in order, highest version). When nothing in the\n *  catalog fits, return the original so the caller sees the incompatibility. */\nexport function snapModelToHarness(harness: Harness, modelId: string, canonicalIds: readonly string[]): string {\n  return aiSnapModelToHarness(harness as HarnessType, modelId, canonicalIds)\n}\n\n/** Keep the harness when it can run `modelId`; else the model's native harness\n *  (anthropic → claude-code, openai → codex, moonshot → kimi-code), falling back to opencode. */\nexport function snapHarnessToModel(harness: Harness, modelId: string): Harness {\n  return aiSnapHarnessToModel(harness as HarnessType, modelId) as Harness\n}\n\n/** Fail-loud server guard: throw when a harness is asked to run a model it can't.\n *  Call before dispatching a sandbox turn so a bypassed UI can't reach the sidecar\n *  with an incompatible pair. */\nexport function assertHarnessModelCompatible(harness: Harness, modelId: string): void {\n  if (!isModelCompatibleWithHarness(harness, modelId)) {\n    const provider = modelProvider(modelId)\n    const native = preferredHarnessForModel(modelId)\n    throw new Error(\n      `Harness \"${harness}\" cannot run model \"${modelId}\" (provider \"${provider}\"). ` +\n        `Use ${native ?? 'a router-backed harness (opencode)'} or an allowed model.`,\n    )\n  }\n}\n"],"mappings":";AAqBA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,sBAAsB;AAAA,EACtB,sBAAsB;AAAA,OAEjB;AAIA,IAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,IAAM,kBAA2B;AAExC,IAAM,cAAmC,IAAI,IAAI,eAAe;AAEzD,SAAS,UAAU,OAAkC;AAC1D,SAAO,OAAO,UAAU,YAAY,YAAY,IAAI,KAAK;AAC3D;AAGO,SAAS,cAAc,OAAgB,WAAoB,iBAA0B;AAC1F,SAAO,UAAU,KAAK,IAAI,QAAQ;AACpC;AAgCO,SAAS,sBAAsB,QAAoC,CAAC,GAA2B;AACpG,QAAM,WAAW,MAAM,YAAY;AACnC,MAAI,UAAU,MAAM,cAAc,GAAG;AACnC,UAAM,SAAS,MAAM;AACrB,UAAM,gBAAgB,UAAU,MAAM,SAAS,KAAK,MAAM,cAAc;AACxE,WAAO,EAAE,SAAS,QAAQ,QAAQ,MAAM,cAAc;AAAA,EACxD;AACA,QAAM,UAAU,cAAc,MAAM,WAAW,cAAc,MAAM,kBAAkB,QAAQ,CAAC;AAC9F,SAAO,EAAE,SAAS,QAAQ,OAAO,eAAe,MAAM;AACxD;AAgBO,SAAS,6BAA6B,SAAkB,SAA0B;AACvF,SAAO,qBAAqB,SAAwB,OAAO;AAC7D;AAKO,SAAS,mBAAmB,SAAkB,SAAiB,cAAyC;AAC7G,SAAO,qBAAqB,SAAwB,SAAS,YAAY;AAC3E;AAIO,SAAS,mBAAmB,SAAkB,SAA0B;AAC7E,SAAO,qBAAqB,SAAwB,OAAO;AAC7D;AAKO,SAAS,6BAA6B,SAAkB,SAAuB;AACpF,MAAI,CAAC,6BAA6B,SAAS,OAAO,GAAG;AACnD,UAAM,WAAW,cAAc,OAAO;AACtC,UAAM,SAAS,yBAAyB,OAAO;AAC/C,UAAM,IAAI;AAAA,MACR,YAAY,OAAO,uBAAuB,OAAO,gBAAgB,QAAQ,WAChE,UAAU,oCAAoC;AAAA,IACzD;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-JLALKMDY.js → chunk-ILCF6KBD.js}

@@ -1,6 +1,6 @@
 import {
   assertHarnessModelCompatible
-} from "./chunk-5VXPDXZJ.js";
+} from "./chunk-E7QYOOON.js";
 import {
   base64UrlDecodeText,
   base64UrlEncodeText,
@@ -1431,4 +1431,4 @@ export {
   isTerminalPromptEvent,
   detectInteractiveQuestion
 };
-//# sourceMappingURL=chunk-JLALKMDY.js.map
+//# sourceMappingURL=chunk-ILCF6KBD.js.map

package/dist/harness/index.d.ts

@@ -1,3 +1,5 @@
+export { modelProvider } from '@tangle-network/agent-interface';
+
 /**
  * Coding-agent harness selection — taxonomy, coercion, and the session-lock invariant.
  *
@@ -12,7 +14,13 @@
  * plain string union (no sandbox dependency). The consumer owns storage — which
  * harness a workspace defaults to, which one a session locked — and maps the
  * resolved value onto the SDK's `backend.type`.
+ *
+ * Harness↔model COMPATIBILITY (which models a harness can run, snapping) is NOT defined here — it
+ * comes from `@tangle-network/agent-interface`, the single source of truth shared with the
+ * sandbox-ui pickers and the cli-bridge backends. This module owns the harness TAXONOMY + the
+ * session lock.
  */
+
 /** The known coding-agent backends. Mirrors `@tangle-network/sandbox`'s
  *  `BackendType`; kept structural so this module needs no sandbox dependency. */
 declare const KNOWN_HARNESSES: readonly ["opencode", "claude-code", "kimi-code", "codex", "amp", "factory-droids", "pi", "hermes", "forge", "openclaw", "acp", "cursor", "cli-base"];
@@ -50,28 +58,7 @@ interface ResolvedSessionHarness {
  *   persists the result as the session's lock for every subsequent turn.
  */
 declare function resolveSessionHarness(input?: ResolveSessionHarnessInput): ResolvedSessionHarness;
-/**
- * Harness ↔ model compatibility policy — the ONE source of truth, server-side.
- *
- * Native CLI harnesses are vendor-locked: claude-code only drives Anthropic
- * models, codex only OpenAI, kimi-code only Moonshot. Router-backed harnesses
- * (opencode, etc.) accept any catalog model (`providers: null`). The pickers in
- * sandbox-ui keep the pair coherent in the UI; this is the same policy the SHELL
- * enforces so a bypassed/forged request can't pair claude-code with a gpt model
- * and fail at the sidecar. Operates on plain canonical ids ("provider/model") so
- * it stays substrate-free — no model-catalog or UI dependency.
- */
-interface HarnessModelPolicy {
-    /** Canonical-id provider prefixes the harness can run; null = any. */
-    providers: readonly string[] | null;
-    /** Snap-target patterns, best first; highest version within a pattern wins. */
-    preferred: readonly RegExp[];
-}
-declare const HARNESS_MODEL_POLICIES: Partial<Record<Harness, HarnessModelPolicy>>;
-/** Native harness for a model's provider (anthropic → claude-code, …). */
-declare const PROVIDER_PREFERRED_HARNESS: Record<string, Harness>;
-/** Provider prefix of a canonical id ("anthropic/claude-…" → "anthropic"). */
-declare function modelProvider(modelId: string): string | null;
+
 /** Provider-less ids (sentinels like "default", or a session's own config) are
  *  compatible everywhere — every harness honors its own configuration. */
 declare function isModelCompatibleWithHarness(harness: Harness, modelId: string): boolean;
@@ -80,11 +67,11 @@ declare function isModelCompatibleWithHarness(harness: Harness, modelId: string)
  *  catalog fits, return the original so the caller sees the incompatibility. */
 declare function snapModelToHarness(harness: Harness, modelId: string, canonicalIds: readonly string[]): string;
 /** Keep the harness when it can run `modelId`; else the model's native harness
- *  (anthropic → claude-code, openai → codex), falling back to opencode. */
+ *  (anthropic → claude-code, openai → codex, moonshot → kimi-code), falling back to opencode. */
 declare function snapHarnessToModel(harness: Harness, modelId: string): Harness;
 /** Fail-loud server guard: throw when a harness is asked to run a model it can't.
  *  Call before dispatching a sandbox turn so a bypassed UI can't reach the sidecar
  *  with an incompatible pair. */
 declare function assertHarnessModelCompatible(harness: Harness, modelId: string): void;
 
-export { DEFAULT_HARNESS, HARNESS_MODEL_POLICIES, type Harness, type HarnessModelPolicy, KNOWN_HARNESSES, PROVIDER_PREFERRED_HARNESS, type ResolveSessionHarnessInput, type ResolvedSessionHarness, assertHarnessModelCompatible, coerceHarness, isHarness, isModelCompatibleWithHarness, modelProvider, resolveSessionHarness, snapHarnessToModel, snapModelToHarness };
+export { DEFAULT_HARNESS, type Harness, KNOWN_HARNESSES, type ResolveSessionHarnessInput, type ResolvedSessionHarness, assertHarnessModelCompatible, coerceHarness, isHarness, isModelCompatibleWithHarness, resolveSessionHarness, snapHarnessToModel, snapModelToHarness };

package/dist/harness/index.js

@@ -1,8 +1,6 @@
 import {
   DEFAULT_HARNESS,
-  HARNESS_MODEL_POLICIES,
   KNOWN_HARNESSES,
-  PROVIDER_PREFERRED_HARNESS,
   assertHarnessModelCompatible,
   coerceHarness,
   isHarness,
@@ -11,12 +9,10 @@ import {
   resolveSessionHarness,
   snapHarnessToModel,
   snapModelToHarness
-} from "../chunk-5VXPDXZJ.js";
+} from "../chunk-E7QYOOON.js";
 export {
   DEFAULT_HARNESS,
-  HARNESS_MODEL_POLICIES,
   KNOWN_HARNESSES,
-  PROVIDER_PREFERRED_HARNESS,
   assertHarnessModelCompatible,
   coerceHarness,
   isHarness,

package/dist/index.d.ts

@@ -10,7 +10,7 @@ export { AgentRuntime, AgentRuntimeModelConfig, AgentTurnOptions, AnySurfaceKind
 export { createTokenRecallChecker, producedFromToolEvents } from './eval/index.js';
 export { KnowledgeRequirementSpec, KnowledgeSignal, KnowledgeStateAccessor, SatisfiedByRule, buildKnowledgeRequirements, deriveSignals } from './knowledge/index.js';
 export { CreateKnowledgeLoopDeps, KnowledgeCandidate, KnowledgeDecider, KnowledgeDeciderInput, KnowledgeDecision, KnowledgeGateVerdict, KnowledgeLoop, KnowledgeLoopDriver, createKnowledgeLoop, createReviewerDecider, reviewCandidate } from './knowledge-loop/index.js';
-export { DEFAULT_HARNESS, HARNESS_MODEL_POLICIES, Harness, HarnessModelPolicy, KNOWN_HARNESSES, PROVIDER_PREFERRED_HARNESS, ResolveSessionHarnessInput, ResolvedSessionHarness, assertHarnessModelCompatible, coerceHarness, isHarness, isModelCompatibleWithHarness, modelProvider, resolveSessionHarness, snapHarnessToModel, snapModelToHarness } from './harness/index.js';
+export { DEFAULT_HARNESS, Harness, KNOWN_HARNESSES, ResolveSessionHarnessInput, ResolvedSessionHarness, assertHarnessModelCompatible, coerceHarness, isHarness, isModelCompatibleWithHarness, resolveSessionHarness, snapHarnessToModel, snapModelToHarness } from './harness/index.js';
 export { AgentAppConfig, AgentIdentityConfig, AgentIntegrationsConfig, AgentKnowledgeConfig, AgentTaxonomyConfig, AgentUiConfig, KnowledgeLoopConfig, KnowledgeSourceSpec, agentAppConfigJsonSchema, defineAgentApp } from './config/index.js';
 export { D1Like, D1PreparedLike, DrizzleColumnLike, DrizzleSqliteCoreLike, PRESET_MIGRATION_SQL, PRESET_TABLES, PresetBillingOptions, PresetKnowledgeAccessorOptions, PresetToolHandlerOptions, VaultKv, createD1KnowledgeStateAccessor, createPresetDrizzleSchema, createPresetFieldCrypto, createPresetToolHandlers, createPresetWorkspaceKeyManager, createPresetWorkspaceKeyStore } from './preset-cloudflare/index.js';
 export { KeyCrypto, KeyProvisioner, PlanLimit, PlatformBalanceInfo, PlatformBalanceManager, PlatformBalanceManagerOptions, PlatformBillingClient, PlatformIdentity, PlatformProductUsage, SharedBillingState, TcloudKeyClient, WorkspaceKeyManager, WorkspaceKeyManagerOptions, WorkspaceKeyRecord, WorkspaceKeyStore, WorkspaceModelKeyUsage, createPlatformBalanceManager, createTcloudKeyProvisioner, createWorkspaceKeyManager } from './billing/index.js';
@@ -37,6 +37,7 @@ export { RunToolLoopOptions as AppToolLoopOptions, ToolLoopAssistantToolCall as
 export { CompletionRequirement, CompletionVerdict, CorrectnessChecker, ProducedState, RuntimeEventLike, SatisfiedBy, TaskGold, createLlmCorrectnessChecker, extractProducedState, verifyCompletion, weightedComposite } from '@tangle-network/agent-eval';
 export { F as FlowSpan, a as FlowTrace } from './flow-types-Cb_AblZs.js';
 export { StorageConfig } from '@tangle-network/sandbox';
+export { modelProvider } from '@tangle-network/agent-interface';
 import '@tangle-network/agent-runtime/intelligence';
 import '@tangle-network/agent-knowledge';
 import 'zod';

package/dist/index.js

@@ -284,12 +284,10 @@ import {
   verifySandboxTerminalToken,
   verifyTerminalProxyToken,
   writeProfileFilesToBox
-} from "./chunk-JLALKMDY.js";
+} from "./chunk-ILCF6KBD.js";
 import {
   DEFAULT_HARNESS,
-  HARNESS_MODEL_POLICIES,
   KNOWN_HARNESSES,
-  PROVIDER_PREFERRED_HARNESS,
   assertHarnessModelCompatible,
   coerceHarness,
   isHarness,
@@ -298,7 +296,7 @@ import {
   resolveSessionHarness,
   snapHarnessToModel,
   snapModelToHarness
-} from "./chunk-5VXPDXZJ.js";
+} from "./chunk-E7QYOOON.js";
 import {
   agentAppConfigJsonSchema,
   defineAgentApp
@@ -408,7 +406,6 @@ export {
   DEFAULT_TANGLE_ROUTER_BASE_URL,
   EXPORT_PRESETS,
   EmailContentSchema,
-  HARNESS_MODEL_POLICIES,
   HubExecClient,
   ImageContentSchema,
   KNOWN_HARNESSES,
@@ -419,7 +416,6 @@ export {
   MissionConcurrencyError,
   PRESET_MIGRATION_SQL,
   PRESET_TABLES,
-  PROVIDER_PREFERRED_HARNESS,
   RetryableStepError,
   SCENE_ELEMENT_KINDS,
   SCENE_OPERATION_TYPES,

package/dist/run/index.d.ts

@@ -1,4 +1,5 @@
 import { Harness } from '../harness/index.js';
+import '@tangle-network/agent-interface';
 
 /**
  * Execution-mode dispatch — the shell entry that infers *how* to run an agent

package/dist/run/index.js

@@ -1,6 +1,6 @@
 import {
   KNOWN_HARNESSES
-} from "../chunk-5VXPDXZJ.js";
+} from "../chunk-E7QYOOON.js";
 
 // src/run/index.ts
 var ROUTER_HARNESS = "router";

package/dist/sandbox/index.d.ts

@@ -4,6 +4,7 @@ import { a as ToolHeaderNames } from '../auth-DuptSkWh.js';
 import { f as AppToolName, c as AppToolContext } from '../types-BEOvc_ue.js';
 import { Harness } from '../harness/index.js';
 import { f as TangleExecutionEnvironment } from '../model-dF2h4xT9.js';
+import '@tangle-network/agent-interface';
 
 type Outcome<T> = {
     succeeded: true;

package/dist/sandbox/index.js

@@ -47,8 +47,8 @@ import {
   verifySandboxTerminalToken,
   verifyTerminalProxyToken,
   writeProfileFilesToBox
-} from "../chunk-JLALKMDY.js";
-import "../chunk-5VXPDXZJ.js";
+} from "../chunk-ILCF6KBD.js";
+import "../chunk-E7QYOOON.js";
 import "../chunk-3II3AWHY.js";
 import "../chunk-7EVZUIHW.js";
 import "../chunk-7W5XSTUF.js";

package/dist/web-react/index.d.ts

@@ -4,6 +4,7 @@ import { S as StepAgentActivity } from '../agent-activity-C8ZG0F0M.js';
 import { a as FlowTrace } from '../flow-types-Cb_AblZs.js';
 import { C as CatalogModel } from '../model-catalog-BEAEVDaa.js';
 import { Harness } from '../harness/index.js';
+import '@tangle-network/agent-interface';
 
 /**
  * Client-side chat-stream consumption — the NDJSON parse loop every agent

package/dist/web-react/index.js

@@ -4,7 +4,7 @@ import {
 import {
   snapHarnessToModel,
   snapModelToHarness
-} from "../chunk-5VXPDXZJ.js";
+} from "../chunk-E7QYOOON.js";
 
 // src/web-react/index.tsx
 import { useEffect as useEffect5, useMemo as useMemo3, useRef as useRef4, useState as useState6, memo } from "react";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.42.14",
+  "version": "0.42.15",
   "packageManager": "pnpm@10.33.4",
   "description": "Application-shell framework for Tangle agent products: a bounded tool loop, the structured agent→app tool side channel, integration-hub client, per-workspace billing, and crypto — composed over the Tangle agent substrate through typed seams.",
   "keywords": [
@@ -334,6 +334,7 @@
     "@radix-ui/react-dialog": "^1.1.15",
     "@tangle-network/agent-eval": "^0.99.0",
     "@tangle-network/agent-integrations": "^0.44.0",
+    "@tangle-network/agent-interface": "^0.15.0",
     "@tangle-network/agent-knowledge": "^1.7.0",
     "@tangle-network/agent-runtime": "^0.76.0",
     "@tangle-network/sandbox": "^0.9.5",
@@ -366,6 +367,7 @@
     "@radix-ui/react-dialog": ">=1.1",
     "@tangle-network/agent-eval": ">=0.99.0",
     "@tangle-network/agent-integrations": ">=0.44.0",
+    "@tangle-network/agent-interface": ">=0.15.0",
     "@tangle-network/agent-knowledge": ">=1.7.0",
     "@tangle-network/agent-runtime": ">=0.76.0",
     "@tangle-network/sandbox": ">=0.9.4",

package/dist/chunk-5VXPDXZJ.js

@@ -1,101 +0,0 @@
-// src/harness/index.ts
-var KNOWN_HARNESSES = [
-  "opencode",
-  "claude-code",
-  "kimi-code",
-  "codex",
-  "amp",
-  "factory-droids",
-  "pi",
-  "hermes",
-  "forge",
-  "openclaw",
-  "acp",
-  "cursor",
-  "cli-base"
-];
-var DEFAULT_HARNESS = "opencode";
-var HARNESS_SET = new Set(KNOWN_HARNESSES);
-function isHarness(value) {
-  return typeof value === "string" && HARNESS_SET.has(value);
-}
-function coerceHarness(value, fallback = DEFAULT_HARNESS) {
-  return isHarness(value) ? value : fallback;
-}
-function resolveSessionHarness(input = {}) {
-  const fallback = input.fallback ?? DEFAULT_HARNESS;
-  if (isHarness(input.sessionHarness)) {
-    const locked = input.sessionHarness;
-    const swapAttempted = isHarness(input.requested) && input.requested !== locked;
-    return { harness: locked, locked: true, swapAttempted };
-  }
-  const harness = coerceHarness(input.requested, coerceHarness(input.workspaceDefault, fallback));
-  return { harness, locked: false, swapAttempted: false };
-}
-var HARNESS_MODEL_POLICIES = {
-  "claude-code": {
-    providers: ["anthropic"],
-    preferred: [/^anthropic\/claude-opus-[\d.-]+$/, /^anthropic\/claude-sonnet-[\d.-]+$/, /^anthropic\//]
-  },
-  codex: {
-    providers: ["openai"],
-    preferred: [/^openai\/gpt-\d+(\.\d+)?$/, /^openai\/gpt/, /^openai\//]
-  },
-  "kimi-code": { providers: ["moonshot"], preferred: [/^moonshot\//] }
-};
-var PROVIDER_PREFERRED_HARNESS = {
-  anthropic: "claude-code",
-  openai: "codex",
-  moonshot: "kimi-code"
-};
-function modelProvider(modelId) {
-  const slash = modelId.indexOf("/");
-  return slash > 0 ? modelId.slice(0, slash) : null;
-}
-function isModelCompatibleWithHarness(harness, modelId) {
-  const policy = HARNESS_MODEL_POLICIES[harness];
-  if (!policy || policy.providers === null) return true;
-  const provider = modelProvider(modelId);
-  if (!provider) return true;
-  return policy.providers.includes(provider);
-}
-var numericDesc = new Intl.Collator(void 0, { numeric: true, sensitivity: "base" });
-function snapModelToHarness(harness, modelId, canonicalIds) {
-  if (isModelCompatibleWithHarness(harness, modelId)) return modelId;
-  const policy = HARNESS_MODEL_POLICIES[harness];
-  if (!policy) return modelId;
-  for (const pattern of policy.preferred) {
-    const matches = canonicalIds.filter((id) => pattern.test(id)).sort((a, b) => numericDesc.compare(b, a));
-    if (matches.length > 0) return matches[0];
-  }
-  return canonicalIds.find((id) => isModelCompatibleWithHarness(harness, id)) ?? modelId;
-}
-function snapHarnessToModel(harness, modelId) {
-  if (isModelCompatibleWithHarness(harness, modelId)) return harness;
-  const provider = modelProvider(modelId);
-  return provider && PROVIDER_PREFERRED_HARNESS[provider] || "opencode";
-}
-function assertHarnessModelCompatible(harness, modelId) {
-  if (!isModelCompatibleWithHarness(harness, modelId)) {
-    const provider = modelProvider(modelId);
-    throw new Error(
-      `Harness "${harness}" cannot run model "${modelId}" (provider "${provider}"). Use ${PROVIDER_PREFERRED_HARNESS[provider ?? ""] ?? "a router-backed harness (opencode)"} or an allowed model.`
-    );
-  }
-}
-
-export {
-  KNOWN_HARNESSES,
-  DEFAULT_HARNESS,
-  isHarness,
-  coerceHarness,
-  resolveSessionHarness,
-  HARNESS_MODEL_POLICIES,
-  PROVIDER_PREFERRED_HARNESS,
-  modelProvider,
-  isModelCompatibleWithHarness,
-  snapModelToHarness,
-  snapHarnessToModel,
-  assertHarnessModelCompatible
-};
-//# sourceMappingURL=chunk-5VXPDXZJ.js.map

package/dist/chunk-5VXPDXZJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/harness/index.ts"],"sourcesContent":["/**\n * Coding-agent harness selection — taxonomy, coercion, and the session-lock invariant.\n *\n * A \"harness\" is the coding-agent CLI a sandbox drives (opencode / codex /\n * claude-code / …). The shell governs WHICH harness a chat session uses and\n * enforces that a session is LOCKED to the harness it started with — the model\n * may change mid-session, the harness may not (swapping it mid-session would\n * orphan the session's running agent state). Every product otherwise hand-rolls\n * this and hard-codes a single harness; this is the one place the rule lives.\n *\n * Substrate-free: the harness list mirrors the sandbox SDK's `BackendType` as a\n * plain string union (no sandbox dependency). The consumer owns storage — which\n * harness a workspace defaults to, which one a session locked — and maps the\n * resolved value onto the SDK's `backend.type`.\n */\n\n/** The known coding-agent backends. Mirrors `@tangle-network/sandbox`'s\n *  `BackendType`; kept structural so this module needs no sandbox dependency. */\nexport const KNOWN_HARNESSES = [\n  'opencode',\n  'claude-code',\n  'kimi-code',\n  'codex',\n  'amp',\n  'factory-droids',\n  'pi',\n  'hermes',\n  'forge',\n  'openclaw',\n  'acp',\n  'cursor',\n  'cli-base',\n] as const\n\nexport type Harness = (typeof KNOWN_HARNESSES)[number]\n\nexport const DEFAULT_HARNESS: Harness = 'opencode'\n\nconst HARNESS_SET: ReadonlySet<string> = new Set(KNOWN_HARNESSES)\n\nexport function isHarness(value: unknown): value is Harness {\n  return typeof value === 'string' && HARNESS_SET.has(value)\n}\n\n/** Coerce an arbitrary value to a known harness, falling back (default `opencode`). */\nexport function coerceHarness(value: unknown, fallback: Harness = DEFAULT_HARNESS): Harness {\n  return isHarness(value) ? value : fallback\n}\n\nexport interface ResolveSessionHarnessInput {\n  /** The harness already locked to this session (recorded at its first turn). */\n  sessionHarness?: unknown\n  /** The harness requested now — a new session's choice, or a turn's attempt to switch. */\n  requested?: unknown\n  /** The workspace's default harness, used only when starting a fresh session. */\n  workspaceDefault?: unknown\n  /** Final fallback when nothing else resolves (default `opencode`). */\n  fallback?: Harness\n}\n\nexport interface ResolvedSessionHarness {\n  /** The harness to actually run — the locked one when the session already has it. */\n  harness: Harness\n  /** True when the session already had a locked harness (this turn did not pick it). */\n  locked: boolean\n  /** True when `requested` differs from the locked harness — a forbidden mid-session\n   *  swap the caller should reject or warn on. The lock always wins regardless. */\n  swapAttempted: boolean\n}\n\n/**\n * Resolve the harness for a turn, enforcing the session lock.\n *\n * - **Session already started** (`sessionHarness` is a known harness): that harness\n *   wins (`locked: true`); a differing `requested` sets `swapAttempted` so the caller\n *   can reject the swap. The model is a separate per-turn concern and is unaffected.\n * - **Fresh session**: pick `requested → workspaceDefault → fallback`. The caller\n *   persists the result as the session's lock for every subsequent turn.\n */\nexport function resolveSessionHarness(input: ResolveSessionHarnessInput = {}): ResolvedSessionHarness {\n  const fallback = input.fallback ?? DEFAULT_HARNESS\n  if (isHarness(input.sessionHarness)) {\n    const locked = input.sessionHarness\n    const swapAttempted = isHarness(input.requested) && input.requested !== locked\n    return { harness: locked, locked: true, swapAttempted }\n  }\n  const harness = coerceHarness(input.requested, coerceHarness(input.workspaceDefault, fallback))\n  return { harness, locked: false, swapAttempted: false }\n}\n\n/**\n * Harness ↔ model compatibility policy — the ONE source of truth, server-side.\n *\n * Native CLI harnesses are vendor-locked: claude-code only drives Anthropic\n * models, codex only OpenAI, kimi-code only Moonshot. Router-backed harnesses\n * (opencode, etc.) accept any catalog model (`providers: null`). The pickers in\n * sandbox-ui keep the pair coherent in the UI; this is the same policy the SHELL\n * enforces so a bypassed/forged request can't pair claude-code with a gpt model\n * and fail at the sidecar. Operates on plain canonical ids (\"provider/model\") so\n * it stays substrate-free — no model-catalog or UI dependency.\n */\nexport interface HarnessModelPolicy {\n  /** Canonical-id provider prefixes the harness can run; null = any. */\n  providers: readonly string[] | null\n  /** Snap-target patterns, best first; highest version within a pattern wins. */\n  preferred: readonly RegExp[]\n}\n\nexport const HARNESS_MODEL_POLICIES: Partial<Record<Harness, HarnessModelPolicy>> = {\n  'claude-code': {\n    providers: ['anthropic'],\n    preferred: [/^anthropic\\/claude-opus-[\\d.-]+$/, /^anthropic\\/claude-sonnet-[\\d.-]+$/, /^anthropic\\//],\n  },\n  codex: {\n    providers: ['openai'],\n    preferred: [/^openai\\/gpt-\\d+(\\.\\d+)?$/, /^openai\\/gpt/, /^openai\\//],\n  },\n  'kimi-code': { providers: ['moonshot'], preferred: [/^moonshot\\//] },\n}\n\n/** Native harness for a model's provider (anthropic → claude-code, …). */\nexport const PROVIDER_PREFERRED_HARNESS: Record<string, Harness> = {\n  anthropic: 'claude-code',\n  openai: 'codex',\n  moonshot: 'kimi-code',\n}\n\n/** Provider prefix of a canonical id (\"anthropic/claude-…\" → \"anthropic\"). */\nexport function modelProvider(modelId: string): string | null {\n  const slash = modelId.indexOf('/')\n  return slash > 0 ? modelId.slice(0, slash) : null\n}\n\n/** Provider-less ids (sentinels like \"default\", or a session's own config) are\n *  compatible everywhere — every harness honors its own configuration. */\nexport function isModelCompatibleWithHarness(harness: Harness, modelId: string): boolean {\n  const policy = HARNESS_MODEL_POLICIES[harness]\n  if (!policy || policy.providers === null) return true\n  const provider = modelProvider(modelId)\n  if (!provider) return true\n  return policy.providers.includes(provider)\n}\n\nconst numericDesc = new Intl.Collator(undefined, { numeric: true, sensitivity: 'base' })\n\n/** Keep `modelId` when the harness can run it; else the harness's best compatible\n *  catalog id (preferred patterns in order, highest version). When nothing in the\n *  catalog fits, return the original so the caller sees the incompatibility. */\nexport function snapModelToHarness(harness: Harness, modelId: string, canonicalIds: readonly string[]): string {\n  if (isModelCompatibleWithHarness(harness, modelId)) return modelId\n  const policy = HARNESS_MODEL_POLICIES[harness]\n  if (!policy) return modelId\n  for (const pattern of policy.preferred) {\n    const matches = canonicalIds.filter((id) => pattern.test(id)).sort((a, b) => numericDesc.compare(b, a))\n    if (matches.length > 0) return matches[0]!\n  }\n  return canonicalIds.find((id) => isModelCompatibleWithHarness(harness, id)) ?? modelId\n}\n\n/** Keep the harness when it can run `modelId`; else the model's native harness\n *  (anthropic → claude-code, openai → codex), falling back to opencode. */\nexport function snapHarnessToModel(harness: Harness, modelId: string): Harness {\n  if (isModelCompatibleWithHarness(harness, modelId)) return harness\n  const provider = modelProvider(modelId)\n  return (provider && PROVIDER_PREFERRED_HARNESS[provider]) || 'opencode'\n}\n\n/** Fail-loud server guard: throw when a harness is asked to run a model it can't.\n *  Call before dispatching a sandbox turn so a bypassed UI can't reach the sidecar\n *  with an incompatible pair. */\nexport function assertHarnessModelCompatible(harness: Harness, modelId: string): void {\n  if (!isModelCompatibleWithHarness(harness, modelId)) {\n    const provider = modelProvider(modelId)\n    throw new Error(\n      `Harness \"${harness}\" cannot run model \"${modelId}\" (provider \"${provider}\"). ` +\n        `Use ${PROVIDER_PREFERRED_HARNESS[provider ?? ''] ?? 'a router-backed harness (opencode)'} or an allowed model.`,\n    )\n  }\n}\n"],"mappings":";AAkBO,IAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,IAAM,kBAA2B;AAExC,IAAM,cAAmC,IAAI,IAAI,eAAe;AAEzD,SAAS,UAAU,OAAkC;AAC1D,SAAO,OAAO,UAAU,YAAY,YAAY,IAAI,KAAK;AAC3D;AAGO,SAAS,cAAc,OAAgB,WAAoB,iBAA0B;AAC1F,SAAO,UAAU,KAAK,IAAI,QAAQ;AACpC;AAgCO,SAAS,sBAAsB,QAAoC,CAAC,GAA2B;AACpG,QAAM,WAAW,MAAM,YAAY;AACnC,MAAI,UAAU,MAAM,cAAc,GAAG;AACnC,UAAM,SAAS,MAAM;AACrB,UAAM,gBAAgB,UAAU,MAAM,SAAS,KAAK,MAAM,cAAc;AACxE,WAAO,EAAE,SAAS,QAAQ,QAAQ,MAAM,cAAc;AAAA,EACxD;AACA,QAAM,UAAU,cAAc,MAAM,WAAW,cAAc,MAAM,kBAAkB,QAAQ,CAAC;AAC9F,SAAO,EAAE,SAAS,QAAQ,OAAO,eAAe,MAAM;AACxD;AAoBO,IAAM,yBAAuE;AAAA,EAClF,eAAe;AAAA,IACb,WAAW,CAAC,WAAW;AAAA,IACvB,WAAW,CAAC,oCAAoC,sCAAsC,cAAc;AAAA,EACtG;AAAA,EACA,OAAO;AAAA,IACL,WAAW,CAAC,QAAQ;AAAA,IACpB,WAAW,CAAC,6BAA6B,gBAAgB,WAAW;AAAA,EACtE;AAAA,EACA,aAAa,EAAE,WAAW,CAAC,UAAU,GAAG,WAAW,CAAC,aAAa,EAAE;AACrE;AAGO,IAAM,6BAAsD;AAAA,EACjE,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,UAAU;AACZ;AAGO,SAAS,cAAc,SAAgC;AAC5D,QAAM,QAAQ,QAAQ,QAAQ,GAAG;AACjC,SAAO,QAAQ,IAAI,QAAQ,MAAM,GAAG,KAAK,IAAI;AAC/C;AAIO,SAAS,6BAA6B,SAAkB,SAA0B;AACvF,QAAM,SAAS,uBAAuB,OAAO;AAC7C,MAAI,CAAC,UAAU,OAAO,cAAc,KAAM,QAAO;AACjD,QAAM,WAAW,cAAc,OAAO;AACtC,MAAI,CAAC,SAAU,QAAO;AACtB,SAAO,OAAO,UAAU,SAAS,QAAQ;AAC3C;AAEA,IAAM,cAAc,IAAI,KAAK,SAAS,QAAW,EAAE,SAAS,MAAM,aAAa,OAAO,CAAC;AAKhF,SAAS,mBAAmB,SAAkB,SAAiB,cAAyC;AAC7G,MAAI,6BAA6B,SAAS,OAAO,EAAG,QAAO;AAC3D,QAAM,SAAS,uBAAuB,OAAO;AAC7C,MAAI,CAAC,OAAQ,QAAO;AACpB,aAAW,WAAW,OAAO,WAAW;AACtC,UAAM,UAAU,aAAa,OAAO,CAAC,OAAO,QAAQ,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,YAAY,QAAQ,GAAG,CAAC,CAAC;AACtG,QAAI,QAAQ,SAAS,EAAG,QAAO,QAAQ,CAAC;AAAA,EAC1C;AACA,SAAO,aAAa,KAAK,CAAC,OAAO,6BAA6B,SAAS,EAAE,CAAC,KAAK;AACjF;AAIO,SAAS,mBAAmB,SAAkB,SAA0B;AAC7E,MAAI,6BAA6B,SAAS,OAAO,EAAG,QAAO;AAC3D,QAAM,WAAW,cAAc,OAAO;AACtC,SAAQ,YAAY,2BAA2B,QAAQ,KAAM;AAC/D;AAKO,SAAS,6BAA6B,SAAkB,SAAuB;AACpF,MAAI,CAAC,6BAA6B,SAAS,OAAO,GAAG;AACnD,UAAM,WAAW,cAAc,OAAO;AACtC,UAAM,IAAI;AAAA,MACR,YAAY,OAAO,uBAAuB,OAAO,gBAAgB,QAAQ,WAChE,2BAA2B,YAAY,EAAE,KAAK,oCAAoC;AAAA,IAC7F;AAAA,EACF;AACF;","names":[]}