@tangle-network/agent-interface 0.20.0 → 0.21.0

package/dist/agent-candidate-profile-schema.d.ts

@@ -0,0 +1,267 @@
+import { z } from "zod";
+export declare const agentCandidateMcpServerSchema: z.ZodObject<{
+    transport: z.ZodOptional<z.ZodLiteral<"stdio">>;
+    command: z.ZodOptional<z.ZodString>;
+    args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"public">;
+        value: z.ZodString;
+    }, z.core.$strict>>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        kind: z.ZodLiteral<"public">;
+        value: z.ZodString;
+    }, z.core.$strict>>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const agentCandidateHookCommandSchema: z.ZodObject<{
+    executable: z.ZodString;
+    args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"public">;
+        value: z.ZodString;
+    }, z.core.$strict>>>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    blocking: z.ZodOptional<z.ZodBoolean>;
+    matcher: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        kind: z.ZodLiteral<"public">;
+        value: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export declare const agentCandidateProfileSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    version: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    prompt: z.ZodOptional<z.ZodObject<{
+        systemPrompt: z.ZodOptional<z.ZodString>;
+        instructions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    model: z.ZodOptional<z.ZodObject<{
+        reasoningEffort: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            ultracode: "ultracode";
+        }>>;
+        default: z.ZodOptional<z.ZodString>;
+        small: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    harness: z.ZodOptional<z.ZodEnum<{
+        "claude-code": "claude-code";
+        claude: "claude";
+        claudish: "claudish";
+        nanoclaw: "nanoclaw";
+        codex: "codex";
+        opencode: "opencode";
+        "kimi-code": "kimi-code";
+        kimi: "kimi";
+        pi: "pi";
+        gemini: "gemini";
+        hermes: "hermes";
+        openclaw: "openclaw";
+        amp: "amp";
+        "factory-droids": "factory-droids";
+        acp: "acp";
+        "cli-base": "cli-base";
+    }>>;
+    permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
+        allow: "allow";
+        ask: "ask";
+        deny: "deny";
+    }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
+        allow: "allow";
+        ask: "ask";
+        deny: "deny";
+    }>>]>>>;
+    tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+    mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        transport: z.ZodOptional<z.ZodLiteral<"stdio">>;
+        command: z.ZodOptional<z.ZodString>;
+        args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            kind: z.ZodLiteral<"public">;
+            value: z.ZodString;
+        }, z.core.$strict>>>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            kind: z.ZodLiteral<"public">;
+            value: z.ZodString;
+        }, z.core.$strict>>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>>;
+    subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        prompt: z.ZodOptional<z.ZodString>;
+        permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            deny: "deny";
+        }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            deny: "deny";
+        }>>]>>>;
+        tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+        description: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        maxSteps: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>;
+    resources: z.ZodOptional<z.ZodObject<{
+        files: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            resource: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"inline">;
+                name: z.ZodString;
+                content: z.ZodString;
+                sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+                byteLength: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"github">;
+                repository: z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    owner: z.ZodString;
+                    repo: z.ZodString;
+                }, z.core.$strict>;
+                path: z.ZodString;
+                commit: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+                sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+                byteLength: z.ZodNumber;
+            }, z.core.$strict>], "kind">;
+            executable: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>>;
+        tools: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"inline">;
+            name: z.ZodString;
+            content: z.ZodString;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"github">;
+            repository: z.ZodObject<{
+                kind: z.ZodLiteral<"github">;
+                owner: z.ZodString;
+                repo: z.ZodString;
+            }, z.core.$strict>;
+            path: z.ZodString;
+            commit: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>], "kind">>>;
+        skills: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"inline">;
+            name: z.ZodString;
+            content: z.ZodString;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"github">;
+            repository: z.ZodObject<{
+                kind: z.ZodLiteral<"github">;
+                owner: z.ZodString;
+                repo: z.ZodString;
+            }, z.core.$strict>;
+            path: z.ZodString;
+            commit: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>], "kind">>>;
+        agents: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"inline">;
+            name: z.ZodString;
+            content: z.ZodString;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"github">;
+            repository: z.ZodObject<{
+                kind: z.ZodLiteral<"github">;
+                owner: z.ZodString;
+                repo: z.ZodString;
+            }, z.core.$strict>;
+            path: z.ZodString;
+            commit: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>], "kind">>>;
+        commands: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"inline">;
+            name: z.ZodString;
+            content: z.ZodString;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"github">;
+            repository: z.ZodObject<{
+                kind: z.ZodLiteral<"github">;
+                owner: z.ZodString;
+                repo: z.ZodString;
+            }, z.core.$strict>;
+            path: z.ZodString;
+            commit: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>], "kind">>>;
+        instructions: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"inline">;
+            name: z.ZodString;
+            content: z.ZodString;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"github">;
+            repository: z.ZodObject<{
+                kind: z.ZodLiteral<"github">;
+                owner: z.ZodString;
+                repo: z.ZodString;
+            }, z.core.$strict>;
+            path: z.ZodString;
+            commit: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            byteLength: z.ZodNumber;
+        }, z.core.$strict>], "kind">]>>;
+        failOnError: z.ZodLiteral<true>;
+    }, z.core.$strict>>;
+    hooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+        executable: z.ZodString;
+        args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            kind: z.ZodLiteral<"public">;
+            value: z.ZodString;
+        }, z.core.$strict>>>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        blocking: z.ZodOptional<z.ZodBoolean>;
+        matcher: z.ZodOptional<z.ZodString>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            kind: z.ZodLiteral<"public">;
+            value: z.ZodString;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>>>;
+    modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        prompt: z.ZodOptional<z.ZodString>;
+        permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            deny: "deny";
+        }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            deny: "deny";
+        }>>]>>>;
+        tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+        description: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    confidential: z.ZodOptional<z.ZodObject<{
+        tee: z.ZodOptional<z.ZodString>;
+        attestationNonce: z.ZodOptional<z.ZodString>;
+        sealed: z.ZodOptional<z.ZodBoolean>;
+        attestationRefresh: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;

package/dist/agent-candidate-profile-schema.js

@@ -0,0 +1,125 @@
+import { z } from "zod";
+import { agentCandidateResourcesSchema } from "./agent-candidate-artifact-schema.js";
+import { agentCandidateConfigValueSchema, environmentConfigSchema, isCanonicalJsonValue, isSafeExecutable, isSafeRelativePath, isWellFormedUnicode, } from "./agent-candidate-schema-common.js";
+import { harnessTypeSchema } from "./harness.js";
+import { agentProfileConfidentialSchema, agentProfileModeSchema, agentProfileModelHintsSchema, agentProfilePermissionSchema, agentProfilePromptSchema, agentSubagentProfileSchema, } from "./profile-schema.js";
+const executableSchema = z
+    .string()
+    .refine(isSafeExecutable, "executable must be a canonical non-shell command");
+export const agentCandidateMcpServerSchema = z
+    .object({
+    transport: z.literal("stdio").optional(),
+    command: executableSchema.optional(),
+    args: z.array(agentCandidateConfigValueSchema).optional(),
+    env: environmentConfigSchema.optional(),
+    cwd: z
+        .string()
+        .refine((value) => isSafeRelativePath(value, true), "MCP cwd must be a canonical workspace-relative path")
+        .optional(),
+    enabled: z.boolean().optional(),
+})
+    .strict()
+    .superRefine((server, ctx) => {
+    if (server.enabled === false) {
+        if (server.transport !== undefined ||
+            server.command !== undefined ||
+            server.args !== undefined ||
+            server.env !== undefined ||
+            server.cwd !== undefined) {
+            ctx.addIssue({
+                code: "custom",
+                message: "disabled MCP servers cannot carry process fields",
+            });
+        }
+        return;
+    }
+    if (server.command === undefined) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["command"],
+            message: "enabled stdio MCP servers require a command",
+        });
+    }
+});
+export const agentCandidateHookCommandSchema = z
+    .object({
+    executable: executableSchema,
+    args: z.array(agentCandidateConfigValueSchema).optional(),
+    timeoutMs: z.number().positive().optional(),
+    blocking: z.boolean().optional(),
+    matcher: z.string().refine(isWellFormedUnicode).optional(),
+    env: environmentConfigSchema.optional(),
+})
+    .strict();
+const candidateModelHintsSchema = agentProfileModelHintsSchema
+    .omit({ metadata: true })
+    .extend({
+    default: z.string().min(1).optional(),
+    small: z.string().min(1).optional(),
+    provider: z.string().min(1).optional(),
+})
+    .strict();
+const candidateSubagentSchema = agentSubagentProfileSchema
+    .omit({ metadata: true })
+    .extend({
+    model: z.string().min(1).optional(),
+    maxSteps: z.number().int().positive().optional(),
+})
+    .strict();
+const candidateModeSchema = agentProfileModeSchema
+    .omit({ metadata: true })
+    .extend({ model: z.string().min(1).optional() })
+    .strict();
+export const agentCandidateProfileSchema = z
+    .object({
+    name: z.string().refine(isWellFormedUnicode).optional(),
+    description: z.string().refine(isWellFormedUnicode).optional(),
+    version: z.string().refine(isWellFormedUnicode).optional(),
+    tags: z.array(z.string().refine(isWellFormedUnicode)).optional(),
+    prompt: agentProfilePromptSchema.strict().optional(),
+    model: candidateModelHintsSchema.optional(),
+    harness: harnessTypeSchema.optional(),
+    permissions: z
+        .record(z.string(), agentProfilePermissionSchema)
+        .optional(),
+    tools: z.record(z.string(), z.boolean()).optional(),
+    mcp: z.record(z.string(), agentCandidateMcpServerSchema).optional(),
+    subagents: z.record(z.string(), candidateSubagentSchema).optional(),
+    resources: agentCandidateResourcesSchema.optional(),
+    hooks: z
+        .record(z.string(), z.array(agentCandidateHookCommandSchema))
+        .optional(),
+    modes: z.record(z.string(), candidateModeSchema).optional(),
+    confidential: agentProfileConfidentialSchema.strict().optional(),
+})
+    .strict()
+    .superRefine((profile, ctx) => {
+    if (!isCanonicalJsonValue(profile)) {
+        ctx.addIssue({
+            code: "custom",
+            message: "candidate profile must contain only RFC 8785 JSON values",
+        });
+    }
+    const primaryModel = profile.model?.default;
+    const alternateRoutes = [
+        ...(profile.model?.small === undefined
+            ? []
+            : [["model", "small", profile.model.small]]),
+        ...Object.entries(profile.subagents ?? {}).flatMap(([name, subagent]) => subagent.model === undefined
+            ? []
+            : [["subagents", name, "model", subagent.model]]),
+        ...Object.entries(profile.modes ?? {}).flatMap(([name, mode]) => mode.model === undefined
+            ? []
+            : [["modes", name, "model", mode.model]]),
+    ];
+    for (const route of alternateRoutes) {
+        const routeModel = route.at(-1);
+        if (primaryModel === undefined || routeModel !== primaryModel) {
+            ctx.addIssue({
+                code: "custom",
+                path: route.slice(0, -1),
+                message: "sealed candidates require every model route to use the exact primary model",
+            });
+        }
+    }
+});