@tangle-network/agent-interface 0.28.0 → 0.30.0

package/dist/profile-schema.js

@@ -12,12 +12,12 @@ export const agentProfilePermissionSchema = z.union([
 ]);
 // Mirrors the canonical AgentProfileResourceRef (inline | github), kind-discriminated.
 export const agentProfileResourceRefSchema = z.union([
-    z.object({
+    z.strictObject({
         kind: z.literal("inline"),
         name: z.string(),
         content: z.string(),
     }),
-    z.object({
+    z.strictObject({
         kind: z.literal("github"),
         repository: z.string().optional(),
         path: z.string(),
@@ -25,34 +25,43 @@ export const agentProfileResourceRefSchema = z.union([
         name: z.string().optional(),
     }),
 ]);
-export const agentProfileFileMountSchema = z.object({
+export const agentProfileFileMountSchema = z.strictObject({
     path: z.string(),
     resource: agentProfileResourceRefSchema,
     executable: z.boolean().optional(),
 });
-export const agentProfileResourcesSchema = z.object({
+export const agentProfileResourcesSchema = z.strictObject({
     files: z.array(agentProfileFileMountSchema).optional(),
     tools: z.array(agentProfileResourceRefSchema).optional(),
     skills: z.array(agentProfileResourceRefSchema).optional(),
     agents: z.array(agentProfileResourceRefSchema).optional(),
     commands: z.array(agentProfileResourceRefSchema).optional(),
-    instructions: z.union([z.string(), agentProfileResourceRefSchema]).optional(),
+    instructions: z
+        .union([z.string(), agentProfileResourceRefSchema])
+        .optional(),
     failOnError: z.boolean().optional(),
 });
-export const agentProfileModelHintsSchema = z.object({
+export const reasoningEffortSchema = z.enum([
+    "none",
+    "minimal",
+    "low",
+    "medium",
+    "high",
+    "xhigh",
+    "ultracode",
+]);
+export const agentProfileModelHintsSchema = z.strictObject({
     default: z.string().optional(),
     small: z.string().optional(),
     provider: z.string().optional(),
-    reasoningEffort: z
-        .enum(["none", "minimal", "low", "medium", "high", "xhigh", "ultracode"])
-        .optional(),
+    reasoningEffort: reasoningEffortSchema.optional(),
     metadata: z.record(z.string(), z.unknown()).optional(),
 });
-export const agentProfilePromptSchema = z.object({
+export const agentProfilePromptSchema = z.strictObject({
     systemPrompt: z.string().optional(),
     instructions: z.array(z.string()).optional(),
 });
-export const agentSubagentProfileSchema = z.object({
+export const agentSubagentProfileSchema = z.strictObject({
     description: z.string().optional(),
     prompt: z.string().optional(),
     model: z.string().optional(),
@@ -61,14 +70,14 @@ export const agentSubagentProfileSchema = z.object({
     maxSteps: z.number().optional(),
     metadata: z.record(z.string(), z.unknown()).optional(),
 });
-export const agentProfileHookCommandSchema = z.object({
+export const agentProfileHookCommandSchema = z.strictObject({
     command: z.string(),
     timeoutMs: z.number().positive().optional(),
     blocking: z.boolean().optional(),
     matcher: z.string().optional(),
     env: z.record(z.string(), z.string()).optional(),
 });
-export const agentProfileModeSchema = z.object({
+export const agentProfileModeSchema = z.strictObject({
     description: z.string().optional(),
     model: z.string().optional(),
     prompt: z.string().optional(),
@@ -76,34 +85,73 @@ export const agentProfileModeSchema = z.object({
     permissions: z.record(z.string(), agentProfilePermissionSchema).optional(),
     metadata: z.record(z.string(), z.unknown()).optional(),
 });
-export const agentProfileConfidentialSchema = z.object({
+export const agentProfileConfidentialSchema = z.strictObject({
     tee: z.string().optional(),
     attestationNonce: z.string().optional(),
     sealed: z.boolean().optional(),
     attestationRefresh: z.boolean().optional(),
 });
-export const agentProfileMcpServerSchema = z.object({
-    transport: z.enum(["stdio", "sse", "http"]).optional(),
-    command: z.string().optional(),
+const nonBlankMcpValueSchema = z
+    .string()
+    .refine((value) => value.trim().length > 0, "value cannot be blank");
+const remoteMcpUrlSchema = nonBlankMcpValueSchema.refine((value) => {
+    try {
+        const url = new URL(value);
+        return url.protocol === "http:" || url.protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+}, "remote MCP url must be an absolute HTTP(S) URL");
+const agentProfileLocalMcpServerSchema = z.strictObject({
+    transport: z.literal("stdio").optional(),
+    command: nonBlankMcpValueSchema,
     args: z.array(z.string()).optional(),
     env: z.record(z.string(), z.string()).optional(),
     cwd: z.string().optional(),
-    url: z.string().optional(),
+    url: z.undefined().optional(),
+    headers: z.undefined().optional(),
+    enabled: z.literal(true).optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+const agentProfileRemoteMcpServerSchema = z.strictObject({
+    transport: z.enum(["sse", "http"]).optional(),
+    command: z.undefined().optional(),
+    args: z.undefined().optional(),
+    env: z.undefined().optional(),
+    cwd: z.undefined().optional(),
+    url: remoteMcpUrlSchema,
     headers: z.record(z.string(), z.string()).optional(),
-    enabled: z.boolean().optional(),
+    enabled: z.literal(true).optional(),
     metadata: z.record(z.string(), z.unknown()).optional(),
 });
-export const agentProfileConnectionSchema = z.object({
+const agentProfileDisabledMcpServerSchema = z.strictObject({
+    enabled: z.literal(false),
+    transport: z.undefined().optional(),
+    command: z.undefined().optional(),
+    args: z.undefined().optional(),
+    env: z.undefined().optional(),
+    cwd: z.undefined().optional(),
+    url: z.undefined().optional(),
+    headers: z.undefined().optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+export const agentProfileMcpServerSchema = z.union([
+    agentProfileLocalMcpServerSchema,
+    agentProfileRemoteMcpServerSchema,
+    agentProfileDisabledMcpServerSchema,
+]);
+export const agentProfileConnectionSchema = z.strictObject({
     connectionId: z.string().min(1),
     capabilities: z.array(z.string().min(1)).min(1),
     alias: z.string().min(1).optional(),
 });
 const removeListSchema = z.union([z.literal(true), z.array(z.string().min(1))]);
-export const agentProfilePromptRemovalSchema = z.object({
+export const agentProfilePromptRemovalSchema = z.strictObject({
     systemPrompt: z.literal(true).optional(),
     instructions: removeListSchema.optional(),
 });
-export const agentProfileResourceRemovalSchema = z.object({
+export const agentProfileResourceRemovalSchema = z.strictObject({
     files: removeListSchema.optional(),
     tools: removeListSchema.optional(),
     skills: removeListSchema.optional(),
@@ -112,10 +160,12 @@ export const agentProfileResourceRemovalSchema = z.object({
     instructions: z.literal(true).optional(),
     failOnError: z.literal(true).optional(),
 });
-export const agentProfileDiffRemovalSchema = z.object({
+export const agentProfileDiffRemovalSchema = z.strictObject({
     identity: z.literal(true).optional(),
     tags: removeListSchema.optional(),
-    prompt: z.union([z.literal(true), agentProfilePromptRemovalSchema]).optional(),
+    prompt: z
+        .union([z.literal(true), agentProfilePromptRemovalSchema])
+        .optional(),
     model: removeListSchema.optional(),
     harness: z.literal(true).optional(),
     permissions: removeListSchema.optional(),
@@ -123,7 +173,9 @@ export const agentProfileDiffRemovalSchema = z.object({
     mcp: removeListSchema.optional(),
     connections: removeListSchema.optional(),
     subagents: removeListSchema.optional(),
-    resources: z.union([z.literal(true), agentProfileResourceRemovalSchema]).optional(),
+    resources: z
+        .union([z.literal(true), agentProfileResourceRemovalSchema])
+        .optional(),
     hooks: removeListSchema.optional(),
     modes: removeListSchema.optional(),
     confidential: z.literal(true).optional(),
@@ -135,7 +187,7 @@ export const agentProfileDiffRemovalSchema = z.object({
  * the canonical {@link AgentProfile} TS contract. Kept structurally in lock-step
  * with that interface by the compile-time guard at the bottom of this file.
  */
-export const agentProfileSchema = z.object({
+export const agentProfileSchema = z.strictObject({
     name: z.string().optional(),
     description: z.string().optional(),
     version: z.string().optional(),
@@ -159,15 +211,14 @@ export const agentProfileSchema = z.object({
         .record(z.string(), z.union([z.record(z.string(), z.unknown()), z.undefined()]))
         .optional(),
 });
-export const agentProfileDiffSchema = z
-    .object({
+export const agentProfileDiffSchema = z.strictObject({
     kind: z.literal("agent-profile-diff"),
     id: z.string().min(1).optional(),
     title: z.string().min(1).optional(),
     description: z.string().optional(),
     rationale: z.string().optional(),
     source: z
-        .object({
+        .strictObject({
         kind: z.enum([
             "trace",
             "frontier-author",
@@ -182,11 +233,10 @@ export const agentProfileDiffSchema = z
     set: agentProfileSchema.optional(),
     remove: agentProfileDiffRemovalSchema.optional(),
     metadata: z.record(z.string(), z.unknown()).optional(),
-})
-    .strict();
+});
 const _agentProfileSchemaMatchesInterface = true;
 void _agentProfileSchemaMatchesInterface;
-export const capabilitySchema = z.object({
+export const capabilitySchema = z.strictObject({
     id: z.string().min(1),
     definition: agentProfileSchema,
     recommendedSize: z.enum(SANDBOX_SIZE_PRESET_NAMES).optional(),

package/dist/profile-security.js

@@ -105,6 +105,8 @@ function isLocalMcpServer(server) {
 export function validateAgentProfileSecurity(profile, policy = DEFAULT_CLOUD_AGENT_PROFILE_SECURITY_POLICY) {
     const issues = [];
     for (const [name, server] of Object.entries(profile.mcp ?? {})) {
+        if (server.enabled === false)
+            continue;
         if (isLocalMcpServer(server)) {
             if (!policy.allowLocalMcp) {
                 issues.push({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-interface",
-  "version": "0.28.0",
+  "version": "0.30.0",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",
@@ -43,7 +43,7 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
-    "check-types": "tsc --noEmit",
+    "check-types": "tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
     "clean": "rm -rf dist tsconfig.tsbuildinfo",
     "test": "vitest run",
     "test:watch": "vitest"