@tangle-network/agent-interface 0.36.0 → 0.37.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -7,7 +7,7 @@ const headerNamePattern = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
7
7
  const mediaTypePattern = /^[a-z0-9][a-z0-9!#$&^_.+-]{0,126}\/[a-z0-9][a-z0-9!#$&^_.+-]{0,126}$/;
8
8
  const githubComponentPattern = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,99}$/;
9
9
  const secretNamePattern = /(?:^|[_-])(?:api[_-]?key|access[_-]?key|private[_-]?key|token|secret|password|credentials?|authorization|cookie|database[_-]?url|dsn|pat)(?:[_-]|$)/i;
10
- const obviousSecretValuePattern = /(?:\b(?:sk|gh[pousr]|github_pat|AKIA)[-_A-Za-z0-9]{12,}\b|-----BEGIN [A-Z ]*PRIVATE KEY-----|\bBearer\s+\S+)/;
10
+ const obviousSecretValuePattern = /(?:\bsk[-_][-_A-Za-z0-9]{10,}\b|\bgh[pousr]_[A-Za-z0-9]{12,}\b|\bgithub_pat_[A-Za-z0-9_]{12,}\b|\bAKIA[A-Z0-9]{12,}\b|-----BEGIN [A-Z ]*PRIVATE KEY-----|\bBearer\s+\S+)/;
11
11
  const controlCharacterPattern = /[\u0000-\u001f\u007f]/;
12
12
  const reservedWorkspaceRoots = new Set([".git", ".sidecar"]);
13
13
  const shellNames = new Set([
@@ -84,6 +84,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
84
84
  content: z.ZodString;
85
85
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
86
86
  byteLength: z.ZodNumber;
87
+ source: z.ZodOptional<z.ZodObject<{
88
+ kind: z.ZodString;
89
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
90
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
91
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
92
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
93
+ kind: z.ZodLiteral<"spdx">;
94
+ expression: z.ZodString;
95
+ }, z.core.$strict>, z.ZodObject<{
96
+ kind: z.ZodLiteral<"custom">;
97
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
98
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
99
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
100
+ }, z.core.$strict>], "kind">>;
101
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
102
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
103
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
104
+ kind: z.ZodEnum<{
105
+ normalization: "normalization";
106
+ transformation: "transformation";
107
+ }>;
108
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
109
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
110
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
111
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
112
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
113
+ }, z.core.$strict>>>;
114
+ }, z.core.$strict>>;
87
115
  }, z.core.$strict>, z.ZodObject<{
88
116
  kind: z.ZodLiteral<"github">;
89
117
  repository: z.ZodObject<{
@@ -96,6 +124,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
96
124
  name: z.ZodOptional<z.ZodString>;
97
125
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
98
126
  byteLength: z.ZodNumber;
127
+ source: z.ZodOptional<z.ZodObject<{
128
+ kind: z.ZodString;
129
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
130
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
131
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
132
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
133
+ kind: z.ZodLiteral<"spdx">;
134
+ expression: z.ZodString;
135
+ }, z.core.$strict>, z.ZodObject<{
136
+ kind: z.ZodLiteral<"custom">;
137
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
138
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
139
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
140
+ }, z.core.$strict>], "kind">>;
141
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
142
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
143
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
144
+ kind: z.ZodEnum<{
145
+ normalization: "normalization";
146
+ transformation: "transformation";
147
+ }>;
148
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
149
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
150
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
151
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
152
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
153
+ }, z.core.$strict>>>;
154
+ }, z.core.$strict>>;
99
155
  }, z.core.$strict>], "kind">;
100
156
  executable: z.ZodOptional<z.ZodBoolean>;
101
157
  }, z.core.$strict>>>;
@@ -105,6 +161,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
105
161
  content: z.ZodString;
106
162
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
107
163
  byteLength: z.ZodNumber;
164
+ source: z.ZodOptional<z.ZodObject<{
165
+ kind: z.ZodString;
166
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
167
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
168
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
169
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
170
+ kind: z.ZodLiteral<"spdx">;
171
+ expression: z.ZodString;
172
+ }, z.core.$strict>, z.ZodObject<{
173
+ kind: z.ZodLiteral<"custom">;
174
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
175
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
176
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
177
+ }, z.core.$strict>], "kind">>;
178
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
179
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
180
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
181
+ kind: z.ZodEnum<{
182
+ normalization: "normalization";
183
+ transformation: "transformation";
184
+ }>;
185
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
186
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
187
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
188
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
189
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
190
+ }, z.core.$strict>>>;
191
+ }, z.core.$strict>>;
108
192
  }, z.core.$strict>, z.ZodObject<{
109
193
  kind: z.ZodLiteral<"github">;
110
194
  repository: z.ZodObject<{
@@ -117,6 +201,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
117
201
  name: z.ZodOptional<z.ZodString>;
118
202
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
119
203
  byteLength: z.ZodNumber;
204
+ source: z.ZodOptional<z.ZodObject<{
205
+ kind: z.ZodString;
206
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
207
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
208
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
209
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
210
+ kind: z.ZodLiteral<"spdx">;
211
+ expression: z.ZodString;
212
+ }, z.core.$strict>, z.ZodObject<{
213
+ kind: z.ZodLiteral<"custom">;
214
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
215
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
216
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
217
+ }, z.core.$strict>], "kind">>;
218
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
219
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
220
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
221
+ kind: z.ZodEnum<{
222
+ normalization: "normalization";
223
+ transformation: "transformation";
224
+ }>;
225
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
226
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
227
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
228
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
229
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
230
+ }, z.core.$strict>>>;
231
+ }, z.core.$strict>>;
120
232
  }, z.core.$strict>], "kind">>>;
121
233
  skills: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
122
234
  kind: z.ZodLiteral<"inline">;
@@ -124,6 +236,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
124
236
  content: z.ZodString;
125
237
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
126
238
  byteLength: z.ZodNumber;
239
+ source: z.ZodOptional<z.ZodObject<{
240
+ kind: z.ZodString;
241
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
242
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
243
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
244
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
245
+ kind: z.ZodLiteral<"spdx">;
246
+ expression: z.ZodString;
247
+ }, z.core.$strict>, z.ZodObject<{
248
+ kind: z.ZodLiteral<"custom">;
249
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
250
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
251
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
252
+ }, z.core.$strict>], "kind">>;
253
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
254
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
255
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
256
+ kind: z.ZodEnum<{
257
+ normalization: "normalization";
258
+ transformation: "transformation";
259
+ }>;
260
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
261
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
262
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
263
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
264
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
265
+ }, z.core.$strict>>>;
266
+ }, z.core.$strict>>;
127
267
  }, z.core.$strict>, z.ZodObject<{
128
268
  kind: z.ZodLiteral<"github">;
129
269
  repository: z.ZodObject<{
@@ -136,6 +276,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
136
276
  name: z.ZodOptional<z.ZodString>;
137
277
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
138
278
  byteLength: z.ZodNumber;
279
+ source: z.ZodOptional<z.ZodObject<{
280
+ kind: z.ZodString;
281
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
282
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
283
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
284
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
285
+ kind: z.ZodLiteral<"spdx">;
286
+ expression: z.ZodString;
287
+ }, z.core.$strict>, z.ZodObject<{
288
+ kind: z.ZodLiteral<"custom">;
289
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
290
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
291
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
292
+ }, z.core.$strict>], "kind">>;
293
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
294
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
295
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
296
+ kind: z.ZodEnum<{
297
+ normalization: "normalization";
298
+ transformation: "transformation";
299
+ }>;
300
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
301
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
302
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
303
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
304
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
305
+ }, z.core.$strict>>>;
306
+ }, z.core.$strict>>;
139
307
  }, z.core.$strict>], "kind">>>;
140
308
  agents: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
141
309
  kind: z.ZodLiteral<"inline">;
@@ -143,6 +311,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
143
311
  content: z.ZodString;
144
312
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
145
313
  byteLength: z.ZodNumber;
314
+ source: z.ZodOptional<z.ZodObject<{
315
+ kind: z.ZodString;
316
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
317
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
318
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
319
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
320
+ kind: z.ZodLiteral<"spdx">;
321
+ expression: z.ZodString;
322
+ }, z.core.$strict>, z.ZodObject<{
323
+ kind: z.ZodLiteral<"custom">;
324
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
325
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
326
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
327
+ }, z.core.$strict>], "kind">>;
328
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
329
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
330
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
331
+ kind: z.ZodEnum<{
332
+ normalization: "normalization";
333
+ transformation: "transformation";
334
+ }>;
335
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
336
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
337
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
338
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
339
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
340
+ }, z.core.$strict>>>;
341
+ }, z.core.$strict>>;
146
342
  }, z.core.$strict>, z.ZodObject<{
147
343
  kind: z.ZodLiteral<"github">;
148
344
  repository: z.ZodObject<{
@@ -155,6 +351,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
155
351
  name: z.ZodOptional<z.ZodString>;
156
352
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
157
353
  byteLength: z.ZodNumber;
354
+ source: z.ZodOptional<z.ZodObject<{
355
+ kind: z.ZodString;
356
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
357
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
358
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
359
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
360
+ kind: z.ZodLiteral<"spdx">;
361
+ expression: z.ZodString;
362
+ }, z.core.$strict>, z.ZodObject<{
363
+ kind: z.ZodLiteral<"custom">;
364
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
365
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
366
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
367
+ }, z.core.$strict>], "kind">>;
368
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
369
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
370
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
371
+ kind: z.ZodEnum<{
372
+ normalization: "normalization";
373
+ transformation: "transformation";
374
+ }>;
375
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
376
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
377
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
378
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
379
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
380
+ }, z.core.$strict>>>;
381
+ }, z.core.$strict>>;
158
382
  }, z.core.$strict>], "kind">>>;
159
383
  commands: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
160
384
  kind: z.ZodLiteral<"inline">;
@@ -162,6 +386,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
162
386
  content: z.ZodString;
163
387
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
164
388
  byteLength: z.ZodNumber;
389
+ source: z.ZodOptional<z.ZodObject<{
390
+ kind: z.ZodString;
391
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
392
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
393
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
394
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
395
+ kind: z.ZodLiteral<"spdx">;
396
+ expression: z.ZodString;
397
+ }, z.core.$strict>, z.ZodObject<{
398
+ kind: z.ZodLiteral<"custom">;
399
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
400
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
401
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
402
+ }, z.core.$strict>], "kind">>;
403
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
404
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
405
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
406
+ kind: z.ZodEnum<{
407
+ normalization: "normalization";
408
+ transformation: "transformation";
409
+ }>;
410
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
411
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
412
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
413
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
414
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
415
+ }, z.core.$strict>>>;
416
+ }, z.core.$strict>>;
165
417
  }, z.core.$strict>, z.ZodObject<{
166
418
  kind: z.ZodLiteral<"github">;
167
419
  repository: z.ZodObject<{
@@ -174,6 +426,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
174
426
  name: z.ZodOptional<z.ZodString>;
175
427
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
176
428
  byteLength: z.ZodNumber;
429
+ source: z.ZodOptional<z.ZodObject<{
430
+ kind: z.ZodString;
431
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
432
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
433
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
434
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
435
+ kind: z.ZodLiteral<"spdx">;
436
+ expression: z.ZodString;
437
+ }, z.core.$strict>, z.ZodObject<{
438
+ kind: z.ZodLiteral<"custom">;
439
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
440
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
441
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
442
+ }, z.core.$strict>], "kind">>;
443
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
444
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
445
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
446
+ kind: z.ZodEnum<{
447
+ normalization: "normalization";
448
+ transformation: "transformation";
449
+ }>;
450
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
451
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
452
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
453
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
454
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
455
+ }, z.core.$strict>>>;
456
+ }, z.core.$strict>>;
177
457
  }, z.core.$strict>], "kind">>>;
178
458
  instructions: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
179
459
  kind: z.ZodLiteral<"inline">;
@@ -181,6 +461,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
181
461
  content: z.ZodString;
182
462
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
183
463
  byteLength: z.ZodNumber;
464
+ source: z.ZodOptional<z.ZodObject<{
465
+ kind: z.ZodString;
466
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
467
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
468
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
469
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
470
+ kind: z.ZodLiteral<"spdx">;
471
+ expression: z.ZodString;
472
+ }, z.core.$strict>, z.ZodObject<{
473
+ kind: z.ZodLiteral<"custom">;
474
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
475
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
476
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
477
+ }, z.core.$strict>], "kind">>;
478
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
479
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
480
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
481
+ kind: z.ZodEnum<{
482
+ normalization: "normalization";
483
+ transformation: "transformation";
484
+ }>;
485
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
486
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
487
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
488
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
489
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
490
+ }, z.core.$strict>>>;
491
+ }, z.core.$strict>>;
184
492
  }, z.core.$strict>, z.ZodObject<{
185
493
  kind: z.ZodLiteral<"github">;
186
494
  repository: z.ZodObject<{
@@ -193,6 +501,34 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
193
501
  name: z.ZodOptional<z.ZodString>;
194
502
  sha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
195
503
  byteLength: z.ZodNumber;
504
+ source: z.ZodOptional<z.ZodObject<{
505
+ kind: z.ZodString;
506
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
507
+ sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
508
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
509
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
510
+ kind: z.ZodLiteral<"spdx">;
511
+ expression: z.ZodString;
512
+ }, z.core.$strict>, z.ZodObject<{
513
+ kind: z.ZodLiteral<"custom">;
514
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
515
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
516
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
517
+ }, z.core.$strict>], "kind">>;
518
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
519
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
520
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
521
+ kind: z.ZodEnum<{
522
+ normalization: "normalization";
523
+ transformation: "transformation";
524
+ }>;
525
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
526
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
527
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
528
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
529
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
530
+ }, z.core.$strict>>>;
531
+ }, z.core.$strict>>;
196
532
  }, z.core.$strict>], "kind">]>>;
197
533
  failOnError: z.ZodLiteral<true>;
198
534
  }, z.core.$strict>>;
@@ -1,6 +1,7 @@
1
1
  import type { AgentProfile, AgentProfileFileMount, AgentProfileHookCommand, AgentProfileMode, AgentProfileModelHints, AgentProfileResources, AgentSubagentProfile, ReasoningEffort } from "./agent-profile.js";
2
2
  import type { HarnessType } from "./harness.js";
3
3
  import type { AgentProfileImprovementExecutionRef, AgentProfileImprovementMeasuredComparison } from "./agent-profile-improvement.js";
4
+ import type { AgentImprovementSource } from "./agent-improvement-source.js";
4
5
  /** Full SHA-256 digest with an explicit algorithm prefix. */
5
6
  export type Sha256Digest = `sha256:${string}`;
6
7
  /** RFC 8785 JSON Canonicalization Scheme followed by SHA-256. */
@@ -55,6 +56,8 @@ export interface AgentCandidateInlineResource {
55
56
  content: string;
56
57
  sha256: Sha256Digest;
57
58
  byteLength: number;
59
+ /** Optional immutable origin, license obligations, and import history. */
60
+ source?: AgentImprovementSource;
58
61
  }
59
62
  /** GitHub content pinned to a full Git object id and expected content digest. */
60
63
  export interface AgentCandidateGitHubResource {
@@ -65,6 +68,8 @@ export interface AgentCandidateGitHubResource {
65
68
  name?: string;
66
69
  sha256: Sha256Digest;
67
70
  byteLength: number;
71
+ /** Optional immutable origin, license obligations, and import history. */
72
+ source?: AgentImprovementSource;
68
73
  }
69
74
  export type AgentCandidateResourceRef = AgentCandidateInlineResource | AgentCandidateGitHubResource;
70
75
  export interface AgentCandidateFileMount extends Omit<AgentProfileFileMount, "resource"> {
@@ -2,19 +2,77 @@ import { z } from "zod";
2
2
  import type { AgentCandidateJsonValue } from "./agent-candidate.js";
3
3
  /** Metadata key that binds a measured improvement to its exact external source. */
4
4
  export declare const AGENT_IMPROVEMENT_SOURCE_METADATA_KEY = "agentImprovementSource";
5
+ /** License terms retained with an imported source. */
6
+ export declare const agentSourceLicenseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
7
+ kind: z.ZodLiteral<"spdx">;
8
+ expression: z.ZodString;
9
+ }, z.core.$strict>, z.ZodObject<{
10
+ kind: z.ZodLiteral<"custom">;
11
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
12
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
13
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
14
+ }, z.core.$strict>], "kind">;
15
+ export type AgentSourceLicense = z.infer<typeof agentSourceLicenseSchema>;
16
+ /**
17
+ * One content transition applied while importing a source.
18
+ *
19
+ * `identity` and `revision` pin the transformer. Input/output digests make the
20
+ * ordered chain auditable without embedding executable transformation code.
21
+ * `procedureDigest` pins the implementation and non-secret configuration used
22
+ * for that step.
23
+ */
24
+ export declare const agentSourceTransformationSchema: z.ZodObject<{
25
+ kind: z.ZodEnum<{
26
+ normalization: "normalization";
27
+ transformation: "transformation";
28
+ }>;
29
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
30
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
31
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
32
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
33
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
34
+ }, z.core.$strict>;
35
+ export type AgentSourceTransformation = z.infer<typeof agentSourceTransformationSchema>;
5
36
  /**
6
37
  * Stable reference for the state from which an improvement candidate was made.
7
38
  * `sourceIdentity` identifies the provider object; `sourceDigest` is the exact
8
- * measured source state; `sourceRevision` is an
39
+ * measured source state consumed by the candidate; `sourceRevision` is an
9
40
  * opaque provider version retained to make stale-source errors intelligible to
10
41
  * callers. A revision may be numeric or textual because providers use both
11
42
  * counters and immutable revision identifiers.
43
+ *
44
+ * Optional license, attribution, and notice fields preserve obligations when a
45
+ * public source becomes an improvement input. When transformations are
46
+ * present, their first input pins the fetched source bytes, every adjacent
47
+ * digest must join, and the final output must equal `sourceDigest`.
12
48
  */
13
49
  export declare const agentImprovementSourceSchema: z.ZodObject<{
14
50
  kind: z.ZodString;
15
- sourceIdentity: z.ZodString;
51
+ sourceIdentity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
16
52
  sourceDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
17
- sourceRevision: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
53
+ sourceRevision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
54
+ license: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
55
+ kind: z.ZodLiteral<"spdx">;
56
+ expression: z.ZodString;
57
+ }, z.core.$strict>, z.ZodObject<{
58
+ kind: z.ZodLiteral<"custom">;
59
+ name: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
60
+ reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
61
+ termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
62
+ }, z.core.$strict>], "kind">>;
63
+ attribution: z.ZodOptional<z.ZodArray<z.ZodString>>;
64
+ notices: z.ZodOptional<z.ZodArray<z.ZodString>>;
65
+ transformations: z.ZodOptional<z.ZodArray<z.ZodObject<{
66
+ kind: z.ZodEnum<{
67
+ normalization: "normalization";
68
+ transformation: "transformation";
69
+ }>;
70
+ identity: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
71
+ revision: z.ZodUnion<readonly [z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>, z.ZodNumber]>;
72
+ procedureDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
73
+ inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
74
+ outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
75
+ }, z.core.$strict>>>;
18
76
  }, z.core.$strict>;
19
77
  export type AgentImprovementSource = z.infer<typeof agentImprovementSourceSchema>;
20
78
  /** Attach one validated source reference to signed improvement metadata. */