@tangle-network/agent-interface 0.37.0 → 0.39.0

package/dist/profile-diff.js

@@ -1,4 +1,5 @@
 import { mergeAgentProfiles } from "./agent-profile.js";
+import { canonicalAgentProfileJson } from "./agent-profile-canonical.js";
 const agentProfileDiffPropertyAxes = [
     "prompt",
     "model",
@@ -20,6 +21,110 @@ void _agentProfileDiffPropertyAxesAreExhaustive;
 export function defineAgentProfileDiff(diff) {
     return diff;
 }
+const agentProfileResourceDiffPropertyAxes = [
+    "files",
+    "tools",
+    "skills",
+    "agents",
+    "commands",
+    "instructions",
+    "failOnError",
+];
+const _agentProfileResourceDiffPropertyAxesAreExhaustive = true;
+void _agentProfileResourceDiffPropertyAxesAreExhaustive;
+/**
+ * Construct deterministic ordered profile patches that reproduce `candidate`'s
+ * canonical profile value exactly when applied to `baseline`.
+ *
+ * Profile overlays append arrays and merge records, so changed fields are reset
+ * first and then replaced. Comparison and copied values follow the same
+ * undefined-entry normalization as profile identity. The returned values use
+ * the existing {@link AgentProfileDiff} contract; an unchanged profile returns
+ * no steps.
+ */
+export function diffAgentProfiles(baseline, candidate) {
+    const remove = {};
+    const set = {};
+    if (profileValuesDiffer(baseline.name, candidate.name) ||
+        profileValuesDiffer(baseline.description, candidate.description) ||
+        profileValuesDiffer(baseline.version, candidate.version)) {
+        remove.identity = true;
+        if (candidate.name !== undefined)
+            set.name = candidate.name;
+        if (candidate.description !== undefined) {
+            set.description = candidate.description;
+        }
+        if (candidate.version !== undefined)
+            set.version = candidate.version;
+    }
+    if (profileValuesDiffer(baseline.tags, candidate.tags)) {
+        remove.tags = true;
+        if (candidate.tags !== undefined) {
+            set.tags = canonicalProfileValue(candidate.tags);
+        }
+    }
+    for (const axis of agentProfileDiffPropertyAxes) {
+        if (axis === "resources") {
+            replaceChangedProfileResources(baseline.resources, candidate.resources, remove, set);
+            continue;
+        }
+        if (!profileValuesDiffer(baseline[axis], candidate[axis]))
+            continue;
+        Object.assign(remove, { [axis]: true });
+        const value = candidate[axis];
+        if (value !== undefined) {
+            Object.assign(set, { [axis]: canonicalProfileValue(value) });
+        }
+    }
+    if (Object.keys(remove).length === 0)
+        return [];
+    const reset = {
+        kind: "agent-profile-diff",
+        remove,
+    };
+    if (Object.keys(set).length === 0)
+        return [reset];
+    return [reset, { kind: "agent-profile-diff", set }];
+}
+function replaceChangedProfileResources(baseline, candidate, remove, set) {
+    if (!profileValuesDiffer(baseline, candidate))
+        return;
+    const resourceRemove = {};
+    const resourceSet = {};
+    let changedSubfields = 0;
+    for (const axis of agentProfileResourceDiffPropertyAxes) {
+        if (!profileValuesDiffer(baseline?.[axis], candidate?.[axis]))
+            continue;
+        changedSubfields += 1;
+        Object.assign(resourceRemove, { [axis]: true });
+        const value = candidate?.[axis];
+        if (value !== undefined) {
+            Object.assign(resourceSet, { [axis]: canonicalProfileValue(value) });
+        }
+    }
+    // Distinguish an absent resources object from an explicitly empty one.
+    if (changedSubfields === 0) {
+        remove.resources = true;
+        if (candidate !== undefined) {
+            set.resources = canonicalProfileValue(candidate);
+        }
+        return;
+    }
+    remove.resources = resourceRemove;
+    const canonicalCandidate = canonicalProfileValue(candidate);
+    if (Object.keys(resourceSet).length > 0 ||
+        (canonicalCandidate !== undefined &&
+            Object.keys(canonicalCandidate).length === 0)) {
+        set.resources = resourceSet;
+    }
+}
+function profileValuesDiffer(baseline, candidate) {
+    return (canonicalAgentProfileJson(baseline) !== canonicalAgentProfileJson(candidate));
+}
+function canonicalProfileValue(value) {
+    const json = canonicalAgentProfileJson(value);
+    return (json === undefined ? undefined : JSON.parse(json));
+}
 function asMutable(value) {
     return value ? [...value] : undefined;
 }
@@ -174,12 +279,26 @@ export function applyAgentProfileDiff(base, diff) {
     const merged = mergeAgentProfiles(base, diff.set) ?? {};
     return applyRemoval(merged, diff.remove);
 }
+function hasRemovalOperation(value) {
+    if (value === true)
+        return true;
+    if (Array.isArray(value))
+        return value.length > 0;
+    if (value && typeof value === "object") {
+        return Object.values(value).some(hasRemovalOperation);
+    }
+    return false;
+}
 export function changedAgentProfileAxes(diff) {
     const axes = new Set();
     const set = diff.set;
     if (set) {
-        if (set.name || set.description || set.version || set.tags)
+        if (set.name !== undefined ||
+            set.description !== undefined ||
+            set.version !== undefined ||
+            set.tags !== undefined) {
             axes.add("identity");
+        }
         for (const axis of agentProfileDiffPropertyAxes) {
             if (set[axis] !== undefined)
                 axes.add(axis);
@@ -187,10 +306,11 @@ export function changedAgentProfileAxes(diff) {
     }
     const remove = diff.remove;
     if (remove) {
-        if (remove.identity || remove.tags)
+        if (hasRemovalOperation(remove.identity) || hasRemovalOperation(remove.tags)) {
             axes.add("identity");
+        }
         for (const axis of agentProfileDiffPropertyAxes) {
-            if (remove[axis] !== undefined)
+            if (hasRemovalOperation(remove[axis]))
                 axes.add(axis);
         }
     }

package/dist/profile-schema.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import type { AgentProfile, AgentProfileMcpServer } from "./agent-profile.js";
+import { type AgentProfile, type AgentProfileMcpServer } from "./agent-profile.js";
 import type { AgentProfileDiff } from "./profile-diff.js";
 import { type SandboxSizePreset } from "./sandbox-size.js";
 export declare const agentProfilePermissionValueSchema: z.ZodEnum<{
@@ -11,11 +11,7 @@ export declare const agentProfilePermissionSchema: z.ZodUnion<readonly [z.ZodEnu
     allow: "allow";
     ask: "ask";
     deny: "deny";
-}>, z.ZodRecord<z.ZodString, z.ZodEnum<{
-    allow: "allow";
-    ask: "ask";
-    deny: "deny";
-}>>]>;
+}>, z.ZodType<Record<string, "allow" | "ask" | "deny">, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny">, unknown>>]>;
 export declare const agentProfileResourceRefSchema: z.ZodUnion<readonly [z.ZodObject<{
     kind: z.ZodLiteral<"inline">;
     name: z.ZodString;
@@ -137,51 +133,102 @@ export declare const agentProfileModelHintsSchema: z.ZodObject<{
         xhigh: "xhigh";
         ultracode: "ultracode";
     }>>;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
 }, z.core.$strict>;
 export declare const agentProfilePromptSchema: z.ZodObject<{
     systemPrompt: z.ZodOptional<z.ZodString>;
     instructions: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
+export declare const agentProfilePublicConfigValueSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"public">;
+    value: z.ZodString;
+}, z.core.$strict>;
+export declare const agentProfileSecretRefSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"secret-ref">;
+    key: z.ZodString;
+    format: z.ZodOptional<z.ZodEnum<{
+        raw: "raw";
+        bearer: "bearer";
+    }>>;
+}, z.core.$strict>;
+export declare const agentProfileConfigValueSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"public">;
+    value: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"secret-ref">;
+    key: z.ZodString;
+    format: z.ZodOptional<z.ZodEnum<{
+        raw: "raw";
+        bearer: "bearer";
+    }>>;
+}, z.core.$strict>], "kind">;
+export declare const agentProfileEnvironmentSchema: z.ZodType<Record<string, {
+    kind: "public";
+    value: string;
+} | {
+    kind: "secret-ref";
+    key: string;
+    format?: "raw" | "bearer" | undefined;
+}>, unknown, z.core.$ZodTypeInternals<Record<string, {
+    kind: "public";
+    value: string;
+} | {
+    kind: "secret-ref";
+    key: string;
+    format?: "raw" | "bearer" | undefined;
+}>, unknown>>;
+export declare const agentProfileHeaderSchema: z.ZodType<Record<string, {
+    kind: "public";
+    value: string;
+} | {
+    kind: "secret-ref";
+    key: string;
+    format?: "raw" | "bearer" | undefined;
+}>, unknown, z.core.$ZodTypeInternals<Record<string, {
+    kind: "public";
+    value: string;
+} | {
+    kind: "secret-ref";
+    key: string;
+    format?: "raw" | "bearer" | undefined;
+}>, unknown>>;
 export declare const agentSubagentProfileSchema: z.ZodObject<{
     description: z.ZodOptional<z.ZodString>;
     prompt: z.ZodOptional<z.ZodString>;
     model: z.ZodOptional<z.ZodString>;
-    tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
-    permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
-        allow: "allow";
-        ask: "ask";
-        deny: "deny";
-    }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
-        allow: "allow";
-        ask: "ask";
-        deny: "deny";
-    }>>]>>>;
+    tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
     maxSteps: z.ZodOptional<z.ZodNumber>;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
 }, z.core.$strict>;
 export declare const agentProfileHookCommandSchema: z.ZodObject<{
     command: z.ZodString;
     timeoutMs: z.ZodOptional<z.ZodNumber>;
     blocking: z.ZodOptional<z.ZodBoolean>;
     matcher: z.ZodOptional<z.ZodString>;
-    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    env: z.ZodOptional<z.ZodType<Record<string, {
+        kind: "public";
+        value: string;
+    } | {
+        kind: "secret-ref";
+        key: string;
+        format?: "raw" | "bearer" | undefined;
+    }>, unknown, z.core.$ZodTypeInternals<Record<string, {
+        kind: "public";
+        value: string;
+    } | {
+        kind: "secret-ref";
+        key: string;
+        format?: "raw" | "bearer" | undefined;
+    }>, unknown>>>;
 }, z.core.$strict>;
 export declare const agentProfileModeSchema: z.ZodObject<{
     description: z.ZodOptional<z.ZodString>;
     model: z.ZodOptional<z.ZodString>;
     prompt: z.ZodOptional<z.ZodString>;
-    tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
-    permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
-        allow: "allow";
-        ask: "ask";
-        deny: "deny";
-    }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
-        allow: "allow";
-        ask: "ask";
-        deny: "deny";
-    }>>]>>>;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+    metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
 }, z.core.$strict>;
 export declare const agentProfileConfidentialSchema: z.ZodObject<{
     tee: z.ZodOptional<z.ZodString>;
@@ -264,7 +311,7 @@ export declare const agentProfileSchema: z.ZodObject<{
             xhigh: "xhigh";
             ultracode: "ultracode";
         }>>;
-        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
     }, z.core.$strict>>;
     harness: z.ZodOptional<z.ZodEnum<{
         "claude-code": "claude-code";
@@ -281,39 +328,31 @@ export declare const agentProfileSchema: z.ZodObject<{
         acp: "acp";
         "cli-base": "cli-base";
     }>>;
-    permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
-        allow: "allow";
-        ask: "ask";
-        deny: "deny";
-    }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
-        allow: "allow";
-        ask: "ask";
-        deny: "deny";
-    }>>]>>>;
-    tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
-    mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<AgentProfileMcpServer, unknown, z.core.$ZodTypeInternals<AgentProfileMcpServer, unknown>>>>;
+    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
+    tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+    mcp: z.ZodOptional<z.ZodType<Record<string, AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, AgentProfileMcpServer>, unknown>>>;
     connections: z.ZodOptional<z.ZodArray<z.ZodObject<{
         connectionId: z.ZodString;
         capabilities: z.ZodArray<z.ZodString>;
         alias: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>>;
-    subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
-        description: z.ZodOptional<z.ZodString>;
-        prompt: z.ZodOptional<z.ZodString>;
-        model: z.ZodOptional<z.ZodString>;
-        tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
-        permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
-            allow: "allow";
-            ask: "ask";
-            deny: "deny";
-        }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
-            allow: "allow";
-            ask: "ask";
-            deny: "deny";
-        }>>]>>>;
-        maxSteps: z.ZodOptional<z.ZodNumber>;
-        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$strict>>>;
+    subagents: z.ZodOptional<z.ZodType<Record<string, {
+        description?: string | undefined;
+        prompt?: string | undefined;
+        model?: string | undefined;
+        tools?: Record<string, boolean> | undefined;
+        permissions?: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">> | undefined;
+        maxSteps?: number | undefined;
+        metadata?: Record<string, unknown> | undefined;
+    }>, unknown, z.core.$ZodTypeInternals<Record<string, {
+        description?: string | undefined;
+        prompt?: string | undefined;
+        model?: string | undefined;
+        tools?: Record<string, boolean> | undefined;
+        permissions?: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">> | undefined;
+        maxSteps?: number | undefined;
+        metadata?: Record<string, unknown> | undefined;
+    }>, unknown>>>;
     resources: z.ZodOptional<z.ZodObject<{
         files: z.ZodOptional<z.ZodArray<z.ZodObject<{
             path: z.ZodString;
@@ -387,37 +426,56 @@ export declare const agentProfileSchema: z.ZodObject<{
         }, z.core.$strict>]>]>>;
         failOnError: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>>;
-    hooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
-        command: z.ZodString;
-        timeoutMs: z.ZodOptional<z.ZodNumber>;
-        blocking: z.ZodOptional<z.ZodBoolean>;
-        matcher: z.ZodOptional<z.ZodString>;
-        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    }, z.core.$strict>>>>;
-    modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
-        description: z.ZodOptional<z.ZodString>;
-        model: z.ZodOptional<z.ZodString>;
-        prompt: z.ZodOptional<z.ZodString>;
-        tools: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
-        permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
-            allow: "allow";
-            ask: "ask";
-            deny: "deny";
-        }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
-            allow: "allow";
-            ask: "ask";
-            deny: "deny";
-        }>>]>>>;
-        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$strict>>>;
+    hooks: z.ZodOptional<z.ZodType<Record<string, {
+        command: string;
+        timeoutMs?: number | undefined;
+        blocking?: boolean | undefined;
+        matcher?: string | undefined;
+        env?: Record<string, {
+            kind: "public";
+            value: string;
+        } | {
+            kind: "secret-ref";
+            key: string;
+            format?: "raw" | "bearer" | undefined;
+        }> | undefined;
+    }[]>, unknown, z.core.$ZodTypeInternals<Record<string, {
+        command: string;
+        timeoutMs?: number | undefined;
+        blocking?: boolean | undefined;
+        matcher?: string | undefined;
+        env?: Record<string, {
+            kind: "public";
+            value: string;
+        } | {
+            kind: "secret-ref";
+            key: string;
+            format?: "raw" | "bearer" | undefined;
+        }> | undefined;
+    }[]>, unknown>>>;
+    modes: z.ZodOptional<z.ZodType<Record<string, {
+        description?: string | undefined;
+        model?: string | undefined;
+        prompt?: string | undefined;
+        tools?: Record<string, boolean> | undefined;
+        permissions?: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">> | undefined;
+        metadata?: Record<string, unknown> | undefined;
+    }>, unknown, z.core.$ZodTypeInternals<Record<string, {
+        description?: string | undefined;
+        model?: string | undefined;
+        prompt?: string | undefined;
+        tools?: Record<string, boolean> | undefined;
+        permissions?: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">> | undefined;
+        metadata?: Record<string, unknown> | undefined;
+    }>, unknown>>>;
     confidential: z.ZodOptional<z.ZodObject<{
         tee: z.ZodOptional<z.ZodString>;
         attestationNonce: z.ZodOptional<z.ZodString>;
         sealed: z.ZodOptional<z.ZodBoolean>;
         attestationRefresh: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>>;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    extensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodUndefined]>>>;
+    metadata: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
+    extensions: z.ZodOptional<z.ZodType<Record<string, Record<string, unknown> | undefined>, unknown, z.core.$ZodTypeInternals<Record<string, Record<string, unknown> | undefined>, unknown>>>;
 }, z.core.$strict>;
 export declare const agentProfileDiffSchema: z.ZodType<AgentProfileDiff>;
 /**