@tangle-network/agent-interface 0.45.0 → 0.46.0

package/README.md

@@ -10,7 +10,7 @@ shapes; higher-level packages import from here rather than redefining them.
 `AgentRunControlRef` identifies a retained run without depending on a live JavaScript object and may carry the provider's admission digest so reconstruction can reject changed-input reuse.
 `RuntimeEventEnvelope` adds stable run, event, sequence, cursor, and timestamp fields around the existing `StreamEvent` union, and its runtime schema validates every canonical event variant.
 Providers advertise `retainedControl` only when exact run, result, event, cancellation, replay, detach, turn, and session identity are all implemented together.
-`AgentSession.cancelRun()` accepts a canonical request digest bound to one operation and `AgentRunControlRef`, so a caller can safely repeat the same cancellation after losing the first acknowledgement.
+`AgentSession.cancelRun()` accepts a canonical request digest bound to one operation and `AgentExactRunControlRef`, so a caller can safely repeat the same cancellation after losing the first acknowledgement.
 Its acknowledgement repeats the operation, digest, and run coordinates and distinguishes a known cancellation effect from conflict or unknown state.
 
 An environment advertises `interactions` only when it can originate and answer typed requests.

package/dist/agent-candidate-profile-schema.d.ts

@@ -66,9 +66,9 @@ export declare const agentCandidateProfileSchema: z.ZodObject<{
     mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<AgentCandidateMcpServer, unknown, z.core.$ZodTypeInternals<AgentCandidateMcpServer, unknown>>>>;
     subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         prompt: z.ZodOptional<z.ZodString>;
-        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
         description: z.ZodOptional<z.ZodString>;
+        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         model: z.ZodOptional<z.ZodString>;
         maxSteps: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>>;
@@ -545,9 +545,9 @@ export declare const agentCandidateProfileSchema: z.ZodObject<{
     }, z.core.$strict>>>>;
     modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         prompt: z.ZodOptional<z.ZodString>;
-        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
         description: z.ZodOptional<z.ZodString>;
+        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         model: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>>;
     confidential: z.ZodOptional<z.ZodObject<{

package/dist/agent-candidate-promotion-schema.d.ts

@@ -57,9 +57,9 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
             mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("./agent-candidate.js").AgentCandidateMcpServer, unknown, z.core.$ZodTypeInternals<import("./agent-candidate.js").AgentCandidateMcpServer, unknown>>>>;
             subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                 prompt: z.ZodOptional<z.ZodString>;
-                permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                 tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                 description: z.ZodOptional<z.ZodString>;
+                permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                 model: z.ZodOptional<z.ZodString>;
                 maxSteps: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>>;
@@ -536,9 +536,9 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
             }, z.core.$strict>>>>;
             modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                 prompt: z.ZodOptional<z.ZodString>;
-                permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                 tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                 description: z.ZodOptional<z.ZodString>;
+                permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                 model: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>>;
             confidential: z.ZodOptional<z.ZodObject<{
@@ -887,9 +887,9 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
             mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("./agent-candidate.js").AgentCandidateMcpServer, unknown, z.core.$ZodTypeInternals<import("./agent-candidate.js").AgentCandidateMcpServer, unknown>>>>;
             subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                 prompt: z.ZodOptional<z.ZodString>;
-                permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                 tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                 description: z.ZodOptional<z.ZodString>;
+                permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                 model: z.ZodOptional<z.ZodString>;
                 maxSteps: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>>;
@@ -1366,9 +1366,9 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
             }, z.core.$strict>>>>;
             modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                 prompt: z.ZodOptional<z.ZodString>;
-                permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                 tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                 description: z.ZodOptional<z.ZodString>;
+                permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                 model: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>>;
             confidential: z.ZodOptional<z.ZodObject<{
@@ -3630,9 +3630,9 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
                 mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("./agent-candidate.js").AgentCandidateMcpServer, unknown, z.core.$ZodTypeInternals<import("./agent-candidate.js").AgentCandidateMcpServer, unknown>>>>;
                 subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                     prompt: z.ZodOptional<z.ZodString>;
-                    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                     tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                     description: z.ZodOptional<z.ZodString>;
+                    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                     model: z.ZodOptional<z.ZodString>;
                     maxSteps: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strict>>>;
@@ -4109,9 +4109,9 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
                 }, z.core.$strict>>>>;
                 modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                     prompt: z.ZodOptional<z.ZodString>;
-                    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                     tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                     description: z.ZodOptional<z.ZodString>;
+                    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                     model: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>>;
                 confidential: z.ZodOptional<z.ZodObject<{
@@ -4460,9 +4460,9 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
                 mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("./agent-candidate.js").AgentCandidateMcpServer, unknown, z.core.$ZodTypeInternals<import("./agent-candidate.js").AgentCandidateMcpServer, unknown>>>>;
                 subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                     prompt: z.ZodOptional<z.ZodString>;
-                    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                     tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                     description: z.ZodOptional<z.ZodString>;
+                    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                     model: z.ZodOptional<z.ZodString>;
                     maxSteps: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strict>>>;
@@ -4939,9 +4939,9 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
                 }, z.core.$strict>>>>;
                 modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                     prompt: z.ZodOptional<z.ZodString>;
-                    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                     tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                     description: z.ZodOptional<z.ZodString>;
+                    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                     model: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>>;
                 confidential: z.ZodOptional<z.ZodObject<{
@@ -8365,22 +8365,22 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
     changedSurfaces: z.ZodTuple<[z.ZodEnum<{
         prompt: "prompt";
         tools: "tools";
+        skills: "skills";
         mcp: "mcp";
         subagents: "subagents";
         hooks: "hooks";
         code: "code";
-        skills: "skills";
         "agent-profile": "agent-profile";
         memory: "memory";
         knowledge: "knowledge";
     }>], z.ZodEnum<{
         prompt: "prompt";
         tools: "tools";
+        skills: "skills";
         mcp: "mcp";
         subagents: "subagents";
         hooks: "hooks";
         code: "code";
-        skills: "skills";
         "agent-profile": "agent-profile";
         memory: "memory";
         knowledge: "knowledge";
@@ -8623,9 +8623,9 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
                     mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("./agent-candidate.js").AgentCandidateMcpServer, unknown, z.core.$ZodTypeInternals<import("./agent-candidate.js").AgentCandidateMcpServer, unknown>>>>;
                     subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                         prompt: z.ZodOptional<z.ZodString>;
-                        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                         description: z.ZodOptional<z.ZodString>;
+                        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                         model: z.ZodOptional<z.ZodString>;
                         maxSteps: z.ZodOptional<z.ZodNumber>;
                     }, z.core.$strict>>>;
@@ -9102,9 +9102,9 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
                     }, z.core.$strict>>>>;
                     modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                         prompt: z.ZodOptional<z.ZodString>;
-                        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                         description: z.ZodOptional<z.ZodString>;
+                        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                         model: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>>;
                     confidential: z.ZodOptional<z.ZodObject<{
@@ -9453,9 +9453,9 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
                     mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("./agent-candidate.js").AgentCandidateMcpServer, unknown, z.core.$ZodTypeInternals<import("./agent-candidate.js").AgentCandidateMcpServer, unknown>>>>;
                     subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                         prompt: z.ZodOptional<z.ZodString>;
-                        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                         description: z.ZodOptional<z.ZodString>;
+                        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                         model: z.ZodOptional<z.ZodString>;
                         maxSteps: z.ZodOptional<z.ZodNumber>;
                     }, z.core.$strict>>>;
@@ -9932,9 +9932,9 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
                     }, z.core.$strict>>>>;
                     modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                         prompt: z.ZodOptional<z.ZodString>;
-                        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                         description: z.ZodOptional<z.ZodString>;
+                        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
                         model: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>>;
                     confidential: z.ZodOptional<z.ZodObject<{
@@ -14054,11 +14054,11 @@ export declare const agentImprovementActivationSchema: z.ZodObject<{
         surface: z.ZodEnum<{
             prompt: "prompt";
             tools: "tools";
+            skills: "skills";
             mcp: "mcp";
             subagents: "subagents";
             hooks: "hooks";
             code: "code";
-            skills: "skills";
             "agent-profile": "agent-profile";
             memory: "memory";
             knowledge: "knowledge";
@@ -14069,11 +14069,11 @@ export declare const agentImprovementActivationSchema: z.ZodObject<{
         surface: z.ZodEnum<{
             prompt: "prompt";
             tools: "tools";
+            skills: "skills";
             mcp: "mcp";
             subagents: "subagents";
             hooks: "hooks";
             code: "code";
-            skills: "skills";
             "agent-profile": "agent-profile";
             memory: "memory";
             knowledge: "knowledge";
@@ -14099,11 +14099,11 @@ export declare const agentImprovementActivationResultSchema: z.ZodObject<{
             surface: z.ZodEnum<{
                 prompt: "prompt";
                 tools: "tools";
+                skills: "skills";
                 mcp: "mcp";
                 subagents: "subagents";
                 hooks: "hooks";
                 code: "code";
-                skills: "skills";
                 "agent-profile": "agent-profile";
                 memory: "memory";
                 knowledge: "knowledge";
@@ -14115,11 +14115,11 @@ export declare const agentImprovementActivationResultSchema: z.ZodObject<{
             surface: z.ZodEnum<{
                 prompt: "prompt";
                 tools: "tools";
+                skills: "skills";
                 mcp: "mcp";
                 subagents: "subagents";
                 hooks: "hooks";
                 code: "code";
-                skills: "skills";
                 "agent-profile": "agent-profile";
                 memory: "memory";
                 knowledge: "knowledge";
@@ -14134,11 +14134,11 @@ export declare const agentImprovementActivationResultSchema: z.ZodObject<{
             surface: z.ZodEnum<{
                 prompt: "prompt";
                 tools: "tools";
+                skills: "skills";
                 mcp: "mcp";
                 subagents: "subagents";
                 hooks: "hooks";
                 code: "code";
-                skills: "skills";
                 "agent-profile": "agent-profile";
                 memory: "memory";
                 knowledge: "knowledge";
@@ -14149,11 +14149,11 @@ export declare const agentImprovementActivationResultSchema: z.ZodObject<{
             surface: z.ZodEnum<{
                 prompt: "prompt";
                 tools: "tools";
+                skills: "skills";
                 mcp: "mcp";
                 subagents: "subagents";
                 hooks: "hooks";
                 code: "code";
-                skills: "skills";
                 "agent-profile": "agent-profile";
                 memory: "memory";
                 knowledge: "knowledge";
@@ -14167,11 +14167,11 @@ export declare const agentImprovementActivationResultSchema: z.ZodObject<{
             surface: z.ZodEnum<{
                 prompt: "prompt";
                 tools: "tools";
+                skills: "skills";
                 mcp: "mcp";
                 subagents: "subagents";
                 hooks: "hooks";
                 code: "code";
-                skills: "skills";
                 "agent-profile": "agent-profile";
                 memory: "memory";
                 knowledge: "knowledge";
@@ -14182,11 +14182,11 @@ export declare const agentImprovementActivationResultSchema: z.ZodObject<{
             surface: z.ZodEnum<{
                 prompt: "prompt";
                 tools: "tools";
+                skills: "skills";
                 mcp: "mcp";
                 subagents: "subagents";
                 hooks: "hooks";
                 code: "code";
-                skills: "skills";
                 "agent-profile": "agent-profile";
                 memory: "memory";
                 knowledge: "knowledge";

package/dist/agent-candidate-schema-common.js

@@ -221,7 +221,7 @@ function configRecordSchema(keySchema) {
     return z
         .record(keySchema, agentCandidateConfigValueSchema)
         .superRefine((config, ctx) => {
-        for (const [name, value] of Object.entries(config)) {
+        for (const name of Object.keys(config)) {
             if (secretNamePattern.test(name)) {
                 ctx.addIssue({
                     code: "custom",

package/dist/agent-candidate-schema.d.ts

@@ -61,9 +61,9 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
         mcp: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("./agent-candidate.js").AgentCandidateMcpServer, unknown, z.core.$ZodTypeInternals<import("./agent-candidate.js").AgentCandidateMcpServer, unknown>>>>;
         subagents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
             prompt: z.ZodOptional<z.ZodString>;
-            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
             tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
             description: z.ZodOptional<z.ZodString>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
             model: z.ZodOptional<z.ZodString>;
             maxSteps: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
@@ -540,9 +540,9 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
         }, z.core.$strict>>>>;
         modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
             prompt: z.ZodOptional<z.ZodString>;
-            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
             tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
             description: z.ZodOptional<z.ZodString>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
             model: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>>;
         confidential: z.ZodOptional<z.ZodObject<{

package/dist/agent-execution-preparation.d.ts

@@ -148,27 +148,27 @@ export type AgentExecutionPreparationValidationResult = {
 };
 export declare const agentExecutionPreparationAxisResultSchema: z.ZodObject<{
     axis: z.ZodEnum<{
-        permissions: "permissions";
+        name: "name";
+        systemPrompt: "systemPrompt";
+        appendSystemPrompt: "appendSystemPrompt";
+        instructions: "instructions";
+        files: "files";
         tools: "tools";
+        skills: "skills";
+        commands: "commands";
+        description: "description";
+        version: "version";
+        tags: "tags";
+        harness: "harness";
+        permissions: "permissions";
         mcp: "mcp";
         connections: "connections";
         subagents: "subagents";
         hooks: "hooks";
         modes: "modes";
-        metadata: "metadata";
-        description: "description";
-        name: "name";
-        files: "files";
-        version: "version";
-        tags: "tags";
-        harness: "harness";
         confidential: "confidential";
+        metadata: "metadata";
         extensions: "extensions";
-        systemPrompt: "systemPrompt";
-        appendSystemPrompt: "appendSystemPrompt";
-        instructions: "instructions";
-        skills: "skills";
-        commands: "commands";
         modelDefault: "modelDefault";
         modelSmall: "modelSmall";
         modelProvider: "modelProvider";
@@ -296,27 +296,27 @@ export declare const agentExecutionPreparationReceiptSchema: z.ZodObject<{
     }, z.core.$strict>;
     axisResults: z.ZodArray<z.ZodObject<{
         axis: z.ZodEnum<{
-            permissions: "permissions";
+            name: "name";
+            systemPrompt: "systemPrompt";
+            appendSystemPrompt: "appendSystemPrompt";
+            instructions: "instructions";
+            files: "files";
             tools: "tools";
+            skills: "skills";
+            commands: "commands";
+            description: "description";
+            version: "version";
+            tags: "tags";
+            harness: "harness";
+            permissions: "permissions";
             mcp: "mcp";
             connections: "connections";
             subagents: "subagents";
             hooks: "hooks";
             modes: "modes";
-            metadata: "metadata";
-            description: "description";
-            name: "name";
-            files: "files";
-            version: "version";
-            tags: "tags";
-            harness: "harness";
             confidential: "confidential";
+            metadata: "metadata";
             extensions: "extensions";
-            systemPrompt: "systemPrompt";
-            appendSystemPrompt: "appendSystemPrompt";
-            instructions: "instructions";
-            skills: "skills";
-            commands: "commands";
             modelDefault: "modelDefault";
             modelSmall: "modelSmall";
             modelProvider: "modelProvider";

package/dist/agent-profile.d.ts

@@ -442,9 +442,16 @@ export interface AgentProfileValidationResult {
 /**
  * Merge two public AgentProfile values.
  *
- * Overlay fields win on conflicts. Additive fields compose instead: array-like
- * instruction sets are concatenated, and `prompt.appendSystemPrompt` values are
- * joined base-first with a blank line between them.
+ * Overlay fields win on conflicts, but only where they carry a value: an
+ * `undefined` entry reads as "not specified" and keeps the base value, because
+ * removal is the `remove` channel's job on {@link AgentProfileDiff}. Keys that
+ * resolve to nothing are omitted rather than written as `undefined` — RFC 8785
+ * canonicalization enumerates own keys, so a present-but-undefined key is a
+ * different document from an absent one.
+ *
+ * Additive fields compose instead of overwriting: array-like instruction sets
+ * are concatenated, and `prompt.appendSystemPrompt` values are joined
+ * base-first with a blank line between them.
  */
 export declare function mergeAgentProfiles(base: AgentProfile | undefined, overlay: AgentProfile | undefined): AgentProfile | undefined;
 export {};

package/dist/agent-profile.js

@@ -23,10 +23,12 @@ export function defineInlineResource(name, content) {
 export function defineGitHubResource(path, options = {}) {
     return {
         kind: "github",
-        repository: options.repository,
         path,
-        ref: options.ref,
-        name: options.name,
+        ...(options.repository === undefined
+            ? {}
+            : { repository: options.repository }),
+        ...(options.ref === undefined ? {} : { ref: options.ref }),
+        ...(options.name === undefined ? {} : { name: options.name }),
     };
 }
 /**
@@ -67,6 +69,29 @@ export function defineAgentProfileSecretRef(key, format) {
 export function defineAgentProfile(profile) {
     return profile;
 }
+/**
+ * Layer objects the way a spread would, except that an `undefined` entry means
+ * "not specified" and is never written to the result.
+ *
+ * Profile identity is an RFC 8785 digest over the profile, and canonicalization
+ * enumerates own keys: `{ tools: undefined }` is a different document from `{}`,
+ * so writing a key with no value moves the digest of a profile whose content did
+ * not change, or is refused outright by the canonical JSON domain. Later sources
+ * therefore win only where they carry a value; removal is expressed through
+ * {@link AgentProfileDiff}'s `remove` channel, never by overlaying `undefined`.
+ */
+function assignDefined(...sources) {
+    const merged = {};
+    for (const source of sources) {
+        if (source === undefined)
+            continue;
+        for (const [key, value] of Object.entries(source)) {
+            if (value !== undefined)
+                merged[key] = value;
+        }
+    }
+    return merged;
+}
 function mergeStringArrays(base, overlay) {
     if (!base && !overlay)
         return undefined;
@@ -88,10 +113,7 @@ function mergeAppendedSystemPrompts(base, overlay) {
 function mergeRecord(base, overlay) {
     if (!base && !overlay)
         return undefined;
-    return {
-        ...(base ?? {}),
-        ...(overlay ?? {}),
-    };
+    return assignDefined(base, overlay);
 }
 function mergeOptionalArrays(base, overlay) {
     if (!base && !overlay)
@@ -101,36 +123,37 @@ function mergeOptionalArrays(base, overlay) {
 /**
  * Merge two public AgentProfile values.
  *
- * Overlay fields win on conflicts. Additive fields compose instead: array-like
- * instruction sets are concatenated, and `prompt.appendSystemPrompt` values are
- * joined base-first with a blank line between them.
+ * Overlay fields win on conflicts, but only where they carry a value: an
+ * `undefined` entry reads as "not specified" and keeps the base value, because
+ * removal is the `remove` channel's job on {@link AgentProfileDiff}. Keys that
+ * resolve to nothing are omitted rather than written as `undefined` — RFC 8785
+ * canonicalization enumerates own keys, so a present-but-undefined key is a
+ * different document from an absent one.
+ *
+ * Additive fields compose instead of overwriting: array-like instruction sets
+ * are concatenated, and `prompt.appendSystemPrompt` values are joined
+ * base-first with a blank line between them.
  */
 export function mergeAgentProfiles(base, overlay) {
     if (!base && !overlay)
         return undefined;
     const mergedPrompt = base?.prompt || overlay?.prompt
-        ? {
-            ...(base?.prompt ?? {}),
-            ...(overlay?.prompt ?? {}),
+        ? assignDefined(base?.prompt, overlay?.prompt, {
             appendSystemPrompt: mergeAppendedSystemPrompts(base?.prompt?.appendSystemPrompt, overlay?.prompt?.appendSystemPrompt),
             instructions: mergeStringArrays(base?.prompt?.instructions, overlay?.prompt?.instructions),
-        }
+        })
         : undefined;
     const mergedResources = base?.resources || overlay?.resources
-        ? {
-            ...(base?.resources ?? {}),
-            ...(overlay?.resources ?? {}),
+        ? assignDefined(base?.resources, overlay?.resources, {
             files: mergeOptionalArrays(base?.resources?.files, overlay?.resources?.files),
             tools: mergeOptionalArrays(base?.resources?.tools, overlay?.resources?.tools),
             skills: mergeOptionalArrays(base?.resources?.skills, overlay?.resources?.skills),
             agents: mergeOptionalArrays(base?.resources?.agents, overlay?.resources?.agents),
             commands: mergeOptionalArrays(base?.resources?.commands, overlay?.resources?.commands),
             instructions: overlay?.resources?.instructions ?? base?.resources?.instructions,
-        }
+        })
         : undefined;
-    return {
-        ...(base ?? {}),
-        ...(overlay ?? {}),
+    return assignDefined(base, overlay, {
         prompt: mergedPrompt,
         permissions: mergeRecord(base?.permissions, overlay?.permissions),
         tools: mergeRecord(base?.tools, overlay?.tools),
@@ -142,5 +165,5 @@ export function mergeAgentProfiles(base, overlay) {
         modes: mergeRecord(base?.modes, overlay?.modes),
         metadata: mergeRecord(base?.metadata, overlay?.metadata),
         extensions: mergeRecord(base?.extensions, overlay?.extensions),
-    };
+    });
 }

package/dist/backend-message.d.ts

@@ -0,0 +1,14 @@
+import type { InputPart, Part } from "./parts.js";
+export type BackendMessage = {
+    id: string;
+    role: "user" | "assistant" | "system";
+    parts: Array<Part | InputPart | unknown>;
+    timestamp: string;
+    metadata?: Record<string, unknown>;
+};
+export type GetMessagesOptions = {
+    sessionId: string;
+    limit?: number;
+    offset?: number;
+    since?: number;
+};

package/dist/backend-message.js

@@ -0,0 +1 @@
+export {};

package/dist/contract-limits.d.ts

@@ -0,0 +1,26 @@
+import { z } from "zod";
+/** Limits applied before a value is hashed, copied, or sent to a provider. */
+export declare const CONTRACT_MAX_STRING_LENGTH = 16384;
+export declare const CONTRACT_MAX_IDENTIFIER_LENGTH = 512;
+export declare const CONTRACT_MAX_ARRAY_LENGTH = 1024;
+export declare const CONTRACT_MAX_MAP_ENTRIES = 256;
+export declare const CONTRACT_MAX_JSON_DEPTH = 16;
+export declare const CONTRACT_MAX_JSON_BYTES = 1048576;
+export declare const CONTRACT_MAX_JSON_NODES = 8192;
+export declare const boundedStringSchema: z.ZodString;
+export declare const boundedIdentifierSchema: z.ZodString;
+/**
+ * Validate JSON without asking Zod to recursively copy an attacker-sized
+ * value. This is intentionally iterative so depth and collection limits are
+ * checked before canonical serialization.
+ */
+export declare function isBoundedJsonValue(value: unknown): boolean;
+/** Validate digest input while matching JSON's omission of undefined object fields. */
+export declare function isBoundedJsonMaterial(value: unknown): boolean;
+export declare const boundedJsonSchema: z.ZodCustom<unknown, unknown>;
+export declare const boundedJsonRecordSchema: z.ZodCustom<Record<string, unknown>, Record<string, unknown>>;
+export declare function assertBoundedJson(value: unknown): void;
+export declare function assertBoundedSerializedJson(value: string): void;
+/** Copy arbitrary metadata into a map that cannot inherit prototype keys. */
+export declare function nullPrototypeRecord<T>(value: Record<string, T>): Record<string, T>;
+export declare function hasOwn(value: object, key: PropertyKey): boolean;