@tangle-network/agent-interface 1.6.0 → 1.7.1

package/dist/contract-limits.d.ts

@@ -1,6 +1,8 @@
 import { z } from "zod";
 /** Limits applied before a value is hashed, copied, or sent to a provider. */
 export declare const CONTRACT_MAX_STRING_LENGTH = 16384;
+/** Maximum length of one canonical confidential-attestation quote. */
+export declare const CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH = 32768;
 export declare const CONTRACT_MAX_IDENTIFIER_LENGTH = 512;
 export declare const CONTRACT_MAX_ARRAY_LENGTH = 1024;
 export declare const CONTRACT_MAX_MAP_ENTRIES = 256;
@@ -8,6 +10,7 @@ export declare const CONTRACT_MAX_JSON_DEPTH = 16;
 export declare const CONTRACT_MAX_JSON_BYTES = 1048576;
 export declare const CONTRACT_MAX_JSON_NODES = 8192;
 export declare const boundedStringSchema: z.ZodString;
+export declare const confidentialAttestationQuoteSchema: z.ZodString;
 export declare const boundedIdentifierSchema: z.ZodString;
 /**
  * Validate JSON without asking Zod to recursively copy an attacker-sized

package/dist/contract-limits.js

@@ -1,6 +1,8 @@
 import { z } from "zod";
 /** Limits applied before a value is hashed, copied, or sent to a provider. */
 export const CONTRACT_MAX_STRING_LENGTH = 16_384;
+/** Maximum length of one canonical confidential-attestation quote. */
+export const CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH = 32_768;
 export const CONTRACT_MAX_IDENTIFIER_LENGTH = 512;
 export const CONTRACT_MAX_ARRAY_LENGTH = 1_024;
 export const CONTRACT_MAX_MAP_ENTRIES = 256;
@@ -8,6 +10,9 @@ export const CONTRACT_MAX_JSON_DEPTH = 16;
 export const CONTRACT_MAX_JSON_BYTES = 1_048_576;
 export const CONTRACT_MAX_JSON_NODES = 8_192;
 export const boundedStringSchema = z.string().max(CONTRACT_MAX_STRING_LENGTH);
+export const confidentialAttestationQuoteSchema = z
+    .string()
+    .max(CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH);
 export const boundedIdentifierSchema = boundedStringSchema
     .min(1)
     .max(CONTRACT_MAX_IDENTIFIER_LENGTH)

package/dist/environment-runtime.d.ts

@@ -7,7 +7,7 @@ import type { TokenUsage } from "./execution-types.js";
 import { type InteractionAcknowledgement, type InteractionCapabilities, type InteractionResponseCommand, type RequestedInteractions } from "./interaction.js";
 import { type ContextTransferReceipt, type ContextTransferRequest, type NativeContextBoundaryProof, type NativeContextContinuationRequest, type NativeContextContinuationTurn } from "./portable-context.js";
 import { type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunControlRef } from "./runtime-control.js";
-import type { AgentWorkspaceBranching } from "./workspace-branching.js";
+import type { AgentWorkspaceBranching, AgentWorkspaceBranchingProvider } from "./workspace-branching.js";
 import type { AgentEnvironmentQuery, AgentEnvironmentStatus, AgentEnvironmentSummary, AgentProfileRef, AgentSessionStatus, CheckpointRef, CheckpointRequest, ExecRequest, ExecResult, ForkRequest, PlacementInfo, ResourceRequest, WorkspaceRequest } from "./environment-requests.js";
 import type { AgentExactProcessEgressMode, AgentExactProcessProvider } from "./environment-exact-process.js";
 import type { AgentEnvironmentObservation } from "./environment-observation.js";
@@ -997,6 +997,15 @@ export declare function createAgentEnvironmentWithIdempotency<T extends object>(
 export interface AgentEnvironmentProvider {
     readonly name: string;
     readonly exactProcess?: AgentExactProcessProvider;
+    /**
+     * Reconstruct a source-scoped branching handle after a coordinator restart.
+     *
+     * This surface is intentionally separate from an environment-owned handle:
+     * lookup and cleanup requests identify operations, not their source. The
+     * provider owns source resolution and the underlying platform calls. A
+     * returned handle is bound to that source and must reject other scopes.
+     */
+    readonly workspaceBranching?: AgentWorkspaceBranchingProvider;
     capabilities(): AgentEnvironmentCapabilities | Promise<AgentEnvironmentCapabilities>;
     validateProfile?(profile: AgentProfileRef): AgentProfileValidationResult | Promise<AgentProfileValidationResult>;
     /**

package/dist/index.d.ts

@@ -40,3 +40,4 @@ export * from "./harness-capabilities.js";
 export * from "./profile-schema.js";
 export * from "./profile-security.js";
 export * from "./sandbox-size.js";
+export { CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH, } from "./contract-limits.js";

package/dist/index.js

@@ -38,3 +38,4 @@ export * from "./harness-capabilities.js";
 export * from "./profile-schema.js";
 export * from "./profile-security.js";
 export * from "./sandbox-size.js";
+export { CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH, } from "./contract-limits.js";

package/dist/workspace-cleanup.d.ts

@@ -81,5 +81,20 @@ export interface AgentWorkspaceBranching {
         signal?: AbortSignal;
     }): Promise<WorkspaceCleanupAcknowledgement>;
 }
+/**
+ * Provider-level entry point for reconstructing branch operations by source.
+ *
+ * Environment handles are process-local views. A coordinator that restarts
+ * must obtain a fresh source-scoped handle before it looks up or cleans a
+ * checkpoint or fork. The returned handle must reject a resource that does
+ * not belong to its source scope. Providers return null when the source is
+ * absent, the resolved environment id does not match, or the deployment
+ * cannot prove the complete branching surface.
+ */
+export interface AgentWorkspaceBranchingProvider {
+    forEnvironment(sourceEnvironmentId: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<AgentWorkspaceBranching | null>;
+}
 /** Bind cleanup confirmation to the exact provider resource and operation. */
 export declare function workspaceCleanupAcknowledgementMatches(request: WorkspaceCleanupRequest, acknowledgement: WorkspaceCleanupAcknowledgement): boolean;

package/dist/workspace-confidentiality.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { boundedStringSchema } from "./contract-limits.js";
+import { boundedStringSchema, confidentialAttestationQuoteSchema, } from "./contract-limits.js";
 import { AgentExactRunControlRefSchema, } from "./runtime-control.js";
 import { idSchema, sha256DigestSchema, wireDigest } from "./workspace-branching-shared.js";
 /**
@@ -18,7 +18,7 @@ export const ConfidentialAttestationSchema = z
     requestDigest: sha256DigestSchema,
     profileDigest: sha256DigestSchema,
     policy: idSchema,
-    quote: boundedStringSchema.min(1),
+    quote: confidentialAttestationQuoteSchema.min(1),
     providerKeyId: idSchema,
     providerSignature: boundedStringSchema.min(1),
     verifiedAt: z.iso.datetime().max(64),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-interface",
-  "version": "1.6.0",
+  "version": "1.7.1",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",