@tangle-network/agent-interface 1.7.0 → 1.8.0

package/README.md

@@ -73,6 +73,8 @@ Its successful receipt repeats the exact destination and carries the provider's
 `NativeContextContinuationRequest.turnDigest` binds the operation to the exact new JSON-stable user turn; timeout and abort controls live outside that turn under `AgentNativeContextContinuationOptions`.
 Continuation is valid only when the provider atomically proves the recorded token, revision, digest, or message boundary, sends zero copied history, and applies retry or changed-input conflict semantics.
 Providers advertise `nativeContinuation` only when both guarantees are implemented and expose `AgentSession.continueNative()` as the single durable operation.
+When `nativeContinuation.admissionControl` is true, `continueNative()` calls `onAdmission` once with the exact new run before it waits for terminal output.
+This lets a runtime stream, inspect, and cancel the continued run through the same retained-control methods.
 An accepted or replayed operation returns its original turn result and exact current control reference; `AgentNativeContextContinuationResultSchema` validates that shape and `agentNativeContextContinuationResultMatchesRequest()` checks its request and retained-session bindings.
 A changed request with the same operation identifier conflicts without dispatch.
 

package/dist/contract-limits.d.ts

@@ -1,6 +1,8 @@
 import { z } from "zod";
 /** Limits applied before a value is hashed, copied, or sent to a provider. */
 export declare const CONTRACT_MAX_STRING_LENGTH = 16384;
+/** Maximum length of one canonical confidential-attestation quote. */
+export declare const CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH = 32768;
 export declare const CONTRACT_MAX_IDENTIFIER_LENGTH = 512;
 export declare const CONTRACT_MAX_ARRAY_LENGTH = 1024;
 export declare const CONTRACT_MAX_MAP_ENTRIES = 256;
@@ -8,6 +10,7 @@ export declare const CONTRACT_MAX_JSON_DEPTH = 16;
 export declare const CONTRACT_MAX_JSON_BYTES = 1048576;
 export declare const CONTRACT_MAX_JSON_NODES = 8192;
 export declare const boundedStringSchema: z.ZodString;
+export declare const confidentialAttestationQuoteSchema: z.ZodString;
 export declare const boundedIdentifierSchema: z.ZodString;
 /**
  * Validate JSON without asking Zod to recursively copy an attacker-sized

package/dist/contract-limits.js

@@ -1,6 +1,8 @@
 import { z } from "zod";
 /** Limits applied before a value is hashed, copied, or sent to a provider. */
 export const CONTRACT_MAX_STRING_LENGTH = 16_384;
+/** Maximum length of one canonical confidential-attestation quote. */
+export const CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH = 32_768;
 export const CONTRACT_MAX_IDENTIFIER_LENGTH = 512;
 export const CONTRACT_MAX_ARRAY_LENGTH = 1_024;
 export const CONTRACT_MAX_MAP_ENTRIES = 256;
@@ -8,6 +10,9 @@ export const CONTRACT_MAX_JSON_DEPTH = 16;
 export const CONTRACT_MAX_JSON_BYTES = 1_048_576;
 export const CONTRACT_MAX_JSON_NODES = 8_192;
 export const boundedStringSchema = z.string().max(CONTRACT_MAX_STRING_LENGTH);
+export const confidentialAttestationQuoteSchema = z
+    .string()
+    .max(CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH);
 export const boundedIdentifierSchema = boundedStringSchema
     .min(1)
     .max(CONTRACT_MAX_IDENTIFIER_LENGTH)

package/dist/environment-runtime.d.ts

@@ -6,7 +6,7 @@ import type { StreamEvent } from "./stream-events.js";
 import type { TokenUsage } from "./execution-types.js";
 import { type InteractionAcknowledgement, type InteractionCapabilities, type InteractionResponseCommand, type RequestedInteractions } from "./interaction.js";
 import { type ContextTransferReceipt, type ContextTransferRequest, type NativeContextBoundaryProof, type NativeContextContinuationRequest, type NativeContextContinuationTurn } from "./portable-context.js";
-import { type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunControlRef } from "./runtime-control.js";
+import { type AgentExactRunControlRef, type AgentRunCancellationAcknowledgement, type AgentRunCancellationRequest, type AgentRunControlRef } from "./runtime-control.js";
 import type { AgentWorkspaceBranching, AgentWorkspaceBranchingProvider } from "./workspace-branching.js";
 import type { AgentEnvironmentQuery, AgentEnvironmentStatus, AgentEnvironmentSummary, AgentProfileRef, AgentSessionStatus, CheckpointRef, CheckpointRequest, ExecRequest, ExecResult, ForkRequest, PlacementInfo, ResourceRequest, WorkspaceRequest } from "./environment-requests.js";
 import type { AgentExactProcessEgressMode, AgentExactProcessProvider } from "./environment-exact-process.js";
@@ -570,11 +570,60 @@ export declare const AgentNativeContextContinuationResultSchema: z.ZodUnion<read
     }, z.core.$strip>>;
 }, z.core.$strict>]>;
 export type AgentNativeContextContinuationResult = z.infer<typeof AgentNativeContextContinuationResultSchema>;
+/** Exact continued-run identity returned after durable admission. */
+export declare const AgentNativeContextContinuationAdmissionSchema: z.ZodObject<{
+    phase: z.ZodLiteral<"admitted">;
+    acknowledgement: z.ZodObject<{
+        operationId: z.ZodString;
+        requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+        historyMessagesSent: z.ZodLiteral<0>;
+        actualBoundary: z.ZodObject<{
+            runId: z.ZodString;
+            provider: z.ZodString;
+            environmentId: z.ZodString;
+            sessionId: z.ZodString;
+            executionId: z.ZodString;
+            requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            boundary: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"token">;
+                token: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"revision">;
+                revision: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"digest">;
+                digest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"messages">;
+                messageIds: z.ZodArray<z.ZodString>;
+                digest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+            }, z.core.$strict>], "kind">;
+            observedAt: z.ZodISODateTime;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    controlRef: z.ZodObject<{
+        runId: z.ZodString;
+        provider: z.ZodString;
+        environmentId: z.ZodString;
+        sessionId: z.ZodString;
+        executionId: z.ZodString;
+        requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type AgentNativeContextContinuationAdmission = z.infer<typeof AgentNativeContextContinuationAdmissionSchema>;
+/** Cross-check one early admission against its exact continuation request. */
+export declare function agentNativeContextContinuationAdmissionMatchesRequest(request: NativeContextContinuationRequest, admission: AgentNativeContextContinuationAdmission): boolean;
 /** Runtime-only controls kept outside the digest-bound user turn. */
 export interface AgentNativeContextContinuationOptions {
     turn: NativeContextContinuationTurn;
     timeoutMs?: number;
     signal?: AbortSignal;
+    /**
+     * Receives the exact new run identity after durable admission and before the
+     * provider waits for terminal output. Providers call this once only when
+     * `nativeContinuation.admissionControl` is true.
+     */
+    onAdmission?: (controlRef: AgentExactRunControlRef) => void;
 }
 /** Cross-check a successful native continuation against its retained session. */
 export declare function agentNativeContextContinuationResultMatchesRequest(request: NativeContextContinuationRequest, outcome: AgentNativeContextContinuationResult): boolean;
@@ -751,6 +800,8 @@ export interface AgentEnvironmentCapabilities {
     nativeContinuation?: {
         atomicBoundary: boolean;
         requestIdempotency: boolean;
+        /** The provider exposes the exact continued run before terminal output. */
+        admissionControl?: boolean;
     };
     /** Absent when the provider cannot originate or answer interactions. */
     interactions?: InteractionCapabilities;
@@ -859,6 +910,7 @@ export declare const AgentEnvironmentCapabilitiesSchema: z.ZodObject<{
     nativeContinuation: z.ZodOptional<z.ZodObject<{
         atomicBoundary: z.ZodBoolean;
         requestIdempotency: z.ZodBoolean;
+        admissionControl: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>>;
     interactions: z.ZodOptional<z.ZodObject<{
         kinds: z.ZodArray<z.ZodString>;

package/dist/environment-runtime.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { canonicalCandidateDigest } from "./agent-candidate-schema-common.js";
 import { InteractionCapabilitiesSchema, RequestedInteractionsSchema } from "./interaction.js";
-import { ContextTransferReceiptSchema, ContextTransferRequestSchema, NativeContextContinuationAcknowledgementSchema, NativeContextContinuationRequestSchema, nativeContextContinuationAcknowledgementMatches } from "./portable-context.js";
+import { ContextTransferReceiptSchema, ContextTransferRequestSchema, NativeContextBoundaryProofSchema, NativeContextContinuationAcknowledgementSchema, NativeContextContinuationRequestSchema, nativeContextContinuationAcknowledgementMatches } from "./portable-context.js";
 import { AgentExactRunControlRefSchema, AgentRunControlRefSchema, CanonicalStreamEventSchema } from "./runtime-control.js";
 import { AgentProfileCapabilitiesSchema } from "./environment-profile-capabilities.js";
 import { boundedIdentifierSchema, boundedJsonRecordSchema, boundedJsonSchema, boundedStringSchema, CONTRACT_MAX_ARRAY_LENGTH } from "./contract-limits.js";
@@ -92,6 +92,49 @@ export const AgentNativeContextContinuationResultSchema = z.union([
         }
     }),
 ]);
+/** Exact continued-run identity returned after durable admission. */
+export const AgentNativeContextContinuationAdmissionSchema = z
+    .strictObject({
+    phase: z.literal("admitted"),
+    acknowledgement: z.strictObject({
+        operationId: boundedIdentifierSchema,
+        requestDigest: AgentExactRunControlRefSchema.shape.requestDigest,
+        historyMessagesSent: z.literal(0),
+        actualBoundary: NativeContextBoundaryProofSchema,
+    }),
+    controlRef: AgentExactRunControlRefSchema,
+})
+    .superRefine((admission, refinement) => {
+    const source = admission.acknowledgement.actualBoundary;
+    const current = admission.controlRef;
+    if (source.provider !== current.provider ||
+        source.environmentId !== current.environmentId ||
+        source.sessionId !== current.sessionId) {
+        refinement.addIssue({
+            code: "custom",
+            path: ["controlRef"],
+            message: "native continuation admission must stay in the retained session",
+        });
+    }
+});
+/** Cross-check one early admission against its exact continuation request. */
+export function agentNativeContextContinuationAdmissionMatchesRequest(request, admission) {
+    const parsedRequest = NativeContextContinuationRequestSchema.safeParse(request);
+    const parsedAdmission = AgentNativeContextContinuationAdmissionSchema.safeParse(admission);
+    if (!parsedRequest.success || !parsedAdmission.success)
+        return false;
+    const expected = parsedRequest.data;
+    const actual = parsedAdmission.data;
+    const boundary = actual.acknowledgement.actualBoundary;
+    return (actual.acknowledgement.operationId === expected.operationId &&
+        actual.acknowledgement.requestDigest === expected.requestDigest &&
+        boundary.runId === expected.run.runId &&
+        boundary.provider === expected.run.provider &&
+        boundary.environmentId === expected.run.environmentId &&
+        boundary.sessionId === expected.run.sessionId &&
+        boundary.executionId === expected.run.executionId &&
+        boundary.requestDigest === expected.run.requestDigest);
+}
 /** Cross-check a successful native continuation against its retained session. */
 export function agentNativeContextContinuationResultMatchesRequest(request, outcome) {
     const parsedRequest = NativeContextContinuationRequestSchema.safeParse(request);
@@ -144,6 +187,7 @@ export const AgentEnvironmentCapabilitiesSchema = z
         .strictObject({
         atomicBoundary: z.boolean(),
         requestIdempotency: z.boolean(),
+        admissionControl: z.boolean().optional(),
     })
         .optional(),
     interactions: InteractionCapabilitiesSchema.optional(),
@@ -234,6 +278,14 @@ export const AgentEnvironmentCapabilitiesSchema = z
             message: "native continuation requires session continuation, atomic boundary admission, and request idempotency together",
         });
     }
+    if (capabilities.nativeContinuation?.admissionControl === true &&
+        capabilities.retainedControl === undefined) {
+        refinement.addIssue({
+            code: "custom",
+            path: ["nativeContinuation", "admissionControl"],
+            message: "native continuation requires retained control for early admission",
+        });
+    }
     const durableBranching = [
         capabilities.branching.retrySafe ?? false,
         capabilities.branching.lookup ?? false,

package/dist/index.d.ts

@@ -8,7 +8,7 @@ export * from "./host-services.js";
 export * from "./mcp.js";
 export * from "./provider-adapter.js";
 export type * from "./environment-provider.js";
-export { AgentEnvironmentCapabilitiesSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, ObservationStateSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, assertObservationCredentialFree, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, AgentEnvironmentCreationSchema, createAgentEnvironmentWithIdempotency, replayedAgentEnvironmentView, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
+export { AgentEnvironmentCapabilitiesSchema, AgentNativeContextContinuationAdmissionSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationAdmissionMatchesRequest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, ObservationStateSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, assertObservationCredentialFree, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, AgentEnvironmentCreationSchema, createAgentEnvironmentWithIdempotency, replayedAgentEnvironmentView, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
 export * from "./plan.js";
 export * from "./runtime-control.js";
 export * from "./portable-context.js";
@@ -40,3 +40,4 @@ export * from "./harness-capabilities.js";
 export * from "./profile-schema.js";
 export * from "./profile-security.js";
 export * from "./sandbox-size.js";
+export { CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH, } from "./contract-limits.js";

package/dist/index.js

@@ -7,7 +7,7 @@ export * from "./provider-config.js";
 export * from "./host-services.js";
 export * from "./mcp.js";
 export * from "./provider-adapter.js";
-export { AgentEnvironmentCapabilitiesSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, ObservationStateSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, assertObservationCredentialFree, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, AgentEnvironmentCreationSchema, createAgentEnvironmentWithIdempotency, replayedAgentEnvironmentView, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
+export { AgentEnvironmentCapabilitiesSchema, AgentNativeContextContinuationAdmissionSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationAdmissionMatchesRequest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, ObservationStateSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, assertObservationCredentialFree, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, AgentEnvironmentCreationSchema, createAgentEnvironmentWithIdempotency, replayedAgentEnvironmentView, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
 export * from "./plan.js";
 export * from "./runtime-control.js";
 export * from "./portable-context.js";
@@ -38,3 +38,4 @@ export * from "./harness-capabilities.js";
 export * from "./profile-schema.js";
 export * from "./profile-security.js";
 export * from "./sandbox-size.js";
+export { CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH, } from "./contract-limits.js";

package/dist/workspace-confidentiality.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { boundedStringSchema } from "./contract-limits.js";
+import { boundedStringSchema, confidentialAttestationQuoteSchema, } from "./contract-limits.js";
 import { AgentExactRunControlRefSchema, } from "./runtime-control.js";
 import { idSchema, sha256DigestSchema, wireDigest } from "./workspace-branching-shared.js";
 /**
@@ -18,7 +18,7 @@ export const ConfidentialAttestationSchema = z
     requestDigest: sha256DigestSchema,
     profileDigest: sha256DigestSchema,
     policy: idSchema,
-    quote: boundedStringSchema.min(1),
+    quote: confidentialAttestationQuoteSchema.min(1),
     providerKeyId: idSchema,
     providerSignature: boundedStringSchema.min(1),
     verifiedAt: z.iso.datetime().max(64),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-interface",
-  "version": "1.7.0",
+  "version": "1.8.0",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",