@tangle-network/agent-interface 2.12.0 → 2.13.1

package/dist/agent-candidate-schema-common.d.ts

@@ -25,6 +25,12 @@ export declare function isSafeRelativePath(value: string, allowDot: boolean): bo
 export declare function isSafeExecutable(value: string): boolean;
 export declare function isObviouslyPrivateHostname(rawHostname: string): boolean;
 export declare function isCanonicalJsonValue(value: unknown, ancestors?: Set<object>): boolean;
+/**
+ * Whether a string holds an obvious credential: a provider key (`sk-`, `gh*_`,
+ * `github_pat_`, `AKIA`), a PEM private key, a bearer token, or a URL with
+ * userinfo or a credential-named query parameter. The agent-eval redaction
+ * core calls it, so candidate validation and trace redaction agree.
+ */
 export declare function looksLikeCredential(value: string): boolean;
 export declare const agentCandidateConfigValueSchema: z.ZodObject<{
     kind: z.ZodLiteral<"public">;

package/dist/agent-candidate-schema-common.js

@@ -225,6 +225,12 @@ function hasCredentialBearingUrl(value) {
         return false;
     }
 }
+/**
+ * Whether a string holds an obvious credential: a provider key (`sk-`, `gh*_`,
+ * `github_pat_`, `AKIA`), a PEM private key, a bearer token, or a URL with
+ * userinfo or a credential-named query parameter. The agent-eval redaction
+ * core calls it, so candidate validation and trace redaction agree.
+ */
 export function looksLikeCredential(value) {
     return obviousSecretValuePattern.test(value) || hasCredentialBearingUrl(value);
 }

package/dist/environment-requests.d.ts

@@ -1,5 +1,6 @@
 import { z } from "zod";
 import type { WorkspaceCwd } from "./workspace-cwd.js";
+import { type WorkspaceCheckpointRef } from "./workspace-checkpoint.js";
 import type { AgentProfile } from "./agent-profile.js";
 /** Portable profile reference: inline profile or provider catalog id. */
 export type AgentProfileRef = AgentProfile | string;
@@ -50,6 +51,18 @@ export interface WorkspaceRequest {
      * Repository paths use `base: "repository"`; host paths use `base: "host"`.
      */
     cwd?: WorkspaceCwd;
+    /**
+     * Start the workspace from this durable checkpoint.
+     *
+     * The provider restores the checkpoint's files into the new environment before create returns,
+     * or fails the create; it never returns an environment without them. The checkpoint's source
+     * environment need not exist any more, which is how a caller continues work whose environment
+     * was lost. Environment variables, secrets, egress and runtime attachments come from this create,
+     * never from the source. A provider honors this field only when
+     * {@link AgentEnvironmentCapabilities.create} states `workspaceCheckpoint: true`, and refuses a
+     * checkpoint another provider took.
+     */
+    checkpoint?: WorkspaceCheckpointRef;
     /** Opaque provider-native workspace fields. */
     providerOptions?: Record<string, unknown>;
 }
@@ -66,6 +79,22 @@ export declare const WorkspaceRequestSchema: z.ZodObject<{
         base: z.ZodLiteral<"host">;
         path: z.ZodString;
     }, z.core.$strict>], "base">>;
+    checkpoint: z.ZodOptional<z.ZodObject<{
+        checkpointId: z.ZodString;
+        provider: z.ZodString;
+        source: z.ZodObject<{
+            runId: z.ZodString;
+            provider: z.ZodString;
+            environmentId: z.ZodString;
+            sessionId: z.ZodString;
+            executionId: z.ZodString;
+            requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+        }, z.core.$strict>;
+        idempotencyKey: z.ZodString;
+        requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+        createdAt: z.ZodISODateTime;
+        metadata: z.ZodOptional<z.ZodCustom<Record<string, unknown>, Record<string, unknown>>>;
+    }, z.core.$strict>>;
     providerOptions: z.ZodOptional<z.ZodCustom<Record<string, unknown>, Record<string, unknown>>>;
 }, z.core.$strict>;
 export interface ResourceRequest {

package/dist/environment-requests.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { boundedIdentifierSchema, boundedJsonRecordSchema, boundedStringSchema, CONTRACT_MAX_ARRAY_LENGTH, } from "./contract-limits.js";
 import { workspaceCwdSchema } from "./workspace-cwd.js";
+import { WorkspaceCheckpointRefSchema } from "./workspace-checkpoint.js";
 /**
  * One allowed destination host.
  *
@@ -36,9 +37,17 @@ export const WorkspaceRequestSchema = z
     repoUrl: boundedStringSchema.min(1).optional(),
     gitRef: boundedIdentifierSchema.optional(),
     cwd: workspaceCwdSchema.optional(),
+    checkpoint: WorkspaceCheckpointRefSchema.optional(),
     providerOptions: boundedJsonRecordSchema.optional(),
 })
     .superRefine((workspace, refinement) => {
+    if (workspace.checkpoint !== undefined && workspace.repoUrl !== undefined) {
+        refinement.addIssue({
+            code: "custom",
+            path: ["checkpoint"],
+            message: "workspace cannot start from both a checkpoint and a repository",
+        });
+    }
     if (workspace.environment !== undefined && workspace.image !== undefined) {
         refinement.addIssue({
             code: "custom",

package/dist/environment-runtime.d.ts

@@ -883,6 +883,11 @@ export interface AgentEnvironmentCapabilities {
         runtimeAttachments?: {
             mcp: true;
         };
+        /**
+         * True when create restores {@link WorkspaceRequest.checkpoint} into the new environment,
+         * including a checkpoint whose source environment is gone. Absent means create refuses one.
+         */
+        workspaceCheckpoint?: boolean;
     };
     /** Per-surface flags for the normalized environment observation. */
     observation?: {
@@ -1029,6 +1034,7 @@ export declare const AgentEnvironmentCapabilitiesSchema: z.ZodObject<{
         runtimeAttachments: z.ZodOptional<z.ZodObject<{
             mcp: z.ZodLiteral<true>;
         }, z.core.$strict>>;
+        workspaceCheckpoint: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>>;
     observation: z.ZodOptional<z.ZodObject<{
         identity: z.ZodBoolean;

package/dist/environment-runtime.js

@@ -240,6 +240,7 @@ export const AgentEnvironmentCapabilitiesSchema = z
             .optional(),
         billingOwner: z.boolean().optional(),
         runtimeAttachments: z.strictObject({ mcp: z.literal(true) }).optional(),
+        workspaceCheckpoint: z.boolean().optional(),
     })
         .optional(),
     observation: z
@@ -346,7 +347,10 @@ export const AgentEnvironmentCapabilitiesSchema = z
     }
     const create = capabilities.create;
     if (create !== undefined) {
-        if (create.egress === undefined && create.billingOwner === undefined && create.runtimeAttachments === undefined) {
+        if (create.egress === undefined &&
+            create.billingOwner === undefined &&
+            create.runtimeAttachments === undefined &&
+            create.workspaceCheckpoint === undefined) {
             refinement.addIssue({
                 code: "custom",
                 path: ["create"],

package/dist/index.d.ts

@@ -18,7 +18,7 @@ export * from "./interaction.js";
 export * from "./agent-candidate.js";
 export * from "./agent-candidate-schema.js";
 export type { Sha256Digest } from "./agent-candidate.js";
-export { canonicalCandidateBytes, canonicalCandidateDigest, canonicalCandidateJson, sha256Bytes, sha256DigestSchema, sha256Utf8, } from "./agent-candidate-schema-common.js";
+export { canonicalCandidateBytes, canonicalCandidateDigest, canonicalCandidateJson, looksLikeCredential, sha256Bytes, sha256DigestSchema, sha256Utf8, } from "./agent-candidate-schema-common.js";
 export { numbersApproximatelyEqual } from "./number-validation.js";
 export * from "./agent-candidate-promotion-schema.js";
 export { agentCandidateEvaluationPolicySchema } from "./agent-improvement-measurement-schema.js";

package/dist/index.js

@@ -16,7 +16,7 @@ export * from "./workspace-branching.js";
 export * from "./interaction.js";
 export * from "./agent-candidate.js";
 export * from "./agent-candidate-schema.js";
-export { canonicalCandidateBytes, canonicalCandidateDigest, canonicalCandidateJson, sha256Bytes, sha256DigestSchema, sha256Utf8, } from "./agent-candidate-schema-common.js";
+export { canonicalCandidateBytes, canonicalCandidateDigest, canonicalCandidateJson, looksLikeCredential, sha256Bytes, sha256DigestSchema, sha256Utf8, } from "./agent-candidate-schema-common.js";
 export { numbersApproximatelyEqual } from "./number-validation.js";
 export * from "./agent-candidate-promotion-schema.js";
 export { agentCandidateEvaluationPolicySchema } from "./agent-improvement-measurement-schema.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-interface",
-  "version": "2.12.0",
+  "version": "2.13.1",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",
@@ -90,13 +90,13 @@
   "dependencies": {
     "@noble/hashes": "2.4.0",
     "spdx-expression-parse": "5.0.0",
-    "zod": "4.5.4"
+    "zod": "4.6.5"
   },
   "devDependencies": {
-    "@types/node": "26.4.1",
+    "@types/node": "26.6.3",
     "@types/spdx-expression-parse": "4.0.0",
     "typescript": "7.0.2",
-    "vitest": "4.1.11"
+    "vitest": "5.0.2"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",