@tangle-network/agent-interface 2.14.0 → 2.16.0

package/README.md

@@ -269,3 +269,11 @@ Repeated cumulative totals do not add spend.
 An absent mode means the aggregation semantics are unknown.
 Materialization receipts cover all three model token ceilings at their exact requested paths.
 A strict profile rejects unsupported ceilings instead of silently accepting them.
+
+
+### Native session observations
+
+Adapters emit `native.session.observed` with `provider` and `nativeSessionId` after observing the provider conversation identity.
+The execution owner binds the observation to its execution and keeps it private.
+Public `session.updated` events retain their resume-key semantics and do not establish native identity.
+Native identity does not establish artifact capture completeness.

package/dist/environment-interactive-start.d.ts

@@ -220,6 +220,7 @@ export declare const AgentInteractiveSessionStartSchema: z.ZodObject<{
         extensions: z.ZodOptional<z.ZodType<Record<string, Record<string, unknown> | undefined>, unknown, z.core.$ZodTypeInternals<Record<string, Record<string, unknown> | undefined>, unknown>>>;
     }, z.core.$strict>;
     requestedProfileDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+    authMode: z.ZodOptional<z.ZodLiteral<"oauth">>;
     initialPrompt: z.ZodOptional<z.ZodString>;
     cwd: z.ZodOptional<z.ZodString>;
     cols: z.ZodOptional<z.ZodNumber>;

package/dist/environment-interactive-start.js

@@ -23,6 +23,8 @@ export const AgentInteractiveSessionStartSchema = z.strictObject({
     run: AgentExactRunControlRefSchema,
     profile: agentProfileSchema,
     requestedProfileDigest: sha256DigestSchema,
+    // A provider-owned CLI login choice, never a credential or token.
+    authMode: z.literal("oauth").optional(),
     initialPrompt: boundedStringSchema.optional(),
     cwd: boundedStringSchema.min(1).optional(),
     cols: interactiveDimensionSchema.optional(),
@@ -36,6 +38,9 @@ export function agentInteractiveSessionRequestDigest(coordinates, input) {
         kind: "agent-interactive-session-start.v1",
         run: exactCoordinates,
         requestedProfileDigest: exactInput.requestedProfileDigest,
+        ...(exactInput.authMode === undefined
+            ? {}
+            : { authMode: exactInput.authMode }),
         ...(exactInput.initialPrompt === undefined
             ? {}
             : { initialPrompt: exactInput.initialPrompt }),
@@ -60,6 +65,10 @@ export function exactAgentInteractiveSessionStart(value) {
     if (parsed.profile.harness === undefined) {
         throw new Error("interactive agent sessions require AgentProfile.harness");
     }
+    if (parsed.authMode === "oauth" &&
+        parsed.profile.harness !== "claude-code") {
+        throw new Error("Claude Code OAuth mode requires the claude-code harness");
+    }
     const digest = canonicalAgentProfileDigest(parsed.profile);
     if (digest !== parsed.requestedProfileDigest) {
         throw new Error("interactive agent session requested profile digest does not match its profile");

package/dist/index.d.ts

@@ -43,3 +43,4 @@ export * from "./profile-security.js";
 export * from "./sandbox-size.js";
 export { CONTRACT_MAX_ARRAY_LENGTH, CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH, CONTRACT_MAX_IDENTIFIER_LENGTH, CONTRACT_MAX_JSON_BYTES, CONTRACT_MAX_JSON_DEPTH, CONTRACT_MAX_JSON_NODES, CONTRACT_MAX_MAP_ENTRIES, CONTRACT_MAX_STRING_LENGTH, boundedEventContentJsonSchema, boundedEventContentRecordSchema, boundedEventContentStringSchema, isBoundedEventContentJson, } from "./contract-limits.js";
 export { AgentEnvironmentEgressPolicySchema } from "./environment-requests.js";
+export * from "./native-session-event.js";

package/dist/index.js

@@ -45,3 +45,4 @@ export {
 // does exactly that, after three bound mismatches shipped through it (agent-sdk#311, #312, #314).
 CONTRACT_MAX_ARRAY_LENGTH, CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH, CONTRACT_MAX_IDENTIFIER_LENGTH, CONTRACT_MAX_JSON_BYTES, CONTRACT_MAX_JSON_DEPTH, CONTRACT_MAX_JSON_NODES, CONTRACT_MAX_MAP_ENTRIES, CONTRACT_MAX_STRING_LENGTH, boundedEventContentJsonSchema, boundedEventContentRecordSchema, boundedEventContentStringSchema, isBoundedEventContentJson, } from "./contract-limits.js";
 export { AgentEnvironmentEgressPolicySchema } from "./environment-requests.js";
+export * from "./native-session-event.js";

package/dist/native-session-event.d.ts

@@ -0,0 +1,15 @@
+import { z } from "zod";
+/**
+ * Private adapter observation of a provider conversation or resume identity.
+ * The adapter must obtain this ID from its bound provider process or API.
+ * Caller keys, execution IDs, storage paths, and public session updates are not evidence.
+ * The execution owner binds this observation to its own execution and session.
+ * Public SSE and user-visible event streams must exclude this control event.
+ * An observation establishes identity only, not native artifact completeness.
+ */
+export declare const NativeSessionObservedEventSchema: z.ZodObject<{
+    type: z.ZodLiteral<"native.session.observed">;
+    provider: z.ZodString;
+    nativeSessionId: z.ZodString;
+}, z.core.$strict>;
+export type NativeSessionObservedEvent = z.infer<typeof NativeSessionObservedEventSchema>;

package/dist/native-session-event.js

@@ -0,0 +1,14 @@
+import { z } from "zod";
+/**
+ * Private adapter observation of a provider conversation or resume identity.
+ * The adapter must obtain this ID from its bound provider process or API.
+ * Caller keys, execution IDs, storage paths, and public session updates are not evidence.
+ * The execution owner binds this observation to its own execution and session.
+ * Public SSE and user-visible event streams must exclude this control event.
+ * An observation establishes identity only, not native artifact completeness.
+ */
+export const NativeSessionObservedEventSchema = z.object({
+    type: z.literal("native.session.observed"),
+    provider: z.string().regex(/^[a-z][a-z0-9-]{0,127}$/),
+    nativeSessionId: z.string().min(1).max(512).regex(/^\S+$/u),
+}).strict();

package/dist/runtime-control.js

@@ -1,3 +1,4 @@
+import { NativeSessionObservedEventSchema } from "./native-session-event.js";
 import { z } from "zod";
 import { canonicalCandidateDigest, sha256DigestSchema, } from "./agent-candidate-schema-common.js";
 import { boundedEventContentJsonSchema, boundedEventContentRecordSchema, boundedEventContentStringSchema, boundedIdentifierSchema, boundedJsonRecordSchema, boundedStringSchema, isBoundedEventContentJson, } from "./contract-limits.js";
@@ -385,6 +386,7 @@ const CanonicalStreamEventUnionSchema = z.discriminatedUnion("type", [
         backend: stableIdSchema,
         event: boundedEventContentJsonSchema,
     }),
+    NativeSessionObservedEventSchema,
     z.strictObject({
         type: z.literal("session.updated"),
         sessionId: stableIdSchema,

package/dist/stream-events.d.ts

@@ -1,3 +1,4 @@
+import type { NativeSessionObservedEvent } from "./native-session-event.js";
 import type { TokenUsage } from "./execution-types.js";
 import type { InteractionRequest } from "./interaction.js";
 import type { DurablePlan } from "./plan.js";
@@ -65,7 +66,7 @@ export type ChildTaskEvent = {
     sourceEventId: string;
     raw?: Record<string, unknown>;
 };
-export type StreamEvent = MessagePartUpdatedEvent | {
+export type StreamEvent = NativeSessionObservedEvent | MessagePartUpdatedEvent | {
     type: "tool-heartbeat";
     toolName: string;
     partId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-interface",
-  "version": "2.14.0",
+  "version": "2.16.0",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",