@tangle-network/agent-interface 2.20.1 → 3.0.0

package/README.md

@@ -19,27 +19,7 @@ materialization receipts. The function does not load resources or estimate token
 Its coverage explicitly leaves tokenization, materialization, and observed use unassessed.
 A capability declaration is not evidence that it was delivered, opened, or applied.
 
-## Agent instances
-
-`AgentProfile` describes behavior. `AgentInstanceSpec` describes one optional managed Agent inside an existing execution environment. The environment remains the computer and security boundary, so it may host zero, one, or many Agent instances.
-
-```ts
-import type { AgentInstanceSpec } from "@tangle-network/agent-interface/agent-instance";
-
-const planner = {
-  id: "planner",
-  profile: {
-    name: "planner",
-    harness: "opencode",
-    prompt: { systemPrompt: "Plan before editing." },
-  },
-  workspace: { mode: "shared" },
-} satisfies AgentInstanceSpec;
-```
-
-The portable contract owns only inline profile and harness selection, shared or isolated workspace intent, public lifecycle state, a provider-sanitized failure summary, and idempotent stop shapes. Credentials, HTTP routes, process identifiers, placement, billing, snapshots, local resource controls, grants, and fencing remain provider-private.
-
-`shared` means ordinary same-computer file visibility. It is not automatic merge behavior or tenant isolation. `isolated` asks the provider for a private writable view and explicit inspect or commit behavior. Providers must reject unsatisfied machine requirements rather than silently replacing or migrating a live environment.
+## Workspace paths
 
 `WorkspaceRequest.cwd` is an explicitly based path reference.
 Use `base: "repository"` for a portable repository-relative POSIX path.
@@ -52,8 +32,6 @@ To migrate a string cwd, wrap it in the base that owns its path.
 Use the repository base for Tangle and other portable workspace providers.
 Use the host base for CLI Bridge native process paths.
 
-The public `AgentInstanceRecord` contains a credential-free profile identity, not the full profile or provider request. Existing session APIs can implement this contract without a new service: one instance maps to one managed session, compatible sessions may reuse a backend process, and stop maps to idempotent session deletion or process release.
-
 ## Durable runs, interactions, and context
 
 `AgentTurnInput.profile` carries the exact `AgentProfile` for a turn through its canonical schema.

package/dist/agent-candidate-artifact-schema.d.ts

@@ -144,10 +144,6 @@ export declare const agentCandidateWorkspaceSnapshotEvidenceSchema: z.ZodObject<
         byteLength: z.ZodNumber;
     }, z.core.$strict>]>;
 }, z.core.$strict>;
-export declare function validateEmbeddedArtifact(artifact: {
-    content: string;
-    byteLength: number;
-}, ctx: z.RefinementCtx): void;
 export declare const agentCandidateInlineResourceSchema: z.ZodObject<{
     kind: z.ZodLiteral<"inline">;
     name: z.ZodString;

package/dist/agent-candidate-artifact-schema.js

@@ -158,7 +158,7 @@ export const agentCandidateWorkspaceSnapshotEvidenceSchema = z
         });
     }
 });
-export function validateEmbeddedArtifact(artifact, ctx) {
+function validateEmbeddedArtifact(artifact, ctx) {
     if (!hasCanonicalBase64Padding(artifact.content)) {
         ctx.addIssue({
             code: "custom",

package/dist/agent-candidate-schema-common.d.ts

@@ -40,11 +40,6 @@ export declare const environmentConfigSchema: z.ZodRecord<z.ZodString, z.ZodObje
     kind: z.ZodLiteral<"public">;
     value: z.ZodString;
 }, z.core.$strict>>;
-export declare const headerConfigSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
-    kind: z.ZodLiteral<"public">;
-    value: z.ZodString;
-}, z.core.$strict>>;
-export declare const candidateMetadataSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 export declare const agentCandidateGitHubRepositorySchema: z.ZodObject<{
     kind: z.ZodLiteral<"github">;
     owner: z.ZodString;

package/dist/agent-candidate-schema-common.js

@@ -263,33 +263,6 @@ function configRecordSchema(keySchema) {
     });
 }
 export const environmentConfigSchema = configRecordSchema(environmentNameSchema);
-export const headerConfigSchema = configRecordSchema(headerNameSchema);
-export const candidateMetadataSchema = z
-    .record(z.string(), z.unknown())
-    .superRefine((metadata, ctx) => {
-    if (hasSensitiveMetadataKey(metadata)) {
-        ctx.addIssue({
-            code: "custom",
-            message: "metadata must not contain credential-bearing keys",
-        });
-    }
-});
-function hasSensitiveMetadataKey(value, ancestors = new Set()) {
-    if (value === null || typeof value !== "object" || ancestors.has(value)) {
-        return false;
-    }
-    const nextAncestors = new Set(ancestors).add(value);
-    if (Array.isArray(value)) {
-        return value.some((entry) => hasSensitiveMetadataKey(entry, nextAncestors));
-    }
-    for (const [key, entry] of Object.entries(value)) {
-        if (secretNamePattern.test(key))
-            return true;
-        if (hasSensitiveMetadataKey(entry, nextAncestors))
-            return true;
-    }
-    return false;
-}
 export const agentCandidateGitHubRepositorySchema = z
     .object({
     kind: z.literal("github"),

package/dist/agent-execution-limits.d.ts

@@ -6,27 +6,9 @@ export interface AgentExecutionLimitObservation {
     steps: number;
     usage: AgentCandidateFixedSpend;
 }
-export declare const agentExecutionLimitObservationSchema: z.ZodObject<{
-    durationMs: z.ZodNumber;
-    steps: z.ZodNumber;
-    usage: z.ZodObject<{
-        inputTokens: z.ZodNumber;
-        outputTokens: z.ZodNumber;
-        cachedInputTokens: z.ZodNumber;
-        reasoningTokens: z.ZodNumber;
-        modelCalls: z.ZodNumber;
-        costUsdNanos: z.ZodNumber;
-        costProvenance: z.ZodEnum<{
-            estimated: "estimated";
-            observed: "observed";
-        }>;
-    }, z.core.$strict>;
-}, z.core.$strict>;
 export interface RefineAgentExecutionWithinLimitsOptions {
     pathPrefix?: (string | number)[];
     usagePath?: (string | number)[];
 }
-/** Reject an execution record that cannot satisfy every limit it claims to use. */
-export declare function assertAgentExecutionWithinLimits(limits: AgentCandidateExecutionLimits, observation: AgentExecutionLimitObservation): void;
 /** Add schema issues instead of throwing when a receipt is parsed by Zod. */
 export declare function refineAgentExecutionWithinLimits(limits: AgentCandidateExecutionLimits, observation: AgentExecutionLimitObservation, ctx: z.RefinementCtx, options?: RefineAgentExecutionWithinLimitsOptions): void;

package/dist/agent-execution-limits.js

@@ -1,24 +1,3 @@
-import { z } from "zod";
-import { agentCandidateExecutionLimitsSchema } from "./agent-candidate-execution-plan-schema.js";
-import { agentCandidateFixedSpendSchema } from "./agent-candidate-outcome-schema.js";
-export const agentExecutionLimitObservationSchema = z
-    .object({
-    durationMs: z.number().finite().nonnegative(),
-    steps: z.number().int().nonnegative().safe(),
-    usage: agentCandidateFixedSpendSchema,
-})
-    .strict();
-/** Reject an execution record that cannot satisfy every limit it claims to use. */
-export function assertAgentExecutionWithinLimits(limits, observation) {
-    const parsedLimits = agentCandidateExecutionLimitsSchema.parse(limits);
-    const parsedObservation = agentExecutionLimitObservationSchema.parse(observation);
-    const violations = executionLimitViolations(parsedLimits, parsedObservation);
-    if (violations.length === 0)
-        return;
-    throw new Error(violations
-        .map((violation) => `execution ${violation.label} ${violation.actual} exceeds frozen limit ${violation.maximum}`)
-        .join("; "));
-}
 /** Add schema issues instead of throwing when a receipt is parsed by Zod. */
 export function refineAgentExecutionWithinLimits(limits, observation, ctx, options = {}) {
     const pathPrefix = options.pathPrefix ?? [];

package/dist/agent-execution-preparation.d.ts

@@ -4,7 +4,7 @@ import type { AgentProfileActivationEvidence } from "./agent-profile-activation.
 import { type AgentProfileMaterializationAxis } from "./agent-profile-materialization.js";
 import { type AgentExecutionPreparationAxisResult, type AgentExecutionPreparationMaterializer, type AgentExecutionPreparationReceipt, type AgentExecutionPreparationResolvedModel } from "./agent-execution-preparation-receipt.js";
 import type { HarnessType } from "./harness.js";
-import { type AgentWorkspaceExecutionBoundLeaseRecord, type AgentWorkspaceSealedLeaseRecord } from "./agent-workspace-lease.js";
+import { type AgentWorkspaceSealedLeaseRecord } from "./agent-workspace-lease.js";
 export { agentExecutionPreparationAxisResultSchema, agentExecutionPreparationReasoningEffortSchema, agentExecutionPreparationReceiptSchema, type AgentExecutionPreparationAxisResult, type AgentExecutionPreparationDisposition, type AgentExecutionPreparationMaterializer, type AgentExecutionPreparationOwner, type AgentExecutionPreparationReasoningEffort, type AgentExecutionPreparationReceipt, type AgentExecutionPreparationResolvedModel, type AgentExecutionPreparationWorkspace, } from "./agent-execution-preparation-receipt.js";
 export interface BuildAgentExecutionPreparationReceiptInput {
     preparationId: string;
@@ -26,23 +26,7 @@ export interface BuildAgentExecutionPreparationReceiptInput {
     /** Clock used only to refuse already-expired preparations. */
     nowMs?: number;
 }
-export interface ValidateAgentExecutionPreparationReceiptOptions {
-    receipt: unknown;
-    requestDigest: Sha256Digest;
-    authoredProfile: AgentProfile;
-    effectiveProfile: AgentProfile;
-    /** Expected public-plan identity; callers must not derive it from secret values. */
-    executionPlanDigest: Sha256Digest;
-    profileActivation: Pick<AgentProfileActivationEvidence, "digest">;
-    /** Bound lease closes the receipt→workspace link before compute begins. */
-    workspaceLease: AgentWorkspaceExecutionBoundLeaseRecord;
-    nowMs?: number;
-    preparationId?: string;
-    backend?: string;
-    harness?: HarnessType;
-    harnessVersion?: string;
-}
-export type AgentExecutionPreparationValidationIssueCode = "invalid-receipt" | "invalid-profile" | "invalid-workspace-lease" | "workspace-not-execution-bound" | "execution-binding-mismatch" | "digest-mismatch" | "expectation-mismatch" | "expired" | "missing-coverage" | "ambiguous-coverage" | "duplicate-coverage" | "conflicting-coverage" | "unrequested-coverage" | "invalid-disposition" | "strict-unsupported" | "model-fidelity";
+export type AgentExecutionPreparationValidationIssueCode = "invalid-receipt" | "invalid-profile" | "invalid-workspace-lease" | "workspace-not-execution-bound" | "digest-mismatch" | "expectation-mismatch" | "expired" | "missing-coverage" | "ambiguous-coverage" | "duplicate-coverage" | "conflicting-coverage" | "unrequested-coverage" | "invalid-disposition" | "strict-unsupported" | "model-fidelity";
 export interface AgentExecutionPreparationValidationIssue {
     code: AgentExecutionPreparationValidationIssueCode;
     message: string;
@@ -68,10 +52,6 @@ export type AgentExecutionPreparationValidationResult = {
 export declare function canonicalAgentProfileDigest(profile: AgentProfile): Sha256Digest;
 /** Build, self-hash, and cross-check one pre-compute executor acknowledgement. */
 export declare function buildAgentExecutionPreparationReceipt(input: BuildAgentExecutionPreparationReceiptInput): AgentExecutionPreparationReceipt;
-/** Validate structure, bindings, expiry, model fidelity, and exact path coverage. */
-export declare function validateAgentExecutionPreparationReceipt(options: ValidateAgentExecutionPreparationReceiptOptions): AgentExecutionPreparationValidationResult;
-/** Throw one structured error when a preparation acknowledgement is invalid. */
-export declare function assertAgentExecutionPreparationReceipt(options: ValidateAgentExecutionPreparationReceiptOptions): AgentExecutionPreparationReceipt;
 export declare class AgentExecutionPreparationValidationError extends Error {
     readonly issues: readonly AgentExecutionPreparationValidationIssue[];
     constructor(issues: readonly AgentExecutionPreparationValidationIssue[]);

package/dist/agent-execution-preparation.js

@@ -74,19 +74,11 @@ export function buildAgentExecutionPreparationReceipt(input) {
         harness: input.harness,
         harnessVersion: input.harnessVersion,
         workspaceLease,
-        requireExecutionBinding: false,
     });
     if (validation.ok)
         return validation.receipt;
     throw new AgentExecutionPreparationValidationError(validation.issues);
 }
-/** Validate structure, bindings, expiry, model fidelity, and exact path coverage. */
-export function validateAgentExecutionPreparationReceipt(options) {
-    return validateAgentExecutionPreparationReceiptInternal({
-        ...options,
-        requireExecutionBinding: true,
-    });
-}
 function validateAgentExecutionPreparationReceiptInternal(options) {
     const parsedReceipt = agentExecutionPreparationReceiptSchema.safeParse(options.receipt);
     if (!parsedReceipt.success) {
@@ -111,9 +103,7 @@ function validateAgentExecutionPreparationReceiptInternal(options) {
         };
     }
     const workspaceLease = workspaceLeaseResult.data;
-    const expectedPhase = options.requireExecutionBinding
-        ? "execution-bound"
-        : "workspace-sealed";
+    const expectedPhase = "workspace-sealed";
     if (workspaceLease.phase !== expectedPhase) {
         return {
             ok: false,
@@ -166,13 +156,6 @@ function validateAgentExecutionPreparationReceiptInternal(options) {
     compareDigest(issues, "execution plan", receipt.executionPlanDigest, options.executionPlanDigest);
     compareDigest(issues, "profile activation", receipt.workspace.profileActivationDigest, options.profileActivation.digest);
     compareDigest(issues, "workspace profile activation", receipt.workspace.profileActivationDigest, workspaceLease.profileActivationDigest);
-    if (workspaceLease.phase === "execution-bound" &&
-        workspaceLease.executionPreparationDigest !== receipt.digest) {
-        issues.push({
-            code: "execution-binding-mismatch",
-            message: "workspace execution binding does not name this preparation receipt",
-        });
-    }
     compareExpectation(issues, "preparation id", receipt.preparationId, options.preparationId);
     compareExpectation(issues, "backend", receipt.backend, options.backend);
     compareExpectation(issues, "harness", receipt.harness, options.harness);
@@ -218,13 +201,6 @@ function validateAgentExecutionPreparationReceiptInternal(options) {
         ? { ok: true, receipt, issues: [] }
         : { ok: false, issues };
 }
-/** Throw one structured error when a preparation acknowledgement is invalid. */
-export function assertAgentExecutionPreparationReceipt(options) {
-    const validation = validateAgentExecutionPreparationReceipt(options);
-    if (validation.ok)
-        return validation.receipt;
-    throw new AgentExecutionPreparationValidationError(validation.issues);
-}
 export class AgentExecutionPreparationValidationError extends Error {
     issues;
     constructor(issues) {

package/dist/agent-improvement-measurement-schema.d.ts

@@ -1,6 +1,5 @@
 import { z } from "zod";
 import type { AgentCandidateCostProvenance, AgentCandidateEvaluationPolicy, AgentCandidateJsonValue, AgentImprovementMeasuredComparisonBase } from "./agent-candidate.js";
-export declare const canonicalJsonSchema: z.ZodCustom<AgentCandidateJsonValue, AgentCandidateJsonValue>;
 export declare const canonicalJsonObjectSchema: z.ZodRecord<z.ZodString, z.ZodCustom<AgentCandidateJsonValue, AgentCandidateJsonValue>>;
 export declare const agentCandidateEvaluationPolicySchema: z.ZodObject<{
     confidenceLevel: z.ZodNumber;
@@ -12,13 +11,6 @@ export declare const agentCandidateEvaluationPolicySchema: z.ZodObject<{
     criticalDimensions: z.ZodArray<z.ZodString>;
     regressionTolerance: z.ZodNumber;
 }, z.core.$strict>;
-export declare const agentImprovementCostSchema: z.ZodObject<{
-    usd: z.ZodNumber;
-    provenance: z.ZodEnum<{
-        estimated: "estimated";
-        observed: "observed";
-    }>;
-}, z.core.$strict>;
 export declare const measuredComparisonCommonShape: {
     overall: z.ZodObject<{
         baseline: z.ZodNumber;
@@ -219,13 +211,4 @@ export declare function refineMeasuredComparisonSummary<TReceipt>(comparison: Me
     costProvenance(receipt: TReceipt): AgentCandidateCostProvenance;
     latency(receipt: TReceipt): number;
 }, ctx: z.RefinementCtx): void;
-export declare function refineEstimate(estimate: {
-    baseline: number;
-    candidate: number;
-    delta: number;
-    confidenceInterval: {
-        lower: number;
-        upper: number;
-    };
-}, path: (string | number)[], ctx: z.RefinementCtx): void;
 export {};

package/dist/agent-improvement-measurement-schema.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { isCanonicalJsonValue, sha256DigestSchema } from "./agent-candidate-schema-common.js";
 import { numbersApproximatelyEqual } from "./number-validation.js";
-export const canonicalJsonSchema = z.custom(isCanonicalJsonValue, "value must be finite, acyclic RFC 8785 JSON");
+const canonicalJsonSchema = z.custom(isCanonicalJsonValue, "value must be finite, acyclic RFC 8785 JSON");
 export const canonicalJsonObjectSchema = z
     .record(z.string(), canonicalJsonSchema)
     .refine(isCanonicalJsonValue, "value must be finite, acyclic RFC 8785 JSON");
@@ -95,7 +95,7 @@ export const agentCandidateEvaluationPolicySchema = z
         });
     }
 });
-export const agentImprovementCostSchema = z
+const agentImprovementCostSchema = z
     .object({
     usd: z.number().finite().nonnegative(),
     provenance: z.enum(["observed", "estimated"]),
@@ -357,7 +357,7 @@ export function refineMeasuredComparisonSummary(comparison, policy, expectedN, m
         }
     }
 }
-export function refineEstimate(estimate, path, ctx) {
+function refineEstimate(estimate, path, ctx) {
     const expectedDelta = estimate.candidate - estimate.baseline;
     const tolerance = Number.EPSILON * Math.max(1, Math.abs(expectedDelta)) * 8;
     if (Math.abs(estimate.delta - expectedDelta) > tolerance) {

package/dist/agent-improvement-source.d.ts

@@ -12,7 +12,6 @@ export declare const agentSourceLicenseSchema: z.ZodDiscriminatedUnion<[z.ZodObj
     reference: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
     termsDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
 }, z.core.$strict>], "kind">;
-export type AgentSourceLicense = z.infer<typeof agentSourceLicenseSchema>;
 /**
  * One content transition applied while importing a source.
  *
@@ -32,7 +31,6 @@ export declare const agentSourceTransformationSchema: z.ZodObject<{
     inputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
     outputDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
 }, z.core.$strict>;
-export type AgentSourceTransformation = z.infer<typeof agentSourceTransformationSchema>;
 /**
  * Stable reference for the state from which an improvement candidate was made.
  * `sourceIdentity` identifies the provider object; `sourceDigest` is the exact

package/dist/agent-workspace-lease.d.ts

@@ -78,29 +78,8 @@ type WithDigest<Material> = Material extends unknown ? Material & {
 } : never;
 /** Self-hashed public projection. Private authorization and durable state stay out. */
 export type AgentWorkspaceLeaseRecord = WithDigest<AgentWorkspaceLeaseRecordMaterial>;
-export type AgentWorkspaceCopyReadyLeaseRecord = WithDigest<AgentWorkspaceCopyReadyLeaseRecordMaterial>;
 export type AgentWorkspaceSealedLeaseRecord = WithDigest<AgentWorkspaceSealedLeaseRecordMaterial>;
 export type AgentWorkspaceExecutionBoundLeaseRecord = WithDigest<AgentWorkspaceExecutionBoundLeaseRecordMaterial>;
-export type AgentWorkspaceDestroyingLeaseRecord = WithDigest<AgentWorkspaceDestroyingLeaseRecordMaterial>;
-export type AgentWorkspaceCleanupFailedLeaseRecord = WithDigest<AgentWorkspaceCleanupFailedLeaseRecordMaterial>;
-export type AgentWorkspaceDestroyedLeaseRecord = WithDigest<AgentWorkspaceDestroyedLeaseRecordMaterial>;
-/**
- * Request-only owner capability. Providers persist at most a one-way digest;
- * this value never belongs in a public lease or execution receipt.
- */
-export interface AgentWorkspaceLeaseAuthorization {
-    leaseId: string;
-    ownerToken: string;
-}
-export interface AgentWorkspaceSealRequest extends AgentWorkspaceLeaseAuthorization {
-    profileActivationDigest: Sha256Digest;
-}
-export interface AgentWorkspaceExecutionBindingRequest extends AgentWorkspaceLeaseAuthorization {
-    executionPreparationDigest: Sha256Digest;
-}
-export interface AgentWorkspaceLeaseRenewalRequest extends AgentWorkspaceLeaseAuthorization {
-    expiresAtMs: number;
-}
 export declare const agentWorkspaceLeasePhaseSchema: z.ZodEnum<{
     "cleanup-failed": "cleanup-failed";
     "copy-ready": "copy-ready";
@@ -116,7 +95,5 @@ export declare const agentWorkspaceAllocationIdentitySchema: z.ZodObject<{
 }, z.core.$strict>;
 export declare const agentWorkspaceLeaseRecordMaterialSchema: z.ZodType<AgentWorkspaceLeaseRecordMaterial>;
 export declare const agentWorkspaceLeaseRecordSchema: z.ZodType<AgentWorkspaceLeaseRecord>;
-/** Canonical public identity; private token/state fields cannot enter its schema. */
-export declare function canonicalAgentWorkspaceLeaseRecordDigest(material: AgentWorkspaceLeaseRecordMaterial): Sha256Digest;
 /** Build and self-hash one phase-valid public workspace lease record. */
 export declare function buildAgentWorkspaceLeaseRecord<Material extends AgentWorkspaceLeaseRecordMaterial>(material: Material): WithDigest<Material>;

package/dist/agent-workspace-lease.js

@@ -92,10 +92,6 @@ export const agentWorkspaceLeaseRecordSchema = z
     }
 })
     .transform((record) => record);
-/** Canonical public identity; private token/state fields cannot enter its schema. */
-export function canonicalAgentWorkspaceLeaseRecordDigest(material) {
-    return canonicalCandidateDigest(agentWorkspaceLeaseRecordMaterialSchema.parse(material));
-}
 /** Build and self-hash one phase-valid public workspace lease record. */
 export function buildAgentWorkspaceLeaseRecord(material) {
     const parsed = agentWorkspaceLeaseRecordMaterialSchema.parse(material);

package/dist/contract-limits.d.ts

@@ -37,6 +37,3 @@ export declare const boundedEventContentRecordSchema: z.ZodCustom<Record<string,
 export declare const boundedEventContentStringSchema: z.ZodCustom<string, string>;
 export declare function assertBoundedJson(value: unknown): void;
 export declare function assertBoundedSerializedJson(value: string): void;
-/** Copy arbitrary metadata into a map that cannot inherit prototype keys. */
-export declare function nullPrototypeRecord<T>(value: Record<string, T>): Record<string, T>;
-export declare function hasOwn(value: object, key: PropertyKey): boolean;

package/dist/contract-limits.js

@@ -331,13 +331,3 @@ export function assertBoundedSerializedJson(value) {
         throw new Error("serialized contract material exceeds its byte bound");
     }
 }
-/** Copy arbitrary metadata into a map that cannot inherit prototype keys. */
-export function nullPrototypeRecord(value) {
-    const result = Object.create(null);
-    for (const key of Object.keys(value))
-        result[key] = value[key];
-    return result;
-}
-export function hasOwn(value, key) {
-    return Object.prototype.hasOwnProperty.call(value, key);
-}

package/dist/environment-interactive-start.d.ts

@@ -228,8 +228,6 @@ export declare const AgentInteractiveSessionStartSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type AgentInteractiveSessionStart = z.infer<typeof AgentInteractiveSessionStartSchema>;
 export type AgentInteractiveSessionStartInput = Omit<AgentInteractiveSessionStart, "run">;
-/** Digest the exact process-start request independently of its derived run id. */
-export declare function agentInteractiveSessionRequestDigest(coordinates: AgentInteractiveSessionRunCoordinates, input: AgentInteractiveSessionStartInput): `sha256:${string}`;
 /** Mint the one exact run reference a provider must acknowledge for this start. */
 export declare function agentInteractiveSessionRunRef(coordinates: AgentInteractiveSessionRunCoordinates, input: AgentInteractiveSessionStartInput): AgentExactRunControlRef;
 /** Parse a start request and prove its profile identity before provider work. */

package/dist/environment-interactive-start.js

@@ -31,7 +31,7 @@ export const AgentInteractiveSessionStartSchema = z.strictObject({
     rows: interactiveDimensionSchema.optional(),
 });
 /** Digest the exact process-start request independently of its derived run id. */
-export function agentInteractiveSessionRequestDigest(coordinates, input) {
+function agentInteractiveSessionRequestDigest(coordinates, input) {
     const exactCoordinates = AgentInteractiveSessionRunCoordinatesSchema.parse(coordinates);
     const exactInput = AgentInteractiveSessionStartSchema.omit({ run: true }).parse(input);
     return canonicalCandidateDigest({

package/dist/environment-observation.d.ts

@@ -1,18 +1,4 @@
 import { z } from "zod";
-/**
- * Freshness discriminator for one observed value. A missing value never reads
- * as a measured zero: a value exists only on `known` and `stale`, so the
- * absence of a number is always visible as `unavailable`, `redacted`, or
- * `unknown`.
- */
-export type ObservationState = "known" | "stale" | "unavailable" | "redacted" | "unknown";
-export declare const ObservationStateSchema: z.ZodEnum<{
-    known: "known";
-    redacted: "redacted";
-    stale: "stale";
-    unavailable: "unavailable";
-    unknown: "unknown";
-}>;
 /** How a known or stale value was obtained, and when. */
 export interface ObservationProvenance {
     origin: "measured" | "reported" | "estimated";
@@ -374,7 +360,6 @@ export declare const AccountUsageSchema: z.ZodObject<{
         state: z.ZodLiteral<"unknown">;
     }, z.core.$strict>], "state">>;
 }, z.core.$strict>;
-export type AccountUsage = z.infer<typeof AccountUsageSchema>;
 /**
  * Optional normalized observation of one execution environment.
  *
@@ -1072,5 +1057,3 @@ export declare function agentEnvironmentObservationIdentityMatches(live: AgentEn
  * tests use this to prove the observation surface never transports a secret.
  */
 export declare function observationContainsCredential(value: unknown): boolean;
-/** Throw when an observation payload carries a credential. */
-export declare function assertObservationCredentialFree(value: unknown): void;

package/dist/environment-observation.js

@@ -1,12 +1,5 @@
 import { z } from "zod";
 import { boundedIdentifierSchema, boundedStringSchema, } from "./contract-limits.js";
-export const ObservationStateSchema = z.enum([
-    "known",
-    "stale",
-    "unavailable",
-    "redacted",
-    "unknown",
-]);
 export const ObservationProvenanceSchema = z.strictObject({
     origin: z.enum(["measured", "reported", "estimated"]),
     observedAt: z.iso.datetime().max(64),
@@ -298,9 +291,3 @@ export function observationContainsCredential(value) {
     }
     return false;
 }
-/** Throw when an observation payload carries a credential. */
-export function assertObservationCredentialFree(value) {
-    if (observationContainsCredential(value)) {
-        throw new Error("observation payload must not carry a credential");
-    }
-}

package/dist/environment-provider.d.ts

@@ -1,7 +1,8 @@
 export { AgentEnvironmentEgressPolicySchema } from "./environment-requests.js";
 export * from "./environment-requests.js";
 export * from "./environment-exact-process.js";
-export * from "./environment-interactive.js";
+export * from "./environment-interactive-control.js";
+export * from "./environment-interactive-start.js";
 export * from "./environment-observation.js";
 export * from "./environment-terminal.js";
 export * from "./environment-runtime.js";

package/dist/environment-provider.js

@@ -1,7 +1,8 @@
 export { AgentEnvironmentEgressPolicySchema } from "./environment-requests.js";
 export * from "./environment-requests.js";
 export * from "./environment-exact-process.js";
-export * from "./environment-interactive.js";
+export * from "./environment-interactive-control.js";
+export * from "./environment-interactive-start.js";
 export * from "./environment-observation.js";
 export * from "./environment-terminal.js";
 export * from "./environment-runtime.js";

package/dist/environment-runtime.d.ts

@@ -13,7 +13,8 @@ import type { AgentWorkspaceBranching, AgentWorkspaceBranchingProvider } from ".
 import type { AgentEnvironmentEgressMode, AgentEnvironmentEgressPolicy, AgentEnvironmentQuery, AgentEnvironmentStatus, AgentEnvironmentSummary, AgentProfileRef, AgentSessionStatus, CheckpointRef, CheckpointRequest, ExecRequest, ExecResult, ForkRequest, PlacementInfo, ResourceRequest, WorkspaceRequest } from "./environment-requests.js";
 import type { AgentExactProcessEgressMode, AgentExactProcessProvider } from "./environment-exact-process.js";
 import type { AgentEnvironmentObservation } from "./environment-observation.js";
-import type { AgentInteractiveSession, AgentInteractiveSessionRef, AgentInteractiveSessionStart } from "./environment-interactive.js";
+import type { AgentInteractiveSession, AgentInteractiveSessionRef } from "./environment-interactive-control.js";
+import type { AgentInteractiveSessionStart } from "./environment-interactive-start.js";
 import type { AgentTerminalSession, TerminalAttachRequest, TerminalAttachResult } from "./environment-terminal.js";
 export interface AgentTurnInput {
     /** Exact behavior for this turn, separate from bounded provider metadata. */
@@ -899,10 +900,6 @@ export interface AgentSession {
  * whose creation it cannot prove, because another caller can hold it.
  */
 export type AgentEnvironmentCreation = "created" | "replayed";
-export declare const AgentEnvironmentCreationSchema: z.ZodEnum<{
-    created: "created";
-    replayed: "replayed";
-}>;
 export interface AgentEnvironment {
     readonly id: string;
     readonly provider: string;
@@ -1330,17 +1327,6 @@ export interface AgentEnvironmentCreateIdempotencyRecord<T> {
     readonly pending: Promise<T>;
     environment?: T;
 }
-/**
- * Return the per-call view of an environment that a same-key create replayed.
- *
- * The view shares every member of the environment, so operations act on the
- * one environment, and it states `creation: "replayed"` because this call
- * provisioned nothing. The copy is shallow, so the environment must be a plain
- * object whose members do not read `this`; a class instance loses its
- * prototype members in a copy and is rejected.
- * @internal
- */
-export declare function replayedAgentEnvironmentView<T extends object>(environment: T): T;
 /**
  * Apply the generic create contract to one provider adapter's keyed requests.
  *

package/dist/environment-runtime.js

@@ -158,10 +158,6 @@ export function agentNativeContextContinuationResultMatchesRequest(request, outc
         (exactOutcome.result.sessionId === undefined ||
             exactOutcome.result.sessionId === current.sessionId));
 }
-export const AgentEnvironmentCreationSchema = z.enum([
-    "created",
-    "replayed",
-]);
 /** Strict runtime validator for provider capability negotiation. */
 export const AgentEnvironmentCapabilitiesSchema = z
     .strictObject({
@@ -451,7 +447,7 @@ export function agentEnvironmentCreateInputDigest(input) {
  * prototype members in a copy and is rejected.
  * @internal
  */
-export function replayedAgentEnvironmentView(environment) {
+function replayedAgentEnvironmentView(environment) {
     const prototype = Object.getPrototypeOf(environment);
     if (prototype !== Object.prototype && prototype !== null) {
         throw new Error("a replayed agent environment view requires a plain object environment");

package/dist/index.d.ts

@@ -9,7 +9,7 @@ export * from "./host-services.js";
 export * from "./mcp.js";
 export * from "./provider-adapter.js";
 export type * from "./environment-provider.js";
-export { AgentEnvironmentCapabilitiesSchema, AgentRuntimeAttachmentsSchema, AgentNativeContextContinuationAdmissionSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationAdmissionMatchesRequest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, ObservationStateSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, assertObservationCredentialFree, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, AgentEnvironmentCreationSchema, createAgentEnvironmentWithIdempotency, replayedAgentEnvironmentView, canonicalWorkspaceCwd, MAX_WORKSPACE_CWD_LENGTH, workspaceCwdSchema, workspaceCwdPathForBase, WorkspaceRequestSchema, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
+export { AgentEnvironmentCapabilitiesSchema, AgentRuntimeAttachmentsSchema, AgentNativeContextContinuationAdmissionSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationAdmissionMatchesRequest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, createAgentEnvironmentWithIdempotency, canonicalWorkspaceCwd, MAX_WORKSPACE_CWD_LENGTH, workspaceCwdSchema, workspaceCwdPathForBase, WorkspaceRequestSchema, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
 export * from "./plan.js";
 export * from "./runtime-control.js";
 export * from "./portable-context.js";
@@ -27,14 +27,12 @@ export * from "./agent-profile-improvement.js";
 export * from "./agent-profile-improvement-schema.js";
 export * from "./agent-execution-limits.js";
 export * from "./agent-profile.js";
-export * from "./agent-instance.js";
 export * from "./agent-profile-snapshot.js";
 export * from "./agent-profile-activation.js";
 export * from "./agent-profile-materialization.js";
 export * from "./agent-profile-measurements.js";
 export * from "./agent-execution-preparation.js";
 export * from "./agent-workspace-lease.js";
-export * from "./certified-context.js";
 export * from "./deep-freeze.js";
 export * from "./profile-diff.js";
 export * from "./harness.js";