@tangle-network/agent-interface 2.3.0 → 2.3.1

package/dist/environment-runtime.d.ts

@@ -1087,6 +1087,8 @@ export interface CreateAgentEnvironmentInput {
  * The operation key names the request and the abort signal controls one
  * attempt, so neither belongs in the input identity. Every other field is
  * canonicalized with the shared RFC 8785 JSON representation.
+ * A keyed create therefore accepts only canonical JSON material.
+ * Unkeyed creates can retain opaque provider-native mapper values.
  * @internal
  */
 export declare function agentEnvironmentCreateInputDigest(input: CreateAgentEnvironmentInput): Sha256Digest;
@@ -1118,9 +1120,15 @@ export declare function replayedAgentEnvironmentView<T extends object>(environme
  * with the creation verdict the provider could prove. Every same-key call
  * after it, including one that awaited the same pending create, receives
  * {@link replayedAgentEnvironmentView} of that environment.
+ *
+ * A keyed create callback receives one immutable canonical JSON snapshot.
+ * Its digest and provider therefore read identical request bytes even when
+ * the caller mutates its original object after this function returns.
+ * An unkeyed create retains its original input so opaque provider-native
+ * mapper values retain their public identity.
  * @internal
  */
-export declare function createAgentEnvironmentWithIdempotency<T extends object>(records: Map<string, AgentEnvironmentCreateIdempotencyRecord<T>>, input: CreateAgentEnvironmentInput, create: () => Promise<T>): Promise<T>;
+export declare function createAgentEnvironmentWithIdempotency<T extends object>(records: Map<string, AgentEnvironmentCreateIdempotencyRecord<T>>, input: CreateAgentEnvironmentInput, create: (input: CreateAgentEnvironmentInput) => Promise<T>): Promise<T>;
 export interface AgentEnvironmentProvider {
     readonly name: string;
     readonly exactProcess?: AgentExactProcessProvider;

package/dist/environment-runtime.js

@@ -1,11 +1,12 @@
 import { z } from "zod";
-import { canonicalCandidateDigest } from "./agent-candidate-schema-common.js";
+import { canonicalCandidateDigest, canonicalCandidateJson, } from "./agent-candidate-schema-common.js";
 import { InteractionCapabilitiesSchema, RequestedInteractionsSchema } from "./interaction.js";
 import { ContextTransferReceiptSchema, ContextTransferRequestSchema, NativeContextBoundaryProofSchema, NativeContextContinuationAcknowledgementSchema, NativeContextContinuationRequestSchema, nativeContextContinuationAcknowledgementMatches } from "./portable-context.js";
 import { AgentExactRunControlRefSchema, AgentRunControlRefSchema, CanonicalStreamEventSchema } from "./runtime-control.js";
 import { AgentProfileCapabilitiesSchema } from "./environment-profile-capabilities.js";
 import { boundedIdentifierSchema, boundedJsonRecordSchema, boundedJsonSchema, boundedStringSchema, CONTRACT_MAX_ARRAY_LENGTH } from "./contract-limits.js";
 import { InputPartSchema } from "./portable-context-shared.js";
+import { deepFreeze } from "./deep-freeze.js";
 export const AgentTurnInputSchema = z.strictObject({
     prompt: boundedStringSchema.optional(),
     parts: z.array(InputPartSchema).max(CONTRACT_MAX_ARRAY_LENGTH).optional(),
@@ -423,6 +424,8 @@ export const AgentEnvironmentCapabilitiesSchema = z
  * The operation key names the request and the abort signal controls one
  * attempt, so neither belongs in the input identity. Every other field is
  * canonicalized with the shared RFC 8785 JSON representation.
+ * A keyed create therefore accepts only canonical JSON material.
+ * Unkeyed creates can retain opaque provider-native mapper values.
  * @internal
  */
 export function agentEnvironmentCreateInputDigest(input) {
@@ -460,14 +463,26 @@ export function replayedAgentEnvironmentView(environment) {
  * with the creation verdict the provider could prove. Every same-key call
  * after it, including one that awaited the same pending create, receives
  * {@link replayedAgentEnvironmentView} of that environment.
+ *
+ * A keyed create callback receives one immutable canonical JSON snapshot.
+ * Its digest and provider therefore read identical request bytes even when
+ * the caller mutates its original object after this function returns.
+ * An unkeyed create retains its original input so opaque provider-native
+ * mapper values retain their public identity.
  * @internal
  */
 export async function createAgentEnvironmentWithIdempotency(records, input, create) {
-    input.signal?.throwIfAborted();
-    const key = input.idempotencyKey;
+    const { idempotencyKey: key, signal, ...material } = input;
+    signal?.throwIfAborted();
     if (key === undefined)
-        return create();
-    const digest = agentEnvironmentCreateInputDigest(input);
+        return create(input);
+    const snapshot = deepFreeze(JSON.parse(canonicalCandidateJson(material)));
+    const acceptedInput = Object.freeze({
+        ...snapshot,
+        idempotencyKey: key,
+        ...(signal === undefined ? {} : { signal }),
+    });
+    const digest = agentEnvironmentCreateInputDigest(acceptedInput);
     const existing = records.get(key);
     if (existing !== undefined) {
         if (existing.digest !== digest) {
@@ -475,7 +490,7 @@ export async function createAgentEnvironmentWithIdempotency(records, input, crea
         }
         return replayedAgentEnvironmentView(existing.environment ?? (await existing.pending));
     }
-    const pending = Promise.resolve().then(create);
+    const pending = Promise.resolve().then(() => create(acceptedInput));
     const record = {
         digest,
         pending,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-interface",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",
@@ -88,7 +88,7 @@
     "zod": "4.5.4"
   },
   "devDependencies": {
-    "@types/node": "26.4.0",
+    "@types/node": "26.4.1",
     "@types/spdx-expression-parse": "4.0.0",
     "typescript": "7.0.2",
     "vitest": "4.1.11"