@tangle-network/agent-interface 3.1.0 → 3.1.2

package/README.md

@@ -22,6 +22,13 @@ provider-facing projection without `seats`, setting its top-level harness and
 model to the selected stage. A cross-provider continuation requires an explicit
 stage in the authored chain.
 
+Each later stage may replace the profile-level `tools` and `permissions` maps.
+An explicit `{}` removes those profile-level controls for that stage; an omitted
+map inherits them. If the first stage names a map, it must equal the top-level
+map. The executor projects the selected maps before materialization and must
+refuse a stage whose native harness cannot honor them. A missing grant map does
+not prove which built-in tools the harness actually exposes.
+
 ## Profile measurements
 
 `measureAgentProfile(profile)` returns the canonical profile digest and JSON byte size,

package/dist/agent-profile.d.ts

@@ -163,6 +163,10 @@ export interface AgentProfileSeat {
         kind: "seat";
         id: string;
     };
+    /** Replace the profile-level native tool map for this stage; `{}` clears it. */
+    tools?: Record<string, boolean>;
+    /** Replace the profile-level permission map for this stage; `{}` clears it. */
+    permissions?: Record<string, AgentProfilePermission>;
 }
 /**
  * Prompt shaping for an agent.

package/dist/environment-interactive-start.d.ts

@@ -97,6 +97,8 @@ export declare const AgentInteractiveSessionStartSchema: z.ZodObject<{
                 kind: z.ZodLiteral<"seat">;
                 id: z.ZodString;
             }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         }, z.core.$strict>>>;
         permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;

package/dist/environment-runtime.d.ts

@@ -34,6 +34,12 @@ export interface AgentTurnInput {
     contextTransfer?: ContextTransferRequest;
     /** Verified same-session continuation; never carries duplicate history. */
     nativeContinuation?: NativeContextContinuationRequest;
+    /** Resume an exact native Claude or Codex conversation inside a restored workspace. */
+    nativeResume?: {
+        harness: "claude-code" | "codex";
+        nativeSessionId: string;
+        sourceCheckpointId: string;
+    };
     context?: Record<string, unknown>;
     /** Interaction kinds the provider may originate for this turn. */
     interactions?: RequestedInteractions;
@@ -114,6 +120,8 @@ export declare const AgentTurnInputSchema: z.ZodObject<{
                 kind: z.ZodLiteral<"seat">;
                 id: z.ZodString;
             }, z.core.$strict>]>;
+            tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+            permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         }, z.core.$strict>>>;
         permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
@@ -466,6 +474,14 @@ export declare const AgentTurnInputSchema: z.ZodObject<{
             observedAt: z.ZodISODateTime;
         }, z.core.$strict>;
     }, z.core.$strict>>;
+    nativeResume: z.ZodOptional<z.ZodObject<{
+        harness: z.ZodEnum<{
+            "claude-code": "claude-code";
+            codex: "codex";
+        }>;
+        nativeSessionId: z.ZodString;
+        sourceCheckpointId: z.ZodString;
+    }, z.core.$strict>>;
     context: z.ZodOptional<z.ZodCustom<Record<string, unknown>, Record<string, unknown>>>;
     interactions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
     signal: z.ZodOptional<z.ZodCustom<AbortSignal, AbortSignal>>;

package/dist/environment-runtime.js

@@ -29,6 +29,11 @@ export const AgentTurnInputSchema = z.strictObject({
     controlRef: AgentRunControlRefSchema.optional(),
     contextTransfer: ContextTransferRequestSchema.optional(),
     nativeContinuation: NativeContextContinuationRequestSchema.optional(),
+    nativeResume: z.strictObject({
+        harness: z.enum(["claude-code", "codex"]),
+        nativeSessionId: boundedIdentifierSchema,
+        sourceCheckpointId: boundedIdentifierSchema,
+    }).optional(),
     context: boundedJsonRecordSchema.optional(),
     interactions: RequestedInteractionsSchema.optional(),
     signal: z.custom().optional(),

package/dist/profile-schema.d.ts

@@ -194,6 +194,8 @@ export declare const agentProfileSeatSchema: z.ZodObject<{
         kind: z.ZodLiteral<"seat">;
         id: z.ZodString;
     }, z.core.$strict>]>;
+    tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+    permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
 }, z.core.$strict>;
 /**
  * Replacement and addition are separate, independently optional fields, and the
@@ -544,6 +546,8 @@ export declare const agentProfileSchema: z.ZodObject<{
             kind: z.ZodLiteral<"seat">;
             id: z.ZodString;
         }, z.core.$strict>]>;
+        tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
+        permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
     }, z.core.$strict>>>;
     permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
     tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;

package/dist/profile-schema.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { REASONING_EFFORTS, TRAINED_MODEL_PREFIX, trainedModelIdForArtifact, } from "./agent-profile.js";
 import { canonicalCandidateDigest, sha256DigestSchema, environmentNameSchema, headerNameSchema, isSafeExecutable, isSafeRelativePath, isWellFormedUnicode, looksLikeCredential, } from "./agent-candidate-schema-common.js";
 import { harnessTypeSchema } from "./harness.js";
+import { canonicalAgentProfileJson } from "./agent-profile-canonical.js";
 import { harnessHonorsEffort, harnessHonorsModel, harnessModelSupport, harnessReasoningEfforts, harnessSystemPromptIntents, resolveModelProvider, } from "./harness-capabilities.js";
 import { SANDBOX_SIZE_PRESET_NAMES, } from "./sandbox-size.js";
 /**
@@ -140,6 +141,8 @@ export const agentProfileSeatSchema = z.strictObject({
         z.strictObject({ kind: z.literal("all-eligible") }),
         z.strictObject({ kind: z.literal("seat"), id: z.string().min(1).refine((value) => value.trim() === value, "seat id must be canonical") }),
     ]),
+    tools: ownPropertyRecordSchema(z.boolean()).optional(),
+    permissions: ownPropertyRecordSchema(agentProfilePermissionSchema).optional(),
 });
 /**
  * Replacement and addition are separate, independently optional fields, and the
@@ -451,6 +454,14 @@ export const agentProfileSchema = z
             first.model !== profile.model?.default) {
             context.addIssue({ code: "custom", path: ["seats", 0], message: "first seat must match profile harness, model.provider, and model.default" });
         }
+        if (first.tools !== undefined &&
+            canonicalAgentProfileJson(first.tools) !== canonicalAgentProfileJson(profile.tools)) {
+            context.addIssue({ code: "custom", path: ["seats", 0, "tools"], message: "first seat tools must match profile tools" });
+        }
+        if (first.permissions !== undefined &&
+            canonicalAgentProfileJson(first.permissions) !== canonicalAgentProfileJson(profile.permissions)) {
+            context.addIssue({ code: "custom", path: ["seats", 0, "permissions"], message: "first seat permissions must match profile permissions" });
+        }
         for (const [index, seat] of profile.seats.entries()) {
             const provider = resolveModelProvider(seat.model);
             if (provider !== seat.provider) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-interface",
-  "version": "3.1.0",
+  "version": "3.1.2",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",