@tangle-network/agent-interface 5.2.0 → 5.3.0

package/dist/agent-candidate-receipt-schema.d.ts

@@ -223,22 +223,62 @@ export declare const agentCandidateMaterializationReceiptSchema: z.ZodObject<{
             kind: "agent-profile-workspace-plan";
             digest: `sha256:${string}`;
             material: {
+                proxySecrets?: {
+                    hosts: readonly string[];
+                    methods?: readonly string[] | undefined;
+                    paths?: readonly string[] | undefined;
+                    envName: string;
+                    secretRef: {
+                        kind: "secret-ref";
+                        key: string;
+                    };
+                    presentation: {
+                        type: "bearer";
+                    } | {
+                        type: "basic";
+                        username: string;
+                    } | {
+                        type: "header";
+                        name: string;
+                    } | {
+                        type: "query";
+                        name: string;
+                    };
+                    placeholderFormat?: "jwt" | "opaque" | undefined;
+                    ttlSeconds?: number | undefined;
+                }[] | undefined;
                 sourceProfileDigest: `sha256:${string}`;
                 harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
                 files: {
                     relPath: string;
                     mode: number;
                     contentSha256: `sha256:${string}`;
+                    secretSlots?: {
+                        path: (string | number)[];
+                        ref: {
+                            kind: "secret-ref";
+                            key: string;
+                            format?: "bearer" | "raw" | undefined;
+                        };
+                    }[] | undefined;
                     root?: "agent" | undefined;
                 }[];
                 env: Record<string, {
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                } | {
                     kind: "public";
                     value: string;
                 }>;
-                flags: {
+                flags: ({
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                } | {
                     kind: "public";
                     value: string;
-                }[];
+                })[];
                 systemPrompt?: {
                     kind: "public";
                     value: string;
@@ -279,22 +319,62 @@ export declare const agentCandidateMaterializationReceiptSchema: z.ZodObject<{
             kind: "agent-profile-workspace-plan";
             digest: `sha256:${string}`;
             material: {
+                proxySecrets?: {
+                    hosts: readonly string[];
+                    methods?: readonly string[] | undefined;
+                    paths?: readonly string[] | undefined;
+                    envName: string;
+                    secretRef: {
+                        kind: "secret-ref";
+                        key: string;
+                    };
+                    presentation: {
+                        type: "bearer";
+                    } | {
+                        type: "basic";
+                        username: string;
+                    } | {
+                        type: "header";
+                        name: string;
+                    } | {
+                        type: "query";
+                        name: string;
+                    };
+                    placeholderFormat?: "jwt" | "opaque" | undefined;
+                    ttlSeconds?: number | undefined;
+                }[] | undefined;
                 sourceProfileDigest: `sha256:${string}`;
                 harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
                 files: {
                     relPath: string;
                     mode: number;
                     contentSha256: `sha256:${string}`;
+                    secretSlots?: {
+                        path: (string | number)[];
+                        ref: {
+                            kind: "secret-ref";
+                            key: string;
+                            format?: "bearer" | "raw" | undefined;
+                        };
+                    }[] | undefined;
                     root?: "agent" | undefined;
                 }[];
                 env: Record<string, {
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                } | {
                     kind: "public";
                     value: string;
                 }>;
-                flags: {
+                flags: ({
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                } | {
                     kind: "public";
                     value: string;
-                }[];
+                })[];
                 systemPrompt?: {
                     kind: "public";
                     value: string;
@@ -496,11 +576,19 @@ export declare const agentCandidateMaterializationReceiptSchema: z.ZodObject<{
             };
             launch: {
                 executable: string;
-                args: {
+                args: ({
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                } | {
                     kind: "public";
                     value: string;
-                }[];
+                })[];
                 env: Record<string, {
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                } | {
                     kind: "public";
                     value: string;
                 }>;
@@ -760,11 +848,19 @@ export declare const agentCandidateMaterializationReceiptSchema: z.ZodObject<{
             };
             launch: {
                 executable: string;
-                args: {
+                args: ({
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                } | {
                     kind: "public";
                     value: string;
-                }[];
+                })[];
                 env: Record<string, {
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                } | {
                     kind: "public";
                     value: string;
                 }>;

package/dist/agent-candidate-schema-common.d.ts

@@ -32,14 +32,41 @@ export declare function isCanonicalJsonValue(value: unknown, ancestors?: Set<obj
  * core calls it, so candidate validation and trace redaction agree.
  */
 export declare function looksLikeCredential(value: string): boolean;
-export declare const agentCandidateConfigValueSchema: z.ZodObject<{
+/** Shared public reference owner; resolution belongs to the trusted executor. */
+export declare const agentCandidateSecretRefSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"secret-ref">;
+    key: z.ZodString;
+    format: z.ZodOptional<z.ZodEnum<{
+        bearer: "bearer";
+        raw: "raw";
+    }>>;
+}, z.core.$strict>;
+export declare const agentCandidatePublicValueSchema: z.ZodObject<{
     kind: z.ZodLiteral<"public">;
     value: z.ZodString;
 }, z.core.$strict>;
-export declare const environmentConfigSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+export declare const agentCandidateConfigValueSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"public">;
+    value: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"secret-ref">;
+    key: z.ZodString;
+    format: z.ZodOptional<z.ZodEnum<{
+        bearer: "bearer";
+        raw: "raw";
+    }>>;
+}, z.core.$strict>], "kind">;
+export declare const environmentConfigSchema: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"public">;
     value: z.ZodString;
-}, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"secret-ref">;
+    key: z.ZodString;
+    format: z.ZodOptional<z.ZodEnum<{
+        bearer: "bearer";
+        raw: "raw";
+    }>>;
+}, z.core.$strict>], "kind">>;
 export declare const agentCandidateGitHubRepositorySchema: z.ZodObject<{
     kind: z.ZodLiteral<"github">;
     owner: z.ZodString;

package/dist/agent-candidate-schema-common.js

@@ -239,20 +239,26 @@ function isPublicConfigValue(value) {
         isWellFormedUnicode(value) &&
         !looksLikeCredential(value));
 }
-export const agentCandidateConfigValueSchema = z
-    .object({
+/** Shared public reference owner; resolution belongs to the trusted executor. */
+export const agentCandidateSecretRefSchema = z.strictObject({
+    kind: z.literal("secret-ref"),
+    key: z.string().min(1).max(500).refine((value) => value.trim().length > 0 && isPublicConfigValue(value), "secret reference key must be a public non-credential identity"),
+    format: z.enum(["raw", "bearer"]).optional(),
+});
+export const agentCandidatePublicValueSchema = z.strictObject({
     kind: z.literal("public"),
-    value: z
-        .string()
-        .refine(isPublicConfigValue, "candidate config cannot carry credentials; the evaluator owns model authorization"),
-})
-    .strict();
+    value: z.string().refine(isPublicConfigValue, "candidate config cannot carry credentials; the evaluator owns model authorization"),
+});
+export const agentCandidateConfigValueSchema = z.discriminatedUnion("kind", [
+    agentCandidatePublicValueSchema,
+    agentCandidateSecretRefSchema,
+]);
 function configRecordSchema(keySchema) {
     return z
         .record(keySchema, agentCandidateConfigValueSchema)
         .superRefine((config, ctx) => {
         for (const name of Object.keys(config)) {
-            if (secretNamePattern.test(name)) {
+            if (secretNamePattern.test(name) && config[name]?.kind !== "secret-ref") {
                 ctx.addIssue({
                     code: "custom",
                     path: [name],

package/dist/agent-candidate-schema.d.ts

@@ -55,6 +55,33 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
             pi: "pi";
             prime: "prime";
         }>>;
+        proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            envName: z.ZodString;
+            secretRef: z.ZodObject<{
+                kind: z.ZodLiteral<"secret-ref">;
+                key: z.ZodString;
+            }, z.core.$strict>;
+            presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"bearer">;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"basic">;
+                username: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"header">;
+                name: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"query">;
+                name: z.ZodString;
+            }, z.core.$strict>], "type">;
+            placeholderFormat: z.ZodOptional<z.ZodEnum<{
+                jwt: "jwt";
+                opaque: "opaque";
+            }>>;
+            ttlSeconds: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
         permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
             allow: "allow";
             ask: "ask";
@@ -533,17 +560,31 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
         }, z.core.$strict>>;
         hooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
             executable: z.ZodString;
-            args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"public">;
                 value: z.ZodString;
-            }, z.core.$strict>>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret-ref">;
+                key: z.ZodString;
+                format: z.ZodOptional<z.ZodEnum<{
+                    bearer: "bearer";
+                    raw: "raw";
+                }>>;
+            }, z.core.$strict>], "kind">>>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
             blocking: z.ZodOptional<z.ZodBoolean>;
             matcher: z.ZodOptional<z.ZodString>;
-            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"public">;
                 value: z.ZodString;
-            }, z.core.$strict>>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret-ref">;
+                key: z.ZodString;
+                format: z.ZodOptional<z.ZodEnum<{
+                    bearer: "bearer";
+                    raw: "raw";
+                }>>;
+            }, z.core.$strict>], "kind">>>;
         }, z.core.$strict>>>>;
         modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
             description: z.ZodOptional<z.ZodString>;
@@ -614,10 +655,17 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
         launch: z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"container-command">;
             executable: z.ZodString;
-            args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"public">;
                 value: z.ZodString;
-            }, z.core.$strict>>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret-ref">;
+                key: z.ZodString;
+                format: z.ZodOptional<z.ZodEnum<{
+                    bearer: "bearer";
+                    raw: "raw";
+                }>>;
+            }, z.core.$strict>], "kind">>>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"candidate-entrypoint">;
             entrypoint: z.ZodString;
@@ -630,10 +678,17 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
                 tsx: "tsx";
                 uv: "uv";
             }>>;
-            args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"public">;
                 value: z.ZodString;
-            }, z.core.$strict>>>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret-ref">;
+                key: z.ZodString;
+                format: z.ZodOptional<z.ZodEnum<{
+                    bearer: "bearer";
+                    raw: "raw";
+                }>>;
+            }, z.core.$strict>], "kind">>>;
         }, z.core.$strict>], "kind">;
         instructionDelivery: z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"argv-append">;
@@ -651,10 +706,17 @@ export declare const agentCandidateBundleSchema: z.ZodObject<{
             }>;
             path: z.ZodString;
         }, z.core.$strict>;
-        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"public">;
             value: z.ZodString;
-        }, z.core.$strict>>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"secret-ref">;
+            key: z.ZodString;
+            format: z.ZodOptional<z.ZodEnum<{
+                bearer: "bearer";
+                raw: "raw";
+            }>>;
+        }, z.core.$strict>], "kind">>>;
         environment: z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"pinned-container">;
             container: z.ZodObject<{

package/dist/agent-candidate.d.ts

@@ -1,4 +1,5 @@
-import type { AgentProfile, AgentProfileFileMount, AgentProfileHookCommand, AgentProfileMode, AgentProfileModelHints, AgentProfileResources, AgentSubagentProfile, ReasoningEffort } from "./agent-profile.js";
+import type { AgentProfile, AgentProfileFileMount, AgentProfileHookCommand, AgentProfileMode, AgentProfileModelHints, AgentProfileSecretRef, AgentProfileResources, AgentSubagentProfile, ReasoningEffort } from "./agent-profile.js";
+import type { ProxySecretBinding } from "./proxy-secrets.js";
 import type { AgentProfileActivationEvidence } from "./agent-profile-activation.js";
 import type { HarnessType } from "./harness.js";
 import type { AgentProfileImprovementExecutionRef, AgentProfileImprovementMeasuredComparison } from "./agent-profile-improvement.js";
@@ -63,7 +64,7 @@ export interface AgentCandidatePublicValue {
     kind: "public";
     value: string;
 }
-export type AgentCandidateConfigValue = AgentCandidatePublicValue;
+export type AgentCandidateConfigValue = AgentCandidatePublicValue | AgentProfileSecretRef;
 export interface AgentCandidateGitHubRepository {
     kind: "github";
     owner: string;
@@ -373,6 +374,8 @@ export interface AgentCandidateResolvedModel {
 }
 /** Canonical, digest-free profile-plan identity document. */
 export interface AgentCandidateProfilePlanMaterial {
+    /** Reference-only declaration captured with the public plan before trusted resolution. */
+    proxySecrets?: ProxySecretBinding[];
     /** Canonical digest of the complete frozen profile that produced this plan. */
     sourceProfileDigest: Sha256Digest;
     harness: HarnessType;
@@ -380,6 +383,11 @@ export interface AgentCandidateProfilePlanMaterial {
         relPath: string;
         mode: number;
         contentSha256: Sha256Digest;
+        /** Public reference placements in the null-valued JSON template; part of plan identity. */
+        secretSlots?: Array<{
+            path: Array<string | number>;
+            ref: AgentProfileSecretRef;
+        }>;
         /** Omit for a workspace-root file; agent-root files must name this root. */
         root?: "agent";
     }>;
@@ -390,14 +398,14 @@ export interface AgentCandidateProfilePlanMaterial {
      * Present only where the harness's own system prompt is deleted in favor of
      * this text.
      */
-    systemPrompt?: AgentCandidateConfigValue;
+    systemPrompt?: AgentCandidatePublicValue;
     /**
      * Exact text ADDED to the harness's own system prompt, which stays intact.
      * Recorded separately from the replacement so plan identity distinguishes the
      * two intents; a harness that lowers this into a flag or file still records
      * it here, because the same bytes in the two fields are two different runs.
      */
-    appendSystemPrompt?: AgentCandidateConfigValue;
+    appendSystemPrompt?: AgentCandidatePublicValue;
     unsupported: Array<{
         dimension: string;
         reason: string;

package/dist/agent-execution-preparation-receipt.d.ts

@@ -122,6 +122,7 @@ export declare const agentExecutionPreparationAxisResultSchema: z.ZodObject<{
         modes: "modes";
         name: "name";
         permissions: "permissions";
+        proxySecrets: "proxySecrets";
         resourceAgents: "resourceAgents";
         resourceFailOnError: "resourceFailOnError";
         resourceInstructions: "resourceInstructions";
@@ -275,6 +276,7 @@ export declare const agentExecutionPreparationReceiptSchema: z.ZodObject<{
             modes: "modes";
             name: "name";
             permissions: "permissions";
+            proxySecrets: "proxySecrets";
             resourceAgents: "resourceAgents";
             resourceFailOnError: "resourceFailOnError";
             resourceInstructions: "resourceInstructions";

package/dist/agent-execution-preparation.js

@@ -353,11 +353,13 @@ function validateAxisCoverage(receipt, authoredProfile, effectiveProfile, issues
                 path: request.path,
             });
         }
-        if (coverage.result.disposition === "unsupported" && !allowPartial) {
+        if (coverage.result.disposition === "unsupported" && (!allowPartial || request.axis === "proxySecrets")) {
             issues.push({
                 code: "strict-unsupported",
                 message: `${request.axis} at ${request.path} is unsupported but the authored ` +
-                    "profile did not explicitly set resources.failOnError=false",
+                    (request.axis === "proxySecrets"
+                        ? "proxy-secret custody cannot be omitted by partial materialization"
+                        : "profile did not explicitly set resources.failOnError=false"),
                 axis: request.axis,
                 path: request.path,
             });

package/dist/agent-profile-materialization.d.ts

@@ -9,7 +9,7 @@ import type { AgentProfile } from "./agent-profile.js";
  * can only add text must report the requested replacement as unsatisfied rather
  * than acknowledge it.
  */
-export declare const AGENT_PROFILE_MATERIALIZATION_AXES: readonly ["name", "description", "version", "tags", "systemPrompt", "appendSystemPrompt", "instructions", "modelDefault", "modelSmall", "modelProvider", "modelReasoningEffort", "modelMaxVisibleOutputTokens", "modelMaxReasoningTokens", "modelMaxTotalOutputTokens", "modelMetadata", "harness", "seats", "permissions", "tools", "mcp", "connections", "subagents", "files", "resourceTools", "skills", "resourceAgents", "commands", "knowledge", "resourceInstructions", "resourceFailOnError", "hooks", "modes", "confidential", "metadata", "extensions"];
+export declare const AGENT_PROFILE_MATERIALIZATION_AXES: readonly ["name", "description", "version", "tags", "systemPrompt", "appendSystemPrompt", "instructions", "modelDefault", "modelSmall", "modelProvider", "modelReasoningEffort", "modelMaxVisibleOutputTokens", "modelMaxReasoningTokens", "modelMaxTotalOutputTokens", "modelMetadata", "harness", "seats", "proxySecrets", "permissions", "tools", "mcp", "connections", "subagents", "files", "resourceTools", "skills", "resourceAgents", "commands", "knowledge", "resourceInstructions", "resourceFailOnError", "hooks", "modes", "confidential", "metadata", "extensions"];
 /** One exact leaf of the public AgentProfile contract. */
 export type AgentProfileMaterializationAxis = (typeof AGENT_PROFILE_MATERIALIZATION_AXES)[number];
 /** Compatibility name used by runtimes that distinguish canonical axes. */

package/dist/agent-profile-materialization.js

@@ -26,6 +26,7 @@ export const AGENT_PROFILE_MATERIALIZATION_AXES = [
     "modelMetadata",
     "harness",
     "seats",
+    "proxySecrets",
     "permissions",
     "tools",
     "mcp",
@@ -50,6 +51,7 @@ const profileProperties = [
     "model",
     "harness",
     "seats",
+    "proxySecrets",
     "permissions",
     "tools",
     "mcp",
@@ -105,6 +107,7 @@ const AXIS_DESCRIPTORS = [
     })),
     { axis: "harness", rootPath: "/harness", value: (profile) => profile.harness },
     { axis: "seats", rootPath: "/seats", value: (profile) => profile.seats },
+    { axis: "proxySecrets", rootPath: "/proxySecrets", value: (profile) => profile.proxySecrets },
     {
         axis: "permissions",
         rootPath: "/permissions",

package/dist/agent-profile.d.ts

@@ -11,6 +11,7 @@
  * secret references, which a private executor resolves only after identity is
  * fixed. This package is the canonical public home for these symbols.
  */
+import type { ProxySecretBinding, ProxySecretCapabilities } from "./proxy-secrets.js";
 import type { HarnessType } from "./harness.js";
 import type { Sha256Digest } from "./agent-candidate.js";
 /**
@@ -448,6 +449,9 @@ export interface AgentProfile {
      * Omission preserves the existing single-provider execution policy.
      */
     seats?: AgentProfileSeat[];
+    /** Reference-only proxy custody. Overlay replaces the entire selection; [] clears it.
+     * Authorization and issuer scope remain outside this authored profile. */
+    proxySecrets?: ProxySecretBinding[];
     permissions?: Record<string, AgentProfilePermission>;
     tools?: Record<string, boolean>;
     mcp?: Record<string, AgentProfileMcpServer>;
@@ -499,6 +503,8 @@ export interface AgentProfileSystemPromptCapability {
  */
 export interface AgentProfileCapabilities {
     namedProfiles: boolean;
+    /** Absent means proxy-only profiles must be refused before secret resolution. */
+    proxySecrets?: ProxySecretCapabilities;
     systemPrompt: AgentProfileSystemPromptCapability;
     instructions: boolean;
     tools: boolean;

package/dist/agent-profile.js

@@ -96,8 +96,15 @@ function assignDefined(...sources) {
         if (source === undefined)
             continue;
         for (const [key, value] of Object.entries(source)) {
-            if (value !== undefined)
-                merged[key] = value;
+            if (value !== undefined) {
+                // Define own data properties like object spread, including __proto__.
+                Object.defineProperty(merged, key, {
+                    value,
+                    enumerable: true,
+                    configurable: true,
+                    writable: true,
+                });
+            }
         }
     }
     return merged;

package/dist/environment-interactive-control.d.ts

@@ -116,6 +116,7 @@ export declare const AgentInteractiveSessionRefSchema: z.ZodObject<{
                 modes: "modes";
                 name: "name";
                 permissions: "permissions";
+                proxySecrets: "proxySecrets";
                 resourceAgents: "resourceAgents";
                 resourceFailOnError: "resourceFailOnError";
                 resourceInstructions: "resourceInstructions";
@@ -293,6 +294,7 @@ export declare const AgentInteractiveSessionControlClaimRequestSchema: z.ZodObje
                     modes: "modes";
                     name: "name";
                     permissions: "permissions";
+                    proxySecrets: "proxySecrets";
                     resourceAgents: "resourceAgents";
                     resourceFailOnError: "resourceFailOnError";
                     resourceInstructions: "resourceInstructions";
@@ -463,6 +465,7 @@ export declare const AgentInteractiveSessionControlClaimAcknowledgementSchema: z
                     modes: "modes";
                     name: "name";
                     permissions: "permissions";
+                    proxySecrets: "proxySecrets";
                     resourceAgents: "resourceAgents";
                     resourceFailOnError: "resourceFailOnError";
                     resourceInstructions: "resourceInstructions";
@@ -654,6 +657,7 @@ export declare const AgentInteractiveSessionStatusSchema: z.ZodDiscriminatedUnio
                     modes: "modes";
                     name: "name";
                     permissions: "permissions";
+                    proxySecrets: "proxySecrets";
                     resourceAgents: "resourceAgents";
                     resourceFailOnError: "resourceFailOnError";
                     resourceInstructions: "resourceInstructions";
@@ -804,6 +808,7 @@ export declare const AgentInteractiveSessionStatusSchema: z.ZodDiscriminatedUnio
                     modes: "modes";
                     name: "name";
                     permissions: "permissions";
+                    proxySecrets: "proxySecrets";
                     resourceAgents: "resourceAgents";
                     resourceFailOnError: "resourceFailOnError";
                     resourceInstructions: "resourceInstructions";
@@ -962,6 +967,7 @@ export declare const AgentInteractiveSessionStatusSchema: z.ZodDiscriminatedUnio
                     modes: "modes";
                     name: "name";
                     permissions: "permissions";
+                    proxySecrets: "proxySecrets";
                     resourceAgents: "resourceAgents";
                     resourceFailOnError: "resourceFailOnError";
                     resourceInstructions: "resourceInstructions";
@@ -1125,6 +1131,7 @@ export declare const AgentInteractiveSessionStopCommandSchema: z.ZodObject<{
                     modes: "modes";
                     name: "name";
                     permissions: "permissions";
+                    proxySecrets: "proxySecrets";
                     resourceAgents: "resourceAgents";
                     resourceFailOnError: "resourceFailOnError";
                     resourceInstructions: "resourceInstructions";
@@ -1297,6 +1304,7 @@ export declare const AgentInteractiveSessionStopAcknowledgementSchema: z.ZodObje
                     modes: "modes";
                     name: "name";
                     permissions: "permissions";
+                    proxySecrets: "proxySecrets";
                     resourceAgents: "resourceAgents";
                     resourceFailOnError: "resourceFailOnError";
                     resourceInstructions: "resourceInstructions";
@@ -1485,6 +1493,7 @@ export declare const AgentInteractiveSessionPromptCommandSchema: z.ZodObject<{
                     modes: "modes";
                     name: "name";
                     permissions: "permissions";
+                    proxySecrets: "proxySecrets";
                     resourceAgents: "resourceAgents";
                     resourceFailOnError: "resourceFailOnError";
                     resourceInstructions: "resourceInstructions";
@@ -1656,6 +1665,7 @@ export declare const AgentInteractiveSessionPromptAcknowledgementSchema: z.ZodOb
                     modes: "modes";
                     name: "name";
                     permissions: "permissions";
+                    proxySecrets: "proxySecrets";
                     resourceAgents: "resourceAgents";
                     resourceFailOnError: "resourceFailOnError";
                     resourceInstructions: "resourceInstructions";