@tangle-network/agent-interface 5.2.0 → 5.3.0

package/dist/environment-interactive-start.d.ts

@@ -100,6 +100,33 @@ export declare const AgentInteractiveSessionStartSchema: z.ZodObject<{
             tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
             permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         }, z.core.$strict>>>;
+        proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            envName: z.ZodString;
+            secretRef: z.ZodObject<{
+                kind: z.ZodLiteral<"secret-ref">;
+                key: z.ZodString;
+            }, z.core.$strict>;
+            presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"bearer">;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"basic">;
+                username: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"header">;
+                name: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"query">;
+                name: z.ZodString;
+            }, z.core.$strict>], "type">;
+            placeholderFormat: z.ZodOptional<z.ZodEnum<{
+                jwt: "jwt";
+                opaque: "opaque";
+            }>>;
+            ttlSeconds: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
         permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
         mcp: z.ZodOptional<z.ZodType<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown>>>;
@@ -208,12 +235,12 @@ export declare const AgentInteractiveSessionStartSchema: z.ZodObject<{
             blocking?: boolean | undefined;
             matcher?: string | undefined;
             env?: Record<string, {
-                kind: "public";
-                value: string;
-            } | {
                 kind: "secret-ref";
                 key: string;
                 format?: "bearer" | "raw" | undefined;
+            } | {
+                kind: "public";
+                value: string;
             }> | undefined;
         }[]>, unknown, z.core.$ZodTypeInternals<Record<string, {
             command: string;
@@ -221,12 +248,12 @@ export declare const AgentInteractiveSessionStartSchema: z.ZodObject<{
             blocking?: boolean | undefined;
             matcher?: string | undefined;
             env?: Record<string, {
-                kind: "public";
-                value: string;
-            } | {
                 kind: "secret-ref";
                 key: string;
                 format?: "bearer" | "raw" | undefined;
+            } | {
+                kind: "public";
+                value: string;
             }> | undefined;
         }[]>, unknown>>>;
         modes: z.ZodOptional<z.ZodType<Record<string, {

package/dist/environment-profile-capabilities.d.ts

@@ -1,6 +1,24 @@
 import { z } from "zod";
 export declare const AgentProfileCapabilitiesSchema: z.ZodObject<{
     namedProfiles: z.ZodBoolean;
+    proxySecrets: z.ZodOptional<z.ZodObject<{
+        protocolVersion: z.ZodLiteral<1>;
+        supportedDrivers: z.ZodArray<z.ZodString>;
+        presentations: z.ZodArray<z.ZodEnum<{
+            basic: "basic";
+            bearer: "bearer";
+            header: "header";
+            query: "query";
+        }>>;
+        placeholderFormats: z.ZodArray<z.ZodEnum<{
+            jwt: "jwt";
+            opaque: "opaque";
+        }>>;
+        enforcement: z.ZodLiteral<"exact">;
+        transports: z.ZodTuple<[z.ZodLiteral<"https:443">], null>;
+        lifecycle: z.ZodLiteral<true>;
+        placementReceiptRequired: z.ZodLiteral<true>;
+    }, z.core.$strict>>;
     systemPrompt: z.ZodObject<{
         replace: z.ZodBoolean;
         append: z.ZodBoolean;

package/dist/environment-profile-capabilities.js

@@ -1,7 +1,9 @@
 import { z } from "zod";
+import { ProxySecretCapabilitiesSchema } from "./proxy-secrets.js";
 import { boundedIdentifierSchema, CONTRACT_MAX_ARRAY_LENGTH, } from "./contract-limits.js";
 export const AgentProfileCapabilitiesSchema = z.strictObject({
     namedProfiles: z.boolean(),
+    proxySecrets: ProxySecretCapabilitiesSchema.optional(),
     /*
      * Replacement and addition are independent provider capabilities. Require
      * both declarations so an omitted bit cannot be mistaken for support.

package/dist/environment-provider.d.ts

@@ -9,3 +9,4 @@ export * from "./environment-runtime.js";
 export * from "./environment-command-turn.js";
 export * from "./workspace-cwd.js";
 export * from "./workspace-snapshot.js";
+export * from "./proxy-secrets.js";

package/dist/environment-provider.js

@@ -9,3 +9,4 @@ export * from "./environment-runtime.js";
 export * from "./environment-command-turn.js";
 export * from "./workspace-cwd.js";
 export * from "./workspace-snapshot.js";
+export * from "./proxy-secrets.js";

package/dist/environment-runtime.d.ts

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { type ProxySecretBinding, type ProxySecretCapabilities, type ProxySecretReceipt } from "./proxy-secrets.js";
 import type { AgentRuntimeAttachments } from "./runtime-attachments.js";
 export { AgentRuntimeAttachmentsSchema, type AgentRuntimeAttachments } from "./runtime-attachments.js";
 import type { AgentCandidateArtifactPort, Sha256Digest } from "./agent-candidate.js";
@@ -123,6 +124,33 @@ export declare const AgentTurnInputSchema: z.ZodObject<{
             tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
             permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         }, z.core.$strict>>>;
+        proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            envName: z.ZodString;
+            secretRef: z.ZodObject<{
+                kind: z.ZodLiteral<"secret-ref">;
+                key: z.ZodString;
+            }, z.core.$strict>;
+            presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"bearer">;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"basic">;
+                username: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"header">;
+                name: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"query">;
+                name: z.ZodString;
+            }, z.core.$strict>], "type">;
+            placeholderFormat: z.ZodOptional<z.ZodEnum<{
+                jwt: "jwt";
+                opaque: "opaque";
+            }>>;
+            ttlSeconds: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
         permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
         mcp: z.ZodOptional<z.ZodType<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown>>>;
@@ -231,12 +259,12 @@ export declare const AgentTurnInputSchema: z.ZodObject<{
             blocking?: boolean | undefined;
             matcher?: string | undefined;
             env?: Record<string, {
-                kind: "public";
-                value: string;
-            } | {
                 kind: "secret-ref";
                 key: string;
                 format?: "bearer" | "raw" | undefined;
+            } | {
+                kind: "public";
+                value: string;
             }> | undefined;
         }[]>, unknown, z.core.$ZodTypeInternals<Record<string, {
             command: string;
@@ -244,12 +272,12 @@ export declare const AgentTurnInputSchema: z.ZodObject<{
             blocking?: boolean | undefined;
             matcher?: string | undefined;
             env?: Record<string, {
-                kind: "public";
-                value: string;
-            } | {
                 kind: "secret-ref";
                 key: string;
                 format?: "bearer" | "raw" | undefined;
+            } | {
+                kind: "public";
+                value: string;
             }> | undefined;
         }[]>, unknown>>>;
         modes: z.ZodOptional<z.ZodType<Record<string, {
@@ -494,6 +522,33 @@ export declare const AgentTurnInputSchema: z.ZodObject<{
                 tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                 permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
             }, z.core.$strict>>>;
+            proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                envName: z.ZodString;
+                secretRef: z.ZodObject<{
+                    kind: z.ZodLiteral<"secret-ref">;
+                    key: z.ZodString;
+                }, z.core.$strict>;
+                presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"bearer">;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"basic">;
+                    username: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"header">;
+                    name: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"query">;
+                    name: z.ZodString;
+                }, z.core.$strict>], "type">;
+                placeholderFormat: z.ZodOptional<z.ZodEnum<{
+                    jwt: "jwt";
+                    opaque: "opaque";
+                }>>;
+                ttlSeconds: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>>;
             permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
             tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
             mcp: z.ZodOptional<z.ZodType<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown>>>;
@@ -602,12 +657,12 @@ export declare const AgentTurnInputSchema: z.ZodObject<{
                 blocking?: boolean | undefined;
                 matcher?: string | undefined;
                 env?: Record<string, {
-                    kind: "public";
-                    value: string;
-                } | {
                     kind: "secret-ref";
                     key: string;
                     format?: "bearer" | "raw" | undefined;
+                } | {
+                    kind: "public";
+                    value: string;
                 }> | undefined;
             }[]>, unknown, z.core.$ZodTypeInternals<Record<string, {
                 command: string;
@@ -615,12 +670,12 @@ export declare const AgentTurnInputSchema: z.ZodObject<{
                 blocking?: boolean | undefined;
                 matcher?: string | undefined;
                 env?: Record<string, {
-                    kind: "public";
-                    value: string;
-                } | {
                     kind: "secret-ref";
                     key: string;
                     format?: "bearer" | "raw" | undefined;
+                } | {
+                    kind: "public";
+                    value: string;
                 }> | undefined;
             }[]>, unknown>>>;
             modes: z.ZodOptional<z.ZodType<Record<string, {
@@ -1264,6 +1319,8 @@ export interface AgentEnvironment {
     readonly creation?: AgentEnvironmentCreation;
     /** Authoritative receipt returned only by a qualified context-transfer attachment. */
     readonly contextTransferReceipt?: ContextTransferReceipt;
+    /** Trusted metadata only; dispatch requires an installed receipt, never proxy-installed. */
+    readonly proxySecretReceipt?: ProxySecretReceipt;
     /**
      * Detached metadata returned by the provider.
      * It can contain caller-authored annotations and is not authorization evidence.
@@ -1443,6 +1500,7 @@ export interface AgentEnvironmentCapabilities {
         workspaceCheckpoint?: boolean;
         /** True only when this qualified receiver verifies and restores WorkspaceRequest.snapshot. */
         workspaceSnapshot?: boolean;
+        proxySecrets?: ProxySecretCapabilities;
     };
     /** Per-surface flags for the normalized environment observation. */
     observation?: {
@@ -1481,6 +1539,24 @@ export interface AgentEnvironmentCapabilities {
 export declare const AgentEnvironmentCapabilitiesSchema: z.ZodObject<{
     profile: z.ZodObject<{
         namedProfiles: z.ZodBoolean;
+        proxySecrets: z.ZodOptional<z.ZodObject<{
+            protocolVersion: z.ZodLiteral<1>;
+            supportedDrivers: z.ZodArray<z.ZodString>;
+            presentations: z.ZodArray<z.ZodEnum<{
+                basic: "basic";
+                bearer: "bearer";
+                header: "header";
+                query: "query";
+            }>>;
+            placeholderFormats: z.ZodArray<z.ZodEnum<{
+                jwt: "jwt";
+                opaque: "opaque";
+            }>>;
+            enforcement: z.ZodLiteral<"exact">;
+            transports: z.ZodTuple<[z.ZodLiteral<"https:443">], null>;
+            lifecycle: z.ZodLiteral<true>;
+            placementReceiptRequired: z.ZodLiteral<true>;
+        }, z.core.$strict>>;
         systemPrompt: z.ZodObject<{
             replace: z.ZodBoolean;
             append: z.ZodBoolean;
@@ -1592,6 +1668,24 @@ export declare const AgentEnvironmentCapabilitiesSchema: z.ZodObject<{
         runtimeAttachments: z.ZodOptional<z.ZodObject<{
             mcp: z.ZodLiteral<true>;
         }, z.core.$strict>>;
+        proxySecrets: z.ZodOptional<z.ZodObject<{
+            protocolVersion: z.ZodLiteral<1>;
+            supportedDrivers: z.ZodArray<z.ZodString>;
+            presentations: z.ZodArray<z.ZodEnum<{
+                basic: "basic";
+                bearer: "bearer";
+                header: "header";
+                query: "query";
+            }>>;
+            placeholderFormats: z.ZodArray<z.ZodEnum<{
+                jwt: "jwt";
+                opaque: "opaque";
+            }>>;
+            enforcement: z.ZodLiteral<"exact">;
+            transports: z.ZodTuple<[z.ZodLiteral<"https:443">], null>;
+            lifecycle: z.ZodLiteral<true>;
+            placementReceiptRequired: z.ZodLiteral<true>;
+        }, z.core.$strict>>;
         workspaceCheckpoint: z.ZodOptional<z.ZodBoolean>;
         workspaceSnapshot: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>>;
@@ -1641,6 +1735,9 @@ export interface CreateAgentEnvironmentInput {
     resources?: ResourceRequest;
     env?: Record<string, string>;
     secrets?: string[] | Record<string, string>;
+    /** Same declaration as AgentProfile. Empty selections remain explicit wire values.
+     * Trusted issuer authorization is required before resolving any reference. */
+    proxySecrets?: readonly ProxySecretBinding[];
     /**
      * Outbound network policy for this environment.
      *
@@ -1715,6 +1812,11 @@ export declare function createAgentEnvironmentWithIdempotency<T extends object>(
 /** Reconstruct an existing environment; never allocates a replacement. */
 export interface AgentEnvironmentGetOptions {
     signal?: AbortSignal;
+    /** Explicit custody attachment through the existing egress lifecycle. Omission reads current
+     * custody; [] revokes custom bindings. A get never allocates a replacement environment. */
+    proxySecrets?: readonly ProxySecretBinding[];
+    expectedProxySecretGeneration?: number;
+    requireInPlace?: boolean;
     /**
      * Authorize the first turn of an accepted portable transfer. The provider looks up the exact
      * durable operation and returns its dispatch-capable environment with contextTransferReceipt.
@@ -1724,7 +1826,36 @@ export interface AgentEnvironmentGetOptions {
     contextTransfer?: ContextTransferRequest;
 }
 export declare const AgentEnvironmentGetOptionsSchema: z.ZodObject<{
+    expectedProxySecretGeneration: z.ZodOptional<z.ZodNumber>;
+    requireInPlace: z.ZodOptional<z.ZodBoolean>;
     signal: z.ZodOptional<z.ZodCustom<AbortSignal, AbortSignal>>;
+    proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+        methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+        paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+        envName: z.ZodString;
+        secretRef: z.ZodObject<{
+            kind: z.ZodLiteral<"secret-ref">;
+            key: z.ZodString;
+        }, z.core.$strict>;
+        presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"bearer">;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"basic">;
+            username: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"header">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"query">;
+            name: z.ZodString;
+        }, z.core.$strict>], "type">;
+        placeholderFormat: z.ZodOptional<z.ZodEnum<{
+            jwt: "jwt";
+            opaque: "opaque";
+        }>>;
+        ttlSeconds: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>;
     contextTransfer: z.ZodOptional<z.ZodObject<{
         operationId: z.ZodString;
         requestDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
@@ -1910,6 +2041,33 @@ export declare const AgentEnvironmentGetOptionsSchema: z.ZodObject<{
                 tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
                 permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
             }, z.core.$strict>>>;
+            proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                envName: z.ZodString;
+                secretRef: z.ZodObject<{
+                    kind: z.ZodLiteral<"secret-ref">;
+                    key: z.ZodString;
+                }, z.core.$strict>;
+                presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"bearer">;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"basic">;
+                    username: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"header">;
+                    name: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"query">;
+                    name: z.ZodString;
+                }, z.core.$strict>], "type">;
+                placeholderFormat: z.ZodOptional<z.ZodEnum<{
+                    jwt: "jwt";
+                    opaque: "opaque";
+                }>>;
+                ttlSeconds: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>>;
             permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
             tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
             mcp: z.ZodOptional<z.ZodType<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown>>>;
@@ -2018,12 +2176,12 @@ export declare const AgentEnvironmentGetOptionsSchema: z.ZodObject<{
                 blocking?: boolean | undefined;
                 matcher?: string | undefined;
                 env?: Record<string, {
-                    kind: "public";
-                    value: string;
-                } | {
                     kind: "secret-ref";
                     key: string;
                     format?: "bearer" | "raw" | undefined;
+                } | {
+                    kind: "public";
+                    value: string;
                 }> | undefined;
             }[]>, unknown, z.core.$ZodTypeInternals<Record<string, {
                 command: string;
@@ -2031,12 +2189,12 @@ export declare const AgentEnvironmentGetOptionsSchema: z.ZodObject<{
                 blocking?: boolean | undefined;
                 matcher?: string | undefined;
                 env?: Record<string, {
-                    kind: "public";
-                    value: string;
-                } | {
                     kind: "secret-ref";
                     key: string;
                     format?: "bearer" | "raw" | undefined;
+                } | {
+                    kind: "public";
+                    value: string;
                 }> | undefined;
             }[]>, unknown>>>;
             modes: z.ZodOptional<z.ZodType<Record<string, {

package/dist/environment-runtime.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { ProxySecretCapabilitiesSchema, ProxySecretsSchema, ProxySecretUpdateControlsSchema } from "./proxy-secrets.js";
 export { AgentRuntimeAttachmentsSchema } from "./runtime-attachments.js";
 import { canonicalCandidateDigest, canonicalCandidateJson, } from "./agent-candidate-schema-common.js";
 import { agentProfileSchema } from "./profile-schema.js";
@@ -246,6 +247,7 @@ export const AgentEnvironmentCapabilitiesSchema = z
         durableIdempotency: z.boolean().optional(),
         billingOwner: z.boolean().optional(),
         runtimeAttachments: z.strictObject({ mcp: z.literal(true) }).optional(),
+        proxySecrets: ProxySecretCapabilitiesSchema.optional(),
         workspaceCheckpoint: z.boolean().optional(),
         workspaceSnapshot: z.boolean().optional(),
     })
@@ -361,7 +363,8 @@ export const AgentEnvironmentCapabilitiesSchema = z
             create.billingOwner === undefined &&
             create.runtimeAttachments === undefined &&
             create.workspaceCheckpoint === undefined &&
-            create.workspaceSnapshot === undefined) {
+            create.workspaceSnapshot === undefined &&
+            create.proxySecrets === undefined) {
             refinement.addIssue({
                 code: "custom",
                 path: ["create"],
@@ -525,5 +528,15 @@ export async function createAgentEnvironmentWithIdempotency(records, input, crea
 }
 export const AgentEnvironmentGetOptionsSchema = z.strictObject({
     signal: z.custom().optional(),
+    proxySecrets: ProxySecretsSchema.optional(),
+    ...ProxySecretUpdateControlsSchema.shape,
     contextTransfer: ContextTransferRequestSchema.optional(),
+}).superRefine((options, ctx) => {
+    if (options.proxySecrets !== undefined && options.contextTransfer !== undefined) {
+        ctx.addIssue({ code: "custom", path: ["proxySecrets"], message: "context-transfer attachment cannot also change proxy custody" });
+    }
+    if (options.proxySecrets === undefined &&
+        (options.expectedProxySecretGeneration !== undefined || options.requireInPlace !== undefined)) {
+        ctx.addIssue({ code: "custom", path: ["proxySecrets"], message: "proxy update controls require an explicit proxySecrets selection" });
+    }
 });

package/dist/harness-capabilities.js

@@ -72,7 +72,7 @@ export function resolveModelProvider(modelId) {
 export function harnessProviders(harness) {
     return harnessProviderLock[harness] ?? null;
 }
-const SANDBOX_HARNESS_MATRIX_EVIDENCE = "https://github.com/tangle-network/agent-dev-container/issues/9382";
+const SANDBOX_HARNESS_MATRIX_EVIDENCE = "https://github.com/tangle-network/agent-container/issues/9382";
 /**
  * Pairs a router-backed harness cannot run, measured on production with the Router credential: one
  * prompt per pair, profile reasoning effort `medium` (2026-10-05). The same run passed pi with

package/dist/index.d.ts

@@ -45,3 +45,4 @@ export { CONTRACT_MAX_ARRAY_LENGTH, CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_
 export { AgentEnvironmentEgressPolicySchema } from "./environment-requests.js";
 export * from "./native-session-event.js";
 export * from "./learning-state.js";
+export * from "./proxy-secrets.js";

package/dist/index.js

@@ -47,3 +47,4 @@ CONTRACT_MAX_ARRAY_LENGTH, CONTRACT_MAX_CONFIDENTIAL_ATTESTATION_QUOTE_LENGTH, C
 export { AgentEnvironmentEgressPolicySchema } from "./environment-requests.js";
 export * from "./native-session-event.js";
 export * from "./learning-state.js";
+export * from "./proxy-secrets.js";

package/dist/portable-context-transfer.d.ts

@@ -210,6 +210,33 @@ export declare const ContextTransferRequestSchema: z.ZodObject<{
             tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
             permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         }, z.core.$strict>>>;
+        proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            envName: z.ZodString;
+            secretRef: z.ZodObject<{
+                kind: z.ZodLiteral<"secret-ref">;
+                key: z.ZodString;
+            }, z.core.$strict>;
+            presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"bearer">;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"basic">;
+                username: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"header">;
+                name: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"query">;
+                name: z.ZodString;
+            }, z.core.$strict>], "type">;
+            placeholderFormat: z.ZodOptional<z.ZodEnum<{
+                jwt: "jwt";
+                opaque: "opaque";
+            }>>;
+            ttlSeconds: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
         permissions: z.ZodOptional<z.ZodType<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown, z.core.$ZodTypeInternals<Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>, unknown>>>;
         tools: z.ZodOptional<z.ZodType<Record<string, boolean>, unknown, z.core.$ZodTypeInternals<Record<string, boolean>, unknown>>>;
         mcp: z.ZodOptional<z.ZodType<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown, z.core.$ZodTypeInternals<Record<string, import("./agent-profile.js").AgentProfileMcpServer>, unknown>>>;
@@ -318,12 +345,12 @@ export declare const ContextTransferRequestSchema: z.ZodObject<{
             blocking?: boolean | undefined;
             matcher?: string | undefined;
             env?: Record<string, {
-                kind: "public";
-                value: string;
-            } | {
                 kind: "secret-ref";
                 key: string;
                 format?: "bearer" | "raw" | undefined;
+            } | {
+                kind: "public";
+                value: string;
             }> | undefined;
         }[]>, unknown, z.core.$ZodTypeInternals<Record<string, {
             command: string;
@@ -331,12 +358,12 @@ export declare const ContextTransferRequestSchema: z.ZodObject<{
             blocking?: boolean | undefined;
             matcher?: string | undefined;
             env?: Record<string, {
-                kind: "public";
-                value: string;
-            } | {
                 kind: "secret-ref";
                 key: string;
                 format?: "bearer" | "raw" | undefined;
+            } | {
+                kind: "public";
+                value: string;
             }> | undefined;
         }[]>, unknown>>>;
         modes: z.ZodOptional<z.ZodType<Record<string, {

package/dist/profile-diff.d.ts

@@ -1,5 +1,5 @@
 import type { AgentProfile } from "./agent-profile.js";
-declare const agentProfileDiffPropertyAxes: readonly ["prompt", "model", "harness", "seats", "permissions", "tools", "mcp", "connections", "subagents", "resources", "hooks", "modes", "confidential", "metadata", "extensions"];
+declare const agentProfileDiffPropertyAxes: readonly ["prompt", "model", "harness", "seats", "proxySecrets", "permissions", "tools", "mcp", "connections", "subagents", "resources", "hooks", "modes", "confidential", "metadata", "extensions"];
 export type AgentProfileDiffAxis = "identity" | (typeof agentProfileDiffPropertyAxes)[number];
 export type AgentProfileRemoveList = true | readonly string[];
 export interface AgentProfilePromptRemoval {
@@ -24,6 +24,7 @@ export interface AgentProfileDiffRemoval {
     model?: AgentProfileRemoveList;
     harness?: true;
     seats?: true;
+    proxySecrets?: true;
     permissions?: AgentProfileRemoveList;
     tools?: AgentProfileRemoveList;
     mcp?: AgentProfileRemoveList;
@@ -39,8 +40,8 @@ export interface AgentProfileDiffRemoval {
 /**
  * A portable profile improvement artifact.
  *
- * `set` is an AgentProfile overlay: profile arrays are appended with the same
- * semantics as {@link mergeAgentProfiles}. `remove` deletes whole axes or named
+ * `set` follows {@link mergeAgentProfiles}: additive arrays append, while
+ * proxySecrets replaces the complete selection. `remove` deletes whole axes or named
  * entries after the overlay is applied. This keeps the optimized unit the full
  * AgentProfile instead of a benchmark-specific file mount.
  */

package/dist/profile-diff.js

@@ -5,6 +5,7 @@ const agentProfileDiffPropertyAxes = [
     "model",
     "harness",
     "seats",
+    "proxySecrets",
     "permissions",
     "tools",
     "mcp",
@@ -119,6 +120,14 @@ function replaceChangedProfileResources(baseline, candidate, remove, set) {
         }
         return;
     }
+    // Resource removals prune empty sibling arrays. Restore only the candidate's
+    // explicit empties, without copying unchanged nonempty or external resources.
+    for (const axis of agentProfileResourceDiffPropertyAxes) {
+        const value = candidate?.[axis];
+        if (Array.isArray(value) && value.length === 0) {
+            Object.assign(resourceSet, { [axis]: [] });
+        }
+    }
     remove.resources = resourceRemove;
     const canonicalCandidate = canonicalProfileValue(candidate);
     if (Object.keys(resourceSet).length > 0 ||
@@ -263,6 +272,8 @@ function applyRemoval(profile, remove) {
         delete next.harness;
     if (remove.seats !== undefined)
         delete next.seats;
+    if (remove.proxySecrets !== undefined)
+        delete next.proxySecrets;
     if (remove.permissions !== undefined) {
         setOrDelete(next, "permissions", removeKeys(next.permissions, remove.permissions));
     }