@tangle-network/agent-interface 5.2.1 → 5.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/dist/agent-candidate-code-schema.d.ts +63 -14
  2. package/dist/agent-candidate-code-schema.js +2 -1
  3. package/dist/agent-candidate-execution-plan-schema.d.ts +262 -20
  4. package/dist/agent-candidate-execution-plan-schema.js +30 -7
  5. package/dist/agent-candidate-profile-schema.d.ts +63 -8
  6. package/dist/agent-candidate-profile-schema.js +2 -0
  7. package/dist/agent-candidate-promotion-schema.d.ts +952 -100
  8. package/dist/agent-candidate-receipt-schema.d.ts +104 -8
  9. package/dist/agent-candidate-schema-common.d.ts +30 -3
  10. package/dist/agent-candidate-schema-common.js +14 -8
  11. package/dist/agent-candidate-schema.d.ts +72 -10
  12. package/dist/agent-candidate.d.ts +12 -4
  13. package/dist/agent-execution-preparation-receipt.d.ts +2 -0
  14. package/dist/agent-execution-preparation.js +4 -2
  15. package/dist/agent-profile-materialization.d.ts +1 -1
  16. package/dist/agent-profile-materialization.js +3 -0
  17. package/dist/agent-profile.d.ts +6 -0
  18. package/dist/environment-interactive-control.d.ts +10 -0
  19. package/dist/environment-interactive-start.d.ts +33 -6
  20. package/dist/environment-profile-capabilities.d.ts +18 -0
  21. package/dist/environment-profile-capabilities.js +2 -0
  22. package/dist/environment-provider.d.ts +1 -0
  23. package/dist/environment-provider.js +1 -0
  24. package/dist/environment-runtime.d.ts +176 -18
  25. package/dist/environment-runtime.js +14 -1
  26. package/dist/harness-capabilities.js +1 -1
  27. package/dist/index.d.ts +1 -0
  28. package/dist/index.js +1 -0
  29. package/dist/portable-context-transfer.d.ts +33 -6
  30. package/dist/profile-diff.d.ts +4 -3
  31. package/dist/profile-diff.js +3 -0
  32. package/dist/profile-schema.d.ts +50 -21
  33. package/dist/profile-schema.js +6 -13
  34. package/dist/proxy-secrets.d.ts +329 -0
  35. package/dist/proxy-secrets.js +183 -0
  36. package/fixtures/proxy-secret-wire-v1.json +1119 -0
  37. package/package.json +2 -1
package/dist/agent-candidate-promotion-schema.d.ts CHANGED
@@ -51,6 +51,33 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
51
51
  pi: "pi";
52
52
  prime: "prime";
53
53
  }>>;
54
+ proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
55
+ hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
56
+ methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
57
+ paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
58
+ envName: z.ZodString;
59
+ secretRef: z.ZodObject<{
60
+ kind: z.ZodLiteral<"secret-ref">;
61
+ key: z.ZodString;
62
+ }, z.core.$strict>;
63
+ presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
64
+ type: z.ZodLiteral<"bearer">;
65
+ }, z.core.$strict>, z.ZodObject<{
66
+ type: z.ZodLiteral<"basic">;
67
+ username: z.ZodString;
68
+ }, z.core.$strict>, z.ZodObject<{
69
+ type: z.ZodLiteral<"header">;
70
+ name: z.ZodString;
71
+ }, z.core.$strict>, z.ZodObject<{
72
+ type: z.ZodLiteral<"query">;
73
+ name: z.ZodString;
74
+ }, z.core.$strict>], "type">;
75
+ placeholderFormat: z.ZodOptional<z.ZodEnum<{
76
+ jwt: "jwt";
77
+ opaque: "opaque";
78
+ }>>;
79
+ ttlSeconds: z.ZodOptional<z.ZodNumber>;
80
+ }, z.core.$strict>>>;
54
81
  permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
55
82
  allow: "allow";
56
83
  ask: "ask";
@@ -529,17 +556,31 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
529
556
  }, z.core.$strict>>;
530
557
  hooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
531
558
  executable: z.ZodString;
532
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
559
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
533
560
  kind: z.ZodLiteral<"public">;
534
561
  value: z.ZodString;
535
- }, z.core.$strict>>>;
562
+ }, z.core.$strict>, z.ZodObject<{
563
+ kind: z.ZodLiteral<"secret-ref">;
564
+ key: z.ZodString;
565
+ format: z.ZodOptional<z.ZodEnum<{
566
+ bearer: "bearer";
567
+ raw: "raw";
568
+ }>>;
569
+ }, z.core.$strict>], "kind">>>;
536
570
  timeoutMs: z.ZodOptional<z.ZodNumber>;
537
571
  blocking: z.ZodOptional<z.ZodBoolean>;
538
572
  matcher: z.ZodOptional<z.ZodString>;
539
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
573
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
540
574
  kind: z.ZodLiteral<"public">;
541
575
  value: z.ZodString;
542
- }, z.core.$strict>>>;
576
+ }, z.core.$strict>, z.ZodObject<{
577
+ kind: z.ZodLiteral<"secret-ref">;
578
+ key: z.ZodString;
579
+ format: z.ZodOptional<z.ZodEnum<{
580
+ bearer: "bearer";
581
+ raw: "raw";
582
+ }>>;
583
+ }, z.core.$strict>], "kind">>>;
543
584
  }, z.core.$strict>>>>;
544
585
  modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
545
586
  description: z.ZodOptional<z.ZodString>;
@@ -610,10 +651,17 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
610
651
  launch: z.ZodDiscriminatedUnion<[z.ZodObject<{
611
652
  kind: z.ZodLiteral<"container-command">;
612
653
  executable: z.ZodString;
613
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
654
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
614
655
  kind: z.ZodLiteral<"public">;
615
656
  value: z.ZodString;
616
- }, z.core.$strict>>>;
657
+ }, z.core.$strict>, z.ZodObject<{
658
+ kind: z.ZodLiteral<"secret-ref">;
659
+ key: z.ZodString;
660
+ format: z.ZodOptional<z.ZodEnum<{
661
+ bearer: "bearer";
662
+ raw: "raw";
663
+ }>>;
664
+ }, z.core.$strict>], "kind">>>;
617
665
  }, z.core.$strict>, z.ZodObject<{
618
666
  kind: z.ZodLiteral<"candidate-entrypoint">;
619
667
  entrypoint: z.ZodString;
@@ -626,10 +674,17 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
626
674
  tsx: "tsx";
627
675
  uv: "uv";
628
676
  }>>;
629
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
677
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
630
678
  kind: z.ZodLiteral<"public">;
631
679
  value: z.ZodString;
632
- }, z.core.$strict>>>;
680
+ }, z.core.$strict>, z.ZodObject<{
681
+ kind: z.ZodLiteral<"secret-ref">;
682
+ key: z.ZodString;
683
+ format: z.ZodOptional<z.ZodEnum<{
684
+ bearer: "bearer";
685
+ raw: "raw";
686
+ }>>;
687
+ }, z.core.$strict>], "kind">>>;
633
688
  }, z.core.$strict>], "kind">;
634
689
  instructionDelivery: z.ZodDiscriminatedUnion<[z.ZodObject<{
635
690
  kind: z.ZodLiteral<"argv-append">;
@@ -647,10 +702,17 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
647
702
  }>;
648
703
  path: z.ZodString;
649
704
  }, z.core.$strict>;
650
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
705
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
651
706
  kind: z.ZodLiteral<"public">;
652
707
  value: z.ZodString;
653
- }, z.core.$strict>>>;
708
+ }, z.core.$strict>, z.ZodObject<{
709
+ kind: z.ZodLiteral<"secret-ref">;
710
+ key: z.ZodString;
711
+ format: z.ZodOptional<z.ZodEnum<{
712
+ bearer: "bearer";
713
+ raw: "raw";
714
+ }>>;
715
+ }, z.core.$strict>], "kind">>>;
654
716
  environment: z.ZodDiscriminatedUnion<[z.ZodObject<{
655
717
  kind: z.ZodLiteral<"pinned-container">;
656
718
  container: z.ZodObject<{
@@ -920,6 +982,33 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
920
982
  pi: "pi";
921
983
  prime: "prime";
922
984
  }>>;
985
+ proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
986
+ hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
987
+ methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
988
+ paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
989
+ envName: z.ZodString;
990
+ secretRef: z.ZodObject<{
991
+ kind: z.ZodLiteral<"secret-ref">;
992
+ key: z.ZodString;
993
+ }, z.core.$strict>;
994
+ presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
995
+ type: z.ZodLiteral<"bearer">;
996
+ }, z.core.$strict>, z.ZodObject<{
997
+ type: z.ZodLiteral<"basic">;
998
+ username: z.ZodString;
999
+ }, z.core.$strict>, z.ZodObject<{
1000
+ type: z.ZodLiteral<"header">;
1001
+ name: z.ZodString;
1002
+ }, z.core.$strict>, z.ZodObject<{
1003
+ type: z.ZodLiteral<"query">;
1004
+ name: z.ZodString;
1005
+ }, z.core.$strict>], "type">;
1006
+ placeholderFormat: z.ZodOptional<z.ZodEnum<{
1007
+ jwt: "jwt";
1008
+ opaque: "opaque";
1009
+ }>>;
1010
+ ttlSeconds: z.ZodOptional<z.ZodNumber>;
1011
+ }, z.core.$strict>>>;
923
1012
  permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
924
1013
  allow: "allow";
925
1014
  ask: "ask";
@@ -1398,17 +1487,31 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
1398
1487
  }, z.core.$strict>>;
1399
1488
  hooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
1400
1489
  executable: z.ZodString;
1401
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
1490
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
1402
1491
  kind: z.ZodLiteral<"public">;
1403
1492
  value: z.ZodString;
1404
- }, z.core.$strict>>>;
1493
+ }, z.core.$strict>, z.ZodObject<{
1494
+ kind: z.ZodLiteral<"secret-ref">;
1495
+ key: z.ZodString;
1496
+ format: z.ZodOptional<z.ZodEnum<{
1497
+ bearer: "bearer";
1498
+ raw: "raw";
1499
+ }>>;
1500
+ }, z.core.$strict>], "kind">>>;
1405
1501
  timeoutMs: z.ZodOptional<z.ZodNumber>;
1406
1502
  blocking: z.ZodOptional<z.ZodBoolean>;
1407
1503
  matcher: z.ZodOptional<z.ZodString>;
1408
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
1504
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
1409
1505
  kind: z.ZodLiteral<"public">;
1410
1506
  value: z.ZodString;
1411
- }, z.core.$strict>>>;
1507
+ }, z.core.$strict>, z.ZodObject<{
1508
+ kind: z.ZodLiteral<"secret-ref">;
1509
+ key: z.ZodString;
1510
+ format: z.ZodOptional<z.ZodEnum<{
1511
+ bearer: "bearer";
1512
+ raw: "raw";
1513
+ }>>;
1514
+ }, z.core.$strict>], "kind">>>;
1412
1515
  }, z.core.$strict>>>>;
1413
1516
  modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
1414
1517
  description: z.ZodOptional<z.ZodString>;
@@ -1479,10 +1582,17 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
1479
1582
  launch: z.ZodDiscriminatedUnion<[z.ZodObject<{
1480
1583
  kind: z.ZodLiteral<"container-command">;
1481
1584
  executable: z.ZodString;
1482
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
1585
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
1483
1586
  kind: z.ZodLiteral<"public">;
1484
1587
  value: z.ZodString;
1485
- }, z.core.$strict>>>;
1588
+ }, z.core.$strict>, z.ZodObject<{
1589
+ kind: z.ZodLiteral<"secret-ref">;
1590
+ key: z.ZodString;
1591
+ format: z.ZodOptional<z.ZodEnum<{
1592
+ bearer: "bearer";
1593
+ raw: "raw";
1594
+ }>>;
1595
+ }, z.core.$strict>], "kind">>>;
1486
1596
  }, z.core.$strict>, z.ZodObject<{
1487
1597
  kind: z.ZodLiteral<"candidate-entrypoint">;
1488
1598
  entrypoint: z.ZodString;
@@ -1495,10 +1605,17 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
1495
1605
  tsx: "tsx";
1496
1606
  uv: "uv";
1497
1607
  }>>;
1498
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
1608
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
1499
1609
  kind: z.ZodLiteral<"public">;
1500
1610
  value: z.ZodString;
1501
- }, z.core.$strict>>>;
1611
+ }, z.core.$strict>, z.ZodObject<{
1612
+ kind: z.ZodLiteral<"secret-ref">;
1613
+ key: z.ZodString;
1614
+ format: z.ZodOptional<z.ZodEnum<{
1615
+ bearer: "bearer";
1616
+ raw: "raw";
1617
+ }>>;
1618
+ }, z.core.$strict>], "kind">>>;
1502
1619
  }, z.core.$strict>], "kind">;
1503
1620
  instructionDelivery: z.ZodDiscriminatedUnion<[z.ZodObject<{
1504
1621
  kind: z.ZodLiteral<"argv-append">;
@@ -1516,10 +1633,17 @@ export declare const agentCandidateExperimentSchema: z.ZodObject<{
1516
1633
  }>;
1517
1634
  path: z.ZodString;
1518
1635
  }, z.core.$strict>;
1519
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
1636
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
1520
1637
  kind: z.ZodLiteral<"public">;
1521
1638
  value: z.ZodString;
1522
- }, z.core.$strict>>>;
1639
+ }, z.core.$strict>, z.ZodObject<{
1640
+ kind: z.ZodLiteral<"secret-ref">;
1641
+ key: z.ZodString;
1642
+ format: z.ZodOptional<z.ZodEnum<{
1643
+ bearer: "bearer";
1644
+ raw: "raw";
1645
+ }>>;
1646
+ }, z.core.$strict>], "kind">>>;
1523
1647
  environment: z.ZodDiscriminatedUnion<[z.ZodObject<{
1524
1648
  kind: z.ZodLiteral<"pinned-container">;
1525
1649
  container: z.ZodObject<{
@@ -2183,22 +2307,62 @@ export declare const candidateExecutionEvidenceSchema: z.ZodObject<{
2183
2307
  kind: "agent-profile-workspace-plan";
2184
2308
  digest: `sha256:${string}`;
2185
2309
  material: {
2310
+ proxySecrets?: {
2311
+ hosts: readonly string[];
2312
+ methods?: readonly string[] | undefined;
2313
+ paths?: readonly string[] | undefined;
2314
+ envName: string;
2315
+ secretRef: {
2316
+ kind: "secret-ref";
2317
+ key: string;
2318
+ };
2319
+ presentation: {
2320
+ type: "bearer";
2321
+ } | {
2322
+ type: "basic";
2323
+ username: string;
2324
+ } | {
2325
+ type: "header";
2326
+ name: string;
2327
+ } | {
2328
+ type: "query";
2329
+ name: string;
2330
+ };
2331
+ placeholderFormat?: "jwt" | "opaque" | undefined;
2332
+ ttlSeconds?: number | undefined;
2333
+ }[] | undefined;
2186
2334
  sourceProfileDigest: `sha256:${string}`;
2187
2335
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
2188
2336
  files: {
2189
2337
  relPath: string;
2190
2338
  mode: number;
2191
2339
  contentSha256: `sha256:${string}`;
2340
+ secretSlots?: {
2341
+ path: (string | number)[];
2342
+ ref: {
2343
+ kind: "secret-ref";
2344
+ key: string;
2345
+ format?: "bearer" | "raw" | undefined;
2346
+ };
2347
+ }[] | undefined;
2192
2348
  root?: "agent" | undefined;
2193
2349
  }[];
2194
2350
  env: Record<string, {
2351
+ kind: "secret-ref";
2352
+ key: string;
2353
+ format?: "bearer" | "raw" | undefined;
2354
+ } | {
2195
2355
  kind: "public";
2196
2356
  value: string;
2197
2357
  }>;
2198
- flags: {
2358
+ flags: ({
2359
+ kind: "secret-ref";
2360
+ key: string;
2361
+ format?: "bearer" | "raw" | undefined;
2362
+ } | {
2199
2363
  kind: "public";
2200
2364
  value: string;
2201
- }[];
2365
+ })[];
2202
2366
  systemPrompt?: {
2203
2367
  kind: "public";
2204
2368
  value: string;
@@ -2239,22 +2403,62 @@ export declare const candidateExecutionEvidenceSchema: z.ZodObject<{
2239
2403
  kind: "agent-profile-workspace-plan";
2240
2404
  digest: `sha256:${string}`;
2241
2405
  material: {
2406
+ proxySecrets?: {
2407
+ hosts: readonly string[];
2408
+ methods?: readonly string[] | undefined;
2409
+ paths?: readonly string[] | undefined;
2410
+ envName: string;
2411
+ secretRef: {
2412
+ kind: "secret-ref";
2413
+ key: string;
2414
+ };
2415
+ presentation: {
2416
+ type: "bearer";
2417
+ } | {
2418
+ type: "basic";
2419
+ username: string;
2420
+ } | {
2421
+ type: "header";
2422
+ name: string;
2423
+ } | {
2424
+ type: "query";
2425
+ name: string;
2426
+ };
2427
+ placeholderFormat?: "jwt" | "opaque" | undefined;
2428
+ ttlSeconds?: number | undefined;
2429
+ }[] | undefined;
2242
2430
  sourceProfileDigest: `sha256:${string}`;
2243
2431
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
2244
2432
  files: {
2245
2433
  relPath: string;
2246
2434
  mode: number;
2247
2435
  contentSha256: `sha256:${string}`;
2436
+ secretSlots?: {
2437
+ path: (string | number)[];
2438
+ ref: {
2439
+ kind: "secret-ref";
2440
+ key: string;
2441
+ format?: "bearer" | "raw" | undefined;
2442
+ };
2443
+ }[] | undefined;
2248
2444
  root?: "agent" | undefined;
2249
2445
  }[];
2250
2446
  env: Record<string, {
2447
+ kind: "secret-ref";
2448
+ key: string;
2449
+ format?: "bearer" | "raw" | undefined;
2450
+ } | {
2251
2451
  kind: "public";
2252
2452
  value: string;
2253
2453
  }>;
2254
- flags: {
2454
+ flags: ({
2455
+ kind: "secret-ref";
2456
+ key: string;
2457
+ format?: "bearer" | "raw" | undefined;
2458
+ } | {
2255
2459
  kind: "public";
2256
2460
  value: string;
2257
- }[];
2461
+ })[];
2258
2462
  systemPrompt?: {
2259
2463
  kind: "public";
2260
2464
  value: string;
@@ -2456,11 +2660,19 @@ export declare const candidateExecutionEvidenceSchema: z.ZodObject<{
2456
2660
  };
2457
2661
  launch: {
2458
2662
  executable: string;
2459
- args: {
2663
+ args: ({
2664
+ kind: "secret-ref";
2665
+ key: string;
2666
+ format?: "bearer" | "raw" | undefined;
2667
+ } | {
2460
2668
  kind: "public";
2461
2669
  value: string;
2462
- }[];
2670
+ })[];
2463
2671
  env: Record<string, {
2672
+ kind: "secret-ref";
2673
+ key: string;
2674
+ format?: "bearer" | "raw" | undefined;
2675
+ } | {
2464
2676
  kind: "public";
2465
2677
  value: string;
2466
2678
  }>;
@@ -2720,11 +2932,19 @@ export declare const candidateExecutionEvidenceSchema: z.ZodObject<{
2720
2932
  };
2721
2933
  launch: {
2722
2934
  executable: string;
2723
- args: {
2935
+ args: ({
2936
+ kind: "secret-ref";
2937
+ key: string;
2938
+ format?: "bearer" | "raw" | undefined;
2939
+ } | {
2724
2940
  kind: "public";
2725
2941
  value: string;
2726
- }[];
2942
+ })[];
2727
2943
  env: Record<string, {
2944
+ kind: "secret-ref";
2945
+ key: string;
2946
+ format?: "bearer" | "raw" | undefined;
2947
+ } | {
2728
2948
  kind: "public";
2729
2949
  value: string;
2730
2950
  }>;
@@ -3889,6 +4109,33 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
3889
4109
  pi: "pi";
3890
4110
  prime: "prime";
3891
4111
  }>>;
4112
+ proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
4113
+ hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
4114
+ methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
4115
+ paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
4116
+ envName: z.ZodString;
4117
+ secretRef: z.ZodObject<{
4118
+ kind: z.ZodLiteral<"secret-ref">;
4119
+ key: z.ZodString;
4120
+ }, z.core.$strict>;
4121
+ presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
4122
+ type: z.ZodLiteral<"bearer">;
4123
+ }, z.core.$strict>, z.ZodObject<{
4124
+ type: z.ZodLiteral<"basic">;
4125
+ username: z.ZodString;
4126
+ }, z.core.$strict>, z.ZodObject<{
4127
+ type: z.ZodLiteral<"header">;
4128
+ name: z.ZodString;
4129
+ }, z.core.$strict>, z.ZodObject<{
4130
+ type: z.ZodLiteral<"query">;
4131
+ name: z.ZodString;
4132
+ }, z.core.$strict>], "type">;
4133
+ placeholderFormat: z.ZodOptional<z.ZodEnum<{
4134
+ jwt: "jwt";
4135
+ opaque: "opaque";
4136
+ }>>;
4137
+ ttlSeconds: z.ZodOptional<z.ZodNumber>;
4138
+ }, z.core.$strict>>>;
3892
4139
  permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
3893
4140
  allow: "allow";
3894
4141
  ask: "ask";
@@ -4367,17 +4614,31 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
4367
4614
  }, z.core.$strict>>;
4368
4615
  hooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
4369
4616
  executable: z.ZodString;
4370
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
4617
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
4371
4618
  kind: z.ZodLiteral<"public">;
4372
4619
  value: z.ZodString;
4373
- }, z.core.$strict>>>;
4620
+ }, z.core.$strict>, z.ZodObject<{
4621
+ kind: z.ZodLiteral<"secret-ref">;
4622
+ key: z.ZodString;
4623
+ format: z.ZodOptional<z.ZodEnum<{
4624
+ bearer: "bearer";
4625
+ raw: "raw";
4626
+ }>>;
4627
+ }, z.core.$strict>], "kind">>>;
4374
4628
  timeoutMs: z.ZodOptional<z.ZodNumber>;
4375
4629
  blocking: z.ZodOptional<z.ZodBoolean>;
4376
4630
  matcher: z.ZodOptional<z.ZodString>;
4377
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
4631
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
4378
4632
  kind: z.ZodLiteral<"public">;
4379
4633
  value: z.ZodString;
4380
- }, z.core.$strict>>>;
4634
+ }, z.core.$strict>, z.ZodObject<{
4635
+ kind: z.ZodLiteral<"secret-ref">;
4636
+ key: z.ZodString;
4637
+ format: z.ZodOptional<z.ZodEnum<{
4638
+ bearer: "bearer";
4639
+ raw: "raw";
4640
+ }>>;
4641
+ }, z.core.$strict>], "kind">>>;
4381
4642
  }, z.core.$strict>>>>;
4382
4643
  modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
4383
4644
  description: z.ZodOptional<z.ZodString>;
@@ -4448,10 +4709,17 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
4448
4709
  launch: z.ZodDiscriminatedUnion<[z.ZodObject<{
4449
4710
  kind: z.ZodLiteral<"container-command">;
4450
4711
  executable: z.ZodString;
4451
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
4712
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
4452
4713
  kind: z.ZodLiteral<"public">;
4453
4714
  value: z.ZodString;
4454
- }, z.core.$strict>>>;
4715
+ }, z.core.$strict>, z.ZodObject<{
4716
+ kind: z.ZodLiteral<"secret-ref">;
4717
+ key: z.ZodString;
4718
+ format: z.ZodOptional<z.ZodEnum<{
4719
+ bearer: "bearer";
4720
+ raw: "raw";
4721
+ }>>;
4722
+ }, z.core.$strict>], "kind">>>;
4455
4723
  }, z.core.$strict>, z.ZodObject<{
4456
4724
  kind: z.ZodLiteral<"candidate-entrypoint">;
4457
4725
  entrypoint: z.ZodString;
@@ -4464,10 +4732,17 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
4464
4732
  tsx: "tsx";
4465
4733
  uv: "uv";
4466
4734
  }>>;
4467
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
4735
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
4468
4736
  kind: z.ZodLiteral<"public">;
4469
4737
  value: z.ZodString;
4470
- }, z.core.$strict>>>;
4738
+ }, z.core.$strict>, z.ZodObject<{
4739
+ kind: z.ZodLiteral<"secret-ref">;
4740
+ key: z.ZodString;
4741
+ format: z.ZodOptional<z.ZodEnum<{
4742
+ bearer: "bearer";
4743
+ raw: "raw";
4744
+ }>>;
4745
+ }, z.core.$strict>], "kind">>>;
4471
4746
  }, z.core.$strict>], "kind">;
4472
4747
  instructionDelivery: z.ZodDiscriminatedUnion<[z.ZodObject<{
4473
4748
  kind: z.ZodLiteral<"argv-append">;
@@ -4485,10 +4760,17 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
4485
4760
  }>;
4486
4761
  path: z.ZodString;
4487
4762
  }, z.core.$strict>;
4488
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
4763
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
4489
4764
  kind: z.ZodLiteral<"public">;
4490
4765
  value: z.ZodString;
4491
- }, z.core.$strict>>>;
4766
+ }, z.core.$strict>, z.ZodObject<{
4767
+ kind: z.ZodLiteral<"secret-ref">;
4768
+ key: z.ZodString;
4769
+ format: z.ZodOptional<z.ZodEnum<{
4770
+ bearer: "bearer";
4771
+ raw: "raw";
4772
+ }>>;
4773
+ }, z.core.$strict>], "kind">>>;
4492
4774
  environment: z.ZodDiscriminatedUnion<[z.ZodObject<{
4493
4775
  kind: z.ZodLiteral<"pinned-container">;
4494
4776
  container: z.ZodObject<{
@@ -4758,6 +5040,33 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
4758
5040
  pi: "pi";
4759
5041
  prime: "prime";
4760
5042
  }>>;
5043
+ proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
5044
+ hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
5045
+ methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
5046
+ paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
5047
+ envName: z.ZodString;
5048
+ secretRef: z.ZodObject<{
5049
+ kind: z.ZodLiteral<"secret-ref">;
5050
+ key: z.ZodString;
5051
+ }, z.core.$strict>;
5052
+ presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
5053
+ type: z.ZodLiteral<"bearer">;
5054
+ }, z.core.$strict>, z.ZodObject<{
5055
+ type: z.ZodLiteral<"basic">;
5056
+ username: z.ZodString;
5057
+ }, z.core.$strict>, z.ZodObject<{
5058
+ type: z.ZodLiteral<"header">;
5059
+ name: z.ZodString;
5060
+ }, z.core.$strict>, z.ZodObject<{
5061
+ type: z.ZodLiteral<"query">;
5062
+ name: z.ZodString;
5063
+ }, z.core.$strict>], "type">;
5064
+ placeholderFormat: z.ZodOptional<z.ZodEnum<{
5065
+ jwt: "jwt";
5066
+ opaque: "opaque";
5067
+ }>>;
5068
+ ttlSeconds: z.ZodOptional<z.ZodNumber>;
5069
+ }, z.core.$strict>>>;
4761
5070
  permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
4762
5071
  allow: "allow";
4763
5072
  ask: "ask";
@@ -5236,17 +5545,31 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
5236
5545
  }, z.core.$strict>>;
5237
5546
  hooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
5238
5547
  executable: z.ZodString;
5239
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
5548
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
5240
5549
  kind: z.ZodLiteral<"public">;
5241
5550
  value: z.ZodString;
5242
- }, z.core.$strict>>>;
5551
+ }, z.core.$strict>, z.ZodObject<{
5552
+ kind: z.ZodLiteral<"secret-ref">;
5553
+ key: z.ZodString;
5554
+ format: z.ZodOptional<z.ZodEnum<{
5555
+ bearer: "bearer";
5556
+ raw: "raw";
5557
+ }>>;
5558
+ }, z.core.$strict>], "kind">>>;
5243
5559
  timeoutMs: z.ZodOptional<z.ZodNumber>;
5244
5560
  blocking: z.ZodOptional<z.ZodBoolean>;
5245
5561
  matcher: z.ZodOptional<z.ZodString>;
5246
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
5562
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
5247
5563
  kind: z.ZodLiteral<"public">;
5248
5564
  value: z.ZodString;
5249
- }, z.core.$strict>>>;
5565
+ }, z.core.$strict>, z.ZodObject<{
5566
+ kind: z.ZodLiteral<"secret-ref">;
5567
+ key: z.ZodString;
5568
+ format: z.ZodOptional<z.ZodEnum<{
5569
+ bearer: "bearer";
5570
+ raw: "raw";
5571
+ }>>;
5572
+ }, z.core.$strict>], "kind">>>;
5250
5573
  }, z.core.$strict>>>>;
5251
5574
  modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
5252
5575
  description: z.ZodOptional<z.ZodString>;
@@ -5317,10 +5640,17 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
5317
5640
  launch: z.ZodDiscriminatedUnion<[z.ZodObject<{
5318
5641
  kind: z.ZodLiteral<"container-command">;
5319
5642
  executable: z.ZodString;
5320
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
5643
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
5321
5644
  kind: z.ZodLiteral<"public">;
5322
5645
  value: z.ZodString;
5323
- }, z.core.$strict>>>;
5646
+ }, z.core.$strict>, z.ZodObject<{
5647
+ kind: z.ZodLiteral<"secret-ref">;
5648
+ key: z.ZodString;
5649
+ format: z.ZodOptional<z.ZodEnum<{
5650
+ bearer: "bearer";
5651
+ raw: "raw";
5652
+ }>>;
5653
+ }, z.core.$strict>], "kind">>>;
5324
5654
  }, z.core.$strict>, z.ZodObject<{
5325
5655
  kind: z.ZodLiteral<"candidate-entrypoint">;
5326
5656
  entrypoint: z.ZodString;
@@ -5333,10 +5663,17 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
5333
5663
  tsx: "tsx";
5334
5664
  uv: "uv";
5335
5665
  }>>;
5336
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
5666
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
5337
5667
  kind: z.ZodLiteral<"public">;
5338
5668
  value: z.ZodString;
5339
- }, z.core.$strict>>>;
5669
+ }, z.core.$strict>, z.ZodObject<{
5670
+ kind: z.ZodLiteral<"secret-ref">;
5671
+ key: z.ZodString;
5672
+ format: z.ZodOptional<z.ZodEnum<{
5673
+ bearer: "bearer";
5674
+ raw: "raw";
5675
+ }>>;
5676
+ }, z.core.$strict>], "kind">>>;
5340
5677
  }, z.core.$strict>], "kind">;
5341
5678
  instructionDelivery: z.ZodDiscriminatedUnion<[z.ZodObject<{
5342
5679
  kind: z.ZodLiteral<"argv-append">;
@@ -5354,10 +5691,17 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
5354
5691
  }>;
5355
5692
  path: z.ZodString;
5356
5693
  }, z.core.$strict>;
5357
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
5694
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
5358
5695
  kind: z.ZodLiteral<"public">;
5359
5696
  value: z.ZodString;
5360
- }, z.core.$strict>>>;
5697
+ }, z.core.$strict>, z.ZodObject<{
5698
+ kind: z.ZodLiteral<"secret-ref">;
5699
+ key: z.ZodString;
5700
+ format: z.ZodOptional<z.ZodEnum<{
5701
+ bearer: "bearer";
5702
+ raw: "raw";
5703
+ }>>;
5704
+ }, z.core.$strict>], "kind">>>;
5361
5705
  environment: z.ZodDiscriminatedUnion<[z.ZodObject<{
5362
5706
  kind: z.ZodLiteral<"pinned-container">;
5363
5707
  container: z.ZodObject<{
@@ -6022,22 +6366,62 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
6022
6366
  kind: "agent-profile-workspace-plan";
6023
6367
  digest: `sha256:${string}`;
6024
6368
  material: {
6369
+ proxySecrets?: {
6370
+ hosts: readonly string[];
6371
+ methods?: readonly string[] | undefined;
6372
+ paths?: readonly string[] | undefined;
6373
+ envName: string;
6374
+ secretRef: {
6375
+ kind: "secret-ref";
6376
+ key: string;
6377
+ };
6378
+ presentation: {
6379
+ type: "bearer";
6380
+ } | {
6381
+ type: "basic";
6382
+ username: string;
6383
+ } | {
6384
+ type: "header";
6385
+ name: string;
6386
+ } | {
6387
+ type: "query";
6388
+ name: string;
6389
+ };
6390
+ placeholderFormat?: "jwt" | "opaque" | undefined;
6391
+ ttlSeconds?: number | undefined;
6392
+ }[] | undefined;
6025
6393
  sourceProfileDigest: `sha256:${string}`;
6026
6394
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
6027
6395
  files: {
6028
6396
  relPath: string;
6029
6397
  mode: number;
6030
6398
  contentSha256: `sha256:${string}`;
6399
+ secretSlots?: {
6400
+ path: (string | number)[];
6401
+ ref: {
6402
+ kind: "secret-ref";
6403
+ key: string;
6404
+ format?: "bearer" | "raw" | undefined;
6405
+ };
6406
+ }[] | undefined;
6031
6407
  root?: "agent" | undefined;
6032
6408
  }[];
6033
6409
  env: Record<string, {
6410
+ kind: "secret-ref";
6411
+ key: string;
6412
+ format?: "bearer" | "raw" | undefined;
6413
+ } | {
6034
6414
  kind: "public";
6035
6415
  value: string;
6036
6416
  }>;
6037
- flags: {
6417
+ flags: ({
6418
+ kind: "secret-ref";
6419
+ key: string;
6420
+ format?: "bearer" | "raw" | undefined;
6421
+ } | {
6038
6422
  kind: "public";
6039
6423
  value: string;
6040
- }[];
6424
+ })[];
6041
6425
  systemPrompt?: {
6042
6426
  kind: "public";
6043
6427
  value: string;
@@ -6078,22 +6462,62 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
6078
6462
  kind: "agent-profile-workspace-plan";
6079
6463
  digest: `sha256:${string}`;
6080
6464
  material: {
6465
+ proxySecrets?: {
6466
+ hosts: readonly string[];
6467
+ methods?: readonly string[] | undefined;
6468
+ paths?: readonly string[] | undefined;
6469
+ envName: string;
6470
+ secretRef: {
6471
+ kind: "secret-ref";
6472
+ key: string;
6473
+ };
6474
+ presentation: {
6475
+ type: "bearer";
6476
+ } | {
6477
+ type: "basic";
6478
+ username: string;
6479
+ } | {
6480
+ type: "header";
6481
+ name: string;
6482
+ } | {
6483
+ type: "query";
6484
+ name: string;
6485
+ };
6486
+ placeholderFormat?: "jwt" | "opaque" | undefined;
6487
+ ttlSeconds?: number | undefined;
6488
+ }[] | undefined;
6081
6489
  sourceProfileDigest: `sha256:${string}`;
6082
6490
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
6083
6491
  files: {
6084
6492
  relPath: string;
6085
6493
  mode: number;
6086
6494
  contentSha256: `sha256:${string}`;
6495
+ secretSlots?: {
6496
+ path: (string | number)[];
6497
+ ref: {
6498
+ kind: "secret-ref";
6499
+ key: string;
6500
+ format?: "bearer" | "raw" | undefined;
6501
+ };
6502
+ }[] | undefined;
6087
6503
  root?: "agent" | undefined;
6088
6504
  }[];
6089
6505
  env: Record<string, {
6506
+ kind: "secret-ref";
6507
+ key: string;
6508
+ format?: "bearer" | "raw" | undefined;
6509
+ } | {
6090
6510
  kind: "public";
6091
6511
  value: string;
6092
6512
  }>;
6093
- flags: {
6513
+ flags: ({
6514
+ kind: "secret-ref";
6515
+ key: string;
6516
+ format?: "bearer" | "raw" | undefined;
6517
+ } | {
6094
6518
  kind: "public";
6095
6519
  value: string;
6096
- }[];
6520
+ })[];
6097
6521
  systemPrompt?: {
6098
6522
  kind: "public";
6099
6523
  value: string;
@@ -6295,11 +6719,19 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
6295
6719
  };
6296
6720
  launch: {
6297
6721
  executable: string;
6298
- args: {
6722
+ args: ({
6723
+ kind: "secret-ref";
6724
+ key: string;
6725
+ format?: "bearer" | "raw" | undefined;
6726
+ } | {
6299
6727
  kind: "public";
6300
6728
  value: string;
6301
- }[];
6729
+ })[];
6302
6730
  env: Record<string, {
6731
+ kind: "secret-ref";
6732
+ key: string;
6733
+ format?: "bearer" | "raw" | undefined;
6734
+ } | {
6303
6735
  kind: "public";
6304
6736
  value: string;
6305
6737
  }>;
@@ -6559,11 +6991,19 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
6559
6991
  };
6560
6992
  launch: {
6561
6993
  executable: string;
6562
- args: {
6994
+ args: ({
6995
+ kind: "secret-ref";
6996
+ key: string;
6997
+ format?: "bearer" | "raw" | undefined;
6998
+ } | {
6563
6999
  kind: "public";
6564
7000
  value: string;
6565
- }[];
7001
+ })[];
6566
7002
  env: Record<string, {
7003
+ kind: "secret-ref";
7004
+ key: string;
7005
+ format?: "bearer" | "raw" | undefined;
7006
+ } | {
6567
7007
  kind: "public";
6568
7008
  value: string;
6569
7009
  }>;
@@ -7563,22 +8003,62 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
7563
8003
  kind: "agent-profile-workspace-plan";
7564
8004
  digest: `sha256:${string}`;
7565
8005
  material: {
8006
+ proxySecrets?: {
8007
+ hosts: readonly string[];
8008
+ methods?: readonly string[] | undefined;
8009
+ paths?: readonly string[] | undefined;
8010
+ envName: string;
8011
+ secretRef: {
8012
+ kind: "secret-ref";
8013
+ key: string;
8014
+ };
8015
+ presentation: {
8016
+ type: "bearer";
8017
+ } | {
8018
+ type: "basic";
8019
+ username: string;
8020
+ } | {
8021
+ type: "header";
8022
+ name: string;
8023
+ } | {
8024
+ type: "query";
8025
+ name: string;
8026
+ };
8027
+ placeholderFormat?: "jwt" | "opaque" | undefined;
8028
+ ttlSeconds?: number | undefined;
8029
+ }[] | undefined;
7566
8030
  sourceProfileDigest: `sha256:${string}`;
7567
8031
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
7568
8032
  files: {
7569
8033
  relPath: string;
7570
8034
  mode: number;
7571
8035
  contentSha256: `sha256:${string}`;
8036
+ secretSlots?: {
8037
+ path: (string | number)[];
8038
+ ref: {
8039
+ kind: "secret-ref";
8040
+ key: string;
8041
+ format?: "bearer" | "raw" | undefined;
8042
+ };
8043
+ }[] | undefined;
7572
8044
  root?: "agent" | undefined;
7573
8045
  }[];
7574
8046
  env: Record<string, {
8047
+ kind: "secret-ref";
8048
+ key: string;
8049
+ format?: "bearer" | "raw" | undefined;
8050
+ } | {
7575
8051
  kind: "public";
7576
8052
  value: string;
7577
8053
  }>;
7578
- flags: {
8054
+ flags: ({
8055
+ kind: "secret-ref";
8056
+ key: string;
8057
+ format?: "bearer" | "raw" | undefined;
8058
+ } | {
7579
8059
  kind: "public";
7580
8060
  value: string;
7581
- }[];
8061
+ })[];
7582
8062
  systemPrompt?: {
7583
8063
  kind: "public";
7584
8064
  value: string;
@@ -7619,22 +8099,62 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
7619
8099
  kind: "agent-profile-workspace-plan";
7620
8100
  digest: `sha256:${string}`;
7621
8101
  material: {
8102
+ proxySecrets?: {
8103
+ hosts: readonly string[];
8104
+ methods?: readonly string[] | undefined;
8105
+ paths?: readonly string[] | undefined;
8106
+ envName: string;
8107
+ secretRef: {
8108
+ kind: "secret-ref";
8109
+ key: string;
8110
+ };
8111
+ presentation: {
8112
+ type: "bearer";
8113
+ } | {
8114
+ type: "basic";
8115
+ username: string;
8116
+ } | {
8117
+ type: "header";
8118
+ name: string;
8119
+ } | {
8120
+ type: "query";
8121
+ name: string;
8122
+ };
8123
+ placeholderFormat?: "jwt" | "opaque" | undefined;
8124
+ ttlSeconds?: number | undefined;
8125
+ }[] | undefined;
7622
8126
  sourceProfileDigest: `sha256:${string}`;
7623
8127
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
7624
8128
  files: {
7625
8129
  relPath: string;
7626
8130
  mode: number;
7627
8131
  contentSha256: `sha256:${string}`;
8132
+ secretSlots?: {
8133
+ path: (string | number)[];
8134
+ ref: {
8135
+ kind: "secret-ref";
8136
+ key: string;
8137
+ format?: "bearer" | "raw" | undefined;
8138
+ };
8139
+ }[] | undefined;
7628
8140
  root?: "agent" | undefined;
7629
8141
  }[];
7630
8142
  env: Record<string, {
8143
+ kind: "secret-ref";
8144
+ key: string;
8145
+ format?: "bearer" | "raw" | undefined;
8146
+ } | {
7631
8147
  kind: "public";
7632
8148
  value: string;
7633
8149
  }>;
7634
- flags: {
8150
+ flags: ({
8151
+ kind: "secret-ref";
8152
+ key: string;
8153
+ format?: "bearer" | "raw" | undefined;
8154
+ } | {
7635
8155
  kind: "public";
7636
8156
  value: string;
7637
- }[];
8157
+ })[];
7638
8158
  systemPrompt?: {
7639
8159
  kind: "public";
7640
8160
  value: string;
@@ -7836,11 +8356,19 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
7836
8356
  };
7837
8357
  launch: {
7838
8358
  executable: string;
7839
- args: {
8359
+ args: ({
8360
+ kind: "secret-ref";
8361
+ key: string;
8362
+ format?: "bearer" | "raw" | undefined;
8363
+ } | {
7840
8364
  kind: "public";
7841
8365
  value: string;
7842
- }[];
8366
+ })[];
7843
8367
  env: Record<string, {
8368
+ kind: "secret-ref";
8369
+ key: string;
8370
+ format?: "bearer" | "raw" | undefined;
8371
+ } | {
7844
8372
  kind: "public";
7845
8373
  value: string;
7846
8374
  }>;
@@ -8100,11 +8628,19 @@ export declare const agentImprovementMeasuredComparisonSchema: z.ZodObject<{
8100
8628
  };
8101
8629
  launch: {
8102
8630
  executable: string;
8103
- args: {
8631
+ args: ({
8632
+ kind: "secret-ref";
8633
+ key: string;
8634
+ format?: "bearer" | "raw" | undefined;
8635
+ } | {
8104
8636
  kind: "public";
8105
8637
  value: string;
8106
- }[];
8638
+ })[];
8107
8639
  env: Record<string, {
8640
+ kind: "secret-ref";
8641
+ key: string;
8642
+ format?: "bearer" | "raw" | undefined;
8643
+ } | {
8108
8644
  kind: "public";
8109
8645
  value: string;
8110
8646
  }>;
@@ -9301,6 +9837,33 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
9301
9837
  pi: "pi";
9302
9838
  prime: "prime";
9303
9839
  }>>;
9840
+ proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
9841
+ hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
9842
+ methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
9843
+ paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
9844
+ envName: z.ZodString;
9845
+ secretRef: z.ZodObject<{
9846
+ kind: z.ZodLiteral<"secret-ref">;
9847
+ key: z.ZodString;
9848
+ }, z.core.$strict>;
9849
+ presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
9850
+ type: z.ZodLiteral<"bearer">;
9851
+ }, z.core.$strict>, z.ZodObject<{
9852
+ type: z.ZodLiteral<"basic">;
9853
+ username: z.ZodString;
9854
+ }, z.core.$strict>, z.ZodObject<{
9855
+ type: z.ZodLiteral<"header">;
9856
+ name: z.ZodString;
9857
+ }, z.core.$strict>, z.ZodObject<{
9858
+ type: z.ZodLiteral<"query">;
9859
+ name: z.ZodString;
9860
+ }, z.core.$strict>], "type">;
9861
+ placeholderFormat: z.ZodOptional<z.ZodEnum<{
9862
+ jwt: "jwt";
9863
+ opaque: "opaque";
9864
+ }>>;
9865
+ ttlSeconds: z.ZodOptional<z.ZodNumber>;
9866
+ }, z.core.$strict>>>;
9304
9867
  permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
9305
9868
  allow: "allow";
9306
9869
  ask: "ask";
@@ -9779,17 +10342,31 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
9779
10342
  }, z.core.$strict>>;
9780
10343
  hooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
9781
10344
  executable: z.ZodString;
9782
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
10345
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
9783
10346
  kind: z.ZodLiteral<"public">;
9784
10347
  value: z.ZodString;
9785
- }, z.core.$strict>>>;
10348
+ }, z.core.$strict>, z.ZodObject<{
10349
+ kind: z.ZodLiteral<"secret-ref">;
10350
+ key: z.ZodString;
10351
+ format: z.ZodOptional<z.ZodEnum<{
10352
+ bearer: "bearer";
10353
+ raw: "raw";
10354
+ }>>;
10355
+ }, z.core.$strict>], "kind">>>;
9786
10356
  timeoutMs: z.ZodOptional<z.ZodNumber>;
9787
10357
  blocking: z.ZodOptional<z.ZodBoolean>;
9788
10358
  matcher: z.ZodOptional<z.ZodString>;
9789
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
10359
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
9790
10360
  kind: z.ZodLiteral<"public">;
9791
10361
  value: z.ZodString;
9792
- }, z.core.$strict>>>;
10362
+ }, z.core.$strict>, z.ZodObject<{
10363
+ kind: z.ZodLiteral<"secret-ref">;
10364
+ key: z.ZodString;
10365
+ format: z.ZodOptional<z.ZodEnum<{
10366
+ bearer: "bearer";
10367
+ raw: "raw";
10368
+ }>>;
10369
+ }, z.core.$strict>], "kind">>>;
9793
10370
  }, z.core.$strict>>>>;
9794
10371
  modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
9795
10372
  description: z.ZodOptional<z.ZodString>;
@@ -9860,10 +10437,17 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
9860
10437
  launch: z.ZodDiscriminatedUnion<[z.ZodObject<{
9861
10438
  kind: z.ZodLiteral<"container-command">;
9862
10439
  executable: z.ZodString;
9863
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
10440
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
9864
10441
  kind: z.ZodLiteral<"public">;
9865
10442
  value: z.ZodString;
9866
- }, z.core.$strict>>>;
10443
+ }, z.core.$strict>, z.ZodObject<{
10444
+ kind: z.ZodLiteral<"secret-ref">;
10445
+ key: z.ZodString;
10446
+ format: z.ZodOptional<z.ZodEnum<{
10447
+ bearer: "bearer";
10448
+ raw: "raw";
10449
+ }>>;
10450
+ }, z.core.$strict>], "kind">>>;
9867
10451
  }, z.core.$strict>, z.ZodObject<{
9868
10452
  kind: z.ZodLiteral<"candidate-entrypoint">;
9869
10453
  entrypoint: z.ZodString;
@@ -9876,10 +10460,17 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
9876
10460
  tsx: "tsx";
9877
10461
  uv: "uv";
9878
10462
  }>>;
9879
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
10463
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
9880
10464
  kind: z.ZodLiteral<"public">;
9881
10465
  value: z.ZodString;
9882
- }, z.core.$strict>>>;
10466
+ }, z.core.$strict>, z.ZodObject<{
10467
+ kind: z.ZodLiteral<"secret-ref">;
10468
+ key: z.ZodString;
10469
+ format: z.ZodOptional<z.ZodEnum<{
10470
+ bearer: "bearer";
10471
+ raw: "raw";
10472
+ }>>;
10473
+ }, z.core.$strict>], "kind">>>;
9883
10474
  }, z.core.$strict>], "kind">;
9884
10475
  instructionDelivery: z.ZodDiscriminatedUnion<[z.ZodObject<{
9885
10476
  kind: z.ZodLiteral<"argv-append">;
@@ -9897,10 +10488,17 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
9897
10488
  }>;
9898
10489
  path: z.ZodString;
9899
10490
  }, z.core.$strict>;
9900
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
10491
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
9901
10492
  kind: z.ZodLiteral<"public">;
9902
10493
  value: z.ZodString;
9903
- }, z.core.$strict>>>;
10494
+ }, z.core.$strict>, z.ZodObject<{
10495
+ kind: z.ZodLiteral<"secret-ref">;
10496
+ key: z.ZodString;
10497
+ format: z.ZodOptional<z.ZodEnum<{
10498
+ bearer: "bearer";
10499
+ raw: "raw";
10500
+ }>>;
10501
+ }, z.core.$strict>], "kind">>>;
9904
10502
  environment: z.ZodDiscriminatedUnion<[z.ZodObject<{
9905
10503
  kind: z.ZodLiteral<"pinned-container">;
9906
10504
  container: z.ZodObject<{
@@ -10170,6 +10768,33 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
10170
10768
  pi: "pi";
10171
10769
  prime: "prime";
10172
10770
  }>>;
10771
+ proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
10772
+ hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
10773
+ methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
10774
+ paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
10775
+ envName: z.ZodString;
10776
+ secretRef: z.ZodObject<{
10777
+ kind: z.ZodLiteral<"secret-ref">;
10778
+ key: z.ZodString;
10779
+ }, z.core.$strict>;
10780
+ presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
10781
+ type: z.ZodLiteral<"bearer">;
10782
+ }, z.core.$strict>, z.ZodObject<{
10783
+ type: z.ZodLiteral<"basic">;
10784
+ username: z.ZodString;
10785
+ }, z.core.$strict>, z.ZodObject<{
10786
+ type: z.ZodLiteral<"header">;
10787
+ name: z.ZodString;
10788
+ }, z.core.$strict>, z.ZodObject<{
10789
+ type: z.ZodLiteral<"query">;
10790
+ name: z.ZodString;
10791
+ }, z.core.$strict>], "type">;
10792
+ placeholderFormat: z.ZodOptional<z.ZodEnum<{
10793
+ jwt: "jwt";
10794
+ opaque: "opaque";
10795
+ }>>;
10796
+ ttlSeconds: z.ZodOptional<z.ZodNumber>;
10797
+ }, z.core.$strict>>>;
10173
10798
  permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
10174
10799
  allow: "allow";
10175
10800
  ask: "ask";
@@ -10648,17 +11273,31 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
10648
11273
  }, z.core.$strict>>;
10649
11274
  hooks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
10650
11275
  executable: z.ZodString;
10651
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
11276
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
10652
11277
  kind: z.ZodLiteral<"public">;
10653
11278
  value: z.ZodString;
10654
- }, z.core.$strict>>>;
11279
+ }, z.core.$strict>, z.ZodObject<{
11280
+ kind: z.ZodLiteral<"secret-ref">;
11281
+ key: z.ZodString;
11282
+ format: z.ZodOptional<z.ZodEnum<{
11283
+ bearer: "bearer";
11284
+ raw: "raw";
11285
+ }>>;
11286
+ }, z.core.$strict>], "kind">>>;
10655
11287
  timeoutMs: z.ZodOptional<z.ZodNumber>;
10656
11288
  blocking: z.ZodOptional<z.ZodBoolean>;
10657
11289
  matcher: z.ZodOptional<z.ZodString>;
10658
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
11290
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
10659
11291
  kind: z.ZodLiteral<"public">;
10660
11292
  value: z.ZodString;
10661
- }, z.core.$strict>>>;
11293
+ }, z.core.$strict>, z.ZodObject<{
11294
+ kind: z.ZodLiteral<"secret-ref">;
11295
+ key: z.ZodString;
11296
+ format: z.ZodOptional<z.ZodEnum<{
11297
+ bearer: "bearer";
11298
+ raw: "raw";
11299
+ }>>;
11300
+ }, z.core.$strict>], "kind">>>;
10662
11301
  }, z.core.$strict>>>>;
10663
11302
  modes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
10664
11303
  description: z.ZodOptional<z.ZodString>;
@@ -10729,10 +11368,17 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
10729
11368
  launch: z.ZodDiscriminatedUnion<[z.ZodObject<{
10730
11369
  kind: z.ZodLiteral<"container-command">;
10731
11370
  executable: z.ZodString;
10732
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
11371
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
10733
11372
  kind: z.ZodLiteral<"public">;
10734
11373
  value: z.ZodString;
10735
- }, z.core.$strict>>>;
11374
+ }, z.core.$strict>, z.ZodObject<{
11375
+ kind: z.ZodLiteral<"secret-ref">;
11376
+ key: z.ZodString;
11377
+ format: z.ZodOptional<z.ZodEnum<{
11378
+ bearer: "bearer";
11379
+ raw: "raw";
11380
+ }>>;
11381
+ }, z.core.$strict>], "kind">>>;
10736
11382
  }, z.core.$strict>, z.ZodObject<{
10737
11383
  kind: z.ZodLiteral<"candidate-entrypoint">;
10738
11384
  entrypoint: z.ZodString;
@@ -10745,10 +11391,17 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
10745
11391
  tsx: "tsx";
10746
11392
  uv: "uv";
10747
11393
  }>>;
10748
- args: z.ZodOptional<z.ZodArray<z.ZodObject<{
11394
+ args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
10749
11395
  kind: z.ZodLiteral<"public">;
10750
11396
  value: z.ZodString;
10751
- }, z.core.$strict>>>;
11397
+ }, z.core.$strict>, z.ZodObject<{
11398
+ kind: z.ZodLiteral<"secret-ref">;
11399
+ key: z.ZodString;
11400
+ format: z.ZodOptional<z.ZodEnum<{
11401
+ bearer: "bearer";
11402
+ raw: "raw";
11403
+ }>>;
11404
+ }, z.core.$strict>], "kind">>>;
10752
11405
  }, z.core.$strict>], "kind">;
10753
11406
  instructionDelivery: z.ZodDiscriminatedUnion<[z.ZodObject<{
10754
11407
  kind: z.ZodLiteral<"argv-append">;
@@ -10766,10 +11419,17 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
10766
11419
  }>;
10767
11420
  path: z.ZodString;
10768
11421
  }, z.core.$strict>;
10769
- env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
11422
+ env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
10770
11423
  kind: z.ZodLiteral<"public">;
10771
11424
  value: z.ZodString;
10772
- }, z.core.$strict>>>;
11425
+ }, z.core.$strict>, z.ZodObject<{
11426
+ kind: z.ZodLiteral<"secret-ref">;
11427
+ key: z.ZodString;
11428
+ format: z.ZodOptional<z.ZodEnum<{
11429
+ bearer: "bearer";
11430
+ raw: "raw";
11431
+ }>>;
11432
+ }, z.core.$strict>], "kind">>>;
10773
11433
  environment: z.ZodDiscriminatedUnion<[z.ZodObject<{
10774
11434
  kind: z.ZodLiteral<"pinned-container">;
10775
11435
  container: z.ZodObject<{
@@ -11434,22 +12094,62 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
11434
12094
  kind: "agent-profile-workspace-plan";
11435
12095
  digest: `sha256:${string}`;
11436
12096
  material: {
12097
+ proxySecrets?: {
12098
+ hosts: readonly string[];
12099
+ methods?: readonly string[] | undefined;
12100
+ paths?: readonly string[] | undefined;
12101
+ envName: string;
12102
+ secretRef: {
12103
+ kind: "secret-ref";
12104
+ key: string;
12105
+ };
12106
+ presentation: {
12107
+ type: "bearer";
12108
+ } | {
12109
+ type: "basic";
12110
+ username: string;
12111
+ } | {
12112
+ type: "header";
12113
+ name: string;
12114
+ } | {
12115
+ type: "query";
12116
+ name: string;
12117
+ };
12118
+ placeholderFormat?: "jwt" | "opaque" | undefined;
12119
+ ttlSeconds?: number | undefined;
12120
+ }[] | undefined;
11437
12121
  sourceProfileDigest: `sha256:${string}`;
11438
12122
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
11439
12123
  files: {
11440
12124
  relPath: string;
11441
12125
  mode: number;
11442
12126
  contentSha256: `sha256:${string}`;
12127
+ secretSlots?: {
12128
+ path: (string | number)[];
12129
+ ref: {
12130
+ kind: "secret-ref";
12131
+ key: string;
12132
+ format?: "bearer" | "raw" | undefined;
12133
+ };
12134
+ }[] | undefined;
11443
12135
  root?: "agent" | undefined;
11444
12136
  }[];
11445
12137
  env: Record<string, {
12138
+ kind: "secret-ref";
12139
+ key: string;
12140
+ format?: "bearer" | "raw" | undefined;
12141
+ } | {
11446
12142
  kind: "public";
11447
12143
  value: string;
11448
12144
  }>;
11449
- flags: {
12145
+ flags: ({
12146
+ kind: "secret-ref";
12147
+ key: string;
12148
+ format?: "bearer" | "raw" | undefined;
12149
+ } | {
11450
12150
  kind: "public";
11451
12151
  value: string;
11452
- }[];
12152
+ })[];
11453
12153
  systemPrompt?: {
11454
12154
  kind: "public";
11455
12155
  value: string;
@@ -11490,22 +12190,62 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
11490
12190
  kind: "agent-profile-workspace-plan";
11491
12191
  digest: `sha256:${string}`;
11492
12192
  material: {
12193
+ proxySecrets?: {
12194
+ hosts: readonly string[];
12195
+ methods?: readonly string[] | undefined;
12196
+ paths?: readonly string[] | undefined;
12197
+ envName: string;
12198
+ secretRef: {
12199
+ kind: "secret-ref";
12200
+ key: string;
12201
+ };
12202
+ presentation: {
12203
+ type: "bearer";
12204
+ } | {
12205
+ type: "basic";
12206
+ username: string;
12207
+ } | {
12208
+ type: "header";
12209
+ name: string;
12210
+ } | {
12211
+ type: "query";
12212
+ name: string;
12213
+ };
12214
+ placeholderFormat?: "jwt" | "opaque" | undefined;
12215
+ ttlSeconds?: number | undefined;
12216
+ }[] | undefined;
11493
12217
  sourceProfileDigest: `sha256:${string}`;
11494
12218
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
11495
12219
  files: {
11496
12220
  relPath: string;
11497
12221
  mode: number;
11498
12222
  contentSha256: `sha256:${string}`;
12223
+ secretSlots?: {
12224
+ path: (string | number)[];
12225
+ ref: {
12226
+ kind: "secret-ref";
12227
+ key: string;
12228
+ format?: "bearer" | "raw" | undefined;
12229
+ };
12230
+ }[] | undefined;
11499
12231
  root?: "agent" | undefined;
11500
12232
  }[];
11501
12233
  env: Record<string, {
12234
+ kind: "secret-ref";
12235
+ key: string;
12236
+ format?: "bearer" | "raw" | undefined;
12237
+ } | {
11502
12238
  kind: "public";
11503
12239
  value: string;
11504
12240
  }>;
11505
- flags: {
12241
+ flags: ({
12242
+ kind: "secret-ref";
12243
+ key: string;
12244
+ format?: "bearer" | "raw" | undefined;
12245
+ } | {
11506
12246
  kind: "public";
11507
12247
  value: string;
11508
- }[];
12248
+ })[];
11509
12249
  systemPrompt?: {
11510
12250
  kind: "public";
11511
12251
  value: string;
@@ -11707,11 +12447,19 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
11707
12447
  };
11708
12448
  launch: {
11709
12449
  executable: string;
11710
- args: {
12450
+ args: ({
12451
+ kind: "secret-ref";
12452
+ key: string;
12453
+ format?: "bearer" | "raw" | undefined;
12454
+ } | {
11711
12455
  kind: "public";
11712
12456
  value: string;
11713
- }[];
12457
+ })[];
11714
12458
  env: Record<string, {
12459
+ kind: "secret-ref";
12460
+ key: string;
12461
+ format?: "bearer" | "raw" | undefined;
12462
+ } | {
11715
12463
  kind: "public";
11716
12464
  value: string;
11717
12465
  }>;
@@ -11971,11 +12719,19 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
11971
12719
  };
11972
12720
  launch: {
11973
12721
  executable: string;
11974
- args: {
12722
+ args: ({
12723
+ kind: "secret-ref";
12724
+ key: string;
12725
+ format?: "bearer" | "raw" | undefined;
12726
+ } | {
11975
12727
  kind: "public";
11976
12728
  value: string;
11977
- }[];
12729
+ })[];
11978
12730
  env: Record<string, {
12731
+ kind: "secret-ref";
12732
+ key: string;
12733
+ format?: "bearer" | "raw" | undefined;
12734
+ } | {
11979
12735
  kind: "public";
11980
12736
  value: string;
11981
12737
  }>;
@@ -12975,22 +13731,62 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
12975
13731
  kind: "agent-profile-workspace-plan";
12976
13732
  digest: `sha256:${string}`;
12977
13733
  material: {
13734
+ proxySecrets?: {
13735
+ hosts: readonly string[];
13736
+ methods?: readonly string[] | undefined;
13737
+ paths?: readonly string[] | undefined;
13738
+ envName: string;
13739
+ secretRef: {
13740
+ kind: "secret-ref";
13741
+ key: string;
13742
+ };
13743
+ presentation: {
13744
+ type: "bearer";
13745
+ } | {
13746
+ type: "basic";
13747
+ username: string;
13748
+ } | {
13749
+ type: "header";
13750
+ name: string;
13751
+ } | {
13752
+ type: "query";
13753
+ name: string;
13754
+ };
13755
+ placeholderFormat?: "jwt" | "opaque" | undefined;
13756
+ ttlSeconds?: number | undefined;
13757
+ }[] | undefined;
12978
13758
  sourceProfileDigest: `sha256:${string}`;
12979
13759
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
12980
13760
  files: {
12981
13761
  relPath: string;
12982
13762
  mode: number;
12983
13763
  contentSha256: `sha256:${string}`;
13764
+ secretSlots?: {
13765
+ path: (string | number)[];
13766
+ ref: {
13767
+ kind: "secret-ref";
13768
+ key: string;
13769
+ format?: "bearer" | "raw" | undefined;
13770
+ };
13771
+ }[] | undefined;
12984
13772
  root?: "agent" | undefined;
12985
13773
  }[];
12986
13774
  env: Record<string, {
13775
+ kind: "secret-ref";
13776
+ key: string;
13777
+ format?: "bearer" | "raw" | undefined;
13778
+ } | {
12987
13779
  kind: "public";
12988
13780
  value: string;
12989
13781
  }>;
12990
- flags: {
13782
+ flags: ({
13783
+ kind: "secret-ref";
13784
+ key: string;
13785
+ format?: "bearer" | "raw" | undefined;
13786
+ } | {
12991
13787
  kind: "public";
12992
13788
  value: string;
12993
- }[];
13789
+ })[];
12994
13790
  systemPrompt?: {
12995
13791
  kind: "public";
12996
13792
  value: string;
@@ -13031,22 +13827,62 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
13031
13827
  kind: "agent-profile-workspace-plan";
13032
13828
  digest: `sha256:${string}`;
13033
13829
  material: {
13830
+ proxySecrets?: {
13831
+ hosts: readonly string[];
13832
+ methods?: readonly string[] | undefined;
13833
+ paths?: readonly string[] | undefined;
13834
+ envName: string;
13835
+ secretRef: {
13836
+ kind: "secret-ref";
13837
+ key: string;
13838
+ };
13839
+ presentation: {
13840
+ type: "bearer";
13841
+ } | {
13842
+ type: "basic";
13843
+ username: string;
13844
+ } | {
13845
+ type: "header";
13846
+ name: string;
13847
+ } | {
13848
+ type: "query";
13849
+ name: string;
13850
+ };
13851
+ placeholderFormat?: "jwt" | "opaque" | undefined;
13852
+ ttlSeconds?: number | undefined;
13853
+ }[] | undefined;
13034
13854
  sourceProfileDigest: `sha256:${string}`;
13035
13855
  harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
13036
13856
  files: {
13037
13857
  relPath: string;
13038
13858
  mode: number;
13039
13859
  contentSha256: `sha256:${string}`;
13860
+ secretSlots?: {
13861
+ path: (string | number)[];
13862
+ ref: {
13863
+ kind: "secret-ref";
13864
+ key: string;
13865
+ format?: "bearer" | "raw" | undefined;
13866
+ };
13867
+ }[] | undefined;
13040
13868
  root?: "agent" | undefined;
13041
13869
  }[];
13042
13870
  env: Record<string, {
13871
+ kind: "secret-ref";
13872
+ key: string;
13873
+ format?: "bearer" | "raw" | undefined;
13874
+ } | {
13043
13875
  kind: "public";
13044
13876
  value: string;
13045
13877
  }>;
13046
- flags: {
13878
+ flags: ({
13879
+ kind: "secret-ref";
13880
+ key: string;
13881
+ format?: "bearer" | "raw" | undefined;
13882
+ } | {
13047
13883
  kind: "public";
13048
13884
  value: string;
13049
- }[];
13885
+ })[];
13050
13886
  systemPrompt?: {
13051
13887
  kind: "public";
13052
13888
  value: string;
@@ -13248,11 +14084,19 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
13248
14084
  };
13249
14085
  launch: {
13250
14086
  executable: string;
13251
- args: {
14087
+ args: ({
14088
+ kind: "secret-ref";
14089
+ key: string;
14090
+ format?: "bearer" | "raw" | undefined;
14091
+ } | {
13252
14092
  kind: "public";
13253
14093
  value: string;
13254
- }[];
14094
+ })[];
13255
14095
  env: Record<string, {
14096
+ kind: "secret-ref";
14097
+ key: string;
14098
+ format?: "bearer" | "raw" | undefined;
14099
+ } | {
13256
14100
  kind: "public";
13257
14101
  value: string;
13258
14102
  }>;
@@ -13512,11 +14356,19 @@ export declare const agentImprovementProposalSchema: z.ZodObject<{
13512
14356
  };
13513
14357
  launch: {
13514
14358
  executable: string;
13515
- args: {
14359
+ args: ({
14360
+ kind: "secret-ref";
14361
+ key: string;
14362
+ format?: "bearer" | "raw" | undefined;
14363
+ } | {
13516
14364
  kind: "public";
13517
14365
  value: string;
13518
- }[];
14366
+ })[];
13519
14367
  env: Record<string, {
14368
+ kind: "secret-ref";
14369
+ key: string;
14370
+ format?: "bearer" | "raw" | undefined;
14371
+ } | {
13520
14372
  kind: "public";
13521
14373
  value: string;
13522
14374
  }>;