@tangle-network/agent-interface 5.2.1 → 5.3.1

package/dist/agent-candidate-code-schema.d.ts

@@ -98,10 +98,17 @@ export declare const agentCandidateWorkingDirectorySchema: z.ZodObject<{
 export declare const agentCandidateContainerLaunchSchema: z.ZodObject<{
     kind: z.ZodLiteral<"container-command">;
     executable: z.ZodString;
-    args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"public">;
         value: z.ZodString;
-    }, z.core.$strict>>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"secret-ref">;
+        key: z.ZodString;
+        format: z.ZodOptional<z.ZodEnum<{
+            bearer: "bearer";
+            raw: "raw";
+        }>>;
+    }, z.core.$strict>], "kind">>>;
 }, z.core.$strict>;
 export declare const agentCandidateEntrypointLaunchSchema: z.ZodObject<{
     kind: z.ZodLiteral<"candidate-entrypoint">;
@@ -115,18 +122,32 @@ export declare const agentCandidateEntrypointLaunchSchema: z.ZodObject<{
         tsx: "tsx";
         uv: "uv";
     }>>;
-    args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"public">;
         value: z.ZodString;
-    }, z.core.$strict>>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"secret-ref">;
+        key: z.ZodString;
+        format: z.ZodOptional<z.ZodEnum<{
+            bearer: "bearer";
+            raw: "raw";
+        }>>;
+    }, z.core.$strict>], "kind">>>;
 }, z.core.$strict>;
 export declare const agentCandidateLaunchSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"container-command">;
     executable: z.ZodString;
-    args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"public">;
         value: z.ZodString;
-    }, z.core.$strict>>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"secret-ref">;
+        key: z.ZodString;
+        format: z.ZodOptional<z.ZodEnum<{
+            bearer: "bearer";
+            raw: "raw";
+        }>>;
+    }, z.core.$strict>], "kind">>>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"candidate-entrypoint">;
     entrypoint: z.ZodString;
@@ -139,10 +160,17 @@ export declare const agentCandidateLaunchSchema: z.ZodDiscriminatedUnion<[z.ZodO
         tsx: "tsx";
         uv: "uv";
     }>>;
-    args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"public">;
         value: z.ZodString;
-    }, z.core.$strict>>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"secret-ref">;
+        key: z.ZodString;
+        format: z.ZodOptional<z.ZodEnum<{
+            bearer: "bearer";
+            raw: "raw";
+        }>>;
+    }, z.core.$strict>], "kind">>>;
 }, z.core.$strict>], "kind">;
 export declare const agentCandidateInstructionDeliverySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"argv-append">;
@@ -176,10 +204,17 @@ export declare const agentCandidateExecutionSchema: z.ZodObject<{
     launch: z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"container-command">;
         executable: z.ZodString;
-        args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"public">;
             value: z.ZodString;
-        }, z.core.$strict>>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"secret-ref">;
+            key: z.ZodString;
+            format: z.ZodOptional<z.ZodEnum<{
+                bearer: "bearer";
+                raw: "raw";
+            }>>;
+        }, z.core.$strict>], "kind">>>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"candidate-entrypoint">;
         entrypoint: z.ZodString;
@@ -192,10 +227,17 @@ export declare const agentCandidateExecutionSchema: z.ZodObject<{
             tsx: "tsx";
             uv: "uv";
         }>>;
-        args: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        args: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"public">;
             value: z.ZodString;
-        }, z.core.$strict>>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"secret-ref">;
+            key: z.ZodString;
+            format: z.ZodOptional<z.ZodEnum<{
+                bearer: "bearer";
+                raw: "raw";
+            }>>;
+        }, z.core.$strict>], "kind">>>;
     }, z.core.$strict>], "kind">;
     instructionDelivery: z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"argv-append">;
@@ -213,10 +255,17 @@ export declare const agentCandidateExecutionSchema: z.ZodObject<{
         }>;
         path: z.ZodString;
     }, z.core.$strict>;
-    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"public">;
         value: z.ZodString;
-    }, z.core.$strict>>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"secret-ref">;
+        key: z.ZodString;
+        format: z.ZodOptional<z.ZodEnum<{
+            bearer: "bearer";
+            raw: "raw";
+        }>>;
+    }, z.core.$strict>], "kind">>>;
     environment: z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"pinned-container">;
         container: z.ZodObject<{

package/dist/agent-candidate-code-schema.js

@@ -177,7 +177,8 @@ export const agentCandidateExecutionSchema = z
     const requiresPath = execution.launch.kind === "container-command"
         ? !execution.launch.executable.startsWith("/")
         : execution.launch.interpreter !== undefined;
-    if (requiresPath && !execution.env?.PATH?.value.trim()) {
+    const executablePath = execution.env?.PATH;
+    if (requiresPath && (executablePath?.kind !== "public" || !executablePath.value.trim())) {
         ctx.addIssue({
             code: "custom",
             path: ["env", "PATH"],

package/dist/agent-candidate-execution-plan-schema.d.ts

@@ -65,6 +65,33 @@ export declare const agentCandidateRetryPolicySchema: z.ZodEnum<{
     "pre-model-infrastructure-only": "pre-model-infrastructure-only";
 }>;
 export declare const agentCandidateProfilePlanMaterialSchema: z.ZodObject<{
+    proxySecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        hosts: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+        methods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+        paths: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+        envName: z.ZodString;
+        secretRef: z.ZodObject<{
+            kind: z.ZodLiteral<"secret-ref">;
+            key: z.ZodString;
+        }, z.core.$strict>;
+        presentation: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"bearer">;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"basic">;
+            username: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"header">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"query">;
+            name: z.ZodString;
+        }, z.core.$strict>], "type">;
+        placeholderFormat: z.ZodOptional<z.ZodEnum<{
+            jwt: "jwt";
+            opaque: "opaque";
+        }>>;
+        ttlSeconds: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>;
     sourceProfileDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
     harness: z.ZodEnum<{
         acp: "acp";
@@ -88,16 +115,41 @@ export declare const agentCandidateProfilePlanMaterialSchema: z.ZodObject<{
         relPath: z.ZodString;
         mode: z.ZodNumber;
         contentSha256: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+        secretSlots: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+            ref: z.ZodObject<{
+                kind: z.ZodLiteral<"secret-ref">;
+                key: z.ZodString;
+                format: z.ZodOptional<z.ZodEnum<{
+                    bearer: "bearer";
+                    raw: "raw";
+                }>>;
+            }, z.core.$strict>;
+        }, z.core.$strict>>>;
         root: z.ZodOptional<z.ZodLiteral<"agent">>;
     }, z.core.$strict>>;
-    env: z.ZodRecord<z.ZodString, z.ZodObject<{
+    env: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"public">;
         value: z.ZodString;
-    }, z.core.$strict>>;
-    flags: z.ZodArray<z.ZodObject<{
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"secret-ref">;
+        key: z.ZodString;
+        format: z.ZodOptional<z.ZodEnum<{
+            bearer: "bearer";
+            raw: "raw";
+        }>>;
+    }, z.core.$strict>], "kind">>;
+    flags: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"public">;
         value: z.ZodString;
-    }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"secret-ref">;
+        key: z.ZodString;
+        format: z.ZodOptional<z.ZodEnum<{
+            bearer: "bearer";
+            raw: "raw";
+        }>>;
+    }, z.core.$strict>], "kind">>;
     systemPrompt: z.ZodOptional<z.ZodObject<{
         kind: z.ZodLiteral<"public">;
         value: z.ZodString;
@@ -448,14 +500,28 @@ export declare const agentCandidateExecutionPlanMaterialSchema: z.ZodObject<{
     }, z.core.$strict>;
     launch: z.ZodObject<{
         executable: z.ZodString;
-        args: z.ZodArray<z.ZodObject<{
+        args: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"public">;
             value: z.ZodString;
-        }, z.core.$strict>>;
-        env: z.ZodRecord<z.ZodString, z.ZodObject<{
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"secret-ref">;
+            key: z.ZodString;
+            format: z.ZodOptional<z.ZodEnum<{
+                bearer: "bearer";
+                raw: "raw";
+            }>>;
+        }, z.core.$strict>], "kind">>;
+        env: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"public">;
             value: z.ZodString;
-        }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"secret-ref">;
+            key: z.ZodString;
+            format: z.ZodOptional<z.ZodEnum<{
+                bearer: "bearer";
+                raw: "raw";
+            }>>;
+        }, z.core.$strict>], "kind">>;
         cwd: z.ZodObject<{
             workspace: z.ZodEnum<{
                 candidate: "candidate";
@@ -567,22 +633,62 @@ export declare const agentCandidateProfilePlanEvidenceSchema: z.ZodObject<{
     kind: z.ZodLiteral<"agent-profile-workspace-plan">;
     digest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
     material: z.ZodType<{
+        proxySecrets?: {
+            hosts: readonly string[];
+            methods?: readonly string[] | undefined;
+            paths?: readonly string[] | undefined;
+            envName: string;
+            secretRef: {
+                kind: "secret-ref";
+                key: string;
+            };
+            presentation: {
+                type: "bearer";
+            } | {
+                type: "basic";
+                username: string;
+            } | {
+                type: "header";
+                name: string;
+            } | {
+                type: "query";
+                name: string;
+            };
+            placeholderFormat?: "jwt" | "opaque" | undefined;
+            ttlSeconds?: number | undefined;
+        }[] | undefined;
         sourceProfileDigest: `sha256:${string}`;
         harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
         files: {
             relPath: string;
             mode: number;
             contentSha256: `sha256:${string}`;
+            secretSlots?: {
+                path: (string | number)[];
+                ref: {
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                };
+            }[] | undefined;
             root?: "agent" | undefined;
         }[];
         env: Record<string, {
+            kind: "secret-ref";
+            key: string;
+            format?: "bearer" | "raw" | undefined;
+        } | {
             kind: "public";
             value: string;
         }>;
-        flags: {
+        flags: ({
+            kind: "secret-ref";
+            key: string;
+            format?: "bearer" | "raw" | undefined;
+        } | {
             kind: "public";
             value: string;
-        }[];
+        })[];
         systemPrompt?: {
             kind: "public";
             value: string;
@@ -596,22 +702,62 @@ export declare const agentCandidateProfilePlanEvidenceSchema: z.ZodObject<{
             reason: string;
         }[];
     }, unknown, z.core.$ZodTypeInternals<{
+        proxySecrets?: {
+            hosts: readonly string[];
+            methods?: readonly string[] | undefined;
+            paths?: readonly string[] | undefined;
+            envName: string;
+            secretRef: {
+                kind: "secret-ref";
+                key: string;
+            };
+            presentation: {
+                type: "bearer";
+            } | {
+                type: "basic";
+                username: string;
+            } | {
+                type: "header";
+                name: string;
+            } | {
+                type: "query";
+                name: string;
+            };
+            placeholderFormat?: "jwt" | "opaque" | undefined;
+            ttlSeconds?: number | undefined;
+        }[] | undefined;
         sourceProfileDigest: `sha256:${string}`;
         harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
         files: {
             relPath: string;
             mode: number;
             contentSha256: `sha256:${string}`;
+            secretSlots?: {
+                path: (string | number)[];
+                ref: {
+                    kind: "secret-ref";
+                    key: string;
+                    format?: "bearer" | "raw" | undefined;
+                };
+            }[] | undefined;
             root?: "agent" | undefined;
         }[];
         env: Record<string, {
+            kind: "secret-ref";
+            key: string;
+            format?: "bearer" | "raw" | undefined;
+        } | {
             kind: "public";
             value: string;
         }>;
-        flags: {
+        flags: ({
+            kind: "secret-ref";
+            key: string;
+            format?: "bearer" | "raw" | undefined;
+        } | {
             kind: "public";
             value: string;
-        }[];
+        })[];
         systemPrompt?: {
             kind: "public";
             value: string;
@@ -654,22 +800,62 @@ export declare const agentCandidateProfileActivationSchema: z.ZodObject<{
         kind: "agent-profile-workspace-plan";
         digest: `sha256:${string}`;
         material: {
+            proxySecrets?: {
+                hosts: readonly string[];
+                methods?: readonly string[] | undefined;
+                paths?: readonly string[] | undefined;
+                envName: string;
+                secretRef: {
+                    kind: "secret-ref";
+                    key: string;
+                };
+                presentation: {
+                    type: "bearer";
+                } | {
+                    type: "basic";
+                    username: string;
+                } | {
+                    type: "header";
+                    name: string;
+                } | {
+                    type: "query";
+                    name: string;
+                };
+                placeholderFormat?: "jwt" | "opaque" | undefined;
+                ttlSeconds?: number | undefined;
+            }[] | undefined;
             sourceProfileDigest: `sha256:${string}`;
             harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
             files: {
                 relPath: string;
                 mode: number;
                 contentSha256: `sha256:${string}`;
+                secretSlots?: {
+                    path: (string | number)[];
+                    ref: {
+                        kind: "secret-ref";
+                        key: string;
+                        format?: "bearer" | "raw" | undefined;
+                    };
+                }[] | undefined;
                 root?: "agent" | undefined;
             }[];
             env: Record<string, {
+                kind: "secret-ref";
+                key: string;
+                format?: "bearer" | "raw" | undefined;
+            } | {
                 kind: "public";
                 value: string;
             }>;
-            flags: {
+            flags: ({
+                kind: "secret-ref";
+                key: string;
+                format?: "bearer" | "raw" | undefined;
+            } | {
                 kind: "public";
                 value: string;
-            }[];
+            })[];
             systemPrompt?: {
                 kind: "public";
                 value: string;
@@ -710,22 +896,62 @@ export declare const agentCandidateProfileActivationSchema: z.ZodObject<{
         kind: "agent-profile-workspace-plan";
         digest: `sha256:${string}`;
         material: {
+            proxySecrets?: {
+                hosts: readonly string[];
+                methods?: readonly string[] | undefined;
+                paths?: readonly string[] | undefined;
+                envName: string;
+                secretRef: {
+                    kind: "secret-ref";
+                    key: string;
+                };
+                presentation: {
+                    type: "bearer";
+                } | {
+                    type: "basic";
+                    username: string;
+                } | {
+                    type: "header";
+                    name: string;
+                } | {
+                    type: "query";
+                    name: string;
+                };
+                placeholderFormat?: "jwt" | "opaque" | undefined;
+                ttlSeconds?: number | undefined;
+            }[] | undefined;
             sourceProfileDigest: `sha256:${string}`;
             harness: "acp" | "amp" | "claude-code" | "cli-base" | "codex" | "cursor" | "factory-droids" | "forge" | "gemini" | "hermes" | "kimi-code" | "nanoclaw" | "openclaw" | "opencode" | "pi" | "prime";
             files: {
                 relPath: string;
                 mode: number;
                 contentSha256: `sha256:${string}`;
+                secretSlots?: {
+                    path: (string | number)[];
+                    ref: {
+                        kind: "secret-ref";
+                        key: string;
+                        format?: "bearer" | "raw" | undefined;
+                    };
+                }[] | undefined;
                 root?: "agent" | undefined;
             }[];
             env: Record<string, {
+                kind: "secret-ref";
+                key: string;
+                format?: "bearer" | "raw" | undefined;
+            } | {
                 kind: "public";
                 value: string;
             }>;
-            flags: {
+            flags: ({
+                kind: "secret-ref";
+                key: string;
+                format?: "bearer" | "raw" | undefined;
+            } | {
                 kind: "public";
                 value: string;
-            }[];
+            })[];
             systemPrompt?: {
                 kind: "public";
                 value: string;
@@ -927,11 +1153,19 @@ export declare const agentCandidateExecutionPlanEvidenceSchema: z.ZodObject<{
         };
         launch: {
             executable: string;
-            args: {
+            args: ({
+                kind: "secret-ref";
+                key: string;
+                format?: "bearer" | "raw" | undefined;
+            } | {
                 kind: "public";
                 value: string;
-            }[];
+            })[];
             env: Record<string, {
+                kind: "secret-ref";
+                key: string;
+                format?: "bearer" | "raw" | undefined;
+            } | {
                 kind: "public";
                 value: string;
             }>;
@@ -1191,11 +1425,19 @@ export declare const agentCandidateExecutionPlanEvidenceSchema: z.ZodObject<{
         };
         launch: {
             executable: string;
-            args: {
+            args: ({
+                kind: "secret-ref";
+                key: string;
+                format?: "bearer" | "raw" | undefined;
+            } | {
                 kind: "public";
                 value: string;
-            }[];
+            })[];
             env: Record<string, {
+                kind: "secret-ref";
+                key: string;
+                format?: "bearer" | "raw" | undefined;
+            } | {
                 kind: "public";
                 value: string;
             }>;

package/dist/agent-candidate-execution-plan-schema.js

@@ -3,7 +3,8 @@ import { z } from "zod";
 import { agentCandidateArtifactRefSchema, agentCandidateCapturedArtifactSchema, agentCandidateWorkspaceSnapshotEvidenceSchema, } from "./agent-candidate-artifact-schema.js";
 import { agentCandidateContainerSchema, agentCandidateInstructionDeliverySchema, agentCandidateWorkingDirectorySchema, } from "./agent-candidate-code-schema.js";
 import { reasoningEffortSchema } from "./profile-schema.js";
-import { addDuplicateIssues, agentCandidateConfigValueSchema, agentCandidateMediaTypeSchema, environmentConfigSchema, gitObjectSchema, isCanonicalJsonValue, isObviouslyPrivateHostname, isSafeExecutable, isSafeRelativePath, sameGitObjectFormat, sha256Utf8, sha256DigestSchema, } from "./agent-candidate-schema-common.js";
+import { addDuplicateIssues, agentCandidateConfigValueSchema, agentCandidateSecretRefSchema, agentCandidatePublicValueSchema, agentCandidateMediaTypeSchema, environmentConfigSchema, gitObjectSchema, isCanonicalJsonValue, isObviouslyPrivateHostname, isSafeExecutable, isSafeRelativePath, sameGitObjectFormat, sha256Utf8, sha256DigestSchema, } from "./agent-candidate-schema-common.js";
+import { ProxySecretsSchema } from "./proxy-secrets.js";
 import { harnessTypeSchema } from "./harness.js";
 import { createAgentProfileActivationEvidenceSchema } from "./agent-profile-activation.js";
 function isCanonicalAbsolutePath(value) {
@@ -107,6 +108,7 @@ export const agentCandidateRetryPolicySchema = z.enum([
 ]);
 export const agentCandidateProfilePlanMaterialSchema = z
     .object({
+    proxySecrets: ProxySecretsSchema.optional(),
     sourceProfileDigest: sha256DigestSchema,
     harness: harnessTypeSchema,
     files: z.array(z
@@ -116,13 +118,20 @@ export const agentCandidateProfilePlanMaterialSchema = z
             .refine((value) => isSafeRelativePath(value, false), "profile-plan file must use a canonical relative path"),
         mode: z.number().int().min(0).max(0o777),
         contentSha256: sha256DigestSchema,
+        secretSlots: z.array(z.strictObject({
+            path: z.array(z.union([
+                z.string().refine((value) => !["__proto__", "prototype", "constructor"].includes(value)),
+                z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER),
+            ])),
+            ref: agentCandidateSecretRefSchema,
+        })).optional(),
         root: z.literal("agent").optional(),
     })
         .strict()),
     env: environmentConfigSchema,
     flags: z.array(agentCandidateConfigValueSchema),
-    systemPrompt: agentCandidateConfigValueSchema.optional(),
-    appendSystemPrompt: agentCandidateConfigValueSchema.optional(),
+    systemPrompt: agentCandidatePublicValueSchema.optional(),
+    appendSystemPrompt: agentCandidatePublicValueSchema.optional(),
     unsupported: z
         .array(z
         .object({
@@ -134,6 +143,18 @@ export const agentCandidateProfilePlanMaterialSchema = z
 })
     .strict()
     .superRefine((material, ctx) => {
+    material.files.forEach((file, fileIndex) => {
+        const slots = file.secretSlots ?? [];
+        slots.forEach((slot, slotIndex) => {
+            if (slots.slice(0, slotIndex).some((previous) => {
+                const common = Math.min(previous.path.length, slot.path.length);
+                return previous.path.slice(0, common).every((segment, index) => segment === slot.path[index]);
+            })) {
+                ctx.addIssue({ code: "custom", path: ["files", fileIndex, "secretSlots", slotIndex],
+                    message: "secret slot paths cannot duplicate or overlap" });
+            }
+        });
+    });
     const fileIdentities = material.files.map(profilePlanFileIdentity);
     addDuplicateIssues(fileIdentities, ["files"], ctx);
     for (let index = 1; index < material.files.length; index++) {
@@ -328,7 +349,9 @@ export const agentCandidateExecutionPlanMaterialSchema = z
 })
     .strict()
     .superRefine((material, ctx) => {
-    if (!material.launch.executable.startsWith("/") && !material.launch.env.PATH?.value.trim()) {
+    const executablePath = material.launch.env.PATH;
+    if (!material.launch.executable.startsWith("/") &&
+        (executablePath?.kind !== "public" || !executablePath.value.trim())) {
         ctx.addIssue({
             code: "custom",
             path: ["launch", "env", "PATH"],
@@ -405,16 +428,16 @@ export const agentCandidateExecutionPlanMaterialSchema = z
     }
     const taskPath = material.launch.env.TANGLE_CANDIDATE_TASK_PATH;
     if (taskPath !== undefined) {
-        if (taskPath.value !== "/tangle/input/task.txt") {
+        if (taskPath.kind !== "public" || taskPath.value !== "/tangle/input/task.txt") {
             ctx.addIssue({
                 code: "custom",
                 path: ["launch", "env", "TANGLE_CANDIDATE_TASK_PATH"],
                 message: "task file delivery must use the fixed evaluator-owned path",
             });
         }
-        if (pathsOverlap(taskPath.value, material.workspaces.taskRoot) ||
+        if (taskPath.kind === "public" && (pathsOverlap(taskPath.value, material.workspaces.taskRoot) ||
             (material.workspaces.candidateRoot !== undefined &&
-                pathsOverlap(taskPath.value, material.workspaces.candidateRoot))) {
+                pathsOverlap(taskPath.value, material.workspaces.candidateRoot)))) {
             ctx.addIssue({
                 code: "custom",
                 path: ["launch", "env", "TANGLE_CANDIDATE_TASK_PATH"],