@tangle-network/agent-interface 5.4.0 → 5.6.0

package/dist/environment-runtime.d.ts

@@ -1816,6 +1816,10 @@ export declare function createAgentEnvironmentWithIdempotency<T extends object>(
 /** Reconstruct an existing environment; never allocates a replacement. */
 export interface AgentEnvironmentGetOptions {
     signal?: AbortSignal;
+    /** Side-effect-free custody discovery on a qualified provider. Never resumes, installs or
+     * rebinds; the returned snapshot cannot execute. Unsupported providers must reject this mode.
+     * Expired installed custody may be returned as metadata, never as dispatch authority. */
+    readOnly?: true;
     /** Explicit custody attachment through the existing egress lifecycle. Omission reads current
      * custody; [] revokes custom bindings. A get never allocates a replacement environment. */
     proxySecrets?: readonly ProxySecretBinding[];
@@ -1827,7 +1831,7 @@ export interface AgentEnvironmentGetOptions {
      * Authorize the first turn of an accepted portable transfer. The provider looks up the exact
      * durable operation and returns its dispatch-capable environment with contextTransferReceipt.
      * A missing, uncertain, conflicting or unsupported receipt refuses attachment. The request's
-     * exact profile, workspace and resources remain authoritative; ordinary get remains read-only.
+     * exact profile, workspace and resources remain authoritative; use readOnly for discovery without reconnect side effects.
      */
     contextTransfer?: ContextTransferRequest;
 }
@@ -2323,6 +2327,11 @@ export declare const AgentEnvironmentGetOptionsSchema: z.ZodObject<{
         }, z.core.$strict>>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
+/** Explicit opt-in for providers implementing side-effect-free, non-executable discovery. */
+export declare const AgentEnvironmentReadOnlyGetOptionsSchema: z.ZodObject<{
+    signal: z.ZodOptional<z.ZodCustom<AbortSignal, AbortSignal>>;
+    readOnly: z.ZodLiteral<true>;
+}, z.core.$strict>;
 export interface AgentEnvironmentProvider {
     readonly name: string;
     readonly exactProcess?: AgentExactProcessProvider;

package/dist/environment-runtime.js

@@ -526,8 +526,11 @@ export async function createAgentEnvironmentWithIdempotency(records, input, crea
         throw error;
     }
 }
+// Keep the existing parser strict: published providers that import it must not silently
+// accept readOnly and then perform their ordinary reconnect side effects.
+const environmentGetSignalSchema = z.custom().optional();
 export const AgentEnvironmentGetOptionsSchema = z.strictObject({
-    signal: z.custom().optional(),
+    signal: environmentGetSignalSchema,
     proxySecrets: ProxySecretsSchema.optional(),
     proxySecretParents: ProxySecretParentsSchema.optional(),
     ...ProxySecretUpdateControlsSchema.shape,
@@ -545,3 +548,8 @@ export const AgentEnvironmentGetOptionsSchema = z.strictObject({
         ctx.addIssue({ code: "custom", path: ["proxySecrets"], message: "proxy update controls require an explicit proxySecrets selection" });
     }
 });
+/** Explicit opt-in for providers implementing side-effect-free, non-executable discovery. */
+export const AgentEnvironmentReadOnlyGetOptionsSchema = z.strictObject({
+    signal: environmentGetSignalSchema,
+    readOnly: z.literal(true),
+});

package/dist/harness-capabilities.d.ts

@@ -7,7 +7,7 @@ import type { HarnessType } from "./harness.js";
  *   3. system-prompt intents (whether a harness can replace its own prompt, add to it, or neither).
  *
  * All are facets of the same question — "what can this (harness, model) pair actually do" — and
- * apply to BOTH harness-backed systems (vendor-locked CLIs like claude-code/codex/kimi) AND
+ * apply to BOTH harness-backed systems (CLIs that speak a vendor wire, like claude-code, codex and kimi-code) AND
  * router-backed systems (opencode, cli-base: any model the router serves). Lifted here so the
  * cli-bridge backends, the sandbox UI pickers, and the router all read one truth instead of each
  * hand-rolling a divergent copy.
@@ -91,7 +91,7 @@ export declare function harnessModelSupport(harness: HarnessType, modelId: strin
  * Whether a harness can run a model; {@link harnessModelSupport} gives the reason when it cannot.
  */
 export declare function harnessSupportsModel(harness: HarnessType, modelId: string, options?: HarnessModelSupportOptions): boolean;
-/** The harness to adopt for a model whose provider is vendor-locked (`anthropic` → `claude-code`,
+/** The harness a vendor's model adopts when the caller names none (`anthropic` → `claude-code`,
  *  `openai` → `codex`, `moonshot` → `kimi-code`); `null` when any router-backed harness will do. */
 export declare function preferredHarnessForModel(modelId: string): HarnessType | null;
 /**
@@ -104,8 +104,7 @@ export declare function preferredHarnessForModel(modelId: string): HarnessType |
 export declare function snapModelToHarness(harness: HarnessType, modelId: string, candidateIds: readonly string[]): string;
 /**
  * Keep the harness when it can run `modelId`; otherwise return the model's native harness
- * (anthropic → claude-code, openai → codex, moonshot → kimi-code), falling back to the router-backed
- * `opencode` for everything else.
+ * ({@link vendorHarness}), falling back to the router-backed `opencode` for everything else.
  */
 export declare function snapHarnessToModel(harness: HarnessType, modelId: string): HarnessType;
 /** The reasoning efforts a harness can express, independent of model — its explicit override set, or

package/dist/harness-capabilities.js

@@ -6,7 +6,7 @@ import { REASONING_EFFORTS, } from "./agent-profile.js";
  *   3. system-prompt intents (whether a harness can replace its own prompt, add to it, or neither).
  *
  * All are facets of the same question — "what can this (harness, model) pair actually do" — and
- * apply to BOTH harness-backed systems (vendor-locked CLIs like claude-code/codex/kimi) AND
+ * apply to BOTH harness-backed systems (CLIs that speak a vendor wire, like claude-code, codex and kimi-code) AND
  * router-backed systems (opencode, cli-base: any model the router serves). Lifted here so the
  * cli-bridge backends, the sandbox UI pickers, and the router all read one truth instead of each
  * hand-rolling a divergent copy.
@@ -20,19 +20,36 @@ import { REASONING_EFFORTS, } from "./agent-profile.js";
 export const reasoningLadder = REASONING_EFFORTS;
 // ── Harness ↔ model compatibility ────────────────────────────────────────────
 /**
- * Provider prefixes a harness is vendor-locked to (canonical-id prefix, e.g. `anthropic`, `openai`).
- * A harness with no entry is router-backed: it runs any model, except the measured exclusions in
+ * Provider prefixes a harness is vendor-locked to (canonical-id prefix, e.g. `moonshot`). A harness
+ * with no entry is router-backed: it runs any model, except the measured exclusions in
  * {@link harnessModelExclusions}.
  *
+ * `claude-code` and `codex` are deliberately absent. Their CLIs speak a vendor wire (Anthropic
+ * Messages, OpenAI Responses), but the Tangle Router passes only that vendor's own models through
+ * natively and translates every other model on those wires to chat completions (text, images and
+ * function tools, streamed or not; hosted tools are dropped), so both run any router-served model.
+ * A caller's own vendor key or login still serves that vendor's models alone, which this table does
+ * not see. Which harness a vendor's model adopts when the caller names none is
+ * {@link vendorHarness}, a separate fact.
+ *
  * `nanoclaw` is deliberately absent despite the "claw" name: its runner routes every provider through
  * the Tangle router (canonical model id straight to the gateway), so it is router-backed like
  * `opencode` — not Anthropic-locked.
  */
 const harnessProviderLock = {
-    "claude-code": ["anthropic"],
-    codex: ["openai"],
     "kimi-code": ["moonshot"],
 };
+/**
+ * The harness that natively speaks a vendor's models. A model of that vendor adopts it when the
+ * caller names no harness ({@link preferredHarnessForModel}), and a locked harness handed such a
+ * model switches to it ({@link snapHarnessToModel}). It is not a restriction: `claude-code` and
+ * `codex` also run other providers' models through the router.
+ */
+const vendorHarness = {
+    anthropic: "claude-code",
+    openai: "codex",
+    moonshot: "kimi-code",
+};
 /** Provider prefix of a canonical model id (`anthropic/claude-…` → `anthropic`), or null. */
 export function modelProvider(modelId) {
     const slash = modelId.indexOf("/");
@@ -169,17 +186,11 @@ export function harnessModelSupport(harness, modelId, options = {}) {
 export function harnessSupportsModel(harness, modelId, options) {
     return harnessModelSupport(harness, modelId, options).supported;
 }
-/** The harness to adopt for a model whose provider is vendor-locked (`anthropic` → `claude-code`,
+/** The harness a vendor's model adopts when the caller names none (`anthropic` → `claude-code`,
  *  `openai` → `codex`, `moonshot` → `kimi-code`); `null` when any router-backed harness will do. */
 export function preferredHarnessForModel(modelId) {
     const provider = resolveModelProvider(modelId);
-    if (!provider)
-        return null;
-    for (const [harness, providers] of Object.entries(harnessProviderLock)) {
-        if (providers?.includes(provider))
-            return harness;
-    }
-    return null;
+    return provider ? (vendorHarness[provider] ?? null) : null;
 }
 // ── Harness ↔ model snapping (catalog-aware) ─────────────────────────────────
 /**
@@ -188,12 +199,6 @@ export function preferredHarnessForModel(modelId) {
  * harness never snaps (it runs the model as-is).
  */
 const harnessPreferredModelPatterns = {
-    "claude-code": [
-        /^anthropic\/claude-opus-[\d.-]+$/,
-        /^anthropic\/claude-sonnet-[\d.-]+$/,
-        /^anthropic\//,
-    ],
-    codex: [/^openai\/gpt-\d+(\.\d+)?$/, /^openai\/gpt/, /^openai\//],
     "kimi-code": [/^moonshot\//],
 };
 const numericDesc = new Intl.Collator(undefined, {
@@ -222,8 +227,7 @@ export function snapModelToHarness(harness, modelId, candidateIds) {
 }
 /**
  * Keep the harness when it can run `modelId`; otherwise return the model's native harness
- * (anthropic → claude-code, openai → codex, moonshot → kimi-code), falling back to the router-backed
- * `opencode` for everything else.
+ * ({@link vendorHarness}), falling back to the router-backed `opencode` for everything else.
  */
 export function snapHarnessToModel(harness, modelId) {
     if (harnessSupportsModel(harness, modelId))

package/dist/index.d.ts

@@ -9,7 +9,7 @@ export * from "./host-services.js";
 export * from "./mcp.js";
 export * from "./provider-adapter.js";
 export type * from "./environment-provider.js";
-export { AgentEnvironmentCapabilitiesSchema, AgentRuntimeAttachmentsSchema, AgentNativeContextContinuationAdmissionSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationAdmissionMatchesRequest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, createAgentEnvironmentWithIdempotency, canonicalWorkspaceCwd, MAX_WORKSPACE_CWD_LENGTH, workspaceCwdSchema, workspaceCwdPathForBase, WorkspaceRequestSchema, ResourceRequestSchema, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
+export { AgentEnvironmentCapabilitiesSchema, AgentEnvironmentReadOnlyGetOptionsSchema, AgentRuntimeAttachmentsSchema, AgentNativeContextContinuationAdmissionSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationAdmissionMatchesRequest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, createAgentEnvironmentWithIdempotency, canonicalWorkspaceCwd, MAX_WORKSPACE_CWD_LENGTH, workspaceCwdSchema, workspaceCwdPathForBase, WorkspaceRequestSchema, ResourceRequestSchema, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
 export * from "./plan.js";
 export * from "./runtime-control.js";
 export * from "./portable-context.js";

package/dist/index.js

@@ -8,7 +8,7 @@ export * from "./provider-config.js";
 export * from "./host-services.js";
 export * from "./mcp.js";
 export * from "./provider-adapter.js";
-export { AgentEnvironmentCapabilitiesSchema, AgentRuntimeAttachmentsSchema, AgentNativeContextContinuationAdmissionSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationAdmissionMatchesRequest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, createAgentEnvironmentWithIdempotency, canonicalWorkspaceCwd, MAX_WORKSPACE_CWD_LENGTH, workspaceCwdSchema, workspaceCwdPathForBase, WorkspaceRequestSchema, ResourceRequestSchema, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
+export { AgentEnvironmentCapabilitiesSchema, AgentEnvironmentReadOnlyGetOptionsSchema, AgentRuntimeAttachmentsSchema, AgentNativeContextContinuationAdmissionSchema, AgentNativeContextContinuationResultSchema, AgentTurnInputSchema, AgentTurnResultSchema, agentEnvironmentCreateInputDigest, agentNativeContextContinuationAdmissionMatchesRequest, agentNativeContextContinuationResultMatchesRequest, AccountUsageSchema, AgentEnvironmentObservationSchema, AgentEnvironmentStatusSchema, ComputeBillingSchema, EnvironmentLifecycleSchema, ModelUsageSchema, ObservationProvenanceSchema, PlacementDescriptorSchema, ProviderIdentitySchema, ResourceProfileSchema, ResourceUseSampleSchema, SafeEndpointSchema, agentEnvironmentObservationIdentityMatches, observationContainsCredential, observationOf, AgentInteractiveSessionAttachSchema, AgentInteractiveSessionControlClaimAcknowledgementSchema, AgentInteractiveSessionControlClaimRequestSchema, AgentInteractiveSessionControlClaimSchema, AgentInteractiveSessionPromptAcknowledgementSchema, AgentInteractiveSessionPromptCommandSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentInteractiveSessionStopAcknowledgementSchema, AgentInteractiveSessionStopCommandSchema, AgentInteractiveSessionStatusSchema, agentInteractiveSessionControlClaimAcknowledgementMatchesRequest, agentInteractiveSessionControlClaimRequestDigest, agentInteractiveSessionControlClaimMatchesRef, agentInteractiveSessionControlClaimIsNewer, agentInteractiveSessionPromptAcknowledgementMatchesCommand, agentInteractiveSessionPromptRequestDigest, agentInteractiveSessionStopAcknowledgementMatchesCommand, agentInteractiveSessionStopRequestDigest, agentInteractiveSessionRefMatchesStart, agentInteractiveSessionRunRef, agentInteractiveSessionStatusMatchesRef, exactAgentInteractiveSessionStart, createAgentEnvironmentWithIdempotency, canonicalWorkspaceCwd, MAX_WORKSPACE_CWD_LENGTH, workspaceCwdSchema, workspaceCwdPathForBase, WorkspaceRequestSchema, ResourceRequestSchema, TerminalAttachRequestSchema, TerminalAttachResultSchema, TerminalDetachAckSchema, TerminalInputSchema, TerminalOutputEventSchema, TerminalReplayWindowSchema, TerminalResizeSchema, TerminalSessionRefSchema, terminalAttachResultMatchesRequest, terminalSessionUsable, } from "./environment-provider.js";
 export * from "./plan.js";
 export * from "./runtime-control.js";
 export * from "./portable-context.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-interface",
-  "version": "5.4.0",
+  "version": "5.6.0",
   "type": "module",
   "sideEffects": false,
   "license": "MIT",