@tangle-network/cli-agent-registry 0.14.0 → 0.15.1

package/dist/index.d.mts

@@ -1,10 +1,11 @@
-import { a as isBackendType, i as backendTypeSchema, n as BACKEND_TYPE, o as parseBackendType, r as BackendType, t as ALL_BACKEND_TYPES } from "./backend-types-CJH-wHS3.mjs";
-import { LocalCliAuthFile, materializeCliAuthBundle } from "./cli-auth-bundle.mjs";
-import { A as CliDirLayout, C as ProviderPhase, D as harnessModelSupportFor, E as cliAgentEnvRoleName, M as DEFAULT_CLI_DIR_LAYOUT, N as mergeCliDirLayout, O as harnessModelWire, S as ProviderLogger, T as cliAgentClaimEnvVarNames, _ as CliAgentModelWire, a as agentProfileSchema, b as CliAuthHome, c as cliAgentHostPassthroughEnvVarNames, d as AdapterFactory, f as CliAgentBuiltinTool, g as CliAgentEnvVars, h as CliAgentEnvExtraRole, i as MANAGED_MODEL_KEY_NAME_ENV_VAR, j as CliDirLayoutAdditions, k as SYNTHETIC_ROUTER_MODEL, l as getSpec, m as CliAgentEnvExtraParser, n as CLI_AGENT_SPECS, o as claimDeliverableEnvVarNames, p as CliAgentEnvExtra, r as MANAGED_MODEL_KEY_ENV_VAR, s as cliAgentEnvVarNamesByRole, t as AGENT_BACKEND_ENV_VAR, u as messageStorageDirOf, v as CliAgentRuntimeSpec, w as canonicalModelSlug, x as HarnessSpecCapabilities, y as CliAgentSpec } from "./specs-BSELpX1h.mjs";
-import { _ as substituteNativeSessionId, a as NativeSessionIdentity, c as SessionFormatId, d as assertStoreLocationHonoursSessionContract, f as compileSessionStoreGlob, g as sessionStoreForPath, h as sessionContractProblems, i as HarnessSessionEvidence, l as assertArgvHonoursSessionContract, m as normalizePosixPath, n as HarnessSessionContractError, o as NativeSessionStore, p as forbiddenArgViolations, r as HarnessSessionContractErrorCode, s as SESSION_FORMAT_IDS, t as HarnessSessionContract, u as assertFlagsHonourSessionContract } from "./session-contract-BC75JdnA.mjs";
+import { a as isBackendType, i as backendTypeSchema, n as BACKEND_TYPE, o as parseBackendType, r as BackendType, t as ALL_BACKEND_TYPES } from "./backend-types-DRmLR1e0.mjs";
+import { i as LocalCliAuthFile, s as materializeCliAuthBundle } from "./cli-auth-bundle-CwAaH0Ap.mjs";
+import { C as mergeCliDirLayout, S as DEFAULT_CLI_DIR_LAYOUT, _ as harnessModelSupportFor, a as CliAgentEnvExtraRole, b as CliDirLayout, c as CliAgentRuntimeSpec, d as HarnessSpecCapabilities, f as ProviderLogger, g as cliAgentEnvRoleName, h as cliAgentClaimEnvVarNames, i as CliAgentEnvExtraParser, l as CliAgentSpec, m as canonicalModelSlug, n as CliAgentBuiltinTool, o as CliAgentEnvVars, p as ProviderPhase, r as CliAgentEnvExtra, s as CliAgentModelWire, t as AdapterFactory, u as CliAuthHome, v as harnessModelWire, x as CliDirLayoutAdditions, y as SYNTHETIC_ROUTER_MODEL } from "./spec-CcvTM7-j.mjs";
+import { _ as substituteNativeSessionId, a as NativeSessionIdentity, c as SessionFormatId, d as assertStoreLocationHonoursSessionContract, f as compileSessionStoreGlob, g as sessionStoreForPath, h as sessionContractProblems, i as HarnessSessionEvidence, l as assertArgvHonoursSessionContract, m as normalizePosixPath, n as HarnessSessionContractError, o as NativeSessionStore, p as forbiddenArgViolations, r as HarnessSessionContractErrorCode, s as SESSION_FORMAT_IDS, t as HarnessSessionContract, u as assertFlagsHonourSessionContract } from "./session-contract-BhzcbPRW.mjs";
+import { AGENT_BACKEND_ENV_VAR, CLI_AGENT_SPECS, MANAGED_MODEL_KEY_ENV_VAR, MANAGED_MODEL_KEY_NAME_ENV_VAR, agentProfileSchema, claimDeliverableEnvVarNames, cliAgentEnvVarNamesByRole, cliAgentHostPassthroughEnvVarNames, getSpec, messageStorageDirOf } from "./specs.mjs";
 import { resolveDefaultBackend } from "./default-backend.mjs";
 import { describeLocalCliAuthExpectation, discoverLocalCliAuthFiles } from "./local-cli-auth.mjs";
-import { HARNESS_CONFORMANCE_PENDING, HARNESS_SESSION_UNSUPPORTED, NATIVE_SESSION_CONTRACTS, configDirHomeEnv } from "./native-session-contracts.mjs";
+import { HARNESS_SESSION_UNSUPPORTED, NATIVE_SESSION_CONTRACTS, configDirHomeEnv } from "./native-session-contracts.mjs";
 import { MANAGED_MODEL_LADDER, ManagedModelChain, ManagedModelChainOptions, ManagedModelRung, SkippedManagedModel, bareModelId, isServableManagedModel, managedModelChain } from "./servable-models.mjs";
 import * as _$_tangle_network_agent_interface0 from "@tangle-network/agent-interface";
 import { z } from "zod";
@@ -40,14 +41,6 @@ declare function listRegisteredAdapters(): string[];
 declare function assertAdaptersWired(): void;
 //#endregion
 //#region src/agent-run-request.d.ts
-/**
- * Agent run request fields shared by the orchestrator proxy
- * (`agentExecuteRequestSchema`) and the sidecar (`agentRunRequestSchema`).
- * The proxy parses and reserializes the body, so a field missing on one end
- * is dropped or refused before the other end sees it. Each end keeps only
- * its delta: strictness, OpenAPI metadata, the sidecar's `identifier` alias
- * and its cliAuth refinement.
- */
 type AgentRunBackend<Shape extends z.ZodRawShape> = z.infer<z.ZodObject<Shape>> & {
   profile?: z.infer<typeof agentProfileSchema>;
   profileSha256?: string;
@@ -97,6 +90,7 @@ declare function agentRunBackendVariants<Shape extends z.ZodRawShape>(base: Shap
       "factory-droids": "factory-droids";
       forge: "forge";
       cursor: "cursor";
+      grok: "grok";
       acp: "acp";
       "cli-base": "cli-base";
     }>>;
@@ -116,6 +110,7 @@ declare function agentRunBackendVariants<Shape extends z.ZodRawShape>(base: Shap
         "factory-droids": "factory-droids";
         forge: "forge";
         cursor: "cursor";
+        grok: "grok";
         acp: "acp";
         "cli-base": "cli-base";
       }>;
@@ -336,7 +331,12 @@ declare function agentRunRequestSharedShape<Workspace extends z.ZodType, Backend
   domains: z.ZodOptional<z.ZodArray<z.ZodString>>;
   workspace: Workspace;
   backend: Backend;
-  expectedPublicProfileRequestDigest: z.ZodOptional<z.ZodString>;
+  expectedPublicProfileRequestDigest: z.ZodOptional<z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>>;
+  expectedPublicProfileRevision: z.ZodOptional<z.ZodObject<{
+    workspacePlanDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+    materializedDigest: z.ZodType<`sha256:${string}`, unknown, z.core.$ZodTypeInternals<`sha256:${string}`, unknown>>;
+    launchDigest: z.ZodString;
+  }, z.core.$strict>>;
   expectedSecretProfileReceipt: z.ZodOptional<z.ZodString>;
   githubToken: z.ZodOptional<z.ZodString>;
   metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -366,7 +366,7 @@ type SessionContract = {
   reason: string;
 };
 /** Serializable requirements; production policy and validators retain their owners. */
-type HarnessConfigAssertion = "managed-full-ladder" | "operator-model-first" | "named-model-exact" | "moonshot-provider-lock" | "responses-config-model-id";
+type HarnessConfigAssertion = "managed-full-ladder" | "operator-model-first" | "named-model-exact" | "responses-config-model-id";
 type HarnessConfigContract = {
   kind: "model";
   providerRequiresModel: true;
@@ -517,7 +517,9 @@ declare const HARNESSES: {
       };
     };
     lifecycle: {
-      runtime: undefined;
+      runtime: {
+        secretProfileIsolation: true;
+      };
       coldCreate: {
         kind: "required";
       };
@@ -597,6 +599,7 @@ declare const HARNESSES: {
     };
     lifecycle: {
       runtime: {
+        secretProfileIsolation: true;
         redactsHostEnv: true;
         supportsToolDisabledTurns: true;
       };
@@ -708,21 +711,17 @@ declare const HARNESSES: {
         forbiddenArgs: never[];
         storeEnv: {};
         evidence: {
-          servedModel: "session-record";
+          servedModel: "none";
           usage: "per-response";
-          endingError: "none";
+          endingError: "session-record";
         };
         cliVersion: "1.49.0";
       };
-      defect: {
-        issue: string;
-        reason: string;
-      };
+      defect: null;
     };
     config: {
       kind: "model";
       providerRequiresModel: true;
-      assertions: "moonshot-provider-lock"[];
       keySources: ["managed", "api-key", "api-key-env", "cli-auth"];
       baseUrl: "caller-or-managed";
       modelWire: "openai-compat";
@@ -800,12 +799,9 @@ declare const HARNESSES: {
           usage: "session-total";
           endingError: "none";
         };
-        cliVersion: "0.249.0";
-      };
-      defect: {
-        issue: string;
-        reason: string;
+        cliVersion: "0.250.0";
       };
+      defect: null;
     };
     config: {
       kind: "model";
@@ -837,6 +833,74 @@ declare const HARNESSES: {
       };
     };
   };
+  grok: {
+    session: {
+      kind: "native";
+      processProbe: {
+        versionCommand: string;
+        kill: [string, string];
+      };
+      contract: {
+        version: 1;
+        stores: [{
+          root: string;
+          files: string[];
+          write: "jsonl-append";
+          shared: false;
+          format: "grok.acp-session-dir";
+        }];
+        identity: {
+          kind: "first-event";
+          event: string;
+          deadlineMs: number;
+        };
+        resume: {
+          kind: "args";
+          args: string[];
+        };
+        forbiddenArgs: never[];
+        storeEnv: {
+          GROK_HOME: string;
+        };
+        evidence: {
+          servedModel: "session-record";
+          usage: "none";
+          endingError: "none";
+        };
+        cliVersion: "0.1.220";
+      };
+      defect: null;
+    };
+    config: {
+      kind: "model";
+      providerRequiresModel: true;
+      keySources: ["api-key", "api-key-env"];
+      baseUrl: "caller-or-managed";
+      modelWire: "openai-compat";
+      envVars: {
+        apiKey: string;
+        model: string;
+      };
+    };
+    lifecycle: {
+      runtime: undefined;
+      coldCreate: {
+        kind: "required";
+      };
+      warmClaim: {
+        kind: "required";
+      };
+      parkResume: {
+        kind: "required";
+      };
+      branchChild: {
+        kind: "required";
+      };
+      killResume: {
+        kind: "required";
+      };
+    };
+  };
   amp: {
     session: {
       kind: "native";
@@ -871,7 +935,7 @@ declare const HARNESSES: {
           usage: "per-response";
           endingError: "none";
         };
-        cliVersion: "0.0.1793044831-ga1b1a0";
+        cliVersion: "0.0.1793104576-gc52692";
       };
       defect: {
         issue: string;
@@ -923,7 +987,7 @@ declare const HARNESSES: {
           root: string;
           files: string[];
           write: "jsonl-append";
-          shared: false;
+          shared: true;
           format: "prime.session-jsonl";
         }];
         identity: {
@@ -942,10 +1006,7 @@ declare const HARNESSES: {
         };
         cliVersion: "0.10.1";
       };
-      defect: {
-        issue: string;
-        reason: string;
-      };
+      defect: null;
     };
     config: {
       kind: "model";
@@ -1008,10 +1069,7 @@ declare const HARNESSES: {
         };
         cliVersion: "0.22.4";
       };
-      defect: {
-        issue: string;
-        reason: string;
-      };
+      defect: null;
     };
     config: {
       kind: "model";
@@ -1051,7 +1109,7 @@ declare const HARNESSES: {
       };
     };
   };
-  forge: {
+  openclaw: {
     session: {
       kind: "native";
       processProbe: {
@@ -1065,12 +1123,11 @@ declare const HARNESSES: {
           files: string[];
           write: "sqlite-wal";
           shared: true;
-          format: "forge.sqlite";
+          format: "openclaw.session-jsonl";
         }];
         identity: {
-          kind: "first-event";
-          event: string;
-          deadlineMs: number;
+          kind: "pre-minted";
+          args: string[];
         };
         resume: {
           kind: "args";
@@ -1083,12 +1140,9 @@ declare const HARNESSES: {
           usage: "per-response";
           endingError: "none";
         };
-        cliVersion: "2.14.0";
-      };
-      defect: {
-        issue: string;
-        reason: string;
+        cliVersion: "2026.10.8";
       };
+      defect: null;
     };
     config: {
       kind: "model";
@@ -1099,19 +1153,9 @@ declare const HARNESSES: {
       envVars: {
         apiKey: string;
         model: string;
+        baseUrl: string;
         authMode: string;
         authFiles: string;
-        extras: {
-          FORGE_SESSION__PROVIDER_ID: {
-            parser: "string";
-          };
-          FORGE_SESSION__MODEL_ID: {
-            parser: "string";
-          };
-          FORGE_AGENT_ID: {
-            parser: "string";
-          };
-        };
       };
     };
     lifecycle: {
@@ -1133,7 +1177,7 @@ declare const HARNESSES: {
       };
     };
   };
-  openclaw: {
+  nanoclaw: {
     session: {
       kind: "native";
       processProbe: {
@@ -1145,9 +1189,9 @@ declare const HARNESSES: {
         stores: [{
           root: string;
           files: string[];
-          write: "jsonl-append";
+          write: "sqlite-wal";
           shared: false;
-          format: "openclaw.session-jsonl";
+          format: "nanoclaw.session-sqlite";
         }];
         identity: {
           kind: "first-event";
@@ -1155,63 +1199,20 @@ declare const HARNESSES: {
           deadlineMs: number;
         };
         resume: {
-          kind: "args";
-          args: string[];
+          kind: "api";
         };
         forbiddenArgs: never[];
-        storeEnv: {};
+        storeEnv: {
+          NANOCLAW_RUNTIME_ROOT: string;
+        };
         evidence: {
-          servedModel: "session-record";
+          servedModel: "none";
           usage: "per-response";
           endingError: "none";
         };
-        cliVersion: "2026.10.7";
-      };
-      defect: {
-        issue: string;
-        reason: string;
-      };
-    };
-    config: {
-      kind: "model";
-      providerRequiresModel: true;
-      keySources: ["managed", "api-key", "api-key-env", "cli-auth"];
-      baseUrl: "caller-or-managed";
-      modelWire: "openai-compat";
-      envVars: {
-        apiKey: string;
-        model: string;
-        baseUrl: string;
-        authMode: string;
-        authFiles: string;
-      };
-    };
-    lifecycle: {
-      runtime: undefined;
-      coldCreate: {
-        kind: "required";
-      };
-      warmClaim: {
-        kind: "required";
-      };
-      parkResume: {
-        kind: "required";
-      };
-      branchChild: {
-        kind: "required";
-      };
-      killResume: {
-        kind: "required";
-      };
-    };
-  };
-  nanoclaw: {
-    session: {
-      kind: "unsupported";
-      defect: {
-        issue: string;
-        reason: string;
+        cliVersion: "2.1.54";
       };
+      defect: null;
     };
     config: {
       kind: "model";
@@ -1253,8 +1254,7 @@ declare const HARNESSES: {
         kind: "required";
       };
       killResume: {
-        kind: "unsupported";
-        reason: string;
+        kind: "required";
       };
     };
   };
@@ -1279,15 +1279,12 @@ declare const HARNESSES: {
         storeEnv: {};
         evidence: {
           servedModel: "session-record";
-          usage: "per-response";
+          usage: "session-total";
           endingError: "none";
         };
         cliVersion: "claude-agent-acp 0.97.0; codex-acp 0.16.0; gemini-cli 0.65.0";
       };
-      defect: {
-        issue: string;
-        reason: string;
-      };
+      defect: null;
     };
     config: {
       kind: "model";
@@ -1396,5 +1393,5 @@ declare const HARNESSES: {
   };
 };
 //#endregion
-export { AGENT_BACKEND_ENV_VAR, ALL_BACKEND_TYPES, type AdapterFactory, type AdapterRegistry, type AgentRunBackend, BACKEND_TYPE, type BackendType, CLI_AGENT_SPECS, type CliAgentBuiltinTool, type CliAgentEnvExtra, type CliAgentEnvExtraParser, type CliAgentEnvExtraRole, type CliAgentEnvVars, type CliAgentModelWire, type CliAgentRuntimeSpec, type CliAgentSpec, type CliAuthHome, type CliDirLayout, type CliDirLayoutAdditions, DEFAULT_CLI_DIR_LAYOUT, HARNESSES, HARNESS_CONFORMANCE_PENDING, HARNESS_SESSION_UNSUPPORTED, type HarnessBackendId, type HarnessContract, HarnessSessionContract, HarnessSessionContractError, HarnessSessionContractErrorCode, HarnessSessionEvidence, type HarnessSpecCapabilities, type LocalCliAuthFile, MANAGED_MODEL_KEY_ENV_VAR, MANAGED_MODEL_KEY_NAME_ENV_VAR, MANAGED_MODEL_LADDER, type ManagedModelChain, type ManagedModelChainOptions, type ManagedModelRung, NATIVE_SESSION_CONTRACTS, NativeSessionIdentity, NativeSessionStore, type ProviderLogger, type ProviderPhase, SESSION_FORMAT_IDS, SYNTHETIC_ROUTER_MODEL, SessionFormatId, type SkippedManagedModel, agentProfileSchema, agentRunBackendVariants, agentRunRequestSharedShape, agentRunWorkspaceSchema, assertAdaptersWired, assertArgvHonoursSessionContract, assertFlagsHonourSessionContract, assertStoreLocationHonoursSessionContract, backendTypeSchema, bareModelId, canonicalModelSlug, claimDeliverableEnvVarNames, cliAgentClaimEnvVarNames, cliAgentEnvRoleName, cliAgentEnvVarNamesByRole, cliAgentHostPassthroughEnvVarNames, compileSessionStoreGlob, configDirHomeEnv, createAdapterRegistry, describeLocalCliAuthExpectation, discoverLocalCliAuthFiles, forbiddenArgViolations, getAdapterFactory, getSpec, harnessModelSupportFor, harnessModelWire, isBackendType, isServableManagedModel, listRegisteredAdapters, managedModelChain, materializeCliAuthBundle, mergeCliDirLayout, messageStorageDirOf, normalizePosixPath, parseBackendType, registerAdapterFactory, resolveDefaultBackend, sessionContractProblems, sessionStoreForPath, substituteNativeSessionId, unregisterAdapterFactory };
+export { AGENT_BACKEND_ENV_VAR, ALL_BACKEND_TYPES, type AdapterFactory, type AdapterRegistry, type AgentRunBackend, BACKEND_TYPE, type BackendType, CLI_AGENT_SPECS, type CliAgentBuiltinTool, type CliAgentEnvExtra, type CliAgentEnvExtraParser, type CliAgentEnvExtraRole, type CliAgentEnvVars, type CliAgentModelWire, type CliAgentRuntimeSpec, type CliAgentSpec, type CliAuthHome, CliDirLayout, CliDirLayoutAdditions, DEFAULT_CLI_DIR_LAYOUT, HARNESSES, HARNESS_SESSION_UNSUPPORTED, type HarnessBackendId, type HarnessContract, HarnessSessionContract, HarnessSessionContractError, HarnessSessionContractErrorCode, HarnessSessionEvidence, type HarnessSpecCapabilities, type LocalCliAuthFile, MANAGED_MODEL_KEY_ENV_VAR, MANAGED_MODEL_KEY_NAME_ENV_VAR, MANAGED_MODEL_LADDER, type ManagedModelChain, type ManagedModelChainOptions, type ManagedModelRung, NATIVE_SESSION_CONTRACTS, NativeSessionIdentity, NativeSessionStore, type ProviderLogger, type ProviderPhase, SESSION_FORMAT_IDS, SYNTHETIC_ROUTER_MODEL, SessionFormatId, type SkippedManagedModel, agentProfileSchema, agentRunBackendVariants, agentRunRequestSharedShape, agentRunWorkspaceSchema, assertAdaptersWired, assertArgvHonoursSessionContract, assertFlagsHonourSessionContract, assertStoreLocationHonoursSessionContract, backendTypeSchema, bareModelId, canonicalModelSlug, claimDeliverableEnvVarNames, cliAgentClaimEnvVarNames, cliAgentEnvRoleName, cliAgentEnvVarNamesByRole, cliAgentHostPassthroughEnvVarNames, compileSessionStoreGlob, configDirHomeEnv, createAdapterRegistry, describeLocalCliAuthExpectation, discoverLocalCliAuthFiles, forbiddenArgViolations, getAdapterFactory, getSpec, harnessModelSupportFor, harnessModelWire, isBackendType, isServableManagedModel, listRegisteredAdapters, managedModelChain, materializeCliAuthBundle, mergeCliDirLayout, messageStorageDirOf, normalizePosixPath, parseBackendType, registerAdapterFactory, resolveDefaultBackend, sessionContractProblems, sessionStoreForPath, substituteNativeSessionId, unregisterAdapterFactory };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,11 +1,13 @@
-import { a as HARNESSES, i as configDirHomeEnv, n as HARNESS_SESSION_UNSUPPORTED, r as NATIVE_SESSION_CONTRACTS, t as HARNESS_CONFORMANCE_PENDING } from "./native-session-contracts-DWFzgoye.mjs";
+import { t as HARNESSES } from "./harness-contracts-BZoECCMc.mjs";
+import { HARNESS_SESSION_UNSUPPORTED, NATIVE_SESSION_CONTRACTS, configDirHomeEnv } from "./native-session-contracts.mjs";
 import { HarnessSessionContractError, SESSION_FORMAT_IDS, assertArgvHonoursSessionContract, assertFlagsHonourSessionContract, assertStoreLocationHonoursSessionContract, compileSessionStoreGlob, forbiddenArgViolations, normalizePosixPath, sessionContractProblems, sessionStoreForPath, substituteNativeSessionId } from "./session-contract.mjs";
-import { a as parseBackendType, i as isBackendType, n as BACKEND_TYPE, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-CREj4iOY.mjs";
-import { a as agentProfileSchema, c as cliAgentHostPassthroughEnvVarNames, d as canonicalModelSlug, f as cliAgentClaimEnvVarNames, g as SYNTHETIC_ROUTER_MODEL, h as harnessModelWire, i as MANAGED_MODEL_KEY_NAME_ENV_VAR, l as getSpec, m as harnessModelSupportFor, n as CLI_AGENT_SPECS, o as claimDeliverableEnvVarNames, p as cliAgentEnvRoleName, r as MANAGED_MODEL_KEY_ENV_VAR, s as cliAgentEnvVarNamesByRole, t as AGENT_BACKEND_ENV_VAR, u as messageStorageDirOf } from "./specs-Bbiay_8K.mjs";
-import { materializeCliAuthBundle } from "./cli-auth-bundle.mjs";
+import { a as parseBackendType, i as isBackendType, n as BACKEND_TYPE, r as backendTypeSchema, t as ALL_BACKEND_TYPES } from "./backend-types-CNo_Zj_K.mjs";
+import { a as agentProfileSchema, c as cliAgentHostPassthroughEnvVarNames, d as canonicalModelSlug, f as cliAgentClaimEnvVarNames, g as SYNTHETIC_ROUTER_MODEL, h as harnessModelWire, i as MANAGED_MODEL_KEY_NAME_ENV_VAR, l as getSpec, m as harnessModelSupportFor, n as CLI_AGENT_SPECS, o as claimDeliverableEnvVarNames, p as cliAgentEnvRoleName, r as MANAGED_MODEL_KEY_ENV_VAR, s as cliAgentEnvVarNamesByRole, t as AGENT_BACKEND_ENV_VAR, u as messageStorageDirOf } from "./specs-BBF55TnM.mjs";
+import { a as materializeCliAuthBundle } from "./cli-auth-bundle-C6DtK7GX.mjs";
 import { resolveDefaultBackend } from "./default-backend.mjs";
 import { describeLocalCliAuthExpectation, discoverLocalCliAuthFiles } from "./local-cli-auth.mjs";
 import { MANAGED_MODEL_LADDER, bareModelId, isServableManagedModel, managedModelChain } from "./servable-models.mjs";
+import { sha256DigestSchema } from "@tangle-network/agent-interface";
 import { z } from "zod";
 //#region src/adapter-bindings.ts
 /**
@@ -80,6 +82,7 @@ function assertAdaptersWired() {
 //#region src/agent-run-request.ts
 /** A backend carries an inline profile, a profile digest, or neither. */
 function agentRunBackendVariants(base) {
+	const profileSha256 = z.string().regex(/^[a-f0-9]{64}$/, "profileSha256 must be a lowercase SHA-256");
 	return z.union([
 		z.object({
 			...base,
@@ -87,7 +90,7 @@ function agentRunBackendVariants(base) {
 		}).strict(),
 		z.object({
 			...base,
-			profileSha256: z.string().regex(/^[a-f0-9]{64}$/, "profileSha256 must be a lowercase SHA-256")
+			profileSha256
 		}).strict(),
 		z.object(base).strict()
 	]);
@@ -107,7 +110,12 @@ function agentRunRequestSharedShape(workspace, backend) {
 		domains: z.array(z.string()).optional(),
 		workspace,
 		backend,
-		expectedPublicProfileRequestDigest: z.string().regex(/^sha256:[a-f0-9]{64}$/).optional(),
+		expectedPublicProfileRequestDigest: sha256DigestSchema.optional(),
+		expectedPublicProfileRevision: z.object({
+			workspacePlanDigest: sha256DigestSchema,
+			materializedDigest: sha256DigestSchema,
+			launchDigest: z.string().regex(/^[a-f0-9]{64}$/)
+		}).strict().optional(),
 		expectedSecretProfileReceipt: z.string().regex(/^hmac-sha256:[a-f0-9]{64}$/).optional(),
 		githubToken: z.string().optional(),
 		metadata: z.record(z.string(), z.unknown()).optional()
@@ -117,6 +125,7 @@ function agentRunRequestSharedShape(workspace, backend) {
 //#region src/cli-dir-layout.ts
 /** What every CLI's directory is read with; a spec adds its own entries. */
 const DEFAULT_CLI_DIR_LAYOUT = {
+	homeSessionData: [],
 	sessionData: ["messages/**", "history.jsonl"],
 	configAllow: [
 		"config.toml",
@@ -134,13 +143,9 @@ const DEFAULT_CLI_DIR_LAYOUT = {
 };
 /** The default layout with a spec's additions. */
 function mergeCliDirLayout(additions) {
-	return {
-		sessionData: [...DEFAULT_CLI_DIR_LAYOUT.sessionData, ...additions?.sessionData ?? []],
-		configAllow: [...DEFAULT_CLI_DIR_LAYOUT.configAllow, ...additions?.configAllow ?? []],
-		credential: [...DEFAULT_CLI_DIR_LAYOUT.credential, ...additions?.credential ?? []]
-	};
+	return Object.fromEntries(Object.entries(DEFAULT_CLI_DIR_LAYOUT).map(([key, paths]) => [key, [...paths, ...additions?.[key] ?? []]]));
 }
 //#endregion
-export { AGENT_BACKEND_ENV_VAR, ALL_BACKEND_TYPES, BACKEND_TYPE, CLI_AGENT_SPECS, DEFAULT_CLI_DIR_LAYOUT, HARNESSES, HARNESS_CONFORMANCE_PENDING, HARNESS_SESSION_UNSUPPORTED, HarnessSessionContractError, MANAGED_MODEL_KEY_ENV_VAR, MANAGED_MODEL_KEY_NAME_ENV_VAR, MANAGED_MODEL_LADDER, NATIVE_SESSION_CONTRACTS, SESSION_FORMAT_IDS, SYNTHETIC_ROUTER_MODEL, agentProfileSchema, agentRunBackendVariants, agentRunRequestSharedShape, agentRunWorkspaceSchema, assertAdaptersWired, assertArgvHonoursSessionContract, assertFlagsHonourSessionContract, assertStoreLocationHonoursSessionContract, backendTypeSchema, bareModelId, canonicalModelSlug, claimDeliverableEnvVarNames, cliAgentClaimEnvVarNames, cliAgentEnvRoleName, cliAgentEnvVarNamesByRole, cliAgentHostPassthroughEnvVarNames, compileSessionStoreGlob, configDirHomeEnv, createAdapterRegistry, describeLocalCliAuthExpectation, discoverLocalCliAuthFiles, forbiddenArgViolations, getAdapterFactory, getSpec, harnessModelSupportFor, harnessModelWire, isBackendType, isServableManagedModel, listRegisteredAdapters, managedModelChain, materializeCliAuthBundle, mergeCliDirLayout, messageStorageDirOf, normalizePosixPath, parseBackendType, registerAdapterFactory, resolveDefaultBackend, sessionContractProblems, sessionStoreForPath, substituteNativeSessionId, unregisterAdapterFactory };
+export { AGENT_BACKEND_ENV_VAR, ALL_BACKEND_TYPES, BACKEND_TYPE, CLI_AGENT_SPECS, DEFAULT_CLI_DIR_LAYOUT, HARNESSES, HARNESS_SESSION_UNSUPPORTED, HarnessSessionContractError, MANAGED_MODEL_KEY_ENV_VAR, MANAGED_MODEL_KEY_NAME_ENV_VAR, MANAGED_MODEL_LADDER, NATIVE_SESSION_CONTRACTS, SESSION_FORMAT_IDS, SYNTHETIC_ROUTER_MODEL, agentProfileSchema, agentRunBackendVariants, agentRunRequestSharedShape, agentRunWorkspaceSchema, assertAdaptersWired, assertArgvHonoursSessionContract, assertFlagsHonourSessionContract, assertStoreLocationHonoursSessionContract, backendTypeSchema, bareModelId, canonicalModelSlug, claimDeliverableEnvVarNames, cliAgentClaimEnvVarNames, cliAgentEnvRoleName, cliAgentEnvVarNamesByRole, cliAgentHostPassthroughEnvVarNames, compileSessionStoreGlob, configDirHomeEnv, createAdapterRegistry, describeLocalCliAuthExpectation, discoverLocalCliAuthFiles, forbiddenArgViolations, getAdapterFactory, getSpec, harnessModelSupportFor, harnessModelWire, isBackendType, isServableManagedModel, listRegisteredAdapters, managedModelChain, materializeCliAuthBundle, mergeCliDirLayout, messageStorageDirOf, normalizePosixPath, parseBackendType, registerAdapterFactory, resolveDefaultBackend, sessionContractProblems, sessionStoreForPath, substituteNativeSessionId, unregisterAdapterFactory };
 
 //# sourceMappingURL=index.mjs.map

package/dist/local-cli-auth.d.mts

@@ -1,4 +1,4 @@
-import { LocalCliAuthFile } from "./cli-auth-bundle.mjs";
+import { i as LocalCliAuthFile } from "./cli-auth-bundle-CwAaH0Ap.mjs";
 
 //#region src/local-cli-auth.d.ts
 type LocalCliAuthBackend = "codex" | "claude-code";

package/dist/local-cli-auth.mjs

@@ -1,4 +1,4 @@
-import { AUTH_BUNDLE_PATHS } from "./cli-auth-bundle.mjs";
+import { t as AUTH_BUNDLE_PATHS } from "./cli-auth-bundle-C6DtK7GX.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, dirname, join } from "node:path";