AgentDef fields that must never cross the serialization boundary — the
single deny-list toAgentConfig strips. Everything else on the agent
definition flows into AgentConfig by default, so a new serializable
field works CLI → server → runtime without touching a mapper. A field added
to AgentDef must appear either in AgentConfigSchema or here — the
type-level guard in the internal-types test enforces that subtraction.
AgentDeffields that must never cross the serialization boundary — the single deny-list toAgentConfig strips. Everything else on the agent definition flows into AgentConfig by default, so a new serializable field works CLI → server → runtime without touching a mapper. A field added toAgentDefmust appear either inAgentConfigSchemaor here — the type-level guard in the internal-types test enforces that subtraction.