@agentproto/runtime 1.1.0 → 2.1.0

package/dist/telegram-proxy.mjs

@@ -0,0 +1,115 @@
+import { createServer, request } from 'http';
+
+/**
+ * @agentproto/runtime v0.1.0-alpha
+ * Long-running gateway: MCP server + HTTP transport + HEARTBEAT autonomy + conversation persistence over a workspace dir.
+ */
+
+function createTelegramProxy(opts) {
+  const log = opts.log ?? (() => {
+  });
+  let server = null;
+  return {
+    async start() {
+      server = createServer((req, res) => {
+        handleProxyRequest(req, res, opts, log);
+      });
+      return new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(opts.listenPort, "127.0.0.1", () => {
+          const addr = server.address();
+          const port = typeof addr === "object" && addr !== null ? addr.port : opts.listenPort;
+          const url = `http://127.0.0.1:${port}`;
+          log(`[telegram-proxy] listening on ${url}`);
+          resolve({ url, port });
+        });
+      });
+    },
+    async stop() {
+      if (!server) return;
+      await new Promise((resolve, reject) => {
+        server.close((err) => {
+          if (err) reject(err);
+          else resolve();
+        });
+      });
+      server = null;
+    }
+  };
+}
+function handleProxyRequest(req, res, opts, log) {
+  if (req.method !== "POST") {
+    res.writeHead(405, { "content-type": "application/json" });
+    res.end(JSON.stringify({ error: "method_not_allowed" }));
+    return;
+  }
+  const rawUrl = req.url ?? "/";
+  const normalized = normalizePath(rawUrl);
+  if (!normalized.startsWith("/inbound/")) {
+    res.writeHead(404, { "content-type": "application/json" });
+    res.end(JSON.stringify({ error: "not_found" }));
+    return;
+  }
+  const targetUrl = new URL(normalized, opts.targetBaseUrl);
+  const queryIdx = rawUrl.indexOf("?");
+  if (queryIdx >= 0) {
+    targetUrl.search = rawUrl.slice(queryIdx);
+  }
+  log(`[telegram-proxy] ${req.method} ${rawUrl} -> ${targetUrl.toString()}`);
+  const headers = {};
+  for (const [key, value] of Object.entries(req.headers)) {
+    if (value !== void 0) {
+      headers[key] = value;
+    }
+  }
+  headers.host = targetUrl.host;
+  const proxyReq = request(
+    {
+      hostname: targetUrl.hostname,
+      port: targetUrl.port || (targetUrl.protocol === "https:" ? 443 : 80),
+      path: targetUrl.pathname + targetUrl.search,
+      method: req.method,
+      headers
+    },
+    (proxyRes) => {
+      res.writeHead(proxyRes.statusCode ?? 502, proxyRes.headers);
+      proxyRes.pipe(res);
+    }
+  );
+  proxyReq.on("error", (err) => {
+    log(`[telegram-proxy] upstream error: ${err.message}`);
+    if (!res.headersSent) {
+      res.writeHead(502, { "content-type": "application/json" });
+      res.end(JSON.stringify({ error: "bad_gateway" }));
+    }
+  });
+  req.pipe(proxyReq);
+}
+function normalizePath(urlPath) {
+  const pathPart = urlPath.split("?")[0] ?? urlPath;
+  let decoded;
+  try {
+    decoded = decodeURIComponent(pathPart);
+  } catch {
+    return pathPart;
+  }
+  const hasTrailingSlash = decoded.endsWith("/") && decoded !== "/";
+  const segments = decoded.split("/").filter((s) => s !== "" && s !== ".");
+  const normalized = [];
+  for (const seg of segments) {
+    if (seg === "..") {
+      normalized.pop();
+    } else {
+      normalized.push(seg);
+    }
+  }
+  let result = "/" + normalized.join("/");
+  if (hasTrailingSlash && !result.endsWith("/")) {
+    result += "/";
+  }
+  return result;
+}
+
+export { createTelegramProxy };
+//# sourceMappingURL=telegram-proxy.mjs.map
+//# sourceMappingURL=telegram-proxy.mjs.map

package/dist/telegram-proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/telegram-proxy.ts"],"names":[],"mappings":";;;;;;;AAkCO,SAAS,oBAAoB,IAAA,EAA2C;AAC7E,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,KAAQ,MAAM;AAAA,EAAC,CAAA,CAAA;AAChC,EAAA,IAAI,MAAA,GAAwB,IAAA;AAE5B,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,GAAQ;AACZ,MAAA,MAAA,GAAS,YAAA,CAAa,CAAC,GAAA,EAAK,GAAA,KAAQ;AAClC,QAAA,kBAAA,CAAmB,GAAA,EAAK,GAAA,EAAK,IAAA,EAAM,GAAG,CAAA;AAAA,MACxC,CAAC,CAAA;AAED,MAAA,OAAO,IAAI,OAAA,CAAuC,CAAC,OAAA,EAAS,MAAA,KAAW;AACrE,QAAA,MAAA,CAAQ,IAAA,CAAK,SAAS,MAAM,CAAA;AAC5B,QAAA,MAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAA,EAAY,WAAA,EAAa,MAAM;AACjD,UAAA,MAAM,IAAA,GAAO,OAAQ,OAAA,EAAQ;AAC7B,UAAA,MAAM,IAAA,GAAO,OAAO,IAAA,KAAS,QAAA,IAAY,SAAS,IAAA,GAAO,IAAA,CAAK,OAAO,IAAA,CAAK,UAAA;AAC1E,UAAA,MAAM,GAAA,GAAM,oBAAoB,IAAI,CAAA,CAAA;AACpC,UAAA,GAAA,CAAI,CAAA,8BAAA,EAAiC,GAAG,CAAA,CAAE,CAAA;AAC1C,UAAA,OAAA,CAAQ,EAAE,GAAA,EAAK,IAAA,EAAM,CAAA;AAAA,QACvB,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,MAAM,IAAA,GAAO;AACX,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AAC3C,QAAA,MAAA,CAAQ,MAAM,CAAA,GAAA,KAAO;AACnB,UAAA,IAAI,GAAA,SAAY,GAAG,CAAA;AAAA,eACd,OAAA,EAAQ;AAAA,QACf,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AACD,MAAA,MAAA,GAAS,IAAA;AAAA,IACX;AAAA,GACF;AACF;AAEA,SAAS,kBAAA,CACP,GAAA,EACA,GAAA,EACA,IAAA,EACA,GAAA,EACM;AAEN,EAAA,IAAI,GAAA,CAAI,WAAW,MAAA,EAAQ;AACzB,IAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,IAAA,GAAA,CAAI,IAAI,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAC,CAAA;AACvD,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,IAAI,GAAA,IAAO,GAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,cAAc,MAAM,CAAA;AAGvC,EAAA,IAAI,CAAC,UAAA,CAAW,UAAA,CAAW,WAAW,CAAA,EAAG;AACvC,IAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,IAAA,GAAA,CAAI,IAAI,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAA,EAAa,CAAC,CAAA;AAC9C,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,IAAI,GAAA,CAAI,UAAA,EAAY,KAAK,aAAa,CAAA;AAExD,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AACnC,EAAA,IAAI,YAAY,CAAA,EAAG;AACjB,IAAA,SAAA,CAAU,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,QAAQ,CAAA;AAAA,EAC1C;AAEA,EAAA,GAAA,CAAI,CAAA,iBAAA,EAAoB,IAAI,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,IAAA,EAAO,SAAA,CAAU,QAAA,EAAU,CAAA,CAAE,CAAA;AAGzE,EAAA,MAAM,UAA6C,EAAC;AACpD,EAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACtD,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA,OAAA,CAAQ,GAAG,CAAA,GAAI,KAAA;AAAA,IACjB;AAAA,EACF;AACA,EAAA,OAAA,CAAQ,OAAO,SAAA,CAAU,IAAA;AAEzB,EAAA,MAAM,QAAA,GAAW,OAAA;AAAA,IACf;AAAA,MACE,UAAU,SAAA,CAAU,QAAA;AAAA,MACpB,MAAM,SAAA,CAAU,IAAA,KAAS,SAAA,CAAU,QAAA,KAAa,WAAW,GAAA,GAAM,EAAA,CAAA;AAAA,MACjE,IAAA,EAAM,SAAA,CAAU,QAAA,GAAW,SAAA,CAAU,MAAA;AAAA,MACrC,QAAQ,GAAA,CAAI,MAAA;AAAA,MACZ;AAAA,KACF;AAAA,IACA,CAAA,QAAA,KAAY;AACV,MAAA,GAAA,CAAI,SAAA,CAAU,QAAA,CAAS,UAAA,IAAc,GAAA,EAAK,SAAS,OAAO,CAAA;AAC1D,MAAA,QAAA,CAAS,KAAK,GAAG,CAAA;AAAA,IACnB;AAAA,GACF;AAEA,EAAA,QAAA,CAAS,EAAA,CAAG,SAAS,CAAA,GAAA,KAAO;AAC1B,IAAA,GAAA,CAAI,CAAA,iCAAA,EAAoC,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AACrD,IAAA,IAAI,CAAC,IAAI,WAAA,EAAa;AACpB,MAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,MAAA,GAAA,CAAI,IAAI,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,aAAA,EAAe,CAAC,CAAA;AAAA,IAClD;AAAA,EACF,CAAC,CAAA;AAMD,EAAA,GAAA,CAAI,KAAK,QAAQ,CAAA;AACnB;AAOA,SAAS,cAAc,OAAA,EAAyB;AAC9C,EAAA,MAAM,WAAW,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,OAAA;AAE1C,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,mBAAmB,QAAQ,CAAA;AAAA,EACvC,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,MAAM,gBAAA,GAAmB,OAAA,CAAQ,QAAA,CAAS,GAAG,KAAK,OAAA,KAAY,GAAA;AAE9D,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA,CAAE,OAAO,CAAA,CAAA,KAAK,CAAA,KAAM,EAAA,IAAM,CAAA,KAAM,GAAG,CAAA;AACrE,EAAA,MAAM,aAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,MAAA,UAAA,CAAW,GAAA,EAAI;AAAA,IACjB,CAAA,MAAO;AACL,MAAA,UAAA,CAAW,KAAK,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,GAAS,GAAA,GAAM,UAAA,CAAW,IAAA,CAAK,GAAG,CAAA;AACtC,EAAA,IAAI,gBAAA,IAAoB,CAAC,MAAA,CAAO,QAAA,CAAS,GAAG,CAAA,EAAG;AAC7C,IAAA,MAAA,IAAU,GAAA;AAAA,EACZ;AACA,EAAA,OAAO,MAAA;AACT","file":"telegram-proxy.mjs","sourcesContent":["/**\n * Narrow public ingress proxy for Telegram (and other) bot webhooks.\n *\n * SECURITY: the daemon's port (default 18790) exposes the entire control\n * plane — `session_list`, `agent_start`, `agent_kill`, etc. A bare public\n * tunnel to that port would expose full daemon control to anyone who finds\n * the URL. This proxy listens on its own port and forwards ONLY\n * `POST /inbound/*` to the daemon. Every other path or method is rejected\n * with 404/405.\n */\n\nimport { createServer, request, type IncomingMessage, type Server, type ServerResponse } from \"node:http\"\n\nexport interface TelegramProxyOptions {\n  targetBaseUrl: string\n  listenPort: number\n  log?: (msg: string) => void\n}\n\nexport interface TelegramProxy {\n  start(): Promise<{ url: string; port: number }>\n  stop(): Promise<void>\n}\n\n/**\n * Create a narrow reverse-proxy that forwards ONLY `POST /inbound/*`\n * to a target base URL. Every other path or method is rejected.\n *\n * SECURITY: the URL path is decoded, normalized (resolving `.` and `..`),\n * and then checked. Only paths whose normalized form literally begins with\n * `/inbound/` are forwarded. Path-traversal attempts such as\n * `/inbound/../sessions/foo` decode and normalize to `/sessions/foo`, which\n * does not start with `/inbound/` and is rejected with 404.\n */\nexport function createTelegramProxy(opts: TelegramProxyOptions): TelegramProxy {\n  const log = opts.log ?? (() => {})\n  let server: Server | null = null\n\n  return {\n    async start() {\n      server = createServer((req, res) => {\n        handleProxyRequest(req, res, opts, log)\n      })\n\n      return new Promise<{ url: string; port: number }>((resolve, reject) => {\n        server!.once(\"error\", reject)\n        server!.listen(opts.listenPort, \"127.0.0.1\", () => {\n          const addr = server!.address()\n          const port = typeof addr === \"object\" && addr !== null ? addr.port : opts.listenPort\n          const url = `http://127.0.0.1:${port}`\n          log(`[telegram-proxy] listening on ${url}`)\n          resolve({ url, port })\n        })\n      })\n    },\n\n    async stop() {\n      if (!server) return\n      await new Promise<void>((resolve, reject) => {\n        server!.close(err => {\n          if (err) reject(err)\n          else resolve()\n        })\n      })\n      server = null\n    },\n  }\n}\n\nfunction handleProxyRequest(\n  req: IncomingMessage,\n  res: ServerResponse,\n  opts: TelegramProxyOptions,\n  log: (msg: string) => void,\n): void {\n  // Only POST is allowed.\n  if (req.method !== \"POST\") {\n    res.writeHead(405, { \"content-type\": \"application/json\" })\n    res.end(JSON.stringify({ error: \"method_not_allowed\" }))\n    return\n  }\n\n  const rawUrl = req.url ?? \"/\"\n  const normalized = normalizePath(rawUrl)\n\n  // SECURITY: only forward paths whose normalized form literally begins with /inbound/\n  if (!normalized.startsWith(\"/inbound/\")) {\n    res.writeHead(404, { \"content-type\": \"application/json\" })\n    res.end(JSON.stringify({ error: \"not_found\" }))\n    return\n  }\n\n  const targetUrl = new URL(normalized, opts.targetBaseUrl)\n  // Preserve query string.\n  const queryIdx = rawUrl.indexOf(\"?\")\n  if (queryIdx >= 0) {\n    targetUrl.search = rawUrl.slice(queryIdx)\n  }\n\n  log(`[telegram-proxy] ${req.method} ${rawUrl} -> ${targetUrl.toString()}`)\n\n  // Build headers: forward everything except Host, which we rewrite.\n  const headers: Record<string, string | string[]> = {}\n  for (const [key, value] of Object.entries(req.headers)) {\n    if (value !== undefined) {\n      headers[key] = value\n    }\n  }\n  headers.host = targetUrl.host\n\n  const proxyReq = request(\n    {\n      hostname: targetUrl.hostname,\n      port: targetUrl.port || (targetUrl.protocol === \"https:\" ? 443 : 80),\n      path: targetUrl.pathname + targetUrl.search,\n      method: req.method,\n      headers,\n    },\n    proxyRes => {\n      res.writeHead(proxyRes.statusCode ?? 502, proxyRes.headers)\n      proxyRes.pipe(res)\n    },\n  )\n\n  proxyReq.on(\"error\", err => {\n    log(`[telegram-proxy] upstream error: ${err.message}`)\n    if (!res.headersSent) {\n      res.writeHead(502, { \"content-type\": \"application/json\" })\n      res.end(JSON.stringify({ error: \"bad_gateway\" }))\n    }\n  })\n\n  // The proxy does not follow redirects; it passes the upstream response\n  // (including 301/302) straight through to the caller. This is the default\n  // behaviour of node:http.request.\n\n  req.pipe(proxyReq)\n}\n\n/**\n * Decode percent-encoding and collapse `.` / `..` segments.\n * Returns the raw path part on malformed percent-encoding so it fails the\n * `/inbound/` prefix check downstream.\n */\nfunction normalizePath(urlPath: string): string {\n  const pathPart = urlPath.split(\"?\")[0] ?? urlPath\n\n  let decoded: string\n  try {\n    decoded = decodeURIComponent(pathPart)\n  } catch {\n    // Malformed percent-encoding — return raw so it fails the allowlist.\n    return pathPart\n  }\n\n  const hasTrailingSlash = decoded.endsWith(\"/\") && decoded !== \"/\"\n\n  const segments = decoded.split(\"/\").filter(s => s !== \"\" && s !== \".\")\n  const normalized: string[] = []\n  for (const seg of segments) {\n    if (seg === \"..\") {\n      normalized.pop()\n    } else {\n      normalized.push(seg)\n    }\n  }\n\n  let result = \"/\" + normalized.join(\"/\")\n  if (hasTrailingSlash && !result.endsWith(\"/\")) {\n    result += \"/\"\n  }\n  return result\n}\n"]}

package/dist/user-presets.d.ts

@@ -0,0 +1,91 @@
+import { z } from 'zod';
+import { S as SessionConfig, R as RouteSpec, P as Posture, E as EffortLevel, C as ContextProfile } from './session-config-DIf6wYYP.js';
+import '@agentproto/auth';
+import './context-continuity-B9n0t0v-.js';
+
+/**
+ * User-owned spawn presets.
+ *
+ * This is deliberately separate from `preset-tools.ts`: provider presets are
+ * static gateway definitions shipped by packages, while a UserPreset is a
+ * private saved combination of the orthogonal session-config axes.
+ */
+
+/** A reusable, user-scoped subset of the spawn/session config axes. */
+interface UserPreset extends Partial<SessionConfig> {
+    /** Stable machine-local id, e.g. `fast-deepseek`. */
+    id: string;
+    /** Human-readable name shown by CLI and editor pickers. */
+    label: string;
+    /** Adapter harness to use. Omitted means the caller selects one. */
+    adapter?: string;
+    /** Canonical harness slug — alias for `adapter`. */
+    harness?: string;
+    model?: string;
+    route?: RouteSpec;
+    access?: {
+        profileRef?: string;
+    };
+    posture?: Posture;
+    effort?: EffortLevel;
+    contextProfile?: ContextProfile;
+    /** Working directory the favorite pins to. When set, a spawn from this
+     *  preset lands here regardless of the caller's active folder — the axis
+     *  that makes a favorite fully location-pinned (true zero-input). Omitted
+     *  means the caller's cwd ladder resolves it as before. */
+    cwd?: string;
+    /** Skills to preload for a spawn from this preset — the same axis as
+     *  `SpawnAgentSessionInput.skills`. Omitted means the adapter/defaults
+     *  decide. */
+    skills?: string[];
+}
+declare const userPresetsFileSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    presets: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        adapter: z.ZodOptional<z.ZodString>;
+        harness: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        route: z.ZodOptional<z.ZodObject<{
+            gateway: z.ZodString;
+            baseUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        access: z.ZodOptional<z.ZodObject<{
+            profileRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        posture: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+            default: "default";
+            plan: "plan";
+            "accept-edits": "accept-edits";
+            bypass: "bypass";
+            "read-only": "read-only";
+        }>, z.ZodObject<{
+            harnessModeId: z.ZodString;
+        }, z.core.$strip>]>>;
+        effort: z.ZodOptional<z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+            ultracode: "ultracode";
+        }>>;
+        contextProfile: z.ZodOptional<z.ZodString>;
+        cwd: z.ZodOptional<z.ZodString>;
+        skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type UserPresetsFile = z.infer<typeof userPresetsFileSchema>;
+declare function userPresetsPath(): string;
+/** Missing or malformed user config is treated as empty — a bad preset must
+ * never prevent the daemon from starting. Writes always restore valid JSON. */
+declare function loadUserPresets(): Promise<UserPresetsFile>;
+declare function listUserPresets(): Promise<UserPreset[]>;
+declare function getUserPreset(id: string): Promise<UserPreset | undefined>;
+/** Add or replace a preset by id. The parser makes this the single validation
+ * boundary for CLI, MCP and editor callers. */
+declare function saveUserPreset(preset: UserPreset): Promise<void>;
+declare function deleteUserPreset(id: string): Promise<boolean>;
+
+export { type UserPreset, type UserPresetsFile, deleteUserPreset, getUserPreset, listUserPresets, loadUserPresets, saveUserPreset, userPresetsPath };

package/dist/user-presets.mjs

@@ -0,0 +1,84 @@
+import { readFile, mkdir, writeFile } from 'fs/promises';
+import { homedir } from 'os';
+import { resolve, join } from 'path';
+import { z } from 'zod';
+
+/**
+ * @agentproto/runtime v0.1.0-alpha
+ * Long-running gateway: MCP server + HTTP transport + HEARTBEAT autonomy + conversation persistence over a workspace dir.
+ */
+
+var effortSchema = z.enum(["low", "medium", "high", "xhigh", "max", "ultracode"]);
+var postureSchema = z.union([
+  z.enum(["default", "plan", "accept-edits", "bypass", "read-only"]),
+  z.object({ harnessModeId: z.string().min(1) })
+]);
+var routeSchema = z.object({
+  gateway: z.string().min(1),
+  baseUrl: z.string().url().optional()
+});
+var userPresetSchema = z.object({
+  id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),
+  label: z.string().min(1),
+  adapter: z.string().min(1).optional(),
+  harness: z.string().min(1).optional(),
+  model: z.string().min(1).optional(),
+  route: routeSchema.optional(),
+  access: z.object({ profileRef: z.string().min(1).optional() }).optional(),
+  posture: postureSchema.optional(),
+  effort: effortSchema.optional(),
+  contextProfile: z.string().min(1).optional(),
+  cwd: z.string().min(1).optional(),
+  skills: z.array(z.string().min(1)).optional()
+});
+var userPresetsFileSchema = z.object({
+  version: z.literal(1),
+  presets: z.array(userPresetSchema)
+});
+function emptyFile() {
+  return { version: 1, presets: [] };
+}
+function userPresetsPath() {
+  return resolve(homedir(), ".agentproto", "presets.json");
+}
+async function loadUserPresets() {
+  try {
+    return userPresetsFileSchema.parse(JSON.parse(await readFile(userPresetsPath(), "utf8")));
+  } catch {
+    return emptyFile();
+  }
+}
+async function writeUserPresets(file) {
+  const dir = join(homedir(), ".agentproto");
+  await mkdir(dir, { recursive: true });
+  await writeFile(userPresetsPath(), JSON.stringify(file, null, 2) + "\n", {
+    encoding: "utf8",
+    mode: 384
+  });
+}
+async function listUserPresets() {
+  return (await loadUserPresets()).presets;
+}
+async function getUserPreset(id) {
+  return (await loadUserPresets()).presets.find((preset) => preset.id === id);
+}
+async function saveUserPreset(preset) {
+  const validated = userPresetSchema.parse(preset);
+  const file = await loadUserPresets();
+  const index = file.presets.findIndex((existing) => existing.id === validated.id);
+  if (index === -1) file.presets.push(validated);
+  else file.presets[index] = validated;
+  await writeUserPresets(file);
+}
+async function deleteUserPreset(id) {
+  const file = await loadUserPresets();
+  const index = file.presets.findIndex((preset) => preset.id === id);
+  if (index === -1) return false;
+  file.presets.splice(index, 1);
+  await writeUserPresets(file);
+  return true;
+}
+
+export { deleteUserPreset, getUserPreset, listUserPresets, loadUserPresets, saveUserPreset, userPresetsPath };
+//# sourceMappingURL=user-presets.mjs.map
+//# sourceMappingURL=user-presets.mjs.map

package/dist/user-presets.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/user-presets.ts"],"names":[],"mappings":";;;;;;;;;;AAoBA,IAAM,YAAA,GAAe,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,UAAU,MAAA,EAAQ,OAAA,EAAS,KAAA,EAAO,WAAW,CAAC,CAAA;AAClF,IAAM,aAAA,GAAgB,EAAE,KAAA,CAAM;AAAA,EAC5B,CAAA,CAAE,KAAK,CAAC,SAAA,EAAW,QAAQ,cAAA,EAAgB,QAAA,EAAU,WAAW,CAAC,CAAA;AAAA,EACjE,CAAA,CAAE,MAAA,CAAO,EAAE,aAAA,EAAe,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,CAAC,CAAA,EAAG;AAC/C,CAAC,CAAA;AACD,IAAM,WAAA,GAAc,EAAE,MAAA,CAAO;AAAA,EAC3B,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACzB,SAAS,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA;AAC5B,CAAC,CAAA;AA6BD,IAAM,gBAAA,GAAmB,EAAE,MAAA,CAAO;AAAA,EAChC,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,sBAAsB,CAAA;AAAA,EAC3C,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,SAAS,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACpC,SAAS,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACpC,OAAO,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EAClC,KAAA,EAAO,YAAY,QAAA,EAAS;AAAA,EAC5B,MAAA,EAAQ,CAAA,CAAE,MAAA,CAAO,EAAE,YAAY,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS,EAAG,EAAE,QAAA,EAAS;AAAA,EACxE,OAAA,EAAS,cAAc,QAAA,EAAS;AAAA,EAChC,MAAA,EAAQ,aAAa,QAAA,EAAS;AAAA,EAC9B,gBAAgB,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3C,KAAK,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EAChC,MAAA,EAAQ,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,CAAC,CAAA,CAAE,QAAA;AACrC,CAAC,CAAA;AAED,IAAM,qBAAA,GAAwB,EAAE,MAAA,CAAO;AAAA,EACrC,OAAA,EAAS,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAA;AAAA,EACpB,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,gBAAgB;AACnC,CAAC,CAAA;AAID,SAAS,SAAA,GAA6B;AACpC,EAAA,OAAO,EAAE,OAAA,EAAS,CAAA,EAAG,OAAA,EAAS,EAAC,EAAE;AACnC;AAEO,SAAS,eAAA,GAA0B;AACxC,EAAA,OAAO,OAAA,CAAQ,OAAA,EAAQ,EAAG,aAAA,EAAe,cAAc,CAAA;AACzD;AAIA,eAAsB,eAAA,GAA4C;AAChE,EAAA,IAAI;AACF,IAAA,OAAO,qBAAA,CAAsB,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,MAAM,SAAS,eAAA,EAAgB,EAAG,MAAM,CAAC,CAAC,CAAA;AAAA,EAC1F,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,SAAA,EAAU;AAAA,EACnB;AACF;AAEA,eAAe,iBAAiB,IAAA,EAAsC;AACpE,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,EAAQ,EAAG,aAAa,CAAA;AACzC,EAAA,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,SAAA,EAAW,MAAM,CAAA;AACpC,EAAA,MAAM,SAAA,CAAU,iBAAgB,EAAG,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA,GAAI,IAAA,EAAM;AAAA,IACvE,QAAA,EAAU,MAAA;AAAA,IACV,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AAEA,eAAsB,eAAA,GAAyC;AAC7D,EAAA,OAAA,CAAQ,MAAM,iBAAgB,EAAG,OAAA;AACnC;AAEA,eAAsB,cAAc,EAAA,EAA6C;AAC/E,EAAA,OAAA,CAAQ,MAAM,iBAAgB,EAAG,OAAA,CAAQ,KAAK,CAAA,MAAA,KAAU,MAAA,CAAO,OAAO,EAAE,CAAA;AAC1E;AAIA,eAAsB,eAAe,MAAA,EAAmC;AACtE,EAAA,MAAM,SAAA,GAAY,gBAAA,CAAiB,KAAA,CAAM,MAAM,CAAA;AAC/C,EAAA,MAAM,IAAA,GAAO,MAAM,eAAA,EAAgB;AACnC,EAAA,MAAM,KAAA,GAAQ,KAAK,OAAA,CAAQ,SAAA,CAAU,cAAY,QAAA,CAAS,EAAA,KAAO,UAAU,EAAE,CAAA;AAC7E,EAAA,IAAI,KAAA,KAAU,EAAA,EAAI,IAAA,CAAK,OAAA,CAAQ,KAAK,SAAS,CAAA;AAAA,OACxC,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,GAAI,SAAA;AAC3B,EAAA,MAAM,iBAAiB,IAAI,CAAA;AAC7B;AAEA,eAAsB,iBAAiB,EAAA,EAA8B;AACnE,EAAA,MAAM,IAAA,GAAO,MAAM,eAAA,EAAgB;AACnC,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,MAAA,KAAU,MAAA,CAAO,OAAO,EAAE,CAAA;AAC/D,EAAA,IAAI,KAAA,KAAU,IAAI,OAAO,KAAA;AACzB,EAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AAC5B,EAAA,MAAM,iBAAiB,IAAI,CAAA;AAC3B,EAAA,OAAO,IAAA;AACT","file":"user-presets.mjs","sourcesContent":["/**\n * User-owned spawn presets.\n *\n * This is deliberately separate from `preset-tools.ts`: provider presets are\n * static gateway definitions shipped by packages, while a UserPreset is a\n * private saved combination of the orthogonal session-config axes.\n */\n\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\"\nimport { homedir } from \"node:os\"\nimport { join, resolve } from \"node:path\"\nimport { z } from \"zod\"\nimport type {\n  ContextProfile,\n  EffortLevel,\n  Posture,\n  RouteSpec,\n  SessionConfig,\n} from \"./session-config.js\"\n\nconst effortSchema = z.enum([\"low\", \"medium\", \"high\", \"xhigh\", \"max\", \"ultracode\"])\nconst postureSchema = z.union([\n  z.enum([\"default\", \"plan\", \"accept-edits\", \"bypass\", \"read-only\"]),\n  z.object({ harnessModeId: z.string().min(1) }),\n])\nconst routeSchema = z.object({\n  gateway: z.string().min(1),\n  baseUrl: z.string().url().optional(),\n})\n\n/** A reusable, user-scoped subset of the spawn/session config axes. */\nexport interface UserPreset extends Partial<SessionConfig> {\n  /** Stable machine-local id, e.g. `fast-deepseek`. */\n  id: string\n  /** Human-readable name shown by CLI and editor pickers. */\n  label: string\n  /** Adapter harness to use. Omitted means the caller selects one. */\n  adapter?: string\n  /** Canonical harness slug — alias for `adapter`. */\n  harness?: string\n  model?: string\n  route?: RouteSpec\n  access?: { profileRef?: string }\n  posture?: Posture\n  effort?: EffortLevel\n  contextProfile?: ContextProfile\n  /** Working directory the favorite pins to. When set, a spawn from this\n   *  preset lands here regardless of the caller's active folder — the axis\n   *  that makes a favorite fully location-pinned (true zero-input). Omitted\n   *  means the caller's cwd ladder resolves it as before. */\n  cwd?: string\n  /** Skills to preload for a spawn from this preset — the same axis as\n   *  `SpawnAgentSessionInput.skills`. Omitted means the adapter/defaults\n   *  decide. */\n  skills?: string[]\n}\n\nconst userPresetSchema = z.object({\n  id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),\n  label: z.string().min(1),\n  adapter: z.string().min(1).optional(),\n  harness: z.string().min(1).optional(),\n  model: z.string().min(1).optional(),\n  route: routeSchema.optional(),\n  access: z.object({ profileRef: z.string().min(1).optional() }).optional(),\n  posture: postureSchema.optional(),\n  effort: effortSchema.optional(),\n  contextProfile: z.string().min(1).optional(),\n  cwd: z.string().min(1).optional(),\n  skills: z.array(z.string().min(1)).optional(),\n}) satisfies z.ZodType<UserPreset>\n\nconst userPresetsFileSchema = z.object({\n  version: z.literal(1),\n  presets: z.array(userPresetSchema),\n})\n\nexport type UserPresetsFile = z.infer<typeof userPresetsFileSchema>\n\nfunction emptyFile(): UserPresetsFile {\n  return { version: 1, presets: [] }\n}\n\nexport function userPresetsPath(): string {\n  return resolve(homedir(), \".agentproto\", \"presets.json\")\n}\n\n/** Missing or malformed user config is treated as empty — a bad preset must\n * never prevent the daemon from starting. Writes always restore valid JSON. */\nexport async function loadUserPresets(): Promise<UserPresetsFile> {\n  try {\n    return userPresetsFileSchema.parse(JSON.parse(await readFile(userPresetsPath(), \"utf8\")))\n  } catch {\n    return emptyFile()\n  }\n}\n\nasync function writeUserPresets(file: UserPresetsFile): Promise<void> {\n  const dir = join(homedir(), \".agentproto\")\n  await mkdir(dir, { recursive: true })\n  await writeFile(userPresetsPath(), JSON.stringify(file, null, 2) + \"\\n\", {\n    encoding: \"utf8\",\n    mode: 0o600,\n  })\n}\n\nexport async function listUserPresets(): Promise<UserPreset[]> {\n  return (await loadUserPresets()).presets\n}\n\nexport async function getUserPreset(id: string): Promise<UserPreset | undefined> {\n  return (await loadUserPresets()).presets.find(preset => preset.id === id)\n}\n\n/** Add or replace a preset by id. The parser makes this the single validation\n * boundary for CLI, MCP and editor callers. */\nexport async function saveUserPreset(preset: UserPreset): Promise<void> {\n  const validated = userPresetSchema.parse(preset)\n  const file = await loadUserPresets()\n  const index = file.presets.findIndex(existing => existing.id === validated.id)\n  if (index === -1) file.presets.push(validated)\n  else file.presets[index] = validated\n  await writeUserPresets(file)\n}\n\nexport async function deleteUserPreset(id: string): Promise<boolean> {\n  const file = await loadUserPresets()\n  const index = file.presets.findIndex(preset => preset.id === id)\n  if (index === -1) return false\n  file.presets.splice(index, 1)\n  await writeUserPresets(file)\n  return true\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/runtime",
-  "version": "1.1.0",
+  "version": "2.1.0",
   "description": "@agentproto/runtime — long-running gateway that turns an agentproto workspace into a live runtime. Composes @agentproto/mcp-server (CRUD verbs) with HTTP transport, HEARTBEAT.md autonomy loop, and append-only conversation persistence. Drop a workspace dir, point your MCP client at it, and the agent ticks on its own.",
   "keywords": [
     "agentproto",
@@ -30,6 +30,11 @@
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
     },
+    "./catalog-models": {
+      "types": "./dist/catalog-models.d.ts",
+      "import": "./dist/catalog-models.mjs",
+      "default": "./dist/catalog-models.mjs"
+    },
     "./conversations": {
       "types": "./dist/conversations.d.ts",
       "import": "./dist/conversations.mjs",
@@ -46,6 +51,11 @@
       "default": "./dist/workspace-fs.mjs"
     },
     "./package.json": "./package.json",
+    "./pr-provenance": {
+      "types": "./dist/pr-provenance.d.ts",
+      "import": "./dist/pr-provenance.mjs",
+      "default": "./dist/pr-provenance.mjs"
+    },
     "./workspaces-config": {
       "types": "./dist/workspaces-config.d.ts",
       "import": "./dist/workspaces-config.mjs",
@@ -75,6 +85,16 @@
       "types": "./dist/session-story.d.ts",
       "import": "./dist/session-story.mjs",
       "default": "./dist/session-story.mjs"
+    },
+    "./session-story-panel": {
+      "types": "./dist/session-story-panel.d.ts",
+      "import": "./dist/session-story-panel.mjs",
+      "default": "./dist/session-story-panel.mjs"
+    },
+    "./user-presets": {
+      "types": "./dist/user-presets.d.ts",
+      "import": "./dist/user-presets.mjs",
+      "default": "./dist/user-presets.mjs"
     }
   },
   "files": [
@@ -86,42 +106,45 @@
     "access": "public"
   },
   "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "croner": "^9.0.0",
-    "@modelcontextprotocol/sdk": "^1.29.0",
     "gray-matter": "^4.0.3",
-    "ws": "^8.18.0",
+    "ws": "^8.21.1",
     "zod": "^4.4.3",
-    "@agentproto/acp": "0.6.0",
-    "@agentproto/auth": "0.2.0",
-    "@agentproto/driver-agent-cli": "2.0.1",
-    "@agentproto/workflow": "0.1.0",
-    "@agentproto/workflow-loader": "0.1.1",
-    "@agentproto/workflow-runtime": "0.5.0",
-    "@agentproto/provider-kit": "0.3.0",
-    "@agentproto/provider-presets": "0.4.1",
-    "@agentproto/eval-reporters": "0.2.3",
+    "@agentproto/acp": "0.7.0",
     "@agentproto/agent": "0.2.1",
+    "@agentproto/auth": "1.0.0",
+    "@agentproto/command-sandbox": "0.2.0",
+    "@agentproto/driver": "0.2.0",
+    "@agentproto/driver-agent-cli": "2.1.0",
+    "@agentproto/eval-reporters": "0.2.5",
     "@agentproto/manifest": "0.2.1",
-    "@agentproto/mcp-server": "0.2.3",
-    "@agentproto/model-catalog": "0.6.0",
-    "@agentproto/providers-store": "0.3.1",
+    "@agentproto/mcp-server": "0.2.5",
+    "@agentproto/model-catalog": "0.8.0",
+    "@agentproto/provider-kit": "0.4.1",
+    "@agentproto/provider-presets": "0.5.1",
+    "@agentproto/providers-store": "0.3.3",
     "@agentproto/redaction": "0.2.1",
-    "@agentproto/sandbox": "0.1.5",
-    "@agentproto/secrets": "0.2.1",
-    "@agentproto/telemetry-langfuse": "0.2.2"
+    "@agentproto/routine": "0.2.0",
+    "@agentproto/sandbox": "0.2.1",
+    "@agentproto/secrets": "0.2.2",
+    "@agentproto/telemetry-langfuse": "0.2.3",
+    "@agentproto/tool": "0.2.1",
+    "@agentproto/workflow": "0.1.1",
+    "@agentproto/workflow-loader": "0.1.2",
+    "@agentproto/workflow-runtime": "0.6.0"
   },
   "optionalDependencies": {
-    "@agentproto/sandbox-e2b": "0.2.1"
+    "@agentproto/sandbox-e2b": "0.3.1"
   },
   "devDependencies": {
     "@types/node": "^25.6.2",
     "@types/ws": "^8.5.13",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
+    "vite-node": "^3.2.4",
     "vitest": "^3.2.4",
-    "@agentproto/driver": "0.1.3",
-    "@agentproto/rendezvous": "0.2.0",
-    "@agentproto/tool": "0.2.1",
+    "@agentproto/rendezvous": "0.2.1",
     "@agentproto/tooling": "0.1.0-alpha.0"
   },
   "scripts": {
@@ -130,6 +153,8 @@
     "clean": "rm -rf dist",
     "check-types": "tsc --noEmit",
     "test": "vitest run --passWithNoTests",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "sim:inbound": "vite-node scripts/simulate-inbound.mjs",
+    "telegram:proxy": "vite-node scripts/telegram-proxy.mjs"
   }
 }