@agentproto/runtime 4.1.0 → 5.2.1

package/dist/config.d.ts

@@ -1,5 +1,5 @@
-import { S as SpawnDefaultsConfig } from './spawn-defaults-CZj39Znq.js';
-import './context-continuity-Bn99UtVC.js';
+import { S as SpawnDefaultsConfig } from './spawn-defaults-CHvz85DD.js';
+import './context-continuity-BfNVbX5W.js';
 import '@agentproto/acp';
 import '@agentproto/command-sandbox';
 import '@agentproto/model-catalog';
@@ -183,6 +183,25 @@ interface FeaturesConfig {
      *  an opt-in feature; when off, the `llm-endpoint` custom route is not
      *  registered and the `llm_endpoint_*` MCP tools are not exposed. */
     llmEndpoint?: boolean;
+    /** Expose this daemon's local inference endpoint(s) (the `llmEndpoint`
+     *  sidecar above) to paired controllers over a HOST-scoped pairing —
+     *  `GET /device-inference/v1/models` + `POST
+     *  /device-inference/v1/chat/completions` in http-server.ts. Default
+     *  false: even with `llmEndpoint` on, a plain remote-control pairing (or
+     *  `serve --connect`) never gets these routes regardless of this flag —
+     *  it also requires the pairing itself to be host-scoped (`pair offer
+     *  --host` + `devices add`). Toggle via `agentproto devices
+     *  share-inference on|off`. */
+    deviceInferenceShare?: boolean;
+    /** Opt this daemon in to being usable as an `agent_start({ sandbox:
+     *  "device:<name>" })` target (DEVICES-PLAN PR-D) — exposes
+     *  `/device-spawn/*` in http-server.ts, a self-proxy onto this daemon's
+     *  own `/mcp` + `/sessions/:id/events/stream`. Default false: even with
+     *  this on, only a HOST-scoped pairing (`pair offer --host` + `devices
+     *  add`) can reach the routes — a plain remote-control pairing never can,
+     *  whatever this is set to. Toggle via `agentproto devices allow-spawn
+     *  on|off`. */
+    deviceSpawnAllow?: boolean;
 }
 /**
  * Policy for `agentproto worktree new` (PLAN.md §1.4 — config carries
@@ -310,6 +329,30 @@ interface ProvenanceConfig {
     /** Enable the opt-in `gh` provenance PATH shim for spawned sessions. */
     wrapGh?: boolean;
 }
+/**
+ * Sentinel auto-link policy (AIP-60 §6, step 4) — whether a PR an executor
+ * session opens gets a sentinel created for it automatically.
+ */
+interface SentinelConfig {
+    /** Auto-watch a PR when a session opens one (`recordOpenedPr`, fed by
+     *  `command_execute`'s stamper and both `pr-provenance-reconciler.ts`
+     *  lanes). When unset, the daemon defaults to `true` only when the
+     *  `local-gh` provider is available (i.e. `gh auth status` succeeds) —
+     *  otherwise `false`, logged once. Explicitly setting this always wins
+     *  over that probe. Per-spawn opt-out: `agent_start.sentinel: false`. */
+    autoWatchPrs?: boolean;
+}
+/**
+ * Review-primitive host policy (`@agentproto/review` + `review-runner.ts`).
+ */
+interface ReviewConfig {
+    /** The owner identity attestation signatures claim (`attestor.signature.
+     *  principal`) — see `review-signing.ts`'s `resolvePrincipal`. When unset,
+     *  the daemon falls back to `git config user.email` of the reviewed repo,
+     *  then a host-derived value; this never blocks signing, it only lets an
+     *  operator pin one identity across every repo the daemon reviews. */
+    principal?: string;
+}
 /**
  * Session-presence policy — how the dashboard triages a session into its
  * `running` / `tending` / `attention` / `quiet` presence state (see
@@ -492,6 +535,10 @@ interface AgentprotoConfig {
     sessions?: SessionsConfig;
     /** Provenance policy — the opt-in `gh` PATH shim. See {@link ProvenanceConfig}. */
     provenance?: ProvenanceConfig;
+    /** Sentinel auto-link policy. See {@link SentinelConfig}. */
+    sentinel?: SentinelConfig;
+    /** Review-primitive host policy. See {@link ReviewConfig}. */
+    review?: ReviewConfig;
     /** Daemon-side AGENTS.md resolution/injection policy. See {@link AgentsMdConfig}. */
     agentsMd?: AgentsMdConfig;
     /** Daemon-side session titler (`session-titler.ts`). DEFAULT OFF — when
@@ -564,4 +611,4 @@ declare function getConfigKey(cfg: AgentprotoConfig, dotted: string): unknown;
  */
 declare function setConfigKey(cfg: AgentprotoConfig, dotted: string, value: unknown): AgentprotoConfig;
 
-export { type AcpAgentConfigEntry, type AgentprotoConfig, type AgentsMdConfig, CONFIG_FILE_PATH, CONFIG_VERSION, type DaemonConfig, type FeaturesConfig, type PairingConfig, type ProfileConfig, type ProvenanceConfig, type SessionsConfig, type SpawnAttachMode, type SpawnConfig, type SpawnDedupeMode, type TerminalPreset, type TitlerConfig, type TunnelConfig, type WorktreeIsolationMode, type WorktreesConfig, getConfigKey, loadConfig, saveConfig, setConfigKey };
+export { type AcpAgentConfigEntry, type AgentprotoConfig, type AgentsMdConfig, CONFIG_FILE_PATH, CONFIG_VERSION, type DaemonConfig, type FeaturesConfig, type PairingConfig, type ProfileConfig, type ProvenanceConfig, type ReviewConfig, type SentinelConfig, type SessionsConfig, type SpawnAttachMode, type SpawnConfig, type SpawnDedupeMode, type TerminalPreset, type TitlerConfig, type TunnelConfig, type WorktreeIsolationMode, type WorktreesConfig, getConfigKey, loadConfig, saveConfig, setConfigKey };

package/dist/config.mjs

@@ -16,6 +16,7 @@ import '@agentproto/command-sandbox';
 import '@agentproto/plugin-local-browser';
 import '@modelcontextprotocol/sdk/types.js';
 import '@agentproto/provider-kit';
+import '@agentproto/llm-endpoint';
 import '@modelcontextprotocol/sdk/client/index.js';
 import '@modelcontextprotocol/sdk/client/streamableHttp.js';
 import 'net';
@@ -1944,6 +1945,29 @@ var init_worktree_identity = __esm({
     z.object({ worktreeId: z.string() });
   }
 });
+var init_mcp_imports = __esm({
+  "src/mcp-imports.ts"() {
+  }
+});
+var bundleIdSchema, bundleSchema;
+var init_bundles = __esm({
+  "src/bundles.ts"() {
+    init_mcp_imports();
+    bundleIdSchema = z.string().regex(/^[a-z0-9][a-z0-9-]*$/, "id must be lowercase kebab-case (letters, digits, hyphens)");
+    bundleSchema = z.object({
+      id: bundleIdSchema,
+      label: z.string().min(1),
+      description: z.string().min(1).optional(),
+      mcpImports: z.array(z.string().min(1)),
+      includeDaemon: z.boolean().optional(),
+      skills: z.array(z.string().min(1))
+    });
+    z.object({
+      version: z.literal(1),
+      bundles: z.array(bundleSchema)
+    });
+  }
+});
 var init_catalog_models = __esm({
   "src/catalog-models.ts"() {
     init_spawn_defaults();
@@ -1996,6 +2020,41 @@ var init_canonical_posture = __esm({
     })();
   }
 });
+var effortSchema, postureSchema, routeSchema, userPresetSchema;
+var init_user_presets = __esm({
+  "src/user-presets.ts"() {
+    effortSchema = z.enum(["low", "medium", "high", "xhigh", "max", "ultracode"]);
+    postureSchema = z.union([
+      z.enum(["default", "plan", "accept-edits", "bypass", "read-only"]),
+      z.object({ harnessModeId: z.string().min(1) })
+    ]);
+    routeSchema = z.object({
+      gateway: z.string().min(1),
+      baseUrl: z.string().url().optional()
+    });
+    userPresetSchema = z.object({
+      id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),
+      label: z.string().min(1),
+      adapter: z.string().min(1).optional(),
+      harness: z.string().min(1).optional(),
+      model: z.string().min(1).optional(),
+      route: routeSchema.optional(),
+      access: z.object({ profileRef: z.string().min(1).optional() }).optional(),
+      posture: postureSchema.optional(),
+      effort: effortSchema.optional(),
+      contextProfile: z.string().min(1).optional(),
+      cwd: z.string().min(1).optional(),
+      skills: z.array(z.string().min(1)).optional(),
+      bundles: z.array(z.string().min(1)).optional(),
+      browser: z.union([z.literal("headless"), z.literal(false)]).optional(),
+      lastUsedAt: z.string().min(1).optional()
+    });
+    z.object({
+      version: z.literal(1),
+      presets: z.array(userPresetSchema)
+    });
+  }
+});
 var harnessPresetSchema;
 var init_harness_preset_store = __esm({
   "src/harness-preset-store.ts"() {
@@ -2096,6 +2155,10 @@ var init_session_title = __esm({
   "src/session-title.ts"() {
   }
 });
+var init_inference_binding = __esm({
+  "src/inference-binding.ts"() {
+  }
+});
 
 // src/mcp-credential-deps.ts
 var init_mcp_credential_deps = __esm({
@@ -2147,16 +2210,20 @@ var init_sandbox_adapters = __esm({
 var init_session_spawn = __esm({
   "src/session-spawn.ts"() {
     init_sessions();
+    init_transcript_writer();
     init_workspaces_config();
     init_config();
     init_worktree_identity();
     init_spawn_defaults();
+    init_bundles();
+    init_mcp_imports();
     init_launch_config();
     init_claude_code_oauth_source();
     init_providers_store();
     init_catalog_models();
     init_context_continuity();
     init_canonical_posture();
+    init_user_presets();
     init_harness_preset_store();
     init_browser_mount();
     init_role();
@@ -2165,6 +2232,7 @@ var init_session_spawn = __esm({
     init_agents_md();
     init_workspace_rules();
     init_session_title();
+    init_inference_binding();
     init_mcp_credential_deps();
     init_sandbox_agent_session_proxy();
     init_sandbox_ledger();
@@ -2296,6 +2364,9 @@ var init_agent_start_schema = __esm({
       notifyParentOnCrash: mcpBool.optional().describe(
         `Notify this session's parent directly (in-band) if it later crashes. Independent of the global \`notifyUrl\` webhook, which fires either way. ${help("notifyParentOnCrash")}`
       ),
+      sentinel: mcpBool.optional().describe(
+        `Set false to opt this spawn OUT of sentinel auto-link: a PR this session opens will never get an automatic AIP-60 sentinel watching it, regardless of the daemon's \`sentinel.autoWatchPrs\` config. ${help("sentinel")}`
+      ),
       allowSharedCwd: mcpBool.optional().describe(
         "Acknowledge running a nested spawn in the parent's dirty working tree, silencing the shared-dirty-cwd warning. Only relevant with no `worktree`/`sandbox`; default false = warn."
       ),
@@ -2310,6 +2381,12 @@ var init_agent_start_schema = __esm({
       skills: jsonTolerant(z.array(z.string())).optional().describe(
         `Normalized skill ids for this session (e.g. ['agentproto']). REPLACES (not unions) config defaults when set. Adapters with no \`skills\` option (e.g. claude-code) ignore it. ${help("skills")}`
       ),
+      bundles: jsonTolerant(z.array(z.string())).optional().describe(
+        `Capability bundle ids (\`bundle_list\`) to attach \u2014 each expands to its imported MCPs (mounted as native MCP servers, never via the mcp_imported_* indirection) + skills, and optionally the daemon's own /mcp. REPLACES (not unions) config defaults when set. ${help("bundles")}`
+      ),
+      daemonMount: mcpBool.optional().describe(
+        `Explicitly mount the daemon's own scoped /mcp gateway for this spawn \u2014 the only way an adapter outside the default self-mount set (opencode, codex, gemini, \u2026) gets it. Default false. ${help("daemonMount")}`
+      ),
       model: z.string().optional().describe(
         "Model identifier to pass to the adapter. For claude-code, applied via session/set_config_option \u2014 NOT a CLI flag."
       ),
@@ -2319,6 +2396,16 @@ var init_agent_start_schema = __esm({
       route: jsonTolerant(
         z.object({ gateway: z.string().min(1), baseUrl: z.string().url().optional() })
       ).optional().describe("Billing route/gateway. Independent of `model` and `access`."),
+      inference: jsonTolerant(
+        z.object({
+          endpoint: z.string().min(1).optional().describe('A registered local/LAN inference endpoint id (`agentproto llm endpoints list`), or "<id>@<device>" for a paired device\'s own shared endpoint.'),
+          model: z.string().min(1).optional().describe('A bare model id (paired with `endpoint`), or the shorthand "<model>@<device|endpoint>" when `endpoint` is omitted.'),
+          force: mcpBool.optional().describe("Skip the fit-check refusal on a clear miss (the check still runs and still warns)."),
+          headroomPct: z.number().min(0).max(95).optional().describe("Headroom percentage held back from the endpoint's loaded ctx for the fit check. Default 25.")
+        })
+      ).optional().describe(
+        `Bind this spawn to a local/LAN inference endpoint instead of a cloud model: \`{endpoint}\`, \`{endpoint, model}\`, or the shorthand \`{model: "<model>@<device|endpoint>"}\`. Runs a fit check (the harness's known first-request size vs the endpoint's loaded ctx) BEFORE spawning and refuses with an actionable error on a clear miss (\`force\` overrides). Defaults \`adapter\`/\`harness\` to "pi" when neither is set. Mutually exclusive with \`model\`/\`route\`/\`access\` \u2014 set those directly instead of \`inference\`, never both. ${help("inference")}`
+      ),
       access: jsonTolerant(z.object({ profileRef: z.string().min(1).optional() })).optional().describe("Named auth profile to bill at initial spawn; resolved from the local keychain."),
       posture: z.string().optional().describe("Canonical agent posture (plan, bypass, accept-edits, read-only) or native harness mode."),
       contextProfile: z.string().optional().describe("Context intake profile (for example full or lean)."),
@@ -2457,39 +2544,6 @@ var init_agent_start_schema = __esm({
     agentStartInputSchema.omit({ wait: true });
   }
 });
-var effortSchema, postureSchema, routeSchema, userPresetSchema;
-var init_user_presets = __esm({
-  "src/user-presets.ts"() {
-    effortSchema = z.enum(["low", "medium", "high", "xhigh", "max", "ultracode"]);
-    postureSchema = z.union([
-      z.enum(["default", "plan", "accept-edits", "bypass", "read-only"]),
-      z.object({ harnessModeId: z.string().min(1) })
-    ]);
-    routeSchema = z.object({
-      gateway: z.string().min(1),
-      baseUrl: z.string().url().optional()
-    });
-    userPresetSchema = z.object({
-      id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),
-      label: z.string().min(1),
-      adapter: z.string().min(1).optional(),
-      harness: z.string().min(1).optional(),
-      model: z.string().min(1).optional(),
-      route: routeSchema.optional(),
-      access: z.object({ profileRef: z.string().min(1).optional() }).optional(),
-      posture: postureSchema.optional(),
-      effort: effortSchema.optional(),
-      contextProfile: z.string().min(1).optional(),
-      cwd: z.string().min(1).optional(),
-      skills: z.array(z.string().min(1)).optional(),
-      browser: z.union([z.literal("headless"), z.literal(false)]).optional()
-    });
-    z.object({
-      version: z.literal(1),
-      presets: z.array(userPresetSchema)
-    });
-  }
-});
 var init_catalog_provider_models = __esm({
   "src/catalog-provider-models.ts"() {
   }
@@ -2574,6 +2628,11 @@ var init_session_observer = __esm({
   "src/session-observer.ts"() {
   }
 });
+var init_session_artifacts = __esm({
+  "src/session-artifacts.ts"() {
+    init_transcript_writer();
+  }
+});
 var DEFAULT_TITLER_MODEL;
 var init_session_titler = __esm({
   "src/session-titler.ts"() {
@@ -2649,6 +2708,7 @@ var init_sessions = __esm({
     init_session_observer();
     init_tool_presenter();
     init_transcript_writer();
+    init_session_artifacts();
     init_session_titler();
     init_resume_context_digest();
     init_conversation_index();
@@ -2732,7 +2792,9 @@ var init_config_schema = __esm({
       skills: z.array(z.string()).optional(),
       options: optionsMapSchema.optional(),
       auth: defaultsAdapterAuthConfigSchema.optional(),
-      contextContinuity: contextContinuityPolicySchema.optional()
+      contextContinuity: contextContinuityPolicySchema.optional(),
+      bundles: z.array(z.string()).optional(),
+      daemonMount: z.boolean().optional()
     }).passthrough();
     mcpDefaultsConfigSchema = z.object({
       deferredTools: deferredToolsConfigSchema.optional()
@@ -2741,6 +2803,7 @@ var init_config_schema = __esm({
       skills: z.array(z.string()).optional(),
       options: optionsMapSchema.optional(),
       adapters: z.record(z.string(), defaultsAdapterConfigSchema).optional(),
+      bundles: z.array(z.string()).optional(),
       contextContinuity: contextContinuityPolicySchema.optional(),
       defaultRoleDepthCutoff: z.number().optional(),
       maxGrantableDelegation: z.number().optional(),
@@ -2782,7 +2845,9 @@ var init_config_schema = __esm({
     }).passthrough();
     featuresConfigSchema = z.object({
       pty: z.boolean().optional(),
-      llmEndpoint: z.boolean().optional()
+      llmEndpoint: z.boolean().optional(),
+      deviceInferenceShare: z.boolean().optional(),
+      deviceSpawnAllow: z.boolean().optional()
     }).passthrough();
     worktreesConfigSchema = z.object({
       root: z.string().optional(),
@@ -3122,6 +3187,15 @@ var init_config_schema = __esm({
         label: "Default options",
         help: "AIP-45 options auto-applied to every agent_start spawn."
       },
+      {
+        path: "defaults.bundles",
+        schema: strArray,
+        apply: "hot",
+        writable: true,
+        section: "defaults",
+        label: "Default capability bundles",
+        help: "Bundle ids (bundle_list) auto-attached to every agent_start spawn (unioned with per-adapter bundles)."
+      },
       {
         path: "defaults.defaultRoleDepthCutoff",
         schema: num,
@@ -3348,6 +3422,25 @@ var init_config_schema = __esm({
         label: "Adapter default options",
         help: "AIP-45 options auto-applied to spawns of this adapter."
       },
+      {
+        path: "defaults.adapters.*.bundles",
+        schema: strArray,
+        apply: "hot",
+        writable: true,
+        section: "harnesses",
+        label: "Adapter default capability bundles",
+        help: "Bundle ids (bundle_list) auto-attached to spawns of this adapter (unioned with the global default)."
+      },
+      {
+        path: "defaults.adapters.*.daemonMount",
+        schema: z.boolean(),
+        apply: "hot",
+        writable: true,
+        section: "harnesses",
+        label: "Adapter daemon self-mount opt-in",
+        help: "Explicitly mount the daemon's own scoped /mcp for spawns of this adapter, for harnesses outside the default self-mount allowlist (opencode, codex, gemini, \u2026).",
+        default: false
+      },
       {
         path: "defaults.adapters.*.contextContinuity",
         schema: contextContinuityPolicySchema,
@@ -3591,6 +3684,26 @@ var init_config_schema = __esm({
         label: "LLM Endpoint feature",
         help: "Enable the local LLM Endpoint proxy sidecar (route + MCP tools + child-process lifecycle).",
         default: false
+      },
+      {
+        path: "features.deviceInferenceShare",
+        schema: bool,
+        apply: "restart",
+        writable: true,
+        section: "daemon",
+        label: "Device inference sharing",
+        help: "Expose this daemon's local inference endpoint(s) to a paired HOST-scoped controller. Toggle via `agentproto devices share-inference on|off`.",
+        default: false
+      },
+      {
+        path: "features.deviceSpawnAllow",
+        schema: bool,
+        apply: "restart",
+        writable: true,
+        section: "daemon",
+        label: "Device spawn allow",
+        help: 'Allow a paired HOST-scoped controller to spawn/drive agent sessions on this daemon (`agent_start({ sandbox: "device:<name>" })`). Toggle via `agentproto devices allow-spawn on|off`.',
+        default: false
       }
     ];
   }