@agentproto/runtime 5.1.0 → 5.2.1

package/dist/config.d.ts

@@ -1,5 +1,5 @@
-import { S as SpawnDefaultsConfig } from './spawn-defaults-wQV9AeiG.js';
-import './context-continuity-Bn99UtVC.js';
+import { S as SpawnDefaultsConfig } from './spawn-defaults-CHvz85DD.js';
+import './context-continuity-BfNVbX5W.js';
 import '@agentproto/acp';
 import '@agentproto/command-sandbox';
 import '@agentproto/model-catalog';
@@ -193,6 +193,15 @@ interface FeaturesConfig {
      *  --host` + `devices add`). Toggle via `agentproto devices
      *  share-inference on|off`. */
     deviceInferenceShare?: boolean;
+    /** Opt this daemon in to being usable as an `agent_start({ sandbox:
+     *  "device:<name>" })` target (DEVICES-PLAN PR-D) — exposes
+     *  `/device-spawn/*` in http-server.ts, a self-proxy onto this daemon's
+     *  own `/mcp` + `/sessions/:id/events/stream`. Default false: even with
+     *  this on, only a HOST-scoped pairing (`pair offer --host` + `devices
+     *  add`) can reach the routes — a plain remote-control pairing never can,
+     *  whatever this is set to. Toggle via `agentproto devices allow-spawn
+     *  on|off`. */
+    deviceSpawnAllow?: boolean;
 }
 /**
  * Policy for `agentproto worktree new` (PLAN.md §1.4 — config carries
@@ -333,6 +342,17 @@ interface SentinelConfig {
      *  over that probe. Per-spawn opt-out: `agent_start.sentinel: false`. */
     autoWatchPrs?: boolean;
 }
+/**
+ * Review-primitive host policy (`@agentproto/review` + `review-runner.ts`).
+ */
+interface ReviewConfig {
+    /** The owner identity attestation signatures claim (`attestor.signature.
+     *  principal`) — see `review-signing.ts`'s `resolvePrincipal`. When unset,
+     *  the daemon falls back to `git config user.email` of the reviewed repo,
+     *  then a host-derived value; this never blocks signing, it only lets an
+     *  operator pin one identity across every repo the daemon reviews. */
+    principal?: string;
+}
 /**
  * Session-presence policy — how the dashboard triages a session into its
  * `running` / `tending` / `attention` / `quiet` presence state (see
@@ -517,6 +537,8 @@ interface AgentprotoConfig {
     provenance?: ProvenanceConfig;
     /** Sentinel auto-link policy. See {@link SentinelConfig}. */
     sentinel?: SentinelConfig;
+    /** Review-primitive host policy. See {@link ReviewConfig}. */
+    review?: ReviewConfig;
     /** Daemon-side AGENTS.md resolution/injection policy. See {@link AgentsMdConfig}. */
     agentsMd?: AgentsMdConfig;
     /** Daemon-side session titler (`session-titler.ts`). DEFAULT OFF — when
@@ -589,4 +611,4 @@ declare function getConfigKey(cfg: AgentprotoConfig, dotted: string): unknown;
  */
 declare function setConfigKey(cfg: AgentprotoConfig, dotted: string, value: unknown): AgentprotoConfig;
 
-export { type AcpAgentConfigEntry, type AgentprotoConfig, type AgentsMdConfig, CONFIG_FILE_PATH, CONFIG_VERSION, type DaemonConfig, type FeaturesConfig, type PairingConfig, type ProfileConfig, type ProvenanceConfig, type SentinelConfig, type SessionsConfig, type SpawnAttachMode, type SpawnConfig, type SpawnDedupeMode, type TerminalPreset, type TitlerConfig, type TunnelConfig, type WorktreeIsolationMode, type WorktreesConfig, getConfigKey, loadConfig, saveConfig, setConfigKey };
+export { type AcpAgentConfigEntry, type AgentprotoConfig, type AgentsMdConfig, CONFIG_FILE_PATH, CONFIG_VERSION, type DaemonConfig, type FeaturesConfig, type PairingConfig, type ProfileConfig, type ProvenanceConfig, type ReviewConfig, type SentinelConfig, type SessionsConfig, type SpawnAttachMode, type SpawnConfig, type SpawnDedupeMode, type TerminalPreset, type TitlerConfig, type TunnelConfig, type WorktreeIsolationMode, type WorktreesConfig, getConfigKey, loadConfig, saveConfig, setConfigKey };

package/dist/config.mjs

@@ -16,6 +16,7 @@ import '@agentproto/command-sandbox';
 import '@agentproto/plugin-local-browser';
 import '@modelcontextprotocol/sdk/types.js';
 import '@agentproto/provider-kit';
+import '@agentproto/llm-endpoint';
 import '@modelcontextprotocol/sdk/client/index.js';
 import '@modelcontextprotocol/sdk/client/streamableHttp.js';
 import 'net';
@@ -2019,6 +2020,41 @@ var init_canonical_posture = __esm({
     })();
   }
 });
+var effortSchema, postureSchema, routeSchema, userPresetSchema;
+var init_user_presets = __esm({
+  "src/user-presets.ts"() {
+    effortSchema = z.enum(["low", "medium", "high", "xhigh", "max", "ultracode"]);
+    postureSchema = z.union([
+      z.enum(["default", "plan", "accept-edits", "bypass", "read-only"]),
+      z.object({ harnessModeId: z.string().min(1) })
+    ]);
+    routeSchema = z.object({
+      gateway: z.string().min(1),
+      baseUrl: z.string().url().optional()
+    });
+    userPresetSchema = z.object({
+      id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),
+      label: z.string().min(1),
+      adapter: z.string().min(1).optional(),
+      harness: z.string().min(1).optional(),
+      model: z.string().min(1).optional(),
+      route: routeSchema.optional(),
+      access: z.object({ profileRef: z.string().min(1).optional() }).optional(),
+      posture: postureSchema.optional(),
+      effort: effortSchema.optional(),
+      contextProfile: z.string().min(1).optional(),
+      cwd: z.string().min(1).optional(),
+      skills: z.array(z.string().min(1)).optional(),
+      bundles: z.array(z.string().min(1)).optional(),
+      browser: z.union([z.literal("headless"), z.literal(false)]).optional(),
+      lastUsedAt: z.string().min(1).optional()
+    });
+    z.object({
+      version: z.literal(1),
+      presets: z.array(userPresetSchema)
+    });
+  }
+});
 var harnessPresetSchema;
 var init_harness_preset_store = __esm({
   "src/harness-preset-store.ts"() {
@@ -2119,6 +2155,10 @@ var init_session_title = __esm({
   "src/session-title.ts"() {
   }
 });
+var init_inference_binding = __esm({
+  "src/inference-binding.ts"() {
+  }
+});
 
 // src/mcp-credential-deps.ts
 var init_mcp_credential_deps = __esm({
@@ -2183,6 +2223,7 @@ var init_session_spawn = __esm({
     init_catalog_models();
     init_context_continuity();
     init_canonical_posture();
+    init_user_presets();
     init_harness_preset_store();
     init_browser_mount();
     init_role();
@@ -2191,6 +2232,7 @@ var init_session_spawn = __esm({
     init_agents_md();
     init_workspace_rules();
     init_session_title();
+    init_inference_binding();
     init_mcp_credential_deps();
     init_sandbox_agent_session_proxy();
     init_sandbox_ledger();
@@ -2354,6 +2396,16 @@ var init_agent_start_schema = __esm({
       route: jsonTolerant(
         z.object({ gateway: z.string().min(1), baseUrl: z.string().url().optional() })
       ).optional().describe("Billing route/gateway. Independent of `model` and `access`."),
+      inference: jsonTolerant(
+        z.object({
+          endpoint: z.string().min(1).optional().describe('A registered local/LAN inference endpoint id (`agentproto llm endpoints list`), or "<id>@<device>" for a paired device\'s own shared endpoint.'),
+          model: z.string().min(1).optional().describe('A bare model id (paired with `endpoint`), or the shorthand "<model>@<device|endpoint>" when `endpoint` is omitted.'),
+          force: mcpBool.optional().describe("Skip the fit-check refusal on a clear miss (the check still runs and still warns)."),
+          headroomPct: z.number().min(0).max(95).optional().describe("Headroom percentage held back from the endpoint's loaded ctx for the fit check. Default 25.")
+        })
+      ).optional().describe(
+        `Bind this spawn to a local/LAN inference endpoint instead of a cloud model: \`{endpoint}\`, \`{endpoint, model}\`, or the shorthand \`{model: "<model>@<device|endpoint>"}\`. Runs a fit check (the harness's known first-request size vs the endpoint's loaded ctx) BEFORE spawning and refuses with an actionable error on a clear miss (\`force\` overrides). Defaults \`adapter\`/\`harness\` to "pi" when neither is set. Mutually exclusive with \`model\`/\`route\`/\`access\` \u2014 set those directly instead of \`inference\`, never both. ${help("inference")}`
+      ),
       access: jsonTolerant(z.object({ profileRef: z.string().min(1).optional() })).optional().describe("Named auth profile to bill at initial spawn; resolved from the local keychain."),
       posture: z.string().optional().describe("Canonical agent posture (plan, bypass, accept-edits, read-only) or native harness mode."),
       contextProfile: z.string().optional().describe("Context intake profile (for example full or lean)."),
@@ -2492,40 +2544,6 @@ var init_agent_start_schema = __esm({
     agentStartInputSchema.omit({ wait: true });
   }
 });
-var effortSchema, postureSchema, routeSchema, userPresetSchema;
-var init_user_presets = __esm({
-  "src/user-presets.ts"() {
-    effortSchema = z.enum(["low", "medium", "high", "xhigh", "max", "ultracode"]);
-    postureSchema = z.union([
-      z.enum(["default", "plan", "accept-edits", "bypass", "read-only"]),
-      z.object({ harnessModeId: z.string().min(1) })
-    ]);
-    routeSchema = z.object({
-      gateway: z.string().min(1),
-      baseUrl: z.string().url().optional()
-    });
-    userPresetSchema = z.object({
-      id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),
-      label: z.string().min(1),
-      adapter: z.string().min(1).optional(),
-      harness: z.string().min(1).optional(),
-      model: z.string().min(1).optional(),
-      route: routeSchema.optional(),
-      access: z.object({ profileRef: z.string().min(1).optional() }).optional(),
-      posture: postureSchema.optional(),
-      effort: effortSchema.optional(),
-      contextProfile: z.string().min(1).optional(),
-      cwd: z.string().min(1).optional(),
-      skills: z.array(z.string().min(1)).optional(),
-      bundles: z.array(z.string().min(1)).optional(),
-      browser: z.union([z.literal("headless"), z.literal(false)]).optional()
-    });
-    z.object({
-      version: z.literal(1),
-      presets: z.array(userPresetSchema)
-    });
-  }
-});
 var init_catalog_provider_models = __esm({
   "src/catalog-provider-models.ts"() {
   }
@@ -2828,7 +2846,8 @@ var init_config_schema = __esm({
     featuresConfigSchema = z.object({
       pty: z.boolean().optional(),
       llmEndpoint: z.boolean().optional(),
-      deviceInferenceShare: z.boolean().optional()
+      deviceInferenceShare: z.boolean().optional(),
+      deviceSpawnAllow: z.boolean().optional()
     }).passthrough();
     worktreesConfigSchema = z.object({
       root: z.string().optional(),
@@ -3675,6 +3694,16 @@ var init_config_schema = __esm({
         label: "Device inference sharing",
         help: "Expose this daemon's local inference endpoint(s) to a paired HOST-scoped controller. Toggle via `agentproto devices share-inference on|off`.",
         default: false
+      },
+      {
+        path: "features.deviceSpawnAllow",
+        schema: bool,
+        apply: "restart",
+        writable: true,
+        section: "daemon",
+        label: "Device spawn allow",
+        help: 'Allow a paired HOST-scoped controller to spawn/drive agent sessions on this daemon (`agent_start({ sandbox: "device:<name>" })`). Toggle via `agentproto devices allow-spawn on|off`.',
+        default: false
       }
     ];
   }