@agentproto/runtime 5.1.0 → 5.3.0

package/dist/{session-config-ByfVeEQJ.d.ts → session-config-DxIIuJFY.d.ts}

@@ -1,5 +1,5 @@
 import { CostBudget } from '@agentproto/auth';
-import { C as ContextContinuityPolicy } from './context-continuity-Bn99UtVC.js';
+import { C as ContextContinuityPolicy } from './spawn-defaults-Cp9SGZex.js';
 
 /**
  * SessionConfig — the unified per-session config surface, decomposed into

package/dist/session-presence.mjs

@@ -11,11 +11,12 @@ import '@agentproto/provider-presets';
 import '@agentproto/secrets/provision/recipe';
 import { z } from 'zod';
 import '@agentproto/auth';
-import 'child_process';
 import '@agentproto/command-sandbox';
+import 'child_process';
 import '@agentproto/plugin-local-browser';
 import '@modelcontextprotocol/sdk/types.js';
 import '@agentproto/provider-kit';
+import '@agentproto/llm-endpoint';
 import '@modelcontextprotocol/sdk/client/index.js';
 import '@modelcontextprotocol/sdk/client/streamableHttp.js';
 import 'net';
@@ -56,11 +57,13 @@ var __copyProps = (to, from, except, desc) => {
 var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget);
 
 // src/worktree-isolation.ts
-var WORKTREE_ISOLATION_ENV, DEFAULT_WORKTREE_ISOLATION;
+var WORKTREE_ISOLATION_ENV, WORKTREE_PROVISION_CONCURRENCY_ENV, DEFAULT_WORKTREE_PROVISION_CONCURRENCY, DEFAULT_WORKTREE_ISOLATION;
 var init_worktree_isolation = __esm({
   "src/worktree-isolation.ts"() {
     init_config();
     WORKTREE_ISOLATION_ENV = "AGENTPROTO_WORKTREES_ISOLATION";
+    WORKTREE_PROVISION_CONCURRENCY_ENV = "AGENTPROTO_WORKTREES_PROVISION_CONCURRENCY";
+    DEFAULT_WORKTREE_PROVISION_CONCURRENCY = 2;
     DEFAULT_WORKTREE_ISOLATION = "on-request";
   }
 });
@@ -308,9 +311,9 @@ async function exportClaudeCodeSession(adapterSessionId, cwd, configDir) {
   let stream;
   try {
     stream = createReadStream(filePath, { encoding: "utf8" });
-    await new Promise((resolve16, reject) => {
+    await new Promise((resolve17, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve16);
+      stream.once("open", resolve17);
     });
   } catch (err) {
     const code = err.code;
@@ -584,7 +587,7 @@ async function discoverHermesSessions(cwd, since, expectedId) {
 }
 async function defaultHermesRunner(adapterSessionId) {
   const { spawn: spawn5 } = await import('child_process');
-  return new Promise((resolve16, reject) => {
+  return new Promise((resolve17, reject) => {
     const chunks = [];
     const errChunks = [];
     const proc = spawn5(
@@ -603,7 +606,7 @@ async function defaultHermesRunner(adapterSessionId) {
           )
         );
       } else {
-        resolve16(Buffer.concat(chunks).toString("utf8"));
+        resolve17(Buffer.concat(chunks).toString("utf8"));
       }
     });
   });
@@ -640,9 +643,9 @@ async function exportDaemonEventsSession(sessionId, desc) {
   let stream;
   try {
     stream = createReadStream(filePath, { encoding: "utf8" });
-    await new Promise((resolve16, reject) => {
+    await new Promise((resolve17, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve16);
+      stream.once("open", resolve17);
     });
   } catch (err) {
     const code = err.code;
@@ -1913,6 +1916,10 @@ var init_pr_provenance_stamp = __esm({
     init_pr_provenance();
   }
 });
+var init_app_boundary = __esm({
+  "src/app-boundary.ts"() {
+  }
+});
 var init_command_allowlist = __esm({
   "src/command-allowlist.ts"() {
   }
@@ -1921,10 +1928,16 @@ var init_command_tools = __esm({
   "src/command-tools.ts"() {
     init_sessions();
     init_pr_provenance_stamp();
+    init_app_boundary();
     init_command_allowlist();
     init_command_allowlist();
   }
 });
+var init_process_stats = __esm({
+  "src/process-stats.ts"() {
+    z.preprocess((v) => v === "true" ? true : v === "false" ? false : v, z.union([z.boolean(), z.literal("full")])).optional();
+  }
+});
 var init_workspaces_config = __esm({
   "src/workspaces-config.ts"() {
   }
@@ -1947,7 +1960,7 @@ var init_bundles = __esm({
       id: bundleIdSchema,
       label: z.string().min(1),
       description: z.string().min(1).optional(),
-      mcpImports: z.array(z.string().min(1)),
+      mcpImports: z.union([z.array(z.string().min(1)), z.literal("*")]),
       includeDaemon: z.boolean().optional(),
       skills: z.array(z.string().min(1))
     });
@@ -1976,6 +1989,12 @@ var init_launch_config = __esm({
   }
 });
 
+// src/adapter-slug-hint.ts
+var init_adapter_slug_hint = __esm({
+  "src/adapter-slug-hint.ts"() {
+  }
+});
+
 // src/context-continuity.ts
 var init_context_continuity = __esm({
   "src/context-continuity.ts"() {
@@ -2009,6 +2028,41 @@ var init_canonical_posture = __esm({
     })();
   }
 });
+var effortSchema, postureSchema, routeSchema, userPresetSchema;
+var init_user_presets = __esm({
+  "src/user-presets.ts"() {
+    effortSchema = z.enum(["low", "medium", "high", "xhigh", "max", "ultracode"]);
+    postureSchema = z.union([
+      z.enum(["default", "plan", "accept-edits", "bypass", "read-only"]),
+      z.object({ harnessModeId: z.string().min(1) })
+    ]);
+    routeSchema = z.object({
+      gateway: z.string().min(1),
+      baseUrl: z.string().url().optional()
+    });
+    userPresetSchema = z.object({
+      id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),
+      label: z.string().min(1),
+      adapter: z.string().min(1).optional(),
+      harness: z.string().min(1).optional(),
+      model: z.string().min(1).optional(),
+      route: routeSchema.optional(),
+      access: z.object({ profileRef: z.string().min(1).optional() }).optional(),
+      posture: postureSchema.optional(),
+      effort: effortSchema.optional(),
+      contextProfile: z.string().min(1).optional(),
+      cwd: z.string().min(1).optional(),
+      skills: z.array(z.string().min(1)).optional(),
+      bundles: z.array(z.string().min(1)).optional(),
+      browser: z.union([z.literal("headless"), z.literal(false)]).optional(),
+      lastUsedAt: z.string().min(1).optional()
+    });
+    z.object({
+      version: z.literal(1),
+      presets: z.array(userPresetSchema)
+    });
+  }
+});
 var harnessPresetSchema;
 var init_harness_preset_store = __esm({
   "src/harness-preset-store.ts"() {
@@ -2109,6 +2163,10 @@ var init_session_title = __esm({
   "src/session-title.ts"() {
   }
 });
+var init_inference_binding = __esm({
+  "src/inference-binding.ts"() {
+  }
+});
 
 // src/mcp-credential-deps.ts
 var init_mcp_credential_deps = __esm({
@@ -2159,6 +2217,7 @@ var init_sandbox_adapters = __esm({
 });
 var init_session_spawn = __esm({
   "src/session-spawn.ts"() {
+    init_process_stats();
     init_sessions();
     init_transcript_writer();
     init_workspaces_config();
@@ -2171,8 +2230,10 @@ var init_session_spawn = __esm({
     init_claude_code_oauth_source();
     init_providers_store();
     init_catalog_models();
+    init_adapter_slug_hint();
     init_context_continuity();
     init_canonical_posture();
+    init_user_presets();
     init_harness_preset_store();
     init_browser_mount();
     init_role();
@@ -2181,6 +2242,8 @@ var init_session_spawn = __esm({
     init_agents_md();
     init_workspace_rules();
     init_session_title();
+    init_app_boundary();
+    init_inference_binding();
     init_mcp_credential_deps();
     init_sandbox_agent_session_proxy();
     init_sandbox_ledger();
@@ -2344,6 +2407,16 @@ var init_agent_start_schema = __esm({
       route: jsonTolerant(
         z.object({ gateway: z.string().min(1), baseUrl: z.string().url().optional() })
       ).optional().describe("Billing route/gateway. Independent of `model` and `access`."),
+      inference: jsonTolerant(
+        z.object({
+          endpoint: z.string().min(1).optional().describe('A registered local/LAN inference endpoint id (`agentproto llm endpoints list`), or "<id>@<device>" for a paired device\'s own shared endpoint.'),
+          model: z.string().min(1).optional().describe('A bare model id (paired with `endpoint`), or the shorthand "<model>@<device|endpoint>" when `endpoint` is omitted.'),
+          force: mcpBool.optional().describe("Skip the fit-check refusal on a clear miss (the check still runs and still warns)."),
+          headroomPct: z.number().min(0).max(95).optional().describe("Headroom percentage held back from the endpoint's loaded ctx for the fit check. Default 25.")
+        })
+      ).optional().describe(
+        `Bind this spawn to a local/LAN inference endpoint instead of a cloud model: \`{endpoint}\`, \`{endpoint, model}\`, or the shorthand \`{model: "<model>@<device|endpoint>"}\`. Runs a fit check (the harness's known first-request size vs the endpoint's loaded ctx) BEFORE spawning and refuses with an actionable error on a clear miss (\`force\` overrides). Defaults \`adapter\`/\`harness\` to "pi" when neither is set. Mutually exclusive with \`model\`/\`route\`/\`access\` \u2014 set those directly instead of \`inference\`, never both. ${help("inference")}`
+      ),
       access: jsonTolerant(z.object({ profileRef: z.string().min(1).optional() })).optional().describe("Named auth profile to bill at initial spawn; resolved from the local keychain."),
       posture: z.string().optional().describe("Canonical agent posture (plan, bypass, accept-edits, read-only) or native harness mode."),
       contextProfile: z.string().optional().describe("Context intake profile (for example full or lean)."),
@@ -2482,40 +2555,6 @@ var init_agent_start_schema = __esm({
     agentStartInputSchema.omit({ wait: true });
   }
 });
-var effortSchema, postureSchema, routeSchema, userPresetSchema;
-var init_user_presets = __esm({
-  "src/user-presets.ts"() {
-    effortSchema = z.enum(["low", "medium", "high", "xhigh", "max", "ultracode"]);
-    postureSchema = z.union([
-      z.enum(["default", "plan", "accept-edits", "bypass", "read-only"]),
-      z.object({ harnessModeId: z.string().min(1) })
-    ]);
-    routeSchema = z.object({
-      gateway: z.string().min(1),
-      baseUrl: z.string().url().optional()
-    });
-    userPresetSchema = z.object({
-      id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),
-      label: z.string().min(1),
-      adapter: z.string().min(1).optional(),
-      harness: z.string().min(1).optional(),
-      model: z.string().min(1).optional(),
-      route: routeSchema.optional(),
-      access: z.object({ profileRef: z.string().min(1).optional() }).optional(),
-      posture: postureSchema.optional(),
-      effort: effortSchema.optional(),
-      contextProfile: z.string().min(1).optional(),
-      cwd: z.string().min(1).optional(),
-      skills: z.array(z.string().min(1)).optional(),
-      bundles: z.array(z.string().min(1)).optional(),
-      browser: z.union([z.literal("headless"), z.literal(false)]).optional()
-    });
-    z.object({
-      version: z.literal(1),
-      presets: z.array(userPresetSchema)
-    });
-  }
-});
 var init_catalog_provider_models = __esm({
   "src/catalog-provider-models.ts"() {
   }
@@ -2555,6 +2594,7 @@ var init_agent_tools = __esm({
   "src/agent-tools.ts"() {
     init_transcript_export();
     init_agent_start_schema();
+    init_process_stats();
     init_spawn_field_schemas();
     init_session_spawn();
     init_canonical_posture();
@@ -2645,6 +2685,7 @@ var init_context_checkpoint = __esm({
 // src/session-continue-fresh.ts
 var init_session_continue_fresh = __esm({
   "src/session-continue-fresh.ts"() {
+    init_app_boundary();
     init_context_checkpoint();
     init_context_continuity();
     init_session_spawn();
@@ -2705,6 +2746,21 @@ var init_gh_provenance_shim = __esm({
     DEFAULT_WRAP_GH = false;
   }
 });
+var DEFAULT_MODEL_ROLES;
+var init_model_roles = __esm({
+  "src/model-roles.ts"() {
+    DEFAULT_MODEL_ROLES = {
+      /** Reviewer for a small residual (repo-maintenance `review` step). */
+      "review.small": "claude-sonnet-5-5",
+      /** Reviewer for a large residual + the retry reviewer. */
+      "review.large": "claude-opus-5-5",
+      /** CI pull-request reviewer (mirrors `.github/agentic-review.json`'s `reviewerModel`). */
+      "review.pr": "openrouter/z-ai/glm-5.3-flash",
+      /** The session-steward's agent judge. */
+      "judge.session": "claude-sonnet-5-5"
+    };
+  }
+});
 function validateConfig(raw) {
   const result = agentprotoConfigSchema.safeParse(raw);
   if (result.success) return { ok: true, issues: [] };
@@ -2714,7 +2770,7 @@ function validateConfig(raw) {
   });
   return { ok: false, issues };
 }
-var contextContinuityPolicySchema, deferredToolsConfigSchema, spawnBrowserModeSchema, optionsMapSchema, defaultsAdapterAuthConfigSchema, defaultsAdapterConfigSchema, mcpDefaultsConfigSchema, spawnDefaultsConfigSchema, daemonConfigSchema, titlerConfigSchema, tunnelConfigSchema, featuresConfigSchema, worktreesConfigSchema, spawnConfigSchema, provenanceConfigSchema, sessionsConfigSchema, agentsMdConfigSchema, pairPageSchema, pairingConfigSchema, profileConfigSchema, acpAgentConfigEntrySchema, terminalPresetSchema, agentprotoConfigSchema, bool, str, num, strArray;
+var contextContinuityPolicySchema, deferredToolsConfigSchema, spawnBrowserModeSchema, optionsMapSchema, defaultsAdapterAuthConfigSchema, defaultsAdapterConfigSchema, mcpDefaultsConfigSchema, spawnDefaultsConfigSchema, daemonConfigSchema, titlerConfigSchema, catalogConfigSchema, tunnelConfigSchema, featuresConfigSchema, worktreesConfigSchema, spawnConfigSchema, provenanceConfigSchema, approvalsConfigSchema, sessionsConfigSchema, agentsMdConfigSchema, pairPageSchema, pairingConfigSchema, modelRoleValueSchema, profileConfigSchema, acpAgentConfigEntrySchema, terminalPresetSchema, agentprotoConfigSchema, bool, str, num, strArray;
 var init_config_schema = __esm({
   "src/config-schema.ts"() {
     init_worktree_isolation();
@@ -2724,6 +2780,7 @@ var init_config_schema = __esm({
     init_gh_provenance_shim();
     init_agents_md();
     init_session_titler();
+    init_model_roles();
     init_background_task_wake();
     init_role();
     contextContinuityPolicySchema = z.object({
@@ -2809,6 +2866,9 @@ var init_config_schema = __esm({
       enabled: z.boolean().optional(),
       model: z.string().optional()
     }).passthrough();
+    catalogConfigSchema = z.object({
+      sources: z.array(z.object({ url: z.string() }).passthrough()).optional()
+    }).passthrough();
     tunnelConfigSchema = z.object({
       host: z.string().optional(),
       token: z.string().optional(),
@@ -2818,17 +2878,22 @@ var init_config_schema = __esm({
     featuresConfigSchema = z.object({
       pty: z.boolean().optional(),
       llmEndpoint: z.boolean().optional(),
-      deviceInferenceShare: z.boolean().optional()
+      deviceInferenceShare: z.boolean().optional(),
+      deviceSpawnAllow: z.boolean().optional()
     }).passthrough();
     worktreesConfigSchema = z.object({
       root: z.string().optional(),
-      isolation: z.enum(["always", "on-request", "never"]).optional()
+      isolation: z.enum(["always", "on-request", "never"]).optional(),
+      provisionConcurrency: z.number().int().min(0).optional(),
+      provisionConcurrencyByRepo: z.record(z.string(), z.number().int().min(0)).optional(),
+      provisionLoadFactor: z.number().min(0).optional()
     }).passthrough();
     spawnConfigSchema = z.object({
       attach: z.enum(["always", "on-request"]).optional(),
       dedupe: z.enum(["always", "on-request"]).optional()
     }).passthrough();
     provenanceConfigSchema = z.object({ wrapGh: z.boolean().optional() }).passthrough();
+    approvalsConfigSchema = z.object({ webOrigins: z.array(z.string()).optional() }).passthrough();
     sessionsConfigSchema = z.object({
       attentionDelaySec: z.number().optional(),
       eventsDir: z.string().optional()
@@ -2846,6 +2911,14 @@ var init_config_schema = __esm({
       autoconnect: z.boolean().optional(),
       pairPage: pairPageSchema.optional()
     }).passthrough();
+    modelRoleValueSchema = z.union([
+      z.string().min(1),
+      z.object({
+        model: z.string().min(1),
+        route: z.string().optional(),
+        profile: z.string().optional()
+      }).passthrough()
+    ]);
     profileConfigSchema = z.object({
       daemon: daemonConfigSchema.optional(),
       tunnel: tunnelConfigSchema.optional(),
@@ -2884,8 +2957,11 @@ var init_config_schema = __esm({
       spawn: spawnConfigSchema.optional(),
       sessions: sessionsConfigSchema.optional(),
       provenance: provenanceConfigSchema.optional(),
+      approvals: approvalsConfigSchema.optional(),
       agentsMd: agentsMdConfigSchema.optional(),
+      models: z.record(z.string(), modelRoleValueSchema).optional(),
       titler: titlerConfigSchema.optional(),
+      catalog: catalogConfigSchema.optional(),
       profiles: z.record(z.string(), profileConfigSchema).optional(),
       activeProfile: z.string().optional(),
       defaults: spawnDefaultsConfigSchema.optional(),
@@ -2936,6 +3012,16 @@ var init_config_schema = __esm({
         label: "Allowed origins",
         help: "Trusted browser origins for mutating /sessions/* routes, in addition to the hardcoded localhost defaults. Lockout: a bad value can lock a browser UI out."
       },
+      {
+        path: "approvals.webOrigins",
+        schema: strArray,
+        apply: "restart",
+        writable: false,
+        section: "daemon",
+        label: "Approval web-click origins",
+        help: "Origins allowed to decide a pending approval via POST /approvals/:id/decision (web_click channel). Empty (default) turns the channel off entirely. A SEPARATE allowlist from daemon.allowedOrigins, which is not automatically trusted to decide approvals. Lockout: a bad value can lock the web decision UI out.",
+        default: []
+      },
       {
         path: "daemon.strictOrigins",
         schema: bool,
@@ -3129,6 +3215,20 @@ var init_config_schema = __esm({
         default: DEFAULT_PAIR_PAGE
       },
       // ── models ──
+      {
+        // One row per configured role. Role names are dotted (`review.pr`), so a
+        // concrete key is `models.review.pr` — `findConfigKey` maps any
+        // `models.<role>` onto this entry, and `splitConfigPath` (config.ts) keeps
+        // the role as ONE segment. The full role list (incl. built-in defaults and
+        // where each value comes from) is the `model_roles` tool.
+        path: "models.*",
+        schema: modelRoleValueSchema,
+        apply: "hot",
+        writable: true,
+        section: "models",
+        label: "Model role",
+        help: `Model for a role (review.small, review.large, review.pr, judge.session, \u2026): a model id, or { model, route?, profile? }. Precedence: explicit run input > the repo's agentproto.json \`models\` > this daemon config > built-in default (\`model_roles\` lists every role and its source). Built-in defaults: ${Object.entries(DEFAULT_MODEL_ROLES).map(([r, m]) => `${r}=${m}`).join(", ")}.`
+      },
       {
         path: "titler.model",
         schema: str,
@@ -3139,6 +3239,16 @@ var init_config_schema = __esm({
         help: "OpenRouter model id used to generate session titles. Requires OPENROUTER_API_KEY.",
         default: DEFAULT_TITLER_MODEL
       },
+      // ── daemon: app catalog ──
+      {
+        path: "catalog.sources",
+        schema: z.array(z.object({ url: str }).passthrough()),
+        apply: "hot",
+        writable: true,
+        section: "daemon",
+        label: "App catalog sources",
+        help: "Remote catalogs merged into `app_catalog`: an array of `{ url }`, each returning `{ entries: AppCatalogEntry[] }`. Wins over `sources` in ~/.agentproto/app-catalog.json when both are set."
+      },
       // ── defaults: spawn ──
       {
         path: "defaults.skills",
@@ -3218,6 +3328,36 @@ var init_config_schema = __esm({
         help: "Whether a freshly-spawned agent_start session is isolated into its own git worktree.",
         default: DEFAULT_WORKTREE_ISOLATION
       },
+      {
+        path: "worktrees.provisionConcurrency",
+        schema: z.number().int().min(0),
+        apply: "hot",
+        env: WORKTREE_PROVISION_CONCURRENCY_ENV,
+        writable: true,
+        section: "defaults",
+        label: "Worktree provisioning concurrency",
+        help: "Max worktree provisionings running their heavy phases (depsCmd, clones, setup hooks) at once; the rest queue FIFO. 0 = unlimited.",
+        default: DEFAULT_WORKTREE_PROVISION_CONCURRENCY
+      },
+      {
+        path: "worktrees.provisionConcurrencyByRepo",
+        schema: z.record(str, z.number().int().min(0)),
+        apply: "hot",
+        writable: true,
+        section: "defaults",
+        label: "Per-repo provisioning concurrency",
+        help: "Per-repo caps on concurrent heavy provisioning, keyed by repo path or directory name; never looser than the global cap."
+      },
+      {
+        path: "worktrees.provisionLoadFactor",
+        schema: z.number().min(0),
+        apply: "hot",
+        writable: true,
+        section: "defaults",
+        label: "Provisioning load guard factor",
+        help: "Hold back a new heavy provisioning while the 1-minute load average exceeds cores x this factor. 0 or unset = off.",
+        default: 0
+      },
       {
         path: "spawn.attach",
         schema: z.enum(["always", "on-request"]),
@@ -3665,6 +3805,16 @@ var init_config_schema = __esm({
         label: "Device inference sharing",
         help: "Expose this daemon's local inference endpoint(s) to a paired HOST-scoped controller. Toggle via `agentproto devices share-inference on|off`.",
         default: false
+      },
+      {
+        path: "features.deviceSpawnAllow",
+        schema: bool,
+        apply: "restart",
+        writable: true,
+        section: "daemon",
+        label: "Device spawn allow",
+        help: 'Allow a paired HOST-scoped controller to spawn/drive agent sessions on this daemon (`agent_start({ sandbox: "device:<name>" })`). Toggle via `agentproto devices allow-spawn on|off`.',
+        default: false
       }
     ];
   }