@agentproto/runtime 5.1.0 → 5.3.0

package/dist/{spawn-defaults-wQV9AeiG.d.ts → spawn-defaults-Cp9SGZex.d.ts}

@@ -1,6 +1,107 @@
-import { C as ContextContinuityPolicy, S as SpawnBrowserMode } from './context-continuity-Bn99UtVC.js';
+import { AcpMcpServer } from '@agentproto/acp';
+import { SandboxMode } from '@agentproto/command-sandbox';
 import { CatalogProvider } from '@agentproto/model-catalog';
 
+/**
+ * `agent_start({ browser: "headless" })` — an isolated headless Chrome for
+ * one spawned agent, mounted as a per-session stdio MCP server
+ * (`chrome-devtools-mcp --headless --isolated`, see
+ * `@agentproto/plugin-local-browser`'s `buildHeadlessBrowserMcpEntry`).
+ *
+ * The server is a child of the adapter process, so it inherits the session's
+ * `commandSandbox` confinement and normally dies with the adapter (stdin EOF,
+ * and Chrome exits when its pipe closes). On `session:exited`,
+ * `sweepSessionBrowser` does two things:
+ *   - kills anything still carrying the session's `--agentproto-session=<id>`
+ *     Chrome marker, in case an adapter never exited or never closed its MCP
+ *     children;
+ *   - deletes the session's profile dir, `$TMPDIR/agentproto-browser/<id>`.
+ * The profile is caller-owned rather than `--isolated`, because `--isolated`
+ * only cleans up on a graceful `browser.close()`; observed live, a killed
+ * session left its puppeteer temp profile behind.
+ */
+
+/** `agent_start.browser`. `false` (the default) mounts nothing. */
+type SpawnBrowserMode = "headless" | false;
+interface HeadlessBrowserMount {
+    entry: AcpMcpServer;
+    /** Read grants the adapter's `commandSandbox` needs for the MCP server +
+     *  Chrome (threaded as `additionalReadPaths`). */
+    readPaths: string[];
+}
+interface ResolveHeadlessBrowserInput {
+    sessionId: string;
+    cwd: string;
+    /** The spawn's explicit `commandSandbox`; `undefined` falls back to the
+     *  workspace's `adapterSpawn` config, like the driver does. */
+    commandSandbox?: SandboxMode;
+}
+type ResolveHeadlessBrowser = (input: ResolveHeadlessBrowserInput) => Promise<HeadlessBrowserMount>;
+
+/**
+ * Canonical context-continuity policy for long-running agent sessions.
+ *
+ * Provides a deterministic, testable policy engine with safe defaults and a
+ * clear override order: global defaults → per-harness defaults →
+ * per-model defaults → session override. The policy drives warnings,
+ * opportunistic compaction, fresh continuation, and hard-stop decisions at
+ * turn boundaries so sessions never silently run into the model context
+ * limit.
+ */
+/**
+ * `manual` suppresses every automatic *nudge* (warn/compact/continue-fresh —
+ * see `contextContinuityNextAction`) so the session is left alone until the
+ * caller acts. It does NOT suppress `hard-stop`: that state is an
+ * unconditional safety floor, independent of mode, by design — its whole
+ * purpose is to stop a session from silently running past the model's real
+ * context window (further prompts would be truncated/rejected by the
+ * provider, or corrupt the conversation) even when nothing is watching.
+ * `manual` means "don't nag me", not "let me drive off the window's edge".
+ * A session that wants to opt out of the hard stop should set
+ * `hardStopAtPct` above what it will ever reach, not rely on mode.
+ */
+type ContextContinuityMode = "manual" | "ask" | "auto";
+interface ContextContinuityThresholds {
+    /** Percentage at which the UI first warns that context is filling. */
+    warnAtPct: number;
+    /** Percentage at which an opportunistic compact may be attempted. */
+    compactAtPct: number;
+    /** Percentage at which a fresh continuation session is created. */
+    continueFreshAtPct: number;
+    /** Percentage above which no new prompt may be admitted. */
+    hardStopAtPct: number;
+}
+interface ContextContinuityCheckpointSections {
+    goal: boolean;
+    plan: boolean;
+    decisions: boolean;
+    changedFiles: boolean;
+    gitStatus: boolean;
+    tests: boolean;
+    errors: boolean;
+    risks: boolean;
+    nextStep: boolean;
+    config: boolean;
+}
+/**
+ * User-supplied policy fragment. Every field optional; missing values are
+ * filled from the next precedence layer or from safe defaults.
+ */
+interface ContextContinuityPolicy extends Partial<ContextContinuityThresholds>, Partial<ContextContinuityCheckpointSections> {
+    mode?: ContextContinuityMode;
+    /** Optional display label for UIs. */
+    label?: string;
+}
+/**
+ * Fully-resolved, validated policy. This is the shape stored on a session
+ * descriptor and returned by status queries.
+ */
+interface ResolvedContextContinuityPolicy extends ContextContinuityThresholds, Required<ContextContinuityCheckpointSections> {
+    mode: ContextContinuityMode;
+    /** Effective label (falls back to mode when absent). */
+    label: string;
+}
+
 /**
  * Deferred/lazy MCP tool loading (harness-parity item 3).
  *
@@ -589,4 +690,4 @@ interface DeclaredAdapterOption {
  */
 declare function normalizeSkillsOption(skills: string[], options: Record<string, boolean | number | string>, declaredOptions: readonly DeclaredAdapterOption[] | undefined): Record<string, boolean | number | string>;
 
-export { type AdapterAuthDescriptor as A, CLAUDE_CODE_OAUTH_SOURCE as C, type DefaultsAdapterAuthConfig as D, type ResolvedAuthSpec as R, type SpawnDefaultsConfig as S, type DeclaredAdapterOption as a, type AuthEcho as b, AuthResolutionError as c, type CredentialSource as d, type DefaultsAdapterConfig as e, type DeferredToolsConfig as f, type ResolveSubscriptionCredentialInput as g, type ResolvedSpawnAuthMaterial as h, type ResolvedSpawnDefaults as i, type SubscriptionCredentialResolution as j, SubscriptionSourceError as k, credentialFingerprint as l, resolveDeferredToolsGatewayOption as m, normalizeSkillsOption as n, resolveSpawnDefaults as o, resolveSubscriptionCredential as p, resolveAuthSpec as r };
+export { type AdapterAuthDescriptor as A, type ContextContinuityPolicy as C, type DefaultsAdapterAuthConfig as D, type ResolvedContextContinuityPolicy as R, type SpawnDefaultsConfig as S, type SpawnBrowserMode as a, type ResolveHeadlessBrowser as b, type ResolvedAuthSpec as c, type DeclaredAdapterOption as d, type AuthEcho as e, AuthResolutionError as f, CLAUDE_CODE_OAUTH_SOURCE as g, type CredentialSource as h, type DefaultsAdapterConfig as i, type DeferredToolsConfig as j, type ResolveSubscriptionCredentialInput as k, type ResolvedSpawnAuthMaterial as l, type ResolvedSpawnDefaults as m, type SubscriptionCredentialResolution as n, SubscriptionSourceError as o, credentialFingerprint as p, normalizeSkillsOption as q, resolveAuthSpec as r, resolveDeferredToolsGatewayOption as s, resolveSpawnDefaults as t, resolveSubscriptionCredential as u };

package/dist/user-presets.d.ts

@@ -1,102 +1,11 @@
-import { z } from 'zod';
-import { S as SessionConfig, R as RouteSpec, P as Posture, E as EffortLevel, C as ContextProfile } from './session-config-ByfVeEQJ.js';
-import { S as SpawnBrowserMode } from './context-continuity-Bn99UtVC.js';
+import 'zod';
+import './session-config-DxIIuJFY.js';
+import './spawn-defaults-Cp9SGZex.js';
+export { c5 as RecentSpawnConfig, U as UserPreset, b8 as UserPresetsFile, bp as deleteUserPreset, c6 as deriveRecentSpawnConfigs, bw as getUserPreset, bC as listUserPresets, bE as loadUserPresets, c0 as saveUserPreset, c7 as touchUserPreset, c8 as userPresetSchema, c3 as userPresetsPath } from './sessions-DKm6Wqro.js';
 import '@agentproto/auth';
 import '@agentproto/acp';
 import '@agentproto/command-sandbox';
-
-/**
- * User-owned spawn presets.
- *
- * This is deliberately separate from `preset-tools.ts`: provider presets are
- * static gateway definitions shipped by packages, while a UserPreset is a
- * private saved combination of the orthogonal session-config axes.
- */
-
-/** A reusable, user-scoped subset of the spawn/session config axes. */
-interface UserPreset extends Partial<SessionConfig> {
-    /** Stable machine-local id, e.g. `fast-deepseek`. */
-    id: string;
-    /** Human-readable name shown by CLI and editor pickers. */
-    label: string;
-    /** Adapter harness to use. Omitted means the caller selects one. */
-    adapter?: string;
-    /** Canonical harness slug — alias for `adapter`. */
-    harness?: string;
-    model?: string;
-    route?: RouteSpec;
-    access?: {
-        profileRef?: string;
-    };
-    posture?: Posture;
-    effort?: EffortLevel;
-    contextProfile?: ContextProfile;
-    /** Working directory the favorite pins to. When set, a spawn from this
-     *  preset lands here regardless of the caller's active folder — the axis
-     *  that makes a favorite fully location-pinned (true zero-input). Omitted
-     *  means the caller's cwd ladder resolves it as before. */
-    cwd?: string;
-    /** Skills to preload for a spawn from this preset — the same axis as
-     *  `SpawnAgentSessionInput.skills`. Omitted means the adapter/defaults
-     *  decide. */
-    skills?: string[];
-    /** Capability bundle ids (`bundle_list`) for a spawn from this preset — the
-     *  same axis as `SpawnAgentSessionInput.bundles`. Omitted means the
-     *  adapter/defaults decide. */
-    bundles?: string[];
-    /** `agent_start.browser` for spawns from this preset. Ranks below the
-     *  role's own default (see `resolveBrowserMode`). */
-    browser?: SpawnBrowserMode;
-}
-declare const userPresetsFileSchema: z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    presets: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        label: z.ZodString;
-        adapter: z.ZodOptional<z.ZodString>;
-        harness: z.ZodOptional<z.ZodString>;
-        model: z.ZodOptional<z.ZodString>;
-        route: z.ZodOptional<z.ZodObject<{
-            gateway: z.ZodString;
-            baseUrl: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-        access: z.ZodOptional<z.ZodObject<{
-            profileRef: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-        posture: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
-            default: "default";
-            plan: "plan";
-            "accept-edits": "accept-edits";
-            bypass: "bypass";
-            "read-only": "read-only";
-        }>, z.ZodObject<{
-            harnessModeId: z.ZodString;
-        }, z.core.$strip>]>>;
-        effort: z.ZodOptional<z.ZodEnum<{
-            low: "low";
-            medium: "medium";
-            high: "high";
-            xhigh: "xhigh";
-            max: "max";
-            ultracode: "ultracode";
-        }>>;
-        contextProfile: z.ZodOptional<z.ZodString>;
-        cwd: z.ZodOptional<z.ZodString>;
-        skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        bundles: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        browser: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"headless">, z.ZodLiteral<false>]>>;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
-type UserPresetsFile = z.infer<typeof userPresetsFileSchema>;
-declare function userPresetsPath(): string;
-/** Missing or malformed user config is treated as empty — a bad preset must
- * never prevent the daemon from starting. Writes always restore valid JSON. */
-declare function loadUserPresets(): Promise<UserPresetsFile>;
-declare function listUserPresets(): Promise<UserPreset[]>;
-declare function getUserPreset(id: string): Promise<UserPreset | undefined>;
-/** Add or replace a preset by id. The parser makes this the single validation
- * boundary for CLI, MCP and editor callers. */
-declare function saveUserPreset(preset: UserPreset): Promise<void>;
-declare function deleteUserPreset(id: string): Promise<boolean>;
-
-export { type UserPreset, type UserPresetsFile, deleteUserPreset, getUserPreset, listUserPresets, loadUserPresets, saveUserPreset, userPresetsPath };
+import '@agentproto/model-catalog';
+import '@agentproto/acp/client';
+import 'node:child_process';
+import './config-DcESQDmZ.js';

package/dist/user-presets.mjs

@@ -31,7 +31,8 @@ var userPresetSchema = z.object({
   cwd: z.string().min(1).optional(),
   skills: z.array(z.string().min(1)).optional(),
   bundles: z.array(z.string().min(1)).optional(),
-  browser: z.union([z.literal("headless"), z.literal(false)]).optional()
+  browser: z.union([z.literal("headless"), z.literal(false)]).optional(),
+  lastUsedAt: z.string().min(1).optional()
 });
 var userPresetsFileSchema = z.object({
   version: z.literal(1),
@@ -68,8 +69,10 @@ async function saveUserPreset(preset) {
   const validated = userPresetSchema.parse(preset);
   const file = await loadUserPresets();
   const index = file.presets.findIndex((existing) => existing.id === validated.id);
-  if (index === -1) file.presets.push(validated);
-  else file.presets[index] = validated;
+  const lastUsedAt = validated.lastUsedAt ?? (index === -1 ? void 0 : file.presets[index]?.lastUsedAt);
+  const next = { ...validated, ...lastUsedAt ? { lastUsedAt } : {} };
+  if (index === -1) file.presets.push(next);
+  else file.presets[index] = next;
   await writeUserPresets(file);
 }
 async function deleteUserPreset(id) {
@@ -80,7 +83,35 @@ async function deleteUserPreset(id) {
   await writeUserPresets(file);
   return true;
 }
+async function touchUserPreset(id) {
+  const file = await loadUserPresets();
+  const index = file.presets.findIndex((preset) => preset.id === id);
+  if (index === -1) return;
+  file.presets[index] = { ...file.presets[index], lastUsedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  await writeUserPresets(file);
+}
+function deriveRecentSpawnConfigs(descriptors, limit = 5) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const desc of descriptors) {
+    if (out.length >= limit) break;
+    if (desc.kind !== "agent-cli") continue;
+    const adapter = desc.harness ?? desc.adapterSlug;
+    if (!adapter) continue;
+    const config = {
+      adapter,
+      ...desc.model ? { model: desc.model } : {},
+      ...desc.accessProfile?.profileRef ? { profileRef: desc.accessProfile.profileRef } : {},
+      ...desc.cwd ? { cwd: desc.cwd } : {}
+    };
+    const key = JSON.stringify(config);
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push({ ...config, recent: true });
+  }
+  return out;
+}
 
-export { deleteUserPreset, getUserPreset, listUserPresets, loadUserPresets, saveUserPreset, userPresetsPath };
+export { deleteUserPreset, deriveRecentSpawnConfigs, getUserPreset, listUserPresets, loadUserPresets, saveUserPreset, touchUserPreset, userPresetSchema, userPresetsPath };
 //# sourceMappingURL=user-presets.mjs.map
 //# sourceMappingURL=user-presets.mjs.map

package/dist/user-presets.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/user-presets.ts"],"names":[],"mappings":";;;;;;;;;;AAqBA,IAAM,YAAA,GAAe,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,UAAU,MAAA,EAAQ,OAAA,EAAS,KAAA,EAAO,WAAW,CAAC,CAAA;AAClF,IAAM,aAAA,GAAgB,EAAE,KAAA,CAAM;AAAA,EAC5B,CAAA,CAAE,KAAK,CAAC,SAAA,EAAW,QAAQ,cAAA,EAAgB,QAAA,EAAU,WAAW,CAAC,CAAA;AAAA,EACjE,CAAA,CAAE,MAAA,CAAO,EAAE,aAAA,EAAe,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,CAAC,CAAA,EAAG;AAC/C,CAAC,CAAA;AACD,IAAM,WAAA,GAAc,EAAE,MAAA,CAAO;AAAA,EAC3B,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACzB,SAAS,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA;AAC5B,CAAC,CAAA;AAoCD,IAAM,gBAAA,GAAmB,EAAE,MAAA,CAAO;AAAA,EAChC,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,sBAAsB,CAAA;AAAA,EAC3C,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,SAAS,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACpC,SAAS,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACpC,OAAO,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EAClC,KAAA,EAAO,YAAY,QAAA,EAAS;AAAA,EAC5B,MAAA,EAAQ,CAAA,CAAE,MAAA,CAAO,EAAE,YAAY,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS,EAAG,EAAE,QAAA,EAAS;AAAA,EACxE,OAAA,EAAS,cAAc,QAAA,EAAS;AAAA,EAChC,MAAA,EAAQ,aAAa,QAAA,EAAS;AAAA,EAC9B,gBAAgB,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3C,KAAK,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EAChC,MAAA,EAAQ,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC5C,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC7C,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,OAAA,CAAQ,UAAU,CAAA,EAAG,CAAA,CAAE,OAAA,CAAQ,KAAK,CAAC,CAAC,EAAE,QAAA;AAC9D,CAAC,CAAA;AAED,IAAM,qBAAA,GAAwB,EAAE,MAAA,CAAO;AAAA,EACrC,OAAA,EAAS,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAA;AAAA,EACpB,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,gBAAgB;AACnC,CAAC,CAAA;AAID,SAAS,SAAA,GAA6B;AACpC,EAAA,OAAO,EAAE,OAAA,EAAS,CAAA,EAAG,OAAA,EAAS,EAAC,EAAE;AACnC;AAEO,SAAS,eAAA,GAA0B;AACxC,EAAA,OAAO,OAAA,CAAQ,OAAA,EAAQ,EAAG,aAAA,EAAe,cAAc,CAAA;AACzD;AAIA,eAAsB,eAAA,GAA4C;AAChE,EAAA,IAAI;AACF,IAAA,OAAO,qBAAA,CAAsB,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,MAAM,SAAS,eAAA,EAAgB,EAAG,MAAM,CAAC,CAAC,CAAA;AAAA,EAC1F,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,SAAA,EAAU;AAAA,EACnB;AACF;AAEA,eAAe,iBAAiB,IAAA,EAAsC;AACpE,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,EAAQ,EAAG,aAAa,CAAA;AACzC,EAAA,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,SAAA,EAAW,MAAM,CAAA;AACpC,EAAA,MAAM,SAAA,CAAU,iBAAgB,EAAG,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA,GAAI,IAAA,EAAM;AAAA,IACvE,QAAA,EAAU,MAAA;AAAA,IACV,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AAEA,eAAsB,eAAA,GAAyC;AAC7D,EAAA,OAAA,CAAQ,MAAM,iBAAgB,EAAG,OAAA;AACnC;AAEA,eAAsB,cAAc,EAAA,EAA6C;AAC/E,EAAA,OAAA,CAAQ,MAAM,iBAAgB,EAAG,OAAA,CAAQ,KAAK,CAAA,MAAA,KAAU,MAAA,CAAO,OAAO,EAAE,CAAA;AAC1E;AAIA,eAAsB,eAAe,MAAA,EAAmC;AACtE,EAAA,MAAM,SAAA,GAAY,gBAAA,CAAiB,KAAA,CAAM,MAAM,CAAA;AAC/C,EAAA,MAAM,IAAA,GAAO,MAAM,eAAA,EAAgB;AACnC,EAAA,MAAM,KAAA,GAAQ,KAAK,OAAA,CAAQ,SAAA,CAAU,cAAY,QAAA,CAAS,EAAA,KAAO,UAAU,EAAE,CAAA;AAC7E,EAAA,IAAI,KAAA,KAAU,EAAA,EAAI,IAAA,CAAK,OAAA,CAAQ,KAAK,SAAS,CAAA;AAAA,OACxC,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,GAAI,SAAA;AAC3B,EAAA,MAAM,iBAAiB,IAAI,CAAA;AAC7B;AAEA,eAAsB,iBAAiB,EAAA,EAA8B;AACnE,EAAA,MAAM,IAAA,GAAO,MAAM,eAAA,EAAgB;AACnC,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,MAAA,KAAU,MAAA,CAAO,OAAO,EAAE,CAAA;AAC/D,EAAA,IAAI,KAAA,KAAU,IAAI,OAAO,KAAA;AACzB,EAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AAC5B,EAAA,MAAM,iBAAiB,IAAI,CAAA;AAC3B,EAAA,OAAO,IAAA;AACT","file":"user-presets.mjs","sourcesContent":["/**\n * User-owned spawn presets.\n *\n * This is deliberately separate from `preset-tools.ts`: provider presets are\n * static gateway definitions shipped by packages, while a UserPreset is a\n * private saved combination of the orthogonal session-config axes.\n */\n\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\"\nimport { homedir } from \"node:os\"\nimport { join, resolve } from \"node:path\"\nimport { z } from \"zod\"\nimport type {\n  ContextProfile,\n  EffortLevel,\n  Posture,\n  RouteSpec,\n  SessionConfig,\n} from \"./session-config.js\"\nimport type { SpawnBrowserMode } from \"./browser-mount.js\"\n\nconst effortSchema = z.enum([\"low\", \"medium\", \"high\", \"xhigh\", \"max\", \"ultracode\"])\nconst postureSchema = z.union([\n  z.enum([\"default\", \"plan\", \"accept-edits\", \"bypass\", \"read-only\"]),\n  z.object({ harnessModeId: z.string().min(1) }),\n])\nconst routeSchema = z.object({\n  gateway: z.string().min(1),\n  baseUrl: z.string().url().optional(),\n})\n\n/** A reusable, user-scoped subset of the spawn/session config axes. */\nexport interface UserPreset extends Partial<SessionConfig> {\n  /** Stable machine-local id, e.g. `fast-deepseek`. */\n  id: string\n  /** Human-readable name shown by CLI and editor pickers. */\n  label: string\n  /** Adapter harness to use. Omitted means the caller selects one. */\n  adapter?: string\n  /** Canonical harness slug — alias for `adapter`. */\n  harness?: string\n  model?: string\n  route?: RouteSpec\n  access?: { profileRef?: string }\n  posture?: Posture\n  effort?: EffortLevel\n  contextProfile?: ContextProfile\n  /** Working directory the favorite pins to. When set, a spawn from this\n   *  preset lands here regardless of the caller's active folder — the axis\n   *  that makes a favorite fully location-pinned (true zero-input). Omitted\n   *  means the caller's cwd ladder resolves it as before. */\n  cwd?: string\n  /** Skills to preload for a spawn from this preset — the same axis as\n   *  `SpawnAgentSessionInput.skills`. Omitted means the adapter/defaults\n   *  decide. */\n  skills?: string[]\n  /** Capability bundle ids (`bundle_list`) for a spawn from this preset — the\n   *  same axis as `SpawnAgentSessionInput.bundles`. Omitted means the\n   *  adapter/defaults decide. */\n  bundles?: string[]\n  /** `agent_start.browser` for spawns from this preset. Ranks below the\n   *  role's own default (see `resolveBrowserMode`). */\n  browser?: SpawnBrowserMode\n}\n\nconst userPresetSchema = z.object({\n  id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),\n  label: z.string().min(1),\n  adapter: z.string().min(1).optional(),\n  harness: z.string().min(1).optional(),\n  model: z.string().min(1).optional(),\n  route: routeSchema.optional(),\n  access: z.object({ profileRef: z.string().min(1).optional() }).optional(),\n  posture: postureSchema.optional(),\n  effort: effortSchema.optional(),\n  contextProfile: z.string().min(1).optional(),\n  cwd: z.string().min(1).optional(),\n  skills: z.array(z.string().min(1)).optional(),\n  bundles: z.array(z.string().min(1)).optional(),\n  browser: z.union([z.literal(\"headless\"), z.literal(false)]).optional(),\n}) satisfies z.ZodType<UserPreset>\n\nconst userPresetsFileSchema = z.object({\n  version: z.literal(1),\n  presets: z.array(userPresetSchema),\n})\n\nexport type UserPresetsFile = z.infer<typeof userPresetsFileSchema>\n\nfunction emptyFile(): UserPresetsFile {\n  return { version: 1, presets: [] }\n}\n\nexport function userPresetsPath(): string {\n  return resolve(homedir(), \".agentproto\", \"presets.json\")\n}\n\n/** Missing or malformed user config is treated as empty — a bad preset must\n * never prevent the daemon from starting. Writes always restore valid JSON. */\nexport async function loadUserPresets(): Promise<UserPresetsFile> {\n  try {\n    return userPresetsFileSchema.parse(JSON.parse(await readFile(userPresetsPath(), \"utf8\")))\n  } catch {\n    return emptyFile()\n  }\n}\n\nasync function writeUserPresets(file: UserPresetsFile): Promise<void> {\n  const dir = join(homedir(), \".agentproto\")\n  await mkdir(dir, { recursive: true })\n  await writeFile(userPresetsPath(), JSON.stringify(file, null, 2) + \"\\n\", {\n    encoding: \"utf8\",\n    mode: 0o600,\n  })\n}\n\nexport async function listUserPresets(): Promise<UserPreset[]> {\n  return (await loadUserPresets()).presets\n}\n\nexport async function getUserPreset(id: string): Promise<UserPreset | undefined> {\n  return (await loadUserPresets()).presets.find(preset => preset.id === id)\n}\n\n/** Add or replace a preset by id. The parser makes this the single validation\n * boundary for CLI, MCP and editor callers. */\nexport async function saveUserPreset(preset: UserPreset): Promise<void> {\n  const validated = userPresetSchema.parse(preset)\n  const file = await loadUserPresets()\n  const index = file.presets.findIndex(existing => existing.id === validated.id)\n  if (index === -1) file.presets.push(validated)\n  else file.presets[index] = validated\n  await writeUserPresets(file)\n}\n\nexport async function deleteUserPreset(id: string): Promise<boolean> {\n  const file = await loadUserPresets()\n  const index = file.presets.findIndex(preset => preset.id === id)\n  if (index === -1) return false\n  file.presets.splice(index, 1)\n  await writeUserPresets(file)\n  return true\n}\n"]}
+{"version":3,"sources":["../src/user-presets.ts"],"names":[],"mappings":";;;;;;;;;;AAsBA,IAAM,YAAA,GAAe,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,UAAU,MAAA,EAAQ,OAAA,EAAS,KAAA,EAAO,WAAW,CAAC,CAAA;AAClF,IAAM,aAAA,GAAgB,EAAE,KAAA,CAAM;AAAA,EAC5B,CAAA,CAAE,KAAK,CAAC,SAAA,EAAW,QAAQ,cAAA,EAAgB,QAAA,EAAU,WAAW,CAAC,CAAA;AAAA,EACjE,CAAA,CAAE,MAAA,CAAO,EAAE,aAAA,EAAe,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,CAAC,CAAA,EAAG;AAC/C,CAAC,CAAA;AACD,IAAM,WAAA,GAAc,EAAE,MAAA,CAAO;AAAA,EAC3B,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACzB,SAAS,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA;AAC5B,CAAC,CAAA;AA2CM,IAAM,gBAAA,GAAmB,EAAE,MAAA,CAAO;AAAA,EACvC,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,sBAAsB,CAAA;AAAA,EAC3C,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,SAAS,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACpC,SAAS,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACpC,OAAO,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EAClC,KAAA,EAAO,YAAY,QAAA,EAAS;AAAA,EAC5B,MAAA,EAAQ,CAAA,CAAE,MAAA,CAAO,EAAE,YAAY,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS,EAAG,EAAE,QAAA,EAAS;AAAA,EACxE,OAAA,EAAS,cAAc,QAAA,EAAS;AAAA,EAChC,MAAA,EAAQ,aAAa,QAAA,EAAS;AAAA,EAC9B,gBAAgB,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3C,KAAK,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EAChC,MAAA,EAAQ,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC5C,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC7C,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,OAAA,CAAQ,UAAU,CAAA,EAAG,CAAA,CAAE,OAAA,CAAQ,KAAK,CAAC,CAAC,EAAE,QAAA,EAAS;AAAA,EACrE,YAAY,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA;AAChC,CAAC;AAED,IAAM,qBAAA,GAAwB,EAAE,MAAA,CAAO;AAAA,EACrC,OAAA,EAAS,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAA;AAAA,EACpB,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,gBAAgB;AACnC,CAAC,CAAA;AAID,SAAS,SAAA,GAA6B;AACpC,EAAA,OAAO,EAAE,OAAA,EAAS,CAAA,EAAG,OAAA,EAAS,EAAC,EAAE;AACnC;AAEO,SAAS,eAAA,GAA0B;AACxC,EAAA,OAAO,OAAA,CAAQ,OAAA,EAAQ,EAAG,aAAA,EAAe,cAAc,CAAA;AACzD;AAIA,eAAsB,eAAA,GAA4C;AAChE,EAAA,IAAI;AACF,IAAA,OAAO,qBAAA,CAAsB,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,MAAM,SAAS,eAAA,EAAgB,EAAG,MAAM,CAAC,CAAC,CAAA;AAAA,EAC1F,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,SAAA,EAAU;AAAA,EACnB;AACF;AAEA,eAAe,iBAAiB,IAAA,EAAsC;AACpE,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,EAAQ,EAAG,aAAa,CAAA;AACzC,EAAA,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,SAAA,EAAW,MAAM,CAAA;AACpC,EAAA,MAAM,SAAA,CAAU,iBAAgB,EAAG,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA,GAAI,IAAA,EAAM;AAAA,IACvE,QAAA,EAAU,MAAA;AAAA,IACV,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AAEA,eAAsB,eAAA,GAAyC;AAC7D,EAAA,OAAA,CAAQ,MAAM,iBAAgB,EAAG,OAAA;AACnC;AAEA,eAAsB,cAAc,EAAA,EAA6C;AAC/E,EAAA,OAAA,CAAQ,MAAM,iBAAgB,EAAG,OAAA,CAAQ,KAAK,CAAA,MAAA,KAAU,MAAA,CAAO,OAAO,EAAE,CAAA;AAC1E;AAMA,eAAsB,eAAe,MAAA,EAAmC;AACtE,EAAA,MAAM,SAAA,GAAY,gBAAA,CAAiB,KAAA,CAAM,MAAM,CAAA;AAC/C,EAAA,MAAM,IAAA,GAAO,MAAM,eAAA,EAAgB;AACnC,EAAA,MAAM,KAAA,GAAQ,KAAK,OAAA,CAAQ,SAAA,CAAU,cAAY,QAAA,CAAS,EAAA,KAAO,UAAU,EAAE,CAAA;AAC7E,EAAA,MAAM,UAAA,GAAa,UAAU,UAAA,KAAe,KAAA,KAAU,KAAK,MAAA,GAAY,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,EAAG,UAAA,CAAA;AAC5F,EAAA,MAAM,IAAA,GAAmB,EAAE,GAAG,SAAA,EAAW,GAAI,aAAa,EAAE,UAAA,EAAW,GAAI,EAAC,EAAG;AAC/E,EAAA,IAAI,KAAA,KAAU,EAAA,EAAI,IAAA,CAAK,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,OACnC,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,GAAI,IAAA;AAC3B,EAAA,MAAM,iBAAiB,IAAI,CAAA;AAC7B;AAEA,eAAsB,iBAAiB,EAAA,EAA8B;AACnE,EAAA,MAAM,IAAA,GAAO,MAAM,eAAA,EAAgB;AACnC,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,MAAA,KAAU,MAAA,CAAO,OAAO,EAAE,CAAA;AAC/D,EAAA,IAAI,KAAA,KAAU,IAAI,OAAO,KAAA;AACzB,EAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AAC5B,EAAA,MAAM,iBAAiB,IAAI,CAAA;AAC3B,EAAA,OAAO,IAAA;AACT;AAMA,eAAsB,gBAAgB,EAAA,EAA2B;AAC/D,EAAA,MAAM,IAAA,GAAO,MAAM,eAAA,EAAgB;AACnC,EAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA,MAAA,KAAU,MAAA,CAAO,OAAO,EAAE,CAAA;AAC/D,EAAA,IAAI,UAAU,EAAA,EAAI;AAClB,EAAA,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,GAAI,EAAE,GAAG,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,EAAI,UAAA,EAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,aAAY,EAAE;AACtF,EAAA,MAAM,iBAAiB,IAAI,CAAA;AAC7B;AAuBO,SAAS,wBAAA,CACd,WAAA,EACA,KAAA,GAAQ,CAAA,EACa;AACrB,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,MAA2B,EAAC;AAClC,EAAA,KAAA,MAAW,QAAQ,WAAA,EAAa;AAC9B,IAAA,IAAI,GAAA,CAAI,UAAU,KAAA,EAAO;AACzB,IAAA,IAAI,IAAA,CAAK,SAAS,WAAA,EAAa;AAC/B,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,IAAW,IAAA,CAAK,WAAA;AACrC,IAAA,IAAI,CAAC,OAAA,EAAS;AACd,IAAA,MAAM,MAAA,GAA4C;AAAA,MAChD,OAAA;AAAA,MACA,GAAI,KAAK,KAAA,GAAQ,EAAE,OAAO,IAAA,CAAK,KAAA,KAAU,EAAC;AAAA,MAC1C,GAAI,IAAA,CAAK,aAAA,EAAe,UAAA,GAAa,EAAE,YAAY,IAAA,CAAK,aAAA,CAAc,UAAA,EAAW,GAAI,EAAC;AAAA,MACtF,GAAI,KAAK,GAAA,GAAM,EAAE,KAAK,IAAA,CAAK,GAAA,KAAQ;AAAC,KACtC;AACA,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AACjC,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AACnB,IAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,IAAA,GAAA,CAAI,KAAK,EAAE,GAAG,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,GAAA;AACT","file":"user-presets.mjs","sourcesContent":["/**\n * User-owned spawn presets.\n *\n * This is deliberately separate from `preset-tools.ts`: provider presets are\n * static gateway definitions shipped by packages, while a UserPreset is a\n * private saved combination of the orthogonal session-config axes.\n */\n\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\"\nimport { homedir } from \"node:os\"\nimport { join, resolve } from \"node:path\"\nimport { z } from \"zod\"\nimport type {\n  ContextProfile,\n  EffortLevel,\n  Posture,\n  RouteSpec,\n  SessionConfig,\n} from \"./session-config.js\"\nimport type { SpawnBrowserMode } from \"./browser-mount.js\"\nimport type { SessionDescriptor } from \"./sessions.js\"\n\nconst effortSchema = z.enum([\"low\", \"medium\", \"high\", \"xhigh\", \"max\", \"ultracode\"])\nconst postureSchema = z.union([\n  z.enum([\"default\", \"plan\", \"accept-edits\", \"bypass\", \"read-only\"]),\n  z.object({ harnessModeId: z.string().min(1) }),\n])\nconst routeSchema = z.object({\n  gateway: z.string().min(1),\n  baseUrl: z.string().url().optional(),\n})\n\n/** A reusable, user-scoped subset of the spawn/session config axes. */\nexport interface UserPreset extends Partial<SessionConfig> {\n  /** Stable machine-local id, e.g. `fast-deepseek`. */\n  id: string\n  /** Human-readable name shown by CLI and editor pickers. */\n  label: string\n  /** Adapter harness to use. Omitted means the caller selects one. */\n  adapter?: string\n  /** Canonical harness slug — alias for `adapter`. */\n  harness?: string\n  model?: string\n  route?: RouteSpec\n  access?: { profileRef?: string }\n  posture?: Posture\n  effort?: EffortLevel\n  contextProfile?: ContextProfile\n  /** Working directory the favorite pins to. When set, a spawn from this\n   *  preset lands here regardless of the caller's active folder — the axis\n   *  that makes a favorite fully location-pinned (true zero-input). Omitted\n   *  means the caller's cwd ladder resolves it as before. */\n  cwd?: string\n  /** Skills to preload for a spawn from this preset — the same axis as\n   *  `SpawnAgentSessionInput.skills`. Omitted means the adapter/defaults\n   *  decide. */\n  skills?: string[]\n  /** Capability bundle ids (`bundle_list`) for a spawn from this preset — the\n   *  same axis as `SpawnAgentSessionInput.bundles`. Omitted means the\n   *  adapter/defaults decide. */\n  bundles?: string[]\n  /** `agent_start.browser` for spawns from this preset. Ranks below the\n   *  role's own default (see `resolveBrowserMode`). */\n  browser?: SpawnBrowserMode\n  /** ISO 8601 timestamp of the last spawn that resolved a `presetId` to this\n   *  preset (agent_start, `/sessions/agent`, `/sessions/chat` — stamped once\n   *  in `spawnAgentSession`, the shared core all three route through). Never\n   *  set by a caller directly; `saveUserPreset` preserves the existing value\n   *  across an edit unless the write explicitly overrides it. Absent for a\n   *  preset that has never been used to spawn. */\n  lastUsedAt?: string\n}\n\nexport const userPresetSchema = z.object({\n  id: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),\n  label: z.string().min(1),\n  adapter: z.string().min(1).optional(),\n  harness: z.string().min(1).optional(),\n  model: z.string().min(1).optional(),\n  route: routeSchema.optional(),\n  access: z.object({ profileRef: z.string().min(1).optional() }).optional(),\n  posture: postureSchema.optional(),\n  effort: effortSchema.optional(),\n  contextProfile: z.string().min(1).optional(),\n  cwd: z.string().min(1).optional(),\n  skills: z.array(z.string().min(1)).optional(),\n  bundles: z.array(z.string().min(1)).optional(),\n  browser: z.union([z.literal(\"headless\"), z.literal(false)]).optional(),\n  lastUsedAt: z.string().min(1).optional(),\n}) satisfies z.ZodType<UserPreset>\n\nconst userPresetsFileSchema = z.object({\n  version: z.literal(1),\n  presets: z.array(userPresetSchema),\n})\n\nexport type UserPresetsFile = z.infer<typeof userPresetsFileSchema>\n\nfunction emptyFile(): UserPresetsFile {\n  return { version: 1, presets: [] }\n}\n\nexport function userPresetsPath(): string {\n  return resolve(homedir(), \".agentproto\", \"presets.json\")\n}\n\n/** Missing or malformed user config is treated as empty — a bad preset must\n * never prevent the daemon from starting. Writes always restore valid JSON. */\nexport async function loadUserPresets(): Promise<UserPresetsFile> {\n  try {\n    return userPresetsFileSchema.parse(JSON.parse(await readFile(userPresetsPath(), \"utf8\")))\n  } catch {\n    return emptyFile()\n  }\n}\n\nasync function writeUserPresets(file: UserPresetsFile): Promise<void> {\n  const dir = join(homedir(), \".agentproto\")\n  await mkdir(dir, { recursive: true })\n  await writeFile(userPresetsPath(), JSON.stringify(file, null, 2) + \"\\n\", {\n    encoding: \"utf8\",\n    mode: 0o600,\n  })\n}\n\nexport async function listUserPresets(): Promise<UserPreset[]> {\n  return (await loadUserPresets()).presets\n}\n\nexport async function getUserPreset(id: string): Promise<UserPreset | undefined> {\n  return (await loadUserPresets()).presets.find(preset => preset.id === id)\n}\n\n/** Add or replace a preset by id. The parser makes this the single validation\n * boundary for CLI, MCP and editor callers. An edit that doesn't name its own\n * `lastUsedAt` keeps the existing preset's stamp rather than wiping it — a\n * rename/retune of a favorite must not erase its recency. */\nexport async function saveUserPreset(preset: UserPreset): Promise<void> {\n  const validated = userPresetSchema.parse(preset)\n  const file = await loadUserPresets()\n  const index = file.presets.findIndex(existing => existing.id === validated.id)\n  const lastUsedAt = validated.lastUsedAt ?? (index === -1 ? undefined : file.presets[index]?.lastUsedAt)\n  const next: UserPreset = { ...validated, ...(lastUsedAt ? { lastUsedAt } : {}) }\n  if (index === -1) file.presets.push(next)\n  else file.presets[index] = next\n  await writeUserPresets(file)\n}\n\nexport async function deleteUserPreset(id: string): Promise<boolean> {\n  const file = await loadUserPresets()\n  const index = file.presets.findIndex(preset => preset.id === id)\n  if (index === -1) return false\n  file.presets.splice(index, 1)\n  await writeUserPresets(file)\n  return true\n}\n\n/** Stamp `lastUsedAt` on the preset a spawn just resolved `presetId` to.\n * Best-effort: an unknown id is a no-op, and a write failure here must never\n * fail the spawn it's timestamping — callers should await it inside a\n * `.catch(() => {})`. */\nexport async function touchUserPreset(id: string): Promise<void> {\n  const file = await loadUserPresets()\n  const index = file.presets.findIndex(preset => preset.id === id)\n  if (index === -1) return\n  file.presets[index] = { ...file.presets[index]!, lastUsedAt: new Date().toISOString() }\n  await writeUserPresets(file)\n}\n\n/** One de-duplicated recent spawn configuration, derived from session\n *  history rather than persisted — the `user_preset_list({ includeRecent:\n *  true })` / `GET /user-presets?includeRecent=1` companion view to actual\n *  favorites, so a caller can \"save as favorite\" something they've spawned\n *  before without retyping it. */\nexport interface RecentSpawnConfig {\n  adapter?: string\n  model?: string\n  profileRef?: string\n  cwd?: string\n  /** Always true — the marker that distinguishes a derived row from a\n   *  persisted {@link UserPreset} when the two are rendered in one list. */\n  recent: true\n}\n\n/** Derive up to `limit` distinct recent spawn configurations (adapter,\n *  model, profileRef, cwd) from the registry's own newest-first session\n *  list. Only `agent-cli` sessions carry a spawn config; a session that\n *  named neither `harness` nor `adapterSlug` is skipped (nothing to offer\n *  as a favorite). Distinctness is by the exact (adapter, model, profileRef,\n *  cwd) tuple, keeping only the most recent occurrence of each. */\nexport function deriveRecentSpawnConfigs(\n  descriptors: readonly SessionDescriptor[],\n  limit = 5,\n): RecentSpawnConfig[] {\n  const seen = new Set<string>()\n  const out: RecentSpawnConfig[] = []\n  for (const desc of descriptors) {\n    if (out.length >= limit) break\n    if (desc.kind !== \"agent-cli\") continue\n    const adapter = desc.harness ?? desc.adapterSlug\n    if (!adapter) continue\n    const config: Omit<RecentSpawnConfig, \"recent\"> = {\n      adapter,\n      ...(desc.model ? { model: desc.model } : {}),\n      ...(desc.accessProfile?.profileRef ? { profileRef: desc.accessProfile.profileRef } : {}),\n      ...(desc.cwd ? { cwd: desc.cwd } : {}),\n    }\n    const key = JSON.stringify(config)\n    if (seen.has(key)) continue\n    seen.add(key)\n    out.push({ ...config, recent: true })\n  }\n  return out\n}\n"]}

package/package.json

@@ -1,9 +1,11 @@
 {
   "name": "@agentproto/runtime",
-  "version": "5.1.0",
+  "version": "5.3.0",
   "description": "@agentproto/runtime — long-running gateway that turns an agentproto workspace into a live runtime. Composes @agentproto/mcp-server (CRUD verbs) with HTTP transport, HEARTBEAT.md autonomy loop, and append-only conversation persistence. Drop a workspace dir, point your MCP client at it, and the agent ticks on its own.",
   "keywords": [
     "agentproto",
+    "aip-46",
+    "aip-58",
     "runtime",
     "gateway",
     "mcp",
@@ -91,6 +93,11 @@
       "import": "./dist/release-check.mjs",
       "default": "./dist/release-check.mjs"
     },
+    "./bundles": {
+      "types": "./dist/bundles.d.ts",
+      "import": "./dist/bundles.mjs",
+      "default": "./dist/bundles.mjs"
+    },
     "./mcp-imports": {
       "types": "./dist/mcp-imports.d.ts",
       "import": "./dist/mcp-imports.mjs",
@@ -148,44 +155,51 @@
   },
   "dependencies": {
     "@modelcontextprotocol/ext-apps": "1.7.5",
-    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@modelcontextprotocol/sdk": "^1.30.1",
     "ai": "^6.0.277",
     "croner": "^9.1.0",
     "gray-matter": "^4.0.3",
     "ws": "^8.21.3",
     "zod": "^4.6.5",
-    "@agentproto/acp": "0.9.0",
-    "@agentproto/agent": "0.2.4",
-    "@agentproto/app-client": "0.4.0",
-    "@agentproto/app-kit": "1.3.1",
-    "@agentproto/auth": "1.1.0",
-    "@agentproto/apps": "0.15.0",
-    "@agentproto/driver": "0.2.4",
-    "@agentproto/command-sandbox": "0.2.2",
-    "@agentproto/driver-agent-cli": "2.5.1",
-    "@agentproto/driver-http": "0.1.8",
-    "@agentproto/eval-reporters": "0.2.18",
-    "@agentproto/manifest": "0.2.2",
-    "@agentproto/mcp-server": "0.4.0",
-    "@agentproto/model-catalog": "0.11.1",
-    "@agentproto/plugin-local-browser": "0.3.0",
-    "@agentproto/provider-kit": "0.4.5",
+    "@agentproto/a2a": "0.1.0",
+    "@agentproto/adapter-browser": "0.2.0",
+    "@agentproto/agent": "0.2.5",
+    "@agentproto/acp": "0.9.1",
+    "@agentproto/app-kit": "1.4.0",
+    "@agentproto/apps": "0.17.0",
+    "@agentproto/auth": "1.1.1",
+    "@agentproto/app-client": "0.4.1",
+    "@agentproto/driver": "0.2.5",
+    "@agentproto/driver-agent-cli": "2.6.0",
+    "@agentproto/command-sandbox": "0.3.0",
+    "@agentproto/driver-browser": "0.1.0",
+    "@agentproto/driver-http": "0.1.9",
+    "@agentproto/eval-reporters": "0.2.19",
+    "@agentproto/governance-engine": "0.1.9",
+    "@agentproto/llm-endpoint": "0.11.2",
+    "@agentproto/manifest": "0.2.3",
+    "@agentproto/model-catalog": "0.11.3",
+    "@agentproto/governance": "0.1.5",
+    "@agentproto/mcp-server": "0.4.1",
+    "@agentproto/pairing-host": "0.1.0",
+    "@agentproto/plugin-local-browser": "0.3.1",
     "@agentproto/provider-presets": "0.7.0",
-    "@agentproto/providers-store": "0.3.19",
-    "@agentproto/redaction": "0.2.2",
-    "@agentproto/review": "0.2.0",
-    "@agentproto/routine": "0.3.0",
-    "@agentproto/sandbox": "0.7.0",
-    "@agentproto/secrets": "1.1.0",
-    "@agentproto/telemetry-langfuse": "0.2.16",
-    "@agentproto/tool": "0.3.1",
-    "@agentproto/workflow": "0.7.0",
-    "@agentproto/workflow-loader": "0.2.4",
-    "@agentproto/workflow-runtime": "0.14.0",
-    "@agentproto/workspace-brain": "0.4.8"
+    "@agentproto/provider-kit": "0.4.6",
+    "@agentproto/providers-store": "0.3.21",
+    "@agentproto/routine": "0.3.1",
+    "@agentproto/sandbox": "0.7.2",
+    "@agentproto/review": "0.4.0",
+    "@agentproto/secrets": "1.1.1",
+    "@agentproto/telemetry-langfuse": "0.2.17",
+    "@agentproto/redaction": "0.2.3",
+    "@agentproto/workflow": "0.7.1",
+    "@agentproto/workflow-loader": "0.2.5",
+    "@agentproto/tool": "0.3.2",
+    "@agentproto/workflow-runtime": "0.15.0",
+    "@agentproto/workspace-brain": "0.4.9"
   },
   "optionalDependencies": {
-    "@agentproto/sandbox-e2b": "0.5.7"
+    "@agentproto/sandbox-e2b": "0.5.9"
   },
   "devDependencies": {
     "@types/node": "^25.9.5",
@@ -194,9 +208,9 @@
     "typescript": "^5.9.3",
     "vite-node": "^3.2.4",
     "vitest": "^3.2.7",
-    "@agentproto/tooling": "0.1.0",
+    "@agentproto/rendezvous": "0.2.3",
     "@agentproto/transcript-fixtures": "0.3.0",
-    "@agentproto/rendezvous": "0.2.3"
+    "@agentproto/tooling": "0.1.0"
   },
   "scripts": {
     "dev": "tsup --watch",
@@ -206,6 +220,7 @@
     "test": "vitest run --passWithNoTests",
     "test:watch": "vitest",
     "sim:inbound": "vite-node scripts/simulate-inbound.mjs",
-    "telegram:proxy": "vite-node scripts/telegram-proxy.mjs"
+    "telegram:proxy": "vite-node scripts/telegram-proxy.mjs",
+    "bench:review-ledger": "vite-node scripts/bench-review-ledger.mjs"
   }
 }

package/dist/context-continuity-Bn99UtVC.d.ts

@@ -1,104 +0,0 @@
-import { AcpMcpServer } from '@agentproto/acp';
-import { SandboxMode } from '@agentproto/command-sandbox';
-
-/**
- * `agent_start({ browser: "headless" })` — an isolated headless Chrome for
- * one spawned agent, mounted as a per-session stdio MCP server
- * (`chrome-devtools-mcp --headless --isolated`, see
- * `@agentproto/plugin-local-browser`'s `buildHeadlessBrowserMcpEntry`).
- *
- * The server is a child of the adapter process, so it inherits the session's
- * `commandSandbox` confinement and normally dies with the adapter (stdin EOF,
- * and Chrome exits when its pipe closes). On `session:exited`,
- * `sweepSessionBrowser` does two things:
- *   - kills anything still carrying the session's `--agentproto-session=<id>`
- *     Chrome marker, in case an adapter never exited or never closed its MCP
- *     children;
- *   - deletes the session's profile dir, `$TMPDIR/agentproto-browser/<id>`.
- * The profile is caller-owned rather than `--isolated`, because `--isolated`
- * only cleans up on a graceful `browser.close()`; observed live, a killed
- * session left its puppeteer temp profile behind.
- */
-
-/** `agent_start.browser`. `false` (the default) mounts nothing. */
-type SpawnBrowserMode = "headless" | false;
-interface HeadlessBrowserMount {
-    entry: AcpMcpServer;
-    /** Read grants the adapter's `commandSandbox` needs for the MCP server +
-     *  Chrome (threaded as `additionalReadPaths`). */
-    readPaths: string[];
-}
-interface ResolveHeadlessBrowserInput {
-    sessionId: string;
-    cwd: string;
-    /** The spawn's explicit `commandSandbox`; `undefined` falls back to the
-     *  workspace's `adapterSpawn` config, like the driver does. */
-    commandSandbox?: SandboxMode;
-}
-type ResolveHeadlessBrowser = (input: ResolveHeadlessBrowserInput) => Promise<HeadlessBrowserMount>;
-
-/**
- * Canonical context-continuity policy for long-running agent sessions.
- *
- * Provides a deterministic, testable policy engine with safe defaults and a
- * clear override order: global defaults → per-harness defaults →
- * per-model defaults → session override. The policy drives warnings,
- * opportunistic compaction, fresh continuation, and hard-stop decisions at
- * turn boundaries so sessions never silently run into the model context
- * limit.
- */
-/**
- * `manual` suppresses every automatic *nudge* (warn/compact/continue-fresh —
- * see `contextContinuityNextAction`) so the session is left alone until the
- * caller acts. It does NOT suppress `hard-stop`: that state is an
- * unconditional safety floor, independent of mode, by design — its whole
- * purpose is to stop a session from silently running past the model's real
- * context window (further prompts would be truncated/rejected by the
- * provider, or corrupt the conversation) even when nothing is watching.
- * `manual` means "don't nag me", not "let me drive off the window's edge".
- * A session that wants to opt out of the hard stop should set
- * `hardStopAtPct` above what it will ever reach, not rely on mode.
- */
-type ContextContinuityMode = "manual" | "ask" | "auto";
-interface ContextContinuityThresholds {
-    /** Percentage at which the UI first warns that context is filling. */
-    warnAtPct: number;
-    /** Percentage at which an opportunistic compact may be attempted. */
-    compactAtPct: number;
-    /** Percentage at which a fresh continuation session is created. */
-    continueFreshAtPct: number;
-    /** Percentage above which no new prompt may be admitted. */
-    hardStopAtPct: number;
-}
-interface ContextContinuityCheckpointSections {
-    goal: boolean;
-    plan: boolean;
-    decisions: boolean;
-    changedFiles: boolean;
-    gitStatus: boolean;
-    tests: boolean;
-    errors: boolean;
-    risks: boolean;
-    nextStep: boolean;
-    config: boolean;
-}
-/**
- * User-supplied policy fragment. Every field optional; missing values are
- * filled from the next precedence layer or from safe defaults.
- */
-interface ContextContinuityPolicy extends Partial<ContextContinuityThresholds>, Partial<ContextContinuityCheckpointSections> {
-    mode?: ContextContinuityMode;
-    /** Optional display label for UIs. */
-    label?: string;
-}
-/**
- * Fully-resolved, validated policy. This is the shape stored on a session
- * descriptor and returned by status queries.
- */
-interface ResolvedContextContinuityPolicy extends ContextContinuityThresholds, Required<ContextContinuityCheckpointSections> {
-    mode: ContextContinuityMode;
-    /** Effective label (falls back to mode when absent). */
-    label: string;
-}
-
-export type { ContextContinuityPolicy as C, ResolveHeadlessBrowser as R, SpawnBrowserMode as S, ResolvedContextContinuityPolicy as a };