@agentproto/runtime 5.6.0 → 5.8.0

package/dist/{sessions-DMzCgTVy.d.ts → sessions-SrISpFsH.d.ts}

@@ -4432,6 +4432,14 @@ interface SessionDescriptor {
      *  process gone (pid 1234) — session crashed"). Not a stack trace or raw
      *  error, just enough for a UI/log line. Absent unless something set it. */
     lastError?: string;
+    /** BOOTSTRAP P7b — why the LAST device-mirror sync against this
+     *  session's host failed (`device-mirror.ts`), for readers to show
+     *  "host unreachable" instead of silently rendering a stale mirrored
+     *  transcript. Ephemeral: stamped on the descriptor at read time when a
+     *  sync fails, CLEARED by the next successful sync. Absent (never "")
+     *  for a session that is not device-mirrored or whose last sync passed.
+     */
+    mirrorError?: string;
     /** ISO 8601 timestamp of the crash-detect sweep that flipped this row to
      *  `endedReason:"crashed"`. Absent for every other terminal path. */
     crashedAt?: string;
@@ -4533,6 +4541,17 @@ interface SessionDescriptor {
      *  turn end (normal or abnormal); absent when the turn ended with no
      *  reason to report. */
     lastTurnReason?: string;
+    /** Device-spawn only: true when this session's FIRST turn ended errored or
+     *  EMPTY — the field-observed shape where a `device:<fp>` spawn lands on a
+     *  host whose adapter rejects the model id and the turn completes with no
+     *  assistant output, leaving the controller a healthy-looking `running`
+     *  session. Stamped at the first turn-end (`runAgentTurn`) for a remote
+     *  session whose `sandboxProvider` is in the `device:` family; the raw
+     *  host-side error line is surfaced separately as a `notice` (see
+     *  `sandbox-agent-session-proxy.ts`'s `surfaceHostTurnErrors`). Absent for
+     *  local/e2b/Box sessions and for a device whose first turn was
+     *  productive. */
+    firstTurnFailed?: boolean;
     /** DERIVED, read-time only (never persisted — stripped by `snapshotRows`,
      *  stamped by `stampInterrupted` in list()/get()/findByIdOrName). True when
      *  this session died with a turn in flight under a daemon restart —
@@ -5301,6 +5320,27 @@ interface SessionDescriptor {
     remote?: boolean;
     /** Provider-assigned sandbox id (`BootedSandbox.sandboxId`), when `remote` is true. */
     sandboxId?: string;
+    /**
+     * BOOTSTRAP P7a — for a `device:<fp|name>` sandbox spawn: the id of the
+     * session the HOST's own daemon created (`BootedSandbox`'s inner
+     * `agent_start` descriptor.id, i.e. the sandbox proxy's `sessionId`). The
+     * conversation with the remote device lives THERE, not under this
+     * descriptor's id — `device_prompt` and the read paths use this to bridge
+     * the twin daemons (issue #1637: a controller "sess_305be17c" vs host
+     * "sess_cf318f00"). Absent for a local/cloud spawn, or when the host
+     * failed to return a usable id at spawn time. Persisted via the same
+     * descriptor spread as every other field.
+     */
+    hostSessionId?: string;
+    /**
+     * BOOTSTRAP P7a — for a `device:<fp|name>` sandbox spawn: the paired
+     * host's identity as pinned by the spawn's own sandbox spec, resolved by
+     * the device provider to the REAL fingerprint when it can (a saved
+     * fallback keeps the raw `fp-or-name` target — every consumer matches
+     * `HostRegistry.forwardHttp`'s `fingerprint OR name`). Only meaningful
+     * alongside {@link hostSessionId}; absent for every other spawn.
+     */
+    hostFingerprint?: string;
     /** Sandbox provider slug (`agent_start.sandbox`'s provider, e.g. `"e2b"`,
      *  `"local"`), when `remote` is true. Identifies WHERE the box lives, not
      *  just THAT one exists — the VS Code panel's sandbox chip names it in its
@@ -5459,6 +5499,10 @@ interface SessionSummary {
     browserLocation?: "local" | "cloud";
     remote?: boolean;
     sandboxId?: string;
+    /** Device-sandbox identity mapping — see `SessionDescriptor.hostSessionId`. */
+    hostSessionId?: string;
+    /** Device-sandbox identity mapping — see `SessionDescriptor.hostFingerprint`. */
+    hostFingerprint?: string;
     sandboxTeardown?: "kill" | "pause";
     sandboxPorts?: Record<number, string>;
     appServe?: SessionAppServeInfo;
@@ -6448,6 +6492,33 @@ interface SessionsRegistry {
      *  one. Returns false (no-op) for an unknown id or a non-`agent-cli`
      *  session. */
     recordNotice(id: string, text: string): boolean;
+    /**
+     * BOOTSTRAP P7b — append pre-shaped MIRROR records (from
+     * `device-mirror.ts`) into an agent-cli session's durable transcript.
+     * Each record already carries its own `kind` + `origin: "device"` +
+     * `hostSeq` fields; this assigns the controller-local `seq`/`ts` the
+     * session's own writer would (`recordMirrorEvents`), in file order.
+     * Deliberately BYPASSES `recordEvent`'s kind/coalescing logic — a mirror
+     * replay must be byte-faithful to what was computed, never re-shaped or
+     * debounced. Returns the number of records written; 0 for an unknown id,
+     * a non-`agent-cli` session, or a session that is not device-mirrored at
+     * all (the caller checked, but double-checks here to keep a local session's
+     * transcript mirror-free even on a stale caller).
+     */
+    appendDeviceMirrorRecords(id: string, records: readonly Record<string, unknown>[]): number;
+    /**
+     * Scan the same transcript `appendDeviceMirrorRecords` writes, computed
+     * against the registry's OWN transcript base dir (the mirror reader
+     * `device-mirror.ts` must never re-derive the path). Returns the mirror
+     * cursor (max `hostSeq` among `origin: "device"` records — 0 when this
+     * session has never been mirrored) and the ordered controller-local
+     * user-prompt texts (kind `user-prompt`, NOT device-tagged) the seed walk
+     * matches against the host transcript. File absent/empty ⇒ all empty.
+     */
+    scanDeviceMirrorState(id: string): {
+        cursor: number;
+        localPromptTexts: readonly string[];
+    };
     /** List permission requests currently parked in the pending-permissions
      *  inbox across all permission-hold sessions, newest last. Optionally
      *  filtered to one session. */
@@ -6665,6 +6736,15 @@ interface SpawnAgentInput {
     remote?: boolean;
     /** Provider-assigned sandbox id, when `remote` is true. */
     sandboxId?: string;
+    /** Device-sandbox identity mapping (BOOTSTRAP P7a) — the HOST session id
+     *  the device provider's inner `agent_start` created; stamped onto
+     *  {@link SessionDescriptor.hostSessionId}. Omit for every non-device
+     *  spawn (or when the host returned no usable id). */
+    hostSessionId?: string;
+    /** Device-sandbox identity mapping (BOOTSTRAP P7a) — the paired host's
+     *  fingerprint (or the raw `device:<…>` target when the provider couldn't
+     *  resolve one); stamped onto {@link SessionDescriptor.hostFingerprint}. */
+    hostFingerprint?: string;
     /** Sandbox provider slug, when `remote` is true — see
      *  `SessionDescriptor.sandboxProvider`. */
     sandboxProvider?: string;

package/dist/user-presets.d.ts

@@ -1,7 +1,7 @@
 import 'zod';
 import './session-config-DxIIuJFY.js';
 import './spawn-defaults-Cp9SGZex.js';
-export { c5 as RecentSpawnConfig, U as UserPreset, b8 as UserPresetsFile, bp as deleteUserPreset, c6 as deriveRecentSpawnConfigs, bw as getUserPreset, bC as listUserPresets, bE as loadUserPresets, c0 as saveUserPreset, c7 as touchUserPreset, c8 as userPresetSchema, c3 as userPresetsPath } from './sessions-DMzCgTVy.js';
+export { c5 as RecentSpawnConfig, U as UserPreset, b8 as UserPresetsFile, bp as deleteUserPreset, c6 as deriveRecentSpawnConfigs, bw as getUserPreset, bC as listUserPresets, bE as loadUserPresets, c0 as saveUserPreset, c7 as touchUserPreset, c8 as userPresetSchema, c3 as userPresetsPath } from './sessions-SrISpFsH.js';
 import '@agentproto/auth';
 import '@agentproto/acp';
 import '@agentproto/command-sandbox';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/runtime",
-  "version": "5.6.0",
+  "version": "5.8.0",
   "description": "@agentproto/runtime — long-running gateway that turns an agentproto workspace into a live runtime. Composes @agentproto/mcp-server (CRUD verbs) with HTTP transport, HEARTBEAT.md autonomy loop, and append-only conversation persistence. Drop a workspace dir, point your MCP client at it, and the agent ticks on its own.",
   "keywords": [
     "agentproto",
@@ -167,11 +167,11 @@
     "@agentproto/agent": "0.2.5",
     "@agentproto/app-client": "0.4.1",
     "@agentproto/app-kit": "1.5.0",
-    "@agentproto/apps": "0.17.2",
+    "@agentproto/apps": "0.18.0",
     "@agentproto/auth": "1.1.2",
-    "@agentproto/driver": "0.3.0",
     "@agentproto/command-sandbox": "0.3.0",
-    "@agentproto/driver-agent-cli": "2.6.3",
+    "@agentproto/driver": "0.3.0",
+    "@agentproto/driver-agent-cli": "2.7.0",
     "@agentproto/driver-browser": "0.2.0",
     "@agentproto/driver-http": "0.1.10",
     "@agentproto/eval-reporters": "0.2.20",
@@ -179,7 +179,7 @@
     "@agentproto/governance-engine": "0.1.10",
     "@agentproto/llm-endpoint": "0.11.3",
     "@agentproto/manifest": "0.2.3",
-    "@agentproto/mcp-server": "0.4.2",
+    "@agentproto/mcp-server": "0.5.0",
     "@agentproto/model-catalog": "0.11.3",
     "@agentproto/pairing-host": "0.2.2",
     "@agentproto/plugin-local-browser": "0.3.2",
@@ -189,7 +189,7 @@
     "@agentproto/redaction": "0.2.3",
     "@agentproto/review": "0.4.0",
     "@agentproto/routine": "0.3.1",
-    "@agentproto/sandbox": "0.7.4",
+    "@agentproto/sandbox": "0.8.1",
     "@agentproto/secrets": "1.2.1",
     "@agentproto/telemetry-langfuse": "0.2.18",
     "@agentproto/tool": "0.4.0",
@@ -199,7 +199,7 @@
     "@agentproto/workspace-brain": "0.4.10"
   },
   "optionalDependencies": {
-    "@agentproto/sandbox-e2b": "0.5.11"
+    "@agentproto/sandbox-e2b": "0.5.13"
   },
   "devDependencies": {
     "@types/node": "^25.9.5",