@agentproto/runtime 5.7.0 → 5.8.0

package/dist/index.d.ts

@@ -3,8 +3,8 @@ import { h as WorktreeIsolationMode, i as SpawnAttachMode, j as SpawnDedupeMode,
 export { k as DEFAULT_MODEL_ROLES, M as MODEL_ROLE_REF_PREFIX, l as ModelRoleContext, m as ModelRoleEntry, n as ModelRoleSource, o as ModelRoleValue, p as ModelRolesConfig, q as listModelRoles, r as parseModelRoleRef, s as resolveModelRole } from './config-Gz7q9yfJ.js';
 import { B as BuildHeartbeatAgent } from './heartbeat-BJtxbDb9.js';
 export { H as HeartbeatAgent, a as HeartbeatRunner, R as RuntimeEvent, b as RuntimeEvents, p as parseDuration } from './heartbeat-BJtxbDb9.js';
-import { M as MessageUrgency, S as SessionEvent, a as SessionEventType, b as SessionEventBus, c as SessionsRegistry, C as CompletionPolicySupervisor, T as TaskLedger, d as SessionDescriptor, e as SessionEndReason, A as ActivityPolicySlice, f as ActivityListFilter, g as ActivityRecord, h as ActivityTurnSession, i as ActivityPrSession, j as ActivityWorkflowRunSlice, P as PrResolvedState, k as ActivityTaskSlice, W as WorktreeProvisioner, l as AgentsMdResolution, U as UserPreset, R as RestartPolicy, m as SandboxAppServeSpec, n as WorktreeField, o as AgentSessionLike, p as UsageReadContext, q as UsageReadResult, r as MessageKind, s as SessionMessage, t as AgentStreamEvent, u as SessionUsage, v as ToolCallRecord, w as StatsSessionDescriptor, x as ProcRow, y as ProvisionInFlight, z as ProvisionTracker, B as UsageRollup, D as RemainingQuotaReader, Q as QuotaReadableProfile, E as UsageSnapshotRecord, F as SessionAwaitingQuestion, G as PolicyRunState, H as PtyFactory, I as WorktreeAutoReclaimer } from './sessions-DHSLsPHA.js';
-export { J as ActivityKind, K as ActivitySource, L as ActivityState, N as ActivityWaitingOn, O as AnthropicReaderConfig, V as AnthropicRemainingQuotaReader, X as AttachPolicyInput, Y as CommandGroupStats, Z as CommitSpec, _ as DEFAULT_WORKTREE_ISOLATION, $ as DEFAULT_WORKTREE_PROVISION_CONCURRENCY, a0 as EagerResumeFailReason, a1 as EagerResumeOutcome, a2 as EagerResumeSkipReason, a3 as GateSpec, a4 as HostInfo, a5 as JudgeGateSpec, a6 as LabeledProcessStatsReport, a7 as LabeledSessionStats, a8 as MAX_MESSAGE_DATA_BYTES, a9 as MESSAGE_KINDS, aa as MESSAGE_PREAMBLE, ab as MESSAGE_TAG, ac as MESSAGE_URGENCIES, ad as MessageDeliveryVia, ae as MessageFilter, af as MessageRelation, ag as MessageTreeNode, ah as OnFailSpec, ai as OrphanGroup, aj as PendingPermission, ak as PermissionRespondInput, al as PermissionRespondResult, am as PolicyRunStatus, an as PricingResolver, ao as ProcessDetail, ap as ProcessStatsReport, aq as ProcessStatsService, ar as QuotaStoreFile, as as QuotaStoreOptions, at as RegisterBrowserInput, au as RegisterSessionInput, av as RemainingQuota, aw as ResourceStats, ax as ResumeDisabledError, ay as SESSION_END_REASONS, az as SESSION_ID_ENV, aA as SessionCurrentPhase, aB as SessionKind, aC as SessionMessageFrom, aD as SessionOutcome, aE as SessionOutcomeArtifact, aF as SessionOutcomeCompact, aG as SessionOutcomeLink, aH as SessionResourceStats, aI as SessionSnapshots, aJ as SessionStatus, aK as ShellGateSpec, aL as SpawnAgentInput, aM as SpawnSessionInput, aN as StatsDetail, aO as StoredProfileQuota, aP as TASK_STATUSES, aQ as TaskCaller, aR as TaskChangedEvent, aS as TaskClaimInput, aT as TaskCreateInput, aU as TaskGateOutcome, aV as TaskGateRunner, aW as TaskLedgerRegistry, aX as TaskLedgerSessionSlice, aY as TaskListFilter, aZ as TaskRecord, a_ as TaskStatus, a$ as TaskUpdateInput, b0 as TaskVerification, b1 as TaskVerifySupervisor, b2 as TaskWriteResult, b3 as TokenPricing, b4 as UsageBucket, b5 as UsageComputeInput, b6 as UsageDetail, b7 as UsageSource, b8 as UserPresetsFile, b9 as WORKSPACE_SLUG_ENV, ba as WORKTREE_ISOLATION_ENV, bb as WORKTREE_PROVISION_CONCURRENCY_ENV, bc as WorktreeDecision, bd as WorktreeProvisionOutcome, be as WorktreeProvisionPhase, bf as WorktreeProvisionProgress, bg as WorktreeProvisionRequest, bh as WorktreeRequest, bi as activityCounts, bj as compactOutcome, bk as createProcessStatsService, bl as createSessionMessage, bm as createSupervisorTaskGateRunner, bn as createTaskLedger, bo as decideWorktreeIsolation, bp as deleteUserPreset, bq as deriveSessionOutcome, br as deriveSessionUsage, bs as escapeHumanPrompt, bt as escapeMessageBody, bu as filterActivities, bv as getProcessStatsService, bw as getUserPreset, bx as isClosedTaskStatus, by as isKnownSessionEndReason, bz as isMessageAllowed, bA as isProviderLimitError, bB as isTerminalActivityState, bC as listUserPresets, bD as loadQuotaStore, bE as loadUserPresets, bF as loadWorktreeIsolation, bG as matchesMessageFilter, bH as messageFrom, bI as mintMessageId, bJ as normalizeCommand, bK as normalizeWorktreeField, bL as parseAnthropicRateLimitHeaders, bM as parseTaskStatus, bN as parseWindow, bO as parseWorktreeIsolationMode, bP as pickUsageDetail, bQ as policyToActivities, bR as policyWatchesSession, bS as prToActivities, bT as projectSessionUsage, bU as readProfileQuota, bV as recordProfileQuota, bW as renderInboxDigest, bX as renderSessionMessage, bY as renderSessionMessages, bZ as resolveRelation, b_ as rollupUsage, b$ as sanitizeLabel, c0 as saveUserPreset, c1 as trackWorktreeProvision, c2 as turnToActivities, c3 as userPresetsPath, c4 as workflowToActivities } from './sessions-DHSLsPHA.js';
+import { M as MessageUrgency, S as SessionEvent, a as SessionEventType, b as SessionEventBus, c as SessionsRegistry, C as CompletionPolicySupervisor, T as TaskLedger, d as SessionDescriptor, e as SessionEndReason, A as ActivityPolicySlice, f as ActivityListFilter, g as ActivityRecord, h as ActivityTurnSession, i as ActivityPrSession, j as ActivityWorkflowRunSlice, P as PrResolvedState, k as ActivityTaskSlice, W as WorktreeProvisioner, l as AgentsMdResolution, U as UserPreset, R as RestartPolicy, m as SandboxAppServeSpec, n as WorktreeField, o as AgentSessionLike, p as UsageReadContext, q as UsageReadResult, r as MessageKind, s as SessionMessage, t as AgentStreamEvent, u as SessionUsage, v as ToolCallRecord, w as StatsSessionDescriptor, x as ProcRow, y as ProvisionInFlight, z as ProvisionTracker, B as UsageRollup, D as RemainingQuotaReader, Q as QuotaReadableProfile, E as UsageSnapshotRecord, F as SessionAwaitingQuestion, G as PolicyRunState, H as PtyFactory, I as WorktreeAutoReclaimer } from './sessions-SrISpFsH.js';
+export { J as ActivityKind, K as ActivitySource, L as ActivityState, N as ActivityWaitingOn, O as AnthropicReaderConfig, V as AnthropicRemainingQuotaReader, X as AttachPolicyInput, Y as CommandGroupStats, Z as CommitSpec, _ as DEFAULT_WORKTREE_ISOLATION, $ as DEFAULT_WORKTREE_PROVISION_CONCURRENCY, a0 as EagerResumeFailReason, a1 as EagerResumeOutcome, a2 as EagerResumeSkipReason, a3 as GateSpec, a4 as HostInfo, a5 as JudgeGateSpec, a6 as LabeledProcessStatsReport, a7 as LabeledSessionStats, a8 as MAX_MESSAGE_DATA_BYTES, a9 as MESSAGE_KINDS, aa as MESSAGE_PREAMBLE, ab as MESSAGE_TAG, ac as MESSAGE_URGENCIES, ad as MessageDeliveryVia, ae as MessageFilter, af as MessageRelation, ag as MessageTreeNode, ah as OnFailSpec, ai as OrphanGroup, aj as PendingPermission, ak as PermissionRespondInput, al as PermissionRespondResult, am as PolicyRunStatus, an as PricingResolver, ao as ProcessDetail, ap as ProcessStatsReport, aq as ProcessStatsService, ar as QuotaStoreFile, as as QuotaStoreOptions, at as RegisterBrowserInput, au as RegisterSessionInput, av as RemainingQuota, aw as ResourceStats, ax as ResumeDisabledError, ay as SESSION_END_REASONS, az as SESSION_ID_ENV, aA as SessionCurrentPhase, aB as SessionKind, aC as SessionMessageFrom, aD as SessionOutcome, aE as SessionOutcomeArtifact, aF as SessionOutcomeCompact, aG as SessionOutcomeLink, aH as SessionResourceStats, aI as SessionSnapshots, aJ as SessionStatus, aK as ShellGateSpec, aL as SpawnAgentInput, aM as SpawnSessionInput, aN as StatsDetail, aO as StoredProfileQuota, aP as TASK_STATUSES, aQ as TaskCaller, aR as TaskChangedEvent, aS as TaskClaimInput, aT as TaskCreateInput, aU as TaskGateOutcome, aV as TaskGateRunner, aW as TaskLedgerRegistry, aX as TaskLedgerSessionSlice, aY as TaskListFilter, aZ as TaskRecord, a_ as TaskStatus, a$ as TaskUpdateInput, b0 as TaskVerification, b1 as TaskVerifySupervisor, b2 as TaskWriteResult, b3 as TokenPricing, b4 as UsageBucket, b5 as UsageComputeInput, b6 as UsageDetail, b7 as UsageSource, b8 as UserPresetsFile, b9 as WORKSPACE_SLUG_ENV, ba as WORKTREE_ISOLATION_ENV, bb as WORKTREE_PROVISION_CONCURRENCY_ENV, bc as WorktreeDecision, bd as WorktreeProvisionOutcome, be as WorktreeProvisionPhase, bf as WorktreeProvisionProgress, bg as WorktreeProvisionRequest, bh as WorktreeRequest, bi as activityCounts, bj as compactOutcome, bk as createProcessStatsService, bl as createSessionMessage, bm as createSupervisorTaskGateRunner, bn as createTaskLedger, bo as decideWorktreeIsolation, bp as deleteUserPreset, bq as deriveSessionOutcome, br as deriveSessionUsage, bs as escapeHumanPrompt, bt as escapeMessageBody, bu as filterActivities, bv as getProcessStatsService, bw as getUserPreset, bx as isClosedTaskStatus, by as isKnownSessionEndReason, bz as isMessageAllowed, bA as isProviderLimitError, bB as isTerminalActivityState, bC as listUserPresets, bD as loadQuotaStore, bE as loadUserPresets, bF as loadWorktreeIsolation, bG as matchesMessageFilter, bH as messageFrom, bI as mintMessageId, bJ as normalizeCommand, bK as normalizeWorktreeField, bL as parseAnthropicRateLimitHeaders, bM as parseTaskStatus, bN as parseWindow, bO as parseWorktreeIsolationMode, bP as pickUsageDetail, bQ as policyToActivities, bR as policyWatchesSession, bS as prToActivities, bT as projectSessionUsage, bU as readProfileQuota, bV as recordProfileQuota, bW as renderInboxDigest, bX as renderSessionMessage, bY as renderSessionMessages, bZ as resolveRelation, b_ as rollupUsage, b$ as sanitizeLabel, c0 as saveUserPreset, c1 as trackWorktreeProvision, c2 as turnToActivities, c3 as userPresetsPath, c4 as workflowToActivities } from './sessions-SrISpFsH.js';
 import { R as RouteSpec, P as Posture, C as ContextProfile, a as CanonicalPosture } from './session-config-DxIIuJFY.js';
 export { A as AuthMethod, D as DeclaredAdapterMode, E as EffortLevel, S as SessionConfig, c as composeMode, d as decomposeMode } from './session-config-DxIIuJFY.js';
 import { AcpMcpServer } from '@agentproto/acp';
@@ -2201,6 +2201,12 @@ interface SpawnAgentSessionDeps {
      *  tool and HTTP route each have their own "not enabled" response
      *  shape for the missing-resolver case). */
     resolveAgentAdapter: AgentAdapterResolver;
+    /** Installed-adapter lister — ONLY used to enumerate the valid slugs in
+     *  the generic `adapter_not_found` error, so a genuinely unknown adapter
+     *  name names what IS installed instead of just saying "install it".
+     *  Omitted ⇒ the error keeps its previous wording. Mirrors
+     *  `CronAdapterCheckDeps.listAgentAdapters` (cron's create-time check). */
+    listAgentAdapters?: AgentAdapterLister;
     /** Optional orchestrator-injection builder (WP3). See
      *  `RegisterAgentToolsOptions.buildOrchestratorMcp` for the full
      *  contract. Omitted → `orchestrator` is rejected with
@@ -3819,6 +3825,10 @@ type GhRunner$1 = (args: readonly string[], cwd: string) => Promise<{
  *   B. BRANCH — resolve the OPEN PR for the session cwd's current branch
  *      (via the injected {@link OpenPrResolver} port), the fallback for
  *      adapters whose tool calls aren't recorded.
+ *   C. TEXTUAL — pull-request urls mentioned in the session's own assistant
+ *      output (bounded transcript-tail scan); records on `openedPrs`
+ *      (adapter "output-scan") but never stamps a footer — a mention is
+ *      not proof of creation.
  *
  * Turn-end/exit are only poll checkpoints, never an assertion the PR is
  * ready: the real predicate is "did this session create a PR / does an open
@@ -3855,6 +3865,10 @@ interface ReconcilerSession extends FooterSession {
         url: string;
         number?: number;
     }[];
+    /** Ephemeral transcript path the live registry stamps on every read
+     *  (see `SessionDescriptor.eventsPath`); lane C's bounded tail read
+     *  needs it. Absent from test fakes without a transcript on disk. */
+    eventsPath?: string;
 }
 /** The registry slice the reconciler needs — structurally satisfied by the full
  *  `SessionsRegistry`, and by a trivial fake in tests. It is also a valid

package/dist/index.mjs

@@ -9046,6 +9046,20 @@ var init_mcp_credential_deps = __esm({
 });
 
 // src/sandbox-agent-session-proxy.ts
+function stripAnsiCodes(s) {
+  return s.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "");
+}
+async function* harvestHostErrorNotice(host, remoteSessionId) {
+  let tail;
+  try {
+    tail = await host.output(remoteSessionId, MAX_OUTPUT_LINES);
+  } catch {
+    return;
+  }
+  const lines = tail.split(/\r?\n/).map((l) => stripAnsiCodes(l).trim()).filter((l) => l.length > 0 && HOST_ERROR_LINE_RE.test(l));
+  if (lines.length === 0) return;
+  yield { kind: "notice", text: lines.join("\n") };
+}
 function extractPromptText(message) {
   if (typeof message === "string") return message;
   if (message && typeof message === "object" && "text" in message) {
@@ -9168,13 +9182,18 @@ function createSandboxAgentSessionProxy(opts) {
   let lastPrompt;
   let closed = false;
   let transcriptCursor = 0;
+  let turnsSent = 0;
   return {
     sessionId: remoteSessionId,
     async *send(message) {
       const prompt = extractPromptText(message);
       lastPrompt = prompt;
+      const isFirstTurn = turnsSent === 0;
+      turnsSent++;
       const since = await host.currentEventsCursor();
-      await host.prompt(remoteSessionId, prompt);
+      if (!(opts.promptCarriedInStart && isFirstTurn)) {
+        await host.prompt(remoteSessionId, prompt);
+      }
       const controller = new AbortController();
       let sseBody;
       try {
@@ -9193,15 +9212,23 @@ function createSandboxAgentSessionProxy(opts) {
       }
       try {
         let sawTurnEnd = false;
+        let sawAssistantText = false;
+        let sawToolCall = false;
         for await (const record2 of readSseRecords(sseBody)) {
           if (typeof record2.seq === "number") transcriptCursor = record2.seq;
           const evt = recordToStreamEvent(record2);
           if (!evt) continue;
-          yield evt;
+          if (evt.kind === "text-delta" && evt.text?.trim()) sawAssistantText = true;
+          else if (evt.kind === "tool-call") sawToolCall = true;
           if (evt.kind === "turn-end") {
             sawTurnEnd = true;
+            if (opts.surfaceHostTurnErrors && isFirstTurn && (evt.reason === "error" || !sawAssistantText && !sawToolCall)) {
+              yield* harvestHostErrorNotice(host, remoteSessionId);
+            }
+            yield evt;
             break;
           }
+          yield evt;
         }
         if (!sawTurnEnd) {
           throw new Error(
@@ -9249,7 +9276,7 @@ function createSandboxAgentSessionProxy(opts) {
     }
   };
 }
-var MAX_POLL_MS, MAX_OUTPUT_LINES, MAX_CONSECUTIVE_POLL_FAILURES, POLL_RETRY_DELAY_MS, STREAM_EVENT_RECORD_KINDS;
+var MAX_POLL_MS, MAX_OUTPUT_LINES, MAX_CONSECUTIVE_POLL_FAILURES, POLL_RETRY_DELAY_MS, HOST_ERROR_LINE_RE, STREAM_EVENT_RECORD_KINDS;
 var init_sandbox_agent_session_proxy = __esm({
   "src/sandbox-agent-session-proxy.ts"() {
     init_sandbox_ledger();
@@ -9257,6 +9284,7 @@ var init_sandbox_agent_session_proxy = __esm({
     MAX_OUTPUT_LINES = 500;
     MAX_CONSECUTIVE_POLL_FAILURES = 6;
     POLL_RETRY_DELAY_MS = 5e3;
+    HOST_ERROR_LINE_RE = /\[(?:error|warning)\]|\berror\b|\bwarning\b|invalid model|model not found|unknown model|unsupported model/i;
     STREAM_EVENT_RECORD_KINDS = /* @__PURE__ */ new Set([
       "text-delta",
       "thought",
@@ -10428,6 +10456,7 @@ async function spawnAgentSession(deps2, input) {
   const {
     registry,
     resolveAgentAdapter,
+    listAgentAdapters,
     buildOrchestratorMcp,
     daemonMcpUrl,
     callerScope,
@@ -10914,10 +10943,16 @@ async function spawnAgentSession(deps2, input) {
   if (input.sandbox === void 0 && !resolved) {
     const profileHint = await authProfileAsAdapterHint(input.adapter, getAuthProfile);
     const gatewayHint = profileHint ? void 0 : gatewayAsAdapterHint(input.adapter);
+    let installedHint;
+    if (!profileHint && !gatewayHint) {
+      const installed = await listAgentAdapters?.().catch(() => void 0);
+      installedHint = installed && installed.length > 0 ? `Installed adapters: ${installed.map((a) => a.slug).sort().join(", ")}.` : void 0;
+    }
+    const genericHint = `If it was working a moment ago, something may be mid-rebuild \u2014 wait and retry. ` + (installedHint ?? `If it has never been installed, run \`agentproto install ${input.adapter}\` first.`);
     return {
       ok: false,
       code: "adapter_not_found",
-      message: profileHint ? `agent_start: adapter "${input.adapter}" could not be resolved. ${profileHint}` : gatewayHint ? `agent_start: adapter "${input.adapter}" could not be resolved. ${gatewayHint}` : `agent_start: adapter "${input.adapter}" could not be resolved. If it was working a moment ago, something may be mid-rebuild \u2014 wait and retry. If it has never been installed, run \`agentproto install ${input.adapter}\` first.`
+      message: profileHint ? `agent_start: adapter "${input.adapter}" could not be resolved. ${profileHint}` : gatewayHint ? `agent_start: adapter "${input.adapter}" could not be resolved. ${gatewayHint}` : `agent_start: adapter "${input.adapter}" could not be resolved. ${genericHint}`
     };
   }
   if (resolveHostAuth && !resolved) {
@@ -11528,7 +11563,15 @@ ${asyncPrompt}`;
         // (never the value) before the box boots.
         ...authSpec ? { authSpec } : {},
         ...descriptorRoute ? { route: descriptorRoute } : {},
-        ...input.appServe ? { appServe: input.appServe } : {}
+        ...input.appServe ? { appServe: input.appServe } : {},
+        // F2 single-dial spawn — DEVICE ONLY: carry the composed initial
+        // prompt INSIDE the inner `agent_start` (see `bootSandboxAgentSession`'s
+        // `initialPrompt`) so the device bridge makes ONE dial, not two. The
+        // controller still drives/records the first turn through the proxy
+        // below (`registry.spawnAgent`'s `initialPrompt` / the `wait`
+        // `sendPrompt`); `promptCarriedInStart` stops the proxy from
+        // re-sending it. Non-device sandboxes are untouched (two-dial shape).
+        ...isDeviceSpawn && effectivePrompt !== void 0 ? { initialPrompt: effectivePrompt } : {}
       });
       if (!booted.ok) return booted;
       agentSession = booted.agentSession;
@@ -11902,6 +11945,29 @@ function withSandboxInstallAdapters(spec) {
 function looksLikeHostOnlyPath(p) {
   return HOST_ONLY_PATH_PATTERNS.some((re) => re.test(p));
 }
+function isDeviceTransportError(err) {
+  return DEVICE_TRANSPORT_ERROR_RE.test(err instanceof Error ? err.message : String(err));
+}
+function deviceTargetOf(sandbox) {
+  const slug = typeof sandbox === "string" ? sandbox : sandbox.provider;
+  return slug.startsWith("device:") ? slug.slice("device:".length) : void 0;
+}
+async function startDeviceSessionWithRetry(host, args, target) {
+  const attempts = 2;
+  let lastErr;
+  for (let attempt = 1; attempt <= attempts; attempt++) {
+    try {
+      return await host.start(args);
+    } catch (err) {
+      lastErr = err;
+      if (!isDeviceTransportError(err)) throw err;
+      if (attempt < attempts) {
+        await new Promise((resolve42) => setTimeout(resolve42, DEVICE_SPAWN_RETRY_DELAY_MS));
+      }
+    }
+  }
+  throw new DeviceSpawnUnreachableError(target, attempts, lastErr);
+}
 async function bootSandboxAgentSession(opts) {
   const providerSlug = typeof opts.sandbox === "string" ? opts.sandbox : opts.sandbox.provider;
   if (!opts.resolveSandboxProvider) {
@@ -12014,10 +12080,12 @@ async function bootSandboxAgentSession(opts) {
     ...lifecyclePolicy.pauseAfterIdleMs !== void 0 ? { expiresAt: new Date(Date.now() + lifecyclePolicy.pauseAfterIdleMs).toISOString() } : {}
   });
   const omitCwd = handle.omitCwdWhenImplicit === true && !opts.explicitCwd;
+  const deviceTarget = deviceTargetOf(opts.sandbox);
+  const carriedPrompt = deviceTarget !== void 0 && opts.initialPrompt !== void 0 ? typeof opts.initialPrompt === "string" ? [{ type: "text", text: opts.initialPrompt }] : opts.initialPrompt : void 0;
   let remoteSessionId;
   let resolvedCwd = boxCwd;
   try {
-    const remoteDesc = await host.start({
+    const startArgs = {
       adapter: opts.adapter,
       ...omitCwd ? {} : { cwd: boxCwd },
       // Issue #1647 — DEVICE-BRIDGE ONLY: forward an EXPLICIT
@@ -12035,13 +12103,24 @@ async function bootSandboxAgentSession(opts) {
       ...opts.route ? { route: opts.route } : {},
       ...opts.effort ? { effort: opts.effort } : {},
       ...opts.label ? { label: opts.label } : {},
-      ...opts.auth ? { auth: opts.auth } : {}
-    });
+      ...opts.auth ? { auth: opts.auth } : {},
+      // F2 — the initial prompt rides the SAME dial as the spawn (device only).
+      ...carriedPrompt !== void 0 ? { prompt: carriedPrompt } : {}
+    };
+    const remoteDesc = deviceTarget !== void 0 ? await startDeviceSessionWithRetry(host, startArgs, deviceTarget) : await host.start(startArgs);
     remoteSessionId = remoteDesc.id;
     if (omitCwd && remoteDesc.cwd) resolvedCwd = remoteDesc.cwd;
   } catch (err) {
     await host.stop().catch(() => void 0);
     recordSandboxState(host.sandboxId, "stopped");
+    if (err instanceof DeviceSpawnUnreachableError) {
+      return {
+        ok: false,
+        code: "device_spawn_unreachable",
+        message: err.message,
+        details: { target: err.target, attempts: err.attempts }
+      };
+    }
     return {
       ok: false,
       code: "sandbox_proxy_failed",
@@ -12068,7 +12147,13 @@ async function bootSandboxAgentSession(opts) {
       host,
       remoteSessionId,
       lifecyclePolicy,
-      ledger: { sandboxId: host.sandboxId, provider: providerSlug }
+      ledger: { sandboxId: host.sandboxId, provider: providerSlug },
+      // Device spawns only: surface a first-turn failure's raw host line
+      // (see `surfaceHostTurnErrors`).
+      ...deviceTarget !== void 0 ? { surfaceHostTurnErrors: true } : {},
+      // F2 — when the first prompt rode the spawn dial, don't re-send it as a
+      // second `agent_prompt` dial (see `promptCarriedInStart`).
+      ...carriedPrompt !== void 0 ? { promptCarriedInStart: true } : {}
     }),
     commandPreview: `sandbox:${providerSlug} \u2192 ${opts.adapter}`,
     sandboxId: host.sandboxId,
@@ -12148,7 +12233,7 @@ async function resolveEffectiveCommandSandbox(requested, cwd) {
     return void 0;
   }
 }
-var SPAWN_CLAIM_WINDOW_MS, IMPLICIT_SPAWN_CLAIM_WINDOW_MS, MAX_RESOLVED_CLAIMS, spawnClaimsByRegistry, HOST_ONLY_PATH_PATTERNS;
+var SPAWN_CLAIM_WINDOW_MS, IMPLICIT_SPAWN_CLAIM_WINDOW_MS, MAX_RESOLVED_CLAIMS, spawnClaimsByRegistry, HOST_ONLY_PATH_PATTERNS, DEVICE_TRANSPORT_ERROR_RE, DEVICE_SPAWN_RETRY_DELAY_MS, DeviceSpawnUnreachableError;
 var init_session_spawn = __esm({
   "src/session-spawn.ts"() {
     init_process_stats();
@@ -12197,6 +12282,21 @@ var init_session_spawn = __esm({
       /^\/Users\//,
       /^[A-Za-z]:[\\/]/
     ];
+    DEVICE_TRANSPORT_ERROR_RE = /device_unreachable|transport closed|handshake timed out|did not send hello|closed the channel after handshake|socket hang up|other side closed|ECONNRESET|ECONNREFUSED|EPIPE|ETIMEDOUT|fetch failed/i;
+    DEVICE_SPAWN_RETRY_DELAY_MS = 2e3;
+    DeviceSpawnUnreachableError = class extends Error {
+      target;
+      attempts;
+      constructor(target, attempts, cause) {
+        const detail = cause instanceof Error ? cause.message : String(cause);
+        super(
+          `agent_start: could not reach paired device "${target}" over its host channel after ${attempts} attempt${attempts === 1 ? "" : "s"} \u2014 the host channel may be flapping; retry in a few seconds and check \`agentproto devices status ${target}\`. Last error: ${detail}`
+        );
+        this.name = "DeviceSpawnUnreachableError";
+        this.target = target;
+        this.attempts = attempts;
+      }
+    };
   }
 });
 function tryParseJson(value) {
@@ -13667,7 +13767,10 @@ function registerAgentTools(server, opts) {
           ...provisionWorktree ? { provisionWorktree } : {},
           ...resolveWorktreeIsolation ? { resolveWorktreeIsolation } : {},
           ...listCatalogModels ? { listCatalogModels } : {},
-          ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {}
+          ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {},
+          // Lets the generic `adapter_not_found` error name the installed
+          // adapters (session-spawn.ts) instead of only saying "install it".
+          ...listAgentAdapters ? { listAgentAdapters } : {}
         },
         {
           ...spawnInput,
@@ -13973,6 +14076,11 @@ function registerAgentTools(server, opts) {
                 // Surfaced so a caller can distinguish "idle" from "mid tool
                 // call" without guessing from empty output.
                 ...desc.blockedOn ? { blockedOn: desc.blockedOn } : {},
+                // Device-spawn first-turn failure (bad model id / host-side
+                // adapter error) — see `SessionDescriptor.firstTurnFailed`.
+                // The underlying host error line rides the `lines` tail above
+                // (surfaced as a `notice` by the sandbox proxy).
+                ...desc.firstTurnFailed ? { firstTurnFailed: true } : {},
                 ...activityFallback ? { activityFallback: true } : {},
                 // An ended session's derived outcome (what it produced) —
                 // the ring above is empty for a row reloaded after a restart.
@@ -14209,6 +14317,7 @@ function registerAgentTools(server, opts) {
     ...s.lastTurnErrorMessage !== void 0 ? { lastTurnErrorMessage: s.lastTurnErrorMessage } : {},
     ...s.lastTurnReason !== void 0 ? { lastTurnReason: s.lastTurnReason } : {},
     ...s.lastTurnEmpty !== void 0 ? { lastTurnEmpty: s.lastTurnEmpty } : {},
+    ...s.firstTurnFailed ? { firstTurnFailed: true } : {},
     ...s.stats !== void 0 ? { stats: s.stats } : {}
   });
   const agentSessionsListSchema = z.object({
@@ -16872,18 +16981,18 @@ function worktreeFields(cwd) {
     ...identity.mainRepoPath === void 0 ? {} : { mainRepoPath: identity.mainRepoPath }
   };
 }
-function stripAnsiCodes(s) {
+function stripAnsiCodes2(s) {
   return s.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "");
 }
 function terminalOutputTail(rt, maxChars = 500) {
   if (rt.recentBytes.length === 0) return "";
   const text13 = Buffer.concat(rt.recentBytes, rt.recentBytesSize).toString("utf8");
-  const plain = stripAnsiCodes(text13).replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, "").replace(/\x1b[()][A-Za-z0-9]/g, "").replace(/\x1b[0-9A-Za-z=>]/g, "").replace(/[\x00-\x09\x0b-\x1f]/g, "").trim();
+  const plain = stripAnsiCodes2(text13).replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, "").replace(/\x1b[()][A-Za-z0-9]/g, "").replace(/\x1b[0-9A-Za-z=>]/g, "").replace(/[\x00-\x09\x0b-\x1f]/g, "").trim();
   if (!plain) return "";
   return plain.length > maxChars ? plain.slice(-maxChars) : plain;
 }
 function deriveHeuristicQuestion(recentLines) {
-  const visible = recentLines.map(stripAnsiCodes).map((l) => l.trim()).filter((l) => l.length > 0 && !SYNTHETIC_LINE.test(l));
+  const visible = recentLines.map(stripAnsiCodes2).map((l) => l.trim()).filter((l) => l.length > 0 && !SYNTHETIC_LINE.test(l));
   if (visible.length === 0) return void 0;
   const options = [];
   let i = visible.length - 1;
@@ -17481,7 +17590,7 @@ function createSessionsRegistry(opts) {
     const strategySlug = rt.desc.adapterSlug ?? conversationTerminalSlugFor(rt.desc);
     const strategy = strategySlug ? RESUME_STRATEGIES[strategySlug] : void 0;
     if (!strategy?.outputHint) return;
-    const plain = stripAnsiCodes(line);
+    const plain = stripAnsiCodes2(line);
     const m = plain.match(strategy.outputHint);
     if (m && m[1]) {
       rt.desc.resumeMetadata = {
@@ -17719,6 +17828,14 @@ function createSessionsRegistry(opts) {
         }
         break;
       }
+      case "notice": {
+        if (evt.text) {
+          for (const line of evt.text.split(/\r?\n/)) {
+            if (line.trim()) appendLine(rt, `\x1B[2m[notice] ${line}\x1B[0m`, "stderr");
+          }
+        }
+        break;
+      }
       case "plan": {
         const entries = evt.entries ?? [];
         const done = entries.filter((e) => e.status === "completed").length;
@@ -18638,6 +18755,10 @@ ${message}`;
         } else if (rt.desc.lastTurnReason !== void 0) {
           delete rt.desc.lastTurnReason;
         }
+        if (rt.desc.remote === true && rt.desc.sandboxProvider?.startsWith("device:") && rt.desc.turnsCompleted === 1 && (emptyTurn || turnEndReason === "error")) {
+          rt.desc.firstTurnFailed = true;
+          schedulePersist();
+        }
         const nextActivity = regenerateActivitySummary(rt.desc, rt.recentLines, Date.now());
         if (nextActivity) {
           rt.desc.activitySummary = nextActivity;
@@ -18692,6 +18813,10 @@ ${message}`;
         } else if (rt.desc.lastTurnReason !== void 0) {
           delete rt.desc.lastTurnReason;
         }
+        if (rt.desc.remote === true && rt.desc.sandboxProvider?.startsWith("device:") && rt.desc.turnsCompleted === 1 && turnEndReason === "error") {
+          rt.desc.firstTurnFailed = true;
+          schedulePersist();
+        }
         if (sessionEvents) {
           sessionEvents.emit({
             type: "session:turn-end",
@@ -25995,6 +26120,7 @@ var compactSessionItem = (s) => ({
   ...s.lastTurnErrorMessage !== void 0 ? { lastTurnErrorMessage: s.lastTurnErrorMessage } : {},
   ...s.lastTurnReason !== void 0 ? { lastTurnReason: s.lastTurnReason } : {},
   ...s.lastTurnEmpty !== void 0 ? { lastTurnEmpty: s.lastTurnEmpty } : {},
+  ...s.firstTurnFailed ? { firstTurnFailed: true } : {},
   ...s.interrupted ? { interrupted: true } : {},
   ...s.rssBytes !== void 0 ? { rssBytes: s.rssBytes } : {},
   ...s.stats !== void 0 ? { stats: s.stats } : {},
@@ -31672,12 +31798,18 @@ function registerMcpApps(server, apps) {
       uri: resourceUri,
       html,
       description: app.description,
-      csp: app.csp
+      csp: app.csp,
+      ...app.openai?.resource !== void 0 ? {
+        // Namespaced under `openai/ui` per §3.2 — a sibling of the
+        // canonical `_meta.ui`, never an overwrite of it.
+        meta: { "openai/ui": JSON.parse(JSON.stringify(app.openai.resource)) }
+      } : {}
     });
     server.registerTool(
       app.id,
       {
         description: app.description ?? app.title,
+        ...app.openai !== void 0 ? { title: app.title } : {},
         inputSchema: app.inputSchema.shape,
         annotations: {
           readOnlyHint: true,
@@ -31687,7 +31819,13 @@ function registerMcpApps(server, apps) {
           ui: {
             resourceUri,
             visibility: ["model", "app"]
-          }
+          },
+          ...app.openai?.tool?.entrypoints !== void 0 || app.openai?.icons !== void 0 ? {
+            "openai/ui": {
+              ...app.openai.tool?.entrypoints !== void 0 ? { entrypoints: JSON.parse(JSON.stringify(app.openai.tool.entrypoints)) } : {},
+              ...app.openai.icons !== void 0 ? { icons: JSON.parse(JSON.stringify(app.openai.icons)) } : {}
+            }
+          } : {}
         }
       },
       async (args) => {
@@ -43534,7 +43672,15 @@ async function performInstall(dir, appRegistry, listRegisteredToolIds, resolveAg
     ...handle.ui?.description !== void 0 ? { description: handle.ui.description } : {},
     ...handle.ui?.tools !== void 0 ? { tools: handle.ui.tools } : {},
     ...handle.ui?.csp !== void 0 ? { csp: handle.ui.csp } : {},
-    ...handle.ui?.build !== void 0 ? { build: handle.ui.build } : {}
+    ...handle.ui?.build !== void 0 ? { build: handle.ui.build } : {},
+    // OpenAI MCP-extensions carrier (plan W-B): the normalized,
+    // app-kit-validated `ui.extensions` block persists verbatim on the
+    // installed record — `makeInstalledAppUiApps` (W-C) is the only
+    // consumer. Frozen already by app-kit; spread-cloned here so the
+    // persisted shape stays a plain JSON-safe object (apps.json is
+    // what actually freezes it). Apps without the block install
+    // identically to before (plan I1).
+    ...handle.ui?.extensions !== void 0 ? { extensions: handle.ui.extensions } : {}
   } : void 0;
   const artifact = refs.artifact ? {
     path: refs.artifact.path,
@@ -46565,6 +46711,7 @@ async function startHttpServer(opts) {
             opts.resolveSandboxProvider,
             opts.webhookNotifier,
             opts.ensureLlmEndpointRunning,
+            opts.listAgentAdapters,
             opts.deviceMirrorSync
           );
           if (handled) return;
@@ -48617,7 +48764,7 @@ async function handleSandboxes(_req, res, path, resolveSandboxProvider2) {
   json3(200, { alive: true, ...probe.state ? { state: probe.state } : { state: row.state }, checkedAt });
   return true;
 }
-async function handleSessions(req, res, path, registry, resolveAgentAdapter, ptyEnabled = false, resolveBrowserAdapter, listBrowserAdapters, sessionEvents, eventRing, buildOrchestratorMcp, daemonMcpUrl, provisionWorktree, listCatalogModels, resolveSandboxProvider2, webhookNotifier, ensureLlmEndpointRunning, deviceMirrorSync) {
+async function handleSessions(req, res, path, registry, resolveAgentAdapter, ptyEnabled = false, resolveBrowserAdapter, listBrowserAdapters, sessionEvents, eventRing, buildOrchestratorMcp, daemonMcpUrl, provisionWorktree, listCatalogModels, resolveSandboxProvider2, webhookNotifier, ensureLlmEndpointRunning, listAgentAdapters, deviceMirrorSync) {
   const json3 = (status, body) => {
     res.writeHead(status, { "content-type": "application/json" });
     res.end(JSON.stringify(body));
@@ -48775,12 +48922,13 @@ async function handleSessions(req, res, path, registry, resolveAgentAdapter, pty
         ...listCatalogModels ? { listCatalogModels } : {},
         ...resolveSandboxProvider2 ? { resolveSandboxProvider: resolveSandboxProvider2 } : {},
         ...webhookNotifier ? { webhookNotifier } : {},
-        ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {}
+        ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {},
+        ...listAgentAdapters ? { listAgentAdapters } : {}
       },
       spawnArgs
     );
     if (!result.ok) {
-      const status = result.code === "adapter_not_found" || result.code === "no_cwd" ? 404 : result.code === "orchestrator_not_enabled" ? 501 : result.code === "orchestrator_max_depth_exceeded" || result.code === "orchestrator_child_quota_exceeded" || result.code === "role_spawn_denied" ? 409 : result.code === "invalid_role" || result.code === "browser_unsupported" || result.code === "worktree_requires_explicit_repo" || result.code === "device_spawn_requires_repo_identity" || result.code === "device_bridge_workspace_unknown" || result.code === "access_profile_not_found" || result.code === "access_profile_ineligible" || result.code === "sandbox_cwd_invalid" ? 400 : 500;
+      const status = result.code === "adapter_not_found" || result.code === "no_cwd" ? 404 : result.code === "orchestrator_not_enabled" ? 501 : result.code === "orchestrator_max_depth_exceeded" || result.code === "orchestrator_child_quota_exceeded" || result.code === "role_spawn_denied" ? 409 : result.code === "invalid_role" || result.code === "browser_unsupported" || result.code === "worktree_requires_explicit_repo" || result.code === "device_spawn_requires_repo_identity" || result.code === "device_bridge_workspace_unknown" || result.code === "access_profile_not_found" || result.code === "access_profile_ineligible" || result.code === "sandbox_cwd_invalid" || result.code === "device_spawn_unreachable" ? 400 : 500;
       json3(status, {
         error: result.code,
         message: result.message,
@@ -48842,12 +48990,13 @@ async function handleSessions(req, res, path, registry, resolveAgentAdapter, pty
         ...listCatalogModels ? { listCatalogModels } : {},
         ...resolveSandboxProvider2 ? { resolveSandboxProvider: resolveSandboxProvider2 } : {},
         ...webhookNotifier ? { webhookNotifier } : {},
-        ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {}
+        ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {},
+        ...listAgentAdapters ? { listAgentAdapters } : {}
       },
       spawnArgs
     );
     if (!result.ok) {
-      const status = result.code === "adapter_not_found" || result.code === "no_cwd" ? 404 : result.code === "orchestrator_not_enabled" ? 501 : result.code === "orchestrator_max_depth_exceeded" || result.code === "orchestrator_child_quota_exceeded" || result.code === "role_spawn_denied" ? 409 : result.code === "invalid_role" || result.code === "browser_unsupported" || result.code === "worktree_requires_explicit_repo" || result.code === "device_spawn_requires_repo_identity" || result.code === "device_bridge_workspace_unknown" || result.code === "access_profile_not_found" || result.code === "access_profile_ineligible" || result.code === "sandbox_cwd_invalid" ? 400 : 500;
+      const status = result.code === "adapter_not_found" || result.code === "no_cwd" ? 404 : result.code === "orchestrator_not_enabled" ? 501 : result.code === "orchestrator_max_depth_exceeded" || result.code === "orchestrator_child_quota_exceeded" || result.code === "role_spawn_denied" ? 409 : result.code === "invalid_role" || result.code === "browser_unsupported" || result.code === "worktree_requires_explicit_repo" || result.code === "device_spawn_requires_repo_identity" || result.code === "device_bridge_workspace_unknown" || result.code === "access_profile_not_found" || result.code === "access_profile_ineligible" || result.code === "sandbox_cwd_invalid" || result.code === "device_spawn_unreachable" ? 400 : 500;
       json3(status, {
         error: result.code,
         message: result.message,
@@ -57218,6 +57367,7 @@ function createPrProvenanceReconciler(opts) {
   const stampedPrUrls = /* @__PURE__ */ new Set();
   const costRefreshedPrUrls = /* @__PURE__ */ new Set();
   const lastPollAt = /* @__PURE__ */ new Map();
+  const scannedPrUrls = /* @__PURE__ */ new Set();
   const reconcile = async (sessionId, terminal) => {
     const desc = opts.registry.get(sessionId);
     if (!desc || desc.kind !== "agent-cli") return;
@@ -57256,6 +57406,29 @@ function createPrProvenanceReconciler(opts) {
       if (!shouldStamp(record2.createdPrUrl)) continue;
       await stamp({ number: record2.createdPrNumber, url: record2.createdPrUrl });
     }
+    if (desc.eventsPath) {
+      for (const turn of readRecentTurnsSync(desc.eventsPath)) {
+        if (turn.role !== "assistant") continue;
+        const re = /https?:\/\/[^\s<>"]+/g;
+        let m;
+        while ((m = re.exec(turn.text)) !== null) {
+          const url = m[0].replace(/[.,;:)\]]+$/, "");
+          const parsed = parsePrUrl(url);
+          if (!parsed) continue;
+          if (desc.openedPrs?.some((known) => known.url === url)) continue;
+          if (scannedPrUrls.has(url)) continue;
+          scannedPrUrls.add(url);
+          try {
+            opts.registry.recordOpenedPr(sessionId, {
+              adapter: "output-scan",
+              number: parsed.number,
+              url
+            });
+          } catch {
+          }
+        }
+      }
+    }
     const pr = await opts.resolveOpenPr(cwd);
     if (pr && shouldStamp(pr.url)) await stamp(pr);
     await refreshCost(desc, supervisor, cwd);