@agentproto/runtime 5.8.0 → 5.10.0

package/docs/mcp-tools/agent_start.md

@@ -237,7 +237,8 @@ Context intake profile (for example full or lean).
 ## auth
 
 Deterministic billing-auth mode + EXPLICIT credential for adapters that
-declare it (today: claude-code). EXPLICIT credential selection, not
+declare a subscription login and/or an API-key provider (any other adapter
+fails with `unsupported_auth_mode`). EXPLICIT credential selection, not
 scrub-by-absence: `mode` picks 'subscription' (default) or 'api-key';
 `token`/`apiKey` (matching the resolved mode) is the secret VALUE, merged
 against `~/.agentproto/config.json`'s
@@ -265,6 +266,13 @@ child agent a host-chosen scoped toolset (e.g. the daemon's own
 orchestration gateway so it can spawn + supervise sub-agents). Adapters
 that don't model MCP mounting ignore it.
 
+A `mcpServers` entry in the descriptor (or the daemon self-mount) only
+means the mount was *requested*: it does not guarantee the child actually
+loaded any tools. A client can connect yet end up with 0 tools if the
+server's MCP handshake is not one it can use (e.g. a protocol-era mismatch
+on `server/discover` / `tools/list`). Verify from inside the session (list
+its tools) before relying on a mount.
+
 Each entry's `headers` are static HTTP headers sent with every request to
 an `http`/`sse` server (ignored for `stdio`). `credentialRef` resolves a
 brokered credential at spawn time into additional headers (typically
@@ -299,6 +307,14 @@ Optional per-session webhook URL. POSTed (fire-and-forget) on this
 session's turn-end / awaiting-input / exited events, in addition to any
 global notify URL.
 
+## notifySecret
+
+Optional Standard Webhooks secret (`whsec_...`) for `notifyUrl`. When set,
+each POST carries `webhook-id` / `webhook-timestamp` / `webhook-signature`
+headers (HMAC-SHA256 over `id.timestamp.body`); the receiver verifies them
+to confirm the daemon sent it. Omit for the unauthenticated (legacy)
+behavior — ignored without `notifyUrl`.
+
 ## wait
 
 Block until the spawned session's first turn completes and include the
@@ -379,10 +395,15 @@ anyway' via this field still has no delegation tools).
 Override deferred/lazy MCP tool loading for this spawn's daemon self-mount:
 `true` hides every tool outside a small always-on set from `tools/list`
 (still fully callable — use `tool_search` to look up a hidden tool's schema
-by keyword before calling it), `false` keeps the full eager surface. Omit
-to use the resolved role's own default ('executor' defaults ON, since it
-can't delegate anyway and rarely needs the full ~190-tool surface); omit
-AND spawn a role with no opinion to fall through to the daemon's own
+by keyword before calling it), `false` keeps the full eager surface. Only the
+loading strategy changes; no tool is removed.
+
+Resolution order (first with an opinion wins): this field > the mount's own
+`?deferred=1|0` (caller-supplied `mcpServers` entries) > a harness that
+defers MCP tools natively (manifest `capabilities.nativeToolSearch`, today
+claude-code ⇒ eager, so the daemon doesn't stack a second deferral layer on
+top of the harness's own `ToolSearch`) > the resolved role's default
+('executor' defaults ON, 'supervisor' has no opinion) > the daemon's
 boot-time `defaults.mcp.deferredTools` config.
 
 ## browser

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/runtime",
-  "version": "5.8.0",
+  "version": "5.10.0",
   "description": "@agentproto/runtime — long-running gateway that turns an agentproto workspace into a live runtime. Composes @agentproto/mcp-server (CRUD verbs) with HTTP transport, HEARTBEAT.md autonomy loop, and append-only conversation persistence. Drop a workspace dir, point your MCP client at it, and the agent ticks on its own.",
   "keywords": [
     "agentproto",
@@ -58,6 +58,7 @@
       "default": "./dist/workspace-fs.mjs"
     },
     "./package.json": "./package.json",
+    "./schemas/checkpoint.v1.json": "./schemas/checkpoint.v1.json",
     "./pr-provenance": {
       "types": "./dist/pr-provenance.d.ts",
       "import": "./dist/pr-provenance.mjs",
@@ -147,6 +148,7 @@
   "files": [
     "dist",
     "docs",
+    "schemas",
     "README.md",
     "LICENSE"
   ],
@@ -162,16 +164,16 @@
     "ws": "^8.21.3",
     "zod": "^4.6.5",
     "@agentproto/a2a": "0.1.0",
-    "@agentproto/acp": "0.9.2",
+    "@agentproto/acp": "0.10.0",
     "@agentproto/adapter-browser": "0.3.0",
     "@agentproto/agent": "0.2.5",
     "@agentproto/app-client": "0.4.1",
-    "@agentproto/app-kit": "1.5.0",
-    "@agentproto/apps": "0.18.0",
+    "@agentproto/app-kit": "1.6.0",
+    "@agentproto/apps": "0.19.0",
     "@agentproto/auth": "1.1.2",
     "@agentproto/command-sandbox": "0.3.0",
     "@agentproto/driver": "0.3.0",
-    "@agentproto/driver-agent-cli": "2.7.0",
+    "@agentproto/driver-agent-cli": "2.8.0",
     "@agentproto/driver-browser": "0.2.0",
     "@agentproto/driver-http": "0.1.10",
     "@agentproto/eval-reporters": "0.2.20",
@@ -179,18 +181,18 @@
     "@agentproto/governance-engine": "0.1.10",
     "@agentproto/llm-endpoint": "0.11.3",
     "@agentproto/manifest": "0.2.3",
-    "@agentproto/mcp-server": "0.5.0",
+    "@agentproto/mcp-server": "0.6.1",
     "@agentproto/model-catalog": "0.11.3",
-    "@agentproto/pairing-host": "0.2.2",
+    "@agentproto/pairing-host": "0.2.4",
     "@agentproto/plugin-local-browser": "0.3.2",
     "@agentproto/provider-kit": "0.4.6",
     "@agentproto/provider-presets": "0.7.0",
     "@agentproto/providers-store": "0.3.21",
     "@agentproto/redaction": "0.2.3",
-    "@agentproto/review": "0.4.0",
+    "@agentproto/review": "0.5.0",
     "@agentproto/routine": "0.3.1",
-    "@agentproto/sandbox": "0.8.1",
-    "@agentproto/secrets": "1.2.1",
+    "@agentproto/sandbox": "0.8.2",
+    "@agentproto/secrets": "1.3.0",
     "@agentproto/telemetry-langfuse": "0.2.18",
     "@agentproto/tool": "0.4.0",
     "@agentproto/workflow": "0.7.1",
@@ -199,11 +201,12 @@
     "@agentproto/workspace-brain": "0.4.10"
   },
   "optionalDependencies": {
-    "@agentproto/sandbox-e2b": "0.5.13"
+    "@agentproto/sandbox-e2b": "0.5.14"
   },
   "devDependencies": {
     "@types/node": "^25.9.5",
     "@types/ws": "^8.18.1",
+    "ajv": "^8.20.0",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "vite-node": "^3.2.4",
@@ -219,6 +222,7 @@
     "check-types": "tsc --noEmit",
     "test": "vitest run --passWithNoTests",
     "test:watch": "vitest",
+    "gen:checkpoint-schema": "vite-node scripts/gen-checkpoint-schema.mjs",
     "sim:inbound": "vite-node scripts/simulate-inbound.mjs",
     "telegram:proxy": "vite-node scripts/telegram-proxy.mjs",
     "bench:review-ledger": "vite-node scripts/bench-review-ledger.mjs"

package/schemas/checkpoint.v1.json

@@ -0,0 +1,204 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schemaVersion": {
+      "type": "number",
+      "const": 1
+    },
+    "checkpointId": {
+      "type": "string"
+    },
+    "sourceSessionId": {
+      "type": "string"
+    },
+    "createdAt": {
+      "type": "string",
+      "description": "ISO 8601 creation timestamp."
+    },
+    "contextPct": {
+      "type": "number",
+      "description": "Context percentage that triggered the checkpoint."
+    },
+    "policy": {
+      "type": "object",
+      "properties": {
+        "mode": {
+          "type": "string",
+          "enum": [
+            "manual",
+            "ask",
+            "auto"
+          ]
+        },
+        "warnAtPct": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "compactAtPct": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "continueFreshAtPct": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "hardStopAtPct": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "goal": {
+          "type": "boolean"
+        },
+        "plan": {
+          "type": "boolean"
+        },
+        "decisions": {
+          "type": "boolean"
+        },
+        "changedFiles": {
+          "type": "boolean"
+        },
+        "gitStatus": {
+          "type": "boolean"
+        },
+        "tests": {
+          "type": "boolean"
+        },
+        "errors": {
+          "type": "boolean"
+        },
+        "risks": {
+          "type": "boolean"
+        },
+        "nextStep": {
+          "type": "boolean"
+        },
+        "config": {
+          "type": "boolean"
+        },
+        "label": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "mode",
+        "warnAtPct",
+        "compactAtPct",
+        "continueFreshAtPct",
+        "hardStopAtPct",
+        "goal",
+        "plan",
+        "decisions",
+        "changedFiles",
+        "gitStatus",
+        "tests",
+        "errors",
+        "risks",
+        "nextStep",
+        "config",
+        "label"
+      ],
+      "additionalProperties": {}
+    },
+    "sections": {
+      "type": "object",
+      "properties": {
+        "goal": {
+          "type": "string"
+        },
+        "plan": {
+          "type": "string"
+        },
+        "decisions": {
+          "type": "string"
+        },
+        "changedFiles": {
+          "type": "string"
+        },
+        "gitStatus": {
+          "type": "string"
+        },
+        "tests": {
+          "type": "string"
+        },
+        "errors": {
+          "type": "string"
+        },
+        "risks": {
+          "type": "string"
+        },
+        "nextStep": {
+          "type": "string"
+        },
+        "config": {
+          "type": "string"
+        },
+        "notes": {
+          "description": "Free-text notes the operator attached to the handoff.",
+          "type": "string"
+        }
+      },
+      "additionalProperties": {},
+      "description": "Sections requested and present. A section with nothing real to say is omitted, never a placeholder."
+    },
+    "handoffTurn": {
+      "type": "object",
+      "properties": {
+        "status": {
+          "type": "string",
+          "enum": [
+            "answered",
+            "skipped",
+            "failed"
+          ],
+          "description": "answered: the source session replied with a valid summary; skipped: not requested or no live idle session; failed: asked but timed out / unusable reply."
+        },
+        "reason": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "status"
+      ],
+      "additionalProperties": {}
+    },
+    "recentDigest": {
+      "type": "string"
+    },
+    "originalTranscriptPath": {
+      "type": "string"
+    },
+    "checkpointPath": {
+      "type": "string"
+    },
+    "nextAction": {
+      "type": "string",
+      "enum": [
+        "continue",
+        "compact_then_continue",
+        "ask"
+      ]
+    }
+  },
+  "required": [
+    "schemaVersion",
+    "checkpointId",
+    "sourceSessionId",
+    "createdAt",
+    "contextPct",
+    "policy",
+    "sections",
+    "recentDigest",
+    "originalTranscriptPath",
+    "checkpointPath",
+    "nextAction"
+  ],
+  "additionalProperties": {},
+  "title": "AgentProto context checkpoint",
+  "description": "Structured handoff document persisted next to a session's events.jsonl and used to seed a fresh continuation session."
+}