@agentproto/runtime 5.8.0 → 5.10.0

package/dist/{config-Gz7q9yfJ.d.ts → config-Dsmv-jri.d.ts}

@@ -1,4 +1,4 @@
-import { S as SpawnDefaultsConfig } from './spawn-defaults-Cp9SGZex.js';
+import { S as SpawnDefaultsConfig } from './spawn-defaults-Dm7nbxcP.js';
 
 /**
  * Model roles — ONE place to say "which model does role X use".
@@ -231,9 +231,13 @@ interface CatalogSourceConfig {
     url: string;
 }
 interface CatalogConfig {
-    /** Remote app-catalog sources merged into `app_catalog`. When set, these
-     *  win over `sources` in `~/.agentproto/app-catalog.json`. */
+    /** Remote app-catalog sources merged into `app_catalog`, IN ADDITION to the
+     *  default catalog (`defaultSource`). When set, these win over (replace)
+     *  `sources` in `~/.agentproto/app-catalog.json`. */
     sources?: CatalogSourceConfig[];
+    /** The default public catalog (`DEFAULT_CATALOG_SOURCE_URL` in
+     *  app-catalog.ts): `false` turns it off, a URL replaces it. Absent = on. */
+    defaultSource?: string | false;
 }
 interface TunnelConfig {
     /** Cloud WS URL. When set + autoconnect=true, `agentproto serve`
@@ -482,6 +486,11 @@ interface ReviewConfig {
      *  then a host-derived value; this never blocks signing, it only lets an
      *  operator pin one identity across every repo the daemon reviews. */
     principal?: string;
+    /** Extra attempts for an agent lane whose reviewer turn ends in a
+     *  transient error (dropped socket, 5xx, overloaded provider). Auth,
+     *  quota and unknown-model errors are never retried. Default 1; `0`
+     *  disables; capped at 5. All attempts share the lane's `timeoutMs`. */
+    laneRetries?: number;
 }
 /**
  * Session-presence policy — how the dashboard triages a session into its

package/dist/config-schema.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { D as DaemonConfig, T as TunnelConfig, F as FeaturesConfig, P as PairingConfig, W as WorktreesConfig, S as SpawnConfig, a as SessionsConfig, b as ProvenanceConfig, A as ApprovalsConfig, c as AgentsMdConfig, d as TitlerConfig, C as CatalogConfig, e as ProfileConfig, f as AcpAgentConfigEntry, g as TerminalPreset } from './config-Gz7q9yfJ.js';
-import { S as SpawnDefaultsConfig } from './spawn-defaults-Cp9SGZex.js';
+import { D as DaemonConfig, T as TunnelConfig, F as FeaturesConfig, P as PairingConfig, W as WorktreesConfig, S as SpawnConfig, a as SessionsConfig, b as ProvenanceConfig, A as ApprovalsConfig, c as AgentsMdConfig, d as TitlerConfig, C as CatalogConfig, e as ProfileConfig, f as AcpAgentConfigEntry, g as TerminalPreset } from './config-Dsmv-jri.js';
+import { S as SpawnDefaultsConfig } from './spawn-defaults-Dm7nbxcP.js';
 import '@agentproto/acp';
 import '@agentproto/command-sandbox';
 import '@agentproto/model-catalog';

package/dist/config-schema.mjs

@@ -108,6 +108,15 @@ var init_pr_provenance = __esm({
   }
 });
 
+// src/handoff-markers.ts
+var HANDOFF_PROMPT_SOURCE, HANDOFF_PROMPT_OPENER;
+var init_handoff_markers = __esm({
+  "src/handoff-markers.ts"() {
+    HANDOFF_PROMPT_SOURCE = "daemon:handoff";
+    HANDOFF_PROMPT_OPENER = "[handoff request from the agentproto daemon]";
+  }
+});
+
 // src/tool-presenter.ts
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -329,9 +338,9 @@ async function exportClaudeCodeSession(adapterSessionId, cwd, configDir) {
   let stream;
   try {
     stream = createReadStream(filePath, { encoding: "utf8" });
-    await new Promise((resolve17, reject) => {
+    await new Promise((resolve18, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve17);
+      stream.once("open", resolve18);
     });
   } catch (err) {
     const code = err.code;
@@ -605,7 +614,7 @@ async function discoverHermesSessions(cwd, since, expectedId) {
 }
 async function defaultHermesRunner(adapterSessionId) {
   const { spawn: spawn5 } = await import('child_process');
-  return new Promise((resolve17, reject) => {
+  return new Promise((resolve18, reject) => {
     const chunks = [];
     const errChunks = [];
     const proc = spawn5(
@@ -624,7 +633,7 @@ async function defaultHermesRunner(adapterSessionId) {
           )
         );
       } else {
-        resolve17(Buffer.concat(chunks).toString("utf8"));
+        resolve18(Buffer.concat(chunks).toString("utf8"));
       }
     });
   });
@@ -661,9 +670,9 @@ async function exportDaemonEventsSession(sessionId, desc) {
   let stream;
   try {
     stream = createReadStream(filePath, { encoding: "utf8" });
-    await new Promise((resolve17, reject) => {
+    await new Promise((resolve18, reject) => {
       stream.once("error", reject);
-      stream.once("open", resolve17);
+      stream.once("open", resolve18);
     });
   } catch (err) {
     const code = err.code;
@@ -696,6 +705,15 @@ Either the session never drove an agent-cli turn, or it predates this feature.`
     asmToolCalls = [];
     asmTs = void 0;
   };
+  let handoffStart;
+  const closeHandoffTurn = () => {
+    if (handoffStart === void 0) return;
+    for (let i = handoffStart; i < messages.length; i++) {
+      const m = messages[i];
+      if (m) m.internal = "handoff";
+    }
+    handoffStart = void 0;
+  };
   const rl = createInterface({ input: stream, crlfDelay: Infinity });
   for await (const line of rl) {
     const trimmed = line.trim();
@@ -742,10 +760,15 @@ ${rec.stderr}`);
     switch (rec.kind) {
       case "user-prompt":
         flushAssistant();
+        closeHandoffTurn();
+        if (rec.source === HANDOFF_PROMPT_SOURCE || rec.text?.startsWith(HANDOFF_PROMPT_OPENER)) {
+          handoffStart = messages.length;
+        }
         messages.push({ role: "user", text: rec.text ?? "", ...tsOrUndefined !== void 0 ? { ts: tsOrUndefined } : {} });
         break;
       case "session-message": {
         flushAssistant();
+        closeHandoffTurn();
         const m = rec.message;
         if (!m) break;
         const relation = m.from?.relation ?? "system";
@@ -765,7 +788,13 @@ ${rec.stderr}`);
       }
       case "system-prompt":
         flushAssistant();
-        messages.push({ role: "system", text: rec.text ?? "", ...tsOrUndefined !== void 0 ? { ts: tsOrUndefined } : {} });
+        closeHandoffTurn();
+        messages.push({
+          role: "system",
+          text: rec.text ?? "",
+          internal: "preamble",
+          ...tsOrUndefined !== void 0 ? { ts: tsOrUndefined } : {}
+        });
         break;
       case "text-delta":
         if (asmTs === void 0) asmTs = tsOrUndefined;
@@ -825,6 +854,7 @@ ${rec.stderr}`);
     }
   }
   flushAssistant();
+  closeHandoffTurn();
   const meta = { source: "daemon-events" };
   if (desc?.label) meta.title = desc.label;
   else if (desc?.command) {
@@ -1545,6 +1575,7 @@ Only sessions spawned via claude-code or hermes can be exported.`
 var ROLE_ICON, IGNORED_CLAUDE_TYPES, NODE_SQLITE, EXPORT_STRATEGIES;
 var init_transcript_export = __esm({
   "src/transcript-export.ts"() {
+    init_handoff_markers();
     init_tool_presenter();
     init_transcript_writer();
     init_conversation_store();
@@ -1988,9 +2019,15 @@ var init_bundles = __esm({
     });
   }
 });
+var init_eligibility_manifest = __esm({
+  "src/eligibility-manifest.ts"() {
+    init_spawn_defaults();
+  }
+});
 var init_catalog_models = __esm({
   "src/catalog-models.ts"() {
     init_spawn_defaults();
+    init_eligibility_manifest();
   }
 });
 var init_model_wire = __esm({
@@ -2254,6 +2291,7 @@ var init_session_spawn = __esm({
     init_bundles();
     init_mcp_imports();
     init_launch_config();
+    init_eligibility_manifest();
     init_claude_code_oauth_source();
     init_providers_store();
     init_catalog_models();
@@ -2331,6 +2369,7 @@ var init_spawn_field_schemas = __esm({
       compactAtPct: z.number().int().min(0).max(100).optional(),
       continueFreshAtPct: z.number().int().min(0).max(100).optional(),
       hardStopAtPct: z.number().int().min(0).max(100).optional(),
+      handoffAtQuotaRemaining: z.number().min(0).optional(),
       goal: z.boolean().optional(),
       plan: z.boolean().optional(),
       decisions: z.boolean().optional(),
@@ -2345,12 +2384,34 @@ var init_spawn_field_schemas = __esm({
     });
   }
 });
+function decodeWhsecSecret(secret) {
+  if (typeof secret !== "string" || !secret.startsWith(WHSEC_PREFIX)) return null;
+  const encoded = secret.slice(WHSEC_PREFIX.length);
+  if (encoded.length === 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(encoded) || encoded.length % 4 !== 0) {
+    return null;
+  }
+  let key;
+  try {
+    key = Buffer.from(encoded, "base64");
+  } catch {
+    return null;
+  }
+  if (key.length < 24 || key.length > 64) return null;
+  return key;
+}
+var WHSEC_PREFIX;
+var init_signing = __esm({
+  "src/webhook-egress/signing.ts"() {
+    WHSEC_PREFIX = "whsec_";
+  }
+});
 var mcpBool, mcpPositiveNumber, help, agentStartInputShape, agentStartInputSchema;
 var init_agent_start_schema = __esm({
   "src/agent-start-schema.ts"() {
     init_json_tolerant();
     init_sandbox_spec_schema();
     init_spawn_field_schemas();
+    init_signing();
     mcpBool = z.preprocess(
       (v) => v === "true" ? true : v === "false" ? false : v,
       z.boolean()
@@ -2456,7 +2517,7 @@ var init_agent_start_schema = __esm({
           apiKey: z.string().optional()
         })
       ).optional().describe(
-        `Explicit billing-auth mode + credential for adapters that declare it (today: claude-code) \u2014 'subscription' (default) bills the Max/Pro plan, 'api-key' bills API credits. FAILS FAST with no fallback if the resolved mode has no credential configured anywhere. ${help("auth")}`
+        `Explicit billing-auth mode + credential for adapters that declare it (those that declare a subscription login and/or an API-key provider; any other fails with unsupported_auth_mode) \u2014 'subscription' (default) bills the user's subscription login, 'api-key' bills API credits. FAILS FAST with no fallback if the resolved mode has no credential configured anywhere. ${help("auth")}`
       ),
       mcpServers: jsonTolerant(
         z.array(
@@ -2490,6 +2551,9 @@ var init_agent_start_schema = __esm({
       notifyUrl: z.string().url().optional().describe(
         "Optional per-session webhook URL. POSTed (fire-and-forget) on this session's turn-end / awaiting-input / exited events, in addition to any global notify URL."
       ),
+      notifySecret: z.string().refine((s) => decodeWhsecSecret(s) !== null, {
+        message: "must be a whsec_<base64> Standard Webhooks secret (24-64 decoded bytes)"
+      }).optional().describe(`Standard Webhooks secret (\`whsec_...\`) signing \`notifyUrl\` POSTs. ${help("notifySecret")}`),
       wait: mcpBool.optional().describe(
         `Block until the spawned session's first turn completes (~40-90s+) and include its output. Default false = return immediately. Batched \`wait:true\` calls do NOT run in parallel \u2014 see \`tool_help {name:"agent_start", topic:"wait"}\` for the fan-out pattern.`
       ),
@@ -2528,7 +2592,7 @@ var init_agent_start_schema = __esm({
         "One-off runtime text layered onto the resolved role's disposition and prepended to `prompt` \u2014 specializes it, cannot reopen a denied tool gate."
       ),
       deferredTools: z.boolean().optional().describe(
-        `Override lazy MCP tool loading for this spawn: \`true\` hides most tools from \`tools/list\` (still callable via \`tool_search\`), \`false\` keeps the full eager surface. Omit to use the role/daemon default. ${help("deferredTools")}`
+        `Override lazy MCP tool loading for this spawn: \`true\` hides most tools from \`tools/list\` (still callable via \`tool_search\`), \`false\` keeps the full eager surface. Omit to use the harness/role/daemon default (harnesses with native tool search default to eager). ${help("deferredTools")}`
       ),
       browser: z.preprocess(
         // `true` is sugar for the only mode; stringified booleans tolerated.
@@ -2666,6 +2730,12 @@ var init_session_activity = __esm({
   "src/session-activity.ts"() {
   }
 });
+
+// src/handoff-suggestion.ts
+var init_handoff_suggestion = __esm({
+  "src/handoff-suggestion.ts"() {
+  }
+});
 var DEFAULT_BG_TASK_WAKE_GRACE_MS;
 var init_background_task_wake = __esm({
   "src/background-task-wake.ts"() {
@@ -2713,10 +2783,99 @@ var init_context_window = __esm({
   "src/context-window.ts"() {
   }
 });
+var CHECKPOINT_SCHEMA_VERSION, pct, contextCheckpointPolicySchema, contextCheckpointSectionsSchema, checkpointHandoffTurnSchema;
+var init_checkpoint_schema = __esm({
+  "src/checkpoint-schema.ts"() {
+    CHECKPOINT_SCHEMA_VERSION = 1;
+    pct = z.number().min(0).max(100);
+    contextCheckpointPolicySchema = z.looseObject({
+      mode: z.enum(["manual", "ask", "auto"]),
+      warnAtPct: pct,
+      compactAtPct: pct,
+      continueFreshAtPct: pct,
+      hardStopAtPct: pct,
+      goal: z.boolean(),
+      plan: z.boolean(),
+      decisions: z.boolean(),
+      changedFiles: z.boolean(),
+      gitStatus: z.boolean(),
+      tests: z.boolean(),
+      errors: z.boolean(),
+      risks: z.boolean(),
+      nextStep: z.boolean(),
+      config: z.boolean(),
+      label: z.string()
+    });
+    contextCheckpointSectionsSchema = z.looseObject({
+      goal: z.string().optional(),
+      plan: z.string().optional(),
+      decisions: z.string().optional(),
+      changedFiles: z.string().optional(),
+      gitStatus: z.string().optional(),
+      tests: z.string().optional(),
+      errors: z.string().optional(),
+      risks: z.string().optional(),
+      nextStep: z.string().optional(),
+      config: z.string().optional(),
+      notes: z.string().optional().describe("Free-text notes the operator attached to the handoff.")
+    });
+    checkpointHandoffTurnSchema = z.looseObject({
+      status: z.enum(["answered", "skipped", "failed"]).describe(
+        "answered: the source session replied with a valid summary; skipped: not requested or no live idle session; failed: asked but timed out / unusable reply."
+      ),
+      reason: z.string().optional()
+    });
+    z.looseObject({
+      schemaVersion: z.literal(CHECKPOINT_SCHEMA_VERSION),
+      checkpointId: z.string(),
+      sourceSessionId: z.string(),
+      createdAt: z.string().describe("ISO 8601 creation timestamp."),
+      contextPct: z.number().describe("Context percentage that triggered the checkpoint."),
+      policy: contextCheckpointPolicySchema,
+      sections: contextCheckpointSectionsSchema.describe(
+        "Sections requested and present. A section with nothing real to say is omitted, never a placeholder."
+      ),
+      handoffTurn: checkpointHandoffTurnSchema.optional(),
+      recentDigest: z.string(),
+      originalTranscriptPath: z.string(),
+      checkpointPath: z.string(),
+      nextAction: z.enum(["continue", "compact_then_continue", "ask"])
+    }).meta({
+      title: "AgentProto context checkpoint",
+      description: "Structured handoff document persisted next to a session's events.jsonl and used to seed a fresh continuation session."
+    });
+  }
+});
+var init_session_outcome = __esm({
+  "src/session-outcome.ts"() {
+  }
+});
+var nonEmpty;
+var init_checkpoint_extract = __esm({
+  "src/checkpoint-extract.ts"() {
+    init_session_outcome();
+    init_supervisor();
+    init_handoff_markers();
+    init_transcript_writer();
+    nonEmpty = z.string().trim().min(1);
+    z.object({
+      goal: nonEmpty.optional(),
+      decisions: z.array(nonEmpty).default([]),
+      tests: z.object({ command: z.string().default(""), result: z.string().default("") }).optional(),
+      openRisks: z.array(nonEmpty).default([]),
+      nextStep: nonEmpty.optional()
+    }).refine((r) => r.goal || r.decisions.length || r.tests || r.openRisks.length || r.nextStep, {
+      message: "handoff reply is empty"
+    });
+  }
+});
 var init_context_checkpoint = __esm({
   "src/context-checkpoint.ts"() {
+    init_checkpoint_schema();
+    init_checkpoint_extract();
     init_transcript_export();
     init_transcript_writer();
+    init_context_continuity();
   }
 });
 
@@ -2729,16 +2888,17 @@ var init_session_continue_fresh = __esm({
     init_session_spawn();
   }
 });
-var init_session_outcome = __esm({
-  "src/session-outcome.ts"() {
-  }
-});
 
 // src/session-end-reason.ts
 var init_session_end_reason = __esm({
   "src/session-end-reason.ts"() {
   }
 });
+var init_session_index = __esm({
+  "src/session-index.ts"() {
+    init_transcript_writer();
+  }
+});
 var init_sessions = __esm({
   "src/sessions.ts"() {
     init_resume_strategies();
@@ -2752,6 +2912,7 @@ var init_sessions = __esm({
     init_supervisor();
     init_session_title();
     init_session_activity();
+    init_handoff_suggestion();
     init_canonical_posture();
     init_background_task_wake();
     init_catalog_models();
@@ -2772,6 +2933,7 @@ var init_sessions = __esm({
     init_session_continue_fresh();
     init_session_outcome();
     init_session_end_reason();
+    init_session_index();
     init_session_message();
   }
 });
@@ -2912,6 +3074,7 @@ var init_config_schema = __esm({
       compactAtPct: z.number().optional(),
       continueFreshAtPct: z.number().optional(),
       hardStopAtPct: z.number().optional(),
+      handoffAtQuotaRemaining: z.number().min(0).optional(),
       goal: z.boolean().optional(),
       plan: z.boolean().optional(),
       decisions: z.boolean().optional(),
@@ -2965,7 +3128,8 @@ var init_config_schema = __esm({
       agentPromptInterrupt: z.boolean().optional(),
       messaging: z.object({
         allowSiblings: z.boolean().optional(),
-        agentInterrupt: z.enum(["allow", "deny"]).optional()
+        agentInterrupt: z.enum(["allow", "deny"]).optional(),
+        pendingPromptStaleMinutes: z.number().positive().optional()
       }).passthrough().optional(),
       mcp: mcpDefaultsConfigSchema.optional(),
       spawn: z.object({ browser: spawnBrowserModeSchema.optional() }).passthrough().optional()
@@ -2990,7 +3154,8 @@ var init_config_schema = __esm({
       model: z.string().optional()
     }).passthrough();
     catalogConfigSchema = z.object({
-      sources: z.array(z.object({ url: z.string() }).passthrough()).optional()
+      sources: z.array(z.object({ url: z.string() }).passthrough()).optional(),
+      defaultSource: z.union([z.string(), z.literal(false)]).optional()
     }).passthrough();
     tunnelConfigSchema = z.object({
       host: z.string().optional(),
@@ -3370,7 +3535,16 @@ var init_config_schema = __esm({
         writable: true,
         section: "daemon",
         label: "App catalog sources",
-        help: "Remote catalogs merged into `app_catalog`: an array of `{ url }`, each returning `{ entries: AppCatalogEntry[] }`. Wins over `sources` in ~/.agentproto/app-catalog.json when both are set."
+        help: "Remote catalogs merged into `app_catalog` in addition to the default catalog (`catalog.defaultSource`): an array of `{ url }`, each returning an `app-catalog/v1` document (`{ entries: AppCatalogEntry[] }`). Wins over `sources` in ~/.agentproto/app-catalog.json when both are set."
+      },
+      {
+        path: "catalog.defaultSource",
+        schema: z.union([str, z.literal(false)]),
+        apply: "hot",
+        writable: true,
+        section: "daemon",
+        label: "Default app catalog",
+        help: "The built-in public catalog `app_catalog` queries before `catalog.sources`. `false` turns it off; a URL replaces it. When unreachable, the last copy cached under ~/.agentproto/cache/catalog is used, then the embedded first-party list."
       },
       // ── defaults: spawn ──
       {
@@ -3637,6 +3811,16 @@ var init_config_schema = __esm({
         help: 'Whether a SESSION sender may use urgency "interrupt" (vs. downgraded to "steer"). Takes effect on the next call.',
         default: "deny"
       },
+      {
+        path: "defaults.messaging.pendingPromptStaleMinutes",
+        schema: z.number().positive(),
+        apply: "hot",
+        writable: true,
+        section: "defaults",
+        label: "Pending prompt staleness (minutes)",
+        help: "How long a prompt may sit queued behind a running turn before its sender is notified it is stuck and it is flagged stale in session_list/session_recap pendingPrompts. Takes effect on the next sweep.",
+        default: 5
+      },
       // ── harnesses: per-adapter defaults ──
       {
         path: "defaults.adapters.*.skills",