@agentproto/runtime 5.8.0 → 5.9.0

package/dist/{sessions-SrISpFsH.d.ts → sessions-Cse9PhLG.d.ts}

@@ -3685,8 +3685,11 @@ interface SessionOutcome {
      *  `empty` — no assistant text and no artifacts. */
     status: "produced" | "empty";
     /** Level 2 only: what a judge/declaration decided the session's work
-     *  amounted to. Absent on a plain Level 1 `"derived"` outcome. */
-    verdict?: "done" | "abandoned" | "blocked" | "needs-input";
+     *  amounted to. `blocked`/`needs-input` never close (flagged instead);
+     *  `abandoned`/`partial`/`failed` all close as not-completed
+     *  (`endedReason:"steward-abandoned"`), the verdict nuance kept here.
+     *  Absent on a plain Level 1 `"derived"` outcome. */
+    verdict?: "done" | "abandoned" | "partial" | "failed" | "blocked" | "needs-input";
     /** Level 2 only: who reached `verdict` — a session id (a judge agent) or
      *  the literal `"steward-rules"` for a deterministic close with no judge
      *  in the loop. Absent on a plain Level 1 `"derived"` outcome. */
@@ -3771,6 +3774,36 @@ interface AgentSessionLike {
      *  adapter-specific forensics. Undefined for drivers that don't
      *  expose a process (e.g. a future non-subprocess transport). */
     pid?: number;
+    /** Whether the driver's transport to the adapter is still usable, read
+     *  fresh at call time — mirrors `@agentproto/driver-agent-cli`'s
+     *  `AgentCliRuntimeSession.isConnected` without importing it (same
+     *  driver-decoupled structural-mirror reasoning as `setModel` below).
+     *
+     *  The liveness axis `pid` can't cover: an ACP wrapper process commonly
+     *  survives its own JSON-RPC stream, so `processAlive` says "alive" while
+     *  every RPC rejects with "ACP connection closed". Projected onto
+     *  `SessionDescriptor.adapterConnected` at read time and read by the
+     *  crash-detect sweep.
+     *
+     *  Optional, and `true`-by-absence on purpose: a sandbox proxy or a
+     *  print-arm session has no long-lived connection to lose, so only an
+     *  explicit `false` is evidence of death. */
+    isConnected?(): boolean;
+    /** Subscribe to transport death — the push half of the axis `isConnected`
+     *  polls. Fires at most once, and SYNCHRONOUSLY if the transport is
+     *  already gone when the listener is attached, which is what lets the
+     *  registry wire this up at bind time without racing a connection that
+     *  died during spawn.
+     *
+     *  It fires on an ORDERLY teardown too (the host's own `close()` aborts
+     *  the same signal). The registry's listener is safe against that by
+     *  construction: it routes into `markCrashed`, which refuses any row that
+     *  isn't still `running` — and `kill()`/`reapIdle` both flip `status`
+     *  before they close the connection.
+     *
+     *  Absent for session shapes with no long-lived connection (sandbox
+     *  proxy, print arm, future transports). */
+    onDisconnect?(listener: (err: Error) => void): void;
     send(message: unknown): AsyncIterable<AgentStreamEvent>;
     cancel(): Promise<void>;
     /** Resolve a permission request the driver parked in permission-hold mode
@@ -4394,6 +4427,26 @@ interface SessionDescriptor {
      *  every process. Ephemeral and opt-in (`session_list`/`agent_sessions_list`
      *  `stats`), never persisted; absent for a row with no live process. */
     stats?: Omit<SessionResourceStats, "sessionId">;
+    /** Whether the LIVE agent session's transport to its adapter is still
+     *  usable — `AgentCliRuntimeSession.isConnected()`, read at the same
+     *  points and with the same ephemeral, never-persisted contract as
+     *  {@link processAlive}.
+     *
+     *  This is the second, independent liveness axis, and the one `pid` alone
+     *  cannot answer. An ACP adapter's wrapper process routinely OUTLIVES its
+     *  own JSON-RPC stream: the stream ends (the wrapper closed stdout, the
+     *  child it fronts died, the transport errored), `process.kill(pid, 0)`
+     *  still succeeds, and the row keeps reporting `running`/`alive` forever
+     *  while every prompt rejects with "ACP connection closed". Observed live
+     *  on 2026-09-25 (`sess_950d1251`), 40+ minutes after the connection
+     *  died, with UIs still showing "Idle · live".
+     *
+     *  `false` ⇒ provably dead transport, and the crash-detect sweep's second
+     *  ground for marking a row crashed. Absent ⇒ no live binding to ask (a
+     *  terminal row, or one whose adapter models no long-lived connection) —
+     *  absent is NOT "disconnected", exactly as absent `processAlive` is not
+     *  "dead". */
+    adapterConnected?: boolean;
     /** Count of live supervisors currently blocked waiting on this session —
      *  HTTP `GET /sessions/:id/wait` long-polls and `session_monitor`
      *  subscriptions, both via `monitorSessionWait` (#session-visibility).
@@ -5431,6 +5484,14 @@ interface SessionSummary {
      *  `unarchiveSession`. Absent on rows archived before this field existed. */
     archivedAt?: string;
     keepAlive?: boolean;
+    /** Steward wrap-up flag — a blocked/needs-input verdict that deliberately
+     *  left the session running; see `SessionDescriptor.wrapupFlag`. */
+    wrapupFlag?: {
+        verdict: "blocked" | "needs-input";
+        note?: string;
+        judgedBy?: string;
+        at: string;
+    };
     pinned?: boolean;
     pty?: boolean;
     name?: string;
@@ -5519,6 +5580,20 @@ interface SessionSummary {
  *  (i.e. never wrap) to avoid a regression for sessions/shells that don't
  *  use bracketed paste at all. */
 type BracketedPasteMode = "on" | "off" | "unknown";
+/**
+ * Which death `markCrashed` is recording. Both leave the row equally dead
+ * and equally lazy-resumable — this only picks the `lastError`/banner
+ * wording, so whoever reads the row afterwards knows which liveness axis
+ * actually failed.
+ *
+ *   - `"process-gone"`     — the pid probe came back dead (`processAlive:
+ *     false`). The original, and still the common, crash shape.
+ *   - `"transport-closed"` — the adapter's JSON-RPC stream is closed while
+ *     its process is (or may be) alive: `AgentSessionLike.isConnected()`
+ *     returned false. Invisible to the pid probe, which is exactly why this
+ *     ground exists.
+ */
+type SessionCrashReason = "process-gone" | "transport-closed";
 /**
  * Thrown by the lazy resume path when a resumable session has already failed to
  * resume `MAX_RESUME_ATTEMPTS` times in a row (`canResume` false on a row that
@@ -5681,7 +5756,7 @@ type PermissionRespondResult = {
  *  SessionOutcome} / {@link SessionDescriptor.wrapupFlag} for the field
  *  meanings. */
 interface CloseWithOutcomeInput {
-    verdict: "done" | "abandoned" | "blocked" | "needs-input";
+    verdict: "done" | "abandoned" | "partial" | "failed" | "blocked" | "needs-input";
     /** Overrides the outcome's derived summary when given (e.g. a judge's own
      *  written summary) — trimmed the same way `deriveSessionOutcome` trims
      *  `lastAssistantText`. Omitted keeps whatever `deriveSessionOutcome`
@@ -6012,6 +6087,16 @@ interface SessionsRegistry {
      *  so `interruptedAtBoot === bootId` means "interrupted by the restart that
      *  preceded THIS boot" (continue-interrupted). */
     readonly bootId: string;
+    /** Absolute base dir this registry's per-session transcripts AND index
+     *  sidecars live under — the SAME dir the writers use (`sessions.eventsDir`
+     *  config > default). Exposed so `session_search`/`session_recap` (and a
+     *  daemon-startup backfill) read the sidecars this registry writes without
+     *  re-deriving the path. */
+    readonly transcriptBaseDir: string;
+    /** Flush any throttled index-sidecar writes immediately. Called at
+     *  shutdown; exposed so a test can assert a trailing write landed without
+     *  waiting out the throttle window. Best-effort and synchronous. */
+    flushSessionIndexes(): void;
     /** Book one automatic continue prompt against `id` (increment
      *  `autoContinueAttempts`, stamp `lastAutoContinueBoot = bootId`) and
      *  persist. Called by the continue-on-boot pass BEFORE it sends, so the
@@ -6411,8 +6496,19 @@ interface SessionsRegistry {
      *  violate — it refuses (returns false, no-op) a session that is not a
      *  live (`running`) agent-cli row, so it is idempotent and safe to call on
      *  an already-terminal or non-agent-cli row. Returns true iff a row was
-     *  actually marked crashed. */
-    markCrashed(id: string): boolean;
+     *  actually marked crashed.
+     *
+     *  `reason` names WHICH death was discovered, and is the only thing that
+     *  differs between the sweep's two grounds. Omitted ⇒ `"process-gone"`,
+     *  the original pid-probe wording ("adapter process gone (pid N) — session
+     *  crashed"). `"transport-closed"` is the case a pid probe cannot see: the
+     *  wrapper process is still alive but its ACP stream ended, so the row
+     *  would otherwise sit `running`/`alive` forever while every prompt
+     *  rejects with "ACP connection closed". Only the `lastError`/banner text
+     *  changes — every other effect (status, endedReason, cleared binding,
+     *  `session:exited`) is identical, because in both cases the session is
+     *  equally dead and equally resumable. */
+    markCrashed(id: string, reason?: SessionCrashReason): boolean;
     /** Flip a LIVE, mid-turn agent-cli row to `stalledSinceMs:<ts>` — the
      *  primitive the turn-liveness watchdog (`runStallWatchdogPass`) drives on
      *  a periodic sweep when a turn's adapter stream has gone silent past the
@@ -6943,4 +7039,4 @@ interface RecordOpenedPrInput {
     url: string;
 }
 
-export { DEFAULT_WORKTREE_PROVISION_CONCURRENCY as $, type ActivityPolicySlice as A, type UsageRollup as B, type CompletionPolicySupervisor as C, type RemainingQuotaReader as D, type UsageSnapshotRecord as E, type SessionAwaitingQuestion as F, type PolicyRunState as G, type PtyFactory as H, type WorktreeAutoReclaimer as I, type ActivityKind as J, type ActivitySource as K, type ActivityState as L, type MessageUrgency as M, type ActivityWaitingOn as N, type AnthropicReaderConfig as O, type PrResolvedState as P, type QuotaReadableProfile as Q, type RestartPolicy as R, type SessionEvent as S, type TaskLedger as T, type UserPreset as U, AnthropicRemainingQuotaReader as V, type WorktreeProvisioner as W, type AttachPolicyInput as X, type CommandGroupStats as Y, type CommitSpec as Z, DEFAULT_WORKTREE_ISOLATION as _, type SessionEventType as a, type TaskUpdateInput as a$, type EagerResumeFailReason as a0, type EagerResumeOutcome as a1, type EagerResumeSkipReason as a2, type GateSpec as a3, type HostInfo as a4, type JudgeGateSpec as a5, type LabeledProcessStatsReport as a6, type LabeledSessionStats as a7, MAX_MESSAGE_DATA_BYTES as a8, MESSAGE_KINDS as a9, type SessionCurrentPhase as aA, type SessionKind as aB, type SessionMessageFrom as aC, type SessionOutcome as aD, type SessionOutcomeArtifact as aE, type SessionOutcomeCompact as aF, type SessionOutcomeLink as aG, type SessionResourceStats as aH, type SessionSnapshots as aI, type SessionStatus as aJ, type ShellGateSpec as aK, type SpawnAgentInput as aL, type SpawnSessionInput as aM, type StatsDetail as aN, type StoredProfileQuota as aO, TASK_STATUSES as aP, type TaskCaller as aQ, type TaskChangedEvent as aR, type TaskClaimInput as aS, type TaskCreateInput as aT, type TaskGateOutcome as aU, type TaskGateRunner as aV, type TaskLedgerRegistry as aW, type TaskLedgerSessionSlice as aX, type TaskListFilter as aY, type TaskRecord as aZ, type TaskStatus as a_, MESSAGE_PREAMBLE as aa, MESSAGE_TAG as ab, MESSAGE_URGENCIES as ac, type MessageDeliveryVia as ad, type MessageFilter as ae, type MessageRelation as af, type MessageTreeNode as ag, type OnFailSpec as ah, type OrphanGroup as ai, type PendingPermission as aj, type PermissionRespondInput as ak, type PermissionRespondResult as al, type PolicyRunStatus as am, type PricingResolver as an, type ProcessDetail as ao, type ProcessStatsReport as ap, type ProcessStatsService as aq, type QuotaStoreFile as ar, type QuotaStoreOptions as as, type RegisterBrowserInput as at, type RegisterSessionInput as au, type RemainingQuota as av, type ResourceStats as aw, ResumeDisabledError as ax, SESSION_END_REASONS as ay, SESSION_ID_ENV as az, type SessionEventBus as b, sanitizeLabel as b$, type TaskVerification as b0, type TaskVerifySupervisor as b1, type TaskWriteResult as b2, type TokenPricing as b3, type UsageBucket as b4, type UsageComputeInput as b5, type UsageDetail as b6, type UsageSource as b7, type UserPresetsFile as b8, WORKSPACE_SLUG_ENV as b9, isProviderLimitError as bA, isTerminalActivityState as bB, listUserPresets as bC, loadQuotaStore as bD, loadUserPresets as bE, loadWorktreeIsolation as bF, matchesMessageFilter as bG, messageFrom as bH, mintMessageId as bI, normalizeCommand as bJ, normalizeWorktreeField as bK, parseAnthropicRateLimitHeaders as bL, parseTaskStatus as bM, parseWindow as bN, parseWorktreeIsolationMode as bO, pickUsageDetail as bP, policyToActivities as bQ, policyWatchesSession as bR, prToActivities as bS, projectSessionUsage as bT, readProfileQuota as bU, recordProfileQuota as bV, renderInboxDigest as bW, renderSessionMessage as bX, renderSessionMessages as bY, resolveRelation as bZ, rollupUsage as b_, WORKTREE_ISOLATION_ENV as ba, WORKTREE_PROVISION_CONCURRENCY_ENV as bb, type WorktreeDecision as bc, type WorktreeProvisionOutcome as bd, type WorktreeProvisionPhase as be, type WorktreeProvisionProgress as bf, type WorktreeProvisionRequest as bg, type WorktreeRequest as bh, activityCounts as bi, compactOutcome as bj, createProcessStatsService as bk, createSessionMessage as bl, createSupervisorTaskGateRunner as bm, createTaskLedger as bn, decideWorktreeIsolation as bo, deleteUserPreset as bp, deriveSessionOutcome as bq, deriveSessionUsage as br, escapeHumanPrompt as bs, escapeMessageBody as bt, filterActivities as bu, getProcessStatsService as bv, getUserPreset as bw, isClosedTaskStatus as bx, isKnownSessionEndReason as by, isMessageAllowed as bz, type SessionsRegistry as c, saveUserPreset as c0, trackWorktreeProvision as c1, turnToActivities as c2, userPresetsPath as c3, workflowToActivities as c4, type RecentSpawnConfig as c5, deriveRecentSpawnConfigs as c6, touchUserPreset as c7, userPresetSchema as c8, type SessionDescriptor as d, type SessionEndReason as e, type ActivityListFilter as f, type ActivityRecord as g, type ActivityTurnSession as h, type ActivityPrSession as i, type ActivityWorkflowRunSlice as j, type ActivityTaskSlice as k, type AgentsMdResolution as l, type SandboxAppServeSpec as m, type WorktreeField as n, type AgentSessionLike as o, type UsageReadContext as p, type UsageReadResult as q, type MessageKind as r, type SessionMessage as s, type AgentStreamEvent as t, type SessionUsage as u, type ToolCallRecord as v, type StatsSessionDescriptor as w, type ProcRow as x, type ProvisionInFlight as y, type ProvisionTracker as z };
+export { DEFAULT_WORKTREE_ISOLATION as $, type ActivityPolicySlice as A, type SessionCrashReason as B, type CompletionPolicySupervisor as C, type UsageRollup as D, type RemainingQuotaReader as E, type UsageSnapshotRecord as F, type SessionAwaitingQuestion as G, type PolicyRunState as H, type PtyFactory as I, type WorktreeAutoReclaimer as J, type ActivityKind as K, type ActivitySource as L, type MessageUrgency as M, type ActivityState as N, type ActivityWaitingOn as O, type PrResolvedState as P, type QuotaReadableProfile as Q, type RestartPolicy as R, type SessionEvent as S, type TaskLedger as T, type UserPreset as U, type AnthropicReaderConfig as V, type WorktreeProvisioner as W, AnthropicRemainingQuotaReader as X, type AttachPolicyInput as Y, type CommandGroupStats as Z, type CommitSpec as _, type SessionEventType as a, type TaskStatus as a$, DEFAULT_WORKTREE_PROVISION_CONCURRENCY as a0, type EagerResumeFailReason as a1, type EagerResumeOutcome as a2, type EagerResumeSkipReason as a3, type GateSpec as a4, type HostInfo as a5, type JudgeGateSpec as a6, type LabeledProcessStatsReport as a7, type LabeledSessionStats as a8, MAX_MESSAGE_DATA_BYTES as a9, SESSION_ID_ENV as aA, type SessionCurrentPhase as aB, type SessionKind as aC, type SessionMessageFrom as aD, type SessionOutcome as aE, type SessionOutcomeArtifact as aF, type SessionOutcomeCompact as aG, type SessionOutcomeLink as aH, type SessionResourceStats as aI, type SessionSnapshots as aJ, type SessionStatus as aK, type ShellGateSpec as aL, type SpawnAgentInput as aM, type SpawnSessionInput as aN, type StatsDetail as aO, type StoredProfileQuota as aP, TASK_STATUSES as aQ, type TaskCaller as aR, type TaskChangedEvent as aS, type TaskClaimInput as aT, type TaskCreateInput as aU, type TaskGateOutcome as aV, type TaskGateRunner as aW, type TaskLedgerRegistry as aX, type TaskLedgerSessionSlice as aY, type TaskListFilter as aZ, type TaskRecord as a_, MESSAGE_KINDS as aa, MESSAGE_PREAMBLE as ab, MESSAGE_TAG as ac, MESSAGE_URGENCIES as ad, type MessageDeliveryVia as ae, type MessageFilter as af, type MessageRelation as ag, type MessageTreeNode as ah, type OnFailSpec as ai, type OrphanGroup as aj, type PendingPermission as ak, type PermissionRespondInput as al, type PermissionRespondResult as am, type PolicyRunStatus as an, type PricingResolver as ao, type ProcessDetail as ap, type ProcessStatsReport as aq, type ProcessStatsService as ar, type QuotaStoreFile as as, type QuotaStoreOptions as at, type RegisterBrowserInput as au, type RegisterSessionInput as av, type RemainingQuota as aw, type ResourceStats as ax, ResumeDisabledError as ay, SESSION_END_REASONS as az, type SessionEventBus as b, rollupUsage as b$, type TaskUpdateInput as b0, type TaskVerification as b1, type TaskVerifySupervisor as b2, type TaskWriteResult as b3, type TokenPricing as b4, type UsageBucket as b5, type UsageComputeInput as b6, type UsageDetail as b7, type UsageSource as b8, type UserPresetsFile as b9, isMessageAllowed as bA, isProviderLimitError as bB, isTerminalActivityState as bC, listUserPresets as bD, loadQuotaStore as bE, loadUserPresets as bF, loadWorktreeIsolation as bG, matchesMessageFilter as bH, messageFrom as bI, mintMessageId as bJ, normalizeCommand as bK, normalizeWorktreeField as bL, parseAnthropicRateLimitHeaders as bM, parseTaskStatus as bN, parseWindow as bO, parseWorktreeIsolationMode as bP, pickUsageDetail as bQ, policyToActivities as bR, policyWatchesSession as bS, prToActivities as bT, projectSessionUsage as bU, readProfileQuota as bV, recordProfileQuota as bW, renderInboxDigest as bX, renderSessionMessage as bY, renderSessionMessages as bZ, resolveRelation as b_, WORKSPACE_SLUG_ENV as ba, WORKTREE_ISOLATION_ENV as bb, WORKTREE_PROVISION_CONCURRENCY_ENV as bc, type WorktreeDecision as bd, type WorktreeProvisionOutcome as be, type WorktreeProvisionPhase as bf, type WorktreeProvisionProgress as bg, type WorktreeProvisionRequest as bh, type WorktreeRequest as bi, activityCounts as bj, compactOutcome as bk, createProcessStatsService as bl, createSessionMessage as bm, createSupervisorTaskGateRunner as bn, createTaskLedger as bo, decideWorktreeIsolation as bp, deleteUserPreset as bq, deriveSessionOutcome as br, deriveSessionUsage as bs, escapeHumanPrompt as bt, escapeMessageBody as bu, filterActivities as bv, getProcessStatsService as bw, getUserPreset as bx, isClosedTaskStatus as by, isKnownSessionEndReason as bz, type SessionsRegistry as c, sanitizeLabel as c0, saveUserPreset as c1, trackWorktreeProvision as c2, turnToActivities as c3, userPresetsPath as c4, workflowToActivities as c5, type RecentSpawnConfig as c6, deriveRecentSpawnConfigs as c7, touchUserPreset as c8, userPresetSchema as c9, type SessionDescriptor as d, type SessionEndReason as e, type ActivityListFilter as f, type ActivityRecord as g, type ActivityTurnSession as h, type ActivityPrSession as i, type ActivityWorkflowRunSlice as j, type ActivityTaskSlice as k, type AgentsMdResolution as l, type SandboxAppServeSpec as m, type WorktreeField as n, type AgentSessionLike as o, type UsageReadContext as p, type UsageReadResult as q, type MessageKind as r, type SessionMessage as s, type AgentStreamEvent as t, type SessionUsage as u, type ToolCallRecord as v, type StatsSessionDescriptor as w, type ProcRow as x, type ProvisionInFlight as y, type ProvisionTracker as z };

package/dist/user-presets.d.ts

@@ -1,7 +1,7 @@
 import 'zod';
 import './session-config-DxIIuJFY.js';
 import './spawn-defaults-Cp9SGZex.js';
-export { c5 as RecentSpawnConfig, U as UserPreset, b8 as UserPresetsFile, bp as deleteUserPreset, c6 as deriveRecentSpawnConfigs, bw as getUserPreset, bC as listUserPresets, bE as loadUserPresets, c0 as saveUserPreset, c7 as touchUserPreset, c8 as userPresetSchema, c3 as userPresetsPath } from './sessions-SrISpFsH.js';
+export { c6 as RecentSpawnConfig, U as UserPreset, b9 as UserPresetsFile, bq as deleteUserPreset, c7 as deriveRecentSpawnConfigs, bx as getUserPreset, bD as listUserPresets, bF as loadUserPresets, c1 as saveUserPreset, c8 as touchUserPreset, c9 as userPresetSchema, c4 as userPresetsPath } from './sessions-Cse9PhLG.js';
 import '@agentproto/auth';
 import '@agentproto/acp';
 import '@agentproto/command-sandbox';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/runtime",
-  "version": "5.8.0",
+  "version": "5.9.0",
   "description": "@agentproto/runtime — long-running gateway that turns an agentproto workspace into a live runtime. Composes @agentproto/mcp-server (CRUD verbs) with HTTP transport, HEARTBEAT.md autonomy loop, and append-only conversation persistence. Drop a workspace dir, point your MCP client at it, and the agent ticks on its own.",
   "keywords": [
     "agentproto",
@@ -162,39 +162,39 @@
     "ws": "^8.21.3",
     "zod": "^4.6.5",
     "@agentproto/a2a": "0.1.0",
-    "@agentproto/acp": "0.9.2",
     "@agentproto/adapter-browser": "0.3.0",
+    "@agentproto/acp": "0.10.0",
     "@agentproto/agent": "0.2.5",
     "@agentproto/app-client": "0.4.1",
-    "@agentproto/app-kit": "1.5.0",
     "@agentproto/apps": "0.18.0",
     "@agentproto/auth": "1.1.2",
-    "@agentproto/command-sandbox": "0.3.0",
     "@agentproto/driver": "0.3.0",
-    "@agentproto/driver-agent-cli": "2.7.0",
+    "@agentproto/command-sandbox": "0.3.0",
+    "@agentproto/driver-agent-cli": "2.7.1",
     "@agentproto/driver-browser": "0.2.0",
+    "@agentproto/app-kit": "1.5.0",
     "@agentproto/driver-http": "0.1.10",
     "@agentproto/eval-reporters": "0.2.20",
     "@agentproto/governance": "0.1.5",
     "@agentproto/governance-engine": "0.1.10",
     "@agentproto/llm-endpoint": "0.11.3",
     "@agentproto/manifest": "0.2.3",
-    "@agentproto/mcp-server": "0.5.0",
-    "@agentproto/model-catalog": "0.11.3",
-    "@agentproto/pairing-host": "0.2.2",
     "@agentproto/plugin-local-browser": "0.3.2",
     "@agentproto/provider-kit": "0.4.6",
+    "@agentproto/model-catalog": "0.11.3",
     "@agentproto/provider-presets": "0.7.0",
+    "@agentproto/mcp-server": "0.6.0",
     "@agentproto/providers-store": "0.3.21",
     "@agentproto/redaction": "0.2.3",
+    "@agentproto/secrets": "1.2.1",
     "@agentproto/review": "0.4.0",
     "@agentproto/routine": "0.3.1",
     "@agentproto/sandbox": "0.8.1",
-    "@agentproto/secrets": "1.2.1",
     "@agentproto/telemetry-langfuse": "0.2.18",
     "@agentproto/tool": "0.4.0",
     "@agentproto/workflow": "0.7.1",
     "@agentproto/workflow-loader": "0.2.5",
+    "@agentproto/pairing-host": "0.2.3",
     "@agentproto/workflow-runtime": "0.16.0",
     "@agentproto/workspace-brain": "0.4.10"
   },