@borgee/agents-host 0.2.26 → 0.2.29

package/README.md

@@ -54,6 +54,7 @@ agents-host start-managed <serverUrl> <apiKey> [agent-options]
 agents-host describe-managed <serverUrl>
 agents-host apply-managed <serverUrl> --stdin
 agents-host apply-managed <serverUrl> --spec-json <json>
+agents-host cleanup-managed <serverUrl> [--purge]
 agents-host log <serverUrl> [--lines <n>] [--follow]
 agents-host log <serverUrl> --path
 agents-host start --config <path-to-host-config> [--debug]
@@ -77,7 +78,28 @@ RUNTIME_PROVIDER=claude \
 pnpm --filter @borgee/agents-host dev
 ```
 
-Codex remains opt-in. Select `RUNTIME_PROVIDER=codex` only when `AGENTS_HOST_INTERNAL_COMPATIBILITY_GATES` includes `codex-provider`.
+Codex now ships on the same default hosted-provider surface as Claude and Copilot. Select `RUNTIME_PROVIDER=codex` directly unless you are explicitly rolling that path back with `AGENTS_HOST_INTERNAL_DISABLED_COMPATIBILITY_GATES=codex-provider`.
+
+### Shipped internal compatibility defaults and rollback controls
+
+The current shipped internal compatibility surface resolves gates in this order:
+
+1. start from the shipped defaults: `claude-provider-v2`, `copilot-provider-v2`, `codex-provider`, `managed-runtime-convergence`, and `policy-audit-enforcement`
+2. add any explicit entries from `AGENTS_HOST_INTERNAL_COMPATIBILITY_GATES`
+3. subtract any explicit entries from `AGENTS_HOST_INTERNAL_DISABLED_COMPATIBILITY_GATES`
+
+The shipped default set now also includes `connections-state-layer`, `context-injection`, `skill-runtime`, `localhost-gateway`, `token-binding`, `collaboration-outcome-model`, `task-thread-collaboration-contract`, and `collaboration-capabilities-diagnostics`. `attention-follow-semantics`, `collaboration-skill-first`, and hosted `praestoclaw-provider` still remain opt-in.
+
+Managed-runtime settings still preserve the managed rollback rule for `connections-state-layer` plus `token-binding`: when `managed-runtime-convergence` remains enabled, the managed surface forces that pair on; explicitly disabling `managed-runtime-convergence` removes that pair from the managed surface again unless you also explicitly re-enable them.
+
+Managed runtime precedence stays intentional: detached daemon respawns always reuse the persisted `managed-runtime-settings.json` snapshot, bare `start-managed <serverUrl>` and `apply-managed` treat the caller's current env as an explicit request to update that managed runtime surface, and full `start-managed <serverUrl> <apiKey> ...` validates the agent upsert against the existing managed-root snapshot before ambient rollback env can reject an otherwise valid existing surface.
+Legacy managed roots created before `managed-runtime-settings.json` existed need one bare `agents-host start-managed <serverUrl>` migration pass before full per-agent updates can rely on that snapshot-backed precedence.
+
+Rollback and hardening controls stay explicit:
+
+- `AGENTS_HOST_INTERNAL_DISABLED_COMPATIBILITY_GATES=<comma-list>` disables shipped gates for rollback
+- `AGENTS_HOST_INTERNAL_PROVIDER_IMPLEMENTATIONS=claude:v1,copilot:v1` forces Claude and/or Copilot back to the v1 adapters while their v2 gates stay enabled
+- `AGENTS_HOST_INTERNAL_POLICY_MODE=enforce` hardens the shipped `policy-audit-enforcement` gate beyond its default `audit-only` mode
 
 Or with the CLI:
 
@@ -117,6 +139,7 @@ and resumable in that case.
 Each managed runtime root keeps:
 
 - `agents-host.yaml` and `agents/` as the stable generated local-config entrypoints
+- `managed-runtime-settings.json` as the persisted managed runtime surface snapshot
 - `daemon.log` as the detached managed daemon stdout/stderr log file
 - `.state/` as the per-agent runtime state base
 - `ctl.sock` as the local control socket
@@ -210,8 +233,8 @@ Notes:
 | `BORGEE_AGENT_API_KEY`             | positional `<apiKey>`                  | yes      | —                                             | Agent API key from the web UI                                                                    |
 | `AGENTS_HOST_DEBUG`                | `--debug`                              | no       | off                                           | Extra host/provider lifecycle logs. Set `AGENTS_HOST_DEBUG=1` to enable without the CLI flag.   |
 | `BORGEE_AGENT_NAME`                | `--name`                               | no       | `Assistant`                                   | Display name used in prompts                                                                     |
-| `RUNTIME_PROVIDER`                 | `--provider`                           | no       | `claude`                                      | `claude`, `copilot`, or `codex` when `codex-provider` is enabled                                 |
-| `CLAUDE_COMMAND` / `CLAUDE_ARGS`   | `--claude-command` / `--claude-args`   | no       | `claude` / `--print`                          | Local Claude CLI command + args                                                                  |
+| `RUNTIME_PROVIDER`                 | `--provider`                           | no       | `claude`                                      | `claude`, `copilot`, or `codex`                                                                  |
+| `CLAUDE_COMMAND` / `CLAUDE_ARGS`   | `--claude-command` / `--claude-args`   | no       | `claude` / `--print --permission-mode bypassPermissions` | Local Claude CLI command + args                                                                  |
 | `CODEX_COMMAND` / `CODEX_ARGS`     | `--codex-command` / `--codex-args`     | no       | `codex-acp` / empty                           | Local Codex ACP adapter command + args. The default launch resolves the bundled `@agentclientprotocol/codex-acp` entrypoint. |
 | `COPILOT_COMMAND` / `COPILOT_ARGS` | `--copilot-command` / `--copilot-args` | no       | `copilot` / parsed but ignored by ACP runtime | Local Copilot CLI command. The persistent Copilot ACP prototype always launches `copilot --acp`. |
 | `COPILOT_SESSION_TTL_MINUTES`      | `--copilot-session-ttl-minutes`        | no       | `2880`                                        | Idle TTL for per-channel Copilot ACP sessions                                                    |
@@ -414,7 +437,7 @@ Agent config fields:
 - `key` (**required**): stable identity used for diffing and reload decisions
 - `name` (**required**)
 - `apiKey` (**required**)
-- `provider` (**required**): `claude`, `copilot`, or gated `codex`
+- `provider` (**required**): `claude`, `copilot`, or `codex` (roll back Codex only with `AGENTS_HOST_INTERNAL_DISABLED_COMPATIBILITY_GATES=codex-provider`)
 - `enabled` (optional, default `true`)
 - optional overrides for `claudeCommand`, `claudeArgs`, `codexCommand`,
   `codexArgs`, `copilotCommand`, `copilotArgs`, and

package/dist/agents-host.d.ts

@@ -12,9 +12,17 @@ export declare class AgentsHost {
     private readonly provider;
     private readonly borgee;
     private readonly logger;
+    private readonly contextInjectionEnabled;
     private readonly collaborationEnabled;
+    private readonly collaborationOutcomeModelEnabled;
+    private readonly attentionFollowSemanticsEnabled;
+    private readonly taskThreadCollaborationContractEnabled;
+    private readonly collaborationCapabilitiesDiagnosticsEnabled;
     private readonly activeTurns;
     private readonly awaitingUserByChannel;
+    private readonly collaborationOutcomeByChannel;
+    private readonly attentionSnapshotByChannel;
+    private readonly missedCollaborationDiagnosticByChannel;
     private readonly progressChannelQueues;
     private readonly progressDrafts;
     private readonly collaborationDrafts;
@@ -83,6 +91,20 @@ export declare class AgentsHost {
     private finishProtocolState;
     private cancelProtocolState;
     private confirmProtocolMessage;
+    private resolveAttentionStatePath;
+    private buildDefaultAttentionSnapshot;
+    private buildTurnTaskThreadContext;
+    private ensureAttentionSnapshotLoaded;
+    private revalidateAttentionSnapshotForTurn;
+    private getAttentionSnapshotForTurn;
+    private isHumanWakeFiltered;
+    private applyAttentionUpdate;
+    private commitAttentionSnapshot;
+    private resolveTaskThreadCollaborationContractForTurn;
+    private resolveCollaborationCapabilityDeclarationForTurn;
+    private resolveMissedCollaborationDiagnosticForTurn;
+    private updateMissedCollaborationDiagnostic;
+    private noteWakeSuppressedAttentionPolicy;
     private runUngatedTurn;
     private executeTurn;
     private canAcceptTurnOutput;
@@ -100,6 +122,9 @@ export declare class AgentsHost {
     private rememberRecentTurn;
     private resolveAuthorizedCollaborationTurn;
     private updateAwaitingUserState;
+    private recordBlockedSuppressionOutcome;
+    private recordCollaborationOutcome;
+    private syncMissedCollaborationDiagnosticFromOutcome;
     private resolveVisibleTurnBody;
     private shouldRelayProtocolReply;
     private normalizeMessage;