@cat-factory/worker 0.218.2 → 0.218.3

package/dist/infrastructure/github-deps.js

@@ -94,7 +94,7 @@ export function selectGitHubDeps(env, config, db, clock, idGenerator, repoFilesC
     // enabled, route each installation-keyed call to the App or GitLab client by the connection's
     // stored provider; otherwise the App client serves the module directly. The RepoFiles seams +
     // the GitHub-issue/docs consumers keep the raw App `githubClient` (they must not gain the
-    // GitLab fallback, per CLAUDE.md's VCS rule).
+    // GitLab fallback, per AGENTS.md's VCS rule).
     const moduleClient = gitlabConnectClient
         ? providerRoutingGitHubClient({
             installations: githubInstallationRepository,

package/migrations/0025_reshape_environment_connections.sql

@@ -9,7 +9,7 @@
 -- '' ⇄ null). `manifest_json` is renamed `handler_json` (it now carries the engine
 -- connection, sans secrets; the manifests to apply come from the service at provision time).
 --
--- Backwards compatibility is NOT a goal (CLAUDE.md): this is a clean DROP/CREATE, so any
+-- Backwards compatibility is NOT a goal (AGENTS.md): this is a clean DROP/CREATE, so any
 -- pre-reshape connection rows are dropped and must be re-registered.
 DROP TABLE IF EXISTS environment_connections;
 CREATE TABLE environment_connections (

package/migrations/0084_user_session_generation.sql

@@ -14,7 +14,7 @@
 --
 -- DEFAULT 0 so every existing row is valid without a backfill. Note that existing TOKENS are not:
 -- they carry no generation claim at all and are refused after this ships, which logs everyone out
--- once. That is the deliberate pre-1.0 internal break (CLAUDE.md → "Internals: backwards
+-- once. That is the deliberate pre-1.0 internal break (AGENTS.md → "Internals: backwards
 -- compatibility is NOT a goal") rather than a dual-read that would leave a permanent
 -- claim-less-means-valid hole — precisely the hole an attacker would aim at.
 --

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/worker",
-  "version": "0.218.2",
+  "version": "0.218.3",
   "description": "Reusable Cloudflare Worker library (Hono + D1) exposing the Agent Architecture Board core: the `createApp()` Hono factory, the default fetch/scheduled/queue handler, and the Durable Object + Workflow classes. Deployments (see deploy/backend) supply the wrangler.toml + config and re-export these.",
   "repository": {
     "type": "git",
@@ -33,36 +33,36 @@
     "access": "public"
   },
   "dependencies": {
-    "@ai-sdk/anthropic": "^4.0.60",
-    "@ai-sdk/openai": "^4.0.72",
-    "@ai-sdk/openai-compatible": "^3.0.53",
-    "@cat-factory/agents": "0.168.1",
-    "@cat-factory/binary-generators": "0.3.55",
-    "@cat-factory/caching": "0.20.89",
-    "@cat-factory/consensus": "0.19.2",
+    "@ai-sdk/anthropic": "^4.0.67",
+    "@ai-sdk/openai": "^4.0.79",
+    "@ai-sdk/openai-compatible": "^3.0.58",
+    "@cat-factory/agents": "0.168.2",
+    "@cat-factory/binary-generators": "0.3.56",
+    "@cat-factory/caching": "0.20.90",
+    "@cat-factory/consensus": "0.19.3",
     "@cat-factory/contracts": "0.356.0",
-    "@cat-factory/eks": "0.1.394",
-    "@cat-factory/gates": "0.11.55",
-    "@cat-factory/gitlab": "0.23.18",
-    "@cat-factory/integrations": "0.174.4",
-    "@cat-factory/kernel": "0.350.0",
-    "@cat-factory/observability-langfuse": "0.11.55",
-    "@cat-factory/observability-otel": "0.23.48",
-    "@cat-factory/orchestration": "0.314.2",
-    "@cat-factory/prompt-fragments": "1.1.51",
-    "@cat-factory/provider-cloudflare": "0.7.548",
-    "@cat-factory/server": "0.326.2",
-    "@cat-factory/spend": "0.23.0",
+    "@cat-factory/eks": "0.1.395",
+    "@cat-factory/gates": "0.11.56",
+    "@cat-factory/gitlab": "0.23.19",
+    "@cat-factory/integrations": "0.174.5",
+    "@cat-factory/kernel": "0.351.0",
+    "@cat-factory/observability-langfuse": "0.11.56",
+    "@cat-factory/observability-otel": "0.23.49",
+    "@cat-factory/orchestration": "0.314.3",
+    "@cat-factory/prompt-fragments": "1.1.52",
+    "@cat-factory/provider-cloudflare": "0.7.549",
+    "@cat-factory/server": "0.326.3",
+    "@cat-factory/spend": "0.23.1",
     "@cloudflare/containers": "^0.3.7",
     "@hono/valibot-validator": "^0.6.1",
-    "ai": "^7.0.111",
-    "hono": "^4.13.8",
+    "ai": "^7.0.120",
+    "hono": "^4.13.10",
     "pino": "^10.3.1",
     "valibot": "^1.5.0",
     "workers-ai-provider": "^4.0.0"
   },
   "devDependencies": {
-    "@cat-factory/conformance": "0.59.2",
+    "@cat-factory/conformance": "0.59.3",
     "@cloudflare/vitest-pool-workers": "^0.22.0",
     "@cloudflare/workers-types": "5.20260815.1",
     "typescript": "7.0.2",

package/sandbox-migrations/0001_init.sql

@@ -4,7 +4,7 @@
 -- unprefixed: the database is the namespace. The Node facade mirrors this as a Postgres
 -- `sandbox` schema (Drizzle). Shipped baselines are NOT stored (read live from
 -- `@cat-factory/agents`); only candidate prompt versions are. JSON-shaped fields are
--- stored as TEXT JSON. See backend/CLAUDE.md "Keep the runtimes symmetric".
+-- stored as TEXT JSON. See backend/README.md "Keep the runtimes symmetric".
 
 -- Candidate prompt-version lineages under test (origin always 'candidate').
 CREATE TABLE prompt_versions (