@hachej/boring-agent 0.1.103 → 0.1.105

package/dist/shared/index.d.ts

@@ -1,15 +1,15 @@
-import { s as AgentTool } from '../harness-erpL2SER.js';
-export { c as AGENT_NOT_IMPLEMENTED_UNTIL_T1, b as Agent, d as AgentActor, e as AgentCoreHarness, f as AgentCoreHarnessFactory, g as AgentCorePromptInput, h as AgentCoreSessionAdapter, i as AgentCoreSessionSnapshot, j as AgentEvent, A as AgentHarness, k as AgentMessageContent, l as AgentMessagePart, m as AgentNotImplementedError, a as AgentReadiness, n as AgentReadinessStatus, o as AgentResolveInputResponse, t as AgentRuntimeAdapter, p as AgentSendInput, q as AgentStartReceipt, r as AgentStreamOptions, u as CoreAgentConfig, J as JSONSchema, M as MessageAttachment, R as RunContext, S as SendMessageInput, T as TelemetryEvent, v as TelemetrySink, w as ToolExecContext, x as ToolResult, y as noopTelemetry, z as safeCapture, B as sessionStreamPath } from '../harness-erpL2SER.js';
-import { F as FileSearch } from '../file-search-BXdSm-Yq.js';
-export { A as AGENT_KNOWLEDGE_FILESYSTEM_ID, a as AGENT_RESOURCES_FILESYSTEM_ID, b as AgentSkillResource, L as LeaseBoundWorkspaceAgent, W as WorkspaceAgentDirectRunCallback, c as WorkspaceAgentDirectRunInput, d as WorkspaceAgentDispatch, e as WorkspaceAgentDispatcher, f as WorkspaceAgentDispatcherContext, g as WorkspaceAgentDispatcherDispatchInput, h as WorkspaceAgentDispatcherSendInput, i as WorkspaceAgentGatewayBinding } from '../file-search-BXdSm-Yq.js';
+import { s as AgentTool } from '../harness-Dcd08yKr.js';
+export { c as AGENT_NOT_IMPLEMENTED_UNTIL_T1, b as Agent, d as AgentActor, e as AgentCoreHarness, f as AgentCoreHarnessFactory, g as AgentCorePromptInput, h as AgentCoreSessionAdapter, i as AgentCoreSessionSnapshot, j as AgentEvent, A as AgentHarness, k as AgentMessageContent, l as AgentMessagePart, m as AgentNotImplementedError, a as AgentReadiness, n as AgentReadinessStatus, o as AgentResolveInputResponse, t as AgentRuntimeAdapter, p as AgentSendInput, q as AgentStartReceipt, r as AgentStreamOptions, u as CoreAgentConfig, J as JSONSchema, M as MessageAttachment, R as RunContext, S as SendMessageInput, T as TelemetryEvent, v as TelemetrySink, w as ToolExecContext, x as ToolResult, y as noopTelemetry, z as safeCapture, B as sessionStreamPath } from '../harness-Dcd08yKr.js';
+import { F as FileSearch } from '../file-search-qcD5zItr.js';
+export { A as AGENT_KNOWLEDGE_FILESYSTEM_ID, a as AGENT_RESOURCES_FILESYSTEM_ID, b as AgentSkillResource, L as LeaseBoundWorkspaceAgent, W as WorkspaceAgentDirectRunCallback, c as WorkspaceAgentDirectRunInput, d as WorkspaceAgentDispatch, e as WorkspaceAgentDispatcher, f as WorkspaceAgentDispatcherContext, g as WorkspaceAgentDispatcherDispatchInput, h as WorkspaceAgentDispatcherSendInput, i as WorkspaceAgentGatewayBinding } from '../file-search-qcD5zItr.js';
 import { b as Workspace, c as Sandbox } from '../sandbox-BMhut3kh.js';
 export { E as Entry, d as ExecOptions, a as ExecResult, I as IsolatedCodeInput, e as IsolatedCodeOutput, R as READONLY_FILESYSTEM_MUTATION_CODE, f as RUNTIME_FILESYSTEM_CAPABILITIES, g as ReadonlyFilesystemMutationError, h as RuntimeFilesystemCapability, i as SandboxCapability, S as Stat, j as WorkspaceRuntimeContext, k as WorkspaceWatchControlEvent, l as isReadonlyFilesystemMutationError } from '../sandbox-BMhut3kh.js';
-import { B as BoringChatPart, p as ToolUiMetadata, q as AgentConsumptionErrorCode } from '../piChatEvent-g1nIBh44.js';
-export { A as AgentDefinitionErrorCode, o as AgentDeploymentErrorCode, r as ApiErrorPayload, s as ApiErrorPayloadSchema, t as ApiErrorResponse, u as ApiErrorResponseSchema, v as BoringChatMessage, l as ChatAttachmentPayload, w as ChatError, C as ChatModelSelection, x as ChatSubmitPayload, h as CommandReceipt, E as ERROR_CODES, y as ErrorCode, z as ErrorLogFields, D as ErrorLogFieldsSchema, F as FollowUpPayload, f as FollowUpReceipt, I as InterruptPayload, k as InterruptReceipt, c as PiChatEvent, G as PiChatHeartbeatFrame, P as PiChatSnapshot, H as PiChatStatus, J as PiChatStreamFrame, d as PromptPayload, e as PromptReceipt, Q as QueueClearPayload, g as QueueClearReceipt, m as QueuedUserMessage, K as SAFE_NATIVE_SESSION_ID, n as SessionCtx, L as SessionDetail, a as SessionListOptions, S as SessionStore, b as SessionSummary, i as StopPayload, j as StopReceipt, T as ThinkingLevel, M as extractToolUiMetadata, N as isToolUiMetadata } from '../piChatEvent-g1nIBh44.js';
-import { S as SchemaValidationError, A as AgentSchemaIssue, a as Sha256Digest, b as AgentSchemaValidationResult, C as CredentialConsumerBindingId, c as CredentialFieldId, P as ProviderCredentialRefV1, d as AuthorizedWorkspaceCredentialScopeV1 } from '../lease-K-EZhdL-.js';
-export { e as AgentDefinition, f as AgentDefinitionDigestAsset, g as AgentDefinitionReference, h as AgentDefinitionValidationError, i as AgentDeployment, j as AgentDeploymentValidationError, k as CompiledAgentBundle, l as CompiledAgentDefinition, m as CreateShareEntryInput, n as CredentialConsumerBindingRegistryV1, o as CredentialConsumerBindingV1, p as CredentialConsumerKindV1, q as CredentialDeliveryV1, r as CredentialFieldDefinitionV1, E as ExternalManagedAccountReferenceDefinitionV1, I as InMemoryShareEntryStore, O as OpaqueRefSchema, s as OpaqueShareLocatorIdSchema, t as PROVIDER_CREDENTIAL_REF_VERSION, u as ProviderCategoryV1, v as ProviderCredentialDefinitionV1, w as ProviderCredentialRefFactoryV1, x as ProviderDefinitionV1, y as ProviderId, z as ProviderRegistryV1, R as ResolvedCredentialLeaseV1, B as ResolvedCredentialMaterialV1, D as SandboxHandleRecord, F as SandboxHandleStore, G as Sha256DigestSchema, H as ShareEntryErrorCode, J as ShareEntryProvenance, K as ShareEntryProvenanceSchema, L as ShareEntryResolution, M as ShareEntryStore, N as ShareEntryTombstone, Q as ShareEntryV1, T as ShareEntryV1Schema, U as ShareEntryValidationError, V as VerifiedWorkspaceCredentialAuthorityV1, W as VerifiedWorkspaceCredentialPrincipalV1, X as WorkspaceCredentialAuthorityVerifierV1, Y as WorkspaceCredentialResolverV1, Z as createAgentAssetDigest, _ as createAgentDefinitionDigest, $ as createAgentDeploymentDigest, a0 as createCredentialConsumerBindingRegistryV1, a1 as createProviderCredentialRefFactoryV1, a2 as createProviderRegistryV1, a3 as providerCredentialFieldsV1, a4 as resolveShareEntry, a5 as validateAgentDefinition, a6 as validateAgentDeployment } from '../lease-K-EZhdL-.js';
+import { B as BoringChatPart, p as ToolUiMetadata, q as AgentConsumptionErrorCode } from '../piChatEvent-iNSXiFQq.js';
+export { A as AgentDefinitionErrorCode, o as AgentDeploymentErrorCode, r as ApiErrorPayload, s as ApiErrorPayloadSchema, t as ApiErrorResponse, u as ApiErrorResponseSchema, v as BoringChatMessage, l as ChatAttachmentPayload, w as ChatError, C as ChatModelSelection, x as ChatSubmitPayload, h as CommandReceipt, E as ERROR_CODES, y as ErrorCode, z as ErrorLogFields, D as ErrorLogFieldsSchema, F as FollowUpPayload, f as FollowUpReceipt, I as InterruptPayload, k as InterruptReceipt, c as PiChatEvent, G as PiChatHeartbeatFrame, P as PiChatSnapshot, H as PiChatStatus, J as PiChatStreamFrame, d as PromptPayload, e as PromptReceipt, Q as QueueClearPayload, g as QueueClearReceipt, m as QueuedUserMessage, K as SAFE_NATIVE_SESSION_ID, n as SessionCtx, L as SessionDetail, a as SessionListOptions, S as SessionStore, b as SessionSummary, i as StopPayload, j as StopReceipt, T as ThinkingLevel, M as extractToolUiMetadata, N as isToolUiMetadata } from '../piChatEvent-iNSXiFQq.js';
+import { S as SchemaValidationError, A as AgentSchemaIssue, a as Sha256Digest, b as AgentSchemaValidationResult, C as CredentialConsumerBindingId, c as CredentialFieldId, P as ProviderCredentialRefV1, d as AuthorizedWorkspaceCredentialScopeV1 } from '../lease-DffrPrQn.js';
+export { e as AgentDefinition, f as AgentDefinitionDigestAsset, g as AgentDefinitionReference, h as AgentDefinitionValidationError, i as AgentDeployment, j as AgentDeploymentValidationError, k as CompiledAgentBundle, l as CompiledAgentDefinition, m as CreateShareEntryInput, n as CredentialConsumerBindingRegistryV1, o as CredentialConsumerBindingV1, p as CredentialConsumerKindV1, q as CredentialDeliveryV1, r as CredentialFieldDefinitionV1, E as ExternalManagedAccountReferenceDefinitionV1, I as InMemoryShareEntryStore, O as OpaqueRefSchema, s as OpaqueShareLocatorIdSchema, t as PROVIDER_CREDENTIAL_REF_VERSION, u as ProviderCategoryV1, v as ProviderCredentialDefinitionV1, w as ProviderCredentialRefFactoryV1, x as ProviderDefinitionV1, y as ProviderId, z as ProviderRegistryV1, R as ResolvedCredentialLeaseV1, B as ResolvedCredentialMaterialV1, D as SandboxHandleRecord, F as SandboxHandleStore, G as Sha256DigestSchema, H as ShareEntryErrorCode, J as ShareEntryProvenance, K as ShareEntryProvenanceSchema, L as ShareEntryResolution, M as ShareEntryStore, N as ShareEntryTombstone, Q as ShareEntryV1, T as ShareEntryV1Schema, U as ShareEntryValidationError, V as VerifiedWorkspaceCredentialAuthorityV1, W as VerifiedWorkspaceCredentialPrincipalV1, X as WorkspaceCredentialAuthorityVerifierV1, Y as WorkspaceCredentialResolverV1, Z as createAgentAssetDigest, _ as createAgentDefinitionDigest, $ as createAgentDeploymentDigest, a0 as createCredentialConsumerBindingRegistryV1, a1 as createProviderCredentialRefFactoryV1, a2 as createProviderRegistryV1, a3 as providerCredentialFieldsV1, a4 as resolveShareEntry, a5 as validateAgentDefinition, a6 as validateAgentDeployment } from '../lease-DffrPrQn.js';
 import { z } from 'zod';
-export { e as AGENT_GATEWAY_ERROR_CODES, f as AgentFollowUpCommand, A as AgentGateway, g as AgentGatewayError, h as AgentGatewayErrorCode, i as AgentGatewayErrorDTO, j as AgentPromptCommand, k as AgentScopeVerifier, d as AgentSendReceipt, c as AgentSessionActivity, l as AgentSessionConnection, m as AgentSessionEvent, n as AgentSessionPage, b as AgentSessionRef, o as AgentSessionStateSnapshot, p as AgentSessionSummary, q as AgentSummary, r as AuthSubjectId, a as AuthorizedAgentScope, s as AuthorizedAgentSessionQuery, C as ConnectAgentSessionInput, t as CreateAgentSessionInput, D as DeleteAgentSessionInput, I as IdempotentAgentControl, u as IdempotentAgentSend, v as IdempotentQueueClear, J as JsonPrimitive, w as JsonSafe, x as JsonValue, L as ListAgentsInput, R as ReadAgentSessionStateInput, y as RenameAgentSessionInput, V as VerifiedAgentScopeClaim, W as WorkspaceScopeId } from '../errors-szpcDUFQ.js';
+export { e as AGENT_GATEWAY_ERROR_CODES, f as AgentFollowUpCommand, A as AgentGateway, g as AgentGatewayError, h as AgentGatewayErrorCode, i as AgentGatewayErrorDTO, j as AgentPromptCommand, k as AgentScopeVerifier, d as AgentSendReceipt, c as AgentSessionActivity, l as AgentSessionConnection, m as AgentSessionEvent, n as AgentSessionPage, b as AgentSessionRef, o as AgentSessionStateSnapshot, p as AgentSessionSummary, q as AgentSummary, r as AuthSubjectId, a as AuthorizedAgentScope, s as AuthorizedAgentSessionQuery, C as ConnectAgentSessionInput, t as CreateAgentSessionInput, D as DeleteAgentSessionInput, I as IdempotentAgentControl, u as IdempotentAgentSend, v as IdempotentQueueClear, J as JsonPrimitive, w as JsonSafe, x as JsonValue, L as ListAgentsInput, R as ReadAgentSessionStateInput, y as RenameAgentSessionInput, V as VerifiedAgentScopeClaim, W as WorkspaceScopeId } from '../errors-DH7C01Pm.js';
 import '@mariozechner/pi-coding-agent';
 
 declare const ToolUiMetadataSchema: z.ZodObject<{
@@ -100,12 +100,32 @@ declare const QueuedUserMessageSchema: z.ZodObject<{
     clientSeq?: number | undefined;
 }>;
 declare const PiChatStatusSchema: z.ZodEnum<["idle", "hydrating", "submitted", "streaming", "aborting", "error"]>;
+declare const ChatModelSelectionSchema: z.ZodObject<{
+    provider: z.ZodString;
+    id: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    provider: string;
+}, {
+    id: string;
+    provider: string;
+}>;
 declare const PiChatSnapshotSchema: z.ZodObject<{
     protocolVersion: z.ZodLiteral<1>;
     sessionId: z.ZodString;
     seq: z.ZodNumber;
     status: z.ZodEnum<["idle", "hydrating", "submitted", "streaming", "aborting", "error"]>;
     activeTurnId: z.ZodOptional<z.ZodString>;
+    currentModel: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodString;
+        id: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        provider: string;
+    }, {
+        id: string;
+        provider: string;
+    }>>;
     messages: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         role: z.ZodEnum<["user", "assistant", "system"]>;
@@ -229,6 +249,10 @@ declare const PiChatSnapshotSchema: z.ZodObject<{
         details?: unknown;
         retryable?: boolean | undefined;
     } | undefined;
+    currentModel?: {
+        id: string;
+        provider: string;
+    } | undefined;
     activeTurnId?: string | undefined;
 }, {
     status: "idle" | "aborting" | "error" | "streaming" | "hydrating" | "submitted";
@@ -263,6 +287,10 @@ declare const PiChatSnapshotSchema: z.ZodObject<{
         details?: unknown;
         retryable?: boolean | undefined;
     } | undefined;
+    currentModel?: {
+        id: string;
+        provider: string;
+    } | undefined;
     activeTurnId?: string | undefined;
 }>;
 declare const PiChatEventSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
@@ -280,6 +308,34 @@ declare const PiChatEventSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     seq: number;
 }>, z.ZodObject<{
     seq: z.ZodNumber;
+} & {
+    type: z.ZodLiteral<"model-changed">;
+    currentModel: z.ZodObject<{
+        provider: z.ZodString;
+        id: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        provider: string;
+    }, {
+        id: string;
+        provider: string;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "model-changed";
+    currentModel: {
+        id: string;
+        provider: string;
+    };
+    seq: number;
+}, {
+    type: "model-changed";
+    currentModel: {
+        id: string;
+        provider: string;
+    };
+    seq: number;
+}>, z.ZodObject<{
+    seq: z.ZodNumber;
 } & {
     type: z.ZodLiteral<"agent-end">;
     turnId: z.ZodString;
@@ -741,6 +797,34 @@ declare const PiChatStreamFrameSchema: z.ZodUnion<[z.ZodDiscriminatedUnion<"type
     seq: number;
 }>, z.ZodObject<{
     seq: z.ZodNumber;
+} & {
+    type: z.ZodLiteral<"model-changed">;
+    currentModel: z.ZodObject<{
+        provider: z.ZodString;
+        id: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        provider: string;
+    }, {
+        id: string;
+        provider: string;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "model-changed";
+    currentModel: {
+        id: string;
+        provider: string;
+    };
+    seq: number;
+}, {
+    type: "model-changed";
+    currentModel: {
+        id: string;
+        provider: string;
+    };
+    seq: number;
+}>, z.ZodObject<{
+    seq: z.ZodNumber;
 } & {
     type: z.ZodLiteral<"agent-end">;
     turnId: z.ZodString;
@@ -1186,16 +1270,6 @@ declare const PiChatStreamFrameSchema: z.ZodUnion<[z.ZodDiscriminatedUnion<"type
     type: "heartbeat";
     now: string;
 }>]>;
-declare const ChatModelSelectionSchema: z.ZodObject<{
-    provider: z.ZodString;
-    id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    id: string;
-    provider: string;
-}, {
-    id: string;
-    provider: string;
-}>;
 declare const ThinkingLevelSchema: z.ZodEnum<["off", "low", "medium", "high"]>;
 declare const ChatAttachmentPayloadSchema: z.ZodObject<{
     filename: z.ZodOptional<z.ZodString>;

package/dist/shared/index.js

@@ -114,7 +114,7 @@ import {
   extractToolUiMetadata,
   isToolUiMetadata,
   sanitizeToolUiMetadata2 as sanitizeToolUiMetadata
-} from "../chunk-7QM22DU7.js";
+} from "../chunk-6DRHERVK.js";
 import {
   safeRandomUUID
 } from "../chunk-YGRQ4Q5P.js";

package/dist/{types-BnjMLAd5.d.ts → types-BTsdaAQ2.d.ts}

@@ -1,9 +1,9 @@
 import { FastifyRequest, FastifyPluginAsync } from 'fastify';
-import { C as ToolReadinessRequirement, v as TelemetrySink, s as AgentTool, D as AgentHarnessFactory } from './harness-erpL2SER.js';
-import { F as FileSearch, b as AgentSkillResource, c as WorkspaceAgentDirectRunInput, L as LeaseBoundWorkspaceAgent } from './file-search-BXdSm-Yq.js';
+import { C as ToolReadinessRequirement, v as TelemetrySink, s as AgentTool, D as AgentHarnessFactory } from './harness-Dcd08yKr.js';
+import { F as FileSearch, b as AgentSkillResource, c as WorkspaceAgentDirectRunInput, L as LeaseBoundWorkspaceAgent } from './file-search-qcD5zItr.js';
 import { b as Workspace, h as RuntimeFilesystemCapability, j as WorkspaceRuntimeContext, c as Sandbox } from './sandbox-BMhut3kh.js';
-import { b as AgentSessionRef, V as VerifiedAgentScopeClaim, i as AgentGatewayErrorDTO, x as JsonValue, a as AuthorizedAgentScope, A as AgentGateway, k as AgentScopeVerifier } from './errors-szpcDUFQ.js';
-import { C as ChatModelSelection } from './piChatEvent-g1nIBh44.js';
+import { b as AgentSessionRef, V as VerifiedAgentScopeClaim, i as AgentGatewayErrorDTO, x as JsonValue, a as AuthorizedAgentScope, A as AgentGateway, k as AgentScopeVerifier } from './errors-DH7C01Pm.js';
+import { C as ChatModelSelection } from './piChatEvent-iNSXiFQq.js';
 import { RuntimeHostOperations, RuntimeFilesystemBinding as RuntimeFilesystemBinding$1 } from '@hachej/boring-bash/agent';
 import { CreateNodeWorkspaceOptions, BoringAgentRuntimePaths } from '@hachej/boring-sandbox/providers/node-workspace';
 import { PackageSource, ExtensionFactory } from '@mariozechner/pi-coding-agent';
@@ -86,11 +86,11 @@ interface ModelsRoutesOptions {
  *                     (fail closed) so hosts can enforce hard stops.
  *   recordUsage       once per native assistant message carrying usage.
  *                     `usageId` is a stable idempotency key.
- *   settleRun         when the run reaches a native terminal state and usage
- *                     was recorded (or it finished ok).
- *   releaseRun        when the run never produced billable usage: rejected
- *                     execution, cleared queue, cancel/abort, or error before
- *                     any usage arrived.
+ *   settleRun         when the run reaches a native terminal state and billable
+ *                     usage or an authoritative all-zero usage row was recorded.
+ *   releaseRun        when the run does not settle: rejected execution, cleared
+ *                     queue, cancel/abort, error before usage, or a fail-closed
+ *                     fallback charge.
  *
  * Every run terminates with exactly one settle or release from the
  * coordinator; sinks should still treat all four methods as idempotent
@@ -102,8 +102,8 @@ interface AgentMeteringSink {
     reserveRun(input: MeteringReserveInput): Promise<MeteringReservationResult>;
     /** Records the usage and returns the credit micros it was actually billed. The
      * coordinator counts a usage as billable from this charged amount (not raw provider
-     * fields), so a row that prices to 0 (e.g. cost-only usage when provider cost isn't
-     * trusted) doesn't make a free run settle. */
+     * fields). A complete, internally consistent all-zero report settles at zero;
+     * potentially billable usage priced to 0 retains fail-closed fallback. */
     recordUsage(input: MeteringUsageInput): Promise<MeteringUsageResult>;
     settleRun(input: MeteringSettleInput): Promise<void>;
     releaseRun(input: MeteringReleaseInput): Promise<void>;
@@ -754,6 +754,21 @@ interface AgentInstructionFileRef {
     readonly path: string;
     readonly role: 'persona';
 }
+/**
+ * An authored instruction file as the fleet composer knows it: a canonical
+ * HOST absolute path, not yet addressed against any workspace.
+ *
+ * The two shapes are deliberately distinct. A multi-workspace host (the CLI
+ * hub, core) serves a DIFFERENT root per request, so composition cannot know
+ * which root a ref should be relative to; only the request can. The spec
+ * therefore carries sources, and `describe` publishes the subset that is
+ * reachable through the root actually being served (gh-1189).
+ */
+interface AgentInstructionSource {
+    /** Canonical absolute path on the host filesystem. */
+    readonly absolutePath: string;
+    readonly role: 'persona';
+}
 interface ConfiguredAgentHostAgentSpec {
     readonly agentTypeId: string;
     readonly definition: {
@@ -775,8 +790,12 @@ interface ConfiguredAgentHostAgentSpec {
         /** Host path of the package's `knowledge/` folder. */
         readonly rootDir: string;
     };
-    /** Authored instruction sources behind `definition.instructions`. */
-    readonly instructionFiles?: readonly AgentInstructionFileRef[];
+    /**
+     * Authored instruction sources behind `definition.instructions`, as host
+     * absolute paths. Addressed against a served workspace root per request by
+     * `describe`, never at composition time.
+     */
+    readonly instructionSources?: readonly AgentInstructionSource[];
     readonly plugins?: readonly {
         /** Canonical app-preflighted plugin ID. */
         readonly name: string;
@@ -986,4 +1005,4 @@ interface CreatedAgentHost {
     runWithWorkspaceAgent(input: AgentHostDispatcherRunInput, run: (binding: LeaseBoundWorkspaceAgent) => Promise<void>): Promise<void>;
 }
 
-export { type PiExtensionFactory as $, type AgentGatewayEffect as A, type BuiltinRuntimeModeId as B, type ConfiguredAgentHostAgentSpec as C, type AgentFleetCompiler as D, type AgentRequestTarget as E, type RuntimeFilesystemAccessDecision as F, type AgentHostDescription as G, type AgentHostDirectProjectionOptions as H, type AgentHostDispatcherRunInput as I, type AgentHostEnvironmentLease as J, type AgentHostHandle as K, type LegacyDefaultAgentHostSpec as L, type ModeContext as M, type MeteringReleaseInput as N, type MeteringReleaseReason as O, type ProvisionWorkspaceRuntimeOptions as P, type MeteringReservationResult as Q, type RuntimeModeAdapter as R, type MeteringReserveInput as S, type MeteringRunKind as T, type MeteringRunScope as U, type MeteringRunStatus as V, type WorkspaceProvisioningResult as W, type MeteringSettleInput as X, type MeteringUsage as Y, type MeteringUsageInput as Z, PI_PACKAGE_RESOURCE_FILTERS as _, type PiPackageSource as a, type PluginSkillSource as a0, type ResolvedEnvironmentScope as a1, type RuntimeFilesystemBindingOperations as a2, type RuntimeNodePackageSpec as a3, type RuntimeProvisioningContribution as a4, type RuntimePythonSpec as a5, type RuntimeTemplateContribution as a6, type WorkspaceProvisioningExecResult as a7, compactPiPackages as a8, mergePiPackageSources as a9, normalizeMeteringUsage as aa, piPackageSourceKey as ab, type RuntimeModeId as b, type AgentRuntimeHostOperations as c, type RuntimeBashStrategy as d, type RuntimeFilesystemStrategy as e, type WorkspaceProvisioningAdapter as f, type AgentInstructionFileRef as g, type AgentHostAgentSpec as h, type RuntimeBundle as i, type PiHarnessOptions as j, type AgentMeteringSink as k, type RuntimeFilesystemBinding as l, type CreatedAgentHost as m, type MeteringErrorLogger as n, ReadyStatusTracker as o, type CreateAgentHostOptions as p, type CompiledAgentHostAgentSpec as q, type AgentRequestLedger as r, type AgentEffectAdmission as s, type AuthorizedEnvironmentIntent as t, type AgentHostEnvironmentScope as u, type ResolvedAgentRuntimeScope as v, type AgentRequestKey as w, type AgentRequestLedgerPrepareResult as x, type AgentRequestFailure as y, type AgentRequestLedgerRecord as z };
+export { PI_PACKAGE_RESOURCE_FILTERS as $, type AgentGatewayEffect as A, type BuiltinRuntimeModeId as B, type ConfiguredAgentHostAgentSpec as C, type AgentRequestLedgerRecord as D, type AgentFleetCompiler as E, type AgentRequestTarget as F, type RuntimeFilesystemAccessDecision as G, type AgentHostDescription as H, type AgentHostDirectProjectionOptions as I, type AgentHostDispatcherRunInput as J, type AgentHostEnvironmentLease as K, type AgentHostHandle as L, type ModeContext as M, type LegacyDefaultAgentHostSpec as N, type MeteringReleaseInput as O, type ProvisionWorkspaceRuntimeOptions as P, type MeteringReleaseReason as Q, type RuntimeModeAdapter as R, type MeteringReservationResult as S, type MeteringReserveInput as T, type MeteringRunKind as U, type MeteringRunScope as V, type WorkspaceProvisioningResult as W, type MeteringRunStatus as X, type MeteringSettleInput as Y, type MeteringUsage as Z, type MeteringUsageInput as _, type PiPackageSource as a, type PiExtensionFactory as a0, type PluginSkillSource as a1, type ResolvedEnvironmentScope as a2, type RuntimeFilesystemBindingOperations as a3, type RuntimeNodePackageSpec as a4, type RuntimeProvisioningContribution as a5, type RuntimePythonSpec as a6, type RuntimeTemplateContribution as a7, type WorkspaceProvisioningExecResult as a8, compactPiPackages as a9, mergePiPackageSources as aa, normalizeMeteringUsage as ab, piPackageSourceKey as ac, type RuntimeModeId as b, type AgentRuntimeHostOperations as c, type RuntimeBashStrategy as d, type RuntimeFilesystemStrategy as e, type WorkspaceProvisioningAdapter as f, type AgentInstructionSource as g, type AgentInstructionFileRef as h, type AgentHostAgentSpec as i, type RuntimeBundle as j, type PiHarnessOptions as k, type AgentMeteringSink as l, type RuntimeFilesystemBinding as m, type CreatedAgentHost as n, type MeteringErrorLogger as o, ReadyStatusTracker as p, type CreateAgentHostOptions as q, type CompiledAgentHostAgentSpec as r, type AgentRequestLedger as s, type AgentEffectAdmission as t, type AuthorizedEnvironmentIntent as u, type AgentHostEnvironmentScope as v, type ResolvedAgentRuntimeScope as w, type AgentRequestKey as x, type AgentRequestLedgerPrepareResult as y, type AgentRequestFailure as z };

package/docs/ERROR_CODES.md

@@ -45,7 +45,7 @@ All API failures must use the response envelope:
 | `AGENT_FLEET_MODEL_POLICY_UNCOMPILED` | Agent fleet configuration declares a model policy that the app fleet compiler did not resolve | 500 | configure app fleet compiler | error | stable (trusted API) |
 | `AGENT_FLEET_SEAT_PERSONA_INVALID` | `loadConfiguredAgentFleet` excluded a fleet.yaml seat because its persona package failed to materialize or compose | 500 | fix persona package/spec | error | stable (trusted API) |
 | `AGENT_FLEET_SEAT_SKILL_DIGEST_MISMATCH` | `loadConfiguredAgentFleet` excluded a fleet.yaml seat because a pinned skill's canonical content was unavailable or its digest drifted | 500 | run `pnpm write:skill-digests` or fix the skill file | error | stable (trusted API) |
-| `AGENT_FLEET_SEAT_INSTRUCTIONS_PATH_UNPUBLISHABLE` | `loadConfiguredAgentFleet` composed a fleet.yaml seat but withheld the link to its persona `instructions.md`. Usually because the host serves a workspace root that does not contain the personas tree (multi-workspace hosts resolve a root per request and pass `workspaceRoot: null`); rarely because the seat name is not a safe path segment | 500 | expected on multi-workspace hosts — the seat runs normally, only the Agent-details instruction link is withheld. On a single-root host, check that `workspaceRoot` is the root the `user` filesystem serves and contains `personasDir`. If the message names the seat, rename it to `[A-Za-z0-9][A-Za-z0-9._-]*` | warn | stable (trusted API) |
+| `AGENT_FLEET_SEAT_INSTRUCTIONS_PATH_UNPUBLISHABLE` | `GET /api/v1/agents/:agentTypeId/describe` withheld the link to a seat's persona `instructions.md` for THIS request. Usually because the workspace root serving the request does not contain the personas tree (the fleet is composed from a repository root while the request is served from somewhere else); also when the persona canonically resolves outside that root through a symlink, when the source no longer exists, or when the seat name is not a safe path segment. NOT an HTTP error: the describe call still returns 200 — the code is only logged as a warning while that link is omitted from the response | 200 (log-only) | expected whenever a request is served from a workspace the personas are outside of — the seat runs normally, only the Agent-details instruction link is withheld. Serve the request from a workspace that contains the personas tree to get the link. If the message names an unsafe composed path, rename the seat directory to `[A-Za-z0-9][A-Za-z0-9._-]*` | warn | stable (trusted API) |
 | `AGENT_FLEET_CONFIG_FILE_INVALID` | `loadConfiguredAgentFleet`'s fleet.yaml could not be read, parsed, or validated (whole-fleet failure, not per-seat) | 500 | fix `.agents/factory/fleet.yaml` | error | stable (trusted API) |
 | `AGENT_DEFINITION_ID_CONFLICT` | Multiple discovered plugin packages claim the same agent definition id, so every claimant is excluded | 500 | remove or rename conflicting definitions | error | stable (trusted API) |
 | `AGENT_DEFINITION_UNSEATED` | A discovered agent package is not named by the fleet roster and remains inert | 200 | seat it in class-B fleet config if activation is intended | info | stable (trusted API) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-agent",
-  "version": "0.1.103",
+  "version": "0.1.105",
   "type": "module",
   "license": "MIT",
   "description": "Pane-embeddable coding agent. Ships direct/local/vercel-sandbox execution modes behind one interface.",
@@ -85,12 +85,12 @@
     "@streamdown/math": "^1.0.2",
     "@streamdown/mermaid": "^1.0.2",
     "@tanstack/react-query": "^5.101.4",
-    "ai": "^7.0.62",
+    "ai": "^7.0.65",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
     "diff": "^9.0.0",
-    "fastify": "^5.11.3",
+    "fastify": "^5.12.0",
     "lucide-react": "^1.31.0",
     "motion": "^13.1.0",
     "nanoid": "^6.0.0",
@@ -100,9 +100,9 @@
     "use-stick-to-bottom": "^1.1.6",
     "yaml": "^2.9.0",
     "zod": "^3.25.76",
-    "@hachej/boring-bash": "0.1.103",
-    "@hachej/boring-ui-kit": "0.1.103",
-    "@hachej/boring-sandbox": "0.1.103"
+    "@hachej/boring-bash": "0.1.105",
+    "@hachej/boring-sandbox": "0.1.105",
+    "@hachej/boring-ui-kit": "0.1.105"
   },
   "devDependencies": {
     "@vercel/sandbox": "3.0.0",