@hachej/boring-agent 0.1.104 → 0.1.105

package/dist/{createHarness-POZ4AXCZ.js → createHarness-GMBZZPTN.js}

@@ -5,7 +5,7 @@ import {
   mergePiPackageSources,
   projectSkillResourceLocations,
   withPiHarnessDefaults
-} from "./chunk-I7KFNGB4.js";
+} from "./chunk-F2OJI2LX.js";
 import "./chunk-4IQ4HHBG.js";
 import "./chunk-K25PK5EC.js";
 export {

package/dist/front/index.d.ts

@@ -157,6 +157,13 @@ declare function parseSlashCommand(text: string): ParsedCommand | null;
 type SlashCommandHandlerResult = string | void | {
     message?: string;
     preserveDraft?: boolean;
+    /**
+     * Result text the agent must see. When set, the command's outcome is also
+     * submitted as an expanded-text turn, so it lands in the model's context the
+     * same way a skill command's expansion does — a browser-only notice is
+     * invisible to the agent. Keep it a short structured summary, not a dump.
+     */
+    modelMessage?: string;
 };
 type SlashCommandHandler = (args: string, ctx: SlashCommandContext) => SlashCommandHandlerResult | Promise<SlashCommandHandlerResult>;
 type SlashCommandClickBehavior = 'execute' | 'insert' | 'disabled';

package/dist/front/index.js

@@ -280,6 +280,14 @@ function createCommandRegistry(initial) {
 }
 
 // src/front/slashCommands/builtins.ts
+var MAX_RELOAD_MODEL_MESSAGE = 2e3;
+function reloadResultForModel(message) {
+  const body = message.trim() || "No result reported.";
+  const bounded = body.length > MAX_RELOAD_MODEL_MESSAGE ? `${body.slice(0, MAX_RELOAD_MODEL_MESSAGE)}
+\u2026 (truncated)` : body;
+  return `/reload result:
+${bounded}`;
+}
 var builtinCommands = [
   {
     name: "reset",
@@ -301,9 +309,9 @@ var builtinCommands = [
     name: "reload",
     description: "Reload agent plugins",
     clickBehavior: "execute",
-    handler(_, ctx) {
-      if (ctx.pluginUpdate) return ctx.pluginUpdate.run();
-      return ctx.reloadAgentPlugins();
+    async handler(_, ctx) {
+      const message = ctx.pluginUpdate ? await ctx.pluginUpdate.run() : await ctx.reloadAgentPlugins();
+      return { message, modelMessage: reloadResultForModel(message) };
     }
   },
   {
@@ -2365,7 +2373,7 @@ var PiComposerPolicyController = class {
       if (command?.kind === "skill") {
         return this.submitExpandedText(skillCommandText(parsed.name, parsed.args), source, false);
       }
-      if (command) return this.runLocalCommand(parsed.name, parsed.args);
+      if (command) return this.runLocalCommand(parsed.name, parsed.args, source);
     }
     if (isPiChatBusy(this.options.session.getState().status) && files.length > 0) {
       return this.fromQueueResult(await this.queueController.submit({ text, attachments: this.toAttachmentPayloads(files) }));
@@ -2408,7 +2416,7 @@ var PiComposerPolicyController = class {
       ...this.options.thinkingControl ? { thinkingLevel: this.options.thinkingLevel ?? DEFAULT_THINKING } : {}
     }));
   }
-  async runLocalCommand(commandName, args) {
+  async runLocalCommand(commandName, args, source) {
     const command = this.options.registry.get(commandName);
     if (isPiChatBusy(this.options.session.getState().status) && command?.allowWhileBusy?.(args) !== true) {
       return this.block("busy-slash-command", "Slash commands are not queued while the agent is responding.");
@@ -2417,6 +2425,10 @@ var PiComposerPolicyController = class {
     const message = typeof result === "string" ? result : result && typeof result === "object" ? result.message : void 0;
     const preserveDraft = Boolean(result && typeof result === "object" && result.preserveDraft === true);
     if (message) this.options.onCommandResult?.(message);
+    const modelMessage = result && typeof result === "object" ? result.modelMessage?.trim() : void 0;
+    if (modelMessage) {
+      return await this.submitExpandedText(modelMessage, source, false);
+    }
     return { type: "command", command: commandName, ...message ? { result: message } : {}, preserveDraft };
   }
   async runBeforeSubmit(draft, files, source) {

package/dist/front/styles.css

@@ -70,6 +70,9 @@
   .collapse {
     visibility: collapse;
   }
+  .invisible {
+    visibility: hidden;
+  }
   .visible {
     visibility: visible;
   }
@@ -2597,8 +2600,11 @@
   .top-4 {
     top: calc(var(--spacing) * 4);
   }
-  .top-\[50\%\] {
-    top: 50%;
+  .top-\[calc\(1rem\+env\(safe-area-inset-top\,0px\)\)\] {
+    top: calc(1rem + env(safe-area-inset-top,0px));
+  }
+  .top-\[max\(1rem\,env\(safe-area-inset-top\,0px\)\)\] {
+    top: max(1rem, env(safe-area-inset-top,0px));
   }
   .right-0 {
     right: 0px;
@@ -2609,11 +2615,14 @@
   .right-4 {
     right: calc(var(--spacing) * 4);
   }
+  .right-\[calc\(1rem\+env\(safe-area-inset-right\,0px\)\)\] {
+    right: calc(1rem + env(safe-area-inset-right,0px));
+  }
   .bottom-0 {
     bottom: 0px;
   }
-  .bottom-4 {
-    bottom: calc(var(--spacing) * 4);
+  .bottom-\[calc\(1rem\+env\(safe-area-inset-bottom\,0px\)\)\] {
+    bottom: calc(1rem + env(safe-area-inset-bottom,0px));
   }
   .left-0 {
     left: 0px;
@@ -2621,12 +2630,12 @@
   .left-2 {
     left: calc(var(--spacing) * 2);
   }
-  .left-4 {
-    left: calc(var(--spacing) * 4);
-  }
   .left-\[50\%\] {
     left: 50%;
   }
+  .left-\[calc\(1rem\+env\(safe-area-inset-left\,0px\)\)\] {
+    left: calc(1rem + env(safe-area-inset-left,0px));
+  }
   .z-50 {
     z-index: 50;
   }
@@ -2766,6 +2775,9 @@
   .h-10 {
     height: calc(var(--spacing) * 10);
   }
+  .h-\[100dvh\] {
+    height: 100dvh;
+  }
   .h-\[calc\(100\%-1px\)\] {
     height: calc(100% - 1px);
   }
@@ -2793,6 +2805,9 @@
   .max-h-\[300px\] {
     max-height: 300px;
   }
+  .max-h-\[calc\(100dvh-var\(--keyboard-inset\,0px\)\)\] {
+    max-height: calc(100dvh - var(--keyboard-inset,0px));
+  }
   .min-h-0 {
     min-height: 0px;
   }
@@ -2896,8 +2911,8 @@
     --tw-translate-x: -50%;
     translate: var(--tw-translate-x) var(--tw-translate-y);
   }
-  .translate-y-\[-50\%\] {
-    --tw-translate-y: -50%;
+  .translate-y-0 {
+    --tw-translate-y: 0px;
     translate: var(--tw-translate-x) var(--tw-translate-y);
   }
   .translate-y-\[calc\(-50\%_-_2px\)\] {
@@ -3402,6 +3417,9 @@
   .pt-3 {
     padding-top: calc(var(--spacing) * 3);
   }
+  .pt-\[env\(safe-area-inset-top\,0px\)\] {
+    padding-top: env(safe-area-inset-top,0px);
+  }
   .pr-2 {
     padding-right: calc(var(--spacing) * 2);
   }
@@ -3411,12 +3429,21 @@
   .pr-8 {
     padding-right: calc(var(--spacing) * 8);
   }
+  .pr-\[env\(safe-area-inset-right\,0px\)\] {
+    padding-right: env(safe-area-inset-right,0px);
+  }
   .pb-2 {
     padding-bottom: calc(var(--spacing) * 2);
   }
   .pb-3 {
     padding-bottom: calc(var(--spacing) * 3);
   }
+  .pb-\[calc\(1rem\+env\(safe-area-inset-bottom\,0px\)\)\] {
+    padding-bottom: calc(1rem + env(safe-area-inset-bottom,0px));
+  }
+  .pb-\[env\(safe-area-inset-bottom\,0px\)\] {
+    padding-bottom: env(safe-area-inset-bottom,0px);
+  }
   .pl-2 {
     padding-left: calc(var(--spacing) * 2);
   }
@@ -3426,6 +3453,9 @@
   .pl-8 {
     padding-left: calc(var(--spacing) * 8);
   }
+  .pl-\[env\(safe-area-inset-left\,0px\)\] {
+    padding-left: env(safe-area-inset-left,0px);
+  }
   .text-center {
     text-align: center;
   }
@@ -4225,12 +4255,19 @@
     border-radius: 0;
   }
   @media (width >= 40rem) {
+    .sm\:top-\[50\%\] {
+      top: 50%;
+    }
     .sm\:max-w-lg {
       max-width: var(--container-lg);
     }
     .sm\:max-w-sm {
       max-width: var(--container-sm);
     }
+    .sm\:translate-y-\[-50\%\] {
+      --tw-translate-y: -50%;
+      translate: var(--tw-translate-x) var(--tw-translate-y);
+    }
     .sm\:flex-row {
       flex-direction: row;
     }
@@ -4798,12 +4835,12 @@
   --secondary-foreground: oklch(0.985 0 0);
   --muted: oklch(0.269 0.006 285.885);
   --muted-foreground: oklch(0.708 0.01 286.073);
-  --accent: oklch(0.62 0.14 65);
-  --accent-foreground: oklch(0.12 0.004 285.823);
+  --accent: oklch(0.72 0.13 65);
+  --accent-foreground: oklch(0.18 0.02 65);
   --accent-soft: oklch(0.28 0.04 65);
   --border: oklch(0.269 0.006 285.885);
   --input: oklch(0.269 0.006 285.885);
-  --ring: oklch(0.62 0.14 65);
+  --ring: oklch(0.72 0.13 65);
   --canvas: oklch(0.12 0.004 285.823);
 }
 [data-boring-agent] {
@@ -4890,12 +4927,12 @@
   --secondary-foreground: var(--boring-secondary-foreground, oklch(0.985 0 0));
   --muted: var(--boring-muted, oklch(0.269 0.006 285.885));
   --muted-foreground: var(--boring-muted-foreground, oklch(0.708 0.01 286.073));
-  --accent: var(--boring-accent, oklch(0.62 0.14 65));
-  --accent-foreground: var(--boring-accent-foreground, oklch(0.12 0.004 285.823));
+  --accent: var(--boring-accent, oklch(0.72 0.13 65));
+  --accent-foreground: var(--boring-accent-foreground, oklch(0.18 0.02 65));
   --accent-soft: var(--boring-accent-soft, oklch(0.28 0.04 65));
   --border: var(--boring-border, oklch(0.269 0.006 285.885));
   --input: var(--boring-input, oklch(0.269 0.006 285.885));
-  --ring: var(--boring-ring, oklch(0.62 0.14 65));
+  --ring: var(--boring-ring, oklch(0.72 0.13 65));
   --canvas: var(--boring-canvas, oklch(0.12 0.004 285.823));
   --surface-chat: var(--boring-surface-chat, oklch(0.165 0.004 285.823));
   --boring-agent-user-bg: oklch(from var(--accent) l c h / 0.16);

package/dist/server/agent-host/testing/gatewayConformance.d.ts

@@ -1,5 +1,5 @@
 import { A as AgentGateway, a as AuthorizedAgentScope, b as AgentSessionRef, c as AgentSessionActivity } from '../../../errors-DH7C01Pm.js';
-import { A as AgentGatewayEffect } from '../../../types-B1xDlBSo.js';
+import { A as AgentGatewayEffect } from '../../../types-BTsdaAQ2.js';
 import '../../../piChatEvent-iNSXiFQq.js';
 import 'zod';
 import 'fastify';

package/dist/server/index.d.ts

@@ -1,5 +1,5 @@
-import { P as ProvisionWorkspaceRuntimeOptions, W as WorkspaceProvisioningResult, a as PiPackageSource, R as RuntimeModeAdapter, b as RuntimeModeId, B as BuiltinRuntimeModeId, c as AgentRuntimeHostOperations, d as RuntimeBashStrategy, e as RuntimeFilesystemStrategy, M as ModeContext, f as WorkspaceProvisioningAdapter, g as AgentInstructionFileRef, C as ConfiguredAgentHostAgentSpec, h as AgentHostAgentSpec, i as RuntimeBundle, j as PiHarnessOptions, k as AgentMeteringSink, l as RuntimeFilesystemBinding, m as CreatedAgentHost, n as MeteringErrorLogger, o as ReadyStatusTracker, p as CreateAgentHostOptions, q as CompiledAgentHostAgentSpec, r as AgentRequestLedger, s as AgentEffectAdmission, t as AuthorizedEnvironmentIntent, u as AgentHostEnvironmentScope, v as ResolvedAgentRuntimeScope, w as AgentRequestKey, x as AgentRequestLedgerPrepareResult, y as AgentRequestFailure, z as AgentRequestLedgerRecord, D as AgentFleetCompiler, E as AgentRequestTarget, F as RuntimeFilesystemAccessDecision } from '../types-B1xDlBSo.js';
-export { A as AgentGatewayEffect, G as AgentHostDescription, H as AgentHostDirectProjectionOptions, I as AgentHostDispatcherRunInput, J as AgentHostEnvironmentLease, K as AgentHostHandle, L as LegacyDefaultAgentHostSpec, N as MeteringReleaseInput, O as MeteringReleaseReason, Q as MeteringReservationResult, S as MeteringReserveInput, T as MeteringRunKind, U as MeteringRunScope, V as MeteringRunStatus, X as MeteringSettleInput, Y as MeteringUsage, Z as MeteringUsageInput, _ as PI_PACKAGE_RESOURCE_FILTERS, $ as PiExtensionFactory, a0 as PluginSkillSource, a1 as ResolvedEnvironmentScope, a2 as RuntimeFilesystemBindingOperations, a3 as RuntimeNodePackageSpec, a4 as RuntimeProvisioningContribution, a5 as RuntimePythonSpec, a6 as RuntimeTemplateContribution, a7 as WorkspaceProvisioningExecResult, a8 as compactPiPackages, a9 as mergePiPackageSources, aa as normalizeMeteringUsage, ab as piPackageSourceKey } from '../types-B1xDlBSo.js';
+import { P as ProvisionWorkspaceRuntimeOptions, W as WorkspaceProvisioningResult, a as PiPackageSource, R as RuntimeModeAdapter, b as RuntimeModeId, B as BuiltinRuntimeModeId, c as AgentRuntimeHostOperations, d as RuntimeBashStrategy, e as RuntimeFilesystemStrategy, M as ModeContext, f as WorkspaceProvisioningAdapter, g as AgentInstructionSource, C as ConfiguredAgentHostAgentSpec, h as AgentInstructionFileRef, i as AgentHostAgentSpec, j as RuntimeBundle, k as PiHarnessOptions, l as AgentMeteringSink, m as RuntimeFilesystemBinding, n as CreatedAgentHost, o as MeteringErrorLogger, p as ReadyStatusTracker, q as CreateAgentHostOptions, r as CompiledAgentHostAgentSpec, s as AgentRequestLedger, t as AgentEffectAdmission, u as AuthorizedEnvironmentIntent, v as AgentHostEnvironmentScope, w as ResolvedAgentRuntimeScope, x as AgentRequestKey, y as AgentRequestLedgerPrepareResult, z as AgentRequestFailure, D as AgentRequestLedgerRecord, E as AgentFleetCompiler, F as AgentRequestTarget, G as RuntimeFilesystemAccessDecision } from '../types-BTsdaAQ2.js';
+export { A as AgentGatewayEffect, H as AgentHostDescription, I as AgentHostDirectProjectionOptions, J as AgentHostDispatcherRunInput, K as AgentHostEnvironmentLease, L as AgentHostHandle, N as LegacyDefaultAgentHostSpec, O as MeteringReleaseInput, Q as MeteringReleaseReason, S as MeteringReservationResult, T as MeteringReserveInput, U as MeteringRunKind, V as MeteringRunScope, X as MeteringRunStatus, Y as MeteringSettleInput, Z as MeteringUsage, _ as MeteringUsageInput, $ as PI_PACKAGE_RESOURCE_FILTERS, a0 as PiExtensionFactory, a1 as PluginSkillSource, a2 as ResolvedEnvironmentScope, a3 as RuntimeFilesystemBindingOperations, a4 as RuntimeNodePackageSpec, a5 as RuntimeProvisioningContribution, a6 as RuntimePythonSpec, a7 as RuntimeTemplateContribution, a8 as WorkspaceProvisioningExecResult, a9 as compactPiPackages, aa as mergePiPackageSources, ab as normalizeMeteringUsage, ac as piPackageSourceKey } from '../types-BTsdaAQ2.js';
 import { d as ExecOptions, a as ExecResult, W as WorkspaceChangeEvent, b as Workspace, c as Sandbox } from '../sandbox-BMhut3kh.js';
 export { h as RuntimeFilesystemCapability } from '../sandbox-BMhut3kh.js';
 import { b as RemoteWorkerHealthResponse, R as RemoteWorkerWorkspaceOp, a as RemoteWorkerWorkspaceResult, c as RemoteWorkerExecRequest } from '../middleware-CaAEXpi5.js';
@@ -299,10 +299,11 @@ interface TrustedAgentInstructionAppendix {
 interface TrustedAuthoredAgentPolicy {
     readonly fallbackLabel?: string;
     /**
-     * Workspace-relative authored instruction sources for this agent, supplied
-     * by the trusted composer that actually knows where they live.
+     * Authored instruction sources for this agent as host absolute paths,
+     * supplied by the trusted composer that actually knows where they live.
+     * Addressing them against a served workspace root is a per-request concern.
      */
-    readonly instructionFiles?: readonly AgentInstructionFileRef[];
+    readonly instructionSources?: readonly AgentInstructionSource[];
     readonly instructionAppendices?: readonly TrustedAgentInstructionAppendix[];
     readonly plugins?: readonly {
         readonly name: string;
@@ -366,22 +367,6 @@ interface DiscoveredAgentPackageDescriptor {
 interface LoadConfiguredAgentFleetOptions {
     /** Plugin-manager scan descriptors injected by the workspace/CLI boot layer. */
     readonly discoveredPackages: readonly DiscoveredAgentPackageDescriptor[];
-    /**
-     * Root of the workspace the `user` filesystem serves, or `null` when the
-     * host resolves a DIFFERENT root per request (core, the CLI hub) and so has
-     * no single one at fleet-composition time.
-     *
-     * Required, because published `instructionFiles` are addressed relative to
-     * it and only the caller knows it. It is NOT derivable from the discovered
-     * package roots: a fleet can be composed from packages that live outside
-     * the workspace root, and guessing produced well-formed paths that
-     * resolved to nothing.
-     *
-     * `null` is not a soft option — it makes the host structurally unable to
-     * publish a ref it cannot guarantee, which is the honest answer for
-     * per-workspace roots.
-     */
-    readonly workspaceRoot: string | null;
     /** Path to `.agents/factory/fleet.yaml`. */
     readonly fleetConfigPath: string;
     /** Path to `.agents/factory/policy.yaml` (read for `models.seats` tiers). */
@@ -394,7 +379,7 @@ interface LoadConfiguredAgentFleetOptions {
     /** Overridable for tests; defaults to `process.env`. */
     readonly env?: NodeJS.ProcessEnv;
 }
-type FleetLoaderDiagnosticCode = Extract<ErrorCode, 'AGENT_FLEET_SEAT_PERSONA_INVALID' | 'AGENT_FLEET_SEAT_SKILL_DIGEST_MISMATCH' | 'AGENT_DEFINITION_ID_CONFLICT' | 'AGENT_DEFINITION_UNSEATED' | 'AGENT_FLEET_SEAT_INSTRUCTIONS_PATH_UNPUBLISHABLE'>;
+type FleetLoaderDiagnosticCode = Extract<ErrorCode, 'AGENT_FLEET_SEAT_PERSONA_INVALID' | 'AGENT_FLEET_SEAT_SKILL_DIGEST_MISMATCH' | 'AGENT_DEFINITION_ID_CONFLICT' | 'AGENT_DEFINITION_UNSEATED'>;
 interface FleetLoaderDiagnostic {
     readonly seat?: string;
     readonly agentTypeId: string;
@@ -430,6 +415,40 @@ declare class FleetConfigError extends Error {
  */
 declare function loadConfiguredAgentFleet(options: LoadConfiguredAgentFleetOptions): Promise<LoadConfiguredAgentFleetResult>;
 
+type InstructionRefWithholdingCode = Extract<ErrorCode, 'AGENT_FLEET_SEAT_INSTRUCTIONS_PATH_UNPUBLISHABLE'>;
+interface WithheldInstructionRef {
+    readonly code: InstructionRefWithholdingCode;
+    /** Host absolute path of the authored source that could not be addressed. */
+    readonly absolutePath: string;
+    readonly message: string;
+}
+interface ResolvedInstructionFileRefs {
+    readonly refs: readonly AgentInstructionFileRef[];
+    readonly withheld: readonly WithheldInstructionRef[];
+}
+/**
+ * Addresses authored instruction sources against the workspace root a SINGLE
+ * request is served from, which is the only moment a multi-workspace host
+ * (the CLI hub, core) knows one — composition time sees a fleet shared by
+ * every workspace (gh-1189).
+ *
+ * Publication is deterministic and fails closed: a ref is emitted only when
+ * the source canonically resolves inside the served root AND composes a path
+ * the client-side openable-resource guard accepts. Anything else is withheld
+ * with the stable `AGENT_FLEET_SEAT_INSTRUCTIONS_PATH_UNPUBLISHABLE` code, so
+ * the invariant from #1176 holds: a rendered link always resolves.
+ *
+ * Canonicalization (not lexical containment) on BOTH sides is the point:
+ * dotfile managers make a symlinked `.agents` ordinary, and a lexical check
+ * would call `~/project/.agents -> ~/dotfiles/agents` "inside the workspace"
+ * and publish a link the `user` filesystem cannot open.
+ */
+declare function resolveAgentInstructionFileRefs(input: {
+    readonly sources: readonly AgentInstructionSource[] | undefined;
+    /** Root the `user` filesystem serves for THIS request, when the host resolved one. */
+    readonly workspaceRoot: string | null | undefined;
+}): Promise<ResolvedInstructionFileRefs>;
+
 declare const LEGACY_DEFAULT_AGENT_FLEET: readonly AgentHostAgentSpec[];
 interface ResolveDefaultAgentFleetOptions {
     /**
@@ -439,16 +458,6 @@ interface ResolveDefaultAgentFleetOptions {
     readonly repositoryRoot?: string;
     /** Asset-manager scan results supplied by the workspace/CLI boot layer. */
     readonly discoveredPackages?: readonly DiscoveredAgentPackageDescriptor[];
-    /**
-     * Root of the workspace the `user` filesystem serves, or `null` when the
-     * host resolves one per request. Explicit rather than defaulted, because it
-     * is a DIFFERENT root from `repositoryRoot` in every multi-workspace host —
-     * the two only coincide in the single-root dogfood/playground case.
-     * Personas outside it are not published as openable instruction refs (see
-     * `loadConfiguredAgentFleet`): a well-formed path the workbench cannot open
-     * is worse than no link.
-     */
-    readonly workspaceRoot: string | null;
     /** Overridable for tests; defaults to `process.env`. */
     readonly env?: NodeJS.ProcessEnv;
 }
@@ -1106,7 +1115,7 @@ interface AgentHostRuntime {
     readonly effectAdmission: AgentEffectAdmission;
     readonly activity: AgentSessionActivityIndex;
     readonly shutdownGraceMs: number;
-    listSessionSummaries(agentTypeId: string, scope: AuthorizedAgentScope, claim: VerifiedAgentScopeClaim): Promise<readonly SessionSummary[]>;
+    listSessionSummaries(agentTypeId: string, scope: AuthorizedAgentScope, claim: VerifiedAgentScopeClaim, options?: SessionListOptions): Promise<readonly SessionSummary[]>;
     isDraining(): boolean;
     assertOpen(): void;
     verify(scope: AuthorizedAgentScope): Promise<VerifiedAgentScopeClaim>;
@@ -1477,4 +1486,4 @@ declare function createInMemoryCredentialBackendV1(entries: readonly InMemoryCre
 
 declare function withResolvedCredential<T>(resolver: WorkspaceCredentialResolverV1, workspace: AuthorizedWorkspaceCredentialScopeV1, ref: ProviderCredentialRefV1, fn: (lease: ResolvedCredentialLeaseV1) => T | Promise<T>): Promise<T>;
 
-export { AgentDirectoryCompilerError, type AgentDirectoryCompilerErrorCode, type AgentDirectoryCompilerPublicErrorCode, AgentEffectAdmission, AgentFleetCompilationError, AgentFleetCompilationErrorCode, AgentFleetCompiler, type AgentFleetPluginBindingContract, AgentHarnessFactory, AgentHostAgentSpec, type AgentHostEnvironmentHttpProjectionOptions, AgentHostEnvironmentScope, AgentInstructionFileRef, AgentMeteringSink, AgentRequestKey, AgentRequestLedger, AgentRequestLedgerPrepareResult, AgentRequestLedgerRecord, AgentRuntimeHostOperations, AuthoredAgentMaterializationError, type AuthoredAgentMaterializationErrorCode, type AuthoredAgentSourceV1, AuthorizedAgentScope, AuthorizedEnvironmentIntent, type AuthorizedSessionRunDetails, BuiltinRuntimeModeId, CompiledAgentHostAgentSpec, ConfiguredAgentHostAgentSpec, CreateAgentHostOptions, type CreateConfiguredAgentHostAgentSpecInput, type CreateStandaloneAgentHostAppOptions, type CreateValidatingAgentFleetCompilerOptions, CreatedAgentHost, type CredentialStoreBackendV1, DEFAULT_PI_RESOURCE_DIGEST_LIMITS, DEFAULT_READONLY_WORKSPACE_PATHS, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, type DiscoveredAgentPackageDescriptor, EmbeddedAgentGateway, type FakeAuthorityVerifierGrantV1, FleetConfigError, type FleetConfigErrorCode, type FleetLoaderDiagnostic, type FleetLoaderDiagnosticCode, type FleetSeatBinding, type FleetSkillBinding, type HostSideCredentialResolverOptionsV1, InMemoryAgentRequestLedger, type InMemoryCredentialBackendEntryV1, LEGACY_DEFAULT_AGENT_FLEET, type LoadConfiguredAgentFleetOptions, type LoadConfiguredAgentFleetResult, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifact, type ManagedAgentArtifactCandidate, type ManagedAgentArtifactRef, type ManagedAgentBoundRunnerWorkspace, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateRunInput, type ManagedAgentDelegateRunner, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type ManagedAgentWorkspaceResolutionInput, type MaterializeAgentDirectoryInput, MeteringErrorLogger, ModeContext, type ModelTierCandidate, PiHarnessOptions, PiPackageSource, type PiResourceDigestInput, type PiResourceDigestLimits, type PiResourceSet, type ProvisionRuntimeWorkspaceOptions, ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, RUNTIME_FILESYSTEM_BINDING_DUPLICATE_CODE, RUNTIME_READONLY_FILESYSTEM_POLICY_INVALID_CODE, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, RemoteWorkerExecRequest, type RemoteWorkerModeAdapterOptions, RemoteWorkerWorkspaceOp, RemoteWorkerWorkspaceResult, type ResolveDefaultAgentFleetOptions, type ResolvedAgent, type ResolvedAgentDigestInput, ResolvedAgentRuntimeScope, RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, RuntimeFilesystemAccessDecision, RuntimeFilesystemBinding, RuntimeFilesystemBindingConfigurationError, RuntimeModeAdapter, RuntimeModeId, type RuntimeReadonlyFilesystemPolicy, RuntimeReadonlyFilesystemPolicyError, type RuntimeWorkspaceProvisioningResult, type SandboxRuntimeModeOptions, type ShareEntryMcpResourceOptions, type SkillMetadataFrontmatter, SqliteAgentRequestLedger, TrustedAgentCompositionError, type TrustedAgentInstructionAppendix, type TrustedAuthoredAgentPolicy, UV_SETUP_COMMANDS, VerifiedAgentScopeClaim, type WorkspaceAgentDispatcherBinding, type WorkspaceAgentDispatcherResolveOptions, type WorkspaceAgentDispatcherResolver, WorkspaceProvisioningAdapter, WorkspaceProvisioningResult, applyCspHeaders, autoDetectMode, buildDeploymentSnapshotRecipe, compileAgentDirectory, compilePersonaPackageDirectory, constantTimeTokenEqual, createAgentHost, createBlaxelSandboxModeAdapter, createBoundWorkspaceAgentDispatcher, createConfiguredAgentHostAgentSpec, createDirectModeAdapter, createEnvironmentProvisioningFingerprint, createFakeAuthorityVerifierV1, createHostSideCredentialResolverV1, createInMemoryCredentialBackendV1, createLocalModeAdapter, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createPiResourceDigestFence, createPiResourceDigestInput, createPluginDiagnosticsTool, createProviderRuntimeModeAdapter, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResolvedAgentDigest, createResolvedRuntimeScopeIdentity, createResourceSettingsManager, createSandboxRuntimeModeAdapter, createStandaloneAgentHostApp, createUserFilesystemBinding, createValidatingAgentFleetCompiler, createVercelSandboxModeAdapter, decodeBytesFromWorker, deepLinkRoutes, digestPiResourceInputs, encodeBytesForWorker, hasBwrap, loadConfiguredAgentFleet, materializeAgentDirectory, mergeRuntimeFilesystemBindings, normalizeRuntimeReadonlyFilesystemPolicy, parseSkillMetadataFrontmatter, prepareDeploymentSnapshot, projectAuthorizedSessionRunDetails, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentHostEnvironmentRoutes, registerShareEntryResources, resolveAgentDeployment, resolveBuiltinRuntimeLayoutRoot, resolveDefaultAgentFleet, resolveMode, resolveRuntimeReadonlyFilesystemAccess, resolveWorkspaceRoot, sandboxRuntimeHostOperations, shareResourceUri, withResolvedCredential, withRuntimeEnvContributions };
+export { AgentDirectoryCompilerError, type AgentDirectoryCompilerErrorCode, type AgentDirectoryCompilerPublicErrorCode, AgentEffectAdmission, AgentFleetCompilationError, AgentFleetCompilationErrorCode, AgentFleetCompiler, type AgentFleetPluginBindingContract, AgentHarnessFactory, AgentHostAgentSpec, type AgentHostEnvironmentHttpProjectionOptions, AgentHostEnvironmentScope, AgentInstructionFileRef, AgentInstructionSource, AgentMeteringSink, AgentRequestKey, AgentRequestLedger, AgentRequestLedgerPrepareResult, AgentRequestLedgerRecord, AgentRuntimeHostOperations, AuthoredAgentMaterializationError, type AuthoredAgentMaterializationErrorCode, type AuthoredAgentSourceV1, AuthorizedAgentScope, AuthorizedEnvironmentIntent, type AuthorizedSessionRunDetails, BuiltinRuntimeModeId, CompiledAgentHostAgentSpec, ConfiguredAgentHostAgentSpec, CreateAgentHostOptions, type CreateConfiguredAgentHostAgentSpecInput, type CreateStandaloneAgentHostAppOptions, type CreateValidatingAgentFleetCompilerOptions, CreatedAgentHost, type CredentialStoreBackendV1, DEFAULT_PI_RESOURCE_DIGEST_LIMITS, DEFAULT_READONLY_WORKSPACE_PATHS, type DeploymentSnapshotProvider, type DeploymentSnapshotRecipe, type DeploymentSnapshotResult, type DeploymentSnapshotStatus, type DiscoveredAgentPackageDescriptor, EmbeddedAgentGateway, type FakeAuthorityVerifierGrantV1, FleetConfigError, type FleetConfigErrorCode, type FleetLoaderDiagnostic, type FleetLoaderDiagnosticCode, type FleetSeatBinding, type FleetSkillBinding, type HostSideCredentialResolverOptionsV1, InMemoryAgentRequestLedger, type InMemoryCredentialBackendEntryV1, LEGACY_DEFAULT_AGENT_FLEET, type LoadConfiguredAgentFleetOptions, type LoadConfiguredAgentFleetResult, MANAGED_AGENT_MCP_DELIVERY_RULE, MANAGED_AGENT_MCP_ORIGIN_SURFACE, type ManagedAgentArtifact, type ManagedAgentArtifactCandidate, type ManagedAgentArtifactRef, type ManagedAgentBoundRunnerWorkspace, type ManagedAgentCollectArtifactsInput, type ManagedAgentDelegateInput, type ManagedAgentDelegateProgress, type ManagedAgentDelegateRequestContext, type ManagedAgentDelegateResult, type ManagedAgentDelegateRunInput, type ManagedAgentDelegateRunner, type ManagedAgentDelegateStatus, type ManagedAgentDelegateStatusResult, ManagedAgentMcpDelegateController, type ManagedAgentMcpDelegateOptions, ManagedAgentMcpError, type ManagedAgentMcpHttpHandlerOptions, type ManagedAgentMcpServerOptions, type ManagedAgentSafeError, type ManagedAgentWorkspaceResolutionInput, type MaterializeAgentDirectoryInput, MeteringErrorLogger, ModeContext, type ModelTierCandidate, PiHarnessOptions, PiPackageSource, type PiResourceDigestInput, type PiResourceDigestLimits, type PiResourceSet, type ProvisionRuntimeWorkspaceOptions, ProvisionWorkspaceRuntimeOptions, type ProvisioningArtifactRequest, RUNTIME_FILESYSTEM_BINDING_DUPLICATE_CODE, RUNTIME_READONLY_FILESYSTEM_POLICY_INVALID_CODE, RemoteWorkerClient, RemoteWorkerClientError, type RemoteWorkerClientOptions, RemoteWorkerExecRequest, type RemoteWorkerModeAdapterOptions, RemoteWorkerWorkspaceOp, RemoteWorkerWorkspaceResult, type ResolveDefaultAgentFleetOptions, type ResolvedAgent, type ResolvedAgentDigestInput, ResolvedAgentRuntimeScope, type ResolvedInstructionFileRefs, RuntimeBundle, type RuntimeEnvContribution, type RuntimeEnvContributionContext, RuntimeFilesystemAccessDecision, RuntimeFilesystemBinding, RuntimeFilesystemBindingConfigurationError, RuntimeModeAdapter, RuntimeModeId, type RuntimeReadonlyFilesystemPolicy, RuntimeReadonlyFilesystemPolicyError, type RuntimeWorkspaceProvisioningResult, type SandboxRuntimeModeOptions, type ShareEntryMcpResourceOptions, type SkillMetadataFrontmatter, SqliteAgentRequestLedger, TrustedAgentCompositionError, type TrustedAgentInstructionAppendix, type TrustedAuthoredAgentPolicy, UV_SETUP_COMMANDS, VerifiedAgentScopeClaim, type WithheldInstructionRef, type WorkspaceAgentDispatcherBinding, type WorkspaceAgentDispatcherResolveOptions, type WorkspaceAgentDispatcherResolver, WorkspaceProvisioningAdapter, WorkspaceProvisioningResult, applyCspHeaders, autoDetectMode, buildDeploymentSnapshotRecipe, compileAgentDirectory, compilePersonaPackageDirectory, constantTimeTokenEqual, createAgentHost, createBlaxelSandboxModeAdapter, createBoundWorkspaceAgentDispatcher, createConfiguredAgentHostAgentSpec, createDirectModeAdapter, createEnvironmentProvisioningFingerprint, createFakeAuthorityVerifierV1, createHostSideCredentialResolverV1, createInMemoryCredentialBackendV1, createLocalModeAdapter, createManagedAgentMcpDelegateController, createManagedAgentMcpHttpHandler, createManagedAgentMcpServer, createPiResourceDigestFence, createPiResourceDigestInput, createPluginDiagnosticsTool, createProviderRuntimeModeAdapter, createRemoteWorkerModeAdapter, createRemoteWorkerSandbox, createRemoteWorkerWorkspace, createResolvedAgentDigest, createResolvedRuntimeScopeIdentity, createResourceSettingsManager, createSandboxRuntimeModeAdapter, createStandaloneAgentHostApp, createUserFilesystemBinding, createValidatingAgentFleetCompiler, createVercelSandboxModeAdapter, decodeBytesFromWorker, deepLinkRoutes, digestPiResourceInputs, encodeBytesForWorker, hasBwrap, loadConfiguredAgentFleet, materializeAgentDirectory, mergeRuntimeFilesystemBindings, normalizeRuntimeReadonlyFilesystemPolicy, parseSkillMetadataFrontmatter, prepareDeploymentSnapshot, projectAuthorizedSessionRunDetails, provisionRuntimeWorkspace, provisionWorkspaceRuntime, registerAgentHostEnvironmentRoutes, registerShareEntryResources, resolveAgentDeployment, resolveAgentInstructionFileRefs, resolveBuiltinRuntimeLayoutRoot, resolveDefaultAgentFleet, resolveMode, resolveRuntimeReadonlyFilesystemAccess, resolveWorkspaceRoot, sandboxRuntimeHostOperations, shareResourceUri, withResolvedCredential, withRuntimeEnvContributions };

package/dist/server/index.js

@@ -80,6 +80,7 @@ import {
   registerAgentHostEnvironmentRoutes,
   registerShareEntryResources,
   resolveAgentDeployment,
+  resolveAgentInstructionFileRefs,
   resolveBuiltinRuntimeLayoutRoot,
   resolveDefaultAgentFleet,
   resolveMode,
@@ -89,14 +90,14 @@ import {
   shareResourceUri,
   withResolvedCredential,
   withRuntimeEnvContributions
-} from "../chunk-BTYOMR7W.js";
+} from "../chunk-LFN45QDZ.js";
 import {
   PI_PACKAGE_RESOURCE_FILTERS,
   compactPiPackages,
   createResourceSettingsManager,
   mergePiPackageSources,
   piPackageSourceKey
-} from "../chunk-I7KFNGB4.js";
+} from "../chunk-F2OJI2LX.js";
 import "../chunk-JNEKOVMJ.js";
 import "../chunk-4IQ4HHBG.js";
 import "../chunk-WSQ5QNIY.js";
@@ -190,6 +191,7 @@ export {
   registerAgentHostEnvironmentRoutes,
   registerShareEntryResources,
   resolveAgentDeployment,
+  resolveAgentInstructionFileRefs,
   resolveBuiltinRuntimeLayoutRoot,
   resolveDefaultAgentFleet,
   resolveMode,

package/dist/server/worker/index.js

@@ -2,8 +2,8 @@ import {
   REMOTE_WORKER_EXCLUSIVE_BINARY_CREATE_CAPABILITY,
   WORKER_INTERNAL_TOKEN_HEADER,
   constantTimeTokenEqual
-} from "../../chunk-BTYOMR7W.js";
-import "../../chunk-I7KFNGB4.js";
+} from "../../chunk-LFN45QDZ.js";
+import "../../chunk-F2OJI2LX.js";
 import "../../chunk-JNEKOVMJ.js";
 import "../../chunk-4IQ4HHBG.js";
 import "../../chunk-WSQ5QNIY.js";

package/dist/{types-B1xDlBSo.d.ts → types-BTsdaAQ2.d.ts}

@@ -86,11 +86,11 @@ interface ModelsRoutesOptions {
  *                     (fail closed) so hosts can enforce hard stops.
  *   recordUsage       once per native assistant message carrying usage.
  *                     `usageId` is a stable idempotency key.
- *   settleRun         when the run reaches a native terminal state and usage
- *                     was recorded (or it finished ok).
- *   releaseRun        when the run never produced billable usage: rejected
- *                     execution, cleared queue, cancel/abort, or error before
- *                     any usage arrived.
+ *   settleRun         when the run reaches a native terminal state and billable
+ *                     usage or an authoritative all-zero usage row was recorded.
+ *   releaseRun        when the run does not settle: rejected execution, cleared
+ *                     queue, cancel/abort, error before usage, or a fail-closed
+ *                     fallback charge.
  *
  * Every run terminates with exactly one settle or release from the
  * coordinator; sinks should still treat all four methods as idempotent
@@ -102,8 +102,8 @@ interface AgentMeteringSink {
     reserveRun(input: MeteringReserveInput): Promise<MeteringReservationResult>;
     /** Records the usage and returns the credit micros it was actually billed. The
      * coordinator counts a usage as billable from this charged amount (not raw provider
-     * fields), so a row that prices to 0 (e.g. cost-only usage when provider cost isn't
-     * trusted) doesn't make a free run settle. */
+     * fields). A complete, internally consistent all-zero report settles at zero;
+     * potentially billable usage priced to 0 retains fail-closed fallback. */
     recordUsage(input: MeteringUsageInput): Promise<MeteringUsageResult>;
     settleRun(input: MeteringSettleInput): Promise<void>;
     releaseRun(input: MeteringReleaseInput): Promise<void>;
@@ -754,6 +754,21 @@ interface AgentInstructionFileRef {
     readonly path: string;
     readonly role: 'persona';
 }
+/**
+ * An authored instruction file as the fleet composer knows it: a canonical
+ * HOST absolute path, not yet addressed against any workspace.
+ *
+ * The two shapes are deliberately distinct. A multi-workspace host (the CLI
+ * hub, core) serves a DIFFERENT root per request, so composition cannot know
+ * which root a ref should be relative to; only the request can. The spec
+ * therefore carries sources, and `describe` publishes the subset that is
+ * reachable through the root actually being served (gh-1189).
+ */
+interface AgentInstructionSource {
+    /** Canonical absolute path on the host filesystem. */
+    readonly absolutePath: string;
+    readonly role: 'persona';
+}
 interface ConfiguredAgentHostAgentSpec {
     readonly agentTypeId: string;
     readonly definition: {
@@ -775,8 +790,12 @@ interface ConfiguredAgentHostAgentSpec {
         /** Host path of the package's `knowledge/` folder. */
         readonly rootDir: string;
     };
-    /** Authored instruction sources behind `definition.instructions`. */
-    readonly instructionFiles?: readonly AgentInstructionFileRef[];
+    /**
+     * Authored instruction sources behind `definition.instructions`, as host
+     * absolute paths. Addressed against a served workspace root per request by
+     * `describe`, never at composition time.
+     */
+    readonly instructionSources?: readonly AgentInstructionSource[];
     readonly plugins?: readonly {
         /** Canonical app-preflighted plugin ID. */
         readonly name: string;
@@ -986,4 +1005,4 @@ interface CreatedAgentHost {
     runWithWorkspaceAgent(input: AgentHostDispatcherRunInput, run: (binding: LeaseBoundWorkspaceAgent) => Promise<void>): Promise<void>;
 }
 
-export { type PiExtensionFactory as $, type AgentGatewayEffect as A, type BuiltinRuntimeModeId as B, type ConfiguredAgentHostAgentSpec as C, type AgentFleetCompiler as D, type AgentRequestTarget as E, type RuntimeFilesystemAccessDecision as F, type AgentHostDescription as G, type AgentHostDirectProjectionOptions as H, type AgentHostDispatcherRunInput as I, type AgentHostEnvironmentLease as J, type AgentHostHandle as K, type LegacyDefaultAgentHostSpec as L, type ModeContext as M, type MeteringReleaseInput as N, type MeteringReleaseReason as O, type ProvisionWorkspaceRuntimeOptions as P, type MeteringReservationResult as Q, type RuntimeModeAdapter as R, type MeteringReserveInput as S, type MeteringRunKind as T, type MeteringRunScope as U, type MeteringRunStatus as V, type WorkspaceProvisioningResult as W, type MeteringSettleInput as X, type MeteringUsage as Y, type MeteringUsageInput as Z, PI_PACKAGE_RESOURCE_FILTERS as _, type PiPackageSource as a, type PluginSkillSource as a0, type ResolvedEnvironmentScope as a1, type RuntimeFilesystemBindingOperations as a2, type RuntimeNodePackageSpec as a3, type RuntimeProvisioningContribution as a4, type RuntimePythonSpec as a5, type RuntimeTemplateContribution as a6, type WorkspaceProvisioningExecResult as a7, compactPiPackages as a8, mergePiPackageSources as a9, normalizeMeteringUsage as aa, piPackageSourceKey as ab, type RuntimeModeId as b, type AgentRuntimeHostOperations as c, type RuntimeBashStrategy as d, type RuntimeFilesystemStrategy as e, type WorkspaceProvisioningAdapter as f, type AgentInstructionFileRef as g, type AgentHostAgentSpec as h, type RuntimeBundle as i, type PiHarnessOptions as j, type AgentMeteringSink as k, type RuntimeFilesystemBinding as l, type CreatedAgentHost as m, type MeteringErrorLogger as n, ReadyStatusTracker as o, type CreateAgentHostOptions as p, type CompiledAgentHostAgentSpec as q, type AgentRequestLedger as r, type AgentEffectAdmission as s, type AuthorizedEnvironmentIntent as t, type AgentHostEnvironmentScope as u, type ResolvedAgentRuntimeScope as v, type AgentRequestKey as w, type AgentRequestLedgerPrepareResult as x, type AgentRequestFailure as y, type AgentRequestLedgerRecord as z };
+export { PI_PACKAGE_RESOURCE_FILTERS as $, type AgentGatewayEffect as A, type BuiltinRuntimeModeId as B, type ConfiguredAgentHostAgentSpec as C, type AgentRequestLedgerRecord as D, type AgentFleetCompiler as E, type AgentRequestTarget as F, type RuntimeFilesystemAccessDecision as G, type AgentHostDescription as H, type AgentHostDirectProjectionOptions as I, type AgentHostDispatcherRunInput as J, type AgentHostEnvironmentLease as K, type AgentHostHandle as L, type ModeContext as M, type LegacyDefaultAgentHostSpec as N, type MeteringReleaseInput as O, type ProvisionWorkspaceRuntimeOptions as P, type MeteringReleaseReason as Q, type RuntimeModeAdapter as R, type MeteringReservationResult as S, type MeteringReserveInput as T, type MeteringRunKind as U, type MeteringRunScope as V, type WorkspaceProvisioningResult as W, type MeteringRunStatus as X, type MeteringSettleInput as Y, type MeteringUsage as Z, type MeteringUsageInput as _, type PiPackageSource as a, type PiExtensionFactory as a0, type PluginSkillSource as a1, type ResolvedEnvironmentScope as a2, type RuntimeFilesystemBindingOperations as a3, type RuntimeNodePackageSpec as a4, type RuntimeProvisioningContribution as a5, type RuntimePythonSpec as a6, type RuntimeTemplateContribution as a7, type WorkspaceProvisioningExecResult as a8, compactPiPackages as a9, mergePiPackageSources as aa, normalizeMeteringUsage as ab, piPackageSourceKey as ac, type RuntimeModeId as b, type AgentRuntimeHostOperations as c, type RuntimeBashStrategy as d, type RuntimeFilesystemStrategy as e, type WorkspaceProvisioningAdapter as f, type AgentInstructionSource as g, type AgentInstructionFileRef as h, type AgentHostAgentSpec as i, type RuntimeBundle as j, type PiHarnessOptions as k, type AgentMeteringSink as l, type RuntimeFilesystemBinding as m, type CreatedAgentHost as n, type MeteringErrorLogger as o, ReadyStatusTracker as p, type CreateAgentHostOptions as q, type CompiledAgentHostAgentSpec as r, type AgentRequestLedger as s, type AgentEffectAdmission as t, type AuthorizedEnvironmentIntent as u, type AgentHostEnvironmentScope as v, type ResolvedAgentRuntimeScope as w, type AgentRequestKey as x, type AgentRequestLedgerPrepareResult as y, type AgentRequestFailure as z };

package/docs/ERROR_CODES.md

@@ -45,7 +45,7 @@ All API failures must use the response envelope:
 | `AGENT_FLEET_MODEL_POLICY_UNCOMPILED` | Agent fleet configuration declares a model policy that the app fleet compiler did not resolve | 500 | configure app fleet compiler | error | stable (trusted API) |
 | `AGENT_FLEET_SEAT_PERSONA_INVALID` | `loadConfiguredAgentFleet` excluded a fleet.yaml seat because its persona package failed to materialize or compose | 500 | fix persona package/spec | error | stable (trusted API) |
 | `AGENT_FLEET_SEAT_SKILL_DIGEST_MISMATCH` | `loadConfiguredAgentFleet` excluded a fleet.yaml seat because a pinned skill's canonical content was unavailable or its digest drifted | 500 | run `pnpm write:skill-digests` or fix the skill file | error | stable (trusted API) |
-| `AGENT_FLEET_SEAT_INSTRUCTIONS_PATH_UNPUBLISHABLE` | `loadConfiguredAgentFleet` composed a fleet.yaml seat but withheld the link to its persona `instructions.md`. Usually because the host serves a workspace root that does not contain the personas tree (multi-workspace hosts resolve a root per request and pass `workspaceRoot: null`); rarely because the seat name is not a safe path segment | 500 | expected on multi-workspace hosts — the seat runs normally, only the Agent-details instruction link is withheld. On a single-root host, check that `workspaceRoot` is the root the `user` filesystem serves and contains `personasDir`. If the message names the seat, rename it to `[A-Za-z0-9][A-Za-z0-9._-]*` | warn | stable (trusted API) |
+| `AGENT_FLEET_SEAT_INSTRUCTIONS_PATH_UNPUBLISHABLE` | `GET /api/v1/agents/:agentTypeId/describe` withheld the link to a seat's persona `instructions.md` for THIS request. Usually because the workspace root serving the request does not contain the personas tree (the fleet is composed from a repository root while the request is served from somewhere else); also when the persona canonically resolves outside that root through a symlink, when the source no longer exists, or when the seat name is not a safe path segment. NOT an HTTP error: the describe call still returns 200 — the code is only logged as a warning while that link is omitted from the response | 200 (log-only) | expected whenever a request is served from a workspace the personas are outside of — the seat runs normally, only the Agent-details instruction link is withheld. Serve the request from a workspace that contains the personas tree to get the link. If the message names an unsafe composed path, rename the seat directory to `[A-Za-z0-9][A-Za-z0-9._-]*` | warn | stable (trusted API) |
 | `AGENT_FLEET_CONFIG_FILE_INVALID` | `loadConfiguredAgentFleet`'s fleet.yaml could not be read, parsed, or validated (whole-fleet failure, not per-seat) | 500 | fix `.agents/factory/fleet.yaml` | error | stable (trusted API) |
 | `AGENT_DEFINITION_ID_CONFLICT` | Multiple discovered plugin packages claim the same agent definition id, so every claimant is excluded | 500 | remove or rename conflicting definitions | error | stable (trusted API) |
 | `AGENT_DEFINITION_UNSEATED` | A discovered agent package is not named by the fleet roster and remains inert | 200 | seat it in class-B fleet config if activation is intended | info | stable (trusted API) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-agent",
-  "version": "0.1.104",
+  "version": "0.1.105",
   "type": "module",
   "license": "MIT",
   "description": "Pane-embeddable coding agent. Ships direct/local/vercel-sandbox execution modes behind one interface.",
@@ -85,12 +85,12 @@
     "@streamdown/math": "^1.0.2",
     "@streamdown/mermaid": "^1.0.2",
     "@tanstack/react-query": "^5.101.4",
-    "ai": "^7.0.62",
+    "ai": "^7.0.65",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
     "diff": "^9.0.0",
-    "fastify": "^5.11.3",
+    "fastify": "^5.12.0",
     "lucide-react": "^1.31.0",
     "motion": "^13.1.0",
     "nanoid": "^6.0.0",
@@ -100,9 +100,9 @@
     "use-stick-to-bottom": "^1.1.6",
     "yaml": "^2.9.0",
     "zod": "^3.25.76",
-    "@hachej/boring-bash": "0.1.104",
-    "@hachej/boring-sandbox": "0.1.104",
-    "@hachej/boring-ui-kit": "0.1.104"
+    "@hachej/boring-bash": "0.1.105",
+    "@hachej/boring-sandbox": "0.1.105",
+    "@hachej/boring-ui-kit": "0.1.105"
   },
   "devDependencies": {
     "@vercel/sandbox": "3.0.0",