@hachej/boring-agent 0.1.109 → 0.1.110

package/docs/AGENT_PACKAGES.md

@@ -37,7 +37,10 @@ seats:
 ```
 
 Restart a single-workspace host with `BORING_AGENT_FLEET=1`. A valid seated
-package appears in the agent catalog. An installed package without a matching
+package appears in the agent catalog with its exact declared
+`boring.agent.version` and computed definition digest. The Host `describe()`
+inventory exposes the same values as `definitionVersion` and
+`definitionDigest`. An installed package without a matching
 seat remains inert and reports `AGENT_DEFINITION_UNSEATED` during fleet
 composition. The shared CLI workspaces hub never admits the local agent
 contribution, even when the global roster names its definition id.
@@ -52,8 +55,13 @@ contribution, even when the global roster names its definition id.
 Digest refresh is intentionally repository-local in v1. The script reads only
 `.agents/personas/`; it does not rewrite pins for agent packages installed from
 another local directory. Such packages must already have matching
-seat-authoritative skill pins. A mismatch excludes only that seat with
-`AGENT_FLEET_SEAT_SKILL_DIGEST_MISMATCH`; the rest of the fleet still boots.
+seat-authoritative skill pins. A package with a schema, preflight, conflict,
+materialization, or digest mismatch is excluded with its stable diagnostic (for
+example `AGENT_FLEET_SEAT_SKILL_DIGEST_MISMATCH`) while valid sibling seats
+continue to boot. Invalid unseated discovery is likewise excluded because it
+has no activation authority. A missing fleet file means no authored roster and
+boots only the regular default Agent; a present but malformed fleet or policy
+file remains a whole-fleet configuration error.
 
 ## Unseat or remove
 
@@ -66,8 +74,10 @@ To remove its workspace registration as well:
 boring-ui-plugin remove --local --workspace . my-agent-plugin-id
 ```
 
-Then restart. If the roster still names the removed definition, that seat is
-excluded with `AGENT_FLEET_SEAT_PERSONA_INVALID` while other agents boot.
+Then restart. Remove the roster seat before removing its registration. If the
+roster still names the removed definition, that Agent is excluded with
+`AGENT_FLEET_SEAT_PERSONA_INVALID` while the default and valid sibling seats
+continue to boot.
 
 ## v1 distribution boundary
 

package/docs/ERROR_CODES.md

@@ -147,6 +147,15 @@ All API failures must use the response envelope:
 | `RUNTIME_READONLY_FILESYSTEM_POLICY_INVALID` | A readonly primary-workspace path is not a normalized workspace-relative path | 400 | user-fix | warn | stable (public API) |
 | `EVENT_STORE_OPEN_FAILED` | `BORING_CHAT_DURABLE_STREAM=1` but the SQLite event-stream store could not be opened: either no host-resolvable root exists (no `sessionRoot` and no host storage root — this deliberately never falls back to an in-sandbox/guest path) or `openDatabase` failed at the resolved path (bad path/permissions); reported via telemetry alongside `DURABLE_STREAM_UNAVAILABLE` | n/a (boot-time diagnostic, not an HTTP response) | report-bug | error | stable (public API) |
 | `DURABLE_STREAM_UNAVAILABLE` | `BORING_CHAT_DURABLE_STREAM=1` but the durable event-stream store could not be opened; boot fails loudly with the underlying cause instead of silently falling back to in-memory streaming (flag off = in-memory, unchanged) | n/a (boot-time failure, not an HTTP response) | user-fix | error | stable (public API) |
+| `CHANNEL_DURABLE_STREAM_REQUIRED` | `BORING_AGENT_CHANNELS=1` was set without durable chat streaming; boot fails rather than accepting channel traffic that cannot resume | n/a (boot-time failure) | user-fix | error | stable (public API) |
+| `CHANNEL_INBOUND_ACCEPTED` | The provider message was durably deduplicated/enqueued and asynchronous channel processing may begin | 200 | none | info | stable (public API) |
+| `CHANNEL_UNKNOWN_BINDING` | Channel inbound did not match an active provisioned binding; no session or identity was created | 200 | user-fix | warn | stable (public API) |
+| `CHANNEL_INBOUND_PARKED` | Channel inbound exhausted bounded delivery retries and was parked so later messages are not wedged | n/a (worker diagnostic) | retry | warn | stable (public API) |
+| `CHANNEL_OUTBOUND_PARKED` | A completed channel turn exhausted bounded send retries and was parked so later turns are not wedged | n/a (worker diagnostic) | retry | warn | stable (public API) |
+| `CHANNEL_TURN_STALLED` | A channel turn did not reach a terminal event before its configured deadline; a notice was sent and the observed range was parked | n/a (worker diagnostic) | retry | warn | stable (public API) |
+| `CHANNEL_BINDING_BUSY` | Provisioning could not replace a binding while its current generation held a live outbound-delivery lease | n/a (admin operation) | retry | warn | stable (public API) |
+| `CHANNEL_BINDING_REVOKED` | A channel binding was revoked while queued work was being resolved | n/a (worker diagnostic) | user-fix | warn | stable (public API) |
+| `SESSION_CREATE_TIMEOUT` | The owner-token channel session reservation did not reach ready state within bounded reservation cycles | n/a (worker diagnostic) | retry | warn | stable (public API) |
 | `ERR_NOT_IMPLEMENTED_UNTIL_T1` | Headless core method exists but the durable T1 implementation has not landed yet | 501 | retry-after-upgrade | warn | stable (public API) |
 | `INTERNAL_ERROR` | Catch-all internal failure | 500 | report-bug | error | internal (may change) |
 | `AR1_SHARE_NOT_FOUND` | `GET /a/:id` deep link: no such Lane W share entry, or the entry belongs to a workspace the requester is not authorized/scoped to (identical response either way — no existence oracle) | 404 | user-fix | warn | stable (public API) |
@@ -177,6 +186,11 @@ credential value, a workspace DEK, or KEK material.
 | `CREDENTIAL_LEASE_EXPIRED` | A resolved credential lease was used after disposal or expiry | 410 | resolve a fresh lease | warn | stable (trusted API) |
 | `CREDENTIAL_OAUTH_STATE_INVALID` | A one-use OAuth state transaction was unknown, replayed, or expired | 400 | restart the connect flow | warn | stable (trusted API) |
 | `CREDENTIAL_OAUTH_REFRESH_FAILED` | Upstream refused a refresh-token exchange | 401 | re-auth | warn | stable (trusted API) |
+| `CREDENTIAL_VALIDATION_UNAUTHORIZED` | Provider rejected a pending API key before persistence | 401 | correct the key and retry | warn | stable (trusted API) |
+| `CREDENTIAL_VALIDATION_RATE_LIMITED` | Provider rate-limited pending API-key validation | 429 | retry later | warn | stable (trusted API) |
+| `CREDENTIAL_VALIDATION_UNAVAILABLE` | Provider validation transport was unavailable | 503 | retry later | warn | stable (trusted API) |
+| `CREDENTIAL_VALIDATION_TIMEOUT` | Provider validation exceeded the bounded timeout | 504 | retry later | warn | stable (trusted API) |
+| `CREDENTIAL_VALIDATION_UNSUPPORTED` | Provider lacks a trusted API-key validation probe | 400 | use a supported provider/auth method | warn | stable (trusted API) |
 
 ## Readiness error details
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-agent",
-  "version": "0.1.109",
+  "version": "0.1.110",
   "type": "module",
   "license": "MIT",
   "description": "Pane-embeddable coding agent. Ships direct/local/vercel-sandbox execution modes behind one interface.",
@@ -71,47 +71,39 @@
   "dependencies": {
     "@mariozechner/pi-coding-agent": "npm:@earendil-works/pi-coding-agent@0.84.3",
     "@modelcontextprotocol/sdk": "1.30.0",
-    "@radix-ui/react-collapsible": "^1.1.20",
-    "@radix-ui/react-dialog": "^1.1.23",
-    "@radix-ui/react-dropdown-menu": "^2.1.24",
-    "@radix-ui/react-hover-card": "^1.1.23",
-    "@radix-ui/react-select": "^2.3.7",
-    "@radix-ui/react-separator": "^1.1.15",
-    "@radix-ui/react-slot": "^1.3.3",
-    "@radix-ui/react-tooltip": "^1.2.16",
     "@radix-ui/react-use-controllable-state": "^1.2.6",
     "@streamdown/cjk": "^1.0.3",
     "@streamdown/code": "^1.1.1",
     "@streamdown/math": "^1.0.2",
     "@streamdown/mermaid": "^1.0.2",
-    "@tanstack/react-query": "^5.101.4",
     "ai": "^7.0.68",
-    "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "cmdk": "^1.1.1",
     "diff": "^9.0.0",
     "fastify": "^5.12.1",
     "lucide-react": "^1.31.0",
     "motion": "^13.1.0",
     "nanoid": "^6.0.0",
+    "postgres": "^3.4.9",
+    "proper-lockfile": "^4.1.2",
     "shiki": "^4.4.2",
     "streamdown": "^2.5.0",
     "tailwind-merge": "^3.5.0",
     "use-stick-to-bottom": "^1.1.6",
     "yaml": "^2.9.0",
     "zod": "^3.25.76",
-    "@hachej/boring-bash": "0.1.109",
-    "@hachej/boring-ui-kit": "0.1.109",
-    "@hachej/boring-sandbox": "0.1.109"
+    "@hachej/boring-sandbox": "0.1.110",
+    "@hachej/boring-ui-kit": "0.1.110",
+    "@hachej/boring-bash": "0.1.110"
   },
   "devDependencies": {
     "@vercel/sandbox": "3.0.0",
-    "@antithesishq/bombadil": "0.7.0",
+    "@antithesishq/bombadil": "0.7.2",
     "@opentelemetry/api": "^1.9.1",
     "@tailwindcss/postcss": "^4.3.3",
     "@types/node": "^22.20.0",
+    "@types/proper-lockfile": "^4.1.4",
     "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
+    "@types/react-dom": "^19.2.5",
     "@vitejs/plugin-react": "^4.7.0",
     "ajv": "^8.20.0",
     "esbuild": "^0.28.2",
@@ -119,7 +111,7 @@
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
     "tsup": "^8.4.0",
-    "tsx": "^4.23.6",
+    "tsx": "^4.23.13",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",
     "@earendil-works/pi-ai": "0.84.3",

package/dist/file-search-BGUHnW9o.d.ts

@@ -1,87 +0,0 @@
-import { k as InterruptReceipt, j as StopReceipt } from './piChatEvent-BUWIzw5l.js';
-import { p as AgentSendInput, j as AgentEvent } from './harness-Ct0e4RWc.js';
-import { b as Workspace } from './sandbox-BMhut3kh.js';
-import { b as AgentSessionRef, d as AgentSendReceipt, A as AgentGateway, a as AuthorizedAgentScope } from './errors-CEU4iujR.js';
-
-interface WorkspaceAgentDispatcherContext {
-    workspaceId: string;
-    userId: string;
-}
-type WorkspaceAgentDispatcherSendInput = Omit<AgentSendInput, 'ctx'>;
-interface WorkspaceAgentDispatcherDispatchInput extends WorkspaceAgentDispatcherSendInput {
-    /** Optional user-visible presentation when content carries hidden instructions. */
-    displayMessage?: string;
-    /** Optional title for a newly created addressed session. */
-    title?: string;
-    /** Durable caller-owned idempotency key. */
-    requestId: string;
-    /** Defaults to requestId. */
-    clientNonce?: string;
-    /** Defaults to prompt; follow-up requires a non-negative clientSeq. */
-    kind?: 'prompt' | 'followup';
-    clientSeq?: number;
-}
-interface WorkspaceAgentDispatch {
-    ref: AgentSessionRef;
-    receipt: AgentSendReceipt;
-    events: AsyncIterable<AgentEvent>;
-}
-/**
- * Callback-scoped direct Agent capability. The Workspace and operations are
- * lease guarded by the Host and must not be retained after the callback.
- */
-interface LeaseBoundWorkspaceAgent {
-    readonly workspace: Workspace;
-    readonly signal: AbortSignal;
-    dispatch(input: WorkspaceAgentDispatcherDispatchInput, onEvent: (event: AgentEvent) => void | Promise<void>, onAccepted?: (accepted: {
-        readonly ref: AgentSessionRef;
-        readonly receipt: AgentSendReceipt;
-    }) => void | Promise<void>): Promise<{
-        readonly ref: AgentSessionRef;
-        readonly receipt: AgentSendReceipt;
-    }>;
-    interrupt(sessionId: string, requestId: string): Promise<InterruptReceipt>;
-    stop(sessionId: string, requestId: string): Promise<StopReceipt>;
-}
-interface WorkspaceAgentDirectRunInput {
-    readonly agentTypeId: string;
-    readonly context: WorkspaceAgentDispatcherContext;
-    readonly requestId: string;
-}
-type WorkspaceAgentDirectRunCallback = (binding: LeaseBoundWorkspaceAgent) => Promise<void>;
-/** Addressed gateway binding minted by the trusted composition root. */
-interface WorkspaceAgentGatewayBinding {
-    gateway: AgentGateway;
-    scope: AuthorizedAgentScope;
-    agentTypeId: string;
-}
-/**
- * Compatibility-facing delegation surface. New durable callers use dispatch so
- * the addressed ref and accepted Gateway receipt can be persisted before they
- * consume events. send remains for callers that only need the legacy stream.
- */
-interface WorkspaceAgentDispatcher {
-    /** Optional only for source compatibility with pre-Gateway injected resolvers. */
-    dispatch?(input: WorkspaceAgentDispatcherDispatchInput): Promise<WorkspaceAgentDispatch>;
-    send(input: WorkspaceAgentDispatcherSendInput): AsyncIterable<AgentEvent>;
-    interrupt(sessionId: string): Promise<InterruptReceipt>;
-    stop(sessionId: string): Promise<StopReceipt>;
-}
-
-declare const AGENT_RESOURCES_FILESYSTEM_ID: "agent_resources";
-/**
- * Agent-scoped readonly filesystem carrying the knowledge/ folder shipped
- * inside an agent definition package (gh-1107 slice 2). Generic id only —
- * never tenant-named. The binding exists only for the owning agent.
- */
-declare const AGENT_KNOWLEDGE_FILESYSTEM_ID: "agent_knowledge";
-interface AgentSkillResource {
-    readonly filesystem: 'user' | typeof AGENT_RESOURCES_FILESYSTEM_ID | (string & {});
-    readonly path: string;
-}
-
-interface FileSearch {
-    search(glob: string, limit?: number): Promise<string[]>;
-}
-
-export { AGENT_KNOWLEDGE_FILESYSTEM_ID as A, type FileSearch as F, type LeaseBoundWorkspaceAgent as L, type WorkspaceAgentDirectRunCallback as W, AGENT_RESOURCES_FILESYSTEM_ID as a, type AgentSkillResource as b, type WorkspaceAgentDirectRunInput as c, type WorkspaceAgentDispatch as d, type WorkspaceAgentDispatcher as e, type WorkspaceAgentDispatcherContext as f, type WorkspaceAgentDispatcherDispatchInput as g, type WorkspaceAgentDispatcherSendInput as h, type WorkspaceAgentGatewayBinding as i };