@intentius/chant-lexicon-fountain 0.91.0 → 0.94.0

package/dist/acp/serve.d.ts

@@ -11,5 +11,6 @@
 /** Serve until the client closes stdin, which is how it says the connection is over. */
 export declare function serveAcpOverStdio(opts?: {
     durableRequests?: boolean;
+    steward?: string;
 }): Promise<void>;
 //# sourceMappingURL=serve.d.ts.map

package/dist/acp/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/acp/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,wFAAwF;AACxF,wBAAsB,iBAAiB,CAAC,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB/F"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/acp/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,wFAAwF;AACxF,wBAAsB,iBAAiB,CAAC,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BjH"}

package/dist/composites/box.d.ts

@@ -16,6 +16,7 @@
  *   name: "studio-box",
  *   repo: { url: "https://github.com/arugula-salad/studio", ref: "main" },
  *   setupScript: readFileSync("box/provision-template.sh", "utf8"),
+ *   model: "anthropic/claude-sonnet-4-5",
  *   permissionPolicy: { default: "auto_allow" },
  *   allowedHosts: ["registry.npmjs.org", "github.com"],
  *   vault: { secrets: [{ key: "STUDIO_SECRET", value: "${STUDIO_SECRET}" }] },
@@ -55,6 +56,21 @@
  * workspace check` fails a box member whose files hold one
  * (`box-credential-declared`).
  *
+ * One credential reaches the box anyway (#2780). fountain v0.21.0 gives every
+ * sandbox a callback token, `FOUNTAIN_TOKEN`, in the environment of each exec
+ * it makes into it (the setup script's included), scoped to the owner
+ * (`sandbox_api_access: owner`). Its opt-out, `sandbox_api_access: none`, is
+ * refused for a persistent sandbox, and a box is always persistent, so no
+ * option here can turn it off (managoat/fountain#2497). The composite records
+ * it instead: the Agent's metadata carries `box-sandbox-api-access: owner`
+ * (`BOX_SANDBOX_API_ACCESS_METADATA_KEY`), and the member's `box` block is
+ * expected to declare the capability that stands for it,
+ * `BOX_FOUNTAIN_CALLBACK_CAPABILITY`: `fountain-callback`, brokered by fountain
+ * itself, with scope `owner`. It is named apart from a `fountain` capability a
+ * lobby brokers, which a box may declare as well. `chant workspace check`
+ * reports a box member that builds a `Box` and does not declare it
+ * (`box-fountain-callback-undeclared`).
+ *
  * ## The port
  *
  * fountain's `Environment` and `Agent` have no field for a served port (the
@@ -82,6 +98,27 @@ import { Agent, Environment, Vault } from "../generated/index.js";
 export declare const BOX_PORT_METADATA_KEY = "box-port";
 /** The metadata key a box agent's resolved allowed vaults (or `"any"`) are recorded under, for the read contract. */
 export declare const BOX_ALLOWED_VAULTS_METADATA_KEY = "box-allowed-vault-ids";
+/**
+ * The metadata key a box agent's sandbox callback access is recorded under
+ * (#2780): `owner`, the scope of the `FOUNTAIN_TOKEN` fountain v0.21.0 gives
+ * every persistent sandbox.
+ */
+export declare const BOX_SANDBOX_API_ACCESS_METADATA_KEY = "box-sandbox-api-access";
+/**
+ * The sandbox callback access a box has on the pinned spec: `owner`. fountain
+ * v0.21.0 accepts `none` only for a fresh ephemeral sandbox (managoat/fountain#2497).
+ */
+export declare const BOX_SANDBOX_API_ACCESS = "owner";
+/**
+ * The capability a box member's `box` block declares for fountain's callback
+ * token (#2780), as `chant workspace check` expects it: fountain brokers it
+ * itself, and its scope is the owner's.
+ */
+export declare const BOX_FOUNTAIN_CALLBACK_CAPABILITY: {
+    readonly name: "fountain-callback";
+    readonly broker: "fountain";
+    readonly scope: readonly ["owner"];
+};
 /** `Agent.sandbox_provider`'s values at the pinned spec. */
 export declare const BOX_SANDBOX_PROVIDERS: readonly ["sprites", "e2b", "daytona", "runner"];
 /** A sandbox backend, per the pinned spec's `sandbox_provider` enum. */
@@ -125,8 +162,13 @@ export interface BoxOpts {
     setupTimeoutSeconds?: number;
     /** Agent runtime. Default `claude`. */
     runtime?: "claude" | "codex" | "gemini" | "opencode";
-    /** Canonical provider/model_id. Omitted, fountain's default for the runtime. */
-    model?: string;
+    /**
+     * Canonical provider/model_id. Required (#2776): fountain v0.21.0, the
+     * pinned spec, refuses an Agent with no model for every runtime but `acp`
+     * (`model: can't be blank` at apply), and a Box's runtime is never `acp`.
+     * FTN016 flags the same gap on an Agent built any other way.
+     */
+    model: string;
     /** Sandbox backend override. Omitted, the instance default (`SANDBOX_PROVIDER`). A plain `Agent.sandbox_provider` field, so it is already visible on the graph node without extra bookkeeping (unlike `allowedVaults`; see "Allowed vaults in the read contract" above). */
     sandboxProvider?: BoxSandboxProvider;
     /** Per-tool permission policy. Required: fountain's unset policy is `auto_allow`. */

package/dist/composites/box.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"box.d.ts","sourceRoot":"","sources":["../../src/composites/box.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AAEH,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE/D,4FAA4F;AAC5F,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAEhD,qHAAqH;AACrH,eAAO,MAAM,+BAA+B,0BAA0B,CAAC;AAEvE,4DAA4D;AAC5D,eAAO,MAAM,qBAAqB,kDAAmD,CAAC;AAEtF,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,4DAA4D;AAC5D,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAEvD,gFAAgF;AAChF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,YAAY,GAAG,WAAW,GAAG,MAAM,CAAC,CAAC;AAE9F,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+KAA+K;IAC/K,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,OAAO;IACtB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,qPAAqP;IACrP,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uCAAuC;IACvC,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;IACrD,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4QAA4Q;IAC5Q,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,qFAAqF;IACrF,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,oDAAoD;IACpD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;OAIG;IACH,aAAa,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC;IACnE,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C,KAAK,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IACnC,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,CAgF/C"}
+{"version":3,"file":"box.d.ts","sourceRoot":"","sources":["../../src/composites/box.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8FG;AAEH,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE/D,4FAA4F;AAC5F,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAEhD,qHAAqH;AACrH,eAAO,MAAM,+BAA+B,0BAA0B,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,2BAA2B,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,gCAAgC;;;;CAInC,CAAC;AAEX,4DAA4D;AAC5D,eAAO,MAAM,qBAAqB,kDAAmD,CAAC;AAEtF,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,4DAA4D;AAC5D,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAEvD,gFAAgF;AAChF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,YAAY,GAAG,WAAW,GAAG,MAAM,CAAC,CAAC;AAE9F,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+KAA+K;IAC/K,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,OAAO;IACtB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,qPAAqP;IACrP,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uCAAuC;IACvC,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;IACrD;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,4QAA4Q;IAC5Q,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,qFAAqF;IACrF,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,oDAAoD;IACpD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;OAIG;IACH,aAAa,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC;IACnE,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C,KAAK,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IACnC,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,CA4F/C"}

package/dist/composites/steward.d.ts

@@ -68,6 +68,18 @@
  * (`box-credential-declared`), and `chant workspace status --json` lists each
  * capability the steward names with the broker the box block gives it.
  *
+ * ## Decision points (chant#2749)
+ *
+ * The Agent runs `chant acp --steward <name>`, so every turn is this
+ * steward's. An Op that asks a decision point during a turn
+ * (`askPointInRun` in `@intentius/chant/op`) makes its model call only
+ * through a capability named in `capabilities`, and a question that is still
+ * open ends the run as `waiting`, as a gate ends it as `gated`. The question
+ * stays in the workspace, where `points --open`, `workspace status --json`
+ * and hud find it, and a person answers it. It is never asked on this
+ * thread, and `points answer` from this session is refused. The Op's next
+ * turn reads the answer.
+ *
  * ## The coding agent beside it
  *
  * A box also has a coding agent editing the app. They share the checkout by
@@ -154,6 +166,13 @@ export interface StewardResources {
 }
 /** The command an `acp` agent speaks the protocol over (#2125). */
 export declare const STEWARD_RUNTIME_COMMAND = "chant acp";
+/**
+ * A steward's Agent command: `chant acp --steward <name>` (chant#2749), so the
+ * session knows whose turns it serves. A steward's name is letters, digits,
+ * `.`, `_` and `-` (`declareSteward` refuses anything else), so it needs no
+ * quoting.
+ */
+export declare function stewardRuntimeCommand(name: string): string;
 /** The teammate an Op runs on, when a `Steward` in this process declared one. */
 export declare function stewardForOp(op: string): string | undefined;
 /** Drop every declaration. Tests only — a process declares each steward once. */

package/dist/composites/steward.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"steward.d.ts","sourceRoot":"","sources":["../../src/composites/steward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AAEH,OAAO,EAAkB,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACpG,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAK5F;;;;;;;;;GASG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;AAQnE,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,WAAW,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C;;;OAGG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IACnC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,GAAG,EAAE,SAAS,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IAClC,QAAQ,EAAE,YAAY,CAAC,OAAO,QAAQ,CAAC,CAAC;IACxC,4DAA4D;IAC5D,SAAS,EAAE,YAAY,CAAC,OAAO,QAAQ,CAAC,EAAE,CAAC;IAC3C,OAAO,CAAC,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACvC;;;;OAIG;IACH,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAED,mEAAmE;AACnE,eAAO,MAAM,uBAAuB,cAAc,CAAC;AAiBnD,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE3D;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C;AA8BD,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAuG3D"}
+{"version":3,"file":"steward.d.ts","sourceRoot":"","sources":["../../src/composites/steward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6FG;AAEH,OAAO,EAAkB,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACpG,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAK5F;;;;;;;;;GASG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;AAQnE,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,WAAW,EAAE,YAAY,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C;;;OAGG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IACnC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,GAAG,EAAE,SAAS,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IAClC,QAAQ,EAAE,YAAY,CAAC,OAAO,QAAQ,CAAC,CAAC;IACxC,4DAA4D;IAC5D,SAAS,EAAE,YAAY,CAAC,OAAO,QAAQ,CAAC,EAAE,CAAC;IAC3C,OAAO,CAAC,EAAE,YAAY,CAAC,OAAO,OAAO,CAAC,CAAC;IACvC;;;;OAIG;IACH,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAED,mEAAmE;AACnE,eAAO,MAAM,uBAAuB,cAAc,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1D;AAiBD,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE3D;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C;AA8BD,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAwG3D"}

package/dist/index.d.ts

@@ -12,9 +12,9 @@ export { createFountainOpRuntime, defaultFountainSse, DEFAULT_STREAM_IDLE_TIMEOU
 export type { FountainOpRuntimeOptions, FountainSse, FountainSseEvent } from "./op/runtime.js";
 export { ConciergeStack } from "./composites/concierge-stack.js";
 export type { ConciergeStackOpts, ConciergeStackResources } from "./composites/concierge-stack.js";
-export { Steward, stewardForOp, STEWARD_RUNTIME_COMMAND } from "./composites/steward.js";
+export { Steward, stewardForOp, stewardRuntimeCommand, STEWARD_RUNTIME_COMMAND } from "./composites/steward.js";
 export type { StewardOp, StewardOpts, StewardResources, StewardWebhookOpts } from "./composites/steward.js";
-export { Box, BOX_PORT_METADATA_KEY, BOX_ALLOWED_VAULTS_METADATA_KEY, BOX_DEFAULT_PORT, BOX_DEFAULT_MOUNT_PATH, BOX_SANDBOX_PROVIDERS, } from "./composites/box.js";
+export { Box, BOX_PORT_METADATA_KEY, BOX_ALLOWED_VAULTS_METADATA_KEY, BOX_SANDBOX_API_ACCESS_METADATA_KEY, BOX_SANDBOX_API_ACCESS, BOX_FOUNTAIN_CALLBACK_CAPABILITY, BOX_DEFAULT_PORT, BOX_DEFAULT_MOUNT_PATH, BOX_SANDBOX_PROVIDERS, } from "./composites/box.js";
 export type { BoxOpts, BoxResources, BoxRepositoryOpts, BoxVaultOpts, BoxPermissionPolicy, BoxSandboxProvider } from "./composites/box.js";
 export { acpCommandGroup } from "./acp/index.js";
 export { AcpServer } from "./acp/server.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIlD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAC9D,YAAY,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAG9B,cAAc,mBAAmB,CAAC;AAIlC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACxF,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAInH,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAChE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAIhE,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,8BAA8B,GAC/B,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,wBAAwB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAG5F,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AACtF,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACzG,OAAO,EACL,GAAG,EACH,qBAAqB,EACrB,+BAA+B,EAC/B,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAIxI,OAAO,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIlD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAC9D,YAAY,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAG9B,cAAc,mBAAmB,CAAC;AAIlC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACxF,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAInH,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAChE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAIhE,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,8BAA8B,GAC/B,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,wBAAwB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAG5F,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC7G,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACzG,OAAO,EACL,GAAG,EACH,qBAAqB,EACrB,+BAA+B,EAC/B,mCAAmC,EACnC,sBAAsB,EACtB,gCAAgC,EAChC,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAIxI,OAAO,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "f55b301389d73946391200a1788013f3b7f368586b497af230a6813a0acda4e8",
+    "manifest.json": "970351631fcfe5ccb8e769f832b459749439e798801bfab83b3154e0b35a9ac0",
     "meta.json": "3301437a2a56eaf1a5cc8f6eabb18a40767f916e09701b2d9bf20aba4066738c",
     "types/index.d.ts": "cf6b634fe0a8e9e96f1d9d07e3df53838def2683dc93dbe3c7fd971c6d3908ae",
     "rules/ftn001-no-secret-literals.ts": "a417b194cd7039911cca9a0f14c49b042dfa6b1ee48517f7c2e22b16590a8599",
@@ -11,7 +11,7 @@
     "rules/ftn013-substitution-resolvable.ts": "1425ca7de9494725ad4ec0bcb22abc30cff718d3fc3816fb86322897ebcaf451",
     "rules/ftn014-vault-shadowing.ts": "e966a441c52f57fee059e3e4834da2c5f9d12c71e551924beebd7d0740f714e1",
     "rules/ftn015-mcp-secret-env-substitution.ts": "88dc87c8f403a2fe48ee43bc4a4678d95273dba810135c8e74750f1bd62d2564",
-    "rules/ftn016-runtime-model-valid.ts": "5bb5e399ab4efd764816dec221e3ca424ba1ce2470d00b034fbcc95b12de4979",
+    "rules/ftn016-runtime-model-valid.ts": "194c81dcf60c23669aaf8ede3429edba0a4f7f5813ce209c9774f4a70932187e",
     "rules/ftn017-unique-resource-names.ts": "866f3f385083f96b6e8a18fa6f5624bab43752c5d22e7291e95835e62745d26c",
     "rules/ftn020-schedule-cron-syntax.ts": "a4291345035fbfddfa443aeae59c08be4d35f383a28cd19c827bf162b79f7703",
     "rules/ftn021-typed-references-resolve.ts": "1f62b4d1a47707b00634a50960bdd8233c292898a76aac0089ab02de76460d96",
@@ -23,5 +23,5 @@
     "skills/chant-fountain-ops.md": "4e72f0a0c7477a9e98f85ea45e49ba69e8a699f9c13ba0f0cf1cb20a88151373",
     "skills/chant-fountain-locked-sandboxes.md": "14def4c68b13c2bd561f75819b188968cec85073a5dd8b59e91708e1af26daae"
   },
-  "composite": "d961f51d2dbd943d5da0fb56f8c82649c3392c02c62222d68c81069b9c9cdefb"
+  "composite": "6b8614c6b5944f249d7eab406b76027146953884bb0a9f73def3be52724e49c2"
 }

package/dist/lint/post-synth/ftn016-runtime-model-valid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ftn016-runtime-model-valid.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/ftn016-runtime-model-valid.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAoB9G,eAAO,MAAM,sBAAsB,EAAE,cAkDpC,CAAC"}
+{"version":3,"file":"ftn016-runtime-model-valid.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/ftn016-runtime-model-valid.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAwB9G,eAAO,MAAM,sBAAsB,EAAE,cA+DpC,CAAC"}

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "fountain",
-  "version": "0.91.0",
+  "version": "0.94.0",
   "chantVersion": ">=0.1.0",
   "namespace": "Fountain",
   "specVersion": "v0.21.0"

package/dist/op/activities/fountain-apply.d.ts

@@ -144,6 +144,22 @@ export { vaultNameRefs };
 export declare function isChantOwned(resource: {
     metadata?: unknown;
 }): boolean;
-export declare function defaultFountainHttp(endpoint: string, token: string): FountainHttp;
-export declare function fountainApply(args: FountainApplyArgs, http?: FountainHttp, deps?: FountainConnectionDeps): Promise<FountainApplySummary>;
+/**
+ * The fetch-backed client. `signal`, when given, rides on every request, so an
+ * aborted Op step (timeout or Ctrl-C) cancels the request in flight.
+ */
+export declare function defaultFountainHttp(endpoint: string, token: string, signal?: AbortSignal): FountainHttp;
+/**
+ * `http`, refusing to start a request once `signal` has fired. The fetch-backed
+ * client already cancels a request in flight; this also stops an injected
+ * client between requests, so an aborted step makes no further call.
+ */
+export declare function abortable(http: FountainHttp, signal?: AbortSignal): FountainHttp;
+/**
+ * Apply a fountain manifest. The Op activity contract (`ActivityFn`, #2775):
+ * the executor calls `fountainApply(args, signal)`, so the second parameter is
+ * the step's `AbortSignal` and nothing else. The HTTP client and connection
+ * deps are test seams, after it, as every other lexicon's activities take them.
+ */
+export declare function fountainApply(args: FountainApplyArgs, signal?: AbortSignal, http?: FountainHttp, deps?: FountainConnectionDeps): Promise<FountainApplySummary>;
 //# sourceMappingURL=fountain-apply.d.ts.map

package/dist/op/activities/fountain-apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fountain-apply.d.ts","sourceRoot":"","sources":["../../../src/op/activities/fountain-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAIH,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,EAA+B,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAElF,eAAO,MAAM,yBAAyB,oCAAoC,CAAC;AAE3E,wDAAwD;AACxD,eAAO,MAAM,aAAa,eAAe,CAAC;AAC1C,eAAO,MAAM,eAAe,UAAU,CAAC;AAmCvC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAID,wBAAgB,eAAe,CAC7B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,EAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAED,wBAAgB,YAAY,CAC1B,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,EAC7B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAIR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3E,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAoB9C;AAMD,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAajE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUrF;AAED;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,QAAQ,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAItE;AAID,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAkBjF;AA4WD,wBAAsB,aAAa,CACjC,IAAI,EAAE,iBAAiB,EACvB,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CA+D/B"}
+{"version":3,"file":"fountain-apply.d.ts","sourceRoot":"","sources":["../../../src/op/activities/fountain-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAIH,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,EAA+B,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAElF,eAAO,MAAM,yBAAyB,oCAAoC,CAAC;AAE3E,wDAAwD;AACxD,eAAO,MAAM,aAAa,eAAe,CAAC;AAC1C,eAAO,MAAM,eAAe,UAAU,CAAC;AAmCvC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAID,wBAAgB,eAAe,CAC7B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,EAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAED,wBAAgB,YAAY,CAC1B,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,EAC7B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAIR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3E,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAoB9C;AAMD,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAajE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUrF;AAED;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,QAAQ,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAItE;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,YAAY,CAmBvG;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,YAAY,CAMhF;AA4WD;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,iBAAiB,EACvB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAgE/B"}

package/dist/op/activities/fountain-run.d.ts

@@ -24,10 +24,22 @@
  * interrupted` — fountain's `end_turn` block, or an error) without
  * terminating anything.
  *
+ * A persistent agent launched with no prompt (#2781) runs no turn: fountain
+ * provisions the home (or attaches to the one that exists) and the
+ * conversation stays `pending`, so it never reaches `idle`. For that launch
+ * the run is done once the conversation's sandbox is `ready` or `failed` and
+ * no turn is running, and the result is the sandbox's outcome: `provisioned`,
+ * or `failed` with the stage that failed.
+ *
  * Terminating the conversation's machine on deadline (a hung run should
  * not outlive the op that started it) still happens whenever the turn has
  * not ended — for either sandbox mode. `terminate` makes the choice
  * explicit rather than leaving it implicit in `sandbox_mode`.
+ *
+ * Under `chant run` the executor calls this as `fountainRun(args, signal)`
+ * (#2775). When the signal fires (the step's timeout, or Ctrl-C) polling
+ * stops, the terminate policy is applied as it is on the deadline, and the
+ * step fails with the abort's reason.
  */
 import { type FountainHttp, type FountainConnectionDeps } from "./fountain-apply.js";
 /**
@@ -63,6 +75,20 @@ export interface FountainRunArgs {
     prompt?: string;
     /** Optional vault to attach (subject to the agent's allowlist upstream). */
     vaultId?: string;
+    /**
+     * fountain's `sprite_name`: the suffix of the machine's name, so a box's
+     * runtime can predict it. fountain keeps its `fountain-<account>-` prefix;
+     * 1 to 40 letters, digits, `-` and `_`, starting with a letter or digit.
+     */
+    spriteName?: string;
+    /**
+     * fountain's `sandbox_api_access` (#2780): `owner`, fountain's default, gives
+     * the sandbox a callback token scoped to the owner (`FOUNTAIN_TOKEN` in every
+     * exec); `none` mints none. fountain v0.21.0 accepts `none` only for a fresh
+     * ephemeral sandbox, so it is refused here for a persistent agent before any
+     * conversation starts (managoat/fountain#2497).
+     */
+    sandboxApiAccess?: "owner" | "none";
     endpoint?: string;
     token?: string;
     /**
@@ -94,13 +120,20 @@ export interface FountainRunResult {
      * The run's outcome. For a persistent agent whose turn ended, this is the
      * turn's own status (`completed | failed | interrupted`); otherwise it is
      * the conversation's status when the wait ended (`terminated` on a
-     * deadline).
+     * deadline). For a persistent agent launched with no prompt (#2781), it is
+     * the sandbox's outcome: `provisioned` or `failed`.
      */
     status: string;
     /** True when the agent's `sandbox_mode` resolved to `persistent`. */
     persistent: boolean;
     /** True when the op hit its deadline with the turn still unfinished. */
     terminatedByDeadline: boolean;
+    /** The conversation's sandbox, once fountain has reported one. */
+    sandboxId?: string;
+    /** The sandbox's machine name (fountain's `sandbox.sprite_name`), the name to reach it by. */
+    spriteName?: string;
+    /** For a no-prompt launch whose sandbox failed (#2781): the provisioning stage that failed, when fountain logged one. */
+    failedStage?: string;
 }
 export interface ResolvedAgent {
     id: string;
@@ -111,5 +144,5 @@ export interface ResolvedAgent {
 export declare function resolveAgent(http: FountainHttp, agent: string): Promise<ResolvedAgent>;
 /** Agent id only — the common case, and the one call sites outside this file use. */
 export declare function resolveAgentId(http: FountainHttp, agent: string): Promise<string>;
-export declare function fountainRun(args: FountainRunArgs, http?: FountainHttp, deps?: FountainConnectionDeps): Promise<FountainRunResult>;
+export declare function fountainRun(args: FountainRunArgs, signal?: AbortSignal, http?: FountainHttp, deps?: FountainConnectionDeps): Promise<FountainRunResult>;
 //# sourceMappingURL=fountain-run.d.ts.map

package/dist/op/activities/fountain-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fountain-run.d.ts","sourceRoot":"","sources":["../../../src/op/activities/fountain-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,aAA8D,CAAC;AAE7F;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,aAA0C,CAAC;AAKhF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,wCAAwC;IACxC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,UAAU,EAAE,OAAO,CAAC;IACpB,wEAAwE;IACxE,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAID,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qEAAqE;AACrE,wBAAsB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAe5F;AAED,qFAAqF;AACrF,wBAAsB,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvF;AAeD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAwD5B"}
+{"version":3,"file":"fountain-run.d.ts","sourceRoot":"","sources":["../../../src/op/activities/fountain-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,aAA8D,CAAC;AAE7F;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,aAA0C,CAAC;AAKhF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,wCAAwC;IACxC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,UAAU,EAAE,OAAO,CAAC;IACpB,wEAAwE;IACxE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yHAAyH;IACzH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAaD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qEAAqE;AACrE,wBAAsB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAe5F;AAED,qFAAqF;AACrF,wBAAsB,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvF;AAyCD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAqH5B"}

package/dist/rules/ftn016-runtime-model-valid.ts

@@ -8,11 +8,15 @@ import { propsOf } from "../../entity-props";
  * this backstops untyped construction (imported templates, hand-built
  * plans) so a typo fails the build instead of a 422 at apply.
  *
+ * Every runtime but `acp` needs a model: fountain v0.21.0, the pinned spec,
+ * refuses such an Agent at apply with `model: can't be blank` (#2776), and the
+ * generated type leaves `model` optional because `acp` does not take one.
+ *
  * `acp` is the exception on the model. The runtime is in the spec since
- * fountain v0.21.0, which also stopped requiring `model`, and it names a
- * process rather than a hosted model: the model is whatever the command on the
- * other end of the protocol decides to use, so a `model` on an acp agent is a
- * value nothing reads. The command itself is FTN023's business.
+ * fountain v0.21.0, and it names a process rather than a hosted model: the
+ * model is whatever the command on the other end of the protocol decides to
+ * use, so a `model` on an acp agent is a value nothing reads. The command
+ * itself is FTN023's business.
  */
 
 const RUNTIMES = new Set(["claude", "codex", "gemini", "opencode", "acp"]);
@@ -55,6 +59,19 @@ export const runtimeModelValidCheck: PostSynthCheck = {
         continue;
       }
 
+      if (agent.model === undefined || agent.model === null || agent.model === "") {
+        diagnostics.push({
+          checkId: "FTN016",
+          severity: "error",
+          message:
+            `Agent "${name}" has runtime "${typeof agent.runtime === "string" ? agent.runtime : "(unset)"}" and no model — ` +
+            `fountain v0.21.0 refuses it at apply ("model: can't be blank"); every runtime but acp needs a ` +
+            `canonical provider/model_id`,
+          entity: name,
+          lexicon: "fountain",
+        });
+        continue;
+      }
       if (typeof agent.model === "string" && !MODEL_RE.test(agent.model)) {
         diagnostics.push({
           checkId: "FTN016",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-fountain",
-  "version": "0.91.0",
+  "version": "0.94.0",
   "type": "module",
   "description": "Fountain lexicon for chant — sandboxed agent environments, vaults, and agents as typed estate",
   "license": "Apache-2.0",
@@ -50,7 +50,7 @@
     "bundle": "tsx src/package-cli.ts"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.91.0",
+    "@intentius/chant": "^0.94.0",
     "typescript": "^5.9.3",
     "zod": "^4.3.6"
   },

package/src/acp/index.ts

@@ -34,19 +34,31 @@ export function acpCommandGroup(): CommandGroup {
 
 async function serveHandler(ctx: CommandGroupContext): Promise<number> {
   let durableRequests = false;
-  for (const arg of splitJoinedFlags(ctx.rawArgs, BOOLEAN_FLAGS)) {
+  let steward: string | undefined;
+  const args = splitJoinedFlags(ctx.rawArgs, BOOLEAN_FLAGS);
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
     if (arg === "--durable-requests") durableRequests = true;
-    else {
+    else if (arg === "--steward") {
+      // The Steward composite's Agent runs `chant acp --steward <name>`
+      // (chant#2749), so every turn in this session is that steward's.
+      const name = args[++i];
+      if (!name || name.startsWith("--")) {
+        console.error(`"chant acp --steward" takes the steward's name.`);
+        return 1;
+      }
+      steward = name;
+    } else {
       // stdout carries the protocol and nothing else, so a usage error goes
       // to stderr — the one place a spawned agent can say anything.
       console.error(
-        unknownFlagError(arg, `"chant acp" accepts --durable-requests.`).message,
+        unknownFlagError(arg, `"chant acp" accepts --durable-requests and --steward <name>.`).message,
       );
       return 1;
     }
   }
 
   const { serveAcpOverStdio } = await import("./serve");
-  await serveAcpOverStdio({ durableRequests });
+  await serveAcpOverStdio({ durableRequests, ...(steward ? { steward } : {}) });
   return 0;
 }

package/src/acp/serve.ts

@@ -11,13 +11,14 @@
 
 import { readFileSync } from "node:fs";
 import { setGateOrigin } from "@intentius/chant/lifecycle/gate-origin";
+import { setStewardTurn } from "@intentius/chant/op/steward-turn";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { AcpServer } from "./server";
 import { streamTransport } from "./jsonrpc";
 
 /** Serve until the client closes stdin, which is how it says the connection is over. */
-export async function serveAcpOverStdio(opts: { durableRequests?: boolean } = {}): Promise<void> {
+export async function serveAcpOverStdio(opts: { durableRequests?: boolean; steward?: string } = {}): Promise<void> {
   // chant#2384 — every prompt this session carries is authored by the model,
   // and `approve` is a verb in chant's registry like any other, so nothing in
   // the transport stops `chant run <op>` being followed by
@@ -26,6 +27,12 @@ export async function serveAcpOverStdio(opts: { durableRequests?: boolean } = {}
   // shell; the same-origin rule then refuses it.
   setGateOrigin("acp");
 
+  // chant#2749 — the session is a steward's. A decision point an Op asks during
+  // a turn names the steward, makes its model call through the steward's
+  // brokered capability, and is left open for a person; `points answer` from
+  // this session is refused, as the gate's resolution is above.
+  if (opts.steward) setStewardTurn({ steward: opts.steward });
+
   const server = new AcpServer({
     durableRequests: opts.durableRequests ?? false,
     version: lexiconVersion(),

package/src/acp/turn.ts

@@ -236,6 +236,18 @@ async function runOpTurn(
     return gatedReply(opts, command, status);
   }
 
+  // chant#2749 — an open decision point ends the turn as a gate does. The
+  // question is a record in the workspace, where hud asks a person; it is not
+  // asked here, because this thread is the steward's and nobody reads it for
+  // questions, and the steward never answers one itself.
+  const point = status.result?.record.point ?? status.point;
+  if (status.state === "waiting" && point) {
+    sink.message(
+      `Op "${command.op}" is waiting on decision point "${point.point}": question ${point.id} is ${point.state}.\n` +
+        `A person answers it through hud or \`chant workspace points answer ${point.id}\`, and the next run reads the answer.\n`,
+    );
+  }
+
   sink.message(JSON.stringify(status.result?.record ?? status, null, 2) + "\n");
   return { stopReason: "end_turn" };
 }

package/src/composites/box.ts

@@ -16,6 +16,7 @@
  *   name: "studio-box",
  *   repo: { url: "https://github.com/arugula-salad/studio", ref: "main" },
  *   setupScript: readFileSync("box/provision-template.sh", "utf8"),
+ *   model: "anthropic/claude-sonnet-4-5",
  *   permissionPolicy: { default: "auto_allow" },
  *   allowedHosts: ["registry.npmjs.org", "github.com"],
  *   vault: { secrets: [{ key: "STUDIO_SECRET", value: "${STUDIO_SECRET}" }] },
@@ -55,6 +56,21 @@
  * workspace check` fails a box member whose files hold one
  * (`box-credential-declared`).
  *
+ * One credential reaches the box anyway (#2780). fountain v0.21.0 gives every
+ * sandbox a callback token, `FOUNTAIN_TOKEN`, in the environment of each exec
+ * it makes into it (the setup script's included), scoped to the owner
+ * (`sandbox_api_access: owner`). Its opt-out, `sandbox_api_access: none`, is
+ * refused for a persistent sandbox, and a box is always persistent, so no
+ * option here can turn it off (managoat/fountain#2497). The composite records
+ * it instead: the Agent's metadata carries `box-sandbox-api-access: owner`
+ * (`BOX_SANDBOX_API_ACCESS_METADATA_KEY`), and the member's `box` block is
+ * expected to declare the capability that stands for it,
+ * `BOX_FOUNTAIN_CALLBACK_CAPABILITY`: `fountain-callback`, brokered by fountain
+ * itself, with scope `owner`. It is named apart from a `fountain` capability a
+ * lobby brokers, which a box may declare as well. `chant workspace check`
+ * reports a box member that builds a `Box` and does not declare it
+ * (`box-fountain-callback-undeclared`).
+ *
  * ## The port
  *
  * fountain's `Environment` and `Agent` have no field for a served port (the
@@ -86,6 +102,30 @@ export const BOX_PORT_METADATA_KEY = "box-port";
 /** The metadata key a box agent's resolved allowed vaults (or `"any"`) are recorded under, for the read contract. */
 export const BOX_ALLOWED_VAULTS_METADATA_KEY = "box-allowed-vault-ids";
 
+/**
+ * The metadata key a box agent's sandbox callback access is recorded under
+ * (#2780): `owner`, the scope of the `FOUNTAIN_TOKEN` fountain v0.21.0 gives
+ * every persistent sandbox.
+ */
+export const BOX_SANDBOX_API_ACCESS_METADATA_KEY = "box-sandbox-api-access";
+
+/**
+ * The sandbox callback access a box has on the pinned spec: `owner`. fountain
+ * v0.21.0 accepts `none` only for a fresh ephemeral sandbox (managoat/fountain#2497).
+ */
+export const BOX_SANDBOX_API_ACCESS = "owner";
+
+/**
+ * The capability a box member's `box` block declares for fountain's callback
+ * token (#2780), as `chant workspace check` expects it: fountain brokers it
+ * itself, and its scope is the owner's.
+ */
+export const BOX_FOUNTAIN_CALLBACK_CAPABILITY = {
+  name: "fountain-callback",
+  broker: "fountain",
+  scope: [BOX_SANDBOX_API_ACCESS],
+} as const;
+
 /** `Agent.sandbox_provider`'s values at the pinned spec. */
 export const BOX_SANDBOX_PROVIDERS = ["sprites", "e2b", "daytona", "runner"] as const;
 
@@ -133,8 +173,13 @@ export interface BoxOpts {
   setupTimeoutSeconds?: number;
   /** Agent runtime. Default `claude`. */
   runtime?: "claude" | "codex" | "gemini" | "opencode";
-  /** Canonical provider/model_id. Omitted, fountain's default for the runtime. */
-  model?: string;
+  /**
+   * Canonical provider/model_id. Required (#2776): fountain v0.21.0, the
+   * pinned spec, refuses an Agent with no model for every runtime but `acp`
+   * (`model: can't be blank` at apply), and a Box's runtime is never `acp`.
+   * FTN016 flags the same gap on an Agent built any other way.
+   */
+  model: string;
   /** Sandbox backend override. Omitted, the instance default (`SANDBOX_PROVIDER`). A plain `Agent.sandbox_provider` field, so it is already visible on the graph node without extra bookkeeping (unlike `allowedVaults`; see "Allowed vaults in the read contract" above). */
   sandboxProvider?: BoxSandboxProvider;
   /** Per-tool permission policy. Required: fountain's unset policy is `auto_allow`. */
@@ -183,6 +228,14 @@ export function Box(opts: BoxOpts): BoxResources {
         `an allowlist means nothing on an open network. Pass one.`,
     );
   }
+  // The type requires it; this is for an untyped caller, so it fails at build
+  // rather than at fountain's apply.
+  if (typeof opts.model !== "string" || !opts.model.trim()) {
+    throw new Error(
+      `Box "${opts.name}": model is required — fountain v0.21.0 refuses an Agent with no model ` +
+        `for the ${opts.runtime ?? "claude"} runtime. Pass a canonical provider/model_id.`,
+    );
+  }
   if (!opts.setupScript.trim()) {
     throw new Error(`Box "${opts.name}": setupScript is empty — a box is provisioned by its setup script`);
   }
@@ -234,12 +287,16 @@ export function Box(opts: BoxOpts): BoxResources {
     opts.allowedVaults === "any"
       ? "any"
       : allowedVaults!.map((v) => (typeof v === "string" ? v : (v as unknown as { props: { name: string } }).props.name));
-  const agentMetadata = { ...metadata, [BOX_ALLOWED_VAULTS_METADATA_KEY]: allowedVaultsForReadContract };
+  const agentMetadata = {
+    ...metadata,
+    [BOX_ALLOWED_VAULTS_METADATA_KEY]: allowedVaultsForReadContract,
+    [BOX_SANDBOX_API_ACCESS_METADATA_KEY]: BOX_SANDBOX_API_ACCESS,
+  };
 
   const agent = new Agent({
     name: opts.name,
     runtime: opts.runtime ?? "claude",
-    ...(opts.model !== undefined ? { model: opts.model } : {}),
+    model: opts.model,
     sandbox_mode: "persistent",
     ...(opts.sandboxProvider !== undefined ? { sandbox_provider: opts.sandboxProvider } : {}),
     environment,