@tangle-network/agent-app 0.45.50 → 0.45.52

package/dist/sandbox/index.d.ts

@@ -1612,19 +1612,23 @@ declare function syncSandboxMemberAdd(box: SandboxInstance, seam: MemberSyncSeam
 declare function syncSandboxMemberRemove(box: SandboxInstance, userId: string): Promise<Outcome<void>>;
 /** Synchronize a sandbox member's role by updating permissions based on the provided role mapping */
 declare function syncSandboxMemberRole(box: SandboxInstance, seam: MemberSyncSeam, userId: string, role: string): Promise<Outcome<void>>;
-/** Define methods to create, update, retrieve, and delete secrets asynchronously */
+/**
+ * Write-only secret port: create, replace, and delete a secret by name.
+ *
+ * There is no read method. The platform's secrets API returns names and
+ * timestamps only — a stored value is never served back, it is injected into
+ * the sandbox as an environment variable. A `get` here could only ever return
+ * a value this process already held, so the port does not offer one.
+ */
 interface SecretStore {
     create: (name: string, value: string) => Promise<void>;
     update: (name: string, value: string) => Promise<void>;
-    get: (name: string) => Promise<string>;
     delete: (name: string) => Promise<void>;
 }
 /** Resolve a SecretStore interface using the provided SandboxRuntimeConfig shell */
 declare function secretStoreFromClient(shell: SandboxRuntimeConfig): SecretStore;
-/** Resolve storing a secret by creating or updating it in the given SecretStore */
+/** Resolve storing a secret by creating it, or replacing it when it exists */
 declare function storeSecret(store: SecretStore, name: string, value: string): Promise<Outcome<void>>;
-/** Resolve a secret value from the store by its name and return the outcome asynchronously */
-declare function readSecret(store: SecretStore, name: string): Promise<Outcome<string>>;
 /** Delete a secret by name from the given secret store and return the operation outcome */
 declare function deleteSecret(store: SecretStore, name: string): Promise<Outcome<void>>;
 /** Represent a token with its expiration date and associated scope */
@@ -1667,4 +1671,4 @@ declare function isTerminalPromptEvent(event: unknown): boolean;
 /** Resolve the interactive question text from a structured event or return null if none found */
 declare function detectInteractiveQuestion(event: unknown): string | null;
 
-export { type AppToolDescriptor, type BuildAppToolMcpServersOptions, type BuildSandboxToolFileMountsOptions, type D1PrewarmClaimStoreOptions, DEFAULT_PREWARM_CLAIM_TABLE, DEFAULT_PROVISION_TIMEOUT_MS, DEFAULT_SANDBOX_RESOURCES, DEFAULT_SIDECAR_PROCESS_PATTERN, type DriveSandboxTurnOptions, EGRESS_PROXY_RECOVERY_PHASE, EGRESS_PROXY_RECOVERY_REQUIRED, ENV_TOTAL_MAX_BYTES, ENV_VALUE_MAX_BYTES, type EnsureWorkspaceSandboxOptions, type LivenessProbeConfig, type MemberSyncSeam, type ModelSelection, type ModelSelectionError, type ModelSelectionFailure, type ModelSelectionSource, type Outcome, PREWARM_CLAIM_TABLE_DDL, PROVISION_PAYLOAD_MAX_BYTES, PYPI_EGRESS_DOMAINS, type PeekWorkspaceSandboxOutcome, type PrewarmClaimD1Like, type PrewarmClaimStore, type PrewarmDecision, type PrewarmEvent, type PrewarmOutcome, type PrewarmResult, type ProfileComposeOptions, type PromptInputPart, type ProviderResolutionConfig, type ProvisionPayloadSections, type ProvisionProfileSection, type ResolveSandboxClientCredentialsOptions, type ResolvedModel, type SafeSandboxErrorCause, type SafeSandboxErrorDiagnostics, type SandboxBuildContext, type SandboxClientCredentials, type SandboxCredentialEnvironment, SandboxEgressPolicyMismatchError, type SandboxEgressPolicySource, type SandboxExecChannel, type SandboxExecOptions, type SandboxExistingBoxStage, type SandboxFileBytesOutcome, type SandboxFileSizeOutcome, SandboxModelResolutionError, type SandboxPermissionLevel, type SandboxPrewarmScope, type SandboxPrewarmer, type SandboxPrewarmerOptions, type SandboxProvisionedObservation, type SandboxReadiness, SandboxRecoveryFailedError, type SandboxRecoveryPhase, type SandboxResourceConfig, type SandboxRestoreSpec, SandboxRuntimeAuthRefreshError, type SandboxRuntimeConfig, type SandboxScope, type SandboxSpendHooks, type SandboxStepTransition, type SandboxStreamEvent, type SandboxTerminalConnectionRouteOptions, type SandboxToolPathOptions, type SandboxToolSpec, type ScopedTokenResult, type SecretStore, type StoppedSandboxResumeFailure, type StoppedSandboxResumeRecovery, type StreamSandboxPromptOptions, type TerminalConnectionBoxLike, WORKSPACE_SANDBOX_HOST_EXHAUSTED, WORKSPACE_SANDBOX_MISSING, WORKSPACE_SANDBOX_RECOVERY_ACTIONS, WORKSPACE_SANDBOX_RECOVERY_CODES, WORKSPACE_SANDBOX_SNAPSHOT_MAX_AGE_MS, WORKSPACE_SANDBOX_UNRECOVERABLE, type WorkspaceSandboxEnsureContext, type WorkspaceSandboxInstanceLike, type WorkspaceSandboxManager, type WorkspaceSandboxManagerOptions, type WorkspaceSandboxRecoveryAction, type WorkspaceSandboxRecoveryCode, type WorkspaceSandboxRecoveryDecision, type WorkspaceSandboxRecoveryManager, WorkspaceSandboxRecoveryRequiredError, type WorkspaceSandboxRecoveryState, type WorkspaceSandboxRecoveryStore, type WorkspaceSandboxSnapshot, type WorkspaceSandboxSnapshotAssessment, type WorkspaceSandboxSnapshotAvailability, type WorkspaceSandboxSnapshotFreshness, type WriteProfileFilesOptions, adaptSandboxStream, assertEnvWithinLimits, assertProvisionPayloadWithinCap, assessWorkspaceSandboxSnapshot, attachReasoningEffort, buildAppToolMcpServers, buildProductEgressPolicy, buildSandboxToolFileMounts, buildSandboxToolPathSetupScript, classifySeveredStream, collectSandboxPromptText, createD1PrewarmClaimStore, createSandboxPrewarmer, createSandboxTerminalConnectionRoute, createWorkspaceSandboxManager, createWorkspaceSandboxRecoveryManager, deferredCorpusHash, deleteSecret, detectInteractiveQuestion, driveSandboxTurn, ensureWorkspaceSandbox, flattenHistory, formatSandboxProvisioningSupportDetails, formatSandboxProvisioningUserMessage, getClient, isEgressProxyRecoveryRequiredError, isSandboxApiBearerAuthFailure, isSandboxApiSandboxMissingFailure, isSandboxAuthFailure, isSandboxHostCapacityFailure, isTerminalPromptEvent, isWorkspaceSandboxRecoveryAction, isWorkspaceSandboxRecoveryCode, isWorkspaceSandboxRecoveryState, isWorkspaceSandboxSnapshotRestoreError, mergeExtraMcp, mergeHistoryIntoParts, mintSandboxScopedToken, peekWorkspaceSandbox, preferredWorkspaceSandboxRecoveryBoxKey, readSandboxBinaryBytes, readSecret, requireTransportableModel, resetClientCache, resolveModel, resolveModelSelection, resolveSandboxClientCredentials, runSandboxPrompt, runSandboxToolPathSetup, sandboxToolBinDir, sandboxToolPath, sandboxToolRootDir, secretStoreFromClient, serializeSandboxProvisioningError, shellQuote, shouldRestoreWorkspaceSandboxRecovery, splitDeferredProfileFiles, statSandboxFileSize, storeSecret, streamSandboxPrompt, syncSandboxMemberAdd, syncSandboxMemberRemove, syncSandboxMemberRole, workspaceSandboxRecoveryDiagnostic, workspaceSandboxRecoveryFromError, workspaceSandboxRecoveryMessage, workspaceSandboxRecoveryRecommendedActions, writeProfileFilesToBox };
+export { type AppToolDescriptor, type BuildAppToolMcpServersOptions, type BuildSandboxToolFileMountsOptions, type D1PrewarmClaimStoreOptions, DEFAULT_PREWARM_CLAIM_TABLE, DEFAULT_PROVISION_TIMEOUT_MS, DEFAULT_SANDBOX_RESOURCES, DEFAULT_SIDECAR_PROCESS_PATTERN, type DriveSandboxTurnOptions, EGRESS_PROXY_RECOVERY_PHASE, EGRESS_PROXY_RECOVERY_REQUIRED, ENV_TOTAL_MAX_BYTES, ENV_VALUE_MAX_BYTES, type EnsureWorkspaceSandboxOptions, type LivenessProbeConfig, type MemberSyncSeam, type ModelSelection, type ModelSelectionError, type ModelSelectionFailure, type ModelSelectionSource, type Outcome, PREWARM_CLAIM_TABLE_DDL, PROVISION_PAYLOAD_MAX_BYTES, PYPI_EGRESS_DOMAINS, type PeekWorkspaceSandboxOutcome, type PrewarmClaimD1Like, type PrewarmClaimStore, type PrewarmDecision, type PrewarmEvent, type PrewarmOutcome, type PrewarmResult, type ProfileComposeOptions, type PromptInputPart, type ProviderResolutionConfig, type ProvisionPayloadSections, type ProvisionProfileSection, type ResolveSandboxClientCredentialsOptions, type ResolvedModel, type SafeSandboxErrorCause, type SafeSandboxErrorDiagnostics, type SandboxBuildContext, type SandboxClientCredentials, type SandboxCredentialEnvironment, SandboxEgressPolicyMismatchError, type SandboxEgressPolicySource, type SandboxExecChannel, type SandboxExecOptions, type SandboxExistingBoxStage, type SandboxFileBytesOutcome, type SandboxFileSizeOutcome, SandboxModelResolutionError, type SandboxPermissionLevel, type SandboxPrewarmScope, type SandboxPrewarmer, type SandboxPrewarmerOptions, type SandboxProvisionedObservation, type SandboxReadiness, SandboxRecoveryFailedError, type SandboxRecoveryPhase, type SandboxResourceConfig, type SandboxRestoreSpec, SandboxRuntimeAuthRefreshError, type SandboxRuntimeConfig, type SandboxScope, type SandboxSpendHooks, type SandboxStepTransition, type SandboxStreamEvent, type SandboxTerminalConnectionRouteOptions, type SandboxToolPathOptions, type SandboxToolSpec, type ScopedTokenResult, type SecretStore, type StoppedSandboxResumeFailure, type StoppedSandboxResumeRecovery, type StreamSandboxPromptOptions, type TerminalConnectionBoxLike, WORKSPACE_SANDBOX_HOST_EXHAUSTED, WORKSPACE_SANDBOX_MISSING, WORKSPACE_SANDBOX_RECOVERY_ACTIONS, WORKSPACE_SANDBOX_RECOVERY_CODES, WORKSPACE_SANDBOX_SNAPSHOT_MAX_AGE_MS, WORKSPACE_SANDBOX_UNRECOVERABLE, type WorkspaceSandboxEnsureContext, type WorkspaceSandboxInstanceLike, type WorkspaceSandboxManager, type WorkspaceSandboxManagerOptions, type WorkspaceSandboxRecoveryAction, type WorkspaceSandboxRecoveryCode, type WorkspaceSandboxRecoveryDecision, type WorkspaceSandboxRecoveryManager, WorkspaceSandboxRecoveryRequiredError, type WorkspaceSandboxRecoveryState, type WorkspaceSandboxRecoveryStore, type WorkspaceSandboxSnapshot, type WorkspaceSandboxSnapshotAssessment, type WorkspaceSandboxSnapshotAvailability, type WorkspaceSandboxSnapshotFreshness, type WriteProfileFilesOptions, adaptSandboxStream, assertEnvWithinLimits, assertProvisionPayloadWithinCap, assessWorkspaceSandboxSnapshot, attachReasoningEffort, buildAppToolMcpServers, buildProductEgressPolicy, buildSandboxToolFileMounts, buildSandboxToolPathSetupScript, classifySeveredStream, collectSandboxPromptText, createD1PrewarmClaimStore, createSandboxPrewarmer, createSandboxTerminalConnectionRoute, createWorkspaceSandboxManager, createWorkspaceSandboxRecoveryManager, deferredCorpusHash, deleteSecret, detectInteractiveQuestion, driveSandboxTurn, ensureWorkspaceSandbox, flattenHistory, formatSandboxProvisioningSupportDetails, formatSandboxProvisioningUserMessage, getClient, isEgressProxyRecoveryRequiredError, isSandboxApiBearerAuthFailure, isSandboxApiSandboxMissingFailure, isSandboxAuthFailure, isSandboxHostCapacityFailure, isTerminalPromptEvent, isWorkspaceSandboxRecoveryAction, isWorkspaceSandboxRecoveryCode, isWorkspaceSandboxRecoveryState, isWorkspaceSandboxSnapshotRestoreError, mergeExtraMcp, mergeHistoryIntoParts, mintSandboxScopedToken, peekWorkspaceSandbox, preferredWorkspaceSandboxRecoveryBoxKey, readSandboxBinaryBytes, requireTransportableModel, resetClientCache, resolveModel, resolveModelSelection, resolveSandboxClientCredentials, runSandboxPrompt, runSandboxToolPathSetup, sandboxToolBinDir, sandboxToolPath, sandboxToolRootDir, secretStoreFromClient, serializeSandboxProvisioningError, shellQuote, shouldRestoreWorkspaceSandboxRecovery, splitDeferredProfileFiles, statSandboxFileSize, storeSecret, streamSandboxPrompt, syncSandboxMemberAdd, syncSandboxMemberRemove, syncSandboxMemberRole, workspaceSandboxRecoveryDiagnostic, workspaceSandboxRecoveryFromError, workspaceSandboxRecoveryMessage, workspaceSandboxRecoveryRecommendedActions, writeProfileFilesToBox };

package/dist/sandbox/index.js

@@ -62,7 +62,6 @@ import {
   peekWorkspaceSandbox,
   preferredWorkspaceSandboxRecoveryBoxKey,
   readSandboxBinaryBytes,
-  readSecret,
   requireTransportableModel,
   resetClientCache,
   resolveModel,
@@ -89,7 +88,7 @@ import {
   workspaceSandboxRecoveryMessage,
   workspaceSandboxRecoveryRecommendedActions,
   writeProfileFilesToBox
-} from "../chunk-RRH23CGS.js";
+} from "../chunk-MA2RIIIH.js";
 import "../chunk-TH7L265V.js";
 import "../chunk-LWSJK546.js";
 import "../chunk-P5PIAQVS.js";
@@ -162,7 +161,6 @@ export {
   peekWorkspaceSandbox,
   preferredWorkspaceSandboxRecoveryBoxKey,
   readSandboxBinaryBytes,
-  readSecret,
   requireTransportableModel,
   resetClientCache,
   resolveModel,

package/dist/skills-placement/index.js

@@ -15,6 +15,7 @@ var HARNESS_BRIDGE = {
   "kimi-code": "kimi-code",
   codex: "codex",
   pi: "pi",
+  prime: "prime",
   hermes: "hermes",
   openclaw: "openclaw"
 };

package/dist/skills-placement/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/skills-placement/index.ts"],"sourcesContent":["/**\n * Harness-native skill directory resolution — the one place agent-app binds\n * to the platform's authoritative per-harness skill-dir map.\n *\n * `../skills` renders skill CONTENT (parse, tier-filter, `inline`/`mounted`\n * delivery) but deliberately stops short of naming WHICH cwd path a `mounted`\n * skill lands at on a given harness — that mapping is owned by the platform\n * materializer (`@tangle-network/agent-profile-materialize`'s\n * `skillDirForHarness`), not by app-shell. This subpath exists so no product\n * — and no other agent-app module — ever writes a skill path literal\n * (`~/.claude/skills/...`, `.opencode/skills`, ...) of its own; it bridges\n * agent-app's `Harness` taxonomy onto the platform's `HarnessId` and asks the\n * platform for the answer.\n *\n * Requires the OPTIONAL peer `@tangle-network/agent-profile-materialize`.\n * Products that don't install it simply don't import this subpath — every\n * other agent-app skills surface (`../skills`, `ProfileChannels.skillRefs`)\n * works without it, falling back to `inline` delivery.\n */\n\nimport { KNOWN_HARNESSES, type Harness } from '../harness/index'\nimport { skillDirForHarness, type HarnessId } from '@tangle-network/agent-profile-materialize'\nimport { composeSkills, renderInlineSkills, type ComposedSkills, type SkillEntry } from '../skills/index'\n\n/** agent-app `Harness` -> platform `HarnessId`, identity-mapped for exactly\n *  the harnesses the platform map covers. Harnesses absent here (`amp`,\n *  `factory-droids`, `forge`, `acp`, `cursor`, `cli-base`) resolve to `null` —\n *  {@link composeSkillsForHarness} refuses by default rather than silently\n *  delivering `inline`; a caller that genuinely needs `inline` on one of\n *  these opts in explicitly (`onNoSkillDir: 'inline'`). `cursor`'s adapter\n *  supports `resources.skills` bespokely but isn't in the platform map yet;\n *  treating it as unbridged is the safe posture until the map covers it,\n *  rather than guessing its cwd skill dir here. */\nconst HARNESS_BRIDGE: Partial<Record<Harness, HarnessId>> = {\n  opencode: 'opencode',\n  'claude-code': 'claude-code',\n  nanoclaw: 'nanoclaw',\n  'kimi-code': 'kimi-code',\n  codex: 'codex',\n  pi: 'pi',\n  hermes: 'hermes',\n  openclaw: 'openclaw',\n}\n\n/** Resolve the cwd-relative skill dir `resources.skills` refs materialize\n *  into on `harness` — via the platform's `skillDirForHarness`. `null` when\n *  `harness` isn't bridged (see {@link HARNESS_BRIDGE}) or when the platform\n *  itself has no cwd skill primitive for it (e.g. `hermes`, user-dir-only). */\nexport function resolveSkillDir(harness: Harness): string | null {\n  const bridged = HARNESS_BRIDGE[harness]\n  if (!bridged) return null\n  return skillDirForHarness(bridged)\n}\n\n/** Filter `harnesses` down to those with no mounted skill dir (deduped,\n *  first-seen order preserved) — the set that must fall back to `inline`\n *  delivery, or that a caller should warn about before offering \"mounted\"\n *  install UX. */\nexport function unsupportedSkillHarnesses(harnesses: Iterable<Harness>): Harness[] {\n  const seen = new Set<Harness>()\n  const out: Harness[] = []\n  for (const harness of harnesses) {\n    if (resolveSkillDir(harness) !== null) continue\n    if (seen.has(harness)) continue\n    seen.add(harness)\n    out.push(harness)\n  }\n  return out\n}\n\n/** Inputs to {@link composeSkillsForHarness}. */\nexport interface ComposeSkillsForHarnessInput {\n  skills: SkillEntry[]\n  harness: Harness\n  tier?: string\n  heading?: string\n  /**\n   * What to do when `harness` has no native skill-mount directory (see\n   * {@link resolveSkillDir}). Default `'throw'`: refuse rather than silently\n   * inlining every skill BODY into the system prompt. Pass `'inline'` only as\n   * a deliberate, auditable opt-in — the caller has decided every skill must\n   * reach this harness even though it will be concatenated into the prompt.\n   */\n  onNoSkillDir?: 'throw' | 'inline'\n}\n\n/** `KNOWN_HARNESSES` filtered to those the platform materializer can mount\n *  skill files onto natively (a non-null {@link resolveSkillDir}). Computed\n *  fresh rather than cached — the platform map can grow without a release\n *  here. Used only to build the actionable error in\n *  {@link composeSkillsForHarness}; not exported because it duplicates\n *  {@link unsupportedSkillHarnesses}'s complement and callers should reach\n *  for that instead when they need the harness list at runtime. */\nfunction nativeSkillMountHarnesses(): Harness[] {\n  return KNOWN_HARNESSES.filter((harness) => resolveSkillDir(harness) !== null)\n}\n\n/**\n * Compose {@link ComposedSkills} for `harness`.\n *\n * `mounted` delivery is the standard path: whenever the platform names a cwd\n * skill dir for `harness`, skills ride the typed `resources.skills` channel\n * and the platform materializer writes each one to that directory as a real\n * file — the agent reads it on demand with its own file tools.\n *\n * `inline` delivery — every skill BODY rendered straight into the system\n * prompt — is a NARROW fallback for harnesses with no native skill dir, never\n * a co-equal mode. An `AgentProfile` is a RECIPE that materializes into a\n * sandbox, not a prompt template: skill bodies belong in a file mount, and\n * `prompt.systemPrompt` should carry only what the agent must obey without a\n * tool call (identity, tool-call contract, safety rules, output format) plus\n * a short index of what's mounted. Concatenating skill bodies into the prompt\n * degrades the model toward empty answers once it grows large enough — one\n * product reproduced a 151,882-byte prompt exactly this way, from an\n * unnoticed inline fallback.\n *\n * Because of that, `onNoSkillDir` defaults to `'throw'`: a harness with no\n * skill dir refuses instead of silently inlining. The thrown error names the\n * harness, the skill count, the byte size that would have been inlined, and\n * the harnesses that DO support native mounting. Pass `onNoSkillDir:\n * 'inline'` only as a deliberate, auditable opt-in when every skill genuinely\n * must reach this harness regardless of prompt cost.\n *\n * The one function a product calls instead of hand-checking `resolveSkillDir`\n * and branching between {@link composeSkills}'s two modes itself.\n */\nexport function composeSkillsForHarness(input: ComposeSkillsForHarnessInput): ComposedSkills {\n  const { skills, harness, tier, heading, onNoSkillDir = 'throw' } = input\n  const skillDir = resolveSkillDir(harness)\n  if (skillDir) return composeSkills({ skills, mode: 'mounted', skillDir, tier, heading })\n  if (onNoSkillDir === 'inline') return composeSkills({ skills, mode: 'inline', tier, heading })\n\n  const relevant = tier ? skills.filter((s) => s.tier === tier) : skills\n  const promptSection = renderInlineSkills({ skills, tier, heading })\n  const bytes = new TextEncoder().encode(promptSection).byteLength\n  const mountable = nativeSkillMountHarnesses()\n  throw new Error(\n    `composeSkillsForHarness: \"${harness}\" has no native skill-mount directory. ` +\n      `Inlining ${relevant.length} skill(s) (${bytes} bytes) into its system prompt would silently ` +\n      `convert mounted skills into prompt text — a 151,882-byte prompt shipped this way once, and ` +\n      `oversized prompts degrade toward empty answers. Mount the skills instead: pick a harness with ` +\n      `native skill support (${mountable.join(', ')}), or pass onNoSkillDir: 'inline' to opt in ` +\n      `explicitly and accept the inlined bytes.`,\n  )\n}\n\nexport type { ComposedSkills, SkillEntry } from '../skills/index'\n"],"mappings":";;;;;;;;;AAqBA,SAAS,0BAA0C;AAYnD,IAAM,iBAAsD;AAAA,EAC1D,UAAU;AAAA,EACV,eAAe;AAAA,EACf,UAAU;AAAA,EACV,aAAa;AAAA,EACb,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,QAAQ;AAAA,EACR,UAAU;AACZ;AAMO,SAAS,gBAAgB,SAAiC;AAC/D,QAAM,UAAU,eAAe,OAAO;AACtC,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,mBAAmB,OAAO;AACnC;AAMO,SAAS,0BAA0B,WAAyC;AACjF,QAAM,OAAO,oBAAI,IAAa;AAC9B,QAAM,MAAiB,CAAC;AACxB,aAAW,WAAW,WAAW;AAC/B,QAAI,gBAAgB,OAAO,MAAM,KAAM;AACvC,QAAI,KAAK,IAAI,OAAO,EAAG;AACvB,SAAK,IAAI,OAAO;AAChB,QAAI,KAAK,OAAO;AAAA,EAClB;AACA,SAAO;AACT;AAyBA,SAAS,4BAAuC;AAC9C,SAAO,gBAAgB,OAAO,CAAC,YAAY,gBAAgB,OAAO,MAAM,IAAI;AAC9E;AA+BO,SAAS,wBAAwB,OAAqD;AAC3F,QAAM,EAAE,QAAQ,SAAS,MAAM,SAAS,eAAe,QAAQ,IAAI;AACnE,QAAM,WAAW,gBAAgB,OAAO;AACxC,MAAI,SAAU,QAAO,cAAc,EAAE,QAAQ,MAAM,WAAW,UAAU,MAAM,QAAQ,CAAC;AACvF,MAAI,iBAAiB,SAAU,QAAO,cAAc,EAAE,QAAQ,MAAM,UAAU,MAAM,QAAQ,CAAC;AAE7F,QAAM,WAAW,OAAO,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI;AAChE,QAAM,gBAAgB,mBAAmB,EAAE,QAAQ,MAAM,QAAQ,CAAC;AAClE,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,aAAa,EAAE;AACtD,QAAM,YAAY,0BAA0B;AAC5C,QAAM,IAAI;AAAA,IACR,6BAA6B,OAAO,mDACtB,SAAS,MAAM,cAAc,KAAK,qQAGrB,UAAU,KAAK,IAAI,CAAC;AAAA,EAEjD;AACF;","names":[]}
+{"version":3,"sources":["../../src/skills-placement/index.ts"],"sourcesContent":["/**\n * Harness-native skill directory resolution — the one place agent-app binds\n * to the platform's authoritative per-harness skill-dir map.\n *\n * `../skills` renders skill CONTENT (parse, tier-filter, `inline`/`mounted`\n * delivery) but deliberately stops short of naming WHICH cwd path a `mounted`\n * skill lands at on a given harness — that mapping is owned by the platform\n * materializer (`@tangle-network/agent-profile-materialize`'s\n * `skillDirForHarness`), not by app-shell. This subpath exists so no product\n * — and no other agent-app module — ever writes a skill path literal\n * (`~/.claude/skills/...`, `.opencode/skills`, ...) of its own; it bridges\n * agent-app's `Harness` taxonomy onto the platform's `HarnessId` and asks the\n * platform for the answer.\n *\n * Requires the OPTIONAL peer `@tangle-network/agent-profile-materialize`.\n * Products that don't install it simply don't import this subpath — every\n * other agent-app skills surface (`../skills`, `ProfileChannels.skillRefs`)\n * works without it, falling back to `inline` delivery.\n */\n\nimport { KNOWN_HARNESSES, type Harness } from '../harness/index'\nimport { skillDirForHarness, type HarnessId } from '@tangle-network/agent-profile-materialize'\nimport { composeSkills, renderInlineSkills, type ComposedSkills, type SkillEntry } from '../skills/index'\n\n/** agent-app `Harness` -> platform `HarnessId`, identity-mapped for exactly\n *  the harnesses the platform map covers. Harnesses absent here (`amp`,\n *  `factory-droids`, `forge`, `acp`, `cursor`, `cli-base`) resolve to `null` —\n *  {@link composeSkillsForHarness} refuses by default rather than silently\n *  delivering `inline`; a caller that genuinely needs `inline` on one of\n *  these opts in explicitly (`onNoSkillDir: 'inline'`). `cursor`'s adapter\n *  supports `resources.skills` bespokely but isn't in the platform map yet;\n *  treating it as unbridged is the safe posture until the map covers it,\n *  rather than guessing its cwd skill dir here. */\nconst HARNESS_BRIDGE: Partial<Record<Harness, HarnessId>> = {\n  opencode: 'opencode',\n  'claude-code': 'claude-code',\n  nanoclaw: 'nanoclaw',\n  'kimi-code': 'kimi-code',\n  codex: 'codex',\n  pi: 'pi',\n  prime: 'prime',\n  hermes: 'hermes',\n  openclaw: 'openclaw',\n}\n\n/** Resolve the cwd-relative skill dir `resources.skills` refs materialize\n *  into on `harness` — via the platform's `skillDirForHarness`. `null` when\n *  `harness` isn't bridged (see {@link HARNESS_BRIDGE}) or when the platform\n *  itself has no cwd skill primitive for it (e.g. `hermes`, user-dir-only). */\nexport function resolveSkillDir(harness: Harness): string | null {\n  const bridged = HARNESS_BRIDGE[harness]\n  if (!bridged) return null\n  return skillDirForHarness(bridged)\n}\n\n/** Filter `harnesses` down to those with no mounted skill dir (deduped,\n *  first-seen order preserved) — the set that must fall back to `inline`\n *  delivery, or that a caller should warn about before offering \"mounted\"\n *  install UX. */\nexport function unsupportedSkillHarnesses(harnesses: Iterable<Harness>): Harness[] {\n  const seen = new Set<Harness>()\n  const out: Harness[] = []\n  for (const harness of harnesses) {\n    if (resolveSkillDir(harness) !== null) continue\n    if (seen.has(harness)) continue\n    seen.add(harness)\n    out.push(harness)\n  }\n  return out\n}\n\n/** Inputs to {@link composeSkillsForHarness}. */\nexport interface ComposeSkillsForHarnessInput {\n  skills: SkillEntry[]\n  harness: Harness\n  tier?: string\n  heading?: string\n  /**\n   * What to do when `harness` has no native skill-mount directory (see\n   * {@link resolveSkillDir}). Default `'throw'`: refuse rather than silently\n   * inlining every skill BODY into the system prompt. Pass `'inline'` only as\n   * a deliberate, auditable opt-in — the caller has decided every skill must\n   * reach this harness even though it will be concatenated into the prompt.\n   */\n  onNoSkillDir?: 'throw' | 'inline'\n}\n\n/** `KNOWN_HARNESSES` filtered to those the platform materializer can mount\n *  skill files onto natively (a non-null {@link resolveSkillDir}). Computed\n *  fresh rather than cached — the platform map can grow without a release\n *  here. Used only to build the actionable error in\n *  {@link composeSkillsForHarness}; not exported because it duplicates\n *  {@link unsupportedSkillHarnesses}'s complement and callers should reach\n *  for that instead when they need the harness list at runtime. */\nfunction nativeSkillMountHarnesses(): Harness[] {\n  return KNOWN_HARNESSES.filter((harness) => resolveSkillDir(harness) !== null)\n}\n\n/**\n * Compose {@link ComposedSkills} for `harness`.\n *\n * `mounted` delivery is the standard path: whenever the platform names a cwd\n * skill dir for `harness`, skills ride the typed `resources.skills` channel\n * and the platform materializer writes each one to that directory as a real\n * file — the agent reads it on demand with its own file tools.\n *\n * `inline` delivery — every skill BODY rendered straight into the system\n * prompt — is a NARROW fallback for harnesses with no native skill dir, never\n * a co-equal mode. An `AgentProfile` is a RECIPE that materializes into a\n * sandbox, not a prompt template: skill bodies belong in a file mount, and\n * `prompt.systemPrompt` should carry only what the agent must obey without a\n * tool call (identity, tool-call contract, safety rules, output format) plus\n * a short index of what's mounted. Concatenating skill bodies into the prompt\n * degrades the model toward empty answers once it grows large enough — one\n * product reproduced a 151,882-byte prompt exactly this way, from an\n * unnoticed inline fallback.\n *\n * Because of that, `onNoSkillDir` defaults to `'throw'`: a harness with no\n * skill dir refuses instead of silently inlining. The thrown error names the\n * harness, the skill count, the byte size that would have been inlined, and\n * the harnesses that DO support native mounting. Pass `onNoSkillDir:\n * 'inline'` only as a deliberate, auditable opt-in when every skill genuinely\n * must reach this harness regardless of prompt cost.\n *\n * The one function a product calls instead of hand-checking `resolveSkillDir`\n * and branching between {@link composeSkills}'s two modes itself.\n */\nexport function composeSkillsForHarness(input: ComposeSkillsForHarnessInput): ComposedSkills {\n  const { skills, harness, tier, heading, onNoSkillDir = 'throw' } = input\n  const skillDir = resolveSkillDir(harness)\n  if (skillDir) return composeSkills({ skills, mode: 'mounted', skillDir, tier, heading })\n  if (onNoSkillDir === 'inline') return composeSkills({ skills, mode: 'inline', tier, heading })\n\n  const relevant = tier ? skills.filter((s) => s.tier === tier) : skills\n  const promptSection = renderInlineSkills({ skills, tier, heading })\n  const bytes = new TextEncoder().encode(promptSection).byteLength\n  const mountable = nativeSkillMountHarnesses()\n  throw new Error(\n    `composeSkillsForHarness: \"${harness}\" has no native skill-mount directory. ` +\n      `Inlining ${relevant.length} skill(s) (${bytes} bytes) into its system prompt would silently ` +\n      `convert mounted skills into prompt text — a 151,882-byte prompt shipped this way once, and ` +\n      `oversized prompts degrade toward empty answers. Mount the skills instead: pick a harness with ` +\n      `native skill support (${mountable.join(', ')}), or pass onNoSkillDir: 'inline' to opt in ` +\n      `explicitly and accept the inlined bytes.`,\n  )\n}\n\nexport type { ComposedSkills, SkillEntry } from '../skills/index'\n"],"mappings":";;;;;;;;;AAqBA,SAAS,0BAA0C;AAYnD,IAAM,iBAAsD;AAAA,EAC1D,UAAU;AAAA,EACV,eAAe;AAAA,EACf,UAAU;AAAA,EACV,aAAa;AAAA,EACb,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,UAAU;AACZ;AAMO,SAAS,gBAAgB,SAAiC;AAC/D,QAAM,UAAU,eAAe,OAAO;AACtC,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,mBAAmB,OAAO;AACnC;AAMO,SAAS,0BAA0B,WAAyC;AACjF,QAAM,OAAO,oBAAI,IAAa;AAC9B,QAAM,MAAiB,CAAC;AACxB,aAAW,WAAW,WAAW;AAC/B,QAAI,gBAAgB,OAAO,MAAM,KAAM;AACvC,QAAI,KAAK,IAAI,OAAO,EAAG;AACvB,SAAK,IAAI,OAAO;AAChB,QAAI,KAAK,OAAO;AAAA,EAClB;AACA,SAAO;AACT;AAyBA,SAAS,4BAAuC;AAC9C,SAAO,gBAAgB,OAAO,CAAC,YAAY,gBAAgB,OAAO,MAAM,IAAI;AAC9E;AA+BO,SAAS,wBAAwB,OAAqD;AAC3F,QAAM,EAAE,QAAQ,SAAS,MAAM,SAAS,eAAe,QAAQ,IAAI;AACnE,QAAM,WAAW,gBAAgB,OAAO;AACxC,MAAI,SAAU,QAAO,cAAc,EAAE,QAAQ,MAAM,WAAW,UAAU,MAAM,QAAQ,CAAC;AACvF,MAAI,iBAAiB,SAAU,QAAO,cAAc,EAAE,QAAQ,MAAM,UAAU,MAAM,QAAQ,CAAC;AAE7F,QAAM,WAAW,OAAO,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI;AAChE,QAAM,gBAAgB,mBAAmB,EAAE,QAAQ,MAAM,QAAQ,CAAC;AAClE,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,aAAa,EAAE;AACtD,QAAM,YAAY,0BAA0B;AAC5C,QAAM,IAAI;AAAA,IACR,6BAA6B,OAAO,mDACtB,SAAS,MAAM,cAAc,KAAK,qQAGrB,UAAU,KAAK,IAAI,CAAC;AAAA,EAEjD;AACF;","names":[]}

package/dist/theme/tokens.css

@@ -522,7 +522,8 @@
 
 /* The waiting label. `background-clip: text` over a moving gradient, so the
    shimmer runs THROUGH the glyphs rather than behind them. Marked essential:
-   it is the only signal that work is still in flight. */
+   it is the only signal that work is still in flight. Its reduced-motion
+   answer is at the bottom of this file, with the floor it opts out of. */
 .agent-shimmer {
   background: linear-gradient(
     90deg,
@@ -583,6 +584,13 @@
  * out by declaring `data-motion="essential"`; the exclusion covers that element
  * and its subtree, and `:where()` keeps the selector at zero specificity so a
  * consumer's own `!important` can still win.
+ *
+ * `essential` is an exemption from the BLANKET rule, not a licence to keep
+ * running. It exists because collapsing a meaning-carrying animation to a 1ms
+ * flash destroys the meaning, so the element gets to answer for itself — and it
+ * then OWES that answer. An element with no end condition owes it most, which
+ * is why `.agent-shimmer` states its own below: the sweep stops, and what it
+ * was saying is re-stated as a static difference the reader can still see.
  */
 @media (prefers-reduced-motion: reduce) {
   :root {
@@ -603,6 +611,42 @@
     transition-duration: 1ms !important;
   }
 
+  /* The waiting label's own answer. It is `data-motion="essential"` because the
+     sweep is the ONLY thing separating an agent that is working from one that
+     is stuck, so the floor above must not collapse it — but an INFINITE
+     animation is exactly what someone asking for reduced motion is asking to be
+     rid of, and running it anyway because the element declared itself essential
+     is the override this file calls a defect.
+
+     So the meaning is carried without the motion. The sweep stops and the
+     gradient comes off (it exists only to be moved), which puts the glyphs back
+     under `color` instead of leaving them transparent windows onto it.
+
+     The DOTTED RULE is the discriminator, and it is the only one. Measured in
+     Chromium under `prefers-reduced-motion: reduce`, light and dark: the live
+     label computes `text-decoration: underline dotted` where a settled label
+     beside it computes `none`, and the two resolve to the SAME color and the
+     same weight. That is by construction — `color: inherit` hands the label
+     whatever its context already uses, and the settled label shares that
+     context. In `mission-activity`'s lane both tool names read rgb(12,12,21)
+     light / rgb(236,236,241) dark; in the chat trace toggle "Thinking · 12s"
+     and "Thought for 12s" both read rgb(96,96,99) light / rgb(158,158,160)
+     dark, because that button is `text-muted-foreground`. So the reader tells
+     in-flight from done by the rule under the word, from a still frame — not by
+     tone and not by weight.
+
+     Not `content: '…'` or any other generated text: this element's text is read
+     by a screen reader, and adding pseudo-content changes what is announced. */
+  .agent-shimmer {
+    animation: none;
+    background: none;
+    background-clip: border-box;
+    -webkit-background-clip: border-box;
+    color: inherit;
+    text-decoration: underline dotted currentColor;
+    text-underline-offset: 3px;
+  }
+
   html {
     scroll-behavior: auto !important;
   }

package/dist/web-react/index.d.ts

@@ -134,11 +134,19 @@ type FieldValues = Record<string, {
  * intentionally used only when an interaction carries `answers`, never to
  * guess an answer from the absence of an outstanding sidecar ask. */
 declare function fieldValuesFromAnswers(fields: ChatInteractionField[], answers: InteractionAnswers | undefined): FieldValues;
-/** The submitted value for one field, or null when it has no answer yet. */
-declare function fieldAnswer(field: ChatInteractionField, values: FieldValues): InteractionData[string] | null;
+/** The submitted value for one field, or null when it has no answer yet.
+ *
+ *  Returns `InteractionAnswers[string]`, not the wider `InteractionData[string]`:
+ *  a card reads its value out of a rendered control, so every branch below
+ *  yields a plain scalar or string array. `InteractionData` also admits a
+ *  one-use `secret_handle` reference, which no control here can produce and
+ *  which `onResolved` must never receive — that path persists into the visible
+ *  transcript. Declaring the narrow type keeps the handle out by construction
+ *  rather than by review. */
+declare function fieldAnswer(field: ChatInteractionField, values: FieldValues): InteractionAnswers[string] | null;
 /** All required fields answered → the respond payload; else null (not
  *  submittable yet). Optional unanswered fields are omitted. */
-declare function buildAnswerData(fields: ChatInteractionField[], values: FieldValues): InteractionData | null;
+declare function buildAnswerData(fields: ChatInteractionField[], values: FieldValues): InteractionAnswers | null;
 /** Determine if a status is late answerable by checking if it is expired or cancelled */
 declare function isLateAnswerableStatus(status: ChatInteractionStatus): boolean;
 /** Secrets must never leave the sidecar answer channel for the visible chat
@@ -527,7 +535,14 @@ interface QuestionOptionListProps {
 }
 /** The radio/checkbox option rows for a select field. Renders a fragment of
  *  option `<label>` rows so a card keeps its own wrapping layout and appends
- *  its own write-in input. */
+ *  its own write-in input.
+ *
+ *  The rows arrive as a SEQUENCE (`.agent-arrive` + `--stagger-index`), which
+ *  is the difference between reading a list and being shown one: the eye is
+ *  told there are N choices and in what order before it has read any of them.
+ *  The index is safe to take straight from the map because an option list does
+ *  not re-sort under a mounted card — a different set of options is a
+ *  different `key`, and a different ask resets the card wholesale. */
 declare function QuestionOptionList({ groupName, idPrefix, options, multi, selectedValues, disabled, onToggle, answered, }: QuestionOptionListProps): react.JSX.Element;
 interface InteractionQuestionCardProps {
     interaction: ChatInteraction;
@@ -1050,6 +1065,12 @@ interface MissionActivityLaneProps {
 /**
  * Collapsed sub-rows under a mission step — one row per delegated run —
  * expanding to the step's waterfall. Renders nothing for an empty lane.
+ *
+ * A sub-row appears because a delegated run STARTED or FINISHED, which is the
+ * one kind of list change worth choreographing: it arrives, and the group
+ * arrives as a sequence. Keying on `taskId` is what keeps the rest still — the
+ * snapshot re-renders every poll, and a row whose status merely advanced holds
+ * the DOM node it already had.
  */
 declare function MissionActivityLane({ activity, startedAt, nowMs }: MissionActivityLaneProps): react.JSX.Element | null;
 interface AgentActivityPanelProps {

package/dist/web-react/index.js

@@ -131,7 +131,7 @@ import {
   withoutRecordGridCreated,
   withoutRecordGridRemoved,
   withoutRecordGridUpdate
-} from "../chunk-7HY4LX7O.js";
+} from "../chunk-JEZILUC3.js";
 import "../chunk-FBVLEGEG.js";
 import {
   EvidenceLineageTable,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.45.50",
+  "version": "0.45.52",
   "packageManager": "pnpm@11.17.0",
   "description": "Build agent applications with typed chat, tools, sandboxes, integrations, billing, and evaluation.",
   "keywords": [
@@ -518,15 +518,15 @@
     "@storybook/react": "^10.5.5",
     "@storybook/react-vite": "^10.5.5",
     "@tangle-network/agent-docs": "0.2.1",
-    "@tangle-network/agent-eval": "0.143.0",
-    "@tangle-network/agent-integrations": "0.53.37",
-    "@tangle-network/agent-interface": "0.43.0",
-    "@tangle-network/agent-knowledge": "7.0.8",
-    "@tangle-network/agent-profile-materialize": "0.10.2",
-    "@tangle-network/agent-runtime": "0.126.0",
-    "@tangle-network/brand": "1.3.0",
-    "@tangle-network/sandbox": "0.17.2",
-    "@tangle-network/sandbox-ui": "0.99.2",
+    "@tangle-network/agent-eval": "0.145.3",
+    "@tangle-network/agent-integrations": "0.53.53",
+    "@tangle-network/agent-interface": "0.47.0",
+    "@tangle-network/agent-knowledge": "7.2.4",
+    "@tangle-network/agent-profile-materialize": "0.14.0",
+    "@tangle-network/agent-runtime": "0.132.13",
+    "@tangle-network/brand": "1.4.0",
+    "@tangle-network/sandbox": "0.21.1",
+    "@tangle-network/sandbox-ui": "0.100.1",
     "@tangle-network/ui": "^11.2.2",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/react": "^16.3.2",
@@ -570,15 +570,15 @@
     "@firecrawl/pdf-inspector-wasm": ">=0.1.3",
     "@huggingface/transformers": ">=3",
     "@radix-ui/react-dialog": ">=1.1",
-    "@tangle-network/agent-eval": ">=0.143.0",
+    "@tangle-network/agent-eval": ">=0.145.2",
     "@tangle-network/agent-integrations": ">=0.52.0",
-    "@tangle-network/agent-interface": ">=0.42.1 <0.44.0",
-    "@tangle-network/agent-knowledge": ">=6.1.11",
-    "@tangle-network/agent-profile-materialize": ">=0.9.2",
-    "@tangle-network/agent-runtime": ">=0.126.0",
-    "@tangle-network/brand": ">=1.1.0",
-    "@tangle-network/sandbox": ">=0.15.2",
-    "@tangle-network/sandbox-ui": ">=0.99.2",
+    "@tangle-network/agent-interface": ">=0.47.0 <0.48.0",
+    "@tangle-network/agent-knowledge": ">=7.2.4",
+    "@tangle-network/agent-profile-materialize": ">=0.14.0",
+    "@tangle-network/agent-runtime": ">=0.132.13",
+    "@tangle-network/brand": ">=1.4.0",
+    "@tangle-network/sandbox": ">=0.21.1",
+    "@tangle-network/sandbox-ui": ">=0.100.1",
     "@tangle-network/ui": ">=11.2.2",
     "@xyflow/react": ">=12.0.0",
     "better-auth": ">=1.6.16",