@tangle-network/agent-app 0.45.7 → 0.45.8

package/dist/assistant/index.js

@@ -3,18 +3,18 @@ import {
   ChatMessages,
   ModelPicker,
   ProviderLogo
-} from "../chunk-YRFB2KEA.js";
+} from "../chunk-CKUZVDZ7.js";
+import "../chunk-6MUJROBT.js";
+import "../chunk-BATKJP3P.js";
 import "../chunk-FBVLEGEG.js";
 import "../chunk-GINKOZFD.js";
 import "../chunk-YTMKRL3L.js";
 import "../chunk-GEYACSFW.js";
-import "../chunk-6MUJROBT.js";
-import "../chunk-BATKJP3P.js";
 import "../chunk-QY4BRKRJ.js";
 import "../chunk-WBHPN5DY.js";
-import "../chunk-UXMIPX3Z.js";
-import "../chunk-ZVEEWGDK.js";
+import "../chunk-WUZZVQKR.js";
 import "../chunk-KWXUBMXU.js";
+import "../chunk-ZVEEWGDK.js";
 import "../chunk-5EPIPT4V.js";
 import "../chunk-3ZK5IJSW.js";
 import "../chunk-YJMCRXQQ.js";

package/dist/chat-routes/index.js

@@ -1,3 +1,6 @@
+import {
+  parseJsonObjectBody
+} from "../chunk-J25RST7G.js";
 import {
   createSandboxFileIndexRoute
 } from "../chunk-QY4BRKRJ.js";
@@ -32,16 +35,12 @@ import {
 import {
   createInteractionAnswerRoute
 } from "../chunk-3BK3BC2L.js";
-import {
-  parseJsonObjectBody
-} from "../chunk-J25RST7G.js";
 import {
   attachmentInputToPart,
   attachmentKindForMime,
   mentionInputToPart,
   toChatMessageParts
-} from "../chunk-UXMIPX3Z.js";
-import "../chunk-ZVEEWGDK.js";
+} from "../chunk-WUZZVQKR.js";
 import {
   ChatTurnInputError,
   DISPATCH_MAX_MEDIA_PARTS,
@@ -63,6 +62,7 @@ import {
   promptPartsByteSize,
   validateSandboxMentionPath
 } from "../chunk-KWXUBMXU.js";
+import "../chunk-ZVEEWGDK.js";
 import {
   asRecord,
   asString,
@@ -100,9 +100,9 @@ import {
   flattenHistory,
   readSandboxBinaryBytes,
   statSandboxFileSize
-} from "../chunk-4XNCMUVI.js";
-import "../chunk-LWSJK546.js";
+} from "../chunk-REUAPWUS.js";
 import "../chunk-73F3CKVK.js";
+import "../chunk-LWSJK546.js";
 import "../chunk-ITCINLSU.js";
 import "../chunk-IVEKCOM7.js";
 import "../chunk-YEFFHORB.js";

package/dist/chat-store/index.js

@@ -19,9 +19,9 @@ import {
   mentionInputToPart,
   mentionPartsFromMessageParts,
   toChatMessageParts
-} from "../chunk-UXMIPX3Z.js";
-import "../chunk-ZVEEWGDK.js";
+} from "../chunk-WUZZVQKR.js";
 import "../chunk-KWXUBMXU.js";
+import "../chunk-ZVEEWGDK.js";
 import {
   attachmentPartKey
 } from "../chunk-5EPIPT4V.js";

package/dist/{chunk-YRFB2KEA.js → chunk-CKUZVDZ7.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-YTMKRL3L.js";
 import {
   attachmentPartsFromMessageParts
-} from "./chunk-UXMIPX3Z.js";
+} from "./chunk-WUZZVQKR.js";
 import {
   formatBytes
 } from "./chunk-KWXUBMXU.js";
@@ -4309,4 +4309,4 @@ export {
   useThinkingSeconds,
   ChatMessages
 };
-//# sourceMappingURL=chunk-YRFB2KEA.js.map
+//# sourceMappingURL=chunk-CKUZVDZ7.js.map

package/dist/{chunk-DMYCGXBP.js → chunk-OO4DROKM.js}

@@ -11,4 +11,4 @@ export {
   DesignCanvasLazy,
   DesignCanvasChromeLazy
 };
-//# sourceMappingURL=chunk-DMYCGXBP.js.map
+//# sourceMappingURL=chunk-OO4DROKM.js.map

package/dist/{chunk-4XNCMUVI.js → chunk-REUAPWUS.js}

@@ -1,10 +1,10 @@
+import {
+  assertHarnessModelCompatible
+} from "./chunk-73F3CKVK.js";
 import {
   assertProfilePromptWithinBudget,
   fingerprintAgentProfile
 } from "./chunk-LWSJK546.js";
-import {
-  assertHarnessModelCompatible
-} from "./chunk-73F3CKVK.js";
 import {
   buildAppToolMcpServer
 } from "./chunk-IVEKCOM7.js";
@@ -2224,4 +2224,4 @@ export {
   isTerminalPromptEvent,
   detectInteractiveQuestion
 };
-//# sourceMappingURL=chunk-4XNCMUVI.js.map
+//# sourceMappingURL=chunk-REUAPWUS.js.map

package/dist/{chunk-UXMIPX3Z.js → chunk-WUZZVQKR.js}

@@ -1,9 +1,9 @@
-import {
-  persistedPartToWorkProduct
-} from "./chunk-ZVEEWGDK.js";
 import {
   mentionKindForPath
 } from "./chunk-KWXUBMXU.js";
+import {
+  persistedPartToWorkProduct
+} from "./chunk-ZVEEWGDK.js";
 import {
   persistedPartToInteraction
 } from "./chunk-3ZK5IJSW.js";
@@ -155,4 +155,4 @@ export {
   buildAttachmentPromptBlock,
   historyContentWithAttachments
 };
-//# sourceMappingURL=chunk-UXMIPX3Z.js.map
+//# sourceMappingURL=chunk-WUZZVQKR.js.map

package/dist/chunk-ZSJRDHCN.js

@@ -0,0 +1,129 @@
+// src/peer-floors/check.ts
+import { existsSync, readFileSync } from "fs";
+import { dirname, join } from "path";
+function readInstalledManifest(name, fromDir, modulesDir) {
+  let dir = fromDir;
+  for (; ; ) {
+    const manifest = join(dir, modulesDir, name, "package.json");
+    if (existsSync(manifest)) {
+      return JSON.parse(readFileSync(manifest, "utf8"));
+    }
+    const parent = dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+function parseVersion(version) {
+  const [core] = version.split(/[-+]/);
+  const parts = (core ?? "").split(".").map((p) => Number.parseInt(p, 10));
+  return [parts[0] ?? 0, parts[1] ?? 0, parts[2] ?? 0];
+}
+function compare(a, b) {
+  const va = parseVersion(a);
+  const vb = parseVersion(b);
+  for (let i = 0; i < 3; i += 1) {
+    if (va[i] !== vb[i]) return va[i] < vb[i] ? -1 : 1;
+  }
+  return 0;
+}
+function satisfiesComparator(version, comparator) {
+  const trimmed = comparator.trim();
+  if (!trimmed || trimmed === "*" || trimmed === "x") return true;
+  const match = /^(>=|<=|>|<|=|\^|~)?\s*v?(.+)$/.exec(trimmed);
+  if (!match) return false;
+  const [, op = "=", target = ""] = match;
+  const cmp = compare(version, target);
+  switch (op) {
+    case ">=":
+      return cmp >= 0;
+    case "<=":
+      return cmp <= 0;
+    case ">":
+      return cmp > 0;
+    case "<":
+      return cmp < 0;
+    case "=":
+      return cmp === 0;
+    case "~": {
+      const [major, minor] = parseVersion(target);
+      const [vMajor, vMinor] = parseVersion(version);
+      return cmp >= 0 && vMajor === major && vMinor === minor;
+    }
+    case "^": {
+      const [major, minor] = parseVersion(target);
+      const [vMajor, vMinor] = parseVersion(version);
+      if (cmp < 0) return false;
+      if (major > 0) return vMajor === major;
+      if (minor > 0) return vMajor === 0 && vMinor === minor;
+      return vMajor === 0 && vMinor === 0;
+    }
+    default:
+      return false;
+  }
+}
+function satisfiesRange(version, range) {
+  return range.split("||").some(
+    (alternative) => alternative.trim().split(/\s+/).filter(Boolean).every((c) => satisfiesComparator(version, c))
+  );
+}
+function checkPeerFloors(options) {
+  const {
+    appDir,
+    shell = "@tangle-network/agent-app",
+    scope = "@tangle-network/",
+    modulesDir = "node_modules"
+  } = options;
+  const shellManifest = options.shellManifest ?? readInstalledManifest(shell, appDir, modulesDir);
+  if (!shellManifest) throw new Error(`${shell} is not installed under ${appDir}`);
+  const appManifest = JSON.parse(readFileSync(join(appDir, "package.json"), "utf8"));
+  const declared = {
+    ...appManifest.dependencies,
+    ...appManifest.devDependencies,
+    ...appManifest.optionalDependencies
+  };
+  const floors = Object.entries(shellManifest.peerDependencies ?? {}).filter(([name]) => name.startsWith(scope));
+  const rows = floors.map(([name, range]) => {
+    const installed = readInstalledManifest(name, appDir, modulesDir)?.version ?? null;
+    if (installed === null) {
+      return { name, range, installed, verdict: declared[name] ? "absent-but-declared" : "absent-unused" };
+    }
+    return {
+      name,
+      range,
+      installed,
+      verdict: satisfiesRange(installed, range) ? "satisfied" : "below-floor"
+    };
+  });
+  const violations = rows.filter((row) => row.verdict === "below-floor" || row.verdict === "absent-but-declared");
+  return {
+    shellVersion: shellManifest.version ?? "unknown",
+    rows,
+    violations,
+    ok: violations.length === 0
+  };
+}
+function describePeerFloorViolation(row, shellVersion, shell = "@tangle-network/agent-app") {
+  if (row.verdict === "below-floor") {
+    return `PEER FLOOR VIOLATED: ${shell}@${shellVersion} requires ${row.name}@${row.range}, but ${row.installed} is installed. A peer floor encodes a wire contract \u2014 bump the dependency, do not widen the floor. A caret on a 0.x version is minor-locked (^0.36.0 can never resolve to 0.38.0), so reinstalling alone will not fix this: change the pin, in EVERY place it appears including pnpm.overrides.`;
+  }
+  return `${row.name} is a declared dependency of this app, but no installed version could be read, so its peer floor ${row.range} went UNCHECKED. Failing loudly rather than reporting a pass this guard did not earn.`;
+}
+function formatPeerFloorReport(report, shell = "@tangle-network/agent-app") {
+  const width = Math.max(...report.rows.map((r) => r.name.length), 4);
+  const lines = [
+    `${shell}@${report.shellVersion} \u2014 peer floors`,
+    "",
+    ...report.rows.map((row) => `  ${row.verdict === "satisfied" ? "ok  " : row.verdict.startsWith("absent") ? "--  " : "FAIL"} ${row.name.padEnd(width)}  installed ${(row.installed ?? "(none)").padEnd(10)} floor ${row.range}`),
+    "",
+    report.ok ? `all ${report.rows.length} floors satisfied` : report.violations.map((row) => describePeerFloorViolation(row, report.shellVersion, shell)).join("\n\n")
+  ];
+  return lines.join("\n");
+}
+
+export {
+  satisfiesRange,
+  checkPeerFloors,
+  describePeerFloorViolation,
+  formatPeerFloorReport
+};
+//# sourceMappingURL=chunk-ZSJRDHCN.js.map

package/dist/chunk-ZSJRDHCN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/peer-floors/check.ts"],"sourcesContent":["import { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\n/**\n * Audit a consumer's installed tree against the peer floors this package\n * declares.\n *\n * A peer floor is not documentation — it encodes a WIRE CONTRACT, and breaking\n * one is invisible to every other gate. `pnpm` only WARNS on an unmet peer when\n * the package is also a direct dependency, and says nothing at all for an unmet\n * OPTIONAL peer, which is how most of the substrate is declared here. So a\n * product can sit below a floor with a clean install, a clean typecheck, a green\n * suite and a successful deploy, and fail only on a live wire call:\n *\n *   `@tangle-network/sandbox` 0.15.0 → 0.15.1 changed the sidecar spawn body\n *   from `{ command }` to `{ executable, args }`. Below the floor, every\n *   `box.exec()` on a live sandbox returns 400 `Unrecognized key: \"command\"`.\n *\n *   `@tangle-network/agent-interface` 0.38.0 changed MCP config values from\n *   plain strings to tagged public/secret-ref objects. Below the floor, this\n *   package fails at MODULE LOAD with \"does not provide an export named\n *   defineAgentProfilePublicConfig\" — while `tsc` reports zero errors, because\n *   the types resolve and only the runtime export is missing.\n *\n * That second shape is why this exists as its own gate: typecheck cannot see it,\n * and a suite only sees it as dozens of unrelated-looking import failures.\n */\n\n/** Installed, and inside the declared range. */\nexport type PeerFloorVerdict =\n  | 'satisfied'\n  /** Installed and BELOW the floor — the silent case this module exists for. */\n  | 'below-floor'\n  /** Not installed and never asked for. A legitimate answer for an optional peer. */\n  | 'absent-unused'\n  /** Declared by the app, yet no version could be read, so the floor went\n   *  UNCHECKED. Reported as a failure rather than a pass this did not earn. */\n  | 'absent-but-declared'\n\nexport interface PeerFloorRow {\n  readonly name: string\n  readonly range: string\n  readonly installed: string | null\n  readonly verdict: PeerFloorVerdict\n}\n\nexport interface PeerFloorReport {\n  readonly shellVersion: string\n  readonly rows: readonly PeerFloorRow[]\n  readonly violations: readonly PeerFloorRow[]\n  readonly ok: boolean\n}\n\nexport interface CheckPeerFloorsOptions {\n  /** Directory of the app under audit — the one whose `package.json` and\n   *  installed tree are read. */\n  appDir: string\n  /** Package whose peer floors are the contract. Defaults to this shell. */\n  shell?: string\n  /** Only audit peers under this scope. Third-party peers (react, drizzle) are\n   *  the app's own business, not part of the Tangle wire contract. Pass `''` to\n   *  audit every peer. */\n  scope?: string\n  /** Floors to audit against, when the shell is not resolvable from `appDir` —\n   *  the package auditing ITSELF, which has no copy of itself in its own\n   *  `node_modules`. Without this a package cannot check that the contract it\n   *  publishes is one its own dev install satisfies. */\n  shellManifest?: { version?: string; peerDependencies?: Record<string, string> }\n  /** Directory name to walk for installed packages. Overridable so a test can\n   *  point at a committed fixture tree — `node_modules` is gitignored\n   *  everywhere, so a fixture using that name could not be committed, and a\n   *  calibration proof that is not committed is a proof that stops running. */\n  modulesDir?: string\n}\n\n/**\n * Read a package's manifest off disk, walking `modulesDir` up from `fromDir`.\n *\n * Deliberately NOT `require.resolve('<name>/package.json')`: most of these\n * packages omit `./package.json` from their `exports` map, so that throws\n * ERR_PACKAGE_PATH_NOT_EXPORTED — and a try/catch around it reports an INSTALLED\n * package as absent, turning the whole audit into a silent no-op. Walking the\n * tree is exports-map-independent and mirrors Node's own resolution order, so\n * the version reported is the version that would actually load.\n *\n * Returns null only when no directory for the package exists anywhere up the\n * tree, which is the genuine not-installed case.\n */\nfunction readInstalledManifest(\n  name: string,\n  fromDir: string,\n  modulesDir: string,\n): { version?: string; peerDependencies?: Record<string, string> } | null {\n  let dir = fromDir\n  for (;;) {\n    const manifest = join(dir, modulesDir, name, 'package.json')\n    if (existsSync(manifest)) {\n      return JSON.parse(readFileSync(manifest, 'utf8')) as {\n        version?: string\n        peerDependencies?: Record<string, string>\n      }\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return null\n    dir = parent\n  }\n}\n\n/**\n * Minimal range satisfaction for the ranges peer floors actually use:\n * `>=x <y`, `^x.y.z`, `~x.y.z`, `x.y.z`, and `*`/`x`.\n *\n * Hand-rolled rather than taking a `semver` dependency, because this package\n * ships zero runtime dependencies and a checker that forces one on every\n * consumer is a worse trade than 40 lines of comparison. Prerelease versions\n * compare by their release part — a floor is about the wire contract, and a\n * prerelease of a satisfying version speaks it.\n */\nfunction parseVersion(version: string): [number, number, number] {\n  const [core] = version.split(/[-+]/)\n  const parts = (core ?? '').split('.').map((p) => Number.parseInt(p, 10))\n  return [parts[0] ?? 0, parts[1] ?? 0, parts[2] ?? 0]\n}\n\nfunction compare(a: string, b: string): number {\n  const va = parseVersion(a)\n  const vb = parseVersion(b)\n  for (let i = 0; i < 3; i += 1) {\n    if (va[i]! !== vb[i]!) return va[i]! < vb[i]! ? -1 : 1\n  }\n  return 0\n}\n\nfunction satisfiesComparator(version: string, comparator: string): boolean {\n  const trimmed = comparator.trim()\n  if (!trimmed || trimmed === '*' || trimmed === 'x') return true\n  const match = /^(>=|<=|>|<|=|\\^|~)?\\s*v?(.+)$/.exec(trimmed)\n  if (!match) return false\n  const [, op = '=', target = ''] = match\n  const cmp = compare(version, target)\n  switch (op) {\n    case '>=': return cmp >= 0\n    case '<=': return cmp <= 0\n    case '>': return cmp > 0\n    case '<': return cmp < 0\n    case '=': return cmp === 0\n    case '~': {\n      // ~1.2.3 allows patch bumps; ~1.2 allows minor.\n      const [major, minor] = parseVersion(target)\n      const [vMajor, vMinor] = parseVersion(version)\n      return cmp >= 0 && vMajor === major && vMinor === minor\n    }\n    case '^': {\n      // A caret on a 0.x version is MINOR-locked: ^0.36.0 can never resolve to\n      // 0.38.0. That is the single most common reason a floor cannot be met by\n      // reinstalling, so it is modelled exactly rather than approximated.\n      const [major, minor] = parseVersion(target)\n      const [vMajor, vMinor] = parseVersion(version)\n      if (cmp < 0) return false\n      if (major > 0) return vMajor === major\n      if (minor > 0) return vMajor === 0 && vMinor === minor\n      return vMajor === 0 && vMinor === 0\n    }\n    default: return false\n  }\n}\n\nexport function satisfiesRange(version: string, range: string): boolean {\n  // `||` is alternation; whitespace inside an alternative is conjunction.\n  return range.split('||').some((alternative) =>\n    alternative.trim().split(/\\s+/).filter(Boolean).every((c) => satisfiesComparator(version, c)),\n  )\n}\n\n/** Audit one app directory against the shell's declared peer floors. */\nexport function checkPeerFloors(options: CheckPeerFloorsOptions): PeerFloorReport {\n  const {\n    appDir,\n    shell = '@tangle-network/agent-app',\n    scope = '@tangle-network/',\n    modulesDir = 'node_modules',\n  } = options\n\n  const shellManifest = options.shellManifest ?? readInstalledManifest(shell, appDir, modulesDir)\n  if (!shellManifest) throw new Error(`${shell} is not installed under ${appDir}`)\n\n  const appManifest = JSON.parse(readFileSync(join(appDir, 'package.json'), 'utf8')) as {\n    dependencies?: Record<string, string>\n    devDependencies?: Record<string, string>\n    optionalDependencies?: Record<string, string>\n  }\n  const declared = {\n    ...appManifest.dependencies,\n    ...appManifest.devDependencies,\n    ...appManifest.optionalDependencies,\n  }\n\n  const floors = Object.entries(shellManifest.peerDependencies ?? {})\n    .filter(([name]) => name.startsWith(scope))\n\n  const rows = floors.map(([name, range]): PeerFloorRow => {\n    const installed = readInstalledManifest(name, appDir, modulesDir)?.version ?? null\n    if (installed === null) {\n      return { name, range, installed, verdict: declared[name] ? 'absent-but-declared' : 'absent-unused' }\n    }\n    return {\n      name,\n      range,\n      installed,\n      verdict: satisfiesRange(installed, range) ? 'satisfied' : 'below-floor',\n    }\n  })\n\n  const violations = rows.filter((row) => row.verdict === 'below-floor' || row.verdict === 'absent-but-declared')\n  return {\n    shellVersion: shellManifest.version ?? 'unknown',\n    rows,\n    violations,\n    ok: violations.length === 0,\n  }\n}\n\n/** The failure message for one violating row. Split out so a caller can raise\n *  it from a test and a CLI can print it identically. */\nexport function describePeerFloorViolation(row: PeerFloorRow, shellVersion: string, shell = '@tangle-network/agent-app'): string {\n  if (row.verdict === 'below-floor') {\n    return `PEER FLOOR VIOLATED: ${shell}@${shellVersion} requires ${row.name}@${row.range}, `\n      + `but ${row.installed} is installed. A peer floor encodes a wire contract — bump the `\n      + `dependency, do not widen the floor. A caret on a 0.x version is minor-locked `\n      + `(^0.36.0 can never resolve to 0.38.0), so reinstalling alone will not fix this: `\n      + `change the pin, in EVERY place it appears including pnpm.overrides.`\n  }\n  return `${row.name} is a declared dependency of this app, but no installed version could be `\n    + `read, so its peer floor ${row.range} went UNCHECKED. Failing loudly rather than `\n    + `reporting a pass this guard did not earn.`\n}\n\nexport function formatPeerFloorReport(report: PeerFloorReport, shell = '@tangle-network/agent-app'): string {\n  const width = Math.max(...report.rows.map((r) => r.name.length), 4)\n  const lines = [\n    `${shell}@${report.shellVersion} — peer floors`,\n    '',\n    ...report.rows.map((row) =>\n      `  ${row.verdict === 'satisfied' ? 'ok  ' : row.verdict.startsWith('absent') ? '--  ' : 'FAIL'} `\n      + `${row.name.padEnd(width)}  installed ${(row.installed ?? '(none)').padEnd(10)} floor ${row.range}`),\n    '',\n    report.ok\n      ? `all ${report.rows.length} floors satisfied`\n      : report.violations.map((row) => describePeerFloorViolation(row, report.shellVersion, shell)).join('\\n\\n'),\n  ]\n  return lines.join('\\n')\n}\n"],"mappings":";AAAA,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,YAAY;AAuF9B,SAAS,sBACP,MACA,SACA,YACwE;AACxE,MAAI,MAAM;AACV,aAAS;AACP,UAAM,WAAW,KAAK,KAAK,YAAY,MAAM,cAAc;AAC3D,QAAI,WAAW,QAAQ,GAAG;AACxB,aAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAAA,IAIlD;AACA,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK,QAAO;AAC3B,UAAM;AAAA,EACR;AACF;AAYA,SAAS,aAAa,SAA2C;AAC/D,QAAM,CAAC,IAAI,IAAI,QAAQ,MAAM,MAAM;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,OAAO,SAAS,GAAG,EAAE,CAAC;AACvE,SAAO,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;AACrD;AAEA,SAAS,QAAQ,GAAW,GAAmB;AAC7C,QAAM,KAAK,aAAa,CAAC;AACzB,QAAM,KAAK,aAAa,CAAC;AACzB,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG;AAC7B,QAAI,GAAG,CAAC,MAAO,GAAG,CAAC,EAAI,QAAO,GAAG,CAAC,IAAK,GAAG,CAAC,IAAK,KAAK;AAAA,EACvD;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,SAAiB,YAA6B;AACzE,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,CAAC,WAAW,YAAY,OAAO,YAAY,IAAK,QAAO;AAC3D,QAAM,QAAQ,iCAAiC,KAAK,OAAO;AAC3D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,CAAC,EAAE,KAAK,KAAK,SAAS,EAAE,IAAI;AAClC,QAAM,MAAM,QAAQ,SAAS,MAAM;AACnC,UAAQ,IAAI;AAAA,IACV,KAAK;AAAM,aAAO,OAAO;AAAA,IACzB,KAAK;AAAM,aAAO,OAAO;AAAA,IACzB,KAAK;AAAK,aAAO,MAAM;AAAA,IACvB,KAAK;AAAK,aAAO,MAAM;AAAA,IACvB,KAAK;AAAK,aAAO,QAAQ;AAAA,IACzB,KAAK,KAAK;AAER,YAAM,CAAC,OAAO,KAAK,IAAI,aAAa,MAAM;AAC1C,YAAM,CAAC,QAAQ,MAAM,IAAI,aAAa,OAAO;AAC7C,aAAO,OAAO,KAAK,WAAW,SAAS,WAAW;AAAA,IACpD;AAAA,IACA,KAAK,KAAK;AAIR,YAAM,CAAC,OAAO,KAAK,IAAI,aAAa,MAAM;AAC1C,YAAM,CAAC,QAAQ,MAAM,IAAI,aAAa,OAAO;AAC7C,UAAI,MAAM,EAAG,QAAO;AACpB,UAAI,QAAQ,EAAG,QAAO,WAAW;AACjC,UAAI,QAAQ,EAAG,QAAO,WAAW,KAAK,WAAW;AACjD,aAAO,WAAW,KAAK,WAAW;AAAA,IACpC;AAAA,IACA;AAAS,aAAO;AAAA,EAClB;AACF;AAEO,SAAS,eAAe,SAAiB,OAAwB;AAEtE,SAAO,MAAM,MAAM,IAAI,EAAE;AAAA,IAAK,CAAC,gBAC7B,YAAY,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,EAAE,MAAM,CAAC,MAAM,oBAAoB,SAAS,CAAC,CAAC;AAAA,EAC9F;AACF;AAGO,SAAS,gBAAgB,SAAkD;AAChF,QAAM;AAAA,IACJ;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,aAAa;AAAA,EACf,IAAI;AAEJ,QAAM,gBAAgB,QAAQ,iBAAiB,sBAAsB,OAAO,QAAQ,UAAU;AAC9F,MAAI,CAAC,cAAe,OAAM,IAAI,MAAM,GAAG,KAAK,2BAA2B,MAAM,EAAE;AAE/E,QAAM,cAAc,KAAK,MAAM,aAAa,KAAK,QAAQ,cAAc,GAAG,MAAM,CAAC;AAKjF,QAAM,WAAW;AAAA,IACf,GAAG,YAAY;AAAA,IACf,GAAG,YAAY;AAAA,IACf,GAAG,YAAY;AAAA,EACjB;AAEA,QAAM,SAAS,OAAO,QAAQ,cAAc,oBAAoB,CAAC,CAAC,EAC/D,OAAO,CAAC,CAAC,IAAI,MAAM,KAAK,WAAW,KAAK,CAAC;AAE5C,QAAM,OAAO,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAoB;AACvD,UAAM,YAAY,sBAAsB,MAAM,QAAQ,UAAU,GAAG,WAAW;AAC9E,QAAI,cAAc,MAAM;AACtB,aAAO,EAAE,MAAM,OAAO,WAAW,SAAS,SAAS,IAAI,IAAI,wBAAwB,gBAAgB;AAAA,IACrG;AACA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,eAAe,WAAW,KAAK,IAAI,cAAc;AAAA,IAC5D;AAAA,EACF,CAAC;AAED,QAAM,aAAa,KAAK,OAAO,CAAC,QAAQ,IAAI,YAAY,iBAAiB,IAAI,YAAY,qBAAqB;AAC9G,SAAO;AAAA,IACL,cAAc,cAAc,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,IACA,IAAI,WAAW,WAAW;AAAA,EAC5B;AACF;AAIO,SAAS,2BAA2B,KAAmB,cAAsB,QAAQ,6BAAqC;AAC/H,MAAI,IAAI,YAAY,eAAe;AACjC,WAAO,wBAAwB,KAAK,IAAI,YAAY,aAAa,IAAI,IAAI,IAAI,IAAI,KAAK,SAC3E,IAAI,SAAS;AAAA,EAI1B;AACA,SAAO,GAAG,IAAI,IAAI,oGACa,IAAI,KAAK;AAE1C;AAEO,SAAS,sBAAsB,QAAyB,QAAQ,6BAAqC;AAC1G,QAAM,QAAQ,KAAK,IAAI,GAAG,OAAO,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,GAAG,CAAC;AAClE,QAAM,QAAQ;AAAA,IACZ,GAAG,KAAK,IAAI,OAAO,YAAY;AAAA,IAC/B;AAAA,IACA,GAAG,OAAO,KAAK,IAAI,CAAC,QAClB,KAAK,IAAI,YAAY,cAAc,SAAS,IAAI,QAAQ,WAAW,QAAQ,IAAI,SAAS,MAAM,IACzF,IAAI,KAAK,OAAO,KAAK,CAAC,gBAAgB,IAAI,aAAa,UAAU,OAAO,EAAE,CAAC,UAAU,IAAI,KAAK,EAAE;AAAA,IACvG;AAAA,IACA,OAAO,KACH,OAAO,OAAO,KAAK,MAAM,sBACzB,OAAO,WAAW,IAAI,CAAC,QAAQ,2BAA2B,KAAK,OAAO,cAAc,KAAK,CAAC,EAAE,KAAK,MAAM;AAAA,EAC7G;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}

package/dist/design-canvas-react/index.js

@@ -43,6 +43,10 @@ import {
   selectTickStep
 } from "../chunk-KPRBFNGT.js";
 import "../chunk-TZO3SOUL.js";
+import {
+  DesignCanvasChromeLazy,
+  DesignCanvasLazy
+} from "../chunk-OO4DROKM.js";
 import "../chunk-ZN5J47UX.js";
 import {
   DEFAULT_INSERT_TEMPLATES,
@@ -88,10 +92,6 @@ import {
   bleedAwareExportBounds,
   scaleForPreset
 } from "../chunk-U4BXAZCN.js";
-import {
-  DesignCanvasChromeLazy,
-  DesignCanvasLazy
-} from "../chunk-DMYCGXBP.js";
 import "../chunk-J25RST7G.js";
 
 // src/design-canvas-react/components/CanvasInsertPanel.tsx

package/dist/design-canvas-react/lazy.js

@@ -1,7 +1,7 @@
 import {
   DesignCanvasChromeLazy,
   DesignCanvasLazy
-} from "../chunk-DMYCGXBP.js";
+} from "../chunk-OO4DROKM.js";
 export {
   DesignCanvasChromeLazy,
   DesignCanvasLazy

package/dist/peer-floors/check.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Audit a consumer's installed tree against the peer floors this package
+ * declares.
+ *
+ * A peer floor is not documentation — it encodes a WIRE CONTRACT, and breaking
+ * one is invisible to every other gate. `pnpm` only WARNS on an unmet peer when
+ * the package is also a direct dependency, and says nothing at all for an unmet
+ * OPTIONAL peer, which is how most of the substrate is declared here. So a
+ * product can sit below a floor with a clean install, a clean typecheck, a green
+ * suite and a successful deploy, and fail only on a live wire call:
+ *
+ *   `@tangle-network/sandbox` 0.15.0 → 0.15.1 changed the sidecar spawn body
+ *   from `{ command }` to `{ executable, args }`. Below the floor, every
+ *   `box.exec()` on a live sandbox returns 400 `Unrecognized key: "command"`.
+ *
+ *   `@tangle-network/agent-interface` 0.38.0 changed MCP config values from
+ *   plain strings to tagged public/secret-ref objects. Below the floor, this
+ *   package fails at MODULE LOAD with "does not provide an export named
+ *   defineAgentProfilePublicConfig" — while `tsc` reports zero errors, because
+ *   the types resolve and only the runtime export is missing.
+ *
+ * That second shape is why this exists as its own gate: typecheck cannot see it,
+ * and a suite only sees it as dozens of unrelated-looking import failures.
+ */
+/** Installed, and inside the declared range. */
+type PeerFloorVerdict = 'satisfied'
+/** Installed and BELOW the floor — the silent case this module exists for. */
+ | 'below-floor'
+/** Not installed and never asked for. A legitimate answer for an optional peer. */
+ | 'absent-unused'
+/** Declared by the app, yet no version could be read, so the floor went
+ *  UNCHECKED. Reported as a failure rather than a pass this did not earn. */
+ | 'absent-but-declared';
+interface PeerFloorRow {
+    readonly name: string;
+    readonly range: string;
+    readonly installed: string | null;
+    readonly verdict: PeerFloorVerdict;
+}
+interface PeerFloorReport {
+    readonly shellVersion: string;
+    readonly rows: readonly PeerFloorRow[];
+    readonly violations: readonly PeerFloorRow[];
+    readonly ok: boolean;
+}
+interface CheckPeerFloorsOptions {
+    /** Directory of the app under audit — the one whose `package.json` and
+     *  installed tree are read. */
+    appDir: string;
+    /** Package whose peer floors are the contract. Defaults to this shell. */
+    shell?: string;
+    /** Only audit peers under this scope. Third-party peers (react, drizzle) are
+     *  the app's own business, not part of the Tangle wire contract. Pass `''` to
+     *  audit every peer. */
+    scope?: string;
+    /** Floors to audit against, when the shell is not resolvable from `appDir` —
+     *  the package auditing ITSELF, which has no copy of itself in its own
+     *  `node_modules`. Without this a package cannot check that the contract it
+     *  publishes is one its own dev install satisfies. */
+    shellManifest?: {
+        version?: string;
+        peerDependencies?: Record<string, string>;
+    };
+    /** Directory name to walk for installed packages. Overridable so a test can
+     *  point at a committed fixture tree — `node_modules` is gitignored
+     *  everywhere, so a fixture using that name could not be committed, and a
+     *  calibration proof that is not committed is a proof that stops running. */
+    modulesDir?: string;
+}
+declare function satisfiesRange(version: string, range: string): boolean;
+/** Audit one app directory against the shell's declared peer floors. */
+declare function checkPeerFloors(options: CheckPeerFloorsOptions): PeerFloorReport;
+/** The failure message for one violating row. Split out so a caller can raise
+ *  it from a test and a CLI can print it identically. */
+declare function describePeerFloorViolation(row: PeerFloorRow, shellVersion: string, shell?: string): string;
+declare function formatPeerFloorReport(report: PeerFloorReport, shell?: string): string;
+
+export { type CheckPeerFloorsOptions, type PeerFloorReport, type PeerFloorRow, type PeerFloorVerdict, checkPeerFloors, describePeerFloorViolation, formatPeerFloorReport, satisfiesRange };

package/dist/peer-floors/check.js

@@ -0,0 +1,13 @@
+import {
+  checkPeerFloors,
+  describePeerFloorViolation,
+  formatPeerFloorReport,
+  satisfiesRange
+} from "../chunk-ZSJRDHCN.js";
+export {
+  checkPeerFloors,
+  describePeerFloorViolation,
+  formatPeerFloorReport,
+  satisfiesRange
+};
+//# sourceMappingURL=check.js.map

package/dist/peer-floors/check.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/peer-floors/cli.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/peer-floors/cli.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import {
+  checkPeerFloors,
+  formatPeerFloorReport
+} from "../chunk-ZSJRDHCN.js";
+
+// src/peer-floors/cli.ts
+var appDir = process.argv[2] ?? process.cwd();
+try {
+  const report = checkPeerFloors({ appDir });
+  process.stdout.write(`${formatPeerFloorReport(report)}
+`);
+  process.exit(report.ok ? 0 : 1);
+} catch (err) {
+  process.stderr.write(`agent-app-peer-check failed: ${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(1);
+}
+//# sourceMappingURL=cli.js.map

package/dist/peer-floors/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/peer-floors/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * `agent-app-peer-check` — fail a consumer's CI when its installed tree sits\n * below a peer floor this package declares.\n *\n * Runs in the CONSUMER's repo, over the consumer's own `node_modules`, because\n * the floors only mean anything against a real install. Add it next to\n * typecheck:\n *\n *     \"scripts\": { \"peer-check\": \"agent-app-peer-check\" }\n *\n * Exits 1 on any violation, 0 otherwise. Takes no configuration — the floors\n * come from the installed shell manifest, so the check cannot go stale when the\n * shell adds an engine.\n */\nimport { checkPeerFloors, formatPeerFloorReport } from './check'\n\nconst appDir = process.argv[2] ?? process.cwd()\n\ntry {\n  const report = checkPeerFloors({ appDir })\n  process.stdout.write(`${formatPeerFloorReport(report)}\\n`)\n  process.exit(report.ok ? 0 : 1)\n} catch (err) {\n  process.stderr.write(`agent-app-peer-check failed: ${err instanceof Error ? err.message : String(err)}\\n`)\n  process.exit(1)\n}\n"],"mappings":";;;;;;;AAiBA,IAAM,SAAS,QAAQ,KAAK,CAAC,KAAK,QAAQ,IAAI;AAE9C,IAAI;AACF,QAAM,SAAS,gBAAgB,EAAE,OAAO,CAAC;AACzC,UAAQ,OAAO,MAAM,GAAG,sBAAsB,MAAM,CAAC;AAAA,CAAI;AACzD,UAAQ,KAAK,OAAO,KAAK,IAAI,CAAC;AAChC,SAAS,KAAK;AACZ,UAAQ,OAAO,MAAM,gCAAgC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AACzG,UAAQ,KAAK,CAAC;AAChB;","names":[]}

package/dist/preset-cloudflare/index.js

@@ -1,9 +1,9 @@
-import {
-  createWorkspaceKeyManager
-} from "../chunk-GXE6KHTS.js";
 import {
   createFieldCrypto
 } from "../chunk-TA5Q4I2K.js";
+import {
+  createWorkspaceKeyManager
+} from "../chunk-GXE6KHTS.js";
 
 // src/preset-cloudflare/workflow-instance.ts
 async function ensureCloudflareWorkflowInstance(binding, input) {

package/dist/sandbox/index.js

@@ -85,9 +85,9 @@ import {
   workspaceSandboxRecoveryMessage,
   workspaceSandboxRecoveryRecommendedActions,
   writeProfileFilesToBox
-} from "../chunk-4XNCMUVI.js";
-import "../chunk-LWSJK546.js";
+} from "../chunk-REUAPWUS.js";
 import "../chunk-73F3CKVK.js";
+import "../chunk-LWSJK546.js";
 import "../chunk-ITCINLSU.js";
 import "../chunk-IVEKCOM7.js";
 import "../chunk-YEFFHORB.js";

package/dist/web-react/index.js

@@ -78,7 +78,14 @@ import {
   useSmoothText,
   useThinkingSeconds,
   waterfallLayout
-} from "../chunk-YRFB2KEA.js";
+} from "../chunk-CKUZVDZ7.js";
+import {
+  useComposerAttachments
+} from "../chunk-6MUJROBT.js";
+import {
+  tabTerminalConnectionId,
+  useSandboxTerminalConnection
+} from "../chunk-BATKJP3P.js";
 import "../chunk-FBVLEGEG.js";
 import "../chunk-GINKOZFD.js";
 import {
@@ -96,13 +103,6 @@ import {
 import {
   parseReviewQueueItem
 } from "../chunk-GEYACSFW.js";
-import {
-  useComposerAttachments
-} from "../chunk-6MUJROBT.js";
-import {
-  tabTerminalConnectionId,
-  useSandboxTerminalConnection
-} from "../chunk-BATKJP3P.js";
 import "../chunk-QY4BRKRJ.js";
 import {
   ATTACHMENT_ACCEPT
@@ -114,8 +114,7 @@ import {
   isChatAttachmentPart,
   mentionInputToPart,
   mentionPartsFromMessageParts
-} from "../chunk-UXMIPX3Z.js";
-import "../chunk-ZVEEWGDK.js";
+} from "../chunk-WUZZVQKR.js";
 import {
   DISPATCH_MAX_MEDIA_PARTS,
   DISPATCH_MAX_PARTS,
@@ -128,6 +127,7 @@ import {
   mediaTypeForMentionPath,
   mentionKindForPath
 } from "../chunk-KWXUBMXU.js";
+import "../chunk-ZVEEWGDK.js";
 import {
   attachmentPartKey
 } from "../chunk-5EPIPT4V.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.45.7",
+  "version": "0.45.8",
   "packageManager": "pnpm@11.17.0",
   "description": "Build agent applications with typed chat, tools, sandboxes, integrations, billing, and evaluation.",
   "keywords": [
@@ -33,7 +33,8 @@
   ],
   "bin": {
     "agent-app-theme-check": "./dist/theme-contract/cli.js",
-    "agent-app-preflight": "./dist/preflight/cli.js"
+    "agent-app-preflight": "./dist/preflight/cli.js",
+    "agent-app-peer-check": "./dist/peer-floors/cli.js"
   },
   "exports": {
     "./package.json": "./package.json",
@@ -418,7 +419,12 @@
       "import": "./dist/theme-contract/index.js",
       "default": "./dist/theme-contract/index.js"
     },
-    "./styles": "./dist/theme/tokens.css"
+    "./styles": "./dist/theme/tokens.css",
+    "./peer-floors": {
+      "types": "./dist/peer-floors/check.d.ts",
+      "import": "./dist/peer-floors/check.js",
+      "default": "./dist/peer-floors/check.js"
+    }
   },
   "scripts": {
     "build": "tsup",