Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

agent-bundle@0.3.0

Minor Changes

• 1a77058: Refuse agent-bundle uninstall claude|codex --force --purge-data --confirm-purge with AB7009 when no store receipt proves the bundle owns the install. Without a receipt, web-data and Claude's plugins/data/<id>/ are no longer deleted. The refusal happens before any host verb runs, and --plan refuses the same way. --force without --purge-data still uninstalls through the host CLI and keeps the data. Remove unreceipted data by hand. (feat(install)!: refuse forced uninstall data purge without a store receipt (AB7009) #853)
• 18a913e: Remove plugin.version and mismatch diagnostic AB4008 (retired); the key now fails with AB4001, and AgentBundlePluginConfig drops its index signature, so unknown plugin.* keys are type errors. Remove the agent-bundle install --force alias (use --replace); the emitted install.mjs exits 2 on --force without --uninstall. Tool routes must default-export defineTool(...); split named tool exports fail with AB4810. Route App config.template resolves only from the route module, else AB4827. Remove ServedApp and generated CLI isTty. @agent-bundle/runtime removes the Hook/Mcp lowerers, createRscRequestContext, RscRequestContext, AgentDocumentSnapshot, and the McpResultProps, McpDataProps, McpResourceLinkProps, and McpEmbeddedResourceProps types. rsc-markdown-stream drops its React 18 element, provider, and dispatcher paths (refactor: remove legacy API compatibility paths #810)
• 3b667c8: Require every local stdio MCP entry to default-export a server factory: self-connecting entries no longer build and AB4730 is now an error instead of an informational nudge; retire AB4736, so documents left in the top-level skills/, commands/, and rules/ locations are ignored rather than reported (feat(config)!: require a server factory from every stdio MCP entry and retire AB4736 #839)
• 2a129e9: Remove the legacy install readers from install, uninstall, doctor, and the emitted install.mjs: format-1 receipts (agent-bundle-install-receipt/1), receipt-less "legacy" adoption of a pre-receipt Cursor copy, the in-tree <plugin root>/state handling and its --purge-data removal, the compatibility receipt stateRoot field, and the AB7317 unsupported-runtime report. A Cursor directory without a format-2 receipt naming the plugin is foreign: install refuses it with AB7005 (with or without --replace), uninstall refuses it with AB7007 (with or without --force), and Doctor reports it as AB7321; remove such a directory by hand and reinstall. An in-tree state/ is an ordinary unowned entry that uninstall retains and lists, never purges. A runtime that rejects the status probe is a failed probe (AB7318). AB7317, AB7329, and AB7332 are retired. (refactor(install): delete legacy receipt and state readers #841)
• b9fbc2e: Drop the complete Flight worker message from the development server's production route invocation path. Generated workers have streamed chunk and end since fix: stream generated MCP/event Flight bytes before render completion #718, so an artifact compiled before that and restored from the epoch store now fails its render with Compiled route worker failed. instead of rendering one buffered document. Rebuild the project to restore rendering. (refactor(routes): drop the complete Flight worker message #838)
• c42b93d: Make CompiledAgentRoute.resultSchemaState required on every compiled route; require { kind: 'resource' } for agent-bundle/test App and resource contract fixtures (bare {} rejected); stop reporting AB4840 for removed before/preflight event exports. (refactor(routes): delete remaining legacy route shapes #840)
• 12a1ddc: Remove the development runtime App-asset path: DevRuntimeSession.readAsset, the /api/runtime/assets route (now a 400 invalid path), the DevRuntimeAssetRequest and DevRuntimePreparedMcpApp exports, the prepared-runtime apps input, DevRuntimeStatus.hmrReady, the mcp-app runtime surface kind, the mcp-protocol, resource-selection, sandbox/csp, and app-bridge diagnostic phases, and the launch and credential fields on DevRuntimePreparedMcpServer, which is now { id, name, targets }. (refactor(dev)!: remove the development runtime App-asset path #856)
• 78d75f2: Remove the Workbench runtime App preview path. The dev server no longer serves /api/runtime/apps/** or /api/runtime/mcp/sessions/**, DevServerSession (from agent-bundle and agent-bundle/api) drops openRuntimeClientSurface, and DevRuntimeEventInput no longer accepts runtime.app.updated, runtime.hmr.client-connected, or runtime.hmr.client-disconnected. The AB8022 410 and AB8023 413 runtime App responses are gone; both codes keep their other meanings. Runtime runs, status, surfaces, and MCP App previews for artifact sessions are unchanged. (refactor(dev)!: delete the callerless runtime App preview path #852)
• 116ea16: Remove the runtime provider MCP contract from agent-bundle/api. DevRuntimeSession no longer has mcpRegistry or clientSurface(), createRuntimeMcpRegistry and the DevRuntimeMcp*, RuntimeMcp*, DevRuntimeProviderMcpRegistry, and DevRuntimeClientSurfaceEndpoint types are gone, run inspections (DevRuntimeInspectionEnvelope) no longer carry app, and DevRuntimeEventInput and the root RuntimeEvent type drop the runtime.mcp.* events with their mcpRegistryRevision, mcpSessionId, and mcpSessionRevision fields. The Workbench rejects a run inspection that still includes app (AB8206). createRuntimeGenerationStore and the generation store contracts are unchanged. (refactor(dev)!: delete the runtime provider MCP contract #855)

Patch Changes

• cf82ffe: Write the agentBundleRstest() and agentBundleBrowserRstest() generated modules under .agent-bundle/test (meta.mjs, route-setup.mjs, browser-app-setup.mjs) atomically, so concurrent Rstest processes never load a partial agent-bundle/meta or setup module (fix(rstest): write generated test modules atomically #844)
• c74702b: Make agent-bundle build emit byte-identical artifacts when one source is built from different checkout paths: generated wrappers import project modules by project-relative POSIX specifiers, and the manifest modelDigest hashes route, handler, web, and state paths relative to the project root. The NormalizedPlugin model returned by validate, inspect, and build now carries projectRoot (fix(build): keep the checkout path out of artifact bytes #835).
• ab5ae66: Replace Codex plugins with codex plugin add only so nested MCP overrides in config.toml survive. Refuse disabled or unknown-enablement Codex replacements (AB7004) because the native plugin CLI has no qualified settings-preserving update API. (fix(install): Codex add-only replace; refuse disabled/unknown enablement #824)
• 7b99b1f: Update the bundled Effect runtime to effect@4.0.0-rc.117 (with @effect/platform-node-shared and @effect/platform-node on the same RC). Consumer installs of agent-bundle and @agent-bundle/runtime no longer pull in msgpackr, msgpackr-extract, or fast-check through effect. (chore(deps): Effect RC re-pin to 4.0.0-rc.117 #832)
• a0652c1: Refuse a foreign destination and a same-version marketplace restage from install.mjs when the destination lacks paths listed in agent-bundle.manifest.json, instead of crashing with ENOENT. (fix(install): hash install.mjs destinations from files present #818)
• 13c9570: Accept a CommonJS module.exports server factory as the default export of a
  stdio MCP entry, so AB4730 no longer rejects a .cjs entry the generated
  lifecycle shell can run, and reject a SQLite state store at open with the
  typed corrupt error when its journal schema differs in column nullability
  from the one the current kernel writes. (fix: address review threads on the legacy-removal PRs #850)
• 7c96689: Add ToolConfig.excludeClients to hide generated MCP tools from matching negotiated client-name prefixes and reject direct calls while preserving other clients and CLI/browser projections. (feat: filter MCP tool inventory by negotiated client #820)
• ff7421b: Remove the unused runtime MCP App renderer from the bundled Workbench. App previews keep rendering through the server-issued sandbox frame; the package no longer ships dist/workbench/src/mcp/APP-RENDERER-LICENSE, and NOTICE and THIRD_PARTY_NOTICES drop the MCP Inspector AppRenderer attribution. (refactor(workbench): delete the unmounted ext-apps runtime App bridge #845)
• cb9792d: Generate repository-root host marketplaces with output.repositoryMarketplace so committed artifacts install directly from GitHub without hand-written manifests (Emit repository-root marketplaces for committed GitHub artifacts #827).
• 10485c4: Preserve output.repositoryMarketplace files during temporary MCP, hook, and serve-app builds, including failed operations (Preserve repository marketplaces during temporary builds #828).
• 6e836aa: Raise the @agent-bundle/runtime zod peer floor from ^4.5.4 to ^4.6.4: projects on zod@4.5.x or earlier must upgrade their direct zod dependency before installing the runtime, or npm rejects the required peer with ERESOLVE. agent-bundle now compiles its bundled schemas with zod 4.6.4, and the cli-tool and mcp-server scaffold templates pin zod@4.6.4 to satisfy the new peer. (chore(deps): move zod to 4.6.4 and raise the runtime zod peer floor to ^4.6.4 #842)
• Updated dependencies [7b99b1f]
• Updated dependencies [13c9570]
• Updated dependencies [184ff02]
• Updated dependencies [18a913e]
• Updated dependencies [349aa1a]
• Updated dependencies [6e836aa]
  • @agent-bundle/runtime@0.2.0

@agent-bundle/runtime@0.2.0

Minor Changes

• 184ff02: Fail createSqliteStateDriver({ root }).open() from @agent-bundle/runtime/state/sqlite with a typed corrupt AgentStateError when the root holds a pre-fix(state): legacy sqlite adoption, correct migration semantics, atomic memory migration, surfaced close errors #201 <sanitized id>-<12 hex of utf8(id)>.sqlite store and no store under the current name. Previously an empty store opened beside it silently. The error names the old file: move it and its -wal/-shm sidecars out of the state root, or delete them, and the next open creates a fresh store. The old store is never adopted or migrated. (feat(runtime)!: refuse to open a fresh SQLite store beside a pre-#201 file #854)
• 18a913e: Remove plugin.version and mismatch diagnostic AB4008 (retired); the key now fails with AB4001, and AgentBundlePluginConfig drops its index signature, so unknown plugin.* keys are type errors. Remove the agent-bundle install --force alias (use --replace); the emitted install.mjs exits 2 on --force without --uninstall. Tool routes must default-export defineTool(...); split named tool exports fail with AB4810. Route App config.template resolves only from the route module, else AB4827. Remove ServedApp and generated CLI isTty. @agent-bundle/runtime removes the Hook/Mcp lowerers, createRscRequestContext, RscRequestContext, AgentDocumentSnapshot, and the McpResultProps, McpDataProps, McpResourceLinkProps, and McpEmbeddedResourceProps types. rsc-markdown-stream drops its React 18 element, provider, and dispatcher paths (refactor: remove legacy API compatibility paths #810)
• 349aa1a: Stop adopting pre-fix(state): legacy sqlite adoption, correct migration semantics, atomic memory migration, surfaced close errors #201 durable SQLite state stores in createSqliteStateDriver: a root-mode store still named <sanitized id>-<12 hex of utf8(id)>.sqlite is no longer renamed to <sanitized id>-<sha256(id)[0:16]>.sqlite and adopted, and a journal table without a result_state column is no longer upgraded in place but rejected on open with a typed corrupt error. Move old stores and their -wal/-shm sidecars out of the state root, or delete them, before upgrading. (refactor(runtime): delete legacy SQLite state adoption #837)
• 6e836aa: Raise the @agent-bundle/runtime zod peer floor from ^4.5.4 to ^4.6.4: projects on zod@4.5.x or earlier must upgrade their direct zod dependency before installing the runtime, or npm rejects the required peer with ERESOLVE. agent-bundle now compiles its bundled schemas with zod 4.6.4, and the cli-tool and mcp-server scaffold templates pin zod@4.6.4 to satisfy the new peer. (chore(deps): move zod to 4.6.4 and raise the runtime zod peer floor to ^4.6.4 #842)

Patch Changes

• 7b99b1f: Update the bundled Effect runtime to effect@4.0.0-rc.117 (with @effect/platform-node-shared and @effect/platform-node on the same RC). Consumer installs of agent-bundle and @agent-bundle/runtime no longer pull in msgpackr, msgpackr-extract, or fast-check through effect. (chore(deps): Effect RC re-pin to 4.0.0-rc.117 #832)
• 13c9570: Accept a CommonJS module.exports server factory as the default export of a
  stdio MCP entry, so AB4730 no longer rejects a .cjs entry the generated
  lifecycle shell can run, and reject a SQLite state store at open with the
  typed corrupt error when its journal schema differs in column nullability
  from the one the current kernel writes. (fix: address review threads on the legacy-removal PRs #850)
• Updated dependencies [18a913e]
  • rsc-markdown-stream@0.1.3

create-agent-bundle@0.1.2

Patch Changes

• 7b99b1f: Update the bundled Effect runtime to effect@4.0.0-rc.117 (with @effect/platform-node-shared and @effect/platform-node on the same RC). Consumer installs of agent-bundle and @agent-bundle/runtime no longer pull in msgpackr, msgpackr-extract, or fast-check through effect. (chore(deps): Effect RC re-pin to 4.0.0-rc.117 #832)
• e57c0ac: Update the minimal, mcp-server, and cli-tool templates to @types/node 26.5.1, update the routed templates to React 19.3.0, and move the mcp-server template to @types/react 19.3.0. (refactor(consumers): remove legacy Agent Bundle APIs #808)
• 3b667c8: Require every local stdio MCP entry to default-export a server factory: self-connecting entries no longer build and AB4730 is now an error instead of an informational nudge; retire AB4736, so documents left in the top-level skills/, commands/, and rules/ locations are ignored rather than reported (feat(config)!: require a server factory from every stdio MCP entry and retire AB4736 #839)
• 6e836aa: Raise the @agent-bundle/runtime zod peer floor from ^4.5.4 to ^4.6.4: projects on zod@4.5.x or earlier must upgrade their direct zod dependency before installing the runtime, or npm rejects the required peer with ERESOLVE. agent-bundle now compiles its bundled schemas with zod 4.6.4, and the cli-tool and mcp-server scaffold templates pin zod@4.6.4 to satisfy the new peer. (chore(deps): move zod to 4.6.4 and raise the runtime zod peer floor to ^4.6.4 #842)
• Updated dependencies [cf82ffe]
• Updated dependencies [c74702b]
• Updated dependencies [ab5ae66]
• Updated dependencies [7b99b1f]
• Updated dependencies [a0652c1]
• Updated dependencies [13c9570]
• Updated dependencies [7c96689]
• Updated dependencies [184ff02]
• Updated dependencies [1a77058]
• Updated dependencies [18a913e]
• Updated dependencies [3b667c8]
• Updated dependencies [2a129e9]
• Updated dependencies [b9fbc2e]
• Updated dependencies [349aa1a]
• Updated dependencies [c42b93d]
• Updated dependencies [12a1ddc]
• Updated dependencies [78d75f2]
• Updated dependencies [116ea16]
• Updated dependencies [ff7421b]
• Updated dependencies [cb9792d]
• Updated dependencies [10485c4]
• Updated dependencies [6e836aa]
  • agent-bundle@0.3.0
  • @agent-bundle/runtime@0.2.0

rsc-markdown-stream@0.1.3

Patch Changes

• 18a913e: Remove plugin.version and mismatch diagnostic AB4008 (retired); the key now fails with AB4001, and AgentBundlePluginConfig drops its index signature, so unknown plugin.* keys are type errors. Remove the agent-bundle install --force alias (use --replace); the emitted install.mjs exits 2 on --force without --uninstall. Tool routes must default-export defineTool(...); split named tool exports fail with AB4810. Route App config.template resolves only from the route module, else AB4827. Remove ServedApp and generated CLI isTty. @agent-bundle/runtime removes the Hook/Mcp lowerers, createRscRequestContext, RscRequestContext, AgentDocumentSnapshot, and the McpResultProps, McpDataProps, McpResourceLinkProps, and McpEmbeddedResourceProps types. rsc-markdown-stream drops its React 18 element, provider, and dispatcher paths (refactor: remove legacy API compatibility paths #810)