From 7d5771311363c811f409c269e38c5d26290c1ac6 Mon Sep 17 00:00:00 2001 From: ScriptedAlchemy Date: Thu, 3 Sep 2026 07:30:21 +0000 Subject: [PATCH 1/5] chore(changesets): backfill changesets for merged PRs that shipped without one Thirteen merged PRs changed a publishable package's shipped surface without a changeset. Each gets a patch entry named for the PR (backfill-pr-.md) with a user-facing summary and the PR reference, per .changeset/README.md. --- .changeset/backfill-pr-118.md | 5 +++++ .changeset/backfill-pr-163.md | 5 +++++ .changeset/backfill-pr-164.md | 6 ++++++ .changeset/backfill-pr-165.md | 5 +++++ .changeset/backfill-pr-168.md | 6 ++++++ .changeset/backfill-pr-183.md | 5 +++++ .changeset/backfill-pr-2.md | 5 +++++ .changeset/backfill-pr-208.md | 5 +++++ .changeset/backfill-pr-303.md | 5 +++++ .changeset/backfill-pr-304.md | 5 +++++ .changeset/backfill-pr-305.md | 5 +++++ .changeset/backfill-pr-348.md | 7 +++++++ .changeset/backfill-pr-7.md | 5 +++++ 13 files changed, 69 insertions(+) create mode 100644 .changeset/backfill-pr-118.md create mode 100644 .changeset/backfill-pr-163.md create mode 100644 .changeset/backfill-pr-164.md create mode 100644 .changeset/backfill-pr-165.md create mode 100644 .changeset/backfill-pr-168.md create mode 100644 .changeset/backfill-pr-183.md create mode 100644 .changeset/backfill-pr-2.md create mode 100644 .changeset/backfill-pr-208.md create mode 100644 .changeset/backfill-pr-303.md create mode 100644 .changeset/backfill-pr-304.md create mode 100644 .changeset/backfill-pr-305.md create mode 100644 .changeset/backfill-pr-348.md create mode 100644 .changeset/backfill-pr-7.md diff --git a/.changeset/backfill-pr-118.md b/.changeset/backfill-pr-118.md new file mode 100644 index 000000000..a46bb6e36 --- /dev/null +++ b/.changeset/backfill-pr-118.md @@ -0,0 +1,5 @@ +--- +"agent-bundle": patch +--- + +Make Workbench MCP App teardown and project reloads robust under load: the MCP App frame relay default `closeTimeoutMs` is now 5s and the server graceful-close receipt window 35s, so a healthy graceful close is no longer superseded by the force-close timer; project preparation re-reads a config that changed between load and snapshot instead of serving a stale model under a fresh revision; script playground readiness is sequenced through the process tree and PID files are published atomically. (#118) diff --git a/.changeset/backfill-pr-163.md b/.changeset/backfill-pr-163.md new file mode 100644 index 000000000..83ed8b8a3 --- /dev/null +++ b/.changeset/backfill-pr-163.md @@ -0,0 +1,5 @@ +--- +"agent-bundle": patch +--- + +MCP sessions re-check the caller abort signal after the asynchronous epoch availability probe and before tool dispatch, so a request cancelled while the probe is pending no longer dispatches the tool. (#163) diff --git a/.changeset/backfill-pr-164.md b/.changeset/backfill-pr-164.md new file mode 100644 index 000000000..cb908ec9f --- /dev/null +++ b/.changeset/backfill-pr-164.md @@ -0,0 +1,6 @@ +--- +"agent-bundle": patch +"@agent-bundle/runtime": patch +--- + +Close an abort race in the Effect boundary bridges of both packages: `interruptWhenAborted` now re-checks `signal.aborted` after subscribing, so a signal aborted between composition and start interrupts the effect instead of hanging. (#164) diff --git a/.changeset/backfill-pr-165.md b/.changeset/backfill-pr-165.md new file mode 100644 index 000000000..745567377 --- /dev/null +++ b/.changeset/backfill-pr-165.md @@ -0,0 +1,5 @@ +--- +"agent-bundle": patch +--- + +Static route config extraction rejects non-finite numeric literals such as `1e999` with the `AB4806` dynamic-config diagnostic instead of digesting them as `null`, preserves a literal `__proto__` key as an own property, and route discovery now includes `.jsx` script modules, which were previously skipped silently. (#165) diff --git a/.changeset/backfill-pr-168.md b/.changeset/backfill-pr-168.md new file mode 100644 index 000000000..33a2bb320 --- /dev/null +++ b/.changeset/backfill-pr-168.md @@ -0,0 +1,6 @@ +--- +"agent-bundle": patch +"create-agent-bundle": patch +--- + +Generated route declarations exclude schema-less script routes, and `create-agent-bundle` requires coherent `agent-bundle` / `@agent-bundle/runtime` identities when scaffolding from local tarballs. (#168) diff --git a/.changeset/backfill-pr-183.md b/.changeset/backfill-pr-183.md new file mode 100644 index 000000000..6ef15e2fe --- /dev/null +++ b/.changeset/backfill-pr-183.md @@ -0,0 +1,5 @@ +--- +"agent-bundle": patch +--- + +The published `agent-bundle` manifest no longer carries a `workspace:*` devDependency on `@agent-bundle/runtime`, which npm refuses to install; the optional peer is satisfied through a workspace override instead. (#183) diff --git a/.changeset/backfill-pr-2.md b/.changeset/backfill-pr-2.md new file mode 100644 index 000000000..1049460ff --- /dev/null +++ b/.changeset/backfill-pr-2.md @@ -0,0 +1,5 @@ +--- +"agent-bundle": patch +--- + +Add the `agent-bundle` compiler, the `agent-bundle` CLI, and the developer Workbench: compile a typed Agent Bundle configuration into portable, Codex, and Claude Code plugin artifacts and iterate on them from a local dev server. (#2) diff --git a/.changeset/backfill-pr-208.md b/.changeset/backfill-pr-208.md new file mode 100644 index 000000000..251b3c645 --- /dev/null +++ b/.changeset/backfill-pr-208.md @@ -0,0 +1,5 @@ +--- +"@agent-bundle/runtime": patch +--- + +The sqlite state driver closes its connection through an infallible finalizer again: a close failure on the success path surfaces as a defect instead of breaking the declaration build, and on the failing path the original failure stays the reported cause. (#208) diff --git a/.changeset/backfill-pr-303.md b/.changeset/backfill-pr-303.md new file mode 100644 index 000000000..9fe609067 --- /dev/null +++ b/.changeset/backfill-pr-303.md @@ -0,0 +1,5 @@ +--- +"agent-bundle": patch +--- + +Bump the published `open` dependency from 11.0.1 to 11.0.2. (#303) diff --git a/.changeset/backfill-pr-304.md b/.changeset/backfill-pr-304.md new file mode 100644 index 000000000..da1bf4016 --- /dev/null +++ b/.changeset/backfill-pr-304.md @@ -0,0 +1,5 @@ +--- +"@agent-bundle/runtime": patch +--- + +Bump the published `zod` dependency from 4.4.3 to 4.5.4. (#304) diff --git a/.changeset/backfill-pr-305.md b/.changeset/backfill-pr-305.md new file mode 100644 index 000000000..0559edacc --- /dev/null +++ b/.changeset/backfill-pr-305.md @@ -0,0 +1,5 @@ +--- +"agent-bundle": patch +--- + +Bump the published `ignore` dependency from 7.0.6 to 7.0.7. (#305) diff --git a/.changeset/backfill-pr-348.md b/.changeset/backfill-pr-348.md new file mode 100644 index 000000000..3ee89eb6c --- /dev/null +++ b/.changeset/backfill-pr-348.md @@ -0,0 +1,7 @@ +--- +"agent-bundle": patch +"@agent-bundle/runtime": patch +"create-agent-bundle": patch +--- + +Consolidate duplicated guards and helpers onto canonical modules, with hot-path fixes riding along: route-graph module text is read once per build instead of once per surface, the sqlite state driver caches prepared statements, directory walks run with bounded concurrency, and the MCP App consent-capability vocabulary now lives in a browser-safe module so the Workbench bundle no longer pulls in `node:*` imports. (#348) diff --git a/.changeset/backfill-pr-7.md b/.changeset/backfill-pr-7.md new file mode 100644 index 000000000..4a52baab8 --- /dev/null +++ b/.changeset/backfill-pr-7.md @@ -0,0 +1,5 @@ +--- +"agent-bundle": patch +--- + +Bump the published `@rslint/core` dependency from 0.8.0 to 0.8.1. (#7) From c385e811e5322486c101180f1a9b37d6c1e21a14 Mon Sep 17 00:00:00 2001 From: ScriptedAlchemy Date: Thu, 3 Sep 2026 07:36:54 +0000 Subject: [PATCH 2/5] chore(changesets): rewrite backfill summaries in imperative, consumer-first form --- .changeset/backfill-pr-163.md | 2 +- .changeset/backfill-pr-165.md | 2 +- .changeset/backfill-pr-168.md | 2 +- .changeset/backfill-pr-183.md | 2 +- .changeset/backfill-pr-208.md | 2 +- .changeset/backfill-pr-348.md | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.changeset/backfill-pr-163.md b/.changeset/backfill-pr-163.md index 83ed8b8a3..911638835 100644 --- a/.changeset/backfill-pr-163.md +++ b/.changeset/backfill-pr-163.md @@ -2,4 +2,4 @@ "agent-bundle": patch --- -MCP sessions re-check the caller abort signal after the asynchronous epoch availability probe and before tool dispatch, so a request cancelled while the probe is pending no longer dispatches the tool. (#163) +Stop dispatching an MCP tool call whose request was cancelled while the epoch availability probe was pending: the dev-server MCP session re-checks the caller abort signal after the probe and before dispatch. (#163) diff --git a/.changeset/backfill-pr-165.md b/.changeset/backfill-pr-165.md index 745567377..1970821cc 100644 --- a/.changeset/backfill-pr-165.md +++ b/.changeset/backfill-pr-165.md @@ -2,4 +2,4 @@ "agent-bundle": patch --- -Static route config extraction rejects non-finite numeric literals such as `1e999` with the `AB4806` dynamic-config diagnostic instead of digesting them as `null`, preserves a literal `__proto__` key as an own property, and route discovery now includes `.jsx` script modules, which were previously skipped silently. (#165) +Reject non-finite numeric literals such as `1e999` in a route `export const config` with the `AB4806` dynamic-config diagnostic instead of digesting them as `null`, keep a literal `__proto__` config key as an own property, and discover `.jsx` modules under `src/scripts/` as script routes instead of skipping them silently. (#165) diff --git a/.changeset/backfill-pr-168.md b/.changeset/backfill-pr-168.md index 33a2bb320..9bcb0c65e 100644 --- a/.changeset/backfill-pr-168.md +++ b/.changeset/backfill-pr-168.md @@ -3,4 +3,4 @@ "create-agent-bundle": patch --- -Generated route declarations exclude schema-less script routes, and `create-agent-bundle` requires coherent `agent-bundle` / `@agent-bundle/runtime` identities when scaffolding from local tarballs. (#168) +Omit schema-less script routes from the generated route declarations, and make `create-agent-bundle` refuse local-tarball scaffolds whose `agent-bundle` and `@agent-bundle/runtime` identities disagree. (#168) diff --git a/.changeset/backfill-pr-183.md b/.changeset/backfill-pr-183.md index 6ef15e2fe..af060af8a 100644 --- a/.changeset/backfill-pr-183.md +++ b/.changeset/backfill-pr-183.md @@ -2,4 +2,4 @@ "agent-bundle": patch --- -The published `agent-bundle` manifest no longer carries a `workspace:*` devDependency on `@agent-bundle/runtime`, which npm refuses to install; the optional peer is satisfied through a workspace override instead. (#183) +Ship the `agent-bundle` package manifest without a `workspace:*` devDependency on `@agent-bundle/runtime`, which npm refused to install; the optional peer is satisfied through a workspace override instead. (#183) diff --git a/.changeset/backfill-pr-208.md b/.changeset/backfill-pr-208.md index 251b3c645..9242787a6 100644 --- a/.changeset/backfill-pr-208.md +++ b/.changeset/backfill-pr-208.md @@ -2,4 +2,4 @@ "@agent-bundle/runtime": patch --- -The sqlite state driver closes its connection through an infallible finalizer again: a close failure on the success path surfaces as a defect instead of breaking the declaration build, and on the failing path the original failure stays the reported cause. (#208) +Close the `@agent-bundle/runtime/state/sqlite` connection through an infallible finalizer again: a close failure on the success path surfaces as a defect, and on the failing path the original failure stays the reported cause. (#208) diff --git a/.changeset/backfill-pr-348.md b/.changeset/backfill-pr-348.md index 3ee89eb6c..44525ac5b 100644 --- a/.changeset/backfill-pr-348.md +++ b/.changeset/backfill-pr-348.md @@ -4,4 +4,4 @@ "create-agent-bundle": patch --- -Consolidate duplicated guards and helpers onto canonical modules, with hot-path fixes riding along: route-graph module text is read once per build instead of once per surface, the sqlite state driver caches prepared statements, directory walks run with bounded concurrency, and the MCP App consent-capability vocabulary now lives in a browser-safe module so the Workbench bundle no longer pulls in `node:*` imports. (#348) +Speed up `agent-bundle build` and the dev server by reading each route module once per build instead of once per surface, caching prepared statements in the `@agent-bundle/runtime/state/sqlite` driver, and bounding directory-walk concurrency; keep `node:*` imports out of the Workbench browser bundle by moving the MCP App consent-capability vocabulary to a browser-safe module. `create-agent-bundle` shares the same corrected helpers. (#348) From f7e1fd53f9f1113d31baa509b46dcaeea8d3e78f Mon Sep 17 00:00:00 2001 From: ScriptedAlchemy Date: Thu, 3 Sep 2026 08:04:18 +0000 Subject: [PATCH 3/5] chore(changesets): drop test-only detail from the #118 backfill summary --- .changeset/backfill-pr-118.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.changeset/backfill-pr-118.md b/.changeset/backfill-pr-118.md index a46bb6e36..b504e58fd 100644 --- a/.changeset/backfill-pr-118.md +++ b/.changeset/backfill-pr-118.md @@ -2,4 +2,4 @@ "agent-bundle": patch --- -Make Workbench MCP App teardown and project reloads robust under load: the MCP App frame relay default `closeTimeoutMs` is now 5s and the server graceful-close receipt window 35s, so a healthy graceful close is no longer superseded by the force-close timer; project preparation re-reads a config that changed between load and snapshot instead of serving a stale model under a fresh revision; script playground readiness is sequenced through the process tree and PID files are published atomically. (#118) +Make Workbench MCP App teardown and project reloads robust under load: raise the MCP App frame relay default `closeTimeoutMs` to 5s and the dev-server graceful-close receipt window to 35s so a healthy graceful close is no longer superseded by the force-close timer, and re-read a project config that changed between load and snapshot instead of serving a stale model under a fresh revision. (#118) From bdd941dfca69bc4038d45ffd69de0e8866907688 Mon Sep 17 00:00:00 2001 From: ScriptedAlchemy Date: Thu, 3 Sep 2026 08:16:52 +0000 Subject: [PATCH 4/5] chore(changesets): scope the #164 backfill to the runtime and name the surfaces behind dependency bumps --- .changeset/backfill-pr-164.md | 3 +-- .changeset/backfill-pr-303.md | 2 +- .changeset/backfill-pr-304.md | 2 +- .changeset/backfill-pr-305.md | 2 +- .changeset/backfill-pr-7.md | 2 +- 5 files changed, 5 insertions(+), 6 deletions(-) diff --git a/.changeset/backfill-pr-164.md b/.changeset/backfill-pr-164.md index cb908ec9f..81338f263 100644 --- a/.changeset/backfill-pr-164.md +++ b/.changeset/backfill-pr-164.md @@ -1,6 +1,5 @@ --- -"agent-bundle": patch "@agent-bundle/runtime": patch --- -Close an abort race in the Effect boundary bridges of both packages: `interruptWhenAborted` now re-checks `signal.aborted` after subscribing, so a signal aborted between composition and start interrupts the effect instead of hanging. (#164) +Interrupt `projectMcpRenderStream` promptly when its `signal` was already aborted between composition and start: the Effect boundary bridge re-checks `signal.aborted` after subscribing, so a pre-aborted projection rejects instead of hanging. (#164) diff --git a/.changeset/backfill-pr-303.md b/.changeset/backfill-pr-303.md index 9fe609067..e2dfe00a9 100644 --- a/.changeset/backfill-pr-303.md +++ b/.changeset/backfill-pr-303.md @@ -2,4 +2,4 @@ "agent-bundle": patch --- -Bump the published `open` dependency from 11.0.1 to 11.0.2. (#303) +Open the Workbench from `agent-bundle dev --open` through `open` 11.0.2 instead of 11.0.1; `agent-bundle` installs pull the updated dependency. (#303) diff --git a/.changeset/backfill-pr-304.md b/.changeset/backfill-pr-304.md index da1bf4016..9efb5f46b 100644 --- a/.changeset/backfill-pr-304.md +++ b/.changeset/backfill-pr-304.md @@ -2,4 +2,4 @@ "@agent-bundle/runtime": patch --- -Bump the published `zod` dependency from 4.4.3 to 4.5.4. (#304) +Validate runtime operation inputs, state conformance, and the notice inbox route with `zod` 4.5.4 instead of 4.4.3 (fixes an upstream default-factory misfire during cycle walks); `@agent-bundle/runtime` installs pull the updated dependency. (#304) diff --git a/.changeset/backfill-pr-305.md b/.changeset/backfill-pr-305.md index 0559edacc..b31b38079 100644 --- a/.changeset/backfill-pr-305.md +++ b/.changeset/backfill-pr-305.md @@ -2,4 +2,4 @@ "agent-bundle": patch --- -Bump the published `ignore` dependency from 7.0.6 to 7.0.7. (#305) +Evaluate `ignore` patterns for config and skill file discovery with `ignore` 7.0.7 instead of 7.0.6; `agent-bundle` installs pull the updated dependency. (#305) diff --git a/.changeset/backfill-pr-7.md b/.changeset/backfill-pr-7.md index 4a52baab8..270f5b0de 100644 --- a/.changeset/backfill-pr-7.md +++ b/.changeset/backfill-pr-7.md @@ -2,4 +2,4 @@ "agent-bundle": patch --- -Bump the published `@rslint/core` dependency from 0.8.0 to 0.8.1. (#7) +Run the Workbench lint diagnostics service (`dev/diagnostic-service`) on `@rslint/core` 0.8.1 instead of 0.8.0; `agent-bundle` installs pull the updated dependency. (#7) From 35fc9c6d937d890d35f6f76e8c3c9a6702d3ee72 Mon Sep 17 00:00:00 2001 From: ScriptedAlchemy Date: Thu, 3 Sep 2026 08:26:51 +0000 Subject: [PATCH 5/5] chore(changesets): drop create-agent-bundle from the #348 backfill (output-neutral refactor) --- .changeset/backfill-pr-348.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.changeset/backfill-pr-348.md b/.changeset/backfill-pr-348.md index 44525ac5b..21eb3d106 100644 --- a/.changeset/backfill-pr-348.md +++ b/.changeset/backfill-pr-348.md @@ -1,7 +1,6 @@ --- "agent-bundle": patch "@agent-bundle/runtime": patch -"create-agent-bundle": patch --- -Speed up `agent-bundle build` and the dev server by reading each route module once per build instead of once per surface, caching prepared statements in the `@agent-bundle/runtime/state/sqlite` driver, and bounding directory-walk concurrency; keep `node:*` imports out of the Workbench browser bundle by moving the MCP App consent-capability vocabulary to a browser-safe module. `create-agent-bundle` shares the same corrected helpers. (#348) +Speed up `agent-bundle build` and the dev server by reading each route module once per build instead of once per surface, caching prepared statements in the `@agent-bundle/runtime/state/sqlite` driver, and bounding directory-walk concurrency; keep `node:*` imports out of the Workbench browser bundle by moving the MCP App consent-capability vocabulary to a browser-safe module. (#348)