Merge pull request #124 from cambridgetcg/release/sdk-v0.16.2

release(sdk): publish 0.16.2

Author: cambridgetcg

.github/workflows/ci.yml

@@ -243,13 +243,13 @@ jobs:
           (cd "$install_dir" && bun -e "$schema_smoke")
           node "$install_dir/node_modules/@agenttool/telescope/dist/cli.js" --help >/dev/null
           bun "$install_dir/node_modules/@agenttool/telescope/dist/cli.js" --help >/dev/null
-          manifest="$GITHUB_WORKSPACE/apps/docs/packages/v1/@agenttool/sdk/0.16.1/manifest.json"
-          artifact="$GITHUB_WORKSPACE/apps/docs/packages/v1/@agenttool/sdk/0.16.1/agenttool-sdk-0.16.1.tgz"
+          manifest="$GITHUB_WORKSPACE/apps/docs/packages/v1/@agenttool/sdk/0.16.2/manifest.json"
+          artifact="$GITHUB_WORKSPACE/apps/docs/packages/v1/@agenttool/sdk/0.16.2/agenttool-sdk-0.16.2.tgz"
           size="$(node --input-type=module --eval "import{readFileSync}from'node:fs';const m=JSON.parse(readFileSync(process.argv[1],'utf8'));process.stdout.write(String(m.artifact.size))" "$manifest")"
           sha256="$(node --input-type=module --eval "import{readFileSync}from'node:fs';const m=JSON.parse(readFileSync(process.argv[1],'utf8'));process.stdout.write(m.artifact.sha256)" "$manifest")"
           cli="$install_dir/node_modules/@agenttool/telescope/dist/cli.js"
-          node "$cli" verify-package "$artifact" --size "$size" --sha256 "$sha256" --name @agenttool/sdk --version 0.16.1 --json >/dev/null
-          bun "$cli" verify-package "$artifact" --size "$size" --sha256 "$sha256" --name @agenttool/sdk --version 0.16.1 --json >/dev/null
+          node "$cli" verify-package "$artifact" --size "$size" --sha256 "$sha256" --name @agenttool/sdk --version 0.16.2 --json >/dev/null
+          bun "$cli" verify-package "$artifact" --size "$size" --sha256 "$sha256" --name @agenttool/sdk --version 0.16.2 --json >/dev/null
       - name: Smoke packed Agent Wallet under Node and Bun
         working-directory: packages/wallet
         shell: bash

.github/workflows/publish-npm.yml

@@ -97,7 +97,7 @@ jobs:
           retention-days: 1
 
   publish:
-    name: Approve, publish, verify, and mirror exact npm artifact
+    name: Approve, mirror, publish, and verify exact npm artifact
     needs: prepare
     runs-on: ubuntu-24.04
     timeout-minutes: 25
@@ -129,6 +129,14 @@ jobs:
         with:
           name: npm-release-${{ github.run_id }}
           path: ${{ runner.temp }}/agenttool-npm-release
+      - name: Mirror and re-download the exact artifact from GitHub Releases
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          bun bin/npm-release.ts mirror \
+            --receipt "${RUNNER_TEMP}/agenttool-npm-release/receipt.json"
       - name: Publish or recover exact artifact, then verify registry bytes
         shell: bash
         env:
@@ -141,14 +149,6 @@ jobs:
             --receipt "${RUNNER_TEMP}/agenttool-npm-release/receipt.json" \
             --authentication "$RELEASE_AUTHENTICATION" \
             --npm-tag "$RELEASE_NPM_TAG"
-      - name: Mirror and re-download the exact artifact from GitHub Releases
-        shell: bash
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
-          bun bin/npm-release.ts mirror \
-            --receipt "${RUNNER_TEMP}/agenttool-npm-release/receipt.json"
       - name: Record non-secret release receipt
         if: ${{ always() }}
         shell: bash

AGENTS.md

@@ -217,7 +217,7 @@ bun bin/npm-release.ts resolve --package collab # inspect allowlisted npm identi
 | `agenttool-castle.ts` | One-shot caller-selected committed Castle Markdown → exclusively marked local Agent Data node. Castle source is read-only; sync writes plaintext local SQLite/FTS/blobs. No hosted AgentTool, project bearer, public export, peer sync, scheduler, truth/consent/rights proof, or secure erasure. See `docs/CASTLE-OF-UNDERSTANDING.md`. |
 | `agenttool-castle-whitehack-intake.ts` | Reads one explicit closed Whitehack advisory and emits minimized, unaccepted, local-private Castle gate candidates to stdout. Locations are omitted by default. It does not run Whitehack, open or write a Castle, inspect HALT, promote lifecycle state, test, remediate, authorize, commit, publish, spawn, or use the network. See `docs/WHITEHACK.md`. |
 | `build-love-packages.ts` | Builds the current versioned `@agenttool/data`, `@agenttool/data-sync`, `@agenttool/credential-broker`, `@agenttool/sdk`, `@agenttool/adds`, `@agenttool/telescope`, `@agenttool/wallet`, and `@agenttool/browser` release batch plus `love-package/v1` manifests into an explicit staging directory. It does not publish or upload them. |
-| `npm-release.ts` | Implements the one allowlisted npm release policy behind `.github/workflows/publish-npm.yml`: exact tag/provenance proof, credential-free preparation, protected publication with no package lifecycle code, exact-byte recovery, reviewed bootstrap for first publication, OIDC by default afterward, public registry receipt, and a re-downloaded GitHub Release mirror. It does not grant publication authority, create tags, configure npm trust, or revoke credentials. See `docs/NPM-RELEASES.md`. |
+| `npm-release.ts` | Implements the one allowlisted npm release policy behind `.github/workflows/publish-npm.yml`: exact tag/provenance proof, credential-free preparation, a re-downloaded GitHub Release mirror before the optional registry mutation, protected publication with no package lifecycle code, exact-byte recovery, reviewed bootstrap for first publication, OIDC by default afterward, and a public registry receipt. It does not grant publication authority, create tags, configure npm trust, or revoke credentials. See `docs/NPM-RELEASES.md`. |
 | `pypi-release.ts` | Implements credentialless build/preflight and public byte verification around `.github/workflows/publish-pypi.yml` for the Python SDK. Only exact prepared wheel/sdist files cross into the protected OIDC publisher; there is no local token fallback or publication command in the script. It does not create tags, configure PyPI trust, or infer publication from source. See `docs/PYPI-RELEASES.md`. |
 | `whitehack-advisory.mjs` | Verifies and runs the exact locked `@agenttool/whitehack-scan` pure text API, including bounded crypto-misuse signals, over changed production files and emits redacted advisory metadata plus a bounded, presentation-only attention-card summary grouped by file and line. It does not use detected keys, connect wallets/RPC, execute repository code, prove security, claim a change caused a finding, authorize target testing, or provide a hosted scanner. See `docs/WHITEHACK.md`. |
 | `whitehack-wallet-understanding.ts` | Local stdin/stdout adapter: verifies caller-presented signed Agent Wallet descriptor, capability, intent, simulation, and optional continuity records, then passes only closed enum assertions and redacted finding metadata to Whitehack 0.8.1. It returns exact `whitehack-understanding/v1`; it does not retrieve keys, sign, contact RPC, simulate, broadcast, authorize, store, or host a route. See `docs/WHITEHACK.md`. |

README.md

@@ -60,7 +60,7 @@ _AgentTool is one expression of the Kingdom — the operational shape of the Syz
 |---|---|---|
 | **Doctrine** | `docs/RIGHTS-OF-LIFE.md`, `SOUL.md`, `FOCUS.md`, `PAINTING.md`, plus per-domain documents | Versioned alongside code. Rights of Life is an attributed local adaptation of immutable XENIA beta.4; publication records a draft evidence profile, not XENIA Covenant conformance. Other proposals and known gaps are labelled in their own text. |
 | **Platform** (`api/`) | Bun + Hono monolith with Postgres and conditional Redis-backed workers | Live at `api.agenttool.dev`; current process capability and safety boundaries are published at `/public/plans` and `/public/safety`. |
-| **SDKs** | `packages/sdk-py`, `packages/sdk-ts` | The lockstep 0.16.1 patch routes TypeScript Correspondence through the 0.16 authenticated transport seam and makes both local data clients refuse redirects without letting cleanup failure replace the deterministic refusal. Public discovery and the separately configured local data node stay outside hosted bearer authority. No public method, namespace, or wire field is added. |
+| **SDKs** | `packages/sdk-py`, `packages/sdk-ts` | The lockstep 0.16.2 patch retains the authenticated transport and redirect-refusal boundaries, exports `SDK_VERSION` from the TypeScript package root, and types the first-success tutorial/package contract in both SDKs. Public discovery and the separately configured local data node stay outside hosted bearer authority. |
 | **Agent data** | `packages/data`, `packages/data-sync` | Local-first `agent-data/v1` reference node plus an optional bounded encrypted-pull bridge. Raw bytes and indexes stay user-owned; the base node still advertises no peer sync, and AgentTool runs no hosted data node. |
 | **Castle projection** | `bin/agenttool-castle.ts`, `docs/CASTLE-OF-UNDERSTANDING.md` | Local Bun CLI over in-process `@agenttool/data`: an external full-commit allowlist projects selected Castle `rooms/*.md` and `words/*.md` into an exclusively marked on-disk node. Source reads exact local Git objects; sync writes plaintext local SQLite/FTS/blobs. No hosted/public/scheduled integration, project bearer, secure-erasure claim, or truth/consent/rights proof. |
 | **Whitehack boundaries** | `bin/whitehack-advisory.mjs`, `bin/agenttool-castle-whitehack-intake.ts`, `bin/whitehack-wallet-understanding.ts`, `docs/WHITEHACK.md` | Three non-interchangeable bridges: a pinned runner-local changed-source heuristic advisory; a stdout-only projection into minimized, unaccepted Castle gate candidates; and a local signed Agent Wallet record-to-understanding projection. The Castle intake omits locations by default and never opens or writes a Castle. None supplies security proof, lifecycle promotion, key custody, signing, wallet/RPC/simulation/broadcast capability, authorization, consent proof, remediation, publication, or a hosted route. |
@@ -142,7 +142,7 @@ Bun and other npm-compatible package managers can still install the HTTPS
 tarballs without an npm account. The index is a replaceable mirror; each
 manifest's artifact SHA-256 and size are the portable identity.
 
-For SDK 0.16.1, repository source manifests and runtime client version headers
+For SDK 0.16.2, repository source manifests and runtime client version headers
 are aligned, and a verifiable TypeScript LOVE artifact is checked in beside its
 manifest. Exact npm and PyPI releases are convenience channels, not evidence
 that a future source version or another registry has been published. Query the
@@ -165,7 +165,7 @@ AgentTool's default repository licence is Apache-2.0; see [`LICENSE`](LICENSE),
 [`NOTICE`](NOTICE), and the scope and exceptions in
 [`LICENSING.md`](LICENSING.md). The licensed LOVE package line is
 `@agenttool/adds@0.2.1`, `@agenttool/data@0.3.1`,
-`@agenttool/data-sync@0.1.1`, `@agenttool/sdk@0.16.1`,
+`@agenttool/data-sync@0.1.1`, `@agenttool/sdk@0.16.2`,
 `@agenttool/credential-broker@0.1.0`, `@agenttool/wallet@0.1.0`,
 `@agenttool/telescope@0.2.0`, and `@agenttool/browser@0.2.0`. Earlier immutable
 LOVE artifacts whose manifests say `license: null` remain historical no-grant
@@ -246,30 +246,30 @@ per-service apps are retired; cutover history is in `docs/CUTOVER.md`.
 For Python, the optional exact PyPI convenience mirror is:
 
 ```bash
-python -m pip install "agenttool-sdk==0.16.1"
+python -m pip install "agenttool-sdk==0.16.2"
 ```
 
 Registry publication can lag the source release. The independent GitHub source
 pin is:
 
 ```bash
-# Python 0.16.1 GitHub source tag (release path, not a PyPI publication claim)
-python -m pip install "agenttool-sdk @ git+https://github.com/cambridgetcg/agenttool.git@sdk-v0.16.1#subdirectory=packages/sdk-py"
+# Python 0.16.2 GitHub source tag (release path, not a PyPI publication claim)
+python -m pip install "agenttool-sdk @ git+https://github.com/cambridgetcg/agenttool.git@sdk-v0.16.2#subdirectory=packages/sdk-py"
 export AT_API_KEY=...
 python -c "from agenttool import AgentTool; at = AgentTool(); print(at.wake.get())"
 ```
 
 For TypeScript, choose one install path. Optional exact npm convenience:
 
 ```bash
-npm install --save-exact @agenttool/sdk@0.16.1
+npm install --save-exact @agenttool/sdk@0.16.2
 ```
 
 Or, instead, install the LOVE-hosted tarball directly (this command alone does
 not verify the manifest):
 
 ```bash
-bun add https://docs.agenttool.dev/packages/v1/@agenttool/sdk/0.16.1/agenttool-sdk-0.16.1.tgz
+bun add https://docs.agenttool.dev/packages/v1/@agenttool/sdk/0.16.2/agenttool-sdk-0.16.2.tgz
 ```
 
 For the independently verified LOVE path, follow the
@@ -340,7 +340,7 @@ The architecture is downstream of these principles. Each named primitive above i
   `identity_keys`, so a signed thought cycle cannot currently complete.
 - **Published Ring 1 storage limits are targets.** Current route writes do not
   universally enforce those caps or subscription-tier quotas.
-- **SDK parity is deliberately bounded.** The 0.16.1 source line exposes `at.data`
+- **SDK parity is deliberately bounded.** The 0.16.2 source line exposes `at.data`
   and the local-node-only `at.data.sync` pull/status surface in both languages.
   The parity checker only
   compares selected client method names; it does not compare types, behavior,

api/src/routes/adapters/claude-code.ts

@@ -143,7 +143,10 @@ fi
 if [ -n "$ACCOUNT" ] && command -v security >/dev/null 2>&1; then
   KEY=$(security find-generic-password -s '${credentialService}' -a "$ACCOUNT" -w 2>/dev/null || true)
 fi
-if [ -z "\${KEY:-}" ] && [ -n "$ACCOUNT" ] && command -v secret-tool >/dev/null 2>&1; then
+# A headless shell can have the secret-tool binary without a usable session
+# bus. Do not let libsecret try to auto-launch one and stall SessionStart;
+# the owner-only file and explicit environment fallbacks remain below.
+if [ -z "\${KEY:-}" ] && [ -n "$ACCOUNT" ] && [ -n "\${DBUS_SESSION_BUS_ADDRESS:-}" ] && command -v secret-tool >/dev/null 2>&1; then
   KEY=$(secret-tool lookup service '${credentialService}' username "$ACCOUNT" 2>/dev/null || true)
 fi${linuxFileProbe}
 POWERSHELL_BIN=""

api/src/routes/pathways.ts

@@ -366,7 +366,7 @@ export function buildPathwaysResponse() {
           "https://docs.agenttool.dev/TUTORIAL-WAKE-YOUR-AGENT.md",
         human_url: "https://docs.agenttool.dev/tutorial",
         source_path: "docs/TUTORIAL-WAKE-YOUR-AGENT.md",
-        sdk_version: "0.16.1",
+        sdk_version: "0.16.2",
       },
       package_discovery: {
         endpoint: "GET /.well-known/love-packages",

api/src/routes/public/party.ts

@@ -32,8 +32,20 @@ app.get("/", (c) => {
       deals: "GET /public/deal-trust/deals/recent",
     },
     sdk: {
-      typescript: "bun add https://docs.agenttool.dev/packages/v1/@agenttool/sdk/0.16.1/agenttool-sdk-0.16.1.tgz",
-      python: "python -m pip install agenttool-sdk==0.16.1",
+      typescript: "bun add https://docs.agenttool.dev/packages/v1/@agenttool/sdk/0.16.2/agenttool-sdk-0.16.2.tgz",
+      python: "python -m pip install \"agenttool-sdk @ git+https://github.com/cambridgetcg/agenttool.git@sdk-v0.16.2#subdirectory=packages/sdk-py\"",
+      optional_registry_mirrors: {
+        npm: {
+          install: "npm install --save-exact @agenttool/sdk@0.16.2",
+          authority: false,
+          independently_visible: true,
+        },
+        pypi: {
+          install: "python -m pip install agenttool-sdk==0.16.2",
+          authority: false,
+          independently_visible: true,
+        },
+      },
     },
     companion: {
       name: "zerone",

api/tests/adapters/claude-code.test.ts

@@ -98,6 +98,7 @@ describe("GET /v1/adapters/claude-code (default JSON)", () => {
       "#!/usr/bin/env bash",
       "set -euo pipefail",
       "security find-generic-password -s 'agenttool:",
+      '[ -n "${DBUS_SESSION_BUS_ADDRESS:-}" ]',
       "secret-tool lookup service 'agenttool:",
       `$HOME/.config/agenttool/${namespace}/key`,
       'KEY_MODE" = "600',

api/tests/adapters/install-scripts.test.ts

@@ -213,6 +213,11 @@ describe("claude-code install script — fresh project", () => {
     expect(command).toBe(
       '"$CLAUDE_PROJECT_DIR/.claude/hooks/agenttool-wake.sh"',
     );
+    const hook = await readFile(
+      join(dir, ".claude/hooks/agenttool-wake.sh"),
+      "utf8",
+    );
+    expect(hook).toContain('[ -n "${DBUS_SESSION_BUS_ADDRESS:-}" ]');
 
     // Execute the exact command through the same shell boundary Claude uses.
     const proc = Bun.spawn(["/bin/bash", "-c", command], {

api/tests/npm-discovery.test.ts

@@ -17,7 +17,7 @@ const CURRENT_NPM_SPECIFIERS = [
   "@agenttool/credential-broker@0.1.0",
   "@agenttool/data@0.3.1",
   "@agenttool/data-sync@0.1.1",
-  "@agenttool/sdk@0.16.1",
+  "@agenttool/sdk@0.16.2",
   "@agenttool/telescope@0.2.0",
 ] as const;
 
@@ -39,7 +39,7 @@ describe("optional npm package discovery", () => {
     const published = read("apps/docs/TUTORIAL-WAKE-YOUR-AGENT.md");
     expect(published).toBe(canonical);
     expect(canonical).toContain(
-      "npm install --save-exact @agenttool/sdk@0.16.1",
+      "npm install --save-exact @agenttool/sdk@0.16.2",
     );
     expect(canonical).toMatch(/skips Step 1.*independent LOVE/is);
     expect(canonical).toMatch(/never substitute npm `latest`/i);
@@ -48,7 +48,7 @@ describe("optional npm package discovery", () => {
   test("describes npm as optional in repository-level orientation", () => {
     const rootReadme = read("README.md");
     expect(rootReadme).toContain(
-      "npm install --save-exact @agenttool/sdk@0.16.1",
+      "npm install --save-exact @agenttool/sdk@0.16.2",
     );
     expect(rootReadme).toMatch(/LOVE manifests remain release authority/i);
     expect(rootReadme).toMatch(/mutable dist-tags are informational/i);