Merge remote-tracking branch 'upstream/main' into feat/ai-groq-summarize

Author: harshlocham

.agent/self-learning/coupling.json

@@ -61,6 +61,64 @@
           "why": "Per CLAUDE.md, every feature / bug fix / behavior change MUST include E2E test coverage. When a new public capability is added, a corresponding spec under testing/e2e/tests/ plus a fixture under testing/e2e/fixtures/ are required — often plus a new entry in feature-support.ts and types.ts. The full pattern is: add the Feature flag, decide provider support, optionally add a per-feature config (system prompt, schema, tools), wire it through src/routes/api.chat.ts (or the relevant route), write the fixture(s), write the spec iterating `providersFor(feature)`. Spec must run against every supported provider so non-native-streaming providers exercise the fallback path. Skip only for refactors that don't change observable behavior."
         }
       ]
+    },
+    {
+      "id": "sandbox-core-contract-touches-providers",
+      "trigger": "packages/ai-sandbox/src/**/*.ts",
+      "impacts": [
+        {
+          "target": [
+            "packages/ai-sandbox-local-process/src/**/*.ts",
+            "packages/ai-sandbox-docker/src/**/*.ts",
+            "packages/ai-sandbox-cloudflare/src/**/*.ts"
+          ],
+          "kind": "change-required",
+          "why": "The SandboxProvider / SandboxHandle / SandboxCapabilities contracts in @tanstack/ai-sandbox are the seam every provider package implements. When a method, capability flag, lifecycle field, or the ensure/resume algorithm changes in core, every provider package must be updated in the same PR or it falls out of contract (silent type breaks, missing capability handling, broken resume). Also re-check capability degradation: a provider that returns capabilities().snapshots===false must keep working when core adds a snapshot-dependent path."
+        }
+      ]
+    },
+    {
+      "id": "harness-adapter-sandbox-execution",
+      "trigger": "packages/ai-claude-code/src/**/*.ts",
+      "impacts": [
+        {
+          "target": [
+            "packages/ai-acp/src/**/*.ts",
+            "packages/ai-codex/src/**/*.ts",
+            "packages/ai-gemini-cli/src/**/*.ts",
+            "packages/ai-grok-build/src/**/*.ts",
+            "packages/ai-opencode/src/**/*.ts",
+            "packages/ai-sandbox/src/**/*.ts"
+          ],
+          "kind": "change-required",
+          "why": "Harness adapters share one execution contract: declare requires:[SandboxCapability], run the agent via sandbox.process or an in-sandbox ACP WebSocket server (stdio when writableStdin, else ports.connect), translate ACP/session-json output through @tanstack/ai-acp or a per-adapter translator, and proxy host tools via the MCP-over-channel bridge. When the sandbox-execution pattern, ACP transport/session layer, host MCP tool-bridge shape, or policy->permission mapping changes in one adapter (or in @tanstack/ai-sandbox / @tanstack/ai-acp), mirror it across the other harness adapters so they don't diverge."
+        }
+      ]
+    },
+    {
+      "id": "acp-shared-layer-coupling",
+      "trigger": "packages/ai-acp/src/**/*.ts",
+      "impacts": [
+        {
+          "target": [
+            "packages/ai-gemini-cli/src/**/*.ts",
+            "packages/ai-grok-build/src/**/*.ts"
+          ],
+          "kind": "change-required",
+          "why": "@tanstack/ai-acp is the shared ACP client, stdio/WebSocket transport, sandbox-server bootstrap, and AG-UI translator. Changes to session lifecycle, transport framing, translate labels, or permission helpers must be reflected in every harness adapter that imports it (gemini-cli, grok-build; claude/codex when wired)."
+        }
+      ]
+    },
+    {
+      "id": "sandbox-source-persistence-ready",
+      "trigger": "packages/ai-sandbox*/src/**/*.ts",
+      "impacts": [
+        {
+          "target": ["packages/ai-sandbox/src/**/*.ts"],
+          "kind": "change-required",
+          "why": "The sandbox layer ships with zero persistence package but MUST stay persistence-ready so the persistence proposal drops in without re-architecture. Invariant to preserve on any sandbox change: SandboxStore and LockStore stay PLUGGABLE optional capabilities (in-memory defaults only - never hardcode storage), emitted chunks stay conceptually offset-addressable ({runId, seq, ts, chunk}) so a future EventLog/DurableRunStream can capture+replay by cursor, and approvals keep using the existing resume-based approval-requested flow. Do not introduce a sandbox-owned durable store, a bespoke replay buffer, or a non-AG-UI event type that the persistence layer would later have to rip out."
+        }
+      ]
     }
   ]
 }

.claude/skills/gap-analysis/SKILL.md

@@ -82,9 +82,14 @@ markdown report under `.agent/gap-analysis/`. **Do not edit source files.**
 
 ## Known providers
 
-`openai`, `anthropic`, `gemini`, `ollama`, `grok`, `groq`, `openrouter`, `fal`
-(media-only), `elevenlabs` (TTS-only). The feature matrix tracks the first
-seven; `fal` and `elevenlabs` only appear in model/media audits.
+`openai`, `anthropic`, `gemini`, `ollama`, `grok`, `groq`, `openrouter`,
+`bedrock` (`@tanstack/ai-bedrock`; three-API surface — Converse default
+(adapter name `bedrock-converse`), Chat Completions opt-in (`api: 'chat'`,
+adapter name `bedrock`), Responses opt-in (`api: 'responses'`, adapter name
+`bedrock-responses`)), `fal` (media-only), `elevenlabs` (TTS-only). The
+feature matrix tracks `openai`, `anthropic`, `gemini`, `ollama`, `grok`,
+`groq`, `openrouter`, `bedrock`, `bedrock-converse`, and `bedrock-responses`;
+`fal` and `elevenlabs` only appear in model/media audits.
 
 ## Known features (19)
 

.claude/skills/gap-analysis/references/provider-doc-urls.md

@@ -70,6 +70,16 @@ WebFetch — call `resolve-library-id` with the SDK npm name, then `query-docs`.
 - Provider routing: https://openrouter.ai/docs/features/provider-routing
 - (Proxies many providers; uses OpenAI-compatible API.)
 
+## bedrock (Amazon Bedrock)
+
+- Models / API compatibility: https://docs.aws.amazon.com/bedrock/latest/userguide/models-api-compatibility.html
+- Converse API reference (default path): https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_Converse.html
+- OpenAI-compatible Chat Completions: https://docs.aws.amazon.com/bedrock/latest/userguide/inference-chat-completions-mantle.html
+- Responses API (mantle): https://docs.aws.amazon.com/bedrock/latest/userguide/bedrock-mantle.html
+- Cross-region inference profiles: https://docs.aws.amazon.com/bedrock/latest/userguide/inference-profiles-support.html
+- API keys: https://docs.aws.amazon.com/bedrock/latest/userguide/api-keys.html
+- (Default path uses Converse API via `@aws-sdk/client-bedrock-runtime` (adapter `bedrock-converse`). Opt-in paths: `api: 'chat'` → OpenAI-compatible Chat Completions (adapter `bedrock`); `api: 'responses'` → Responses API (adapter `bedrock-responses`).)
+
 ## fal (media-only)
 
 - Models catalog: https://fal.ai/models

.github/renovate.json

@@ -3,7 +3,6 @@
   "configMigration": true,
   "extends": [
     "config:recommended",
-    "group:allNonMajor",
     "schedule:weekly",
     ":approveMajorUpdates",
     ":automergeMinor",
@@ -15,7 +14,7 @@
   "ignorePresets": [":ignoreModulesAndTests"],
   "labels": ["dependencies"],
   "rangeStrategy": "bump",
-  "postUpdateOptions": ["pnpmDedupe"],
+  "minimumReleaseAge": "1 day",
   "ignoreDeps": [
     "@types/node",
     "@types/react",
@@ -25,5 +24,147 @@
     "react-dom",
     "typescript",
     "vue"
+  ],
+  "packageRules": [
+    {
+      "description": "Fallback: bundle any remaining non-major updates so we don't get one PR per dependency. Ecosystem rules below override this for their packages.",
+      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+      "groupName": "all non-major dependencies",
+      "groupSlug": "all-minor-patch"
+    },
+    {
+      "description": "Lint & formatting toolchain",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": [
+        "eslint",
+        "eslint-**",
+        "@eslint/**",
+        "@eslint-community/**",
+        "@typescript-eslint/**",
+        "@tanstack/eslint-config",
+        "prettier",
+        "prettier-**",
+        "knip",
+        "sherif",
+        "publint"
+      ],
+      "groupName": "lint & format",
+      "groupSlug": "lint-format"
+    },
+    {
+      "description": "Build & test toolchain (Vite/Vitest/Nx)",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": [
+        "vite",
+        "vite-**",
+        "@vitejs/**",
+        "vitest",
+        "@vitest/**",
+        "@tanstack/vite-config",
+        "@tanstack/typedoc-config",
+        "typedoc",
+        "typedoc-**",
+        "nx",
+        "@nx/**",
+        "tsx",
+        "happy-dom",
+        "jsdom",
+        "@testing-library/**",
+        "tinyglobby",
+        "premove"
+      ],
+      "groupName": "build & test tooling",
+      "groupSlug": "build-test-tooling"
+    },
+    {
+      "description": "Unified / markdown ecosystem (the largest transitive cluster in the lockfile)",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": [
+        "unified",
+        "remark**",
+        "rehype**",
+        "mdast**",
+        "@mdx-js/**",
+        "hast**",
+        "micromark**",
+        "unist**",
+        "vfile**",
+        "marked",
+        "marked-**",
+        "highlight.js",
+        "html-**",
+        "markdown-**"
+      ],
+      "groupName": "markdown/unified",
+      "groupSlug": "markdown-unified"
+    },
+    {
+      "description": "Provider / AI SDKs",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": [
+        "openai",
+        "@anthropic-ai/**",
+        "@google/**",
+        "@google-cloud/**",
+        "@aws-sdk/**",
+        "@openrouter/**",
+        "@mistralai/**",
+        "@ai-sdk/**",
+        "groq-sdk",
+        "ollama",
+        "@opentelemetry/**"
+      ],
+      "groupName": "ai provider sdks",
+      "groupSlug": "ai-provider-sdks"
+    },
+    {
+      "description": "React ecosystem",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": ["react-**", "@react-native/**", "react-native", "react-native-**"],
+      "groupName": "react ecosystem",
+      "groupSlug": "react-ecosystem"
+    },
+    {
+      "description": "Vue ecosystem",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": ["@vue/**", "vue-**"],
+      "groupName": "vue ecosystem",
+      "groupSlug": "vue-ecosystem"
+    },
+    {
+      "description": "Angular ecosystem",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": ["@angular/**", "@angular-**", "angular-**"],
+      "groupName": "angular ecosystem",
+      "groupSlug": "angular-ecosystem"
+    },
+    {
+      "description": "Solid ecosystem",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": ["solid-**", "@solidjs/**", "seroval", "seroval-**"],
+      "groupName": "solid ecosystem",
+      "groupSlug": "solid-ecosystem"
+    },
+    {
+      "description": "Svelte ecosystem",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": ["svelte", "svelte-**", "@sveltejs/**", "prettier-plugin-svelte"],
+      "groupName": "svelte ecosystem",
+      "groupSlug": "svelte-ecosystem"
+    },
+    {
+      "description": "Tailwind & icon tooling",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": ["tailwindcss", "@tailwindcss/**", "lucide", "lucide-**", "@lucide/**"],
+      "groupName": "tailwind & icons",
+      "groupSlug": "tailwind-icons"
+    },
+    {
+      "description": "@types packages",
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": ["@types/**"],
+      "groupName": "type definitions",
+      "groupSlug": "type-definitions"
+    }
   ]
 }

.github/workflows/release.yml

@@ -47,6 +47,11 @@ jobs:
           persist-credentials: true
       - name: Setup Tools
         uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+      - name: Build packages
+        # Fresh, cache-bypassing build so dist/ is on disk when changeset
+        # publish packs tarballs. A cached build can report success without
+        # materializing dist/, shipping src-only packages (see 0.33.0-0.36.0).
+        run: pnpm exec nx run-many --targets=build --exclude=examples/**,testing/** --skip-nx-cache
       - name: Run Changesets (version or publish)
         id: changesets
         uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0

.gitignore

@@ -78,4 +78,8 @@ solo.yml
 # Agent scratch output (gap-analysis reports, triage notes — generated locally)
 .agent/gap-analysis/
 .agent/triage/
+
+/OpenCode.md
+.agentsroom/
+.opencode/
 .agent/research/