Skip to content

fix(deps): bound the agent-interface peer to versions that actually work - #356

Merged
drewstone merged 1 commit into
mainfrom
fix/peer-floor-agent-interface
Jul 31, 2026
Merged

fix(deps): bound the agent-interface peer to versions that actually work#356
drewstone merged 1 commit into
mainfrom
fix/peer-floor-agent-interface

Conversation

@drewstone

Copy link
Copy Markdown
Contributor

One line, and it closes a still-armed copy of the outage we already paid for.

agent-app@0.45.1 declares:

"@tangle-network/agent-interface": ">=0.36.0"    # no ceiling

while src/tools/mcp.ts:37-42 imports agentProfileMcpServerSchema, defineAgentProfilePublicConfig, defineAgentProfileSecretRef and AgentProfileConfigValue. None of those exist before 0.38.0 — verified by unpacking the published tarballs: zero occurrences in the 0.36.0 and 0.37.0 dists, first appearance in 0.38.0.

So a consumer that resolves 0.36 or 0.37 gets undefined imports and the pre-0.38 plain-string MCP shape. That is precisely the failure that took gtm-agent chat down for 25 days (#703), still declared as a supported configuration by a published package.

Now >=0.38.0 <0.41.0: the floor is the version that introduced the symbols, the ceiling is the highest line verified against (0.38/0.39/0.40 profile schemas are byte-identical).

Expect new peer warnings, and they are true

agent-runtime@0.109.2 peers agent-interface >=0.36.0 <0.37.0, so this range and that one cannot both be satisfied. That conflict already exists in reality — gtm-agent only runs because it forces the graph with a pnpm override. Declaring >=0.36.0 did not resolve the conflict, it concealed it. A loud, accurate constraint is strictly better than a quiet false one, and agent-runtime widening its peer is already on the release train (agent-dev-container#4524).

Rides along with the 0.46.0 publish; merging with [skip release] so it does not ship ahead of the platform.

The declared peer was `>=0.36.0` with no ceiling while `src/tools/mcp.ts`
imports `agentProfileMcpServerSchema`, `defineAgentProfilePublicConfig`,
`defineAgentProfileSecretRef` and `AgentProfileConfigValue` — none of
which exist before 0.38.0. A consumer resolving 0.36 or 0.37 gets
undefined imports and the pre-0.38 plain-string MCP shape.

That is the same failure mode that took a product's chat down for 25
days, still declared as supported. State the range the package actually
requires.
@drewstone
drewstone merged commit 3ab098c into main Jul 31, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant