chore(deps): bump the production-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the production-dependencies group with 6 updates in the / directory:

Package	From	To
@agentskit/adapters	0.17.0	0.17.4
@agentskit/cross-platform	0.1.0	0.1.2
@agentskit/ink	0.10.11	0.10.13
@agentskit/runtime	0.10.17	0.10.19
@agentskit/tools	0.13.8	0.13.12
tsx	4.23.13	4.23.15

Updates @agentskit/adapters from 0.17.0 to 0.17.4

Release notes

Sourced from @​agentskit/adapters's releases.

@​agentskit/adapters@​0.17.4

Changelog

0.16.0

Minor Changes

• Add Node-only CLI text, JSON, and ACP v1 transports with explicit safety modes, deadlines, cancellation, bounded output, fail-closed structured responses, and first-party provider manifests.
• Add request-aware argv builders, raw-output decoding, and bounded provider output-file support.
• Harden configurable CLI adapter transports, provider manifests, deadlines, cancellation, and output handling.

@​agentskit/adapters@​0.17.3

Changelog

0.16.0

Minor Changes

• Add Node-only CLI text, JSON, and ACP v1 transports with explicit safety modes, deadlines, cancellation, bounded output, fail-closed structured responses, and first-party provider manifests.
• Add request-aware argv builders, raw-output decoding, and bounded provider output-file support.
• Harden configurable CLI adapter transports, provider manifests, deadlines, cancellation, and output handling.

@​agentskit/adapters@​0.17.2

Changelog

0.16.0

Minor Changes

• Add Node-only CLI text, JSON, and ACP v1 transports with explicit safety modes, deadlines, cancellation, bounded output, fail-closed structured responses, and first-party provider manifests.
• Add request-aware argv builders, raw-output decoding, and bounded provider output-file support.
• Harden configurable CLI adapter transports, provider manifests, deadlines, cancellation, and output handling.

Commits

• 02ca0b8 chore: version packages
• 9279772 chore: version packages (#1686)
• 4c5c88c chore: version packages (#1684)
• 7c448e4 fix: route cli, adapters, tools, eval, sandbox via cross-platform (#1682)
• 9226c83 chore: version packages (#1618)
• 08fce24 chore: retire public AKOS references (#1615)
• 9266a6d chore(deps): refresh minor and patch versions
• See full diff in compare view

Updates @agentskit/cross-platform from 0.1.0 to 0.1.2

Release notes

Sourced from @​agentskit/cross-platform's releases.

@​agentskit/cross-platform@​0.1.2

Changelog

@​agentskit/cross-platform@​0.1.1

Changelog

Changelog

Sourced from @​agentskit/cross-platform's changelog.

Changelog

This changelog tells the story of AgentsKit — what changed, why it matters, and where the project is headed. Each entry follows a consistent structure:

• Narrative summary — the theme of the release in plain language
• Changes grouped by category — Added, Changed, Fixed, Breaking
• What's next — a short pointer to upcoming work (latest release only)

Entries are versioned by semver and dated by release. Future monthly entries should follow the same pattern: lead with the story, then back it up with specifics.

---

Unreleased

2026-09-02 — coordinated ecosystem hardening release train

• Versioned 22 public packages through Changesets, with package-level changelog entries and synchronized documentation metadata.
• Publication remains gated until the previously committed unpublished versions are recovered through the trusted OIDC release workflow.

Added

• Human-approved content atom pipeline (docs/ecosystem/content-pipeline/, pnpm content-pipeline:run) with deterministic local roles mapped honestly to Registry contracts and offline claim verification for issue #1206. Publishing stays content-digest-bound, evidence-gated, and human-approved.
• Ecosystem contributor funnel and community launch package (docs/ecosystem/launch/, /community funnel, contribute journey docs, pnpm check:launch-package) for issue #1205. Public launch timing stays HITL-gated behind readiness.
• Ecosystem readiness certification harness (pnpm check:ecosystem-readiness / pnpm report:ecosystem-readiness) with versioned per-product evidence under ecosystem-readiness/ for issue #1204. Broad promotion stays gated until overall status is ready.
• Readiness evidence now fails closed when it is empty, stale, future-dated, non-canonical, duplicated, or covered by an unapproved/expired exception.
• Utility-first external contribution program (docs/ecosystem/external-contributions/, pnpm check:external-contributions) with fixture proof, Ollama OpenAI-compat draft, human approval gates, and non-vanity metrics for issue #1207.
• Review-bound contribution approvals now require fresh published rules, passing utility/tests, and a digest of the exact proposal files; completed submissions no longer inflate the pending mass-submission guard.

v1.0.0 — April 2026 · "Public Launch"

April 2026 was the moment AgentsKit stepped out of early access and into the open. The v1.0.0 release consolidated the entire ecosystem under a single stable foundation — hardened contracts, a rebuilt documentation site, a full contribution pathway, and production-ready CI. The name was also officially registered: AgentsKit, clearly distinct from Inngest AgentKit.

Added

• @agentskit/core declared stable at v1.0.0 — the zero-dependency foundation is now under stability guarantees.
• Edit + regenerate for useChat and the chat controller — users can now go back and rephrase any message.
• costGuard observer in @agentskit/observability — enforces a per-run or per-session token/cost budget, aborting when the limit is hit.
• Zero-config adapter capabilities + simulateStream utility in @agentskit/adapters — adapters now auto-detect model capabilities without manual configuration.
• Mock, recording, and replay adapters in @agentskit/adapters — drop-in test doubles for deterministic unit and integration tests.
• Auto-retry with exponential backoff in @agentskit/adapters — transient provider errors are handled transparently.
• agentskit tunnel command — expose a local agent endpoint to the internet for webhook testing.
• agentskit dev command — hot-reload mode for agent development; restarts the runtime on file change.
• agentskit doctor command — diagnostics that inspect the local environment and report missing configuration.
• agentskit init revamped — interactive project generator now supports four templates (React, Ink, Runtime, and CLI).
• Fumadocs-based documentation site — 44 pages across 12 sections, replacing the Docusaurus prototype.
• Per-page dynamic OG images with section accent colours.
• Full SEO pass — robots.txt, sitemap, structured data, canonical URLs.
• Playwright e2e coverage for all four example apps.
• Per-package coverage thresholds enforced in CI via Vitest.
• Bundle size budget enforced in CI via size-limit.

... (truncated)

Commits

• See full diff in compare view

Updates @agentskit/ink from 0.10.11 to 0.10.13

Release notes

Sourced from @​agentskit/ink's releases.

@​agentskit/ink@​0.10.13

Changelog

0.10.10

Patch Changes

• Harden framework binding lifecycle, SSR, input, and public component contracts.

@​agentskit/ink@​0.10.12

Changelog

0.10.10

Patch Changes

• Harden framework binding lifecycle, SSR, input, and public component contracts.

Commits

• 02ca0b8 chore: version packages
• 9226c83 chore: version packages (#1618)
• 08fce24 chore: retire public AKOS references (#1615)
• 9266a6d chore(deps): refresh minor and patch versions
• See full diff in compare view

Updates @agentskit/runtime from 0.10.17 to 0.10.19

Release notes

Sourced from @​agentskit/runtime's releases.

@​agentskit/runtime@​0.10.19

Changelog

0.10.16

Patch Changes

• Harden runtime replay, scheduling, durable-step lifecycle, quota, and statechart contracts.

@​agentskit/runtime@​0.10.18

Changelog

0.10.16

Patch Changes

• Harden runtime replay, scheduling, durable-step lifecycle, quota, and statechart contracts.

Commits

• 02ca0b8 chore: version packages
• 9226c83 chore: version packages (#1618)
• ec7fee3 docs: remove discontinued internal product references (#1657)
• 08fce24 chore: retire public AKOS references (#1615)
• 9266a6d chore(deps): refresh minor and patch versions
• See full diff in compare view

Updates @agentskit/tools from 0.13.8 to 0.13.12

Release notes

Sourced from @​agentskit/tools's releases.

@​agentskit/tools@​0.13.12

Changelog

0.13.7

• Hardened filesystem writes against symlink leaves and added ancestor checks when symlinks are denied.
• Added fail-closed MCP confirmation, optional argument validation, sanitized remote errors, and transport-close settlement.
• Added UTF-8 metadata limits, bounded document downloads, search deadlines/response caps, and deterministic SQLite disposal.
• Clarified the tools facade, subpath ownership, optional Zod contract, and the current provider list.

@​agentskit/tools@​0.13.11

Changelog

0.13.7

• Hardened filesystem writes against symlink leaves and added ancestor checks when symlinks are denied.
• Added fail-closed MCP confirmation, optional argument validation, sanitized remote errors, and transport-close settlement.
• Added UTF-8 metadata limits, bounded document downloads, search deadlines/response caps, and deterministic SQLite disposal.
• Clarified the tools facade, subpath ownership, optional Zod contract, and the current provider list.

@​agentskit/tools@​0.13.10

Changelog

0.13.7

• Hardened filesystem writes against symlink leaves and added ancestor checks when symlinks are denied.
• Added fail-closed MCP confirmation, optional argument validation, sanitized remote errors, and transport-close settlement.
• Added UTF-8 metadata limits, bounded document downloads, search deadlines/response caps, and deterministic SQLite disposal.
• Clarified the tools facade, subpath ownership, optional Zod contract, and the current provider list.

@​agentskit/tools@​0.13.9

Changelog

0.13.7

• Hardened filesystem writes against symlink leaves and added ancestor checks when symlinks are denied.
• Added fail-closed MCP confirmation, optional argument validation, sanitized remote errors, and transport-close settlement.
• Added UTF-8 metadata limits, bounded document downloads, search deadlines/response caps, and deterministic SQLite disposal.
• Clarified the tools facade, subpath ownership, optional Zod contract, and the current provider list.

Commits

• 02ca0b8 chore: version packages
• 9279772 chore: version packages (#1686)
• 4c5c88c chore: version packages (#1684)
• 7c448e4 fix: route cli, adapters, tools, eval, sandbox via cross-platform (#1682)
• 9226c83 chore: version packages (#1618)
• d3c2a97 docs: prune stale pages and consolidate API reference routes (#1663)
• ec7fee3 docs: remove discontinued internal product references (#1657)
• 08fce24 chore: retire public AKOS references (#1615)
• 9266a6d chore(deps): refresh minor and patch versions
• See full diff in compare view

Updates tsx from 4.23.13 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

• exclude bare builtins from namespace inheritance (38e1588)
• expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
• make namespaced register() overloads portable for declaration emit (562c434)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

• restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• ca66105 test: fix drive-less file URLs in ESM resolver fixtures
• 2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
• 38e1588 fix: exclude bare builtins from namespace inheritance
• 562c434 fix: make namespaced register() overloads portable for declaration emit
• edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
• 70e7828 test: upgrade tinyspy for disposable API
• 9ed2022 ci: avoid duplicate release notifications
• 872e77f refactor: use disposables for cleanup
• 6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
• See full diff in compare view