chore: merge main into the local-first storage epic

Three conflicts, all from both sides touching the same files.

The provider hook was rewritten on this branch to read and write through the
server, so its side stands. Main's contribution to that file, saveProvider
resolving with the row that actually persisted, is already carried here from
the previous sync, and the first-run setup screen depends on it.

The app manifest takes main's dependency bumps alongside this branch's
react-query-kit, and the lockfile was reconciled by reinstalling rather than
merged by hand.

This also collapses the diff against main. The earlier sync was squash
merged, so main was never recorded as an ancestor and the comparison was
still made from the original divergence point, which showed this branch as
reverting twenty files main had changed since.

Author: DaniAkash

.github/workflows/claude.yml

@@ -35,7 +35,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@v1.0.182
+        uses: anthropics/claude-code-action@v1.0.210
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           additional_permissions: |

.github/workflows/test.yml

@@ -90,7 +90,7 @@ jobs:
         if: matrix.needs_rust == true
         # Pinned so the clippy lint set is deterministic and matches local dev;
         # a floating `stable` silently changes which lints fire across runs.
-        uses: dtolnay/rust-toolchain@1.95.0
+        uses: dtolnay/rust-toolchain@1.98.0
         with:
           components: clippy,rustfmt
 

.github/workflows/turbo-cache-warm.yml

@@ -77,7 +77,7 @@ jobs:
       - name: Setup Rust
         # Pinned to match the Tests workflow. A different toolchain hashes into
         # a different cache key, which would warm a cache nothing else reads.
-        uses: dtolnay/rust-toolchain@1.95.0
+        uses: dtolnay/rust-toolchain@1.98.0
         with:
           components: clippy,rustfmt
 

packages/browseros-agent/apps/app-onboard/package.json

@@ -23,19 +23,19 @@
     "motion": "^12.0.0",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
-    "react-hook-form": "^7.85.0",
-    "react-router": "^7.18.2",
+    "react-hook-form": "^7.86.0",
+    "react-router": "^7.18.3",
     "tailwind-merge": "^3.6.0",
     "tailwind-scrollbar-hide": "^4.0.0",
     "tw-animate-css": "^1.4.0"
   },
   "devDependencies": {
     "@tailwindcss/typography": "^0.5.20",
     "@tailwindcss/vite": "^4.3.3",
-    "@types/bun": "^1.3.14",
+    "@types/bun": "^1.4.0",
     "@types/node": "^24.13.3",
     "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
+    "@types/react-dom": "^19.2.5",
     "@vitejs/plugin-react": "^5.0.0",
     "tailwindcss": "^4.1.17",
     "vite": "^7.3.6"

packages/browseros-agent/apps/app/modules/agents/agents.hooks.ts

@@ -33,7 +33,13 @@ function agentsClient(baseUrl: string) {
   return hc<AgentRoutes>(`${baseUrl}/agents`)
 }
 
-async function agentRequestError(response: Response): Promise<Error> {
+// Accept the minimal shape this reads rather than the full `Response`: the Hono
+// client returns a `ClientResponse`, which is not structurally the global
+// `Response` under the current lib types.
+async function agentRequestError(response: {
+  status: number
+  json: () => Promise<unknown>
+}): Promise<Error> {
   const body = (await response.json().catch(() => ({}))) as { error?: string }
   return new Error(
     body.error ?? `Request failed with status ${response.status}`,

packages/browseros-agent/apps/app/package.json

@@ -20,13 +20,13 @@
     "codegen:watch": "graphql-codegen --config codegen.ts --watch"
   },
   "dependencies": {
-    "@ai-sdk/react": "^4.0.0",
+    "@ai-sdk/react": "^4.0.87",
     "@browseros/server": "workspace:*",
     "@browseros/shared": "workspace:*",
-    "@hookform/resolvers": "^5.9.0",
+    "@hookform/resolvers": "^5.9.1",
     "@lobehub/icons": "^2.48.0",
-    "@mdxeditor/editor": "^4.2.0",
-    "@posthog/react": "^1.10.3",
+    "@mdxeditor/editor": "^4.2.3",
+    "@posthog/react": "^1.10.5",
     "@radix-ui/react-alert-dialog": "^1.1.23",
     "@radix-ui/react-checkbox": "^1.3.11",
     "@radix-ui/react-collapsible": "^1.1.20",
@@ -45,71 +45,71 @@
     "@radix-ui/react-tooltip": "^1.2.16",
     "@radix-ui/react-use-controllable-state": "^1.2.3",
     "@ricky0123/vad-web": "^0.0.17",
-    "@sentry/react": "^10.70.0",
+    "@sentry/react": "^10.72.0",
     "@sentry/vite-plugin": "^4.9.1",
-    "@tanstack/query-async-storage-persister": "^5.101.4",
-    "@tanstack/react-query": "^5.101.4",
-    "@tanstack/react-query-persist-client": "^5.101.4",
+    "@tanstack/query-async-storage-persister": "^5.102.8",
+    "@tanstack/react-query": "^5.102.8",
+    "@tanstack/react-query-persist-client": "^5.102.8",
     "@webext-core/messaging": "^2.3.0",
     "@wxt-dev/storage": "^1.2.9",
     "@xstate/store": "^3.10.0",
-    "@xyflow/react": "^12.11.3",
+    "@xyflow/react": "^12.11.5",
     "ai": "^7.0.0",
-    "better-auth": "^1.6.29",
+    "better-auth": "^1.7.2",
     "canvas-confetti": "^1.9.4",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "dayjs": "^1.11.21",
+    "dayjs": "^1.11.23",
     "embla-carousel-react": "^8.6.0",
-    "es-toolkit": "^1.50.0",
+    "es-toolkit": "^1.52.0",
     "eventsource-parser": "^3.1.1",
     "fuse.js": "^7.5.0",
     "graphql": "^16.14.2",
-    "hono": "^4.13.1",
+    "hono": "^4.13.5",
     "idb-keyval": "^6.3.0",
     "lucide-react": "^0.577.0",
     "motion": "^12.43.0",
     "nanoid": "^5.1.16",
     "next-themes": "^0.4.6",
-    "onnxruntime-web": "^1.19.2",
-    "posthog-js": "^1.417.1",
+    "onnxruntime-web": "^1.29.0",
+    "posthog-js": "^1.422.5",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
-    "react-hook-form": "^7.85.0",
+    "react-hook-form": "^7.86.0",
     "react-query-kit": "^3.3.4",
-    "react-resizable-panels": "^4.12.2",
-    "react-router": "^7.18.2",
+    "react-resizable-panels": "^4.12.3",
+    "react-router": "^7.18.3",
     "shiki": "^3.23.0",
     "sonner": "^2.0.8",
-    "streamdown": "^2.5.0",
+    "streamdown": "^2.6.0",
     "swr": "^2.5.1",
     "tailwind-merge": "^3.6.0",
     "tailwind-scrollbar-hide": "^4.0.0",
     "tokenlens": "^1.3.1",
     "tw-animate-css": "^1.4.0",
     "use-deep-compare-effect": "^1.8.1",
     "use-stick-to-bottom": "^1.1.6",
-    "zod": "^4.4.3"
+    "zod": "^4.5.2"
   },
   "devDependencies": {
-    "@0no-co/graphqlsp": "^1.17.3",
+    "@0no-co/graphqlsp": "^1.17.5",
     "@eslint/compat": "^2.1.0",
-    "@graphql-codegen/cli": "^7.2.0",
+    "@graphql-codegen/cli": "^7.3.1",
     "@graphql-codegen/client-preset": "^6.1.3",
     "@graphql-codegen/schema-ast": "^6.0.1",
     "@graphql-typed-document-node/core": "^3.2.0",
     "@tailwindcss/typography": "^0.5.20",
     "@tailwindcss/vite": "^4.3.3",
-    "@types/bun": "^1.3.14",
+    "@types/bun": "^1.4.0",
     "@types/canvas-confetti": "^1.9.0",
-    "@types/chrome": "^0.2.6",
+    "@types/chrome": "^0.2.7",
     "@types/cytoscape-dagre": "^2.3.4",
     "@types/dagre": "^0.7.54",
     "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
+    "@types/react-dom": "^19.2.5",
     "@wxt-dev/module-react": "^1.2.2",
-    "lefthook": "^2.1.10",
+    "lefthook": "^2.1.12",
     "serve": "^14.2.6",
     "tailwindcss": "^4.3.1",
     "web-ext": "^9.2.0",

packages/browseros-agent/apps/claw-app/package.json

@@ -25,18 +25,18 @@
     "@fontsource-variable/jetbrains-mono": "^5.3.0",
     "@fontsource-variable/schibsted-grotesk": "^5.3.0",
     "@fontsource/newsreader": "^5.3.0",
-    "@hookform/resolvers": "^5.9.0",
+    "@hookform/resolvers": "^5.9.1",
     "@radix-ui/react-slot": "^1.2.4",
     "@radix-ui/react-use-controllable-state": "^1.2.3",
-    "@rive-app/react-webgl2": "^4.31.0",
+    "@rive-app/react-webgl2": "^4.33.0",
     "@streamdown/cjk": "^1.0.3",
     "@streamdown/code": "^1.1.1",
     "@streamdown/math": "^1.0.2",
     "@streamdown/mermaid": "^1.0.2",
     "@tabler/icons-react": "^3.46.0",
-    "@tanstack/react-query": "^5.101.4",
+    "@tanstack/react-query": "^5.102.8",
     "@tanstack/react-table": "^8.21.3",
-    "@xyflow/react": "^12.11.3",
+    "@xyflow/react": "^12.11.5",
     "ai": "^7.0.0",
     "ansi-to-react": "^6.2.6",
     "class-variance-authority": "^0.7.1",
@@ -48,28 +48,28 @@
     "motion": "^12.43.0",
     "nanoid": "^5.1.16",
     "next-themes": "^0.4.6",
-    "posthog-js": "^1.417.1",
+    "posthog-js": "^1.422.5",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
-    "react-hook-form": "~7.85.0",
+    "react-hook-form": "~7.86.0",
     "react-jsx-parser": "^2.4.1",
     "react-query-kit": "^3.3.1",
-    "react-router": "^7.18.2",
+    "react-router": "^7.18.3",
     "rrweb": "2.1.1",
     "rrweb-player": "2.1.1",
     "shiki": "^4.2.0",
     "sonner": "^2.0.8",
-    "streamdown": "^2.5.0",
+    "streamdown": "^2.6.0",
     "tailwind-merge": "^3.4.0",
     "tokenlens": "^1.3.1",
     "use-stick-to-bottom": "^1.1.6",
-    "zod": "^4.4.3"
+    "zod": "^4.5.2"
   },
   "devDependencies": {
     "@tailwindcss/vite": "^4.3.3",
-    "@types/chrome": "^0.2.6",
+    "@types/chrome": "^0.2.7",
     "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
+    "@types/react-dom": "^19.2.5",
     "@wxt-dev/module-react": "^1.2.2",
     "linkedom": "^0.18.13",
     "serve": "^14.2.6",

packages/browseros-agent/apps/claw-onboard/package.json

@@ -23,16 +23,16 @@
     "lucide-react": "^0.577.0",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
-    "react-hook-form": "~7.85.0",
-    "react-router": "^7.18.2",
+    "react-hook-form": "~7.86.0",
+    "react-router": "^7.18.3",
     "tailwind-merge": "^3.4.0"
   },
   "devDependencies": {
     "@tailwindcss/vite": "^4.3.3",
-    "@types/bun": "^1.3.14",
+    "@types/bun": "^1.4.0",
     "@types/node": "^24.13.3",
     "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
+    "@types/react-dom": "^19.2.5",
     "@vitejs/plugin-react": "^5.0.0",
     "tailwindcss": "^4.1.17",
     "vite": "^7.3.6"

packages/browseros-agent/apps/server/package.json

@@ -61,14 +61,14 @@
     }
   },
   "dependencies": {
-    "@ai-sdk/amazon-bedrock": "^5.0.0",
+    "@ai-sdk/amazon-bedrock": "^5.0.67",
     "@ai-sdk/anthropic": "^4.0.0",
-    "@ai-sdk/azure": "^4.0.0",
-    "@ai-sdk/devtools": "^1.0.0",
-    "@ai-sdk/google": "^4.0.0",
+    "@ai-sdk/azure": "^4.0.53",
+    "@ai-sdk/devtools": "^1.0.13",
+    "@ai-sdk/google": "^4.0.57",
     "@ai-sdk/mcp": "^2.0.0",
     "@ai-sdk/openai": "^4.0.0",
-    "@ai-sdk/openai-compatible": "^3.0.0",
+    "@ai-sdk/openai-compatible": "^3.0.40",
     "@ai-sdk/provider": "^4.0.0",
     "@browseros/acpx-ai-provider": "workspace:*",
     "@browseros/agent-mcp-manager": "workspace:*",
@@ -81,29 +81,29 @@
     "@modelcontextprotocol/hono": "^2.0.0",
     "@modelcontextprotocol/server": "^2.0.0",
     "@openrouter/ai-sdk-provider": "^3.0.0",
-    "@sentry/bun": "^10.70.0",
+    "@sentry/bun": "^10.72.0",
     "acp-probe": "^0.0.2",
-    "acpx": "^0.13.0",
+    "acpx": "^0.13.2",
     "ai": "^7.0.0",
     "commander": "^14.0.3",
     "core-js": "3.50.0",
     "drizzle-orm": "^0.45.2",
-    "hono": "^4.13.1",
+    "hono": "^4.13.5",
     "jimp": "^1.6.1",
     "jsonc-parser": "^3.3.1",
     "pino": "^9.14.0",
     "posthog-node": "^4.18.0",
-    "zod": "^3.25.76",
+    "zod": "^4.5.2",
     "zod-to-json-schema": "^3.25.2"
   },
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@types/bun": "1.3.5",
+    "@types/bun": "1.4.0",
     "@types/node": "^24.13.3",
     "async-mutex": "^0.5.0",
     "drizzle-kit": "^0.31.10",
     "pino-pretty": "^13.1.3",
-    "puppeteer": "^25.7.0"
+    "puppeteer": "^25.9.0"
   },
   "license": "AGPL-3.0-or-later"
 }

packages/browseros-agent/apps/server/src/api/services/klavis/tool-adapters.ts

@@ -9,7 +9,6 @@ import type { CallToolResult } from '@modelcontextprotocol/client'
 import { fromJsonSchema, type McpServer } from '@modelcontextprotocol/server'
 import { jsonSchema, type ToolSet } from 'ai'
 import { z } from 'zod'
-import { zodToJsonSchema } from 'zod-to-json-schema'
 import { logger } from '../../../lib/logger'
 import { metrics } from '../../../lib/metrics'
 import { findConnector, getConnectorCatalogDescription } from './catalog'
@@ -240,17 +239,18 @@ export function buildKlavisToolSet(deps: KlavisToolAdapterDeps): ToolSet {
   return toolSet
 }
 
-// Bridge a locally hand-built Zod v3 shape (the connector tool's schema) into a
-// v2 registerTool input schema. v2 derives a tools/list JSON schema only from
-// Zod v4, so convert the v3 shape to JSON Schema first, then wrap it. Remote
-// Strata tools do NOT use this path: their JSON schema goes straight to
-// fromJsonSchema (round-tripping through Zod drops every property under v3).
+// Bridge the locally hand-built Zod shape (the connector tool's schema) into a
+// v2 registerTool input schema. v2 derives a tools/list JSON schema from the
+// JSON Schema, so convert the object first, then wrap it. Remote Strata tools do
+// NOT use this path: their JSON schema goes straight to fromJsonSchema.
 function toV2InputSchema(rawShape: z.ZodRawShape) {
   // The bridged value is a StandardSchemaWithJSON; type it as a raw shape so
   // registerTool's overload and handler typing resolve as before. At runtime
-  // v2 accepts the real object via the Standard Schema path.
+  // v2 accepts the real object via the Standard Schema path. Use Zod's native
+  // JSON Schema converter: the object is a Zod 4 schema, which the external
+  // zod-to-json-schema (v3-only) silently converts to an empty schema.
   return fromJsonSchema(
-    zodToJsonSchema(z.object(rawShape)) as never,
+    z.toJSONSchema(z.object(rawShape)) as never,
   ) as unknown as Record<string, never>
 }