chore(scratch): board rows for #5065/#5066 + dev-box runner-url fix; release BUT-LOCK

Author: mmabrouk

docs/design/agent-workflows/scratch/agent-coordination.md

@@ -357,6 +357,9 @@ FREE
 ## Lanes / PRs (date each row; rows older than 2 days are stale → ignore/clean)
 | date | agent | lane | PR | status |
 | --- | --- | --- | --- | --- |
+| 2026-07-04 | approval-boundary-session | `fix/agent-stream-finish-reason` | #5065 | DRAFT. Paused live streams now carry the terminal stop reason in the finish frame (streaming twin of the #5041 batch fold fix; handler appends a corrective `done`, adapters take last non-null). 4 files, SDK unit 1585 green. Plain `git push -u`, local==remote (`28b3237453`). |
+| 2026-07-04 | approval-boundary-session | `docs/pi-builtin-gating` | #5066 | DRAFT, DOCS-ONLY. plan-feature workspace: gate Pi native builtins through the relay permission records (Option B; extension `pi.on("tool_call")` + real args at the shared `decide()`), plus revive the dead builtin grant list (`request.tools` unread since `0e71bd0f7a`). Codex xhigh review folded (15/15 accepted, incl. `setActiveTools` via `before_agent_start`). Commit `a7f33fad5a` verified clean, plain push, local==remote. Awaiting Mahmoud design review; Phase 0 = live re-issue spike. |
+| 2026-07-04 | approval-boundary-session | (dev box) | — | FIXED live Pi runs on the :8280 EE dev stack: #5059/#5064 renamed the service's runner target to `AGENTA_RUNNER_INTERNAL_URL`; stale container env only had the old var, so the service fell back to a nonexistent local CLI. Added the var (sidecar target) to `.env.ee.dev.local`, force-recreated `services`, restarted `agenta-claude-sub-sidecar` (compiles merged runner wire on start). Verified 200 sidecar-from-services. |
 | 2026-07-04 | approval-boundary-session | `docs/approval-boundary` | #5041 | **MERGED to big-agents** (b839267a32). Rebased onto post-#5064 big-agents via `but pull` + per-commit `but resolve` (6 conflicted commits; runner ours-wins per audit + reconciliation commit re-added #5059 apiBase keeper). Found+fixed a real #5064 bug: batch fold read stop_reason from the `done` event, which the live runner never populates — terminal result now wins (`fold(events, stop_reason=...)`). CodeRabbit round: fixed playground permissions shallow-merge + client-tool pause row. Codex xhigh pre-merge round: resolvedName stamped on pause payloads (pure copy), client-tool rows get their own kind, relay client-tool pause seeds a row, stale integration test vocabulary updated. All suites green (runner 444, SDK 502, services 76+15, playground 180) + CI short set green pre-merge. Pushed ONLY via `git push origin docs/approval-boundary --force-with-lease` (never `but push`). `but pull` post-merge: both lanes integrated+archived, 12 lanes rebased clean. Took+released BUT-LOCK. |
 | 2026-07-03 | skills-fable-session | `docs/build-kit-tools-cleanup` | #5060 | 9-file docs commit (2 files pending hand-off from `docs/approval-boundary`), local==remote verified (`3a6dee9062`). Draft PR to big-agents, review-request + @coderabbitai comments posted. Took+released BUT-LOCK. |
 | 2026-07-03 | approval-boundary-session | `docs/approval-boundary` | #5041 | Phase 2b committed+pushed (commit `211d0517774`, 8 files: `services/runner/src/responder.ts`, `services/runner/src/tools/relay.ts`, `services/runner/src/engines/sandbox_agent.ts`, `services/runner/tests/unit/tool-relay-permission.test.ts`, `services/runner/tests/unit/responder.test.ts`, `services/runner/tests/unit/sandbox-agent-orchestration.test.ts`, `services/runner/tests/unit/tool-direct.test.ts`, `docs/design/agent-workflows/projects/approval-boundary/build-notes.md`) — relay enforces the shared permission plan; Pi gets relay-ask pauses. Local==remote verified. Took+released BUT-LOCK. |