chore(compose): wire the agent tool-call budget caps through the composes (#672)

ROBOCO_AGENT_TOOL_CALL_HALT/_WARN were read by the in-container SDK
server and defined in config, but reached no compose environment stanza
and no .env.example — the third dead-on-arrival env var of this class.
Live consequence (2026-07-23): the 300-call default halted the
responsiveness-audit dev twice mid-task ("Agent budget exceeded;
terminating container"), releasing and respawning it in 300-call slices.
Defaults raised to halt=600/warn=200 in the build compose (registry
compose passes them through unset), matching the already-patched NAS.

Co-authored-by: Renn F <rennf93@users.noreply.github.com>

.env.example

@@ -491,3 +491,11 @@ ROBOCO_EXTERNAL_PR_REQUIRE_HUMAN_CONFIRM=true
 # CORS (comma-separated origins)
 # =============================================================================
 ROBOCO_CORS_ORIGINS=["http://localhost:3000","http://localhost:5173"]
+
+# --- Agent tool-call budget (per session) ---
+# Warn/halt thresholds for an agent's tool-call count; the halt gracefully
+# stops the container and releases its task back to the pool. Audit-heavy
+# tasks (page sweeps, big refactors) need headroom — 600 clears a real
+# task's footprint while keeping the runaway guard.
+ROBOCO_AGENT_TOOL_CALL_WARN=200
+ROBOCO_AGENT_TOOL_CALL_HALT=600

docker-compose.registry.yml

@@ -452,6 +452,8 @@ services:
       # gateway-fronted Tailscale Serve deploy can set it via .env rather than
       # hand-editing this file. Same reach-the-container rule as above.
       ROBOCO_GUARD_TRUSTED_CHAIN_PEERS: ${ROBOCO_GUARD_TRUSTED_CHAIN_PEERS:-}
+      ROBOCO_AGENT_TOOL_CALL_HALT: ${ROBOCO_AGENT_TOOL_CALL_HALT:-600}
+      ROBOCO_AGENT_TOOL_CALL_WARN: ${ROBOCO_AGENT_TOOL_CALL_WARN:-200}
       # Per-task/project cost budgets (default-off; conservative registry
       # posture, unlike the build compose which arms it).
       ROBOCO_TASK_BUDGETS_ENABLED: ${ROBOCO_TASK_BUDGETS_ENABLED:-false}

docker-compose.yaml

@@ -698,6 +698,8 @@ services:
       # goes inert for /tg. Same "must be listed here to reach the container"
       # rule as the emergency whitelist above.
       ROBOCO_GUARD_TRUSTED_CHAIN_PEERS: ${ROBOCO_GUARD_TRUSTED_CHAIN_PEERS:-}
+      ROBOCO_AGENT_TOOL_CALL_HALT: ${ROBOCO_AGENT_TOOL_CALL_HALT:-600}
+      ROBOCO_AGENT_TOOL_CALL_WARN: ${ROBOCO_AGENT_TOOL_CALL_WARN:-200}
       # Per-task/project cost budgets (default-off subsystem; also on the
       # panel feature-flags card).
       ROBOCO_TASK_BUDGETS_ENABLED: ${ROBOCO_TASK_BUDGETS_ENABLED:-true}

docker-compose.yml

@@ -698,6 +698,8 @@ services:
       # goes inert for /tg. Same "must be listed here to reach the container"
       # rule as the emergency whitelist above.
       ROBOCO_GUARD_TRUSTED_CHAIN_PEERS: ${ROBOCO_GUARD_TRUSTED_CHAIN_PEERS:-}
+      ROBOCO_AGENT_TOOL_CALL_HALT: ${ROBOCO_AGENT_TOOL_CALL_HALT:-600}
+      ROBOCO_AGENT_TOOL_CALL_WARN: ${ROBOCO_AGENT_TOOL_CALL_WARN:-200}
       # Per-task/project cost budgets (default-off subsystem; also on the
       # panel feature-flags card).
       ROBOCO_TASK_BUDGETS_ENABLED: ${ROBOCO_TASK_BUDGETS_ENABLED:-true}