@abloatai/humans 0.47.0 → 0.49.0

package/dist/local/transactions/mutations/commitTransport.js

@@ -1,6 +1,6 @@
 import { AbloConnectionError, AbloError, AbloIdempotencyError, } from '@abloatai/transaction/errors';
 import { mutationCommitResultSchema, } from '@abloatai/transaction/wire/commit';
-import { createDurableCommitEnvelope, commitEnvelopeRecordId, durableCommitEnvelopeSchema, } from '@abloatai/transaction/transactions/settlement/commitEnvelope';
+import { createDurableCommitEnvelope, commitEnvelopeRecordId, durableCommitEnvelopeSchema, } from '@abloatai/transaction/transactions/confirmation/commitEnvelope';
 export async function sealDurableCommit(ctx, input, pendingMutationRecordId) {
     const sourceMutationIds = [...new Set(input.sourceMutationIds ?? [])];
     const envelope = createDurableCommitEnvelope({

package/dist/local/transactions/mutations/durableCommitRestore.d.ts

@@ -1,6 +1,6 @@
 import type { RuntimeContext } from '../../RuntimeContext.js';
 import type { CommitTransaction } from './commitLane.js';
-import type { CommitOutboxScope } from '@abloatai/transaction/transactions/settlement/commitEnvelope';
+import type { CommitOutboxScope } from '@abloatai/transaction/transactions/confirmation/commitEnvelope';
 import type { DurableWriteStore } from './durableWriteStore.js';
 export interface DurableCommitRestoreContext {
     readonly config: {

package/dist/local/transactions/mutations/durableCommitRestore.js

@@ -1,5 +1,5 @@
 import { AbloIdempotencyError, AbloValidationError } from '@abloatai/transaction/errors';
-import { durableCommitEnvelopeSchema } from '@abloatai/transaction/transactions/settlement/commitEnvelope';
+import { durableCommitEnvelopeSchema } from '@abloatai/transaction/transactions/confirmation/commitEnvelope';
 export async function restoreDurableCommits(ctx) {
     if (!ctx.config.enablePersistence)
         return new Set();

package/dist/local/transactions/mutations/durableWriteStore.d.ts

@@ -1,14 +1,14 @@
 /**
- * The durable-write port moved to the settlement core (ADR 0016): it is a
+ * The durable-write port moved to the confirmation core (ADR 0016): it is a
  * contract over commit envelopes and holds no local rows. Re-exported here so
  * the existing `transactions/mutations/durableWriteStore` import path keeps
  * resolving for the queue, the outbox, and the client options.
  *
  * The port and its config live in the core's `durableWrites` module (a behavior
  * contract, not a persisted shape); the records that cross it are owned by
- * `transactions/settlement/pendingWrite`.
+ * `transactions/confirmation/pendingWrite`.
  */
 export { durableWriteStoreSchema, durableWritesConfigSchema, } from '@abloatai/transaction/durableWrites';
 export type { DurableWriteStore, DurableWritesConfig, } from '@abloatai/transaction/durableWrites';
-export { pendingWriteSchema } from '@abloatai/transaction/transactions/settlement/pendingWrite';
-export type { PendingWrite } from '@abloatai/transaction/transactions/settlement/pendingWrite';
+export { pendingWriteSchema } from '@abloatai/transaction/transactions/confirmation/pendingWrite';
+export type { PendingWrite } from '@abloatai/transaction/transactions/confirmation/pendingWrite';

package/dist/local/transactions/mutations/durableWriteStore.js

@@ -1,12 +1,12 @@
 /**
- * The durable-write port moved to the settlement core (ADR 0016): it is a
+ * The durable-write port moved to the confirmation core (ADR 0016): it is a
  * contract over commit envelopes and holds no local rows. Re-exported here so
  * the existing `transactions/mutations/durableWriteStore` import path keeps
  * resolving for the queue, the outbox, and the client options.
  *
  * The port and its config live in the core's `durableWrites` module (a behavior
  * contract, not a persisted shape); the records that cross it are owned by
- * `transactions/settlement/pendingWrite`.
+ * `transactions/confirmation/pendingWrite`.
  */
 export { durableWriteStoreSchema, durableWritesConfigSchema, } from '@abloatai/transaction/durableWrites';
-export { pendingWriteSchema } from '@abloatai/transaction/transactions/settlement/pendingWrite';
+export { pendingWriteSchema } from '@abloatai/transaction/transactions/confirmation/pendingWrite';

package/dist/local/transactions/mutations/localMutation.d.ts

@@ -26,7 +26,7 @@ export interface OptimisticUpdateEntry {
 export interface OptimisticEmitter {
     emit(event: string, payload: unknown): void;
 }
-/** Materializer capability consumed by settlement; implementation belongs to the local layer. */
+/** Materializer capability consumed by confirmation; implementation belongs to the local layer. */
 export interface LocalMutationPort {
     readonly updates: Map<string, OptimisticUpdateEntry>;
     applyCreate(model: Model, transaction: QueuedMutation): void;

package/dist/local/transactions/mutations/mutationPersistence.d.ts

@@ -1,7 +1,7 @@
 import type { RuntimeContext } from '../../RuntimeContext.js';
 import type { MutationPersistencePort } from '../../mutationPersistence.js';
 import type { MutationQueueConfig } from './MutationQueue.js';
-import type { CommitOutboxScope } from '@abloatai/transaction/transactions/settlement/commitEnvelope';
+import type { CommitOutboxScope } from '@abloatai/transaction/transactions/confirmation/commitEnvelope';
 import type { QueuedMutation } from './commitPayload.js';
 import { MutationStore } from './MutationStore.js';
 import { deserializePersistedTransaction } from './replayValidation.js';

package/dist/local/transactions/mutations/pendingDrain.d.ts

@@ -3,7 +3,7 @@ import type { QueuedMutation } from './commitPayload.js';
 import type { MutationStore } from './MutationStore.js';
 import type { OptimisticUpdateEntry } from './localMutation.js';
 import type { MutationCommitResult } from '@abloatai/transaction/wire/commit';
-import type { DurableCommitEnvelope } from '@abloatai/transaction/transactions/settlement/commitEnvelope';
+import type { DurableCommitEnvelope } from '@abloatai/transaction/transactions/confirmation/commitEnvelope';
 export interface PendingDrainContext {
     readonly runtime: RuntimeContext;
     readonly config: {
@@ -30,4 +30,4 @@ export interface PendingDrainContext {
     readonly recentDeltaCorrelations: Map<string, number>;
     readonly emit: (event: string, payload: object) => boolean;
 }
-export declare function drainPendingSettlements(ctx: PendingDrainContext): Promise<void>;
+export declare function drainPendingConfirmations(ctx: PendingDrainContext): Promise<void>;

package/dist/local/transactions/mutations/pendingDrain.js

@@ -1,5 +1,5 @@
 import { applyWriteOptions, TX_TYPE_TO_MUTATION_OP } from './commitPayload.js';
-export async function drainPendingSettlements(ctx) {
+export async function drainPendingConfirmations(ctx) {
     ctx.assertDurableReplayOpen();
     // Kick the commit lane too: atomic envelopes from `commits.create()` may
     // have been left at the head of the lane while the connection was down.

package/dist/local/transactions/mutations/replayValidation.d.ts

@@ -4,7 +4,7 @@
  * Rows read back from the on-disk transaction store may have been written by an
  * earlier run — possibly by an older version of this package, possibly
  * corrupted. Rather than trust them, the schemas here validate exactly the
- * fields the settlement queue and the local journal restore read during
+ * fields the confirmation queue and the local journal restore read during
  * replay. A row that fails to parse is dropped and reported, never replayed as
  * a malformed commit.
  *
@@ -64,6 +64,9 @@ export declare const persistedTransactionSchema: z.ZodObject<{
         idempotencyKey: z.ZodOptional<z.ZodString>;
         label: z.ZodOptional<z.ZodString>;
         fenceToken: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        claimRef: z.ZodOptional<z.ZodNullable<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>]>>>;
     }, z.core.$loose>>;
     localOnly: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$loose>;
@@ -107,6 +110,9 @@ export declare const persistedMutationSchema: z.ZodObject<{
         idempotencyKey: z.ZodOptional<z.ZodString>;
         label: z.ZodOptional<z.ZodString>;
         fenceToken: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        claimRef: z.ZodOptional<z.ZodNullable<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>]>>>;
     }, z.core.$loose>>;
 }, z.core.$loose>;
 export type PersistedQueuedMutation = z.infer<typeof persistedMutationSchema>;
@@ -143,6 +149,9 @@ export declare const legacyPendingMutationRecordSchema: z.ZodObject<{
             idempotencyKey: z.ZodOptional<z.ZodString>;
             label: z.ZodOptional<z.ZodString>;
             fenceToken: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            claimRef: z.ZodOptional<z.ZodNullable<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>]>>>;
         }, z.core.$loose>>;
         mutationId: z.ZodString;
     }, z.core.$loose>;
@@ -178,6 +187,9 @@ export declare const pendingMutationRecordSchema: z.ZodObject<{
             idempotencyKey: z.ZodOptional<z.ZodString>;
             label: z.ZodOptional<z.ZodString>;
             fenceToken: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            claimRef: z.ZodOptional<z.ZodNullable<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                id: z.ZodString;
+            }, z.core.$strip>]>>>;
         }, z.core.$loose>>;
         mutationId: z.ZodString;
     }, z.core.$loose>;

package/dist/local/transactions/mutations/replayValidation.js

@@ -4,7 +4,7 @@
  * Rows read back from the on-disk transaction store may have been written by an
  * earlier run — possibly by an older version of this package, possibly
  * corrupted. Rather than trust them, the schemas here validate exactly the
- * fields the settlement queue and the local journal restore read during
+ * fields the confirmation queue and the local journal restore read during
  * replay. A row that fails to parse is dropped and reported, never replayed as
  * a malformed commit.
  *
@@ -17,7 +17,7 @@
 import { z } from 'zod';
 import { computePriorityScore, normalizeModelKey } from './commitPayload.js';
 import { globalRuntime } from '../../context.js';
-import { commitEnvelopeMemberSchema, commitOutboxScopeSchema, } from '@abloatai/transaction/transactions/settlement/commitEnvelope';
+import { commitEnvelopeMemberSchema, commitOutboxScopeSchema, } from '@abloatai/transaction/transactions/confirmation/commitEnvelope';
 import { onStaleModeSchema } from '@abloatai/transaction/coordination/schema';
 /** The subset of a write's options that is stored with each transaction or queued mutation. */
 const persistedWriteOptionsSchema = z
@@ -32,6 +32,7 @@ const persistedWriteOptionsSchema = z
     // write. Declared (not just loose-passthrough) so it is validated as a
     // number on rehydration.
     fenceToken: z.number().nullable().optional(),
+    claimRef: z.union([z.string().min(1), z.object({ id: z.string().min(1) })]).nullable().optional(),
 })
     .loose();
 /**

package/dist/local/transactions/reconnectDrain.d.ts

@@ -1,7 +1,7 @@
 /**
  * Human-side reconnect adapter.
  *
- * The settlement callback owns ordering and receipts. This adapter owns the
+ * The confirmation callback owns ordering and receipts. This adapter owns the
  * local client's reconnect concurrency: repeated online/connect signals join
  * the same drain instead of starting competing local recovery passes.
  */

package/dist/react/useSyncStatus.d.ts

@@ -15,5 +15,5 @@ export type SyncStatusSnapshot = {
 } | {
     readonly name: 'needs-auth';
 };
-/** Reactively exposes the local store's connection and settlement status. */
+/** Reactively exposes the local store's connection and confirmation status. */
 export declare function useSyncStatus(): SyncStatusSnapshot;

package/dist/react/useSyncStatus.js

@@ -2,7 +2,7 @@
 import { useCallback } from 'react';
 import { useSyncContext, } from './context.js';
 import { useReactive } from '../useReactive.js';
-/** Reactively exposes the local store's connection and settlement status. */
+/** Reactively exposes the local store's connection and confirmation status. */
 export function useSyncStatus() {
     const { store } = useSyncContext();
     const compute = useCallback(() => deriveStatus(store), [store]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abloatai/humans",
-  "version": "0.47.0",
+  "version": "0.49.0",
   "description": "The optional human-facing local-state package for Ablo: presence, live queries, and React bindings.",
   "license": "Apache-2.0",
   "type": "module",
@@ -84,7 +84,7 @@
     "directory": "packages/humans"
   },
   "dependencies": {
-    "@abloatai/transaction": "^0.47.0",
+    "@abloatai/transaction": "^0.49.0",
     "mobx": "^6.13.7",
     "uuid": "^11.1.0",
     "zod": "^4.4.3"

package/src/Ablo.ts

@@ -64,7 +64,7 @@ export type {
 } from './local/client/options.js';
 export type { AbloReads } from './client.js';
 // `ModelTarget` (the model/id locator) and `ModelClaim` (the resolved claim
-// view) are defined once in the settlement core, derived from a single zod
+// view) are defined once in the confirmation core, derived from a single zod
 // schema so the typed client, the HTTP client, and the server share one
 // definition. They reach consumers through `./resourceTypes` with the rest of
 // the resource surface; re-exported here so `ablo.ModelTarget` and

package/src/client.ts

@@ -30,6 +30,7 @@ import type {
   CreateAgentClientParams,
   SessionResource,
 } from '@abloatai/transaction/resources/httpResources';
+import type { EffectiveAuthority } from '@abloatai/transaction/auth';
 export type { LocalReadOptions } from './local/client/resourceTypes.js';
 
 /** The typed sync engine client — one property per model in the schema */
@@ -182,6 +183,12 @@ export type AbloClient<S extends SchemaRecord> = {
    */
   readonly organizationId: string | null;
 
+  /**
+   * The effective authority of this running participant, confirmed by the
+   * server credential exchange/identity endpoint. `null` until `ready()`.
+   */
+  readonly identity: EffectiveAuthority | null;
+
   /**
    * Destroy every IndexedDB database owned by this engine. Disconnects
    * the WebSocket, releases timers, and deletes all `ablo_*` / `ablo-*`

package/src/humans.ts

@@ -2,7 +2,7 @@
  * Public human-facing local-state capability.
  *
  * The plugin and its local-state runtime belong to @abloatai/humans. The
- * shared settlement package supplies only the handoff identity and wire
+ * shared confirmation package supplies only the handoff identity and wire
  * contracts.
  */
 import type { AbloPlugin, PluginContext, AppliedChange } from './plugin.js';

package/src/local/BaseSyncedStore.ts

@@ -178,7 +178,7 @@ export interface UserContext {
    *  - `'none'`: open the WebSocket and process live deltas only.
    *    Reads go through `model.get()` / filtered subscriptions
    *    backfilled by `Covering` deltas. Suitable for transactional
-   *    participants — agent-worker, video-pipeline, routine runners —
+   *    participants — headless workers, video pipelines, routine runners —
    *    that don't need a local replica of the org's tenant plane.
    */
   bootstrapMode?: 'full' | 'none';

package/src/local/Database.ts

@@ -1125,7 +1125,7 @@ export class Database {
     // ── inMemory short-circuit ───────────────────────────────────────
     //
     // The batched IDB transaction path below assumes `this.storeManager`
-    // and `workspaceDb`. In inMemory mode (agent-worker, tests) those
+    // and `workspaceDb`. In inMemory mode (headless workers, tests) those
     // don't exist. Without this branch, every live delta arriving over
     // the WebSocket is silently dropped — the local pool never updates,
     // `subscribe()` autoruns never re-fire, lazy-model dispatchers

package/src/local/RuntimeContext.ts

@@ -48,7 +48,7 @@ export interface RuntimeContext {
 
   /**
    * Model metadata lookup. Injected by the client (it wires this from its
-   * `ModelRegistry`) so the settlement core can resolve a model's metadata
+   * `ModelRegistry`) so the confirmation core can resolve a model's metadata
    * without importing the registry — the dependency inversion that keeps the
    * core free of the client's `Model` layer (ADR 0013).
    */

package/src/local/SyncClient.ts

@@ -1280,7 +1280,7 @@ export class SyncClient extends EventEmitter {
     if (this.pendingStages.size > 0) {
       await Promise.all([...this.pendingStages]);
     }
-    await this.drainPendingSettlements();
+    await this.drainPendingConfirmations();
   }
 
   /**
@@ -1511,7 +1511,7 @@ export class SyncClient extends EventEmitter {
     // Browser online state may have marked the client connected before the
     // WebSocket itself was ready. Always kick both durable lanes on the real
     // socket event, even when the high-level state did not change.
-    void this.drainPendingSettlements().catch((error: unknown) => {
+    void this.drainPendingConfirmations().catch((error: unknown) => {
       this.runtime.observability.captureMutationFailure({
         context: 'restore-commit-outbox',
         error: error instanceof Error ? error : new Error(String(error)),
@@ -1520,7 +1520,7 @@ export class SyncClient extends EventEmitter {
     void this.processPendingMutations();
   }
 
-  private drainPendingSettlements(): Promise<void> {
+  private drainPendingConfirmations(): Promise<void> {
     return this.reconnectDrain.drain(() => this.mutationQueue.drainPending());
   }