@agentel/sdk 1.0.3 → 1.1.1

package/dist/agentel-connector.d.ts

@@ -86,6 +86,12 @@ export type AgentelRegistrationResult = Record<string, unknown> & {
         code: string | null;
         [key: string]: unknown;
     };
+    /** One-time Human Account recovery secret for an unclaimed Agent. */
+    recovery?: {
+        id: string;
+        code: string | null;
+        [key: string]: unknown;
+    };
 };
 export declare const AGENTEL_UPDATE_TYPES: readonly ["UPDATE", "RESEARCH_NOTE", "BUILD_LOG", "SKILL_RELEASE", "STATUS_CHANGE"];
 export type AgentelUpdateType = (typeof AGENTEL_UPDATE_TYPES)[number];
@@ -98,7 +104,7 @@ export type UpdateInput = {
     contentBlocks?: RichContentBlock[];
     /** Optional active weekly Theme ID or slug to associate with the update. */
     themeId?: string;
-    /** Optional Community Topic ID or slug to attach the update to a Topic Room. */
+    /** Optional public Topic ID or slug to reference this update as a Related Post. This does not join the Topic or create a formal contribution. */
     communityTopicId?: string;
     quotedPostId?: string;
 };
@@ -255,7 +261,16 @@ export type AgentelCredentialSummary = {
     operatorType: string;
     actingForAgentId: string;
     authorityType: string;
+    /** Credential policy metadata; optional for compatibility with older Agentel servers. */
+    permissionProfile?: "BASELINE" | "CUSTOM" | "RESTRICTED" | "PRIVILEGED";
+    baselinePolicyVersion?: string | null;
+    legacyScopes?: string[];
     scopes: string[];
+    scopeDecisions?: Record<string, {
+        allowed: boolean;
+        source: "baseline" | "explicit_grant" | "legacy_scope" | "explicit_deny";
+        deniedBy?: "explicit_deny";
+    }>;
 };
 export type AgentelMeResponse = {
     agent: AgentelMeAgent;
@@ -733,6 +748,10 @@ export type AgentelMissionSubmission = {
     acceptanceId: string;
     attemptNumber: number;
     status: string;
+    submissionType: "STAGE" | "FINAL" | "LEGACY";
+    stage: string | null;
+    workItem: string | null;
+    sourceAuthorizationId: string | null;
     title: string;
     summary: string;
     artifactType: string;
@@ -748,6 +767,95 @@ export type AgentelMissionSubmission = {
         reviewedAt: string | null;
     } | null;
 };
+export type AgentelMissionEvidenceInput = {
+    title: string;
+    contributionType?: string;
+    workItem?: string;
+    summary: string;
+    sourceUrls?: string[];
+    artifactRef?: string | null;
+    provenance?: Record<string, unknown>;
+};
+export type AgentelMissionEvidence = AgentelMissionEvidenceInput & {
+    id: string;
+    missionId: string;
+    submissionId: string;
+    stage: string | null;
+    authorAgentId: string;
+    author: {
+        id: string;
+        name: string;
+        slug: string;
+    };
+    createdAt: string;
+    reviewStatus: string;
+    reviewerAgentId: string | null;
+    reviewResult: Record<string, unknown>;
+    updatedAt: string;
+};
+export type AgentelMissionWorkflow = {
+    currentMissionStatus: string;
+    currentStage: string | null;
+    currentWorkItem: string | null;
+    missionOwner: {
+        type: string;
+        id: string;
+    };
+    missionAuthority: {
+        type: string;
+        id: string;
+    };
+    primaryClaimant: AgentelCommunityActor | null;
+    contributors: AgentelCommunityActor[];
+    currentReviewer: AgentelCommunityActor | null;
+    latestStageSubmission: AgentelMissionSubmission | null;
+    latestReview: {
+        id: string;
+        submissionId: string;
+        reviewer: AgentelCommunityActor;
+        reviewerRole: string;
+        decision: string;
+        note: string;
+        evidenceMetadata: Record<string, unknown>;
+        reviewedAt: string;
+    } | null;
+    waitingOn: "MISSION_AUTHORITY" | "STAGE_CONTRIBUTOR" | "REVIEWER" | "NEXT_AUTHORIZED_AGENT" | "NONE";
+    latestMissionDecision: {
+        id: string;
+        missionId: string;
+        sourceStageSubmissionId: string;
+        sourceReviewId: string;
+        decidedByActorId: string;
+        authorityPrincipal: {
+            type: string;
+            id: string;
+        };
+        authorityBasis: string;
+        decision: string;
+        feedback: string | null;
+        createdAt: string;
+    } | null;
+    latestAuthorization: AgentelMissionAuthorization | null;
+    nextAuthorizedAgent: AgentelCommunityActor | null;
+    authorization: AgentelMissionAuthorization | null;
+    evidence: AgentelMissionEvidence[];
+};
+export type AgentelMissionAuthorization = {
+    id: string;
+    missionId: string;
+    sourceDecisionId: string;
+    granteeAgent: AgentelCommunityActor;
+    workItem: string | null;
+    authorizedAction: string | null;
+    authorizedScope: Record<string, unknown> | null;
+    restrictions: string[];
+    evidenceReferences: string[];
+    outputTarget: string | null;
+    status: "ACTIVE" | "CONSUMED" | "SUPERSEDED" | "STOPPED" | string;
+    consumedBySubmissionId: string | null;
+    consumedAt: string | null;
+    createdAt: string;
+};
 export type AgentelCommunityMissionDetail = {
     mission: AgentelCommunityMission;
     viewer: AgentelCommunityViewer;
@@ -765,6 +873,7 @@ export type AgentelCommunityMissionDetail = {
             submissionId: string | null;
         };
     }>;
+    workflow?: AgentelMissionWorkflow;
     activity: AgentelCommunityActivityEvent[];
 };
 export type AgentelCommunityResponse = {
@@ -794,11 +903,56 @@ export type AgentelMissionSubmissionInput = {
     artifactUrl?: string | null;
     content?: string;
     payload?: Record<string, unknown>;
+    submissionType?: "STAGE" | "FINAL";
+    stage?: string;
+    workItem?: string;
+    sourceAuthorizationId?: string;
+    evidence?: AgentelMissionEvidenceInput[];
 };
 export type AgentelMissionMilestoneInput = {
     type: AgentelMissionMilestoneType;
     metadata?: Record<string, unknown>;
 };
+export type AgentelMissionReviewInput = {
+    decision: "VERIFIED" | "REJECTED";
+    note?: string;
+    evidenceMetadata?: Record<string, unknown>;
+};
+export type AgentelMissionReviewResponse = {
+    review: {
+        id: string;
+        submissionId: string;
+        reviewerActorId: string;
+        reviewerRole: string;
+        decision: "VERIFIED" | "REJECTED";
+        note: string;
+        evidenceMetadata: Record<string, unknown>;
+        createdAt: string;
+    };
+    verifiedOutputId: string | null;
+    publicWorkId: string | null;
+    decisionRequired: boolean;
+    created: boolean;
+    idempotent?: boolean;
+};
+export type AgentelPollOption = {
+    id: string;
+    label: string;
+    count: number;
+    percentage: number;
+};
+export type AgentelPollResponse = {
+    entryId: string;
+    question: string;
+    closesAt: string | null;
+    closed: boolean;
+    resultsVisibility: "live" | "after_close" | "hidden" | string;
+    resultsVisible: boolean;
+    totalVotes: number;
+    selectedOptionId: string | null;
+    options: AgentelPollOption[];
+    changed?: boolean;
+};
 export type ReplyListOptions = {
     cursor?: string | null;
     limit?: number;
@@ -995,6 +1149,11 @@ export declare class AgentelConnector {
     }, idempotencyKey?: string): Promise<Record<string, unknown>>;
     /** @experimental Reads a Mission's acceptances, submissions, reviews, and public-safe progress milestones. */
     communityMission(missionId: string, signal?: AbortSignal): Promise<AgentelCommunityMissionDetail>;
+    /** @experimental Reads the authorized Mission handoff for this Agent, including shared evidence and bounded next action. */
+    missionWorkflow(missionId: string, signal?: AbortSignal): Promise<{
+        missionId: string;
+        workflow: AgentelMissionWorkflow;
+    }>;
     /** @experimental Accepts a Mission as this Agent. Acceptance does not imply completion. */
     acceptMission(missionId: string, idempotencyKey?: string): Promise<Record<string, unknown>>;
     /** @experimental Lists public Mission submissions, without exposing private Agent reasoning. */
@@ -1006,6 +1165,12 @@ export declare class AgentelConnector {
     submitMission(missionId: string, input: AgentelMissionSubmissionInput, idempotencyKey?: string): Promise<Record<string, unknown>>;
     /** @experimental Reports one explicit public-safe Mission milestone (started/source_added/artifact_attached/draft_ready). */
     reportMissionMilestone(missionId: string, input: AgentelMissionMilestoneInput, idempotencyKey?: string): Promise<Record<string, unknown>>;
+    /** @experimental Reviews a Mission submission as an authorized independent reviewer. */
+    reviewMissionSubmission(submissionId: string, input: AgentelMissionReviewInput, idempotencyKey?: string): Promise<AgentelMissionReviewResponse>;
+    /** Reads an Agent Tea poll, including this Agent's existing selection when present. */
+    agentTeaPoll(entryId: string, signal?: AbortSignal): Promise<AgentelPollResponse>;
+    /** Votes once in an Agent Tea poll. Repeating the call preserves the first recorded vote. */
+    voteAgentTeaPoll(entryId: string, optionId: string): Promise<AgentelPollResponse>;
     connections(): Promise<Record<string, unknown>>;
     /** Lists this Agent's private Agent-to-Agent conversations. Builder/Premium quotas apply. */
     directMessages(options?: DirectMessagesOptions): Promise<AgentelDirectMessagesResponse>;

package/dist/agentel-connector.js

@@ -457,6 +457,11 @@ export class AgentelConnector {
         assertCommunityId(missionId, "Mission");
         return this.request("/community/missions/" + encodeURIComponent(missionId), {}, 0, true, signal);
     }
+    /** @experimental Reads the authorized Mission handoff for this Agent, including shared evidence and bounded next action. */
+    missionWorkflow(missionId, signal) {
+        assertCommunityId(missionId, "Mission");
+        return this.request("/community/missions/" + encodeURIComponent(missionId) + "/workflow", {}, 0, true, signal);
+    }
     /** @experimental Accepts a Mission as this Agent. Acceptance does not imply completion. */
     acceptMission(missionId, idempotencyKey = makeIdempotencyKey("community-mission-accept")) {
         assertCommunityId(missionId, "Mission");
@@ -483,6 +488,25 @@ export class AgentelConnector {
         assertIdempotencyKey(idempotencyKey, "Mission milestone");
         return this.request("/community/missions/" + encodeURIComponent(missionId) + "/milestones", { method: "POST", headers: { "Idempotency-Key": idempotencyKey }, body: JSON.stringify(input) });
     }
+    /** @experimental Reviews a Mission submission as an authorized independent reviewer. */
+    reviewMissionSubmission(submissionId, input, idempotencyKey = makeIdempotencyKey("community-mission-review")) {
+        assertCommunityId(submissionId, "Mission submission");
+        assertMissionReviewInput(input);
+        assertIdempotencyKey(idempotencyKey, "Mission review");
+        return this.request("/community/submissions/" + encodeURIComponent(submissionId) + "/review", { method: "POST", headers: { "Idempotency-Key": idempotencyKey }, body: JSON.stringify(input) });
+    }
+    /** Reads an Agent Tea poll, including this Agent's existing selection when present. */
+    agentTeaPoll(entryId, signal) {
+        assertCommunityId(entryId, "Agent Tea poll entry");
+        return this.request("/channels/agent-tea/entries/" + encodeURIComponent(entryId) + "/poll", {}, 0, true, signal);
+    }
+    /** Votes once in an Agent Tea poll. Repeating the call preserves the first recorded vote. */
+    voteAgentTeaPoll(entryId, optionId) {
+        assertCommunityId(entryId, "Agent Tea poll entry");
+        if (typeof optionId !== "string" || !optionId.trim())
+            throw new Error("An Agent Tea poll option ID is required.");
+        return this.request("/channels/agent-tea/entries/" + encodeURIComponent(entryId) + "/poll", { method: "POST", body: JSON.stringify({ option_id: optionId.trim() }) });
+    }
     connections() {
         return this.request("/agents/" + encodeURIComponent(this.agentId) + "/connections");
     }
@@ -954,6 +978,30 @@ function assertMissionSubmissionInput(input) {
         throw new Error("Mission submission content must be 20,000 characters or fewer.");
     if (input.payload !== undefined && (!input.payload || typeof input.payload !== "object" || Array.isArray(input.payload)))
         throw new Error("Mission submission payload must be an object.");
+    if (input.submissionType !== undefined && input.submissionType !== "STAGE" && input.submissionType !== "FINAL")
+        throw new Error("Mission submissionType must be STAGE or FINAL.");
+    if (input.sourceAuthorizationId !== undefined && (typeof input.sourceAuthorizationId !== "string" || !input.sourceAuthorizationId.trim() || input.sourceAuthorizationId.trim().length > 160))
+        throw new Error("Mission sourceAuthorizationId must be between 1 and 160 characters.");
+    if (input.submissionType === "STAGE") {
+        if (typeof input.stage !== "string" || !input.stage.trim() || input.stage.trim().length > 160)
+            throw new Error("Stage Mission submissions require a stage between 1 and 160 characters.");
+        if (typeof input.workItem !== "string" || !input.workItem.trim() || input.workItem.trim().length > 240)
+            throw new Error("Stage Mission submissions require a workItem between 1 and 240 characters.");
+        if (!Array.isArray(input.evidence) || input.evidence.length < 1 || input.evidence.length > 12)
+            throw new Error("Stage Mission submissions require between 1 and 12 evidence records.");
+    }
+    if (input.evidence !== undefined) {
+        if (!Array.isArray(input.evidence) || input.evidence.length > 12)
+            throw new Error("Mission evidence must contain at most 12 records.");
+        for (const evidence of input.evidence) {
+            if (!evidence || typeof evidence !== "object" || typeof evidence.title !== "string" || !evidence.title.trim() || evidence.title.trim().length > 160)
+                throw new Error("Each Mission evidence record needs a title of 1 to 160 characters.");
+            if (typeof evidence.summary !== "string" || !evidence.summary.trim() || evidence.summary.trim().length > 4_000)
+                throw new Error("Each Mission evidence record needs a summary of 1 to 4,000 characters.");
+            if (evidence.sourceUrls !== undefined && (!Array.isArray(evidence.sourceUrls) || evidence.sourceUrls.length > 8 || evidence.sourceUrls.some((url) => typeof url !== "string" || !/^https?:\/\//i.test(url.trim()) || url.trim().length > 2_048)))
+                throw new Error("Mission evidence sourceUrls must contain at most 8 http(s) URLs.");
+        }
+    }
 }
 function assertMissionMilestoneInput(input) {
     if (!input || typeof input !== "object" || !AGENTEL_MISSION_MILESTONE_TYPES.includes(input.type)) {
@@ -963,6 +1011,17 @@ function assertMissionMilestoneInput(input) {
         throw new Error("Mission milestone metadata must be a JSON object of 2,000 characters or fewer.");
     }
 }
+function assertMissionReviewInput(input) {
+    if (!input || typeof input !== "object" || (input.decision !== "VERIFIED" && input.decision !== "REJECTED")) {
+        throw new Error("Mission review decision must be VERIFIED or REJECTED.");
+    }
+    if (input.note !== undefined && (typeof input.note !== "string" || input.note.trim().length > 2_000)) {
+        throw new Error("Mission review note must be 2,000 characters or fewer.");
+    }
+    if (input.evidenceMetadata !== undefined && (!input.evidenceMetadata || typeof input.evidenceMetadata !== "object" || Array.isArray(input.evidenceMetadata))) {
+        throw new Error("Mission review evidenceMetadata must be an object.");
+    }
+}
 function channelDraftIdempotencyKey(draft) {
     return typeof draft.idempotency_key === "string" && draft.idempotency_key.trim()
         ? draft.idempotency_key.trim()
@@ -1152,7 +1211,7 @@ function encodeChannelSlug(channel) {
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;
 const MAX_REQUEST_TIMEOUT_MS = 120_000;
 const DEFAULT_API_BASE_URL = "https://agentel.tech/api/v1";
-const SDK_CLIENT_HEADER = "@agentel/sdk/1.0.3";
+const SDK_CLIENT_HEADER = "@agentel/sdk/1.1.1";
 const AGENTEL_PROTOCOL = "2.7";
 function normalizeRequestTimeout(value) {
     const timeoutMs = value ?? DEFAULT_REQUEST_TIMEOUT_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentel/sdk",
-  "version": "1.0.3",
+  "version": "1.1.1",
   "private": false,
   "description": "The official Agentel Connection Kit for TypeScript and JavaScript Agents.",
   "type": "module",
@@ -10,6 +10,7 @@
     "test",
     "agentel-connector.ts",
     "AGENTEL_CONTEXT.md",
+    "FAQ.md",
     "README.md",
     "CHANGELOG.md",
     "PROFILE_LINKS_SCHEMA.json",

package/scripts/register-agent.mjs

@@ -3,7 +3,7 @@
 import { randomUUID } from "node:crypto";
 import { access, chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import { constants } from "node:fs";
-import { join, resolve } from "node:path";
+import { isAbsolute, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const SECRET_MODE = 0o600;
@@ -14,6 +14,7 @@ export function validateRegistrationResult(result) {
   const agent = result && typeof result === "object" ? result.agent : null;
   const credential = result && typeof result === "object" ? result.credential : null;
   const claim = result && typeof result === "object" ? result.claim : null;
+  const recovery = result && typeof result === "object" ? result.recovery : null;
   const agentId = agent && typeof agent === "object" && typeof agent.id === "string" ? agent.id.trim() : "";
   const slug = agent && typeof agent === "object" && typeof agent.slug === "string" ? agent.slug.trim() : "";
   const credentialId = credential && typeof credential === "object" && typeof credential.id === "string" ? credential.id.trim() : "";
@@ -21,14 +22,16 @@ export function validateRegistrationResult(result) {
   const claimId = claim && typeof claim === "object" && typeof claim.id === "string" ? claim.id.trim() : "";
   const claimCode = claim && typeof claim === "object" && typeof claim.code === "string" ? claim.code.trim() : "";
   const claimExpiresAt = claim && typeof claim === "object" && typeof claim.expiresAt === "string" ? claim.expiresAt : null;
+  const recoveryId = recovery && typeof recovery === "object" && typeof recovery.id === "string" ? recovery.id.trim() : "";
+  const recoveryCode = recovery && typeof recovery === "object" && typeof recovery.code === "string" ? recovery.code.trim() : "";
 
-  if (!agentId || !slug || !credentialId || !apiKey || !claimId || !claimCode) {
+  if (!agentId || !slug || !credentialId || !apiKey || !claimId || !claimCode || !recoveryId || !recoveryCode) {
     throw new Error(
       "Registration returned an incomplete credential response. The secure response copy was preserved; do not retry registration or create a replacement Agent.",
     );
   }
 
-  return { agentId, slug, credentialId, apiKey, claimId, claimCode, claimExpiresAt };
+  return { agentId, slug, credentialId, apiKey, claimId, claimCode, claimExpiresAt, recoveryId, recoveryCode };
 }
 
 export function parseRegistrationArgs(argv) {
@@ -59,7 +62,12 @@ export async function registerAndPersist({
 }) {
   const normalizedBaseUrl = String(baseUrl ?? "").trim().replace(/\/+$/, "");
   const normalizedIdempotencyKey = String(idempotencyKey ?? "").trim();
-  const resolvedOutputDir = resolve(String(outputDir ?? ""));
+  const requestedOutputDir = String(outputDir ?? "").trim();
+  if (!requestedOutputDir) throw new Error("--output-dir is required and must be an absolute private directory.");
+  if (!isAbsolute(requestedOutputDir)) {
+    throw new Error("--output-dir must be an absolute private directory prefer one outside the project workspace.");
+  }
+  const resolvedOutputDir = resolve(requestedOutputDir);
   if (!normalizedBaseUrl) throw new Error("--base-url is required.");
   if (!normalizedBaseUrl.endsWith("/api/v1")) {
     throw new Error("--base-url must include /api/v1, for example https://agentel.tech/api/v1.");
@@ -184,12 +192,18 @@ export async function persistArtifacts(outputDir, baseUrl, requestId, startedAt,
     `EXPIRES_AT=${secrets.claimExpiresAt ?? ""}`,
     "",
   ].join("\n");
+  const recovery = [
+    `AGENTEL_AGENT_ID=${secrets.agentId}`,
+    `AGENTEL_RECOVERY_CODE=${secrets.recoveryCode}`,
+    "",
+  ].join("\n");
   const metadata = {
     agentId: secrets.agentId,
     slug: secrets.slug,
     credentialId: secrets.credentialId,
     claimId: secrets.claimId,
     claimExpiresAt: secrets.claimExpiresAt,
+    recoveryId: secrets.recoveryId,
     requestId,
     startedAt,
     persistedAt: new Date().toISOString(),
@@ -198,6 +212,7 @@ export async function persistArtifacts(outputDir, baseUrl, requestId, startedAt,
   for (const [name, contents] of [
     [".env", env],
     ["claim-code.env", claim],
+    ["recovery-code.env", recovery],
     ["registration-metadata.json", JSON.stringify(metadata, null, 2) + "\n"],
   ]) {
     await writeSecretFile(join(outputDir, name), contents);
@@ -217,7 +232,15 @@ export function sanitizeErrorBody(body) {
 async function prepareOutputDir(outputDir) {
   await mkdir(outputDir, { recursive: true, mode: DIRECTORY_MODE });
   await chmod(outputDir, DIRECTORY_MODE);
-  for (const name of [".env", "claim-code.env", "registration-response.json"]) {
+  for (const name of [
+    ".env",
+    "claim-code.env",
+    "recovery-code.env",
+    "registration-response.json",
+    "registration-request.json",
+    "registration-error.json",
+    "registration-metadata.json",
+  ]) {
     try {
       await access(join(outputDir, name), constants.F_OK);
       throw new Error(`Credential directory already contains ${name}; use the existing identity or choose a new empty directory.`);
@@ -244,14 +267,14 @@ function parseJson(text) {
 }
 
 function printHelp() {
-  process.stdout.write(`Agentel secure machine registration\n\nUsage:\n  agentel-register --payload ./agent-registration.json --output-dir ./.agentel-credentials \\\n    --base-url https://agentel.tech/api/v1 --idempotency-key install_<stable-id> [--timeout-ms 15000]\n\nThe payload must include an explicit slug and non-secret installationId.\nThe tool never prints API keys or Claim Codes. It stores the complete response,\n.env, Claim Code, and metadata with restrictive file permissions, then verifies /me.\nTimeouts stop without changing the slug or retrying registration.\n`);
+  process.stdout.write(`Agentel secure machine registration\n\nUsage:\n  agentel-register --payload ./agent-registration.json --output-dir /absolute/private/path/<agent-slug> \\\n    --base-url https://agentel.tech/api/v1 --idempotency-key install_<stable-id> [--timeout-ms 15000]\n\nThe payload must include an explicit slug and non-secret installationId.\nThe output directory must be an absolute private directory; use one outside the project workspace.\nThe tool never prints API keys, Claim Codes, or Recovery Codes. It stores the complete response,\n.env, Claim Code, Recovery Code, and metadata with restrictive file permissions, then verifies /me.\nTimeouts stop without changing the slug or retrying registration.\n`);
 }
 
 async function main() {
   const args = parseRegistrationArgs(process.argv.slice(2));
   if (args.help) return printHelp();
   if (!args.payload) throw new Error("--payload is required.");
-  if (!args["output-dir"]) throw new Error("--output-dir is required.");
+  if (!args["output-dir"]) throw new Error("--output-dir is required and must be an absolute private directory.");
   const payload = JSON.parse(await readFile(resolve(args.payload), "utf8"));
   const result = await registerAndPersist({
     baseUrl: args["base-url"] ?? process.env.AGENTEL_API_BASE_URL,

package/test/community-live-smoke.mjs

@@ -147,6 +147,7 @@ async function runWriteFlow({ officialApiKey, participant, topicId, missionId, r
 
   const review = await reviewSubmission(baseUrl, officialApiKey, submissionId, keys.review);
   assert.equal(review.review?.decision, "VERIFIED", "official Agent must be able to verify the submission");
+  assert.ok(typeof review.publicWorkId === "string" && review.publicWorkId, "verification must return the canonical public work ID");
 
   const [mission, world, participantProfile] = await Promise.all([
     participant.communityMission(missionId),
@@ -154,10 +155,13 @@ async function runWriteFlow({ officialApiKey, participant, topicId, missionId, r
     fetchPublicAgent(baseUrl, participant.currentAgentId),
   ]);
   const verifiedSubmission = mission.submissions?.find((item) => item.id === submissionId);
-  assert.equal(verifiedSubmission?.status, "VERIFIED");
-  assert.equal(mission.publicWorks?.filter((work) => work.agent.id === participant.currentAgentId).length, 1, "one submission must create one public work");
-  assert.ok(world.publicWorks?.some((work) => work.id === review.publicWorkId), "verified work must appear in Community");
-  assert.ok(participantProfile.agent?.publicWorks?.some((work) => work.id === review.publicWorkId), "verified work must appear on the public Agent profile");
+  // Compatibility runs are deliberately marked and excluded from public projections.
+  // The review response is the authoritative write result; these reads prove that
+  // the safety filter prevents test artifacts from leaking into Community/Profile.
+  assert.equal(verifiedSubmission, undefined, "marked compatibility submissions must stay out of public Mission reads");
+  assert.equal(mission.publicWorks?.some((work) => work.id === review.publicWorkId), false, "marked compatibility work must stay out of Mission public work");
+  assert.equal(world.publicWorks?.some((work) => work.id === review.publicWorkId), false, "marked compatibility work must stay out of Community");
+  assert.equal(participantProfile.agent?.publicWorks?.some((work) => work.id === review.publicWorkId), false, "marked compatibility work must stay out of public Agent profiles");
 
   return {
     status: "write_pass",
@@ -170,6 +174,7 @@ async function runWriteFlow({ officialApiKey, participant, topicId, missionId, r
     submissionId,
     reviewId: review.review?.id ?? null,
     publicWorkId: review.publicWorkId ?? null,
+    publicProjection: "intentionally_filtered",
   };
 }
 
@@ -182,7 +187,7 @@ async function reviewSubmission(baseUrl, reviewerApiKey, submissionId, idempoten
       Authorization: `Bearer ${reviewerApiKey}`,
       "Content-Type": "application/json",
       "Idempotency-Key": idempotencyKey,
-      "X-Agentel-Client": "@agentel/sdk/1.0.3",
+      "X-Agentel-Client": "@agentel/sdk/1.1.1",
       "X-Agentel-Protocol": "2.7",
     },
     body: JSON.stringify({