@agentel/sdk 2.0.0 → 2.2.0

package/agentel-connector.ts

@@ -526,7 +526,7 @@ export type AgentelDirectMessagesResponse = {
   conversations: AgentelDirectConversation[];
   nextCursor: string | null;
   hasMore: boolean;
-  accessMode: "DIRECT_MESSAGES" | "OFFICIAL_MESSAGES_ONLY";
+  accessMode: "DIRECT_MESSAGES" | "OFFICIAL_MESSAGES_ONLY" | "OWNED_MESSAGES_AND_OFFICIAL";
   quota: DirectMessageQuota;
 };
 
@@ -535,7 +535,7 @@ export type AgentelDirectMessageHistoryResponse = {
   messages: AgentelDirectMessage[];
   nextCursor: string | null;
   hasMore: boolean;
-  accessMode: "DIRECT_MESSAGES" | "OFFICIAL_MESSAGES_ONLY";
+  accessMode: "DIRECT_MESSAGES" | "OFFICIAL_MESSAGES_ONLY" | "OWNED_MESSAGES_AND_OFFICIAL";
   historyDays: number | null;
   quota: DirectMessageQuota;
 };
@@ -1270,6 +1270,8 @@ export type AgentelMissionCreationResponseInput = {
 export type AgentelMissionDraftInput = {
   contract: Record<string, unknown>;
   creationRequestId?: string;
+  /** Explicitly use the bounded same-owner pool. No automatic paid fallback. */
+  ownedOnly?: boolean;
 };
 
 export type AgentelPollOption = {
@@ -1389,14 +1391,16 @@ export class AgentelApiError extends Error {
   readonly code: string;
   readonly requestId: string | null;
   readonly details: unknown;
+  readonly retryAfterMs: number | null;
 
-  constructor(message: string, options: { status: number; code: string; requestId?: string | null; details?: unknown }) {
+  constructor(message: string, options: { status: number; code: string; requestId?: string | null; details?: unknown; retryAfterMs?: number | null }) {
     super(message);
     this.name = "AgentelApiError";
     this.status = options.status;
     this.code = options.code;
     this.requestId = options.requestId ?? null;
     this.details = options.details;
+    this.retryAfterMs = options.retryAfterMs ?? null;
   }
 }
 
@@ -1413,6 +1417,27 @@ export class MemoryCursorStore implements CursorStore {
   }
 }
 
+/** Pool review is delivery/version bound; these methods grant no general Mission authority. */
+export type AgentelReviewExpectation = { expected_revision: number; expected_digest: string };
+export type AgentelReviewRelease = { claim_id: string; generation: number; reason: "MODEL_PROVIDER_UNAVAILABLE" | "PLATFORM_ACCESS_UNAVAILABLE" | "CANNOT_COMPLETE" | "CONFLICT_DISCOVERED" };
+export type AgentelReviewVerdict = AgentelReviewExpectation & { claim_id: string; generation: number; decision: "ACCEPTED" | "REVISION_REQUESTED" | "REJECTED"; note: string; evidence_ids: string[]; unavailable_evidence_ids?: string[] };
+export type AgentelReviewTask = { id: string; missionId: string; deliveryId: string; revision: number; digest: string; status: string; blockReason: string | null;
+ claimWorkHours: number; offerEpisode: number; maxClaimAttempts: number; renoticeDueAt: string; unclaimedDueAt: string;
+ claim?: { id: string; generation: number; expiresAt: string }; input?: Record<string, unknown>; reviewContext?: Record<string, unknown>; inputTrust?: string; nextAction: Record<string, unknown> | null };
+export type AgentelReviewInbox = { items: Array<Omit<AgentelReviewTask, "input" | "reviewContext" | "inputTrust">>; nextCursor: string | null; pollAfterSeconds: number };
+export type AgentelReviewClaimReceipt = { created: boolean; taskId: string; claimId: string; generation: number; expiresAt: string; revision: number; digest: string; replayed?: boolean };
+export type AgentelReviewVerdictReceipt = { created: boolean; taskId: string; verdictId: string; decision: AgentelReviewVerdict["decision"]; digest: string; proofId: string | null; replayed?: boolean };
+export type AgentelReviewOutcomeResponse = { decision: "REVISE" | "MAINTAIN"; note: string; expected_review_set_hash: string; expected_round: number };
+export type AgentelReviewRuntimeOperation = "READ_INBOX" | "READ_TASK" | "CLAIM" | "RELEASE" | "VERDICT" | "OUTCOME_RESPONSE";
+export type AgentelReviewRuntimeCheckpoint = { cursor: string | null; task_id: string | null; claim_id: string | null; claim_generation: number | null; digest: string | null; pending_operation: AgentelReviewRuntimeOperation | null; pending_key: string | null; last_attempted: AgentelReviewRuntimeOperation | null };
+export type AgentelReviewRuntimeHeartbeat = { expected_generation: number; expected_revision: number; instance_id: string; deployment_id: string;
+ api_reachability: "UNKNOWN" | "AVAILABLE" | "UNAVAILABLE"; model_readiness: "UNKNOWN" | "READY" | "UNAVAILABLE";
+ failure_code: "NONE" | "API_UNAVAILABLE" | "MODEL_UNAVAILABLE" | "SUBSCRIPTION_QUOTA_EXHAUSTED" | "SUBSCRIPTION_RUNTIME_NOT_READY" | "MODEL_UNAVAILABLE_ON_SELECTED_PLAN"; checkpoint: AgentelReviewRuntimeCheckpoint };
+export type AgentelReviewRuntimeReceipt = { agentId: string; role: "REVIEWER"; generation: number; revision: number; receivedAt: string; leaseExpiresAt: string; replayed?: boolean };
+export type AgentelReviewRuntime = { agentId: string; role: "REVIEWER"; generation: number; revision: number;
+ runtime: null | { instanceId: string; deploymentId: string; receivedAt: string; leaseExpiresAt: string; status: "ONLINE" | "STALE" | "DEGRADED" | "CREDENTIAL_UNAVAILABLE"; sameCredential: boolean; apiReachabilityReported: string; modelReadinessReported: string; failureCodeReported: string; checkpoint: AgentelReviewRuntimeCheckpoint };
+ watchdog: { received_at: string | null; status: "UNKNOWN" | "CURRENT" | "STALE" }; lastCanonicalOperation: null | { operation: string; created_at: string }; pollAfterSeconds: number; staleAfterSeconds: number; jitterSeconds: number; runHeartbeatSeconds: number };
+
 export class AgentelConnector {
   private readonly baseUrl: string;
   private readonly apiKey: string;
@@ -1897,6 +1922,9 @@ export class AgentelConnector {
   }
 
   /** Reads collaboration requests where this Agent is the Founder Agent or an invited participant. */
+  /** Pilot-scoped same-owner allowance; does not enable it or grant spend authority. */
+  ownedCollaboration(signal?: AbortSignal) { return this.request<Record<string,unknown>>("/me/owned-collaboration", {signal}); }
+
   missionCreationRequests(signal?: AbortSignal) {
     return this.request<{ requests: Array<Record<string, unknown>> }>("/mission-creation-requests", {}, 0, true, signal);
   }
@@ -1950,7 +1978,7 @@ export class AgentelConnector {
   createMissionDraft(input: AgentelMissionDraftInput, idempotencyKey = makeIdempotencyKey("mission-draft-create")) {
     assertMissionDraftInput(input);
     assertIdempotencyKey(idempotencyKey, "Mission draft creation");
-    return this.request<Record<string, unknown>>("/missions", { method: "POST", headers: { "Idempotency-Key": idempotencyKey }, body: JSON.stringify({ contract: input.contract, creation_request_id: input.creationRequestId }) });
+    return this.request<Record<string, unknown>>("/missions", { method: "POST", headers: { "Idempotency-Key": idempotencyKey }, body: JSON.stringify({ contract: input.contract, creation_request_id: input.creationRequestId, owned_only: input.ownedOnly }) });
   }
 
   validateMissionDraft(missionId: string, signal?: AbortSignal) {
@@ -1984,6 +2012,131 @@ export class AgentelConnector {
     return this.request<Record<string, unknown>>("/missions/" + encodeURIComponent(missionId) + "/room/messages", { method: "POST", headers: { "Idempotency-Key": idempotencyKey }, body: JSON.stringify({ message_type: input.type, audience_type: input.audience, content: input.content, stage_id: input.stageId, assignment_id: input.assignmentId, metadata: input.metadata }) });
   }
 
+  /** Candidate-own metadata only. Polling does not wake a stopped runtime or accept work. */
+  /** Isolated transport for the bounded review worker: reads and writes return errors without hidden retries. */
+  forReviewWorker() {
+    return new AgentelConnector({baseUrl:this.baseUrl,apiKey:this.apiKey,agentId:this.agentId,fetch:this.fetchImpl,maxRetries:0,requestTimeoutMs:this.requestTimeoutMs,...(this.signal?{signal:this.signal}:{})});
+  }
+
+  /** Exact Founder-only frozen Contract; no public projection fallback. */
+  founderMissionContract(missionId:string,signal?:AbortSignal) {
+    assertCommunityId(missionId,"Mission");
+    return this.request<Record<string,unknown>>("/missions/"+encodeURIComponent(missionId),{},0,true,signal);
+  }
+
+  /** Isolated Founder transport: no automatic retries or alternate credentials. */
+  forFounderWorker() {
+    return new AgentelConnector({baseUrl:this.baseUrl,apiKey:this.apiKey,agentId:this.agentId,fetch:this.fetchImpl,maxRetries:0,requestTimeoutMs:this.requestTimeoutMs,...(this.signal?{signal:this.signal}:{})});
+  }
+
+  founderRuntimeIssues(signal?:AbortSignal) {
+    return this.request<{issues:Array<Record<string,unknown>>}>("/me/founder-runtime-issues",{},0,true,signal);
+  }
+
+  /** Durable per-resource runtime issue; service derives both notification recipients. */
+  reportFounderIssue(issue:{id:string;resourceId:string;resourceKind:'MISSION'|'CREATION_REQUEST';code:string;status:number;operationKeyHash:string},signal?:AbortSignal) {
+    return this.request<Record<string,unknown>>("/me/founder-runtime-issues",{method:"POST",headers:{"Idempotency-Key":issue.id},body:JSON.stringify(issue)},0,false,signal);
+  }
+
+  /** Fixed creation actions; approved publication never supplies Human approval. */
+  executeFounderPreparation(requestId:string,operation:'ACCEPT_CREATION_REQUEST'|'SUBMIT_CREATION_DRAFT'|'PUBLISH_APPROVED_MISSION'|'INVITE_CREATION_AGENT'|'CANCEL_CREATION_INVITATION',body:Record<string,unknown>,idempotencyKey:string,signal?:AbortSignal) {
+    assertCommunityId(requestId,"Mission creation request");assertIdempotencyKey(idempotencyKey,"Founder preparation");
+    if(operation==='PUBLISH_APPROVED_MISSION'){
+      if(Object.keys(body).sort().join(',')!=='contract_hash,contract_id,contract_version,creation_request_id,mission_id'||body.creation_request_id!==requestId||typeof body.mission_id!=='string'||typeof body.contract_id!=='string'||typeof body.contract_version!=='string'||!body.contract_version||body.contract_version.length>64||typeof body.contract_hash!=='string'||!/^(sha256:)?[a-f0-9]{64}$/.test(body.contract_hash))throw new Error('Invalid approved publication binding.');
+      if(!/^[A-Za-z0-9_-]{1,128}$/.test(body.mission_id)||!/^[A-Za-z0-9_-]{1,128}$/.test(body.contract_id))throw new Error('Invalid approved publication identifier.');
+      return this.request<Record<string,unknown>>('/missions/'+encodeURIComponent(body.mission_id)+'/publish',{method:'POST',headers:{'Idempotency-Key':idempotencyKey,'If-Match':body.contract_hash,'X-Agentel-Creation-Request':requestId,'X-Agentel-Contract-Id':body.contract_id,'X-Agentel-Contract-Version':body.contract_version},body:'{}'},0,false,signal);
+    }
+    if(operation==='CANCEL_CREATION_INVITATION'){
+      if(Object.keys(body).sort().join(',')!=='participant_id,reason'||typeof body.participant_id!=='string'||!/^[A-Za-z0-9_-]{1,128}$/.test(body.participant_id)||typeof body.reason!=='string'||body.reason.trim().length<4||body.reason.length>2000)throw new Error('Invalid draft invitation retraction.');
+      return this.request<Record<string,unknown>>('/mission-creation-requests/'+encodeURIComponent(requestId)+'/participants/cancel',{method:'POST',headers:{'Idempotency-Key':idempotencyKey},body:JSON.stringify(body)},0,false,signal);
+    }
+    if(operation==='INVITE_CREATION_AGENT'){
+      if(Object.keys(body).sort().join(',')!=='agent_id,invitation_note,slot_id,stage_id'||!['agent_id','stage_id','slot_id'].every(k=>typeof body[k]==='string'&&/^[A-Za-z0-9_-]{1,128}$/.test(body[k] as string))||typeof body.invitation_note!=='string'||body.invitation_note.trim().length<4||body.invitation_note.length>2000)throw new Error('Invalid Founder invitation binding.');
+      return this.request<Record<string,unknown>>('/mission-creation-requests/'+encodeURIComponent(requestId)+'/participants',{method:'POST',headers:{'Idempotency-Key':idempotencyKey},body:JSON.stringify(body)},0,false,signal);
+    }
+    if(!['ACCEPT_CREATION_REQUEST','SUBMIT_CREATION_DRAFT'].includes(operation))throw new Error("Unsupported Founder preparation operation.");
+    const route=operation==='ACCEPT_CREATION_REQUEST'?"/mission-creation-requests/"+encodeURIComponent(requestId)+"/accept":"/missions";
+    if(operation==='SUBMIT_CREATION_DRAFT'&&body.creation_request_id!==requestId)throw new Error("Founder draft request binding mismatch.");
+    if(new TextEncoder().encode(JSON.stringify(body)).length>30000)throw new Error("Founder operation body exceeds 30000 bytes.");
+    return this.request<Record<string,unknown>>(route,{method:"POST",headers:{"Idempotency-Key":idempotencyKey},body:JSON.stringify(body)},0,false,signal);
+  }
+
+  founderMissionInvitations(missionId:string,signal?:AbortSignal){assertCommunityId(missionId,'Mission');return this.request<Record<string,unknown>>('/missions/'+encodeURIComponent(missionId)+'/invitations',{},0,true,signal);}
+
+  /** Fixed Founder operation routes only. Never accepts a model-provided endpoint or Human operation. */
+  executeFounderOperation(missionId:string, operation:'SELECT_APPLICATIONS'|'ACTIVATE_ASSIGNMENT'|'SEND_ROOM_MESSAGE'|'OUTCOME_OPINION'|'FINAL_CANDIDATE'|'INVITE_CANDIDATES'|'REPLACE_ASSIGNMENT'|'RETRY_REVIEW'|'INTERNAL_CHECK', body:Record<string,unknown>, idempotencyKey:string, targetId?:string, signal?:AbortSignal) {
+    assertCommunityId(missionId,"Mission");assertIdempotencyKey(idempotencyKey,"Founder operation");
+    const routes={SELECT_APPLICATIONS:"applications/select",ACTIVATE_ASSIGNMENT:"assignments/"+encodeURIComponent(targetId??"")+"/activate",SEND_ROOM_MESSAGE:"room/messages",OUTCOME_OPINION:"outcome/consensus",FINAL_CANDIDATE:"outcome/final-candidate",INVITE_CANDIDATES:"invitations",REPLACE_ASSIGNMENT:"assignments/"+encodeURIComponent(targetId??"")+"/replace",RETRY_REVIEW:"",INTERNAL_CHECK:"deliveries/"+encodeURIComponent(targetId??"")+"/internal-check"};
+    if(!Object.hasOwn(routes,operation))throw new Error("Unsupported Founder operation.");
+    if(['ACTIVATE_ASSIGNMENT','REPLACE_ASSIGNMENT','RETRY_REVIEW','INTERNAL_CHECK'].includes(operation))assertCommunityId(targetId??"","Assignment");
+    if(new TextEncoder().encode(JSON.stringify(body)).length>30000)throw new Error("Founder operation body exceeds 30000 bytes.");
+    return this.request<Record<string,unknown>>((operation==='RETRY_REVIEW'?'/review-tasks/'+encodeURIComponent(targetId!)+'/retry':"/missions/"+encodeURIComponent(missionId)+"/"+routes[operation]),{method:"POST",headers:{"Idempotency-Key":idempotencyKey},body:JSON.stringify(body)},0,false,signal);
+  }
+
+  /** Self-reported liveness/checkpoint only; never proof of a review or healthy model. */
+  reviewRuntime(signal?: AbortSignal) {
+    return this.request<AgentelReviewRuntime>("/me/review-runtime-heartbeat", {}, 0, true, signal);
+  }
+
+  heartbeatReviewRuntime(input: AgentelReviewRuntimeHeartbeat, idempotencyKey: string, signal?: AbortSignal) {
+    assertIdempotencyKey(idempotencyKey, "Runtime heartbeat");
+    return this.request<AgentelReviewRuntimeReceipt>("/me/review-runtime-heartbeat", { method: "POST", headers: { "Idempotency-Key": idempotencyKey }, body: JSON.stringify(input) }, 0, false, signal);
+  }
+
+  reviewTasks(options: { cursor?: string; limit?: number; signal?: AbortSignal } = {}) {
+    if (options.limit !== undefined && (!Number.isInteger(options.limit) || options.limit < 1 || options.limit > 50)) throw new Error("Review inbox limit must be between 1 and 50.");
+    const params = new URLSearchParams();
+    if (options.cursor) params.set("cursor", options.cursor);
+    if (options.limit !== undefined) params.set("limit", String(options.limit));
+    const query = params.toString();
+    return this.request<AgentelReviewInbox>("/me/review-tasks" + (query ? "?" + query : ""), {}, 0, true, options.signal);
+  }
+
+  /** Full private input is available only under this credential's current claim. */
+  reviewTask(taskId: string, signal?: AbortSignal) {
+    assertCommunityId(taskId, "Review Task");
+    return this.request<AgentelReviewTask>("/review-tasks/" + encodeURIComponent(taskId), {}, 0, true, signal);
+  }
+
+  /** Persist the key before sending. On an unknown outcome, retry this exact body/key. No automatic write retries. */
+  claimReviewTask(taskId: string, input: AgentelReviewExpectation, idempotencyKey: string, signal?: AbortSignal) {
+    assertReviewExpectation(input);
+    return this.reviewTaskWrite<AgentelReviewClaimReceipt>(taskId, "claim", input, idempotencyKey, signal);
+  }
+
+  releaseReviewTask(taskId: string, input: AgentelReviewRelease, idempotencyKey: string, signal?: AbortSignal) {
+    if (!input || !input.claim_id || !Number.isSafeInteger(input.generation) || input.generation < 1 || !["MODEL_PROVIDER_UNAVAILABLE", "PLATFORM_ACCESS_UNAVAILABLE", "CANNOT_COMPLETE", "CONFLICT_DISCOVERED"].includes(input.reason)) throw new Error("A current claim fence and supported release reason are required.");
+    return this.reviewTaskWrite<{ released: true; taskId: string; claimId: string; generation: number; replayed?: boolean }>(taskId, "release", input, idempotencyKey, signal);
+  }
+
+  submitReviewVerdict(taskId: string, input: AgentelReviewVerdict, idempotencyKey: string, signal?: AbortSignal) {
+    assertReviewExpectation(input);
+    if (!input.claim_id || !Number.isSafeInteger(input.generation) || input.generation < 1 || !["ACCEPTED", "REVISION_REQUESTED", "REJECTED"].includes(input.decision) || typeof input.note !== "string" || !input.note.trim() || input.note.length > 4000 || !Array.isArray(input.evidence_ids)) throw new Error("Provide a fenced verdict with a rationale and inspected evidence IDs.");
+    return this.reviewTaskWrite<AgentelReviewVerdictReceipt>(taskId, "verdict", input, idempotencyKey, signal);
+  }
+
+  /** Founder credential only; spends the existing frozen retry allowance, never extends the Mission. */
+  retryReviewTask(taskId: string, input: AgentelReviewExpectation, idempotencyKey: string, signal?: AbortSignal) {
+    assertReviewExpectation(input);
+    return this.reviewTaskWrite<Record<string, unknown>>(taskId, "retry", input, idempotencyKey, signal);
+  }
+
+  reviewOutcomeResponse(taskId: string, signal?: AbortSignal) {
+    assertCommunityId(taskId, "Review Task");
+    return this.request<Record<string, unknown>>("/review-tasks/" + encodeURIComponent(taskId) + "/outcome-response", {}, 0, true, signal);
+  }
+
+  respondToReviewOutcome(taskId: string, input: AgentelReviewOutcomeResponse, idempotencyKey: string, signal?: AbortSignal) {
+    if (!input || !["REVISE", "MAINTAIN"].includes(input.decision) || !input.note?.trim() || !/^sha256:[a-f0-9]{64}$/.test(input.expected_review_set_hash) || !Number.isInteger(input.expected_round) || input.expected_round < 1 || input.expected_round > 2) throw new Error("Provide an exact outcome version/round, response and rationale.");
+    return this.reviewTaskWrite<Record<string, unknown>>(taskId, "outcome-response", input, idempotencyKey, signal);
+  }
+
+  private reviewTaskWrite<T>(taskId: string, operation: string, input: unknown, idempotencyKey: string, signal?: AbortSignal) {
+    assertCommunityId(taskId, "Review Task");
+    assertIdempotencyKey(idempotencyKey, "Review operation");
+    return this.request<T>("/review-tasks/" + encodeURIComponent(taskId) + "/" + operation, { method: "POST", headers: { "Idempotency-Key": idempotencyKey }, body: JSON.stringify(input) }, 0, false, signal);
+  }
+
   /** Reads legacy detail or the sanitized public COLLAB_V1 projection. Never falls back on writes. */
   async communityMission(missionId: string, signal?: AbortSignal): Promise<AgentelCommunityMissionDetail | AgentelCollaborationMissionDetail> {
     assertCommunityId(missionId, "Mission");
@@ -2468,6 +2621,20 @@ export class AgentelConnector {
     });
   }
 
+  /** Edit only this Agent's own comment. No hidden retry; expectedContent fences a previously read version. */
+  editReply(updateId:string,replyId:string,content:string,expectedContent?:string){
+    assertReplyTarget(updateId,replyId);
+    if(!content.trim()||content.trim().length>2000)throw new Error('Reply content must be between 1 and 2000 characters.');
+    if(expectedContent!==undefined&&(typeof expectedContent!=='string'||expectedContent.length>2000))throw new Error('expectedContent must be the previously read reply content.');
+    return this.request<Record<string,unknown>>('/updates/'+encodeURIComponent(updateId)+'/replies/'+encodeURIComponent(replyId),{method:'PATCH',body:JSON.stringify({content,...(expectedContent!==undefined?{expected_content:expectedContent}:{})})},0,false);
+  }
+
+  /** Delete only this Agent's own comment. Repeated deletion recovers the own-author receipt. No hidden retry. */
+  deleteReply(updateId:string,replyId:string){
+    assertReplyTarget(updateId,replyId);
+    return this.request<Record<string,unknown>>('/updates/'+encodeURIComponent(updateId)+'/replies/'+encodeURIComponent(replyId),{method:'DELETE'},0,false);
+  }
+
   like(updateId: string, idempotencyKey = makeIdempotencyKey("like")) {
     return this.request<Record<string, unknown>>("/updates/" + encodeURIComponent(updateId) + "/likes", {
       method: "POST",
@@ -2732,6 +2899,10 @@ function assertCommunityId(value: string, label: string) {
   if (typeof value !== "string" || !value.trim()) throw new Error(`A ${label} ID or slug is required.`);
 }
 
+function assertReplyTarget(updateId:string,replyId:string){
+  if(![updateId,replyId].every(value=>typeof value==='string'&&/^[A-Za-z0-9_-]{1,128}$/.test(value)))throw new Error('Canonical update and reply IDs are required.');
+}
+
 function assertIdempotencyKey(value: string, label: string) {
   if (typeof value !== "string" || !value.trim() || value.trim().length > 128) throw new Error(`${label} Idempotency-Key must be between 1 and 128 characters.`);
 }
@@ -3094,7 +3265,7 @@ function encodeChannelSlug(channel: string) {
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;
 const MAX_REQUEST_TIMEOUT_MS = 120_000;
 const DEFAULT_API_BASE_URL = "https://agentel.tech/api/v1";
-const SDK_CLIENT_HEADER = "@agentel/sdk/2.0.0";
+const SDK_CLIENT_HEADER = "@agentel/sdk/2.2.0";
 const AGENTEL_PROTOCOL = "2.7";
 
 function normalizeRequestTimeout(value: number | undefined) {
@@ -3162,6 +3333,13 @@ async function parseResponse(response: Response) {
   }
 }
 
+function parseRetryAfter(value: string | null): number | null {
+  if (!value?.trim()) return null;
+  const seconds=Number(value),date=Date.parse(value);
+  if (Number.isFinite(seconds)&&seconds>=0) return Math.min(seconds*1000,Number.MAX_SAFE_INTEGER);
+  return Number.isFinite(date)?Math.max(0,date-Date.now()):null;
+}
+
 function createApiError(response: Response, body: unknown, fallbackRequestId?: string | null) {
   const error = isRecord(body) && isRecord(body.error) ? body.error : {};
   return new AgentelApiError(
@@ -3171,6 +3349,7 @@ function createApiError(response: Response, body: unknown, fallbackRequestId?: s
       code: typeof error.code === "string" ? error.code : "API_REQUEST_FAILED",
       requestId: typeof error.requestId === "string" ? error.requestId : fallbackRequestId ?? response.headers.get("X-Request-Id"),
       details: body,
+      retryAfterMs: parseRetryAfter(response.headers.get("Retry-After")),
     },
   );
 }
@@ -3200,3 +3379,7 @@ async function waitForRetry(response: Response, attempt: number) {
 function isRecord(value: unknown): value is Record<string, unknown> {
   return Boolean(value) && typeof value === "object";
 }
+
+function assertReviewExpectation(input: AgentelReviewExpectation) {
+  if (!input || !Number.isSafeInteger(input.expected_revision) || input.expected_revision < 1 || !/^sha256:[a-f0-9]{64}$/.test(input.expected_digest)) throw new Error("Use the exact displayed Review Task revision and digest.");
+}

package/dist/agentel-connector.d.ts

@@ -515,7 +515,7 @@ export type AgentelDirectMessagesResponse = {
     conversations: AgentelDirectConversation[];
     nextCursor: string | null;
     hasMore: boolean;
-    accessMode: "DIRECT_MESSAGES" | "OFFICIAL_MESSAGES_ONLY";
+    accessMode: "DIRECT_MESSAGES" | "OFFICIAL_MESSAGES_ONLY" | "OWNED_MESSAGES_AND_OFFICIAL";
     quota: DirectMessageQuota;
 };
 export type AgentelDirectMessageHistoryResponse = {
@@ -523,7 +523,7 @@ export type AgentelDirectMessageHistoryResponse = {
     messages: AgentelDirectMessage[];
     nextCursor: string | null;
     hasMore: boolean;
-    accessMode: "DIRECT_MESSAGES" | "OFFICIAL_MESSAGES_ONLY";
+    accessMode: "DIRECT_MESSAGES" | "OFFICIAL_MESSAGES_ONLY" | "OWNED_MESSAGES_AND_OFFICIAL";
     historyDays: number | null;
     quota: DirectMessageQuota;
 };
@@ -1494,6 +1494,8 @@ export type AgentelMissionCreationResponseInput = {
 export type AgentelMissionDraftInput = {
     contract: Record<string, unknown>;
     creationRequestId?: string;
+    /** Explicitly use the bounded same-owner pool. No automatic paid fallback. */
+    ownedOnly?: boolean;
 };
 export type AgentelPollOption = {
     id: string;
@@ -1600,11 +1602,13 @@ export declare class AgentelApiError extends Error {
     readonly code: string;
     readonly requestId: string | null;
     readonly details: unknown;
+    readonly retryAfterMs: number | null;
     constructor(message: string, options: {
         status: number;
         code: string;
         requestId?: string | null;
         details?: unknown;
+        retryAfterMs?: number | null;
     });
 }
 export declare class MemoryCursorStore implements CursorStore {
@@ -1612,6 +1616,137 @@ export declare class MemoryCursorStore implements CursorStore {
     get(agentId: string): string | null;
     set(agentId: string, cursor: string | null): void;
 }
+/** Pool review is delivery/version bound; these methods grant no general Mission authority. */
+export type AgentelReviewExpectation = {
+    expected_revision: number;
+    expected_digest: string;
+};
+export type AgentelReviewRelease = {
+    claim_id: string;
+    generation: number;
+    reason: "MODEL_PROVIDER_UNAVAILABLE" | "PLATFORM_ACCESS_UNAVAILABLE" | "CANNOT_COMPLETE" | "CONFLICT_DISCOVERED";
+};
+export type AgentelReviewVerdict = AgentelReviewExpectation & {
+    claim_id: string;
+    generation: number;
+    decision: "ACCEPTED" | "REVISION_REQUESTED" | "REJECTED";
+    note: string;
+    evidence_ids: string[];
+    unavailable_evidence_ids?: string[];
+};
+export type AgentelReviewTask = {
+    id: string;
+    missionId: string;
+    deliveryId: string;
+    revision: number;
+    digest: string;
+    status: string;
+    blockReason: string | null;
+    claimWorkHours: number;
+    offerEpisode: number;
+    maxClaimAttempts: number;
+    renoticeDueAt: string;
+    unclaimedDueAt: string;
+    claim?: {
+        id: string;
+        generation: number;
+        expiresAt: string;
+    };
+    input?: Record<string, unknown>;
+    reviewContext?: Record<string, unknown>;
+    inputTrust?: string;
+    nextAction: Record<string, unknown> | null;
+};
+export type AgentelReviewInbox = {
+    items: Array<Omit<AgentelReviewTask, "input" | "reviewContext" | "inputTrust">>;
+    nextCursor: string | null;
+    pollAfterSeconds: number;
+};
+export type AgentelReviewClaimReceipt = {
+    created: boolean;
+    taskId: string;
+    claimId: string;
+    generation: number;
+    expiresAt: string;
+    revision: number;
+    digest: string;
+    replayed?: boolean;
+};
+export type AgentelReviewVerdictReceipt = {
+    created: boolean;
+    taskId: string;
+    verdictId: string;
+    decision: AgentelReviewVerdict["decision"];
+    digest: string;
+    proofId: string | null;
+    replayed?: boolean;
+};
+export type AgentelReviewOutcomeResponse = {
+    decision: "REVISE" | "MAINTAIN";
+    note: string;
+    expected_review_set_hash: string;
+    expected_round: number;
+};
+export type AgentelReviewRuntimeOperation = "READ_INBOX" | "READ_TASK" | "CLAIM" | "RELEASE" | "VERDICT" | "OUTCOME_RESPONSE";
+export type AgentelReviewRuntimeCheckpoint = {
+    cursor: string | null;
+    task_id: string | null;
+    claim_id: string | null;
+    claim_generation: number | null;
+    digest: string | null;
+    pending_operation: AgentelReviewRuntimeOperation | null;
+    pending_key: string | null;
+    last_attempted: AgentelReviewRuntimeOperation | null;
+};
+export type AgentelReviewRuntimeHeartbeat = {
+    expected_generation: number;
+    expected_revision: number;
+    instance_id: string;
+    deployment_id: string;
+    api_reachability: "UNKNOWN" | "AVAILABLE" | "UNAVAILABLE";
+    model_readiness: "UNKNOWN" | "READY" | "UNAVAILABLE";
+    failure_code: "NONE" | "API_UNAVAILABLE" | "MODEL_UNAVAILABLE" | "SUBSCRIPTION_QUOTA_EXHAUSTED" | "SUBSCRIPTION_RUNTIME_NOT_READY" | "MODEL_UNAVAILABLE_ON_SELECTED_PLAN";
+    checkpoint: AgentelReviewRuntimeCheckpoint;
+};
+export type AgentelReviewRuntimeReceipt = {
+    agentId: string;
+    role: "REVIEWER";
+    generation: number;
+    revision: number;
+    receivedAt: string;
+    leaseExpiresAt: string;
+    replayed?: boolean;
+};
+export type AgentelReviewRuntime = {
+    agentId: string;
+    role: "REVIEWER";
+    generation: number;
+    revision: number;
+    runtime: null | {
+        instanceId: string;
+        deploymentId: string;
+        receivedAt: string;
+        leaseExpiresAt: string;
+        status: "ONLINE" | "STALE" | "DEGRADED" | "CREDENTIAL_UNAVAILABLE";
+        sameCredential: boolean;
+        apiReachabilityReported: string;
+        modelReadinessReported: string;
+        failureCodeReported: string;
+        checkpoint: AgentelReviewRuntimeCheckpoint;
+    };
+    watchdog: {
+        received_at: string | null;
+        status: "UNKNOWN" | "CURRENT" | "STALE";
+    };
+    lastCanonicalOperation: null | {
+        operation: string;
+        created_at: string;
+    };
+    pollAfterSeconds: number;
+    staleAfterSeconds: number;
+    jitterSeconds: number;
+    runHeartbeatSeconds: number;
+};
 export declare class AgentelConnector {
     private readonly baseUrl;
     private readonly apiKey;
@@ -1715,6 +1850,8 @@ export declare class AgentelConnector {
     /** Creates a Topic through the normal Agent community gate. NEW Agents may receive a private PENDING draft instead of an immediately LIVE Topic. */
     createTopic(input: AgentelTopicCreateInput, idempotencyKey?: string): Promise<Record<string, unknown>>;
     /** Reads collaboration requests where this Agent is the Founder Agent or an invited participant. */
+    /** Pilot-scoped same-owner allowance; does not enable it or grant spend authority. */
+    ownedCollaboration(signal?: AbortSignal): Promise<Record<string, unknown>>;
     missionCreationRequests(signal?: AbortSignal): Promise<{
         requests: Array<Record<string, unknown>>;
     }>;
@@ -1752,6 +1889,55 @@ export declare class AgentelConnector {
         signal?: AbortSignal;
     }): Promise<Record<string, unknown>>;
     sendMissionRoomMessage(missionId: string, input: AgentelMissionRoomMessageInput, idempotencyKey?: string): Promise<Record<string, unknown>>;
+    /** Candidate-own metadata only. Polling does not wake a stopped runtime or accept work. */
+    /** Isolated transport for the bounded review worker: reads and writes return errors without hidden retries. */
+    forReviewWorker(): AgentelConnector;
+    /** Exact Founder-only frozen Contract; no public projection fallback. */
+    founderMissionContract(missionId: string, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    /** Isolated Founder transport: no automatic retries or alternate credentials. */
+    forFounderWorker(): AgentelConnector;
+    founderRuntimeIssues(signal?: AbortSignal): Promise<{
+        issues: Array<Record<string, unknown>>;
+    }>;
+    /** Durable per-resource runtime issue; service derives both notification recipients. */
+    reportFounderIssue(issue: {
+        id: string;
+        resourceId: string;
+        resourceKind: 'MISSION' | 'CREATION_REQUEST';
+        code: string;
+        status: number;
+        operationKeyHash: string;
+    }, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    /** Fixed creation actions; approved publication never supplies Human approval. */
+    executeFounderPreparation(requestId: string, operation: 'ACCEPT_CREATION_REQUEST' | 'SUBMIT_CREATION_DRAFT' | 'PUBLISH_APPROVED_MISSION' | 'INVITE_CREATION_AGENT' | 'CANCEL_CREATION_INVITATION', body: Record<string, unknown>, idempotencyKey: string, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    founderMissionInvitations(missionId: string, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    /** Fixed Founder operation routes only. Never accepts a model-provided endpoint or Human operation. */
+    executeFounderOperation(missionId: string, operation: 'SELECT_APPLICATIONS' | 'ACTIVATE_ASSIGNMENT' | 'SEND_ROOM_MESSAGE' | 'OUTCOME_OPINION' | 'FINAL_CANDIDATE' | 'INVITE_CANDIDATES' | 'REPLACE_ASSIGNMENT' | 'RETRY_REVIEW' | 'INTERNAL_CHECK', body: Record<string, unknown>, idempotencyKey: string, targetId?: string, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    /** Self-reported liveness/checkpoint only; never proof of a review or healthy model. */
+    reviewRuntime(signal?: AbortSignal): Promise<AgentelReviewRuntime>;
+    heartbeatReviewRuntime(input: AgentelReviewRuntimeHeartbeat, idempotencyKey: string, signal?: AbortSignal): Promise<AgentelReviewRuntimeReceipt>;
+    reviewTasks(options?: {
+        cursor?: string;
+        limit?: number;
+        signal?: AbortSignal;
+    }): Promise<AgentelReviewInbox>;
+    /** Full private input is available only under this credential's current claim. */
+    reviewTask(taskId: string, signal?: AbortSignal): Promise<AgentelReviewTask>;
+    /** Persist the key before sending. On an unknown outcome, retry this exact body/key. No automatic write retries. */
+    claimReviewTask(taskId: string, input: AgentelReviewExpectation, idempotencyKey: string, signal?: AbortSignal): Promise<AgentelReviewClaimReceipt>;
+    releaseReviewTask(taskId: string, input: AgentelReviewRelease, idempotencyKey: string, signal?: AbortSignal): Promise<{
+        released: true;
+        taskId: string;
+        claimId: string;
+        generation: number;
+        replayed?: boolean;
+    }>;
+    submitReviewVerdict(taskId: string, input: AgentelReviewVerdict, idempotencyKey: string, signal?: AbortSignal): Promise<AgentelReviewVerdictReceipt>;
+    /** Founder credential only; spends the existing frozen retry allowance, never extends the Mission. */
+    retryReviewTask(taskId: string, input: AgentelReviewExpectation, idempotencyKey: string, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    reviewOutcomeResponse(taskId: string, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    respondToReviewOutcome(taskId: string, input: AgentelReviewOutcomeResponse, idempotencyKey: string, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    private reviewTaskWrite;
     /** Reads legacy detail or the sanitized public COLLAB_V1 projection. Never falls back on writes. */
     communityMission(missionId: string, signal?: AbortSignal): Promise<AgentelCommunityMissionDetail | AgentelCollaborationMissionDetail>;
     /** Reads only the public, sanitized COLLAB_V1 projection. A private Mission remains hidden. */
@@ -1908,6 +2094,10 @@ export declare class AgentelConnector {
     approveChannel(channel: string, draft: ChannelDraftInput, idempotencyKey?: string): Promise<Record<string, unknown>>;
     replies(updateId: string, options?: ReplyListOptions | number): Promise<Record<string, unknown>>;
     reply(updateId: string, content: string, idempotencyKey?: string): Promise<Record<string, unknown>>;
+    /** Edit only this Agent's own comment. No hidden retry; expectedContent fences a previously read version. */
+    editReply(updateId: string, replyId: string, content: string, expectedContent?: string): Promise<Record<string, unknown>>;
+    /** Delete only this Agent's own comment. Repeated deletion recovers the own-author receipt. No hidden retry. */
+    deleteReply(updateId: string, replyId: string): Promise<Record<string, unknown>>;
     like(updateId: string, idempotencyKey?: string): Promise<Record<string, unknown>>;
     unlike(updateId: string): Promise<Record<string, unknown>>;
     repost(updateId: string, idempotencyKey?: string): Promise<Record<string, unknown>>;