@axiom-lattice/protocols 4.11.0 → 6.0.0

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @axiom-lattice/protocols@4.11.0 build /home/runner/work/agentic/agentic/packages/protocols
+> @axiom-lattice/protocols@6.0.0 build /home/runner/work/agentic/agentic/packages/protocols
 > tsup src/index.ts --format cjs,esm --dts --sourcemap
 
 CLI Building entry: src/index.ts
@@ -8,13 +8,13 @@
 CLI Target: es2020
 CJS Build start
 ESM Build start
-CJS dist/index.js     48.46 KB
-CJS dist/index.js.map 199.08 KB
-CJS ⚡️ Build success in 603ms
-ESM dist/index.mjs     43.36 KB
-ESM dist/index.mjs.map 195.12 KB
-ESM ⚡️ Build success in 624ms
+ESM dist/index.mjs     48.72 KB
+ESM dist/index.mjs.map 218.13 KB
+ESM ⚡️ Build success in 688ms
+CJS dist/index.js     54.96 KB
+CJS dist/index.js.map 222.43 KB
+CJS ⚡️ Build success in 691ms
 DTS Build start
-DTS ⚡️ Build success in 13987ms
-DTS dist/index.d.ts  262.01 KB
-DTS dist/index.d.mts 262.01 KB
+DTS ⚡️ Build success in 14294ms
+DTS dist/index.d.ts  284.30 KB
+DTS dist/index.d.mts 284.30 KB

package/CHANGELOG.md

@@ -1,5 +1,120 @@
 # @axiom-lattice/protocols
 
+## 6.0.0
+
+### Major Changes
+
+- 80c8dca: Release the chat, task, store, and sandbox updates together.
+
+  - Chat: frosted-glass user-message navigator, breathing run status bar, streaming auto-follow that stops when the reader scrolls away, and stop notices routed through the status bar.
+  - Crons: workspace/project-scoped crons, tenant-validated scope, Console project selector/card/filter.
+  - Store: long-term Store rebuilt as a toolbar + master-detail drawer with namespace editor, JSON validation, and TTL presets.
+  - Workspace menu: optional `requiredTenantRoles` gating; Store, Audit Log, API Keys, Observability, and System Info are owner/admin-only.
+  - Execution: durable runs re-pin the shared agent to the authoritative scope, absent scheduled scope stays unscoped, subagent breaker state is isolated, first run of a locally-constructed thread is admitted, and `TaskListFilter.threadId` authorizes isolated task threads.
+  - Recursion: default budget 500 with `AGENT_RECURSION_LIMIT` override.
+  - Uploads: default request body and upload limit raised to 500 MB.
+  - Sandbox: default memory aligned to 1024 MiB and service body limit raised to 500 MB.
+  - PostgreSQL: run availability defaults to the database clock, so clock drift cannot make fresh runs briefly unclaimable.
+
+  Breaking: default recursion budget (1000 -> 500), request/upload limit (100 MB -> 500 MB), sandbox memory (512/2048 -> 1024 MiB), and durable-run scope authority change observable behavior without extra configuration.
+
+### Minor Changes
+
+- ae1535e: Make eval safe on the existing worker pool: a global `eval:execution` lease
+  allows any replica to run one eval at a time, cancellation is a durable
+  `cancel_requested` flag polled by the executing worker, and aborted runs settle
+  as `aborted`. The compatibility progress stream now polls the shared EvalStore
+  instead of the owner's process-local EventEmitter.
+- e71979f: Add HMAC-signed connection scopes to sandbox-plugin MCP App UIs. The compiler and `manage_plugin test` mint a run-scoped token carrying the selected `connectionKey`; the gateway verifies it and injects that one connection; pins preserve the scope. No credentials are placed in refs, pins, or logs. The signing key uses `MCP_UI_SCOPE_SECRET` when set, otherwise a domain-separated HKDF key derived from the shared `LATTICE_ENCRYPTION_KEY` (so no new required config; rotating that key invalidates pinned scopes). Connection-declaring plugins without a usable scope/connection now reject all UI tool calls with `CONNECTION_REQUIRED` (v1 plugin-level guard).
+- ae1535e: Reconcile scheduler timers on every replica instead of only on the startup
+  leader. `DefaultScheduleClient.reconcile()` diffs active schedules against local
+  timers, clears stale/paused timers, and re-arms `nextRunAt` without double-arming.
+  The gateway restores at startup and reconciles every `SCHEDULE_RECONCILE_MS`
+  (default 30s); `claimScheduledRun` keeps execution exactly-once.
+
+## 5.0.0
+
+### Major Changes
+
+- 8f9dd0d: Remove the deprecated TeamAgent/teammate feature and its UI surfaces.
+
+### Minor Changes
+
+- f1f8840: Durable cross-replica public-channel replies (Phase B)
+
+  - Add a durable `ChannelReplyJob` protocol, in-memory/PostgreSQL stores, and a
+    `lattice_channel_reply_jobs` migration (v200) with lease-based claim, bounded
+    reschedule, and terminal delivery state.
+  - Route non-Room public ingress for adapters declaring `durableReply: true`
+    through a reply job plus a pending `source='run_api'` run (job written first,
+    with compensation on run-create failure). Lark opts in; WeCom/WeChat/Room stay
+    legacy because their reply transport is connection-bound/process-local.
+  - Add `ChannelReplyDispatcher`, which polls due jobs on any replica, waits for
+    the run ledger to become terminal, reads the final assistant text from the
+    thread checkpoint, sends it through the adapter, and marks the job delivered.
+    Empty output and loader/send failures retry with capped exponential backoff;
+    sends have a 15s deadline; missing runs converge after a 30s grace window;
+    cancelled runs do not send a waiting notice. Terminal jobs are pruned after
+    24h.
+  - Keep Room/trusted dispatch and `ChannelConnectionLeader` unchanged. Durable
+    replies are at-least-once; outbound metadata carries `inputMessageId` for
+    channel-side deduplication. Ingress falls back to legacy when the dispatcher
+    runtime is not registered. Opt out with `CHANNEL_DURABLE_RUNS=false`.
+
+- ea90717: `keep_latest` checkpoint pruning (M2-B2b)
+
+  - Add `CheckpointMaintenance.pruneThread` and transactional per-namespace latest-N checkpoint retention with blob retention derived from `channel_versions`.
+  - Add `POST .../prune { strategy: "keep_latest", keep?: 1..100 }`; `delete` is unchanged.
+  - Reuse strict ownership, thread-run lease, and empty-inbox guards; keep the thread row and chunk stream.
+
+- 351b0e9: Multi-replica run cancel and queue-first HITL
+
+  - Add ledger-backed run cancel intent plus Redis owner wake-up and heartbeat fallback; abort/recover can be accepted by any replica without ingress stickiness.
+  - Make `input.respond` queue-first with `expected_interrupt_id` worker validation and the official LangGraph resume map; reserve answers across replicas and release in-flight reservations after enqueue.
+  - Unify Room and Web App native HITL resume mapping with the Console command path.
+  - Expose run-cancel readiness/metrics and document the A2A boundary: A2A remains a deferred adapter over the Agent runtime, not a second runtime.
+
+- 1fde314: Pending run task queue (Phase 1)
+
+  - Make `lattice_agent_runs` the durable task queue for the new single-run API: create writes `pending`, a worker claims/executes through `Agent.executeRun`, and recovery reclaims expired rows in place and completes durable rollback work.
+  - Add run lifecycle `join` (bounded terminal wait), `cancel?action=interrupt|rollback`, and HITL command runs; Web App runtime mirrors the same handlers.
+  - Add `client.runs.join` / cancel `action` / create `command`, and single-run HITL with `ThreadStream.openRun`. `RunCreateResult` is now `{ runId, messageId?, status: "pending" }`: the old queue-first `status: "queued"` / `queued: true` shape and the required `messageId` are gone (command runs have no user message).
+  - Keep the legacy message queue, Room, Project Task, A2A, and legacy HITL on `source='legacy'`; the two executors share the `thread-run` lease.
+
+- da5294d: Tenant-scoped namespaced KV store (M2-C)
+
+  - Add `StoreProtocol` (put/get/delete/search/listNamespaces/deleteExpired) with deep JSONB filters, substring query, and TTL.
+  - Add InMemory, Local SQLite, and PostgreSQL implementations (PG migration v195 with GIN and partial expiry indexes).
+  - Add `/api/store/*` routes and a single-flight store TTL sweeper.
+  - `index` hints are accepted but vector indexing and semantic search remain deferred.
+
+- 03e9984: Thread commands and explicit interrupts (M3-B)
+
+  - Add normalized `AgentInterrupt` plus `Agent.getInterrupts()`/`normalizeAgentInterrupts()` for clarify, task_review, and custom interrupts.
+  - Expose `interrupts` in thread status using one state read.
+  - Add `POST /api/assistants/:assistantId/threads/:threadId/commands` with `run.start`, `input.respond`, and `agent.getTree`.
+  - Map multitask strategies to queue modes, add process-local 5-minute answer dedupe, and return Mermaid from `get_draw_graph()`.
+
+- 2609f3b: Thread copy and prune-delete (M2-B1)
+
+  - Add `CheckpointMaintenance` and transactional `copyThread` / `deleteThread` to `PostgreSQLCheckpointStorage`, with a typed `CHECKPOINT_TARGET_NOT_EMPTY` conflict and metadata `thread_id` rewrite.
+  - Add owner-scoped, busy-guarded copy and prune-delete routes; prune clears the thread's chunk stream best-effort and retains run-ledger rows.
+  - Share the thread ownership resolver between read and maintenance controllers.
+
+- 12ce057: Thread read model (M2-A)
+
+  - Add `Agent.getStateHistory` / `Agent.getStateAtCheckpoint` (bounded to 50 checkpoints).
+  - Add `CheckpointStorage` / `ThreadCheckpointStorage` protocols and a read-only `PostgreSQLCheckpointStorage` over the built-in `PostgresSaver` tables.
+  - Add tenant/assistant-scoped read-only routes for thread status, checkpoint history, checkpoint state, and checkpoint storage usage; missing checkpoints and foreign threads return 404 and unexpected errors are sanitized.
+
+- 23902af: Per-thread TTL and expiry sweeper (M2-B2a)
+
+  - Add optional `expiresAt` to `Thread`/`CreateThreadRequest` and `listExpiredThreads` to `ThreadStore`.
+  - Persist `expires_at` in InMemory, Local SQLite, and PostgreSQL stores (PG migration v194 + partial index).
+  - Accept `ttlSeconds`/`expiresAt` when creating a thread (invalid values return 400).
+  - Add a lease/inbox/maintenance-guarded TTL sweeper with `THREAD_TTL_SWEEP_*` configuration.
+  - Copy does not inherit TTL; run-ledger rows are retained on sweep.
+
 ## 4.11.0
 
 ### Minor Changes