@elevasis/sdk 1.35.0 → 1.36.0

package/dist/worker/index.js

@@ -2607,8 +2607,10 @@ ${actionsList}
 
 - Batch independent tool calls in one iteration (faster execution)
 - Dependent operations need separate iterations (tool B needs tool A's result)
-- "complete" cannot mix with tool-call${includeNavigateKnowledge ? "/navigate-knowledge" : ""}${includeMessageAction ? `
+- "complete" cannot mix with navigate-knowledge${includeNavigateKnowledge ? "" : " (when available)"}
+- "complete" can mix with tool-call when the tool is a fire-and-forget side effect and you do not need its result before ending${includeMessageAction ? `
 - Always send at least one message before completing
+- Send at most one message per iteration. Multiple messages in a session turn are collapsed into one visible assistant message.
 - When you have your answer, send message + complete in the SAME iteration. Never send a message alone then complete in a later iteration.
 - Never repeat or rephrase the same answer across iterations. One clear answer, then complete.` : ""}
 
@@ -2619,6 +2621,7 @@ ${actionsList}
 
 **Don't use "complete" when:**
 - You just called a tool and need its results
+- You used navigate-knowledge and need the newly loaded knowledge in the next iteration
 - More iterations are needed
 
 ## Examples
@@ -2749,11 +2752,12 @@ function buildToolsPrompt(tools) {
   section += "To call a tool, return a tool-call action:\n";
   section += '{\n  "type": "tool-call",\n  "id": "unique-id",\n  "name": "tool-name",\n  "input": { /* tool input matching schema */ }\n}\n\n';
   section += "**IMPORTANT RULES:**\n";
-  section += '1. "complete" CANNOT mix with tool-call or navigate-knowledge actions in the same response\n';
-  section += '2. "complete" CAN mix with message \u2014 always pair your final message with complete in the same iteration\n';
-  section += "3. To use tools, return ONLY tool-call actions, then wait for results in the next iteration\n";
-  section += "4. After receiving tool results, you can either call more tools OR complete with final answer\n";
-  section += "5. navigate-knowledge actions load new capabilities - tools become available in the next iteration\n";
+  section += '1. "complete" CANNOT mix with navigate-knowledge actions in the same response\n';
+  section += '2. "complete" CAN mix with message - always pair your final message with complete in the same iteration\n';
+  section += '3. "complete" CAN mix with fire-and-forget tool-call actions when you do not need their results\n';
+  section += "4. To use tools and inspect their results, return ONLY tool-call actions, then wait for results in the next iteration\n";
+  section += "5. After receiving tool results, you can either call more tools OR complete with final answer\n";
+  section += "6. navigate-knowledge actions load new capabilities - tools become available in the next iteration\n";
   return section + "\n";
 }
 
@@ -3978,12 +3982,35 @@ function validateActionSequence(actions) {
     }
   }
 }
+function normalizeSessionMessages(actions, sessionCapable) {
+  if (!sessionCapable) {
+    return actions;
+  }
+  const messages = actions.filter((action) => action.type === "message");
+  if (messages.length <= 1) {
+    return actions;
+  }
+  const collapsedText = messages.map((message) => message.text).join("\n\n");
+  const collapsedMessage = { type: "message", text: collapsedText };
+  let emittedCollapsedMessage = false;
+  return actions.flatMap((action) => {
+    if (action.type !== "message") {
+      return [action];
+    }
+    if (emittedCollapsedMessage) {
+      return [];
+    }
+    emittedCollapsedMessage = true;
+    return [collapsedMessage];
+  });
+}
 async function processActions(iterationContext, response) {
   validateActionSequence(response.nextActions);
+  const normalizedActions = normalizeSessionMessages(response.nextActions, !!iterationContext.config.sessionCapable);
   let shouldComplete = false;
   const toolCalls = [];
   const otherActions = [];
-  for (const action of response.nextActions) {
+  for (const action of normalizedActions) {
     if (action.type === "tool-call") {
       toolCalls.push(action);
     } else {
@@ -4010,6 +4037,9 @@ async function processActions(iterationContext, response) {
       }
     }
   }
+  if (!shouldComplete && iterationContext.config.sessionCapable && toolCalls.length === 0 && normalizedActions.some((a) => a.type === "message") && !normalizedActions.some((a) => a.type === "navigate-knowledge")) {
+    shouldComplete = true;
+  }
   return { shouldComplete };
 }
 
@@ -6790,6 +6820,23 @@ function safeZodToJsonSchema(schema) {
   }
   return void 0;
 }
+function serializeWorkerError(err) {
+  const errorRecord = err instanceof Error ? err : void 0;
+  const errorMessage = errorRecord?.message ?? String(err);
+  const errorCode = err !== null && typeof err === "object" && "code" in err ? String(err.code) : "unknown";
+  const errorName = errorRecord?.name ?? (err !== null && typeof err === "object" && err.constructor?.name ? err.constructor.name : "Error");
+  const rawDetails = err !== null && typeof err === "object" && "details" in err ? err.details : void 0;
+  const rawContext = err !== null && typeof err === "object" && "context" in err ? err.context : void 0;
+  const details = rawDetails !== null && typeof rawDetails === "object" ? rawDetails : void 0;
+  const context = rawContext !== null && typeof rawContext === "object" ? rawContext : void 0;
+  return {
+    error: `${errorName}: ${errorMessage}`,
+    errorName,
+    errorCode,
+    ...details ? { errorDetails: details } : {},
+    ...context ? { errorContext: context } : {}
+  };
+}
 function serializeNext(next) {
   if (next === null) return null;
   if (next.type === "linear") return { type: "linear", target: next.target };
@@ -6827,10 +6874,10 @@ async function executeWorkflow(workflow, input, context) {
 }
 function buildWorkerExecutionContext(params) {
   const { executionId } = params;
-  const postLog = (level, message) => {
+  const postLog = (level, message, logContext) => {
     parentPort.postMessage({
       type: "log",
-      entry: { level, message, timestamp: (/* @__PURE__ */ new Date()).toISOString(), executionId }
+      entry: { level, message, timestamp: (/* @__PURE__ */ new Date()).toISOString(), executionId, context: logContext }
     });
   };
   return {
@@ -6845,21 +6892,21 @@ function buildWorkerExecutionContext(params) {
     signal: params.signal,
     store: /* @__PURE__ */ new Map(),
     logger: {
-      debug: (msg) => {
+      debug: (msg, logContext) => {
         console.log(`[debug] ${msg}`);
-        postLog("info", msg);
+        postLog("info", msg, logContext);
       },
-      info: (msg) => {
+      info: (msg, logContext) => {
         console.log(`[info] ${msg}`);
-        postLog("info", msg);
+        postLog("info", msg, logContext);
       },
-      warn: (msg) => {
+      warn: (msg, logContext) => {
         console.warn(`[warn] ${msg}`);
-        postLog("warn", msg);
+        postLog("warn", msg, logContext);
       },
-      error: (msg) => {
+      error: (msg, logContext) => {
         console.error(`[error] ${msg}`);
-        postLog("error", msg);
+        postLog("error", msg, logContext);
       }
     },
     onMessageEvent: async (event) => {
@@ -6971,11 +7018,12 @@ function startWorker(org) {
           parentPort.postMessage({ type: "result", status: "completed", output, logs, metrics: { durationMs } });
         } catch (err) {
           const durationMs = Date.now() - startTime;
-          console.error(`[SDK-WORKER] Workflow '${resourceId}' failed (${durationMs}ms): ${String(err)}`);
+          const serializedError = serializeWorkerError(err);
+          console.error(`[SDK-WORKER] Workflow '${resourceId}' failed (${durationMs}ms): ${serializedError.error}`);
           parentPort.postMessage({
             type: "result",
             status: "failed",
-            error: String(err),
+            ...serializedError,
             logs: [],
             metrics: { durationMs }
           });
@@ -7003,20 +7051,28 @@ function startWorker(org) {
             signal: localAbortController.signal
           });
           const output = await agentInstance.execute(input, context);
+          const memorySnapshot = agentInstance.getMemorySnapshot();
+          if (!memorySnapshot) {
+            throw new Error("Agent did not produce memory snapshot");
+          }
           const durationMs = Date.now() - startTime;
           console.log(`[SDK-WORKER] Agent '${resourceId}' completed (${durationMs}ms)`);
-          parentPort.postMessage({ type: "result", status: "completed", output, logs, metrics: { durationMs } });
+          parentPort.postMessage({
+            type: "result",
+            status: "completed",
+            output,
+            memorySnapshot,
+            logs,
+            metrics: { durationMs }
+          });
         } catch (err) {
           const durationMs = Date.now() - startTime;
-          const errorRecord = err instanceof Error ? err : void 0;
-          const errorMessage = errorRecord?.message ?? String(err);
-          err !== null && typeof err === "object" && "code" in err ? String(err.code) : "unknown";
-          const errorName = errorRecord?.name ?? (err !== null && typeof err === "object" && err.constructor?.name ? err.constructor.name : "Error");
-          console.error(`[SDK-WORKER] Agent '${resourceId}' failed (${durationMs}ms): [${errorName}] ${errorMessage}`);
+          const serializedError = serializeWorkerError(err);
+          console.error(`[SDK-WORKER] Agent '${resourceId}' failed (${durationMs}ms): ${serializedError.error}`);
           parentPort.postMessage({
             type: "result",
             status: "failed",
-            error: `${errorName}: ${errorMessage}`,
+            ...serializedError,
             logs,
             metrics: { durationMs }
           });
@@ -7030,6 +7086,8 @@ function startWorker(org) {
         type: "result",
         status: "failed",
         error: `Resource not found: ${resourceId}`,
+        errorName: "ResourceNotFoundError",
+        errorCode: "resource_not_found",
         logs: []
       });
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/sdk",
-  "version": "1.35.0",
+  "version": "1.36.0",
   "description": "SDK for building Elevasis organization resources",
   "type": "module",
   "bin": {
@@ -58,9 +58,9 @@
     "tsup": "^8.0.0",
     "typescript": "5.9.2",
     "zod": "^4.1.0",
-    "@repo/core": "0.48.0",
-    "@repo/eslint-config": "0.0.0",
-    "@repo/typescript-config": "0.0.0"
+    "@repo/core": "0.49.0",
+    "@repo/typescript-config": "0.0.0",
+    "@repo/eslint-config": "0.0.0"
   },
   "scripts": {
     "lint": "eslint src --max-warnings 0",

package/reference/claude-config/registries/skill-coverage.json

@@ -11,6 +11,7 @@
     "agent": "operator-facing deployed-agent introspection",
     "session": "operator-facing session introspection",
     "queue": "HITL approval queue — surfaced in the UI",
+    "grant": "operator-facing public agent access management",
     "schedule": "operator-facing scheduler control",
     "note": "CLI-only in tenant context; /notes is monorepo-internal, not propagated",
     "ui": "infra-only dev toggle (ui:use-local / ui:use-published)",

package/reference/claude-config/sync-notes/2026-06-12-agent-grants-visualizer-operations.md

@@ -0,0 +1,30 @@
+# Agent grants, execution visualizer, and Operations sidebar release train
+
+This train publishes coordinated platform updates across `@elevasis/core`, `@elevasis/ui`,
+and `@elevasis/sdk`, then syncs the external template baseline.
+
+## What changes for tenant projects
+
+1. `@elevasis/sdk` adds `grant:list`, `grant:create`, and `grant:disable` for
+   managing public/code-gated agent access grants through the platform API.
+2. `@elevasis/ui` adds shared agent public/private controls and improves the
+   agent execution visualizer with per-iteration tool activity.
+3. `@elevasis/core` adds the grant audit activity contract used by platform
+   activity feeds.
+4. The template `.claude/registries/skill-coverage.json` now explicitly waives
+   the `grant` CLI domain as operator-facing access-management tooling.
+
+## Operator action
+
+- Run the prepared external sync manifest from the SDK ship artifact.
+- Verify each derived project updates `.claude/registries/skill-coverage.json`.
+- After package baselines are bumped, verify derived package manifests point at
+  the newly published `@elevasis/core`, `@elevasis/ui`, and `@elevasis/sdk`
+  versions selected by the release steps.
+
+## Manual-review exclusions
+
+Operations sidebar root-route parity for `external/nirvana-marketing` and
+`external/ZentaraHQ` is intentionally excluded from this ship train. Their
+root routes are project-specific merge-managed surfaces and should be reviewed
+manually before adopting the template Operations manifest mount.

package/reference/rules/ui.md

@@ -122,16 +122,19 @@ The API URL is centralized in `ui/src/lib/constants/api.ts`. In the current temp
 
 ## Route Structure
 
-Current top-level app sections:
-
-- `/` -- host-local dashboard entrypoint with quick links derived from `organizationModel.navigation.quickAccessSurfaceIds`
-- `/lead-gen/*` -- lead generation pages (`lists`, `companies`, `contacts`)
+Current top-level app sections:
+
+- `/` -- host-local dashboard entrypoint with quick links derived from `organizationModel.navigation.quickAccessSurfaceIds`
+- `/public/agents/$slug` -- public, unauthenticated agent chat route for grant-backed public agents
+- `/lead-gen/*` -- lead generation pages (`lists`, `companies`, `contacts`)
 - `/crm/*` -- CRM overview, pipeline, and deals
 - `/projects/*` -- delivery feature pages (projects, milestones, tasks, notes)
 - `/operations/*` -- operations overview, resources, command queue, command view, sessions, task scheduler
 - `/monitoring/*` -- execution logs, execution health, activity log, cost analytics, notifications
 - `/settings/*` -- account, organization, credentials, API keys, deployments, webhooks, and appearance
-- `/login` and `/auth-redirect` -- auth entry/callback routes
+- `/login` and `/auth-redirect` -- auth entry/callback routes
+
+Public routes use the `/public/` prefix and must render outside the authenticated app chrome. Public agent pages should import `PublicAgentChatRoutePage` from `@elevasis/ui/features/public-agent-chat` and mount it at `/public/agents/$slug`. Keep `/chat/$slug` only as a compatibility alias when preserving existing links.
 
 Section guards currently follow this pattern:
 

package/reference/sdk/cli-management.mdx

@@ -627,6 +627,8 @@ Knowledge map inspection. The `om:*` (Organization Model) commands expose knowle
 
 For the full command reference, flag details, and graph architecture, see the [knowledge:\* CLI documentation](/technical/features/knowledge/cli-and-skill).
 
+In tenant projects, SDK read commands load `core/config/organization-model.ts` through the SDK's layout-aware TypeScript loader. The temporary bundle and dependency resolution are anchored at the package root that owns SDK dependencies, so hoisted pnpm workspaces resolve `esbuild` and `@elevasis/core` correctly. Missing org-model files still return the default model; malformed files or files with no usable export emit diagnostics. `knowledge:generate` / `om:generate` is the exception because it reads MDX and codegen inputs directly.
+
 **Quick reference:**
 
 ```bash