@inneranimalmedia/agentsam-sdk 2.6.5 → 2.6.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-sdk",
-  "version": "2.6.5",
+  "version": "2.6.8",
   "description": "Portable AgentSam SDK and CLI kits for local scaffolding, repository intelligence, incremental indexing, identity adapters, and verified dependency maintenance.",
   "type": "module",
   "main": "./src/index.js",
@@ -55,6 +55,7 @@
     "./identity/contracts/provider": "./packages/identity/src/contracts/provider.js",
     "./identity/contracts/external-identity": "./packages/identity/src/contracts/external-identity.js",
     "./identity/contracts/auth-config": "./packages/identity/src/contracts/auth-config.js",
+    "./identity/contracts/identity-store": "./packages/identity/src/contracts/identity-store.js",
     "./identity/oauth/callback": "./packages/identity/src/oauth/callback.js",
     "./identity/oauth/finalize-inbound": "./packages/identity/src/oauth/finalize-inbound.js",
     "./identity/oauth/redirect-paths": "./packages/identity/src/oauth/redirect-paths.js",
@@ -64,6 +65,9 @@
     "./identity/recovery/password-reset": "./packages/identity/src/recovery/password-reset.js",
     "./identity/server/worker-router": "./packages/identity/src/server/worker-router.js",
     "./identity/server/identity-service": "./packages/identity/src/server/identity-service.js",
+    "./identity/adapters/sqlite": "./packages/identity/src/adapters/sqlite/index.js",
+    "./identity/adapters/portable-d1": "./packages/identity/src/adapters/portable-d1/index.js",
+    "./identity/adapters/iam-compat": "./packages/identity/src/adapters/iam-compat/index.js",
     "./identity/adapters/cloudflare-d1": "./packages/identity/src/adapters/cloudflare-d1/index.js",
     "./identity/auth-portal/preview": "./packages/identity/scripts/preview-auth-portal.mjs",
     "./package.json": "./package.json",
@@ -106,7 +110,16 @@
     "./theme/insurance-site": "./packages/theme-insurance-site/src/index.js",
     "./theme/shinshu-site": "./packages/theme-shinshu-site/src/index.js",
     "./identity/oauth/consent-view": "./packages/identity/src/oauth/consent-view.js",
-    "./theme-scenes": "./packages/theme-scenes/src/index.js"
+    "./theme-scenes": "./packages/theme-scenes/src/index.js",
+    "./theme/cypress": "./packages/theme-church-site/src/index.js",
+    "./theme/violet": "./packages/theme-companions-site/src/index.js",
+    "./theme/grove": "./packages/theme-floors-site/src/index.js",
+    "./theme/ember": "./packages/theme-fuelnfree-site/src/index.js",
+    "./theme/forge": "./packages/theme-handyman-site/src/index.js",
+    "./theme/harbor": "./packages/theme-insurance-site/src/index.js",
+    "./theme/summit": "./packages/theme-shinshu-site/src/index.js",
+    "./models/inventory": "./src/models/inventory-core.js",
+    "./goap": "./packages/agentsam-goap/src/index.js"
   },
   "bin": {
     "agentsam": "bin/agentsam",
@@ -132,16 +145,23 @@
     "packages/agentsam-nav/dist",
     "packages/work-graph",
     "packages/agentsam-queue-control",
+    "packages/agentsam-goap",
     "packages/connectors/cloudflare",
     "packages/providers/completeful",
     "templates",
     "docs",
     "examples",
-    "test",
     "python",
     "protocol",
+    "contracts",
     "migrations",
-    "skills",
+    "skills/README.md",
+    "skills/catalog.json",
+    "skills/agentsam-app-fundamentals",
+    "skills/agentsam-cloudflare-workers",
+    "skills/agentsam-codebaseindex",
+    "skills/agentsam-jr-dev",
+    "skills/agentsam-progression-guard",
     "services/knowledge/package.json",
     "services/knowledge/package-lock.json",
     "services/cad/server.py",
@@ -166,6 +186,7 @@
     "packages/agentsam-vault/src",
     "packages/runtime-protocol/src",
     "packages/agentsam-rapid-rust",
+    "native/agentsam-machine",
     "scripts/build_rapid_rust_cli.py",
     "registry/cms-rust-machine-20260928",
     "apps/client-cms-editor/agentsam.app.json",
@@ -194,35 +215,43 @@
     "packages/agentsam-workbench/tsconfig.json"
   ],
   "workspaces": [
-    "packages/agentsam-shell-kit",
-    "packages/agentsam-settings",
-    "packages/agentsam-work",
-    "packages/identity",
+    "packages/agentsam-assets-core",
     "packages/agentsam-brand",
+    "packages/agentsam-cloudflare-images",
+    "packages/agentsam-content",
+    "packages/agentsam-content-studio",
     "packages/agentsam-contracts",
+    "packages/agentsam-database-editor",
+    "packages/agentsam-desktop-shell",
+    "packages/agentsam-docs-theme",
     "packages/agentsam-errors",
-    "packages/agentsam-repository",
+    "packages/agentsam-goap",
+    "packages/agentsam-ide",
+    "packages/agentsam-key-manager",
     "packages/agentsam-knowledge",
     "packages/agentsam-nav",
-    "packages/work-graph",
     "packages/agentsam-queue-control",
-    "packages/agentsam-workbench",
-    "packages/agentsam-assets-core",
+    "packages/agentsam-repository",
     "packages/agentsam-scoring",
-    "packages/agentsam-cloudflare-images",
-    "packages/agentsam-content",
-    "packages/agentsam-content-studio",
-    "packages/providers/completeful",
-    "packages/agentsam-desktop-shell",
+    "packages/agentsam-settings",
+    "packages/agentsam-shell-kit",
+    "packages/agentsam-vault",
+    "packages/agentsam-work",
+    "packages/agentsam-workbench",
+    "packages/connectors/cloudflare",
     "packages/heuristic-theme",
+    "packages/identity",
+    "packages/providers/completeful",
     "packages/theme-church-site",
     "packages/theme-companions-site",
     "packages/theme-floors-site",
     "packages/theme-fuelnfree-site",
     "packages/theme-handyman-site",
+    "packages/theme-iasf",
     "packages/theme-insurance-site",
+    "packages/theme-scenes",
     "packages/theme-shinshu-site",
-    "packages/theme-scenes"
+    "packages/work-graph"
   ],
   "scripts": {
     "test": "npm run test:standard && npm --prefix packages/identity test && npm --prefix packages/agentsam-brand test && npm run test:connectors && npm run test:providers",
@@ -232,11 +261,11 @@
     "test:standard": "node test/smoke.mjs && npm run test:unit && npm run test:cli && npm run test:integration:mock && npm run test:terminal:mock",
     "test:unit": "node --test test/*.test.mjs",
     "test:cli": "node --test test/cli/*.test.mjs",
-    "test:integration:mock": "node --test test/integration/*.test.mjs",
+    "test:integration:mock": "npm run ensure:cms-dist && node --test test/integration/*.test.mjs",
     "test:terminal:mock": "node --test test/terminal/*.test.mjs",
     "test:live:terminal": "node --test test/live/*.live.test.mjs",
     "test:identity": "npm --prefix packages/identity test",
-    "test:workspaces": "npm --prefix packages/agentsam-contracts test && npm --prefix packages/agentsam-contracts run typecheck && npm --prefix packages/agentsam-errors test && npm --prefix packages/agentsam-repository test && npm --prefix packages/agentsam-workbench test && npm --prefix packages/agentsam-workbench run typecheck && npm --prefix packages/agentsam-nav run typecheck && npm --prefix packages/agentsam-shell-kit run typecheck && npm --prefix packages/work-graph test && npm --prefix packages/agentsam-queue-control test",
+    "test:workspaces": "npm --prefix packages/agentsam-contracts test && npm --prefix packages/agentsam-contracts run typecheck && npm --prefix packages/agentsam-errors test && npm --prefix packages/agentsam-repository test && npm --prefix packages/agentsam-workbench test && npm --prefix packages/agentsam-workbench run typecheck && npm --prefix packages/agentsam-nav run typecheck && npm --prefix packages/agentsam-shell-kit run typecheck && npm --prefix packages/work-graph test && npm --prefix packages/agentsam-queue-control test && npm --prefix packages/agentsam-goap test",
     "test:autorag": "npm --prefix packages/agentsam-knowledge test",
     "smoke": "node test/smoke.mjs",
     "verify:package": "node scripts/verify-package.mjs",
@@ -274,7 +303,9 @@
     "theme:harvest": "python3 scripts/theme-refinery/harvest.py",
     "verify:go-distribution": "node scripts/verify-go-distribution.mjs",
     "prove:product": "node scripts/prove-agentsam-product.mjs",
-    "security:release": "node scripts/verify-release-security.mjs"
+    "security:release": "node scripts/verify-release-security.mjs",
+    "verify:database-honesty": "node --test test/integration/database-hosted-honesty.test.mjs",
+    "ensure:cms-dist": "node scripts/ensure-cms-dist.mjs"
   },
   "engines": {
     "node": ">=22 <25",
@@ -283,6 +314,7 @@
   "dependencies": {
     "@clack/prompts": "^1.7.0",
     "@grpc/grpc-js": "^1.14.4",
+    "@inneranimalmedia/agentsam-errors": "2.6.8",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "google-protobuf": "^3.21.4",
     "node-pty": "^1.1.0",
@@ -319,19 +351,27 @@
     "protobufjs@7.6.6": true,
     "esbuild@0.28.1": true,
     "fsevents@2.3.3": true,
-    "workerd@1.20260925.1": true
+    "workerd@1.20260925.1": true,
+    "esbuild@0.28.2": true,
+    "workerd@1.20260930.2": true,
+    "sharp@0.34.5": true,
+    "sharp@0.35.4": true,
+    "sharp@0.35.5": true
   },
   "devDependencies": {
     "@changesets/changelog-github": "^1.0.1",
     "@changesets/cli": "^3.0.3",
     "@electric-sql/pglite": "0.5.8",
     "@electric-sql/pglite-pgvector": "0.0.9",
+    "esbuild": "0.28.1",
     "grpc-tools": "^1.13.1",
-    "wrangler": "4.142.0"
+    "wrangler": "4.145.0"
   },
   "overrides": {
     "@types/react": "19.2.18",
-    "@types/react-dom": "19.2.3"
+    "@types/react-dom": "19.2.3",
+    "esbuild": "0.28.1",
+    "dompurify": "3.4.16"
   },
   "packageManager": "npm@10.9.2"
 }

package/packages/agentsam-brand/README.md

@@ -1,4 +1,4 @@
-# @inneranimalmedia/agentsam-sdk-brand
+# @inneranimalmedia/agentsam-brand
 
 **Brand compiler** — not just an image optimizer CLI.
 

package/packages/agentsam-brand/package.json

@@ -1,6 +1,6 @@
 {
-  "name": "@inneranimalmedia/agentsam-sdk-brand",
-  "version": "0.1.0",
+  "name": "@inneranimalmedia/agentsam-brand",
+  "version": "2.6.7",
   "description": "Deterministic Brand Intelligence + portable brand-asset promotion SDK for AgentSam (inspect, derive, plan, promote, publish, verify).",
   "type": "module",
   "license": "MIT",
@@ -8,7 +8,7 @@
     "node": ">=22 <25"
   },
   "dependencies": {
-    "sharp": "^0.34.5"
+    "sharp": "^0.35.5"
   },
   "main": "./src/index.js",
   "bin": {
@@ -41,7 +41,7 @@
     "directory": "packages/agentsam-brand"
   },
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "keywords": [
     "agentsam",

package/packages/agentsam-brand/src/index.js

@@ -1,5 +1,5 @@
 /**
- * @inneranimalmedia/agentsam-sdk-brand
+ * @inneranimalmedia/agentsam-brand
  *
  * Brand intelligence (scan/resolve/plan) + portable brand-asset promotion SDK.
  * Product-specific assets (e.g. AgentSam icons) live outside this package.

package/packages/agentsam-contracts/package.json

@@ -1,7 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-contracts",
-  "version": "0.1.0",
-  "private": true,
+  "version": "2.6.7",
   "description": "Framework-neutral AgentSam contracts for workbench, tools, providers, events, hooks, execution, identity and repository context.",
   "type": "module",
   "main": "./src/index.ts",
@@ -28,5 +27,16 @@
   },
   "devDependencies": {
     "typescript": "^5.9.3"
-  }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SamPrimeaux/agentsam-sdk.git",
+    "directory": "packages/agentsam-contracts"
+  },
+  "files": [
+    "src"
+  ]
 }

package/packages/agentsam-contracts/src/tools.ts

@@ -96,3 +96,25 @@ export interface AgentToolCall {
   error?: string;
   metadata?: Record<string, unknown>;
 }
+
+export type AgentToolPermissionDecision = 'allow_once' | 'allow_session' | 'deny';
+
+export interface AgentToolPermissionDatum {
+  label: string;
+  value: string;
+}
+
+export interface AgentToolPermissionRequest {
+  id: string;
+  toolKey: string;
+  displayName: string;
+  provider?: string;
+  summary?: string;
+  scope?: string;
+  sharedData?: AgentToolPermissionDatum[];
+  riskLevel?: AgentToolRiskLevel;
+  sideEffectLevel?: AgentToolSideEffectLevel;
+  destructive?: boolean;
+  openWorld?: boolean;
+  metadata?: Record<string, unknown>;
+}

package/packages/agentsam-errors/package.json

@@ -1,7 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-errors",
-  "version": "0.1.0",
-  "private": true,
+  "version": "2.6.8",
   "description": "Canonical AgentSam runtime error normalization, classification, transport, remediation and rendering.",
   "type": "module",
   "main": "./src/index.js",
@@ -13,5 +12,16 @@
   },
   "engines": {
     "node": ">=22 <25"
-  }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SamPrimeaux/agentsam-sdk.git",
+    "directory": "packages/agentsam-errors"
+  },
+  "files": [
+    "src"
+  ]
 }

package/packages/agentsam-errors/src/index.js

@@ -1,6 +1,7 @@
 export * from './vocabulary.js';
 export * from './envelope.js';
 export * from './error.js';
+export * from './tool.js';
 export * from './normalize.js';
 export * from './redaction.js';
 export * from './fingerprint.js';

package/packages/agentsam-errors/src/tool.js

@@ -0,0 +1,56 @@
+import { createErrorEnvelope } from './envelope.js';
+import { AgentSamError } from './error.js';
+
+function clean(value) {
+  return value == null ? '' : String(value).trim();
+}
+
+function nativeFromCause(cause) {
+  if (!cause || typeof cause !== 'object') return null;
+  return {
+    code: cause.code || null,
+    exception_type: cause.name || null,
+    exit_code: cause.exit_code ?? cause.exitCode ?? null,
+    signal: cause.signal || null,
+    stderr: cause.stderr || null,
+    stdout: cause.stdout || null,
+    stack: cause.stack || null,
+  };
+}
+
+/**
+ * Build the canonical AgentSam error envelope for any tool/capability.
+ *
+ * Tool implementations should supply an existing ERROR_REASON plus tool/stage
+ * context. Do not mint tool-specific error taxonomies when the shared
+ * vocabulary already describes the failure.
+ */
+export function createToolErrorEnvelope(input = {}, options = {}) {
+  const tool = clean(input.tool);
+  if (!tool) throw new TypeError('tool is required');
+
+  const cause = options.cause || input.cause || null;
+  const { cause: _ignoredCause, ...envelopeInput } = input;
+
+  return createErrorEnvelope({
+    ...envelopeInput,
+    domain: input.domain || 'tool',
+    tool,
+    stage: clean(input.stage) || 'execute',
+    source: input.source || {
+      kind: 'agentsam',
+      name: 'agentsam-sdk',
+      service: tool,
+    },
+    native: input.native || nativeFromCause(cause),
+  });
+}
+
+/**
+ * Throwable view over createToolErrorEnvelope().
+ */
+export function createToolError(input = {}, options = {}) {
+  const cause = options.cause || input.cause || null;
+  const envelope = createToolErrorEnvelope(input, { cause });
+  return new AgentSamError(envelope, cause ? { cause } : {});
+}

package/packages/agentsam-errors/test/tool.test.mjs

@@ -0,0 +1,58 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import {
+  AgentSamError,
+  ERROR_CODE,
+  ERROR_REASON,
+  createToolError,
+  createToolErrorEnvelope,
+  planRecovery,
+} from '../src/index.js';
+
+test('tool errors reuse the canonical AgentSam vocabulary', () => {
+  const error = createToolError({
+    reason: ERROR_REASON.STALE_VERSION,
+    message: 'The resource changed before this mutation could commit.',
+    tool: 'goap',
+    stage: 'activate_goal',
+    failure_class: 'conflict',
+    resource: { type: 'blackboard', id: 'bb_1' },
+    details: { expected_revision: 4, actual_revision: 5 },
+    operation: {
+      kind: 'mutation',
+      action: 'activate_goal',
+      resource_type: 'blackboard',
+      resource_id: 'bb_1',
+      read_only: false,
+      idempotent: true,
+      side_effect_state: 'confirmed_not_applied',
+    },
+  });
+
+  assert.equal(error instanceof AgentSamError, true);
+  assert.equal(error.code, ERROR_CODE.ABORTED);
+  assert.equal(error.reason, ERROR_REASON.STALE_VERSION);
+  assert.equal(error.envelope.domain, 'tool');
+  assert.equal(error.envelope.tool, 'goap');
+  assert.equal(error.envelope.retryable, true);
+  assert.equal(error.envelope.details.expected_revision, 4);
+
+  const recovery = planRecovery(error.envelope);
+  assert.equal(recovery.disposition, 'retry');
+  assert.equal(recovery.reason, 'optimistic_concurrency');
+});
+
+test('tool envelope preserves generic internal adapter classification', () => {
+  const envelope = createToolErrorEnvelope({
+    reason: ERROR_REASON.INTERNAL_ADAPTER_FAILED,
+    message: 'The storage adapter cannot provide the required atomic primitive.',
+    tool: 'queue-control',
+    stage: 'dispatch',
+    resource: { type: 'adapter', id: 'sqlite' },
+  });
+
+  assert.equal(envelope.code, ERROR_CODE.INTERNAL);
+  assert.equal(envelope.domain, 'tool');
+  assert.equal(envelope.tool, 'queue-control');
+  assert.equal(envelope.resolution_owner, 'agentsam');
+});

package/packages/agentsam-goap/README.md

@@ -0,0 +1,52 @@
+# @inneranimalmedia/agentsam-goap
+
+Portable GOAP control-plane contracts for AgentSam.
+
+This package does not define a second GOAP database. It maps stable logical ports onto tables AgentSam already owns.
+
+| Logical port | Existing authority |
+| --- | --- |
+| BlackboardStore | agentsam_workspace_state |
+| GoalStore | agentsam_tickets |
+| EventStore | agentsam_ticket_events |
+| PlanStore | agentsam_workflows, agentsam_workflow_nodes, agentsam_workflow_edges |
+| PlanRunStore | agentsam_workflow_runs |
+| ActionRunStore | agentsam_executions, agentsam_execution_steps |
+| ApprovalPort | agentsam_approval_queue |
+| QueuePort | @inneranimalmedia/agentsam-queue-control |
+| RuntimePort | agentsam.runtime.v1 / terminal runtime adapters |
+| EvidencePort | evidence snapshots and execution receipts |
+
+The core package imports no Wrangler, Cloudflare, SQLite, Postgres, Tauri, filesystem, or terminal implementation. Those are adapters.
+
+`projectGoapWorld()` is the deterministic perception seam: callers supply repository facts, the active project-local plan/TODO, knowledge freshness, and bounded evidence. It emits `agentsam.goap.world.v1` plus canonical blackboard, goal, and action contracts without performing storage, network, filesystem, or model work.
+
+## Frozen v1 contracts
+
+- agentsam.blackboard.v1
+- agentsam.goal.v1
+- agentsam.goap.action.v1
+- agentsam.goap.plan.v1
+- agentsam.goap.world.v1
+- agentsam.event.v1
+
+Database ticket statuses stay unchanged. The package maps them to logical goal states:
+
+- backlog -> proposed
+- active -> active
+- blocked -> blocked
+- in_review -> verifying
+- shipped -> satisfied
+- abandoned -> cancelled
+
+## Realtime and durability rule
+
+Blackboard mutation is compare-and-swap on a monotonically increasing revision. Events are append-only and expose opaque string cursors. The adapter owns the physical cursor prefix, so callers do not depend on SQLite/D1 rowid, Postgres sequences, or a future stream backend.
+
+Cross-store state changes must go through MutationPort. Goal activation updates blackboard revision, ticket status, and the activation event as one adapter-owned atomic operation. The D1/SQLite adapter therefore requires db.batch() for mutation operations.
+
+The Memory adapter is the conformance/reference adapter. The D1/SQLite adapter targets the common prepare/bind/first/all/run binding shape. Local SQLite supplies a transactional batch shim; Cloudflare D1 supplies batch natively.
+
+Portable ticket_events rows carry account_id and repository_id directly. The older platform host table does not. Set eventOwnership to ticket_join for that legacy shape; it scopes events through their owning ticket without requiring a second event table or a duplicate-column migration.
+
+Blackboard ownership is adapter-specific. Use blackboardOwnership=repository for account-owned portable/local stores. Shared hosts must verify repository ownership instead of trusting caller scope; IAM D1 uses blackboardOwnership=repository_join, which checks code_repositories.account_id on blackboard reads and CAS writes.

package/packages/agentsam-goap/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@inneranimalmedia/agentsam-goap",
+  "version": "2.6.8",
+  "description": "Portable AgentSam GOAP control-plane contracts and adapters over existing blackboard, ticket, workflow, execution, approval, queue, runtime, and evidence stores.",
+  "type": "module",
+  "main": "./src/index.js",
+  "exports": {
+    ".": "./src/index.js",
+    "./contracts": "./src/contracts.js",
+    "./control-plane": "./src/control-plane.js",
+    "./adapters/memory": "./src/adapters/memory.js",
+    "./adapters/d1-sqlite": "./src/adapters/d1-sqlite.js",
+    "./world": "./src/world.js"
+  },
+  "files": [
+    "src",
+    "README.md"
+  ],
+  "scripts": {
+    "test": "node --test test/*.test.mjs"
+  },
+  "dependencies": {
+    "@inneranimalmedia/agentsam-errors": "2.6.8"
+  },
+  "engines": {
+    "node": ">=22 <25"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SamPrimeaux/agentsam-sdk.git",
+    "directory": "packages/agentsam-goap"
+  }
+}