@inneranimalmedia/agentsam-sdk 2.6.5 → 2.6.8

package/packages/agentsam-nav/package.json

@@ -1,18 +1,31 @@
 {
   "name": "@inneranimalmedia/agentsam-nav",
-  "version": "0.1.0",
+  "version": "2.6.7",
   "private": false,
   "description": "Reusable responsive navigation primitives for AgentSam dashboard-family applications.",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "files": ["dist", "README.md"],
-  "sideEffects": ["**/*.css"],
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "sideEffects": [
+    "**/*.css"
+  ],
   "license": "MIT",
-  "publishConfig": { "access": "public" },
+  "publishConfig": {
+    "access": "public"
+  },
   "exports": {
-    ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
-    "./browser": { "types": "./dist/browser.d.ts", "import": "./dist/browser.js" },
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./browser": {
+      "types": "./dist/browser.d.ts",
+      "import": "./dist/browser.js"
+    },
     "./browser.global.js": "./dist/browser.global.js",
     "./theme.css": "./dist/theme.css",
     "./legacy.css": "./dist/legacy.css"
@@ -39,5 +52,10 @@
     "@radix-ui/react-dialog": "^1.1.23",
     "@radix-ui/react-dropdown-menu": "^2.1.24",
     "lucide-react": "^0.510.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SamPrimeaux/agentsam-sdk.git",
+    "directory": "packages/agentsam-nav"
   }
 }

package/packages/agentsam-queue-control/README.md

@@ -100,7 +100,7 @@ Dispatch supports exact kinds and prefix wildcards such as `cad.*`.
 
 ## Relationship to WorkGraph
 
-Queue Control does not replace `@inneranimalmedia/work-graph`. A WorkGraph can release ready nodes; Queue Control then schedules those nodes to an executor. Completion receipts can be projected back into the graph by the host.
+Queue Control does not replace `@inneranimalmedia/agentsam-work-graph`. A WorkGraph can release ready nodes; Queue Control then schedules those nodes to an executor. Completion receipts can be projected back into the graph by the host.
 
 ## Relationship to AgentSam tools and MCP
 

package/packages/agentsam-queue-control/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-queue-control",
-  "version": "0.1.0",
+  "version": "2.6.7",
   "description": "Portable AgentSam queue, job-routing, batching, and execution-control primitives with Cloudflare-first adapters.",
   "type": "module",
   "main": "./src/index.js",
@@ -27,5 +27,10 @@
   "publishConfig": {
     "access": "public"
   },
-  "license": "MIT"
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SamPrimeaux/agentsam-sdk.git",
+    "directory": "packages/agentsam-queue-control"
+  }
 }

package/packages/agentsam-rapid-rust/src/main.rs

@@ -8,7 +8,7 @@ use std::time::{SystemTime, UNIX_EPOCH};
 
 const WORKER_VERSION: &str = "0.8.7";
 const WORKER_BUILD_VERSION: &str = "0.8.7";
-const WRANGLER_VERSION: &str = "4.141.0";
+const WRANGLER_VERSION: &str = "4.145.0";
 const COMPATIBILITY_DATE: &str = "2026-09-27";
 
 #[derive(Parser, Debug)]

package/packages/agentsam-repository/package.json

@@ -1,7 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-repository",
-  "version": "0.1.0",
-  "private": true,
+  "version": "2.6.7",
   "description": "Portable AgentSam repository identity, Merkle, semantic file metadata, persistence, and repository graph runtime contracts.",
   "type": "module",
   "main": "./src/index.js",
@@ -21,5 +20,16 @@
   },
   "engines": {
     "node": ">=22 <25"
-  }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SamPrimeaux/agentsam-sdk.git",
+    "directory": "packages/agentsam-repository"
+  },
+  "files": [
+    "src"
+  ]
 }

package/packages/agentsam-repository/src/goap.js

@@ -5,7 +5,6 @@ import { execFileSync } from 'node:child_process';
 import { tryResolveGitContext } from './git-context.js';
 import {
   createTicketId,
-  createAgentRunId,
   generateTicketCreateSql,
   generateTicketCloseSql,
 } from './tickets.js';
@@ -252,7 +251,6 @@ export async function createGoapGoal({
   if (!accId) throw new Error('account_id_required');
 
   const ticketId = createTicketId();
-  const agentRunId = createAgentRunId();
   const now = Math.floor(Date.now() / 1000);
 
   const { sql: ticketSql } = generateTicketCreateSql({
@@ -268,7 +266,6 @@ export async function createGoapGoal({
     repositoryId: repoId,
     ownerRef: repoId,
     source: 'agentsam_sdk',
-    agentRunId,
     now,
   });
 
@@ -305,7 +302,7 @@ ON CONFLICT(repository_id) DO UPDATE SET
   return {
     ok: true,
     ticketId,
-    agentRunId,
+    agentRunId: null,
     title: cleanTitle,
     status,
     priority,
@@ -338,23 +335,17 @@ export async function switchGoapGoal({
     query,
     wranglerConfig,
     databaseName,
-    sql: `SELECT id, account_id, repository_id FROM agentsam_tickets WHERE id = '${sqlEsc(tid)}' LIMIT 1;`,
+    sql: `SELECT id, account_id, repository_id, agent_run_id FROM agentsam_tickets WHERE id = '${sqlEsc(tid)}' LIMIT 1;`,
   });
   const ticket = lookup?.[0]?.results?.[0];
   const accId = clean(accountId);
   if (!ticket) throw new Error('ticket_not_found');
   if (ticket.repository_id && ticket.repository_id !== repoId) throw new Error('ticket_repository_mismatch');
   if (!accId || ticket.account_id !== accId) throw new Error('ticket_account_mismatch');
-  const runId = createAgentRunId();
 
   const sql = `
-INSERT INTO agentsam_agent_run (
-  id, account_id, mode, status, started_at_unix, created_at_unix, updated_at_unix
-) VALUES ('${sqlEsc(runId)}', '${sqlEsc(accId)}', 'agent', 'running', ${now}, ${now}, ${now});
-
 UPDATE agentsam_tickets SET
   status = 'active',
-  agent_run_id = '${sqlEsc(runId)}',
   updated_at = ${now}
 WHERE id = '${sqlEsc(tid)}';
 
@@ -385,7 +376,7 @@ ON CONFLICT(repository_id) DO UPDATE SET
     ok: true,
     ticketId: tid,
     repositoryId: repoId,
-    agentRunId: runId,
+    agentRunId: ticket.agent_run_id || null,
   };
 }
 
@@ -420,7 +411,7 @@ export async function closeGoapGoal({
     query,
     wranglerConfig,
     databaseName,
-    sql: `SELECT id, account_id, repository_id FROM agentsam_tickets WHERE id = '${sqlEsc(tid)}' LIMIT 1;`,
+    sql: `SELECT id, account_id, repository_id, agent_run_id FROM agentsam_tickets WHERE id = '${sqlEsc(tid)}' LIMIT 1;`,
   });
   const ticket = lookup?.[0]?.results?.[0];
   const accId = clean(accountId);
@@ -471,6 +462,8 @@ export function renderGoapStatus(state = {}) {
   const cp = state.cursor || {};
   const git = state.git || {};
   const headSha = git?.revisionSha || git?.headSha || 'unknown';
+  const localPlan = state.localPlan || null;
+  const world = state.worldSnapshot || null;
 
   return [
     '================================================================================',
@@ -487,6 +480,12 @@ export function renderGoapStatus(state = {}) {
     `Checkpoint:    ${ws.checkpoint_sha ? ws.checkpoint_sha.slice(0, 10) : 'none'} (Tracker cursor: ${cp.last_sha ? cp.last_sha.slice(0, 10) : 'none'})`,
     `Last Action:   ${ws.last_agent_action || 'none'}`,
     `Updated:       ${formatDate(ws.updated_at || ticket.updated_at)}`,
+    ...(localPlan ? [
+      `Plan:          ${localPlan.title} (${localPlan.tasks_done}/${localPlan.tasks_total})`,
+      `World:         ${world?.snapshot_id || 'local'} · Merkle ${world?.merkle_root ? world.merkle_root.slice(0, 20) + '…' : 'unknown'}`,
+      `Knowledge:     ${world?.knowledge_freshness?.status || 'unknown'}${world?.knowledge_freshness?.reason ? ' (' + world.knowledge_freshness.reason + ')' : ''}`,
+      `Actions:       ${world?.actions?.available?.length || 0} available · ${world?.actions?.blocked?.length || 0} blocked`,
+    ] : []),
     '--------------------------------------------------------------------------------',
     ...(!ticket.id && !ws.current_task_id ? [
       '  No active goal. What are you trying to achieve?',
@@ -499,7 +498,7 @@ export function renderGoapStatus(state = {}) {
       : ['  (no commits ingested yet)']),
     ...(state.stepsUnavailable
       ? ['--------------------------------------------------------------------------------',
-         '  (note: step/plan linkage unavailable — agentsam_plans has no agent_run_id column yet)']
+         '  (note: remote step/plan linkage is unavailable for this repository)']
       : []),
     '================================================================================',
   ].join('\n');

package/packages/agentsam-repository/src/source-types.js

@@ -1,3 +1,11 @@
+/**
+ * Source-type helpers for AgentSam repository intelligence.
+ *
+ * SSOT taxonomy (extensions / kind / ast / knowledge):
+ *   contracts/source-types.v1.json
+ * Rust machine inspect loads the same contract. Keep this JS table aligned when
+ * adding languages until a shared loader is wired for both runtimes.
+ */
 import path from 'node:path';
 
 const DEFINITIONS = [

package/packages/agentsam-repository/src/tickets.js

@@ -31,7 +31,11 @@ export function createTicketId() {
 }
 
 /**
- * Generate SQL for ticket creation with mandatory agentsam_agent_run when active.
+ * Generate SQL for ticket creation.
+ *
+ * Goal state and execution state are separate nouns. Creating/activating a
+ * ticket must not fabricate an agentsam_agent_run. Callers may link an
+ * already-created real run explicitly via agentRunId.
  */
 export function generateTicketCreateSql({
   accountId,
@@ -59,16 +63,7 @@ export function generateTicketCreateSql({
   if (!tTitle) throw new Error('title_required');
 
   const statements = [];
-  let runId = clean(agentRunId);
-
-  if (status === 'active' && !runId) {
-    runId = createAgentRunId();
-    statements.push(`INSERT INTO agentsam_agent_run (
-  id, account_id, mode, status, started_at_unix, created_at_unix, updated_at_unix
-) VALUES (
-  ${sqlText(runId)}, ${sqlText(account)}, 'agent', 'running', ${sqlInt(now)}, ${sqlInt(now)}, ${sqlInt(now)}
-);`);
-  }
+  const runId = clean(agentRunId);
 
   statements.push(`INSERT INTO agentsam_tickets (
   id, title, description, status, status_reason, project, subsystem,
@@ -98,12 +93,15 @@ export function generateTicketCreateSql({
 }
 
 /**
- * Generate SQL to activate a ticket and wire a real agentsam_agent_run row.
+ * Generate SQL to activate a ticket.
+ *
+ * agentRunId is optional and must reference a run created by the execution
+ * subsystem. Activation itself never creates a run.
  */
 export function generateTicketActivationSql({
   accountId,
   ticketId,
-  agentRunId = createAgentRunId(),
+  agentRunId = null,
   statusReason = null,
   now = Math.floor(Date.now() / 1000),
 }) {
@@ -111,18 +109,13 @@ export function generateTicketActivationSql({
   const tid = clean(ticketId);
   if (!account) throw new Error('account_id_required');
   if (!tid) throw new Error('ticket_id_required');
-  const runId = clean(agentRunId) || createAgentRunId();
+  const runId = clean(agentRunId);
 
   const statements = [
-    `INSERT INTO agentsam_agent_run (
-  id, account_id, mode, status, started_at_unix, created_at_unix, updated_at_unix
-) VALUES (
-  ${sqlText(runId)}, ${sqlText(account)}, 'agent', 'running', ${sqlInt(now)}, ${sqlInt(now)}, ${sqlInt(now)}
-);`,
     `UPDATE agentsam_tickets SET
   status = 'active',
   status_reason = ${sqlText(statusReason)},
-  agent_run_id = COALESCE(agent_run_id, ${sqlText(runId)}),
+  agent_run_id = COALESCE(${sqlText(runId || null)}, agent_run_id),
   updated_at = ${sqlInt(now)},
   closed_at = NULL
 WHERE id = ${sqlText(tid)};`,
@@ -130,14 +123,14 @@ WHERE id = ${sqlText(tid)};`,
   id, ticket_id, event_type, from_status, to_status, detail, actor_type, created_at
 ) VALUES (
   'tke_' || lower(hex(randomblob(8))), ${sqlText(tid)}, 'status_change', 'backlog', 'active',
-  'activated_with_agent_run', 'agentsam_sdk', ${sqlInt(now)}
+  'activated', 'agentsam_sdk', ${sqlInt(now)}
 );`,
   ];
 
   return {
     sql: statements.join('\n\n'),
     ticketId: tid,
-    agentRunId: runId,
+    agentRunId: runId || null,
   };
 }
 

package/packages/agentsam-repository/test/goap-tickets-workspace-state.test.mjs

@@ -30,7 +30,7 @@ test('generateTicketCreateSql requires account_id and title', () => {
   assert.throws(() => generateTicketCreateSql({ accountId: 'acc_1' }), /title_required/);
 });
 
-test('generateTicketCreateSql with status=active mints an agent_run and links it on the ticket insert', () => {
+test('generateTicketCreateSql with status=active does not fabricate an agent run', () => {
   const { sql, ticketId, agentRunId } = generateTicketCreateSql({
     accountId: 'acc_1',
     title: 'Wire GOAP planner',
@@ -38,12 +38,10 @@ test('generateTicketCreateSql with status=active mints an agent_run and links it
     now: 1000,
   });
   assert.ok(ticketId.startsWith('tkt_'));
-  assert.ok(agentRunId && agentRunId.startsWith('arun_'));
-  assert.match(sql, /INSERT INTO agentsam_agent_run/);
+  assert.equal(agentRunId, null);
+  assert.doesNotMatch(sql, /INSERT INTO agentsam_agent_run/);
   assert.match(sql, /INSERT INTO agentsam_tickets/);
   assert.match(sql, /INSERT INTO agentsam_ticket_events/);
-  const runOccurrences = sql.split(agentRunId).length - 1;
-  assert.ok(runOccurrences >= 2, 'agent_run id should appear in both the run insert and the ticket insert');
 });
 
 test('generateTicketCreateSql with status=backlog does not mint an agent_run', () => {
@@ -83,16 +81,29 @@ test('generateTicketActivationSql requires account and ticket id', () => {
   assert.throws(() => generateTicketActivationSql({ accountId: 'a' }), /ticket_id_required/);
 });
 
-test('generateTicketActivationSql wires a fresh agent_run and clears closed_at', () => {
+test('generateTicketActivationSql changes focus without fabricating an agent run', () => {
   const { sql, agentRunId } = generateTicketActivationSql({
     accountId: 'acc_1',
     ticketId: 'tkt_abc',
     now: 1000,
   });
-  assert.ok(agentRunId.startsWith('arun_'));
+  assert.equal(agentRunId, null);
+  assert.doesNotMatch(sql, /INSERT INTO agentsam_agent_run/);
   assert.match(sql, /status = 'active'/);
   assert.match(sql, /closed_at = NULL/);
-  assert.match(sql, /COALESCE\(agent_run_id,/);
+  assert.match(sql, /agent_run_id = COALESCE\(NULL, agent_run_id\)/);
+});
+
+test('generateTicketActivationSql can link a run created by the execution subsystem', () => {
+  const { sql, agentRunId } = generateTicketActivationSql({
+    accountId: 'acc_1',
+    ticketId: 'tkt_abc',
+    agentRunId: 'arun_real',
+    now: 1000,
+  });
+  assert.equal(agentRunId, 'arun_real');
+  assert.doesNotMatch(sql, /INSERT INTO agentsam_agent_run/);
+  assert.match(sql, /agent_run_id = COALESCE\('arun_real', agent_run_id\)/);
 });
 
 test('generateTicketCloseSql maps shipped -> completed and abandoned/blocked -> failed run status', () => {

package/packages/agentsam-vault/package.json

@@ -1,9 +1,8 @@
 {
   "name": "@inneranimalmedia/agentsam-vault",
-  "version": "0.1.0",
-  "private": true,
+  "version": "2.6.7",
   "type": "module",
-  "description": "AgentSam credential vault core \u2014 contracts, AES-GCM crypto, provider registry, resolver. UI lives in agentsam-key-manager.",
+  "description": "AgentSam credential vault core — contracts, AES-GCM crypto, provider registry, resolver. UI lives in agentsam-key-manager.",
   "main": "./src/index.js",
   "types": "./src/index.d.ts",
   "exports": {
@@ -28,5 +27,16 @@
   },
   "engines": {
     "node": ">=20"
-  }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SamPrimeaux/agentsam-sdk.git",
+    "directory": "packages/agentsam-vault"
+  },
+  "files": [
+    "src"
+  ]
 }

package/packages/agentsam-workbench/package.json

@@ -1,7 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-workbench",
-  "version": "0.1.0",
-  "private": true,
+  "version": "2.6.7",
   "description": "Reusable AgentSam workbench primitives for agent threads, composer, browser, terminal and resizable work surfaces.",
   "type": "module",
   "main": "./src/index.ts",
@@ -10,6 +9,7 @@
     "./agent": "./src/agent/index.ts",
     "./agent/mini-agentsam.css": "./src/agent/mini-agentsam.css",
     "./agent/contextual-composer.css": "./src/agent/contextual-composer.css",
+    "./agent/tool-permission.css": "./src/agent/tool-permission.css",
     "./shell": "./src/shell/index.ts",
     "./browser": "./src/browser/index.ts",
     "./terminal": "./src/terminal/index.ts",
@@ -22,7 +22,7 @@
     "test": "node --test test/*.test.mjs"
   },
   "dependencies": {
-    "@inneranimalmedia/agentsam-contracts": "0.1.0"
+    "@inneranimalmedia/agentsam-contracts": "2.6.7"
   },
   "peerDependencies": {
     "react": ">=18",
@@ -34,5 +34,16 @@
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
     "typescript": "^5.9.3"
-  }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SamPrimeaux/agentsam-sdk.git",
+    "directory": "packages/agentsam-workbench"
+  },
+  "files": [
+    "src"
+  ]
 }

package/packages/agentsam-workbench/src/agent/ToolPermissionRequest.tsx

@@ -0,0 +1,94 @@
+import type {
+  AgentToolPermissionDecision,
+  AgentToolPermissionRequest as AgentToolPermissionRequestContract,
+} from '@inneranimalmedia/agentsam-contracts';
+
+export interface ToolPermissionRequestProps {
+  request: AgentToolPermissionRequestContract;
+  busy?: boolean;
+  className?: string;
+  onDecision: (decision: AgentToolPermissionDecision) => void | Promise<void>;
+}
+
+function permissionSummary(request: AgentToolPermissionRequestContract) {
+  if (request.summary) return request.summary;
+  const provider = request.provider ? ' through ' + request.provider : '';
+  return 'AgentSam wants to use ' + request.displayName + provider + '.';
+}
+
+export function ToolPermissionRequest({
+  request,
+  busy = false,
+  className,
+  onDecision,
+}: ToolPermissionRequestProps) {
+  const titleId = request.id + '-title';
+  const descriptionId = request.id + '-description';
+  const rootClass = 'agentsam-tool-permission-overlay' + (className ? ' ' + className : '');
+  return (
+    <div className={rootClass} role="presentation">
+      <section
+        className="agentsam-tool-permission-card"
+        role="alertdialog"
+        aria-modal="true"
+        aria-labelledby={titleId}
+        aria-describedby={descriptionId}
+      >
+        <header className="agentsam-tool-permission-header">
+          <div className="agentsam-tool-permission-mark" aria-hidden="true">AS</div>
+          <div>
+            <h2 id={titleId}>Allow AgentSam to use {request.displayName}?</h2>
+            <p id={descriptionId}>{permissionSummary(request)}</p>
+          </div>
+        </header>
+
+        <div className="agentsam-tool-permission-body">
+          <dl className="agentsam-tool-permission-facts">
+            <div><dt>Tool</dt><dd>{request.toolKey}</dd></div>
+            {request.provider ? <div><dt>Provider</dt><dd>{request.provider}</dd></div> : null}
+            {request.scope ? <div><dt>Scope</dt><dd>{request.scope}</dd></div> : null}
+            {request.riskLevel ? <div><dt>Risk</dt><dd>{request.riskLevel}</dd></div> : null}
+          </dl>
+
+          {request.sharedData?.length ? (
+            <div className="agentsam-tool-permission-shared">
+              <h3>Sharing data includes:</h3>
+              <dl>
+                {request.sharedData.map((item) => (
+                  <div key={item.label + ':' + item.value}>
+                    <dt>{item.label}</dt>
+                    <dd>{item.value}</dd>
+                  </div>
+                ))}
+              </dl>
+            </div>
+          ) : null}
+
+          {request.destructive ? (
+            <p className="agentsam-tool-permission-warning">
+              This action may modify or delete data. Review the scope before allowing it.
+            </p>
+          ) : null}
+        </div>
+
+        <footer className="agentsam-tool-permission-actions">
+          <button type="button" disabled={busy} onClick={() => void onDecision('deny')}>
+            Deny
+          </button>
+          <span className="agentsam-tool-permission-spacer" />
+          <button type="button" disabled={busy} onClick={() => void onDecision('allow_once')}>
+            Allow once
+          </button>
+          <button
+            type="button"
+            className="agentsam-tool-permission-primary"
+            disabled={busy}
+            onClick={() => void onDecision('allow_session')}
+          >
+            Allow for this session
+          </button>
+        </footer>
+      </section>
+    </div>
+  );
+}

package/packages/agentsam-workbench/src/agent/index.ts

@@ -8,3 +8,5 @@ export * from './ConnectedAgentPanel';
 export * from './GoalStatusStrip';
 export * from './MiniAgentSam';
 export * from './ContextualComposer';
+
+export * from './ToolPermissionRequest';