@loomcycle/client 0.11.5 → 0.12.7

package/dist/cjs/client.js

@@ -89,6 +89,8 @@ class LoomcycleClient {
             body.user_tier = opts.userTier;
         if (opts.userBearer !== undefined)
             body.user_bearer = opts.userBearer;
+        if (opts.userCredentials !== undefined)
+            body.user_credentials = opts.userCredentials;
         yield* this.streamSSE("/v1/runs", body, opts.signal, opts.debug);
     }
     /**
@@ -125,6 +127,8 @@ class LoomcycleClient {
             body.user_tier = opts.userTier;
         if (opts.userBearer !== undefined)
             body.user_bearer = opts.userBearer;
+        if (opts.userCredentials !== undefined)
+            body.user_credentials = opts.userCredentials;
         yield* this.streamSSE(`/v1/sessions/${encodeURIComponent(opts.sessionId)}/messages`, body, opts.signal, opts.debug);
     }
     // ---- Agent metadata ----
@@ -422,6 +426,38 @@ class LoomcycleClient {
     async mcpServerDef(input, opts) {
         return (0, fetch_helpers_js_1.postJSON)(this.ctx, "/v1/_mcpserverdef", input, opts);
     }
+    /** Invoke the v1.x RFC E ScheduleDef substrate tool over HTTP.
+     *  Author + fork + retire scheduled-run definitions at runtime.
+     *  Mirror of {@link LoomcycleClient.agentDef} for schedules — the
+     *  primary use case is JobEmber-style "fork a yaml template
+     *  per-user with their bearer + tier cron" workflows.
+     *
+     *  Operator-admin-only: this endpoint requires the bearer token.
+     *
+     *  Op-discriminated input: `{op: "create" | "fork" | "get" |
+     *  "list" | "retire", ...}`. Note that ScheduleDef has 5 ops
+     *  (no separate `promote` — forks auto-promote by default per
+     *  RFC E's worked example; no `verify` — no content_sha256 in
+     *  v1.x).
+     *
+     *  Sharp edges (substrate refuses these):
+     *  - Name colliding with a static cfg.ScheduledRuns entry is
+     *    refused on `create` (yaml is ground truth; use `fork` to
+     *    derive a new version).
+     *  - Fork against a template with `required_credentials` must
+     *    supply all keys in `user_credentials` — loud-fail at fork
+     *    time rather than silent ingestion-time failure when the
+     *    sweeper fires.
+     *  - Cron syntax is validated server-side; invalid expressions
+     *    refuse with a parse error.
+     *
+     *  Raises {@link SubstrateToolRefusedError} on tool-level refusals
+     *  (static-name collision, missing required credential, invalid
+     *  cron, etc.); {@link InvalidArgumentError} on 400 (malformed
+     *  JSON); {@link AuthError} on 401. */
+    async scheduleDef(input, opts) {
+        return (0, fetch_helpers_js_1.postJSON)(this.ctx, "/v1/_scheduledef", input, opts);
+    }
     // ---- v0.10.3 Library v2 enumeration (read-only, merged yaml+substrate) ----
     /** List every agent the runtime knows about — yaml-static + dynamic
      *  AgentDefs merged into one envelope per name. Each entry carries

package/dist/cjs/index.js

@@ -43,9 +43,11 @@
  *     listRunInterrupts(runId, opts?): Promise<InterruptListResponse>
  *     resolveInterrupt(runId, interruptId, opts): Promise<unknown>
  *
- *     // Substrate admin (v0.8.22)
+ *     // Substrate admin (v0.8.22; mcpServerDef v0.9.x; scheduleDef v1.x)
  *     agentDef(input): Promise<SubstrateToolResponse>
  *     skillDef(input): Promise<SubstrateToolResponse>
+ *     mcpServerDef(input): Promise<SubstrateToolResponse>
+ *     scheduleDef(input): Promise<SubstrateToolResponse>
  *
  *     // Library v2 enumeration (v0.10.3 — yaml+substrate merged)
  *     listLibraryAgents(): Promise<LibraryListResponse<LibraryAgentDefinition>>

package/dist/client.d.ts

@@ -289,6 +289,38 @@ export declare class LoomcycleClient {
     mcpServerDef(input: SubstrateToolInput, opts?: {
         signal?: AbortSignal;
     }): Promise<SubstrateToolResponse>;
+    /** Invoke the v1.x RFC E ScheduleDef substrate tool over HTTP.
+     *  Author + fork + retire scheduled-run definitions at runtime.
+     *  Mirror of {@link LoomcycleClient.agentDef} for schedules — the
+     *  primary use case is JobEmber-style "fork a yaml template
+     *  per-user with their bearer + tier cron" workflows.
+     *
+     *  Operator-admin-only: this endpoint requires the bearer token.
+     *
+     *  Op-discriminated input: `{op: "create" | "fork" | "get" |
+     *  "list" | "retire", ...}`. Note that ScheduleDef has 5 ops
+     *  (no separate `promote` — forks auto-promote by default per
+     *  RFC E's worked example; no `verify` — no content_sha256 in
+     *  v1.x).
+     *
+     *  Sharp edges (substrate refuses these):
+     *  - Name colliding with a static cfg.ScheduledRuns entry is
+     *    refused on `create` (yaml is ground truth; use `fork` to
+     *    derive a new version).
+     *  - Fork against a template with `required_credentials` must
+     *    supply all keys in `user_credentials` — loud-fail at fork
+     *    time rather than silent ingestion-time failure when the
+     *    sweeper fires.
+     *  - Cron syntax is validated server-side; invalid expressions
+     *    refuse with a parse error.
+     *
+     *  Raises {@link SubstrateToolRefusedError} on tool-level refusals
+     *  (static-name collision, missing required credential, invalid
+     *  cron, etc.); {@link InvalidArgumentError} on 400 (malformed
+     *  JSON); {@link AuthError} on 401. */
+    scheduleDef(input: SubstrateToolInput, opts?: {
+        signal?: AbortSignal;
+    }): Promise<SubstrateToolResponse>;
     /** List every agent the runtime knows about — yaml-static + dynamic
      *  AgentDefs merged into one envelope per name. Each entry carries
      *  `source: "static-only" | "dynamic-only" | "both"` so callers can

package/dist/client.js

@@ -86,6 +86,8 @@ export class LoomcycleClient {
             body.user_tier = opts.userTier;
         if (opts.userBearer !== undefined)
             body.user_bearer = opts.userBearer;
+        if (opts.userCredentials !== undefined)
+            body.user_credentials = opts.userCredentials;
         yield* this.streamSSE("/v1/runs", body, opts.signal, opts.debug);
     }
     /**
@@ -122,6 +124,8 @@ export class LoomcycleClient {
             body.user_tier = opts.userTier;
         if (opts.userBearer !== undefined)
             body.user_bearer = opts.userBearer;
+        if (opts.userCredentials !== undefined)
+            body.user_credentials = opts.userCredentials;
         yield* this.streamSSE(`/v1/sessions/${encodeURIComponent(opts.sessionId)}/messages`, body, opts.signal, opts.debug);
     }
     // ---- Agent metadata ----
@@ -419,6 +423,38 @@ export class LoomcycleClient {
     async mcpServerDef(input, opts) {
         return postJSON(this.ctx, "/v1/_mcpserverdef", input, opts);
     }
+    /** Invoke the v1.x RFC E ScheduleDef substrate tool over HTTP.
+     *  Author + fork + retire scheduled-run definitions at runtime.
+     *  Mirror of {@link LoomcycleClient.agentDef} for schedules — the
+     *  primary use case is JobEmber-style "fork a yaml template
+     *  per-user with their bearer + tier cron" workflows.
+     *
+     *  Operator-admin-only: this endpoint requires the bearer token.
+     *
+     *  Op-discriminated input: `{op: "create" | "fork" | "get" |
+     *  "list" | "retire", ...}`. Note that ScheduleDef has 5 ops
+     *  (no separate `promote` — forks auto-promote by default per
+     *  RFC E's worked example; no `verify` — no content_sha256 in
+     *  v1.x).
+     *
+     *  Sharp edges (substrate refuses these):
+     *  - Name colliding with a static cfg.ScheduledRuns entry is
+     *    refused on `create` (yaml is ground truth; use `fork` to
+     *    derive a new version).
+     *  - Fork against a template with `required_credentials` must
+     *    supply all keys in `user_credentials` — loud-fail at fork
+     *    time rather than silent ingestion-time failure when the
+     *    sweeper fires.
+     *  - Cron syntax is validated server-side; invalid expressions
+     *    refuse with a parse error.
+     *
+     *  Raises {@link SubstrateToolRefusedError} on tool-level refusals
+     *  (static-name collision, missing required credential, invalid
+     *  cron, etc.); {@link InvalidArgumentError} on 400 (malformed
+     *  JSON); {@link AuthError} on 401. */
+    async scheduleDef(input, opts) {
+        return postJSON(this.ctx, "/v1/_scheduledef", input, opts);
+    }
     // ---- v0.10.3 Library v2 enumeration (read-only, merged yaml+substrate) ----
     /** List every agent the runtime knows about — yaml-static + dynamic
      *  AgentDefs merged into one envelope per name. Each entry carries

package/dist/index.d.ts

@@ -42,9 +42,11 @@
  *     listRunInterrupts(runId, opts?): Promise<InterruptListResponse>
  *     resolveInterrupt(runId, interruptId, opts): Promise<unknown>
  *
- *     // Substrate admin (v0.8.22)
+ *     // Substrate admin (v0.8.22; mcpServerDef v0.9.x; scheduleDef v1.x)
  *     agentDef(input): Promise<SubstrateToolResponse>
  *     skillDef(input): Promise<SubstrateToolResponse>
+ *     mcpServerDef(input): Promise<SubstrateToolResponse>
+ *     scheduleDef(input): Promise<SubstrateToolResponse>
  *
  *     // Library v2 enumeration (v0.10.3 — yaml+substrate merged)
  *     listLibraryAgents(): Promise<LibraryListResponse<LibraryAgentDefinition>>

package/dist/index.js

@@ -42,9 +42,11 @@
  *     listRunInterrupts(runId, opts?): Promise<InterruptListResponse>
  *     resolveInterrupt(runId, interruptId, opts): Promise<unknown>
  *
- *     // Substrate admin (v0.8.22)
+ *     // Substrate admin (v0.8.22; mcpServerDef v0.9.x; scheduleDef v1.x)
  *     agentDef(input): Promise<SubstrateToolResponse>
  *     skillDef(input): Promise<SubstrateToolResponse>
+ *     mcpServerDef(input): Promise<SubstrateToolResponse>
+ *     scheduleDef(input): Promise<SubstrateToolResponse>
  *
  *     // Library v2 enumeration (v0.10.3 — yaml+substrate merged)
  *     listLibraryAgents(): Promise<LibraryListResponse<LibraryAgentDefinition>>

package/dist/types.d.ts

@@ -130,6 +130,15 @@ export interface RunOptions {
      *  (static-bearer setups unaffected). Sub-agents inherit identically.
      *  Never persisted; never logged in full. */
     userBearer?: string;
+    /** Per-tool named credentials map (v1.x RFC F). Per-MCP-server bearers
+     *  keyed by operator-chosen name (convention: the `mcp_servers.<name>`
+     *  yaml key). Substituted into MCP HTTP header values containing
+     *  `${run.credentials.<name>}` at outbound request-build time. Keys
+     *  match `[a-zA-Z0-9_-]{1,64}`; values arbitrary strings. Sub-agents
+     *  inherit the whole map. Coexists with `userBearer` — the legacy
+     *  field auto-promotes to `userCredentials.default` for back-compat
+     *  with v0.8.x flows. Never persisted; never logged. */
+    userCredentials?: Record<string, string>;
     /** Opt-in observability: when true, the iterator emits client-
      *  synthesized `{ type: "_meta", meta_subtype: "stream_open" | "stream_close" }`
      *  events around the real event stream. `meta_reason` carries the
@@ -166,6 +175,10 @@ export interface ContinueOptions {
      *  so different continuations in the same session may carry
      *  different end-user tokens. */
     userBearer?: string;
+    /** Per-tool named credentials map (v1.x RFC F). See
+     *  {@link RunOptions.userCredentials} for the full shape — same
+     *  semantics, supplied per-continuation rather than per-fresh-run. */
+    userCredentials?: Record<string, string>;
     /** Opt-in observability: see {@link RunOptions.debug}. Same shape. */
     debug?: boolean;
     signal?: AbortSignal;
@@ -192,6 +205,7 @@ export interface AgentUsage {
     cache_creation_tokens?: number;
     cache_read_tokens?: number;
     model?: string;
+    provider?: string;
 }
 export interface Agent {
     agent_id: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loomcycle/client",
-  "version": "0.11.5",
+  "version": "0.12.7",
   "description": "TypeScript client for the loomcycle sidecar (HTTP+SSE). 46 methods covering run streaming, agent metadata, pause/resume/state, snapshot lifecycle, memory admin (incl. v0.9.0 Vector Memory embed_stats + reembed AND v0.11.5 setMemoryEntry + deleteMemoryEntry), interruption resolve, hook management, v0.8.22 substrate admin (agentDef + skillDef), v0.9.x n8n Phase 0 (listChannels + streamUserRunStates), v0.9.x Channel CRUD (publishChannel + subscribeChannel + peekChannel + ackChannel), v0.11.5 Channel admin CRUD (createChannel + updateChannel + deleteChannel — runtime substrate; yaml channels refuse mutation with HTTP 409), v0.9.x content_sha256 verify, v0.9.1 transcript first-cycle, v0.9.x dynamic MCP server registration (mcpServerDef + MCPServerDefVerifyResult), v0.10.3 Library v2 enumeration (listLibraryAgents + listLibrarySkills + listLibraryMcpServers), and v0.11.0 LLM Gateway (llmChat + llmStream — direct provider routing without agent overhead; primary target is n8n's LoomCycleChatModel AI Agent sub-node and any LangChain-compatible consumer). v0.10.1 — dual ESM + CommonJS distribution (additive — ESM consumers unchanged; CJS consumers like n8n's community-node loader now work).",
   "license": "Apache-2.0",
   "type": "module",