@loomcycle/client 1.10.0 → 1.12.1

package/README.md

@@ -12,6 +12,7 @@ TypeScript client for the [loomcycle](https://github.com/denn-gubsky/loomcycle)
 
 ### What's new since v0.8.18
 
+- **Path/Document browse-by-subject + the full Document op set** (v1.12.1, RFC AS/AK) — `path(input, opts)` and `document(input, opts)` accept optional `scopeId` / `tenant` browse overrides, sent as `?scope_id=` / `?tenant=` query params (the server reads them from the URL and re-checks authorization — a tenant principal's `tenant` is ignored, `scopeId` picks any subject it may see); omit both to browse your own subject (byte-identical to the pre-RFC-AS request). `DocumentToolInput.op` now covers all 16 backend ops — adds **`set_path`** (attach/re-home a Path-tree name for an existing document), **`export_md`** (render to Markdown; `include_metadata: false` for clean human-facing output), and **`import_md`** (build a document from export_md-shaped `markdown`). Additive — existing `path()` / `document()` callers are unchanged.
 - **`interactiveSession` / `sendRunInput` / `streamRunByID` + the `interactive` flag** (v1.1.1, RFC AI) — the interactive agentic session, the adapter port of the Web UI's run terminal. Pass `interactive: true` to `runStreaming` / `continueSession` to start a **persistent** run that parks at end_turn (an `awaiting_input` frame) instead of ending; **`sendRunInput(runId, text)`** steers it (the response arrives on the same stream); **`streamRunByID(runId, {fromSeq})`** re-attaches by run_id (the operator's prior turns replay as `steer` events, `user_input.source === "replay"`, so a cold client — e.g. another device — reconstructs the whole conversation). The high-level **`client.interactiveSession({agent, segments})`** returns an `InteractiveSession` with `events()` / `send()` / `cancel()`; **`attachInteractiveSession(runId)`** resumes one. The `AgentEvent` union gains `awaiting_input` / `steer` / `context_compaction`.
 - **`volumeDef` / `listVolumes` / `listEphemeralVolumes`** (v0.35.0, RFC AH) — the dynamic filesystem-volume surface. `volumeDef` is the op-discriminated substrate tool (`create` / `get` / `list` / `delete` / `purge`); a Volume is **flat** (a pointer to mutable on-disk state, not a versioned def), so `delete` unmaps + leaves files while `purge` removes the row **and** the directory tree — there is no retire/promote/fork. Tenant-confined (`ScopeTenant`): the runtime derives the path inside an operator-blessed `dynamic_root`, so you pass `{name, mode}`, never a host path. `listVolumes()` / `listEphemeralVolumes()` return the tenant's persistent + live run-scoped volumes; host paths are redacted (`""`) for a non-operator caller.
 - **`ensureMcpServer` / `mcpServerDefVerify`** (v0.18.0) — typed ergonomics for the dynamic-MCP dedup flow. `ensureMcpServer({name, url, headers?, rediscover?})` registers a callback MCP server **idempotently**: it runs `create` (a no-op in loomcycle ≥ v0.18.0 when the active def already carries identical content) plus an optional `rediscover` (a no-op on unchanged tools), and returns `{defId, version, changed, discoveredToolCount?}` — so a consumer re-registering on every startup gets `changed: false` once its registration content is stable. Keep `${run.*}` / `${LOOMCYCLE_*}` header placeholders **literal** (don't bake a per-restart token) or the content varies each boot and dedup can't engage. `mcpServerDefVerify(name, sha)` is the typed `op: verify` wrapper (`matches: true` = no-op signal).

package/dist/cjs/client.js

@@ -343,6 +343,31 @@ class LoomcycleClient {
         const q = params.toString() ? `?${params.toString()}` : "";
         return (0, fetch_helpers_js_1.jsonFetch)(this.ctx, `/v1/_usage${q}`, opts);
     }
+    /** List the per-scope token budgets visible to the caller (RFC AW), each with
+     *  its live month-to-date usage. Tenant-scoped server-side: a tenant operator
+     *  sees only its own tenant's budgets; an admin sees all (or focuses one via
+     *  `tenant`). Mirrors `GET /v1/_limits`. */
+    async listLimits(opts) {
+        const q = opts?.tenant ? `?tenant=${encodeURIComponent(opts.tenant)}` : "";
+        return (0, fetch_helpers_js_1.jsonFetch)(this.ctx, `/v1/_limits${q}`, opts);
+    }
+    /** Upsert one token budget (RFC AW). A present `soft_limit`/`hard_limit` sets
+     *  that tier; omitting it clears the tier (unlimited on that axis) — a
+     *  full-row upsert. The operator-global scope + any cross-tenant `tenant_id`
+     *  are admin-only (403 otherwise). Mirrors `PUT /v1/_limits`. */
+    async setLimit(body, opts) {
+        return (0, fetch_helpers_js_1.putJSON)(this.ctx, "/v1/_limits", body, opts);
+    }
+    /** Delete a token budget → the scope is unlimited again (RFC AW). Same
+     *  tenant-confinement as `setLimit`. Mirrors `DELETE /v1/_limits`. */
+    async deleteLimit(scope, opts) {
+        const params = new URLSearchParams({ scope });
+        if (opts?.scopeId)
+            params.set("scope_id", opts.scopeId);
+        if (opts?.tenant)
+            params.set("tenant", opts.tenant);
+        return (0, fetch_helpers_js_1.deleteRequest)(this.ctx, `/v1/_limits?${params.toString()}`, opts);
+    }
     /** Read the full event log for a session. Each entry has seq,
      *  run_id, ts_ns, type, event (the providers.Event payload). */
     async getTranscript(sessionId, opts) {
@@ -857,16 +882,26 @@ class LoomcycleClient {
      *
      *  Raises {@link SubstrateToolRefusedError} on tool-level refusals (bad
      *  path, rm of a non-empty path without recursive, etc.);
-     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401. */
+     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401.
+     *
+     *  `opts.scopeId` / `opts.tenant` are the RFC AS browse-by-subject overrides
+     *  (sent as `?scope_id=` / `?tenant=` query params — the server reads them
+     *  from the URL, not the body, and re-checks authorization: a tenant
+     *  principal's `tenant` is ignored, `scopeId` picks any subject it may see).
+     *  Omit both to browse your own subject (byte-identical to the pre-RFC-AS
+     *  request). */
     async path(input, opts) {
-        return (0, fetch_helpers_js_1.postJSON)(this.ctx, "/v1/_path", input, opts);
+        return (0, fetch_helpers_js_1.postJSON)(this.ctx, "/v1/_path", input, {
+            signal: opts?.signal,
+            query: browseQuery(opts),
+        });
     }
     /** Invoke the RFC AK Document tool over HTTP (`POST /v1/_document`). A
      *  chunked-graph document where each chunk is a first-class unit (UUID,
      *  hierarchy, type, fields, graph edges, Markdown body) that agents and
-     *  humans co-author. Op-discriminated (13 ops: document/chunk lifecycle,
-     *  edges, query_chunks, type defs). Scope agent/user (tenant deferred);
-     *  resolved server-side from the principal.
+     *  humans co-author. Op-discriminated (16 ops: document/chunk lifecycle,
+     *  set_path, edges, query_chunks, type defs, export_md/import_md). Scope
+     *  agent/user (tenant deferred); resolved server-side from the principal.
      *
      *  Requires SQL Memory enabled on the sidecar (`LOOMCYCLE_SQLMEM_ENABLED=1`)
      *  — the chunk-structure tables live there. Without it the call is refused
@@ -874,9 +909,15 @@ class LoomcycleClient {
      *
      *  Response varies per op — `create_document` returns
      *  `{document_id, root_chunk_id, ...}`, `query_chunks` returns rows.
-     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401. */
+     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401.
+     *
+     *  `opts.scopeId` / `opts.tenant` are the RFC AS browse-by-subject overrides —
+     *  see {@link LoomcycleClient.path}. Omit both to browse your own subject. */
     async document(input, opts) {
-        return (0, fetch_helpers_js_1.postJSON)(this.ctx, "/v1/_document", input, opts);
+        return (0, fetch_helpers_js_1.postJSON)(this.ctx, "/v1/_document", input, {
+            signal: opts?.signal,
+            query: browseQuery(opts),
+        });
     }
     /** List the PERSISTENT volume universe for the caller's tenant — every
      *  static volume (the shared bind floor, `source: "static"`, read-only)
@@ -1484,6 +1525,19 @@ function channelOpPath(channel, scope, userId, op) {
     }
     return `/v1/_channels/${enc}/${op}`;
 }
+// browseQuery maps the RFC AS browse-by-subject opts to the wire query-param
+// names the off-run Path/Document endpoints read from the URL (scope_id /
+// tenant — matching web/src/api.ts:substratePost). Only set values are
+// included; postJSON drops the query entirely when the map is empty, so a
+// caller passing neither builds the same URL as before RFC AS.
+function browseQuery(opts) {
+    const q = {};
+    if (opts?.scopeId)
+        q.scope_id = opts.scopeId;
+    if (opts?.tenant)
+        q.tenant = opts.tenant;
+    return q;
+}
 // ---- v0.11.0 LLM Gateway helpers ----
 /** serializeLLMOptions strips the AbortSignal (transport concern) and
  *  forces the stream flag to match the call mode. */

package/dist/cjs/fetch-helpers.js

@@ -28,6 +28,21 @@ function authHeaders(ctx) {
         h.Authorization = `Bearer ${ctx.authToken}`;
     return h;
 }
+/** queryString turns an optional param map into a leading-`?` query
+ *  string, dropping empty-valued entries. Returns "" for an absent or
+ *  all-empty map so a caller that passes no query builds the same URL as
+ *  before. Insertion order is preserved (URLSearchParams is stable). */
+function queryString(query) {
+    if (!query)
+        return "";
+    const qs = new URLSearchParams();
+    for (const [k, v] of Object.entries(query)) {
+        if (v)
+            qs.set(k, v);
+    }
+    const s = qs.toString();
+    return s ? `?${s}` : "";
+}
 /** jsonFetch performs a GET and unwraps the JSON body. Non-2xx
  *  status maps to a typed error via raiseFromResponse. */
 async function jsonFetch(ctx, path, opts) {
@@ -43,7 +58,9 @@ async function jsonFetch(ctx, path, opts) {
 }
 /** postJSON sends a JSON-encoded body and unwraps the response.
  *  When `body` is undefined, no body is sent (Content-Type
- *  omitted). */
+ *  omitted). `opts.query` appends URL query params (empty-valued
+ *  entries are dropped; an all-empty/absent map yields no `?`, so
+ *  existing callers produce a byte-identical URL). */
 async function postJSON(ctx, path, body, opts) {
     const headers = authHeaders(ctx);
     let bodyStr;
@@ -51,7 +68,7 @@ async function postJSON(ctx, path, body, opts) {
         headers["Content-Type"] = "application/json";
         bodyStr = JSON.stringify(body);
     }
-    const resp = await ctx.fetchImpl(ctx.baseUrl + path, {
+    const resp = await ctx.fetchImpl(ctx.baseUrl + path + queryString(opts?.query), {
         method: "POST",
         headers,
         body: bodyStr,

package/dist/client.d.ts

@@ -24,7 +24,7 @@
  * full mapping table.
  */
 import { InteractiveSession } from "./interactive.js";
-import type { Agent, AgentEvent, AgentStatus, CancelAgentResult, ClientOptions, ContinueOptions, CreateSnapshotOptions, EnsureCodeAgentOptions, EnsureCodeAgentResult, EnsureMcpServerOptions, EnsureMcpServerResult, HealthResponse, Hook, InterruptListResponse, InterruptStatus, AckChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAckResult, ChannelAwaitResult, ChannelBroadcastResult, ChannelDescriptor, ChannelPeekResult, ChannelPublishResult, ChannelPurgeResult, ChannelSubscribeResult, CreateChannelOptions, ListChannelsResponse, PeekChannelOptions, PublishChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, SubscribeChannelOptions, UpdateChannelOptions, LibraryAgentDefinition, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, ListUsersResponse, LLMChatOptions, LLMChatResponse, LLMChatStreamItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, MCPServerDefVerifyResult, MemoryEntriesResponse, MemoryEntryResponse, MemoryScopeIDsResponse, MemoryScopesResponse, PauseResult, PersistentVolumesResponse, EphemeralVolumesResponse, RegisterHookOptions, RegisterHookResponse, ResolveInterruptOptions, ResumeResult, ResolverMatrix, CompactRunResult, RunBatchOptions, RunBatchResult, RunOptions, RunStateStreamItem, RuntimeStateResponse, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotRestoreResponse, StreamUserRunStatesOptions, SubstrateToolInput, SubstrateToolResponse, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, TranscriptResponse, WhoamiResponse, UsageDimension, UsageReportResponse } from "./types.js";
+import type { Agent, AgentEvent, AgentStatus, CancelAgentResult, ClientOptions, ContinueOptions, CreateSnapshotOptions, EnsureCodeAgentOptions, EnsureCodeAgentResult, EnsureMcpServerOptions, EnsureMcpServerResult, HealthResponse, Hook, InterruptListResponse, InterruptStatus, AckChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAckResult, ChannelAwaitResult, ChannelBroadcastResult, ChannelDescriptor, ChannelPeekResult, ChannelPublishResult, ChannelPurgeResult, ChannelSubscribeResult, CreateChannelOptions, ListChannelsResponse, PeekChannelOptions, PublishChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, SubscribeChannelOptions, UpdateChannelOptions, LibraryAgentDefinition, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, ListUsersResponse, LLMChatOptions, LLMChatResponse, LLMChatStreamItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, MCPServerDefVerifyResult, MemoryEntriesResponse, MemoryEntryResponse, MemoryScopeIDsResponse, MemoryScopesResponse, PauseResult, PersistentVolumesResponse, EphemeralVolumesResponse, RegisterHookOptions, RegisterHookResponse, ResolveInterruptOptions, ResumeResult, ResolverMatrix, CompactRunResult, RunBatchOptions, RunBatchResult, RunOptions, RunStateStreamItem, RuntimeStateResponse, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotRestoreResponse, StreamUserRunStatesOptions, SubstrateToolInput, SubstrateToolResponse, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, TranscriptResponse, WhoamiResponse, UsageDimension, UsageReportResponse, TokenLimit, TokenLimitsResponse, SetTokenLimitRequest } from "./types.js";
 export declare class LoomcycleClient {
     private ctx;
     constructor(opts?: ClientOptions);
@@ -184,6 +184,31 @@ export declare class LoomcycleClient {
         tenant?: string;
         signal?: AbortSignal;
     }): Promise<UsageReportResponse>;
+    /** List the per-scope token budgets visible to the caller (RFC AW), each with
+     *  its live month-to-date usage. Tenant-scoped server-side: a tenant operator
+     *  sees only its own tenant's budgets; an admin sees all (or focuses one via
+     *  `tenant`). Mirrors `GET /v1/_limits`. */
+    listLimits(opts?: {
+        /** Admin-only tenant focus (?tenant=); ignored for a tenant principal. */
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<TokenLimitsResponse>;
+    /** Upsert one token budget (RFC AW). A present `soft_limit`/`hard_limit` sets
+     *  that tier; omitting it clears the tier (unlimited on that axis) — a
+     *  full-row upsert. The operator-global scope + any cross-tenant `tenant_id`
+     *  are admin-only (403 otherwise). Mirrors `PUT /v1/_limits`. */
+    setLimit(body: SetTokenLimitRequest, opts?: {
+        signal?: AbortSignal;
+    }): Promise<TokenLimit>;
+    /** Delete a token budget → the scope is unlimited again (RFC AW). Same
+     *  tenant-confinement as `setLimit`. Mirrors `DELETE /v1/_limits`. */
+    deleteLimit(scope: string, opts?: {
+        /** Required for scope=user (the subject); empty for scope=tenant. */
+        scopeId?: string;
+        /** Admin-only target tenant; ignored for a tenant principal. */
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<void>;
     /** Read the full event log for a session. Each entry has seq,
      *  run_id, ts_ns, type, event (the providers.Event payload). */
     getTranscript(sessionId: string, opts?: {
@@ -583,16 +608,25 @@ export declare class LoomcycleClient {
      *
      *  Raises {@link SubstrateToolRefusedError} on tool-level refusals (bad
      *  path, rm of a non-empty path without recursive, etc.);
-     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401. */
+     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401.
+     *
+     *  `opts.scopeId` / `opts.tenant` are the RFC AS browse-by-subject overrides
+     *  (sent as `?scope_id=` / `?tenant=` query params — the server reads them
+     *  from the URL, not the body, and re-checks authorization: a tenant
+     *  principal's `tenant` is ignored, `scopeId` picks any subject it may see).
+     *  Omit both to browse your own subject (byte-identical to the pre-RFC-AS
+     *  request). */
     path(input: PathToolInput, opts?: {
         signal?: AbortSignal;
+        scopeId?: string;
+        tenant?: string;
     }): Promise<PathToolResponse>;
     /** Invoke the RFC AK Document tool over HTTP (`POST /v1/_document`). A
      *  chunked-graph document where each chunk is a first-class unit (UUID,
      *  hierarchy, type, fields, graph edges, Markdown body) that agents and
-     *  humans co-author. Op-discriminated (13 ops: document/chunk lifecycle,
-     *  edges, query_chunks, type defs). Scope agent/user (tenant deferred);
-     *  resolved server-side from the principal.
+     *  humans co-author. Op-discriminated (16 ops: document/chunk lifecycle,
+     *  set_path, edges, query_chunks, type defs, export_md/import_md). Scope
+     *  agent/user (tenant deferred); resolved server-side from the principal.
      *
      *  Requires SQL Memory enabled on the sidecar (`LOOMCYCLE_SQLMEM_ENABLED=1`)
      *  — the chunk-structure tables live there. Without it the call is refused
@@ -600,9 +634,14 @@ export declare class LoomcycleClient {
      *
      *  Response varies per op — `create_document` returns
      *  `{document_id, root_chunk_id, ...}`, `query_chunks` returns rows.
-     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401. */
+     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401.
+     *
+     *  `opts.scopeId` / `opts.tenant` are the RFC AS browse-by-subject overrides —
+     *  see {@link LoomcycleClient.path}. Omit both to browse your own subject. */
     document(input: DocumentToolInput, opts?: {
         signal?: AbortSignal;
+        scopeId?: string;
+        tenant?: string;
     }): Promise<DocumentToolResponse>;
     /** List the PERSISTENT volume universe for the caller's tenant — every
      *  static volume (the shared bind floor, `source: "static"`, read-only)

package/dist/client.js

@@ -340,6 +340,31 @@ export class LoomcycleClient {
         const q = params.toString() ? `?${params.toString()}` : "";
         return jsonFetch(this.ctx, `/v1/_usage${q}`, opts);
     }
+    /** List the per-scope token budgets visible to the caller (RFC AW), each with
+     *  its live month-to-date usage. Tenant-scoped server-side: a tenant operator
+     *  sees only its own tenant's budgets; an admin sees all (or focuses one via
+     *  `tenant`). Mirrors `GET /v1/_limits`. */
+    async listLimits(opts) {
+        const q = opts?.tenant ? `?tenant=${encodeURIComponent(opts.tenant)}` : "";
+        return jsonFetch(this.ctx, `/v1/_limits${q}`, opts);
+    }
+    /** Upsert one token budget (RFC AW). A present `soft_limit`/`hard_limit` sets
+     *  that tier; omitting it clears the tier (unlimited on that axis) — a
+     *  full-row upsert. The operator-global scope + any cross-tenant `tenant_id`
+     *  are admin-only (403 otherwise). Mirrors `PUT /v1/_limits`. */
+    async setLimit(body, opts) {
+        return putJSON(this.ctx, "/v1/_limits", body, opts);
+    }
+    /** Delete a token budget → the scope is unlimited again (RFC AW). Same
+     *  tenant-confinement as `setLimit`. Mirrors `DELETE /v1/_limits`. */
+    async deleteLimit(scope, opts) {
+        const params = new URLSearchParams({ scope });
+        if (opts?.scopeId)
+            params.set("scope_id", opts.scopeId);
+        if (opts?.tenant)
+            params.set("tenant", opts.tenant);
+        return deleteRequest(this.ctx, `/v1/_limits?${params.toString()}`, opts);
+    }
     /** Read the full event log for a session. Each entry has seq,
      *  run_id, ts_ns, type, event (the providers.Event payload). */
     async getTranscript(sessionId, opts) {
@@ -854,16 +879,26 @@ export class LoomcycleClient {
      *
      *  Raises {@link SubstrateToolRefusedError} on tool-level refusals (bad
      *  path, rm of a non-empty path without recursive, etc.);
-     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401. */
+     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401.
+     *
+     *  `opts.scopeId` / `opts.tenant` are the RFC AS browse-by-subject overrides
+     *  (sent as `?scope_id=` / `?tenant=` query params — the server reads them
+     *  from the URL, not the body, and re-checks authorization: a tenant
+     *  principal's `tenant` is ignored, `scopeId` picks any subject it may see).
+     *  Omit both to browse your own subject (byte-identical to the pre-RFC-AS
+     *  request). */
     async path(input, opts) {
-        return postJSON(this.ctx, "/v1/_path", input, opts);
+        return postJSON(this.ctx, "/v1/_path", input, {
+            signal: opts?.signal,
+            query: browseQuery(opts),
+        });
     }
     /** Invoke the RFC AK Document tool over HTTP (`POST /v1/_document`). A
      *  chunked-graph document where each chunk is a first-class unit (UUID,
      *  hierarchy, type, fields, graph edges, Markdown body) that agents and
-     *  humans co-author. Op-discriminated (13 ops: document/chunk lifecycle,
-     *  edges, query_chunks, type defs). Scope agent/user (tenant deferred);
-     *  resolved server-side from the principal.
+     *  humans co-author. Op-discriminated (16 ops: document/chunk lifecycle,
+     *  set_path, edges, query_chunks, type defs, export_md/import_md). Scope
+     *  agent/user (tenant deferred); resolved server-side from the principal.
      *
      *  Requires SQL Memory enabled on the sidecar (`LOOMCYCLE_SQLMEM_ENABLED=1`)
      *  — the chunk-structure tables live there. Without it the call is refused
@@ -871,9 +906,15 @@ export class LoomcycleClient {
      *
      *  Response varies per op — `create_document` returns
      *  `{document_id, root_chunk_id, ...}`, `query_chunks` returns rows.
-     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401. */
+     *  {@link InvalidArgumentError} on 400; {@link AuthError} on 401.
+     *
+     *  `opts.scopeId` / `opts.tenant` are the RFC AS browse-by-subject overrides —
+     *  see {@link LoomcycleClient.path}. Omit both to browse your own subject. */
     async document(input, opts) {
-        return postJSON(this.ctx, "/v1/_document", input, opts);
+        return postJSON(this.ctx, "/v1/_document", input, {
+            signal: opts?.signal,
+            query: browseQuery(opts),
+        });
     }
     /** List the PERSISTENT volume universe for the caller's tenant — every
      *  static volume (the shared bind floor, `source: "static"`, read-only)
@@ -1480,6 +1521,19 @@ function channelOpPath(channel, scope, userId, op) {
     }
     return `/v1/_channels/${enc}/${op}`;
 }
+// browseQuery maps the RFC AS browse-by-subject opts to the wire query-param
+// names the off-run Path/Document endpoints read from the URL (scope_id /
+// tenant — matching web/src/api.ts:substratePost). Only set values are
+// included; postJSON drops the query entirely when the map is empty, so a
+// caller passing neither builds the same URL as before RFC AS.
+function browseQuery(opts) {
+    const q = {};
+    if (opts?.scopeId)
+        q.scope_id = opts.scopeId;
+    if (opts?.tenant)
+        q.tenant = opts.tenant;
+    return q;
+}
 // ---- v0.11.0 LLM Gateway helpers ----
 /** serializeLLMOptions strips the AbortSignal (transport concern) and
  *  forces the stream flag to match the call mode. */

package/dist/fetch-helpers.d.ts

@@ -39,9 +39,12 @@ export declare function jsonFetch<T>(ctx: _FetchContext, path: string, opts?: {
 }): Promise<T>;
 /** postJSON sends a JSON-encoded body and unwraps the response.
  *  When `body` is undefined, no body is sent (Content-Type
- *  omitted). */
+ *  omitted). `opts.query` appends URL query params (empty-valued
+ *  entries are dropped; an all-empty/absent map yields no `?`, so
+ *  existing callers produce a byte-identical URL). */
 export declare function postJSON<T>(ctx: _FetchContext, path: string, body?: unknown, opts?: {
     signal?: AbortSignal;
+    query?: Record<string, string>;
 }): Promise<T>;
 /** putJSON sends a JSON-encoded body via PUT and unwraps the
  *  response. Idempotent — REST-canonical verb for "create or

package/dist/fetch-helpers.js

@@ -19,6 +19,21 @@ export function authHeaders(ctx) {
         h.Authorization = `Bearer ${ctx.authToken}`;
     return h;
 }
+/** queryString turns an optional param map into a leading-`?` query
+ *  string, dropping empty-valued entries. Returns "" for an absent or
+ *  all-empty map so a caller that passes no query builds the same URL as
+ *  before. Insertion order is preserved (URLSearchParams is stable). */
+function queryString(query) {
+    if (!query)
+        return "";
+    const qs = new URLSearchParams();
+    for (const [k, v] of Object.entries(query)) {
+        if (v)
+            qs.set(k, v);
+    }
+    const s = qs.toString();
+    return s ? `?${s}` : "";
+}
 /** jsonFetch performs a GET and unwraps the JSON body. Non-2xx
  *  status maps to a typed error via raiseFromResponse. */
 export async function jsonFetch(ctx, path, opts) {
@@ -34,7 +49,9 @@ export async function jsonFetch(ctx, path, opts) {
 }
 /** postJSON sends a JSON-encoded body and unwraps the response.
  *  When `body` is undefined, no body is sent (Content-Type
- *  omitted). */
+ *  omitted). `opts.query` appends URL query params (empty-valued
+ *  entries are dropped; an all-empty/absent map yields no `?`, so
+ *  existing callers produce a byte-identical URL). */
 export async function postJSON(ctx, path, body, opts) {
     const headers = authHeaders(ctx);
     let bodyStr;
@@ -42,7 +59,7 @@ export async function postJSON(ctx, path, body, opts) {
         headers["Content-Type"] = "application/json";
         bodyStr = JSON.stringify(body);
     }
-    const resp = await ctx.fetchImpl(ctx.baseUrl + path, {
+    const resp = await ctx.fetchImpl(ctx.baseUrl + path + queryString(opts?.query), {
         method: "POST",
         headers,
         body: bodyStr,

package/dist/index.d.ts

@@ -93,5 +93,5 @@
 export { LoomcycleClient } from "./client.js";
 export { InteractiveSession } from "./interactive.js";
 export type { InteractiveSessionOps } from "./interactive.js";
-export type { AgentEvent, ClientOptions, ContinueOptions, EventType, HostWidening, ImageMediaType, ParentContext, PromptContent, PromptSegment, RetryInfo, RunOptions, SamplingOptions, CompactionOptions, ToolUse, Usage, Agent, AgentStatus, AgentUsage, CancelAgentResult, ListAgentsResponse, RunBatchOptions, RunBatchResult, SpawnRunResult, CompactRunResult, TranscriptEvent, TranscriptResponse, HealthResponse, ListUsersResponse, UserSummary, WhoamiResponse, PauseResult, ResumeResult, RuntimeStateResponse, RuntimeStateStatus, ResolverMatrix, ResolverModelStatus, ResolverProviderAvailability, CreateSnapshotOptions, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotListResponse, SnapshotRestoreResponse, MemoryEntriesResponse, MemoryEntry, MemoryEntryResponse, MemoryScopeIDsResponse, MemoryScopeIDSummary, MemoryScopeKind, MemoryScopesResponse, InterruptListResponse, InterruptRow, InterruptStatus, ResolveInterruptOptions, Hook, HookFailMode, HookPhase, HookToolCall, HookToolResult, ListHooksResponse, PostHookCall, PostHookResult, PreHookCall, PreHookResult, RegisterHookOptions, RegisterHookResponse, SubstrateToolInput, SubstrateToolResponse, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, VolumeMode, PersistentVolumeEntry, PersistentVolumesResponse, EphemeralVolumeEntry, EphemeralVolumesResponse, SystemPromptPayload, UserInputPayload, ChannelDescriptor, ListChannelsResponse, RunStateEvent, RunStateStreamClose, RunStateStreamItem, RunStateStreamOpen, StreamUserRunStatesOptions, AckChannelOptions, ChannelAckResult, ChannelMessageItem, ChannelPeekResult, ChannelPublishResult, ChannelPurgeResult, ChannelScope, ChannelSubscribeResult, PeekChannelOptions, PublishChannelOptions, SubscribeChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAwaitEntry, ChannelAwaitMode, ChannelAwaitResult, ChannelBroadcastEntry, ChannelBroadcastResult, CreateChannelOptions, UpdateChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, AgentDefRowResponse, AgentDefVerifyResult, SkillDefVerifyResult, EnsureMcpServerOptions, EnsureMcpServerResult, MCPServerDefRowResponse, MCPServerDefVerifyResult, AgentDefOverlay, EnsureCodeAgentOptions, EnsureCodeAgentResult, LibraryAgentDefinition, LibraryEntry, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, LLMChatContent, LLMChatMessage, LLMChatOptions, LLMChatResponse, LLMChatStreamDelta, LLMChatStreamItem, LLMChatToolCall, LLMChatUsage, LLMTool, LLMEmbeddingItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, LLMEmbeddingsUsage, UsageDimension, UsageAggregate, UsageReportResponse, } from "./types.js";
+export type { AgentEvent, ClientOptions, ContinueOptions, EventType, HostWidening, ImageMediaType, ParentContext, PromptContent, PromptSegment, RetryInfo, RunOptions, SamplingOptions, CompactionOptions, ToolUse, Usage, Agent, AgentStatus, AgentUsage, CancelAgentResult, ListAgentsResponse, RunBatchOptions, RunBatchResult, SpawnRunResult, CompactRunResult, TranscriptEvent, TranscriptResponse, HealthResponse, ListUsersResponse, UserSummary, WhoamiResponse, PauseResult, ResumeResult, RuntimeStateResponse, RuntimeStateStatus, ResolverMatrix, ResolverModelStatus, ResolverProviderAvailability, CreateSnapshotOptions, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotListResponse, SnapshotRestoreResponse, MemoryEntriesResponse, MemoryEntry, MemoryEntryResponse, MemoryScopeIDsResponse, MemoryScopeIDSummary, MemoryScopeKind, MemoryScopesResponse, InterruptListResponse, InterruptRow, InterruptStatus, ResolveInterruptOptions, Hook, HookFailMode, HookPhase, HookToolCall, HookToolResult, ListHooksResponse, PostHookCall, PostHookResult, PreHookCall, PreHookResult, RegisterHookOptions, RegisterHookResponse, SubstrateToolInput, SubstrateToolResponse, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, VolumeMode, PersistentVolumeEntry, PersistentVolumesResponse, EphemeralVolumeEntry, EphemeralVolumesResponse, SystemPromptPayload, UserInputPayload, ChannelDescriptor, ListChannelsResponse, RunStateEvent, RunStateStreamClose, RunStateStreamItem, RunStateStreamOpen, StreamUserRunStatesOptions, AckChannelOptions, ChannelAckResult, ChannelMessageItem, ChannelPeekResult, ChannelPublishResult, ChannelPurgeResult, ChannelScope, ChannelSubscribeResult, PeekChannelOptions, PublishChannelOptions, SubscribeChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAwaitEntry, ChannelAwaitMode, ChannelAwaitResult, ChannelBroadcastEntry, ChannelBroadcastResult, CreateChannelOptions, UpdateChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, AgentDefRowResponse, AgentDefVerifyResult, SkillDefVerifyResult, EnsureMcpServerOptions, EnsureMcpServerResult, MCPServerDefRowResponse, MCPServerDefVerifyResult, AgentDefOverlay, EnsureCodeAgentOptions, EnsureCodeAgentResult, LibraryAgentDefinition, LibraryEntry, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, LLMChatContent, LLMChatMessage, LLMChatOptions, LLMChatResponse, LLMChatStreamDelta, LLMChatStreamItem, LLMChatToolCall, LLMChatUsage, LLMTool, LLMEmbeddingItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, LLMEmbeddingsUsage, UsageDimension, UsageAggregate, UsageReportResponse, LimitInfo, TokenLimit, TokenLimitsResponse, SetTokenLimitRequest, } from "./types.js";
 export { AgentIDInUseError, AgentNotFoundError, AlreadyPausingError, AuthError, BackpressureError, HookNotFoundError, NotFoundError, InvalidArgumentError, ChannelCursorRegressionError, LoomcycleError, NotPausedError, PauseNotConfiguredError, PerUserQuotaExhaustedError, SessionBusyError, SessionNotFoundError, SnapshotNotFoundError, SnapshotTooLargeError, SnapshotVersionError, SubstrateToolRefusedError, UnavailableError, } from "./errors.js";

package/dist/types.d.ts

@@ -7,7 +7,7 @@
  * `client.ts` for the input shapes (RunOptions, CreateSnapshotOptions,
  * etc.) — those are translated to snake_case in the request body.
  */
-export type EventType = "started" | "text" | "tool_call" | "tool_result" | "usage" | "done" | "error" | "retry" | "host_widened" | "session" | "agent" | "awaiting_input" | "steer" | "context_compaction" | "_meta";
+export type EventType = "started" | "text" | "tool_call" | "tool_result" | "usage" | "done" | "error" | "retry" | "host_widened" | "session" | "agent" | "awaiting_input" | "steer" | "context_compaction" | "limit" | "_meta";
 export interface ToolUse {
     id: string;
     name: string;
@@ -54,6 +54,29 @@ export interface HostWidening {
     hook_name: string;
     hosts_added: string[];
 }
+/** LimitInfo accompanies an `event: limit` frame (RFC AW per-scope token
+ *  budgets). Names which scope tripped, how hard (`soft` warns + the run
+ *  continues; `hard` means the NEXT run is refused at admission), and where the
+ *  scope stands against its ceiling — so a UI can render "tenant acme at 1.2M /
+ *  1M tokens this month" without a follow-up fetch. Wire-stable; mirrors
+ *  providers.LimitInfo. */
+export interface LimitInfo {
+    /** Which axis tripped: "operator" | "tenant" | "user". */
+    scope: string;
+    /** The tripped scope's id — tenant id (scope=tenant), user subject
+     *  (scope=user), "" (operator-global). */
+    scope_id?: string;
+    /** "soft" (warn, run continues) | "hard" (next run refused at admission). */
+    severity: string;
+    /** Budget window; "month" (calendar month, UTC) in Phase 1. */
+    window: string;
+    /** The scope's month-to-date token total at the crossing. */
+    used: number;
+    /** The tier that was crossed (the soft or hard ceiling). */
+    limit: number;
+    /** Human-readable banner string. Optional. */
+    message?: string;
+}
 export interface AgentEvent {
     type: EventType;
     text?: string;
@@ -82,6 +105,9 @@ export interface AgentEvent {
         source?: string;
         seen_at?: string;
     };
+    /** Payload on `event: limit` (RFC AW) — a per-scope token-budget crossing.
+     *  Nil on all other event types. */
+    limit?: LimitInfo;
     agent_id?: string;
     run_id?: string;
     session_id?: string;
@@ -791,10 +817,10 @@ export type PathToolInput = {
     [extra: string]: unknown;
 };
 /** Input for {@link LoomcycleClient.document} — the RFC AK chunked-graph
- *  Document tool (POST /v1/_document). Op-discriminated (13 ops); requires
+ *  Document tool (POST /v1/_document). Op-discriminated (16 ops); requires
  *  SQL Memory on the sidecar. Scope agent/user (tenant deferred). */
 export type DocumentToolInput = {
-    op: "create_document" | "get_document" | "delete_document" | "create_chunk" | "get_chunk" | "update_chunk" | "delete_chunk" | "move_chunk" | "link_chunks" | "unlink_chunks" | "query_chunks" | "define_type" | "list_types";
+    op: "create_document" | "get_document" | "delete_document" | "set_path" | "create_chunk" | "get_chunk" | "update_chunk" | "delete_chunk" | "move_chunk" | "link_chunks" | "unlink_chunks" | "query_chunks" | "define_type" | "list_types" | "export_md" | "import_md";
     scope?: "agent" | "user";
     /** Document id (get/delete_document) or chunk id (get/update/delete/move_chunk). */
     id?: string;
@@ -821,6 +847,14 @@ export type DocumentToolInput = {
     limit?: number;
     /** define/list_types: the type name. */
     name?: string;
+    /** export_md: embed round-trippable chunk metadata + edges as HTML comments
+     *  (default true server-side). false = clean human-facing Markdown. */
+    include_metadata?: boolean;
+    /** import_md: an export_md-shaped Markdown document (headings = hierarchy;
+     *  `<!-- loom: ... -->` metadata; `<!-- loom-edges: ... -->` trailer). Omit
+     *  document_id to create a new document; pass it (+ optional parent_id) to
+     *  import under an existing chunk. */
+    markdown?: string;
     [extra: string]: unknown;
 };
 /** Response shape for {@link LoomcycleClient.path} and
@@ -1685,3 +1719,36 @@ export interface UsageReportResponse {
     to?: string;
     rows: UsageAggregate[];
 }
+/** A per-scope token budget (RFC AW) plus its live month-to-date usage.
+ *  `soft_limit` / `hard_limit` are absent when that tier is unset (no ceiling
+ *  on that axis). Mirrors one row of GET /v1/_limits. */
+export interface TokenLimit {
+    tenant_id: string;
+    /** "operator" | "tenant" | "user" */
+    scope: string;
+    /** tenant id (scope=tenant), user subject (scope=user), "" (operator). */
+    scope_id?: string;
+    soft_limit?: number;
+    hard_limit?: number;
+    /** The scope's current month-to-date token total. */
+    used: number;
+    updated_at?: string;
+    updated_by?: string;
+}
+export interface TokenLimitsResponse {
+    limits: TokenLimit[];
+}
+/** The PUT /v1/_limits body (RFC AW). A present `soft_limit`/`hard_limit` sets
+ *  that tier; omitting it clears the tier (unlimited on that axis) — a full-row
+ *  upsert. `tenant_id` is an admin-only target; a tenant operator is confined to
+ *  its own tenant regardless of this field. */
+export interface SetTokenLimitRequest {
+    /** Admin-only target tenant; ignored for confinement on a scoped caller. */
+    tenant_id?: string;
+    /** "operator" | "tenant" | "user" */
+    scope: string;
+    /** Required for scope=user (the subject); must be empty for scope=tenant. */
+    scope_id?: string;
+    soft_limit?: number;
+    hard_limit?: number;
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@loomcycle/client",
-  "version": "1.10.0",
-  "description": "TypeScript client for the loomcycle sidecar (HTTP+SSE). 63 methods covering run streaming, agent metadata, pause/resume/state, resolver re-probe (resolveProbe — issue #88 operator escape hatch), operator-token admin (operatorTokenDef — RFC L OSS multi-tenant auth) + whoami (RFC L authoritative principal, v0.17.0) + tenant-scoped listUsers / listUserAgents, dynamic MCP registration (mcpServerDef + v0.18.0 typed mcpServerDefVerify + ensureMcpServer idempotent register-if-changed), snapshot lifecycle, memory admin (incl. v0.9.0 Vector Memory embed_stats + reembed AND v0.11.5 setMemoryEntry + deleteMemoryEntry), interruption resolve, hook management, v0.8.22 substrate admin (agentDef + skillDef), v0.9.x n8n Phase 0 (listChannels + streamUserRunStates), v0.9.x Channel CRUD (publishChannel + subscribeChannel + peekChannel + ackChannel), v0.11.5 Channel admin CRUD (createChannel + updateChannel + deleteChannel — runtime substrate; yaml channels refuse mutation with HTTP 409), v0.9.x content_sha256 verify, v0.9.1 transcript first-cycle, v0.9.x dynamic MCP server registration (mcpServerDef + MCPServerDefVerifyResult), v0.10.3 Library v2 enumeration (listLibraryAgents + listLibrarySkills + listLibraryMcpServers), and v0.11.0 LLM Gateway (llmChat + llmStream — direct provider routing without agent overhead; primary target is n8n's LoomCycleChatModel AI Agent sub-node and any LangChain-compatible consumer). v0.10.1 — dual ESM + CommonJS distribution (additive — ESM consumers unchanged; CJS consumers like n8n's community-node loader now work). v0.19.0 — typed inline code-js agent ingestion (AgentDefOverlay.code_body + ensureCodeAgent — register a deterministic code agent through the substrate with no host filesystem bind; RFC J). v0.20.0 — ensureMcpServer surfaces discoveredToolCount straight from create (loomcycle now auto-discovers MCP tools at ingestion); rediscover is now an explicit force-refresh. v0.21.0 — run/continue accept optional non-secret `metadata` (repo name, review policy, …) passed to the agent, symmetric with the WebHook/Schedule trigger paths. v0.22.0 — version-aligned lockstep release; no client-surface change (RFC N tenant isolation of the agent/skill/MCP/Schedule/Webhook definition plane + real op-schemas on the builtin MCP meta-tools are both server-side). v0.23.0 — version-aligned lockstep release; no client-surface change (RFCs O/P/R MCP-server hardening + thin client and the RFC Q DeepSeek tool-content fix are all server-side / MCP-transport-side). v0.24.0 — purgeChannel clears a channel's buffered messages without deleting its definition (allowed on yaml-declared channels too, unlike deleteChannel — F20); AgentDefOverlay gains channels / evaluation_scopes / interruption so a COMPLETE interactive/multi-agent agent round-trips over the substrate (F14). (Consolidates the interim 0.24/0.25 package bumps, which were never tag-published, back into lockstep with the loomcycle v0.24.0 tag.) v0.25.0 — adds the RFC S channel fan-in/fan-out client twins: awaitChannels() (wait for any/all/at_least N messages across channels, or a timeout — non-committing) + broadcastChannels() (publish one payload to N channels in one atomic-pre-flight call), the client-facing counterparts of the in-band Channel.await / Channel.broadcast tool ops (the rest of v0.25.0 — the manual-management Web UI console + Context op=time + max_fires self-retiring schedules — is server-side / in-band, no client-surface change). v0.29.1 — Usage gains optional `max_context_tokens` (the serving model's context-window ceiling, stamped by the loop from Provider.Capabilities() on each usage event) so a consumer can render a 'context used / max' gauge without a hard-coded per-model table; additive + optional, no behavior change. (Lockstep catch-up: the field landed in loomcycle v0.29.0 but the adapter publish skipped on a version mismatch; v0.29.1 realigns the package version with the release tag so it publishes.) v0.33.0 — gRPC + TS client parity for the RFC Y external fan-out and the compaction surface: spawnRunBatch() (POST /v1/runs:batch — spawn up to 32 fresh runs concurrently in one call, combined index-aligned envelope, per-child failures in-envelope) + compactRun(runId) (POST /v1/runs/{run_id}/compact — summarize a parked run's context); plus per-run sampling + compaction overrides now accepted on runStreaming / continueSession (an explicit temperature 0 is preserved as deterministic, not dropped as falsy). (The gRPC half adds the matching SpawnRunBatch / CompactRun RPCs + the sampling/compaction fields on RunRequest/ContinueRequest — server-side.) v0.34.0 — version-aligned lockstep release; no client-surface change (context-transform plugins / RFC Z Phase 1a are server-side config; the exp7 hardening pass is server-side; the R2 cross-provider thinking-model downgrade surfaces a new `model_downgraded` SSE event the generic stream passes through unchanged). v0.35.0 — RFC AH dynamic filesystem volumes: volumeDef() (POST /v1/_volumedef — op-discriminated create/get/list/delete/purge; a Volume is flat, so delete unmaps + purge RemoveAll's, no retire/promote/fork) + listVolumes() / listEphemeralVolumes() (GET /v1/_volumes[/ephemeral] — tenant-scoped; host paths redacted for non-operator callers). Tenant-confined; the runtime derives the path inside an operator-blessed dynamic_root, so callers pass name + mode, never a host path. v1.1.1 — RFC AI interactive agentic sessions: an `interactive: true` flag on runStreaming/continueSession (a run that parks at end_turn for steering) + sendRunInput(runId, text) (POST /v1/runs/{id}/input — steer a live run) + streamRunByID(runId, {fromSeq}) (GET /v1/runs/{id}/stream — re-attach by run_id; the operator's prior turns replay as `steer` events so a cold client reconstructs the whole conversation) + a high-level InteractiveSession driver (client.interactiveSession / attachInteractiveSession — events()/send()/cancel(), the adapter port of the Web UI run terminal). The AgentEvent union gains awaiting_input/steer/context_compaction frames. Version-aligned with the loomcycle v1.1.x line so the v1.1.1 tag publishes it (also carrying the previously-unpublished v0.35.0 volume surface). v1.4.0 — RFC AL Path VFS + RFC AK Document on the wire: path(input) (POST /v1/_path — a Unix-like filesystem over Memory/Volumes/Documents; resolve/ls/stat/mkdir/mv/rm) + document(input) (POST /v1/_document — chunked-graph documents; 13 ops, needs SQL Memory on the sidecar). Scope (agent/user/tenant) + tenant are resolved server-side from the authenticated principal, never the wire; an off-run scope:'user' op keys on the principal subject so it interoperates with that user's agent runs. New PathToolInput / DocumentToolInput types; responses are op-varying (unknown — narrow as needed). v1.7.0 — RFC AT image/vision input: the PromptContent union gains an `image` variant ({ type:'image'; media_type: ImageMediaType; data: base64-no-prefix }) accepted in a user segment by runStreaming / continueSession (segments pass through unchanged — no method change). The model must be vision-capable or the run errors before the call. New ImageMediaType type (image/png|jpeg|gif|webp).",
+  "version": "1.12.1",
+  "description": "TypeScript client for the loomcycle sidecar (HTTP+SSE). 63 methods covering run streaming, agent metadata, pause/resume/state, resolver re-probe (resolveProbe — issue #88 operator escape hatch), operator-token admin (operatorTokenDef — RFC L OSS multi-tenant auth) + whoami (RFC L authoritative principal, v0.17.0) + tenant-scoped listUsers / listUserAgents, dynamic MCP registration (mcpServerDef + v0.18.0 typed mcpServerDefVerify + ensureMcpServer idempotent register-if-changed), snapshot lifecycle, memory admin (incl. v0.9.0 Vector Memory embed_stats + reembed AND v0.11.5 setMemoryEntry + deleteMemoryEntry), interruption resolve, hook management, v0.8.22 substrate admin (agentDef + skillDef), v0.9.x n8n Phase 0 (listChannels + streamUserRunStates), v0.9.x Channel CRUD (publishChannel + subscribeChannel + peekChannel + ackChannel), v0.11.5 Channel admin CRUD (createChannel + updateChannel + deleteChannel — runtime substrate; yaml channels refuse mutation with HTTP 409), v0.9.x content_sha256 verify, v0.9.1 transcript first-cycle, v0.9.x dynamic MCP server registration (mcpServerDef + MCPServerDefVerifyResult), v0.10.3 Library v2 enumeration (listLibraryAgents + listLibrarySkills + listLibraryMcpServers), and v0.11.0 LLM Gateway (llmChat + llmStream — direct provider routing without agent overhead; primary target is n8n's LoomCycleChatModel AI Agent sub-node and any LangChain-compatible consumer). v0.10.1 — dual ESM + CommonJS distribution (additive — ESM consumers unchanged; CJS consumers like n8n's community-node loader now work). v0.19.0 — typed inline code-js agent ingestion (AgentDefOverlay.code_body + ensureCodeAgent — register a deterministic code agent through the substrate with no host filesystem bind; RFC J). v0.20.0 — ensureMcpServer surfaces discoveredToolCount straight from create (loomcycle now auto-discovers MCP tools at ingestion); rediscover is now an explicit force-refresh. v0.21.0 — run/continue accept optional non-secret `metadata` (repo name, review policy, …) passed to the agent, symmetric with the WebHook/Schedule trigger paths. v0.22.0 — version-aligned lockstep release; no client-surface change (RFC N tenant isolation of the agent/skill/MCP/Schedule/Webhook definition plane + real op-schemas on the builtin MCP meta-tools are both server-side). v0.23.0 — version-aligned lockstep release; no client-surface change (RFCs O/P/R MCP-server hardening + thin client and the RFC Q DeepSeek tool-content fix are all server-side / MCP-transport-side). v0.24.0 — purgeChannel clears a channel's buffered messages without deleting its definition (allowed on yaml-declared channels too, unlike deleteChannel — F20); AgentDefOverlay gains channels / evaluation_scopes / interruption so a COMPLETE interactive/multi-agent agent round-trips over the substrate (F14). (Consolidates the interim 0.24/0.25 package bumps, which were never tag-published, back into lockstep with the loomcycle v0.24.0 tag.) v0.25.0 — adds the RFC S channel fan-in/fan-out client twins: awaitChannels() (wait for any/all/at_least N messages across channels, or a timeout — non-committing) + broadcastChannels() (publish one payload to N channels in one atomic-pre-flight call), the client-facing counterparts of the in-band Channel.await / Channel.broadcast tool ops (the rest of v0.25.0 — the manual-management Web UI console + Context op=time + max_fires self-retiring schedules — is server-side / in-band, no client-surface change). v0.29.1 — Usage gains optional `max_context_tokens` (the serving model's context-window ceiling, stamped by the loop from Provider.Capabilities() on each usage event) so a consumer can render a 'context used / max' gauge without a hard-coded per-model table; additive + optional, no behavior change. (Lockstep catch-up: the field landed in loomcycle v0.29.0 but the adapter publish skipped on a version mismatch; v0.29.1 realigns the package version with the release tag so it publishes.) v0.33.0 — gRPC + TS client parity for the RFC Y external fan-out and the compaction surface: spawnRunBatch() (POST /v1/runs:batch — spawn up to 32 fresh runs concurrently in one call, combined index-aligned envelope, per-child failures in-envelope) + compactRun(runId) (POST /v1/runs/{run_id}/compact — summarize a parked run's context); plus per-run sampling + compaction overrides now accepted on runStreaming / continueSession (an explicit temperature 0 is preserved as deterministic, not dropped as falsy). (The gRPC half adds the matching SpawnRunBatch / CompactRun RPCs + the sampling/compaction fields on RunRequest/ContinueRequest — server-side.) v0.34.0 — version-aligned lockstep release; no client-surface change (context-transform plugins / RFC Z Phase 1a are server-side config; the exp7 hardening pass is server-side; the R2 cross-provider thinking-model downgrade surfaces a new `model_downgraded` SSE event the generic stream passes through unchanged). v0.35.0 — RFC AH dynamic filesystem volumes: volumeDef() (POST /v1/_volumedef — op-discriminated create/get/list/delete/purge; a Volume is flat, so delete unmaps + purge RemoveAll's, no retire/promote/fork) + listVolumes() / listEphemeralVolumes() (GET /v1/_volumes[/ephemeral] — tenant-scoped; host paths redacted for non-operator callers). Tenant-confined; the runtime derives the path inside an operator-blessed dynamic_root, so callers pass name + mode, never a host path. v1.1.1 — RFC AI interactive agentic sessions: an `interactive: true` flag on runStreaming/continueSession (a run that parks at end_turn for steering) + sendRunInput(runId, text) (POST /v1/runs/{id}/input — steer a live run) + streamRunByID(runId, {fromSeq}) (GET /v1/runs/{id}/stream — re-attach by run_id; the operator's prior turns replay as `steer` events so a cold client reconstructs the whole conversation) + a high-level InteractiveSession driver (client.interactiveSession / attachInteractiveSession — events()/send()/cancel(), the adapter port of the Web UI run terminal). The AgentEvent union gains awaiting_input/steer/context_compaction frames. Version-aligned with the loomcycle v1.1.x line so the v1.1.1 tag publishes it (also carrying the previously-unpublished v0.35.0 volume surface). v1.4.0 — RFC AL Path VFS + RFC AK Document on the wire: path(input) (POST /v1/_path — a Unix-like filesystem over Memory/Volumes/Documents; resolve/ls/stat/mkdir/mv/rm) + document(input) (POST /v1/_document — chunked-graph documents; 13 ops, needs SQL Memory on the sidecar). Scope (agent/user/tenant) + tenant are resolved server-side from the authenticated principal, never the wire; an off-run scope:'user' op keys on the principal subject so it interoperates with that user's agent runs. New PathToolInput / DocumentToolInput types; responses are op-varying (unknown — narrow as needed). v1.7.0 — RFC AT image/vision input: the PromptContent union gains an `image` variant ({ type:'image'; media_type: ImageMediaType; data: base64-no-prefix }) accepted in a user segment by runStreaming / continueSession (segments pass through unchanged — no method change). The model must be vision-capable or the run errors before the call. New ImageMediaType type (image/png|jpeg|gif|webp). v1.12.1 — Path/Document browse-by-subject + the full Document op set (RFC AS/AK): path(input, opts) / document(input, opts) accept optional scopeId / tenant browse overrides sent as ?scope_id= / ?tenant= query params (server reads them from the URL, re-checks authorization; omit both to browse your own subject — byte-identical to the pre-RFC-AS request), and DocumentToolInput.op now covers all 16 backend ops (adds set_path, export_md, import_md) with the matching include_metadata / markdown fields. Additive — existing path() / document() callers are unchanged.",
   "license": "Apache-2.0",
   "type": "module",
   "repository": {