@loomcycle/client 1.111.0 → 1.113.0

package/dist/client.js

@@ -135,6 +135,10 @@ function runBody(opts) {
         body.idempotency_key = opts.idempotencyKey;
     if (opts.maxWallSeconds !== undefined)
         body.max_wall_seconds = opts.maxWallSeconds;
+    if (opts.admission !== undefined)
+        body.admission = opts.admission;
+    if (opts.retention !== undefined)
+        body.retention = opts.retention;
     if (opts.metadata !== undefined)
         body.metadata = opts.metadata;
     if (opts.runTimeoutSeconds !== undefined)
@@ -436,6 +440,23 @@ export class LoomcycleClient {
     async getEffectiveConfig(runId, opts) {
         return jsonFetch(this.ctx, `/v1/runs/${encodeURIComponent(runId)}/effective-config`, opts);
     }
+    /** Which per-run overrides a run of `name` may set, for this caller — what a
+     *  run form needs before it sends anything. Mirrors
+     *  `GET /v1/_agentdef/{name}/overridable`.
+     *
+     *  Folds the agent's `allow_overrides` with the caller's token overrides
+     *  policy, through the same checks the run path refuses with; a refused field
+     *  names which (`reason`). Overridable fields carry what the run path then
+     *  accepts: `narrow_only`, `max`, and `values` for a closed set.
+     *
+     *  `substrate:tenant` (a non-isolated member too). A token limited to certain
+     *  agents may ask about those agents only. Raises {@link AgentNotFoundError}
+     *  (404) for an unknown or another tenant's agent, and a 403
+     *  `agent_not_allowed` for an agent outside the token's allowlist. */
+    async getAgentOverridable(name, opts) {
+        const q = opts?.tenant ? `?tenant=${encodeURIComponent(opts.tenant)}` : "";
+        return jsonFetch(this.ctx, `/v1/_agentdef/${encodeURIComponent(name)}/overridable${q}`, opts);
+    }
     /** Re-attach to a run's event stream by `run_id` (RFC AI), replaying from
      *  `fromSeq` (default 0) then live-tailing — the gRPC-free twin of the Web
      *  UI's resume-in-terminal. Mirrors `GET /v1/runs/{run_id}/stream`. The
@@ -598,6 +619,35 @@ export class LoomcycleClient {
             body.reason = opts.reason;
         return postJSON(this.ctx, `/v1/runs/${encodeURIComponent(runId)}/compact`, body, opts);
     }
+    /** Permanently delete a run and every run it spawned, with what is stored
+     *  about them: transcripts, their sessions when no other run is left in
+     *  them, interrupts, evaluations of them, queued memory rows and indexed
+     *  turns. The usage ledger (tokens, cost) is kept. Mirrors
+     *  `DELETE /v1/runs/{run_id}/tree`.
+     *
+     *  Needs the `runs:delete` scope (an admin and a tenant operator have it;
+     *  any other token only if it was granted at mint) — a token without it
+     *  raises `LoomcycleError` with status 403. A run that does not exist, was
+     *  already deleted, or is not yours to read resolves with `deleted_runs: 0`
+     *  rather than raising, so repeating the call is safe. A tree holding a run
+     *  that is still running, awaiting input or paused deletes nothing and
+     *  raises `LoomcycleError` with `code: "run_tree_live"` (status 409): cancel
+     *  it first. `not_reached` names where a copy may remain that this call
+     *  cannot remove. To discard a configured run that never started, use
+     *  {@link LoomcycleClient.deleteConfiguredRun}. */
+    async deleteRunTree(runId, opts) {
+        return deleteJSON(this.ctx, `/v1/runs/${encodeURIComponent(runId)}/tree`, opts);
+    }
+    /** Permanently delete every run of a session, each with the runs it
+     *  spawned — {@link LoomcycleClient.deleteRunTree} for all of them at once.
+     *  `cascade: "children"` is required and is the only mode: there is no
+     *  delete that leaves sub-agent runs behind. Mirrors
+     *  `DELETE /v1/sessions/{session_id}?cascade=children`. Same scope, same
+     *  zero-count answer for a session you cannot read, same `run_tree_live`
+     *  refusal. */
+    async deleteSession(sessionId, opts) {
+        return deleteJSON(this.ctx, `/v1/sessions/${encodeURIComponent(sessionId)}?cascade=${encodeURIComponent(opts.cascade)}`, opts);
+    }
     /**
      * Replay a session's transcript into a NEW session bound to a (possibly
      * different) target agent, so that agent continues from the same context
@@ -675,8 +725,14 @@ export class LoomcycleClient {
         const resp = await postJSON(this.ctx, `/v1/agents/${encodeURIComponent(agentId)}/cancel`, { reason: opts?.reason ?? "" }, opts);
         return { cancelledCount: resp.cancelled_count };
     }
-    /** List a user's recent agent runs, optionally filtered by status. With no
-     *  `status` only running runs are returned; `"all"` returns every status.
+    /** List a user's recent agent runs (at most 100), optionally filtered by
+     *  status. With no `status` only running runs are returned; `"all"` returns
+     *  every status; several statuses list a run in any of them.
+     *
+     *  `awaitedState` lists only running runs blocked on one of the named waits
+     *  (`"review"`, `"input"`, …). The state is derived per run, so the server
+     *  reads at most 1,000 running runs; the returned array carries
+     *  `truncated: true` when it stopped with some unread.
      *
      *  v0.9.x — `parentAgentId` narrows the result CLIENT-SIDE to runs
      *  whose `parent_agent_id` matches. The server still returns the
@@ -685,17 +741,21 @@ export class LoomcycleClient {
      *  n8n trigger pattern "show me all sub-runs spawned by parent X." */
     async listUserAgents(userId, opts) {
         const params = new URLSearchParams();
-        if (opts?.status)
-            params.set("status", opts.status);
+        for (const s of [].concat(opts?.status ?? []))
+            params.append("status", s);
+        for (const s of [].concat(opts?.awaitedState ?? []))
+            params.append("awaited_state", s);
         if (opts?.tenant)
             params.set("tenant", opts.tenant);
         const q = params.toString() ? `?${params.toString()}` : "";
         const resp = await jsonFetch(this.ctx, `/v1/users/${encodeURIComponent(userId)}/agents${q}`, opts);
-        const all = resp.agents ?? [];
+        let out = resp.agents ?? [];
         if (opts?.parentAgentId !== undefined && opts.parentAgentId !== "") {
-            return all.filter((a) => a.parent_agent_id === opts.parentAgentId);
+            out = out.filter((a) => a.parent_agent_id === opts.parentAgentId);
         }
-        return all;
+        if (resp.truncated)
+            out.truncated = true;
+        return out;
     }
     /** One page of a team walk's runs — the walk's own run (its run id IS the
      *  walk id) and every member it spawned, oldest first. The walk's own row
@@ -787,6 +847,36 @@ export class LoomcycleClient {
             params.set("tenant", opts.tenant);
         return deleteRequest(this.ctx, `/v1/_limits?${params.toString()}`, opts);
     }
+    /** The timed no-trace overrides in force: agents whose runs are being
+     *  stored although they normally store none. An admin sees every tenant's
+     *  (or one with `tenant`); a tenant operator sees its own. Mirrors
+     *  `GET /v1/_retention/overrides`. */
+    async listRetentionOverrides(opts) {
+        const q = opts?.tenant ? `?tenant=${encodeURIComponent(opts.tenant)}` : "";
+        return jsonFetch(this.ctx, `/v1/_retention/overrides${q}`, opts);
+    }
+    /** Store the runs of one no-trace agent until `until`, to debug it. At
+     *  most 24 hours ahead; setting one replaces the last. It lifts a mode
+     *  that came from the agent's definition or the run request, never one a
+     *  token requires. Audited. `tenant` is admin-only: a tenant operator's
+     *  override is always for its own tenant. Mirrors
+     *  `PUT /v1/_retention/overrides`. */
+    async setRetentionOverride(body, opts) {
+        const until = body.until instanceof Date ? body.until.toISOString() : body.until;
+        const wire = { agent: body.agent, until };
+        if (body.tenant !== undefined)
+            wire.tenant = body.tenant;
+        return putJSON(this.ctx, "/v1/_retention/overrides", wire, opts);
+    }
+    /** End an agent's no-trace override before it runs out. Clearing one that
+     *  is not there is not an error. Mirrors
+     *  `DELETE /v1/_retention/overrides`. */
+    async clearRetentionOverride(agent, opts) {
+        const params = new URLSearchParams({ agent });
+        if (opts?.tenant)
+            params.set("tenant", opts.tenant);
+        return deleteRequest(this.ctx, `/v1/_retention/overrides?${params.toString()}`, opts);
+    }
     /** Ask a decision model typed questions (`choice` / `noul` / `score`) about
      *  `state` and get each answer with its probabilities. A decision model does
      *  not write: there is no reply to parse and the call costs a few output
@@ -866,9 +956,51 @@ export class LoomcycleClient {
      *  scopes are DERIVED server-side from the member's access_mode (never sent),
      *  and the plaintext `token` is returned exactly ONCE — store it now, it is
      *  never retrievable again. 404 for an unknown/cross-tenant subject; 409 for
-     *  a disabled user. */
+     *  a disabled user.
+     *
+     *  `ttlSeconds` gives the token a fixed lifetime: it stops authenticating
+     *  when that runs out, and the answer carries `expires_at`. It cannot run
+     *  past the end of the token making the call. `name` labels it (stored as
+     *  `u-<name>`).
+     *  `maxActive` keeps at most that many of the user's tokens alive — the
+     *  oldest beyond it are retired at once and listed in `retired`.
+     *
+     *  `agents` limits the token to starting those agents as top-level runs, and
+     *  to the run endpoints: it is refused everywhere else (403
+     *  `restricted_token`), and refused any other agent (403
+     *  `agent_not_allowed`). An agent that a listed one spawns is not limited.
+     *  An empty list is refused; omit the option for no limit.
+     *
+     *  `overrides` locks the per-run settings for runs the token starts, and
+     *  for retunes it makes: `"none"` locks them all (model, provider, tier,
+     *  effort, sampling, limits, output format and the rest), a list names the
+     *  ones it may still set. A request that sets a locked one is refused with
+     *  403 `override_not_allowed`.
+     *
+     *  `rate` bounds how often the token may start runs: `perMinute` runs a
+     *  minute, with `burst` allowed at once from idle (default: `perMinute`).
+     *  A start past the rate is refused with 429 `rate_limited` and a
+     *  `Retry-After` header.
+     *
+     *  With none of the options the request has no body, as before. */
     async mintUserToken(subject, opts) {
-        return postJSON(this.ctx, `/v1/_users/${encodeURIComponent(subject)}/tokens`, undefined, opts);
+        const body = {};
+        if (opts?.ttlSeconds !== undefined)
+            body.ttl_seconds = opts.ttlSeconds;
+        if (opts?.name !== undefined)
+            body.name = opts.name;
+        if (opts?.maxActive !== undefined)
+            body.max_active = opts.maxActive;
+        if (opts?.agents !== undefined)
+            body.agents = opts.agents;
+        if (opts?.overrides !== undefined)
+            body.overrides = opts.overrides;
+        if (opts?.rate !== undefined) {
+            body.rate = { per_minute: opts.rate.perMinute, burst: opts.rate.burst };
+        }
+        if (opts?.retention !== undefined)
+            body.retention = opts.retention;
+        return postJSON(this.ctx, `/v1/_users/${encodeURIComponent(subject)}/tokens`, Object.keys(body).length > 0 ? body : undefined, { signal: opts?.signal });
     }
     /** List the caller's own user's delegated tokens — METADATA ONLY (never the
      *  plaintext or hash). `active` applies the auth-layer validity rule so a
@@ -928,6 +1060,38 @@ export class LoomcycleClient {
     async resolveProbe(opts) {
         return postJSON(this.ctx, "/v1/_resolve/probe", undefined, opts);
     }
+    /** The configured model aliases — the operator's top-level `models:` map,
+     *  alias name → `{provider, model, kind?}` (`GET /v1/_models`). Non-secret and
+     *  global (the same set for every tenant); tenant-readable. Store an alias on
+     *  an agent or fork rather than the concrete model it names, and the agent
+     *  follows when the operator retargets the alias. */
+    async listModels(opts) {
+        return jsonFetch(this.ctx, "/v1/_models", opts);
+    }
+    /** For each user tier × tier, the ordered provider/model cascade a run
+     *  resolves to now, top first, with live availability and the candidate
+     *  `selected` (`GET /v1/_routing`). Tenant-readable. A non-admin caller gets
+     *  `admin: false`, no raw `last_error`, and — when the operator-key gate
+     *  restricts it — only the providers it can key itself
+     *  (`operator_key_restricted: true`). */
+    async getRouting(opts) {
+        return jsonFetch(this.ctx, "/v1/_routing", opts);
+    }
+    /** List the models a provider serves right now, by a live round-trip to it
+     *  (`GET /v1/_providers/{id}/models`) rather than the cached probe matrix.
+     *
+     *  **Requires an admin token.** A `substrate:tenant` token is refused with a
+     *  {@link LoomcycleError} whose `status` is 403 ("insufficient scope"); a
+     *  model picker built on a tenant token should fall back to
+     *  {@link LoomcycleClient.listModels} plus free-text model entry.
+     *
+     *  Errors carry the server's code on `e.code`: 404 `provider_unknown` (no such
+     *  driver), 503 `provider_unavailable` (known, but not configured — e.g. no
+     *  key), 502 `provider_list_failed` (the round-trip failed; bounded at 10 s
+     *  server-side). */
+    async listProviderModels(providerId, opts) {
+        return jsonFetch(this.ctx, `/v1/_providers/${encodeURIComponent(providerId)}/models`, opts);
+    }
     // ---- Snapshot lifecycle ----
     /** Capture running-state into a per-section-semver JSON envelope.
      *  Raises SnapshotTooLargeError on 413 when the envelope exceeds
@@ -1381,10 +1545,33 @@ export class LoomcycleClient {
      *  Raises {@link SubstrateToolRefusedError} on tool-level refusals
      *  (static-name collision, missing required credential, invalid
      *  cron, etc.); {@link InvalidArgumentError} on 400 (malformed
-     *  JSON); {@link AuthError} on 401. */
+     *  JSON); {@link AuthError} on 401.
+     *
+     *  Annotate the input as {@link ScheduleDefInput} to have the overlay and
+     *  each op's fields checked (including `add_hook` / `remove_hook`, which the
+     *  loose {@link SubstrateToolInput} does not list); a loose input is sent
+     *  as it is. For create / fork, {@link LoomcycleClient.createScheduleDef} /
+     *  {@link LoomcycleClient.forkScheduleDef} check a bare literal too. */
     async scheduleDef(input, opts) {
         return postJSON(this.ctx, "/v1/_scheduledef", input, opts);
     }
+    /** `scheduleDef({op: "create"})` with the overlay typed and no loose
+     *  fallback. {@link ScheduleDefOverlay} stays OPEN (the server drops keys it
+     *  does not know), so a misspelt key still compiles here; what fails is a
+     *  wrong type or value on a key it declares (`concurrency_policy: "skip"`,
+     *  an `on_complete` entry missing its `tool`). New versions are promoted
+     *  unless `promote: false`. */
+    async createScheduleDef(name, overlay, opts) {
+        return (await this.scheduleDef(defWriteInput("create", name, overlay, opts), signalOpts(opts)));
+    }
+    /** `scheduleDef({op: "fork"})`, typed like
+     *  {@link LoomcycleClient.createScheduleDef}. A field the overlay leaves out
+     *  keeps the parent's; the credential maps merge key by key. Forks the
+     *  active version of `name` (or its yaml template) unless `parentDefId` is
+     *  given; promoted unless `promote: false`. */
+    async forkScheduleDef(name, overlay, opts) {
+        return (await this.scheduleDef(defWriteInput("fork", name, overlay, opts), signalOpts(opts)));
+    }
     /** Invoke the v1.x RFC G A2AServerCardDef substrate tool over HTTP.
      *  Author + fork + retire A2A server-card definitions at runtime.
      *  Mirror of {@link LoomcycleClient.scheduleDef} for A2A server cards.
@@ -1426,10 +1613,33 @@ export class LoomcycleClient {
      *
      *  Raises {@link SubstrateToolRefusedError} on tool-level refusals;
      *  {@link InvalidArgumentError} on 400 (malformed JSON);
-     *  {@link AuthError} on 401. */
+     *  {@link AuthError} on 401.
+     *
+     *  Annotate the input as {@link WebhookDefInput} to have the overlay and
+     *  each op's fields checked; a loose input is sent as it is. For create /
+     *  fork, {@link LoomcycleClient.createWebhookDef} /
+     *  {@link LoomcycleClient.forkWebhookDef} check a bare literal too. */
     async webhookDef(input, opts) {
         return postJSON(this.ctx, "/v1/_webhookdef", input, opts);
     }
+    /** `webhookDef({op: "create"})` with the overlay typed and no loose
+     *  fallback. {@link WebhookDefOverlay} stays OPEN for now (the server drops
+     *  keys it does not know), so a misspelt key still compiles here; what
+     *  fails is a wrong type or value on a key it declares (`delivery: "run"`,
+     *  `auth.kind: "basic"`, a misspelt key inside `rate_limit`). Promoted
+     *  unless `promote: false`. */
+    async createWebhookDef(name, overlay, opts) {
+        return (await this.webhookDef(defWriteInput("create", name, overlay, opts), signalOpts(opts)));
+    }
+    /** `webhookDef({op: "fork"})`, typed like
+     *  {@link LoomcycleClient.createWebhookDef}. A field the overlay leaves out
+     *  keeps the parent's; naming exactly one of `agent` / `channel` / `team`
+     *  clears the other two. Forks the active version of `name` (or its yaml
+     *  template) unless `parentDefId` is given; promoted unless
+     *  `promote: false`. */
+    async forkWebhookDef(name, overlay, opts) {
+        return (await this.webhookDef(defWriteInput("fork", name, overlay, opts), signalOpts(opts)));
+    }
     /** Invoke the RFC I MR-3a MemoryBackendDef substrate tool over HTTP.
      *  Author + fork + retire named memory backend definitions at runtime.
      *  Mirror of {@link LoomcycleClient.webhookDef} for memory backends.
@@ -1458,10 +1668,71 @@ export class LoomcycleClient {
      *  matches, its body (code-js or a webhook URL), fail mode and timeout.
      *  Tenant-confined like agentDef. A HookDef fires on nothing by itself; an
      *  agent definition, a team definition or a run names it. Mirrors
-     *  POST /v1/_hookdef. */
+     *  POST /v1/_hookdef.
+     *
+     *  Annotate the input as {@link HookDefInput} to have the overlay checked
+     *  against the definition the server decodes STRICTLY — an unknown overlay
+     *  key is then a compile error instead of a refusal. A loose
+     *  {@link SubstrateToolInput} is sent as it is — including a bare literal
+     *  with a misspelt key, which falls through to that loose shape. To have a
+     *  bare literal checked, use {@link LoomcycleClient.createHookDef} /
+     *  {@link LoomcycleClient.forkHookDef}. */
     async hookDef(input, opts) {
         return postJSON(this.ctx, "/v1/_hookdef", input, opts);
     }
+    /** `hookDef({op: "create"})` with no loose fallback: `overlay` is the
+     *  CLOSED {@link HookDefOverlay}, so any key the server would refuse is a
+     *  compile error, even in a bare literal. Every create mints a new version
+     *  (use {@link LoomcycleClient.ensureHookDef} to register only on change);
+     *  promoted unless `promote: false`. */
+    async createHookDef(name, overlay, opts) {
+        return (await this.hookDef(defWriteInput("create", name, overlay, opts), signalOpts(opts)));
+    }
+    /** `hookDef({op: "fork"})`, closed like
+     *  {@link LoomcycleClient.createHookDef}. Each top-level field given replaces
+     *  the parent's; `null` clears one. Forks the active version of `name` in
+     *  your tenant unless `parentDefId` is given. NOT promoted unless
+     *  `promote: true` — authoring and putting in force are two steps. */
+    async forkHookDef(name, overlay, opts) {
+        return (await this.hookDef(defWriteInput("fork", name, overlay, opts), signalOpts(opts)));
+    }
+    /** Register a HookDef idempotently — the register-on-every-boot
+     *  convenience, sibling of {@link LoomcycleClient.ensureMcpServer}.
+     *
+     *  Unlike MCPServerDef and AgentDef, a HookDef `create` is NOT
+     *  content-addressed: every create mints a new version. And the hash
+     *  `verify` compares is computed over the server's own JSON encoding of the
+     *  definition, which this client cannot reproduce byte for byte. So instead
+     *  this reads the active version (`verify` for its def_id — it answers
+     *  `deployed: false` rather than raising — then `get`) and compares its
+     *  stored definition with `overlay`, both normalized the way the server
+     *  normalizes (`fail_mode` defaults to `"open"`, an empty `match.tools`,
+     *  description, header map or timeout is dropped). Equal → no write,
+     *  `changed: false`. Otherwise `create` with the default promote, which
+     *  makes the new version active.
+     *
+     *  The normalization only collapses what the server collapses, so a real
+     *  change is never skipped; should the server come to normalize something
+     *  more, the cost is a redundant version, not a lost one. The rationale
+     *  in {@link EnsureHookDefOptions.description} is not part of the
+     *  definition and does not count as a change. */
+    async ensureHookDef(name, overlay, opts) {
+        const callOpts = signalOpts(opts);
+        const verified = (await this.hookDef({ op: "verify", name }, callOpts));
+        if (verified.deployed && verified.current_def_id) {
+            // By def_id, not name: the version verify reported, even if another
+            // writer promotes a different one in between.
+            const active = (await this.hookDef({ op: "get", def_id: verified.current_def_id }, callOpts));
+            if (sameJSON(normalizeHookDef(active.definition), normalizeHookDef(overlay))) {
+                return { name, defId: active.def_id, version: active.version, changed: false };
+            }
+        }
+        const input = { op: "create", name, overlay };
+        if (opts?.description)
+            input.description = opts.description;
+        const row = (await this.hookDef(input, callOpts));
+        return { name, defId: row.def_id, version: row.version, changed: true };
+    }
     /** OperatorTokenDef substrate ops (create/rotate/retire/get/list) —
      *  RFC L OSS multi-tenant authorization. Operator-admin only. The
      *  token plaintext is returned ONCE in the create/rotate response.
@@ -1492,6 +1763,109 @@ export class LoomcycleClient {
     async volumeDef(input, opts) {
         return postJSON(this.ctx, "/v1/_volumedef", input, opts);
     }
+    // ---- Def name enumeration (GET /v1/_<family>def/names) ----
+    //
+    // Every name declared in one substrate family, each with its version
+    // roll-up — what the op-dispatched `list` op cannot give (it lists the
+    // versions of ONE name). Tenant-scoped server-side: a substrate:tenant token
+    // sees only its own tenant's names; an admin sees all, or focuses one tenant
+    // with `tenant` (ignored for a tenant token). The TeamDef family is
+    // {@link LoomcycleClient.listTeams}.
+    listDefNames(family, opts) {
+        const q = opts?.tenant ? `?tenant=${encodeURIComponent(opts.tenant)}` : "";
+        return jsonFetch(this.ctx, `/v1/_${family}/names${q}`, opts);
+    }
+    /** Every AgentDef name (`GET /v1/_agentdef/names`). */
+    async listAgentDefNames(opts) {
+        return this.listDefNames("agentdef", opts);
+    }
+    /** Every SkillDef name (`GET /v1/_skilldef/names`). */
+    async listSkillDefNames(opts) {
+        return this.listDefNames("skilldef", opts);
+    }
+    /** Every HookDef name (`GET /v1/_hookdef/names`). */
+    async listHookDefNames(opts) {
+        return this.listDefNames("hookdef", opts);
+    }
+    /** Every MCPServerDef name (`GET /v1/_mcpserverdef/names`). */
+    async listMcpServerDefNames(opts) {
+        return this.listDefNames("mcpserverdef", opts);
+    }
+    /** Every ScheduleDef name (`GET /v1/_scheduledef/names`). Substrate only —
+     *  {@link LoomcycleClient.listAllSchedules} merges in the static yaml ones. */
+    async listScheduleDefNames(opts) {
+        return this.listDefNames("scheduledef", opts);
+    }
+    /** Every A2AServerCardDef name (`GET /v1/_a2aservercarddef/names`). */
+    async listA2AServerCardDefNames(opts) {
+        return this.listDefNames("a2aservercarddef", opts);
+    }
+    /** Every A2AAgentDef name (`GET /v1/_a2aagentdef/names`). */
+    async listA2AAgentDefNames(opts) {
+        return this.listDefNames("a2aagentdef", opts);
+    }
+    /** Every WebhookDef name (`GET /v1/_webhookdef/names`). */
+    async listWebhookDefNames(opts) {
+        return this.listDefNames("webhookdef", opts);
+    }
+    /** Every MemoryBackendDef name (`GET /v1/_memorybackenddef/names`). */
+    async listMemoryBackendDefNames(opts) {
+        return this.listDefNames("memorybackenddef", opts);
+    }
+    /** Every DocumentSourceDef name (`GET /v1/_documentsourcedef/names`). */
+    async listDocumentSourceDefNames(opts) {
+        return this.listDefNames("documentsourcedef", opts);
+    }
+    /** Every OperatorTokenDef name (`GET /v1/_operatortokendef/names`), with its
+     *  subject and token counts — never a token. **Admin token only**: token
+     *  minting stays operator-only, so a `substrate:tenant` token is refused
+     *  with 403. */
+    async listOperatorTokenDefNames(opts) {
+        return this.listDefNames("operatortokendef", opts);
+    }
+    // ---- Schedules admin (GET/POST /v1/_schedules/...) ----
+    //
+    // What the Web UI's schedules page drives: the merged list, one schedule's
+    // runtime state, and run-now / pause / resume. Authoring stays on
+    // {@link LoomcycleClient.scheduleDef}. The per-schedule methods take the
+    // ScheduleDef's `active_def_id`; a static yaml schedule has none to give, and
+    // a tenant token reaching another tenant's def gets the same 404 as an
+    // unknown one ({@link NotFoundError}).
+    /** Every schedule: static yaml `scheduled_runs` and ScheduleDefs, merged by
+     *  name (`GET /v1/_schedules/list-all`), sorted by name. A tenant token sees
+     *  only its own tenant's ScheduleDefs — static schedules are operator
+     *  automation and appear only for an admin, who may focus one tenant with
+     *  `tenant`. */
+    async listAllSchedules(opts) {
+        const q = opts?.tenant ? `?tenant=${encodeURIComponent(opts.tenant)}` : "";
+        return jsonFetch(this.ctx, `/v1/_schedules/list-all${q}`, opts);
+    }
+    /** One schedule's runtime state (`GET /v1/_schedules/{def_id}/state`): last
+     *  and next fire, pause, the last slot claim, the catch-up backlog and the
+     *  runs it has in flight. 404 when the def has no state row (never promoted,
+     *  retired, or not yours). */
+    async getScheduleState(defId, opts) {
+        return jsonFetch(this.ctx, `/v1/_schedules/${encodeURIComponent(defId)}/state`, opts);
+    }
+    /** Fire a schedule now (`POST /v1/_schedules/{def_id}/run-now`). The run
+     *  starts on the scheduler's next tick, not during this call, and the regular
+     *  cadence continues after it. A run already in flight is handled by the
+     *  schedule's `concurrency_policy`. 404 for an unknown def. */
+    async runScheduleNow(defId, opts) {
+        return postJSON(this.ctx, `/v1/_schedules/${encodeURIComponent(defId)}/run-now`, undefined, opts);
+    }
+    /** Pause a schedule indefinitely (`POST /v1/_schedules/{def_id}/pause`) until
+     *  {@link LoomcycleClient.resumeSchedule}. Takes no duration: the server sets
+     *  `paused_until` about 100 years ahead. Distinct from
+     *  {@link LoomcycleClient.pauseRuntime}, which stops the whole runtime. */
+    async pauseSchedule(defId, opts) {
+        return postJSON(this.ctx, `/v1/_schedules/${encodeURIComponent(defId)}/pause`, undefined, opts);
+    }
+    /** Clear a schedule's pause (`POST /v1/_schedules/{def_id}/resume`), so the
+     *  scheduler considers it due again; `next_run_at` is left as it was. */
+    async resumeSchedule(defId, opts) {
+        return postJSON(this.ctx, `/v1/_schedules/${encodeURIComponent(defId)}/resume`, undefined, opts);
+    }
     // ---- RFC AP Agent Teams (TeamDef substrate) ----
     //
     // TeamDefs are agent-team workflow graphs (states + transitions + a per-state
@@ -1520,15 +1894,37 @@ export class LoomcycleClient {
     }
     /** Author a new TeamDef (op=create). `overlay` is the workflow graph
      *  (`{entry, states, transitions, max_iterations?, colors?}`), validated
-     *  server-side — an invalid graph raises {@link SubstrateToolRefusedError}. */
+     *  server-side — an invalid graph raises {@link SubstrateToolRefusedError}.
+     *
+     *  `opts.promote` and `opts.description` ride beside `signal`, as on
+     *  {@link LoomcycleClient.forkTeam}; each is sent only when set. Omitted,
+     *  the server promotes a create (unlike a fork); `promote: false` authors the
+     *  version without putting it in force. */
     async createTeam(name, overlay, opts) {
-        return postJSON(this.ctx, "/v1/_teamdef", { op: "create", name, overlay }, opts);
+        const body = { op: "create", name, overlay };
+        if (opts?.promote !== undefined)
+            body.promote = opts.promote;
+        if (opts?.description !== undefined)
+            body.description = opts.description;
+        return postJSON(this.ctx, "/v1/_teamdef", body, { signal: opts?.signal });
     }
     /** Save an edited graph as a NEW version of an existing team (op=fork). With
-     *  no parent the server forks the name's active def; `overlay` (a full graph)
-     *  replaces it. Validated server-side ({@link SubstrateToolRefusedError}). */
+     *  no `parentDefId` the server forks the name's active def; `overlay` (a full
+     *  graph) replaces it. Validated server-side ({@link SubstrateToolRefusedError}).
+     *
+     *  The fork's own fields ride in `opts` beside `signal` — the pattern
+     *  {@link LoomcycleClient.setRunBreakpoints} uses — so existing two- and
+     *  three-argument calls are unchanged. `promote: true` puts the new version
+     *  in force in the same call; omitted, it is authored but not active. */
     async forkTeam(name, overlay, opts) {
-        return postJSON(this.ctx, "/v1/_teamdef", { op: "fork", name, overlay }, opts);
+        const body = { op: "fork", name, overlay };
+        if (opts?.promote !== undefined)
+            body.promote = opts.promote;
+        if (opts?.parentDefId !== undefined)
+            body.parent_def_id = opts.parentDefId;
+        if (opts?.description !== undefined)
+            body.description = opts.description;
+        return postJSON(this.ctx, "/v1/_teamdef", body, { signal: opts?.signal });
     }
     /** List every version of ONE team, newest first (op=list) — the lineage
      *  behind {@link LoomcycleClient.listTeams}' roll-up. Tenant-scoped
@@ -1600,6 +1996,8 @@ export class LoomcycleClient {
             body.review_ttl_seconds = target.reviewTtlSeconds;
         if (target.idempotencyKey !== undefined)
             body.idempotency_key = target.idempotencyKey;
+        if (target.interruptOnCap !== undefined)
+            body.interrupt_on_cap = target.interruptOnCap;
         return postJSON(this.ctx, "/v1/_teamdef", body, opts);
     }
     /** Read the debug breakpoints armed on a live team walk
@@ -1751,6 +2149,48 @@ export class LoomcycleClient {
     async history(input, opts) {
         return postJSON(this.ctx, "/v1/_history", input, opts);
     }
+    async evaluation(input, opts) {
+        return postJSON(this.ctx, "/v1/_evaluation", input, opts);
+    }
+    /** Record a score against a run — `evaluation({op:"submit"})`. Scores are
+     *  additive: a second submit records another evaluation. */
+    async submitEvaluation(runId, score, opts) {
+        const input = { op: "submit", run_id: runId, score };
+        if (opts?.dimensions !== undefined)
+            input.dimensions = opts.dimensions;
+        if (opts?.judgement !== undefined)
+            input.judgement = opts.judgement;
+        if (opts?.rationale !== undefined)
+            input.rationale = opts.rationale;
+        return this.evaluation(input, { signal: opts?.signal });
+    }
+    /** One evaluation by id — `evaluation({op:"get"})`. */
+    async getEvaluation(evalId, opts) {
+        return this.evaluation({ op: "get", eval_id: evalId }, opts);
+    }
+    /** Every evaluation of one run — `evaluation({op:"list_for_run"})`. */
+    async listEvaluationsForRun(runId, opts) {
+        const input = { op: "list_for_run", run_id: runId };
+        if (opts?.limit !== undefined)
+            input.limit = opts.limit;
+        return this.evaluation(input, { signal: opts?.signal });
+    }
+    /** Every evaluation of one definition version, in your tenant —
+     *  `evaluation({op:"list_for_def"})`. */
+    async listEvaluationsForDef(defId, opts) {
+        const input = { op: "list_for_def", def_id: defId };
+        if (opts?.limit !== undefined)
+            input.limit = opts.limit;
+        return this.evaluation(input, { signal: opts?.signal });
+    }
+    /** A definition's scores rolled up — `evaluation({op:"aggregate"})`.
+     *  `includeLineage` adds the ancestors' evaluations along parent_def_id. */
+    async aggregateEvaluations(defId, opts) {
+        const input = { op: "aggregate", def_id: defId };
+        if (opts?.includeLineage !== undefined)
+            input.include_lineage = opts.includeLineage;
+        return this.evaluation(input, { signal: opts?.signal });
+    }
     /** List the PERSISTENT volume universe for the caller's tenant — every
      *  static volume (the shared bind floor, `source: "static"`, read-only)
      *  plus the tenant's own dynamic VolumeDefs (`source: "dynamic"`). Host
@@ -2307,11 +2747,11 @@ export class LoomcycleClient {
      *
      *  v1.78.0 — `walkId` is a SERVER-side filter: only the runs one team
      *  walk spawned. A walk's own run_id IS its walk id, so a caller that
-     *  started a team with `detach: true` passes back the handle it already
+     *  started a team with `mode: "detach"` passes back the handle it already
      *  holds and gets a live view of that workflow's agents:
      *
      *  ```ts
-     *  const { run_id } = await client.runTeam({ team: "triage", detach: true });
+     *  const { run_id } = await client.runTeam({ name: "triage", mode: "detach" });
      *  for await (const item of client.streamUserRunStates(userId, { walkId: run_id })) {
      *    if (item.kind === "event") place(item.payload.parent_context?.wave_index);
      *  }
@@ -2393,6 +2833,61 @@ export class LoomcycleClient {
             yield { kind: "close", payload: { reason: closeReason } };
         }
     }
+    /** Tail the caller's tenant's MEMORY change feed (RFC CD Part C) — one
+     *  value-free coordinate per `memory.set` / `memory.delete` /
+     *  `memory.scope_deleted`. Mirrors `GET /v1/_memory/changes?since=<seq>`.
+     *
+     *  The first item is always `{ kind: "feed", payload: ChangeFeedStatus }`,
+     *  then one `{ kind: "change", payload: MemoryChange }` per change, oldest
+     *  first. Pull the current value through the data API; the feed never
+     *  carries it.
+     *
+     *  - The feed is EMPTY unless the server runs with
+     *    `LOOMCYCLE_MEMORY_CHANGES_ENABLED`. The stream still opens and idles,
+     *    so read `payload.enabled` on the feed frame instead of waiting.
+     *  - Scope is the caller's OWN tenant; there is no cross-tenant feed.
+     *  - Needs `substrate:tenant` (or admin). A tenant MEMBER's token is refused
+     *    — the feed exposes the tenant's write pattern, which is operator
+     *    observability, not member data.
+     *  - To resume after a disconnect, persist the last `payload.seq` you
+     *    processed and pass it back as `since`. A cursor older than the
+     *    server's change retention resumes past the pruned gap without saying
+     *    so.
+     *  - A `{ kind: "error", payload: ChangeFeedError }` item means the server
+     *    could not read its change log. It is NOT fatal and iteration
+     *    continues: the server retries with backoff without advancing its
+     *    cursor, so changes resume after recovery with no gap. One item per
+     *    failure streak.
+     *  - The stream has no end of its own: iteration ends when the server
+     *    closes it (shutdown — reconnect with `since`) or throws an
+     *    `AbortError` when `signal` aborts. */
+    async *streamMemoryChanges(opts) {
+        yield* this.streamChangeFeed("/v1/_memory/changes", opts);
+    }
+    /** Tail the caller's tenant's DOCUMENT change feed (RFC CD Part C) — one
+     *  coordinate per `document.chunk.updated` / `document.chunk.deleted`,
+     *  naming the `chunk_id`. Mirrors `GET /v1/_document/changes?since=<seq>`.
+     *  Same frames, scope, auth and resume contract as
+     *  {@link LoomcycleClient.streamMemoryChanges}; a reader wanting both
+     *  families opens both. */
+    async *streamDocumentChanges(opts) {
+        yield* this.streamChangeFeed("/v1/_document/changes", opts);
+    }
+    async *streamChangeFeed(path, opts) {
+        const since = opts?.since;
+        // The server reads an unparseable or negative `since` as 0 rather than
+        // refusing it, which replays every retained change — a resume bug that
+        // would look like a burst of activity. Refuse it here instead.
+        if (since !== undefined && !(Number.isSafeInteger(since) && since >= 0)) {
+            throw new Error(`loomcycle: change feed "since" must be a non-negative integer, got ${String(since)}`);
+        }
+        const q = since ? `?since=${since}` : "";
+        for await (const ev of this.streamSSEGet(path + q, opts?.signal)) {
+            const frame = toChangeFeedFrame(ev);
+            if (frame)
+                yield frame;
+        }
+    }
     /** List credential METADATA for a scope (RFC AR) — never a secret value.
      *  `user` = your own subject's tokens (per-user, e.g. a personal Telegram bot
      *  token); `tenant` = shared across the tenant (operator authority). RFC CN: a
@@ -2403,10 +2898,35 @@ export class LoomcycleClient {
     }
     /** Store or rotate a credential (RFC AR). The plaintext `value` is write-only:
      *  the server encrypts it, masks it from the transcript, and never returns it.
-     *  Returns the stored row's metadata. Mirrors `POST /v1/_credentialdef {op:create}`. */
+     *  Returns the stored row's metadata. Mirrors `POST /v1/_credentialdef {op:create}`.
+     *
+     *  `allowed_urls` restricts where the value may be sent: https URLs, each
+     *  covering itself and everything under it. `[]` stores a value that is
+     *  sent nowhere. Leave it out for no restriction, or, when the credential
+     *  already exists, to keep the list it has. A restricted credential is used
+     *  only where the destination is known and covered (an MCP server's or a
+     *  hook's header, a remote peer's key, a git source), never as a provider
+     *  key.
+     *
+     *  `username` is the user name sent with the value where a destination
+     *  takes one (HTTP basic auth for a git source). Leave it out to keep the
+     *  stored one; `""` removes it.
+     *
+     *  `expires_at` is an RFC3339 timestamp (`"2026-12-31T00:00:00Z"`) stored
+     *  with the credential and reported back in its metadata; any other format
+     *  is refused. `backend` is where the value is kept: `"inline"` (encrypted
+     *  in loomcycle's own store, the default) is the only one accepted. */
     async createCredential(input, opts) {
         return postJSON(this.ctx, "/v1/_credentialdef", { op: "create", ...input }, opts);
     }
+    /** Read ONE credential's metadata (RFC AR) — never its value. Answers
+     *  whether a name is stored, and its `allowed_urls` / `username` /
+     *  `expires_at`, without listing the whole scope. An absent name raises
+     *  {@link SubstrateToolRefusedError}. Mirrors
+     *  `POST /v1/_credentialdef {op:get}`. */
+    async getCredential(input, opts) {
+        return postJSON(this.ctx, "/v1/_credentialdef", { op: "get", ...input }, opts);
+    }
     /** Delete a credential (RFC AR). Anything referencing `$cred:<name>` at that
      *  scope stops resolving. Mirrors `POST /v1/_credentialdef {op:delete}`. */
     async deleteCredential(input, opts) {
@@ -2462,6 +2982,113 @@ async function* parseRunStateSSE(reader) {
         }
     }
 }
+/** The wire input of a typed create / fork. `promote` goes out only when the
+ *  caller set it — false included — so the server's per-def default applies
+ *  otherwise. */
+function defWriteInput(op, name, overlay, opts) {
+    const input = { op, name, overlay };
+    if (opts?.parentDefId)
+        input.parent_def_id = opts.parentDefId;
+    if (opts?.description)
+        input.description = opts.description;
+    if (opts?.promote !== undefined)
+        input.promote = opts.promote;
+    return input;
+}
+function signalOpts(opts) {
+    return opts?.signal ? { signal: opts.signal } : undefined;
+}
+/** The form a HookDef definition is stored in: hooks.Def.Normalize followed
+ *  by Go's omitempty encoding. Applied to both sides of ensureHookDef's
+ *  comparison; the stored side is already in this form, so what matters is
+ *  that the overlay lands exactly where the server would put it. */
+function normalizeHookDef(d) {
+    const out = { event: d.event };
+    const description = goTrimSpace(d.description ?? "");
+    if (description)
+        out.description = description;
+    if (d.match?.tools && d.match.tools.length > 0)
+        out.match = { tools: d.match.tools };
+    const body = { kind: d.body.kind };
+    if (d.body.kind === "code-js") {
+        if (d.body.code)
+            body.code = d.body.code;
+    }
+    else {
+        if (d.body.url)
+            body.url = d.body.url;
+        if (d.body.headers && Object.keys(d.body.headers).length > 0)
+            body.headers = d.body.headers;
+        if (d.body.signing_secret)
+            body.signing_secret = d.body.signing_secret;
+    }
+    out.body = body;
+    out.fail_mode = d.fail_mode || "open";
+    if (d.timeout_ms)
+        out.timeout_ms = d.timeout_ms;
+    return out;
+}
+/** strings.TrimSpace: Go's Unicode White_Space set, which is not
+ *  String.prototype.trim's (Go trims U+0085 and keeps U+FEFF; JavaScript does
+ *  the reverse). Trimming differently could make two descriptions the server
+ *  stores differently compare equal, and skip a real change. */
+const goTrimRe = /^[\t\n\v\f\r \u0085\u00A0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]+|[\t\n\v\f\r \u0085\u00A0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]+$/g;
+function goTrimSpace(s) {
+    return s.replace(goTrimRe, "");
+}
+/** Structural JSON equality, ignoring object key order (the server's
+ *  encoding orders keys by struct field, a caller's literal by whatever it
+ *  wrote). Arrays compare in order. */
+function sameJSON(a, b) {
+    if (a === b)
+        return true;
+    if (typeof a !== "object" || typeof b !== "object" || a === null || b === null)
+        return false;
+    if (Array.isArray(a) !== Array.isArray(b))
+        return false;
+    if (Array.isArray(a) && Array.isArray(b)) {
+        return a.length === b.length && a.every((v, i) => sameJSON(v, b[i]));
+    }
+    const ao = a;
+    const bo = b;
+    const keys = Object.keys(ao);
+    if (keys.length !== Object.keys(bo).length)
+        return false;
+    return keys.every((k) => Object.prototype.hasOwnProperty.call(bo, k) && sameJSON(ao[k], bo[k]));
+}
+/** toChangeFeedFrame types one frame of a change feed, or returns null for a
+ *  frame it does not recognise.
+ *
+ *  The frames arrive through parseSSE, which backfills `type` from the SSE
+ *  event name ONLY when the payload has none. The `feed` and `error` frames
+ *  deliberately carry no `type`, so they surface as `type: "feed"` /
+ *  `type: "error"`; a `change` frame
+ *  carries its own change type (`memory.set`, …), so it is recognised by its
+ *  numeric `seq` instead. Anything else — an event name a newer server adds —
+ *  is skipped, the adapter's usual ignore-what-you-don't-know posture. */
+function toChangeFeedFrame(raw) {
+    if (raw.type === "feed") {
+        // An unreadable status must not default to enabled: the frame exists so a
+        // disabled feed is not mistaken for a quiet one.
+        if (typeof raw.enabled !== "boolean")
+            return null;
+        const { type: _type, ...status } = raw;
+        return { kind: "feed", payload: status };
+    }
+    if (raw.type === "error") {
+        // Like `feed`, the error frame carries no `type` of its own, so this one
+        // was backfilled from the event name. Both fields are required: a
+        // half-read error is skipped rather than surfaced as a blank one.
+        if (typeof raw.code !== "string" || typeof raw.error !== "string")
+            return null;
+        const { type: _type, ...failure } = raw;
+        return { kind: "error", payload: failure };
+    }
+    if (typeof raw.seq === "number" && typeof raw.type === "string") {
+        return { kind: "change", payload: raw };
+    }
+    return null;
+}
 // channelOpPath builds the v0.9.x Channel CRUD URL. Two families:
 //   - scope === "global" → /v1/_channels/{channel}/{op}
 //   - scope === "user"   → /v1/users/{userId}/channels/{channel}/{op}