@loomcycle/client 1.49.0 → 1.51.0

package/dist/cjs/client.js

@@ -508,6 +508,62 @@ class LoomcycleClient {
         const q = opts?.tenant ? `?tenant=${encodeURIComponent(opts.tenant)}` : "";
         return (0, fetch_helpers_js_1.jsonFetch)(this.ctx, `/v1/_users${q}`, opts);
     }
+    // ---- RFC BX Phase 2: tenant-owned users + delegated per-user tokens (v1.50.0+) ----
+    //
+    // A tenant operator (substrate:tenant) manages the first-class users in its
+    // OWN tenant and mints/lists/revokes bearer tokens for them. The tenant is
+    // always server-derived from the authenticated principal — never sent — so
+    // there is no tenant field on any of these calls. Requires a persistent store
+    // (503 otherwise).
+    /** Register a first-class user in the caller's own tenant. `access_mode`
+     *  defaults to "tenant" (collaborates on tenant-shared primitives);
+     *  "isolated" confines the member to its own user scope. 409 on a duplicate
+     *  (tenant, subject). */
+    async createUser(body, opts) {
+        return (0, fetch_helpers_js_1.postJSON)(this.ctx, "/v1/_users", body, opts);
+    }
+    /** Patch mutable fields on a user in the caller's own tenant. An omitted key
+     *  leaves the column unchanged. Disabling a user (status:"disabled") also
+     *  revokes its delegated tokens server-side. Cross-tenant target → 404. */
+    async updateUser(subject, body, opts) {
+        return (0, fetch_helpers_js_1.patchJSON)(this.ctx, `/v1/_users/${encodeURIComponent(subject)}`, body, opts);
+    }
+    /** Delete the user identity row in the caller's own tenant (204). Its
+     *  delegated tokens are retired first so the bearer cannot outlive the row.
+     *  Owned data (runs / sessions / memory) is left intact — this is not
+     *  erasure ({@link erasureExecute}). Cross-tenant target → 404. */
+    async deleteUser(subject, opts) {
+        return (0, fetch_helpers_js_1.deleteRequest)(this.ctx, `/v1/_users/${encodeURIComponent(subject)}`, opts);
+    }
+    /** Mint a bearer token for one of the caller's own ACTIVE users. The granted
+     *  scopes are DERIVED server-side from the member's access_mode (never sent),
+     *  and the plaintext `token` is returned exactly ONCE — store it now, it is
+     *  never retrievable again. 404 for an unknown/cross-tenant subject; 409 for
+     *  a disabled user. */
+    async mintUserToken(subject, opts) {
+        return (0, fetch_helpers_js_1.postJSON)(this.ctx, `/v1/_users/${encodeURIComponent(subject)}/tokens`, undefined, opts);
+    }
+    /** List the caller's own user's delegated tokens — METADATA ONLY (never the
+     *  plaintext or hash). `active` applies the auth-layer validity rule so a
+     *  revoked token reads as inactive. */
+    async listUserTokens(subject, opts) {
+        return (0, fetch_helpers_js_1.jsonFetch)(this.ctx, `/v1/_users/${encodeURIComponent(subject)}/tokens`, opts);
+    }
+    /** Revoke (retire, immediate) one of the caller's own user's delegated
+     *  tokens by def_id. A def_id that is not this (tenant, subject)'s member
+     *  token is an opaque 404. Returns {def_id, retired_at}. */
+    async revokeUserToken(subject, defId, opts) {
+        return (0, fetch_helpers_js_1.deleteJSON)(this.ctx, `/v1/_users/${encodeURIComponent(subject)}/tokens/${encodeURIComponent(defId)}`, opts);
+    }
+    /** List the agents the caller may run (RFC BY, v1.51.0+), tiered by access
+     *  mode: bundled/system always, the tenant's shared agents for a non-isolated
+     *  caller, own reserved. Member-read (runs:read), so a delegated user token
+     *  reaches it — the tiering is decided server-side from the caller's access
+     *  mode. Lean entries (name + source); operator metadata stays in the
+     *  Library. */
+    async runnableAgents(opts) {
+        return (0, fetch_helpers_js_1.jsonFetch)(this.ctx, "/v1/_runnable-agents", opts);
+    }
     /** Whoami — the authenticated principal (RFC L v0.17.0). Any
      *  authenticated bearer; returns its authoritative tenant / subject /
      *  scopes + `is_admin`. `open_mode: true` when the server runs without

package/dist/cjs/fetch-helpers.js

@@ -17,6 +17,7 @@ exports.postJSON = postJSON;
 exports.putJSON = putJSON;
 exports.patchJSON = patchJSON;
 exports.deleteRequest = deleteRequest;
+exports.deleteJSON = deleteJSON;
 exports.raiseFromResponse = raiseFromResponse;
 const errors_js_1 = require("./errors.js");
 /** authHeaders builds the standard request header set: JSON Accept
@@ -141,6 +142,21 @@ async function deleteRequest(ctx, path, opts) {
         await raiseFromResponse(resp);
     }
 }
+/** deleteJSON is deleteRequest for the DELETE endpoints that DO return a
+ *  body (e.g. a revoke that echoes {def_id, retired_at}). 204 → null. */
+async function deleteJSON(ctx, path, opts) {
+    const resp = await ctx.fetchImpl(ctx.baseUrl + path, {
+        method: "DELETE",
+        headers: authHeaders(ctx),
+        signal: opts?.signal,
+    });
+    if (!resp.ok) {
+        await raiseFromResponse(resp);
+    }
+    if (resp.status === 204)
+        return null;
+    return (await resp.json());
+}
 /**
  * raiseFromResponse — the single point where HTTP status + body
  * text get mapped to typed errors. Always throws; the function

package/dist/cjs/index.js

@@ -18,6 +18,13 @@
  *     getTranscript(sessionId): Promise<TranscriptResponse>
  *     health(): Promise<HealthResponse>
  *     listUsers(opts?): Promise<ListUsersResponse>   // tenant-scoped (RFC L)
+ *     createUser(body, opts?): Promise<UserRecord>    // RFC BX P2 (v1.50.0)
+ *     updateUser(subject, body, opts?): Promise<UserRecord>
+ *     deleteUser(subject, opts?): Promise<void>
+ *     mintUserToken(subject, opts?): Promise<MintedUserToken>   // delegated token
+ *     listUserTokens(subject, opts?): Promise<ListUserTokensResponse>
+ *     revokeUserToken(subject, defId, opts?): Promise<{def_id, retired_at}>
+ *     runnableAgents(opts?): Promise<RunnableAgentsResponse>    // RFC BY (v1.51.0) — agents I can run
  *     whoami(): Promise<WhoamiResponse>               // RFC L principal (v0.17.0)
  *
  *     // Pause / Resume / State (v0.8.17/8.18)

package/dist/client.d.ts

@@ -25,7 +25,7 @@
  */
 import { InteractiveSession } from "./interactive.js";
 import { ClientToolHost, type ConnectClientToolsOptions } from "./client-tools.js";
-import type { DirectoryInspection, DirectoryTenant, DirectoryUser, ErasureReport, ErasureResult, Agent, AgentEvent, AgentStatus, CancelAgentResult, ClientOptions, ContinueOptions, CreateSnapshotOptions, EnsureCodeAgentOptions, EnsureCodeAgentResult, EnsureMcpServerOptions, EnsureMcpServerResult, HealthResponse, Hook, InterruptListResponse, InterruptStatus, AckChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAckResult, ChannelAwaitResult, ChannelBroadcastResult, ChannelDescriptor, ChannelPeekResult, ChannelPublishResult, ChannelPurgeResult, ChannelSubscribeResult, CreateChannelOptions, ListChannelsResponse, PeekChannelOptions, PublishChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, SubscribeChannelOptions, UpdateChannelOptions, LibraryAgentDefinition, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, ListUsersResponse, LLMChatOptions, LLMChatResponse, LLMChatStreamItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, MCPServerDefVerifyResult, MemoryEmbedStatsResponse, MemoryEntriesResponse, MemoryEntryResponse, MemoryReembedResponse, MemoryScopeIDsResponse, MemoryScopesResponse, MemorySearchInput, MemorySearchResponse, PauseResult, PersistentVolumesResponse, EphemeralVolumesResponse, RegisterHookOptions, RegisterHookResponse, ResolveInterruptOptions, ResumeResult, ResolverMatrix, CompactRunResult, ReplaySessionResult, CancelTurnResult, RunBatchOptions, RunBatchResult, RunOptions, RunStateStreamItem, RuntimeStateResponse, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotRestoreResponse, StreamUserRunStatesOptions, SubstrateToolInput, SubstrateToolResponse, CreatedTeam, ListTeamsResponse, TeamDefDetail, TeamDiagram, TeamRunResult, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, HistoryToolInput, HistoryToolResponse, TranscriptResponse, WhoamiResponse, UsageDimension, UsageReportResponse, TokenLimit, TokenLimitsResponse, ConfigResponse, SetTokenLimitRequest } from "./types.js";
+import type { DirectoryInspection, DirectoryTenant, DirectoryUser, ErasureReport, ErasureResult, Agent, AgentEvent, AgentStatus, CancelAgentResult, ClientOptions, ContinueOptions, CreateSnapshotOptions, EnsureCodeAgentOptions, EnsureCodeAgentResult, EnsureMcpServerOptions, EnsureMcpServerResult, HealthResponse, Hook, InterruptListResponse, InterruptStatus, AckChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAckResult, ChannelAwaitResult, ChannelBroadcastResult, ChannelDescriptor, ChannelPeekResult, ChannelPublishResult, ChannelPurgeResult, ChannelSubscribeResult, CreateChannelOptions, ListChannelsResponse, PeekChannelOptions, PublishChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, SubscribeChannelOptions, UpdateChannelOptions, LibraryAgentDefinition, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, ListUsersResponse, UserRecord, CreateUserBody, UpdateUserBody, MintedUserToken, ListUserTokensResponse, RunnableAgentsResponse, LLMChatOptions, LLMChatResponse, LLMChatStreamItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, MCPServerDefVerifyResult, MemoryEmbedStatsResponse, MemoryEntriesResponse, MemoryEntryResponse, MemoryReembedResponse, MemoryScopeIDsResponse, MemoryScopesResponse, MemorySearchInput, MemorySearchResponse, PauseResult, PersistentVolumesResponse, EphemeralVolumesResponse, RegisterHookOptions, RegisterHookResponse, ResolveInterruptOptions, ResumeResult, ResolverMatrix, CompactRunResult, ReplaySessionResult, CancelTurnResult, RunBatchOptions, RunBatchResult, RunOptions, RunStateStreamItem, RuntimeStateResponse, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotRestoreResponse, StreamUserRunStatesOptions, SubstrateToolInput, SubstrateToolResponse, CreatedTeam, ListTeamsResponse, TeamDefDetail, TeamDiagram, TeamRunResult, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, HistoryToolInput, HistoryToolResponse, TranscriptResponse, WhoamiResponse, UsageDimension, UsageReportResponse, TokenLimit, TokenLimitsResponse, ConfigResponse, SetTokenLimitRequest } from "./types.js";
 export declare class LoomcycleClient {
     private ctx;
     constructor(opts?: ClientOptions);
@@ -339,6 +339,58 @@ export declare class LoomcycleClient {
         tenant?: string;
         signal?: AbortSignal;
     }): Promise<ListUsersResponse>;
+    /** Register a first-class user in the caller's own tenant. `access_mode`
+     *  defaults to "tenant" (collaborates on tenant-shared primitives);
+     *  "isolated" confines the member to its own user scope. 409 on a duplicate
+     *  (tenant, subject). */
+    createUser(body: CreateUserBody, opts?: {
+        signal?: AbortSignal;
+    }): Promise<UserRecord>;
+    /** Patch mutable fields on a user in the caller's own tenant. An omitted key
+     *  leaves the column unchanged. Disabling a user (status:"disabled") also
+     *  revokes its delegated tokens server-side. Cross-tenant target → 404. */
+    updateUser(subject: string, body: UpdateUserBody, opts?: {
+        signal?: AbortSignal;
+    }): Promise<UserRecord>;
+    /** Delete the user identity row in the caller's own tenant (204). Its
+     *  delegated tokens are retired first so the bearer cannot outlive the row.
+     *  Owned data (runs / sessions / memory) is left intact — this is not
+     *  erasure ({@link erasureExecute}). Cross-tenant target → 404. */
+    deleteUser(subject: string, opts?: {
+        signal?: AbortSignal;
+    }): Promise<void>;
+    /** Mint a bearer token for one of the caller's own ACTIVE users. The granted
+     *  scopes are DERIVED server-side from the member's access_mode (never sent),
+     *  and the plaintext `token` is returned exactly ONCE — store it now, it is
+     *  never retrievable again. 404 for an unknown/cross-tenant subject; 409 for
+     *  a disabled user. */
+    mintUserToken(subject: string, opts?: {
+        signal?: AbortSignal;
+    }): Promise<MintedUserToken>;
+    /** List the caller's own user's delegated tokens — METADATA ONLY (never the
+     *  plaintext or hash). `active` applies the auth-layer validity rule so a
+     *  revoked token reads as inactive. */
+    listUserTokens(subject: string, opts?: {
+        signal?: AbortSignal;
+    }): Promise<ListUserTokensResponse>;
+    /** Revoke (retire, immediate) one of the caller's own user's delegated
+     *  tokens by def_id. A def_id that is not this (tenant, subject)'s member
+     *  token is an opaque 404. Returns {def_id, retired_at}. */
+    revokeUserToken(subject: string, defId: string, opts?: {
+        signal?: AbortSignal;
+    }): Promise<{
+        def_id: string;
+        retired_at: string;
+    }>;
+    /** List the agents the caller may run (RFC BY, v1.51.0+), tiered by access
+     *  mode: bundled/system always, the tenant's shared agents for a non-isolated
+     *  caller, own reserved. Member-read (runs:read), so a delegated user token
+     *  reaches it — the tiering is decided server-side from the caller's access
+     *  mode. Lean entries (name + source); operator metadata stays in the
+     *  Library. */
+    runnableAgents(opts?: {
+        signal?: AbortSignal;
+    }): Promise<RunnableAgentsResponse>;
     /** Whoami — the authenticated principal (RFC L v0.17.0). Any
      *  authenticated bearer; returns its authoritative tenant / subject /
      *  scopes + `is_admin`. `open_mode: true` when the server runs without

package/dist/client.js

@@ -23,7 +23,7 @@
  * via fetch-helpers.ts:raiseFromResponse — see README.md for the
  * full mapping table.
  */
-import { authHeaders, deleteRequest, jsonFetch, patchJSON, postJSON, putJSON, raiseFromResponse, } from "./fetch-helpers.js";
+import { authHeaders, deleteRequest, deleteJSON, jsonFetch, patchJSON, postJSON, putJSON, raiseFromResponse, } from "./fetch-helpers.js";
 import { parseSSE } from "./stream.js";
 import { InteractiveSession } from "./interactive.js";
 import { ClientToolHost, clientToolsURL, } from "./client-tools.js";
@@ -505,6 +505,62 @@ export class LoomcycleClient {
         const q = opts?.tenant ? `?tenant=${encodeURIComponent(opts.tenant)}` : "";
         return jsonFetch(this.ctx, `/v1/_users${q}`, opts);
     }
+    // ---- RFC BX Phase 2: tenant-owned users + delegated per-user tokens (v1.50.0+) ----
+    //
+    // A tenant operator (substrate:tenant) manages the first-class users in its
+    // OWN tenant and mints/lists/revokes bearer tokens for them. The tenant is
+    // always server-derived from the authenticated principal — never sent — so
+    // there is no tenant field on any of these calls. Requires a persistent store
+    // (503 otherwise).
+    /** Register a first-class user in the caller's own tenant. `access_mode`
+     *  defaults to "tenant" (collaborates on tenant-shared primitives);
+     *  "isolated" confines the member to its own user scope. 409 on a duplicate
+     *  (tenant, subject). */
+    async createUser(body, opts) {
+        return postJSON(this.ctx, "/v1/_users", body, opts);
+    }
+    /** Patch mutable fields on a user in the caller's own tenant. An omitted key
+     *  leaves the column unchanged. Disabling a user (status:"disabled") also
+     *  revokes its delegated tokens server-side. Cross-tenant target → 404. */
+    async updateUser(subject, body, opts) {
+        return patchJSON(this.ctx, `/v1/_users/${encodeURIComponent(subject)}`, body, opts);
+    }
+    /** Delete the user identity row in the caller's own tenant (204). Its
+     *  delegated tokens are retired first so the bearer cannot outlive the row.
+     *  Owned data (runs / sessions / memory) is left intact — this is not
+     *  erasure ({@link erasureExecute}). Cross-tenant target → 404. */
+    async deleteUser(subject, opts) {
+        return deleteRequest(this.ctx, `/v1/_users/${encodeURIComponent(subject)}`, opts);
+    }
+    /** Mint a bearer token for one of the caller's own ACTIVE users. The granted
+     *  scopes are DERIVED server-side from the member's access_mode (never sent),
+     *  and the plaintext `token` is returned exactly ONCE — store it now, it is
+     *  never retrievable again. 404 for an unknown/cross-tenant subject; 409 for
+     *  a disabled user. */
+    async mintUserToken(subject, opts) {
+        return postJSON(this.ctx, `/v1/_users/${encodeURIComponent(subject)}/tokens`, undefined, opts);
+    }
+    /** List the caller's own user's delegated tokens — METADATA ONLY (never the
+     *  plaintext or hash). `active` applies the auth-layer validity rule so a
+     *  revoked token reads as inactive. */
+    async listUserTokens(subject, opts) {
+        return jsonFetch(this.ctx, `/v1/_users/${encodeURIComponent(subject)}/tokens`, opts);
+    }
+    /** Revoke (retire, immediate) one of the caller's own user's delegated
+     *  tokens by def_id. A def_id that is not this (tenant, subject)'s member
+     *  token is an opaque 404. Returns {def_id, retired_at}. */
+    async revokeUserToken(subject, defId, opts) {
+        return deleteJSON(this.ctx, `/v1/_users/${encodeURIComponent(subject)}/tokens/${encodeURIComponent(defId)}`, opts);
+    }
+    /** List the agents the caller may run (RFC BY, v1.51.0+), tiered by access
+     *  mode: bundled/system always, the tenant's shared agents for a non-isolated
+     *  caller, own reserved. Member-read (runs:read), so a delegated user token
+     *  reaches it — the tiering is decided server-side from the caller's access
+     *  mode. Lean entries (name + source); operator metadata stays in the
+     *  Library. */
+    async runnableAgents(opts) {
+        return jsonFetch(this.ctx, "/v1/_runnable-agents", opts);
+    }
     /** Whoami — the authenticated principal (RFC L v0.17.0). Any
      *  authenticated bearer; returns its authoritative tenant / subject /
      *  scopes + `is_admin`. `open_mode: true` when the server runs without

package/dist/fetch-helpers.d.ts

@@ -62,6 +62,11 @@ export declare function patchJSON<T>(ctx: _FetchContext, path: string, body?: un
 export declare function deleteRequest(ctx: _FetchContext, path: string, opts?: {
     signal?: AbortSignal;
 }): Promise<void>;
+/** deleteJSON is deleteRequest for the DELETE endpoints that DO return a
+ *  body (e.g. a revoke that echoes {def_id, retired_at}). 204 → null. */
+export declare function deleteJSON<T>(ctx: _FetchContext, path: string, opts?: {
+    signal?: AbortSignal;
+}): Promise<T>;
 /**
  * raiseFromResponse — the single point where HTTP status + body
  * text get mapped to typed errors. Always throws; the function

package/dist/fetch-helpers.js

@@ -132,6 +132,21 @@ export async function deleteRequest(ctx, path, opts) {
         await raiseFromResponse(resp);
     }
 }
+/** deleteJSON is deleteRequest for the DELETE endpoints that DO return a
+ *  body (e.g. a revoke that echoes {def_id, retired_at}). 204 → null. */
+export async function deleteJSON(ctx, path, opts) {
+    const resp = await ctx.fetchImpl(ctx.baseUrl + path, {
+        method: "DELETE",
+        headers: authHeaders(ctx),
+        signal: opts?.signal,
+    });
+    if (!resp.ok) {
+        await raiseFromResponse(resp);
+    }
+    if (resp.status === 204)
+        return null;
+    return (await resp.json());
+}
 /**
  * raiseFromResponse — the single point where HTTP status + body
  * text get mapped to typed errors. Always throws; the function

package/dist/index.d.ts

@@ -17,6 +17,13 @@
  *     getTranscript(sessionId): Promise<TranscriptResponse>
  *     health(): Promise<HealthResponse>
  *     listUsers(opts?): Promise<ListUsersResponse>   // tenant-scoped (RFC L)
+ *     createUser(body, opts?): Promise<UserRecord>    // RFC BX P2 (v1.50.0)
+ *     updateUser(subject, body, opts?): Promise<UserRecord>
+ *     deleteUser(subject, opts?): Promise<void>
+ *     mintUserToken(subject, opts?): Promise<MintedUserToken>   // delegated token
+ *     listUserTokens(subject, opts?): Promise<ListUserTokensResponse>
+ *     revokeUserToken(subject, defId, opts?): Promise<{def_id, retired_at}>
+ *     runnableAgents(opts?): Promise<RunnableAgentsResponse>    // RFC BY (v1.51.0) — agents I can run
  *     whoami(): Promise<WhoamiResponse>               // RFC L principal (v0.17.0)
  *
  *     // Pause / Resume / State (v0.8.17/8.18)
@@ -116,5 +123,5 @@ export { InteractiveSession } from "./interactive.js";
 export type { InteractiveSessionOps } from "./interactive.js";
 export { ClientToolHost, clientToolsURL, CLIENT_TOOL_SUBPROTOCOL } from "./client-tools.js";
 export type { ClientToolSchema, ClientToolInvocation, ConnectClientToolsOptions, WebSocketLike, WebSocketCtor, } from "./client-tools.js";
-export type { AgentEvent, ClientOptions, ContinueOptions, EventType, HostWidening, ImageMediaType, ParentContext, PromptContent, PromptSegment, RetryInfo, RunOptions, SamplingOptions, CompactionOptions, ToolUse, Usage, Agent, AgentStatus, AgentUsage, CancelAgentResult, ListAgentsResponse, RunBatchOptions, RunBatchResult, SpawnRunResult, CompactRunResult, DirectoryBudget, DirectoryInspection, DirectoryTenant, DirectoryUser, ErasureReport, ErasureResidue, ErasureResult, ErasureTier, CancelTurnResult, TranscriptEvent, TranscriptResponse, HealthResponse, ListUsersResponse, UserSummary, WhoamiResponse, PauseResult, ResumeResult, RuntimeStateResponse, RuntimeStateStatus, ResolverMatrix, ResolverModelStatus, ResolverProviderAvailability, CreateSnapshotOptions, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotListResponse, SnapshotRestoreResponse, MemoryEntriesResponse, MemoryEntry, MemoryEntryResponse, MemoryScopeIDsResponse, MemoryScopeIDSummary, MemoryScopeKind, MemoryScopesResponse, MemorySearchInput, MemorySource, MemorySearchEntry, MemorySearchResponse, MemoryEmbedModelStats, MemoryEmbedStatsResponse, MemoryReembedConfigured, MemoryReembedResponse, InterruptListResponse, InterruptRow, InterruptStatus, ResolveInterruptOptions, Hook, HookFailMode, HookPhase, HookToolCall, HookToolResult, ListHooksResponse, PostHookCall, PostHookResult, PreHookCall, PreHookResult, RegisterHookOptions, RegisterHookResponse, SubstrateToolInput, SubstrateToolResponse, TeamNameSummary, ListTeamsResponse, TeamDiagram, CreatedTeam, TeamDefDetail, TeamRunResult, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, HistoryToolInput, HistoryToolResponse, VolumeMode, PersistentVolumeEntry, PersistentVolumesResponse, EphemeralVolumeEntry, EphemeralVolumesResponse, SystemPromptPayload, UserInputPayload, ChannelDescriptor, ListChannelsResponse, RunStateEvent, RunStateStreamClose, RunStateStreamItem, RunStateStreamOpen, StreamUserRunStatesOptions, AckChannelOptions, ChannelAckResult, ChannelMessageItem, ChannelPeekResult, ChannelPublishResult, ChannelPurgeResult, ChannelScope, ChannelSubscribeResult, PeekChannelOptions, PublishChannelOptions, SubscribeChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAwaitEntry, ChannelAwaitMode, ChannelAwaitResult, ChannelBroadcastEntry, ChannelBroadcastResult, CreateChannelOptions, UpdateChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, AgentDefRowResponse, AgentDefVerifyResult, SkillDefVerifyResult, EnsureMcpServerOptions, EnsureMcpServerResult, MCPServerDefRowResponse, MCPServerDefVerifyResult, AgentDefOverlay, EnsureCodeAgentOptions, EnsureCodeAgentResult, LibraryAgentDefinition, LibraryEntry, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, LLMChatContent, LLMChatMessage, LLMChatOptions, LLMChatResponse, LLMChatStreamDelta, LLMChatStreamItem, LLMChatToolCall, LLMChatUsage, LLMTool, LLMEmbeddingItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, LLMEmbeddingsUsage, UsageDimension, UsageAggregate, UsageReportResponse, LimitInfo, TokenLimit, TokenLimitsResponse, ConfigResponse, ConfigProvider, ConfigModel, ConfigSearch, ConfigInstance, SetTokenLimitRequest, } from "./types.js";
+export type { AgentEvent, ClientOptions, ContinueOptions, EventType, HostWidening, ImageMediaType, ParentContext, PromptContent, PromptSegment, RetryInfo, RunOptions, SamplingOptions, CompactionOptions, ToolUse, Usage, Agent, AgentStatus, AgentUsage, CancelAgentResult, ListAgentsResponse, RunBatchOptions, RunBatchResult, SpawnRunResult, CompactRunResult, DirectoryBudget, DirectoryInspection, DirectoryTenant, DirectoryUser, ErasureReport, ErasureResidue, ErasureResult, ErasureTier, CancelTurnResult, TranscriptEvent, TranscriptResponse, HealthResponse, ListUsersResponse, UserSummary, UserRecord, CreateUserBody, UpdateUserBody, MintedUserToken, UserTokenMeta, ListUserTokensResponse, RunnableAgent, RunnableAgentsResponse, WhoamiResponse, PauseResult, ResumeResult, RuntimeStateResponse, RuntimeStateStatus, ResolverMatrix, ResolverModelStatus, ResolverProviderAvailability, CreateSnapshotOptions, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotListResponse, SnapshotRestoreResponse, MemoryEntriesResponse, MemoryEntry, MemoryEntryResponse, MemoryScopeIDsResponse, MemoryScopeIDSummary, MemoryScopeKind, MemoryScopesResponse, MemorySearchInput, MemorySource, MemorySearchEntry, MemorySearchResponse, MemoryEmbedModelStats, MemoryEmbedStatsResponse, MemoryReembedConfigured, MemoryReembedResponse, InterruptListResponse, InterruptRow, InterruptStatus, ResolveInterruptOptions, Hook, HookFailMode, HookPhase, HookToolCall, HookToolResult, ListHooksResponse, PostHookCall, PostHookResult, PreHookCall, PreHookResult, RegisterHookOptions, RegisterHookResponse, SubstrateToolInput, SubstrateToolResponse, TeamNameSummary, ListTeamsResponse, TeamDiagram, CreatedTeam, TeamDefDetail, TeamRunResult, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, HistoryToolInput, HistoryToolResponse, VolumeMode, PersistentVolumeEntry, PersistentVolumesResponse, EphemeralVolumeEntry, EphemeralVolumesResponse, SystemPromptPayload, UserInputPayload, ChannelDescriptor, ListChannelsResponse, RunStateEvent, RunStateStreamClose, RunStateStreamItem, RunStateStreamOpen, StreamUserRunStatesOptions, AckChannelOptions, ChannelAckResult, ChannelMessageItem, ChannelPeekResult, ChannelPublishResult, ChannelPurgeResult, ChannelScope, ChannelSubscribeResult, PeekChannelOptions, PublishChannelOptions, SubscribeChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAwaitEntry, ChannelAwaitMode, ChannelAwaitResult, ChannelBroadcastEntry, ChannelBroadcastResult, CreateChannelOptions, UpdateChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, AgentDefRowResponse, AgentDefVerifyResult, SkillDefVerifyResult, EnsureMcpServerOptions, EnsureMcpServerResult, MCPServerDefRowResponse, MCPServerDefVerifyResult, AgentDefOverlay, EnsureCodeAgentOptions, EnsureCodeAgentResult, LibraryAgentDefinition, LibraryEntry, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, LLMChatContent, LLMChatMessage, LLMChatOptions, LLMChatResponse, LLMChatStreamDelta, LLMChatStreamItem, LLMChatToolCall, LLMChatUsage, LLMTool, LLMEmbeddingItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, LLMEmbeddingsUsage, UsageDimension, UsageAggregate, UsageReportResponse, LimitInfo, TokenLimit, TokenLimitsResponse, ConfigResponse, ConfigProvider, ConfigModel, ConfigSearch, ConfigInstance, SetTokenLimitRequest, } from "./types.js";
 export { AgentIDInUseError, AgentNotFoundError, AlreadyPausingError, AuthError, BackpressureError, HookNotFoundError, NotFoundError, InvalidArgumentError, ChannelCursorRegressionError, LoomcycleError, NotPausedError, PauseNotConfiguredError, PerUserQuotaExhaustedError, SessionBusyError, SessionNotFoundError, SnapshotNotFoundError, SnapshotTooLargeError, SnapshotVersionError, SubstrateToolRefusedError, UnavailableError, } from "./errors.js";

package/dist/index.js

@@ -17,6 +17,13 @@
  *     getTranscript(sessionId): Promise<TranscriptResponse>
  *     health(): Promise<HealthResponse>
  *     listUsers(opts?): Promise<ListUsersResponse>   // tenant-scoped (RFC L)
+ *     createUser(body, opts?): Promise<UserRecord>    // RFC BX P2 (v1.50.0)
+ *     updateUser(subject, body, opts?): Promise<UserRecord>
+ *     deleteUser(subject, opts?): Promise<void>
+ *     mintUserToken(subject, opts?): Promise<MintedUserToken>   // delegated token
+ *     listUserTokens(subject, opts?): Promise<ListUserTokensResponse>
+ *     revokeUserToken(subject, defId, opts?): Promise<{def_id, retired_at}>
+ *     runnableAgents(opts?): Promise<RunnableAgentsResponse>    // RFC BY (v1.51.0) — agents I can run
  *     whoami(): Promise<WhoamiResponse>               // RFC L principal (v0.17.0)
  *
  *     // Pause / Resume / State (v0.8.17/8.18)

package/dist/types.d.ts

@@ -622,10 +622,74 @@ export interface UserSummary {
     running_count: number;
     total_count: number;
     last_started_at: string;
+    registered?: boolean;
+    display_name?: string;
+    access_mode?: string;
+    status?: string;
 }
 export interface ListUsersResponse {
     users: UserSummary[];
 }
+/** One first-class users-table row (POST/PATCH /v1/_users). The tenant is
+ *  server-derived from the authenticated principal, never sent. */
+export interface UserRecord {
+    tenant_id: string;
+    subject: string;
+    display_name: string;
+    access_mode: string;
+    status: string;
+    created_at: string;
+    created_by: string;
+}
+export interface CreateUserBody {
+    subject: string;
+    display_name?: string;
+    /** "tenant" (default) collaborates on the tenant's shared primitives;
+     *  "isolated" confines the member to its own user scope. */
+    access_mode?: string;
+    status?: string;
+}
+/** PATCH body — an omitted key leaves the column unchanged; a present key
+ *  (even the empty string) is applied. */
+export interface UpdateUserBody {
+    display_name?: string;
+    access_mode?: string;
+    status?: string;
+}
+/** The show-once result of POST /v1/_users/{subject}/tokens. `token` is the
+ *  plaintext bearer, returned exactly once and never retrievable again. */
+export interface MintedUserToken {
+    def_id: string;
+    token: string;
+    token_suffix: string;
+    name: string;
+    scopes: string[];
+    created_at: string;
+    warning: string;
+}
+/** One token row from GET /v1/_users/{subject}/tokens — METADATA ONLY (never
+ *  the plaintext or hash). `active` applies the auth-layer validity rule. */
+export interface UserTokenMeta {
+    def_id: string;
+    name: string;
+    scopes: string[];
+    created_at: string;
+    retired_at?: string;
+    active: boolean;
+}
+export interface ListUserTokensResponse {
+    subject: string;
+    tokens: UserTokenMeta[];
+}
+/** One entry in the runnable-agent catalog — the name to run + its tier.
+ *  Intentionally lean: no operator metadata (versions, retired, hashes). */
+export interface RunnableAgent {
+    name: string;
+    source: string;
+}
+export interface RunnableAgentsResponse {
+    agents: RunnableAgent[];
+}
 /** GET /v1/_me — the authenticated principal resolved from the bearer.
  *  `open_mode` is true when the server runs without the OperatorTokenDef
  *  substrate (single shared LOOMCYCLE_AUTH_TOKEN); `legacy` is true for a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loomcycle/client",
-  "version": "1.49.0",
+  "version": "1.51.0",
   "description": "TypeScript client for the loomcycle sidecar (HTTP+SSE). 67 methods covering run streaming, agent metadata, pause/resume/state, resolver re-probe (resolveProbe \u2014 issue #88 operator escape hatch), operator-token admin (operatorTokenDef \u2014 RFC L OSS multi-tenant auth) + whoami (RFC L authoritative principal, v0.17.0) + tenant-scoped listUsers / listUserAgents, dynamic MCP registration (mcpServerDef + v0.18.0 typed mcpServerDefVerify + ensureMcpServer idempotent register-if-changed), snapshot lifecycle, memory admin (incl. v0.9.0 Vector Memory embed_stats + reembed AND v0.11.5 setMemoryEntry + deleteMemoryEntry), interruption resolve, hook management, v0.8.22 substrate admin (agentDef + skillDef), v0.9.x n8n Phase 0 (listChannels + streamUserRunStates), v0.9.x Channel CRUD (publishChannel + subscribeChannel + peekChannel + ackChannel), v0.11.5 Channel admin CRUD (createChannel + updateChannel + deleteChannel \u2014 runtime substrate; yaml channels refuse mutation with HTTP 409), v0.9.x content_sha256 verify, v0.9.1 transcript first-cycle, v0.9.x dynamic MCP server registration (mcpServerDef + MCPServerDefVerifyResult), v0.10.3 Library v2 enumeration (listLibraryAgents + listLibrarySkills + listLibraryMcpServers), and v0.11.0 LLM Gateway (llmChat + llmStream \u2014 direct provider routing without agent overhead; primary target is n8n's LoomCycleChatModel AI Agent sub-node and any LangChain-compatible consumer). v0.10.1 \u2014 dual ESM + CommonJS distribution (additive \u2014 ESM consumers unchanged; CJS consumers like n8n's community-node loader now work). v0.19.0 \u2014 typed inline code-js agent ingestion (AgentDefOverlay.code_body + ensureCodeAgent \u2014 register a deterministic code agent through the substrate with no host filesystem bind; RFC J). v0.20.0 \u2014 ensureMcpServer surfaces discoveredToolCount straight from create (loomcycle now auto-discovers MCP tools at ingestion); rediscover is now an explicit force-refresh. v0.21.0 \u2014 run/continue accept optional non-secret `metadata` (repo name, review policy, \u2026) passed to the agent, symmetric with the WebHook/Schedule trigger paths. v0.22.0 \u2014 version-aligned lockstep release; no client-surface change (RFC N tenant isolation of the agent/skill/MCP/Schedule/Webhook definition plane + real op-schemas on the builtin MCP meta-tools are both server-side). v0.23.0 \u2014 version-aligned lockstep release; no client-surface change (RFCs O/P/R MCP-server hardening + thin client and the RFC Q DeepSeek tool-content fix are all server-side / MCP-transport-side). v0.24.0 \u2014 purgeChannel clears a channel's buffered messages without deleting its definition (allowed on yaml-declared channels too, unlike deleteChannel \u2014 F20); AgentDefOverlay gains channels / evaluation_scopes / interruption so a COMPLETE interactive/multi-agent agent round-trips over the substrate (F14). (Consolidates the interim 0.24/0.25 package bumps, which were never tag-published, back into lockstep with the loomcycle v0.24.0 tag.) v0.25.0 \u2014 adds the RFC S channel fan-in/fan-out client twins: awaitChannels() (wait for any/all/at_least N messages across channels, or a timeout \u2014 non-committing) + broadcastChannels() (publish one payload to N channels in one atomic-pre-flight call), the client-facing counterparts of the in-band Channel.await / Channel.broadcast tool ops (the rest of v0.25.0 \u2014 the manual-management Web UI console + Context op=time + max_fires self-retiring schedules \u2014 is server-side / in-band, no client-surface change). v0.29.1 \u2014 Usage gains optional `max_context_tokens` (the serving model's context-window ceiling, stamped by the loop from Provider.Capabilities() on each usage event) so a consumer can render a 'context used / max' gauge without a hard-coded per-model table; additive + optional, no behavior change. (Lockstep catch-up: the field landed in loomcycle v0.29.0 but the adapter publish skipped on a version mismatch; v0.29.1 realigns the package version with the release tag so it publishes.) v0.33.0 \u2014 gRPC + TS client parity for the RFC Y external fan-out and the compaction surface: spawnRunBatch() (POST /v1/runs:batch \u2014 spawn up to 32 fresh runs concurrently in one call, combined index-aligned envelope, per-child failures in-envelope) + compactRun(runId) (POST /v1/runs/{run_id}/compact \u2014 summarize a parked run's context); plus per-run sampling + compaction overrides now accepted on runStreaming / continueSession (an explicit temperature 0 is preserved as deterministic, not dropped as falsy). (The gRPC half adds the matching SpawnRunBatch / CompactRun RPCs + the sampling/compaction fields on RunRequest/ContinueRequest \u2014 server-side.) v0.34.0 \u2014 version-aligned lockstep release; no client-surface change (context-transform plugins / RFC Z Phase 1a are server-side config; the exp7 hardening pass is server-side; the R2 cross-provider thinking-model downgrade surfaces a new `model_downgraded` SSE event the generic stream passes through unchanged). v0.35.0 \u2014 RFC AH dynamic filesystem volumes: volumeDef() (POST /v1/_volumedef \u2014 op-discriminated create/get/list/delete/purge; a Volume is flat, so delete unmaps + purge RemoveAll's, no retire/promote/fork) + listVolumes() / listEphemeralVolumes() (GET /v1/_volumes[/ephemeral] \u2014 tenant-scoped; host paths redacted for non-operator callers). Tenant-confined; the runtime derives the path inside an operator-blessed dynamic_root, so callers pass name + mode, never a host path. v1.1.1 \u2014 RFC AI interactive agentic sessions: an `interactive: true` flag on runStreaming/continueSession (a run that parks at end_turn for steering) + sendRunInput(runId, text) (POST /v1/runs/{id}/input \u2014 steer a live run) + streamRunByID(runId, {fromSeq}) (GET /v1/runs/{id}/stream \u2014 re-attach by run_id; the operator's prior turns replay as `steer` events so a cold client reconstructs the whole conversation) + a high-level InteractiveSession driver (client.interactiveSession / attachInteractiveSession \u2014 events()/send()/cancel(), the adapter port of the Web UI run terminal). The AgentEvent union gains awaiting_input/steer/context_compaction frames. Version-aligned with the loomcycle v1.1.x line so the v1.1.1 tag publishes it (also carrying the previously-unpublished v0.35.0 volume surface). v1.4.0 \u2014 RFC AL Path VFS + RFC AK Document on the wire: path(input) (POST /v1/_path \u2014 a Unix-like filesystem over Memory/Volumes/Documents; resolve/ls/stat/mkdir/mv/rm) + document(input) (POST /v1/_document \u2014 chunked-graph documents; 13 ops, needs SQL Memory on the sidecar). Scope (agent/user/tenant) + tenant are resolved server-side from the authenticated principal, never the wire; an off-run scope:'user' op keys on the principal subject so it interoperates with that user's agent runs. New PathToolInput / DocumentToolInput types; responses are op-varying (unknown \u2014 narrow as needed). v1.7.0 \u2014 RFC AT image/vision input: the PromptContent union gains an `image` variant ({ type:'image'; media_type: ImageMediaType; data: base64-no-prefix }) accepted in a user segment by runStreaming / continueSession (segments pass through unchanged \u2014 no method change). The model must be vision-capable or the run errors before the call. New ImageMediaType type (image/png|jpeg|gif|webp). v1.12.1 \u2014 Path/Document browse-by-subject + the full Document op set (RFC AS/AK): path(input, opts) / document(input, opts) accept optional scopeId / tenant browse overrides sent as ?scope_id= / ?tenant= query params (server reads them from the URL, re-checks authorization; omit both to browse your own subject \u2014 byte-identical to the pre-RFC-AS request), and DocumentToolInput.op now covers all 16 backend ops (adds set_path, export_md, import_md) with the matching include_metadata / markdown fields. Additive \u2014 existing path() / document() callers are unchanged. v1.16.0 \u2014 RFC BC client-executed tools (local tool host): connectClientTools({tools,onInvoke}) opens a persistent WebSocket to /v1/client-tools, registers tools this client runs on the user's machine (browser DOM / files / shell), and answers the invoke frames loomcycle routes when an agent of your principal calls a client:<tool> \u2014 returning your reply as an ordinary tool result. Returns a ClientToolHost driver (.close() to stop; auto-reconnect); dependency-free (global WebSocket in browsers / Node 22+, or an injected WebSocketImpl like the ws package on older Node); the bearer rides the Sec-WebSocket-Protocol subprotocol (browsers can't set an Authorization header on a WebSocket). The runtime's first WebSocket surface. v1.45.0 \u2014 RFC BL P5 subject erasure: erasureReport(subject, {tenant}) (GET /v1/_erasure \u2014 what this deployment holds about one subject, in three tiers: deletable with existing primitives, subject-keyed but not deletable, and facts ABOUT the subject in scopes they do not own) + erasureExecute(subject, {dryRun, confirm, tenant}) (POST /v1/_erasure \u2014 removes tiers 1 and 2). DEFAULTS TO A DRY RUN: dryRun defaults true and a live run also requires confirm === subject. The tier-3 residue is traceable only through the subject's chats, which a live run deletes, so a report afterwards shows rows: 0 while those facts remain \u2014 the returned object is the only durable record of what was not reached; persist it. New ErasureReport / ErasureResult / ErasureTier / ErasureResidue types. v1.47.0 — RFC BV memory-view SDK: memorySearch() (POST /v1/_memory/search — off-run unified semantic search spanning k/v entries AND document-chunk bodies in one ranked list, each hit tagged kind memory|document with chunk_id on document hits) + memoryEmbedStats(scope) + reembedMemory(scope, scopeId, {dryRun,limit}) (the Vector Memory embed-admin reads the memory-view console needs; dry_run defaults true). Fact reads (list_facts + get_chunk's entity block) ride the existing document() passthrough. Additive — existing callers unchanged.",
   "license": "Apache-2.0",
   "type": "module",