@loomcycle/client 1.67.0 → 1.72.0

package/dist/cjs/client.js

@@ -692,6 +692,19 @@ class LoomcycleClient {
         await (0, fetch_helpers_js_1.deleteRequest)(this.ctx, `/v1/_snapshots/${encodeURIComponent(snapshotId)}`, opts);
     }
     // ---- Memory admin ----
+    /** memoryFocusQuery renders the super-admin tenant focus for the memory
+     *  browse routes.
+     *
+     *  Only a super-admin's focus widens; the server IGNORES the value for a
+     *  tenant-scoped principal rather than honouring-then-checking it, so sending
+     *  it is always safe and never escalates. Omitting it resolves to the
+     *  caller's own tenant, which is what every call did before this existed. */
+    static memoryFocusQuery(tenant) {
+        const params = new URLSearchParams();
+        if (tenant && tenant.trim() !== "")
+            params.set("tenant", tenant.trim());
+        return params;
+    }
     /** List the kinds of memory scopes the server knows about
      *  (agent, user — or whatever the operator yaml declares). */
     async listMemoryScopes(opts) {
@@ -700,12 +713,13 @@ class LoomcycleClient {
     /** List the scope_ids that have at least one memory row under
      *  a given scope. */
     async listMemoryScopeIDs(scope, opts) {
-        return (0, fetch_helpers_js_1.jsonFetch)(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}`, opts);
+        const qs = LoomcycleClient.memoryFocusQuery(opts?.tenant).toString();
+        return (0, fetch_helpers_js_1.jsonFetch)(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}${qs ? "?" + qs : ""}`, opts);
     }
     /** List memory entries under a (scope, scope_id) tuple.
      *  Optional prefix narrows by key prefix. */
     async listMemoryEntries(scope, scopeID, opts) {
-        const params = new URLSearchParams();
+        const params = LoomcycleClient.memoryFocusQuery(opts?.tenant);
         if (opts?.prefix)
             params.set("prefix", opts.prefix);
         // Guard against `limit: 0` (falsy but valid-looking) and negatives —
@@ -720,7 +734,8 @@ class LoomcycleClient {
     }
     /** Read a single memory entry by (scope, scope_id, key). */
     async getMemoryEntry(scope, scopeID, key, opts) {
-        return (0, fetch_helpers_js_1.jsonFetch)(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}`, opts);
+        const qs = LoomcycleClient.memoryFocusQuery(opts?.tenant).toString();
+        return (0, fetch_helpers_js_1.jsonFetch)(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}${qs ? "?" + qs : ""}`, opts);
     }
     // ---- RFC BV memory-view: off-run search + embed-admin reads ----
     /** Off-run unified semantic search over one scope's memory
@@ -1803,13 +1818,15 @@ class LoomcycleClient {
             body.embed = opts.embed;
         if (opts.ttl_seconds !== undefined)
             body.ttl_seconds = opts.ttl_seconds;
-        return (0, fetch_helpers_js_1.putJSON)(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}`, body, { signal: opts.signal });
+        const qs = LoomcycleClient.memoryFocusQuery(opts.tenant).toString();
+        return (0, fetch_helpers_js_1.putJSON)(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}${qs ? "?" + qs : ""}`, body, { signal: opts.signal });
     }
     /** Delete one memory entry by (scope, scope_id, key). Idempotent:
      *  deleting a missing row is a non-error per the in-band Memory
      *  tool's semantics — both surfaces return 204. */
     async deleteMemoryEntry(scope, scopeID, key, opts) {
-        return (0, fetch_helpers_js_1.deleteRequest)(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}`, opts);
+        const qs = LoomcycleClient.memoryFocusQuery(opts?.tenant).toString();
+        return (0, fetch_helpers_js_1.deleteRequest)(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}${qs ? "?" + qs : ""}`, opts);
     }
     /** Subscribe to run state transitions for one user_id via SSE.
      *  Yields one `{ kind: "open", ... }` item first (confirms the

package/dist/client.d.ts

@@ -475,6 +475,14 @@ export declare class LoomcycleClient {
     deleteSnapshot(snapshotId: string, opts?: {
         signal?: AbortSignal;
     }): Promise<void>;
+    /** memoryFocusQuery renders the super-admin tenant focus for the memory
+     *  browse routes.
+     *
+     *  Only a super-admin's focus widens; the server IGNORES the value for a
+     *  tenant-scoped principal rather than honouring-then-checking it, so sending
+     *  it is always safe and never escalates. Omitting it resolves to the
+     *  caller's own tenant, which is what every call did before this existed. */
+    private static memoryFocusQuery;
     /** List the kinds of memory scopes the server knows about
      *  (agent, user — or whatever the operator yaml declares). */
     listMemoryScopes(opts?: {
@@ -483,6 +491,7 @@ export declare class LoomcycleClient {
     /** List the scope_ids that have at least one memory row under
      *  a given scope. */
     listMemoryScopeIDs(scope: string, opts?: {
+        tenant?: string;
         signal?: AbortSignal;
     }): Promise<MemoryScopeIDsResponse>;
     /** List memory entries under a (scope, scope_id) tuple.
@@ -490,10 +499,12 @@ export declare class LoomcycleClient {
     listMemoryEntries(scope: string, scopeID: string, opts?: {
         prefix?: string;
         limit?: number;
+        tenant?: string;
         signal?: AbortSignal;
     }): Promise<MemoryEntriesResponse>;
     /** Read a single memory entry by (scope, scope_id, key). */
     getMemoryEntry(scope: string, scopeID: string, key: string, opts?: {
+        tenant?: string;
         signal?: AbortSignal;
     }): Promise<MemoryEntryResponse>;
     /** Off-run unified semantic search over one scope's memory
@@ -1183,6 +1194,7 @@ export declare class LoomcycleClient {
      *  deleting a missing row is a non-error per the in-band Memory
      *  tool's semantics — both surfaces return 204. */
     deleteMemoryEntry(scope: string, scopeID: string, key: string, opts?: {
+        tenant?: string;
         signal?: AbortSignal;
     }): Promise<void>;
     /** Subscribe to run state transitions for one user_id via SSE.

package/dist/client.js

@@ -689,6 +689,19 @@ export class LoomcycleClient {
         await deleteRequest(this.ctx, `/v1/_snapshots/${encodeURIComponent(snapshotId)}`, opts);
     }
     // ---- Memory admin ----
+    /** memoryFocusQuery renders the super-admin tenant focus for the memory
+     *  browse routes.
+     *
+     *  Only a super-admin's focus widens; the server IGNORES the value for a
+     *  tenant-scoped principal rather than honouring-then-checking it, so sending
+     *  it is always safe and never escalates. Omitting it resolves to the
+     *  caller's own tenant, which is what every call did before this existed. */
+    static memoryFocusQuery(tenant) {
+        const params = new URLSearchParams();
+        if (tenant && tenant.trim() !== "")
+            params.set("tenant", tenant.trim());
+        return params;
+    }
     /** List the kinds of memory scopes the server knows about
      *  (agent, user — or whatever the operator yaml declares). */
     async listMemoryScopes(opts) {
@@ -697,12 +710,13 @@ export class LoomcycleClient {
     /** List the scope_ids that have at least one memory row under
      *  a given scope. */
     async listMemoryScopeIDs(scope, opts) {
-        return jsonFetch(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}`, opts);
+        const qs = LoomcycleClient.memoryFocusQuery(opts?.tenant).toString();
+        return jsonFetch(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}${qs ? "?" + qs : ""}`, opts);
     }
     /** List memory entries under a (scope, scope_id) tuple.
      *  Optional prefix narrows by key prefix. */
     async listMemoryEntries(scope, scopeID, opts) {
-        const params = new URLSearchParams();
+        const params = LoomcycleClient.memoryFocusQuery(opts?.tenant);
         if (opts?.prefix)
             params.set("prefix", opts.prefix);
         // Guard against `limit: 0` (falsy but valid-looking) and negatives —
@@ -717,7 +731,8 @@ export class LoomcycleClient {
     }
     /** Read a single memory entry by (scope, scope_id, key). */
     async getMemoryEntry(scope, scopeID, key, opts) {
-        return jsonFetch(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}`, opts);
+        const qs = LoomcycleClient.memoryFocusQuery(opts?.tenant).toString();
+        return jsonFetch(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}${qs ? "?" + qs : ""}`, opts);
     }
     // ---- RFC BV memory-view: off-run search + embed-admin reads ----
     /** Off-run unified semantic search over one scope's memory
@@ -1800,13 +1815,15 @@ export class LoomcycleClient {
             body.embed = opts.embed;
         if (opts.ttl_seconds !== undefined)
             body.ttl_seconds = opts.ttl_seconds;
-        return putJSON(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}`, body, { signal: opts.signal });
+        const qs = LoomcycleClient.memoryFocusQuery(opts.tenant).toString();
+        return putJSON(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}${qs ? "?" + qs : ""}`, body, { signal: opts.signal });
     }
     /** Delete one memory entry by (scope, scope_id, key). Idempotent:
      *  deleting a missing row is a non-error per the in-band Memory
      *  tool's semantics — both surfaces return 204. */
     async deleteMemoryEntry(scope, scopeID, key, opts) {
-        return deleteRequest(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}`, opts);
+        const qs = LoomcycleClient.memoryFocusQuery(opts?.tenant).toString();
+        return deleteRequest(this.ctx, `/v1/_memory/scopes/${encodeURIComponent(scope)}/${encodeURIComponent(scopeID)}/keys/${encodeURIComponent(key)}${qs ? "?" + qs : ""}`, opts);
     }
     /** Subscribe to run state transitions for one user_id via SSE.
      *  Yields one `{ kind: "open", ... }` item first (confirms the

package/dist/types.d.ts

@@ -1676,6 +1676,10 @@ export interface SetMemoryEntryOptions {
     embed?: boolean;
     /** Optional TTL in seconds; <= 0 means "no expiry". */
     ttl_seconds?: number;
+    /** Super-admin tenant focus. Ignored server-side for a tenant-scoped
+     *  principal, so it can never widen a caller's own scope; omitted, the write
+     *  lands in the caller's own tenant. */
+    tenant?: string;
     signal?: AbortSignal;
 }
 /** Response shape for {@link LoomcycleClient.setMemoryEntry}. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loomcycle/client",
-  "version": "1.67.0",
+  "version": "1.72.0",
   "description": "TypeScript client for the loomcycle sidecar (HTTP+SSE). 67 methods covering run streaming, agent metadata, pause/resume/state, resolver re-probe (resolveProbe \u2014 issue #88 operator escape hatch), operator-token admin (operatorTokenDef \u2014 RFC L OSS multi-tenant auth) + whoami (RFC L authoritative principal, v0.17.0) + tenant-scoped listUsers / listUserAgents, dynamic MCP registration (mcpServerDef + v0.18.0 typed mcpServerDefVerify + ensureMcpServer idempotent register-if-changed), snapshot lifecycle, memory admin (incl. v0.9.0 Vector Memory embed_stats + reembed AND v0.11.5 setMemoryEntry + deleteMemoryEntry), interruption resolve, hook management, v0.8.22 substrate admin (agentDef + skillDef), v0.9.x n8n Phase 0 (listChannels + streamUserRunStates), v0.9.x Channel CRUD (publishChannel + subscribeChannel + peekChannel + ackChannel), v0.11.5 Channel admin CRUD (createChannel + updateChannel + deleteChannel \u2014 runtime substrate; yaml channels refuse mutation with HTTP 409), v0.9.x content_sha256 verify, v0.9.1 transcript first-cycle, v0.9.x dynamic MCP server registration (mcpServerDef + MCPServerDefVerifyResult), v0.10.3 Library v2 enumeration (listLibraryAgents + listLibrarySkills + listLibraryMcpServers), and v0.11.0 LLM Gateway (llmChat + llmStream \u2014 direct provider routing without agent overhead; primary target is n8n's LoomCycleChatModel AI Agent sub-node and any LangChain-compatible consumer). v0.10.1 \u2014 dual ESM + CommonJS distribution (additive \u2014 ESM consumers unchanged; CJS consumers like n8n's community-node loader now work). v0.19.0 \u2014 typed inline code-js agent ingestion (AgentDefOverlay.code_body + ensureCodeAgent \u2014 register a deterministic code agent through the substrate with no host filesystem bind; RFC J). v0.20.0 \u2014 ensureMcpServer surfaces discoveredToolCount straight from create (loomcycle now auto-discovers MCP tools at ingestion); rediscover is now an explicit force-refresh. v0.21.0 \u2014 run/continue accept optional non-secret `metadata` (repo name, review policy, \u2026) passed to the agent, symmetric with the WebHook/Schedule trigger paths. v0.22.0 \u2014 version-aligned lockstep release; no client-surface change (RFC N tenant isolation of the agent/skill/MCP/Schedule/Webhook definition plane + real op-schemas on the builtin MCP meta-tools are both server-side). v0.23.0 \u2014 version-aligned lockstep release; no client-surface change (RFCs O/P/R MCP-server hardening + thin client and the RFC Q DeepSeek tool-content fix are all server-side / MCP-transport-side). v0.24.0 \u2014 purgeChannel clears a channel's buffered messages without deleting its definition (allowed on yaml-declared channels too, unlike deleteChannel \u2014 F20); AgentDefOverlay gains channels / evaluation_scopes / interruption so a COMPLETE interactive/multi-agent agent round-trips over the substrate (F14). (Consolidates the interim 0.24/0.25 package bumps, which were never tag-published, back into lockstep with the loomcycle v0.24.0 tag.) v0.25.0 \u2014 adds the RFC S channel fan-in/fan-out client twins: awaitChannels() (wait for any/all/at_least N messages across channels, or a timeout \u2014 non-committing) + broadcastChannels() (publish one payload to N channels in one atomic-pre-flight call), the client-facing counterparts of the in-band Channel.await / Channel.broadcast tool ops (the rest of v0.25.0 \u2014 the manual-management Web UI console + Context op=time + max_fires self-retiring schedules \u2014 is server-side / in-band, no client-surface change). v0.29.1 \u2014 Usage gains optional `max_context_tokens` (the serving model's context-window ceiling, stamped by the loop from Provider.Capabilities() on each usage event) so a consumer can render a 'context used / max' gauge without a hard-coded per-model table; additive + optional, no behavior change. (Lockstep catch-up: the field landed in loomcycle v0.29.0 but the adapter publish skipped on a version mismatch; v0.29.1 realigns the package version with the release tag so it publishes.) v0.33.0 \u2014 gRPC + TS client parity for the RFC Y external fan-out and the compaction surface: spawnRunBatch() (POST /v1/runs:batch \u2014 spawn up to 32 fresh runs concurrently in one call, combined index-aligned envelope, per-child failures in-envelope) + compactRun(runId) (POST /v1/runs/{run_id}/compact \u2014 summarize a parked run's context); plus per-run sampling + compaction overrides now accepted on runStreaming / continueSession (an explicit temperature 0 is preserved as deterministic, not dropped as falsy). (The gRPC half adds the matching SpawnRunBatch / CompactRun RPCs + the sampling/compaction fields on RunRequest/ContinueRequest \u2014 server-side.) v0.34.0 \u2014 version-aligned lockstep release; no client-surface change (context-transform plugins / RFC Z Phase 1a are server-side config; the exp7 hardening pass is server-side; the R2 cross-provider thinking-model downgrade surfaces a new `model_downgraded` SSE event the generic stream passes through unchanged). v0.35.0 \u2014 RFC AH dynamic filesystem volumes: volumeDef() (POST /v1/_volumedef \u2014 op-discriminated create/get/list/delete/purge; a Volume is flat, so delete unmaps + purge RemoveAll's, no retire/promote/fork) + listVolumes() / listEphemeralVolumes() (GET /v1/_volumes[/ephemeral] \u2014 tenant-scoped; host paths redacted for non-operator callers). Tenant-confined; the runtime derives the path inside an operator-blessed dynamic_root, so callers pass name + mode, never a host path. v1.1.1 \u2014 RFC AI interactive agentic sessions: an `interactive: true` flag on runStreaming/continueSession (a run that parks at end_turn for steering) + sendRunInput(runId, text) (POST /v1/runs/{id}/input \u2014 steer a live run) + streamRunByID(runId, {fromSeq}) (GET /v1/runs/{id}/stream \u2014 re-attach by run_id; the operator's prior turns replay as `steer` events so a cold client reconstructs the whole conversation) + a high-level InteractiveSession driver (client.interactiveSession / attachInteractiveSession \u2014 events()/send()/cancel(), the adapter port of the Web UI run terminal). The AgentEvent union gains awaiting_input/steer/context_compaction frames. Version-aligned with the loomcycle v1.1.x line so the v1.1.1 tag publishes it (also carrying the previously-unpublished v0.35.0 volume surface). v1.4.0 \u2014 RFC AL Path VFS + RFC AK Document on the wire: path(input) (POST /v1/_path \u2014 a Unix-like filesystem over Memory/Volumes/Documents; resolve/ls/stat/mkdir/mv/rm) + document(input) (POST /v1/_document \u2014 chunked-graph documents; 13 ops, needs SQL Memory on the sidecar). Scope (agent/user/tenant) + tenant are resolved server-side from the authenticated principal, never the wire; an off-run scope:'user' op keys on the principal subject so it interoperates with that user's agent runs. New PathToolInput / DocumentToolInput types; responses are op-varying (unknown \u2014 narrow as needed). v1.7.0 \u2014 RFC AT image/vision input: the PromptContent union gains an `image` variant ({ type:'image'; media_type: ImageMediaType; data: base64-no-prefix }) accepted in a user segment by runStreaming / continueSession (segments pass through unchanged \u2014 no method change). The model must be vision-capable or the run errors before the call. New ImageMediaType type (image/png|jpeg|gif|webp). v1.12.1 \u2014 Path/Document browse-by-subject + the full Document op set (RFC AS/AK): path(input, opts) / document(input, opts) accept optional scopeId / tenant browse overrides sent as ?scope_id= / ?tenant= query params (server reads them from the URL, re-checks authorization; omit both to browse your own subject \u2014 byte-identical to the pre-RFC-AS request), and DocumentToolInput.op now covers all 16 backend ops (adds set_path, export_md, import_md) with the matching include_metadata / markdown fields. Additive \u2014 existing path() / document() callers are unchanged. v1.16.0 \u2014 RFC BC client-executed tools (local tool host): connectClientTools({tools,onInvoke}) opens a persistent WebSocket to /v1/client-tools, registers tools this client runs on the user's machine (browser DOM / files / shell), and answers the invoke frames loomcycle routes when an agent of your principal calls a client:<tool> \u2014 returning your reply as an ordinary tool result. Returns a ClientToolHost driver (.close() to stop; auto-reconnect); dependency-free (global WebSocket in browsers / Node 22+, or an injected WebSocketImpl like the ws package on older Node); the bearer rides the Sec-WebSocket-Protocol subprotocol (browsers can't set an Authorization header on a WebSocket). The runtime's first WebSocket surface. v1.45.0 \u2014 RFC BL P5 subject erasure: erasureReport(subject, {tenant}) (GET /v1/_erasure \u2014 what this deployment holds about one subject, in three tiers: deletable with existing primitives, subject-keyed but not deletable, and facts ABOUT the subject in scopes they do not own) + erasureExecute(subject, {dryRun, confirm, tenant}) (POST /v1/_erasure \u2014 removes tiers 1 and 2). DEFAULTS TO A DRY RUN: dryRun defaults true and a live run also requires confirm === subject. The tier-3 residue is traceable only through the subject's chats, which a live run deletes, so a report afterwards shows rows: 0 while those facts remain \u2014 the returned object is the only durable record of what was not reached; persist it. New ErasureReport / ErasureResult / ErasureTier / ErasureResidue types. v1.47.0 \u2014 RFC BV memory-view SDK: memorySearch() (POST /v1/_memory/search \u2014 off-run unified semantic search spanning k/v entries AND document-chunk bodies in one ranked list, each hit tagged kind memory|document with chunk_id on document hits) + memoryEmbedStats(scope) + reembedMemory(scope, scopeId, {dryRun,limit}) (the Vector Memory embed-admin reads the memory-view console needs; dry_run defaults true). Fact reads (list_facts + get_chunk's entity block) ride the existing document() passthrough. Additive \u2014 existing callers unchanged. v1.61.0 \u2014 RFC CJ per-run context-window override: runStreaming / continueSession accept an optional maxContextTokens (integer tokens) that wins over the agent's own max_context_tokens; omitted inherits it (which defers to the provider/driver default). Distinct from a model's output cap; primarily for local inference (Ollama num_ctx). Serialized as the snake_case max_context_tokens field on POST /v1/runs + the continuation body; additive, existing callers unchanged.",
   "license": "Apache-2.0",
   "type": "module",