@loomcycle/client 1.93.0 → 1.94.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1116,11 +1116,13 @@ class LoomcycleClient {
1116
1116
  });
1117
1117
  }
1118
1118
  // ---- Hook management (hooks-connector series, PR C) ----
1119
- /** Register a pre- or post-tool webhook. The callback_url must be
1120
- * an http:// or https:// endpoint the CONSUMER runs — loomcycle
1121
- * POSTs PreHookCall / PostHookCall payloads to it. This method
1122
- * manages registration only; the receiver is the consumer's own
1123
- * HTTP framework (Express, Next.js, etc.).
1119
+ /** Register a pre- or post-tool hook. Its body is a webhook — the
1120
+ * callback_url must be an http:// or https:// endpoint the CONSUMER
1121
+ * runs; loomcycle POSTs PreHookCall / PostHookCall payloads to it —
1122
+ * or a code-js body (`code`), run in-process by loomcycle. Set
1123
+ * exactly one. This method manages registration only; a webhook's
1124
+ * receiver is the consumer's own HTTP framework (Express, Next.js,
1125
+ * etc.).
1124
1126
  *
1125
1127
  * Re-registering the same (owner, name) replaces the prior entry
1126
1128
  * with a fresh id (idempotent app-restart contract).
@@ -1132,8 +1134,11 @@ class LoomcycleClient {
1132
1134
  owner: opts.owner,
1133
1135
  name: opts.name,
1134
1136
  phase: opts.phase,
1135
- callback_url: opts.callbackUrl,
1136
1137
  };
1138
+ if (opts.callbackUrl !== undefined)
1139
+ body.callback_url = opts.callbackUrl;
1140
+ if (opts.code !== undefined)
1141
+ body.code = opts.code;
1137
1142
  if (opts.agents !== undefined)
1138
1143
  body.agents = opts.agents;
1139
1144
  if (opts.tools !== undefined)
@@ -1534,6 +1539,10 @@ class LoomcycleClient {
1534
1539
  body.mode = target.mode;
1535
1540
  if (target.breakpoints !== undefined)
1536
1541
  body.breakpoints = target.breakpoints;
1542
+ if (target.review !== undefined)
1543
+ body.review = target.review;
1544
+ if (target.reviewTtlSeconds !== undefined)
1545
+ body.review_ttl_seconds = target.reviewTtlSeconds;
1537
1546
  return (0, fetch_helpers_js_1.postJSON)(this.ctx, "/v1/_teamdef", body, opts);
1538
1547
  }
1539
1548
  /** Read the debug breakpoints armed on a live team walk
@@ -1554,10 +1563,11 @@ class LoomcycleClient {
1554
1563
  * off switch. A malformed entry is refused whole and leaves the previous
1555
1564
  * arming exactly as it was.
1556
1565
  *
1557
- * Each entry is a starter state id — `"review"` arms both phases,
1558
- * `"review:before_dispatch"` or `"review:after_collection"` arms one. An arm
1559
- * takes effect at the next pause the walk reaches; disarming RELEASES
1560
- * whatever is still pending rather than stranding it.
1566
+ * Each entry is a starter state id — `"wave"` (or `"wave:before_dispatch"`)
1567
+ * pauses the state before it dispatches, and `"wave:review"` holds its member
1568
+ * runs for a verdict ({@link LoomcycleClient.reviewRun}). An arm takes effect
1569
+ * at the next point the walk reaches; disarming RELEASES whatever is still
1570
+ * pending rather than stranding it.
1561
1571
  *
1562
1572
  * A pause is read and answered through the run's interrupts. */
1563
1573
  async setRunBreakpoints(runId, breakpoints, opts) {
package/dist/client.d.ts CHANGED
@@ -696,11 +696,13 @@ export declare class LoomcycleClient {
696
696
  resolvedBy?: string;
697
697
  signal?: AbortSignal;
698
698
  }): Promise<unknown>;
699
- /** Register a pre- or post-tool webhook. The callback_url must be
700
- * an http:// or https:// endpoint the CONSUMER runs — loomcycle
701
- * POSTs PreHookCall / PostHookCall payloads to it. This method
702
- * manages registration only; the receiver is the consumer's own
703
- * HTTP framework (Express, Next.js, etc.).
699
+ /** Register a pre- or post-tool hook. Its body is a webhook — the
700
+ * callback_url must be an http:// or https:// endpoint the CONSUMER
701
+ * runs; loomcycle POSTs PreHookCall / PostHookCall payloads to it —
702
+ * or a code-js body (`code`), run in-process by loomcycle. Set
703
+ * exactly one. This method manages registration only; a webhook's
704
+ * receiver is the consumer's own HTTP framework (Express, Next.js,
705
+ * etc.).
704
706
  *
705
707
  * Re-registering the same (owner, name) replaces the prior entry
706
708
  * with a fresh id (idempotent app-restart contract).
@@ -1061,10 +1063,11 @@ export declare class LoomcycleClient {
1061
1063
  * off switch. A malformed entry is refused whole and leaves the previous
1062
1064
  * arming exactly as it was.
1063
1065
  *
1064
- * Each entry is a starter state id — `"review"` arms both phases,
1065
- * `"review:before_dispatch"` or `"review:after_collection"` arms one. An arm
1066
- * takes effect at the next pause the walk reaches; disarming RELEASES
1067
- * whatever is still pending rather than stranding it.
1066
+ * Each entry is a starter state id — `"wave"` (or `"wave:before_dispatch"`)
1067
+ * pauses the state before it dispatches, and `"wave:review"` holds its member
1068
+ * runs for a verdict ({@link LoomcycleClient.reviewRun}). An arm takes effect
1069
+ * at the next point the walk reaches; disarming RELEASES whatever is still
1070
+ * pending rather than stranding it.
1068
1071
  *
1069
1072
  * A pause is read and answered through the run's interrupts. */
1070
1073
  setRunBreakpoints(runId: string, breakpoints: string[], opts?: {
package/dist/client.js CHANGED
@@ -1113,11 +1113,13 @@ export class LoomcycleClient {
1113
1113
  });
1114
1114
  }
1115
1115
  // ---- Hook management (hooks-connector series, PR C) ----
1116
- /** Register a pre- or post-tool webhook. The callback_url must be
1117
- * an http:// or https:// endpoint the CONSUMER runs — loomcycle
1118
- * POSTs PreHookCall / PostHookCall payloads to it. This method
1119
- * manages registration only; the receiver is the consumer's own
1120
- * HTTP framework (Express, Next.js, etc.).
1116
+ /** Register a pre- or post-tool hook. Its body is a webhook — the
1117
+ * callback_url must be an http:// or https:// endpoint the CONSUMER
1118
+ * runs; loomcycle POSTs PreHookCall / PostHookCall payloads to it —
1119
+ * or a code-js body (`code`), run in-process by loomcycle. Set
1120
+ * exactly one. This method manages registration only; a webhook's
1121
+ * receiver is the consumer's own HTTP framework (Express, Next.js,
1122
+ * etc.).
1121
1123
  *
1122
1124
  * Re-registering the same (owner, name) replaces the prior entry
1123
1125
  * with a fresh id (idempotent app-restart contract).
@@ -1129,8 +1131,11 @@ export class LoomcycleClient {
1129
1131
  owner: opts.owner,
1130
1132
  name: opts.name,
1131
1133
  phase: opts.phase,
1132
- callback_url: opts.callbackUrl,
1133
1134
  };
1135
+ if (opts.callbackUrl !== undefined)
1136
+ body.callback_url = opts.callbackUrl;
1137
+ if (opts.code !== undefined)
1138
+ body.code = opts.code;
1134
1139
  if (opts.agents !== undefined)
1135
1140
  body.agents = opts.agents;
1136
1141
  if (opts.tools !== undefined)
@@ -1531,6 +1536,10 @@ export class LoomcycleClient {
1531
1536
  body.mode = target.mode;
1532
1537
  if (target.breakpoints !== undefined)
1533
1538
  body.breakpoints = target.breakpoints;
1539
+ if (target.review !== undefined)
1540
+ body.review = target.review;
1541
+ if (target.reviewTtlSeconds !== undefined)
1542
+ body.review_ttl_seconds = target.reviewTtlSeconds;
1534
1543
  return postJSON(this.ctx, "/v1/_teamdef", body, opts);
1535
1544
  }
1536
1545
  /** Read the debug breakpoints armed on a live team walk
@@ -1551,10 +1560,11 @@ export class LoomcycleClient {
1551
1560
  * off switch. A malformed entry is refused whole and leaves the previous
1552
1561
  * arming exactly as it was.
1553
1562
  *
1554
- * Each entry is a starter state id — `"review"` arms both phases,
1555
- * `"review:before_dispatch"` or `"review:after_collection"` arms one. An arm
1556
- * takes effect at the next pause the walk reaches; disarming RELEASES
1557
- * whatever is still pending rather than stranding it.
1563
+ * Each entry is a starter state id — `"wave"` (or `"wave:before_dispatch"`)
1564
+ * pauses the state before it dispatches, and `"wave:review"` holds its member
1565
+ * runs for a verdict ({@link LoomcycleClient.reviewRun}). An arm takes effect
1566
+ * at the next point the walk reaches; disarming RELEASES whatever is still
1567
+ * pending rather than stranding it.
1558
1568
  *
1559
1569
  * A pause is read and answered through the run's interrupts. */
1560
1570
  async setRunBreakpoints(runId, breakpoints, opts) {
package/dist/types.d.ts CHANGED
@@ -7,7 +7,7 @@
7
7
  * `client.ts` for the input shapes (RunOptions, CreateSnapshotOptions,
8
8
  * etc.) — those are translated to snake_case in the request body.
9
9
  */
10
- export type EventType = "started" | "text" | "tool_call" | "tool_result" | "usage" | "done" | "error" | "retry" | "host_widened" | "session" | "agent" | "awaiting_input" | "awaiting_review" | "steer" | "context_compaction" | "capability_inert" | "limit" | "override" | "context_recap" | "context_state" | "context_distill_declined" | "context_exhausted" | "thinking" | "turn_cancelled" | "provider_fallback" | "fallback_suppressed" | "model_downgraded" | "cache_invalidated" | "reasoning_invalidated" | "channel_publish" | "channel_delivery" | "interruption_pending" | "spawn_child_started" | "spawn_child_result" | "prompt_snapshot" | "_meta";
10
+ export type EventType = "started" | "text" | "tool_call" | "tool_result" | "usage" | "done" | "error" | "retry" | "host_widened" | "session" | "agent" | "awaiting_input" | "awaiting_review" | "steer" | "context_compaction" | "capability_inert" | "hook_decision" | "limit" | "override" | "context_recap" | "context_state" | "context_distill_declined" | "context_exhausted" | "thinking" | "turn_cancelled" | "provider_fallback" | "fallback_suppressed" | "model_downgraded" | "cache_invalidated" | "reasoning_invalidated" | "channel_publish" | "channel_delivery" | "interruption_pending" | "spawn_child_started" | "spawn_child_result" | "prompt_snapshot" | "_meta";
11
11
  export interface ToolUse {
12
12
  id: string;
13
13
  name: string;
@@ -253,6 +253,29 @@ export interface ErrorInfo {
253
253
  * instructions. */
254
254
  retry_after_ms?: number;
255
255
  }
256
+ /** What one hook did to one call, or to the run (the `hook_decision`
257
+ * payload). */
258
+ export interface HookDecisionInfo {
259
+ /** `"<owner>/<name>"`. */
260
+ hook: string;
261
+ phase: HookPhase;
262
+ /** The call a tool hook decided on; absent for agent_start / agent_stop. */
263
+ tool_use_id?: string;
264
+ tool_name?: string;
265
+ /** `block` and `hold` are agent_stop's: the model was sent back with
266
+ * `reason`, or the answer is held for a verdict. */
267
+ decision: "deny" | "rewrite_input" | "rewrite_output" | "context" | "block" | "hold" | "unavailable";
268
+ /** For `unavailable`: `open` (the call went ahead) or `closed` (refused). */
269
+ fail_mode?: "open" | "closed";
270
+ /** A deny's or block's text, a hold's reason, or the error that made the
271
+ * hook unavailable. */
272
+ reason?: string;
273
+ /** For `rewrite_input`: the input the tool actually ran with. */
274
+ updated_input?: unknown;
275
+ /** For `context`: what was appended to the tool result (or, for
276
+ * agent_start, to the prompt). */
277
+ additional_context?: string;
278
+ }
256
279
  /** The payload on a `capability_inert` event: one tool the agent holds and
257
280
  * cannot use, because the capability gate that tool reads grants nothing.
258
281
  *
@@ -452,11 +475,14 @@ export interface AgentEvent {
452
475
  since_turn?: number;
453
476
  };
454
477
  /** Payload on `event: awaiting_review` — the run is held for a verdict.
455
- * `round` is 1 on the first answer and counts up with each revision. */
478
+ * `round` is 1 on the first answer and counts up with each revision.
479
+ * `held_by` names the agent_stop hook that held it; absent when review
480
+ * arming did (and only that kind is released by disarming review). */
456
481
  awaiting_review?: {
457
482
  since_turn?: number;
458
483
  round?: number;
459
484
  expires_at?: string;
485
+ held_by?: string;
460
486
  };
461
487
  /** Payload on `event: steer` (RFC AI) — the operator's drained turn. On a
462
488
  * re-attach replay, `source` is `"replay"`. Nil on all other event types. */
@@ -470,6 +496,8 @@ export interface AgentEvent {
470
496
  limit?: LimitInfo;
471
497
  /** Set on `capability_inert` events: a tool the agent holds and cannot use. */
472
498
  capability_inert?: CapabilityInertInfo;
499
+ /** Payload on `event: hook_decision`. */
500
+ hook_decision?: HookDecisionInfo;
473
501
  /** Set on `event: override` frames — what the operator changed, and from
474
502
  * what to what. */
475
503
  override?: OverrideInfo;
@@ -1763,7 +1791,9 @@ export interface ResolveInterruptOptions {
1763
1791
  * the waiting Question tool proceeds. */
1764
1792
  disposition?: "answer" | "declined";
1765
1793
  }
1766
- export type HookPhase = "pre" | "post";
1794
+ /** `post_failure` runs only when the tool failed, before the post chain, with
1795
+ * the failure's classification in the payload. */
1796
+ export type HookPhase = "pre" | "post" | "post_failure" | "agent_start" | "agent_stop";
1767
1797
  export type HookFailMode = "open" | "closed";
1768
1798
  /** Hook is the full descriptor returned by listHooks. The id +
1769
1799
  * registered_at are loomcycle-assigned; the rest mirrors what was
@@ -1780,6 +1810,8 @@ export interface Hook {
1780
1810
  fail_mode: HookFailMode;
1781
1811
  timeout_ms: number;
1782
1812
  registered_at: string;
1813
+ /** The code-js body, when the hook has one instead of a callback_url. */
1814
+ code?: string;
1783
1815
  }
1784
1816
  /** RegisterHookOptions uses camelCase (JS norm for method parameters)
1785
1817
  * and is translated to snake_case in the request body — same split as
@@ -1796,12 +1828,18 @@ export interface RegisterHookOptions {
1796
1828
  /** Tool name globs (same syntax). Empty matches every tool. */
1797
1829
  tools?: string[];
1798
1830
  /** http:// or https:// URL loomcycle POSTs PreHookCall /
1799
- * PostHookCall payloads to. */
1800
- callbackUrl: string;
1831
+ * PostHookCall payloads to. Set this or `code`. */
1832
+ callbackUrl?: string;
1833
+ /** A code-js body in place of a webhook: JavaScript defining a
1834
+ * top-level `hook(ev)` that returns the decision. Its only tool is
1835
+ * `Interruption` (ask, notify). Needs code hooks enabled on the
1836
+ * server. Set this or `callbackUrl`. */
1837
+ code?: string;
1801
1838
  /** "open" (default) — webhook errors pass through. "closed" — webhook
1802
1839
  * errors fail the tool call with IsError=true. */
1803
1840
  failMode?: HookFailMode;
1804
- /** Per-call timeout. 0 / omitted = registry default (5 s). */
1841
+ /** Per-call timeout. 0 / omitted = registry default (5 s; 50 ms for a
1842
+ * code body, where it bounds each run of the code, capped at 1 s). */
1805
1843
  timeoutMs?: number;
1806
1844
  }
1807
1845
  export interface RegisterHookResponse {
@@ -2017,14 +2055,25 @@ export interface TeamRunTarget {
2017
2055
  * returns `run_id`, so a second connection can debug a walk you await. */
2018
2056
  mode?: "detach";
2019
2057
  /** Starter state ids to pause at, armed before the walk starts. Each is
2020
- * `"<state>"` (both phases) or `"<state>:before_dispatch"` /
2021
- * `"<state>:after_collection"`.
2058
+ * `"<state>"` or `"<state>:before_dispatch"`: the walk pauses before the
2059
+ * state dispatches its wave, with every prompt composed and nothing run.
2022
2060
  *
2023
2061
  * A walk can also be armed AFTER it starts — see
2024
2062
  * {@link LoomcycleClient.setRunBreakpoints} — which is the case this
2025
2063
  * argument cannot serve: you start a run expecting it to work, watch a wave
2026
- * go wrong, and want to stop before the next one. */
2064
+ * go wrong, and want to stop before the next one.
2065
+ *
2066
+ * `"<state>:review"` arms review instead — see {@link TeamRunTarget.review}. */
2027
2067
  breakpoints?: string[];
2068
+ /** Starter state ids whose member runs are held for an operator's verdict
2069
+ * when they finish: approve with {@link LoomcycleClient.reviewRun}, reject
2070
+ * with feedback the member revises from, or reject. A rejected member
2071
+ * reaches the sink as status `"rejected"` and does not count toward the
2072
+ * wave's `wait`. Also armable live as the breakpoint `"<state>:review"`. */
2073
+ review?: string[];
2074
+ /** With `review`: end a member hold nobody rules on within this many
2075
+ * seconds as rejected. Omit for no deadline. */
2076
+ reviewTtlSeconds?: number;
2028
2077
  }
2029
2078
  /** What {@link LoomcycleClient.runTeam} returns for `mode: "detach"` — the
2030
2079
  * handle, immediately, with the walk still running behind it.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@loomcycle/client",
3
- "version": "1.93.0",
3
+ "version": "1.94.0",
4
4
  "description": "TypeScript client for the loomcycle sidecar (HTTP+SSE). 71 methods covering run streaming, agent metadata, pause/resume/state, resolver re-probe (resolveProbe — issue #88 operator escape hatch), operator-token admin (operatorTokenDef — RFC L OSS multi-tenant auth) + whoami (RFC L authoritative principal, v0.17.0) + tenant-scoped listUsers / listUserAgents, dynamic MCP registration (mcpServerDef + v0.18.0 typed mcpServerDefVerify + ensureMcpServer idempotent register-if-changed), snapshot lifecycle, memory admin (incl. v0.9.0 Vector Memory embed_stats + reembed AND v0.11.5 setMemoryEntry + deleteMemoryEntry), interruption resolve, hook management, v0.8.22 substrate admin (agentDef + skillDef), v0.9.x n8n Phase 0 (listChannels + streamUserRunStates), v0.9.x Channel CRUD (publishChannel + subscribeChannel + peekChannel + ackChannel), v0.11.5 Channel admin CRUD (createChannel + updateChannel + deleteChannel — runtime substrate; yaml channels refuse mutation with HTTP 409), v0.9.x content_sha256 verify, v0.9.1 transcript first-cycle, v0.9.x dynamic MCP server registration (mcpServerDef + MCPServerDefVerifyResult), v0.10.3 Library v2 enumeration (listLibraryAgents + listLibrarySkills + listLibraryMcpServers), and v0.11.0 LLM Gateway (llmChat + llmStream — direct provider routing without agent overhead; primary target is n8n's LoomCycleChatModel AI Agent sub-node and any LangChain-compatible consumer). v0.10.1 — dual ESM + CommonJS distribution (additive — ESM consumers unchanged; CJS consumers like n8n's community-node loader now work). v0.19.0 — typed inline code-js agent ingestion (AgentDefOverlay.code_body + ensureCodeAgent — register a deterministic code agent through the substrate with no host filesystem bind; RFC J). v0.20.0 — ensureMcpServer surfaces discoveredToolCount straight from create (loomcycle now auto-discovers MCP tools at ingestion); rediscover is now an explicit force-refresh. v0.21.0 — run/continue accept optional non-secret `metadata` (repo name, review policy, …) passed to the agent, symmetric with the WebHook/Schedule trigger paths. v0.22.0 — version-aligned lockstep release; no client-surface change (RFC N tenant isolation of the agent/skill/MCP/Schedule/Webhook definition plane + real op-schemas on the builtin MCP meta-tools are both server-side). v0.23.0 — version-aligned lockstep release; no client-surface change (RFCs O/P/R MCP-server hardening + thin client and the RFC Q DeepSeek tool-content fix are all server-side / MCP-transport-side). v0.24.0 — purgeChannel clears a channel's buffered messages without deleting its definition (allowed on yaml-declared channels too, unlike deleteChannel — F20); AgentDefOverlay gains channels / evaluation_scopes / interruption so a COMPLETE interactive/multi-agent agent round-trips over the substrate (F14). (Consolidates the interim 0.24/0.25 package bumps, which were never tag-published, back into lockstep with the loomcycle v0.24.0 tag.) v0.25.0 — adds the RFC S channel fan-in/fan-out client twins: awaitChannels() (wait for any/all/at_least N messages across channels, or a timeout — non-committing) + broadcastChannels() (publish one payload to N channels in one atomic-pre-flight call), the client-facing counterparts of the in-band Channel.await / Channel.broadcast tool ops (the rest of v0.25.0 — the manual-management Web UI console + Context op=time + max_fires self-retiring schedules — is server-side / in-band, no client-surface change). v0.29.1 — Usage gains optional `max_context_tokens` (the serving model's context-window ceiling, stamped by the loop from Provider.Capabilities() on each usage event) so a consumer can render a 'context used / max' gauge without a hard-coded per-model table; additive + optional, no behavior change. (Lockstep catch-up: the field landed in loomcycle v0.29.0 but the adapter publish skipped on a version mismatch; v0.29.1 realigns the package version with the release tag so it publishes.) v0.33.0 — gRPC + TS client parity for the RFC Y external fan-out and the compaction surface: spawnRunBatch() (POST /v1/runs:batch — spawn up to 32 fresh runs concurrently in one call, combined index-aligned envelope, per-child failures in-envelope) + compactRun(runId) (POST /v1/runs/{run_id}/compact — summarize a parked run's context); plus per-run sampling + compaction overrides now accepted on runStreaming / continueSession (an explicit temperature 0 is preserved as deterministic, not dropped as falsy). (The gRPC half adds the matching SpawnRunBatch / CompactRun RPCs + the sampling/compaction fields on RunRequest/ContinueRequest — server-side.) v0.34.0 — version-aligned lockstep release; no client-surface change (context-transform plugins / RFC Z Phase 1a are server-side config; the exp7 hardening pass is server-side; the R2 cross-provider thinking-model downgrade surfaces a new `model_downgraded` SSE event the generic stream passes through unchanged). v0.35.0 — RFC AH dynamic filesystem volumes: volumeDef() (POST /v1/_volumedef — op-discriminated create/get/list/delete/purge; a Volume is flat, so delete unmaps + purge RemoveAll's, no retire/promote/fork) + listVolumes() / listEphemeralVolumes() (GET /v1/_volumes[/ephemeral] — tenant-scoped; host paths redacted for non-operator callers). Tenant-confined; the runtime derives the path inside an operator-blessed dynamic_root, so callers pass name + mode, never a host path. v1.1.1 — RFC AI interactive agentic sessions: an `interactive: true` flag on runStreaming/continueSession (a run that parks at end_turn for steering) + sendRunInput(runId, text) (POST /v1/runs/{id}/input — steer a live run) + streamRunByID(runId, {fromSeq}) (GET /v1/runs/{id}/stream — re-attach by run_id; the operator's prior turns replay as `steer` events so a cold client reconstructs the whole conversation) + a high-level InteractiveSession driver (client.interactiveSession / attachInteractiveSession — events()/send()/cancel(), the adapter port of the Web UI run terminal). The AgentEvent union gains awaiting_input/steer/context_compaction frames. Version-aligned with the loomcycle v1.1.x line so the v1.1.1 tag publishes it (also carrying the previously-unpublished v0.35.0 volume surface). v1.4.0 — RFC AL Path VFS + RFC AK Document on the wire: path(input) (POST /v1/_path — a Unix-like filesystem over Memory/Volumes/Documents; resolve/ls/stat/mkdir/mv/rm) + document(input) (POST /v1/_document — chunked-graph documents; 13 ops, needs SQL Memory on the sidecar). Scope (agent/user/tenant) + tenant are resolved server-side from the authenticated principal, never the wire; an off-run scope:'user' op keys on the principal subject so it interoperates with that user's agent runs. New PathToolInput / DocumentToolInput types; responses are op-varying (unknown — narrow as needed). v1.7.0 — RFC AT image/vision input: the PromptContent union gains an `image` variant ({ type:'image'; media_type: ImageMediaType; data: base64-no-prefix }) accepted in a user segment by runStreaming / continueSession (segments pass through unchanged — no method change). The model must be vision-capable or the run errors before the call. New ImageMediaType type (image/png|jpeg|gif|webp). v1.12.1 — Path/Document browse-by-subject + the full Document op set (RFC AS/AK): path(input, opts) / document(input, opts) accept optional scopeId / tenant browse overrides sent as ?scope_id= / ?tenant= query params (server reads them from the URL, re-checks authorization; omit both to browse your own subject — byte-identical to the pre-RFC-AS request), and DocumentToolInput.op now covers all 16 backend ops (adds set_path, export_md, import_md) with the matching include_metadata / markdown fields. Additive — existing path() / document() callers are unchanged. v1.16.0 — RFC BC client-executed tools (local tool host): connectClientTools({tools,onInvoke}) opens a persistent WebSocket to /v1/client-tools, registers tools this client runs on the user's machine (browser DOM / files / shell), and answers the invoke frames loomcycle routes when an agent of your principal calls a client:<tool> — returning your reply as an ordinary tool result. Returns a ClientToolHost driver (.close() to stop; auto-reconnect); dependency-free (global WebSocket in browsers / Node 22+, or an injected WebSocketImpl like the ws package on older Node); the bearer rides the Sec-WebSocket-Protocol subprotocol (browsers can't set an Authorization header on a WebSocket). The runtime's first WebSocket surface. v1.45.0 — RFC BL P5 subject erasure: erasureReport(subject, {tenant}) (GET /v1/_erasure — what this deployment holds about one subject, in three tiers: deletable with existing primitives, subject-keyed but not deletable, and facts ABOUT the subject in scopes they do not own) + erasureExecute(subject, {dryRun, confirm, tenant}) (POST /v1/_erasure — removes tiers 1 and 2). DEFAULTS TO A DRY RUN: dryRun defaults true and a live run also requires confirm === subject. The tier-3 residue is traceable only through the subject's chats, which a live run deletes, so a report afterwards shows rows: 0 while those facts remain — the returned object is the only durable record of what was not reached; persist it. New ErasureReport / ErasureResult / ErasureTier / ErasureResidue types. v1.47.0 — RFC BV memory-view SDK: memorySearch() (POST /v1/_memory/search — off-run unified semantic search spanning k/v entries AND document-chunk bodies in one ranked list, each hit tagged kind memory|document with chunk_id on document hits) + memoryEmbedStats(scope) + reembedMemory(scope, scopeId, {dryRun,limit}) (the Vector Memory embed-admin reads the memory-view console needs; dry_run defaults true). Fact reads (list_facts + get_chunk's entity block) ride the existing document() passthrough. Additive — existing callers unchanged. v1.61.0 — RFC CJ per-run context-window override: runStreaming / continueSession accept an optional maxContextTokens (integer tokens) that wins over the agent's own max_context_tokens; omitted inherits it (which defers to the provider/driver default). Distinct from a model's output cap; primarily for local inference (Ollama num_ctx). Serialized as the snake_case max_context_tokens field on POST /v1/runs + the continuation body; additive, existing callers unchanged. v1.72.1 — the TeamDef version lifecycle: listTeamVersions(name) (op=list — every version of one team, newest first), promoteTeam(defId) (op=promote — point the active pointer, which is what a run BY NAME executes; forkTeam defaults to promote:false, so authoring and putting in force stay two steps), retireTeam(defId, retired) (op=retire — reversible and version-scoped, unlike deleteTeam) and verifyTeam(name, contentSha256) (op=verify — the drift check for a workflow kept in source control and pushed to several deployments; an absent team answers deployed:false rather than raising). The ops existed on the substrate and over HTTP; a client that could author a team could not put one in force.",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",