@namzu/sdk 0.1.8 → 0.3.0

package/dist/store/session/messages.js

@@ -0,0 +1,12 @@
+/**
+ * SessionMessage — the persistence record for a {@link Message} in the
+ * session hierarchy.
+ *
+ * Rename of the legacy `ConversationMessage` concept, scoped by
+ * {@link SessionId} and carrying {@link TenantId} for the Convention #17
+ * key tuple (session-hierarchy.md §12.1). The `message` field preserves the
+ * full Run-scoped `Message` payload verbatim; the wrapper only adds
+ * addressability + tenant isolation.
+ */
+export {};
+//# sourceMappingURL=messages.js.map

package/dist/store/session/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/store/session/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/store/thread/disk.d.ts

@@ -0,0 +1,41 @@
+/**
+ * DiskThreadStore — filesystem-backed implementation of {@link ThreadStore}.
+ *
+ * Every mutation is write-tmp-rename (Convention #8). Layout uses the Phase 2
+ * intermediate shape:
+ *
+ *   {rootDir}/projects/{projectId}/threads/{threadId}/
+ *     thread.json
+ *
+ * Sessions stay under `projects/{projectId}/sessions/{sessionId}/...` rather
+ * than nesting under `threads/{threadId}/` — the denormalized `threadId` on
+ * each session record (Phase 2.4 decision) makes thread-scoped queries
+ * addressable without path-level nesting, and keeps Project-scoped consumers
+ * (handoff, retention, archival) a single-directory scan. Phase 6 collapses
+ * `projects/{projectId}/` to `.namzu/` as part of `namzu init` folder binding.
+ *
+ * Tenant scoping is enforced through the JSON payload (`tenantId` field on
+ * every record), not the path — cross-tenant reads reject with
+ * {@link TenantIsolationError} (Convention #17).
+ */
+import type { Thread } from '../../session/hierarchy/thread.js';
+import type { TenantId } from '../../types/ids/index.js';
+import type { ProjectId, ThreadId } from '../../types/session/ids.js';
+import type { CreateThreadParams, ThreadStore } from '../../types/thread/store.js';
+/** Config for {@link DiskThreadStore}. `rootDir` is absolute. */
+export interface DiskThreadStoreConfig {
+    rootDir: string;
+}
+export declare class DiskThreadStore implements ThreadStore {
+    private readonly rootDir;
+    private readonly threadIndex;
+    constructor(config: DiskThreadStoreConfig);
+    createThread(params: CreateThreadParams, tenantId: TenantId): Promise<Thread>;
+    getThread(threadId: ThreadId, tenantId: TenantId): Promise<Thread | null>;
+    updateThread(thread: Thread, tenantId: TenantId): Promise<void>;
+    deleteThread(threadId: ThreadId, tenantId: TenantId): Promise<void>;
+    listThreads(projectId: ProjectId, tenantId: TenantId): Promise<readonly Thread[]>;
+    private locateThread;
+    private assertTenant;
+}
+//# sourceMappingURL=disk.d.ts.map

package/dist/store/thread/disk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk.d.ts","sourceRoot":"","sources":["../../../src/store/thread/disk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAgB,MAAM,mCAAmC,CAAA;AAC7E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAGlF,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACrC,OAAO,EAAE,MAAM,CAAA;CACf;AAoBD,qBAAa,eAAgB,YAAW,WAAW;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwC;gBAExD,MAAM,EAAE,qBAAqB;IAInC,YAAY,CAAC,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAuB7E,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASzE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAmC/D,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAcnE,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;YA4BzE,YAAY;IAiC1B,OAAO,CAAC,YAAY;CAKpB"}

package/dist/store/thread/disk.js

@@ -0,0 +1,229 @@
+/**
+ * DiskThreadStore — filesystem-backed implementation of {@link ThreadStore}.
+ *
+ * Every mutation is write-tmp-rename (Convention #8). Layout uses the Phase 2
+ * intermediate shape:
+ *
+ *   {rootDir}/projects/{projectId}/threads/{threadId}/
+ *     thread.json
+ *
+ * Sessions stay under `projects/{projectId}/sessions/{sessionId}/...` rather
+ * than nesting under `threads/{threadId}/` — the denormalized `threadId` on
+ * each session record (Phase 2.4 decision) makes thread-scoped queries
+ * addressable without path-level nesting, and keeps Project-scoped consumers
+ * (handoff, retention, archival) a single-directory scan. Phase 6 collapses
+ * `projects/{projectId}/` to `.namzu/` as part of `namzu init` folder binding.
+ *
+ * Tenant scoping is enforced through the JSON payload (`tenantId` field on
+ * every record), not the path — cross-tenant reads reject with
+ * {@link TenantIsolationError} (Convention #17).
+ */
+import { mkdir, readFile, readdir, rename, rm, unlink, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { StaleThreadError, TenantIsolationError } from '../../session/errors.js';
+import { generateThreadId } from '../../utils/id.js';
+export class DiskThreadStore {
+    rootDir;
+    threadIndex = new Map();
+    constructor(config) {
+        this.rootDir = config.rootDir;
+    }
+    async createThread(params, tenantId) {
+        const now = new Date();
+        const thread = {
+            id: generateThreadId(),
+            projectId: params.projectId,
+            tenantId,
+            title: params.title,
+            status: 'open',
+            ownerVersion: 0,
+            createdAt: now,
+            updatedAt: now,
+        };
+        const dir = join(this.rootDir, 'projects', params.projectId, 'threads', thread.id);
+        await mkdir(dir, { recursive: true });
+        await atomicWriteJson(join(dir, 'thread.json'), serializeThread(thread));
+        this.threadIndex.set(thread.id, {
+            threadId: thread.id,
+            projectId: params.projectId,
+            path: dir,
+        });
+        return thread;
+    }
+    async getThread(threadId, tenantId) {
+        const located = await this.locateThread(threadId);
+        if (!located)
+            return null;
+        const raw = await readJson(join(located.path, 'thread.json'));
+        if (!raw)
+            return null;
+        this.assertTenant(raw.tenantId, tenantId, `thread(${threadId})`);
+        return deserializeThread(raw);
+    }
+    async updateThread(thread, tenantId) {
+        if (thread.tenantId !== tenantId) {
+            throw new TenantIsolationError({
+                requested: tenantId,
+                resource: `thread(${thread.id}) payload`,
+            });
+        }
+        const located = await this.locateThread(thread.id);
+        if (!located) {
+            throw new Error(`Thread ${thread.id} not found`);
+        }
+        const existing = await readJson(join(located.path, 'thread.json'));
+        if (!existing) {
+            throw new Error(`Thread ${thread.id} not found`);
+        }
+        this.assertTenant(existing.tenantId, tenantId, `thread(${thread.id})`);
+        // CAS on ownerVersion. On mismatch, caller must re-read + re-apply +
+        // retry. No silent overwrite (Convention #0).
+        if (thread.ownerVersion !== existing.ownerVersion) {
+            throw new StaleThreadError({
+                threadId: thread.id,
+                expectedVersion: thread.ownerVersion,
+                actualVersion: existing.ownerVersion,
+            });
+        }
+        const updated = {
+            ...thread,
+            ownerVersion: existing.ownerVersion + 1,
+            updatedAt: new Date(),
+        };
+        await atomicWriteJson(join(located.path, 'thread.json'), serializeThread(updated));
+    }
+    async deleteThread(threadId, tenantId) {
+        const located = await this.locateThread(threadId);
+        if (!located)
+            return; // Idempotent: missing = no-op.
+        const existing = await readJson(join(located.path, 'thread.json'));
+        if (!existing)
+            return;
+        this.assertTenant(existing.tenantId, tenantId, `thread(${threadId})`);
+        // The store does NOT enforce "no attached sessions" here — that is a
+        // cross-store precondition owned by ThreadManager. This keeps the
+        // boundary clean; ThreadStore has no awareness of SessionStore layout.
+        await rm(located.path, { recursive: true, force: true });
+        this.threadIndex.delete(threadId);
+    }
+    async listThreads(projectId, tenantId) {
+        const threadsDir = join(this.rootDir, 'projects', projectId, 'threads');
+        let entries;
+        try {
+            entries = await readdir(threadsDir);
+        }
+        catch (err) {
+            const code = err.code;
+            if (code === 'ENOENT')
+                return [];
+            throw err;
+        }
+        const results = [];
+        for (const entry of entries) {
+            if (!entry.startsWith('thd_'))
+                continue;
+            const path = join(threadsDir, entry);
+            const raw = await readJson(join(path, 'thread.json'));
+            if (!raw)
+                continue;
+            // Cross-tenant records in the same directory are skipped silently —
+            // the listing is scoped to the caller's tenant. Mismatch is not an
+            // isolation violation because the caller never requested the record.
+            if (raw.tenantId !== tenantId)
+                continue;
+            results.push(deserializeThread(raw));
+            this.threadIndex.set(raw.id, { threadId: raw.id, projectId, path });
+        }
+        results.sort((a, b) => a.createdAt.getTime() - b.createdAt.getTime());
+        return results;
+    }
+    async locateThread(threadId) {
+        const cached = this.threadIndex.get(threadId);
+        if (cached)
+            return cached;
+        // Walk projects/* looking for the thread dir. Cost is bounded by number
+        // of projects (usually 1) × number of threads per project.
+        const projectsDir = join(this.rootDir, 'projects');
+        let projectDirs;
+        try {
+            projectDirs = await readdir(projectsDir);
+        }
+        catch (err) {
+            const code = err.code;
+            if (code === 'ENOENT')
+                return null;
+            throw err;
+        }
+        for (const rawProject of projectDirs) {
+            if (!rawProject.startsWith('prj_'))
+                continue;
+            const threadPath = join(projectsDir, rawProject, 'threads', threadId);
+            const raw = await readJson(join(threadPath, 'thread.json'));
+            if (raw?.id === threadId) {
+                const entry = {
+                    threadId,
+                    projectId: rawProject,
+                    path: threadPath,
+                };
+                this.threadIndex.set(threadId, entry);
+                return entry;
+            }
+        }
+        return null;
+    }
+    assertTenant(owning, requested, resource) {
+        if (owning !== requested) {
+            throw new TenantIsolationError({ requested, resource });
+        }
+    }
+}
+// Serialization -----------------------------------------------------------
+function serializeThread(thread) {
+    return {
+        id: thread.id,
+        projectId: thread.projectId,
+        tenantId: thread.tenantId,
+        title: thread.title,
+        status: thread.status,
+        ownerVersion: thread.ownerVersion,
+        createdAt: thread.createdAt.toISOString(),
+        updatedAt: thread.updatedAt.toISOString(),
+    };
+}
+function deserializeThread(raw) {
+    return {
+        id: raw.id,
+        projectId: raw.projectId,
+        tenantId: raw.tenantId,
+        title: raw.title,
+        status: raw.status,
+        ownerVersion: raw.ownerVersion,
+        createdAt: new Date(raw.createdAt),
+        updatedAt: new Date(raw.updatedAt),
+    };
+}
+// FS helpers -----------------------------------------------------------------
+async function readJson(path) {
+    try {
+        const raw = await readFile(path, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'ENOENT')
+            return null;
+        throw err;
+    }
+}
+async function atomicWriteJson(filePath, value) {
+    const tempPath = `${filePath}.tmp`;
+    try {
+        await writeFile(tempPath, JSON.stringify(value, null, 2), 'utf-8');
+        await rename(tempPath, filePath);
+    }
+    catch (err) {
+        await unlink(tempPath).catch(() => undefined);
+        throw err;
+    }
+}
+//# sourceMappingURL=disk.js.map

package/dist/store/thread/disk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk.js","sourceRoot":"","sources":["../../../src/store/thread/disk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAKhF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAyBpD,MAAM,OAAO,eAAe;IACV,OAAO,CAAQ;IACf,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAA;IAEpE,YAAY,MAA6B;QACxC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA0B,EAAE,QAAkB;QAChE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,MAAM,MAAM,GAAW;YACtB,EAAE,EAAE,gBAAgB,EAAE;YACtB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ;YACR,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACd,CAAA;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QAClF,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAA;QACxE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE;YAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,GAAG;SACT,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACd,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAkB,EAAE,QAAkB;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAkB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAA;QAC9E,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,QAAQ,GAAG,CAAC,CAAA;QAChE,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,QAAkB;QACpD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,oBAAoB,CAAC;gBAC9B,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,UAAU,MAAM,CAAC,EAAE,WAAW;aACxC,CAAC,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,YAAY,CAAC,CAAA;QACjD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAkB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAA;QACnF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,YAAY,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;QAEtE,qEAAqE;QACrE,8CAA8C;QAC9C,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,IAAI,gBAAgB,CAAC;gBAC1B,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,eAAe,EAAE,MAAM,CAAC,YAAY;gBACpC,aAAa,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAW;YACvB,GAAG,MAAM;YACT,YAAY,EAAE,QAAQ,CAAC,YAAY,GAAG,CAAC;YACvC,SAAS,EAAE,IAAI,IAAI,EAAE;SACrB,CAAA;QACD,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IACnF,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAkB,EAAE,QAAkB;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;QACjD,IAAI,CAAC,OAAO;YAAE,OAAM,CAAC,+BAA+B;QACpD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAkB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAA;QACnF,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,QAAQ,GAAG,CAAC,CAAA;QAErE,qEAAqE;QACrE,kEAAkE;QAClE,uEAAuE;QACvE,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAoB,EAAE,QAAkB;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACvE,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAA;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAA;YAChD,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAA;YAChC,MAAM,GAAG,CAAA;QACV,CAAC;QAED,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAQ;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;YACpC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAkB,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAA;YACtE,IAAI,CAAC,GAAG;gBAAE,SAAQ;YAClB,oEAAoE;YACpE,mEAAmE;YACnE,qEAAqE;YACrE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,SAAQ;YACvC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAA;YACpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;QACrE,OAAO,OAAO,CAAA;IACf,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAkB;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC7C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;QAEzB,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAClD,IAAI,WAAqB,CAAA;QACzB,IAAI,CAAC;YACJ,WAAW,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAA;YAChD,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAClC,MAAM,GAAG,CAAA;QACV,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAQ;YAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;YACrE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAkB,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAA;YAC5E,IAAI,GAAG,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAqB;oBAC/B,QAAQ;oBACR,SAAS,EAAE,UAAuB;oBAClC,IAAI,EAAE,UAAU;iBAChB,CAAA;gBACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;gBACrC,OAAO,KAAK,CAAA;YACb,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IAEO,YAAY,CAAC,MAAgB,EAAE,SAAmB,EAAE,QAAgB;QAC3E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxD,CAAC;IACF,CAAC;CACD;AAED,4EAA4E;AAE5E,SAAS,eAAe,CAAC,MAAc;IACtC,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;KACzC,CAAA;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAoB;IAC9C,OAAO;QACN,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;KAClC,CAAA;AACF,CAAC;AAED,+EAA+E;AAE/E,KAAK,UAAU,QAAQ,CAAI,IAAY;IACtC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAA;QAChD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QAClC,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAc;IAC9D,MAAM,QAAQ,GAAG,GAAG,QAAQ,MAAM,CAAA;IAClC,IAAI,CAAC;QACJ,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAClE,MAAM,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC7C,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC"}

package/dist/store/thread/index.d.ts

@@ -0,0 +1,4 @@
+export { InMemoryThreadStore } from './memory.js';
+export { DiskThreadStore } from './disk.js';
+export type { DiskThreadStoreConfig } from './disk.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/store/thread/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/thread/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,YAAY,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA"}

package/dist/store/thread/index.js

@@ -0,0 +1,6 @@
+// Sub-barrel for the Thread persistence module (Convention #4).
+// Concrete implementations live in sibling files; re-export them here so
+// consumers import via `../store/thread/index.js`.
+export { InMemoryThreadStore } from './memory.js';
+export { DiskThreadStore } from './disk.js';
+//# sourceMappingURL=index.js.map

package/dist/store/thread/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/store/thread/index.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,yEAAyE;AACzE,mDAAmD;AAEnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA"}

package/dist/store/thread/memory.d.ts

@@ -0,0 +1,23 @@
+/**
+ * InMemoryThreadStore — reference in-memory implementation of
+ * {@link ThreadStore}.
+ *
+ * Mirrors the write-time CAS contract of the disk store: every
+ * `updateThread` compares the supplied `ownerVersion` against the persisted
+ * copy and rejects with `StaleThreadError` on mismatch. Convention #17:
+ * cross-tenant access throws `TenantIsolationError` with no fallback.
+ */
+import type { Thread } from '../../session/hierarchy/thread.js';
+import type { TenantId } from '../../types/ids/index.js';
+import type { ProjectId, ThreadId } from '../../types/session/ids.js';
+import type { CreateThreadParams, ThreadStore } from '../../types/thread/store.js';
+export declare class InMemoryThreadStore implements ThreadStore {
+    private readonly threads;
+    createThread(params: CreateThreadParams, tenantId: TenantId): Promise<Thread>;
+    getThread(threadId: ThreadId, tenantId: TenantId): Promise<Thread | null>;
+    updateThread(thread: Thread, tenantId: TenantId): Promise<void>;
+    deleteThread(threadId: ThreadId, tenantId: TenantId): Promise<void>;
+    listThreads(projectId: ProjectId, tenantId: TenantId): Promise<readonly Thread[]>;
+    private assertTenant;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/store/thread/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/store/thread/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAQlF,qBAAa,mBAAoB,YAAW,WAAW;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAEtD,YAAY,CAAC,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAgB7E,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAOzE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAgC/D,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnE,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;IAWvF,OAAO,CAAC,YAAY;CAKpB"}

package/dist/store/thread/memory.js

@@ -0,0 +1,90 @@
+/**
+ * InMemoryThreadStore — reference in-memory implementation of
+ * {@link ThreadStore}.
+ *
+ * Mirrors the write-time CAS contract of the disk store: every
+ * `updateThread` compares the supplied `ownerVersion` against the persisted
+ * copy and rejects with `StaleThreadError` on mismatch. Convention #17:
+ * cross-tenant access throws `TenantIsolationError` with no fallback.
+ */
+import { StaleThreadError, TenantIsolationError } from '../../session/errors.js';
+import { generateThreadId } from '../../utils/id.js';
+export class InMemoryThreadStore {
+    threads = new Map();
+    async createThread(params, tenantId) {
+        const now = new Date();
+        const thread = {
+            id: generateThreadId(),
+            projectId: params.projectId,
+            tenantId,
+            title: params.title,
+            status: 'open',
+            ownerVersion: 0,
+            createdAt: now,
+            updatedAt: now,
+        };
+        this.threads.set(thread.id, { tenantId, thread });
+        return thread;
+    }
+    async getThread(threadId, tenantId) {
+        const record = this.threads.get(threadId);
+        if (!record)
+            return null;
+        this.assertTenant(record.tenantId, tenantId, `thread(${threadId})`);
+        return record.thread;
+    }
+    async updateThread(thread, tenantId) {
+        if (thread.tenantId !== tenantId) {
+            throw new TenantIsolationError({
+                requested: tenantId,
+                resource: `thread(${thread.id}) payload`,
+            });
+        }
+        const existing = this.threads.get(thread.id);
+        if (!existing) {
+            throw new Error(`Thread ${thread.id} not found`);
+        }
+        this.assertTenant(existing.tenantId, tenantId, `thread(${thread.id})`);
+        // CAS on ownerVersion — supplied version must match persisted exactly.
+        // Any drift means another writer already advanced the record; the caller
+        // must re-read + re-apply + retry.
+        if (thread.ownerVersion !== existing.thread.ownerVersion) {
+            throw new StaleThreadError({
+                threadId: thread.id,
+                expectedVersion: thread.ownerVersion,
+                actualVersion: existing.thread.ownerVersion,
+            });
+        }
+        const updated = {
+            ...thread,
+            ownerVersion: existing.thread.ownerVersion + 1,
+            updatedAt: new Date(),
+        };
+        this.threads.set(thread.id, { tenantId, thread: updated });
+    }
+    async deleteThread(threadId, tenantId) {
+        const record = this.threads.get(threadId);
+        if (!record)
+            return; // Idempotent: missing = no-op.
+        this.assertTenant(record.tenantId, tenantId, `thread(${threadId})`);
+        this.threads.delete(threadId);
+    }
+    async listThreads(projectId, tenantId) {
+        const matches = [];
+        for (const { tenantId: ownerTenant, thread } of this.threads.values()) {
+            if (ownerTenant !== tenantId)
+                continue;
+            if (thread.projectId !== projectId)
+                continue;
+            matches.push(thread);
+        }
+        matches.sort((a, b) => a.createdAt.getTime() - b.createdAt.getTime());
+        return matches;
+    }
+    assertTenant(owning, requested, resource) {
+        if (owning !== requested) {
+            throw new TenantIsolationError({ requested, resource });
+        }
+    }
+}
+//# sourceMappingURL=memory.js.map

package/dist/store/thread/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/store/thread/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAKhF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAOpD,MAAM,OAAO,mBAAmB;IACd,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;IAE5D,KAAK,CAAC,YAAY,CAAC,MAA0B,EAAE,QAAkB;QAChE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,MAAM,MAAM,GAAW;YACtB,EAAE,EAAE,gBAAgB,EAAE;YACtB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ;YACR,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACd,CAAA;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;QACjD,OAAO,MAAM,CAAA;IACd,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAkB,EAAE,QAAkB;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,QAAQ,GAAG,CAAC,CAAA;QACnE,OAAO,MAAM,CAAC,MAAM,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,QAAkB;QACpD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,oBAAoB,CAAC;gBAC9B,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,UAAU,MAAM,CAAC,EAAE,WAAW;aACxC,CAAC,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,YAAY,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;QAEtE,uEAAuE;QACvE,yEAAyE;QACzE,mCAAmC;QACnC,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC1D,MAAM,IAAI,gBAAgB,CAAC;gBAC1B,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,eAAe,EAAE,MAAM,CAAC,YAAY;gBACpC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;aAC3C,CAAC,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAW;YACvB,GAAG,MAAM;YACT,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC;YAC9C,SAAS,EAAE,IAAI,IAAI,EAAE;SACrB,CAAA;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAkB,EAAE,QAAkB;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM;YAAE,OAAM,CAAC,+BAA+B;QACnD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,QAAQ,GAAG,CAAC,CAAA;QACnE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAoB,EAAE,QAAkB;QACzD,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,KAAK,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACvE,IAAI,WAAW,KAAK,QAAQ;gBAAE,SAAQ;YACtC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAQ;YAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;QACrE,OAAO,OAAO,CAAA;IACf,CAAC;IAEO,YAAY,CAAC,MAAgB,EAAE,SAAmB,EAAE,QAAgB;QAC3E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxD,CAAC;IACF,CAAC;CACD"}

package/dist/tools/builtins/__tests__/structuredOutput.example.d.ts

@@ -41,7 +41,7 @@ export declare const createDataExtractionTool: () => import("../../../index.js")
     }[];
 }>;
 export declare const createTaskResultTool: () => import("../../../index.js").ToolDefinition<{
-    status: "failed" | "success" | "partial";
+    status: "failed" | "partial" | "success";
     metadata: {
         timestamp: string;
         attempts: number;

package/dist/types/agent/base.d.ts

@@ -1,9 +1,10 @@
 import type { AgentStatus, CostInfo, TokenUsage } from '../common/index.js';
-import type { RunId, ThreadId } from '../ids/index.js';
+import type { RunId, SessionId, TenantId } from '../ids/index.js';
 import type { InvocationState } from '../invocation/index.js';
 import type { Message } from '../message/index.js';
 import type { PermissionMode } from '../permission/index.js';
 import type { StopReason } from '../run/stop-reason.js';
+import type { ProjectId, ThreadId } from '../session/ids.js';
 import type { TaskStore } from '../task/index.js';
 import type { ToolAvailability } from '../tool/index.js';
 export type AgentType = 'reactive' | 'pipeline' | 'router' | 'supervisor';
@@ -18,7 +19,29 @@ export interface BaseAgentConfig {
     costLimitUsd?: number;
     permissionMode?: PermissionMode;
     env?: Record<string, string>;
+    /**
+     * Long-lived goal scope for the run. Required at runtime — agents reject
+     * configs missing this (`'X requires sessionId, projectId, and tenantId
+     * in config'`).
+     *
+     * Kept optional at the TYPE level because {@link AgentManager} stamps
+     * this field AFTER `configBuilder` returns (manager/agent/lifecycle.ts).
+     * Tightening to required is a separate task alongside
+     * `AgentFactoryOptions` carrying the triple.
+     */
+    projectId?: ProjectId;
+    /**
+     * Topic the run belongs to. Optional at the TYPE level for the same
+     * reason as `projectId` — {@link AgentManager} stamps this field after
+     * `configBuilder` returns so `configBuilder` implementations do not
+     * need to be updated before this tightens. Tightening to required
+     * lands with the `AgentFactoryOptions` triple refactor.
+     */
     threadId?: ThreadId;
+    /** Session under which the run executes. See `projectId` for the tightening plan. */
+    sessionId?: SessionId;
+    /** Isolation boundary (Convention #17). See `projectId` for the tightening plan. */
+    tenantId?: TenantId;
     parentRunId?: RunId;
     depth?: number;
     contextLevel?: AgentContextLevel;

package/dist/types/agent/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/types/agent/base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAExD,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAA;AAEzE,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;AAE/D,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAE5B,QAAQ,CAAC,EAAE,QAAQ,CAAA;IAEnB,WAAW,CAAC,EAAE,KAAK,CAAA;IAEnB,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,YAAY,CAAC,EAAE,iBAAiB,CAAA;IAEhC,+DAA+D;IAC/D,eAAe,CAAC,EAAE,eAAe,CAAA;CACjC;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CAAC,CAAA;AAEhF,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,CAAC,EAAE,WAAW,CAAA;IAEpB,SAAS,CAAC,EAAE,SAAS,CAAA;IAErB,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;CAC3C;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,WAAW,CAAA;IACnB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,UAAU,CAAA;IACjB,IAAI,EAAE,QAAQ,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,EAAE,OAAO,CAAA;IACtB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,iBAAiB,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,SAAS,CAAA;IACf,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,iBAAiB,CAAA;CAC/B"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/types/agent/base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAExD,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAA;AAEzE,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;AAE/D,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAE5B;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,SAAS,CAAA;IAErB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAA;IAEnB,qFAAqF;IACrF,SAAS,CAAC,EAAE,SAAS,CAAA;IAErB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,QAAQ,CAAA;IAEnB,WAAW,CAAC,EAAE,KAAK,CAAA;IAEnB,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,YAAY,CAAC,EAAE,iBAAiB,CAAA;IAEhC,+DAA+D;IAC/D,eAAe,CAAC,EAAE,eAAe,CAAA;CACjC;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CAAC,CAAA;AAEhF,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,CAAC,EAAE,WAAW,CAAA;IAEpB,SAAS,CAAC,EAAE,SAAS,CAAA;IAErB,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;CAC3C;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,WAAW,CAAA;IACnB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,UAAU,CAAA;IACjB,IAAI,EAAE,QAAQ,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,EAAE,OAAO,CAAA;IACtB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,iBAAiB,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,SAAS,CAAA;IACf,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,iBAAiB,CAAA;CAC/B"}

package/dist/types/agent/factory.d.ts

@@ -10,7 +10,14 @@ export interface AgentDefinition {
     contextLevel?: AgentContextLevel;
 }
 export interface AgentFactoryOptions {
-    apiKey: string;
+    /**
+     * API key for providers that authenticate via key (OpenAI, Anthropic,
+     * OpenRouter). Optional because BYO-provider flows (Bedrock IAM, custom
+     * `ProviderRegistry.create(...)`) resolve credentials outside this object.
+     * `configBuilder` implementations should treat an absent `apiKey` as the
+     * BYO signal and use the provider passed via the agent config instead.
+     */
+    apiKey?: string;
     model?: string;
     workingDirectory?: string;
     tokenBudget?: number;
@@ -29,7 +36,6 @@ export interface AgentFactoryOptions {
     };
     agentDefinitions?: AgentDefinition[];
     taskRouter?: TaskRouterConfig;
-    threadId?: string;
     runId?: string;
     parentRunId?: string;
     depth?: number;

package/dist/types/agent/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/types/agent/factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACpF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAEtC,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAElD,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,SAAS,CAAA;IACf,UAAU,EAAE,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAA;IACnD,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAE5F,YAAY,CAAC,EAAE,iBAAiB,CAAA;CAChC;AAED,MAAM,WAAW,mBAAmB;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAEhC,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;IAEnC,aAAa,CAAC,EAAE;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,YAAY,CAAC,EAAE,MAAM,CAAA;KACrB,CAAA;IAED,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAA;IAEpC,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAE7B,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,KAAK,CAAC,EAAE,MAAM,CAAA;CACd"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/types/agent/factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACpF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAEtC,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAElD,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,SAAS,CAAA;IACf,UAAU,EAAE,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAA;IACnD,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAE5F,YAAY,CAAC,EAAE,iBAAiB,CAAA;CAChC;AAED,MAAM,WAAW,mBAAmB;IACnC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAEhC,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;IAEnC,aAAa,CAAC,EAAE;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,YAAY,CAAC,EAAE,MAAM,CAAA;KACrB,CAAA;IAED,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAA;IAEpC,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAE7B,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,KAAK,CAAC,EAAE,MAAM,CAAA;CACd"}

package/dist/types/agent/task.d.ts

@@ -1,12 +1,21 @@
+import type { ActorRef } from '../../session/hierarchy/actor.js';
+import type { WorkspaceBackendKind } from '../../session/workspace/ref.js';
 import type { TokenUsage } from '../common/index.js';
-import type { RunId, TaskId, ThreadId } from '../ids/index.js';
+import type { RunId, SessionId, TaskId, TenantId } from '../ids/index.js';
 import type { Message } from '../message/index.js';
 import type { RunEventListener } from '../run/events.js';
+import type { ProjectId, ThreadId } from '../session/ids.js';
 import type { AgentInput, BaseAgentConfig, BaseAgentResult } from './base.js';
 import type { Agent } from './core.js';
 import type { AgentFactoryOptions } from './factory.js';
 export type AgentTaskState = 'pending' | 'running' | 'completed' | 'failed' | 'canceled' | 'rejected' | 'input-required';
 export declare function isTerminalAgentTaskState(state: AgentTaskState): boolean;
+/**
+ * Context carried into {@link AgentManager.sendMessage}. `tenantId`,
+ * `threadId`, `sessionId`, `projectId`, and `parentActor` are required —
+ * the spawn path is the ingress point for the session hierarchy; callers
+ * must provide the full scoping set.
+ */
 export interface AgentTaskContext {
     parentRunId: RunId;
     parentAgentId: string;
@@ -14,7 +23,33 @@ export interface AgentTaskContext {
     depth: number;
     budgetTracker: AgentTaskBudget;
     factoryOptions?: AgentFactoryOptions;
-    threadId?: ThreadId;
+    /** Isolation boundary. Required per session-hierarchy.md §12.1. */
+    tenantId: TenantId;
+    /**
+     * Topic the current task belongs to. Required in 0.3.0 — spawn copies
+     * this onto the child session without a second ThreadStore round-trip,
+     * and gates creation on {@link ThreadManager.requireOpen}. Children
+     * inherit the parent's `threadId` verbatim; cross-thread spawn is
+     * forbidden by design (a delegated sub-agent stays on the same topic).
+     */
+    threadId: ThreadId;
+    /**
+     * Parent session under which any sub-agent spawn is recorded. Required
+     * in 0.2.0; a spawn cannot be attributed without it.
+     */
+    sessionId: SessionId;
+    /**
+     * Long-lived goal scope. Required. Denormalized from the owning Thread
+     * (see {@link Thread}) — structurally immutable per Phase 2.4 decision
+     * (sessions never cross threads, threads never cross projects).
+     */
+    projectId: ProjectId;
+    /**
+     * The actor invoking this task. Children built off this context stamp
+     * their own `parentActor: ActorRef` linking back via the actor chain
+     * (session-hierarchy.md §4.3 / §10.4).
+     */
+    parentActor: ActorRef;
 }
 export interface AgentTaskBudget {
     total: number;
@@ -40,6 +75,12 @@ export interface AgentTaskProgress {
     usage: TokenUsage;
     recentActivities: string[];
 }
+/**
+ * Options accepted by {@link AgentManager.sendMessage}. Phase 6 adds the
+ * required sub-session spawn scope (`parentSessionId`, `tenantId`, `projectId`,
+ * `parentActor`) so the manager can create a SubSession + child Session +
+ * WorkspaceRef triple atomically on every spawn.
+ */
 export interface SendMessageOptions {
     agentId: string;
     input: AgentInput;
@@ -48,6 +89,20 @@ export interface SendMessageOptions {
         tokenBudget?: number;
         timeoutMs?: number;
     };
+    /**
+     * Parent session under which the new sub-session is created. Capacity
+     * validation (depth + width) is applied against this session.
+     */
+    parentSessionId: SessionId;
+    tenantId: TenantId;
+    projectId: ProjectId;
+    /** The actor requesting the spawn — seeds the child's `parentActor`. */
+    parentActor: ActorRef;
+    /**
+     * Workspace backend to provision for the child session. Defaults to
+     * `git-worktree` — the MVP reference backend from Phase 3.
+     */
+    workspaceBackend?: WorkspaceBackendKind;
 }
 export interface AgentManagerConfig {
     maxDepth: number;