@namzu/sdk 27.0.0 → 28.0.0

package/dist/types/agent/delegate.d.ts

@@ -0,0 +1,102 @@
+import type { AgentRuntimeContext } from './base.js';
+/**
+ * A delegate that need not be an in-process Namzu agent.
+ *
+ * Delegation was reachable exactly one way: `TaskScheduler.createTask` with
+ * an `agentId` the host's `AgentManager` could resolve. Every delegate was
+ * therefore a Namzu agent, in this process, built from this kernel's own
+ * definition — so a host with a specialist behind an A2A card, an ACP
+ * connection, or any service at all had nowhere to put it except by
+ * implementing the whole `TaskScheduler` surface, most of which is about
+ * bookkeeping the kernel already does.
+ *
+ * This is the surface a foreign delegate actually has to provide: take a
+ * prompt, return an outcome, and say whether it can be cancelled or
+ * continued. `DelegatingTaskScheduler` presents any set of these as a
+ * `TaskScheduler`, so the two delegation tools and everything else that
+ * speaks to a scheduler are unchanged.
+ *
+ * **The roster is still enforced upstream.** The delegation tools check
+ * `allowedAgentIds` before an id reaches any scheduler, so registering a
+ * delegate here does not by itself make it reachable — the same complete
+ * mediation the tools already document.
+ */
+export interface DelegateRequest {
+    /** What the delegate is being asked to do. */
+    readonly prompt: string;
+    /** The parent's working directory, for a delegate that shares a disk. */
+    readonly workingDirectory: string;
+    readonly runtimeContext?: AgentRuntimeContext;
+    /**
+     * The parent's resolved environment.
+     *
+     * Forwarded for the reason the `Agent` tool gives for forwarding it to a
+     * local child: a delegate that cannot see it runs against different
+     * services than the run that launched it, silently. A remote delegate
+     * may well ignore it, which is its business.
+     */
+    readonly env?: Readonly<Record<string, string>>;
+}
+/**
+ * What a delegate did.
+ *
+ * `status` is the delegate's own answer and is the only authority a foreign
+ * delegate has — there is no second layer to cross-check it against the way
+ * a local run's `TaskHandle.state` and `BaseAgentResult.status` check each
+ * other. `DelegatingTaskScheduler` maps this onto BOTH so that
+ * `taskSucceeded` and `taskFailed` keep working unchanged; that mapping is
+ * the whole reason this type is this small.
+ */
+export interface DelegateResult {
+    readonly status: 'completed' | 'failed' | 'cancelled';
+    /** The answer, when there is one. */
+    readonly output?: string;
+    /** Why it failed, in the delegate's own words. */
+    readonly error?: string;
+}
+/**
+ * What a delegate can do beyond answering once.
+ *
+ * Declared rather than assumed, and a `false` here is REFUSED at the call
+ * rather than quietly no-op'd. A `continueTask` that silently did nothing
+ * would have the parent believe it steered a worker that never heard it.
+ */
+export interface DelegateCapabilities {
+    /** Can a running delegation be cancelled? */
+    readonly cancel: boolean;
+    /** Can a message be sent to a delegation already in flight? */
+    readonly continue: boolean;
+}
+export interface Delegate {
+    /**
+     * The id the delegation tools name.
+     *
+     * Shares a namespace with local agent ids on purpose: a supervisor
+     * should not have to know whether the specialist it is calling is in
+     * this process, and moving one from local to remote should not rewrite
+     * every caller. The collision that follows is refused loudly at
+     * registration rather than resolved by precedence.
+     */
+    readonly id: string;
+    readonly capabilities: DelegateCapabilities;
+    /**
+     * Run the delegation to completion.
+     *
+     * `signal` fires when the delegation is cancelled. A delegate declaring
+     * `capabilities.cancel` must honour it; one that does not will never be
+     * handed a signal that fires, because the scheduler refuses the cancel
+     * before it gets that far.
+     */
+    dispatch(request: DelegateRequest, opts: {
+        readonly signal?: AbortSignal;
+    }): Promise<DelegateResult>;
+    /**
+     * Deliver a message to a delegation in flight.
+     *
+     * Present only when `capabilities.continue` is true. The two are checked
+     * against each other at registration, because a capability that claims a
+     * method the object does not have is a lie the caller finds at runtime.
+     */
+    continue?(message: string): Promise<void>;
+}
+//# sourceMappingURL=delegate.d.ts.map

package/dist/types/agent/delegate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate.d.ts","sourceRoot":"","sources":["../../../src/types/agent/delegate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAEpD;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,eAAe;IAC/B,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,yEAAyE;IACzE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAA;IAC7C;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC/C;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAA;IACrD,qCAAqC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACpC,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,QAAQ;IACxB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IAEnB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAA;IAE3C;;;;;;;OAOG;IACH,QAAQ,CACP,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACrC,OAAO,CAAC,cAAc,CAAC,CAAA;IAE1B;;;;;;OAMG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzC"}

package/dist/types/agent/delegate.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=delegate.js.map

package/dist/types/agent/delegate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate.js","sourceRoot":"","sources":["../../../src/types/agent/delegate.ts"],"names":[],"mappings":""}

package/dist/types/agent/index.d.ts

@@ -5,7 +5,7 @@ export * from './pipeline.js';
 export * from './router.js';
 export * from './supervisor.js';
 export * from './factory.js';
-export * from './gateway.js';
+export * from './scheduler.js';
 export * from './task.js';
 export * from './lifecycle-event.js';
 export * from './manager.js';

package/dist/types/agent/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/agent/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,sBAAsB,CAAA;AACpC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/agent/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,sBAAsB,CAAA;AACpC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA"}

package/dist/types/agent/index.js

@@ -5,7 +5,7 @@ export * from './pipeline.js';
 export * from './router.js';
 export * from './supervisor.js';
 export * from './factory.js';
-export * from './gateway.js';
+export * from './scheduler.js';
 export * from './task.js';
 export * from './lifecycle-event.js';
 export * from './manager.js';

package/dist/types/agent/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/agent/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,sBAAsB,CAAA;AACpC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/agent/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,sBAAsB,CAAA;AACpC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA"}

package/dist/types/agent/manager.d.ts

@@ -1,5 +1,6 @@
 import type { RunId, TaskId } from '../ids/index.js';
 import type { Message } from '../message/index.js';
+import type { CancelCause } from '../run/cancel-cause.js';
 import type { RunEventListener } from '../run/events.js';
 import type { AgentLifecycleListener } from './lifecycle-event.js';
 import type { AgentTask, AgentTaskContext, AgentTaskState, SendMessageOptions } from './task.js';
@@ -10,7 +11,12 @@ import type { AgentTask, AgentTaskContext, AgentTaskState, SendMessageOptions }
 export interface AgentManagerContract {
     sendMessage(options: SendMessageOptions, context: AgentTaskContext, listener?: RunEventListener): Promise<AgentTask>;
     cancel(taskId: TaskId): void;
-    cancelAll(parentRunId: RunId): void;
+    /**
+     * Defaults to `'parent'` when a caller names nothing, because this call
+     * site IS a parent abandoning its children — unlike `AbstractAgent.cancel`,
+     * where the caller could be anyone.
+     */
+    cancelAll(parentRunId: RunId, cause?: CancelCause): void;
     /**
      * Queue a message for a running task.
      *

package/dist/types/agent/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/types/agent/manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAEhG;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACpC,WAAW,CACV,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,SAAS,CAAC,CAAA;IAErB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,SAAS,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,CAAA;IAEnC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,wDAAwD;IACxD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACpD,2EAA2E;IAC3E,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE,CAAA;IAExC,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;IAClD,YAAY,CAAC,WAAW,EAAE,KAAK,GAAG,SAAS,EAAE,CAAA;IAC7C,UAAU,IAAI,SAAS,EAAE,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;IAEpD,EAAE,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC1C,GAAG,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAE3C,OAAO,IAAI,IAAI,CAAA;IACf,OAAO,IAAI,IAAI,CAAA;CACf"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/types/agent/manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAEhG;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACpC,WAAW,CACV,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,SAAS,CAAC,CAAA;IAErB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;OAIG;IACH,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAA;IAExD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,wDAAwD;IACxD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACpD,2EAA2E;IAC3E,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE,CAAA;IAExC,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;IAClD,YAAY,CAAC,WAAW,EAAE,KAAK,GAAG,SAAS,EAAE,CAAA;IAC7C,UAAU,IAAI,SAAS,EAAE,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;IAEpD,EAAE,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC1C,GAAG,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAE3C,OAAO,IAAI,IAAI,CAAA;IACf,OAAO,IAAI,IAAI,CAAA;CACf"}

package/dist/types/agent/reactive.d.ts

@@ -1,23 +1,34 @@
 import type { CompactionConfig } from '../../config/runtime.js';
 import type { QueryParams } from '../../runtime/query/index.js';
+import type { SteeringChannel } from '../../runtime/query/steering.js';
 import type { AdvisoryConfig } from '../advisory/index.js';
+import type { AuthorizationGateConfig } from '../authorization/index.js';
 import type { InputGuardrailSpec, OutputGuardrailSpec } from '../guardrail/index.js';
 import type { ResumeHandler } from '../hitl/index.js';
 import type { AgentPersona } from '../persona/index.js';
 import type { LLMProvider } from '../provider/index.js';
 import type { CheckpointStore } from '../run/checkpoint-store.js';
-import type { PrepareStepChain, StepResult, StopCondition } from '../run/index.js';
+import type { BeforeStep, PrepareStepChain, StepResult, StopCondition } from '../run/index.js';
 import type { SandboxProvider } from '../sandbox/index.js';
 import type { Skill } from '../skills/index.js';
 import type { StructuredOutputConfig } from '../structured-output/index.js';
 import type { ToolRegistryContract } from '../tool/index.js';
 import type { RepairToolCall } from '../tool/repair.js';
-import type { VerificationGateConfig } from '../verification/index.js';
 import type { BaseAgentConfig, BaseAgentResult } from './base.js';
 import type { WorkingMemoryProvider } from './working-memory.js';
 export interface ReactiveAgentConfig extends BaseAgentConfig {
     systemPrompt?: string;
     persona?: AgentPersona;
+    /**
+     * Channel a host uses to hand guidance to this run's current turn.
+     *
+     * Present here for the same reason it is on `SupervisorAgentConfig`, and
+     * the reason that file gives twice already: a capability the kernel
+     * honours in `drainQuery` and not on the surface hosts actually
+     * construct is a capability nobody can reach. This is the archetype most
+     * hosts run, and it was the one that could not be steered at all.
+     */
+    steering?: SteeringChannel;
     skills?: Skill[];
     basePrompt?: string;
     provider: LLMProvider;
@@ -33,7 +44,12 @@ export interface ReactiveAgentConfig extends BaseAgentConfig {
      * canonical brick patterns hard-deny instead of executing
      * silently.
      */
-    verificationGate?: VerificationGateConfig;
+    /**
+     * @deprecated Renamed to `authorizationGate`. Removed in the next major.
+     * Setting both to different configs throws.
+     */
+    verificationGate?: AuthorizationGateConfig;
+    authorizationGate?: AuthorizationGateConfig;
     /**
      * Optional ephemeral sandbox provider. When set, drainQuery creates
      * a sandbox via `provider.create()` before the iteration loop and
@@ -90,6 +106,11 @@ export interface ReactiveAgentConfig extends BaseAgentConfig {
     stopWhen?: StopCondition;
     onStepFinish?: (step: StepResult) => void;
     prepareStep?: PrepareStepChain;
+    /**
+     * Refuse the next model call before it is made. See {@link BeforeStep}.
+     * A throw fails CLOSED, opposite to `prepareStep` beside it.
+     */
+    beforeStep?: BeforeStep;
     structuredOutput?: StructuredOutputConfig;
     inputGuardrails?: readonly InputGuardrailSpec[];
     outputGuardrails?: readonly OutputGuardrailSpec[];

package/dist/types/agent/reactive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reactive.d.ts","sourceRoot":"","sources":["../../../src/types/agent/reactive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAClF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAEhE,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,OAAO,CAAC,EAAE,YAAY,CAAA;IAEtB,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IAEhB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,WAAW,CAAA;IACrB,KAAK,EAAE,oBAAoB,CAAA;IAE3B,QAAQ,CAAC,EAAE,cAAc,CAAA;IAEzB;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAA;IAEzC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IAEnC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAE7C;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gBAAgB,CAAC,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAA;IAClD,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAA;IACzC,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B,gBAAgB,CAAC,EAAE,sBAAsB,CAAA;IACzC,eAAe,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC/C,gBAAgB,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAA;IACjD,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,oBAAoB,EAAE,IAAI,CAAA;CAC9C;AAED,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC3D,aAAa,EAAE,MAAM,CAAA;CACrB"}
+{"version":3,"file":"reactive.d.ts","sourceRoot":"","sources":["../../../src/types/agent/reactive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAEhE,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,OAAO,CAAC,EAAE,YAAY,CAAA;IAEtB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAE1B,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IAEhB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,WAAW,CAAA;IACrB,KAAK,EAAE,oBAAoB,CAAA;IAE3B,QAAQ,CAAC,EAAE,cAAc,CAAA;IAEzB;;;;;;;;;OASG;IACH;;;OAGG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IAE1C,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;IAE3C;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IAEnC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAE7C;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gBAAgB,CAAC,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAA;IAClD,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAA;IACzC,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B;;;OAGG;IACH,UAAU,CAAC,EAAE,UAAU,CAAA;IAEvB,gBAAgB,CAAC,EAAE,sBAAsB,CAAA;IACzC,eAAe,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC/C,gBAAgB,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAA;IACjD,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,oBAAoB,EAAE,IAAI,CAAA;CAC9C;AAED,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC3D,aAAa,EAAE,MAAM,CAAA;CACrB"}

package/dist/types/agent/{gateway.d.ts → scheduler.d.ts}

@@ -1,4 +1,5 @@
 import type { TaskId } from '../ids/index.js';
+import type { AgentPersona } from '../persona/index.js';
 import type { AgentRuntimeContext, BaseAgentConfig, BaseAgentResult } from './base.js';
 import type { AgentTaskState } from './task.js';
 export interface TaskHandle {
@@ -29,6 +30,31 @@ export interface CreateTaskOptions {
      */
     readonly parentSpan?: import('@opentelemetry/api').Span;
     agentId: string;
+    /**
+     * Tools this ONE delegation may not use, on top of whatever the child
+     * would otherwise have.
+     *
+     * Deny-only, and the shape is the point: a per-call scope that could
+     * ADD a tool is a privilege-escalation surface wearing the word
+     * "scope". Widening has to be unexpressible, not merely discouraged —
+     * a caller who wants a child to have more tools changes the agent's
+     * definition, where somebody can see it.
+     *
+     * Naming a tool the child never had is a no-op, not an error: the
+     * result is still narrower, and refusing would make a caller's deny
+     * list depend on which agent it happened to be talking to.
+     */
+    readonly toolScope?: {
+        readonly deny: readonly string[];
+    };
+    /**
+     * Replace the child's assembled persona for this delegation only.
+     *
+     * Scoped to the call rather than the agent, so a supervisor can hand
+     * one subtask a narrower brief without redefining an agent every other
+     * delegation shares.
+     */
+    readonly personaOverride?: AgentPersona;
     prompt: string;
     workingDirectory: string;
     runtimeContext?: AgentRuntimeContext;
@@ -37,7 +63,7 @@ export interface CreateTaskOptions {
      * agent's own definition supplies — the model it runs on, its iteration
      * ceiling, its thinking or effort settings.
      *
-     * **This was accepted and dropped.** `LocalTaskGateway.createTask` built
+     * **This was accepted and dropped.** `LocalTaskScheduler.createTask` built
      * its own `configOverrides` object out of `parentSpan` alone and never
      * read this field, so a caller pinning a delegated run to a cheaper model
      * got the agent's default model and no indication otherwise. It is
@@ -51,7 +77,7 @@ export interface CreateTaskOptions {
      */
     configOverrides?: Partial<BaseAgentConfig>;
 }
-export interface TaskGateway {
+export interface TaskScheduler {
     createTask(options: CreateTaskOptions): Promise<TaskHandle>;
     waitForTask(taskId: TaskId): Promise<TaskHandle>;
     continueTask(taskId: TaskId, message: string): Promise<void>;
@@ -71,7 +97,7 @@ export interface TaskGateway {
      * This is a request, not a requirement, and the cost of not meeting it is
      * yours: a gateway that forgets a task the instant it completes still
      * works, but under a burst large enough to overflow the buffer a fast
-     * worker's result can go unannounced. `LocalTaskGateway` meets it for as
+     * worker's result can go unannounced. `LocalTaskScheduler` meets it for as
      * long as the manager holds the record.
      */
     getTask(taskId: TaskId): TaskHandle | undefined;
@@ -90,7 +116,7 @@ export interface TaskGateway {
      * OPTIONAL, and the absence is meaningful rather than an oversight: a
      * gateway that cannot observe its children still works, and its waits
      * are bounded by the wall clock alone — which is exactly the behaviour
-     * before this existed. It is optional because `TaskGateway` is
+     * before this existed. It is optional because `TaskScheduler` is
      * implemented by hosts, and a required method would break every one of
      * them for a capability not all of them can provide.
      *
@@ -101,4 +127,14 @@ export interface TaskGateway {
      */
     onTaskProgress?(callback: (taskId: TaskId) => void): () => void;
 }
-//# sourceMappingURL=gateway.d.ts.map
+/**
+ * @deprecated Renamed to {@link TaskScheduler}. Removed in the next major.
+ *
+ * "Gateway" names an object that sits at a system boundary and faces
+ * outward — Fowler's POEAA Gateway, an API gateway, a payment gateway. This
+ * one faces inward: it creates, waits on, continues, cancels and lists
+ * in-process agent tasks. A reader who trusted the name expected a facade
+ * over something external and found a scheduler.
+ */
+export type TaskGateway = TaskScheduler;
+//# sourceMappingURL=scheduler.d.ts.map

package/dist/types/agent/scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../../src/types/agent/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAE/C,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,iBAAiB,CAAA;AAEjE,MAAM,WAAW,iBAAiB;IACjC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,oBAAoB,EAAE,IAAI,CAAA;IAEvD,OAAO,EAAE,MAAM,CAAA;IAEf;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;IAEzD;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,YAAY,CAAA;IAEvC,MAAM,EAAE,MAAM,CAAA;IAEd,gBAAgB,EAAE,MAAM,CAAA;IAExB,cAAc,CAAC,EAAE,mBAAmB,CAAA;IAEpC;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;CAC1C;AAED,MAAM,WAAW,aAAa;IAC7B,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAE3D,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAEhD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE5D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IAE/C,SAAS,IAAI,UAAU,EAAE,CAAA;IAEzB,eAAe,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAEnE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;CAC/D;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG,aAAa,CAAA"}

package/dist/types/agent/scheduler.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scheduler.js.map

package/dist/types/agent/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../../src/types/agent/scheduler.ts"],"names":[],"mappings":""}

package/dist/types/agent/supervisor.d.ts

@@ -1,6 +1,7 @@
 import type { CompactionConfig } from '../../config/runtime.js';
 import type { SteeringChannel } from '../../runtime/query/steering.js';
 import type { AdvisoryConfig } from '../advisory/index.js';
+import type { AuthorizationGateConfig } from '../authorization/index.js';
 import type { ResumeHandler } from '../hitl/index.js';
 import type { LLMProvider } from '../provider/index.js';
 import type { TaskRouterConfig } from '../router/index.js';
@@ -8,11 +9,10 @@ import type { SandboxProvider } from '../sandbox/index.js';
 import type { Skill } from '../skills/index.js';
 import type { StructuredOutputConfig } from '../structured-output/index.js';
 import type { ToolRegistryContract } from '../tool/index.js';
-import type { VerificationGateConfig } from '../verification/index.js';
 import type { BaseAgentConfig, BaseAgentResult } from './base.js';
 import type { AgentFactoryOptions } from './factory.js';
-import type { SiblingFailurePolicy, TaskGateway } from './gateway.js';
 import type { AgentManagerContract } from './manager.js';
+import type { SiblingFailurePolicy, TaskScheduler } from './scheduler.js';
 import type { WorkingMemoryProvider } from './working-memory.js';
 export interface SupervisorAgentConfig extends BaseAgentConfig {
     provider: LLMProvider;
@@ -44,7 +44,20 @@ export interface SupervisorAgentConfig extends BaseAgentConfig {
      * absolute today for the same reason.
      */
     allowDelegation?: boolean;
-    gateway?: TaskGateway;
+    /**
+     * @deprecated Renamed to {@link SupervisorAgentConfig.scheduler}. Removed
+     * in the next major. Setting both to different instances throws.
+     */
+    gateway?: TaskScheduler;
+    scheduler?: TaskScheduler;
+    /**
+     * Called when the operator approves a plan.
+     *
+     * The hook a host uses to leave plan mode without ending the run — which
+     * is what the mode's per-run lifetime used to force, discarding the
+     * in-flight step and the tool-schema context to change one enum.
+     */
+    onPlanApproved?: () => Promise<void> | void;
     agentManager?: AgentManagerContract;
     tools?: ToolRegistryContract;
     systemPrompt: string;
@@ -85,7 +98,7 @@ export interface SupervisorAgentConfig extends BaseAgentConfig {
      * What a failed child means for the siblings still running. Defaults to
      * `'continue'`.
      *
-     * `LocalTaskGateway` has honoured this since it was written, and the
+     * `LocalTaskScheduler` has honoured this since it was written, and the
      * cancellation machinery behind `'cancel-siblings'` is complete — but the
      * policy was a constructor argument on a gateway the supervisor builds
      * itself, and the supervisor passed nothing. So every host in existence
@@ -137,7 +150,12 @@ export interface SupervisorAgentConfig extends BaseAgentConfig {
      * review") so the resumeHandler only fires for the truly
      * non-deterministic cases.
      */
-    verificationGate?: VerificationGateConfig;
+    /**
+     * @deprecated Renamed to `authorizationGate`. Removed in the next major.
+     * Setting both to different configs throws.
+     */
+    verificationGate?: AuthorizationGateConfig;
+    authorizationGate?: AuthorizationGateConfig;
     /**
      * Optional ephemeral sandbox provider. When set, drainQuery creates
      * a sandbox via `provider.create()` before the supervisor's own

package/dist/types/agent/supervisor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../../src/types/agent/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAEhE,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAC7D,QAAQ,EAAE,WAAW,CAAA;IAErB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAElB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB,YAAY,CAAC,EAAE,oBAAoB,CAAA;IACnC,KAAK,CAAC,EAAE,oBAAoB,CAAA;IAE5B,YAAY,EAAE,MAAM,CAAA;IAEpB,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IAEhB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;;;;;;;;;;;;;OAcG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAE3B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAE3C,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAE7B,cAAc,CAAC,EAAE,mBAAmB,CAAA;IAEpC,QAAQ,CAAC,EAAE,cAAc,CAAA;IAEzB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAE7B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAE1B;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAA;IAEzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAA;IAEzC;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;CAC7C;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAC7D,WAAW,EAAE,eAAe,EAAE,CAAA;IAC9B,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;CAClB"}
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../../src/types/agent/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAEhE,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAC7D,QAAQ,EAAE,WAAW,CAAA;IAErB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAElB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,CAAA;IAEvB,SAAS,CAAC,EAAE,aAAa,CAAA;IAEzB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAC3C,YAAY,CAAC,EAAE,oBAAoB,CAAA;IACnC,KAAK,CAAC,EAAE,oBAAoB,CAAA;IAE5B,YAAY,EAAE,MAAM,CAAA;IAEpB,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IAEhB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;;;;;;;;;;;;;OAcG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAE3B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAE3C,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAE7B,cAAc,CAAC,EAAE,mBAAmB,CAAA;IAEpC,QAAQ,CAAC,EAAE,cAAc,CAAA;IAEzB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAE7B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAE1B;;;;;;;;;;OAUG;IACH;;;OAGG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IAE1C,iBAAiB,CAAC,EAAE,uBAAuB,CAAA;IAE3C;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAA;IAEzC;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;CAC7C;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAC7D,WAAW,EAAE,eAAe,EAAE,CAAA;IAC9B,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;CAClB"}

package/dist/types/agent/task.d.ts

@@ -4,7 +4,7 @@ import type { ResumeHandler } from '../hitl/index.js';
 import type { RunId, SessionId, TaskId, TenantId } from '../ids/index.js';
 import type { Message } from '../message/index.js';
 import type { RunEventListener } from '../run/events.js';
-import type { ProjectId, ThreadId } from '../session/ids.js';
+import type { ProjectId, TopicId } from '../session/ids.js';
 import type { AgentInput, BaseAgentConfig, BaseAgentResult } from './base.js';
 import type { Agent } from './core.js';
 import type { AgentFactoryOptions } from './factory.js';
@@ -12,7 +12,7 @@ export type AgentTaskState = 'pending' | 'running' | 'completed' | 'failed' | 'c
 export declare function isTerminalAgentTaskState(state: AgentTaskState): boolean;
 /**
  * Context carried into {@link AgentManager.sendMessage}. `tenantId`,
- * `threadId`, `sessionId`, `projectId`, and `parentActor` are required —
+ * `topicId`, `sessionId`, `projectId`, and `parentActor` are required —
  * the spawn path is the ingress point for the session hierarchy; callers
  * must provide the full scoping set.
  */
@@ -28,7 +28,7 @@ export interface AgentTaskContext {
      * alone, handed down so a child asks the same person.
      *
      * Passed as the function itself, which works because delegation is
-     * in-process: `LocalTaskGateway` is the only `TaskGateway` in the tree.
+     * in-process: `LocalTaskScheduler` is the only `TaskScheduler` in the tree.
      * A gateway that dispatched across a process boundary could not carry a
      * closure and would have to proxy the request onto the parent's event
      * stream and route the answer back by request id — the upward half of
@@ -39,16 +39,32 @@ export interface AgentTaskContext {
      * before this existed.
      */
     resumeHandler?: ResumeHandler;
+    /**
+     * The tool denies in force for the actor that owns this context — the
+     * union of every `toolScope.deny` recorded along its actor chain.
+     *
+     * Threaded, not re-derived from the chain, because `ActorRef` identifies
+     * an AGENT and not a spawn: two children of one parent running the same
+     * agent id have identical chains, so a lookup keyed on one could not
+     * tell their scopes apart.
+     *
+     * Absent means nothing was denied above here, which is what a top-level
+     * run has. It is only ever added to. A spawn's own denies union with
+     * this; nothing checks a spawn's denies AGAINST it, because a descendant
+     * narrowing further is the whole point and a descendant widening is what
+     * this exists to prevent.
+     */
+    readonly toolDenies?: readonly string[];
     /** Isolation boundary. Required per session-hierarchy.md §12.1. */
     tenantId: TenantId;
     /**
-     * Topic the current task belongs to. Required in 0.3.0 — spawn copies
-     * this onto the child session without a second ThreadStore round-trip,
-     * and gates creation on {@link ThreadManager.requireOpen}. Children
-     * inherit the parent's `threadId` verbatim; cross-thread spawn is
-     * forbidden by design (a delegated sub-agent stays on the same topic).
+     * Topic the current task belongs to. Required — spawn copies this onto
+     * the child session without a second TopicStore round-trip, and gates
+     * creation on {@link TopicManager.requireOpen}. Children inherit the
+     * parent's `topicId` verbatim; cross-topic spawn is forbidden by design
+     * (a delegated sub-agent stays on the same topic).
      */
-    threadId: ThreadId;
+    topicId: TopicId;
     /**
      * Parent session under which any sub-agent spawn is recorded. Required
      * in 0.2.0; a spawn cannot be attributed without it.
@@ -103,6 +119,12 @@ export interface AgentTask {
  * WorkspaceRef triple atomically on every spawn.
  */
 export interface SendMessageOptions {
+    /** See {@link import('./scheduler.js').CreateTaskOptions.toolScope}. Deny-only. */
+    readonly toolScope?: {
+        readonly deny: readonly string[];
+    };
+    /** See {@link import('./scheduler.js').CreateTaskOptions.personaOverride}. */
+    readonly personaOverride?: import('../persona/index.js').AgentPersona;
     agentId: string;
     input: AgentInput;
     configOverrides?: Partial<BaseAgentConfig>;

package/dist/types/agent/task.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../../../src/types/agent/task.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAEvD,MAAM,MAAM,cAAc,GACvB,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,UAAU,GACV,UAAU,GACV,gBAAgB,CAAA;AAEnB,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAEvE;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAChC,WAAW,EAAE,KAAK,CAAA;IAElB,aAAa,EAAE,MAAM,CAAA;IAErB,qBAAqB,EAAE,eAAe,CAAA;IAEtC,KAAK,EAAE,MAAM,CAAA;IAEb,aAAa,EAAE,eAAe,CAAA;IAE9B,cAAc,CAAC,EAAE,mBAAmB,CAAA;IAEpC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAE7B,mEAAmE;IACnE,QAAQ,EAAE,QAAQ,CAAA;IAElB;;;;;;OAMG;IACH,QAAQ,EAAE,QAAQ,CAAA;IAElB;;;OAGG;IACH,SAAS,EAAE,SAAS,CAAA;IAEpB;;;;OAIG;IACH,SAAS,EAAE,SAAS,CAAA;IAEpB;;;;OAIG;IACH,WAAW,EAAE,QAAQ,CAAA;CACrB;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,MAAM,CAAA;IAEb,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,SAAS;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAA;IAC9C,oBAAoB,EAAE,eAAe,CAAA;IACrC,OAAO,EAAE,gBAAgB,CAAA;IACzB,KAAK,EAAE,cAAc,CAAA;IACrB,MAAM,CAAC,EAAE,eAAe,CAAA;IAExB;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAE1B,eAAe,EAAE,OAAO,EAAE,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,MAAM,CAAA;IAEf,KAAK,EAAE,UAAU,CAAA;IAEjB,eAAe,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;IAE1C,gBAAgB,CAAC,EAAE;QAClB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,SAAS,CAAC,EAAE,MAAM,CAAA;KAClB,CAAA;IAED;;;OAGG;IACH,eAAe,EAAE,SAAS,CAAA;IAE1B,QAAQ,EAAE,QAAQ,CAAA;IAElB,SAAS,EAAE,SAAS,CAAA;IAEpB,wEAAwE;IACxE,WAAW,EAAE,QAAQ,CAAA;IAErB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;CACvC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAEhB,UAAU,EAAE,MAAM,CAAA;IAElB,iBAAiB,EAAE,MAAM,CAAA;IAEzB;;;;;;;;;;;OAWG;IACH,cAAc,EAAE,MAAM,CAAA;CACtB"}
+{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../../../src/types/agent/task.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAEvD,MAAM,MAAM,cAAc,GACvB,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,UAAU,GACV,UAAU,GACV,gBAAgB,CAAA;AAEnB,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAEvE;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAChC,WAAW,EAAE,KAAK,CAAA;IAElB,aAAa,EAAE,MAAM,CAAA;IAErB,qBAAqB,EAAE,eAAe,CAAA;IAEtC,KAAK,EAAE,MAAM,CAAA;IAEb,aAAa,EAAE,eAAe,CAAA;IAE9B,cAAc,CAAC,EAAE,mBAAmB,CAAA;IAEpC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAE7B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAEvC,mEAAmE;IACnE,QAAQ,EAAE,QAAQ,CAAA;IAElB;;;;;;OAMG;IACH,OAAO,EAAE,OAAO,CAAA;IAEhB;;;OAGG;IACH,SAAS,EAAE,SAAS,CAAA;IAEpB;;;;OAIG;IACH,SAAS,EAAE,SAAS,CAAA;IAEpB;;;;OAIG;IACH,WAAW,EAAE,QAAQ,CAAA;CACrB;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,MAAM,CAAA;IAEb,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,SAAS;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAA;IAC9C,oBAAoB,EAAE,eAAe,CAAA;IACrC,OAAO,EAAE,gBAAgB,CAAA;IACzB,KAAK,EAAE,cAAc,CAAA;IACrB,MAAM,CAAC,EAAE,eAAe,CAAA;IAExB;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAE1B,eAAe,EAAE,OAAO,EAAE,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;IACzD,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,qBAAqB,EAAE,YAAY,CAAA;IAErE,OAAO,EAAE,MAAM,CAAA;IAEf,KAAK,EAAE,UAAU,CAAA;IAEjB,eAAe,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;IAE1C,gBAAgB,CAAC,EAAE;QAClB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,SAAS,CAAC,EAAE,MAAM,CAAA;KAClB,CAAA;IAED;;;OAGG;IACH,eAAe,EAAE,SAAS,CAAA;IAE1B,QAAQ,EAAE,QAAQ,CAAA;IAElB,SAAS,EAAE,SAAS,CAAA;IAEpB,wEAAwE;IACxE,WAAW,EAAE,QAAQ,CAAA;IAErB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,oBAAoB,CAAA;CACvC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAEhB,UAAU,EAAE,MAAM,CAAA;IAElB,iBAAiB,EAAE,MAAM,CAAA;IAEzB;;;;;;;;;;;OAWG;IACH,cAAc,EAAE,MAAM,CAAA;CACtB"}

package/dist/types/agent/working-memory.d.ts

@@ -4,7 +4,7 @@
  * NEUTRAL by construction: opaque strings + a number, NO host/Postgres/disk
  * types. It mirrors `AgentRuntimeContext.notes: readonly string[]` and the
  * `web-search` seam discipline — the host closes over everything else
- * (threadId, output dir, tenancy) when it builds the provider, so the SDK
+ * (topicId, output dir, tenancy) when it builds the provider, so the SDK
  * never learns a domain type. The SDK only POSITIONS the returned string at
  * the primacy edge; the host OWNS the content and its authority framing.
  */