@namzu/sdk 27.1.0 → 28.0.0

package/dist/types/ids/brand.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Nominal-brand machinery for the id types — declared here, not yet applied.
+ *
+ * Today every id in `./index.ts` is a bare template-literal type, and
+ * TypeScript's assignability rule for those means
+ * `const x: RunId = 'run_totally-made-up'` compiles with no cast and no
+ * factory call. The result is indistinguishable at the type level from an id
+ * `generateRunId()` actually minted, so the compiler cannot tell a real id
+ * from a plausible-looking string.
+ *
+ * Applying this brand is a separate change, on purpose: flipping the
+ * declarations turns every existing bare literal into an error at once, and
+ * that is a `major` with a migration in front of it. This file ships the
+ * machinery and the runtime constructors that use it so the two can land
+ * independently — the constructors are useful on their own, since there is
+ * no runtime prefix validation in the tree at all today.
+ *
+ * **The prefix stays in the type, and that is the one place this diverges
+ * from a plain `Branded<B>`.** A brand alone would render as `RunId` in
+ * hovers and errors and tell a reader nothing about the shape. Keeping
+ * `` `${Prefix}_${string}` `` in the intersection means an editor hover still
+ * shows `run_${string}`, which is most of what makes these ids readable in
+ * a log line.
+ */
+declare const ID_BRAND: unique symbol;
+/**
+ * An id with both its wire shape and a nominal tag.
+ *
+ * `B` is a string tag rather than the type's own name by convention — two
+ * ids with the same prefix but different meanings must not be mutually
+ * assignable, and only the tag can separate them.
+ */
+export type Id<Prefix extends string, B extends string> = `${Prefix}_${string}` & {
+    readonly [ID_BRAND]: B;
+};
+/**
+ * The one way to produce a branded id without a runtime check.
+ *
+ * A brand cannot be constructed by writing it — `{ [ID_BRAND]: 'RunId' }` is
+ * not something a caller can type, since the symbol is not exported. So
+ * every id has to come from somewhere, and there are exactly three places:
+ * `generate*Id()` mints one, `as*Id()` checks a string into one, and this.
+ *
+ * Named `unsafeId` rather than `toId` because the name is the warning, and
+ * kept HERE rather than in `utils/id.ts` because this file has no imports —
+ * `types/ids/index.ts` needs it for `UNKNOWN_TENANT_ID` and cannot import
+ * from `utils/id.ts` without closing a cycle.
+ *
+ * Not exported from the package barrel. A consumer that needs an id from a
+ * string wants the checked constructor; one that wants to skip the check is
+ * asking for the thing the brand exists to prevent.
+ */
+export declare function unsafeId<T extends string>(value: string): T;
+export {};
+//# sourceMappingURL=brand.d.ts.map

package/dist/types/ids/brand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand.d.ts","sourceRoot":"","sources":["../../../src/types/ids/brand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,CAAC,MAAM,QAAQ,EAAE,OAAO,MAAM,CAAA;AAErC;;;;;;GAMG;AACH,MAAM,MAAM,EAAE,CAAC,MAAM,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,EAAE,GAAG;IACjF,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;CACtB,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,CAE3D"}

package/dist/types/ids/brand.js

@@ -0,0 +1,45 @@
+/**
+ * Nominal-brand machinery for the id types — declared here, not yet applied.
+ *
+ * Today every id in `./index.ts` is a bare template-literal type, and
+ * TypeScript's assignability rule for those means
+ * `const x: RunId = 'run_totally-made-up'` compiles with no cast and no
+ * factory call. The result is indistinguishable at the type level from an id
+ * `generateRunId()` actually minted, so the compiler cannot tell a real id
+ * from a plausible-looking string.
+ *
+ * Applying this brand is a separate change, on purpose: flipping the
+ * declarations turns every existing bare literal into an error at once, and
+ * that is a `major` with a migration in front of it. This file ships the
+ * machinery and the runtime constructors that use it so the two can land
+ * independently — the constructors are useful on their own, since there is
+ * no runtime prefix validation in the tree at all today.
+ *
+ * **The prefix stays in the type, and that is the one place this diverges
+ * from a plain `Branded<B>`.** A brand alone would render as `RunId` in
+ * hovers and errors and tell a reader nothing about the shape. Keeping
+ * `` `${Prefix}_${string}` `` in the intersection means an editor hover still
+ * shows `run_${string}`, which is most of what makes these ids readable in
+ * a log line.
+ */
+/**
+ * The one way to produce a branded id without a runtime check.
+ *
+ * A brand cannot be constructed by writing it — `{ [ID_BRAND]: 'RunId' }` is
+ * not something a caller can type, since the symbol is not exported. So
+ * every id has to come from somewhere, and there are exactly three places:
+ * `generate*Id()` mints one, `as*Id()` checks a string into one, and this.
+ *
+ * Named `unsafeId` rather than `toId` because the name is the warning, and
+ * kept HERE rather than in `utils/id.ts` because this file has no imports —
+ * `types/ids/index.ts` needs it for `UNKNOWN_TENANT_ID` and cannot import
+ * from `utils/id.ts` without closing a cycle.
+ *
+ * Not exported from the package barrel. A consumer that needs an id from a
+ * string wants the checked constructor; one that wants to skip the check is
+ * asking for the thing the brand exists to prevent.
+ */
+export function unsafeId(value) {
+    return value;
+}
+//# sourceMappingURL=brand.js.map

package/dist/types/ids/brand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand.js","sourceRoot":"","sources":["../../../src/types/ids/brand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAeH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,QAAQ,CAAmB,KAAa;IACvD,OAAO,KAAqB,CAAA;AAC7B,CAAC"}

package/dist/types/ids/index.d.ts

@@ -1,7 +1,22 @@
-export type RunId = `run_${string}`;
-export type MessageId = `msg_${string}`;
-export type SessionId = `ses_${string}`;
-export type ToolCallId = `call_${string}`;
+import { type Id } from './brand.js';
+/**
+ * Every id here is NOMINAL as of NZ-SURF-11: `Id<Prefix, Tag>` intersects the
+ * wire shape with a unique-symbol brand, so `const a: RunId = 'run_x'` no
+ * longer compiles and neither does handing a `SessionId` where a `RunId` was
+ * asked for. Ids are minted by `generate*Id()` or checked by `as*Id()` in
+ * `utils/id.ts`; fixtures use `test-support/ids.ts`.
+ *
+ * **What this does NOT stop, measured rather than assumed:** a type
+ * ASSERTION. `'run_x' as RunId` and `someString as RunId` both still compile,
+ * because TypeScript's assertion rule only asks that the two types be
+ * comparable and a string is comparable to a branded string. The brand makes
+ * a rule against `as <IdType>` enforceable — it does not replace one. See
+ * `__tests__/an-id-is-not-a-string.test.ts`, which pins both halves.
+ */
+export type RunId = Id<'run', 'RunId'>;
+export type MessageId = Id<'msg', 'MessageId'>;
+export type SessionId = Id<'ses', 'SessionId'>;
+export type ToolCallId = Id<'call', 'ToolCallId'>;
 /**
  * Provider-issued tool-use identifier surfaced on the streaming event bus.
  * Providers emit different prefixes (`toolu_*`, `call_*`,
@@ -12,41 +27,85 @@ export type ToolCallId = `call_${string}`;
  * persisted assistant messages and replay records.
  */
 export type ToolUseId = string;
-export type ActivityId = `act_${string}`;
-export type TaskId = `task_${string}`;
-export type PlanId = `plan_${string}`;
-export type KnowledgeBaseId = `kb_${string}`;
-export type DocumentId = `doc_${string}`;
-export type ChunkId = `chk_${string}`;
-export type ConnectorId = `conn_${string}`;
-export type ConnectorInstanceId = `ci_${string}`;
-export type TenantId = `tnt_${string}`;
-export type CredentialId = `cred_${string}`;
-export type ExecutionContextId = `ectx_${string}`;
-export type MCPServerId = `mcp_${string}`;
-export type MCPClientId = `mcpc_${string}`;
-export type MCPSessionId = `mcps_${string}`;
-export type EnvironmentId = `env_${string}`;
-export type CheckpointId = `cp_${string}`;
-export type LockId = `lock_${string}`;
-export type AdvisoryId = `adv_${string}`;
-export type AdvisoryCallId = `advc_${string}`;
-export type EmergencySaveId = `esave_${string}`;
-export type MemoryId = `mem_${string}`;
-export type PluginId = `plg_${string}`;
-export type SandboxId = `sbx_${string}`;
-export type UserId = `usr_${string}`;
-export type AgentId = `agt_${string}`;
-export type MemoryStoreRef = `mms_${string}`;
-export type VaultRef = `vlt_${string}`;
-export type KnowledgeBaseRef = `kbs_${string}`;
-export type ProjectId = `prj_${string}`;
-export type ThreadId = `thd_${string}`;
-export type SubSessionId = `sub_${string}`;
-export type HandoffId = `hof_${string}`;
-export type WorkspaceId = `wsp_${string}`;
-export type SummaryId = `sum_${string}`;
-export type DeliverableId = `del_${string}`;
+export type ActivityId = Id<'act', 'ActivityId'>;
+export type TaskId = Id<'task', 'TaskId'>;
+export type PlanId = Id<'plan', 'PlanId'>;
+export type KnowledgeBaseId = Id<'kb', 'KnowledgeBaseId'>;
+export type DocumentId = Id<'doc', 'DocumentId'>;
+export type ChunkId = Id<'chk', 'ChunkId'>;
+export type ConnectorId = Id<'conn', 'ConnectorId'>;
+export type ConnectorInstanceId = Id<'ci', 'ConnectorInstanceId'>;
+export type TenantId = Id<'tnt', 'TenantId'>;
+export type CredentialId = Id<'cred', 'CredentialId'>;
+export type ExecutionContextId = Id<'ectx', 'ExecutionContextId'>;
+export type MCPServerId = Id<'mcp', 'MCPServerId'>;
+export type MCPClientId = Id<'mcpc', 'MCPClientId'>;
+export type MCPSessionId = Id<'mcps', 'MCPSessionId'>;
+export type EnvironmentId = Id<'env', 'EnvironmentId'>;
+export type CheckpointId = Id<'cp', 'CheckpointId'>;
+export type LockId = Id<'lock', 'LockId'>;
+export type AdvisoryId = Id<'adv', 'AdvisoryId'>;
+export type AdvisoryCallId = Id<'advc', 'AdvisoryCallId'>;
+export type EmergencySaveId = Id<'esave', 'EmergencySaveId'>;
+export type MemoryId = Id<'mem', 'MemoryId'>;
+export type PluginId = Id<'plg', 'PluginId'>;
+export type SandboxId = Id<'sbx', 'SandboxId'>;
+/** LOG-14: the audit trail's own record id — distinct from `RunEvent.seq`. */
+export type AuditEventId = Id<'aud', 'AuditEventId'>;
+export type UserId = Id<'usr', 'UserId'>;
+/**
+ * @deprecated An agent is identified by its REGISTRY KEY, and this type
+ * never described one. Removal is a later major.
+ *
+ * `ActorRef.agentId` was annotated `AgentId` and every value that ever
+ * reached it was a key an operator chose — `'worker'`, `'reviewer'`,
+ * `'supervisor'` — reaching the field through an `as AgentId` cast. There is
+ * no producer: nothing in this kernel has ever called `generateAgentId`
+ * (there isn't one), so an `agt_`-prefixed agent identifier has never
+ * existed. NZ-SURF-11 changed `ActorRef.agentId` to `string`, which is what
+ * it always held.
+ *
+ * Kept for one release rather than deleted, per the deprecate-before-remove
+ * rule: a consumer that annotated its own variable `AgentId` still compiles
+ * and gets a warning. `asAgentId` is deprecated for the same reason and
+ * would throw on every value the kernel actually produces.
+ */
+export type AgentId = Id<'agt', 'AgentId'>;
+export type MemoryStoreRef = Id<'mms', 'MemoryStoreRef'>;
+export type VaultRef = Id<'vlt', 'VaultRef'>;
+export type KnowledgeBaseRef = Id<'kbs', 'KnowledgeBaseRef'>;
+export type ProjectId = Id<'prj', 'ProjectId'>;
+/**
+ * NZ-TOPIC-04: narrowed from the NZ-TOPIC-01 alias `type TopicId = ThreadId`
+ * (both `thd_${string}`) to its own prefix. `thd_` from here on means only
+ * the pre-0.2.0 top-level container (`session/migration/id-prefix.ts`,
+ * `session/migration/filesystem.ts`) -- a meaning `ThreadId` never carried;
+ * it was purely the deprecated name for THIS type. Deleted rather than
+ * repurposed to mean the legacy container instead: a name whose meaning
+ * silently changes under unmigrated callers is worse than a name that is
+ * gone (Convention #0, no silent long-lived compat).
+ */
+export type TopicId = Id<'top', 'TopicId'>;
+/**
+ * @deprecated Use {@link TopicId}. Removal is NZ-TOPIC-05.
+ *
+ * NZ-TOPIC-01 introduced `TopicId` as an alias OF this name; NZ-TOPIC-04
+ * reverses the direction. So this alias now follows `TopicId` to the `top_`
+ * prefix instead of keeping `thd_` — a consumer still compiling against the
+ * old name gets the new prefix, which is exactly what the major announces.
+ *
+ * It is kept rather than deleted because the deprecation NZ-TOPIC-01 wrote
+ * has never reached a registry: `@namzu/sdk` on npm is 27.1.0, and the
+ * changeset that would publish it is still unconsumed in `.changeset/`. A
+ * removal here would be a rename with no alias wearing a major's clothes.
+ * This release is the one that carries the warning; the next may remove it.
+ */
+export type ThreadId = TopicId;
+export type SubSessionId = Id<'sub', 'SubSessionId'>;
+export type HandoffId = Id<'hof', 'HandoffId'>;
+export type WorkspaceId = Id<'wsp', 'WorkspaceId'>;
+export type SummaryId = Id<'sum', 'SummaryId'>;
+export type DeliverableId = Id<'del', 'DeliverableId'>;
 /**
  * Sentinel {@link TenantId} for legacy pre-0.2.0 runs rehomed by the
  * boot-time filesystem migration. Consumers with strict tenant enforcement

package/dist/types/ids/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/ids/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,KAAK,GAAG,OAAO,MAAM,EAAE,CAAA;AACnC,MAAM,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,CAAA;AACvC,MAAM,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,CAAA;AACvC,MAAM,MAAM,UAAU,GAAG,QAAQ,MAAM,EAAE,CAAA;AACzC;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAA;AAC9B,MAAM,MAAM,UAAU,GAAG,OAAO,MAAM,EAAE,CAAA;AACxC,MAAM,MAAM,MAAM,GAAG,QAAQ,MAAM,EAAE,CAAA;AACrC,MAAM,MAAM,MAAM,GAAG,QAAQ,MAAM,EAAE,CAAA;AACrC,MAAM,MAAM,eAAe,GAAG,MAAM,MAAM,EAAE,CAAA;AAC5C,MAAM,MAAM,UAAU,GAAG,OAAO,MAAM,EAAE,CAAA;AACxC,MAAM,MAAM,OAAO,GAAG,OAAO,MAAM,EAAE,CAAA;AACrC,MAAM,MAAM,WAAW,GAAG,QAAQ,MAAM,EAAE,CAAA;AAC1C,MAAM,MAAM,mBAAmB,GAAG,MAAM,MAAM,EAAE,CAAA;AAChD,MAAM,MAAM,QAAQ,GAAG,OAAO,MAAM,EAAE,CAAA;AACtC,MAAM,MAAM,YAAY,GAAG,QAAQ,MAAM,EAAE,CAAA;AAC3C,MAAM,MAAM,kBAAkB,GAAG,QAAQ,MAAM,EAAE,CAAA;AACjD,MAAM,MAAM,WAAW,GAAG,OAAO,MAAM,EAAE,CAAA;AACzC,MAAM,MAAM,WAAW,GAAG,QAAQ,MAAM,EAAE,CAAA;AAC1C,MAAM,MAAM,YAAY,GAAG,QAAQ,MAAM,EAAE,CAAA;AAC3C,MAAM,MAAM,aAAa,GAAG,OAAO,MAAM,EAAE,CAAA;AAC3C,MAAM,MAAM,YAAY,GAAG,MAAM,MAAM,EAAE,CAAA;AACzC,MAAM,MAAM,MAAM,GAAG,QAAQ,MAAM,EAAE,CAAA;AACrC,MAAM,MAAM,UAAU,GAAG,OAAO,MAAM,EAAE,CAAA;AACxC,MAAM,MAAM,cAAc,GAAG,QAAQ,MAAM,EAAE,CAAA;AAC7C,MAAM,MAAM,eAAe,GAAG,SAAS,MAAM,EAAE,CAAA;AAC/C,MAAM,MAAM,QAAQ,GAAG,OAAO,MAAM,EAAE,CAAA;AACtC,MAAM,MAAM,QAAQ,GAAG,OAAO,MAAM,EAAE,CAAA;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,CAAA;AAIvC,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,EAAE,CAAA;AACpC,MAAM,MAAM,OAAO,GAAG,OAAO,MAAM,EAAE,CAAA;AAKrC,MAAM,MAAM,cAAc,GAAG,OAAO,MAAM,EAAE,CAAA;AAC5C,MAAM,MAAM,QAAQ,GAAG,OAAO,MAAM,EAAE,CAAA;AACtC,MAAM,MAAM,gBAAgB,GAAG,OAAO,MAAM,EAAE,CAAA;AAK9C,MAAM,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,CAAA;AACvC,MAAM,MAAM,QAAQ,GAAG,OAAO,MAAM,EAAE,CAAA;AACtC,MAAM,MAAM,YAAY,GAAG,OAAO,MAAM,EAAE,CAAA;AAC1C,MAAM,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,CAAA;AACvC,MAAM,MAAM,WAAW,GAAG,OAAO,MAAM,EAAE,CAAA;AACzC,MAAM,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,CAAA;AACvC,MAAM,MAAM,aAAa,GAAG,OAAO,MAAM,EAAE,CAAA;AAE3C;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAA2B,QAAQ,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/ids/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAY,MAAM,YAAY,CAAA;AAE9C;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AACtC,MAAM,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;AAC9C,MAAM,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;AAC9C,MAAM,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;AACjD;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAA;AAC9B,MAAM,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;AAChD,MAAM,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AACzC,MAAM,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AACzC,MAAM,MAAM,eAAe,GAAG,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;AACzD,MAAM,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;AAChD,MAAM,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;AAC1C,MAAM,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;AACnD,MAAM,MAAM,mBAAmB,GAAG,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;AACjE,MAAM,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;AAC5C,MAAM,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;AACrD,MAAM,MAAM,kBAAkB,GAAG,EAAE,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;AACjE,MAAM,MAAM,WAAW,GAAG,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;AAClD,MAAM,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;AACnD,MAAM,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;AACrD,MAAM,MAAM,aAAa,GAAG,EAAE,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;AACtD,MAAM,MAAM,YAAY,GAAG,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;AACnD,MAAM,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AACzC,MAAM,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;AAChD,MAAM,MAAM,cAAc,GAAG,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;AACzD,MAAM,MAAM,eAAe,GAAG,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;AAC5D,MAAM,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;AAC5C,MAAM,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;AAC5C,MAAM,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;AAC9C,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG,EAAE,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;AAOpD,MAAM,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AAExC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;AAK1C,MAAM,MAAM,cAAc,GAAG,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;AACxD,MAAM,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;AAC5C,MAAM,MAAM,gBAAgB,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAA;AAK5D,MAAM,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;AAC9C;;;;;;;;;GASG;AACH,MAAM,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;AAC1C;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,CAAA;AAC9B,MAAM,MAAM,YAAY,GAAG,EAAE,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;AACpD,MAAM,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;AAC9C,MAAM,MAAM,WAAW,GAAG,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;AAClD,MAAM,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;AAC9C,MAAM,MAAM,aAAa,GAAG,EAAE,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;AAEtD;;;;;;GAMG;AAIH,eAAO,MAAM,iBAAiB,UAA2C,CAAA"}

package/dist/types/ids/index.js

@@ -1,3 +1,4 @@
+import { unsafeId } from './brand.js';
 /**
  * Sentinel {@link TenantId} for legacy pre-0.2.0 runs rehomed by the
  * boot-time filesystem migration. Consumers with strict tenant enforcement
@@ -5,5 +6,8 @@
  * real tenant is assigned — the kernel surfaces the sentinel but does not
  * prescribe policy (Convention #17).
  */
-export const UNKNOWN_TENANT_ID = 'tnt_unknown_legacy';
+// `unsafeId`, not `asTenantId`: `utils/id.ts` imports this file, so reaching
+// for its constructor here would close a cycle. The prefix is pinned by
+// `__tests__/an-id-is-not-a-string.test.ts` instead.
+export const UNKNOWN_TENANT_ID = unsafeId('tnt_unknown_legacy');
 //# sourceMappingURL=index.js.map

package/dist/types/ids/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/ids/index.ts"],"names":[],"mappings":"AA6DA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAgC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/ids/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,QAAQ,EAAE,MAAM,YAAY,CAAA;AA6H9C;;;;;;GAMG;AACH,6EAA6E;AAC7E,wEAAwE;AACxE,qDAAqD;AACrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAW,oBAAoB,CAAC,CAAA"}

package/dist/types/message/index.d.ts

@@ -84,7 +84,30 @@ export interface Citation {
     };
 }
 /** What a user message may carry alongside its text. */
-export type MessageAttachment = ImageAttachment | DocumentAttachment;
+/**
+ * An attachment whose bytes are held by a store, not by the message.
+ *
+ * Structural rather than an import from `store/attachment`, so this types
+ * module keeps depending on nothing — the same reasoning `ToolRegistryRef`
+ * gives. `store/attachment` owns the resolution and its refusals; this is
+ * the shape a message may carry.
+ *
+ * Inline base64 puts the bytes in the durable transcript, in every
+ * checkpoint, in every compaction pass, and — because a conversation
+ * resends its history — on the wire once per turn. A 4 MB PDF attached once
+ * is 4 MB per request for the rest of the run.
+ */
+export interface StoredAttachmentRef {
+    readonly type: 'stored';
+    /** Opaque to the kernel. Meaningful to the store that minted it. */
+    readonly ref: string;
+    readonly mediaType: string;
+    /** Which kind of content block to build once the bytes arrive. */
+    readonly kind: 'image' | 'document';
+    readonly name?: string;
+    readonly citations?: boolean;
+}
+export type MessageAttachment = ImageAttachment | DocumentAttachment | StoredAttachmentRef;
 export declare const isDocumentAttachment: (attachment: MessageAttachment) => attachment is DocumentAttachment;
 export interface ToolCall {
     id: string;

package/dist/types/message/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/message/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAA;AAElE,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,MAAM,CAAA;AAEtD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,QAAQ;IACxB,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EACd;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GACvE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GACvE;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3E;AAED,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG,kBAAkB,CAAA;AAEpE,eAAO,MAAM,oBAAoB,GAChC,YAAY,iBAAiB,KAC3B,UAAU,IAAI,kBAAoD,CAAA;AAErE,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE;QACT,IAAI,EAAE,MAAM,CAAA;QACZ,SAAS,EAAE,MAAM,CAAA;KACjB,CAAA;IACD;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QACV,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB;;;;;;WAMG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;KACzB,CAAA;CACD;AAED,MAAM,WAAW,WAAW;IAC3B;;;;;OAKG;IACH,IAAI,EAAE,WAAW,CAAA;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,eAAe,EAAE,CAAA;IACnD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,aAAc,SAAQ,WAAW;IACjD,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,8CAA8C;IAC9C,WAAW,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAC1C;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,mBAAmB,CAAA;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,oEAAoE;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,mDAAmD;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACpD,IAAI,EAAE,WAAW,CAAA;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;IACrC;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAA;CAC/B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7E,kBAAkB,CAAA;AAErB;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,eAAe,EAAE,CAAA;AAEnE,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,iBAAiB,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,gBAAgB,GAAG,WAAW,CAAA;AAElF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,aAAa,CAOzF;AAED,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,SAAS,iBAAiB,EAAE,GACxC,WAAW,CAOb;AAED,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,SAAS,CAAC,EAAE,QAAQ,EAAE,EACtB,SAAS,CAAC,EAAE,SAAS,cAAc,EAAE,EACrC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,GAC7B,gBAAgB,CASlB;AAED,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,OAAO,GACf,WAAW,CAQb;AAED,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/message/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAA;AAElE,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,MAAM,CAAA;AAEtD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,QAAQ;IACxB,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EACd;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GACvE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GACvE;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3E;AAED,wDAAwD;AACxD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,oEAAoE;IACpE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAAA;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG,kBAAkB,GAAG,mBAAmB,CAAA;AAE1F,eAAO,MAAM,oBAAoB,GAChC,YAAY,iBAAiB,KAC3B,UAAU,IAAI,kBAAoD,CAAA;AAErE,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE;QACT,IAAI,EAAE,MAAM,CAAA;QACZ,SAAS,EAAE,MAAM,CAAA;KACjB,CAAA;IACD;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QACV,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB;;;;;;WAMG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;KACzB,CAAA;CACD;AAED,MAAM,WAAW,WAAW;IAC3B;;;;;OAKG;IACH,IAAI,EAAE,WAAW,CAAA;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,eAAe,EAAE,CAAA;IACnD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,aAAc,SAAQ,WAAW;IACjD,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,8CAA8C;IAC9C,WAAW,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAC1C;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,mBAAmB,CAAA;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,oEAAoE;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,mDAAmD;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACpD,IAAI,EAAE,WAAW,CAAA;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;IACrC;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAA;CAC/B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7E,kBAAkB,CAAA;AAErB;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,eAAe,EAAE,CAAA;AAEnE,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,iBAAiB,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,gBAAgB,GAAG,WAAW,CAAA;AAElF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,aAAa,CAOzF;AAED,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,SAAS,iBAAiB,EAAE,GACxC,WAAW,CAOb;AAED,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,SAAS,CAAC,EAAE,QAAQ,EAAE,EACtB,SAAS,CAAC,EAAE,SAAS,cAAc,EAAE,EACrC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,GAC7B,gBAAgB,CASlB;AAED,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,OAAO,GACf,WAAW,CAQb;AAED,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA"}

package/dist/types/message/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/message/index.ts"],"names":[],"mappings":"AAoFA,MAAM,CAAC,MAAM,oBAAoB,GAAG,CACnC,UAA6B,EACM,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,CAAA;AAgKrE,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,SAAqB;IACzE,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;KAC7C,CAAA;AACF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,OAAe,EACf,WAA0C;IAE1C,OAAO;QACN,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,GAAG,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAA;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACrC,OAAsB,EACtB,SAAsB,EACtB,SAAqC,EACrC,SAA+B;IAE/B,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,OAAO;QACP,SAAS;QACT,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAA;AACF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,OAA0B,EAC1B,UAAkB,EAClB,OAAiB;IAEjB,OAAO;QACN,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,UAAU;QACV,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAA;AACF,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/message/index.ts"],"names":[],"mappings":"AA4GA,MAAM,CAAC,MAAM,oBAAoB,GAAG,CACnC,UAA6B,EACM,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,CAAA;AAgKrE,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,SAAqB;IACzE,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;KAC7C,CAAA;AACF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,OAAe,EACf,WAA0C;IAE1C,OAAO;QACN,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,GAAG,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAA;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACrC,OAAsB,EACtB,SAAsB,EACtB,SAAqC,EACrC,SAA+B;IAE/B,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,OAAO;QACP,SAAS;QACT,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAA;AACF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,OAA0B,EAC1B,UAAkB,EAClB,OAAiB;IAEjB,OAAO;QACN,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,UAAU;QACV,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAA;AACF,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA"}

package/dist/types/plugin/index.d.ts

@@ -208,8 +208,8 @@ export declare const PluginManifestSchema: z.ZodObject<{
     name: string;
     description: string;
     version: string;
-    tools?: string[] | undefined;
     skills?: string[] | undefined;
+    tools?: string[] | undefined;
     author?: string | undefined;
     hooks?: string[] | undefined;
     mcpServers?: {
@@ -224,8 +224,8 @@ export declare const PluginManifestSchema: z.ZodObject<{
     name: string;
     description: string;
     version: string;
-    tools?: string[] | undefined;
     skills?: string[] | undefined;
+    tools?: string[] | undefined;
     author?: string | undefined;
     hooks?: string[] | undefined;
     mcpServers?: {

package/dist/types/project/entity.d.ts

@@ -26,7 +26,7 @@ export interface ProjectConfig {
     retentionPolicy?: RetentionPolicy;
 }
 /**
- * Whether the workspace accepts new work.
+ * Whether the project accepts new work.
  *
  * Owner-managed, like the status it replaces: a project does not derive
  * `archived` from having no live sessions, because "empty right now" and
@@ -39,9 +39,13 @@ export type ProjectStatus = 'open' | 'archived';
  *
  * `status` is the gate the ingress paths read: an archived project accepts no
  * new session and no handoff. It lives here rather than on Thread because the
- * project is the thing a tenant actually closes — a workspace with its own
+ * project is the thing a tenant actually closes — a scope with its own
  * limits, its own environment, and its own memory — and closing it has to mean
  * something to the code, not only to a listing.
+ *
+ * "Workspace" is a different noun in this codebase and is already taken:
+ * see `WorkspaceRef`, which is per-run provisioning. This is the durable
+ * one, and the prose above used to say the other word.
  */
 export interface Project {
     id: ProjectId;
@@ -51,6 +55,22 @@ export interface Project {
     status: ProjectStatus;
     /** CAS counter for status transitions. Mirrors `Session.ownerVersion`. */
     ownerVersion: number;
+    /**
+     * The canonical directory this project's work happens in.
+     *
+     * Resolved through `realpath` at creation, so a symlink and a trailing
+     * slash and the real path are one project rather than three records for
+     * one directory.
+     *
+     * NOT `WorkspaceRef.meta.worktreePath`. That is per-RUN provisioning and
+     * may be a different directory entirely — a git worktree cut for one
+     * run and discarded after it. This is the durable binding a host uses to
+     * answer "which project is this directory", across sessions and across
+     * process restarts.
+     *
+     * Optional: a project need not be on disk at all.
+     */
+    readonly rootPath?: string;
     createdAt: Date;
     updatedAt: Date;
 }

package/dist/types/project/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/types/project/entity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC3F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAElD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,aAAa;IAC7B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,kBAAkB,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;IAC9C,YAAY,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAA;IAClC,oBAAoB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAClD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAA;CACjC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,CAAA;AAE/C;;;;;;;;;GASG;AACH,MAAM,WAAW,OAAO;IACvB,EAAE,EAAE,SAAS,CAAA;IACb,QAAQ,EAAE,QAAQ,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,aAAa,CAAA;IACrB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CACf"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../src/types/project/entity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC3F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAElD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,aAAa;IAC7B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,kBAAkB,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;IAC9C,YAAY,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAA;IAClC,oBAAoB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAClD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAA;CACjC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,CAAA;AAE/C;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,OAAO;IACvB,EAAE,EAAE,SAAS,CAAA;IACb,QAAQ,EAAE,QAAQ,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,aAAa,CAAA;IACrB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAA;IACpB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CACf"}

package/dist/types/provider/interface.d.ts

@@ -15,6 +15,21 @@ export interface LLMProvider {
      * i.e. today's behavior (assume everything works, never warn).
      */
     readonly capabilities?: ProviderCapabilities;
+    /**
+     * Retry behaviour this DRIVER wants, when the generic default is wrong
+     * for the vendor behind it.
+     *
+     * One config was applied to every member of a chain, so an operator
+     * running [expensive primary, cheap self-hosted backup] could not give
+     * the backup a shorter budget — the two have different failure shapes
+     * and different costs per attempt, and only the driver knows which.
+     *
+     * Merged UNDER a caller's config, never over it: the host asked for
+     * something specific and the driver is expressing a default. Absent
+     * means the generic default, which is what every driver had before this
+     * existed.
+     */
+    readonly retryDefaults?: Partial<import('../../provider/retry.js').ProviderRetryConfig>;
     /**
      * The single LLM entry point. Returns an async iterable of
      * {@link StreamChunk} carrying text deltas, tool-call argument
@@ -22,8 +37,8 @@ export interface LLMProvider {
      *
      * Consumers that need an aggregated response (legacy
      * `ChatCompletionResponse` shape) call
-     * `collect(provider.chatStream(params))` from
-     * `@namzu/sdk/provider/collect`. The kernel's iteration
+     * `collectChatCompletion(provider.chatStream(params))` from
+     * `@namzu/sdk/provider/collect-chat-completion`. The kernel's iteration
      * orchestrator consumes the stream directly so it can emit
      * per-delta `RunEvent`s.
      *
@@ -132,5 +147,31 @@ export interface LLMProvider {
      * a vendor rejection rather than a failing build.
      */
     effortLevelsFor?(model: string, thinking?: import('./chat.js').ThinkingConfig): readonly import('./chat.js').ReasoningEffort[];
+    /**
+     * How large a context this model actually has, if the vendor says.
+     *
+     * The kernel's only source below an explicit host config is a
+     * hand-maintained prefix table, and its own header records what that
+     * costs: one vendor family's entries all carried 200k including the
+     * models whose window is 1M, so those runs compacted at roughly 14% full
+     * and threw away the prompt-cache prefix to do it. Every model release drifts the table
+     * again until somebody edits it. Meanwhile at least one driver already
+     * parses a real per-model `context_length` off the vendor listing and
+     * throws it away, because there was no member to return it through.
+     *
+     * Three states, exactly like {@link LLMProvider.effortLevelsFor}: the
+     * member ABSENT means this driver cannot answer at all; a resolved
+     * `undefined` means it asked and does not know; a number is the answer.
+     * The three are different facts and collapsing any two of them turns
+     * "I do not know" into a confident wrong number, which is the failure
+     * the table already made once.
+     *
+     * Resolved ONCE per run, not per iteration — the two consumers are
+     * synchronous and in the hot loop, so this must never become an await
+     * inside it. A rejection or a hang here is not a run failure: the table
+     * is still there, and a driver that cannot answer must not take down a
+     * run that would otherwise work.
+     */
+    resolveContextWindow?(model: string, signal?: AbortSignal): Promise<number | undefined>;
 }
 //# sourceMappingURL=interface.d.ts.map

package/dist/types/provider/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/types/provider/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAA;IAE5C;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;IAEpE,UAAU,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,eAAe,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjC;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE9C;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,eAAe,CAAC,CACf,KAAK,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,OAAO,WAAW,EAAE,cAAc,GAC3C,SAAS,OAAO,WAAW,EAAE,eAAe,EAAE,CAAA;CACjD"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/types/provider/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAA;IAE5C;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,OAAO,yBAAyB,EAAE,mBAAmB,CAAC,CAAA;IAEvF;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;IAEpE,UAAU,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,eAAe,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjC;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE9C;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,eAAe,CAAC,CACf,KAAK,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,OAAO,WAAW,EAAE,cAAc,GAC3C,SAAS,OAAO,WAAW,EAAE,eAAe,EAAE,CAAA;IAEjD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,oBAAoB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CACvF"}

package/dist/types/provider/model.d.ts

@@ -1,8 +1,22 @@
 export interface ModelInfo {
     id: string;
     name: string;
-    contextWindow: number;
-    maxOutputTokens: number;
+    /**
+     * Tokens the model's context holds, when the driver knows.
+     *
+     * OPTIONAL, and the optionality is the fix. Four drivers filled this
+     * with `0` where the vendor listing carries no value — and zero is not
+     * a window, it is "I do not know" written as a number, which reads to
+     * every consumer as a real measurement of a model that can hold
+     * nothing. A caller dividing by it gets `Infinity`; one comparing
+     * against it concludes every prompt is too long.
+     *
+     * Absent says the same thing honestly, and a consumer can then fall
+     * back to its own table instead of trusting a zero.
+     */
+    contextWindow?: number;
+    /** Same, and absent for the same reason. */
+    maxOutputTokens?: number;
     inputPrice: number;
     outputPrice: number;
     supportsToolUse: boolean;

package/dist/types/provider/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../src/types/provider/model.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,OAAO,CAAA;IACxB,iBAAiB,EAAE,OAAO,CAAA;CAC1B"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../src/types/provider/model.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,4CAA4C;IAC5C,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,OAAO,CAAA;IACxB,iBAAiB,EAAE,OAAO,CAAA;CAC1B"}