@namzu/sdk 48.0.0 → 48.1.0

package/src/session/retention/archive.ts

@@ -223,7 +223,7 @@ export class ArchivalManager {
 
 		// 6. Dispose the workspace (idempotent — driver contract tolerates
 		//    already-disposed refs; a missing ref is a no-op).
-		if (workspace) {
+		if (workspace && sub.workspaceRetention !== 'retain') {
 			try {
 				const driver = this.deps.workspaceRegistry.get(workspace.meta.backend)
 				await driver.dispose(workspace)

package/src/store/session/disk.ts

@@ -226,6 +226,7 @@ interface PersistedSubSession {
 	failureMode: SubSession['failureMode']
 	completionMode: SubSession['completionMode']
 	workspaceId: SubSession['workspaceId']
+	workspaceRetention?: SubSession['workspaceRetention']
 	broadcastGroupId?: string
 	summaryRef?: SubSession['summaryRef']
 	archiveRef?: SubSession['archiveRef']
@@ -1126,6 +1127,7 @@ function serializeSubSession(s: SubSession, tenantId: TenantId): PersistedSubSes
 		failureMode: s.failureMode,
 		completionMode: s.completionMode,
 		workspaceId: s.workspaceId,
+		...(s.workspaceRetention !== undefined && { workspaceRetention: s.workspaceRetention }),
 		...(s.broadcastGroupId !== undefined && { broadcastGroupId: s.broadcastGroupId }),
 		...(s.summaryRef !== undefined && { summaryRef: s.summaryRef }),
 		...(s.archiveRef !== undefined && { archiveRef: s.archiveRef }),
@@ -1146,6 +1148,7 @@ function deserializeSubSession(s: PersistedSubSession): SubSession {
 		failureMode: s.failureMode,
 		completionMode: s.completionMode,
 		workspaceId: s.workspaceId,
+		...(s.workspaceRetention !== undefined && { workspaceRetention: s.workspaceRetention }),
 		...(s.broadcastGroupId !== undefined && { broadcastGroupId: s.broadcastGroupId }),
 		...(s.summaryRef !== undefined && { summaryRef: s.summaryRef }),
 		...(s.archiveRef !== undefined && { archiveRef: s.archiveRef }),

package/src/tools/builtins/browser.ts

@@ -508,7 +508,7 @@ const HUMAN_REASON_WORDS: Record<BrowserHumanRequired['reason'], string> = {
 	'two-factor': 'a second sign-in step',
 	captcha: 'a CAPTCHA',
 	'bot-block': 'a bot check',
-	'http-auth': 'a password prompt',
+	'http-auth': 'an HTTP authentication challenge',
 	'credential-field': 'a password or one-time-code field',
 }
 
@@ -527,7 +527,7 @@ function hostErrorToResult(tool: string, error: BrowserHostError): ToolResult {
 		case 'browser_human_required': {
 			const what = HUMAN_REASON_WORDS[error.reason] ?? 'something only a person can do'
 			const how = error.loginCommand
-				? ` The user can sign in with: ${oneLine(error.loginCommand, 300)}`
+				? ` The user can ${error.reason === 'http-auth' ? 'check access' : 'sign in'} with: ${oneLine(error.loginCommand, 300)}`
 				: ''
 			const detail = {
 				origin: error.origin,

package/src/types/agent/scheduler.ts

@@ -3,8 +3,9 @@ import type { TaskId } from '../ids/index.js'
 import type { AgentPersona } from '../persona/index.js'
 import type { CancelCause } from '../session/cancel-cause.js'
 import type { ChildSessionLifecycleEvent, SessionEventListener } from '../session/events.js'
+import type { WorkspaceRef } from '../workspace/ref.js'
 import type { AgentRuntimeContext, BaseAgentConfig, BaseAgentResult } from './base.js'
-import type { AgentTaskState } from './task.js'
+import type { AgentTaskState, ChildWorkspaceRequest } from './task.js'
 
 export interface TaskHandle {
 	readonly taskId: TaskId
@@ -13,6 +14,8 @@ export interface TaskHandle {
 	readonly result?: BaseAgentResult
 	readonly createdAt: number
 	readonly completedAt?: number
+	/** The workspace assigned to an explicitly isolated child, when admitted. */
+	readonly workspace?: WorkspaceRef
 }
 
 /**
@@ -29,6 +32,8 @@ export interface TaskHandle {
 export type SiblingFailurePolicy = 'continue' | 'cancel-siblings'
 
 export interface CreateTaskOptions {
+	/** Per-task filesystem choice, forwarded to the local manager at admission. */
+	readonly workspace?: ChildWorkspaceRequest
 	/**
 	 * Revalidate host authority at actual admission, including after a capacity wait.
 	 * Queue retries may invoke this more than once; checks must tolerate repeated calls.

package/src/types/agent/task.ts

@@ -1,6 +1,6 @@
 import type { SessionTokenBudget } from '../../store/budget/index.js'
 import type { ActorRef } from '../../types/session/actor.js'
-import type { WorkspaceBackendKind } from '../../types/workspace/ref.js'
+import type { WorkspaceBackendKind, WorkspaceRef } from '../../types/workspace/ref.js'
 import type { ResumeHandler } from '../hitl/index.js'
 import type { SessionId, TaskId, TenantId, TurnId } from '../ids/index.js'
 import type { Message } from '../message/index.js'
@@ -19,6 +19,19 @@ export type AgentTaskState =
 	| 'rejected'
 	| 'input-required'
 
+/** Per-spawn filesystem choice. Omission preserves the manager's existing behavior. */
+export type ChildWorkspaceRequest =
+	| { readonly mode: 'shared' }
+	| {
+			readonly mode: 'isolated'
+			readonly backend: 'git-worktree'
+			readonly baseRef?: string
+			/** Relative directory within the checkout where this child starts. */
+			readonly subdirectory?: string
+			/** The existing SDK behavior is `dispose`; CLI delegates select `retain`. */
+			readonly retention?: 'dispose' | 'retain'
+	  }
+
 export function isTerminalAgentTaskState(state: AgentTaskState): boolean {
 	return state === 'completed' || state === 'failed' || state === 'canceled' || state === 'rejected'
 }
@@ -206,6 +219,8 @@ export interface AgentTask {
 	pendingMessages: Message[]
 	createdAt: number
 	completedAt?: number
+	/** Populated after an explicitly isolated spawn is admitted. */
+	workspace?: WorkspaceRef
 
 	evictAfter?: number
 
@@ -219,6 +234,8 @@ export interface AgentTask {
  * WorkspaceRef triple atomically on every spawn.
  */
 export interface SendMessageOptions {
+	/** Explicit child filesystem policy; omitted preserves legacy backend behavior. */
+	readonly workspace?: ChildWorkspaceRequest
 	/**
 	 * Revalidate host authority before admission, including after a capacity wait.
 	 * Queue retries may invoke this more than once; checks must tolerate repeated calls.
@@ -287,6 +304,9 @@ export interface SendMessageOptions {
 }
 
 export interface AgentManagerConfig {
+	/** When neither task workspace field is set, use the registered backend (legacy) or share cwd. */
+	workspaceDefault?: 'registered' | 'shared'
+
 	/** Reject a full parent immediately (default), or retain bounded pending task handles. */
 	capacityBehavior?: 'reject' | 'queue'
 

package/src/types/connector/mcp.ts

@@ -178,6 +178,14 @@ export interface MCPJsonRpcMessage {
 	error?: MCPJsonRpcError
 }
 
+/** A validated, bounded update from one MCP tool call. */
+export interface MCPProgressUpdate {
+	readonly progress: number
+	readonly total?: number
+	/** Server text with terminal controls removed, limited to 512 UTF-8 bytes. */
+	readonly message?: string
+}
+
 /** Authority for one MCP JSON-RPC request. */
 export interface MCPRequestOptions {
 	/**
@@ -187,6 +195,12 @@ export interface MCPRequestOptions {
 	 * waiting, not that an already-started remote side effect was rolled back.
 	 */
 	readonly signal?: AbortSignal
+	/**
+	 * Receive progress for this `tools/call` only. The client adds a unique
+	 * `_meta.progressToken` when this is supplied and stops delivery as soon as
+	 * the request completes, fails or is cancelled. Other methods ignore it.
+	 */
+	readonly onProgress?: (update: MCPProgressUpdate) => void
 	/**
 	 * Extra headers for this one request, merged over the transport's static
 	 * config headers (a collision resolves to this value) and under this same

package/src/types/session/sub-session.ts

@@ -100,6 +100,8 @@ export interface SubSession {
 	failureMode: FailureMode
 	completionMode: CompletionMode
 	workspaceId: WorkspaceId | null
+	/** Keep this delegated workspace when the child ends or its session is archived. */
+	workspaceRetention?: 'retain'
 	/**
 	 * For interventions, the immutable artifact being addressed. Chains form
 	 * a strict acyclic DAG — see session-hierarchy.md §4.5.