@namzu/sdk 48.3.1 → 50.0.0

package/src/public-runtime.ts

@@ -11,6 +11,8 @@
 // ─── version + config ────────────────────────────────────────────────────
 
 export { VERSION } from './version.js'
+export { createHarnessSession, HarnessSessionError } from './runtime/harness-session/index.js'
+export { BackgroundJobOutputWaitLimitError } from './runtime/jobs/registry.js'
 
 // The opt-in model-authored-code backend. `RunCodeToolOptions.runtime` has
 // always accepted this contract; exporting the implementation and its refusal
@@ -355,7 +357,7 @@ export type {
 // Closing a paused or interrupted turn without resuming it, and compacting a
 // session between turns.
 export { abandonTurn } from './runtime/query/abandon-turn.js'
-export type { SessionLocatorOptions } from './runtime/query/abandon-turn.js'
+export type { AbandonTurnOptions, SessionLocatorOptions } from './runtime/query/abandon-turn.js'
 export { compactSession } from './runtime/query/compact-session.js'
 export type { CompactSessionParams } from './runtime/query/compact-session.js'
 export { prepareForkState } from './runtime/query/fork/prepare.js'
@@ -407,7 +409,10 @@ export { SESSION_MEMORY_TAG, createMemoryPromoter } from './turn/index.js'
 export type { MemoryPromoterOptions } from './turn/index.js'
 export { createMemoryRecallStep } from './turn/memory-recall.js'
 export type { MemoryRecallOptions } from './turn/memory-recall.js'
-export { createEvidenceRecallStep, refineEvidenceRecallTerms } from './turn/evidence-recall.js'
+export {
+	createEvidenceRecallStep,
+	refineEvidenceRecallTerms,
+} from './turn/evidence-recall.js'
 export type {
 	EvidenceRecallOptions,
 	EvidenceRecallRequest,
@@ -506,6 +511,7 @@ export {
 	MEMORY_VERIFY_NOTICE,
 	MemoryContentRejectedError,
 	MemoryNameConflictError,
+	MemoryRevisionConflictError,
 	describeMemoryAge,
 	isMemoryName,
 	memoryIndexLine,
@@ -562,7 +568,10 @@ export {
 	RegistryCollisionError,
 	ToolNameCollisionError,
 } from './registry/index.js'
-export type { ManagedRegistryConfig, RegistryCollisionPolicy } from './registry/index.js'
+export type {
+	ManagedRegistryConfig,
+	RegistryCollisionPolicy,
+} from './registry/index.js'
 
 // Toolsets (plan.md v3 §1-2): the unit every tool comes from, and the
 // runtime-owned resolver of them. `toolset()` builds a plain static one;
@@ -575,7 +584,10 @@ export type { ManagedRegistryConfig, RegistryCollisionPolicy } from './registry/
 export { combineToolsets, ToolsetConflictError } from './toolsets/combine.js'
 export { defineCapability, dynamicCapability } from './capabilities/index.js'
 export { ToolManager } from './toolsets/manager.js'
-export type { ToolManagerConfig, ToolsetChangeReport } from './toolsets/manager.js'
+export type {
+	ToolManagerConfig,
+	ToolsetChangeReport,
+} from './toolsets/manager.js'
 export { matchesSourceIdGlob } from './toolsets/source-glob.js'
 export { toolset } from './toolsets/toolset.js'
 export { toToolSourceRef } from './toolsets/types.js'
@@ -728,7 +740,10 @@ export {
 	SandboxProviderFactory,
 	walkFilesViaExec,
 } from './sandbox/index.js'
-export type { LocalSandboxProviderOptions, SandboxFileWalkExec } from './sandbox/index.js'
+export type {
+	LocalSandboxProviderOptions,
+	SandboxFileWalkExec,
+} from './sandbox/index.js'
 
 // The classified provider-failure surface: a driver states what went wrong
 // first-hand, and the turn boundary reads it to choose between a pause and a
@@ -905,6 +920,7 @@ export type {
 	AcpServerOptions,
 } from './bridge/acp/index.js'
 export type {
+	AcpFileChangePreview,
 	AcpFsReadParams,
 	AcpFsReadResult,
 	AcpFsWriteParams,
@@ -985,7 +1001,10 @@ export {
 	resolveScriptPrograms,
 	unknownProgramInLine,
 } from './authorization/program.js'
-export type { CommandProgramPositions, ProgramPosition } from './authorization/program.js'
+export type {
+	CommandProgramPositions,
+	ProgramPosition,
+} from './authorization/program.js'
 
 // NZ-BOOT-03: the module-attributed invariant registry. `compaction.ts` and
 // `claim-disk.ts` register themselves against the shared `invariants`
@@ -1143,6 +1162,7 @@ export {
 	MEMORY_TYPES,
 	assertMemoryStatus,
 	assertMemoryType,
+	hasConditionalMemoryWrites,
 	isMemoryType,
 } from './types/memory/index.js'
 export {
@@ -1214,7 +1234,10 @@ export {
 	planWorkingSet,
 	scoreMessages,
 } from './compaction/salience/index.js'
-export { DEFAULT_SOFT_TARGET, planSalienceWorkingSet } from './compaction/plan.js'
+export {
+	DEFAULT_SOFT_TARGET,
+	planSalienceWorkingSet,
+} from './compaction/plan.js'
 export {
 	CONSOLIDATION_TAG,
 	consolidationEntry,
@@ -1440,7 +1463,10 @@ export {
 } from './read-model/index.js'
 
 // Asking a session what happened, including what compaction removed.
-export { SessionQuery, SessionTranscriptUnavailableError } from './session-query/index.js'
+export {
+	SessionQuery,
+	SessionTranscriptUnavailableError,
+} from './session-query/index.js'
 
 // A host-scoped pseudo-terminal primitive, or a refusal that names the
 // binding to install. It neither creates a sandbox nor owns a descendant
@@ -1513,9 +1539,15 @@ export type {
 export type { JobProcess } from './runtime/jobs/registry.js'
 export { WORKING_STATE_MIME } from './connector/mcp/adapter.js'
 
-export { snapshotRequestContext, diffRequestContext } from './runtime/query/request-context.js'
+export {
+	snapshotRequestContext,
+	diffRequestContext,
+} from './runtime/query/request-context.js'
 
-export { DiskResidentStore, ResidentConflictError } from './manager/resident/store.js'
+export {
+	DiskResidentStore,
+	ResidentConflictError,
+} from './manager/resident/store.js'
 export { runResident, stepResident } from './manager/resident/loop.js'
 export { DiskResidentAgenda } from './manager/resident/agenda.js'
 export { inspectResidentConsumption } from './manager/resident/consumption.js'
@@ -1527,14 +1559,20 @@ export { validateResidentProposal } from './manager/resident/proposal.js'
 export { deliverResidentMessage } from './manager/resident/outbox.js'
 export { createResidentDeliveryWindow } from './manager/resident/delivery-window.js'
 
-export { hashResidentSkill, projectResidentLearning } from './manager/resident/learning.js'
+export {
+	hashResidentSkill,
+	projectResidentLearning,
+} from './manager/resident/learning.js'
 export { runResidentLearningCycle } from './manager/resident/learning-cycle.js'
 
 export {
 	createSessionEvidenceSource,
 	createSessionTextEvidenceSource,
 } from './store/evidence/disk.js'
-export { classifyEvidenceSource, EVIDENCE_RECORD_GUIDANCE } from './store/evidence/source-kind.js'
+export {
+	classifyEvidenceSource,
+	EVIDENCE_RECORD_GUIDANCE,
+} from './store/evidence/source-kind.js'
 export { createResidentToolEvidenceSource } from './manager/resident/tool-evidence.js'
 
 export { createResidentEvidenceRecallStep } from './manager/resident/evidence-recall.js'
@@ -1687,3 +1725,72 @@ export {
 	udsPeerAddress,
 	writePeerRecord,
 } from './peers/index.js'
+export { DiskPalStore, PalConflictError } from './pals/store.js'
+export { PalRuntime, PalUnavailableError } from './pals/runtime.js'
+export { buildPalSystemPrompt, palConversationGreeting } from './pals/prompt.js'
+export {
+	preparePalReferenceImages,
+	importPalReferenceImages,
+} from './pals/reference-images.js'
+
+export { isInboundDeliveryRef } from './types/message/inbound-delivery.js'
+
+export {
+	DiskPalCommunicationStore,
+	PalCommunicationConflictError,
+} from './pals/communication/store.js'
+export { PalMessageBroker } from './pals/communication/broker.js'
+export { PalOperatorMessageBroker } from './pals/communication/operator.js'
+export { createPalInboxSource } from './pals/communication/inbound.js'
+export { dispatchPalMessagesOnce } from './pals/communication/dispatch.js'
+export {
+	DiskPalMessagePolicy,
+	PalMessagePermissionConflictError,
+} from './pals/communication/policy.js'
+export {
+	createPalActivitySource,
+	PalActivityAccessDeniedError,
+	PalActivityIntegrityError,
+	PalActivityReadLimitError,
+} from './pals/activity/source.js'
+
+export { PalIngressBlockedError } from './pals/communication/store.js'
+export {
+	createPalIngressInboxSource,
+	reconcilePalIngressDelivery,
+} from './pals/communication/ingress-inbound.js'
+export { dispatchPalIngressOnce } from './pals/communication/ingress-dispatch.js'
+export { verifyIngressRecorded } from './pals/communication/verify.js'
+export {
+	PAL_OBSERVATION_NAMESPACE,
+	PAL_CHANNEL_NAMESPACE,
+	PAL_OPERATOR_NAMESPACE,
+	ingressMessageRef,
+} from './pals/communication/ingress-types.js'
+export { DiskPalChannelRoutes, PalChannelRouteConflictError } from './pals/channels/routes.js'
+export { PalChannelIngress } from './pals/channels/ingress.js'
+export { PalChannelRouter } from './pals/channels/routing.js'
+export {
+	DiskPalActivitySubscriptionStore,
+	PalActivitySubscriptionConflictError,
+} from './pals/activity/subscription-store.js'
+export {
+	DiskPalActivitySubscriptionPolicy,
+	PalActivitySubscriptionPermissionConflictError,
+} from './pals/activity/subscription-policy.js'
+export {
+	publishPalActivityOnce,
+	PalActivitySubscriptionDeniedError,
+} from './pals/activity/subscriptions.js'
+export {
+	createPalActivityCausalityResolver,
+	PalActivityCausalityUnavailableError,
+} from './pals/activity/causality.js'
+
+export {
+	ingressIntentId,
+	ingressIntentDigest,
+	ingressRouteId,
+} from './pals/communication/ingress-schema.js'
+
+export { ingressAuthorizationRequest } from './pals/communication/ingress-types.js'

package/src/public-tools.ts

@@ -12,6 +12,7 @@
 // ─── Tool definition primitive ───────────────────────────────────────────
 
 export { defineTool } from './tools/defineTool.js'
+export { admitToolFacts } from './tools/admit-facts.js'
 // Containment, for a host or sibling package that resolves caller-supplied
 // paths against a root. Both were internal while three call sites outside
 // this file needed them.
@@ -20,6 +21,7 @@ export {
 	isWithin,
 	pathOutsideRoots,
 	resolveWithin,
+	resolveWithinAnyReal,
 	resolveWithinReal,
 	toolRoots,
 } from './tools/paths.js'
@@ -55,13 +57,15 @@ export {
 	findCommandShell,
 	findCommandShellForDialect,
 	hostCommandShell,
+	describeSpawnFailure,
 	hostShellSpawn,
 	installedCommandShellForDialect,
+	spawnHostShell,
 	withoutBashStartup,
 } from './tools/command-shell.js'
 export { ReadFileTool } from './tools/builtins/read-file.js'
 export { WriteFileTool } from './tools/builtins/write-file.js'
-export { EditTool } from './tools/builtins/edit.js'
+export { EditTool, dryRunEdit } from './tools/builtins/edit.js'
 export {
 	BashTool,
 	type ExecHostShellProgress,
@@ -133,6 +137,11 @@ export type { RunCodeToolOptions } from './tools/builtins/run-code.js'
 export { LsTool } from './tools/builtins/ls.js'
 export { SearchToolsTool } from './tools/builtins/search-tools.js'
 export { VerifyOutputsTool } from './tools/builtins/verify-outputs.js'
+export {
+	ViewImageTool,
+	createViewImageTool,
+} from './tools/builtins/view-image.js'
+export { createPalReferenceImageTool } from './pals/reference-images.js'
 export {
 	createStructuredOutputTool,
 	STRUCTURED_OUTPUT_TOOL_NAME,
@@ -235,3 +244,6 @@ export {
 } from './runtime/query/file-evidence-seed.js'
 
 export { buildResidentToolEvidenceTools } from './tools/resident-tool-evidence.js'
+
+export { createPalMessagingTools } from './pals/communication/tools.js'
+export { createPalOperatorMessagingTools } from './pals/communication/operator.js'

package/src/public-types.ts

@@ -14,11 +14,24 @@
 // ─── per-domain shape surfaces ────────────────────────────────────────────
 
 export type * from './types/ids/index.js'
+export type * from './types/harness/session.js'
+export type * from './pals/types.js'
+export type { PalConversationGreeting, PalSystemPromptOptions } from './pals/prompt.js'
+export type {
+	PalReferenceImage,
+	PalReferenceImageImportReceipt,
+	PalReferenceImageImportOptions,
+	PalReferenceImageToolOptions,
+} from './pals/reference-images.js'
+export type { ViewImageToolOptions } from './tools/builtins/view-image.js'
 export type * from './types/message/index.js'
+export type * from './types/message/inbound-delivery.js'
 export type * from './types/common/index.js'
+export type { AcpPromptOptions, AcpTask, AcpTaskUpdate } from './types/acp/index.js'
 export type { CoalesceOptions } from './streaming/coalesce.js'
 export type * from './types/bidi/index.js'
 export type * from './types/tool/index.js'
+export type * from './types/job/index.js'
 export type { WorkerCodeRuntimeOptions } from './execution/code-runtime/worker.js'
 export type {
 	CodeRunOutcome,
@@ -80,7 +93,10 @@ export type * from './types/structured-output/index.js'
 export type * from './types/invocation/index.js'
 export type * from './types/computer-use/index.js'
 export type * from './types/browser/index.js'
-export type { BrowserActToolInput, BrowserToolInput } from './tools/builtins/browser.js'
+export type {
+	BrowserActToolInput,
+	BrowserToolInput,
+} from './tools/builtins/browser.js'
 export type {
 	BrowserOriginVerdict,
 	BrowserSitePatternVerdict,
@@ -270,7 +286,10 @@ export type {
 	ResolveExternalSessionOptions,
 } from './bridge/external-session.js'
 
-export type { CheckpointRecords, RecordedPark } from './runtime/query/checkpoint.js'
+export type {
+	CheckpointRecords,
+	RecordedPark,
+} from './runtime/query/checkpoint.js'
 
 export type { TaskContextScope } from './store/task/context.js'
 
@@ -486,7 +505,11 @@ export type {
 	RequestContextChange,
 } from './runtime/query/request-context.js'
 
-export type { ResidentDecision, ResidentState, ResidentStore } from './manager/resident/store.js'
+export type {
+	ResidentDecision,
+	ResidentState,
+	ResidentStore,
+} from './manager/resident/store.js'
 export type {
 	ResidentActivityScope,
 	ResidentAdmission,
@@ -538,7 +561,10 @@ export type {
 	ResidentSelection,
 	ResidentSelector,
 } from './manager/resident/initiative.js'
-export type { ResidentHostOptions, ResidentObserver } from './manager/resident/host.js'
+export type {
+	ResidentHostOptions,
+	ResidentObserver,
+} from './manager/resident/host.js'
 export type {
 	ResidentProposal,
 	ResidentProposalLimits,
@@ -558,7 +584,10 @@ export type {
 } from './manager/resident/outbox.js'
 export type { ResidentDeliveryWindowConfig } from './manager/resident/delivery-window.js'
 
-export type { ResidentStepContext, ResidentContextualStep } from './manager/resident/host.js'
+export type {
+	ResidentStepContext,
+	ResidentContextualStep,
+} from './manager/resident/host.js'
 export type {
 	ResidentLearningEvidence,
 	ResidentSkillCandidate,
@@ -716,7 +745,10 @@ export type {
 	ResolvePeerRuntimeDirOptions,
 } from './peers/dir.js'
 export type { PeerRecord } from './peers/record.js'
-export type { ListLivePeersOptions, PeerLivenessOptions } from './peers/registry.js'
+export type {
+	ListLivePeersOptions,
+	PeerLivenessOptions,
+} from './peers/registry.js'
 export type {
 	DeliverRequest,
 	DeliverResponse,
@@ -735,6 +767,36 @@ export type {
 	SubscribeIdleRequest,
 	SubscribeIdleResponse,
 } from './peers/protocol.js'
-export type { CreatePeerEndpointOptions, PeerEndpoint } from './peers/endpoint.js'
+export type {
+	CreatePeerEndpointOptions,
+	PeerEndpoint,
+} from './peers/endpoint.js'
 export type { PeerClientOptions, PeerClientResult } from './peers/client.js'
 export type { PeerMessageEnvelopeInput } from './peers/envelope.js'
+
+export type * from './pals/communication/types.js'
+export type { PalMessagingToolsOptions, PalMessagingRecipient } from './pals/communication/tools.js'
+export type {
+	PalOperatorConversation,
+	PalOperatorMessageBrokerOptions,
+	PalOperatorMessageSender,
+	PalOperatorMessagingToolsOptions,
+	PalOperatorRecipient,
+	PalOperatorSendRequest,
+} from './pals/communication/operator.js'
+export type {
+	PalMessagePermission,
+	PalMessagePermissionUpdate,
+} from './pals/communication/policy.js'
+export type { PalLifecycleEvent, PalLifecycleListener } from './pals/lifecycle.js'
+export type * from './pals/activity/types.js'
+
+export type * from './pals/communication/ingress-types.js'
+export type * from './pals/channels/types.js'
+export type * from './pals/activity/subscription-types.js'
+export type {
+	PalActivitySubscriptionPermission,
+	PalActivitySubscriptionPermissionUpdate,
+} from './pals/activity/subscription-policy.js'
+export type { PalActivitySubscriptionRunnerOptions } from './pals/activity/subscriptions.js'
+export type { PalActivityCausalityOptions } from './pals/activity/causality.js'

package/src/registry/tool/presentation.ts

@@ -35,21 +35,26 @@ function truncate(value: string, max = MAX_LABEL): string {
  * a delegation tool came to show a blob of its own arguments while
  * requiring the model to write a label nothing then read.
  */
-export function genericLabel(input: unknown): string {
+export function genericPrimary(input: unknown): string | undefined {
 	if (input && typeof input === 'object') {
 		const obj = input as Record<string, unknown>
 		const pick = (k: string): string | undefined =>
 			typeof obj[k] === 'string' ? (obj[k] as string) : undefined
-		const primary =
+		return (
 			pick('command') ??
 			pick('path') ??
 			pick('file_path') ??
 			pick('pattern') ??
 			pick('query') ??
 			pick('description')
-		if (primary) return truncate(primary)
+		)
 	}
-	if (typeof input === 'string') return truncate(input)
+	return typeof input === 'string' ? input : undefined
+}
+
+export function genericLabel(input: unknown): string {
+	const primary = genericPrimary(input)
+	if (primary) return truncate(primary)
 	return truncate(JSON.stringify(input ?? {}))
 }
 

package/src/registry/tool/screen.ts

@@ -83,7 +83,13 @@ export async function screenToolResult(
 ): Promise<ToolResult> {
 	if (!guardrails || guardrails.length === 0) return result
 
-	let current = result.output
+	// Failed tools are rendered from BOTH output and error. Screen the same
+	// text the executor would show, including an error-only failure.
+	let current = result.success
+		? result.output
+		: result.output.trim()
+			? `${result.output}\n\nError: ${result.error ?? 'Tool execution failed'}`
+			: `Error: ${result.error ?? 'Tool execution failed'}`
 	let rewritten = false
 
 	for (const [index, spec] of guardrails.entries()) {
@@ -128,5 +134,31 @@ export async function screenToolResult(
 		}
 	}
 
-	return rewritten ? { ...result, output: current } : result
+	// `content` wins over `output` on the model wire. A rewrite that leaves
+	// original content blocks in place would expose the text it just redacted.
+	// Rich blocks cannot be screened through the text-only verdict either, so
+	// a rewrite replaces the complete model-visible content with its text.
+	if (rewritten && !result.success) {
+		// Reconstruct the failure fields when the rewrite kept the normal
+		// formatting. Keeping the whole formatted text in `error` would make
+		// the executor add a second `Error:` prefix to the visible result.
+		const marker = '\n\nError: '
+		const lastMarker = current.lastIndexOf(marker)
+		const output = lastMarker >= 0 ? current.slice(0, lastMarker) : ''
+		const error =
+			lastMarker >= 0
+				? current.slice(lastMarker + marker.length)
+				: current.startsWith('Error: ')
+					? current.slice('Error: '.length)
+					: current
+		const visible = output.trim() ? `${output}\n\nError: ${error}` : `Error: ${error}`
+		return { ...result, output, error, content: visible }
+	}
+	return rewritten
+		? {
+				...result,
+				output: current,
+				content: current,
+			}
+		: result
 }