@north-light/api 0.3.528 → 0.3.530

package/dist/api/dto/lifecycle.d.ts

@@ -6,7 +6,9 @@ export interface ReviveRequest {
     /** Clear the finalization latch before reviving (the `--reopen` gate). The
      *  revive doorway accepts it only for a finalized node (`not_finalized`
      *  otherwise); without it, a finalized node is rejected (`node_finalized`).
-     *  Message delivery has its own wider reopen behavior. */
+     *  The target becomes resident, unless the caller is a node that is the
+     *  target's manager: then it keeps its lifecycle. Message delivery has its
+     *  own wider reopen behavior. */
     reopen?: boolean;
     /** Wake provenance: the cron whose run drove this revive (`CRTR_CRON_ID`,
      *  set by the daemon in every cron run's environment and forwarded by the

package/dist/api/dto/messages.d.ts

@@ -19,9 +19,11 @@ export interface SendMessageRequest {
     from?: NodeIdDTO | null;
     /** Revive with no inbox entry (`--fresh` → `reviveNode({ resume: false })`). */
     fresh?: boolean;
-    /** Before delivery, make the target resident and clear its finalization latch
-     *  when present (`--reopen`). Accepted for both durable and interactive
-     *  delivery; `--fresh` retains its separate finalized-only gate. */
+    /** Before delivery, clear the target's finalization latch when present and
+     *  make it resident (`--reopen`), unless the caller is a node that is the
+     *  target's manager: then the target keeps its lifecycle. Accepted for both
+     *  durable and interactive delivery; `--fresh` retains its separate
+     *  finalized-only gate. */
     reopen?: boolean;
     /** Hidden ambient context upserted onto the target's sidecar as a
      *  `situational` card, never visible chat (`--situational-context`).

package/dist/core/command-plugins/bundle.d.ts

@@ -2,7 +2,7 @@ import { type ValidatedCommandManifest } from '../../api/command-manifest/manife
 import type { KindConfig, MemoryExtensionDeclarations, ObjectKindDeclaration, PageComponentRegistration, PluginBundle, PluginManifest, Scope } from '../../types.js';
 import { type BundleTransport } from './endpoint.js';
 /** Who may call a capability provider's tool group (contract 3). */
-export type ProviderGroupWho = 'own' | 'user' | 'allowlist' | 'any';
+export type ProviderGroupWho = 'own' | 'user' | 'allowlist' | 'any' | `team:${string}`;
 /** One tool group a capability provider declares in `bundle.json`. */
 export interface ProviderGroupDeclaration {
     group: string;

package/dist/core/command-plugins/bundle.js

@@ -15,6 +15,7 @@ const PROVIDER_ID = /^[A-Za-z0-9_-]{1,64}$/;
 const PROVIDER_KEYS = new Set(['id', 'major', 'groups']);
 const PROVIDER_GROUP_KEYS = new Set(['group', 'consent_line', 'rate', 'who', 'allowlist']);
 const PROVIDER_WHO = new Set(['own', 'user', 'allowlist', 'any']);
+const PROVIDER_TEAM_WHO = /^team:[a-z0-9]+$/;
 // `groups` is a provider archive's tool-group declaration (consent lines, `who`); only the directory reads it, so an install accepts the key and ignores it.
 const BUNDLE_KEYS = new Set(['bundleVersion', 'kinds', 'page_components', 'memory_extensions', 'version', 'transport', 'provider', 'object_kinds', 'scopes', 'groups']);
 function issue(code, message, received, expected, next, path) {
@@ -195,8 +196,8 @@ function parseProviderBlock(raw) {
         if (rate !== undefined && rate !== null && (typeof rate !== 'number' || !Number.isFinite(rate) || rate < 0)) {
             return bad('provider group rate must be a non-negative number or null', JSON.stringify(rate), 'a finite number >= 0, null, or omitted', `${gp}.rate`);
         }
-        if (typeof r['who'] !== 'string' || !PROVIDER_WHO.has(r['who'])) {
-            return bad('provider group who must be own|user|allowlist|any', JSON.stringify(r['who']), 'own | user | allowlist | any', `${gp}.who`);
+        if (typeof r['who'] !== 'string' || !(PROVIDER_WHO.has(r['who']) || PROVIDER_TEAM_WHO.test(r['who']))) {
+            return bad('provider group who must be own|user|allowlist|any|team:<id>', JSON.stringify(r['who']), 'own | user | allowlist | any | team:<id> (id of lowercase letters and digits)', `${gp}.who`);
         }
         const allowlist = r['allowlist'];
         if (!Array.isArray(allowlist) || !allowlist.every((entry) => typeof entry === 'string' && entry.length > 0)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/api",
-  "version": "0.3.528",
+  "version": "0.3.530",
   "description": "Typed crtrd /v1 API contract — DTOs, route builders, the error contract, the CrtrClient, and the command-plugin manifest format. Zero runtime dependencies.",
   "type": "module",
   "main": "./dist/api/index.js",