@owlmeans/viable-common 0.0.48-rc.1 → 0.0.48-rc.2

package/README.md

@@ -15,7 +15,7 @@ the Viable platform has no use for it. The package's skills are `viable-common`
 ## Installation
 
 ```bash
-bun add @owlmeans/viable-common@^0.0.48-rc.1
+bun add @owlmeans/viable-common@^0.0.48-rc.2
 ```
 
 ## What is in it
@@ -209,7 +209,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.53
+npx @owlmeans/agent-skills@^0.1.18-rc.54
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/viable-common",
-  "version": "0.0.48-rc.1",
-  "generatedAt": "2026-10-09T11:31:12.875Z",
+  "version": "0.0.48-rc.2",
+  "generatedAt": "2026-10-15T10:20:01.307Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/agent-presentation/SKILL.md

@@ -6,7 +6,7 @@ description: Shared, runtime-free taxonomy for presenting OwlMeans Viable agent
 
 # Agent output presentation
 
-**Install:** `"@owlmeans/viable-common": "^0.0.48-rc.1"` in `dependencies`
+**Install:** `"@owlmeans/viable-common": "^0.0.48-rc.2"` in `dependencies`
 
 `@owlmeans/viable-common`'s `agent/presentation.ts` owns the browser-safe vocabulary for agent
 output. Keep the server and every client on `agentPresentationHelper.classifyAgentMessage()`; consumers may refine a

package/agent-meta/skills/viable-common/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/viable-common
 
 **Layer:** Cross-cutting domain (contracts only)
-**Install:** `"@owlmeans/viable-common": "^0.0.48-rc.1"` in `dependencies`
+**Install:** `"@owlmeans/viable-common": "^0.0.48-rc.2"` in `dependencies`
 **Subpaths:** `.` · `./slot` · `./connect` · `./convert` · `./integrity` · `./intent` · `./legal` · `./iam-console` — the barrel
 re-exports every subpath except `./intent`.
 **Runtime-free:** no `@langchain/*`, no filesystem, no Ajv at run time (a devDependency, for the
@@ -369,6 +369,14 @@ and `connectRef` (typed references) name the same set, the two bases aside:
   an organization travels by `entitySlug`, a group by key, never a record id; a grant names exactly one
   subject (`OneSubject`); its nullable enums carry `null`. `IamRefused` stays the platform's class; the
   marker it writes (`IAM_REFUSED`) is declared here.
+- **Grant modes and origins follow `@owlmeans/iam`, never a hand-written list**: `ModeProp` is
+  `Object.values(IamGrantMode)`, so the revoke-only `all` and `inherit` are admitted on BOTH bodies —
+  the IAM refuses them on a grant, the schema does not duplicate that rule. The bodies' docs state the
+  semantics: a whole-permission revoke of a declared definition RESTRICTS the subject (it also loses
+  what it inherits — default class, group, bundle); `mode: inherit` takes back only the subject's own
+  value (grant or restriction), resources untouched. `IamGrantsResponse` lists what is held — origin
+  `direct`, `default`, `group` (`through`) or `bundle` (a group's own listing) — plus the inherited
+  grants a subject's own restriction withholds, `restricted: true`, never held.
 - **The browser's sockets are cursor feeds here** (`connect/feed/types.ts`): `ConnectFeedRecord`
   (`kind: ConnectFeedKind`, `at`, `run?`, `projectId?`, `storyId?`, `slotId?`, `action?`, `agent?`,
   bounded `text?`, small `data?`) — a projection, never the record behind it; `ConnectFeedEntry` adds its
@@ -589,7 +597,7 @@ the manager's `useErrorPhrase` read the same substrings. A marker change changes
 | `scaffold.spec.ts` | old- and new-shape plans passing the schema and slot, `null` optionals, no `minItems`, closed anchors/slots, the landing helpers |
 | `blueprint.spec.ts` · `branding.spec.ts` | `landingGatePreferenceOf` defaults · the build env and metadata vocabulary |
 | `connect-entrypoints.spec.ts` · `connect-convert.spec.ts` | every route's method and path, aliases = `connectRef`, the paid kinds on the delegated session, the two preference writes and the credit switch alone, the account inference/token/privacy/intent routes and their closed bodies, the configuration routes and their closed bodies, the git and GitHub routes under the base with no paid gate and no completion route and their closed bodies, the production routes under the base each with its own paid kind, no secret or run verb, and their closed bodies, the IAM routes' count and addresses, the scope query, the account branding routes, no socket or story route, the create body's `sessionId`, branding body, the kit routes and their closed shapes, the collect route under the base and its timing constants, the pending/params/query/result shapes, the three feed routes (owned base / account base, GET, no paid gate, no socket) and the feed query shapes · conversion routes, the create body's `sessionId`, the start's body and both verbs' `confirm`, an unknown executor kind accepted |
-| `iam-console.spec.ts` | the owner-console schemas (one subject, closed bodies, `null` in nullable enums), the 22 `connect.iam` routes under the base with no paid gate, the customer-wide listing under the account base, POST writes with `scope` in the body and reads with it in the query, the connector's IAM params |
+| `iam-console.spec.ts` | the owner-console schemas (one subject, closed bodies, `null` in nullable enums, `mode: inherit` on a revoke and — deliberately — on a grant body, the `inherit`/`bundle` values), the 22 `connect.iam` routes under the base with no paid gate, the customer-wide listing under the account base, POST writes with `scope` in the body and reads with it in the query, the connector's IAM params |
 | `convert.spec.ts` | the three structural walks over the barrel, nullable enums under Ajv, census classifiers, stage transitions |
 | `design.spec.ts` | the design aggregate, staleness ranking, schema refusals, `storyDesignHelper.userStoryOfDesign` |
 | `error-status.spec.ts` · `connect-errors.spec.ts` | declared statuses through a marshal · packed refusal fields fresh and after a round trip, the confirmation's `decode` |

package/build/connect/ops.d.ts

@@ -0,0 +1,189 @@
+import type { SlotCommandPayload } from '../slot/index.js';
+import type { ConnectInquiryKind, ConnectOpErrorKind, ConnectOpKind, ModelTaskMode, ModelTaskResultKind, ModelTaskRole, ModelTier } from './consts.js';
+import type { ConnectServices } from './types.js';
+/**
+ * One thing the platform asks a connector to do.
+ *
+ * Operations are addressed to a PROJECT, not to a session: a connector that restarts mid-run
+ * re-attaches and is handed whatever is still pending, so an MCP server dying does not kill a
+ * pipeline that is minutes into its work. `sessionId` records which session it was published to,
+ * for tracing and for the redelivery counter — never for routing a result back.
+ */
+export interface ConnectOp {
+    id: string;
+    projectId: string;
+    sessionId: string;
+    kind: ConnectOpKind;
+    payload: SlotCommandPayload | ModelTask | ConfigurePayload | InquiryPayload;
+    createdAt: string;
+    /** When the asker stops waiting. A connector past this may skip the work and say so. */
+    deadlineAt: string;
+    /** How many times this op has been delivered. > 1 means a connector reconnected. */
+    attempt: number;
+    deliveredAt?: string;
+}
+/**
+ * The answer to exactly one operation.
+ *
+ * `ok: false` with `kind: 'malformed'` is a RETRYABLE outcome — the platform asks again, with the
+ * problem quoted back. `'unavailable'` says the connector cannot do this at all and the run should
+ * fail rather than spin.
+ */
+export interface ConnectOpResult {
+    opId: string;
+    sessionId: string;
+    ok: boolean;
+    value?: unknown;
+    error?: ConnectOpError;
+}
+export interface ConnectOpError {
+    type: string;
+    message: string;
+    kind?: ConnectOpErrorKind;
+}
+/**
+ * The configuration a local target needs, as file CONTENT rather than as keys.
+ *
+ * The platform composes it — it is the only side that knows the OIDC client, its secret and the
+ * redirect URIs — and the connector writes it into the managed block of each named file, leaving
+ * every line the user added alone. `probe` names the services the platform wants to know about
+ * before it asks for a database migration or a boot check.
+ */
+export interface ConfigurePayload {
+    files: ConfigureFile[];
+    probe: Array<keyof ConnectServices>;
+}
+export interface ConfigureFile {
+    /** Target-root-relative, e.g. `.env` or `sources/web/.env`. */
+    path: string;
+    /** The managed block's content. Written between the connector's own markers. */
+    content: string;
+}
+export interface ConfigureResult {
+    written: string[];
+    /**
+     * Keys the target still needs and the user must supply — a local database URL, say.
+     *
+     * Read exactly like the publisher's configure acknowledgement: a key with an EMPTY value counts
+     * as missing, because a push that ran before a secret existed leaves one behind.
+     */
+    missing: string[];
+    services: ConnectServices;
+}
+/**
+ * One model call, handed to the parent agent.
+ *
+ * It carries everything a fresh subagent needs and nothing it does not: the persona as a system
+ * prompt, the conversation so far, and the shape the answer must take. There is no platform
+ * vocabulary in it — no pipeline, no step, no internal role semantics beyond a name and a tier —
+ * because it is read by a model the platform does not own.
+ */
+export interface ModelTask {
+    id: string;
+    projectId: string;
+    /** The platform role that asked. Informational; the tier is what decides the model. */
+    role: string;
+    tier: ModelTier;
+    /** Which attempt this is. > 0 means a previous answer was refused; `feedback` says why. */
+    attempt: number;
+    mode: ModelTaskMode;
+    system?: string;
+    messages: ModelTaskMessage[];
+    /** `Tools` mode: what the subagent may call. JSON Schema per tool. */
+    tools?: ModelTaskTool[];
+    /** `Tools` mode: force one tool, or leave the choice open. */
+    toolChoice?: ModelTaskToolChoice;
+    /** `Json` mode: the schema the single returned object must satisfy. */
+    outputSchema?: Record<string, unknown>;
+    /** A soft cap, stated so a parent can size its own call. */
+    maxOutputChars?: number;
+    /** Present on a retry: what was wrong with the previous answer. */
+    feedback?: string;
+    expiresAt: string;
+}
+export interface ModelTaskMessage {
+    role: ModelTaskRole;
+    content: string;
+    /** Assistant messages that called tools. */
+    toolCalls?: ModelTaskToolCall[];
+    /** Tool messages answer one call. */
+    toolCallId?: string;
+    /** Tool messages name the tool they answer. */
+    name?: string;
+}
+export interface ModelTaskTool {
+    name: string;
+    description?: string;
+    /** JSON Schema for the tool's arguments. */
+    parameters: Record<string, unknown>;
+}
+export type ModelTaskToolChoice = 'auto' | 'none' | {
+    name: string;
+};
+export interface ModelTaskToolCall {
+    id?: string;
+    name: string;
+    args: Record<string, unknown>;
+}
+/** What the parent's subagent produced. */
+export interface ModelTaskResult {
+    taskId: string;
+    kind: ModelTaskResultKind;
+    text?: string;
+    json?: unknown;
+    toolCalls?: ModelTaskToolCall[];
+    /** Why the parent could not answer. Treated as a malformed answer and retried. */
+    error?: string;
+    /** What the parent spent. Recorded for the trace; it costs the platform nothing. */
+    usage?: ModelTaskUsage;
+    /** What the parent actually ran. Display only. */
+    model?: string;
+}
+export interface ModelTaskUsage {
+    inputTokens?: number;
+    outputTokens?: number;
+}
+/** One option a {@link ConnectInquiryKind.Choice} question offers. */
+export interface ConnectInquiryOption {
+    value: string;
+    label: string;
+    description?: string;
+}
+/**
+ * One question put to the person the connector is working for.
+ *
+ * It carries where it came from — the run and the step — because an answer is recorded
+ * against the run that asked and re-read when that run resumes. `expiresAt` is what makes an
+ * unanswered question fail its step instead of parking a project lock forever.
+ */
+export interface InquiryPayload {
+    id: string;
+    projectId: string;
+    runId?: string;
+    /** The pipeline step that asked, so a resumed run can match the answer to the place it belongs. */
+    step?: string;
+    kind: ConnectInquiryKind;
+    question: string;
+    /** What the asker already knows, so the person is not asked to go and find it out. */
+    context?: string;
+    options?: ConnectInquiryOption[];
+    multiple?: boolean;
+    /** Whether a choice question also accepts text the options do not cover. */
+    allowText?: boolean;
+    /** What the asker will assume if nobody answers. Recorded as an assumption when it is used. */
+    default?: string | string[];
+    expiresAt: string;
+}
+/**
+ * The answer to one question.
+ *
+ * `declined` is a real answer and not an absence: it says a person saw the question and chose not
+ * to decide, which the asker records as an assumption rather than waiting out the timeout.
+ */
+export interface InquiryAnswerPayload {
+    inquiryId: string;
+    value?: string | string[];
+    text?: string;
+    declined?: boolean;
+}
+//# sourceMappingURL=ops.d.ts.map

package/build/connect/ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops.d.ts","sourceRoot":"","sources":["../../src/connect/ops.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EACV,kBAAkB,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,mBAAmB,EACzF,aAAa,EAAE,SAAS,EACzB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,aAAa,CAAA;IACnB,OAAO,EAAE,kBAAkB,GAAG,SAAS,GAAG,gBAAgB,GAAG,cAAc,CAAA;IAC3E,SAAS,EAAE,MAAM,CAAA;IACjB,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAA;IAClB,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,KAAK,CAAC,EAAE,cAAc,CAAA;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,kBAAkB,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,aAAa,EAAE,CAAA;IACtB,KAAK,EAAE,KAAK,CAAC,MAAM,eAAe,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,QAAQ,EAAE,eAAe,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,SAAS,CAAA;IACf,2FAA2F;IAC3F,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,aAAa,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,gBAAgB,EAAE,CAAA;IAC5B,sEAAsE;IACtE,KAAK,CAAC,EAAE,aAAa,EAAE,CAAA;IACvB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,mBAAmB,CAAA;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACtC,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,aAAa,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,4CAA4C;IAC5C,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAA;IAC/B,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpE,MAAM,WAAW,iBAAiB;IAChC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC9B;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,mBAAmB,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAA;IAC/B,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oFAAoF;IACpF,KAAK,CAAC,EAAE,cAAc,CAAA;IACtB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mGAAmG;IACnG,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,kBAAkB,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAA;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB"}

package/build/connect/ops.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ops.js.map

package/build/connect/ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops.js","sourceRoot":"","sources":["../../src/connect/ops.ts"],"names":[],"mappings":""}