@sixb/core 0.1.6 → 0.1.8

package/src/agents/execution.ts

@@ -1,13 +1,14 @@
 import { principalsEqual, SYSTEM_PRINCIPAL } from "../auth"
-import { assertAuthorized, isAllowed } from "../authorization"
+import { assertAuthorized, isRuntimeAllowed } from "../authorization"
 import type { AuthorizablePrincipal, ExecutionContext } from "../execution"
+import { resolveRuntimeAuthorizationForProject } from "../execution/authorization"
+import type { ModelCatalog } from "../models"
 import { resolveExecutionCosts } from "../runtime/ai-cost"
 import { resolveExecutionUsage } from "../runtime/ai-usage"
 import type { SixbRuntimeContext } from "../runtime/types"
-import type { SecurityDefinitionCatalog } from "../security"
 import type {
-  AgentRunRecord,
   AgentThreadRecord,
+  ConversationAgentRunRecord,
   ListAgentRunsInput,
   ListAgentRunsResult,
   ListAgentThreadsInput,
@@ -23,17 +24,17 @@ import {
   requestAgentRun,
   retryAgentRun,
 } from "./request"
-import type { AgentDefinition } from "./types"
+import { assertNoAgentSelector } from "./retired-config"
+import type { AgentDescriptor } from "./types"
 
 export type ExecutionAgentRequestInput = Omit<RequestAgentRunInput, "principal">
 export type ListExecutionAgentThreadsInput = Omit<
   ListAgentThreadsInput,
-  "projectId" | "agentIds" | "ownerPrincipal"
+  "projectId" | "ownerPrincipal"
 >
 
 export interface CreateExecutionAgentThreadInput {
   readonly id?: string
-  readonly agentId: string
   readonly title?: string
 }
 
@@ -54,7 +55,7 @@ export interface AgentRunsRuntime {
 }
 
 /** Execution-facing run view with provenance resolved from the immutable execution ledger. */
-export interface AgentRunView extends AgentRunRecord {
+export interface AgentRunView extends ConversationAgentRunRecord {
   readonly requestedBy?: AuthorizablePrincipal
   /** Derived from the model-call ledger; never persisted on the Agent run row. */
   readonly usage?: AiModelCallUsage
@@ -70,49 +71,55 @@ export interface ExecutionAgentRunResult extends Omit<RequestAgentRunResult, "ru
   readonly run: AgentRunView
 }
 
-export interface AgentsRuntime {
-  list(): readonly AgentDefinition[]
-  getById(agentId: string): AgentDefinition | null
+export interface AgentRuntime {
+  /** Null when no language models are configured or the caller cannot run the Agent. */
+  get(): AgentDescriptor | null
   readonly threads: AgentThreadsRuntime
   readonly runs: AgentRunsRuntime
 }
 
-export function createAgentsRuntime(
+export function createAgentRuntime(
   runtime: SixbRuntimeContext,
   execution: ExecutionContext,
-  source: Pick<AgentsRuntime, "list" | "getById">,
-  security: SecurityDefinitionCatalog
-): AgentsRuntime {
-  const principal = runtime.authorization?.principal ?? SYSTEM_PRINCIPAL
-  const allowed = (agentId: string) =>
-    isAllowed(runtime.authorization, { kind: "agent.run", agentId })
+  models?: ModelCatalog
+): AgentRuntime {
+  const authority = resolveRuntimeAuthorizationForProject(runtime)
+  const principal = authority.type === "principal" ? authority.context.principal : SYSTEM_PRINCIPAL
+  const allowed = () => isRuntimeAllowed(runtime, { kind: "agent.run" })
 
-  const getThread = async (threadId: string) => {
+  const getVisibleThreadRecord = async (threadId: string): Promise<AgentThreadRecord | null> => {
+    if (authority.type === "denied" || authority.type === "delegated") return null
     const thread =
       (await runtime.storage.agents?.threads.getById({
         projectId: runtime.projectId,
         id: threadId,
       })) ?? null
-    if (!thread || !allowed(thread.agentId)) return null
-    return runtime.authorization && !principalsEqual(principal, thread.ownerPrincipal)
+    if (!thread || !allowed()) return null
+    return authority.type === "principal" && !principalsEqual(principal, thread.ownerPrincipal)
       ? null
       : thread
   }
 
-  const getAgent = (agentId: string) => {
-    const agent = source.getById(agentId)
-    return agent && allowed(agentId) ? agent : null
+  const getAgent = (): AgentDescriptor | null => {
+    if (authority.type === "denied" || authority.type === "delegated") return null
+    const model = models?.language.default
+    if (!model || !allowed()) return null
+    return {
+      name: "Sixb",
+      model: { provider: model.provider, modelId: model.modelId },
+    }
   }
 
-  const getVisibleRunRecord = async (runId: string): Promise<AgentRunRecord | null> => {
+  const getVisibleRunRecord = async (runId: string): Promise<ConversationAgentRunRecord | null> => {
+    if (authority.type === "denied" || authority.type === "delegated") return null
     const run =
       (await runtime.storage.agents?.runs.getById({
         projectId: runtime.projectId,
         id: runId,
       })) ?? null
-    if (!run) return null
-    const thread = await getThread(run.threadId)
-    return thread?.agentId === run.agentId ? run : null
+    if (!run || run.kind !== "conversation") return null
+    const thread = await getVisibleThreadRecord(run.threadId)
+    return thread ? run : null
   }
 
   const getRun = async (runId: string): Promise<AgentRunView | null> => {
@@ -121,13 +128,13 @@ export function createAgentsRuntime(
   }
 
   return {
-    list: () => source.list().filter((agent) => allowed(agent.id)),
-    getById: getAgent,
+    get: getAgent,
     threads: {
       create: async (input) => {
-        const agent = getAgent(input.agentId)
+        assertNoAgentSelector(input)
+        const agent = getAgent()
         if (!agent) {
-          throw new AgentRequestError("agent_not_found", `[Sixb] Unknown agent '${input.agentId}'.`)
+          throw new AgentRequestError("agent_not_found", "[Sixb] The project Agent is unavailable.")
         }
         const storage = runtime.storage.agents
         if (!storage) {
@@ -139,39 +146,40 @@ export function createAgentsRuntime(
         return storage.threads.create({
           id: input.id ?? createAgentThreadId(),
           projectId: runtime.projectId,
-          agentId: agent.id,
           ownerPrincipal: principal,
           ...(input.title === undefined ? {} : { title: input.title }),
         })
       },
-      getById: getThread,
-      list: (input = {}) => {
+      getById: getVisibleThreadRecord,
+      list: async (input = {}) => {
+        assertNoAgentSelector(input)
+        if (authority.type === "denied" || authority.type === "delegated") {
+          return { threads: [], hasMore: false, total: 0 }
+        }
         const storage = runtime.storage.agents
-        if (!storage) return Promise.resolve({ threads: [], hasMore: false, total: 0 })
+        if (!storage || !allowed()) return { threads: [], hasMore: false, total: 0 }
         return storage.threads.list({
-          projectId: runtime.projectId,
           ...input,
-          agentIds: runtime.authorization
-            ? [...runtime.authorization.grants["run:agent"]]
-            : undefined,
-          ownerPrincipal: runtime.authorization ? principal : undefined,
+          projectId: runtime.projectId,
+          ownerPrincipal: authority.type === "principal" ? principal : undefined,
         })
       },
     },
     runs: {
       request: async (input) => {
-        const agent = source.getById(input.agentId)
+        assertNoAgentSelector(input)
+        const agent = getAgent()
         if (!agent) {
-          throw new AgentRequestError("agent_not_found", `[Sixb] Unknown agent '${input.agentId}'.`)
+          throw new AgentRequestError("agent_not_found", "[Sixb] The project Agent is unavailable.")
         }
-        assertAuthorized(runtime, { kind: "agent.run", agentId: agent.id })
-        if (input.threadId && !(await getThread(input.threadId))) {
+        assertAuthorized(runtime, { kind: "agent.run" })
+        if (input.threadId && !(await getVisibleThreadRecord(input.threadId))) {
           throw new AgentRequestError(
             "thread_not_found",
             `[Sixb] Agent thread '${input.threadId}' not found.`
           )
         }
-        const result = await requestAgentRun(runtime, execution, security, agent, {
+        const result = await requestAgentRun(runtime, execution, models?.language, {
           ...input,
           principal,
         })
@@ -182,28 +190,29 @@ export function createAgentsRuntime(
         if (!failedRun) {
           throw new AgentRequestError("run_not_found", `[Sixb] Agent run '${runId}' was not found.`)
         }
-        const agent = getAgent(failedRun.agentId)
+        const agent = getAgent()
         if (!agent) {
-          throw new AgentRequestError(
-            "agent_not_found",
-            `[Sixb] Unknown agent '${failedRun.agentId}'.`
-          )
+          throw new AgentRequestError("agent_not_found", "[Sixb] The project Agent is unavailable.")
         }
-        const result = await retryAgentRun(runtime, execution, security, agent, failedRun)
+        const result = await retryAgentRun(runtime, execution, models?.language, failedRun)
         return { ...result, run: await attachRunView(runtime, result.run) }
       },
       getById: getRun,
       listForThread: async (threadId, input = {}) => {
+        assertNoAgentSelector(input)
         const storage = runtime.storage.agents
-        if (!storage || !(await getThread(threadId))) return null
+        if (!storage || !(await getVisibleThreadRecord(threadId))) return null
         const result = await storage.runs.list({
-          projectId: runtime.projectId,
           ...input,
+          projectId: runtime.projectId,
           threadId,
         })
         return {
           ...result,
-          runs: await attachRunViews(runtime, result.runs),
+          runs: await attachRunViews(
+            runtime,
+            result.runs.filter((run) => run.kind === "conversation")
+          ),
         }
       },
     },
@@ -212,7 +221,7 @@ export function createAgentsRuntime(
 
 async function attachRunView(
   runtime: SixbRuntimeContext,
-  run: AgentRunRecord
+  run: ConversationAgentRunRecord
 ): Promise<AgentRunView> {
   const [view] = await attachRunViews(runtime, [run])
   if (!view) throw new Error(`[Sixb] Could not build Agent run '${run.id}' view.`)
@@ -221,7 +230,7 @@ async function attachRunView(
 
 async function attachRunViews(
   runtime: SixbRuntimeContext,
-  runs: readonly AgentRunRecord[]
+  runs: readonly ConversationAgentRunRecord[]
 ): Promise<readonly AgentRunView[]> {
   const executionIds = runs.map((run) => run.executionId)
   const [executions, usages, costs] = await Promise.all([

package/src/agents/identity.ts

@@ -0,0 +1,4 @@
+/** Deterministic managed service-account id owned by one framework Agent actor. */
+export function agentServiceAccountId(actorId: string): string {
+  return `svc_agent_${actorId}`
+}

package/src/agents/ids.ts

@@ -1,4 +1,4 @@
-import { randomUUID } from "node:crypto"
+import { createHash, randomUUID } from "node:crypto"
 
 /**
  * Id helpers for agent persistence. Threads, the run id, and the user (trigger) message are minted
@@ -14,6 +14,21 @@ export function createAgentRunId(): string {
   return `agt_run_${randomUUID()}`
 }
 
+/** One stable child identity per parent-selected spawn key. */
+export function createSubagentRunId(parentRunId: string, spawnKey: string): string {
+  const digest = createHash("sha256")
+    .update(parentRunId)
+    .update("\0")
+    .update(spawnKey)
+    .digest("hex")
+  return `agt_run_child_${digest}`
+}
+
+/** Stable execution identity paired with a deterministic child run. */
+export function createSubagentExecutionId(runId: string): string {
+  return `exec_${runId}`
+}
+
 export function createAgentMessageId(): string {
   return `agt_msg_${randomUUID()}`
 }

package/src/agents/index.ts

@@ -1,28 +1,10 @@
 export type {
   AgentFileDataProjection,
   AgentFileDataResolverInput,
-  AgentInboundUiMessage,
-  AgentInboundUiMessagePart,
-  AgentModelAssistantPart,
-  AgentModelFilePart,
-  AgentModelMessage,
-  AgentModelReasoningPart,
-  AgentModelTextPart,
-  AgentModelToolCallPart,
-  AgentModelToolOutput,
-  AgentModelToolResultPart,
   AgentToolResultFileResolverInput,
-  AgentUiMessage,
-  AgentUiMessagePart,
-  AgentUiToolPart,
   ToModelMessagesOptions,
 } from "./adapters"
-export {
-  fromAiSdk,
-  omitUndefinedObjectProperties,
-  toModelMessages,
-  toUiMessage,
-} from "./adapters"
+export { toModelMessages } from "./adapters"
 export type { AgentApiGatewayCapabilityInput, AgentApiRoute } from "./api-gateway"
 export {
   AGENT_API_GATEWAY_PREFIX,
@@ -31,13 +13,14 @@ export {
   isAllowedAgentApiRequest,
   isValidAgentApiGatewayCapability,
 } from "./api-gateway"
-export type { AgentExecutionIdentity } from "./authority"
+export type { AgentExecutionAuthorization, AgentExecutionIdentity } from "./authority"
 export {
   agentServiceAccountId,
-  ensureAgentExecutionIdentity,
+  ensureManagedAgentExecutionIdentity,
   resolveAgentExecutionAuthorization,
+  resolveInheritedAgentExecutionAuthorization,
 } from "./authority"
-export { defineAgent, defineAgentTool } from "./builders"
+export { defineAgentTool } from "./builders"
 export type {
   AgentContextEntryInput,
   AgentContextInput,
@@ -78,11 +61,12 @@ export type {
 export {
   agentRunQueueJobId,
   dispatchQueuedAgentRuns,
+  dispatchQueuedSubagentRuns,
+  subagentRunQueueJobId,
   workflowAgentNodeQueueJobId,
 } from "./dispatch"
 export {
   AgentDefinitionError,
-  AgentMessageAdapterError,
   AgentRequestError,
   type AgentRequestErrorCode,
   AgentToolPublicError,
@@ -94,6 +78,8 @@ export {
   createAgentRunExecutionToken,
   createAgentRunId,
   createAgentThreadId,
+  createSubagentExecutionId,
+  createSubagentRunId,
 } from "./ids"
 export {
   AGENT_MESSAGE_CONTENT_VERSION,
@@ -102,12 +88,21 @@ export {
   type AgentMessagePart,
   type AgentMessagePartType,
   type AgentMessageRole,
+  type AgentProviderStatePart,
   type AgentReasoningPart,
   type AgentStepStartPart,
   type AgentTextPart,
   type AgentToolCallPart,
   type AgentToolCallState,
 } from "./message"
+export type {
+  ModelLoopResult,
+  PrepareModelStepInput,
+  PrepareModelStepResult,
+  RunModelLoopInput,
+} from "./model-loop"
+export { runModelLoop } from "./model-loop"
+export { agent } from "./reference"
 export {
   type RequestAgentRunInput,
   type RequestAgentRunResult,
@@ -143,12 +138,13 @@ export type {
   ProjectAgentThreadModelContextInput,
 } from "./thread-context-projection"
 export { projectAgentThreadModelContext } from "./thread-context-projection"
+export type { AgentToolCatalog } from "./tool-catalog"
 export { isAgentToolResult } from "./tool-result"
 export type {
-  AgentContextConfig,
-  AgentDefinition,
-  AgentLoopConfig,
+  AgentDescriptor,
+  AgentReasoning,
   AgentReasoningLevel,
+  AgentReference,
   AgentToolArtifact,
   AgentToolArtifactPutInput,
   AgentToolArtifacts,
@@ -165,16 +161,13 @@ export type {
   AgentToolRunContext,
   AgentToolRunInfo,
   AgentToolTextContent,
-  DefineAgentConfig,
+  AgentUsageReference,
   InferAgentToolInput,
   InferAgentToolInputSchema,
 } from "./types"
 export { AGENT_REASONING_LEVELS } from "./types"
 export {
   AGENT_RESERVED_TOOL_NAMES,
-  isAgentDefinition,
   isAgentToolDefinition,
-  validateAgentGroupReferences,
-  validateAgentToolsAtStartup,
   validateAndNormalizeAgentToolInput,
 } from "./validation"

package/src/agents/message.ts

@@ -1,5 +1,6 @@
 import type { FileRef } from "../blob-storage"
 import type { JsonValue } from "../json"
+import type { ProviderData } from "../models"
 import type { AgentContextPart } from "./context"
 
 /**
@@ -8,12 +9,11 @@ import type { AgentContextPart } from "./context"
  * self-describing wrapper: the storage row owns the message's identity, and `contentVersion` (a
  * column) versions the parts shape so it can be migrated.
  *
- * The part union is intentionally focused on what V1 agents actually produce (text, reasoning, step
- * boundaries, tool calls). It is extensible: adding a part kind later is non-breaking. The adapter
- * `fromAiSdk` is total — it throws on any part it cannot model rather than dropping it silently,
- * which both prevents data loss and signals exactly when the union must grow.
+ * The part union is intentionally focused on what agent runs actually produce (text, reasoning, step
+ * boundaries, tool calls). The model loop validates and normalizes output before its steps are
+ * projected into this union; storage validates the durable write contract independently.
  */
-export const AGENT_MESSAGE_CONTENT_VERSION = 1 as const
+export const AGENT_MESSAGE_CONTENT_VERSION = 2 as const
 
 export type AgentMessageRole = "system" | "user" | "assistant"
 
@@ -22,7 +22,7 @@ export interface AgentTextPart {
   readonly type: "text"
   readonly text: string
   /** Provider passthrough (kept because some providers require it on the next turn). */
-  readonly providerMetadata?: JsonValue
+  readonly providerMetadata?: ProviderData
 }
 
 /**
@@ -32,7 +32,7 @@ export interface AgentTextPart {
 export interface AgentReasoningPart {
   readonly type: "reasoning"
   readonly text: string
-  readonly providerMetadata?: JsonValue
+  readonly providerMetadata?: ProviderData
 }
 
 /** A step boundary between assistant loop iterations. */
@@ -45,19 +45,26 @@ export interface AgentFilePart {
   readonly type: "file"
   readonly fileRef: FileRef
   /** Provider passthrough for future model-specific file handling. */
-  readonly providerMetadata?: JsonValue
+  readonly providerMetadata?: ProviderData
 }
 
 interface AgentToolCallBase {
   readonly type: "tool-call"
   readonly toolCallId: string
   readonly toolName: string
-  /** `true` when reconstructed from an SDK `dynamic-tool` part (vs a static `tool-${name}` part). */
+  /** `true` when the model identifies the call as a dynamic tool. */
   readonly dynamic?: boolean
-  /** `true` when the provider executed the tool inline (steers model projection). V1 = `false`. */
+  /** `true` when the provider executed the tool inline (steers model projection). */
   readonly providerExecuted?: boolean
   readonly input: JsonValue
-  readonly providerMetadata?: JsonValue
+  readonly providerMetadata?: ProviderData
+}
+
+/** Ordered, hidden provider state required to replay a model response losslessly. */
+export interface AgentProviderStatePart {
+  readonly type: "provider-state"
+  readonly providerId: string
+  readonly data: JsonValue
 }
 
 /**
@@ -78,6 +85,7 @@ export type AgentMessagePart =
   | AgentFilePart
   | AgentContextPart
   | AgentToolCallPart
+  | AgentProviderStatePart
 
 export type AgentMessagePartType = AgentMessagePart["type"]
 export type AgentToolCallState = AgentToolCallPart["state"]
@@ -86,6 +94,6 @@ export type AgentToolCallState = AgentToolCallPart["state"]
 export interface AgentMessage {
   readonly role: AgentMessageRole
   readonly parts: readonly AgentMessagePart[]
-  /** Message-level metadata (mirrors `UIMessage.metadata`). */
+  /** Optional JSON metadata associated with the message. */
   readonly metadata?: JsonValue
 }