@stackbone/sdk 0.1.0-alpha.5 → 0.1.0-alpha.7

package/index.js

@@ -3,7 +3,7 @@ export { z } from 'zod';
 import { drizzle } from 'drizzle-orm/postgres-js';
 import postgres from 'postgres';
 import { extractText } from 'unpdf';
-import { createHash } from 'crypto';
+import { createHash, createHmac } from 'crypto';
 import OpenAI from 'openai';
 import { PutObjectCommand, GetObjectCommand, ListObjectsV2Command, DeleteObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
@@ -2366,7 +2366,7 @@ var require_luxon = __commonJS({
         return new Formatter2(locale, opts);
       }
       static parseFormat(fmt) {
-        let current = null, currentFull = "", bracketed = false;
+        let current3 = null, currentFull = "", bracketed = false;
         const splits = [];
         for (let i2 = 0; i2 < fmt.length; i2++) {
           const c2 = fmt.charAt(i2);
@@ -2377,12 +2377,12 @@ var require_luxon = __commonJS({
                 val: currentFull === "" ? "'" : currentFull
               });
             }
-            current = null;
+            current3 = null;
             currentFull = "";
             bracketed = !bracketed;
           } else if (bracketed) {
             currentFull += c2;
-          } else if (c2 === current) {
+          } else if (c2 === current3) {
             currentFull += c2;
           } else {
             if (currentFull.length > 0) {
@@ -2392,7 +2392,7 @@ var require_luxon = __commonJS({
               });
             }
             currentFull = c2;
-            current = c2;
+            current3 = c2;
           }
         }
         if (currentFull.length > 0) {
@@ -3122,28 +3122,28 @@ var require_luxon = __commonJS({
     __name(durationToMillis, "durationToMillis");
     function normalizeValues(matrix, vals) {
       const factor = durationToMillis(matrix, vals) < 0 ? -1 : 1;
-      orderedUnits$1.reduceRight((previous, current) => {
-        if (!isUndefined(vals[current])) {
+      orderedUnits$1.reduceRight((previous, current3) => {
+        if (!isUndefined(vals[current3])) {
           if (previous) {
             const previousVal = vals[previous] * factor;
-            const conv = matrix[current][previous];
+            const conv = matrix[current3][previous];
             const rollUp = Math.floor(previousVal / conv);
-            vals[current] += rollUp * factor;
+            vals[current3] += rollUp * factor;
             vals[previous] -= rollUp * conv * factor;
           }
-          return current;
+          return current3;
         } else {
           return previous;
         }
       }, null);
-      orderedUnits$1.reduce((previous, current) => {
-        if (!isUndefined(vals[current])) {
+      orderedUnits$1.reduce((previous, current3) => {
+        if (!isUndefined(vals[current3])) {
           if (previous) {
             const fraction = vals[previous] % 1;
             vals[previous] -= fraction;
-            vals[current] += fraction * matrix[previous][current];
+            vals[current3] += fraction * matrix[previous][current3];
           }
-          return current;
+          return current3;
         } else {
           return previous;
         }
@@ -4256,21 +4256,21 @@ var require_luxon = __commonJS({
       * @return {Array}
       */
       static merge(intervals) {
-        const [found, final] = intervals.sort((a2, b2) => a2.s - b2.s).reduce(([sofar, current], item) => {
-          if (!current) {
+        const [found, final] = intervals.sort((a2, b2) => a2.s - b2.s).reduce(([sofar, current3], item) => {
+          if (!current3) {
             return [
               sofar,
               item
             ];
-          } else if (current.overlaps(item) || current.abutsStart(item)) {
+          } else if (current3.overlaps(item) || current3.abutsStart(item)) {
             return [
               sofar,
-              current.union(item)
+              current3.union(item)
             ];
           } else {
             return [
               sofar.concat([
-                current
+                current3
               ]),
               item
             ];
@@ -5202,7 +5202,7 @@ var require_luxon = __commonJS({
     }
     __name(possiblyCachedLocalWeekData, "possiblyCachedLocalWeekData");
     function clone(inst, alts) {
-      const current = {
+      const current3 = {
         ts: inst.ts,
         zone: inst.zone,
         c: inst.c,
@@ -5211,9 +5211,9 @@ var require_luxon = __commonJS({
         invalid: inst.invalid
       };
       return new DateTime({
-        ...current,
+        ...current3,
         ...alts,
-        old: current
+        old: current3
       });
     }
     __name(clone, "clone");
@@ -8218,7 +8218,7 @@ var require_expression = __commonJS({
       return schedule;
     }, "prev");
     CronExpression.prototype.hasNext = function() {
-      var current = this._currentDate;
+      var current3 = this._currentDate;
       var hasIterated = this._hasIterated;
       try {
         this._findSchedule();
@@ -8226,12 +8226,12 @@ var require_expression = __commonJS({
       } catch (err3) {
         return false;
       } finally {
-        this._currentDate = current;
+        this._currentDate = current3;
         this._hasIterated = hasIterated;
       }
     };
     CronExpression.prototype.hasPrev = function() {
-      var current = this._currentDate;
+      var current3 = this._currentDate;
       var hasIterated = this._hasIterated;
       try {
         this._findSchedule(true);
@@ -8239,7 +8239,7 @@ var require_expression = __commonJS({
       } catch (err3) {
         return false;
       } finally {
-        this._currentDate = current;
+        this._currentDate = current3;
         this._hasIterated = hasIterated;
       }
     };
@@ -8746,9 +8746,11 @@ var CAPABILITIES = [
   "prompts.basic",
   // `connections.actions`: the agent → control-plane connectors proxy
   // (feature connectors-connections-automations). Role-based naming per repo
-  // convention. `client.connections.list()` / `.invoke(connector, action, args)`
+  // convention. `client.legacyConnections.list()` / `.invoke(connector, action, args)`
   // run against the proxy; the agent container never sees a credential. The
-  // v13 bump reintroduces this capability after v12 removed it.
+  // v13 bump reintroduces this capability after v12 removed it. The capability
+  // string stays `connections.actions` (it names the wire domain, not the
+  // renamed SDK accessor).
   "connections.actions"
 ];
 var MODULE_CAPABILITIES = {
@@ -8765,10 +8767,11 @@ var MODULE_CAPABILITIES = {
   // row is still declared here because the table is shared with the cloud
   // contract / Studio capability advertisement.
   prompts: "prompts.basic",
-  // `client.connections` is a control-plane PROXY surface (like queues): the
-  // agent POSTs to `/api/v1/agent/connections/*` with its agent JWT and the
+  // `client.legacyConnections` is a control-plane PROXY surface (like queues):
+  // the agent POSTs to `/api/v1/agent/connections/*` with its agent JWT and the
   // control plane runs the connector action with credentials resolved in
-  // memory. Gated against `connections.actions`.
+  // memory. Gated against `connections.actions`. The map key stays `connections`
+  // (it is the module id shared with the cloud contract, not the SDK accessor).
   connections: "connections.actions"
 };
 var contractBuildNameSchema = z.enum([
@@ -8870,7 +8873,8 @@ var journalTerminalStatusSchema = z.enum([
 ]);
 var journalJobStatusSchema = z.enum([
   ...journalTerminalStatusSchema.options,
-  "running"
+  "running",
+  "lost"
 ]);
 var jobStatusSchema = z.enum([
   ...bullmqJobStatusSchema.options,
@@ -8972,6 +8976,27 @@ z.object({
   queue: z.string(),
   status: jobStatusSchema
 });
+z.object({
+  items: z.array(bullmqJobSchema)
+});
+z.object({
+  purged: z.number().int().nonnegative()
+});
+z.object({
+  payload: jsonObject(),
+  retries: z.number().int().nonnegative().optional(),
+  delay: z.number().int().nonnegative().optional()
+});
+z.object({
+  message_id: z.string(),
+  queue: queueNameSchema
+});
+z.object({
+  name: queueNameSchema
+});
+z.object({
+  limit: z.coerce.number().int().min(1).max(50).default(10)
+});
 
 // ../shared/validators/src/lib/agents/queue-jobs.ts
 var MAX_JOB_ATTEMPTS = 20;
@@ -9165,9 +9190,9 @@ function createContractStore(resolved = resolveConfig({})) {
   function peek(baseUrl) {
     if (!baseUrl || baseUrl.trim() === "") return null;
     const key = normaliseBaseUrl(baseUrl);
-    const cached = lastResolved.get(key);
-    if (!cached || cached.error) return null;
-    return cached.data;
+    const cached2 = lastResolved.get(key);
+    if (!cached2 || cached2.error) return null;
+    return cached2.data;
   }
   __name(peek, "peek");
   function gatingEnabled() {
@@ -9433,9 +9458,9 @@ var HttpClient = class {
     if (jwt && !requestHeaders.has("Authorization")) {
       requestHeaders.set("Authorization", `Bearer ${jwt}`);
     }
-    const installationId = resolveInstallationId(this.resolved);
-    if (installationId && !requestHeaders.has("X-Stackbone-Installation-Id")) {
-      requestHeaders.set("X-Stackbone-Installation-Id", installationId);
+    const installationId2 = resolveInstallationId(this.resolved);
+    if (installationId2 && !requestHeaders.has("X-Stackbone-Installation-Id")) {
+      requestHeaders.set("X-Stackbone-Installation-Id", installationId2);
     }
     const body = serializeBody(method, options.body, requestHeaders);
     let lastError = null;
@@ -9930,10 +9955,10 @@ var ApprovalFacade = class {
     const fallback = onTimeoutToFallback(options.onTimeout);
     const callbackUrl = options.onDecide;
     try {
-      const rows = await sql.data`
+      const rows = await this._getDatabase().runShared((db) => db`
         INSERT INTO stackbone_platform.approvals (
               topic, payload, callback_url, idempotency_key,
-              fallback, metadata, timeout_at
+              fallback, metadata, run_id, requested_by_step_id, timeout_at
           ) VALUES (
               ${options.topic},
               ${JSON.stringify(options.payload ?? {})}::jsonb,
@@ -9941,6 +9966,8 @@ var ApprovalFacade = class {
               ${options.idempotencyKey ?? null},
               ${fallback},
               ${JSON.stringify(options.metadata ?? {})}::jsonb,
+              ${options.runId ?? null}::uuid,
+              ${options.requestedByStepId ?? null}::uuid,
               now() + (${timeoutMs}::int * interval '1 millisecond')
           )
           ON CONFLICT (workspace_id, topic, idempotency_key)
@@ -9949,7 +9976,7 @@ var ApprovalFacade = class {
           RETURNING id, callback_url,
                     to_char(created_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') AS created_at,
                     to_char(timeout_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') AS timeout_at
-      `;
+      `);
       const row = rows[0];
       if (!row) {
         return err({
@@ -9984,13 +10011,13 @@ var ApprovalFacade = class {
       const patch = reason ? {
         cancelReason: reason
       } : {};
-      await sql.data`
+      await this._getDatabase().runShared((db) => db`
         UPDATE stackbone_platform.approvals
            SET status = 'cancelled',
                decided_at = now(),
                metadata = metadata || ${JSON.stringify(patch)}::jsonb
          WHERE id = ${approvalId}::uuid AND status = 'pending'
-      `;
+      `);
       return ok(void 0);
     } catch (cause) {
       return err({
@@ -10010,14 +10037,14 @@ var ApprovalFacade = class {
     const sql = this.sql();
     if (sql.error) return err(sql.error);
     try {
-      const rows = await sql.data`
+      const rows = await this._getDatabase().runShared((db) => db`
         SELECT id, topic, status, payload, metadata,
                to_char(created_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') AS created_at,
                to_char(timeout_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') AS timeout_at
           FROM stackbone_platform.approvals
          WHERE id = ${approvalId}::uuid
          LIMIT 1
-      `;
+      `);
       const row = rows[0];
       if (!row) {
         return err({
@@ -10042,7 +10069,7 @@ var ApprovalFacade = class {
     if (sql.error) return err(sql.error);
     const limit = clampLimit(options.limit);
     try {
-      const rows = await sql.data`
+      const rows = await this._getDatabase().runShared((db) => db`
         SELECT id, topic, status, payload, metadata,
                to_char(created_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') AS created_at,
                to_char(timeout_at AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') AS timeout_at
@@ -10051,7 +10078,7 @@ var ApprovalFacade = class {
            AND (${options.topic ?? null}::text IS NULL OR topic = ${options.topic ?? null})
          ORDER BY created_at DESC, id DESC
          LIMIT ${limit}
-      `;
+      `);
       return ok({
         items: rows.map((row) => toRecord(row))
       });
@@ -10173,7 +10200,7 @@ var ConfigFacade = class {
     void this._resolved;
   }
   async get(key) {
-    if (!key.trim()) {
+    if (!String(key).trim()) {
       return err({
         code: "config_invalid_request",
         message: "`key` is required."
@@ -10184,7 +10211,7 @@ var ConfigFacade = class {
     if (!payload.data || !(key in payload.data)) {
       return err({
         code: "config_not_found",
-        message: `Config key \`${key}\` is not set for this agent.`,
+        message: `Config key \`${String(key)}\` is not set for this agent.`,
         meta: {
           key
         }
@@ -10213,13 +10240,24 @@ var ConfigFacade = class {
     }
     return ok(out);
   }
+  /**
+  * Returns the agent's entire config payload as one typed object. An
+  * absent/null `agent_config` row resolves to `ok({})` — an empty config is
+  * "no config set", consistent with the facade reading the singleton row.
+  * Reads stay an unvalidated SELECT (no AJV on the read path).
+  */
+  async getAll() {
+    const payload = await this.loadPayload();
+    if (payload.error) return err(payload.error);
+    return ok(payload.data ?? {});
+  }
   async loadPayload() {
     const sql = this.sql();
     if (sql.error) return err(sql.error);
     try {
-      const rows = await sql.data`
+      const rows = await this._getDatabase().runShared((db) => db`
         SELECT payload FROM stackbone_platform.agent_config WHERE id = 1
-      `;
+      `);
       return ok(rows[0]?.payload ?? null);
     } catch (cause) {
       return err({
@@ -10293,6 +10331,10 @@ function isPoolTerminatedError(error) {
   return typeof code === "string" && POOL_TERMINATED_ERROR_CODES.has(code);
 }
 __name(isPoolTerminatedError, "isPoolTerminatedError");
+function invalidatePoolHandle() {
+  cachedHandle = null;
+}
+__name(invalidatePoolHandle, "invalidatePoolHandle");
 async function runWithColdStartRetry(firstAttempt, retryAttempt) {
   try {
     return await firstAttempt();
@@ -10394,21 +10436,21 @@ function buildProxy(steps, seed, rootCall, gate) {
 }
 __name(buildProxy, "buildProxy");
 function replayChain(seed, steps) {
-  let current = seed;
+  let current3 = seed;
   for (const step of steps) {
-    if (current === null || current === void 0) return current;
+    if (current3 === null || current3 === void 0) return current3;
     if (step.kind === "get") {
-      current = current[step.key];
+      current3 = current3[step.key];
       continue;
     }
-    const parent = current;
+    const parent = current3;
     const fn = parent[step.key];
     if (typeof fn !== "function") {
       throw new TypeError(`[stackbone/sdk] cold-start retry could not replay "${step.key}": not a function on the rebuilt handle`);
     }
-    current = fn.apply(parent, step.args);
+    current3 = fn.apply(parent, step.args);
   }
-  return current;
+  return current3;
 }
 __name(replayChain, "replayChain");
 
@@ -10461,6 +10503,48 @@ var DatabaseModule = class {
   // a half-baked tx. The contract gate fires before the first attempt.
   transaction = /* @__PURE__ */ __name((...args) => withColdStartRetry(() => getDatabaseHandle(this._databaseUrl).transaction(...args), this._gate), "transaction");
   /**
+  * Cross-surface raw-SQL runner carrying the SAME cold-start resilience the
+  * query-builder verbs above get. Sibling agent-local surfaces (`approval`,
+  * `config`, `secrets`, `prompts`) that issue tagged-template queries over the
+  * shared postgres-js `Sql` MUST execute them through this instead of caching
+  * `shared().$client` once and calling it directly. Otherwise a dead pooled
+  * socket — Fly Machines suspending the Machine between invokes, or a
+  * WSL2/Docker localhost relay dropping an idle connection during a long LLM
+  * step — surfaces as an unretried `CONNECTION_ENDED`/`ECONNRESET`. That is
+  * exactly the asymmetry that let `client.approval.request` fail while the
+  * `client.database.insert` right before it recovered.
+  *
+  * `fn` receives a FRESH `$client` on each attempt, so the single retry runs
+  * against the rebuilt pool. Whole-operation granularity is replayed as a
+  * unit — pass a multi-statement `sql.begin(...)` transaction or a helper that
+  * fires several queries and the replay re-runs all of it; postgres-js never
+  * commits a half-applied tx, so that is safe. SQLSTATE application errors
+  * pass straight through without a retry. Like `shared()`/`raw()`, the
+  * contract gate is intentionally NOT consulted here — gating surfaces gate at
+  * their own call sites.
+  */
+  runShared(fn) {
+    return withColdStartRetry(() => fn(getDatabaseHandle(this._databaseUrl).$client));
+  }
+  /**
+  * `Result`-shaped sibling of `runShared` for surfaces whose driver swallows
+  * the dead-socket error into a returned `Result.err.cause` instead of
+  * throwing it — today only `client.rag`, whose `RagPipeline` returns a
+  * `Result` rather than throwing. `attempt` runs once; if it comes back with a
+  * pool-terminated `cause`, the pool is rebuilt and `attempt` replays exactly
+  * once, then its result (success or the fresh error) is returned verbatim.
+  * The `Result` contract is preserved end to end: a still-dead socket on the
+  * replay surfaces as the surface's own `Result.err`, never as a raw throw.
+  */
+  async runSharedResult(attempt) {
+    const first = await attempt();
+    if (!first.error || !isPoolTerminatedError(first.error.cause)) return first;
+    process.stderr.write(`[stackbone/sdk] database cold-start reconnect: rebuilding pool after ${first.error.cause.code ?? "unknown"}
+`);
+    invalidatePoolHandle();
+    return attempt();
+  }
+  /**
   * Canonical accessor for the **shared-handles pattern**. Returns the
   * process-wide Drizzle handle backing `client.database`. Cross-surface
   * SDK consumers (RAG today, memory / queues tomorrow) call this — never
@@ -10562,12 +10646,12 @@ var PromptsFacade = class {
     const sql = this.sql();
     if (sql.error) return err(sql.error);
     try {
-      const head = await fetchHead(sql.data, key);
+      const head = await this._getDatabase().runShared((db) => fetchHead(db, key));
       if (!head) {
         return err(notFound(key));
       }
       if (options?.version !== void 0 && options.version !== head.current_version) {
-        const content = await fetchVersionContent(sql.data, key, options.version);
+        const content = await this._getDatabase().runShared((db) => fetchVersionContent(db, key, options.version));
         if (content === null) {
           return err({
             code: "prompts_not_found",
@@ -10618,7 +10702,7 @@ var PromptsFacade = class {
     const sql = this.sql();
     if (sql.error) return err(sql.error);
     try {
-      const rows = await sql.data`
+      const rows = await this._getDatabase().runShared((db) => db`
         SELECT p.key, p.name, p.description, p.current_version, p.metadata,
                p.created_at, p.updated_at, v.content
           FROM stackbone_platform.prompts p
@@ -10627,7 +10711,7 @@ var PromptsFacade = class {
          WHERE p.deleted_at IS NULL
          ORDER BY p.key
          LIMIT ${limit}
-      `;
+      `);
       return ok({
         items: rows.map((row) => rowToPrompt(row, row.current_version, row.content))
       });
@@ -10654,7 +10738,7 @@ var PromptsFacade = class {
     if (sql.error) return err(sql.error);
     const variables = extractVars(request.template);
     try {
-      const head = await sql.data.begin(async (tx) => {
+      const head = await this._getDatabase().runShared((db) => db.begin(async (tx) => {
         await tx`
           INSERT INTO stackbone_platform.prompts
             (key, name, description, current_version, metadata)
@@ -10682,7 +10766,7 @@ var PromptsFacade = class {
            WHERE p.key = ${request.key}
         `;
         return rows[0];
-      });
+      }));
       if (!head) {
         return err({
           code: "prompts_unavailable",
@@ -10715,7 +10799,7 @@ var PromptsFacade = class {
     const sql = this.sql();
     if (sql.error) return err(sql.error);
     try {
-      const head = await sql.data.begin(async (tx) => {
+      const head = await this._getDatabase().runShared((db) => db.begin(async (tx) => {
         await tx`SELECT pg_advisory_xact_lock(hashtext(${`prompts:${key}`}))`;
         const existing = await tx`
           SELECT p.key, p.name, p.description, p.current_version, p.metadata,
@@ -10726,11 +10810,11 @@ var PromptsFacade = class {
            WHERE p.key = ${key} AND p.deleted_at IS NULL
            LIMIT 1
         `;
-        const current = existing[0];
-        if (!current) return null;
-        let nextVersion = current.current_version;
+        const current3 = existing[0];
+        if (!current3) return null;
+        let nextVersion = current3.current_version;
         if (options.template !== void 0) {
-          nextVersion = current.current_version + 1;
+          nextVersion = current3.current_version + 1;
           const variables = extractVars(options.template);
           await tx`
             INSERT INTO stackbone_platform.prompt_versions
@@ -10744,8 +10828,8 @@ var PromptsFacade = class {
         await tx`
           UPDATE stackbone_platform.prompts
              SET current_version = ${nextVersion},
-                 name = ${options.name ?? current.name},
-                 description = ${options.description !== void 0 ? options.description : current.description},
+                 name = ${options.name ?? current3.name},
+                 description = ${options.description !== void 0 ? options.description : current3.description},
                  metadata = COALESCE(${options.metadata !== void 0 ? JSON.stringify(options.metadata) : null}::jsonb, metadata),
                  updated_at = now()
            WHERE key = ${key}
@@ -10759,7 +10843,7 @@ var PromptsFacade = class {
            WHERE p.key = ${key}
         `;
         return rows[0] ?? null;
-      });
+      }));
       if (head === null) {
         return err(notFound(key));
       }
@@ -10774,12 +10858,12 @@ var PromptsFacade = class {
     const sql = this.sql();
     if (sql.error) return err(sql.error);
     try {
-      const rows = await sql.data`
+      const rows = await this._getDatabase().runShared((db) => db`
         UPDATE stackbone_platform.prompts
            SET deleted_at = now(), updated_at = now()
          WHERE key = ${key} AND deleted_at IS NULL
          RETURNING key
-      `;
+      `);
       const deleted = rows.length;
       if (deleted === 0) {
         return err(notFound(key));
@@ -11167,7 +11251,7 @@ async function createDocument(sql, args) {
     `;
     const insertedDoc = await tx`
       INSERT INTO stackbone_platform.rag_documents (collection_id, source, content_hash, metadata)
-      VALUES (${collectionId}, ${args.source}, ${args.contentHash}, ${tx.json(args.metadata)})
+      VALUES (${collectionId}, ${args.source}, ${args.contentHash}, ${JSON.stringify(args.metadata)}::jsonb)
       RETURNING id
     `;
     const documentId = insertedDoc[0]?.id;
@@ -11863,8 +11947,10 @@ var RagModule = class {
       const sql = this.sql();
       if (sql.error) return err(sql.error);
       try {
-        await sql.data`DROP TABLE IF EXISTS rag_chunks`;
-        await sql.data`DROP TABLE IF EXISTS _rag_meta`;
+        await this._getDatabase().runShared(async (db) => {
+          await db`DROP TABLE IF EXISTS rag_chunks`;
+          await db`DROP TABLE IF EXISTS _rag_meta`;
+        });
         return ok(void 0);
       } catch (cause) {
         return err(toRagError(cause, "Reset failed"));
@@ -11914,13 +12000,15 @@ var RagModule = class {
     }
   }
   async withPipeline(embedder, run) {
-    const pipeline = new RagPipeline({
-      sqlProvider: /* @__PURE__ */ __name(() => this.sql(), "sqlProvider"),
-      ...embedder && {
-        embedder
-      }
+    return this._getDatabase().runSharedResult(async () => {
+      const pipeline = new RagPipeline({
+        sqlProvider: /* @__PURE__ */ __name(() => this.sql(), "sqlProvider"),
+        ...embedder && {
+          embedder
+        }
+      });
+      return await run(pipeline);
     });
-    return await run(pipeline);
   }
 };
 function countChunks(request) {
@@ -15803,12 +15891,12 @@ var SecretsFacade = class {
     if (sql.error) return err(sql.error);
     let rows;
     try {
-      rows = await sql.data`
+      rows = await this._getDatabase().runShared((db) => db`
         SELECT version, nonce, ciphertext
           FROM stackbone_platform.secrets
          WHERE name = ${name}
          LIMIT 1
-      `;
+      `);
     } catch (cause) {
       return err({
         code: "secrets_unavailable",
@@ -15854,11 +15942,11 @@ var SecretsFacade = class {
     if (sql.error) return err(sql.error);
     let rows;
     try {
-      rows = await sql.data`
+      rows = await this._getDatabase().runShared((db) => db`
         SELECT name, version, nonce, ciphertext
           FROM stackbone_platform.secrets
          WHERE name = ANY(${names})
-      `;
+      `);
     } catch (cause) {
       return err({
         code: "secrets_unavailable",
@@ -15922,6 +16010,99 @@ var SecretsFacade = class {
     }
   }
 };
+function agentRegistry() {
+  const raw = process.env["AGENT_URLS"];
+  if (!raw) {
+    throw new Error("AGENT_URLS is not set. The emulator injects it; run this workflow through `stackbone dev`.");
+  }
+  return JSON.parse(raw);
+}
+__name(agentRegistry, "agentRegistry");
+function resolveAgentHost(name) {
+  const registry = agentRegistry();
+  const host = registry[name];
+  if (!host) {
+    throw new Error(`Unknown agent "${name}". Known agents: ${Object.keys(registry).join(", ")}`);
+  }
+  return host;
+}
+__name(resolveAgentHost, "resolveAgentHost");
+function signWorkflowHeaders() {
+  const secret = process.env["HMAC_SECRET"] ?? "";
+  const timestamp = String(Date.now());
+  const signature = createHmac("sha256", secret).update(timestamp).digest("hex");
+  return {
+    "x-stackbone-timestamp": timestamp,
+    "x-stackbone-workflow-signature": signature
+  };
+}
+__name(signWorkflowHeaders, "signWorkflowHeaders");
+
+// src/surfaces/external/agents/lazy-agent.ts
+var EVE_CLIENT_MODULE = "eve/client";
+async function buildEveClient(name) {
+  const host = resolveAgentHost(name);
+  const { Client } = await import(EVE_CLIENT_MODULE);
+  return new Client({
+    host,
+    headers: /* @__PURE__ */ __name(() => signWorkflowHeaders(), "headers")
+  });
+}
+__name(buildEveClient, "buildEveClient");
+function seedSessionState(seed) {
+  if (typeof seed === "string") return {
+    continuationToken: seed,
+    streamIndex: 0
+  };
+  return seed ?? {
+    streamIndex: 0
+  };
+}
+__name(seedSessionState, "seedSessionState");
+function lazyAgentSession(getClient, seed) {
+  const seededState = seedSessionState(seed);
+  let real;
+  let opened;
+  const session = /* @__PURE__ */ __name(() => {
+    real ??= getClient().then((client) => client.session(seed)).then((s2) => {
+      opened = s2;
+      return s2;
+    }).catch((error) => {
+      real = void 0;
+      throw error;
+    });
+    return real;
+  }, "session");
+  return {
+    get state() {
+      return opened ? opened.state : seededState;
+    },
+    async send(input) {
+      return (await session()).send(input);
+    },
+    async *stream(options) {
+      yield* (await session()).stream(options);
+    }
+  };
+}
+__name(lazyAgentSession, "lazyAgentSession");
+function lazyAgent(name) {
+  let client;
+  const getClient = /* @__PURE__ */ __name(() => {
+    client ??= buildEveClient(name).catch((error) => {
+      client = void 0;
+      throw error;
+    });
+    return client;
+  }, "getClient");
+  return {
+    session(state) {
+      return lazyAgentSession(getClient, state);
+    }
+  };
+}
+__name(lazyAgent, "lazyAgent");
+var agent = /* @__PURE__ */ __name((name) => lazyAgent(name), "agent");
 var AiModule = class {
   static {
     __name(this, "AiModule");
@@ -16252,6 +16433,95 @@ function mapApiError(raw, model) {
   };
 }
 __name(mapApiError, "mapApiError");
+var TIMESTAMP_HEADER = "x-stackbone-timestamp";
+var SIGNATURE_HEADER2 = "x-stackbone-workflow-signature";
+function signBrokerHeaders() {
+  const secret = process.env["HMAC_SECRET"] ?? "";
+  const timestamp = String(Date.now());
+  const signature = createHmac("sha256", secret).update(timestamp).digest("hex");
+  return {
+    [TIMESTAMP_HEADER]: timestamp,
+    [SIGNATURE_HEADER2]: signature
+  };
+}
+__name(signBrokerHeaders, "signBrokerHeaders");
+function brokerBaseUrl() {
+  const url = process.env["STACKBONE_API_URL"];
+  if (!url) {
+    throw new Error("STACKBONE_API_URL is not set. The Stackbone runtime injects the broker base URL; run this agent through `stackbone dev`.");
+  }
+  return url.replace(/\/+$/, "");
+}
+__name(brokerBaseUrl, "brokerBaseUrl");
+function installationId() {
+  const id = process.env["STACKBONE_INSTALLATION_ID"];
+  if (!id) {
+    throw new Error("STACKBONE_INSTALLATION_ID is not set. The Stackbone runtime injects it; run this agent through `stackbone dev`.");
+  }
+  return id;
+}
+__name(installationId, "installationId");
+
+// src/surfaces/external/connect/call-connector.ts
+var EXECUTE_PATH = "/api/connect/execute";
+function connectorCallError(code, message) {
+  const error = new Error(message);
+  error.code = code;
+  return error;
+}
+__name(connectorCallError, "connectorCallError");
+function errorFromBody(status, body) {
+  if (body && body.ok === false && body.error && typeof body.error.code === "string") {
+    return connectorCallError(body.error.code, body.error.message ?? `Stackbone Connect broker rejected the call (code "${body.error.code}").`);
+  }
+  return connectorCallError("credential_error", `Stackbone Connect broker responded ${status}.`);
+}
+__name(errorFromBody, "errorFromBody");
+async function callConnector(connector, operation, args, opts) {
+  const principal = opts?.principal ?? {
+    type: "app"
+  };
+  const url = `${brokerBaseUrl()}${EXECUTE_PATH}`;
+  const body = JSON.stringify({
+    connector,
+    operation,
+    args: args ?? {},
+    principal,
+    installationId: installationId()
+  });
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        ...signBrokerHeaders()
+      },
+      body
+    });
+  } catch (cause) {
+    throw connectorCallError("execute_failed", `Stackbone Connect broker is unreachable: ${cause instanceof Error ? cause.message : String(cause)}`);
+  }
+  const parsed = await response.json().catch(() => null);
+  if (!response.ok || parsed && parsed.ok === false) {
+    throw errorFromBody(response.status, parsed ?? null);
+  }
+  if (!parsed || parsed.ok !== true) {
+    throw connectorCallError("invalid_output", "Stackbone Connect broker returned a malformed execute response.");
+  }
+  return parsed.output;
+}
+__name(callConnector, "callConnector");
+var connectorHandle = /* @__PURE__ */ __name((id) => new Proxy(/* @__PURE__ */ Object.create(null), {
+  get(_target, prop) {
+    if (typeof prop !== "string" || prop === "then") return void 0;
+    if (prop === "call") {
+      return (operation, args, opts) => callConnector(id, operation, args, opts);
+    }
+    return (args, opts) => callConnector(id, prop, args, opts);
+  }
+}), "connectorHandle");
+var connection = /* @__PURE__ */ __name((id) => connectorHandle(id), "connection");
 var R2_ENDPOINT_HOST_SUFFIX = ".r2.cloudflarestorage.com";
 function createS3CompatClient(options) {
   return new S3Client({
@@ -16681,6 +16951,8 @@ var QueuesModule = class {
     this._http = _http;
     this._gate = gate ?? createModuleGate("queues", resolved);
   }
+  /** @deprecated Classic v2 only. Prefer `startWorkflow(name, input)` from
+  *  `@stackbone/sdk/workflow` (a job → a workflow run on the World). */
   async publish(request) {
     return withGate(this._gate, async () => {
       const body = {
@@ -16699,6 +16971,8 @@ var QueuesModule = class {
       });
     });
   }
+  /** @deprecated Classic v2 only. Prefer `scheduleWorkflow(name, input, cron)`
+  *  from `@stackbone/sdk/workflow` (a cron → a workflow run on the World). */
   async schedule(request) {
     return withGate(this._gate, async () => {
       const body = {
@@ -16717,6 +16991,8 @@ var QueuesModule = class {
       });
     });
   }
+  /** @deprecated Classic v2 only. Prefer `unschedule(name)` from
+  *  `@stackbone/sdk/workflow`. */
   async unschedule(request) {
     return withGate(this._gate, async () => this._http.request({
       method: "POST",
@@ -16728,6 +17004,8 @@ var QueuesModule = class {
       errorMapping: ERROR_MAPPING2
     }));
   }
+  /** @deprecated Classic v2 only. Prefer `listSchedules()` from
+  *  `@stackbone/sdk/workflow`. */
   async listSchedules() {
     return withGate(this._gate, async () => this._http.request({
       method: "GET",
@@ -16752,7 +17030,7 @@ var StackboneClient = class {
   _secrets;
   _config;
   _queues;
-  _connections;
+  _legacyConnections;
   _memory;
   _prompts;
   _httpClient;
@@ -16806,16 +17084,59 @@ var StackboneClient = class {
     return this._queues;
   }
   /**
-  * Live surface — the agent's handle on the workspace's connector connections.
-  * `list` / `invoke` make authenticated calls to the control-plane connectors
-  * proxy (`/api/v1/agent/connections/*`); the credentials never enter the agent
+  * Legacy surface — the agent's handle on the workspace's connector connections
+  * under the OLD connector model. `list` / `invoke(connector, action, args)` make
+  * authenticated calls to the control-plane connectors proxy
+  * (`/api/v1/agent/connections/*`); the credentials never enter the agent
   * container. Gated against `connections.actions` so the handshake-blocked /
   * capability-missing paths are exercised the same way as the other gated
   * surfaces.
+  *
+  * Named `legacyConnections` (not `connections`) so it no longer sits one letter
+  * from the new peer-free `connection(id)` entrypoint above — the two connector
+  * entrypoints are now unambiguous. Behaviour is unchanged from the old
+  * `connections` member.
   */
-  get connections() {
-    this._connections ??= new ConnectionsModule(this.resolved, this.http(), createModuleGate("connections", this.resolved, this._contractStore));
-    return this._connections;
+  get legacyConnections() {
+    this._legacyConnections ??= new ConnectionsModule(this.resolved, this.http(), createModuleGate("connections", this.resolved, this._contractStore));
+    return this._legacyConnections;
+  }
+  /**
+  * Peer-free connector entrypoint — `stackbone.connection(id)` selects a Stackbone
+  * Connect connector by its verbatim id and returns a typed handle whose generated
+  * operations (`.sendMail({ ... })`, typed via the `StackboneConnections` registry)
+  * and dynamic `.call(operation, args)` escape hatch both resolve to the same broker
+  * call (`POST /api/connect/execute`, HMAC scheme A). It is a plain HMAC fetch — it
+  * imports NO `eve` peer — so it is wired directly onto the client with no lazy
+  * loading and pulls no new peer into the main barrel.
+  *
+  * This is the namespaced form of the top-level `connection(...)` export (now
+  * `@deprecated`); both delegate to the same implementation. Distinct from the
+  * plural `connections` surface above, which is the control-plane connectors proxy
+  * (`list` / `invoke`).
+  */
+  get connection() {
+    return connection;
+  }
+  /**
+  * Namespaced sibling-agent entrypoint — `stackbone.agent(id)` selects a sibling
+  * eve agent by its verbatim name and returns a lazy eve `Client`, so a workflow
+  * step delegates with `stackbone.agent('support').session().send({ ... })`. The
+  * name is typed against the augmentable `AgentRegistry` (declared names
+  * autocomplete, a typo is a compile error).
+  *
+  * Peer isolation is load-bearing: selecting the agent and opening a session are
+  * synchronous and import NO `eve` peer — only the session's already-async leaves
+  * (`send` / `stream`) resolve `eve/client` via dynamic import on first use. So a
+  * tool-only agent that imports `@stackbone/sdk` and never calls `agent(...)` never
+  * eager-loads the optional `eve` peer and cannot crash-loop on a missing dep.
+  *
+  * This is the namespaced form of the top-level `eveAgent(...)` export (now
+  * `@deprecated`) on the `@stackbone/sdk/workflow` subpath; both produce the same
+  * signed workflow→agent call and the same eve `Client` API.
+  */
+  get agent() {
+    return agent;
   }
   /**
   * Pending surface — runtime not built. Every method returns
@@ -16984,7 +17305,9 @@ var SDK_ERROR_CODE_PREFIXES = {
     "unavailable"
   ],
   /**
-  * `client.connections` — the agent → control plane connectors proxy. Both
+  * `client.legacyConnections` — the agent → control plane connectors proxy
+  * (legacy connector model). The `connections_*` code prefix stays stable (it
+  * names the wire domain, not the client accessor). Both
   * methods (`list`, `invoke`) hit the `/api/v1/agent/connections/*` endpoints
   * over `HttpClient`, so the full status→domain remap (`connections_unauthorized`,
   * `connections_not_found`, `connections_unavailable`, …) is in play. The agent
@@ -17165,6 +17488,9 @@ function assertCapabilityShape(name, capability) {
 }
 __name(assertCapabilityShape, "assertCapabilityShape");
 
+// src/runtime/define-workspace.ts
+var defineWorkspace = /* @__PURE__ */ __name((workspace) => workspace, "defineWorkspace");
+
 // src/runtime/logger.ts
 var writeLine = /* @__PURE__ */ __name((stream, level, msg, bindings, meta, now) => {
   const record = {
@@ -17202,6 +17528,65 @@ function getInvocationContext() {
   return storage.getStore();
 }
 __name(getInvocationContext, "getInvocationContext");
+function runWithCallerId(id, fn, options) {
+  const context = {
+    runId: id,
+    invocationId: options?.invocationId ?? id,
+    // Only attach `handler` when supplied: `exactOptionalPropertyTypes` forbids
+    // an explicit `undefined` on an optional property.
+    ...options?.handler !== void 0 ? {
+      handler: options.handler
+    } : {}
+  };
+  return runWithInvocationContext(context, fn);
+}
+__name(runWithCallerId, "runWithCallerId");
+
+// src/runtime/workflow-starter.ts
+var current;
+function setWorkflowStarter(starter) {
+  current = starter;
+}
+__name(setWorkflowStarter, "setWorkflowStarter");
+function getWorkflowStarter() {
+  if (!current) {
+    throw new Error("No workflow starter is bound. `startWorkflow` / `startWorkflowAndWait` can only be called from inside a running workflow \u2014 the runtime binds the starter on its first dispatch.");
+  }
+  return current;
+}
+__name(getWorkflowStarter, "getWorkflowStarter");
+
+// src/runtime/workflow-scheduler.ts
+var current2;
+function setWorkflowScheduler(scheduler) {
+  current2 = scheduler;
+}
+__name(setWorkflowScheduler, "setWorkflowScheduler");
+function getWorkflowScheduler() {
+  if (!current2) {
+    throw new Error("No workflow scheduler is bound. `scheduleWorkflow` / `unschedule` / `listSchedules` can only be called inside a running workflow runtime \u2014 the runtime binds the scheduler on its first dispatch.");
+  }
+  return current2;
+}
+__name(getWorkflowScheduler, "getWorkflowScheduler");
+
+// src/runtime/ambient-client.ts
+var cached;
+function resolveAmbientClient() {
+  cached ??= createClient();
+  return cached;
+}
+__name(resolveAmbientClient, "resolveAmbientClient");
+var stackbone = new Proxy({}, {
+  get(_target, prop) {
+    const client = resolveAmbientClient();
+    const value = Reflect.get(client, prop, client);
+    return typeof value === "function" ? value.bind(client) : value;
+  },
+  has(_target, prop) {
+    return Reflect.has(resolveAmbientClient(), prop);
+  }
+});
 var patched = /* @__PURE__ */ new WeakSet();
 function installInvocationConsoleCapture(options = {}) {
   const target = options.console ?? console;
@@ -17267,9 +17652,7 @@ var STORED_TO_SDK_ENV = {
   S3_REGION: "STACKBONE_S3_REGION",
   // OpenRouter (`client.ai`) — identity.
   OPENROUTER_API_KEY: "OPENROUTER_API_KEY",
-  OPENROUTER_BASE_URL: "OPENROUTER_BASE_URL",
-  // Axiom (observability) — identity.
-  AXIOM_TOKEN: "AXIOM_TOKEN"
+  OPENROUTER_BASE_URL: "OPENROUTER_BASE_URL"
 };
 function rehydrateSystemSecretsRows(env, rows, cipher, databaseUrl) {
   const applied = [];
@@ -17498,6 +17881,6 @@ var analyzeAgentSchemas = /* @__PURE__ */ __name((pair) => {
   };
 }, "analyzeAgentSchemas");
 
-export { INVOCATION_ID_HEADER, INVOKE_TIMEOUT_HARD_CAP_MS, RESERVED_ERROR_CODES, RESERVED_HANDLER_NAMES, RUN_ID_HEADER, STORED_TO_SDK_ENV, StackboneClient, analyzeAgentSchemas, createClient, createStructuredLogger, defineAgent, getInvocationContext, installInvocationConsoleCapture, invokeRequestSchema, isReservedErrorCode, isSdkErrorCode, loadSystemSecretsIntoEnv, rehydrateSystemSecretsRows, runWithInvocationContext };
+export { INVOCATION_ID_HEADER, INVOKE_TIMEOUT_HARD_CAP_MS, RESERVED_ERROR_CODES, RESERVED_HANDLER_NAMES, RUN_ID_HEADER, STORED_TO_SDK_ENV, StackboneClient, analyzeAgentSchemas, createClient, createStructuredLogger, defineAgent, defineWorkspace, getInvocationContext, getWorkflowScheduler, getWorkflowStarter, installInvocationConsoleCapture, invokeRequestSchema, isReservedErrorCode, isSdkErrorCode, loadSystemSecretsIntoEnv, rehydrateSystemSecretsRows, runWithCallerId, runWithInvocationContext, setWorkflowScheduler, setWorkflowStarter, stackbone };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map