melchizedek-agents 1.3.1 → 1.5.0

package/dist/lib/workflow/resume.js

@@ -42,7 +42,7 @@
  */
 import { z } from 'zod';
 import { APPROVAL_REQUEST } from '../runtime/approvals.js';
-import { CREDENTIAL_REQUEST } from '../runtime/credentials.js';
+import { CREDENTIAL_REQUEST, consentFrom } from '../runtime/credentials.js';
 import { INPUT_REQUEST } from '../workflowConfig.js';
 import { RESPONSE_SCHEMA_ARG } from './pause.js';
 /** The key ADK unwraps a bare reply from: `{ result: <value> }`. */
@@ -385,18 +385,18 @@ export function resumeInputsFromPlainText(content, events, invocationId) {
 // ── What the native walk cannot resume yet ───────────────────────────────────
 /**
  * A pause the native walk cannot resume: one raised inside an agent node
- * other than an approval (an `ask_user` tool call, a credential request) or
- * inside a map item. ADK resumes those inside the node (the agent's own
- * history, the ParallelWorker's item); the native agent node pauses only on
- * an approval (lib/workflow/agentNode.ts, ADR 0098), so it cannot pick the
- * others up. Resuming the walk anyway would run the node again from its
+ * other than an approval or an OAuth consent request (an `ask_user` tool
+ * call) or inside a map item. ADK resumes those inside the node (the
+ * agent's own history, the ParallelWorker's item); the native agent node
+ * pauses only on an approval (lib/workflow/agentNode.ts, ADR 0098) or a
+ * consent request (ADR 0128), so it cannot pick the others up. Resuming the walk anyway would run the node again from its
  * input and ask again, so the resume refuses by name instead.
  */
 export class UnsupportedWorkflowResumeError extends Error {
     /** The node path the pause was raised at. */
     nodePath;
     constructor(nodePath, why) {
-        super(`Cannot resume the workflow on the native runtime: the pause at '${nodePath}' was raised ${why}, which only an ask_user node's pause or an agent node's approval supports here.`);
+        super(`Cannot resume the workflow on the native runtime: the pause at '${nodePath}' was raised ${why}, which only an ask_user node's pause or an agent node's approval or consent request supports here.`);
         this.name = 'UnsupportedWorkflowResumeError';
         this.nodePath = nodePath;
     }
@@ -404,8 +404,9 @@ export class UnsupportedWorkflowResumeError extends Error {
 /**
  * Throws UnsupportedWorkflowResumeError for the first interrupt in the run's
  * events that is neither an ask_user node's input request nor an agent
- * node's approval request at a direct child of the workflow (the workflow's
- * own record aside).
+ * node's approval or credential request at a direct child of the workflow
+ * (the workflow's own record aside). A credential request it cannot read
+ * (no paused call's id, no auth config) does not resume.
  */
 export function assertResumable(runEvents, workflowPath) {
     for (const event of runEvents) {
@@ -416,7 +417,13 @@ export function assertResumable(runEvents, workflowPath) {
             continue;
         if (directChildName(path, workflowPath) === undefined)
             throw new UnsupportedWorkflowResumeError(path || String(event.author ?? ''), 'inside a nested node (a map item)');
-        const resumable = partsOf(event).some((p) => p.functionCall?.name === INPUT_REQUEST || p.functionCall?.name === APPROVAL_REQUEST);
+        // A credential request resumes when this engine can read it (consentFrom: the paused call's id and the auth config, ADR 0128).
+        const resumable = partsOf(event).some((p) => {
+            const call = p.functionCall;
+            if (call?.name === INPUT_REQUEST || call?.name === APPROVAL_REQUEST)
+                return true;
+            return call?.name === CREDENTIAL_REQUEST && consentFrom(event.author, call) !== undefined;
+        });
         if (!resumable)
             throw new UnsupportedWorkflowResumeError(path, 'inside an agent node');
     }

package/dist/lib/workflow/turn.d.ts

@@ -53,8 +53,10 @@
  * WHAT IT REFUSES before any model call: refuseUnrunnableNodes throws, for
  * a tool node, ADK's compile-time refusals (an unregistered tool, a
  * long-running one), and an ADK tool (anything with runAsync), which 1.0.0
- * no longer runs. A pause raised inside an agent node is refused by
- * runAgentNode by name.
+ * no longer runs. A pause raised inside an agent node other than an
+ * approval or an OAuth consent request is refused by runAgentNode by name.
+ * The consent step (`consent`) reaches every agent node's loop but a map
+ * item's, so a node's tool that needs a grant pauses the walk (ADR 0128).
  *
  * It imports nothing from ADK: the caller passes the tool lookup (the
  * registry's own Tools) and the store as the engine's interface.
@@ -65,6 +67,7 @@ import type { ModelAdapter } from '../models/contract.ts';
 import type { TurnEvent } from '../runtime/events.ts';
 import type { WorkflowSubagentEnd } from '../runtime/native/delegate.ts';
 import type { MemoryService } from '../runtime/memoryService.ts';
+import type { AgentLoopContext } from '../runtime/native/agentLoop.ts';
 import type { NativeAgent } from '../runtime/native/request.ts';
 import type { SelfCorrection } from '../runtime/native/selfCorrection.ts';
 import type { SessionService } from '../runtime/sessions.ts';
@@ -94,6 +97,13 @@ export interface NativeWorkflowParams {
     selfCorrection?: SelfCorrection;
     /** The run's tool credentials, pinned to its app (ADR 0072). */
     credentials?: Pick<CredentialStore, 'get'>;
+    /**
+     * The consent step for the agent nodes' tools (ADR 0085, ADR 0128), its
+     * flows bound to the turn's app (consentPinnedTo): a call whose grant is
+     * missing pauses its node, and the walk with it. A nested walk gets it
+     * pinned to the app of the walk that runs it. Map items never get it.
+     */
+    consent?: AgentLoopContext['consent'];
     /** The agent nodes that are a nested workflow syndicate (ADR 0106) or a nested dispatch syndicate (ADR 0120), by YAML name. */
     workflows?: ReadonlyMap<string, NestedWorkflow | NestedRun>;
 }

package/dist/lib/workflow/turn.js

@@ -53,8 +53,10 @@
  * WHAT IT REFUSES before any model call: refuseUnrunnableNodes throws, for
  * a tool node, ADK's compile-time refusals (an unregistered tool, a
  * long-running one), and an ADK tool (anything with runAsync), which 1.0.0
- * no longer runs. A pause raised inside an agent node is refused by
- * runAgentNode by name.
+ * no longer runs. A pause raised inside an agent node other than an
+ * approval or an OAuth consent request is refused by runAgentNode by name.
+ * The consent step (`consent`) reaches every agent node's loop but a map
+ * item's, so a node's tool that needs a grant pauses the walk (ADR 0128).
  *
  * It imports nothing from ADK: the caller passes the tool lookup (the
  * registry's own Tools) and the store as the engine's interface.
@@ -63,8 +65,9 @@
  */
 import { randomUUID } from 'node:crypto';
 import { APPROVAL_REQUEST } from '../runtime/approvals.js';
+import { CREDENTIAL_REQUEST, isGrantAnswer } from '../runtime/credentials.js';
 import { createTurnEvent, getFunctionCalls } from '../runtime/events.js';
-import { entrySession } from '../runtime/native/delegate.js';
+import { consentPinnedTo, entrySession } from '../runtime/native/delegate.js';
 import { INPUT_REQUEST } from '../workflowConfig.js';
 import { traceNodeExecution, traceToolNodeCall, traceWorkflowInvocation } from '../runtime/native/telemetry.js';
 import { TEMP_STATE_PREFIX } from '../runtime/sessions.js';
@@ -81,8 +84,8 @@ function lastText(event) {
         .filter((t) => t)
         .join('\n');
 }
-/** The requests a walk's interrupts are, as a node raises them: an approval request or an input request. */
-const RAISED = new Set([APPROVAL_REQUEST, INPUT_REQUEST]);
+/** The requests a walk's interrupts are, as a node raises them: an approval request, an input request, or an OAuth consent request (ADR 0128). */
+const RAISED = new Set([APPROVAL_REQUEST, INPUT_REQUEST, CREDENTIAL_REQUEST]);
 /** The latest request call, by id, among `ids` that `events` hold (an agent's or a node's, never the user's). */
 function requestCalls(events, ids, author) {
     const wanted = new Set(ids);
@@ -101,12 +104,15 @@ function requestCalls(events, ids, author) {
 /**
  * Whether a resumed walk's answer to `call` answers it: a decision for an
  * approval request (a ToolConfirmation, or ADK's `{ response: <json> }`
- * form, as lib/workflow/agentNode.ts reads one), any answer for an input
- * request.
+ * form, as lib/workflow/agentNode.ts reads one), a grant's answer for a
+ * credential request, any answer for an input request.
  */
 function answers(call, value) {
     if (value === undefined || !call)
         return false;
+    // A credential request is answered by the grant's answer only (ADR 0128): the turn sends it once the grant is stored.
+    if (call.name === CREDENTIAL_REQUEST)
+        return isGrantAnswer(value);
     if (call.name !== APPROVAL_REQUEST)
         return true;
     if (typeof value !== 'object' || value === null || Array.isArray(value))
@@ -116,7 +122,7 @@ function answers(call, value) {
 }
 /** The part that carries `value` down to the nested walk, as the answer to `call`: its explicit reply, under the request's name. */
 function answerPart(call, value) {
-    const response = call.name === APPROVAL_REQUEST ? value : { result: value };
+    const response = call.name === APPROVAL_REQUEST || call.name === CREDENTIAL_REQUEST ? value : { result: value };
     return { functionResponse: { id: call.id, name: call.name, response } };
 }
 /**
@@ -172,12 +178,13 @@ function raiseAgain(name, run, invocationId, calls, stateDelta) {
  * node, carrying that output and the walk's state writes, so a resumed
  * walk completes the node from it.
  *
- * A walk that ends paused (an ask_user node, a gated agent node, a node of
- * its own that is a nested workflow) pauses the node on the same ids
+ * A walk that ends paused (an ask_user node, a gated agent node, a node
+ * waiting for an OAuth grant (ADR 0128), a node of its own that is a nested
+ * workflow) pauses the node on the same ids
  * (raiseAgain), and the caller's walk with it. Rerun on the resume, the
  * node walks its graph again on the answers among its ids, each as its
  * explicit reply (an approval decision as it came, an input request's
- * answer as `{ result }`), which the nested walk's resume reads as a
+ * answer as `{ result }`, a grant's answer as it came), which the nested walk's resume reads as a
  * top-level one's; with none of them answered it waits again without
  * walking; once an earlier resume finished it, its stored output is the
  * node's.
@@ -224,6 +231,8 @@ async function runWorkflowNode(name, workflow, run, params, parent) {
             ...(params.log ? { log: params.log } : {}),
             ...(params.selfCorrection ? { selfCorrection: params.selfCorrection } : {}),
             ...(params.credentials ? { credentials: params.credentials } : {}),
+            // Its flows bound to the walk's app (already the turn's): the callback stores the grant where the pinned credentials read it (ADR 0128).
+            ...(params.consent ? { consent: consentPinnedTo(params.consent, parent.session.appName) } : {}),
         });
     let last;
     const stateDelta = {};
@@ -251,7 +260,7 @@ async function runWorkflowNode(name, workflow, run, params, parent) {
         const raised = named ?? requestCalls(walked, paused);
         const missing = paused.filter((id) => !raised.has(id));
         if (missing.length > 0)
-            throw new Error(`Node '${name}': the ${'walk' in workflow ? 'syndicate' : 'workflow'} it runs paused on ${missing.join(', ')}, which is not an approval request or a question.`);
+            throw new Error(`Node '${name}': the ${'walk' in workflow ? 'syndicate' : 'workflow'} it runs paused on ${missing.join(', ')}, which is not an approval request, a question or a consent request.`);
         parent.store(raiseAgain(name, run, parent.invocationId, paused.map((id) => raised.get(id)), stateDelta));
         return { interruptIds: [...paused] };
     }
@@ -320,6 +329,7 @@ export async function* runNativeWorkflow(params) {
             ...(params.log ? { log: params.log } : {}),
             ...(params.selfCorrection ? { selfCorrection: params.selfCorrection } : {}),
             ...(params.credentials ? { credentials: params.credentials } : {}),
+            ...(params.consent ? { consent: params.consent } : {}),
         },
         onEvent: (event) => {
             // A node's input turn is appended straight to the session, as ADK's runLlmAgentAsNode appends it: stored, never yielded.

package/dist/scripts/a2a_server.js

@@ -373,8 +373,13 @@ export async function startServer(syndicateName = 'syndicate.yaml', extensions =
             ...(positiveInt('DATABASE_POOL_MAX') ? { poolConfig: { max: positiveInt('DATABASE_POOL_MAX') } } : {}),
             ...(positiveInt('A2A_TURN_LOCK_POOL_MAX') ? { lockPoolMax: positiveInt('A2A_TURN_LOCK_POOL_MAX') } : {}),
             memory: { apiKey: process.env.GOOGLE_GENAI_API_KEY || process.env.GEMINI_API_KEY || '' },
+            // The ledger in this database (ADR 0131): TELEMETRY_POSTGRES=true.
+            ...(process.env.TELEMETRY_POSTGRES === 'true' ? { ledger: true } : {}),
         })
         : undefined;
+    if (process.env.TELEMETRY_POSTGRES === 'true' && !pgStorage) {
+        console.warn('[TELEMETRY] TELEMETRY_POSTGRES=true needs DATABASE_URL; no ledger is written.');
+    }
     if (!pgStorage && dbSchema() !== 'public') {
         console.error(`[A2A] ✗ MELCHIZEDEK_DB_SCHEMA=${dbSchema()} needs DATABASE_URL: a private schema is not reachable over the Supabase REST API.`);
         process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "melchizedek-agents",
-  "version": "1.3.1",
+  "version": "1.5.0",
   "description": "A multi-model, multi-agent orchestration framework — YAML-defined syndicates on the engine's own agent loop, Supabase or Postgres session persistence, pgvector long-term memory. Companion repo to the lyceumagents.com curriculum.",
   "type": "module",
   "license": "MIT",
@@ -107,6 +107,10 @@
     "syndicate:pipeline": "node --disable-warning=DEP0040 --experimental-strip-types scripts/syndicate_chat.ts --syndicate pipeline",
     "syndicate:weather": "node --disable-warning=DEP0040 --experimental-strip-types scripts/syndicate_chat.ts --syndicate weather",
     "syndicate:conversational": "node --disable-warning=DEP0040 --experimental-strip-types scripts/syndicate_chat.ts --syndicate conversational",
+    "syndicate:event": "node --disable-warning=DEP0040 --experimental-strip-types scripts/syndicate_chat.ts --syndicate event_assistant",
+    "capstone": "node --disable-warning=DEP0040 --experimental-strip-types examples/capstone/server.ts",
+    "capstone:agent": "node --disable-warning=DEP0040 --experimental-strip-types examples/capstone/serve-agent.ts",
+    "capstone:eval": "node --disable-warning=DEP0040 --experimental-strip-types examples/capstone/eval/run.ts",
     "assistant:worker": "node --disable-warning=DEP0040 --experimental-strip-types scripts/assistant_worker.ts",
     "demo:models": "node --disable-warning=DEP0040 --experimental-strip-types scripts/demo_model_optionality.ts",
     "demo:direct": "node --disable-warning=DEP0040 --experimental-strip-types scripts/direct_call.ts",
@@ -152,18 +156,21 @@
     "@opentelemetry/sdk-trace-base": "^2.7.1",
     "@opentelemetry/sdk-trace-node": "^2.7.1",
     "@supabase/supabase-js": "^2.43.0",
-    "jose": "^6.2.12",
     "express": "^5.2.1",
     "express-rate-limit": "^8.5.2",
-    "pg": "^8.23.1",
+    "jose": "^6.2.12",
     "openai": "^7.28.0",
+    "pg": "^8.23.1",
     "yaml": "^2.9.0",
     "zod": "4.6.5"
   },
   "devDependencies": {
-    "@types/pg": "^8.23.1",
+    "@electric-sql/pglite": "^0.5.10",
+    "@electric-sql/pglite-pgvector": "^0.0.11",
+    "@electric-sql/pglite-socket": "^0.2.13",
     "@types/express": "^5.0.6",
     "@types/node": "^25",
+    "@types/pg": "^8.23.1",
     "typescript": "^7.0.2"
   },
   "overrides": {