robotrock 1.1.0 → 1.3.0

package/dist/{tool-approval-bridge-C4bTm8vu.d.ts → tool-approval-bridge-aMA79Z1B.d.ts}

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { R as RobotRock, a as SendToHumanInput, S as SendToHumanActionInput, n as SendUpdateInput } from './client-XTnFHGFE.js';
+import { R as RobotRock, a as SendToHumanInput, S as SendToHumanActionInput, o as SendUpdateInput } from './client-YO9Y1rkH.js';
 import { DiscriminatedApprovalResult, ThreadUpdate } from './schemas/index.js';
 import { ToolApprovalResponse } from 'ai';
 

package/dist/tool-reply-guidance-C3qrT1In.d.ts

@@ -0,0 +1,25 @@
+/** Field name agents read; dashboard widgets must ignore when rendering. */
+declare const TOOL_REPLY_GUIDANCE_FIELD: "replyGuidance";
+declare const WHOAMI_REPLY_GUIDANCE = "The dashboard shows a profile card with name, email, workspace, role, and groups. Do not restate those in your reply. Only add context not in the card (e.g. permissions, refund approval rules, missing group membership).";
+declare const MY_ACCESS_REPLY_GUIDANCE = "Access details may render in chat UI. Do not restate role, groups, or admin capabilities if already visible. Only explain what the user can or cannot do for their question (e.g. finance group required for refunds \u2265 $10,000). When access.tenantAdmin is false and the user needs manageTeam, manageGroups, or query-tasks capabilities, explain briefly then call ask_question to offer sending an admin request to tenant admins \u2014 do not tell them to find an admin manually without offering delegation first.";
+declare const CREATE_INBOX_TASK_REPLY_GUIDANCE = "A task card shows title, assignee, and inbox status in chat. Do not restate task ID, assignee, or delegation details from the card. Only mention next steps or answer the user's question.";
+declare const SEARCH_PRODUCTS_REPLY_GUIDANCE = "Product results render as a list card in chat. Do not restate product names, prices, or SKUs. Only add context not in the list (e.g. no matches, recommendations).";
+declare const MANAGE_TEAM_MEMBERS_LIST_REPLY_GUIDANCE = "Team members render as a list card in chat. Do not restate names, emails, or roles from the list. Only add context not shown (e.g. duplicates, next admin actions).";
+declare const MANAGE_TEAM_MEMBERS_DETAIL_REPLY_GUIDANCE = "Team member details render in chat UI. Do not restate name, email, or role from the card. Only add next steps or policy context.";
+declare const MANAGE_GROUPS_LIST_REPLY_GUIDANCE = "Groups render as a list card in chat. Do not restate group names, slugs, or descriptions from the list. Use slug (not internal id) for get, update, delete, and membership actions. Only add context not shown.";
+declare const MANAGE_GROUPS_DETAIL_REPLY_GUIDANCE = "Group details render in chat UI. Do not restate fields already visible in the card. Only add next steps.";
+declare const QUERY_TASKS_LIST_REPLY_GUIDANCE = "Tasks render as a list card in chat. Do not restate task names, ids, or statuses from the list. Only add context not shown (e.g. filters applied, recommended next action).";
+declare const QUERY_TASKS_DETAIL_REPLY_GUIDANCE = "Task details render in chat UI. Do not restate fields already visible in the card. Only add analysis or next steps.";
+declare const REFUND_CHARGE_REPLY_GUIDANCE = "Refund details render in chat UI. Do not restate charge id, amount, or status from the card. Only add policy context or next steps.";
+declare const DEPLOY_RELEASE_REPLY_GUIDANCE = "Deploy details render in chat UI. Do not restate service, version, or environment from the card. Only add rollout context or next steps.";
+declare const GET_WEATHER_REPLY_GUIDANCE = "Weather details render in chat UI. Do not restate city, condition, or temperature from the card. Only add conversational context if needed.";
+declare const ADMIN_MUTATION_REPLY_GUIDANCE = "The action result renders in chat UI. Do not restate fields already visible in the card. Confirm outcome briefly or add next steps only.";
+type ToolResultWithReplyGuidance<T extends Record<string, unknown>> = T & {
+    replyGuidance: string;
+};
+/** Attach model-facing narration hints to a tool execute result. */
+declare function withReplyGuidance<T extends Record<string, unknown>>(result: T, guidance: string): ToolResultWithReplyGuidance<T>;
+/** Remove agent-only fields before showing raw JSON in the dashboard. */
+declare function stripAgentOnlyToolFields(output: unknown): unknown;
+
+export { ADMIN_MUTATION_REPLY_GUIDANCE as A, CREATE_INBOX_TASK_REPLY_GUIDANCE as C, DEPLOY_RELEASE_REPLY_GUIDANCE as D, GET_WEATHER_REPLY_GUIDANCE as G, MANAGE_GROUPS_DETAIL_REPLY_GUIDANCE as M, QUERY_TASKS_DETAIL_REPLY_GUIDANCE as Q, REFUND_CHARGE_REPLY_GUIDANCE as R, SEARCH_PRODUCTS_REPLY_GUIDANCE as S, type ToolResultWithReplyGuidance as T, WHOAMI_REPLY_GUIDANCE as W, MANAGE_GROUPS_LIST_REPLY_GUIDANCE as a, MANAGE_TEAM_MEMBERS_DETAIL_REPLY_GUIDANCE as b, MANAGE_TEAM_MEMBERS_LIST_REPLY_GUIDANCE as c, MY_ACCESS_REPLY_GUIDANCE as d, QUERY_TASKS_LIST_REPLY_GUIDANCE as e, TOOL_REPLY_GUIDANCE_FIELD as f, stripAgentOnlyToolFields as s, withReplyGuidance as w };

package/dist/trigger/index.d.ts

@@ -1,11 +1,12 @@
 import * as _trigger_dev_sdk from '@trigger.dev/sdk';
 import { R as RobotRockPlatformOtelFields } from '../otel-platform-DzHyHkGk.js';
 export { a as RobotRockHandlerWebhookPayload } from '../otel-platform-DzHyHkGk.js';
-import { S as SendToHumanActionInput, a as SendToHumanInput } from '../client-XTnFHGFE.js';
+import { S as SendToHumanActionInput, a as SendToHumanInput } from '../client-YO9Y1rkH.js';
 export { ApprovalResult, DiscriminatedApprovalResult, TaskContextInput, TaskResult } from '../schemas/index.js';
 import '@opentelemetry/api';
 import '@robotrock/core';
 import 'zod';
+import '../auth-headers-qL-ZeEtd.js';
 
 type SendToHumanPayload<A extends readonly SendToHumanActionInput[] = readonly SendToHumanActionInput[]> = SendToHumanInput<A> & RobotRockPlatformOtelFields & {
     /** Inbox app bucket. Overrides `ROBOTROCK_APP` when set. */

package/dist/trigger/index.js

@@ -196,7 +196,7 @@ function finishRobotRockHumanWaitOtel(session, handled, outcome) {
 }
 
 // src/schemas/index.ts
-import { z as z2 } from "zod";
+import { z as z4 } from "zod";
 
 // ../core/src/utils/safe-url.ts
 var BLOCKED_HOSTNAMES = /* @__PURE__ */ new Set([
@@ -583,13 +583,27 @@ var createAgentChatBodySchema = z.object({
   eveConnectionId: z.string().min(1).optional(),
   /** Source application id; groups the chat under an inbox section. */
   app: z.string().min(1).optional(),
-  assignTo: assignToSchema.optional(),
+  /** Email of the user who owns the chat. Required unless `parentChatId` is set. */
+  ownerEmail: z.string().email().optional(),
   title: z.string().min(1),
   messages: z.array(agentChatSeedMessageSchema).default([]),
   /** Provenance label stored on the session ("cron" | "agent" | ...). */
   source: z.string().min(1).optional()
 }).refine((data) => Boolean(data.agentIdentifier || data.parentChatId), {
   message: "Provide either agentIdentifier or parentChatId"
+}).refine((data) => Boolean(data.ownerEmail || data.parentChatId), {
+  message: "Provide ownerEmail unless parentChatId is set"
+});
+var agentChatAuditToolBodySchema = z.object({
+  eveSessionId: z.string().min(1),
+  userId: z.string().min(1),
+  toolCallId: z.string().min(1),
+  toolName: z.string().min(1),
+  input: z.record(z.string(), z.unknown()).default({}),
+  success: z.boolean(),
+  status: z.enum(["completed", "failed", "rejected"]),
+  error: z.string().optional(),
+  idempotencyKey: z.string().optional()
 });
 var agentChatAuditInputBodySchema = z.object({
   eveSessionId: z.string().min(1),
@@ -629,62 +643,175 @@ var agentChatLinkTaskBodySchema = z.object({
   toolCallId: z.string().min(1)
 });
 
+// ../core/src/schemas/tool-result-display.ts
+import { z as z2 } from "zod";
+var toolDisplayMetadataSchema = z2.object({
+  widget: z2.string().optional(),
+  title: z2.string().optional(),
+  description: z2.string().optional()
+});
+var toolDisplayEnvelopeSchema = z2.object({
+  display: toolDisplayMetadataSchema.optional(),
+  data: z2.record(z2.string(), z2.unknown()),
+  ui: z2.record(
+    z2.string(),
+    z2.object({
+      "ui:widget": z2.string().optional(),
+      "ui:title": z2.string().optional(),
+      "ui:description": z2.string().optional(),
+      "ui:options": z2.record(z2.string(), z2.unknown()).optional()
+    }).passthrough()
+  ).optional()
+});
+
+// ../core/src/schemas/agent-admin.ts
+import { z as z3 } from "zod";
+var tenantRoleSchema = z3.enum(["admin", "member"]);
+var agentAdminUserSchema = z3.object({
+  id: z3.string(),
+  email: z3.string().email(),
+  name: z3.string()
+});
+var agentAdminMemberSchema = z3.object({
+  userId: z3.string(),
+  role: z3.string(),
+  membershipKind: z3.enum(["team", "assignee"]),
+  hasLoggedIn: z3.boolean(),
+  user: agentAdminUserSchema
+});
+var agentAdminGroupSchema = z3.object({
+  id: z3.string(),
+  name: z3.string(),
+  slug: z3.string(),
+  description: z3.string().nullable(),
+  memberCount: z3.number().optional()
+});
+var agentAdminGroupDetailSchema = agentAdminGroupSchema.extend({
+  members: z3.array(
+    z3.object({
+      userId: z3.string(),
+      user: agentAdminUserSchema
+    })
+  )
+});
+var agentAdminTaskSummarySchema = z3.object({
+  id: z3.string(),
+  convexId: z3.string(),
+  status: z3.string(),
+  type: z3.string().nullable(),
+  name: z3.string().nullable(),
+  description: z3.string().nullable(),
+  validUntil: z3.number(),
+  createdAt: z3.number(),
+  threadPriority: z3.string().nullable(),
+  handledByUserId: z3.string().nullable()
+});
+var inviteMemberBodySchema = z3.object({
+  email: z3.string().email(),
+  role: tenantRoleSchema.optional()
+});
+var updateMemberRoleBodySchema = z3.object({
+  role: tenantRoleSchema
+});
+var createGroupBodySchema = z3.object({
+  name: z3.string().min(1),
+  description: z3.string().optional()
+});
+var updateGroupBodySchema = z3.object({
+  name: z3.string().min(1).optional(),
+  description: z3.string().optional()
+});
+var addGroupMemberBodySchema = z3.object({
+  userId: z3.string().min(1).describe("Convex user id or member email.")
+});
+var listTasksQuerySchema = z3.object({
+  statusFilter: z3.enum(["all", "open", "handled", "expired"]).optional(),
+  typeFilter: z3.string().optional(),
+  appFilter: z3.string().optional(),
+  sortField: z3.enum(["type", "date", "status", "validUntil"]).optional(),
+  sortDirection: z3.enum(["asc", "desc"]).optional(),
+  limit: z3.coerce.number().int().positive().max(100).optional(),
+  cursor: z3.string().optional()
+});
+var searchTasksQuerySchema = z3.object({
+  q: z3.string().min(1),
+  limit: z3.coerce.number().int().positive().max(100).optional()
+});
+var assignTasksResultSchema = z3.object({
+  taskId: z3.string(),
+  success: z3.boolean(),
+  message: z3.string().optional(),
+  name: z3.string().nullable().optional(),
+  description: z3.string().nullable().optional(),
+  type: z3.string().nullable().optional()
+});
+var assignTasksResponseSchema = z3.object({
+  results: z3.array(assignTasksResultSchema)
+});
+var assignTasksBodySchema = z3.object({
+  taskIds: z3.array(z3.string().min(1)).min(1).max(100),
+  assignTo: assignToSchema.refine(
+    (value) => (value.users?.length ?? 0) > 0 || (value.groups?.length ?? 0) > 0,
+    { message: "assignTo needs at least one user email or group slug." }
+  )
+});
+
 // src/schemas/index.ts
-var handlerUrlSchema2 = z2.string().refine((url) => isAllowedHandlerUrl(url), {
+var handlerUrlSchema2 = z4.string().refine((url) => isAllowedHandlerUrl(url), {
   message: HANDLER_URL_ERROR
 });
-var jsonSchema7Schema2 = z2.custom(
+var jsonSchema7Schema2 = z4.custom(
   (val) => typeof val === "object" && val !== null,
   { message: "Must be a valid JSON Schema object" }
 );
-var uiSchemaSchema2 = z2.custom((val) => typeof val === "object" && val !== null, {
+var uiSchemaSchema2 = z4.custom((val) => typeof val === "object" && val !== null, {
   message: "Must be a valid UiSchema object"
 });
-var webhookHandlerSchema2 = z2.object({
-  type: z2.literal("webhook"),
+var webhookHandlerSchema2 = z4.object({
+  type: z4.literal("webhook"),
   url: handlerUrlSchema2,
-  headers: z2.record(z2.string(), z2.string())
+  headers: z4.record(z4.string(), z4.string())
 });
 var triggerHandlerSchema2 = webhookHandlerSchema2.extend({
-  type: z2.literal("trigger"),
-  tokenId: z2.string().min(1)
+  type: z4.literal("trigger"),
+  tokenId: z4.string().min(1)
 });
-var handlerSchema2 = z2.discriminatedUnion("type", [webhookHandlerSchema2, triggerHandlerSchema2]);
-var taskActionInputSchema2 = z2.object({
-  id: z2.string().min(1),
-  title: z2.string().min(1),
-  description: z2.string().optional(),
+var handlerSchema2 = z4.discriminatedUnion("type", [webhookHandlerSchema2, triggerHandlerSchema2]);
+var taskActionInputSchema2 = z4.object({
+  id: z4.string().min(1),
+  title: z4.string().min(1),
+  description: z4.string().optional(),
   schema: jsonSchema7Schema2.optional(),
   ui: uiSchemaSchema2.optional(),
-  data: z2.record(z2.string(), z2.unknown()).optional()
+  data: z4.record(z4.string(), z4.unknown()).optional()
 });
 var taskActionSchema2 = taskActionInputSchema2.extend({
-  handlers: z2.array(handlerSchema2).min(1).optional()
+  handlers: z4.array(handlerSchema2).min(1).optional()
 });
-var uiFieldSchemaSchema2 = z2.object({
-  "ui:widget": z2.string().optional(),
-  "ui:title": z2.string().optional(),
-  "ui:description": z2.string().optional(),
-  "ui:options": z2.record(z2.string(), z2.unknown()).optional(),
-  items: z2.lazy(() => z2.record(z2.string(), uiFieldSchemaSchema2)).optional()
+var uiFieldSchemaSchema2 = z4.object({
+  "ui:widget": z4.string().optional(),
+  "ui:title": z4.string().optional(),
+  "ui:description": z4.string().optional(),
+  "ui:options": z4.record(z4.string(), z4.unknown()).optional(),
+  items: z4.lazy(() => z4.record(z4.string(), uiFieldSchemaSchema2)).optional()
 }).passthrough();
-var contextUiSchema2 = z2.record(z2.string(), uiFieldSchemaSchema2).optional();
-var contextDataSchema2 = z2.object({
-  data: z2.record(z2.string(), z2.unknown()),
+var contextUiSchema2 = z4.record(z4.string(), uiFieldSchemaSchema2).optional();
+var contextDataSchema2 = z4.object({
+  data: z4.record(z4.string(), z4.unknown()),
   ui: contextUiSchema2
 }).optional();
 var TASK_CONTEXT_FORMAT_VERSION2 = 2;
-var taskContextObjectBaseSchema2 = z2.object({
-  app: z2.string().min(1).optional(),
-  type: z2.string().min(1),
-  name: z2.string().min(1),
-  description: z2.string().optional(),
-  validUntil: z2.string().optional(),
+var taskContextObjectBaseSchema2 = z4.object({
+  app: z4.string().min(1).optional(),
+  type: z4.string().min(1),
+  name: z4.string().min(1),
+  description: z4.string().optional(),
+  validUntil: z4.string().optional(),
   context: contextDataSchema2,
-  contextVersion: z2.literal(2).optional(),
+  contextVersion: z4.literal(2).optional(),
   /** @deprecated Use `contextVersion`. Accepted on ingest only. */
-  version: z2.literal(2).optional(),
-  actions: z2.array(taskActionSchema2).min(1, "At least one action is required")
+  version: z4.literal(2).optional(),
+  actions: z4.array(taskActionSchema2).min(1, "At least one action is required")
 });
 function normalizeTaskContextVersion2(data) {
   const { version: legacyVersion, contextVersion, ...rest } = data;
@@ -700,7 +827,7 @@ function refineContextPublicUrls2(data, ctx) {
   const error = validateContextPublicUrls(data.context);
   if (error) {
     ctx.addIssue({
-      code: z2.ZodIssueCode.custom,
+      code: z4.ZodIssueCode.custom,
       message: error,
       path: ["context"]
     });
@@ -709,9 +836,9 @@ function refineContextPublicUrls2(data, ctx) {
 var taskContextSchema2 = taskContextObjectSchema2.superRefine(
   refineContextPublicUrls2
 );
-var assignToSchema2 = z2.object({
-  users: z2.array(z2.string().email()).optional(),
-  groups: z2.array(z2.string().min(1)).optional()
+var assignToSchema2 = z4.object({
+  users: z4.array(z4.string().email()).optional(),
+  groups: z4.array(z4.string().min(1)).optional()
 }).refine(
   (data) => {
     const groups = data.groups ?? [];
@@ -722,7 +849,7 @@ var assignToSchema2 = z2.object({
   },
   { message: 'Cannot combine "all" with other group slugs' }
 );
-var threadUpdateMessageSchema2 = z2.string().min(1).max(500);
+var threadUpdateMessageSchema2 = z4.string().min(1).max(500);
 var threadUpdateStatuses2 = [
   "info",
   "queued",
@@ -732,15 +859,15 @@ var threadUpdateStatuses2 = [
   "failed",
   "cancelled"
 ];
-var threadUpdateStatusSchema2 = z2.enum(threadUpdateStatuses2);
-var threadUpdateInputSchema2 = z2.object({
+var threadUpdateStatusSchema2 = z4.enum(threadUpdateStatuses2);
+var threadUpdateInputSchema2 = z4.object({
   message: threadUpdateMessageSchema2,
   status: threadUpdateStatusSchema2.optional()
 });
 var taskPriorities2 = ["low", "normal", "high", "urgent"];
-var taskPrioritySchema2 = z2.enum(taskPriorities2);
-var agentTelemetrySchema2 = z2.object({
-  version: z2.string().min(1)
+var taskPrioritySchema2 = z4.enum(taskPriorities2);
+var agentTelemetrySchema2 = z4.object({
+  version: z4.string().min(1)
 });
 var createTaskBodySchema2 = taskContextObjectBaseSchema2.extend({
   assignTo: assignToSchema2.optional(),
@@ -748,7 +875,7 @@ var createTaskBodySchema2 = taskContextObjectBaseSchema2.extend({
    * Groups related tasks together. When omitted, the server generates one and
    * returns it so the caller can reuse it on later tasks in the same thread.
    */
-  threadId: z2.string().min(1).optional(),
+  threadId: z4.string().min(1).optional(),
   /**
    * Optional thread priority. When set, applies to the whole thread and
    * overwrites any previous priority. Omit on later tasks to leave unchanged.
@@ -763,6 +890,65 @@ var createTaskBodySchema2 = taskContextObjectBaseSchema2.extend({
 }).transform(normalizeTaskContextVersion2).superRefine(refineContextPublicUrls2);
 var threadUpdateBodySchema = threadUpdateInputSchema2;
 
+// ../core/src/handler-retry.ts
+var HANDLER_RETRY_DELAYS_MS = [
+  6e4,
+  // 1m
+  3e5,
+  // 5m
+  18e5,
+  // 30m
+  36e5,
+  // 1h
+  216e5,
+  // 6h
+  864e5,
+  // 24h
+  1728e5
+  // 48h
+];
+var HANDLER_MAX_ATTEMPTS = HANDLER_RETRY_DELAYS_MS.length + 1;
+
+// ../core/src/attribution/index.ts
+import { z as z5 } from "zod";
+
+// ../core/src/app-url.ts
+var PRODUCTION_APP_URL = "https://app.robotrock.io";
+var PRODUCTION_API_URL = "https://api.robotrock.io/v1";
+var DEV_API_URL = "http://localhost:4001/v1";
+var APP_SIGNUP_URL = `${PRODUCTION_APP_URL}/sign-up`;
+function normalizeRobotRockApiBaseUrl(baseUrl) {
+  const trimmed = baseUrl.trim().replace(/\/+$/, "");
+  if (trimmed.endsWith("/v1")) {
+    return trimmed;
+  }
+  return `${trimmed}/v1`;
+}
+function getRobotRockApiBaseUrl() {
+  const explicit = process.env.ROBOTROCK_BASE_URL?.trim() || process.env.ROBOTROCK_API_URL?.trim();
+  if (explicit) {
+    return normalizeRobotRockApiBaseUrl(explicit);
+  }
+  if (process.env.NODE_ENV === "production") {
+    return PRODUCTION_API_URL;
+  }
+  return DEV_API_URL;
+}
+
+// ../core/src/attribution/index.ts
+var ATTRIBUTION_COOKIE_MAX_AGE = 60 * 60 * 24 * 90;
+var attributionSchema = z5.object({
+  utmSource: z5.string().optional(),
+  utmMedium: z5.string().optional(),
+  utmCampaign: z5.string().optional(),
+  utmContent: z5.string().optional(),
+  utmTerm: z5.string().optional(),
+  gclid: z5.string().optional(),
+  landingUrl: z5.string().optional(),
+  referrer: z5.string().optional(),
+  capturedAt: z5.number()
+});
+
 // src/approval-result.ts
 var TaskTimeoutError = class extends Error {
   constructor(message) {
@@ -837,77 +1023,27 @@ function getErrorMessage(data, fallback) {
   return fallback;
 }
 
-// ../core/src/handler-retry.ts
-var HANDLER_RETRY_DELAYS_MS = [
-  6e4,
-  // 1m
-  3e5,
-  // 5m
-  18e5,
-  // 30m
-  36e5,
-  // 1h
-  216e5,
-  // 6h
-  864e5,
-  // 24h
-  1728e5
-  // 48h
-];
-var HANDLER_MAX_ATTEMPTS = HANDLER_RETRY_DELAYS_MS.length + 1;
-
-// ../core/src/attribution/index.ts
-import { z as z3 } from "zod";
-
-// ../core/src/app-url.ts
-var PRODUCTION_APP_URL = "https://app.robotrock.io";
-var PRODUCTION_API_URL = "https://api.robotrock.io/v1";
-var DEV_API_URL = "http://localhost:4001/v1";
-var APP_SIGNUP_URL = `${PRODUCTION_APP_URL}/sign-up`;
-function normalizeRobotRockApiBaseUrl(baseUrl) {
-  const trimmed = baseUrl.trim().replace(/\/+$/, "");
-  if (trimmed.endsWith("/v1")) {
-    return trimmed;
-  }
-  return `${trimmed}/v1`;
-}
-function getRobotRockApiBaseUrl() {
-  const explicit = process.env.ROBOTROCK_BASE_URL?.trim() || process.env.ROBOTROCK_API_URL?.trim();
-  if (explicit) {
-    return normalizeRobotRockApiBaseUrl(explicit);
-  }
-  if (process.env.NODE_ENV === "production") {
-    return PRODUCTION_API_URL;
-  }
-  return DEV_API_URL;
-}
-
-// ../core/src/attribution/index.ts
-var ATTRIBUTION_COOKIE_MAX_AGE = 60 * 60 * 24 * 90;
-var attributionSchema = z3.object({
-  utmSource: z3.string().optional(),
-  utmMedium: z3.string().optional(),
-  utmCampaign: z3.string().optional(),
-  utmContent: z3.string().optional(),
-  utmTerm: z3.string().optional(),
-  gclid: z3.string().optional(),
-  landingUrl: z3.string().optional(),
-  referrer: z3.string().optional(),
-  capturedAt: z3.number()
-});
-
 // src/auth-headers.ts
+var ROBOTROCK_ACTING_USER_ID_HEADER = "x-robotrock-acting-user-id";
 function buildRobotRockAuthHeaders(auth) {
   if (auth.kind === "apiKey") {
-    return {
+    const headers2 = {
       "X-Api-Key": auth.apiKey
     };
+    if (auth.actingUserId?.trim()) {
+      headers2[ROBOTROCK_ACTING_USER_ID_HEADER] = auth.actingUserId.trim();
+    }
+    return headers2;
   }
-  return {
+  const headers = {
     Authorization: `Bearer ${auth.token}`,
     "X-RobotRock-Tenant-Slug": auth.tenantSlug,
     "X-RobotRock-Connection-Id": auth.connectionId
   };
+  if (auth.actingUserId?.trim()) {
+    headers[ROBOTROCK_ACTING_USER_ID_HEADER] = auth.actingUserId.trim();
+  }
+  return headers;
 }
 function resolveRobotRockAuthConfig(overrides) {
   if (overrides?.agentService) {
@@ -1051,6 +1187,29 @@ function createChatsApi(config) {
         );
       }
     },
+    async logToolExecution(input) {
+      const validation = agentChatAuditToolBodySchema.safeParse(input);
+      if (!validation.success) {
+        throw new RobotRockError(
+          `Invalid audit tool input: ${validation.error.issues[0]?.message}`,
+          400,
+          validation.error.issues
+        );
+      }
+      const response = await fetch(`${config.baseUrl}/agent-chats/audit-tool`, {
+        method: "POST",
+        headers: headers(),
+        body: JSON.stringify(validation.data)
+      });
+      if (!response.ok) {
+        const data = await parseResponseBody(response);
+        throw new RobotRockError(
+          getErrorMessage(data, "Failed to log chat tool execution"),
+          response.status,
+          data
+        );
+      }
+    },
     async linkTask(input) {
       const validation = agentChatLinkTaskBodySchema.safeParse(input);
       if (!validation.success) {
@@ -1153,7 +1312,9 @@ var RobotRock = class {
       create: (task2) => this.createTaskRequest(task2),
       get: (taskId) => this.getTaskById(taskId),
       cancel: (taskId) => this.cancelTaskRequest(taskId),
-      sendUpdate: (input) => this.sendThreadUpdate(input)
+      sendUpdate: (input) => this.sendThreadUpdate(input),
+      list: (input) => this.listTasksRequest(input),
+      search: (input) => this.searchTasksRequest(input)
     };
     this.chats = createChatsApi({
       baseUrl: this.baseUrl,
@@ -1350,6 +1511,47 @@ var RobotRock = class {
       );
     }
   }
+  async listTasksRequest(input) {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(input ?? {})) {
+      if (value !== void 0 && value !== "") {
+        params.set(key, String(value));
+      }
+    }
+    const suffix = params.size > 0 ? `?${params.toString()}` : "";
+    const response = await fetch(`${this.baseUrl}/tasks${suffix}`, {
+      method: "GET",
+      headers: this.authHeaders()
+    });
+    const data = await parseResponseBody(response);
+    if (!response.ok) {
+      throw new RobotRockError(
+        getErrorMessage(data, "Failed to list tasks"),
+        response.status,
+        data
+      );
+    }
+    return data;
+  }
+  async searchTasksRequest(input) {
+    const params = new URLSearchParams({ q: input.q });
+    if (input.limit !== void 0) {
+      params.set("limit", String(input.limit));
+    }
+    const response = await fetch(`${this.baseUrl}/tasks/search?${params.toString()}`, {
+      method: "GET",
+      headers: this.authHeaders()
+    });
+    const data = await parseResponseBody(response);
+    if (!response.ok) {
+      throw new RobotRockError(
+        getErrorMessage(data, "Failed to search tasks"),
+        response.status,
+        data
+      );
+    }
+    return data;
+  }
 };
 function createClient(config) {
   return new RobotRock(config);