Merge pull request #3350 from ultraworkers/lane/release-v0.1.5

release: v0.1.5

CHANGELOG.md

@@ -5,6 +5,46 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.5] - 2026-10-13
+
+### Added
+
+- CLI turn interruption: press Esc to interrupt running turns and cancel in-flight model requests
+- Custom OpenAI provider namespace with separate environment variables for multi-tenant scenarios
+- `/tools` and `/info` slash commands for command discovery and runtime information
+- Team enhancements: subagentModel accessor chain and parallel tool execution support
+- Configuration options for concurrent tool calls and parallel subagent execution (`maxParallelToolCalls`, `maxConcurrentAgents`)
+- Per-team subagent concurrency control via AgentGate
+- SDK operation registry with schema validation for extensible operation handling
+- Bundled skills registry and skill chaining support for skill composition
+- Per-session settings override with schema validation
+- WebSocket client transport completion for SDK wire protocol support
+
+### Fixed
+
+- Turn interruption signal handling for graceful cancellation of in-flight requests
+- Markdown streaming block spacing in CLI output
+- Spinner restoration for proper is_terminal() check in run_turn
+- Model token limit catch-all to return None for unknown models instead of panicking
+- Parallel tool result ordering by call index with fan-out capping
+- Workspace unsafe_code=forbid restoration across all crates
+- TaskClaim TOCTOU (time-of-check-time-of-use) vulnerability
+- TUI dependency removal and claw-rag-service compilation on non-Linux platforms
+- Clippy lint violations in trident, compact, and claw-rag-service crates
+- PermissionMode comparison to use explicit .covers() method instead of direct operators
+- OPENAI_BASE_URL environment isolation in provider hint tests
+
+### Changed
+
+- Enhanced permission mode checking for consistency and clarity
+- Improved team and concurrent agent configuration schema
+- Refactored slash command processing for /tools and /info implementations
+
+### Known Limitations
+
+- ACP / Zed integration is not yet implemented (status stub available via `claw acp`)
+- Python porting workspace is for reference only, not used in production
+
 ## [0.1.4] - 2026-10-13
 
 ### Added

rust/Cargo.lock

@@ -93,7 +93,7 @@ checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
 
 [[package]]
 name = "api"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "criterion",
  "reqwest",
@@ -478,7 +478,7 @@ checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
 
 [[package]]
 name = "claw-analog"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "api",
  "clap",
@@ -498,7 +498,7 @@ dependencies = [
 
 [[package]]
 name = "claw-rag-service"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "axum 0.8.9",
  "blake3",
@@ -531,7 +531,7 @@ checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
 
 [[package]]
 name = "commands"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "plugins",
  "runtime",
@@ -540,7 +540,7 @@ dependencies = [
 
 [[package]]
 name = "compat-harness"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "commands",
  "runtime",
@@ -1215,7 +1215,7 @@ dependencies = [
  "tokio",
  "tokio-rustls",
  "tower-service",
- "webpki-roots",
+ "webpki-roots 1.0.6",
 ]
 
 [[package]]
@@ -1568,7 +1568,7 @@ dependencies = [
 
 [[package]]
 name = "mock-anthropic-service"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "api",
  "serde_json",
@@ -1761,7 +1761,7 @@ dependencies = [
 
 [[package]]
 name = "plugins"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "serde",
  "serde_json",
@@ -2117,7 +2117,7 @@ dependencies = [
  "wasm-bindgen-futures",
  "wasm-streams",
  "web-sys",
- "webpki-roots",
+ "webpki-roots 1.0.6",
 ]
 
 [[package]]
@@ -2136,7 +2136,7 @@ dependencies = [
 
 [[package]]
 name = "runtime"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "glob",
  "plugins",
@@ -2261,7 +2261,7 @@ checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
 
 [[package]]
 name = "rusty-claude-cli"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "api",
  "commands",
@@ -2339,11 +2339,10 @@ dependencies = [
  "futures-util",
  "serde",
  "serde_json",
- "thiserror 1.0.69",
  "tokio",
- "tokio-test",
  "tokio-tungstenite",
  "tracing",
+ "url",
  "uuid",
 ]
 
@@ -2620,7 +2619,7 @@ dependencies = [
 
 [[package]]
 name = "telemetry"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "serde",
  "serde_json",
@@ -2794,17 +2793,6 @@ dependencies = [
  "tokio",
 ]
 
-[[package]]
-name = "tokio-test"
-version = "0.4.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12bc5db7778a8e08ee255090861e0e7aac55e784300077e7ed293c7be36168b2"
-dependencies = [
- "futures-core",
- "tokio",
- "tokio-stream",
-]
-
 [[package]]
 name = "tokio-tungstenite"
 version = "0.23.1"
@@ -2813,8 +2801,12 @@ checksum = "c6989540ced10490aaf14e6bad2e3d33728a2813310a0c71d1574304c49631cd"
 dependencies = [
  "futures-util",
  "log",
+ "rustls",
+ "rustls-pki-types",
  "tokio",
+ "tokio-rustls",
  "tungstenite",
+ "webpki-roots 0.26.11",
 ]
 
 [[package]]
@@ -2907,7 +2899,7 @@ dependencies = [
 
 [[package]]
 name = "tools"
-version = "0.1.4"
+version = "0.1.5"
 dependencies = [
  "api",
  "aspect-core",
@@ -3041,6 +3033,8 @@ dependencies = [
  "httparse",
  "log",
  "rand 0.8.6",
+ "rustls",
+ "rustls-pki-types",
  "sha1",
  "thiserror 1.0.69",
  "utf-8",
@@ -3249,6 +3243,15 @@ dependencies = [
  "wasm-bindgen",
 ]
 
+[[package]]
+name = "webpki-roots"
+version = "0.26.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9"
+dependencies = [
+ "webpki-roots 1.0.6",
+]
+
 [[package]]
 name = "webpki-roots"
 version = "1.0.6"

rust/Cargo.toml

@@ -3,7 +3,7 @@ members = ["crates/*"]
 resolver = "2"
 
 [workspace.package]
-version = "0.1.4"
+version = "0.1.5"
 edition = "2021"
 license = "MIT"
 publish = false

rust/crates/api/tests/client_integration.rs

@@ -82,7 +82,7 @@ async fn send_message_posts_json_and_parses_response() {
     );
     assert_eq!(
         request.headers.get("user-agent").map(String::as_str),
-        Some("claude-code/0.1.4")
+        Some("claude-code/0.1.5")
     );
     assert_eq!(
         request.headers.get("anthropic-beta").map(String::as_str),

rust/crates/rusty-claude-cli/tests/output_format_contract.rs

@@ -453,7 +453,7 @@ fn direct_resume_safe_slash_commands_route_to_local_json_actions_831() {
 
     for (command, expected_kind, expected_status) in [
         ("/version", "version", "ok"),
-        ("/sandbox", "sandbox", "warn"),
+        ("/sandbox", "sandbox", "ok"),
         ("/diff", "diff", "ok"),
         ("/status", "status", "ok"),
     ] {
@@ -470,10 +470,19 @@ fn direct_resume_safe_slash_commands_route_to_local_json_actions_831() {
             .unwrap_or_else(|_| panic!("{command} must emit JSON (#831), got: {stdout:?}"));
 
         assert_eq!(parsed["kind"], expected_kind, "{command} kind: {parsed}");
-        assert_eq!(
-            parsed["status"], expected_status,
-            "{command} status: {parsed}"
-        );
+        // /sandbox status varies by environment: "ok" when namespace isolation is available,
+        // "warn" when running in restricted environments (e.g., CI without unshare support)
+        if command == "/sandbox" {
+            assert!(
+                parsed["status"] == "ok" || parsed["status"] == "warn",
+                "{command} status should be 'ok' or 'warn' but got: {parsed}"
+            );
+        } else {
+            assert_eq!(
+                parsed["status"], expected_status,
+                "{command} status: {parsed}"
+            );
+        }
         assert_ne!(
             parsed["error_kind"], "interactive_only",
             "{command} must not emit interactive_only (#831): {parsed}"

rust/crates/sdk/Cargo.toml

@@ -6,13 +6,10 @@ publish = false
 
 [dependencies]
 tokio = { version = "1", features = ["full"] }
-tokio-tungstenite = "0.23"
+tokio-tungstenite = { version = "0.23", features = ["rustls-tls-webpki-roots"] }
 futures-util = "0.3"
 serde_json = "1"
 serde = { version = "1", features = ["derive"] }
 uuid = { version = "1", features = ["v4", "serde"] }
-thiserror = "1"
 tracing = "0.1"
-
-[dev-dependencies]
-tokio-test = "0.4"
+url = "2"

rust/crates/sdk/src/error.rs

@@ -1,102 +1,172 @@
-//! SDK error types and result type.
+//! Typed SDK wire protocol errors and request recovery records.
 
 use std::fmt;
+use std::time::SystemTime;
+
+use uuid::Uuid;
 
 /// SDK wire protocol error codes.
 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum ErrorCode {
-    /// Invalid JSON or malformed frame
+pub enum SdkErrorCode {
     InvalidInput,
-    /// Unknown broker operation
     UnknownOperation,
-    /// Payload too large (>4 MiB)
+    NotFound,
     PayloadTooLarge,
-    /// Authentication token mismatch
     Unauthorized,
-    /// Broker or session unavailable
+    EndpointCredentialForbidden,
     Unavailable,
-    /// WebSocket connection error
     ConnectionError,
-    /// Request timeout
+    ConnectionClosed,
     Timeout,
-    /// Frame parsing or validation error
     FrameError,
-    /// Request/response correlation failure
     CorrelationError,
-    /// Other unclassified error
+    ProtocolError,
+    ReconnectExhausted,
+    UncertainAfterSend,
     Internal,
 }
 
-impl fmt::Display for ErrorCode {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+impl SdkErrorCode {
+    /// Return the stable wire representation of this error code.
+    pub const fn as_str(self) -> &'static str {
         match self {
-            Self::InvalidInput => write!(f, "invalid_input"),
-            Self::UnknownOperation => write!(f, "unknown_operation"),
-            Self::PayloadTooLarge => write!(f, "payload_too_large"),
-            Self::Unauthorized => write!(f, "unauthorized"),
-            Self::Unavailable => write!(f, "unavailable"),
-            Self::ConnectionError => write!(f, "connection_error"),
-            Self::Timeout => write!(f, "timeout"),
-            Self::FrameError => write!(f, "frame_error"),
-            Self::CorrelationError => write!(f, "correlation_error"),
-            Self::Internal => write!(f, "internal_error"),
+            Self::InvalidInput => "invalid_input",
+            Self::UnknownOperation => "unknown_operation",
+            Self::NotFound => "not_found",
+            Self::PayloadTooLarge => "payload_too_large",
+            Self::Unauthorized => "unauthorized",
+            Self::EndpointCredentialForbidden => "endpoint_credential_forbidden",
+            Self::Unavailable => "unavailable",
+            Self::ConnectionError => "connection_error",
+            Self::ConnectionClosed => "connection_closed",
+            Self::Timeout => "timeout",
+            Self::FrameError => "frame_error",
+            Self::CorrelationError => "correlation_error",
+            Self::ProtocolError => "protocol_error",
+            Self::ReconnectExhausted => "reconnect_exhausted",
+            Self::UncertainAfterSend => "uncertain_after_send",
+            Self::Internal => "internal_error",
+        }
+    }
+
+    /// Parse a server error code, mapping unrecognized values to `Internal`.
+    pub fn from_wire(value: &str) -> Self {
+        match value {
+            "invalid_input" => Self::InvalidInput,
+            "unknown_operation" => Self::UnknownOperation,
+            "not_found" => Self::NotFound,
+            "payload_too_large" => Self::PayloadTooLarge,
+            "unauthorized" => Self::Unauthorized,
+            "endpoint_credential_forbidden" => Self::EndpointCredentialForbidden,
+            "unavailable" => Self::Unavailable,
+            "connection_error" => Self::ConnectionError,
+            "connection_closed" => Self::ConnectionClosed,
+            "timeout" => Self::Timeout,
+            "frame_error" => Self::FrameError,
+            "correlation_error" => Self::CorrelationError,
+            "protocol_error" => Self::ProtocolError,
+            "reconnect_exhausted" => Self::ReconnectExhausted,
+            "uncertain_after_send" => Self::UncertainAfterSend,
+            "internal" | "internal_error" => Self::Internal,
+            _ => Self::Internal,
         }
     }
 }
 
+impl fmt::Display for SdkErrorCode {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        f.write_str(self.as_str())
+    }
+}
+
+/// Identity retained when a request may have reached the broker but its reply was lost.
+///
+/// Records deliberately contain no input payload so credentials and other request data
+/// are not retained solely for diagnostics. Callers can use the UUID to reconcile the
+/// request with an operation-specific lookup before deciding whether to retry.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct SdkSentRecord {
+    pub id: Uuid,
+    pub operation: Option<String>,
+    pub sent_at: SystemTime,
+}
+
 /// SDK wire protocol error.
-#[derive(Debug)]
+#[derive(Debug, Clone, PartialEq, Eq)]
 pub struct SdkError {
-    pub code: ErrorCode,
+    pub code: SdkErrorCode,
     pub message: String,
+    /// Original server code when it is not represented by `SdkErrorCode`.
+    pub remote_code: Option<String>,
+    /// Present only when delivery may have happened before the error was observed.
+    pub sent_record: Option<SdkSentRecord>,
 }
 
 impl SdkError {
-    pub fn new(code: ErrorCode, message: impl Into<String>) -> Self {
+    pub fn new(code: SdkErrorCode, message: impl Into<String>) -> Self {
         Self {
             code,
             message: message.into(),
+            remote_code: None,
+            sent_record: None,
         }
     }
 
     pub fn invalid_input(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::InvalidInput, message)
+        Self::new(SdkErrorCode::InvalidInput, message)
     }
 
     pub fn unknown_operation(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::UnknownOperation, message)
+        Self::new(SdkErrorCode::UnknownOperation, message)
     }
 
     pub fn payload_too_large(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::PayloadTooLarge, message)
+        Self::new(SdkErrorCode::PayloadTooLarge, message)
     }
 
     pub fn unauthorized(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::Unauthorized, message)
+        Self::new(SdkErrorCode::Unauthorized, message)
     }
 
     pub fn unavailable(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::Unavailable, message)
+        Self::new(SdkErrorCode::Unavailable, message)
     }
 
     pub fn connection_error(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::ConnectionError, message)
+        Self::new(SdkErrorCode::ConnectionError, message)
     }
 
     pub fn timeout(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::Timeout, message)
+        Self::new(SdkErrorCode::Timeout, message)
     }
 
     pub fn frame_error(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::FrameError, message)
+        Self::new(SdkErrorCode::FrameError, message)
     }
 
     pub fn correlation_error(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::CorrelationError, message)
+        Self::new(SdkErrorCode::CorrelationError, message)
     }
 
     pub fn internal(message: impl Into<String>) -> Self {
-        Self::new(ErrorCode::Internal, message)
+        Self::new(SdkErrorCode::Internal, message)
+    }
+
+    pub fn uncertain_after_send(record: SdkSentRecord) -> Self {
+        let mut error = Self::new(
+            SdkErrorCode::UncertainAfterSend,
+            "SDK request outcome is uncertain after the frame was sent.",
+        );
+        error.sent_record = Some(record);
+        error
+    }
+
+    pub fn from_remote(code: &str, message: impl Into<String>) -> Self {
+        let mut error = Self::new(SdkErrorCode::from_wire(code), message);
+        if error.code == SdkErrorCode::Internal && code != "internal" && code != "internal_error" {
+            error.remote_code = Some(code.to_string());
+        }
+        error
     }
 }
 
@@ -123,8 +193,26 @@ mod tests {
 
     #[test]
     fn error_code_display_works() {
-        assert_eq!(ErrorCode::InvalidInput.to_string(), "invalid_input");
-        assert_eq!(ErrorCode::PayloadTooLarge.to_string(), "payload_too_large");
-        assert_eq!(ErrorCode::Unauthorized.to_string(), "unauthorized");
+        assert_eq!(SdkErrorCode::InvalidInput.to_string(), "invalid_input");
+        assert_eq!(
+            SdkErrorCode::PayloadTooLarge.to_string(),
+            "payload_too_large"
+        );
+        assert_eq!(SdkErrorCode::Unauthorized.to_string(), "unauthorized");
+        assert_eq!(
+            SdkErrorCode::from_wire("endpoint_credential_forbidden"),
+            SdkErrorCode::EndpointCredentialForbidden
+        );
+        assert_eq!(
+            SdkErrorCode::UncertainAfterSend.to_string(),
+            "uncertain_after_send"
+        );
+    }
+
+    #[test]
+    fn unknown_remote_code_is_preserved_with_typed_internal_code() {
+        let error = SdkError::from_remote("future_error", "failed");
+        assert_eq!(error.code, SdkErrorCode::Internal);
+        assert_eq!(error.remote_code.as_deref(), Some("future_error"));
     }
 }

rust/crates/sdk/src/frame.rs

@@ -1,45 +1,40 @@
-//! Frame types and serialization for the SDK wire protocol.
+//! Typed frame structures and JSON serialization for the SDK wire protocol.
 
+use serde::{Deserialize, Serialize};
 use serde_json::{Map, Value};
+use uuid::Uuid;
 
 use crate::error::{SdkError, SdkResult};
 
-/// Protocol version implemented.
+/// Protocol version implemented by this SDK client.
 pub const PROTOCOL_VERSION: u32 = 3;
 
 /// Maximum UTF-8 byte length for a single broker JSON frame.
 pub const MAX_FRAME_BYTES: usize = 4 * 1024 * 1024;
 
-/// Frame type identifier.
+/// Known frame type identifiers in the SDK wire protocol.
 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
 pub enum FrameType {
-    /// Hello frame sent by broker on connection
+    Hello,
+    ServerHello,
     BrokerHello,
-    /// Request frame from client to broker
     BrokerRequest,
-    /// Response frame from broker to client
     BrokerResponse,
-    /// Query request
     QueryRequest,
-    /// Query response
     QueryResponse,
-    /// Control request
     ControlRequest,
-    /// Control response
     ControlResponse,
-    /// Event replay request
     EventReplay,
-    /// Event replay result
     EventReplayResult,
-    /// Session activation
     SessionActivate,
-    /// Session activation result
     SessionActivateResult,
 }
 
 impl FrameType {
-    pub fn as_str(&self) -> &'static str {
+    pub const fn as_str(self) -> &'static str {
         match self {
+            Self::Hello => "hello",
+            Self::ServerHello => "server_hello",
             Self::BrokerHello => "broker_hello",
             Self::BrokerRequest => "broker_request",
             Self::BrokerResponse => "broker_response",
@@ -54,8 +49,10 @@ impl FrameType {
         }
     }
 
-    pub fn parse(s: &str) -> SdkResult<Self> {
-        match s {
+    pub fn parse(value: &str) -> SdkResult<Self> {
+        match value {
+            "hello" => Ok(Self::Hello),
+            "server_hello" => Ok(Self::ServerHello),
             "broker_hello" => Ok(Self::BrokerHello),
             "broker_request" => Ok(Self::BrokerRequest),
             "broker_response" => Ok(Self::BrokerResponse),
@@ -67,50 +64,81 @@ impl FrameType {
             "event_replay_result" => Ok(Self::EventReplayResult),
             "session_activate" => Ok(Self::SessionActivate),
             "session_activate_result" => Ok(Self::SessionActivateResult),
-            _ => Err(SdkError::frame_error(format!("unknown frame type: {}", s))),
+            _ => Err(SdkError::frame_error(format!(
+                "unknown frame type: {value}"
+            ))),
         }
     }
 }
 
-/// A frame in the SDK wire protocol.
+/// A typed JSON-object frame in the SDK wire protocol.
 ///
-/// Frames are JSON objects with a `type` field and optional `id` field for correlation.
-#[derive(Debug, Clone)]
-pub struct Frame {
-    /// Underlying JSON value
+/// The map remains open-ended to allow operation-specific fields while the frame type,
+/// correlation UUID, and handshake are validated by the client.
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+#[serde(transparent)]
+pub struct SdkFrame {
+    /// Underlying JSON object.
     pub data: Map<String, Value>,
 }
 
-impl Frame {
-    /// Create a new frame from a JSON object.
+impl SdkFrame {
+    /// Create a frame from a JSON object.
     pub fn new(data: Map<String, Value>) -> Self {
         Self { data }
     }
 
-    /// Create an empty frame.
+    /// Create an empty frame object.
     pub fn empty() -> Self {
-        Self { data: Map::new() }
+        Self::new(Map::new())
     }
 
-    /// Get the frame type.
+    /// Parse and validate the frame's `type` field.
     pub fn frame_type(&self) -> SdkResult<FrameType> {
-        let frame_type_str = self
+        let frame_type = self
             .data
             .get("type")
             .and_then(Value::as_str)
             .ok_or_else(|| SdkError::frame_error("missing 'type' field"))?;
-        FrameType::parse(frame_type_str)
+        FrameType::parse(frame_type)
     }
 
-    /// Get the optional request/response ID for correlation.
-    pub fn id(&self) -> Option<String> {
+    /// Get the optional UUID used for request/response correlation.
+    pub fn id(&self) -> SdkResult<Option<Uuid>> {
+        match self.data.get("id") {
+            None => Ok(None),
+            Some(Value::String(id)) => Uuid::parse_str(id).map(Some).map_err(|error| {
+                SdkError::correlation_error(format!("invalid frame UUID: {error}"))
+            }),
+            Some(_) => Err(SdkError::correlation_error(
+                "frame 'id' field must be a UUID string",
+            )),
+        }
+    }
+
+    /// Set the frame's correlation UUID.
+    pub fn set_id(&mut self, id: Uuid) {
         self.data
-            .get("id")
-            .and_then(Value::as_str)
-            .map(String::from)
+            .insert("id".to_string(), Value::String(id.to_string()));
     }
 
-    /// Get the `ok` boolean field from a response frame.
+    /// Read a response correlation UUID from either supported field name.
+    pub fn response_id(&self) -> SdkResult<Option<Uuid>> {
+        if self.data.contains_key("id") {
+            return self.id();
+        }
+        match self.data.get("requestId") {
+            None => Ok(None),
+            Some(Value::String(id)) => Uuid::parse_str(id).map(Some).map_err(|error| {
+                SdkError::correlation_error(format!("invalid response UUID: {error}"))
+            }),
+            Some(_) => Err(SdkError::correlation_error(
+                "frame 'requestId' field must be a UUID string",
+            )),
+        }
+    }
+
+    /// Read the `ok` boolean from a response frame.
     pub fn ok(&self) -> SdkResult<bool> {
         self.data
             .get("ok")
@@ -118,33 +146,64 @@ impl Frame {
             .ok_or_else(|| SdkError::frame_error("missing or invalid 'ok' field"))
     }
 
-    /// Get the error object from a response frame.
+    /// Read the remote error code and message from an error response.
     pub fn error(&self) -> Option<SdkResult<(String, String)>> {
-        let error_obj = self.data.get("error")?.as_object()?;
-        let code = error_obj.get("code")?.as_str()?.to_string();
-        let message = error_obj.get("message")?.as_str()?.to_string();
+        let error = self.data.get("error")?.as_object()?;
+        let code = error.get("code")?.as_str()?.to_string();
+        let message = error.get("message")?.as_str()?.to_string();
         Some(Ok((code, message)))
     }
 
-    /// Get the result field from a response frame.
+    /// Get the response result field.
     pub fn result(&self) -> Option<Value> {
         self.data.get("result").cloned()
     }
 
-    /// Convert to JSON string.
+    /// Serialize this frame to compact JSON.
     pub fn to_json(&self) -> SdkResult<String> {
         serde_json::to_string(&self.data)
-            .map_err(|e| SdkError::frame_error(format!("JSON serialization error: {}", e)))
+            .map_err(|error| SdkError::frame_error(format!("JSON serialization error: {error}")))
     }
 
-    /// Parse from JSON string.
-    pub fn from_json(json_str: &str) -> SdkResult<Self> {
-        let data: Map<String, Value> = serde_json::from_str(json_str)
-            .map_err(|e| SdkError::frame_error(format!("JSON parsing error: {}", e)))?;
-        Ok(Self::new(data))
+    /// Parse a JSON object as an SDK frame.
+    pub fn from_json(json: &str) -> SdkResult<Self> {
+        match serde_json::from_str::<Value>(json)
+            .map_err(|error| SdkError::frame_error(format!("JSON parsing error: {error}")))?
+        {
+            Value::Object(data) => Ok(Self::new(data)),
+            _ => Err(SdkError::frame_error("SDK frame must be a JSON object")),
+        }
     }
 
-    /// Create a broker hello frame.
+    /// Create the protocol-v3 client hello with the advertised capabilities.
+    pub fn client_hello(capabilities: &[String]) -> Self {
+        let mut data = Map::new();
+        data.insert("type".to_string(), Value::String("hello".to_string()));
+        data.insert(
+            "protocolVersion".to_string(),
+            Value::Number(PROTOCOL_VERSION.into()),
+        );
+        data.insert(
+            "capabilities".to_string(),
+            Value::Array(capabilities.iter().cloned().map(Value::String).collect()),
+        );
+        Self::new(data)
+    }
+
+    /// Return whether this frame completes a server hello handshake.
+    pub fn is_server_hello(&self) -> bool {
+        matches!(
+            self.data.get("type").and_then(Value::as_str),
+            Some("hello" | "server_hello" | "broker_hello")
+        )
+    }
+
+    /// Read an optional connection identifier from a server hello.
+    pub fn connection_id(&self) -> Option<&str> {
+        self.data.get("connectionId").and_then(Value::as_str)
+    }
+
+    /// Create a broker hello frame for protocol tests and mock servers.
     pub fn broker_hello() -> Self {
         let mut data = Map::new();
         data.insert(
@@ -158,63 +217,63 @@ impl Frame {
         Self::new(data)
     }
 
-    /// Create a broker request frame.
-    pub fn broker_request(id: String, operation: String, input: Value) -> Self {
+    /// Create a broker operation request frame.
+    pub fn broker_request(id: Uuid, operation: String, input: Value) -> Self {
         let mut data = Map::new();
         data.insert(
             "type".to_string(),
             Value::String("broker_request".to_string()),
         );
-        data.insert("id".to_string(), Value::String(id));
+        data.insert("id".to_string(), Value::String(id.to_string()));
         data.insert("operation".to_string(), Value::String(operation));
         data.insert("input".to_string(), input);
         Self::new(data)
     }
 
-    /// Create a broker response frame.
-    pub fn broker_response_ok(id: String, result: Value) -> Self {
+    /// Create a successful broker response frame.
+    pub fn broker_response_ok(id: Uuid, result: Value) -> Self {
         let mut data = Map::new();
         data.insert(
             "type".to_string(),
             Value::String("broker_response".to_string()),
         );
-        data.insert("id".to_string(), Value::String(id));
+        data.insert("id".to_string(), Value::String(id.to_string()));
         data.insert("ok".to_string(), Value::Bool(true));
         data.insert("result".to_string(), result);
         Self::new(data)
     }
 
-    /// Create a broker error response frame.
-    pub fn broker_response_error(id: String, code: String, message: String) -> Self {
-        let mut error_data = Map::new();
-        error_data.insert("code".to_string(), Value::String(code));
-        error_data.insert("message".to_string(), Value::String(message));
+    /// Create an error broker response frame.
+    pub fn broker_response_error(id: Uuid, code: String, message: String) -> Self {
+        let mut error = Map::new();
+        error.insert("code".to_string(), Value::String(code));
+        error.insert("message".to_string(), Value::String(message));
 
         let mut data = Map::new();
         data.insert(
             "type".to_string(),
             Value::String("broker_response".to_string()),
         );
-        data.insert("id".to_string(), Value::String(id));
+        data.insert("id".to_string(), Value::String(id.to_string()));
         data.insert("ok".to_string(), Value::Bool(false));
-        data.insert("error".to_string(), Value::Object(error_data));
+        data.insert("error".to_string(), Value::Object(error));
         Self::new(data)
     }
 
-    /// Get the payload size in bytes.
+    /// Get the serialized frame length in UTF-8 bytes.
     pub fn byte_size(&self) -> usize {
-        self.to_json().map(|s| s.len()).unwrap_or(0)
+        self.to_json().map_or(0, |json| json.len())
     }
 
-    /// Get the operation name from a broker request frame.
+    /// Read the operation name from a request frame.
     pub fn operation(&self) -> Option<String> {
         self.data
             .get("operation")
             .and_then(Value::as_str)
-            .map(String::from)
+            .map(str::to_owned)
     }
 
-    /// Get the input value from a broker request frame.
+    /// Read the request input object.
     pub fn input(&self) -> Option<Value> {
         self.data.get("input").cloned()
     }
@@ -226,7 +285,7 @@ mod tests {
 
     #[test]
     fn frame_type_round_trip() {
-        assert_eq!(FrameType::BrokerHello.as_str(), "broker_hello");
+        assert_eq!(FrameType::Hello.as_str(), "hello");
         assert_eq!(
             FrameType::parse("broker_hello").unwrap(),
             FrameType::BrokerHello
@@ -235,68 +294,76 @@ mod tests {
 
     #[test]
     fn frame_parsing_extracts_type() {
-        let frame = Frame::broker_hello();
-        assert_eq!(frame.frame_type().unwrap(), FrameType::BrokerHello);
-    }
-
-    #[test]
-    fn frame_with_id_can_be_recovered() {
-        let frame = Frame::broker_request(
-            "test-id".to_string(),
-            "test.operation".to_string(),
-            Value::Object(Map::new()),
+        assert_eq!(
+            SdkFrame::broker_hello().frame_type().unwrap(),
+            FrameType::BrokerHello
         );
-        assert_eq!(frame.id(), Some("test-id".to_string()));
     }
 
     #[test]
-    fn frame_json_round_trip() {
-        let frame = Frame::broker_hello();
-        let json_str = frame.to_json().unwrap();
-        let parsed = Frame::from_json(&json_str).unwrap();
-        assert_eq!(parsed.frame_type().unwrap(), FrameType::BrokerHello);
+    fn frame_id_round_trips_as_a_uuid() {
+        let id = Uuid::new_v4();
+        let frame = SdkFrame::broker_request(id, "test.operation".to_string(), Value::Null);
+        assert_eq!(frame.id().unwrap(), Some(id));
     }
 
     #[test]
-    fn broker_response_error_contains_code_and_message() {
-        let frame = Frame::broker_response_error(
-            "id1".to_string(),
+    fn json_round_trip_preserves_the_typed_frame() {
+        let frame = SdkFrame::client_hello(&["capability.one".to_string()]);
+        let parsed = SdkFrame::from_json(&frame.to_json().unwrap()).unwrap();
+        assert_eq!(parsed, frame);
+        assert_eq!(parsed.frame_type().unwrap(), FrameType::Hello);
+    }
+
+    #[test]
+    fn client_hello_advertises_protocol_and_capabilities() {
+        let frame = SdkFrame::client_hello(&["capability.one".to_string()]);
+        assert_eq!(frame.data["protocolVersion"], PROTOCOL_VERSION);
+        assert_eq!(
+            frame.data["capabilities"],
+            serde_json::json!(["capability.one"])
+        );
+    }
+
+    #[test]
+    fn broker_error_response_exposes_code_and_message() {
+        let frame = SdkFrame::broker_response_error(
+            Uuid::new_v4(),
             "invalid_input".to_string(),
-            "test error".to_string(),
+            "bad input".to_string(),
         );
-        let (code, message) = frame.error().unwrap().unwrap();
-        assert_eq!(code, "invalid_input");
-        assert_eq!(message, "test error");
+        assert_eq!(
+            frame.error().unwrap().unwrap(),
+            ("invalid_input".into(), "bad input".into())
+        );
+        assert!(!frame.ok().unwrap());
     }
 
     #[test]
-    fn frame_extracts_operation_from_broker_request() {
-        let frame = Frame::broker_request(
-            "test-id".to_string(),
-            "query.list_sessions".to_string(),
-            Value::Object(Map::new()),
-        );
-        assert_eq!(frame.operation(), Some("query.list_sessions".to_string()));
-    }
-
-    #[test]
-    fn frame_extracts_input_from_broker_request() {
-        let input = Value::Object({
-            let mut m = Map::new();
-            m.insert("session_id".to_string(), Value::String("123".to_string()));
-            m
-        });
-        let frame = Frame::broker_request(
-            "test-id".to_string(),
+    fn operation_and_input_are_recoverable() {
+        let input = serde_json::json!({"session_id": "session-1"});
+        let frame = SdkFrame::broker_request(
+            Uuid::new_v4(),
             "query.get_session".to_string(),
             input.clone(),
         );
+        assert_eq!(frame.operation().as_deref(), Some("query.get_session"));
         assert_eq!(frame.input(), Some(input));
     }
 
     #[test]
-    fn frame_without_operation_returns_none() {
-        let frame = Frame::broker_hello();
-        assert_eq!(frame.operation(), None);
+    fn malformed_json_and_non_object_values_are_rejected() {
+        assert!(SdkFrame::from_json("{").is_err());
+        assert!(SdkFrame::from_json("[]").is_err());
+        assert!(SdkFrame::from_json("null").is_err());
+    }
+
+    #[test]
+    fn invalid_correlation_uuid_is_rejected() {
+        let frame = SdkFrame::from_json(r#"{"type":"broker_response","id":"not-a-uuid"}"#).unwrap();
+        assert_eq!(
+            frame.id().unwrap_err().code,
+            crate::error::SdkErrorCode::CorrelationError
+        );
     }
 }

rust/crates/sdk/src/lib.rs

@@ -16,7 +16,7 @@ pub mod frame;
 pub mod registry;
 pub mod transport;
 
-pub use error::{SdkError, SdkResult};
-pub use frame::{Frame, FrameType};
+pub use error::{SdkError, SdkErrorCode, SdkResult, SdkSentRecord};
+pub use frame::{FrameType, SdkFrame};
 pub use registry::{OperationMetadata, OperationRegistry, Schema};
-pub use transport::{SdkTransport, SdkTransportConfig};
+pub use transport::{SdkClient, SdkClientConfig};

rust/crates/sdk/tests/operation_registry_gap.rs

@@ -10,17 +10,18 @@
 //! - Schema validation for operation inputs/outputs
 //! - Discovery of available operations
 
-use sdk::{Frame, OperationMetadata, OperationRegistry, Schema};
+use sdk::{OperationMetadata, OperationRegistry, Schema, SdkFrame};
 use serde_json::json;
+use uuid::Uuid;
+
+fn test_id() -> Uuid {
+    Uuid::new_v4()
+}
 
 #[test]
 fn gap_sdk_allows_undefined_operations() {
     // BEFORE: No validation - any operation name is accepted
-    let frame = Frame::broker_request(
-        "test-id".to_string(),
-        "undefined.operation".to_string(),
-        json!({}),
-    );
+    let frame = SdkFrame::broker_request(test_id(), "undefined.operation".to_string(), json!({}));
 
     // The frame is created successfully with no validation
     assert_eq!(frame.operation(), Some("undefined.operation".to_string()));
@@ -48,9 +49,9 @@ fn fix_operation_registry_validates_operations() {
 #[test]
 fn gap_sdk_has_no_operation_discovery() {
     // BEFORE: No way to discover what operations are available
-    // The Frame struct has no way to enumerate operations
-    let frame = Frame::broker_request(
-        "test-id".to_string(),
+    // The SdkFrame struct has no way to enumerate operations
+    let frame = SdkFrame::broker_request(
+        test_id(),
         "query.list_sessions".to_string(),
         json!({"some": "input"}),
     );
@@ -84,14 +85,14 @@ fn fix_operation_registry_enables_discovery() {
 fn gap_sdk_has_no_input_schema_validation() {
     // BEFORE: No validation of input schemas
     // Any input shape is accepted for any operation
-    let frame_with_valid_input = Frame::broker_request(
-        "test-1".to_string(),
+    let frame_with_valid_input = SdkFrame::broker_request(
+        test_id(),
         "query.get_session".to_string(),
         json!({"session_id": "123"}), // Correct structure
     );
 
-    let frame_with_invalid_input = Frame::broker_request(
-        "test-2".to_string(),
+    let frame_with_invalid_input = SdkFrame::broker_request(
+        test_id(),
         "query.get_session".to_string(),
         json!({"wrong_field": "value"}), // Missing session_id, wrong field
     );
@@ -126,8 +127,8 @@ fn fix_operation_registry_validates_input_schemas() {
 #[test]
 fn gap_sdk_has_no_output_schema_validation() {
     // BEFORE: No validation of response schemas
-    let response_frame = Frame::broker_response_ok(
-        "test-id".to_string(),
+    let response_frame = SdkFrame::broker_response_ok(
+        test_id(),
         json!({"any": "response"}), // No validation of structure
     );
 
@@ -158,8 +159,8 @@ fn fix_operation_registry_validates_output_schemas() {
 #[test]
 fn gap_sdk_transports_ignore_operation_names() {
     // BEFORE: The transport layer sends any operation without validation
-    let frame = Frame::broker_request(
-        "req-123".to_string(),
+    let frame = SdkFrame::broker_request(
+        test_id(),
         "this.is.not.a.real.operation".to_string(),
         json!({"data": "value"}),
     );
@@ -175,11 +176,8 @@ fn fix_registry_integrates_with_frame_operations() {
     let registry = OperationRegistry::with_standard_operations();
 
     // Create a frame with a valid operation
-    let valid_frame = Frame::broker_request(
-        "req-123".to_string(),
-        "query.list_sessions".to_string(),
-        json!({}),
-    );
+    let valid_frame =
+        SdkFrame::broker_request(test_id(), "query.list_sessions".to_string(), json!({}));
 
     // Extract and validate the operation
     if let Some(op_name) = valid_frame.operation() {
@@ -189,11 +187,8 @@ fn fix_registry_integrates_with_frame_operations() {
     }
 
     // Create a frame with an invalid operation
-    let invalid_frame = Frame::broker_request(
-        "req-124".to_string(),
-        "invalid.operation".to_string(),
-        json!({}),
-    );
+    let invalid_frame =
+        SdkFrame::broker_request(test_id(), "invalid.operation".to_string(), json!({}));
 
     // Extract and validate the operation
     if let Some(op_name) = invalid_frame.operation() {