Create the durable mission record before spawning agents. strategy is locked at create (default fanout). directorPlan is required only for director_plan: a workspace-relative .md path to the plan file Sol wrote in the project folder. Forbidden otherwise.

Read a mission and optionally its task, artifact, claim, and review state. Treat this result as authoritative over chat summaries. The mission row includes strategy, portrait, and directorPlan (workspace-relative plan file path) even when includeDetails is false.

Complete a mission only after every task is terminal. Failed tasks require an explicit acceptance decision.

Allocate a policy-checked work package before native spawn_agent. Put the returned task_id into the child's prompt. Root role depends on mission.strategy: fanout/director_plan/pipeline require Terra; direct allows one root Luna. fanout Terra objective max 2000 characters.

Read the authoritative task version, lease, assignment, inputs, budget, and status before mutating it.

Read direct children of a coordinator task as compact status rows (ids, status, version, summary, leaseExpired). Call once after wait_agent. Do not poll with task_get. If leaseExpired, cancel instead of waiting again.

Atomically claim a ready task using optimistic versioning. The returned lease token is required for worker mutations.

Move a leased task to running and establish its result producer.

Renew an active lease. Use this during long tool calls; an expired lease may be reclaimed by another worker.

Return a leased/running/blocked task to ready when the current worker cannot continue. Include a concrete reason.

Record a blocking dependency while retaining the lease. Continue heartbeats or release the task.

Record a definitive worker failure, clear its lease, and charge final usage. Future sibling allocation counts actual failed usage instead of the full reservation.

Cancel a non-terminal task after its direct children are terminal. Child cancellation requires the running direct parent's version and lease token.

Link a failed task to a viable sibling replacement for audit and closure. Child supersession requires direct-parent authority.

Change model reasoning effort while a task is ready and unleased, within its recorded maximum. Child changes require direct-parent authority.

Store bounded content in the content-addressed artifact store. Required fields are taskId, actorId, kind, mimeType, content, encoding, and idempotencyKey. Do not send missionId. Return artifact references instead of copying large content into agent messages.

Read a bounded prefix of an artifact by ID. Prefer targeted retrieval over loading full artifacts.

Submit a worker result as candidate only. This closes the producer lease; a different reviewer must check it. artifactRefs must belong to this taskId — call artifact_put on the same task first, and do not attach child-task artifacts. Include actual usage when known. summary max 500 characters.

Independently check a candidate. The reviewer cannot be the producer. Luna verifiers call this on review_target_task_id without claiming. Rejection returns the task to ready.

Apply the second evidence gate to a checked result. Approval produces verified, not committed.

Commit a verified task after every direct child is terminal. This may unlock dependent tasks.

For low or medium risk only, record check and verify reviews then commit in one call. Does not skip gates. High or critical work must use luna-verifier plus result_check, result_verify, and task_commit. Children must already be candidate. On a direct mission, Sol (not the Luna producer) may be the reviewer without parentTaskId.

Atomically add token, cost, wall-time, and tool-call usage to a mission and optionally a task. Hard limits are enforced.

Read durable mission state and a bounded audit-event page after interruption, compaction, or client restart.