Create the durable mission record before spawning any Terra agents. Returns the mission ID and authoritative budget version.

Read a mission and optionally its task, artifact, claim, and review state. Treat this result as authoritative over chat summaries.

Complete a mission only after every task is terminal. Failed tasks require an explicit acceptance decision.

Allocate a policy-checked work package before native spawn_agent. Put the returned task_id into the child's prompt; only direct parent-child role edges are accepted.

Read the authoritative task version, lease, assignment, inputs, budget, and status before mutating it.

Atomically claim a ready task using optimistic versioning. The returned lease token is required for worker mutations.

Move a leased task to running and establish its result producer.

Renew an active lease. Use this during long tool calls; an expired lease may be reclaimed by another worker.

Return a leased/running/blocked task to ready when the current worker cannot continue. Include a concrete reason.

Record a blocking dependency while retaining the lease. Continue heartbeats or release the task.

Record a definitive worker failure, clear its lease, and charge final usage. Future sibling allocation counts actual failed usage instead of the full reservation.

Cancel a non-terminal task after its direct children are terminal. Child cancellation requires the running direct parent's version and lease token.

Link a failed task to a viable sibling replacement for audit and closure. Child supersession requires direct-parent authority.

Change model reasoning effort while a task is ready and unleased, within its recorded maximum. Child changes require direct-parent authority.

Store bounded content in the content-addressed artifact store. Required fields are taskId, actorId, kind, mimeType, content, encoding, and idempotencyKey. Do not send missionId. Return artifact references instead of copying large content into agent messages.

Read a bounded prefix of an artifact by ID. Prefer targeted retrieval over loading full artifacts.

Submit a worker result as candidate only. This closes the producer lease; a different reviewer must check it. artifactRefs must belong to this taskId — call artifact_put on the same task first, and do not attach child-task artifacts. Include actual usage when known.

Independently check a candidate. The reviewer cannot be the producer. Luna verifiers call this on review_target_task_id without claiming. Rejection returns the task to ready.

Apply the second evidence gate to a checked result. Approval produces verified, not committed.

Commit a verified task after every direct child is terminal. This may unlock dependent tasks.

Atomically add token, cost, wall-time, and tool-call usage to a mission and optionally a task. Hard limits are enforced.

Read durable mission state and a bounded audit-event page after interruption, compaction, or client restart.