@cuylabs/agent-core 0.6.0 → 0.8.0

package/dist/presets/index.d.ts

@@ -0,0 +1,53 @@
+import { P as Preset, A as AppliedPreset } from '../types-BnpEOYV-.js';
+import { T as Tool } from '../tool-BHbyUAy3.js';
+import 'ai';
+import '../types-CQaXbRsS.js';
+import 'zod';
+import '../tool-DLXAR9Ce.js';
+import '../types-CHiPh8U2.js';
+import '../types-CQL-SvTn.js';
+
+/**
+ * Filter tools using preset allow/deny patterns.
+ *
+ * Explicit allow matches win over deny matches. This lets presets define a
+ * broad deny rule like `"*"` and then carve out a safe allow-list.
+ */
+declare function filterTools(tools: Tool.AnyInfo[], options: {
+    allow?: string[];
+    deny?: string[];
+}): Tool.AnyInfo[];
+
+/**
+ * Apply a preset to available tools and a parent system prompt.
+ */
+declare function applyPreset(preset: Preset, availableTools: Tool.AnyInfo[], baseSystemPrompt?: string): AppliedPreset;
+/**
+ * Merge multiple presets. Later presets override earlier scalar values.
+ */
+declare function mergePresets(...presets: Preset[]): Preset;
+/**
+ * Create a custom preset with sensible defaults.
+ */
+declare function createPreset(options: Partial<Preset> & {
+    name: string;
+}): Preset;
+
+declare const explore: Preset;
+declare const plan: Preset;
+declare const review: Preset;
+declare const quick: Preset;
+declare const careful: Preset;
+declare const code: Preset;
+declare const watch: Preset;
+declare const Presets: {
+    readonly explore: Preset;
+    readonly plan: Preset;
+    readonly review: Preset;
+    readonly quick: Preset;
+    readonly careful: Preset;
+    readonly code: Preset;
+    readonly watch: Preset;
+};
+
+export { AppliedPreset, Preset, Presets, applyPreset, careful, code, createPreset, explore, filterTools, mergePresets, plan, quick, review, watch };

package/dist/presets/index.js

@@ -0,0 +1,28 @@
+import {
+  Presets,
+  applyPreset,
+  careful,
+  code,
+  createPreset,
+  explore,
+  filterTools,
+  mergePresets,
+  plan,
+  quick,
+  review,
+  watch
+} from "../chunk-CAA7FHIH.js";
+export {
+  Presets,
+  applyPreset,
+  careful,
+  code,
+  createPreset,
+  explore,
+  filterTools,
+  mergePresets,
+  plan,
+  quick,
+  review,
+  watch
+};

package/dist/prompt/index.d.ts

@@ -1,13 +1,18 @@
-import { c as ModelFamily, l as EnvironmentInfo, I as InstructionFile } from '../runner-G1wxEgac.js';
-export { a as PromptBuildContext, P as PromptConfig, b as PromptSection } from '../runner-G1wxEgac.js';
+import { c as ModelFamily, g as EnvironmentInfo, I as InstructionFile } from '../runner-e2YRcUoX.js';
+export { a as PromptBuildContext, P as PromptConfig, b as PromptSection } from '../runner-e2YRcUoX.js';
 import { LanguageModel } from 'ai';
-export { P as PromptBuilder, c as createPromptBuilder } from '../builder-BKkipazh.js';
-export { d as SkillConfig } from '../tool-pFAnJc5Y.js';
+export { P as PromptBuilder, c as createPromptBuilder } from '../builder-UpOWQMW3.js';
+export { d as SkillConfig } from '../types-BfNpU8NS.js';
+import '@ai-sdk/provider-utils';
+import '../events-CE72w8W4.js';
 import '../messages-BYWGn8TY.js';
-import '../tool-DYp6-cC3.js';
-import '../types-CQaXbRsS.js';
-import '../registry-CuRWWtcT.js';
+import '../types-CQL-SvTn.js';
+import '../tool-DLXAR9Ce.js';
+import '../types-CHiPh8U2.js';
+import '../tool-BHbyUAy3.js';
 import 'zod';
+import '../types-CQaXbRsS.js';
+import '../registry-DwYqsQkX.js';
 
 /**
  * Prompt Templates — Base system prompts per model family

package/dist/reasoning/index.d.ts

@@ -1,10 +1,8 @@
-import { R as ReasoningLevel } from '../types-CQaXbRsS.js';
-export { E as EXTENDED_LEVELS, F as FIXED_LEVELS, a as ReasoningConfig, S as STANDARD_LEVELS, s as shouldIncludeReasoningSummary } from '../types-CQaXbRsS.js';
-import { P as ProviderCompatibility } from '../resolver-DOfZ-xuk.js';
-export { e as extractModelId, a as extractProvider } from '../resolver-DOfZ-xuk.js';
-export { b as buildReasoningOptions, a as buildReasoningOptionsSync, g as getReasoningConfig, c as getReasoningConfigSync, s as supportsReasoning, d as supportsReasoningSync } from '../config-D2xeGEHK.js';
-import 'ai';
-import '@ai-sdk/provider-utils';
+import { R as ReasoningLevel, a as ReasoningConfig } from '../types-CQaXbRsS.js';
+export { E as EXTENDED_LEVELS, F as FIXED_LEVELS, S as STANDARD_LEVELS, s as shouldIncludeReasoningSummary } from '../types-CQaXbRsS.js';
+import { P as ProviderCompatibility } from '../types-QA4WhEfz.js';
+import { LanguageModel } from 'ai';
+import { ProviderOptions } from '@ai-sdk/provider-utils';
 
 /**
  * Provider-Specific Reasoning Option Builders
@@ -68,4 +66,51 @@ declare function buildOpenRouterOptions(level: ReasoningLevel): Record<string, u
  */
 declare function getProviderOptionsKey(provider: string): string;
 
-export { ReasoningLevel, buildAnthropicOptions, buildBedrockOptions, buildGoogleOptions, buildGroqOptions, buildOpenAIOptions, buildOpenRouterOptions, buildXAIOptions, getProviderOptionsKey };
+/**
+ * Reasoning Configuration & Option Builders
+ *
+ * Orchestrates capability detection and provider-specific option
+ * building to produce ready-to-use `providerOptions` for the
+ * Vercel AI SDK.
+ *
+ * Two flavours of every function are provided:
+ * - **Async** (`getReasoningConfig`, `buildReasoningOptions`) —
+ *   uses the full capability resolver (network + cache).
+ * - **Sync** (`getReasoningConfigSync`, `buildReasoningOptionsSync`) —
+ *   uses fast pattern-matching only (no network).
+ */
+
+/**
+ * Get the reasoning configuration for a model.
+ *
+ * Uses the full capability resolver (including network lookups)
+ * for the most accurate result.
+ */
+declare function getReasoningConfig(model: LanguageModel): Promise<ReasoningConfig>;
+/**
+ * Synchronous reasoning config using pattern-matching only.
+ *
+ * Faster but less accurate than {@link getReasoningConfig}.
+ * Good for hot paths where async is impractical.
+ */
+declare function getReasoningConfigSync(model: LanguageModel): ReasoningConfig;
+/**
+ * Build `providerOptions` for a reasoning level (async).
+ *
+ * Returns `undefined` when reasoning is off or unsupported.
+ */
+declare function buildReasoningOptions(model: LanguageModel, level: ReasoningLevel): Promise<ProviderOptions | undefined>;
+/**
+ * Build `providerOptions` for a reasoning level (sync / pattern-only).
+ */
+declare function buildReasoningOptionsSync(model: LanguageModel, level: ReasoningLevel): ProviderOptions | undefined;
+/**
+ * Check whether a model supports reasoning (async, full resolver).
+ */
+declare function supportsReasoning(model: LanguageModel): Promise<boolean>;
+/**
+ * Synchronous check using pattern-matching only.
+ */
+declare function supportsReasoningSync(model: LanguageModel): boolean;
+
+export { ReasoningConfig, ReasoningLevel, buildAnthropicOptions, buildBedrockOptions, buildGoogleOptions, buildGroqOptions, buildOpenAIOptions, buildOpenRouterOptions, buildReasoningOptions, buildReasoningOptionsSync, buildXAIOptions, getProviderOptionsKey, getReasoningConfig, getReasoningConfigSync, supportsReasoning, supportsReasoningSync };

package/dist/reasoning/index.js

@@ -17,11 +17,8 @@ import {
   shouldIncludeReasoningSummary,
   supportsReasoning,
   supportsReasoningSync
-} from "../chunk-X635CM2F.js";
-import {
-  extractModelId,
-  extractProvider
-} from "../chunk-QWFMX226.js";
+} from "../chunk-SQU2AJHO.js";
+import "../chunk-RFEKJKTO.js";
 import "../chunk-DWYX7ASF.js";
 export {
   EXTENDED_LEVELS,
@@ -36,8 +33,6 @@ export {
   buildReasoningOptions,
   buildReasoningOptionsSync,
   buildXAIOptions,
-  extractModelId,
-  extractProvider,
   getProviderOptionsKey,
   getReasoningConfig,
   getReasoningConfigSync,

package/dist/{registry-CuRWWtcT.d.ts → registry-DwYqsQkX.d.ts}

@@ -1,4 +1,4 @@
-import { S as SkillDiscoveryResult, a as SkillMetadata, b as SkillContent, c as SkillResource, d as SkillConfig } from './tool-pFAnJc5Y.js';
+import { S as SkillDiscoveryResult, a as SkillMetadata, b as SkillContent, c as SkillResource, d as SkillConfig } from './types-BfNpU8NS.js';
 
 /**
  * Skill Registry — in-memory store for discovered skills

package/dist/{runner-G1wxEgac.d.ts → runner-e2YRcUoX.d.ts}

@@ -1,8 +1,11 @@
-import * as ai from 'ai';
-import { LanguageModel, ModelMessage, TelemetrySettings } from 'ai';
-import { T as TokenUsage, M as Message } from './messages-BYWGn8TY.js';
-import { d as SkillConfig, T as Tool } from './tool-pFAnJc5Y.js';
-import { b as ToolContext } from './tool-DYp6-cC3.js';
+import { LanguageModel, ModelMessage, TelemetrySettings, SystemModelMessage } from 'ai';
+import { ProviderOptions } from '@ai-sdk/provider-utils';
+import { A as AgentEvent } from './events-CE72w8W4.js';
+import { d as SkillConfig } from './types-BfNpU8NS.js';
+import { T as TokenUsage } from './messages-BYWGn8TY.js';
+import { S as ScopeSnapshot } from './types-CQL-SvTn.js';
+import { b as ToolContext } from './tool-DLXAR9Ce.js';
+import { T as Tool } from './tool-BHbyUAy3.js';
 import { R as ReasoningLevel } from './types-CQaXbRsS.js';
 
 /**
@@ -89,7 +92,7 @@ type StreamChunk = {
 /**
  * Custom stream provider function type.
  *
- * This matches the signature needed for agent-core's LLM module,
+ * This matches the signature needed for agent-core's inference module,
  * returning a StreamProviderResult-compatible object.
  */
 type StreamProvider = (input: StreamProviderInput) => Promise<StreamProviderResult>;
@@ -171,147 +174,6 @@ interface EnhancedTools extends Array<unknown> {
     __customStreamModels?: string[];
 }
 
-/** Agent status for UI display */
-type AgentStatus = "idle" | "processing" | "thinking" | "reasoning" | "calling-tool" | "waiting-approval" | "error";
-/** Approval request for UI */
-interface ApprovalEvent {
-    id: string;
-    tool: string;
-    args: unknown;
-    description: string;
-    risk: "safe" | "moderate" | "dangerous";
-}
-/** Neutral turn-commit boundaries for runtime/durability integrations */
-type AgentTurnBoundaryKind = "input-commit-start" | "input-commit-finish" | "intervention-commit-start" | "intervention-commit-finish" | "step-commit-start" | "step-commit-finish" | "output-commit-start" | "output-commit-finish";
-/**
- * Events emitted during agent execution
- *
- * These events are designed for UI consumption:
- * - status: Overall agent state for status indicators
- * - approval-request: User confirmation needed
- * - progress: Step counts for progress bars
- */
-type AgentEvent = {
-    type: "status";
-    status: AgentStatus;
-} | {
-    type: "approval-request";
-    request: ApprovalEvent;
-} | {
-    type: "approval-resolved";
-    id: string;
-    action: "allow" | "deny" | "remember";
-} | {
-    type: "step-start";
-    step: number;
-    maxSteps: number;
-} | {
-    type: "step-finish";
-    step: number;
-    usage?: TokenUsage;
-    finishReason?: string;
-} | {
-    type: "turn-boundary";
-    boundary: AgentTurnBoundaryKind;
-    step?: number;
-    messageRole?: Message["role"];
-    pendingToolCallCount?: number;
-} | {
-    type: "message";
-    message: Message;
-} | {
-    type: "text-start";
-} | {
-    type: "text-delta";
-    text: string;
-} | {
-    type: "text-end";
-} | {
-    type: "reasoning-start";
-    id: string;
-} | {
-    type: "reasoning-delta";
-    id: string;
-    text: string;
-} | {
-    type: "reasoning-end";
-    id: string;
-} | {
-    type: "tool-start";
-    toolName: string;
-    toolCallId: string;
-    input: unknown;
-} | {
-    type: "tool-result";
-    toolName: string;
-    toolCallId: string;
-    result: unknown;
-} | {
-    type: "tool-error";
-    toolName: string;
-    toolCallId: string;
-    error: string;
-} | {
-    type: "computer-call";
-    callId: string;
-    action: unknown;
-    pendingSafetyChecks?: unknown[];
-} | {
-    type: "computer-result";
-    callId: string;
-    result: unknown;
-} | {
-    type: "intervention-applied";
-    id: string;
-    message: string;
-} | {
-    type: "doom-loop";
-    toolName: string;
-    repeatCount: number;
-} | {
-    type: "context-overflow";
-    inputTokens: number;
-    limit: number;
-} | {
-    type: "turn-summary";
-    turnId: string;
-    files: Array<{
-        path: string;
-        type: "created" | "modified" | "deleted" | "unchanged";
-        additions: number;
-        deletions: number;
-    }>;
-    additions: number;
-    deletions: number;
-} | {
-    type: "retry";
-    attempt: number;
-    delayMs: number;
-    error: Error;
-} | {
-    type: "error";
-    error: Error;
-} | {
-    type: "complete";
-    usage?: TokenUsage;
-    output?: string;
-};
-/**
- * Processor result - what happens after processing a turn
- */
-type ProcessorResult = "continue" | "stop" | "compact";
-/**
- * Stream input for the LLM
- */
-interface StreamInput {
-    sessionID: string;
-    model: ai.LanguageModel;
-    system: string[];
-    messages: ai.ModelMessage[];
-    abort: AbortSignal;
-    tools: Record<string, unknown>;
-}
-
 /**
  * Prompt Pipeline Types
  *
@@ -572,6 +434,26 @@ interface ModelCallInput {
     telemetry?: TelemetrySettings;
     customStreamProvider?: StreamProvider;
     toolExecutionMode?: "auto" | "plan";
+    /**
+     * Provider-specific options passed through to `streamText()`.
+     *
+     * Middleware can set these to enable provider features like Anthropic
+     * prompt caching (`{ anthropic: { cacheControl: { type: "ephemeral" } } }`).
+     *
+     * When multiple sources set providerOptions (e.g. middleware + reasoning),
+     * they are shallow-merged before the LLM call.
+     */
+    providerOptions?: ProviderOptions;
+    /**
+     * System messages with provider-specific options.
+     *
+     * When set, these take precedence over the plain `system` strings.
+     * This allows middleware to attach per-message metadata such as
+     * Anthropic `cacheControl` breakpoints on system content.
+     *
+     * Leave undefined to use the plain `system` string array.
+     */
+    systemMessages?: SystemModelMessage[];
 }
 /**
  * Context shared across model middleware hooks for a single step.
@@ -584,6 +466,7 @@ interface ModelCallContext {
     model: LanguageModel;
     toolNames: string[];
     mcpToolNames: string[];
+    scope?: ScopeSnapshot;
 }
 /**
  * Return this from `model.input(...)` to stop an LLM call entirely.
@@ -764,6 +647,57 @@ interface AgentMiddleware {
      */
     getOtelContext?(sessionId: string): unknown;
 }
+/**
+ * A user-facing command a plugin can register.
+ *
+ * How commands surface depends on the host:
+ *   - CLI/TUI → slash commands (e.g. `/deploy`)
+ *   - HTTP     → could be API routes
+ *   - Chatbot  → chat commands
+ *
+ * Hosts that don't support commands can silently ignore them.
+ */
+interface PluginCommand {
+    /** Command name (without leading slash) */
+    name: string;
+    /** Optional aliases */
+    alias?: string[];
+    /** One-line description shown in help */
+    summary: string;
+    /** Execute the command. Return the text to display, or null for silent. */
+    execute: (args: string) => Promise<string | null>;
+}
+/**
+ * The context object passed to a plugin's default export.
+ *
+ * Through the context, plugins contribute tools, middleware, and
+ * (optionally) host-specific commands.
+ *
+ * @example
+ * ```ts
+ * import { Tool, z, type PluginContext } from "@cuylabs/agent-code";
+ *
+ * export default function (ctx: PluginContext) {
+ *   ctx.addTool(Tool.define("ping", {
+ *     description: "Pong!",
+ *     parameters: z.object({}),
+ *     execute: async () => ({ title: "pong", output: "pong", metadata: {} }),
+ *   }));
+ * }
+ * ```
+ */
+interface PluginContext {
+    /** Working directory of the agent (project root) */
+    cwd: string;
+    /** Register a tool the LLM can call */
+    addTool(tool: Tool.AnyInfo): void;
+    /** Register middleware (model hooks, tool guards, prompt sections) */
+    addMiddleware(mw: AgentMiddleware): void;
+    /** Register a user-facing command (host-dependent) */
+    addCommand(cmd: PluginCommand): void;
+}
+/** The function shape a plugin file must default-export. */
+type PluginInit = (ctx: PluginContext) => void | Promise<void>;
 
 /**
  * Middleware Runner
@@ -849,4 +783,4 @@ declare class MiddlewareRunner {
     }): Promise<void>;
 }
 
-export { type AgentEvent as A, type BlockedModelCall as B, type EnhancedTools as E, type InstructionFile as I, MiddlewareRunner as M, type PromptConfig as P, type StreamChunk as S, type ToolCallDecision as T, type PromptBuildContext as a, type PromptSection as b, type ModelFamily as c, type ProcessorResult as d, type StreamProvider as e, type ModelCallInput as f, type AgentTurnBoundaryKind as g, type AgentMiddleware as h, type AgentModelHooks as i, type AgentStatus as j, type ApprovalEvent as k, type EnvironmentInfo as l, type ModelCallContext as m, type ModelCallOutput as n, type StreamInput as o, type StreamProviderConfig as p, type StreamProviderFactory as q, type StreamProviderInput as r, type StreamProviderResult as s };
+export { type AgentMiddleware as A, type BlockedModelCall as B, type EnhancedTools as E, type InstructionFile as I, MiddlewareRunner as M, type PromptConfig as P, type StreamChunk as S, type ToolCallDecision as T, type PromptBuildContext as a, type PromptSection as b, type ModelFamily as c, type StreamProvider as d, type ModelCallInput as e, type AgentModelHooks as f, type EnvironmentInfo as g, type ModelCallContext as h, type ModelCallOutput as i, type PluginCommand as j, type PluginContext as k, type PluginInit as l, type StreamProviderConfig as m, type StreamProviderFactory as n, type StreamProviderInput as o, type StreamProviderResult as p };

package/dist/runtime/index.d.ts

@@ -1,12 +1,47 @@
-import { A as AgentEvent } from '../runner-G1wxEgac.js';
+import { A as AgentEvent } from '../events-CE72w8W4.js';
 import { T as TokenUsage, M as Message } from '../messages-BYWGn8TY.js';
-import { n as AgentTurnStepCommitSnapshot, t as CreateAgentTurnStepCommitBatchOptions, f as AgentTurnCommitBatch, J as PrepareModelStepOptions, K as PreparedAgentModelStep, S as RunModelStepOptions, a as ProcessorOutput, U as RunToolBatchOptions, V as RunToolBatchResult, C as CommitOutputOptions, r as CommitStepOptions, l as AgentTurnState, p as AgentTurnStepCommitToolResult, o as AgentTurnStepCommitToolCall } from '../types-BWo810L_.js';
-export { b as AgentTurnActiveToolCall, c as AgentTurnBoundaryMetadata, d as AgentTurnBoundarySnapshot, e as AgentTurnCommitApplier, g as AgentTurnCommitOptions, h as AgentTurnEngine, i as AgentTurnEngineOptions, j as AgentTurnPhase, k as AgentTurnResolvedToolCall, m as AgentTurnStateAdvanceOptions, q as AgentTurnStepRuntimeConfig, s as CreateAgentTurnStateOptions, X as advanceAgentTurnState, Z as createAgentTurnEngine, _ as createAgentTurnState, a1 as failAgentTurnState } from '../types-BWo810L_.js';
+import { S as ScopeSnapshot } from '../types-CQL-SvTn.js';
+import { S as StepProcessingOptions, z as StepProcessingOutput, l as AgentTurnStepCommitSnapshot, r as CreateAgentTurnStepCommitBatchOptions, d as AgentTurnCommitBatch, P as PrepareModelStepOptions, u as PreparedAgentModelStep, R as RunModelStepOptions, x as RunToolBatchOptions, y as RunToolBatchResult, C as CommitOutputOptions, p as CommitStepOptions, j as AgentTurnState, n as AgentTurnStepCommitToolResult, m as AgentTurnStepCommitToolCall } from '../types-QKHHQLLq.js';
+export { A as AgentTurnActiveToolCall, a as AgentTurnBoundaryMetadata, b as AgentTurnBoundarySnapshot, c as AgentTurnCommitApplier, e as AgentTurnCommitOptions, f as AgentTurnEngine, g as AgentTurnEngineOptions, h as AgentTurnPhase, i as AgentTurnResolvedToolCall, k as AgentTurnStateAdvanceOptions, o as AgentTurnStepRuntimeConfig, q as CreateAgentTurnStateOptions, v as ProcessorOptions, w as ProcessorOutput, B as advanceAgentTurnState, E as createAgentTurnEngine, F as createAgentTurnState, G as failAgentTurnState } from '../types-QKHHQLLq.js';
+import { A as AnyInferenceResult } from '../types-KKDrdU9Y.js';
 import { ModelMessage } from 'ai';
-import '../tool-pFAnJc5Y.js';
+import '../tool-BHbyUAy3.js';
 import 'zod';
-import '../tool-DYp6-cC3.js';
+import '../tool-DLXAR9Ce.js';
+import '../types-CHiPh8U2.js';
+import '../runner-e2YRcUoX.js';
+import '@ai-sdk/provider-utils';
+import '../types-BfNpU8NS.js';
 import '../types-CQaXbRsS.js';
+import '../llm-error-D93FNNLY.js';
+
+/**
+ * Doom loop error thrown when repeated tool calls are detected.
+ */
+declare class DoomLoopError extends Error {
+    readonly toolName: string;
+    readonly repeatCount: number;
+    readonly input: unknown;
+    constructor(toolName: string, repeatCount: number, input: unknown);
+}
+
+/**
+ * Context overflow error.
+ */
+declare class ContextOverflowError extends Error {
+    readonly inputTokens: number;
+    readonly limit: number;
+    constructor(inputTokens: number, limit: number);
+}
+
+/**
+ * Process an inference stream into runtime step events.
+ */
+declare function processStepStream(stream: AnyInferenceResult, options: StepProcessingOptions): Promise<StepProcessingOutput>;
+/**
+ * @deprecated Use `processStepStream`.
+ */
+declare const processStream: typeof processStepStream;
 
 declare function createAgentTurnStepCommitBatch(step: number, snapshot: AgentTurnStepCommitSnapshot, options?: CreateAgentTurnStepCommitBatchOptions): AgentTurnCommitBatch | undefined;
 
@@ -18,7 +53,7 @@ declare function prepareModelStep(options: PrepareModelStepOptions): PreparedAge
 /**
  * Execute exactly one model/tool step and stream its events.
  */
-declare function runModelStep(options: RunModelStepOptions): AsyncGenerator<AgentEvent, ProcessorOutput>;
+declare function runModelStep(options: RunModelStepOptions): AsyncGenerator<AgentEvent, StepProcessingOutput>;
 
 /**
  * Execute planned tool calls outside the AI SDK loop.
@@ -82,6 +117,7 @@ interface AgentTaskExecutionRun<TPayload extends AgentTaskPayload = AgentTaskPay
     context: Readonly<AgentTaskExecutionContext>;
     sessionId: string;
     startedAt: string;
+    scope?: ScopeSnapshot;
 }
 interface AgentTaskExecutionSnapshot {
     sessionId: string;
@@ -98,6 +134,7 @@ interface AgentTaskExecutionSnapshot {
     startedAt: string;
     updatedAt: string;
     turnState: AgentTurnState;
+    scope?: ScopeSnapshot;
 }
 interface AgentTaskExecutionCheckpoint<TPayload extends AgentTaskPayload = AgentTaskPayload> {
     run: AgentTaskExecutionRun<TPayload>;
@@ -354,4 +391,4 @@ declare function failAgentWorkflowTurnState(state: AgentWorkflowTurnState, error
  */
 declare function convertAgentMessagesToModelMessages(messages: Message[]): ModelMessage[];
 
-export { type AgentTaskChatAdapter, type AgentTaskCheckpointReason, type AgentTaskCheckpointStrategy, type AgentTaskCheckpointStrategyInput, type AgentTaskExecutionCheckpoint, type AgentTaskExecutionContext, type AgentTaskExecutionRun, type AgentTaskExecutionSnapshot, type AgentTaskObserver, type AgentTaskPayload, type AgentTaskResult, type AgentTaskRunner, type AgentTaskRunnerOptions, AgentTurnCommitBatch, AgentTurnState, AgentTurnStepCommitSnapshot, AgentTurnStepCommitToolCall, AgentTurnStepCommitToolResult, type AgentWorkflowAssistantMessageSnapshot, type AgentWorkflowCommitResult, type AgentWorkflowMessageSnapshot, type AgentWorkflowModelStepPlan, type AgentWorkflowModelStepResult, type AgentWorkflowOperationPlan, type AgentWorkflowOutputCommitPlan, type AgentWorkflowReplayDecision, type AgentWorkflowStepCommitPlan, type AgentWorkflowSystemMessageSnapshot, type AgentWorkflowToolBatchResult, type AgentWorkflowToolCallPlan, type AgentWorkflowToolCallResult, type AgentWorkflowToolCallSnapshot, type AgentWorkflowToolMessageSnapshot, type AgentWorkflowTurnPhase, type AgentWorkflowTurnState, type AgentWorkflowUserMessageSnapshot, CommitOutputOptions, CommitStepOptions, CreateAgentTurnStepCommitBatchOptions, type CreateAgentWorkflowTurnStateOptions, PrepareModelStepOptions, PreparedAgentModelStep, RunModelStepOptions, RunToolBatchOptions, RunToolBatchResult, applyAgentWorkflowCommitResult, applyAgentWorkflowModelStepResult, applyAgentWorkflowToolBatchResult, applyAgentWorkflowToolCallResult, cloneAgentWorkflowTurnState, commitOutput, commitStep, convertAgentMessagesToModelMessages, createAgentTaskRunner, createAgentTurnStepCommitBatch, createAgentWorkflowTurnState, defaultAgentTaskCheckpointStrategy, failAgentWorkflowTurnState, planNextAgentWorkflowOperation, prepareModelStep, recordAgentWorkflowReplayDecision, restoreAgentWorkflowMessage, restoreAgentWorkflowMessages, runModelStep, runToolBatch, snapshotAgentWorkflowMessage, snapshotAgentWorkflowMessages };
+export { type AgentTaskChatAdapter, type AgentTaskCheckpointReason, type AgentTaskCheckpointStrategy, type AgentTaskCheckpointStrategyInput, type AgentTaskExecutionCheckpoint, type AgentTaskExecutionContext, type AgentTaskExecutionRun, type AgentTaskExecutionSnapshot, type AgentTaskObserver, type AgentTaskPayload, type AgentTaskResult, type AgentTaskRunner, type AgentTaskRunnerOptions, AgentTurnCommitBatch, AgentTurnState, AgentTurnStepCommitSnapshot, AgentTurnStepCommitToolCall, AgentTurnStepCommitToolResult, type AgentWorkflowAssistantMessageSnapshot, type AgentWorkflowCommitResult, type AgentWorkflowMessageSnapshot, type AgentWorkflowModelStepPlan, type AgentWorkflowModelStepResult, type AgentWorkflowOperationPlan, type AgentWorkflowOutputCommitPlan, type AgentWorkflowReplayDecision, type AgentWorkflowStepCommitPlan, type AgentWorkflowSystemMessageSnapshot, type AgentWorkflowToolBatchResult, type AgentWorkflowToolCallPlan, type AgentWorkflowToolCallResult, type AgentWorkflowToolCallSnapshot, type AgentWorkflowToolMessageSnapshot, type AgentWorkflowTurnPhase, type AgentWorkflowTurnState, type AgentWorkflowUserMessageSnapshot, CommitOutputOptions, CommitStepOptions, ContextOverflowError, CreateAgentTurnStepCommitBatchOptions, type CreateAgentWorkflowTurnStateOptions, DoomLoopError, PrepareModelStepOptions, PreparedAgentModelStep, RunModelStepOptions, RunToolBatchOptions, RunToolBatchResult, StepProcessingOptions, StepProcessingOutput, applyAgentWorkflowCommitResult, applyAgentWorkflowModelStepResult, applyAgentWorkflowToolBatchResult, applyAgentWorkflowToolCallResult, cloneAgentWorkflowTurnState, commitOutput, commitStep, convertAgentMessagesToModelMessages, createAgentTaskRunner, createAgentTurnStepCommitBatch, createAgentWorkflowTurnState, defaultAgentTaskCheckpointStrategy, failAgentWorkflowTurnState, planNextAgentWorkflowOperation, prepareModelStep, processStepStream, processStream, recordAgentWorkflowReplayDecision, restoreAgentWorkflowMessage, restoreAgentWorkflowMessages, runModelStep, runToolBatch, snapshotAgentWorkflowMessage, snapshotAgentWorkflowMessages };

package/dist/runtime/index.js

@@ -1,5 +1,7 @@
 import {
   AgentTurnEngine,
+  ContextOverflowError,
+  DoomLoopError,
   advanceAgentTurnState,
   applyAgentWorkflowCommitResult,
   applyAgentWorkflowModelStepResult,
@@ -19,6 +21,8 @@ import {
   failAgentWorkflowTurnState,
   planNextAgentWorkflowOperation,
   prepareModelStep,
+  processStepStream,
+  processStream,
   recordAgentWorkflowReplayDecision,
   restoreAgentWorkflowMessage,
   restoreAgentWorkflowMessages,
@@ -26,15 +30,20 @@ import {
   runToolBatch,
   snapshotAgentWorkflowMessage,
   snapshotAgentWorkflowMessages
-} from "../chunk-3C4VKG4P.js";
-import "../chunk-FG4MD5MU.js";
+} from "../chunk-4BDA7DQY.js";
+import "../chunk-WWYYNWEW.js";
+import "../chunk-N6HWIEEA.js";
+import "../chunk-7VKQ4WPB.js";
 import "../chunk-VEKUXUVF.js";
-import "../chunk-QAQADS4X.js";
-import "../chunk-X635CM2F.js";
-import "../chunk-QWFMX226.js";
+import "../chunk-SQU2AJHO.js";
+import "../chunk-N7P4PN3O.js";
+import "../chunk-RZITT45F.js";
+import "../chunk-RFEKJKTO.js";
 import "../chunk-DWYX7ASF.js";
 export {
   AgentTurnEngine,
+  ContextOverflowError,
+  DoomLoopError,
   advanceAgentTurnState,
   applyAgentWorkflowCommitResult,
   applyAgentWorkflowModelStepResult,
@@ -54,6 +63,8 @@ export {
   failAgentWorkflowTurnState,
   planNextAgentWorkflowOperation,
   prepareModelStep,
+  processStepStream,
+  processStream,
   recordAgentWorkflowReplayDecision,
   restoreAgentWorkflowMessage,
   restoreAgentWorkflowMessages,

package/dist/safety/index.d.ts

@@ -0,0 +1,38 @@
+import { R as RiskLevel, a as ApprovalConfig, c as ApprovalRule } from '../types-CWm-7rvB.js';
+export { A as ApprovalAction, b as ApprovalRequest } from '../types-CWm-7rvB.js';
+
+/**
+ * Get the risk level for a tool.
+ */
+declare function getToolRisk(tool: string, customRisks?: Record<string, RiskLevel>): RiskLevel;
+
+/**
+ * Thrown when a user or rule denies an operation.
+ */
+declare class ApprovalDeniedError extends Error {
+    readonly tool: string;
+    readonly args: unknown;
+    constructor(tool: string, args: unknown, message?: string);
+}
+/**
+ * Thrown when an approval request times out.
+ */
+declare class ApprovalTimeoutError extends Error {
+    readonly tool: string;
+    readonly timeoutMs: number;
+    constructor(tool: string, timeoutMs: number);
+}
+
+/**
+ * Creates an approval handler for managing tool execution permissions.
+ */
+declare function createApprovalHandler(config?: ApprovalConfig): {
+    request: (sessionId: string, tool: string, args: unknown, customRisks?: Record<string, RiskLevel>) => Promise<void>;
+    cancelAll: (reason?: string) => void;
+    addRule: (rule: ApprovalRule) => void;
+    getRules: () => readonly ApprovalRule[];
+    clearSessionRules: () => void;
+};
+type ApprovalHandler = ReturnType<typeof createApprovalHandler>;
+
+export { ApprovalConfig, ApprovalDeniedError, type ApprovalHandler, ApprovalRule, ApprovalTimeoutError, RiskLevel, createApprovalHandler, getToolRisk };

package/dist/safety/index.js

@@ -0,0 +1,12 @@
+import {
+  ApprovalDeniedError,
+  ApprovalTimeoutError,
+  createApprovalHandler,
+  getToolRisk
+} from "../chunk-BFM2YHNM.js";
+export {
+  ApprovalDeniedError,
+  ApprovalTimeoutError,
+  createApprovalHandler,
+  getToolRisk
+};