@makaio/framework 1.0.0-dev-1784806252593 → 1.0.0-dev-1785344643235

package/dist/storage/handlers/drizzle/index.d.mts

@@ -1,2 +1,2 @@
-import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../../index-BG9-vQHD.mjs";
+import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../../index-DZunhZec.mjs";
 export { CrudLifecycleConfig, DrizzleCrudConfig, DrizzleListConfig, buildScopePredicates, createDrizzleCrudHandlers, createDrizzleListHandler };

package/dist/storage/handlers/drizzle/index.mjs

@@ -1 +1 @@
-import{n as e,r as t,t as n}from"../../../drizzle-oCH9H53q.mjs";export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler};
+import{n as e,r as t,t as n}from"../../../drizzle-z_0SiGY8.mjs";export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler};

package/dist/storage/handlers/index.d.mts

@@ -1,4 +1,4 @@
-import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../index-BG9-vQHD.mjs";
+import { a as DrizzleCrudConfig, i as CrudLifecycleConfig, n as createDrizzleListHandler, o as DrizzleListConfig, r as createDrizzleCrudHandlers, t as buildScopePredicates } from "../../index-DZunhZec.mjs";
 
 //#region storage/handlers/src/utils.d.ts
 /**

package/dist/storage/handlers/index.mjs

@@ -1 +1 @@
-import{n as e,r as t,t as n}from"../../drizzle-oCH9H53q.mjs";function r(e,t){let n={...e};for(let e of t)n[e]===null&&(n[e]=void 0);return n}function i(e,t){let n={...e};for(let e of t)n[e]===void 0&&(n[e]=null);return n}export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler,r as nullToUndefined,i as undefinedToNull};
+import{n as e,r as t,t as n}from"../../drizzle-z_0SiGY8.mjs";function r(e,t){let n={...e};for(let e of t)n[e]===null&&(n[e]=void 0);return n}function i(e,t){let n={...e};for(let e of t)n[e]===void 0&&(n[e]=null);return n}export{n as buildScopePredicates,t as createDrizzleCrudHandlers,e as createDrizzleListHandler,r as nullToUndefined,i as undefinedToNull};

package/dist/testing/drizzle-harness.d.mts

@@ -97,6 +97,47 @@ interface PluginTestDbConfig {
  * @returns Object with db, dbPath, close, and cleanup
  */
 declare function createTempDb(name: string): Promise<TestDbContext>;
+/**
+ * One temporary database file that independent connections can be opened on.
+ *
+ * It exists for suites about restart: a component that is torn down and rebuilt
+ * against the same durable state must be rebuilt against a *new connection*, or
+ * the suite proves only that one JavaScript object still agrees with itself.
+ * Handing out connections rather than a single handle is what makes that the
+ * default rather than something each suite has to remember.
+ */
+interface RestartableTestDb {
+  /** Absolute path of the single file every connection is opened on. */
+  readonly dbPath: string;
+  /**
+   * Open one more independent connection to that file.
+   *
+   * Each call returns a separate connection with its own transaction state, so
+   * two handles see each other's writes only once they are committed.
+   * @returns A newly opened handle to the shared database file.
+   */
+  connect(): Promise<MakaioDatabase>;
+  /**
+   * Close every connection handed out and remove the database files.
+   * @returns Promise that settles once all connections are closed.
+   */
+  close(): Promise<void>;
+}
+/**
+ * Create a temporary SQLite database that survives its connections.
+ *
+ * Unlike {@link createTempDb} this hands out no initial handle: a caller states
+ * how many independent connections it wants by calling
+ * {@link RestartableTestDb.connect}, which is the whole point when the suite is
+ * about what survives a restart.
+ *
+ * Nothing is opened here: the file is created by the first
+ * {@link RestartableTestDb.connect}, which is also where a driver problem
+ * surfaces.
+ * @param name - Service name used in the temporary file name.
+ * @returns The shared store, its path, and its teardown.
+ */
+declare function createRestartableTempDb(name: string): RestartableTestDb;
 /**
  * Creates a suite-level test database for plugin storage tests.
  *
@@ -136,11 +177,11 @@ declare function createPgBrandedTestDb(): Promise<PgBrandedTestDbContext>;
  * Creates cleanup function for test database.
  * @param handlerCleanup - Storage handler cleanup function
  * @param close - Function to close the database connection. Must close synchronously
- *   (true for all SQLite drivers) — the temp file is unlinked immediately after the
+ *   (true for all SQLite drivers) — the temp files are unlinked immediately after the
  *   call, so clients whose close resolves asynchronously must use an awaited teardown
  *   such as {@link PluginTestDbContext.close} instead.
  * @param dbPath - Path to temp database file
- * @returns Cleanup function that closes connection and deletes temp file
+ * @returns Cleanup function that closes the connection and deletes the temp files
  */
 declare function createDbCleanup(handlerCleanup: () => void, close: () => void, dbPath: string): () => void;
 /**
@@ -173,4 +214,4 @@ interface PluginStorageTestContext {
  */
 declare function usePluginStorageTestLifecycle(createTestDbFn: () => Promise<PluginTestDbContext>): PluginStorageTestContext;
 //#endregion
-export { PgBrandedTestDbContext, PluginStorageTestContext, PluginTestDbConfig, PluginTestDbContext, TestDbContext, TestDbContextWithCleanup, createDbCleanup, createPgBrandedTestDb, createPluginTestDb, createTempDb, usePluginStorageTestLifecycle };
+export { PgBrandedTestDbContext, PluginStorageTestContext, PluginTestDbConfig, PluginTestDbContext, RestartableTestDb, TestDbContext, TestDbContextWithCleanup, createDbCleanup, createPgBrandedTestDb, createPluginTestDb, createRestartableTempDb, createTempDb, usePluginStorageTestLifecycle };

package/dist/testing/drizzle-harness.mjs

@@ -1 +1 @@
-import{createRequire as e}from"node:module";import{pathToFileURL as t}from"node:url";import*as n from"node:path";import*as r from"node:fs";import{brandDatabase as i,findStorageEngine as a,getRawSqlExecutor as o,registerStorageEngine as s}from"@makaio/framework/storage/drizzle";import{sql as c}from"drizzle-orm";import*as l from"node:os";import{afterAll as u,afterEach as d,beforeAll as f,beforeEach as p}from"vitest";import{drizzle as m}from"drizzle-orm/libsql";import{createDatabaseClient as h}from"@makaio/framework/storage/drizzle/client";const g=e(import.meta.url);async function _(e){let t=n.join(l.tmpdir(),`makaio-${e}-test-${crypto.randomUUID()}.db`),{db:i,close:a}=await h({url:`file:${t}`}),s=o(i);try{await s.run(c`SELECT 1`)}catch(e){await a();try{r.unlinkSync(t)}catch{}throw e}return{db:i,dbPath:t,exec:e=>s.run(e),close:a,cleanup:x(()=>{},a,t)}}async function v(e){let t=n.join(l.tmpdir(),`makaio-${e.name}-test-${crypto.randomUUID()}.db`),{db:i,close:a}=await h({url:`file:${t}`}),s=o(i);try{for(let t of e.schemas)await s.run(t)}catch(e){await a();try{r.unlinkSync(t)}catch{}throw e}return{db:i,dbPath:t,exec:e=>s.run(e),clearData:async()=>{for(let t of e.tables)await s.run(c.raw(`DELETE FROM ${t}`))},registerHandlers:()=>e.registerHandlers(i),close:async()=>{await a();try{r.unlinkSync(t)}catch{}}}}async function y(){let{storageEngine:e}=await import(t(g.resolve(`@makaio/storage-pg`)).href);return e}async function b(){if(!a(`postgres`)){let e;try{e=await y()}catch(e){throw Error(`createPgBrandedTestDb requires @makaio/storage-pg to be resolvable from @makaio/test-utils.`,{cause:e})}s(e)}let e=[],t={async run(t){return e.push(JSON.stringify(t.queryChunks)),{rowsAffected:0}},async all(){return[]}},n={dialect:`postgres`,run:t.run,all:t.all,withSession:e=>e(t)};return{db:i(m({connection:{url:`:memory:`}}),`postgres`,n),statements:e}}function x(e,t,n){return()=>{e(),t();try{r.unlinkSync(n)}catch{}}}function S(e){let t,n;return f(async()=>{t=await e()}),p(async()=>{if(!t)throw Error(`usePluginStorageTestLifecycle: createTestDbFn did not initialize db context`);await t.clearData(),n=t.registerHandlers()}),d(()=>{n?.(),n=void 0}),u(async()=>{t&&await t.close()}),{get dbContext(){return t}}}export{x as createDbCleanup,b as createPgBrandedTestDb,v as createPluginTestDb,_ as createTempDb,S as usePluginStorageTestLifecycle};
+import{createRequire as e}from"node:module";import{pathToFileURL as t}from"node:url";import*as n from"node:path";import*as r from"node:fs";import{brandDatabase as i,findStorageEngine as a,getRawSqlExecutor as o,registerStorageEngine as s}from"@makaio/framework/storage/drizzle";import{sql as c}from"drizzle-orm";import*as l from"node:os";import{afterAll as u,afterEach as d,beforeAll as f,beforeEach as p}from"vitest";import{drizzle as m}from"drizzle-orm/libsql";import{createDatabaseClient as h}from"@makaio/framework/storage/drizzle/client";const g=e(import.meta.url);async function _(e,t,n){let r=[e];try{await t()}catch(e){r.push(e)}finally{n?.()}throw r.length===1?e:AggregateError(r,`Database setup and cleanup both failed`)}async function v(e){let t=n.join(l.tmpdir(),`makaio-${e}-test-${crypto.randomUUID()}.db`),{db:r,close:i}=await h({url:`file:${t}`}),a=o(r);try{await a.run(c`SELECT 1`)}catch(e){await _(e,i,()=>C(t))}return{db:r,dbPath:t,exec:e=>a.run(e),close:i,cleanup:w(()=>{},i,t)}}function y(e){let t=n.join(l.tmpdir(),`makaio-${e}-test-${crypto.randomUUID()}.db`),r=[],i;return{dbPath:t,connect:async()=>{let e=await h({url:`file:${t}`});try{await o(e.db).run(c`SELECT 1`)}catch(t){await _(t,e.close)}return r.push(e.close),e.db},close:()=>i??=(async()=>{let e=await Promise.allSettled(r.splice(0).map(e=>e()));C(t);let n=e.filter(e=>e.status===`rejected`);if(n.length>0)throw AggregateError(n.map(e=>e.reason),`Failed to close ${n.length} restartable test database connections`)})()}}async function b(e){let t=n.join(l.tmpdir(),`makaio-${e.name}-test-${crypto.randomUUID()}.db`),{db:r,close:i}=await h({url:`file:${t}`}),a=o(r);try{for(let t of e.schemas)await a.run(t)}catch(e){await _(e,i,()=>C(t))}return{db:r,dbPath:t,exec:e=>a.run(e),clearData:async()=>{for(let t of e.tables)await a.run(c.raw(`DELETE FROM ${t}`))},registerHandlers:()=>e.registerHandlers(r),close:async()=>{try{await i()}finally{C(t)}}}}async function x(){let{storageEngine:e}=await import(t(g.resolve(`@makaio/storage-pg`)).href);return e}async function S(){if(!a(`postgres`)){let e;try{e=await x()}catch(e){throw Error(`createPgBrandedTestDb requires @makaio/storage-pg to be resolvable from @makaio/test-utils.`,{cause:e})}s(e)}let e=[],t={async run(t){return e.push(JSON.stringify(t.queryChunks)),{rowsAffected:0}},async all(){return[]}},n={dialect:`postgres`,run:t.run,all:t.all,withSession:e=>e(t)};return{db:i(m({connection:{url:`:memory:`}}),`postgres`,n),statements:e}}function C(e){for(let t of[``,`-wal`,`-shm`])try{r.unlinkSync(`${e}${t}`)}catch{}}function w(e,t,n){return()=>{let r=[];try{e()}catch(e){r.push(e)}try{t()}catch(e){r.push(e)}finally{C(n)}if(r.length>0)throw AggregateError(r,`Test database cleanup failed with ${r.length} error(s)`)}}function T(e){let t,n;return f(async()=>{t=await e()}),p(async()=>{if(!t)throw Error(`usePluginStorageTestLifecycle: createTestDbFn did not initialize db context`);await t.clearData(),n=t.registerHandlers()}),d(()=>{try{n?.()}finally{n=void 0}}),u(async()=>{t&&await t.close()}),{get dbContext(){return t}}}export{w as createDbCleanup,S as createPgBrandedTestDb,b as createPluginTestDb,y as createRestartableTempDb,v as createTempDb,T as usePluginStorageTestLifecycle};

package/dist/{tool-approval-service-fIZ9x0kL.mjs → tool-approval-service-kBA0fRzm.mjs}

@@ -1 +1 @@
-import{F as e}from"./handlers-cMBmexF4.mjs";import{SessionStorageSubjects as t}from"./services/session/storage/namespace.mjs";import"./session-idI1jk5X.mjs";import{AgentSubjects as n,ApprovalSubjects as r,HarnessSubjects as i,computeMetaTags as a}from"@makaio/framework/contracts";import{BaseService as o}from"@makaio/framework/service-base";import{extractToolFilePath as s}from"@makaio/framework/tools";const c={"full-access":0,"always-ask":1,reject:2};function l(){return`apr_${crypto.randomUUID()}`}function u(e){switch(e){case`allow`:return`full-access`;case`deny`:return`reject`;case`ask`:return`always-ask`}}function d(e){if(!e?.length)return`neutral`;let t=a(e);return t.includes(`destructive`)?`destructive`:t.includes(`read-only`)?`safe`:`neutral`}function f(e,t){if(e)return t&&e.toolApprovalOverrides?.[t]!==void 0?e.toolApprovalOverrides[t]:e.approvalPolicy}function p(e,t,n,r){let i=r[t];if(!i?.length)return e;let a=e;for(let e of i){let t=n[e];t&&c[t]>c[a]&&(a=t)}return a}function m(e,t,n){return n.handled?n.data.allowedDirectories??void 0:t?[]:void 0}function h(e,t,n){if(!n||!e?.cwd)return{};let r;return(e.personaId||e.profileId)&&t&&(r=m(e.personaId,e.profileId,t)),{cwd:e.cwd,...r&&{allowedDirectories:r}}}function g(e,t,n){if(!(!e&&!t))return!n||!n.handled?{policy:`always-ask`}:{policy:u(n.data.action),...n.data.personaName&&{personaName:n.data.personaName},...n.data.profileName&&{profileName:n.data.profileName}}}function _(e,t){let n=t.harness?.toolCapabilityMap&&e.toolName?t.harness.toolCapabilityMap[e.toolName]:void 0;return{requestId:l(),toolCallId:e.toolCallId,toolName:e.toolName,args:e.args,agentId:e.agentId,sessionId:e.sessionId,adapterName:t.resolvedAdapterName,...t.personaName&&{personaName:t.personaName},...t.profileName&&{profileName:t.profileName},capabilities:n,riskLevel:d(n),reasoning:e.reasoning,createdAt:Date.now()}}var v=class extends o{logger=console;options;constructor(e,t={}){super(e),this.options=t}async onInit(){this.registerHandler(n.toolApprove,async e=>{let t=await this.getAgentMetadata(e.payload.agentId,e.payload.sessionId),n=(t?.personaId||t?.profileId)&&e.payload.toolName?await this.fetchRawEnrichedPolicy(t?.personaId,t?.profileId,e.payload.toolName):void 0,r=h(t,n,this.options.fileAccessRuleProvider),i=await this.checkFileAccessDenyReason(e.payload,r);if(i){e.setResult({action:`deny`,message:i,shouldAbort:!1});return}let a=await this.resolveSessionOverride(e.payload.sessionId);if(a===`full-access`){e.setResult({action:`allow`});return}if(a===`reject`){e.setResult({action:`deny`,message:`Tool use rejected by session approval policy override`,shouldAbort:!1});return}let o=await this.resolvePolicyWithContext({adapterName:e.payload.adapterName,toolName:e.payload.toolName},t,n);switch(a===`always-ask`?`always-ask`:o.policy){case`full-access`:e.setResult({action:`allow`});return;case`reject`:e.setResult({action:`deny`,message:`Tool use rejected by approval policy`,shouldAbort:!1});return;case`always-ask`:await this.dispatchAlwaysAskApproval(e.payload,e.setResult.bind(e),o);return}})}async dispatchAlwaysAskApproval(e,t,i){let a=_(e,i),o=new AbortController,s=this.bus.on(n.session.closed,()=>{o.abort()},{filter:{agentId:a.agentId,...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}});try{let e=await this.bus.requestOptional(r.request,a,{timeout:0,signal:o.signal});e.handled&&e.data.action===`allow`?t({action:`allow`,...e.data.updatedInput&&{updatedInput:e.data.updatedInput}}):t({action:`deny`,message:e.handled&&e.data.action===`deny`?e.data.message??`User denied tool execution`:`No approval handler available`,shouldAbort:!1})}catch{t({action:`deny`,message:o.signal.aborted?`Approval cancelled — agent session closed`:`Tool approval request failed`,shouldAbort:!1})}finally{s()}}async checkFileAccessDenyReason(e,t){if(!this.options.fileAccessRuleProvider||!t.cwd)return;let n=s(e.toolName,e.args,t.cwd);if(n)try{return(await this.options.fileAccessRuleProvider(t.cwd,t.allowedDirectories)).isDenied(n)?`Access denied: '${n}' is restricted by .makaioignore rules`:void 0}catch{return`Access denied: file access rules could not be evaluated`}}async fetchRawEnrichedPolicy(e,t,n){try{return await this.bus.requestOptional(r.resolveEnrichedPolicy,{toolName:n,personaId:e,profileId:t})}catch(r){return this.logger.error(`[ToolApprovalService] approval.resolveEnrichedPolicy failed; falling back to fail-closed`,{toolName:n,personaId:e,profileId:t,error:r}),{handled:!1}}}async resolvePolicyWithContext(e,t,n){let r=t?.adapterName??e.adapterName,i=g(t?.personaId,t?.profileId,n),a=await this.resolveHarnessPolicy(r,t?.harnessId,t?.clientId),o=f(a,e.toolName),s=i?.policy??o??`always-ask`,c=s;return a?.capabilityOverrides&&a.toolCapabilityMap&&e.toolName&&(c=p(s,e.toolName,a.capabilityOverrides,a.toolCapabilityMap)),{policy:c,harness:a,agent:t,resolvedAdapterName:r,...i?.personaName&&{personaName:i.personaName},...i?.profileName&&{profileName:i.profileName}}}async getAgentMetadata(t,n){try{if(n){let{agents:r}=await this.bus.request(e.listBySession,{sessionId:n});return r.find(e=>e.agentId===t)??null}let r=await this.bus.requestOptional(e.get,{agentId:t});return r.handled?r.data.agent:null}catch{return null}}async resolveSessionOverride(e){if(e)try{let n=await this.bus.requestOptional(t.get,{sessionId:e});return n.handled?n.data.session?.approvalPolicyOverride??void 0:void 0}catch{return}}async resolveHarnessPolicy(e,t,n){try{let r=await this.bus.request(i.resolve,{adapterName:e,...t&&{profileHarnessId:t},...n&&{clientId:n}});return{approvalPolicy:r.approvalPolicy,capabilityOverrides:r.capabilityOverrides,toolCapabilityMap:r.toolCapabilityMap,toolApprovalOverrides:r.toolApprovalOverrides}}catch{return}}};export{v as t};
+import{F as e}from"./handlers-CfnLyLfE.mjs";import{SessionStorageSubjects as t}from"./services/session/storage/namespace.mjs";import"./session-BTFiDoGz.mjs";import{AgentSubjects as n,ApprovalSubjects as r,HarnessSubjects as i,computeMetaTags as a}from"@makaio/framework/contracts";import{BaseService as o}from"@makaio/framework/service-base";import{extractToolFilePath as s}from"@makaio/framework/tools";const c={"full-access":0,"always-ask":1,reject:2};function l(){return`apr_${crypto.randomUUID()}`}function u(e){switch(e){case`allow`:return`full-access`;case`deny`:return`reject`;case`ask`:return`always-ask`}}function d(e){if(!e?.length)return`neutral`;let t=a(e);return t.includes(`destructive`)?`destructive`:t.includes(`read-only`)?`safe`:`neutral`}function f(e,t){if(e)return t&&e.toolApprovalOverrides?.[t]!==void 0?e.toolApprovalOverrides[t]:e.approvalPolicy}function p(e,t,n,r){let i=r[t];if(!i?.length)return e;let a=e;for(let e of i){let t=n[e];t&&c[t]>c[a]&&(a=t)}return a}function m(e,t,n){return n.handled?n.data.allowedDirectories??void 0:t?[]:void 0}function h(e,t,n){if(!n||!e?.cwd)return{};let r;return(e.personaId||e.profileId)&&t&&(r=m(e.personaId,e.profileId,t)),{cwd:e.cwd,...r&&{allowedDirectories:r}}}function g(e,t,n){if(!(!e&&!t))return!n||!n.handled?{policy:`always-ask`}:{policy:u(n.data.action),...n.data.personaName&&{personaName:n.data.personaName},...n.data.profileName&&{profileName:n.data.profileName}}}function _(e,t){let n=t.harness?.toolCapabilityMap&&e.toolName?t.harness.toolCapabilityMap[e.toolName]:void 0;return{requestId:l(),toolCallId:e.toolCallId,toolName:e.toolName,args:e.args,agentId:e.agentId,sessionId:e.sessionId,adapterName:t.resolvedAdapterName,...t.personaName&&{personaName:t.personaName},...t.profileName&&{profileName:t.profileName},capabilities:n,riskLevel:d(n),reasoning:e.reasoning,createdAt:Date.now()}}var v=class extends o{logger=console;options;constructor(e,t={}){super(e),this.options=t}async onInit(){this.registerHandler(n.toolApprove,async e=>{let t=await this.getAgentMetadata(e.payload.agentId,e.payload.sessionId),n=(t?.personaId||t?.profileId)&&e.payload.toolName?await this.fetchRawEnrichedPolicy(t?.personaId,t?.profileId,e.payload.toolName):void 0,r=h(t,n,this.options.fileAccessRuleProvider),i=await this.checkFileAccessDenyReason(e.payload,r);if(i){e.setResult({action:`deny`,message:i,shouldAbort:!1});return}let a=await this.resolveSessionOverride(e.payload.sessionId);if(a===`full-access`){e.setResult({action:`allow`});return}if(a===`reject`){e.setResult({action:`deny`,message:`Tool use rejected by session approval policy override`,shouldAbort:!1});return}let o=await this.resolvePolicyWithContext({adapterName:e.payload.adapterName,toolName:e.payload.toolName},t,n);switch(a===`always-ask`?`always-ask`:o.policy){case`full-access`:e.setResult({action:`allow`});return;case`reject`:e.setResult({action:`deny`,message:`Tool use rejected by approval policy`,shouldAbort:!1});return;case`always-ask`:await this.dispatchAlwaysAskApproval(e.payload,e.setResult.bind(e),o);return}})}async dispatchAlwaysAskApproval(e,t,i){let a=_(e,i),o=new AbortController,s=this.bus.on(n.session.closed,()=>{o.abort()},{filter:{agentId:a.agentId,...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}});try{let e=await this.bus.requestOptional(r.request,a,{timeout:0,signal:o.signal});e.handled&&e.data.action===`allow`?t({action:`allow`,...e.data.updatedInput&&{updatedInput:e.data.updatedInput}}):t({action:`deny`,message:e.handled&&e.data.action===`deny`?e.data.message??`User denied tool execution`:`No approval handler available`,shouldAbort:!1})}catch{t({action:`deny`,message:o.signal.aborted?`Approval cancelled — agent session closed`:`Tool approval request failed`,shouldAbort:!1})}finally{s()}}async checkFileAccessDenyReason(e,t){if(!this.options.fileAccessRuleProvider||!t.cwd)return;let n=s(e.toolName,e.args,t.cwd);if(n)try{return(await this.options.fileAccessRuleProvider(t.cwd,t.allowedDirectories)).isDenied(n)?`Access denied: '${n}' is restricted by .makaioignore rules`:void 0}catch{return`Access denied: file access rules could not be evaluated`}}async fetchRawEnrichedPolicy(e,t,n){try{return await this.bus.requestOptional(r.resolveEnrichedPolicy,{toolName:n,personaId:e,profileId:t})}catch(r){return this.logger.error(`[ToolApprovalService] approval.resolveEnrichedPolicy failed; falling back to fail-closed`,{toolName:n,personaId:e,profileId:t,error:r}),{handled:!1}}}async resolvePolicyWithContext(e,t,n){let r=t?.adapterName??e.adapterName,i=g(t?.personaId,t?.profileId,n),a=await this.resolveHarnessPolicy(r,t?.harnessId,t?.clientId),o=f(a,e.toolName),s=i?.policy??o??`always-ask`,c=s;return a?.capabilityOverrides&&a.toolCapabilityMap&&e.toolName&&(c=p(s,e.toolName,a.capabilityOverrides,a.toolCapabilityMap)),{policy:c,harness:a,agent:t,resolvedAdapterName:r,...i?.personaName&&{personaName:i.personaName},...i?.profileName&&{profileName:i.profileName}}}async getAgentMetadata(t,n){try{if(n){let{agents:r}=await this.bus.request(e.listBySession,{sessionId:n});return r.find(e=>e.agentId===t)??null}let r=await this.bus.requestOptional(e.get,{agentId:t});return r.handled?r.data.agent:null}catch{return null}}async resolveSessionOverride(e){if(e)try{let n=await this.bus.requestOptional(t.get,{sessionId:e});return n.handled?n.data.session?.approvalPolicyOverride??void 0:void 0}catch{return}}async resolveHarnessPolicy(e,t,n){try{let r=await this.bus.request(i.resolve,{adapterName:e,...t&&{profileHarnessId:t},...n&&{clientId:n}});return{approvalPolicy:r.approvalPolicy,capabilityOverrides:r.capabilityOverrides,toolCapabilityMap:r.toolCapabilityMap,toolApprovalOverrides:r.toolApprovalOverrides}}catch{return}}};export{v as t};

package/dist/tools-PdG9fO1M.mjs

@@ -0,0 +1 @@
+import{u as e}from"./framework-packages-C3RWfJDk.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};

package/dist/{transition-BuUKc2J1.d.mts → transition-DuVzKt8-.d.mts}

@@ -1,5 +1,5 @@
-import { q as ArtifactRevision$1 } from "./context-resolution-B5IH2Z9v.mjs";
-import { i as JsonValue$1 } from "./json-value-BwVdTylT.mjs";
+import { q as ArtifactRevision$1 } from "./context-resolution-BQBk4Ish.mjs";
+import { i as JsonValue$1 } from "./json-value-Brslhqbm.mjs";
 import { z } from "zod";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 
@@ -258,8 +258,7 @@ type TransitionCondition = z.infer<typeof TransitionConditionSchema>;
  * Invocation descriptor for the action to execute when a transition rule fires.
  *
  * `type` selects the registered action handler; `input` supplies the
- * action-specific payload; `executionHints` threads optional infrastructure
- * hints to the execution host.
+ * action-specific payload.
  *
  * Built-in action type:
  * - `'workflow.start'` — start a workflow execution via the bus
@@ -267,25 +266,6 @@ type TransitionCondition = z.infer<typeof TransitionConditionSchema>;
 declare const TransitionActionInvocationSchema: z.ZodObject<{
   type: z.ZodString;
   input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-  executionHints: z.ZodOptional<z.ZodObject<{
-    source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-      kind: z.ZodLiteral<"path">;
-      path: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-      kind: z.ZodLiteral<"source">;
-      filename: z.ZodString;
-      source: z.ZodString;
-    }, z.core.$strict>], "kind">>;
-    requirements: z.ZodOptional<z.ZodObject<{
-      isolation: z.ZodOptional<z.ZodEnum<{
-        local: "local";
-        remote: "remote";
-        container: "container";
-      }>>;
-      capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-    providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-  }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
 }, z.core.$strip>;
 type TransitionActionInvocation$1 = z.infer<typeof TransitionActionInvocationSchema>;
 /**
@@ -314,25 +294,6 @@ declare const TransitionRuleDefinitionSchema$1: z.ZodObject<{
   action: z.ZodObject<{
     type: z.ZodString;
     input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>;
   enabled: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;

package/dist/{types-LspCUW09.d.mts → types-B1MNcwgH.d.mts}

@@ -1,4 +1,4 @@
-import { r as LogImportMode, t as LogImporterInfo } from "./index-DaMfTvfz.mjs";
+import { r as LogImportMode, t as LogImporterInfo } from "./index-DA9g2A5P.mjs";
 import * as _$_makaio_bus_core0 from "@makaio/framework/bus";
 import { IMakaioBus } from "@makaio/framework/bus";
 import { LogImportOrchestrator, LogImporter } from "@makaio/framework/adapters";

package/dist/{types-D2KG8ewJ.d.mts → types-BqVAOzJP.d.mts}

@@ -1,5 +1,5 @@
-import { i as JsonValue$1 } from "./json-value-BwVdTylT.mjs";
-import { s as MessageBlock$1 } from "./index-4NQLoI7R.mjs";
+import { i as JsonValue$1 } from "./json-value-Brslhqbm.mjs";
+import { s as MessageBlock$1 } from "./index-CUvNKYkV.mjs";
 import * as _$zod from "zod";
 import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
@@ -24,9 +24,9 @@ declare const SessionCreateBaseSchema: z.ZodObject<{
   forkPointMessageId: z.ZodOptional<z.ZodString>;
   branchKind: z.ZodOptional<z.ZodEnum<{
     fork: "fork";
+    branch: "branch";
     subagent: "subagent";
     compress: "compress";
-    branch: "branch";
     rewrite: "rewrite";
     coordinator: "coordinator";
     aside: "aside";
@@ -163,8 +163,8 @@ declare const MakaioSessionSchema: z.ZodObject<{
     lastActivityAt: z.ZodNumber;
   }, z.core.$strip>>;
   status: z.ZodEnum<{
-    closed: "closed";
     discovered: "discovered";
+    closed: "closed";
     active: "active";
     archived: "archived";
   }>;
@@ -178,9 +178,9 @@ declare const MakaioSessionSchema: z.ZodObject<{
   forkPointMessageId: z.ZodOptional<z.ZodString>;
   branchKind: z.ZodOptional<z.ZodEnum<{
     fork: "fork";
+    branch: "branch";
     subagent: "subagent";
     compress: "compress";
-    branch: "branch";
     rewrite: "rewrite";
     coordinator: "coordinator";
     aside: "aside";
@@ -291,8 +291,8 @@ declare const SessionWithPreviewSchema: z.ZodObject<{
     lastActivityAt: z.ZodNumber;
   }, z.core.$strip>>;
   status: z.ZodEnum<{
-    closed: "closed";
     discovered: "discovered";
+    closed: "closed";
     active: "active";
     archived: "archived";
   }>;
@@ -306,9 +306,9 @@ declare const SessionWithPreviewSchema: z.ZodObject<{
   forkPointMessageId: z.ZodOptional<z.ZodString>;
   branchKind: z.ZodOptional<z.ZodEnum<{
     fork: "fork";
+    branch: "branch";
     subagent: "subagent";
     compress: "compress";
-    branch: "branch";
     rewrite: "rewrite";
     coordinator: "coordinator";
     aside: "aside";
@@ -493,8 +493,8 @@ declare const SessionSnapshotSchema: z.ZodObject<{
       lastActivityAt: z.ZodNumber;
     }, z.core.$strip>>;
     status: z.ZodEnum<{
-      closed: "closed";
       discovered: "discovered";
+      closed: "closed";
       active: "active";
       archived: "archived";
     }>;
@@ -508,9 +508,9 @@ declare const SessionSnapshotSchema: z.ZodObject<{
     forkPointMessageId: z.ZodOptional<z.ZodString>;
     branchKind: z.ZodOptional<z.ZodEnum<{
       fork: "fork";
+      branch: "branch";
       subagent: "subagent";
       compress: "compress";
-      branch: "branch";
       rewrite: "rewrite";
       coordinator: "coordinator";
       aside: "aside";
@@ -1000,9 +1000,9 @@ declare const SessionSnapshotSchema: z.ZodObject<{
       parentSessionId: z.ZodString;
       kind: z.ZodEnum<{
         fork: "fork";
+        branch: "branch";
         subagent: "subagent";
         compress: "compress";
-        branch: "branch";
         rewrite: "rewrite";
         coordinator: "coordinator";
         aside: "aside";
@@ -1125,9 +1125,9 @@ type AgentRole = z.infer<typeof AgentRoleSchema>;
  */
 declare const BranchKindSchema: z.ZodEnum<{
   fork: "fork";
+  branch: "branch";
   subagent: "subagent";
   compress: "compress";
-  branch: "branch";
   rewrite: "rewrite";
   coordinator: "coordinator";
   aside: "aside";
@@ -3879,9 +3879,9 @@ declare const MakaioSessionEventSchema: z.ZodUnion<readonly [z.ZodDiscriminatedU
     parentSessionId: z.ZodString;
     kind: z.ZodEnum<{
       fork: "fork";
+      branch: "branch";
       subagent: "subagent";
       compress: "compress";
-      branch: "branch";
       rewrite: "rewrite";
       coordinator: "coordinator";
       aside: "aside";
@@ -4136,9 +4136,9 @@ declare const ForkChildInfoSchema: z.ZodObject<{
   forkPointMessageId: z.ZodNullable<z.ZodString>;
   branchKind: z.ZodNullable<z.ZodEnum<{
     fork: "fork";
+    branch: "branch";
     subagent: "subagent";
     compress: "compress";
-    branch: "branch";
     rewrite: "rewrite";
     coordinator: "coordinator";
     aside: "aside";
@@ -4210,9 +4210,9 @@ declare const SessionCreatedEventSchema: z.ZodObject<{
   parentSessionId: z.ZodNullable<z.ZodString>;
   branchKind: z.ZodNullable<z.ZodEnum<{
     fork: "fork";
+    branch: "branch";
     subagent: "subagent";
     compress: "compress";
-    branch: "branch";
     rewrite: "rewrite";
     coordinator: "coordinator";
     aside: "aside";
@@ -5972,9 +5972,9 @@ declare const SessionSchemas: {
         forkPointMessageId: _$zod.ZodNullable<_$zod.ZodString>;
         branchKind: _$zod.ZodNullable<_$zod.ZodEnum<{
           fork: "fork";
+          branch: "branch";
           subagent: "subagent";
           compress: "compress";
-          branch: "branch";
           rewrite: "rewrite";
           coordinator: "coordinator";
           aside: "aside";
@@ -6029,9 +6029,9 @@ declare const SessionSchemas: {
     parentSessionId: _$zod.ZodString;
     kind: _$zod.ZodEnum<{
       fork: "fork";
+      branch: "branch";
       subagent: "subagent";
       compress: "compress";
-      branch: "branch";
       rewrite: "rewrite";
       coordinator: "coordinator";
       aside: "aside";
@@ -6077,9 +6077,9 @@ declare const SessionSchemas: {
     parentSessionId: _$zod.ZodNullable<_$zod.ZodString>;
     branchKind: _$zod.ZodNullable<_$zod.ZodEnum<{
       fork: "fork";
+      branch: "branch";
       subagent: "subagent";
       compress: "compress";
-      branch: "branch";
       rewrite: "rewrite";
       coordinator: "coordinator";
       aside: "aside";
@@ -6163,8 +6163,8 @@ declare const SessionSchemas: {
             lastActivityAt: _$zod.ZodNumber;
           }, _$zod_v4_core0.$strip>>;
           status: _$zod.ZodEnum<{
-            closed: "closed";
             discovered: "discovered";
+            closed: "closed";
             active: "active";
             archived: "archived";
           }>;
@@ -6178,9 +6178,9 @@ declare const SessionSchemas: {
           forkPointMessageId: _$zod.ZodOptional<_$zod.ZodString>;
           branchKind: _$zod.ZodOptional<_$zod.ZodEnum<{
             fork: "fork";
+            branch: "branch";
             subagent: "subagent";
             compress: "compress";
-            branch: "branch";
             rewrite: "rewrite";
             coordinator: "coordinator";
             aside: "aside";
@@ -6670,9 +6670,9 @@ declare const SessionSchemas: {
             parentSessionId: _$zod.ZodString;
             kind: _$zod.ZodEnum<{
               fork: "fork";
+              branch: "branch";
               subagent: "subagent";
               compress: "compress";
-              branch: "branch";
               rewrite: "rewrite";
               coordinator: "coordinator";
               aside: "aside";
@@ -6800,8 +6800,8 @@ declare const SessionSchemas: {
             lastActivityAt: _$zod.ZodNumber;
           }, _$zod_v4_core0.$strip>>;
           status: _$zod.ZodEnum<{
-            closed: "closed";
             discovered: "discovered";
+            closed: "closed";
             active: "active";
             archived: "archived";
           }>;
@@ -6815,9 +6815,9 @@ declare const SessionSchemas: {
           forkPointMessageId: _$zod.ZodOptional<_$zod.ZodString>;
           branchKind: _$zod.ZodOptional<_$zod.ZodEnum<{
             fork: "fork";
+            branch: "branch";
             subagent: "subagent";
             compress: "compress";
-            branch: "branch";
             rewrite: "rewrite";
             coordinator: "coordinator";
             aside: "aside";
@@ -7307,9 +7307,9 @@ declare const SessionSchemas: {
             parentSessionId: _$zod.ZodString;
             kind: _$zod.ZodEnum<{
               fork: "fork";
+              branch: "branch";
               subagent: "subagent";
               compress: "compress";
-              branch: "branch";
               rewrite: "rewrite";
               coordinator: "coordinator";
               aside: "aside";
@@ -7821,9 +7821,9 @@ declare const SessionSchemas: {
       parentSessionId: _$zod.ZodString;
       kind: _$zod.ZodEnum<{
         fork: "fork";
+        branch: "branch";
         subagent: "subagent";
         compress: "compress";
-        branch: "branch";
         rewrite: "rewrite";
         coordinator: "coordinator";
         aside: "aside";
@@ -7904,8 +7904,8 @@ declare const SessionSchemas: {
     request: _$zod.ZodObject<{
       status: _$zod.ZodOptional<_$zod.ZodEnum<{
         all: "all";
-        closed: "closed";
         discovered: "discovered";
+        closed: "closed";
         active: "active";
         archived: "archived";
       }>>;
@@ -7952,8 +7952,8 @@ declare const SessionSchemas: {
           lastActivityAt: _$zod.ZodNumber;
         }, _$zod_v4_core0.$strip>>;
         status: _$zod.ZodEnum<{
-          closed: "closed";
           discovered: "discovered";
+          closed: "closed";
           active: "active";
           archived: "archived";
         }>;
@@ -7967,9 +7967,9 @@ declare const SessionSchemas: {
         forkPointMessageId: _$zod.ZodOptional<_$zod.ZodString>;
         branchKind: _$zod.ZodOptional<_$zod.ZodEnum<{
           fork: "fork";
+          branch: "branch";
           subagent: "subagent";
           compress: "compress";
-          branch: "branch";
           rewrite: "rewrite";
           coordinator: "coordinator";
           aside: "aside";
@@ -8045,8 +8045,8 @@ declare const SessionSchemas: {
       limit: _$zod.ZodOptional<_$zod.ZodNumber>;
       status: _$zod.ZodOptional<_$zod.ZodEnum<{
         all: "all";
-        closed: "closed";
         discovered: "discovered";
+        closed: "closed";
         active: "active";
         archived: "archived";
       }>>;
@@ -8090,8 +8090,8 @@ declare const SessionSchemas: {
           lastActivityAt: _$zod.ZodNumber;
         }, _$zod_v4_core0.$strip>>;
         status: _$zod.ZodEnum<{
-          closed: "closed";
           discovered: "discovered";
+          closed: "closed";
           active: "active";
           archived: "archived";
         }>;
@@ -8105,9 +8105,9 @@ declare const SessionSchemas: {
         forkPointMessageId: _$zod.ZodOptional<_$zod.ZodString>;
         branchKind: _$zod.ZodOptional<_$zod.ZodEnum<{
           fork: "fork";
+          branch: "branch";
           subagent: "subagent";
           compress: "compress";
-          branch: "branch";
           rewrite: "rewrite";
           coordinator: "coordinator";
           aside: "aside";
@@ -8219,8 +8219,8 @@ declare const SessionSchemas: {
           lastActivityAt: _$zod.ZodNumber;
         }, _$zod_v4_core0.$strip>>;
         status: _$zod.ZodEnum<{
-          closed: "closed";
           discovered: "discovered";
+          closed: "closed";
           active: "active";
           archived: "archived";
         }>;
@@ -8234,9 +8234,9 @@ declare const SessionSchemas: {
         forkPointMessageId: _$zod.ZodOptional<_$zod.ZodString>;
         branchKind: _$zod.ZodOptional<_$zod.ZodEnum<{
           fork: "fork";
+          branch: "branch";
           subagent: "subagent";
           compress: "compress";
-          branch: "branch";
           rewrite: "rewrite";
           coordinator: "coordinator";
           aside: "aside";
@@ -8312,9 +8312,9 @@ declare const SessionSchemas: {
       forkPointMessageId: _$zod.ZodOptional<_$zod.ZodString>;
       branchKind: _$zod.ZodOptional<_$zod.ZodEnum<{
         fork: "fork";
+        branch: "branch";
         subagent: "subagent";
         compress: "compress";
-        branch: "branch";
         rewrite: "rewrite";
         coordinator: "coordinator";
         aside: "aside";
@@ -8462,8 +8462,8 @@ declare const SessionSchemas: {
           lastActivityAt: _$zod.ZodNumber;
         }, _$zod_v4_core0.$strip>>;
         status: _$zod.ZodEnum<{
-          closed: "closed";
           discovered: "discovered";
+          closed: "closed";
           active: "active";
           archived: "archived";
         }>;
@@ -8477,9 +8477,9 @@ declare const SessionSchemas: {
         forkPointMessageId: _$zod.ZodOptional<_$zod.ZodString>;
         branchKind: _$zod.ZodOptional<_$zod.ZodEnum<{
           fork: "fork";
+          branch: "branch";
           subagent: "subagent";
           compress: "compress";
-          branch: "branch";
           rewrite: "rewrite";
           coordinator: "coordinator";
           aside: "aside";

package/dist/{types-DBb5jY4Z.d.mts → types-CJ_QZ1yW.d.mts}

@@ -1,9 +1,9 @@
 import { z } from "zod";
+import { DeferredPromise, TimeoutConfig, TrackedTimeoutConfig } from "@makaio/framework/utils";
 import { AuthenticationError, ExtractSubjectPayload, ExtractSubjectResponse, HandlerForSubjectDefinition, ScopedSubjectDefinition, SubjectRecord } from "@makaio/framework/core";
 import { IFilteredBus, IMakaioBus, OnOptions, ScopedBus } from "@makaio/framework/bus";
 import { AIModel, AIReasoningLevel, AIReasoningLevel as AIReasoningLevel$1, AdapterAuthBinding, AdapterAuthConstant, AdapterProviderAuth, AdapterProviderDefinitionContract, AgentSchemas, AgentSubjects, AuthCredentialRef, CacheStrategy, JsonValue, McpRuntimeSessionContext, McpSessionContext, McpToolState, Message, MessageBlock, MessageDeliveryMode, MessageDeliveryMode as MessageDeliveryMode$1, MessageInput, MessageOutcome, NativeForkDirective, ProtocolId, ProviderContext, ReasoningLevelMap as ReasoningLevelMap$1, RequestCorrelationContext, ResolvedProviderAuth, ResponseSchemaDescriptor, SendMessageResultInnerResult, SessionContext, StructuredOutputValidation, SystemPrompt, ToolListItem } from "@makaio/framework/contracts";
 import { ClientExecutionContext } from "@makaio/framework/contracts/client";
-import { DeferredPromise, TimeoutConfig, TrackedTimeoutConfig } from "@makaio/framework/utils";
 import { SetRequired } from "type-fest";
 
 //#region adapters/core/src/agent/session-tool-ledger.d.ts
@@ -248,6 +248,13 @@ interface MessageHandleOptions {
    * handle pair by this value.
    */
   turnId?: string;
+  /**
+   * Caller decision on provider-native session resume for this dispatch.
+   * When `false`, the session layer must not arm its pending start-time
+   * resume target for the turn this handle drives (see
+   * `ConnectorSendMessageOptions.useNativeResume` for the full contract).
+   */
+  useNativeResume?: boolean;
 }
 /**
  * Processing state for agent orchestration.
@@ -295,6 +302,13 @@ declare class MessageHandle {
    * this value.
    */
   readonly turnId?: string | undefined;
+  /**
+   * Caller decision on provider-native session resume for this dispatch.
+   * When `false`, the session layer must not arm its pending start-time
+   * resume target for the turn this handle drives (see
+   * `ConnectorSendMessageOptions.useNativeResume` for the full contract).
+   */
+  readonly useNativeResume?: boolean | undefined;
   protected readonly deferredCompletion: DeferredPromise<MessageResult>;
   protected readonly deferredAcknowledgement: DeferredPromise<boolean>;
   state: MessageState;
@@ -348,7 +362,15 @@ declare class MessageHandle {
    * this value.
    */
 
-  turnId?: string | undefined);
+  turnId?: string | undefined,
+  /**
+   * Caller decision on provider-native session resume for this dispatch.
+   * When `false`, the session layer must not arm its pending start-time
+   * resume target for the turn this handle drives (see
+   * `ConnectorSendMessageOptions.useNativeResume` for the full contract).
+   */
+
+  useNativeResume?: boolean | undefined);
   /**
    * Curated message history from sessionContext
    * @returns The message history array or undefined if not set
@@ -1360,6 +1382,22 @@ interface ConnectorSendMessageOptions extends AgentSendMessageOptions {
    * is not surfaced as a new user message.
    */
   internalRetry?: boolean;
+  /**
+   * Caller decision on provider-native session resume for this dispatch.
+   *
+   * The turn pipeline sets this from the agent's native-resume decision. When
+   * `false`, the connector MUST NOT arm its pending start-time resume target
+   * (`resumeAdapterSessionId`) for this dispatch: the caller has replaced the
+   * provider thread with injected `messageHistory`, so natively resuming would
+   * double the conversation context. Honoring connectors discard the
+   * unconsumed resume target and mint a fresh provider session instead.
+   *
+   * When `true` or absent, the connector applies its default resume behavior.
+   * The flag never affects a connector's continuity of its own
+   * provider-confirmed session (intra-generation multi-turn), and it does not
+   * cancel an approved `nativeFork` directive — fork is a separate contract.
+   */
+  useNativeResume?: boolean;
 }
 /**
  * Options for connector-level start operations.
@@ -1428,7 +1466,13 @@ type AgentConnectorConfigOverrides = Partial<{
   model: string;
   providerContext: ProviderContext;
   adapterSessionId: string;
-  resumeAdapterSessionId: string;
+  /**
+   * Provider session the replacement generation should native-resume. Key
+   * presence (not value) selects this over the agent config's start-time
+   * resume target, so an explicit `undefined` builds a fresh connector
+   * instead of silently re-resuming a stale start directive.
+   */
+  resumeAdapterSessionId: string | undefined;
   mcpSessionContext: McpRuntimeSessionContext | McpSessionContext | LedgerSessionContext;
   /**
    * Target reasoning effort for the replacement generation. Key presence (not