@namzu/sdk 5.1.0 → 5.2.0

package/dist/types/plugin/index.d.ts

@@ -177,11 +177,11 @@ export declare const PluginManifestSchema: z.ZodObject<{
     personas: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
     name: string;
-    version: string;
     description: string;
-    author?: string | undefined;
+    version: string;
     tools?: string[] | undefined;
     skills?: string[] | undefined;
+    author?: string | undefined;
     hooks?: string[] | undefined;
     mcpServers?: {
         name: string;
@@ -193,11 +193,11 @@ export declare const PluginManifestSchema: z.ZodObject<{
     personas?: string[] | undefined;
 }, {
     name: string;
-    version: string;
     description: string;
-    author?: string | undefined;
+    version: string;
     tools?: string[] | undefined;
     skills?: string[] | undefined;
+    author?: string | undefined;
     hooks?: string[] | undefined;
     mcpServers?: {
         name: string;

package/dist/types/run/events.d.ts

@@ -7,7 +7,7 @@ import type { PlanStep } from '../plan/index.js';
 import type { PluginHookEvent, PluginHookResult } from '../plugin/index.js';
 import type { TaskStatus } from '../task/index.js';
 import type { Lineage } from './lineage.js';
-import type { MessageStopReason } from './stop-reason.js';
+import type { MessageStopReason, StopReason } from './stop-reason.js';
 import type { SubsessionIdledEvent, SubsessionMessagedEvent, SubsessionSpawnedEvent } from './subsession-events.js';
 export type { MessageStopReason, StopReason } from './stop-reason.js';
 /**
@@ -233,10 +233,25 @@ type CoreRunEvent = {
     action: 'block' | 'rewrite';
     guardrail?: string;
     reason?: string;
-} | {
+}
+/**
+ * The run reached its end without throwing.
+ *
+ * `completed` is not `succeeded`. A run stopped by its token budget, its
+ * timeout, its iteration cap, a cancellation or a blocking output guardrail
+ * all arrive here — `run_failed` is emitted only from the throw path — so a
+ * consumer that treated this event as success reported one for a run whose
+ * answer was refused. Measured: `max_iterations` produces
+ * `status: 'completed'` with `result` holding whatever partial text existed.
+ *
+ * `stopReason` is what separates them, and it is on the event because the
+ * alternative is asking every consumer to hold the `Run` as well.
+ */
+ | {
     type: 'run_completed';
     runId: RunId;
     result: string;
+    stopReason?: StopReason;
 }
 /**
  * The run failed.

package/dist/types/run/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/types/run/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,KAAK,EACX,UAAU,EACV,SAAS,EACT,MAAM,EACN,QAAQ,EACR,KAAK,EACL,SAAS,EACT,MAAM,EACN,SAAS,EACT,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,KAAK,EACX,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAErE;;;;;;;;GAQG;AACH,UAAU,gBAAgB;IACzB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,CAAA;IACjB,OAAO,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,KAAK,YAAY,GACd;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9D;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,OAAO,CAAA;CACpB;AACH;;;;;;;;GAQG;GACD;IACA,IAAI,EAAE,sBAAsB,CAAA;IAC5B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,0CAA0C;IAC1C,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,oEAAoE;IACpE,UAAU,EAAE,UAAU,GAAG,UAAU,CAAA;IACnC,uEAAuE;IACvE,mBAAmB,EAAE,MAAM,CAAA;IAC3B,YAAY,EAAE,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAA;IAClD;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAC9B,GACD;IACA,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;CACb;AACH;;;;;;;;;;;;;GAaG;GACD;IACA,IAAI,EAAE,eAAe,CAAA;IACrB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAChB;AACH;;;;;;;;;;;;;GAaG;GACD;IACA,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0DAA0D;IAC1D,cAAc,EAAE,OAAO,CAAA;CACtB,GACD;IACA,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,oEAAoE;IACpE,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAA;CACvB;AACH;;;;;;;;GAQG;GACD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;CACf;AACH;;;;;;GAMG;GACD;IACA,IAAI,EAAE,wBAAwB,CAAA;IAC9B,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,OAAO,CAAA;CAChB,GACD;IACA,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,eAAe,EAAE,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;CAChB,GACD;IACA,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAC7C,GACD;IACA,IAAI,EAAE,oBAAoB,CAAA;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;CAChB,GACD;IACA,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B,MAAM,EAAE,MAAM,CAAA;CACb,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,gBAAgB,EAAE,YAAY,CAAA;CAC7B;AACH;;;;;;GAMG;GACD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAA;IACzB,MAAM,EAAE,OAAO,GAAG,SAAS,CAAA;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CACd,GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACzD;;;;;;;;;;;;;;;GAeG;GACD;IACA,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,sBAAsB,EAAE,iBAAiB,CAAA;IAChE;;;;;;OAMG;IACH,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1D,GAOD;IACA,IAAI,EAAE,oBAAoB,CAAA;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,OAAO,GAAG,QAAQ,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;CACd,GACD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,UAAU,CAAA;IACjB,IAAI,EAAE,QAAQ,CAAA;CACb,GACD;IACA,IAAI,EAAE,kBAAkB,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,YAAY,CAAA;IAC1B,WAAW,EAAE,MAAM,CAAA;CAClB,GACD;IACA,IAAI,EAAE,kBAAkB,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACb,GACD;IACA,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,QAAQ,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;CACf,GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD;IACA,IAAI,EAAE,eAAe,CAAA;IACrB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CACd,GACD;IACA,IAAI,EAAE,mBAAmB,CAAA;IACzB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;CACzB,GACD;IACA,IAAI,EAAE,eAAe,CAAA;IACrB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACZ,GACD;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;CACtB,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACZ,GACD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,UAAU,CAAA;CACjB,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,UAAU,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACb,GACD;IACA,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;IAClB,SAAS,EAAE,eAAe,CAAA;CACzB,GACD;IACA,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;IAClB,SAAS,EAAE,eAAe,CAAA;IAC1B,MAAM,EAAE,gBAAgB,CAAA;CACvB,GACD;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CAClB,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;CACjB,GACD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GASjE;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;CACnB;AACH;;;;;;GAMG;GACD;IACA,IAAI,EAAE,mBAAmB,CAAA;IACzB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,UAAU,GAAG,mBAAmB,CAAA;CAC9C;AACH,uEAAuE;GACrE;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;CACX,GACD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAA;CACd,GACD;IACA,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;CACX,GACD;IACA,IAAI,EAAE,mBAAmB,CAAA;IACzB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,iBAAiB,CAAA;IAC7B,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CACf,GACD;IACA,IAAI,EAAE,oBAAoB,CAAA;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;CACf,GACD;IACA,IAAI,EAAE,kBAAkB,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CAClB,GACD;IACA,IAAI,EAAE,sBAAsB,CAAA;IAC5B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,EAAE,OAAO,CAAA;IACd;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACvB,CAAA;AAEJ;;;;;;;;GAQG;AACH,MAAM,MAAM,QAAQ,GACjB,CAAC,YAAY,GAAG,gBAAgB,CAAC,GACjC,sBAAsB,GACtB,uBAAuB,GACvB,oBAAoB,CAAA;AAEvB,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AA8BxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAEzD"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/types/run/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,KAAK,EACX,UAAU,EACV,SAAS,EACT,MAAM,EACN,QAAQ,EACR,KAAK,EACL,SAAS,EACT,MAAM,EACN,SAAS,EACT,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,KAAK,EACX,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAErE;;;;;;;;GAQG;AACH,UAAU,gBAAgB;IACzB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,CAAA;IACjB,OAAO,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,KAAK,YAAY,GACd;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9D;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,OAAO,CAAA;CACpB;AACH;;;;;;;;GAQG;GACD;IACA,IAAI,EAAE,sBAAsB,CAAA;IAC5B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,0CAA0C;IAC1C,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,oEAAoE;IACpE,UAAU,EAAE,UAAU,GAAG,UAAU,CAAA;IACnC,uEAAuE;IACvE,mBAAmB,EAAE,MAAM,CAAA;IAC3B,YAAY,EAAE,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAA;IAClD;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAC9B,GACD;IACA,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;CACb;AACH;;;;;;;;;;;;;GAaG;GACD;IACA,IAAI,EAAE,eAAe,CAAA;IACrB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAChB;AACH;;;;;;;;;;;;;GAaG;GACD;IACA,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0DAA0D;IAC1D,cAAc,EAAE,OAAO,CAAA;CACtB,GACD;IACA,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,oEAAoE;IACpE,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAA;CACvB;AACH;;;;;;;;GAQG;GACD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;CACf;AACH;;;;;;GAMG;GACD;IACA,IAAI,EAAE,wBAAwB,CAAA;IAC9B,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,OAAO,CAAA;CAChB,GACD;IACA,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,eAAe,EAAE,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;CAChB,GACD;IACA,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAC7C,GACD;IACA,IAAI,EAAE,oBAAoB,CAAA;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;CAChB,GACD;IACA,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B,MAAM,EAAE,MAAM,CAAA;CACb,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,gBAAgB,EAAE,YAAY,CAAA;CAC7B;AACH;;;;;;GAMG;GACD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAA;IACzB,MAAM,EAAE,OAAO,GAAG,SAAS,CAAA;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CACd;AACH;;;;;;;;;;;;GAYG;GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,UAAU,CAAA;CAAE;AAClF;;;;;;;;;;;;;;;GAeG;GACD;IACA,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,sBAAsB,EAAE,iBAAiB,CAAA;IAChE;;;;;;OAMG;IACH,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1D,GAOD;IACA,IAAI,EAAE,oBAAoB,CAAA;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,OAAO,GAAG,QAAQ,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;CACd,GACD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,UAAU,CAAA;IACjB,IAAI,EAAE,QAAQ,CAAA;CACb,GACD;IACA,IAAI,EAAE,kBAAkB,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,YAAY,CAAA;IAC1B,WAAW,EAAE,MAAM,CAAA;CAClB,GACD;IACA,IAAI,EAAE,kBAAkB,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACb,GACD;IACA,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,QAAQ,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;CACf,GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD;IACA,IAAI,EAAE,eAAe,CAAA;IACrB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CACd,GACD;IACA,IAAI,EAAE,mBAAmB,CAAA;IACzB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;CACzB,GACD;IACA,IAAI,EAAE,eAAe,CAAA;IACrB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACZ,GACD;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,eAAe,CAAA;CACtB,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACZ,GACD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,UAAU,CAAA;CACjB,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,UAAU,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACb,GACD;IACA,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;IAClB,SAAS,EAAE,eAAe,CAAA;CACzB,GACD;IACA,IAAI,EAAE,uBAAuB,CAAA;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;IAClB,SAAS,EAAE,eAAe,CAAA;IAC1B,MAAM,EAAE,gBAAgB,CAAA;CACvB,GACD;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CAClB,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;CACjB,GACD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GASjE;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;CACnB;AACH;;;;;;GAMG;GACD;IACA,IAAI,EAAE,mBAAmB,CAAA;IACzB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,UAAU,GAAG,mBAAmB,CAAA;CAC9C;AACH,uEAAuE;GACrE;IACA,IAAI,EAAE,iBAAiB,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;CACX,GACD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAA;CACd,GACD;IACA,IAAI,EAAE,YAAY,CAAA;IAClB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;CACX,GACD;IACA,IAAI,EAAE,mBAAmB,CAAA;IACzB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,iBAAiB,CAAA;IAC7B,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CACf,GACD;IACA,IAAI,EAAE,oBAAoB,CAAA;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;CACf,GACD;IACA,IAAI,EAAE,kBAAkB,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CAClB,GACD;IACA,IAAI,EAAE,sBAAsB,CAAA;IAC5B,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,KAAK,EAAE,OAAO,CAAA;IACd;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACvB,CAAA;AAEJ;;;;;;;;GAQG;AACH,MAAM,MAAM,QAAQ,GACjB,CAAC,YAAY,GAAG,gBAAgB,CAAC,GACjC,sBAAsB,GACtB,uBAAuB,GACvB,oBAAoB,CAAA;AAEvB,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AA8BxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAEzD"}

package/dist/types/run/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/types/run/events.ts"],"names":[],"mappings":"AAihBA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,qBAAqB,GAAkC,IAAI,GAAG,CAAmB;IACtF,YAAY;IACZ,kBAAkB;IAClB,mEAAmE;IACnE,6CAA6C;IAC7C,iBAAiB;IACjB,sEAAsE;IACtE,uEAAuE;IACvE,oCAAoC;IACpC,eAAe;CACf,CAAC,CAAA;AAEF,MAAM,UAAU,gBAAgB,CAAC,KAAe;IAC/C,OAAO,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AAC7C,CAAC"}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/types/run/events.ts"],"names":[],"mappings":"AA8hBA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,qBAAqB,GAAkC,IAAI,GAAG,CAAmB;IACtF,YAAY;IACZ,kBAAkB;IAClB,mEAAmE;IACnE,6CAA6C;IAC7C,iBAAiB;IACjB,sEAAsE;IACtE,uEAAuE;IACvE,oCAAoC;IACpC,eAAe;CACf,CAAC,CAAA;AAEF,MAAM,UAAU,gBAAgB,CAAC,KAAe;IAC/C,OAAO,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AAC7C,CAAC"}

package/dist/types/verification/index.d.ts

@@ -73,13 +73,13 @@ export declare const VerificationRuleSchema: z.ZodDiscriminatedUnion<"type", [z.
     decision: z.ZodEnum<["allow", "deny"]>;
 }, "strip", z.ZodTypeAny, {
     type: "custom_pattern";
-    pattern: string;
     target: "name" | "args" | "both";
+    pattern: string;
     decision: "deny" | "allow";
 }, {
     type: "custom_pattern";
-    pattern: string;
     target: "name" | "args" | "both";
+    pattern: string;
     decision: "deny" | "allow";
 }>, z.ZodObject<{
     type: z.ZodLiteral<"allow_by_tier">;
@@ -139,13 +139,13 @@ export declare const VerificationGateConfigSchema: z.ZodObject<{
         decision: z.ZodEnum<["allow", "deny"]>;
     }, "strip", z.ZodTypeAny, {
         type: "custom_pattern";
-        pattern: string;
         target: "name" | "args" | "both";
+        pattern: string;
         decision: "deny" | "allow";
     }, {
         type: "custom_pattern";
-        pattern: string;
         target: "name" | "args" | "both";
+        pattern: string;
         decision: "deny" | "allow";
     }>, z.ZodObject<{
         type: z.ZodLiteral<"allow_by_tier">;
@@ -177,8 +177,8 @@ export declare const VerificationGateConfigSchema: z.ZodObject<{
         toolNames: string[];
     } | {
         type: "custom_pattern";
-        pattern: string;
         target: "name" | "args" | "both";
+        pattern: string;
         decision: "deny" | "allow";
     } | {
         type: "allow_by_tier";
@@ -204,8 +204,8 @@ export declare const VerificationGateConfigSchema: z.ZodObject<{
         toolNames: string[];
     } | {
         type: "custom_pattern";
-        pattern: string;
         target: "name" | "args" | "both";
+        pattern: string;
         decision: "deny" | "allow";
     } | {
         type: "allow_by_tier";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@namzu/sdk",
-  "version": "5.1.0",
+  "version": "5.2.0",
   "description": "Open-source AI agent SDK with a built-in runtime. Nothing between you and your agents.",
   "license": "FSL-1.1-MIT",
   "type": "module",

package/src/agents/__tests__/run-agent-forwarding.test.ts

@@ -0,0 +1,85 @@
+import { describe, expect, it } from 'vitest'
+import { z } from 'zod'
+
+import { MockLLMProvider, registerMock } from '../../provider/index.js'
+import { ToolRegistry } from '../../registry/index.js'
+import { runAgent } from '../runAgent.js'
+
+/**
+ * The `drainQuery` call in `runAgent` was written `as never`.
+ *
+ * That cast was not load-bearing — removing it typechecks clean — but while it
+ * was there the kernel seam was unchecked in both directions: a field the
+ * kernel accepts and this door forgot to forward produced no error, and neither
+ * did a field spelled wrong. Two were already missing when it was removed.
+ *
+ * `skills` is the one with a caller in this repo. `@namzu/project` reads a
+ * whole `skills/` directory, put them on the options, and every one was dropped
+ * on the floor — the run was assembled without them and said nothing. These
+ * pin the forwarding rather than the cast, because the cast can come back and
+ * a test that only asserted its absence would not notice.
+ */
+
+registerMock()
+
+describe('runAgent forwards what the kernel takes', () => {
+	it('puts skills in front of the model', async () => {
+		const provider = new MockLLMProvider({ turns: [{ text: 'ok' }] })
+
+		await runAgent({
+			provider,
+			model: 'mock-model',
+			prompt: 'plan something',
+			skills: [
+				{
+					metadata: { name: 'plan-a-trip', description: 'Plan a trip end to end' },
+					body: 'Ask for dates first.',
+					dirPath: '/tmp/skills/plan-a-trip',
+				},
+			],
+		})
+
+		// Serialized rather than reached into: the prompt builder decides where a
+		// skill lands, and pinning that path here would make this test fail on a
+		// refactor that kept the behaviour. What matters is that it arrived.
+		expect(JSON.stringify(provider.requests[0])).toContain('plan-a-trip')
+	})
+
+	it('forwards the verification gate, so a denied tool does not run', async () => {
+		// The first version of this test asserted `run.status === 'completed'`
+		// with the gate set. It passed with the forwarding deleted — a run with
+		// no gate completes too — so it proved nothing. A gate is only observable
+		// through a call it stops, which means the assertion has to be about
+		// whether the tool body ran.
+		let ran = false
+
+		const tools = new ToolRegistry()
+		tools.register({
+			name: 'delete_everything',
+			description: 'Deletes everything.',
+			inputSchema: z.object({}),
+			execute: async () => {
+				ran = true
+				return { success: true, output: 'deleted' }
+			},
+		})
+
+		await runAgent({
+			provider: new MockLLMProvider({
+				turns: [{ toolCalls: [{ name: 'delete_everything', args: {} }] }, { text: 'done' }],
+			}),
+			model: 'mock-model',
+			prompt: 'clean up',
+			tools,
+			verificationGate: {
+				enabled: true,
+				rules: [{ type: 'deny_by_name', toolNames: ['delete_everything'] }],
+				allowReadOnlyTools: false,
+				denyDangerousPatterns: false,
+				logDecisions: false,
+			},
+		})
+
+		expect(ran).toBe(false)
+	})
+})

package/src/agents/__tests__/run-completed-stop-reason.test.ts

@@ -0,0 +1,59 @@
+import { describe, expect, it } from 'vitest'
+
+import { MockLLMProvider, registerMock } from '../../provider/index.js'
+import type { RunEvent } from '../../types/run/index.js'
+import { runAgent } from '../runAgent.js'
+
+/**
+ * `completed` is not `succeeded`.
+ *
+ * `run_failed` is emitted from exactly one place — the throw path in
+ * `result.ts` — so every other way a run can end badly arrives as
+ * `run_completed`: the token budget, the timeout, the iteration cap, a
+ * cancellation, and a blocking output guardrail. A consumer reading that event
+ * as success reported one for a run whose answer was refused, and the CLI did:
+ * it mapped `run_completed` to a bare `done` and exited 0.
+ *
+ * Measured before the fix: a `max_iterations` stop reports
+ * `status: 'completed'`, and the event carried nothing to distinguish it.
+ */
+
+registerMock()
+
+async function eventsOf(options: Parameters<typeof runAgent>[0]): Promise<RunEvent[]> {
+	const events: RunEvent[] = []
+	await runAgent({ ...options, listener: (e) => void events.push(e) })
+	return events
+}
+
+function completion(events: RunEvent[]): Extract<RunEvent, { type: 'run_completed' }> | undefined {
+	return events.find((e) => e.type === 'run_completed') as never
+}
+
+describe('run_completed says why the run stopped', () => {
+	it('reports end_turn when the model finished its answer', async () => {
+		const events = await eventsOf({
+			provider: new MockLLMProvider({ turns: [{ text: 'done' }] }),
+			model: 'mock-model',
+			prompt: 'x',
+		})
+
+		expect(completion(events)?.stopReason).toBe('end_turn')
+	})
+
+	it('reports max_iterations when the loop was cut short', async () => {
+		const events = await eventsOf({
+			provider: new MockLLMProvider({ turns: [{ toolCalls: [{ name: 'absent', args: {} }] }] }),
+			model: 'mock-model',
+			prompt: 'x',
+			maxIterations: 1,
+		})
+
+		const done = completion(events)
+		// The event that a consumer treats as "the run ended" — and the field
+		// that stops it being read as "the run succeeded".
+		expect(done).toBeDefined()
+		expect(done?.stopReason).toBe('max_iterations')
+		expect(events.some((e) => e.type === 'run_failed')).toBe(false)
+	})
+})

package/src/agents/index.ts

@@ -8,4 +8,12 @@ export type { DefineAgentOptions } from './defineAgent.js'
 export { InvocationLock, ConcurrentInvocationError } from './lock.js'
 export type { Disposable } from './lock.js'
 export { runAgent } from './runAgent.js'
+// The budgets the front door applies when a caller names none. Exported so a
+// deriver that builds a config by hand lands on the SAME numbers rather than
+// inventing its own or, as `@namzu/project` did, supplying none at all.
+export {
+	DEFAULT_MAX_ITERATIONS,
+	DEFAULT_TIMEOUT_MS,
+	DEFAULT_TOKEN_BUDGET,
+} from './runAgent.js'
 export type { AgentIdentity, RunAgentOptions, RunAgentResult } from './runAgent.js'

package/src/agents/runAgent.ts

@@ -4,7 +4,9 @@ import type { ProjectId, SessionId, TenantId, ThreadId } from '../types/ids/inde
 import type { Message } from '../types/message/index.js'
 import type { LLMProvider } from '../types/provider/index.js'
 import type { Run, RunEventListener } from '../types/run/index.js'
+import type { Skill } from '../types/skills/index.js'
 import type { ToolRegistryContract } from '../types/tool/index.js'
+import type { VerificationGateConfig } from '../types/verification/index.js'
 import {
 	generateProjectId,
 	generateSessionId,
@@ -51,6 +53,28 @@ export interface RunAgentOptions extends AgentIdentity {
 
 	tools?: ToolRegistryContract
 
+	/**
+	 * Skills to put in front of the model.
+	 *
+	 * The kernel has taken these since it had a prompt builder; this door did
+	 * not forward them, so a caller who assembled skills — `@namzu/project`
+	 * reads a whole `skills/` directory — handed them over and got a run that
+	 * had never heard of them. Silent, because the `drainQuery` call below was
+	 * cast, and a cast seam reports nothing when a field goes missing.
+	 */
+	skills?: Skill[]
+
+	/**
+	 * Operator policy for tool calls: which ones need review before they run.
+	 *
+	 * Absent means every tool runs unreviewed, which is the right default for a
+	 * library front door and the wrong one for a host that hands this an agent
+	 * directory it did not write. The kernel builds a `VerificationGate` from
+	 * this and consults it on every call; without it there is nothing to
+	 * consult, so a front-door run is strictly less mediated than a kernel one.
+	 */
+	verificationGate?: VerificationGateConfig
+
 	/** Defaults to the current working directory. */
 	workingDirectory?: string
 
@@ -90,9 +114,9 @@ export interface RunAgentResult {
  * dollars, and an iteration cap that stops a tool-calling loop well before a
  * context window does. Every one is overridable and named on the option.
  */
-const DEFAULT_MAX_ITERATIONS = 16
-const DEFAULT_TOKEN_BUDGET = 200_000
-const DEFAULT_TIMEOUT_MS = 300_000
+export const DEFAULT_MAX_ITERATIONS = 16
+export const DEFAULT_TOKEN_BUDGET = 200_000
+export const DEFAULT_TIMEOUT_MS = 300_000
 
 /**
  * Run an agent, without assembling a kernel by hand.
@@ -170,8 +194,10 @@ export async function runAgent(options: RunAgentOptions): Promise<RunAgentResult
 			agentName: options.name ?? 'Agent',
 			...(options.instructions ? { systemPrompt: options.instructions } : {}),
 			...(options.signal ? { signal: options.signal } : {}),
+			...(options.skills ? { skills: options.skills } : {}),
+			...(options.verificationGate ? { verificationGate: options.verificationGate } : {}),
 			...identity,
-		} as never,
+		},
 		options.listener,
 	)
 

package/src/constants/tools/__tests__/dangerous-patterns.test.ts

@@ -0,0 +1,62 @@
+import { describe, expect, it } from 'vitest'
+
+import { DANGEROUS_PATTERNS } from '../index.js'
+
+/**
+ * `DANGEROUS_PATTERNS` is what `deny_dangerous_patterns` consults, and
+ * `namzu run`'s own docstring promises that in a non-interactive run "the
+ * safety gate still hard-denies catastrophic commands".
+ *
+ * The fork-bomb entry could not deny one. It was written `/:(){ :\|:& };:/`,
+ * and in a regular expression `()` is an empty capture group rather than two
+ * literal parentheses — so the pattern described `:{ :|:& };:`, a string that
+ * is not valid shell and that nobody types. The list looked complete in review
+ * and had a hole in it that only running the regex reveals.
+ *
+ * No test named a fork bomb before this one, which is how it survived.
+ */
+
+function denies(command: string): boolean {
+	return DANGEROUS_PATTERNS.some((p) => p.test(command))
+}
+
+describe('the dangerous-command list denies fork bombs', () => {
+	// Spelling varies with whitespace and with the function's name; the bomb
+	// does not care, so neither may the pattern.
+	it.each([
+		':(){ :|:& };:',
+		':(){:|:&};:',
+		':() { :|:& }; :',
+		':(){ : | : & }; :',
+		'bomb(){ bomb|bomb& }; bomb',
+		'f(){ f|f& };f',
+	])('denies %j', (command) => {
+		expect(denies(command)).toBe(true)
+	})
+})
+
+describe('it does not deny ordinary shell', () => {
+	// A function containing a pipe and a background job is not a fork bomb.
+	// The signature is SELF-reference — the same name on both sides — and a
+	// pattern that fired on the general shape would make the gate useless by
+	// crying wolf.
+	it.each([
+		'build(){ make | tee log & }',
+		'watch(){ tail -f log | grep ERROR & }; watch',
+		'f(){ g|h& };f',
+		'run(){ a|b& }; run',
+		'git log | head -20',
+		'npm test',
+	])('allows %j', (command) => {
+		expect(denies(command)).toBe(false)
+	})
+})
+
+describe('the rest of the list still fires', () => {
+	it.each(['rm -rf /', 'mkfs.ext4 /dev/sda', 'dd if=/dev/zero of=/dev/sda', 'sudo rm x'])(
+		'denies %j',
+		(command) => {
+			expect(denies(command)).toBe(true)
+		},
+	)
+})

package/src/constants/tools/index.ts

@@ -17,7 +17,34 @@ export const DANGEROUS_PATTERNS = [
 	/rm\s+-rf\s+\//,
 	/mkfs/,
 	/dd\s+if=/,
-	/:(){ :\|:& };:/,
+	/**
+	 * Fork bomb.
+	 *
+	 * The previous entry was `/:(){ :\|:& };:/`, which could not match one. In
+	 * a regular expression `()` is an empty capture group, not two literal
+	 * parentheses, so that pattern described the string `:{ :|:& };:` — which
+	 * is not valid shell and which nobody would ever type. Probed: it returned
+	 * false for `:(){ :|:& };:` and every spelling of it, while `run.ts`'s own
+	 * docstring promised "the safety gate still hard-denies catastrophic
+	 * commands".
+	 *
+	 * Matched on SELF-REFERENCE rather than on one literal spelling: a fork
+	 * bomb is a function whose own name appears on both sides of a pipe, is
+	 * backgrounded, and is then invoked. That is what separates it from a
+	 * function that merely contains a pipe — `watch(){ tail -f log | grep E & }`
+	 * does not match, and `bomb(){ bomb|bomb& }; bomb` does.
+	 *
+	 * EVERY run is bounded, not just the name. The first version bounded the
+	 * name and left the gaps as `\s*`, and static analysis caught what a hand
+	 * probe did not: a chain of unbounded runs backtracks polynomially, and
+	 * this list is matched against SERIALIZED TOOL INPUT — model output, which
+	 * a prompt injection can shape. A denial of service in the check that
+	 * exists to prevent one is the wrong way round.
+	 *
+	 * `[ \t]` rather than `\s`, because a shell function definition of this
+	 * shape lives on one line, and the bound is generous for real spacing.
+	 */
+	/([\w.]{1,32}|:)[ \t]{0,8}\([ \t]{0,8}\)[ \t]{0,8}\{[ \t]{0,8}\1[ \t]{0,8}\|[ \t]{0,8}\1[ \t]{0,8}&[ \t]{0,8};?[ \t]{0,8}\}[ \t]{0,8};?[ \t]{0,8}\1/,
 	// Privilege escalation + world-writable chmod on /.
 	/\bsudo\b/,
 	/\bsu\s+-/,

package/src/directory/__tests__/derive.test.ts

@@ -0,0 +1,135 @@
+import { mkdirSync, mkdtempSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { describe, expect, it } from 'vitest'
+
+import { deriveRunOptions } from '../derive.js'
+import { loadDirectory } from '../load.js'
+
+const provider = { id: 'mock', name: 'Mock' } as never
+
+function project(files: Record<string, string>): string {
+	const root = mkdtempSync(join(tmpdir(), 'namzu-derive-'))
+	for (const [relative, body] of Object.entries(files)) {
+		const full = join(root, relative)
+		mkdirSync(join(full, '..'), { recursive: true })
+		writeFileSync(full, body)
+	}
+	return root
+}
+
+const TOOL = (name: string) => `
+export default {
+  name: ${JSON.stringify(name)},
+  description: 'a tool',
+  inputSchema: { parse: (v) => v, safeParse: (v) => ({ success: true, data: v }) },
+  execute: async () => ({ success: true, output: 'ok' }),
+}
+`
+
+describe('turning a manifest into run options', () => {
+	it('carries instructions, config and tools across', async () => {
+		const root = project({
+			'instructions.md': 'You are terse.',
+			'agent.js': 'export default { model: "m", maxIterations: 3 }',
+			'tools/a.js': TOOL('a'),
+		})
+		const { manifest } = await loadDirectory(root)
+
+		const options = deriveRunOptions(manifest, { provider, prompt: 'hi' })
+
+		expect(options.model).toBe('m')
+		expect(options.instructions).toBe('You are terse.')
+		expect(options.maxIterations).toBe(3)
+		expect(options.tools?.has('a')).toBe(true)
+	})
+
+	it('points the working directory at the project, not the host', async () => {
+		// Left unset this defaults to the host's cwd, which aims the file
+		// tools' containment at the host's own source tree.
+		const root = project({
+			'instructions.md': 'hi',
+			'agent.js': 'export default { model: "m" }',
+		})
+		const { manifest } = await loadDirectory(root)
+
+		expect(deriveRunOptions(manifest, { provider, prompt: 'hi' }).workingDirectory).toBe(
+			manifest.root,
+		)
+	})
+
+	it('lets an explicit model win over agent.ts', async () => {
+		const root = project({
+			'instructions.md': 'hi',
+			'agent.js': 'export default { model: "from-file" }',
+		})
+		const { manifest } = await loadDirectory(root)
+
+		expect(deriveRunOptions(manifest, { provider, prompt: 'hi', model: 'explicit' }).model).toBe(
+			'explicit',
+		)
+	})
+
+	it('refuses when nothing names a model', async () => {
+		const root = project({ 'instructions.md': 'hi' })
+		const { manifest } = await loadDirectory(root)
+
+		expect(() => deriveRunOptions(manifest, { provider, prompt: 'hi' })).toThrow(/No model/)
+	})
+
+	it('forwards a name only when agent.ts declared one', async () => {
+		// A name guessed from a directory basename becomes the agent id in
+		// traces, where two sibling projects both called `agent` merge into one
+		// attribution bucket.
+		const declared = project({
+			'instructions.md': 'hi',
+			'agent.js': 'export default { model: "m", name: "researcher" }',
+		})
+		const guessed = project({
+			'instructions.md': 'hi',
+			'agent.js': 'export default { model: "m" }',
+		})
+
+		const withName = deriveRunOptions((await loadDirectory(declared)).manifest, {
+			provider,
+			prompt: 'x',
+		})
+		const without = deriveRunOptions((await loadDirectory(guessed)).manifest, {
+			provider,
+			prompt: 'x',
+		})
+
+		expect(withName.name).toBe('researcher')
+		expect(without.name).toBeUndefined()
+	})
+
+	it('refuses a manifest whose modules were never loaded', async () => {
+		// `manifest.tools` is empty for a reason that has nothing to do with
+		// the project. Running it would produce an agent with no capabilities
+		// and no indication why.
+		const root = project({
+			'instructions.md': 'hi',
+			'agent.js': 'export default { model: "m" }',
+			'tools/a.js': TOOL('a'),
+		})
+		const { manifest } = await loadDirectory(root, { modules: 'skip' })
+
+		expect(() => deriveRunOptions(manifest, { provider, prompt: 'hi' })).toThrow(/modules: "skip"/)
+	})
+
+	it('lets overrides win over everything', async () => {
+		const root = project({
+			'instructions.md': 'hi',
+			'agent.js': 'export default { model: "m", maxIterations: 3 }',
+		})
+		const { manifest } = await loadDirectory(root)
+
+		const options = deriveRunOptions(manifest, {
+			provider,
+			prompt: 'hi',
+			overrides: { maxIterations: 99 },
+		})
+
+		expect(options.maxIterations).toBe(99)
+	})
+})