@nexrall/code-core 1.4.49 → 1.4.51

package/dist/agent/agentTypes.d.ts

@@ -7,7 +7,14 @@ export interface AgentType {
     model?: string;
     /** System instructions (the markdown body below the frontmatter). */
     prompt: string;
-    source: 'project' | 'global' | 'builtin' | 'plugin';
+    /**
+     * 'programmatic' = registered in code via an embedding application (see the
+     * `extra` parameter of loadAgentTypesWithWarnings below), as opposed to
+     * discovered from a `.nexrall/agents/*.md` file. Added for `@nexrall/agent`'s
+     * `registerAgentType()`, which lets a host application define a sub-agent as
+     * a plain object instead of requiring a Markdown file on disk.
+     */
+    source: 'project' | 'global' | 'builtin' | 'plugin' | 'programmatic';
     /**
      * When true, this agent's write tools may only target TEST files.
      *
@@ -105,8 +112,17 @@ export declare function loadAgentTypes(workDir: string): AgentType[];
  * flawed definition still loads (fail-closed on PERMISSIONS, not on existence),
  * because making a user's agent vanish over a typo is its own kind of silent
  * failure.
+ *
+ * `extra` — agent types supplied directly by the embedding application (e.g.
+ * `@nexrall/agent`'s `registerAgentType()`), rather than discovered from a
+ * `.nexrall/agents/*.md` file. Precedence: an `extra` entry wins over a
+ * same-name file-based definition at ANY tier (project/global/plugin/builtin),
+ * matching the existing rule that a more specific source overrides a more
+ * general one — code the host application wrote is more specific than a file
+ * a project happens to contain. Defaults to `[]`, so every existing caller
+ * (the CLI, the VS Code extension, the desktop app) is unaffected.
  */
-export declare function loadAgentTypesWithWarnings(workDir: string): {
+export declare function loadAgentTypesWithWarnings(workDir: string, extra?: AgentType[]): {
     types: AgentType[];
     warnings: AgentWarning[];
 };

package/dist/agent/agentTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentTypes.d.ts","sourceRoot":"","sources":["../../src/agent/agentTypes.ts"],"names":[],"mappings":"AAmCA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpD;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,qDAAqD;AACrD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAkX5D,eAAO,MAAM,YAAY,wIAKf,CAAC;AAEX,2MAA2M;AAC3M,eAAO,MAAM,kBAAkB,4CAA6C,CAAC;AAC7E,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAOD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAMpE;AAoLD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,CAE3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAqB5G;AAED,yFAAyF;AACzF,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,IAAI,SAAS,EAAE,CAE3C;AACD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,CAY1D;AASD,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAIjG"}
+{"version":3,"file":"agentTypes.d.ts","sourceRoot":"","sources":["../../src/agent/agentTypes.ts"],"names":[],"mappings":"AAmCA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,cAAc,CAAC;IACrE;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,qDAAqD;AACrD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAkX5D,eAAO,MAAM,YAAY,wIAKf,CAAC;AAEX,2MAA2M;AAC3M,eAAO,MAAM,kBAAkB,4CAA6C,CAAC;AAC7E,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAOD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAMpE;AAoLD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,CAE3D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,SAAS,EAAO,GACtB;IAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAuBlD;AAED,yFAAyF;AACzF,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,IAAI,SAAS,EAAE,CAE3C;AACD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,CAY1D;AASD,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAIjG"}

package/dist/agent/agentTypes.js

@@ -625,8 +625,17 @@ function loadAgentTypes(workDir) {
  * flawed definition still loads (fail-closed on PERMISSIONS, not on existence),
  * because making a user's agent vanish over a typo is its own kind of silent
  * failure.
+ *
+ * `extra` — agent types supplied directly by the embedding application (e.g.
+ * `@nexrall/agent`'s `registerAgentType()`), rather than discovered from a
+ * `.nexrall/agents/*.md` file. Precedence: an `extra` entry wins over a
+ * same-name file-based definition at ANY tier (project/global/plugin/builtin),
+ * matching the existing rule that a more specific source overrides a more
+ * general one — code the host application wrote is more specific than a file
+ * a project happens to contain. Defaults to `[]`, so every existing caller
+ * (the CLI, the VS Code extension, the desktop app) is unaffected.
  */
-function loadAgentTypesWithWarnings(workDir) {
+function loadAgentTypesWithWarnings(workDir, extra = []) {
     const out = new Map();
     const warnings = [];
     loadDir(path.join(workDir, '.nexrall', 'agents'), 'project', out, warnings);
@@ -637,6 +646,9 @@ function loadAgentTypesWithWarnings(workDir) {
         if (!out.has(agent.name))
             out.set(agent.name, agent);
     }
+    // Programmatic entries win on name collision — see doc comment above.
+    for (const agent of extra)
+        out.set(agent.name, agent);
     // Builtins first in their declared order (the common, cache-friendly case), then
     // everything user-supplied alphabetically.
     const builtinOrder = new Map(BUILTIN_AGENTS.map((a, i) => [a.name, i]));

package/dist/agent/audit.d.ts

@@ -0,0 +1,154 @@
+/**
+ * Audit trail — a tamper-*visible* record of every tool call an agent makes.
+ *
+ * WHY THIS EXISTS
+ *
+ * Regulated buyers (finance first, but the same applies to healthcare/legal) do
+ * not reject agents for being unintelligent — they reject them for being
+ * UNAUDITABLE. The single most common finance-side audit finding in 2026 is an
+ * AI touching business data through a service account with no record of which
+ * HUMAN initiated the work, which fails SOX's individual-attribution standard.
+ * The remedy auditors name is "dual attribution": log the machine identity AND
+ * the authenticated human, together, per action.
+ *
+ * So this module records, for every tool call: what ran, who (agent) ran it, on
+ * whose behalf (human, supplied by the host), what the arguments were, and what
+ * came back — including calls that were BLOCKED and never executed, which is
+ * exactly what a security reviewer wants to see.
+ *
+ * WHAT IT DELIBERATELY IS NOT
+ *
+ * It does not make the agent correct, and it is not a data lake: outputs are
+ * truncated to a summary. It proves what happened; domain correctness is the
+ * job of skills/sub-agent definitions, not of this file.
+ *
+ * See docs/NEXRALL_AUDIT_TRAIL_LAYER.md (in the Nexrall repo) for the full
+ * design, including why the recording point is the loop's per-round result
+ * iteration rather than the onToolUse/onToolResult callbacks (short version:
+ * those are re-emitted upward by sub-agents, so auditing them double-counts
+ * every nested call, at a rate that varies with depth).
+ */
+/** How the tool call ended. `blocked` = refused before execution. */
+export type AuditOutcome = 'ok' | 'error' | 'blocked';
+/**
+ * One immutable line of the trail.
+ *
+ * Field names are stable: downstream consumers (SIEM pipelines, auditor
+ * exports) key off them, so treat renames as breaking changes.
+ */
+export interface AuditRecord {
+    /** ISO-8601 UTC. */
+    ts: string;
+    /** Stable per top-level run; inherited by sub-agents so a tree shares one id. */
+    sessionId: string;
+    /**
+     * The authenticated HUMAN, supplied by the host application.
+     *
+     * Never inferred here: core only holds a bearer token, and a token is a
+     * secret that must not be written to a log. Absent when the host supplied
+     * none — deliberately NOT defaulted to "system", because a fabricated
+     * attribution is worse than a visibly missing one.
+     */
+    userId?: string;
+    /** Agent identity: 'root' for the main agent, 'sub_N' for a sub-agent. */
+    actor: string;
+    /** 0 = main agent, 1+ = sub-agent nesting depth. */
+    depth: number;
+    /** Sub-agent type name, when this run is a typed sub-agent. */
+    agentType?: string;
+    model?: string;
+    tool: string;
+    /** Full arguments — this is what lets an auditor trace a number back to its source. */
+    input: unknown;
+    ok: boolean;
+    outcome: AuditOutcome;
+    error?: string;
+    /** Truncated: the trail records that output existed and its shape, not a copy of it. */
+    outputSummary?: string;
+    exitCode?: number;
+    workDir: string;
+}
+/**
+ * Where records go. The core ships one reference implementation (JSONL); every
+ * other destination (SIEM, customer database, hosted service) is the host's
+ * choice, which keeps transport and retention policy out of the agent loop.
+ *
+ * May be sync or async. It is never awaited on the tool path — see recordAudit.
+ */
+export interface AuditSink {
+    record(entry: AuditRecord): void | Promise<void>;
+}
+/** Host-side configuration. Absent from options => auditing is entirely off. */
+export interface AuditConfig {
+    sink: AuditSink;
+    /** The authenticated human this run acts for. See AuditRecord.userId. */
+    userId?: string;
+    /** Stable id for the run. Generated when omitted. */
+    sessionId?: string;
+    /**
+     * Last chance to mask or drop a record before it reaches the sink. Return
+     * null to drop it entirely.
+     *
+     * Never applied by default: silently rewriting an audit record is itself an
+     * audit problem, so the policy belongs with the host that knows its own data.
+     */
+    redact?: (entry: AuditRecord) => AuditRecord | null;
+}
+/** Output is summarised, not archived — keeps the trail a trail. */
+export declare const AUDIT_OUTPUT_LIMIT = 2000;
+/**
+ * Classify an outcome.
+ *
+ * A blocked call is NOT the same as a failed one, and collapsing the two would
+ * hide the security-relevant half of the trail: "the agent tried to write to
+ * production and was refused" must not read as "a tool errored".
+ *
+ * Detection is by the loop's own refusal messages. If those strings change, a
+ * blocked call degrades to `error` — still recorded, still visibly not-ok, so
+ * the failure mode is a less precise label rather than a missing entry.
+ */
+export declare function classifyOutcome(ok: boolean, error: string | undefined): AuditOutcome;
+export interface AuditContext {
+    config: AuditConfig;
+    sessionId: string;
+    actor: string;
+    depth: number;
+    agentType?: string;
+    model?: string;
+    workDir: string;
+}
+/**
+ * Build + emit one record. Fire-and-forget by design.
+ *
+ * An audit trail is a compliance artefact, not a correctness dependency: a full
+ * disk, a wedged SIEM or a buggy custom sink must not kill a run that is
+ * halfway through real work. So every sink failure — sync throw or rejected
+ * promise — is swallowed here, and the sink is never awaited (the tool round is
+ * on the latency-critical path; the Desktop app targets a ~0 ms local loop).
+ *
+ * The stricter "fail closed" policy (abort the run when the trail cannot be
+ * written) is a real requirement in some deployments but changes the loop's
+ * failure semantics, so it is intentionally not bolted on here.
+ */
+export declare function recordAudit(ctx: AuditContext, tool: string, input: unknown, ok: boolean, output: string | undefined, error: string | undefined, exitCode: number | undefined): void;
+/**
+ * Append-only JSONL sink — the reference implementation.
+ *
+ * One JSON object per line, appended with `fs.appendFileSync`. Chosen over a
+ * buffered writer because an audit line that is still sitting in a buffer when
+ * the process is killed is an audit line that does not exist; appending each
+ * record keeps the on-disk trail consistent with what actually ran. Writes are
+ * small and the call site never awaits, so this does not sit on the latency path.
+ *
+ * Not a tamper-EVIDENCE claim: it makes no cryptographic guarantee. Deployments
+ * needing that should point this at WORM storage or supply their own sink.
+ * Created with mode 0600 — a trail can contain business-sensitive arguments.
+ */
+export declare function createJsonlAuditSink(filePath: string): AuditSink;
+/** In-memory sink — for tests and for hosts that forward records themselves. */
+export declare function createMemoryAuditSink(): AuditSink & {
+    records: AuditRecord[];
+};
+/** Stable-enough id without pulling in a uuid dependency. */
+export declare function newAuditSessionId(): string;
+//# sourceMappingURL=audit.d.ts.map

package/dist/agent/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/agent/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAKH,qEAAqE;AACrE,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD;AAED,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,WAAW,GAAG,IAAI,CAAC;CACrD;AAED,oEAAoE;AACpE,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAQxC;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CAYpF;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,EAAE,EAAE,OAAO,EACX,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,IAAI,CAiCN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAWhE;AAED,gFAAgF;AAChF,wBAAgB,qBAAqB,IAAI,SAAS,GAAG;IAAE,OAAO,EAAE,WAAW,EAAE,CAAA;CAAE,CAQ9E;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/agent/audit.js

@@ -0,0 +1,199 @@
+"use strict";
+/**
+ * Audit trail — a tamper-*visible* record of every tool call an agent makes.
+ *
+ * WHY THIS EXISTS
+ *
+ * Regulated buyers (finance first, but the same applies to healthcare/legal) do
+ * not reject agents for being unintelligent — they reject them for being
+ * UNAUDITABLE. The single most common finance-side audit finding in 2026 is an
+ * AI touching business data through a service account with no record of which
+ * HUMAN initiated the work, which fails SOX's individual-attribution standard.
+ * The remedy auditors name is "dual attribution": log the machine identity AND
+ * the authenticated human, together, per action.
+ *
+ * So this module records, for every tool call: what ran, who (agent) ran it, on
+ * whose behalf (human, supplied by the host), what the arguments were, and what
+ * came back — including calls that were BLOCKED and never executed, which is
+ * exactly what a security reviewer wants to see.
+ *
+ * WHAT IT DELIBERATELY IS NOT
+ *
+ * It does not make the agent correct, and it is not a data lake: outputs are
+ * truncated to a summary. It proves what happened; domain correctness is the
+ * job of skills/sub-agent definitions, not of this file.
+ *
+ * See docs/NEXRALL_AUDIT_TRAIL_LAYER.md (in the Nexrall repo) for the full
+ * design, including why the recording point is the loop's per-round result
+ * iteration rather than the onToolUse/onToolResult callbacks (short version:
+ * those are re-emitted upward by sub-agents, so auditing them double-counts
+ * every nested call, at a rate that varies with depth).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUDIT_OUTPUT_LIMIT = void 0;
+exports.classifyOutcome = classifyOutcome;
+exports.recordAudit = recordAudit;
+exports.createJsonlAuditSink = createJsonlAuditSink;
+exports.createMemoryAuditSink = createMemoryAuditSink;
+exports.newAuditSessionId = newAuditSessionId;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/** Output is summarised, not archived — keeps the trail a trail. */
+exports.AUDIT_OUTPUT_LIMIT = 2000;
+function summarise(output) {
+    if (output === undefined || output === '')
+        return undefined;
+    if (output.length <= exports.AUDIT_OUTPUT_LIMIT)
+        return output;
+    return `${output.slice(0, exports.AUDIT_OUTPUT_LIMIT)}\n… [truncated ${output.length - exports.AUDIT_OUTPUT_LIMIT} chars]`;
+}
+/**
+ * Classify an outcome.
+ *
+ * A blocked call is NOT the same as a failed one, and collapsing the two would
+ * hide the security-relevant half of the trail: "the agent tried to write to
+ * production and was refused" must not read as "a tool errored".
+ *
+ * Detection is by the loop's own refusal messages. If those strings change, a
+ * blocked call degrades to `error` — still recorded, still visibly not-ok, so
+ * the failure mode is a less precise label rather than a missing entry.
+ */
+function classifyOutcome(ok, error) {
+    if (ok)
+        return 'ok';
+    const e = error ?? '';
+    const blocked = e.startsWith('Permission denied') ||
+        e.includes('not allowed to use') || // ToolNotAllowedError
+        e.includes('Blocked by PreToolUse hook') ||
+        e.includes('read-only') || // plan mode refusals
+        e.includes('plan mode') ||
+        e.includes('Plan mode') ||
+        e.includes('was CUT OFF'); // truncated tool call, refused unexecuted
+    return blocked ? 'blocked' : 'error';
+}
+/**
+ * Build + emit one record. Fire-and-forget by design.
+ *
+ * An audit trail is a compliance artefact, not a correctness dependency: a full
+ * disk, a wedged SIEM or a buggy custom sink must not kill a run that is
+ * halfway through real work. So every sink failure — sync throw or rejected
+ * promise — is swallowed here, and the sink is never awaited (the tool round is
+ * on the latency-critical path; the Desktop app targets a ~0 ms local loop).
+ *
+ * The stricter "fail closed" policy (abort the run when the trail cannot be
+ * written) is a real requirement in some deployments but changes the loop's
+ * failure semantics, so it is intentionally not bolted on here.
+ */
+function recordAudit(ctx, tool, input, ok, output, error, exitCode) {
+    try {
+        const base = {
+            ts: new Date().toISOString(),
+            sessionId: ctx.sessionId,
+            actor: ctx.actor,
+            depth: ctx.depth,
+            tool,
+            input,
+            ok,
+            outcome: classifyOutcome(ok, error),
+            workDir: ctx.workDir,
+        };
+        // Optional fields assigned conditionally so a record never carries
+        // `"userId": undefined` noise into JSONL.
+        if (ctx.config.userId !== undefined)
+            base.userId = ctx.config.userId;
+        if (ctx.agentType !== undefined)
+            base.agentType = ctx.agentType;
+        if (ctx.model !== undefined)
+            base.model = ctx.model;
+        if (error !== undefined)
+            base.error = error;
+        if (exitCode !== undefined)
+            base.exitCode = exitCode;
+        const summary = summarise(output);
+        if (summary !== undefined)
+            base.outputSummary = summary;
+        const entry = ctx.config.redact ? ctx.config.redact(base) : base;
+        if (entry === null)
+            return;
+        const maybe = ctx.config.sink.record(entry);
+        if (maybe && typeof maybe.catch === 'function') {
+            void maybe.catch(() => { });
+        }
+    }
+    catch {
+        // Never propagate. See the doc comment above.
+    }
+}
+/**
+ * Append-only JSONL sink — the reference implementation.
+ *
+ * One JSON object per line, appended with `fs.appendFileSync`. Chosen over a
+ * buffered writer because an audit line that is still sitting in a buffer when
+ * the process is killed is an audit line that does not exist; appending each
+ * record keeps the on-disk trail consistent with what actually ran. Writes are
+ * small and the call site never awaits, so this does not sit on the latency path.
+ *
+ * Not a tamper-EVIDENCE claim: it makes no cryptographic guarantee. Deployments
+ * needing that should point this at WORM storage or supply their own sink.
+ * Created with mode 0600 — a trail can contain business-sensitive arguments.
+ */
+function createJsonlAuditSink(filePath) {
+    let ensured = false;
+    return {
+        record(entry) {
+            if (!ensured) {
+                fs.mkdirSync(path.dirname(filePath), { recursive: true });
+                ensured = true;
+            }
+            fs.appendFileSync(filePath, `${JSON.stringify(entry)}\n`, { mode: 0o600 });
+        },
+    };
+}
+/** In-memory sink — for tests and for hosts that forward records themselves. */
+function createMemoryAuditSink() {
+    const records = [];
+    return {
+        records,
+        record(entry) {
+            records.push(entry);
+        },
+    };
+}
+/** Stable-enough id without pulling in a uuid dependency. */
+function newAuditSessionId() {
+    return `sess_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;
+}
+//# sourceMappingURL=audit.js.map

package/dist/agent/loop.d.ts

@@ -1,5 +1,5 @@
 import type { Message, ToolResult, AgentLoopOptions, EnvContext } from '../types';
-import { type AgentMemoryScope } from './agentTypes';
+import { type AgentType, type AgentMemoryScope } from './agentTypes';
 import { bashNeedsRepoLock } from '../permissions/bashClassify';
 export { bashNeedsRepoLock };
 /**
@@ -419,6 +419,21 @@ export declare function compactMessagesForResume(messages: Message[], opts: {
     env?: EnvContext;
     onNotice?: (text: string) => void;
 }): Promise<boolean>;
+/**
+ * Dispatch one `task` (sub-agent) call — the exact same path the `task` tool's
+ * `runAgentLoop` switch-case uses (session-budget claim, per-depth concurrency
+ * limiter, in-flight accounting, `runSubTask` itself), extracted into its own
+ * function so `@nexrall/agent`'s `delegate()`/`spawn()` can drive it directly
+ * instead of re-implementing depth/budget/concurrency enforcement a second
+ * time. `runAgentLoop`'s own `task` handling calls this too — there is only
+ * ONE dispatch path, not two that could drift apart.
+ *
+ * `agentTypes` is the caller's already-loaded, permission-filtered catalogue
+ * (see `loadAgentTypesWithWarnings` + the `deny` filter in `runAgentLoop`) —
+ * passed in rather than reloaded here so this function has no opinion of its
+ * own about where agent definitions come from.
+ */
+export declare function dispatchSubAgent(input: Record<string, unknown>, options: AgentLoopOptions, agentTypes: AgentType[]): Promise<ToolResult>;
 export declare function runAgentLoop(initialMessages: Message[], options: AgentLoopOptions): Promise<Message[]>;
 /**
  * Cut a history back to the last point the API will accept as a resumable

package/dist/agent/loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../src/agent/loop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EAKP,UAAU,EACV,gBAAgB,EAChB,UAAU,EACX,MAAM,UAAU,CAAC;AAIlB,OAAO,EAAkE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAMrH,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AA0K7B;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9C,MAAM,CAKR;AAED,+CAA+C;AAC/C,eAAO,MAAM,YAAY;;;CAAsC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;CAgB3B,CAAC;AAEX,mEAAmE;AACnE,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,CAAC,CA8BrB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAClB,OAAO,GACP,SAAS,GACT,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,YAAY,GACZ,SAAS,GACT,gBAAgB,GAChB,QAAQ,GACR,SAAS,CAAC;AAEd;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,GAAG,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACzD,MAAM,GAAG,IAAI,CA2Cf;AAaD,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,MAAM,CAYR;AA2ED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,EAAE,CAQV;AAwBD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,MAAM,CAW9F;AAoBD,kFAAkF;AAClF,wBAAgB,6BAA6B,CAAC,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,MAAM,CAa/F;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAgBlF;AA6DD,6EAA6E;AAC7E,wBAAgB,oBAAoB,IAAI,IAAI,CAQ3C;AAeD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAIjD;AAqDD,oFAAoF;AACpF,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AA4JD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,MAAM,CAOzF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAe9E;AAED;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EACvB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,GAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAIpB;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAC1B,KAAK,GAAE,MAA+B,GACrC,OAAO,CAMT;AAaD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAOpF;AAMD;;;;;;;;;;GAUG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAQD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,UAAU,UAAO,GAAG,MAAM,CAYjF;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAc,GAAG,MAAM,CAKtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAgCpE;AAMD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CA6B5F;AA2jBD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AA8BD,kHAAkH;AAClH,wBAAgB,oBAAoB,IAAI;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAEzE;AA6CD,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAM7D;AAsBD,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,aAA+G,CAAC;AAC7I;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO,CA8BrG;AAED,gGAAgG;AAChG,eAAO,MAAM,aAAa,QAA2J,CAAC;AAEtL;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAK5E;AAUD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAwBxD;AAoBD,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D;;;;;;;OAOG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,qFAAqF;IACrF,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,YAAY,IAAI,cAAc,CAE7C;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAC1B,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,EAAE,EAAE,OAAO,EACX,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,IAAI,CA2EN;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAgC5D;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,eAAe,SAAI,GAAG,MAAM,CAgCpF;AAoMD,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAE/D;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,EAAE;IACJ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC,GACA,OAAO,CAAC,OAAO,CAAC,CAgFlB;AAID,wBAAsB,YAAY,CAChC,eAAe,EAAE,OAAO,EAAE,EAC1B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,OAAO,EAAE,CAAC,CAuiCpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAqCtE"}
+{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../src/agent/loop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EAKP,UAAU,EACV,gBAAgB,EAChB,UAAU,EACX,MAAM,UAAU,CAAC;AAIlB,OAAO,EAA8D,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAMjI,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AA2K7B;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9C,MAAM,CAKR;AAED,+CAA+C;AAC/C,eAAO,MAAM,YAAY;;;CAAsC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;CAgB3B,CAAC;AAEX,mEAAmE;AACnE,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,CAAC,CA8BrB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAClB,OAAO,GACP,SAAS,GACT,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,YAAY,GACZ,SAAS,GACT,gBAAgB,GAChB,QAAQ,GACR,SAAS,CAAC;AAEd;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,GAAG,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACzD,MAAM,GAAG,IAAI,CA2Cf;AAaD,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,MAAM,CAYR;AA2ED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,EAAE,CAQV;AAwBD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,MAAM,CAW9F;AAoBD,kFAAkF;AAClF,wBAAgB,6BAA6B,CAAC,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,MAAM,CAa/F;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAgBlF;AA6DD,6EAA6E;AAC7E,wBAAgB,oBAAoB,IAAI,IAAI,CAQ3C;AAeD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAIjD;AAqDD,oFAAoF;AACpF,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AA4JD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,MAAM,CAOzF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAe9E;AAED;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EACvB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,GAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAIpB;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAC1B,KAAK,GAAE,MAA+B,GACrC,OAAO,CAMT;AAaD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAOpF;AAMD;;;;;;;;;;GAUG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAQD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,UAAU,UAAO,GAAG,MAAM,CAYjF;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAc,GAAG,MAAM,CAKtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAgCpE;AAMD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CA6B5F;AAqkBD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AA8BD,kHAAkH;AAClH,wBAAgB,oBAAoB,IAAI;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAEzE;AA6CD,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAM7D;AAsBD,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,aAA+G,CAAC;AAC7I;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO,CA8BrG;AAED,gGAAgG;AAChG,eAAO,MAAM,aAAa,QAA2J,CAAC;AAEtL;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAK5E;AAUD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAwBxD;AAoBD,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D;;;;;;;OAOG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,qFAAqF;IACrF,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,YAAY,IAAI,cAAc,CAE7C;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAC1B,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,EAAE,EAAE,OAAO,EACX,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,IAAI,CA2EN;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAgC5D;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,eAAe,SAAI,GAAG,MAAM,CAgCpF;AAoMD,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAE/D;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,EAAE;IACJ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC,GACA,OAAO,CAAC,OAAO,CAAC,CAgFlB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,EAAE,gBAAgB,EACzB,UAAU,EAAE,SAAS,EAAE,GACtB,OAAO,CAAC,UAAU,CAAC,CAyBrB;AAID,wBAAsB,YAAY,CAChC,eAAe,EAAE,OAAO,EAAE,EAC1B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,OAAO,EAAE,CAAC,CAwiCpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAqCtE"}

package/dist/agent/loop.js

@@ -66,6 +66,7 @@ exports.ledgerSummary = ledgerSummary;
 exports.pruneOldToolResults = pruneOldToolResults;
 exports.estimateTokensRough = estimateTokensRough;
 exports.compactMessagesForResume = compactMessagesForResume;
+exports.dispatchSubAgent = dispatchSubAgent;
 exports.runAgentLoop = runAgentLoop;
 exports.trimToResumableBoundary = trimToResumableBoundary;
 const types_1 = require("../types");
@@ -86,6 +87,7 @@ const index_1 = require("../plugins/index");
 const testIntegrity_1 = require("./testIntegrity");
 const flaky_1 = require("./flaky");
 const claimEvidence_1 = require("./claimEvidence");
+const audit_1 = require("./audit");
 const memory_1 = require("./memory");
 const safeSlice_1 = require("../util/safeSlice");
 const fs = __importStar(require("fs"));
@@ -1244,7 +1246,11 @@ started) {
     let agent = (0, agentTypes_1.findAgentType)(agentTypes, requestedType);
     let knownTypes = agentTypes;
     if (requestedType && !agent) {
-        knownTypes = (0, agentTypes_1.loadAgentTypes)(options.workDir);
+        // Same `extra` list the top-of-run snapshot used (see runAgentLoop) — otherwise a
+        // programmatically-registered agent (registerAgentType()) would resolve on the FIRST
+        // call in a turn (present in the snapshot) but "miss" on this reload path, since it was
+        // never written to disk for loadAgentTypes to rediscover.
+        knownTypes = (0, agentTypes_1.loadAgentTypesWithWarnings)(options.workDir, options._extraAgentTypes ?? []).types;
         agent = (0, agentTypes_1.findAgentType)(knownTypes, requestedType);
     }
     if (requestedType && !agent) {
@@ -1443,6 +1449,12 @@ started) {
             // takes the opposite direction on purpose (inherited, because it RESTRICTS); identity
             // must not be inherited, capability must.
             _agentMemory: agent && memoryScope ? { agentName: agent.name, scope: memoryScope } : undefined,
+            // Assigned unconditionally for the same reason as _agentMemory above: a
+            // conditional spread would leave the PARENT's type name in place, so an
+            // untyped (general-purpose) child would be recorded in the audit trail
+            // under its parent's agent type — a wrong attribution, which is worse in a
+            // compliance record than an absent one.
+            _agentTypeName: agent?.name,
             // The same set `gatedPermission` enforces above, so prompt and permission agree
             // by construction instead of by two people remembering to update both.
             _allowedTools: allowed ?? undefined,
@@ -2349,6 +2361,48 @@ async function compactMessagesForResume(messages, opts) {
     }
     return compacted;
 }
+/**
+ * Dispatch one `task` (sub-agent) call — the exact same path the `task` tool's
+ * `runAgentLoop` switch-case uses (session-budget claim, per-depth concurrency
+ * limiter, in-flight accounting, `runSubTask` itself), extracted into its own
+ * function so `@nexrall/agent`'s `delegate()`/`spawn()` can drive it directly
+ * instead of re-implementing depth/budget/concurrency enforcement a second
+ * time. `runAgentLoop`'s own `task` handling calls this too — there is only
+ * ONE dispatch path, not two that could drift apart.
+ *
+ * `agentTypes` is the caller's already-loaded, permission-filtered catalogue
+ * (see `loadAgentTypesWithWarnings` + the `deny` filter in `runAgentLoop`) —
+ * passed in rather than reloaded here so this function has no opinion of its
+ * own about where agent definitions come from.
+ */
+async function dispatchSubAgent(input, options, agentTypes) {
+    const depth = options._depth ?? 0;
+    const overBudget = claimSessionSubAgentSlot(options.workDir, options.onNotice ?? options.onText);
+    if (overBudget)
+        return { error: overBudget };
+    const childDepth = depth + 1;
+    const { run: limitRun, max: limitMax } = subTaskLimiter(childDepth, options.workDir);
+    const inFlight = _inFlightByDepth.get(childDepth) ?? 0;
+    if (inFlight >= limitMax) {
+        (options.onNotice ?? options.onText)(`\u23f3 Queued: ${limitMax} sub-agent(s) already running at this level, so this one ` +
+            `starts when a slot frees up (raise "maxConcurrentSubtasks" in .nexrall/settings.json ` +
+            'to widen it).');
+    }
+    _inFlightByDepth.set(childDepth, inFlight + 1);
+    const started = { value: false };
+    try {
+        return await limitRun(() => runSubTask(input, options, agentTypes, started));
+    }
+    finally {
+        if (!started.value)
+            refundSessionSubAgentSlot();
+        const n = (_inFlightByDepth.get(childDepth) ?? 1) - 1;
+        if (n > 0)
+            _inFlightByDepth.set(childDepth, n);
+        else
+            _inFlightByDepth.delete(childDepth);
+    }
+}
 // ─── Agent Loop ───────────────────────────────────────────────────────────────
 async function runAgentLoop(initialMessages, options) {
     const messages = [...initialMessages];
@@ -2356,6 +2410,36 @@ async function runAgentLoop(initialMessages, options) {
     const hooks = loadHooks(options.workDir);
     const depth = options._depth ?? 0;
     const agentScope = options._agentScope ?? 'root';
+    // ── Audit trail (opt-in) ────────────────────────────────────────────────────
+    //
+    // Undefined for every caller that hasn't opted in, which is what keeps this
+    // change behaviour-neutral: `auditCtx` stays undefined and the one emit site
+    // below is skipped entirely.
+    //
+    // The session id is resolved ONCE here and, when the host didn't supply one,
+    // pushed down to sub-agents through `auditOptions` (below) rather than left to
+    // each nested loop to generate its own. Otherwise every sub-agent would open a
+    // NEW session id and the trail would no longer show that a delegated write and
+    // the user request that caused it belong to the same run — which is precisely
+    // the chain of custody the trail exists to prove.
+    const auditCfg = options.audit
+        ? (options.audit.sessionId ? options.audit : { ...options.audit, sessionId: (0, audit_1.newAuditSessionId)() })
+        : undefined;
+    const auditCtx = auditCfg
+        ? {
+            config: auditCfg,
+            sessionId: auditCfg.sessionId,
+            actor: agentScope,
+            depth,
+            agentType: options._agentTypeName,
+            model,
+            workDir: options.workDir,
+        }
+        : undefined;
+    // Sub-agents must inherit the RESOLVED config (with the session id filled in).
+    // Copied, never mutated in place: `options` belongs to the caller, and this
+    // loop runs concurrently with sibling sub-agents sharing that object.
+    const auditOptions = auditCfg && auditCfg !== options.audit ? { ...options, audit: auditCfg } : options;
     // Settings are read before the agent catalogue because a `deny` rule can
     // switch a sub-agent off, and an agent that may not run must not be
     // advertised (see below).
@@ -2368,7 +2452,7 @@ async function runAgentLoop(initialMessages, options) {
     // spend a tool call discovering the refusal, and "available types: …" on the
     // error path would name it again. Enforcement still happens at dispatch
     // (runSubTask) — this is the cosmetic half; that is the load-bearing half.
-    const agentTypes = (0, agentTypes_1.loadAgentTypes)(options.workDir).filter((t) => (0, rules_1.evaluatePermission)(settings.permissions, 'task', { subagent_type: t.name }, options.workDir) !== 'deny');
+    const agentTypes = (0, agentTypes_1.loadAgentTypesWithWarnings)(options.workDir, options._extraAgentTypes ?? []).types.filter((t) => (0, rules_1.evaluatePermission)(settings.permissions, 'task', { subagent_type: t.name }, options.workDir) !== 'deny');
     // Can THIS run delegate at all? Previously only the catalogue was gated (`depth === 0`)
     // while the tool schema and its instructions went to every run — see canSpawnSubAgents.
     //
@@ -2382,7 +2466,7 @@ async function runAgentLoop(initialMessages, options) {
     // just a reusable prompt template (via use_skill), not another spawn point, so
     // sub-agents benefit from the same playbooks without the recursion concerns that
     // gate agentsCatalogue to the top level.
-    const skillsCatalogue = (0, skills_1.summariseSkills)((0, skills_1.loadSkills)(options.workDir));
+    const skillsCatalogue = (0, skills_1.summariseSkills)((0, skills_1.loadSkillsWithWarnings)(options.workDir, options._extraSkills ?? []).skills);
     // Plan mode instructions ride the project-instructions channel, which is
     // authoritative in the system prompt. Prepended rather than appended: the
     // lock has to be read before the project conventions it overrides.
@@ -3052,64 +3136,13 @@ async function runAgentLoop(initialMessages, options) {
                     // Gated so a burst of `task` blocks in one message becomes a QUEUE
                     // rather than N concurrent agent loops (see MAX_CONCURRENT_SUBTASKS).
                     //
-                    // The gate wraps the CALL, not the inside of runSubTask, and that
-                    // placement is the whole trick: runSubTask arms its own 10-minute stall
-                    // timeout as its first act, so acquiring the slot inside it would start
-                    // that clock while the sub-task was still sitting in the queue. A
-                    // sub-task queued behind three long-running siblings could then be
-                    // "stopped for stalling" having never executed a single step.
-                    //
-                    // EVERY level is gated, each against its own depth's limiter.
-                    //
-                    // This used to be `depth === 0` only, because one shared limiter deadlocks if a
-                    // slot-holder re-enters it — and with sub-agents as leaves, skipping the nested
-                    // case was free. Now that nesting is real, skipping it would leave fan-out below
-                    // level 1 completely unbounded. Per-depth limiters give bounded concurrency at
-                    // every level while keeping the wait-for graph a DAG (a depth-D holder only ever
-                    // waits on depth-D+1), so there is no cycle to deadlock on. See _subTaskLimiters.
-                    // Session budget FIRST, outside the limiter. runSubTask runs inside limitRun, so
-                    // claiming in there meant a spawn that was already over budget queued behind up to
-                    // `max` running siblings before hearing no — in a runaway, i.e. the exact case this
-                    // guard exists for, refusals trickled out at sibling-completion rate.
-                    const overBudget = claimSessionSubAgentSlot(options.workDir, options.onNotice ?? options.onText);
-                    if (overBudget) {
-                        result = { error: overBudget };
-                    }
-                    else {
-                        const childDepth = depth + 1;
-                        const { run: limitRun, max: limitMax } = subTaskLimiter(childDepth, options.workDir);
-                        // Tell the user when a sub-task is WAITING rather than working.
-                        //
-                        // With a burst of 8 and a ceiling of 4, the last four sat silently in the
-                        // queue. From the outside they looked started, so a long wait read as a
-                        // hang — and the fix for a hang (Ctrl+C and retry) is exactly wrong here,
-                        // since the work was about to run. Counted per depth, so a level-2 queue is
-                        // not reported using a level-1 count.
-                        const inFlight = _inFlightByDepth.get(childDepth) ?? 0;
-                        if (inFlight >= limitMax) {
-                            (options.onNotice ?? options.onText)(`\u23f3 Queued: ${limitMax} sub-agent(s) already running at this level, so this one ` +
-                                `starts when a slot frees up (raise "maxConcurrentSubtasks" in .nexrall/settings.json ` +
-                                'to widen it).');
-                        }
-                        _inFlightByDepth.set(childDepth, inFlight + 1);
-                        // runSubTask flips this at its point of no return, so a spawn rejected by its own
-                        // validation (empty prompt, a deny rule, an unusable resume id) gives the slot
-                        // back. Without it, a model retrying against a deny rule would burn the entire
-                        // allowance on spawns that never ran and then lose delegation for the session.
-                        const started = { value: false };
-                        try {
-                            result = await limitRun(() => runSubTask(input, options, agentTypes, started));
-                        }
-                        finally {
-                            if (!started.value)
-                                refundSessionSubAgentSlot();
-                            const n = (_inFlightByDepth.get(childDepth) ?? 1) - 1;
-                            if (n > 0)
-                                _inFlightByDepth.set(childDepth, n);
-                            else
-                                _inFlightByDepth.delete(childDepth); // don't retain a key per depth forever
-                        }
-                    }
+                    // EVERY level is gated, each against its own depth's limiter — see
+                    // dispatchSubAgent's own doc comment for why the gate wraps the call
+                    // rather than the inside of runSubTask, and why every depth (not just
+                    // depth 0) needs its own limiter. Extracted into dispatchSubAgent so
+                    // `@nexrall/agent`'s delegate()/spawn() drive the SAME path instead of
+                    // reimplementing depth/budget/concurrency enforcement a second time.
+                    result = await dispatchSubAgent(input, auditOptions, agentTypes);
                 }
                 else {
                     const pre = runToolHooks(hooks.PreToolUse, 'PreToolUse', name, input, options.workDir);
@@ -3214,6 +3247,15 @@ async function runAgentLoop(initialMessages, options) {
                 // exitCode lets the ledger tell a PASSED verification from a FAILED one
                 // (a `npm test` that exits non-zero is not an `error`, but it IS a fail).
                 ledgerRecord(ledger, block.name, block.input, ok, rawOutput ?? result.output, result.exitCode);
+                // Audit emission rides alongside the ledger because THIS is the one place
+                // every tool call of this loop passes exactly once, whatever happened to it:
+                // executed, errored, permission-denied, plan-mode-refused, hook-blocked or
+                // refused as a truncated call. Auditing onToolUse/onToolResult instead would
+                // have double-counted every nested call, since runSubTask re-emits a child's
+                // tool events through the parent's callbacks (see audit.ts's header).
+                if (auditCtx) {
+                    (0, audit_1.recordAudit)(auditCtx, block.name, block.input, ok, result.output, result.error, result.exitCode);
+                }
                 if (!ok)
                     continue; // failed calls don't count either way
                 if (exports.WRITE_TOOL_NAMES.has(block.name))

package/dist/agent/skills.d.ts

@@ -11,7 +11,15 @@ export interface Skill {
     model?: string;
     mode?: string;
     body: string;
-    source: 'project' | 'global' | 'builtin' | 'plugin';
+    /**
+     * 'programmatic' = registered in code via an embedding application (see the
+     * `extra` parameter of loadSkillsWithWarnings below), as opposed to
+     * discovered from a `.nexrall/skills/<name>/SKILL.md` (or legacy flat
+     * command) file. Added for `@nexrall/agent`'s `registerSkills()`, which lets
+     * a library author bundle a skill inside an npm package instead of asking
+     * consumers to copy a Markdown file into their project.
+     */
+    source: 'project' | 'global' | 'builtin' | 'plugin' | 'programmatic';
     /** Absolute path to the skill's own directory, for resolving supporting files. Undefined for flat command-style skills (no directory). */
     dir?: string;
     /** true → only `/name` invokes it; the model must not auto-trigger it (side-effecting workflows like /deploy). */
@@ -30,17 +38,24 @@ export interface Skill {
 /**
  * Discover all skills, with diagnostics.
  *
- * Precedence, most to least authoritative: project `.nexrall/skills` >
- * project `.nexrall/commands` > project `.agents/skills` (cross-client) >
- * global `.nexrall/commands` > global `.nexrall/skills` > global
- * `.agents/skills` (cross-client) > plugin > builtin.
+ * Precedence, most to least authoritative: `extra` (programmatic) > project
+ * `.nexrall/skills` > project `.nexrall/commands` > project `.agents/skills`
+ * (cross-client) > global `.nexrall/commands` > global `.nexrall/skills` >
+ * global `.agents/skills` (cross-client) > plugin > builtin.
  *
  * The `.agents/skills` scans are always the weakest source within their tier
  * — see the module comment above for why. Directory-style
  * `.nexrall/skills/<name>/SKILL.md` beats a flat `.nexrall/commands/<name>.md`
  * of the same name within the same precedence tier.
+ *
+ * `extra` — skills supplied directly by the embedding application (e.g.
+ * `@nexrall/agent`'s `registerSkills()`), rather than discovered from a
+ * `SKILL.md`/command file. Wins on name collision at any tier, for the same
+ * reason `loadAgentTypesWithWarnings`'s `extra` does: code the host
+ * application registered is more specific than a file a project happens to
+ * contain. Defaults to `[]`, so every existing caller is unaffected.
  */
-export declare function loadSkillsWithWarnings(workDir: string): {
+export declare function loadSkillsWithWarnings(workDir: string, extra?: Skill[]): {
     skills: Skill[];
     warnings: SkillWarning[];
 };

package/dist/agent/skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/agent/skills.ts"],"names":[],"mappings":"AA0EA,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpD,0IAA0I;IAC1I,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kHAAkH;IAClH,sBAAsB,EAAE,OAAO,CAAC;IAChC,iGAAiG;IACjG,aAAa,EAAE,OAAO,CAAC;IACvB,2GAA2G;IAC3G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8GAA8G;IAC9G,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kHAAkH;IAClH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,0JAA0J;IAC1J,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AA6MD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAsBrG;AAED,kKAAkK;AAClK,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,EAAE,CAEnD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAG1E;AAED,6GAA6G;AAC7G,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAE5D;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAE5D;AAED,oHAAoH;AACpH,wBAAgB,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAIvD;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAcpF"}
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/agent/skills.ts"],"names":[],"mappings":"AA0EA,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;OAOG;IACH,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,cAAc,CAAC;IACrE,0IAA0I;IAC1I,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kHAAkH;IAClH,sBAAsB,EAAE,OAAO,CAAC;IAChC,iGAAiG;IACjG,aAAa,EAAE,OAAO,CAAC;IACvB,2GAA2G;IAC3G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8GAA8G;IAC9G,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kHAAkH;IAClH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,0JAA0J;IAC1J,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AA6MD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,KAAK,EAAO,GAAG;IAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAwB1H;AAED,kKAAkK;AAClK,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,EAAE,CAEnD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAG1E;AAED,6GAA6G;AAC7G,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAE5D;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAE5D;AAED,oHAAoH;AACpH,wBAAgB,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAIvD;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAcpF"}

package/dist/agent/skills.js

@@ -259,17 +259,24 @@ const BUILTIN_SKILLS = [
 /**
  * Discover all skills, with diagnostics.
  *
- * Precedence, most to least authoritative: project `.nexrall/skills` >
- * project `.nexrall/commands` > project `.agents/skills` (cross-client) >
- * global `.nexrall/commands` > global `.nexrall/skills` > global
- * `.agents/skills` (cross-client) > plugin > builtin.
+ * Precedence, most to least authoritative: `extra` (programmatic) > project
+ * `.nexrall/skills` > project `.nexrall/commands` > project `.agents/skills`
+ * (cross-client) > global `.nexrall/commands` > global `.nexrall/skills` >
+ * global `.agents/skills` (cross-client) > plugin > builtin.
  *
  * The `.agents/skills` scans are always the weakest source within their tier
  * — see the module comment above for why. Directory-style
  * `.nexrall/skills/<name>/SKILL.md` beats a flat `.nexrall/commands/<name>.md`
  * of the same name within the same precedence tier.
+ *
+ * `extra` — skills supplied directly by the embedding application (e.g.
+ * `@nexrall/agent`'s `registerSkills()`), rather than discovered from a
+ * `SKILL.md`/command file. Wins on name collision at any tier, for the same
+ * reason `loadAgentTypesWithWarnings`'s `extra` does: code the host
+ * application registered is more specific than a file a project happens to
+ * contain. Defaults to `[]`, so every existing caller is unaffected.
  */
-function loadSkillsWithWarnings(workDir) {
+function loadSkillsWithWarnings(workDir, extra = []) {
     const out = new Map();
     const warnings = [];
     // Project tier is last-write-wins (see loadSkillDir/loadFlatCommandDir's
@@ -290,6 +297,9 @@ function loadSkillsWithWarnings(workDir) {
         if (!out.has(skill.name))
             out.set(skill.name, skill);
     }
+    // Programmatic entries win on name collision — see doc comment above.
+    for (const skill of extra)
+        out.set(skill.name, skill);
     return { skills: [...out.values()], warnings };
 }
 /** Discover all skills (project overrides global overrides plugin overrides builtin). See loadSkillsWithWarnings for the full precedence rule and diagnostics. */

package/dist/index.d.ts

@@ -9,6 +9,7 @@ export * from './agent/securityLint';
 export * from './agent/crossFile';
 export * from './agent/flaky';
 export * from './agent/claimEvidence';
+export * from './agent/audit';
 export * from './agent/memory';
 export * from './agent/skills';
 export * from './mcp/client';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC"}

package/dist/index.js

@@ -25,6 +25,7 @@ __exportStar(require("./agent/securityLint"), exports);
 __exportStar(require("./agent/crossFile"), exports);
 __exportStar(require("./agent/flaky"), exports);
 __exportStar(require("./agent/claimEvidence"), exports);
+__exportStar(require("./agent/audit"), exports);
 __exportStar(require("./agent/memory"), exports);
 __exportStar(require("./agent/skills"), exports);
 __exportStar(require("./mcp/client"), exports);

package/dist/types.d.ts

@@ -422,6 +422,47 @@ export interface AgentLoopOptions {
      * any agent without that flag would write production source on its behalf.
      */
     _testFilesOnly?: boolean;
+    /**
+     * Agent types registered programmatically by the embedding application (e.g.
+     * `@nexrall/agent`'s `registerAgentType()`), merged into BOTH the catalogue
+     * snapshot the loop takes at the top of a run AND the reload-on-miss path
+     * `task` dispatch falls back to when a name isn't in that snapshot (a file
+     * just written mid-turn) — passing it to only one of the two would make a
+     * programmatic agent resolvable sometimes and "unknown" other times,
+     * depending on timing. See `agentTypes.ts`'s `loadAgentTypesWithWarnings`
+     * for the merge/precedence rule this list participates in.
+     */
+    _extraAgentTypes?: import('./agent/agentTypes').AgentType[];
+    /** As `_extraAgentTypes`, for `@nexrall/agent`'s `registerSkills()`. */
+    _extraSkills?: import('./agent/skills').Skill[];
+    /**
+     * Internal: the sub-agent TYPE name this run is executing as (e.g. 'reviewer'),
+     * or undefined for the main agent.
+     *
+     * Carried for the audit trail: `_agentScope` identifies the run instance
+     * ('sub_3'), which is meaningless to an auditor on its own — "which agent did
+     * this" has to name the definition that granted the capability, not just the
+     * slot number it happened to run in.
+     */
+    _agentTypeName?: string;
+    /**
+     * Opt-in tool-call audit trail (compliance/regulated deployments).
+     *
+     * Absent — which is every existing caller — means auditing is entirely off and
+     * the loop behaves exactly as before: the added code is one `if` that is false.
+     * Supplied, it records every tool call this run makes, INCLUDING calls that were
+     * refused and never executed, to the host-provided sink.
+     *
+     * Lives at this level rather than in the SDK or the Desktop app on purpose: all
+     * of them (CLI, VS Code, SDK, Desktop) funnel through this one loop, and a
+     * guarantee implemented once per client is a guarantee that drifts apart per
+     * client — which for an audit trail means one entry path silently logging
+     * nothing. Sub-agents inherit it through the options spread in runSubTask, so a
+     * delegated call is recorded by the sub-agent's own loop, exactly once.
+     *
+     * See docs/NEXRALL_AUDIT_TRAIL_LAYER.md.
+     */
+    audit?: import('./agent/audit').AuditConfig;
 }
 /**
  * Thrown by `runAgentLoop` when a turn cannot continue (stream died, upstream

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAKD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AAKD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,UAAU,EAAE,iBAAiB,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzE;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,YAAY,GAAG,eAAe,GAAG,UAAU,GAAG,aAAa,CAAC;AAInG,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,0HAA0H;AAC1H,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,QAAQ,GAChB,YAAY,GACZ,eAAe,GACf,uBAAuB,GACvB,aAAa,GACb,YAAY,GACZ,aAAa,GACb,gBAAgB,GAChB,wBAAwB,GACxB,qBAAqB,GACrB,aAAa,GACb,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,CAAC;AAI1B,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,gEAAgE;IAChE,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChH,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACvF,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9E;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/E;;;;;OAKG;IACH,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACnD;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACzE,+FAA+F;IAC/F,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IACnE;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAClE;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACnG,+EAA+E;IAC/E,UAAU,CAAC,EAAE,OAAO,eAAe,EAAE,UAAU,CAAC;IAChD,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,OAAO,sBAAsB,EAAE,iBAAiB,CAAC;IACrE;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAClC,+FAA+F;IAC/F,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAC3C;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC1E;;;;;OAKG;IACH,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAID;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAOzF;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,cAAc,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,IAAI,CAG7D"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAKD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AAKD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,UAAU,EAAE,iBAAiB,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzE;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,YAAY,GAAG,eAAe,GAAG,UAAU,GAAG,aAAa,CAAC;AAInG,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,0HAA0H;AAC1H,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,QAAQ,GAChB,YAAY,GACZ,eAAe,GACf,uBAAuB,GACvB,aAAa,GACb,YAAY,GACZ,aAAa,GACb,gBAAgB,GAChB,wBAAwB,GACxB,qBAAqB,GACrB,aAAa,GACb,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,CAAC;AAI1B,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,gEAAgE;IAChE,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChH,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACvF,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9E;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/E;;;;;OAKG;IACH,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACnD;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACzE,+FAA+F;IAC/F,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IACnE;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAClE;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACnG,+EAA+E;IAC/E,UAAU,CAAC,EAAE,OAAO,eAAe,EAAE,UAAU,CAAC;IAChD,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,OAAO,sBAAsB,EAAE,iBAAiB,CAAC;IACrE;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAClC,+FAA+F;IAC/F,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAC3C;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC1E;;;;;OAKG;IACH,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,OAAO,oBAAoB,EAAE,SAAS,EAAE,CAAC;IAC5D,wEAAwE;IACxE,YAAY,CAAC,EAAE,OAAO,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAChD;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,EAAE,OAAO,eAAe,EAAE,WAAW,CAAC;CAC7C;AAID;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAOzF;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,cAAc,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,IAAI,CAG7D"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nexrall/code-core",
-  "version": "1.4.49",
-  "description": "Core agent loop, tools, and extension primitives for Nexrall Code — embed an AI coding agent in any Node.js application.",
+  "version": "1.4.51",
+  "description": "Core agent loop, tools, and extension primitives for Nexrall Code \u2014 embed an AI coding agent in any Node.js application.",
   "license": "MIT",
   "author": "Nexrall <support@nexrall.com> (https://nexrall.com)",
   "homepage": "https://github.com/nexrall/nexrall-code#readme",