@opencow-ai/opencow-agent-sdk 0.4.6 → 0.4.8

package/dist/constants/envVars.d.ts

@@ -106,6 +106,7 @@ export declare const ENV_VARS: {
     readonly ENABLE_TASKS: EnvVarSpec;
     readonly ENABLE_TELEMETRY: EnvVarSpec;
     readonly ENABLE_TOKEN_USAGE_ATTACHMENT: EnvVarSpec;
+    readonly ENABLE_TOOL_SEARCH: EnvVarSpec;
     readonly ENABLE_XAA: EnvVarSpec;
     readonly ENHANCED_TELEMETRY_BETA: EnvVarSpec;
     readonly ENTRYPOINT: EnvVarSpec;

package/dist/constants/tools.d.ts

@@ -6,7 +6,7 @@ export declare const ASYNC_AGENT_ALLOWED_TOOLS: Set<string>;
  * These are injected by inProcessRunner.ts and allowed through filterToolsForAgent
  * via isInProcessTeammate() check.
  */
-export declare const IN_PROCESS_TEAMMATE_ALLOWED_TOOLS: Set<any>;
+export declare const IN_PROCESS_TEAMMATE_ALLOWED_TOOLS: Set<string>;
 /**
  * Tools allowed in coordinator mode - only output and agent management tools for the coordinator
  */

package/dist/controller/compact/autoCompact.d.ts

@@ -2,7 +2,8 @@ import type { QuerySource } from '../../constants/querySource.js';
 import type { ToolRuntimeContext } from '../../types/toolRuntime.js';
 import type { Message } from '../../types/message.js';
 import type { CacheSafeParams } from '../../session/forkedAgent.js';
-import { type CompactionResult } from './compact.js';
+import { type CompactionResult, compactConversation } from './compact.js';
+import { trySessionMemoryCompaction } from './sessionMemoryCompact.js';
 export declare function getEffectiveContextWindowSize(model: string, opts?: {
     contextWindow?: number;
     maxOutputTokens?: number;
@@ -41,3 +42,18 @@ export declare function autoCompactIfNeeded(messages: Message[], toolUseContext:
     compactionResult?: CompactionResult;
     consecutiveFailures?: number;
 }>;
+/**
+ * host 主动触发的手动压缩（用户的 `/compact`）。与 autoCompactIfNeeded 不同：
+ * 不看 token 阈值——总是立即压缩；并以非自动方式运行（isAutoCompact=false），
+ * 从而尊重自定义指令。其余策略与自动压缩一致：无指令时先试 session-memory 压缩
+ * （它不支持自定义指令），不可用再退回完整摘要压缩。
+ *
+ * deps 可注入，便于在不驱动真实摘要模型的前提下测试编排逻辑（沿用本仓 QueryDeps 思路）。
+ */
+export declare function manualCompact(messages: Message[], toolUseContext: ToolRuntimeContext, cacheSafeParams: CacheSafeParams, instructions?: string, deps?: {
+    compactConversation: typeof compactConversation;
+    trySessionMemoryCompaction: typeof trySessionMemoryCompaction;
+}): Promise<{
+    wasCompacted: boolean;
+    compactionResult?: CompactionResult;
+}>;

package/dist/controller/compact/reactiveCompact.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Reactive（撞墙后）上下文压缩 —— 413 "Prompt is too long" / 媒体过大的兜底。
+ *
+ * 主动压缩（autoCompact）在每轮开头按 token 阈值预判；但大 tool 输出能在同一 agent
+ * loop 内、两次检查之间把上下文顶爆 → 下一次 API 调用直接被上游拒（413/400
+ * "prompt is too long"）。窗口估错（后端虚报 / openai 模型退回 200k 默认）时主动压缩
+ * 更是抓不住。本模块在 query loop 的流式阶段「withhold」住这类可恢复错误，turn 结束后由
+ * tryReactiveCompact 压缩 + 重试（单发防自旋：本 turn 试过一次就放弃，让错误浮现）。
+ *
+ * 复用 compactConversation（同主动压缩的摘要引擎，会 strip 图片 + 摘要旧消息），所以
+ * 媒体过大错误压缩后也能在重试时消失。query.ts 已接好 withhold/recovery/retry 状态机，
+ * 本模块只负责：判定可恢复 + 执行一次压缩。
+ */
+import type { AssistantMessage, Message } from '../../types/message.js';
+import type { QuerySource } from '../../constants/querySource.js';
+import type { CacheSafeParams } from '../../session/forkedAgent.js';
+import { type CompactionResult, compactConversation } from './compact.js';
+type WithholdableMessage = AssistantMessage | {
+    type?: string;
+} | null | undefined;
+/**
+ * Reactive 压缩是否启用。沿用用户的自动压缩开关：关掉自动压缩 = 连兜底也不做
+ * （尊重 DISABLE_AUTO_COMPACT / autoCompactEnabled=false 的「不要任何自动行为」语义）。
+ */
+export declare function isReactiveCompactEnabled(): boolean;
+/** 流式阶段：这条消息是否是可兜底的 prompt-too-long（应 withhold 等待恢复）。 */
+export declare function isWithheldPromptTooLong(message: WithholdableMessage): boolean;
+/** 流式阶段：这条消息是否是可兜底的媒体过大错误（压缩 strip 图片后重试可恢复）。 */
+export declare function isWithheldMediaSizeError(message: WithholdableMessage): boolean;
+export interface TryReactiveCompactParams {
+    /** 本 turn 是否已经 reactive 压缩过一次（单发防自旋）。 */
+    hasAttempted: boolean;
+    querySource: QuerySource | undefined;
+    aborted: boolean;
+    messages: Message[];
+    cacheSafeParams: CacheSafeParams;
+}
+interface TryReactiveCompactDeps {
+    compactConversation: typeof compactConversation;
+    isReactiveCompactEnabled: typeof isReactiveCompactEnabled;
+}
+/**
+ * 撞墙后压缩一次并返回结果供 query loop 重试；不可恢复时返回 null（错误浮现）。
+ *
+ * 单发：hasAttempted=true（本 turn 已试过）或已 abort 直接 null，避免「压缩→仍超→
+ * 再压缩」死循环。复用 compactConversation：suppress 提问、无自定义指令、isAutoCompact
+ * 语义（它会 strip 图片 + 摘要旧消息，使 413/媒体过大在重试时消失）。
+ *
+ * deps 可注入，便于在不驱动真实摘要模型的前提下测试编排逻辑（沿用本仓 manualCompact 思路）。
+ */
+export declare function tryReactiveCompact(params: TryReactiveCompactParams, deps?: TryReactiveCompactDeps): Promise<CompactionResult | null>;
+export {};

package/dist/controller/hooks.d.ts

@@ -218,7 +218,10 @@ export declare function executeStopFailureHooks(lastMessage: AssistantMessage, t
  * @param messages Optional conversation history for prompt/function hooks
  * @returns Async generator that yields progress messages and blocking errors
  */
-export declare function executeStopHooks(permissionMode?: string, signal?: AbortSignal, timeoutMs?: number, stopHookActive?: boolean, subagentId?: AgentId, toolUseContext?: ToolRuntimeContext, messages?: Message[], agentType?: string, requestPrompt?: (sourceName: string, toolInputSummary?: string | null) => (request: PromptRequest) => Promise<PromptResponse>): AsyncGenerator<AggregatedHookResult>;
+export declare function executeStopHooks(permissionMode?: string, signal?: AbortSignal, timeoutMs?: number, stopHookActive?: boolean, subagentId?: AgentId, toolUseContext?: ToolRuntimeContext, messages?: Message[], agentType?: string, requestPrompt?: (sourceName: string, toolInputSummary?: string | null) => (request: PromptRequest) => Promise<PromptResponse>, terminal?: {
+    status: 'completed' | 'failed' | 'stopped';
+    errorMessage?: string;
+}): AsyncGenerator<AggregatedHookResult>;
 /**
  * Execute TeammateIdle hooks when a teammate is about to go idle.
  * If a hook blocks (exit code 2), the teammate should continue working instead of going idle.
@@ -296,7 +299,19 @@ export declare function executeSetupHooks(trigger: 'init' | 'maintenance', signa
  * @param timeoutMs Optional timeout in milliseconds for hook execution
  * @returns Async generator that yields progress messages and hook results
  */
-export declare function executeSubagentStartHooks(agentId: string, agentType: string, signal?: AbortSignal, timeoutMs?: number): AsyncGenerator<AggregatedHookResult>;
+export declare function executeSubagentStartHooks(agentId: string, agentType: string, signal?: AbortSignal, timeoutMs?: number, toolUseId?: string, isBackground?: boolean): AsyncGenerator<AggregatedHookResult>;
+/**
+ * Fire a SubagentProgress hook carrying one of a background sub-agent's
+ * completed messages (its content blocks, already simplified). Lets a host
+ * stream a background sub-agent's running sub-conversation (thinking / text /
+ * tool calls) into its UI out-of-band — i.e. while the main turn is idle —
+ * reusing the same per-message reduction it uses for foreground sub-agents.
+ *
+ * Fire-and-forget by design: callers must NOT await the per-message firing in
+ * the agent's hot loop. `blocks` is intentionally loosely typed (hook inputs
+ * are `any` in coreTypes) and mirrors the host's normalized event shapes.
+ */
+export declare function executeSubagentProgressHooks(agentId: string, agentType: string, messageId: string, parentToolUseId: string | undefined, blocks: Array<Record<string, unknown>>, signal?: AbortSignal): Promise<void>;
 /**
  * Execute pre-compact hooks if configured
  * @param compactData The compact data to pass to hooks

package/dist/controller/loop.d.ts

@@ -1,3 +1,4 @@
+import type { ProviderOverride } from '../providers/shared/routing.js';
 import type { BetaJSONOutputFormat, BetaMessage, BetaMessageStreamParams, BetaToolChoiceAuto, BetaToolChoiceTool, BetaToolUnion } from '@anthropic-ai/sdk/resources/beta/messages/messages.mjs';
 import { type QueryChainTracking, type ToolPermissionContext, type Tools } from '../Tool.js';
 import type { AgentDefinition } from '../capabilities/tools/AgentTool/loadAgentsDir.js';
@@ -54,11 +55,7 @@ export type Options = {
         total: number;
         remaining?: number;
     };
-    providerOverride?: {
-        model: string;
-        baseURL: string;
-        apiKey: string;
-    };
+    providerOverride?: ProviderOverride;
 };
 export declare function queryModelWithoutStreaming({ messages, systemPrompt, thinkingConfig, tools, signal, options, }: {
     messages: Message[];

package/dist/controller/query/deps.d.ts

@@ -1,10 +1,11 @@
 import { queryModelWithStreaming } from '../loop.js';
-import { autoCompactIfNeeded } from '../compact/autoCompact.js';
+import { autoCompactIfNeeded, manualCompact } from '../compact/autoCompact.js';
 import { microcompactMessages } from '../compact/microCompact.js';
 export type QueryDeps = {
     callModel: typeof queryModelWithStreaming;
     microcompact: typeof microcompactMessages;
     autocompact: typeof autoCompactIfNeeded;
+    manualCompact: typeof manualCompact;
     uuid: () => string;
 };
 export declare function productionDeps(): QueryDeps;

package/dist/controller/toolSearch.d.ts

@@ -46,6 +46,17 @@ export declare function getToolSearchMode(): ToolSearchMode;
  */
 export declare function modelSupportsToolReference(model: string): boolean;
 export declare function isToolSearchEnabledOptimistic(): boolean;
+/**
+ * Whether the current request may use the NATIVE tool-search wire shapes:
+ * `tool_reference` content blocks + `defer_loading: true` on tool
+ * definitions + the tool-search beta header. These are Anthropic beta
+ * shapes — only the direct first-party Anthropic endpoint reliably
+ * accepts them. Proxies (custom ANTHROPIC_BASE_URL) and the OpenAI /
+ * Gemini families get the client-side EMULATION instead: ToolSearchTool
+ * results carry plain-text `<discovered-tool name="X" />` markers and
+ * discovered tools are sent with their FULL schema (no defer_loading).
+ */
+export declare function isNativeToolReferenceWire(): boolean;
 /**
  * Check if ToolSearchTool is available in the provided tools list.
  * If ToolSearchTool is not available (e.g., disallowed via disallowedTools),
@@ -81,6 +92,15 @@ export declare function isToolSearchEnabled(model: string, tools: Tools, getTool
  * tool_reference is a beta feature not in the SDK types, so we need runtime checks.
  */
 export declare function isToolReferenceBlock(obj: unknown): boolean;
+/**
+ * Marker emitted by ToolSearchTool under the emulation wire (non-native
+ * providers). One line per discovered tool. Kept attribute-style so a
+ * model quoting it verbatim in prose is unlikely to collide.
+ * Emitter lives in ToolSearchTool.ts (mapToolResultToToolResultBlockParam)
+ * — keep the two in sync. Has the `g` flag for matchAll — do NOT call
+ * .test()/.exec() on this export (stateful lastIndex).
+ */
+export declare const DISCOVERED_TOOL_MARKER_RE: RegExp;
 /**
  * Extract tool names from tool_reference blocks in message history.
  *

package/dist/entrypoints/sdk/controlSchemas.d.ts

@@ -601,6 +601,8 @@ export declare const SDKHookCallbackRequestSchema: () => z.ZodObject<{
         hook_event_name: z.ZodLiteral<"SubagentStart">;
         agent_id: z.ZodString;
         agent_type: z.ZodString;
+        tool_use_id: z.ZodOptional<z.ZodString>;
+        is_background: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
         session_id: z.ZodString;
         transcript_path: z.ZodString;
@@ -615,6 +617,12 @@ export declare const SDKHookCallbackRequestSchema: () => z.ZodObject<{
         agent_transcript_path: z.ZodString;
         agent_type: z.ZodString;
         last_assistant_message: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodEnum<{
+            failed: "failed";
+            completed: "completed";
+            stopped: "stopped";
+        }>>;
+        error_message: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
         session_id: z.ZodString;
         transcript_path: z.ZodString;
@@ -1458,6 +1466,8 @@ export declare const SDKControlRequestInnerSchema: () => z.ZodUnion<readonly [z.
         hook_event_name: z.ZodLiteral<"SubagentStart">;
         agent_id: z.ZodString;
         agent_type: z.ZodString;
+        tool_use_id: z.ZodOptional<z.ZodString>;
+        is_background: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
         session_id: z.ZodString;
         transcript_path: z.ZodString;
@@ -1472,6 +1482,12 @@ export declare const SDKControlRequestInnerSchema: () => z.ZodUnion<readonly [z.
         agent_transcript_path: z.ZodString;
         agent_type: z.ZodString;
         last_assistant_message: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodEnum<{
+            failed: "failed";
+            completed: "completed";
+            stopped: "stopped";
+        }>>;
+        error_message: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
         session_id: z.ZodString;
         transcript_path: z.ZodString;
@@ -2218,6 +2234,8 @@ export declare const SDKControlRequestSchema: () => z.ZodObject<{
             hook_event_name: z.ZodLiteral<"SubagentStart">;
             agent_id: z.ZodString;
             agent_type: z.ZodString;
+            tool_use_id: z.ZodOptional<z.ZodString>;
+            is_background: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
             session_id: z.ZodString;
             transcript_path: z.ZodString;
@@ -2232,6 +2250,12 @@ export declare const SDKControlRequestSchema: () => z.ZodObject<{
             agent_transcript_path: z.ZodString;
             agent_type: z.ZodString;
             last_assistant_message: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodEnum<{
+                failed: "failed";
+                completed: "completed";
+                stopped: "stopped";
+            }>>;
+            error_message: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
             session_id: z.ZodString;
             transcript_path: z.ZodString;
@@ -2988,6 +3012,8 @@ export declare const ControlErrorResponseSchema: () => z.ZodObject<{
                 hook_event_name: z.ZodLiteral<"SubagentStart">;
                 agent_id: z.ZodString;
                 agent_type: z.ZodString;
+                tool_use_id: z.ZodOptional<z.ZodString>;
+                is_background: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
                 session_id: z.ZodString;
                 transcript_path: z.ZodString;
@@ -3002,6 +3028,12 @@ export declare const ControlErrorResponseSchema: () => z.ZodObject<{
                 agent_transcript_path: z.ZodString;
                 agent_type: z.ZodString;
                 last_assistant_message: z.ZodOptional<z.ZodString>;
+                status: z.ZodOptional<z.ZodEnum<{
+                    failed: "failed";
+                    completed: "completed";
+                    stopped: "stopped";
+                }>>;
+                error_message: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
                 session_id: z.ZodString;
                 transcript_path: z.ZodString;
@@ -3760,6 +3792,8 @@ export declare const SDKControlResponseSchema: () => z.ZodObject<{
                     hook_event_name: z.ZodLiteral<"SubagentStart">;
                     agent_id: z.ZodString;
                     agent_type: z.ZodString;
+                    tool_use_id: z.ZodOptional<z.ZodString>;
+                    is_background: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
                     session_id: z.ZodString;
                     transcript_path: z.ZodString;
@@ -3774,6 +3808,12 @@ export declare const SDKControlResponseSchema: () => z.ZodObject<{
                     agent_transcript_path: z.ZodString;
                     agent_type: z.ZodString;
                     last_assistant_message: z.ZodOptional<z.ZodString>;
+                    status: z.ZodOptional<z.ZodEnum<{
+                        failed: "failed";
+                        completed: "completed";
+                        stopped: "stopped";
+                    }>>;
+                    error_message: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
                     session_id: z.ZodString;
                     transcript_path: z.ZodString;
@@ -4336,6 +4376,7 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
             auto: "auto";
         }>;
         pre_tokens: z.ZodNumber;
+        post_tokens: z.ZodOptional<z.ZodNumber>;
         preserved_segment: z.ZodOptional<z.ZodObject<{
             head_uuid: z.ZodString;
             anchor_uuid: z.ZodString;
@@ -4579,9 +4620,9 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
     summarizes_uuid: z.ZodString;
     status_category: z.ZodEnum<{
         failed: "failed";
+        completed: "completed";
         blocked: "blocked";
         waiting: "waiting";
-        completed: "completed";
         review_ready: "review_ready";
     }>;
     status_detail: z.ZodString;
@@ -4974,6 +5015,8 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
                     hook_event_name: z.ZodLiteral<"SubagentStart">;
                     agent_id: z.ZodString;
                     agent_type: z.ZodString;
+                    tool_use_id: z.ZodOptional<z.ZodString>;
+                    is_background: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
                     session_id: z.ZodString;
                     transcript_path: z.ZodString;
@@ -4988,6 +5031,12 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
                     agent_transcript_path: z.ZodString;
                     agent_type: z.ZodString;
                     last_assistant_message: z.ZodOptional<z.ZodString>;
+                    status: z.ZodOptional<z.ZodEnum<{
+                        failed: "failed";
+                        completed: "completed";
+                        stopped: "stopped";
+                    }>>;
+                    error_message: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
                     session_id: z.ZodString;
                     transcript_path: z.ZodString;
@@ -5736,6 +5785,8 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
             hook_event_name: z.ZodLiteral<"SubagentStart">;
             agent_id: z.ZodString;
             agent_type: z.ZodString;
+            tool_use_id: z.ZodOptional<z.ZodString>;
+            is_background: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
             session_id: z.ZodString;
             transcript_path: z.ZodString;
@@ -5750,6 +5801,12 @@ export declare const StdoutMessageSchema: () => z.ZodUnion<readonly [z.ZodUnion<
             agent_transcript_path: z.ZodString;
             agent_type: z.ZodString;
             last_assistant_message: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodEnum<{
+                failed: "failed";
+                completed: "completed";
+                stopped: "stopped";
+            }>>;
+            error_message: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
             session_id: z.ZodString;
             transcript_path: z.ZodString;
@@ -6516,6 +6573,8 @@ export declare const StdinMessageSchema: () => z.ZodUnion<readonly [z.ZodObject<
             hook_event_name: z.ZodLiteral<"SubagentStart">;
             agent_id: z.ZodString;
             agent_type: z.ZodString;
+            tool_use_id: z.ZodOptional<z.ZodString>;
+            is_background: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
             session_id: z.ZodString;
             transcript_path: z.ZodString;
@@ -6530,6 +6589,12 @@ export declare const StdinMessageSchema: () => z.ZodUnion<readonly [z.ZodObject<
             agent_transcript_path: z.ZodString;
             agent_type: z.ZodString;
             last_assistant_message: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodEnum<{
+                failed: "failed";
+                completed: "completed";
+                stopped: "stopped";
+            }>>;
+            error_message: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
             session_id: z.ZodString;
             transcript_path: z.ZodString;
@@ -7286,6 +7351,8 @@ export declare const StdinMessageSchema: () => z.ZodUnion<readonly [z.ZodObject<
                     hook_event_name: z.ZodLiteral<"SubagentStart">;
                     agent_id: z.ZodString;
                     agent_type: z.ZodString;
+                    tool_use_id: z.ZodOptional<z.ZodString>;
+                    is_background: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
                     session_id: z.ZodString;
                     transcript_path: z.ZodString;
@@ -7300,6 +7367,12 @@ export declare const StdinMessageSchema: () => z.ZodUnion<readonly [z.ZodObject<
                     agent_transcript_path: z.ZodString;
                     agent_type: z.ZodString;
                     last_assistant_message: z.ZodOptional<z.ZodString>;
+                    status: z.ZodOptional<z.ZodEnum<{
+                        failed: "failed";
+                        completed: "completed";
+                        stopped: "stopped";
+                    }>>;
+                    error_message: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
                     session_id: z.ZodString;
                     transcript_path: z.ZodString;

package/dist/entrypoints/sdk/coreSchemas.d.ts

@@ -704,6 +704,8 @@ export declare const SubagentStartHookInputSchema: () => z.ZodIntersection<z.Zod
     hook_event_name: z.ZodLiteral<"SubagentStart">;
     agent_id: z.ZodString;
     agent_type: z.ZodString;
+    tool_use_id: z.ZodOptional<z.ZodString>;
+    is_background: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>>;
 export declare const SubagentStopHookInputSchema: () => z.ZodIntersection<z.ZodObject<{
     session_id: z.ZodString;
@@ -719,6 +721,12 @@ export declare const SubagentStopHookInputSchema: () => z.ZodIntersection<z.ZodO
     agent_transcript_path: z.ZodString;
     agent_type: z.ZodString;
     last_assistant_message: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        failed: "failed";
+        completed: "completed";
+        stopped: "stopped";
+    }>>;
+    error_message: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>>;
 export declare const PreCompactHookInputSchema: () => z.ZodIntersection<z.ZodObject<{
     session_id: z.ZodString;
@@ -1117,6 +1125,8 @@ export declare const HookInputSchema: () => z.ZodUnion<readonly [z.ZodIntersecti
     hook_event_name: z.ZodLiteral<"SubagentStart">;
     agent_id: z.ZodString;
     agent_type: z.ZodString;
+    tool_use_id: z.ZodOptional<z.ZodString>;
+    is_background: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
     session_id: z.ZodString;
     transcript_path: z.ZodString;
@@ -1131,6 +1141,12 @@ export declare const HookInputSchema: () => z.ZodUnion<readonly [z.ZodIntersecti
     agent_transcript_path: z.ZodString;
     agent_type: z.ZodString;
     last_assistant_message: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        failed: "failed";
+        completed: "completed";
+        stopped: "stopped";
+    }>>;
+    error_message: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
     session_id: z.ZodString;
     transcript_path: z.ZodString;
@@ -2486,6 +2502,7 @@ export declare const SDKCompactBoundaryMessageSchema: () => z.ZodObject<{
             auto: "auto";
         }>;
         pre_tokens: z.ZodNumber;
+        post_tokens: z.ZodOptional<z.ZodNumber>;
         preserved_segment: z.ZodOptional<z.ZodObject<{
             head_uuid: z.ZodString;
             anchor_uuid: z.ZodString;
@@ -2515,9 +2532,9 @@ export declare const SDKPostTurnSummaryMessageSchema: () => z.ZodObject<{
     summarizes_uuid: z.ZodString;
     status_category: z.ZodEnum<{
         failed: "failed";
+        completed: "completed";
         blocked: "blocked";
         waiting: "waiting";
-        completed: "completed";
         review_ready: "review_ready";
     }>;
     status_detail: z.ZodString;
@@ -2894,6 +2911,7 @@ export declare const SDKMessageSchema: () => z.ZodUnion<readonly [z.ZodObject<{
             auto: "auto";
         }>;
         pre_tokens: z.ZodNumber;
+        post_tokens: z.ZodOptional<z.ZodNumber>;
         preserved_segment: z.ZodOptional<z.ZodObject<{
             head_uuid: z.ZodString;
             anchor_uuid: z.ZodString;

package/dist/entrypoints/sdk/runtimeTypes.d.ts

@@ -1,4 +1,6 @@
 import type { ChildProcessWithoutNullStreams } from 'node:child_process';
+import type { ModelProviders } from '../../providers/shared/routing.js';
+export type { ModelProviders, ModelProviderConfig } from '../../providers/shared/routing.js';
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { CallToolResult, ToolAnnotations } from '@modelcontextprotocol/sdk/types.js';
 import type { z } from 'zod/v4';
@@ -15,6 +17,15 @@ export type Query = AsyncIterable<SDKMessage> & {
      * cancel a long turn without ending the whole query.
      */
     interrupt(): Promise<void> | void;
+    /**
+     * Abort a single in-flight run_in_background sub-agent by its agentId, without
+     * touching the main turn or other agents. The agent's AbortController is
+     * signalled (killAsyncAgent), so its in-flight tool calls unwind cleanly.
+     * No-op if the agent is unknown or already settled. Lets a host surface a
+     * per-agent "stop" affordance (desktop UI) on top of the model-facing
+     * TaskStop tool.
+     */
+    killAgent(agentId: string): void;
 };
 /** @internal */
 export type InternalQuery = Query;
@@ -149,6 +160,14 @@ export type Options = {
      * Values < 10_000 or > 5_000_000 are dropped + warn-logged (table fallback).
      */
     contextWindow?: number;
+    /**
+     * 本回合手动压缩上下文（对应 host 的 /compact）。设置后 SDK 复用 auto-compact
+     * 机制（isAutoCompact=false + 这些指令）压缩当前消息、发出 system/compact_boundary，
+     * 随后结束本回合而不调用模型。单次信号——仅作用于携带它的那次 query()。
+     */
+    compact?: {
+        instructions?: string;
+    };
     includePartialMessages?: boolean;
     replayUserMessages?: boolean;
     permissionMode?: string;
@@ -217,6 +236,17 @@ export type Options = {
      */
     agents?: readonly unknown[];
     disallowedTools?: string[];
+    /**
+     * Tool names hidden from sub-agents (Agent/Task spawns) only — the main
+     * loop keeps them. Use this for MCP tools a sub-agent must not see (e.g. an
+     * interactive form/question capability): native UI tools like AskUserQuestion
+     * and EnterPlanMode are ALREADY excluded from every sub-agent, but MCP tools
+     * are not, so list them here. Matched with the same rules as `disallowedTools`,
+     * so MCP server-prefix (`mcp__server`) and wildcard (`mcp__server__*`) work.
+     * Unlike `disallowedTools` (a session-wide deny), this does NOT affect the
+     * main conversation.
+     */
+    subagentDisallowedTools?: string[];
     hooks?: Partial<Record<HookEvent, HookCallbackMatcher[]>>;
     /**
      * Pre-execute lifecycle hook. Invoked SYNCHRONOUSLY (the SDK awaits the
@@ -271,6 +301,17 @@ export type Options = {
      *   Accepted at runtime with console.warn; remove call sites by 0.3.0.
      */
     transport?: ProviderTransport | DeprecatedProviderTransportName | 'auto';
+    /**
+     * Host model → provider-route catalog, keyed by model id. Consulted AFTER
+     * subagent model resolution (tier aliases / Agent tool `model` param), so
+     * a subagent whose model lives on a different wire or endpoint than the
+     * main session routes to its own baseURL/key/transport instead of
+     * inheriting the session's (which 404s for cross-protocol tier models).
+     * Models absent from the catalog use the session provider config as
+     * before. Entries may carry `providerSpecific.openaiResponses` extras
+     * applied when that model's request uses the openai_responses wire.
+     */
+    modelProviders?: ModelProviders;
     /**
      * Per-protocol passthrough channel for fields the wire supports but the
      * SDK does not surface as first-class options. The shim merges these

package/dist/lib/envDynamic.d.ts

@@ -23,7 +23,7 @@ export declare const envDynamic: {
     initJetBrainsDetection: typeof initJetBrainsDetection;
     hasInternetAccess: any;
     isCI: boolean;
-    platform: "win32" | "darwin" | "linux";
+    platform: "linux" | "win32" | "darwin";
     arch: NodeJS.Architecture;
     nodeVersion: string;
     isSSH: () => boolean;

package/dist/permissions/permissions.d.ts

@@ -19,6 +19,21 @@ export declare function getAllowRules(context: ToolPermissionContext): Permissio
  */
 export declare function createPermissionRequestMessage(toolName: string, decisionReason?: PermissionDecisionReason): string;
 export declare function getDenyRules(context: ToolPermissionContext): PermissionRule[];
+/**
+ * 把禁用工具名烘焙进权限上下文,作为 session 级 deny 规则。SDK 模式借此让
+ * Options.disallowedTools 经由共享的 deny 规则过滤,作用到每一处工具池组装——
+ * 主循环、子代理、fork。子代理会从它继承的权限上下文重建自己的工具池,所以仅在
+ * 主池上事后过滤的名字,否则会泄漏进子代理(并能通过 ToolSearch 被检索到)。
+ * 与 CLI 把 --disallowedTools 路由进 alwaysDenyRules 的做法一致。
+ */
+export declare function denySessionTools(context: ToolPermissionContext, toolNames: readonly string[] | undefined): ToolPermissionContext;
+/**
+ * 过滤掉「仅对子代理隐藏」的工具(Options.subagentDisallowedTools)。复用与
+ * disallowedTools 同一套 deny 规则匹配,因此 MCP server 前缀('mcp__server')和
+ * 通配符('mcp__server__*')都能命中整组工具——不像裸 `Set.has(tool.name)` 只认精确全名。
+ * 在每个子代理工具池组装后调用(runAgent),主循环不调用,故对主循环无影响。
+ */
+export declare function filterSubagentDisallowedTools<T extends Pick<ToolRuntime, 'name' | 'mcpInfo'>>(tools: readonly T[], subagentDisallowedTools: readonly string[] | undefined): readonly T[];
 export declare function getAskRules(context: ToolPermissionContext): PermissionRule[];
 /**
  * Check if the entire tool is listed in the always allow rules

package/dist/providers/anthropic/teleport/api.d.ts

@@ -68,9 +68,9 @@ export declare const CodeSessionSchema: () => z.ZodObject<{
     title: z.ZodString;
     description: z.ZodString;
     status: z.ZodEnum<{
+        completed: "completed";
         rejected: "rejected";
         waiting: "waiting";
-        completed: "completed";
         cancelled: "cancelled";
         idle: "idle";
         working: "working";

package/dist/providers/codex/shim.d.ts

@@ -125,6 +125,14 @@ export declare function performCodexRequest(options: {
     /** Host-provided Responses-protocol-specific fields (merged into body). */
     providerSpecific?: ResponsesProviderSpecific;
 }): Promise<Response>;
+/**
+ * 上游 `response.failed` 的错误若是「prompt 太长 / 上下文超限」，必须用非重试态 400 抛出。
+ * 否则 shouldRetry 把它当 5xx 服务端错误重试 MAX_RETRIES 次——同样超长的 prompt 原样重发
+ * 必然再失败，纯属浪费；且要等重试耗尽才轮到 query loop 的 reactive 压缩。400 让它即时浮现，
+ * 第一次就触发一次压缩重试（formatAPIError 仍按消息归一为 PROMPT_TOO_LONG_ERROR_MESSAGE，
+ * reactive 据此识别）。其余失败保持 500（可能是真·瞬时服务端错误，该重试）。
+ */
+export declare function codexFailureStatus(errorMessage: string): number;
 export declare function collectCodexCompletedResponse(response: Response): Promise<Record<string, any>>;
 export declare function codexStreamToAnthropic(response: Response, model: string): AsyncGenerator<AnthropicStreamEvent>;
 export declare function convertCodexResponseToAnthropicMessage(data: Record<string, any>, model: string): Record<string, unknown>;