@prometheus-ai/agent 0.5.3 → 0.5.8

package/dist/types/eval/py/runtime.d.ts

@@ -15,6 +15,15 @@ export declare function filterEnv(env: Record<string, string | undefined>): Reco
  * Detect virtual environment path from VIRTUAL_ENV or common locations.
  */
 export declare function resolveVenvPath(cwd: string): string | undefined;
+/**
+ * Resolve an explicitly configured interpreter (`python.interpreter`) into a
+ * runtime, bypassing discovery. Does not probe or validate the executable —
+ * callers must check it actually runs. `~` expands to the home directory and
+ * relative paths resolve against `cwd`. When the interpreter sits inside a
+ * virtualenv (a `pyvenv.cfg` above its bin dir), the venv activation env is
+ * applied so subprocesses and `pip` resolve consistently.
+ */
+export declare function resolveExplicitPythonRuntime(interpreter: string, cwd: string, baseEnv: Record<string, string | undefined>): PythonRuntime;
 /**
  * Enumerate candidate Python runtimes in priority order: an active/project venv,
  * the managed `~/.prometheus/python-env`, then the system interpreter on PATH. Every

package/dist/types/exa/index.d.ts

@@ -1,20 +1,2 @@
-/**
- * Exa MCP Tools
- *
- * 22 tools for Exa's MCP servers:
- * - 4 search tools (search, deep, code, crawl)
- * - 1 LinkedIn search tool
- * - 1 company research tool
- * - 2 researcher tools (start, poll)
- * - 14 websets tools (CRUD, items, search, enrichment, monitor)
- */
-import type { CustomTool } from "../extensibility/custom-tools/types";
-import type { ExaRenderDetails } from "./types";
-/** All Exa tools (22 total) - static export for backward compatibility */
-export declare const exaTools: CustomTool<any, ExaRenderDetails>[];
 export * from "./mcp-client";
-export { renderExaCall, renderExaResult } from "./render";
-export { researcherTools } from "./researcher";
-export { searchTools } from "./search";
-export type { ExaRenderDetails, ExaSearchResponse, ExaSearchResult, MCPToolWrapperConfig } from "./types";
-export { websetsTools } from "./websets";
+export type { ExaSearchResponse, MCPCallResponse, MCPTool, MCPToolsResponse, MCPToolWrapperConfig } from "./types";

package/dist/types/exa/mcp-client.d.ts

@@ -1,7 +1,13 @@
 import type { TSchema } from "@prometheus-ai/ai";
 import type { CustomTool, CustomToolResult } from "../extensibility/custom-tools/types";
 import { type CallMcpOptions } from "../mcp/json-rpc";
-import type { ExaRenderDetails, ExaSearchResponse, MCPTool, MCPToolWrapperConfig } from "./types";
+import type { ExaSearchResponse, MCPTool, MCPToolWrapperConfig } from "./types";
+type MCPWrappedToolDetails = {
+    response?: ExaSearchResponse;
+    error?: string;
+    toolName?: string;
+    raw?: unknown;
+};
 /** Find EXA_API_KEY from Bun.env or .env files */
 export declare function findApiKey(): string | null;
 /** Fetch available tools from Exa MCP */
@@ -29,14 +35,14 @@ export declare function fetchMCPToolSchema(apiKey: string, mcpToolName: string,
  * This allows tools to be generated from MCP server schemas without hardcoding,
  * reducing drift when MCP servers add new parameters.
  */
-export declare class MCPWrappedTool implements CustomTool<TSchema, ExaRenderDetails> {
+export declare class MCPWrappedTool implements CustomTool<TSchema, MCPWrappedToolDetails> {
     private readonly config;
     readonly parameters: TSchema;
     readonly description: string;
     readonly name: string;
     readonly label: string;
     constructor(config: MCPToolWrapperConfig, parameters: TSchema, description: string);
-    execute(_toolCallId: string, params: unknown, _onUpdate?: unknown, _ctx?: unknown, _signal?: AbortSignal): Promise<CustomToolResult<ExaRenderDetails>>;
+    execute(_toolCallId: string, params: unknown, _onUpdate?: unknown, _ctx?: unknown, _signal?: AbortSignal): Promise<CustomToolResult<MCPWrappedToolDetails>>;
 }
 /**
  * Create a CustomTool by fetching schema from MCP server.
@@ -44,3 +50,4 @@ export declare class MCPWrappedTool implements CustomTool<TSchema, ExaRenderDeta
  * Falls back to provided fallback schema if MCP fetch fails.
  */
 export declare function createMCPToolFromServer(apiKey: string, config: MCPToolWrapperConfig, fallbackSchema: TSchema, fallbackDescription: string): Promise<MCPWrappedTool>;
+export {};

package/dist/types/exa/types.d.ts

@@ -4,9 +4,6 @@
  * Types for the Exa MCP client and tool implementations.
  */
 import type { TSchema } from "@prometheus-ai/ai";
-/** MCP endpoint URLs */
-export declare const EXA_MCP_URL = "https://mcp.exa.ai/mcp";
-export declare const WEBSETS_MCP_URL = "https://websetsmcp.exa.ai/mcp";
 /** MCP tool definition from server */
 export interface MCPTool {
     name: string;
@@ -73,83 +70,3 @@ export interface ExaSearchResponse {
     searchTime?: number;
     requestId?: string;
 }
-/** Researcher task status */
-export interface ResearcherStatus {
-    id: string;
-    status: "pending" | "running" | "completed" | "failed";
-    result?: string;
-    error?: string;
-}
-/** Webset definition */
-export interface Webset {
-    id: string;
-    name: string;
-    description?: string;
-    createdAt?: string;
-    updatedAt?: string;
-}
-/** Webset item */
-export interface WebsetItem {
-    id: string;
-    websetId: string;
-    url: string;
-    title?: string;
-    content?: string;
-    metadata?: Record<string, unknown>;
-}
-/** Webset search */
-export interface WebsetSearch {
-    id: string;
-    websetId: string;
-    query: string;
-    status: "pending" | "running" | "completed" | "cancelled";
-    resultCount?: number;
-}
-/** Webset enrichment */
-export interface WebsetEnrichment {
-    id: string;
-    websetId: string;
-    name: string;
-    prompt: string;
-    status: "pending" | "running" | "completed" | "cancelled";
-}
-/** Tool name mappings: MCP name -> our tool name */
-export declare const EXA_TOOL_MAPPINGS: {
-    readonly web_search_exa: "exa_search";
-    readonly get_code_context_exa: "exa_search_code";
-    readonly crawling_exa: "exa_crawl";
-    readonly linkedin_search_exa: "exa_linkedin";
-    readonly company_research_exa: "exa_company";
-    readonly deep_researcher_start: "exa_researcher_start";
-    readonly deep_researcher_check: "exa_researcher_poll";
-};
-export declare const WEBSETS_TOOL_MAPPINGS: {
-    readonly create_webset: "webset_create";
-    readonly list_websets: "webset_list";
-    readonly get_webset: "webset_get";
-    readonly update_webset: "webset_update";
-    readonly delete_webset: "webset_delete";
-    readonly list_webset_items: "webset_items_list";
-    readonly get_item: "webset_item_get";
-    readonly create_search: "webset_search_create";
-    readonly get_search: "webset_search_get";
-    readonly cancel_search: "webset_search_cancel";
-    readonly create_enrichment: "webset_enrichment_create";
-    readonly get_enrichment: "webset_enrichment_get";
-    readonly update_enrichment: "webset_enrichment_update";
-    readonly delete_enrichment: "webset_enrichment_delete";
-    readonly cancel_enrichment: "webset_enrichment_cancel";
-    readonly create_monitor: "webset_monitor_create";
-};
-export type ExaMcpToolName = keyof typeof EXA_TOOL_MAPPINGS;
-export type WebsetsMcpToolName = keyof typeof WEBSETS_TOOL_MAPPINGS;
-export type ExaToolName = (typeof EXA_TOOL_MAPPINGS)[ExaMcpToolName];
-export type WebsetsToolName = (typeof WEBSETS_TOOL_MAPPINGS)[WebsetsMcpToolName];
-/** Render details for TUI */
-export interface ExaRenderDetails {
-    response?: ExaSearchResponse;
-    error?: string;
-    toolName?: string;
-    /** Raw result for non-search responses */
-    raw?: unknown;
-}

package/dist/types/exec/bash-executor.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Bash command execution with streaming support and cancellation.
+ *
+ * Uses brush-core via native bindings for shell execution.
+ */
 import { type MinimizerOptions } from "@prometheus-ai/natives";
 import { type ShellMinimizerSettings } from "../config/settings";
 export interface BashExecutorOptions {
@@ -10,6 +15,8 @@ export interface BashExecutorOptions {
     sessionKey?: string;
     /** Additional environment variables to inject */
     env?: Record<string, string>;
+    /** Run through the configured user shell instead of brush parsing directly. */
+    useUserShell?: boolean;
     /** Artifact path/id for full output storage */
     artifactPath?: string;
     artifactId?: string;

package/dist/types/export/custom-share.d.ts

@@ -5,7 +5,7 @@ export interface CustomShareResult {
     message?: string;
 }
 export type CustomShareFn = (htmlPath: string) => Promise<CustomShareResult | string | undefined>;
-interface LoadedCustomShare {
+export interface LoadedCustomShare {
     path: string;
     fn: CustomShareFn;
 }
@@ -17,4 +17,3 @@ export declare function getCustomSharePath(): string | null;
  * Load the custom share script if it exists.
  */
 export declare function loadCustomShare(): Promise<LoadedCustomShare | null>;
-export {};

package/dist/types/export/html/index.d.ts

@@ -1,9 +1,48 @@
 import type { AgentState } from "@prometheus-ai/agent-core";
+import type { SessionEntry, SessionHeader } from "../../session/session-entries";
 import { SessionManager } from "../../session/session-manager";
+/** Compose the standalone export template: minified CSS, tool renderers, and viewer JS inlined. */
+export declare function getTemplate(): string;
 export interface ExportOptions {
     outputPath?: string;
     themeName?: string;
+    /** Embed subagent session transcripts found next to the session file (default true). */
+    includeSubSessions?: boolean;
 }
+/** Generate CSS custom properties for theme. Exported for the share-viewer build script. */
+export declare function generateThemeVars(themeName?: string): Promise<string>;
+/** Embedded subagent session transcript, keyed by slash-joined agent path in `SessionData.subSessions`. */
+export interface SubSession {
+    /** Bare agent id (session file stem), e.g. "ToolAsk". */
+    agentId: string;
+    /** Key of the parent sub-session, or null when spawned by the main session. */
+    parent: string | null;
+    header: SessionHeader | null;
+    entries: SessionEntry[];
+    leafId: string | null;
+}
+export interface SessionData {
+    header: SessionHeader | null;
+    entries: SessionEntry[];
+    leafId: string | null;
+    systemPrompt?: string;
+    tools?: {
+        name: string;
+        description: string;
+    }[];
+    subSessions?: Record<string, SubSession>;
+}
+/** Snapshot the session (plus optional agent state) into the JSON shape the viewer renders. */
+export declare function buildSessionData(sm: SessionManager, state?: AgentState): SessionData;
+/**
+ * Collect subagent session transcripts stored next to a session file.
+ *
+ * A session at `<dir>/<name>.jsonl` keeps its subagent sessions at `<dir>/<name>/<AgentId>.jsonl`;
+ * each subagent's own children nest the same way under `<dir>/<name>/<AgentId>/`. Keys in the
+ * returned record are slash-joined ids relative to the main session ("ToolAsk", "ToolAsk/Helper").
+ * Corrupt or empty files are skipped silently.
+ */
+export declare function collectSubSessions(sessionFile: string): Promise<Record<string, SubSession>>;
 /** Export session to HTML using SessionManager and AgentState. */
 export declare function exportSessionToHtml(sm: SessionManager, state?: AgentState, options?: ExportOptions | string): Promise<string>;
 /** Export session file to HTML (standalone). */

package/dist/types/export/html/template-js.d.ts

@@ -0,0 +1,2 @@
+declare const _default: string;
+export default _default;

package/dist/types/export/share.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Session sharing.
+ *
+ * The session JSON is gzipped and sealed with a fresh AES-256-GCM key
+ * (`[12B IV][ciphertext+tag]`, same layout as collab frames), then pushed to
+ * one of two stores:
+ *
+ *   1. A secret GitHub gist (preferred — free, durable, no relay storage)
+ *      holding base64 of the sealed blob, when an authenticated `gh` exists.
+ *   2. The share server (`POST <serverUrl>` → `{"id":"…"}`), capped at 1 MB;
+ *      oversized sessions are truncated (images first, then long strings,
+ *      then oldest entries) until the sealed blob fits.
+ *
+ * Either way the link is `<serverUrl>/<id>#<base64url key>`. The viewer page
+ * served there fetches the blob (gist ids are hex; server ids never are),
+ * decrypts with the fragment key — which never leaves the browser — and
+ * renders the same template as `/export`.
+ */
+import type { AgentState } from "@prometheus-ai/agent-core";
+import { DEFAULT_SHARE_URL } from "@prometheus-ai/wire";
+import type { SecretObfuscator } from "../secrets/obfuscator";
+import type { SessionManager } from "../session/session-manager";
+import { type SessionData } from "./html";
+export { DEFAULT_SHARE_URL };
+/** Hard cap for blobs accepted by the share server (mirrors relay shareMaxBytes). */
+export declare const SERVER_MAX_SEALED_BYTES = 1000000;
+export interface ShareSessionOptions {
+    /** Share server/viewer base URL; defaults to {@link DEFAULT_SHARE_URL}. */
+    serverUrl?: string;
+    /** Agent state for system prompt + tool descriptions in the snapshot. */
+    state?: AgentState;
+    /**
+     * Redacts the snapshot before sealing: deep-walks every string (entries,
+     * header, system prompt, tool descriptions) through the obfuscator, so
+     * secrets that landed in persisted entries (tool outputs reading .env,
+     * etc.) never leave the machine. Pass undefined to skip.
+     */
+    obfuscator?: SecretObfuscator;
+}
+export interface ShareSessionResult {
+    /** Viewer link: `<serverUrl>/<id>#<key>`. */
+    url: string;
+    method: "gist" | "server";
+    /** Underlying gist URL (gist method only). */
+    gistUrl?: string;
+    /** True when content was trimmed to fit the upload budget. */
+    truncated: boolean;
+    sealedBytes: number;
+}
+/** Build the snapshot that gets sealed and uploaded, redacted when an obfuscator is provided. */
+export declare function buildShareSnapshot(sm: SessionManager, options?: ShareSessionOptions): SessionData;
+/** Share the session; tries a secret gist first, then the share server. */
+export declare function shareSession(sm: SessionManager, options?: ShareSessionOptions): Promise<ShareSessionResult>;
+/** Strip trailing slashes so `<base>/<id>` composes cleanly. */
+export declare function normalizeShareServerUrl(serverUrl?: string): string;
+interface SealedSession {
+    sealed: Uint8Array<ArrayBuffer>;
+    truncated: boolean;
+}
+/** Seal `data`, trimming content until the sealed blob fits `maxBytes`. Exported for tests. */
+export declare function sealToFit(key: CryptoKey, data: SessionData, maxBytes: number): Promise<SealedSession>;

package/dist/types/export/ttsr.d.ts

@@ -32,6 +32,18 @@ export declare class TtsrManager {
      * of being appended to it.
      */
     checkSnapshot(snapshot: string, context: TtsrMatchContext): Rule[];
+    /**
+     * Evaluate ast-grep `astCondition` rules against a reconstructed tool snapshot.
+     *
+     * Only edit/write tool streams reach here (AST conditions need a language, which
+     * we infer from the file extension on the tool's path argument). The snapshot is
+     * matched in memory by the native engine (`astMatch`), so this is async and
+     * intentionally throttled: identical consecutive snapshots (the common case when
+     * only non-source arguments change between deltas) are skipped.
+     */
+    checkAstSnapshot(snapshot: string, context: TtsrMatchContext): Promise<Rule[]>;
+    /** True when any registered rule carries ast-grep conditions. */
+    hasAstRules(): boolean;
     /** Mark rules as injected (won't trigger again until conditions allow). */
     markInjected(rulesToMark: Rule[]): void;
     /** Mark rule names as injected (won't trigger again until conditions allow). */
@@ -44,6 +56,8 @@ export declare class TtsrManager {
     resetBuffer(): void;
     /** Check if any TTSR rules are registered. */
     hasRules(): boolean;
+    /** All rules currently registered for TTSR monitoring, in registration order. */
+    getRules(): Rule[];
     /** Increment message counter (call after each turn). */
     incrementMessageCount(): void;
     /** Get current message count. */

package/dist/types/extensibility/custom-commands/types.d.ts

@@ -5,7 +5,10 @@
  * Unlike markdown commands which expand to prompts, custom commands can execute
  * arbitrary logic with full access to the hook context.
  */
+import type { z } from "zod/v4";
 import type { ExecOptions, ExecResult, HookCommandContext } from "../../extensibility/hooks/types";
+import type * as PiCodingAgent from "../../index";
+import type * as TypeBox from "../typebox";
 export type { ExecOptions, ExecResult, HookCommandContext };
 /**
  * API passed to custom command factory.
@@ -17,11 +20,13 @@ export interface CustomCommandAPI {
     /** Execute a shell command */
     exec(command: string, args: string[], options?: ExecOptions): Promise<ExecResult>;
     /** Injected zod-backed typebox shim (legacy/compat). */
-    typebox: typeof import("../typebox");
+    typebox: typeof TypeBox;
     /** Injected zod module for Zod-authored custom commands. */
-    zod: typeof import("zod/v4");
-    /** Injected coding-agent exports */
-    pi: typeof import("../..");
+    zod: typeof z;
+    /** Injected Prometheus coding agent exports */
+    prometheus: typeof PiCodingAgent;
+    /** Legacy alias for injected Prometheus coding agent exports */
+    pi: typeof PiCodingAgent;
 }
 /**
  * Custom command definition.

package/dist/types/extensibility/custom-tools/loader.d.ts

@@ -1,8 +1,17 @@
+/**
+ * Custom tool loader - loads TypeScript tool modules using native Bun import.
+ *
+ * Dependencies (the zod-backed typebox shim and pi-coding-agent) are injected via the
+ * CustomToolAPI to avoid import resolution issues with custom tools loaded from user directories.
+ */
 import type { AgentToolResult } from "@prometheus-ai/agent-core";
 import type { HookUIContext } from "../../extensibility/hooks/types";
+import * as PiCodingAgent from "../../index";
 import type { LoadedCustomTool, ToolLoadError } from "./types";
-/** Tool path with optional source metadata */
-interface ToolPathWithSource {
+/** Tool path with optional source metadata, suitable for forwarding from a
+ * parent session to a subagent so the subagent can re-bind tools to its own
+ * `CustomToolAPI` without redoing the filesystem scan. */
+export interface ToolPathWithSource {
     path: string;
     source?: {
         provider: string;
@@ -21,7 +30,7 @@ export declare class CustomToolLoader {
     #private;
     tools: LoadedCustomTool[];
     errors: ToolLoadError[];
-    constructor(pi: typeof import("@prometheus-ai/agent"), cwd: string, builtInToolNames: string[], pushPendingAction?: (action: {
+    constructor(pi: typeof PiCodingAgent, cwd: string, builtInToolNames: string[], pushPendingAction?: (action: {
         label: string;
         sourceToolName: string;
         apply(reason: string): Promise<AgentToolResult<unknown>>;
@@ -46,12 +55,30 @@ export declare function loadCustomTools(pathsWithSources: ToolPathWithSource[],
     errors: ToolLoadError[];
     setUIContext: (uiContext: HookUIContext, hasUI: boolean) => void;
 }>;
+/**
+ * Collect the absolute tool-source paths to load, without importing or
+ * binding factories. Hot path on session startup — the scan walks
+ * `.prometheus/tools/`, `.claude/tools/`, the plugin tree, and any configured paths.
+ *
+ * Subagents reuse the parent's collected paths via the SDK's
+ * `preloadedCustomToolPaths` option, then call `loadCustomTools` themselves
+ * so each session re-binds factories with its own session-scoped
+ * `CustomToolAPI` (cwd, exec, pushPendingAction, UI).
+ *
+ * @param configuredPaths - Explicit paths from settings.json and CLI --tool flags
+ * @param cwd - Current working directory
+ */
+export declare function discoverCustomToolPaths(configuredPaths: string[], cwd: string): Promise<ToolPathWithSource[]>;
 /**
  * Discover and load tools from standard locations via capability system:
  * 1. User and project tools discovered by capability providers
  * 2. Installed plugins (~/.prometheus/plugins/node_modules/*)
  * 3. Explicitly configured paths from settings or CLI
  *
+ * Composed of {@link discoverCustomToolPaths} (FS scan) + {@link loadCustomTools}
+ * (per-session binding). Subagents skip the first step and just call
+ * `loadCustomTools` against the parent's collected paths.
+ *
  * @param configuredPaths - Explicit paths from settings.json and CLI --tool flags
  * @param cwd - Current working directory
  * @param builtInToolNames - Names of built-in tools to check for conflicts
@@ -66,4 +93,3 @@ export declare function discoverAndLoadCustomTools(configuredPaths: string[], cw
     errors: ToolLoadError[];
     setUIContext: (uiContext: HookUIContext, hasUI: boolean) => void;
 }>;
-export {};

package/dist/types/extensibility/custom-tools/types.d.ts

@@ -6,16 +6,20 @@
  */
 import type { AgentToolResult, AgentToolUpdateCallback, ToolApproval, ToolApprovalDecision, ToolTier } from "@prometheus-ai/agent-core";
 import type { CompactionResult } from "@prometheus-ai/agent-core/compaction";
-import type { Model, Static, TSchema } from "@prometheus-ai/ai";
+import type { FetchImpl, Model, Static, TSchema } from "@prometheus-ai/ai";
 import type { Component } from "@prometheus-ai/tui";
+import type { logger as PiLogger } from "@prometheus-ai/utils";
+import type { z } from "zod/v4";
 import type { Rule } from "../../capability/rule";
 import type { ModelRegistry } from "../../config/model-registry";
 import type { Settings } from "../../config/settings";
 import type { ExecOptions, ExecResult } from "../../exec/exec";
 import type { HookUIContext } from "../../extensibility/hooks/types";
+import type * as PiCodingAgent from "../../index";
 import type { Theme } from "../../modes/theme/theme";
 import type { ReadonlySessionManager } from "../../session/session-manager";
 import type { TodoItem } from "../../tools/todo";
+import type * as TypeBox from "../typebox";
 /** Alias for clarity */
 export type CustomToolUIContext = HookUIContext;
 export type { ExecOptions, ExecResult } from "../../exec/exec";
@@ -45,13 +49,15 @@ export interface CustomToolAPI {
     /** Whether UI is available (false in print/RPC mode) */
     hasUI: boolean;
     /** File logger for error/warning/debug messages */
-    logger: typeof import("@prometheus-ai/utils").logger;
+    logger: typeof PiLogger;
     /** Injected zod-backed typebox shim (legacy/compat — Zod-authored tools are preferred). */
-    typebox: typeof import("../typebox");
+    typebox: typeof TypeBox;
     /** Injected zod module for Zod-authored custom tools. */
-    zod: typeof import("zod/v4");
-    /** Injected coding-agent exports */
-    pi: typeof import("../..");
+    zod: typeof z;
+    /** Injected Prometheus coding agent exports */
+    prometheus: typeof PiCodingAgent;
+    /** Legacy alias for injected Prometheus coding agent exports */
+    pi: typeof PiCodingAgent;
     /** Push a preview action that can later be resolved with the hidden resolve tool */
     pushPendingAction(action: CustomToolPendingAction): void;
 }
@@ -74,6 +80,8 @@ export interface CustomToolContext {
     abort(): void;
     /** Settings instance for the current session. Prefer over the global singleton. */
     settings?: Settings;
+    /** Fetch implementation for outbound HTTP; defaults to global fetch when omitted. */
+    fetch?: FetchImpl;
     /** Whether to auto-approve all destructive tool operations (--auto-approve CLI flag) */
     autoApprove?: boolean;
 }
@@ -86,10 +94,10 @@ export type CustomToolSessionEvent = {
 } | {
     reason: "auto_compaction_start";
     trigger: "threshold" | "overflow" | "idle" | "incomplete";
-    action: "context-full" | "handoff" | "shake";
+    action: "context-full" | "handoff" | "shake" | "snapcompact";
 } | {
     reason: "auto_compaction_end";
-    action: "context-full" | "handoff" | "shake";
+    action: "context-full" | "handoff" | "shake" | "snapcompact";
     result: CompactionResult | undefined;
     aborted: boolean;
     willRetry: boolean;

package/dist/types/extensibility/extensions/index.d.ts

@@ -2,7 +2,7 @@
  * Extension system for lifecycle events and custom tools.
  */
 export type { SlashCommandInfo, SlashCommandLocation, SlashCommandSource } from "../slash-commands";
-export { discoverAndLoadExtensions, ExtensionRuntimeNotInitializedError, loadExtensionFromFactory, loadExtensions, } from "./loader";
+export { discoverAndLoadExtensions, discoverExtensionPaths, ExtensionRuntimeNotInitializedError, loadExtensionFromFactory, loadExtensions, } from "./loader";
 export * from "./runner";
 export * from "./types";
 export * from "./wrapper";

package/dist/types/extensibility/extensions/loader.d.ts

@@ -1,3 +1,6 @@
+/**
+ * Extension loader - loads TypeScript extension modules using native Bun import.
+ */
 import type { ThinkingLevel } from "@prometheus-ai/agent-core";
 import { EventBus } from "../../utils/event-bus";
 import type { Extension, ExtensionFactory, ExtensionRuntime as IExtensionRuntime, LoadExtensionsResult, ProviderConfig } from "./types";
@@ -38,6 +41,22 @@ export declare function loadExtensionFromFactory(factory: ExtensionFactory, cwd:
  */
 export declare function loadExtensions(paths: string[], cwd: string, eventBus?: EventBus): Promise<LoadExtensionsResult>;
 /**
- * Discover and load extensions from standard locations.
+ * Discover absolute paths of extensions to load, without importing or
+ * binding factories. Hot path on session startup — the scan walks native
+ * `.prometheus`/`.prometheus` extension capabilities, the installed-plugin tree, and any
+ * configured paths.
+ *
+ * Subagents reuse the parent's collected paths via the SDK's
+ * `preloadedExtensionPaths` option, then call {@link loadExtensions} themselves
+ * so each session rebuilds Extension instances bound to its OWN
+ * `ExtensionAPI` (cwd, eventBus, runtime). Forwarding the parent's
+ * `LoadExtensionsResult` directly would reuse handlers/tools/commands that
+ * closed over the parent's `cwd` and event bus.
+ */
+export declare function discoverExtensionPaths(configuredPaths: string[], cwd: string, disabledExtensionIds?: string[]): Promise<string[]>;
+/**
+ * Discover and load extensions from standard locations. Composed of
+ * {@link discoverExtensionPaths} (FS scan) + {@link loadExtensions}
+ * (per-session binding).
  */
 export declare function discoverAndLoadExtensions(configuredPaths: string[], cwd: string, eventBus?: EventBus, disabledExtensionIds?: string[]): Promise<LoadExtensionsResult>;

package/dist/types/extensibility/extensions/model-api.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Model query facade exposed to extensions as `ctx.models`.
+ *
+ * Read-only: lets an extension select a model the same way core does — list
+ * authenticated models, read the session model, resolve a model string or role
+ * alias, and compare model families — without touching the mutable registry or
+ * duplicating resolution/family heuristics.
+ */
+import type { Model } from "@prometheus-ai/ai";
+import type { ModelRegistry } from "../../config/model-registry";
+import type { Settings } from "../../config/settings";
+import type { ExtensionModelQuery } from "./types";
+/**
+ * Build the `ctx.models` facade. `getModel` is read lazily so `current()` always
+ * reflects the live session model (it can change mid-session via `/model`).
+ */
+export declare function createExtensionModelQuery(modelRegistry: ModelRegistry, settings: Settings | undefined, getModel: () => Model | undefined): ExtensionModelQuery;

package/dist/types/extensibility/extensions/runner.d.ts

@@ -5,6 +5,8 @@ import type { AgentMessage } from "@prometheus-ai/agent-core";
 import type { CredentialDisabledEvent, ImageContent, Model, ProviderResponseMetadata } from "@prometheus-ai/ai";
 import type { KeyId } from "@prometheus-ai/tui";
 import type { ModelRegistry } from "../../config/model-registry";
+import type { Settings } from "../../config/settings";
+import type { MemoryRuntimeContext } from "../../memory-backend";
 import type { SessionManager } from "../../session/session-manager";
 import type { AfterProviderResponseEvent, AssistantThinkingRenderer, BeforeAgentStartEvent, BeforeAgentStartEventResult, BeforeProviderRequestEvent, BeforeProviderRequestEventResult, ContextEvent, Extension, ExtensionActions, ExtensionCommandContext, ExtensionCommandContextActions, ExtensionContext, ExtensionContextActions, ExtensionError, ExtensionEvent, ExtensionFlag, ExtensionRuntime, ExtensionShortcut, ExtensionUIContext, InputEvent, InputEventResult, MessageRenderer, RegisteredCommand, RegisteredTool, ResourcesDiscoverEvent, SessionBeforeBranchResult, SessionBeforeCompactResult, SessionBeforeSwitchResult, SessionBeforeTreeResult, SessionCompactingResult, ToolCallEvent, ToolCallEventResult, ToolResultEvent, ToolResultEventResult, UserBashEvent, UserBashEventResult, UserPythonEvent, UserPythonEventResult } from "./types";
 /** Combined result from all before_agent_start handlers */
@@ -61,7 +63,8 @@ export declare class ExtensionRunner {
     private readonly cwd;
     private readonly sessionManager;
     private readonly modelRegistry;
-    constructor(extensions: Extension[], runtime: ExtensionRuntime, cwd: string, sessionManager: SessionManager, modelRegistry: ModelRegistry);
+    private readonly settings?;
+    constructor(extensions: Extension[], runtime: ExtensionRuntime, cwd: string, sessionManager: SessionManager, modelRegistry: ModelRegistry, getMemory?: () => MemoryRuntimeContext | undefined, settings?: Settings | undefined);
     initialize(actions: ExtensionActions, contextActions: ExtensionContextActions, commandContextActions?: ExtensionCommandContextActions, uiContext?: ExtensionUIContext): void;
     /**
      * Forward a `credential_disabled` event from `AuthStorage` to extension handlers.
@@ -99,7 +102,7 @@ export declare class ExtensionRunner {
     hasHandlers(eventType: string): boolean;
     getMessageRenderer(customType: string): MessageRenderer | undefined;
     getAssistantThinkingRenderers(): AssistantThinkingRenderer[];
-    getRegisteredCommands(reserved?: Set<string>): RegisteredCommand[];
+    getRegisteredCommands(reserved?: ReadonlySet<string>): RegisteredCommand[];
     getCommandDiagnostics(): Array<{
         type: string;
         message: string;