@qoder-ai/qoder-agent-sdk 1.0.14 → 1.0.16

package/dist/session/transcript-paths.d.ts

@@ -7,8 +7,7 @@ export declare function homedir(): string;
  * Resolve the config directory that contains `projects/`.
  *
  * Resolution order:
- *   1. `QODER_CONFIG_DIR` — full path override (SDK-only escape hatch for
- *      tests / sandboxed setups; qodercli does not read this). When set,
+ *   1. `QODER_CONFIG_DIR` — full path override shared with qodercli. When set,
  *      `BRAND_CONFIG_DIR_INTERNAL` is NOT appended — the value is used as-is.
  *   2. `<homedir()>/<BRAND_CONFIG_DIR_INTERNAL>` — default, aligned with
  *      qodercli's `Storage.getGlobalConfigDir()`.

package/dist/types/common.d.ts

@@ -5,4 +5,4 @@
  * shim so existing SDK consumer imports (`'./types/common.js'` paths)
  * keep working.
  */
-export type { UUID, BetaMessage, BetaRawMessageStreamEvent, BetaUsage, BetaStopReason, MessageParam, NonNullableUsage, AccountInfo, UsageAddOnQuotaBucket, UsageInfo, UsageOrgResourcePackage, UsageQuotaBucket, ApiKeySource, ExitReason, FastModeState, ConfigScope, SettingSource, SDKAssistantMessageError, SDKStatus, EffortLevel, ThinkingAdaptive, ThinkingEnabled, ThinkingDisabled, ThinkingConfig, OutputFormatType, JsonSchemaOutputFormat, OutputFormat, BaseOutputFormat, ModelInfo, ModelSource, ServerModelJson, ServerModelJsonValue, ModelStrategy, ModelPromotion, LocalizedModelText, ModelContextConfig, ModelContextWindowEntry, ModelEffortEntry, ModelThinkingConfig, ModelThinkingDisabled, ModelThinkingEnabled, PluginInfo, ModelUsage, SlashCommand, ToolConfig, SdkPluginConfig, } from '../protocol/index.js';
+export type { UUID, BetaMessage, BetaRawMessageStreamEvent, BetaUsage, BetaStopReason, MessageParam, NonNullableUsage, AccountInfo, UsageAddOnQuotaBucket, UsageInfo, UsageOrgResourcePackage, UsageQuotaBucket, ApiKeySource, ExitReason, FastModeState, ConfigScope, SettingSource, SDKAssistantMessageError, SDKStatus, EffortLevel, ThinkingAdaptive, ThinkingEnabled, ThinkingDisabled, ThinkingConfig, ModelInfo, ModelSource, ServerModelJson, ServerModelJsonValue, ModelStrategy, ModelPromotion, LocalizedModelText, ModelContextConfig, ModelContextWindowEntry, ModelEffortEntry, ModelThinkingConfig, ModelThinkingDisabled, ModelThinkingEnabled, PluginInfo, ModelUsage, SlashCommand, ToolConfig, SdkPluginConfig, } from '../protocol/index.js';

package/dist/types/control.d.ts

@@ -5,7 +5,7 @@
  * shim so existing SDK consumer imports keep working.
  */
 export type { QoderModelPurpose } from '../protocol/index.js';
-export type { SDKControlRequest, SDKControlResponse, SDKControlCancelRequest, SDKControlInterruptRequest, SDKControlPermissionRequest, SDKControlInitializeRequest, SDKControlSetPermissionModeRequest, SDKControlSetModelRequest, SDKControlGenerateSessionTitleRequest, SDKControlGenerateSessionTitleResponse, SDKControlAddDirectoriesRequest, SDKControlAddDirectoriesResponse, SDKControlGetModelPolicyRequest, SDKControlGetByokConfigRequest, SDKControlGetByokConfigResponse, SDKControlValidateByokModelRequest, SDKControlValidateByokModelResponse, SDKControlSetMaxThinkingTokensRequest, SDKControlMcpStatusRequest, SDKControlGetContextUsageRequest, SDKControlGetUsageInfoRequest, SDKControlGetUsageInfoResponse, SDKControlAccountInfoRequest, SDKHookCallbackRequest, SDKControlMcpMessageRequest, SDKControlRewindFilesRequest, SDKControlCancelAsyncMessageRequest, SDKControlSeedReadStateRequest, SDKControlMcpSetServersRequest, SDKControlReloadPluginsRequest, SDKControlMcpReconnectRequest, SDKControlMcpToggleRequest, SDKControlApplyFlagSettingsRequest, SDKControlGetSettingsRequest, SDKControlElicitationRequest, SDKControlEndSessionRequest, SDKControlChannelEnableRequest, SDKControlMcpInjectTokenRequest, SDKControlMcpAuthenticateRequest, SDKControlMcpOAuthCallbackUrlRequest, SDKControlMcpClearAuthRequest, SDKControlRequestInner, SDKControlInitializeResponse, SDKControlGetContextUsageResponse, SDKControlReloadPluginsResponse, SDKControlListPluginsRequest, SDKControlListPluginsResponse, SDKControlMcpStatusResponse, SDKControlMcpSetServersResponse, SDKKeepAliveMessage, StdoutMessage, ControlMcpServerConfig, BYOKModelValidationInput, } from '../protocol/index.js';
+export type { SDKControlRequest, SDKControlResponse, SDKControlCancelRequest, SDKControlInterruptRequest, SDKControlInterruptResponse, SDKControlPermissionRequest, SDKControlInitializeRequest, SDKControlSetPermissionModeRequest, SDKControlSetModelRequest, SDKControlGenerateSessionTitleRequest, SDKControlGenerateSessionTitleResponse, SDKControlAddDirectoriesRequest, SDKControlAddDirectoriesResponse, SDKControlGetModelPolicyRequest, SDKControlGetByokConfigRequest, SDKControlGetByokConfigResponse, SDKControlValidateByokModelRequest, SDKControlValidateByokModelResponse, SDKControlSetMaxThinkingTokensRequest, SDKControlMcpStatusRequest, SDKControlGetContextUsageRequest, SDKControlGetUsageInfoRequest, SDKControlGetUsageInfoResponse, SDKControlAccountInfoRequest, SDKHookCallbackRequest, SDKControlMcpMessageRequest, SDKControlRewindFilesRequest, SDKControlCancelAsyncMessageRequest, SDKControlSeedReadStateRequest, SDKControlMcpSetServersRequest, SDKControlReloadPluginsRequest, SDKControlMcpReconnectRequest, SDKControlMcpToggleRequest, SDKControlApplyFlagSettingsRequest, SDKControlGetSettingsRequest, SDKControlElicitationRequest, SDKControlEndSessionRequest, SDKControlChannelEnableRequest, SDKControlMcpInjectTokenRequest, SDKControlMcpAuthenticateRequest, SDKControlMcpOAuthCallbackUrlRequest, SDKControlMcpClearAuthRequest, SDKControlRequestInner, SDKControlInitializeResponse, SDKControlGetContextUsageResponse, SDKControlReloadPluginsResponse, SDKControlListPluginsRequest, SDKControlListPluginsResponse, SDKControlMcpStatusResponse, SDKControlMcpSetServersResponse, SDKKeepAliveMessage, StdoutMessage, ControlMcpServerConfig, BYOKModelValidationInput, } from '../protocol/index.js';
 /** Wire format for fetch_job_token inbound control request from CLI. */
 export type FetchJobTokenWireRequest = {
     subtype: 'fetch_job_token';

package/dist/types/hooks.d.ts

@@ -5,7 +5,7 @@
  * `../protocol/`. The SDK-local HookEvent/HookInput contract is
  * intentionally narrowed to events supported by SDK user configuration.
  */
-export type { BaseHookInput, PreToolUseHookInput, PostToolUseHookInput, PostToolUseFailureHookInput, UserPromptSubmitHookInput, SessionStartHookInput, SessionEndHookInput, StopHookInput, SubagentStartHookInput, SubagentStopHookInput, PreCompactHookInput, PostCompactHookInput, PermissionRequestHookInput, InstructionsLoadedHookInput, CwdChangedHookInput, FileChangedHookInput, PostToolUseFailureHookSpecificOutput, UserPromptSubmitHookSpecificOutput, SessionStartHookSpecificOutput, SubagentStartHookSpecificOutput, PermissionRequestHookSpecificOutput, CwdChangedHookSpecificOutput, FileChangedHookSpecificOutput, } from '../protocol/index.js';
+export type { BaseHookInput, PreToolUseHookInput, PostToolUseHookInput, PostToolUseFailureHookInput, UserPromptSubmitHookInput, SessionStartHookInput, SessionEndHookInput, StopHookInput, SubagentStartHookInput, SubagentStopHookInput, PreCompactHookInput, PostCompactHookInput, PermissionRequestHookInput, PermissionDeniedHookInput, InstructionsLoadedHookInput, CwdChangedHookInput, FileChangedHookInput, PostToolUseFailureHookSpecificOutput, UserPromptSubmitHookSpecificOutput, SessionStartHookSpecificOutput, SubagentStartHookSpecificOutput, PermissionRequestHookSpecificOutput, CwdChangedHookSpecificOutput, FileChangedHookSpecificOutput, } from '../protocol/index.js';
 import type { AsyncHookJSONOutput as ProtocolAsyncHookJSONOutput, CwdChangedHookSpecificOutput, FileChangedHookSpecificOutput, HookInput as ProtocolHookInput, PostToolUseHookSpecificOutput as ProtocolPostToolUseHookSpecificOutput, PostToolUseFailureHookSpecificOutput, PreToolUseHookSpecificOutput as ProtocolPreToolUseHookSpecificOutput, PermissionRequestHookSpecificOutput, SessionStartHookSpecificOutput, SubagentStartHookSpecificOutput, SyncHookJSONOutput as ProtocolSyncHookJSONOutput, UserPromptSubmitHookSpecificOutput } from '../protocol/index.js';
 import type { HookEventConst } from '../core/constants.js';
 /**

package/dist/types/index.d.ts

@@ -15,11 +15,10 @@ export type { HookEvent, HookPermissionDecision, HookCallback, HookCallbackMatch
 export * from './mcp.js';
 export * from './agents.js';
 export * from './session.js';
+export type { SessionKey, SessionStore, SessionStoreEntry, SessionStoreFlush, } from '../session/session-store.js';
 export * from './settings.js';
 export * from './cloud-agent.js';
 export * from './control.js';
 export * from './model-policy-provider.js';
-export * from './bridge.js';
-export * from './browser.js';
 export * from './tools.js';
 export type { AccessTokenInput, AuthOptions, FetchJobToken, JobTokenAuthOptions, JobTokenRequest, JobTokenResult, } from './auth.js';

package/dist/types/mcp.d.ts

@@ -9,16 +9,22 @@ import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { McpStdioServerConfig as ProtocolMcpStdioServerConfig, McpSSEServerConfig as ProtocolMcpSSEServerConfig, McpHttpServerConfig as ProtocolMcpHttpServerConfig, McpSdkServerConfig as ProtocolMcpSdkServerConfig } from '../protocol/index.js';
 export type McpServerToolPolicy = {
     name: string;
-    permission_policy: 'always_allow' | 'always_ask' | 'always_deny';
+    permission_policy?: 'always_allow' | 'always_ask' | 'always_deny';
+    exposedName?: string;
+    alwaysLoad?: boolean;
+};
+export type McpStdioServerConfig = ProtocolMcpStdioServerConfig & {
+    tools?: McpServerToolPolicy[];
 };
-export type McpStdioServerConfig = ProtocolMcpStdioServerConfig;
 export type McpSSEServerConfig = ProtocolMcpSSEServerConfig & {
     tools?: McpServerToolPolicy[];
 };
 export type McpHttpServerConfig = ProtocolMcpHttpServerConfig & {
     tools?: McpServerToolPolicy[];
 };
-export type McpSdkServerConfig = ProtocolMcpSdkServerConfig;
+export type McpSdkServerConfig = ProtocolMcpSdkServerConfig & {
+    tools?: McpServerToolPolicy[];
+};
 export type McpServerConfigForProcessTransport = McpStdioServerConfig | McpSSEServerConfig | McpHttpServerConfig | McpSdkServerConfig;
 export type McpServerStatusConfig = McpServerConfigForProcessTransport;
 export type { McpServerStatus, McpSetServersResult, OAuthToken, } from '../protocol/index.js';

package/dist/types/messages.d.ts

@@ -8,14 +8,25 @@
 import type { SDKMessage as ProtocolSDKMessage, SDKStatusMessage as ProtocolSDKStatusMessage, SDKSystemMessage as ProtocolSDKSystemMessage, SDKUserMessage as ProtocolSDKUserMessage, SDKUserMessageReplay as ProtocolSDKUserMessageReplay } from '../protocol/index.js';
 import type { MessageParam, UUID } from './common.js';
 import type { PermissionMode } from './permissions.js';
-export type { SDKAssistantMessage, SDKResultSuccess, SDKResultError, SDKResultMessage, SDKPartialAssistantMessage, SDKCompactBoundaryMessage, SDKAPIRetryMessage, SDKLocalCommandOutputMessage, SDKHookStartedMessage, SDKHookProgressMessage, SDKHookResponseMessage, SDKTaskNotificationMessage, SDKTaskStartedMessage, SDKTaskProgressMessage, SDKSessionStateChangedMessage, SDKSessionTitleChangedMessage, SDKBridgeStateMessage, SDKFilesPersistedEvent, SDKElicitationCompleteMessage, SDKPromptSuggestionMessage, SDKCloudAgentEventMessage, SDKPermissionDenial, } from '../protocol/index.js';
+import type { SessionKey } from '../session/session-store.js';
+export type { SDKAssistantMessage, SDKResultSuccess, SDKResultError, SDKResultMessage, SDKPartialAssistantMessage, SDKCompactBoundaryMessage, SDKAPIRetryMessage, SDKHookStartedMessage, SDKHookProgressMessage, SDKHookResponseMessage, SDKTaskNotificationMessage, SDKTaskStartedMessage, SDKTaskProgressMessage, SDKSessionStateChangedMessage, SDKSessionTitleChangedMessage, SDKFilesPersistedEvent, SDKElicitationCompleteMessage, SDKPromptSuggestionMessage, SDKCloudAgentEventMessage, SDKPermissionDenial, } from '../protocol/index.js';
 export type SDKUserMessage = {
     type: 'user';
     message: MessageParam;
     parent_tool_use_id: string | null;
     isSynthetic?: boolean;
     tool_use_result?: unknown;
+    /**
+     * Delivery priority. `next` is the default; `now` interrupts the active
+     * turn, while `later` waits for the session to become idle.
+     */
     priority?: 'now' | 'next' | 'later';
+    /**
+     * When false, do not start an assistant turn while the session is idle.
+     * Delivery still follows `priority`: `next` can inject at a safe boundary,
+     * `later` waits for idle, and `now` interrupts the active turn.
+     */
+    shouldQuery?: boolean;
     timestamp?: string;
     uuid?: UUID;
     session_id?: string;
@@ -43,7 +54,15 @@ export type SDKPermissionDeniedMessage = {
     uuid: string;
     session_id: string;
 };
-export type SDKMessage = Exclude<ProtocolSDKMessage, ProtocolSDKSystemMessage | ProtocolSDKStatusMessage | ProtocolSDKUserMessage | ProtocolSDKUserMessageReplay> | SDKUserMessage | SDKUserMessageReplay | SDKSystemInitMessage | SDKStatusMessage | SDKPermissionDeniedMessage;
+export type SDKMirrorErrorMessage = {
+    type: 'system';
+    subtype: 'mirror_error';
+    error: string;
+    key: SessionKey;
+    uuid: string;
+    session_id: string;
+};
+export type SDKMessage = Exclude<ProtocolSDKMessage, ProtocolSDKSystemMessage | ProtocolSDKStatusMessage | ProtocolSDKUserMessage | ProtocolSDKUserMessageReplay> | SDKUserMessage | SDKUserMessageReplay | SDKSystemInitMessage | SDKStatusMessage | SDKPermissionDeniedMessage | SDKMirrorErrorMessage;
 export type SDKSystemMessage = Extract<SDKMessage, {
     type: 'system';
 }>;

package/dist/types/options.d.ts

@@ -8,13 +8,15 @@ import type { HookCallbackMatcher, HookEvent } from './hooks.js';
 import type { McpServerConfig, McpServerStatus, McpSetServersResult, OAuthToken } from './mcp.js';
 import type { SDKMessage, SDKUserMessage } from './messages.js';
 import type { Settings } from './settings.js';
-import type { SDKControlInitializeResponse, SDKControlGetContextUsageResponse, SDKControlGenerateSessionTitleResponse, SDKControlAddDirectoriesResponse, SDKControlReloadPluginsResponse, StdoutMessage } from './control.js';
+import type { SDKControlInterruptResponse, SDKControlInitializeResponse, SDKControlGetContextUsageResponse, SDKControlGenerateSessionTitleResponse, SDKControlAddDirectoriesResponse, SDKControlReloadPluginsResponse, StdoutMessage } from './control.js';
 import type { ModelPolicyProvider } from './model-policy-provider.js';
 import type { BYOKModelValidationInput, BYOKProviderInfo } from './byok.js';
 import type { RewindFilesResult } from './session.js';
 import type { CloudAgentOptions } from './cloud-agent.js';
 import type { QueryTransportProviderOption } from '../core/query-transport.js';
 import type { PluginDetails } from './plugins.js';
+import type { SessionStore, SessionStoreFlush } from '../session/session-store.js';
+import type { ModelPromptPatches } from '../protocol/model-prompt-patches.js';
 export type { CanUseTool };
 export type { AuthOptions };
 export type ElicitationRequest = {
@@ -49,6 +51,10 @@ export type PromptResponse = {
 export type SettingSource = 'user' | 'project' | 'local';
 export type QueryTransportOptions = QueryTransportProviderOption;
 export type Options = {
+    /**
+     * Optional controller for defining when the host ends the session. Calling
+     * `abort()` closes the session and ends message iteration.
+     */
     abortController?: AbortController;
     /**
      * Authentication configuration for the qodercli child process.
@@ -105,9 +111,9 @@ export type Options = {
      *   `name` / directory name, or `plugin:skill` for plugin-qualified skills.
      *   Adds `"Skill(<name>)"` for each entry to allowedTools.
      *
-     * This is a context filter, not a sandbox: unlisted skills are hidden from
-     * the model's listing and rejected by the Skill tool, but their files
-     * remain on disk and are reachable via Read/Bash.
+     * This is a context filter, not a security boundary: unlisted skills are
+     * hidden from the model's listing and rejected by the Skill tool, but their
+     * files remain on disk and are reachable via Read/Bash.
      */
     skills?: string[] | 'all';
     extensions?: string[];
@@ -163,11 +169,6 @@ export type Options = {
     model?: string;
     pathToQoderCLIExecutable?: string;
     permissionMode?: PermissionMode;
-    /**
-     * Custom workflow instructions for plan mode. When `permissionMode` is
-     * `plan`, the CLI uses this text as the plan-mode workflow body.
-     */
-    planModeInstructions?: string;
     allowDangerouslySkipPermissions?: boolean;
     /**
      * MCP tool name to use for permission prompts. Mutually exclusive with
@@ -176,7 +177,21 @@ export type Options = {
     permissionPromptToolName?: string;
     plugins?: SdkPluginConfig[];
     promptSuggestions?: boolean;
+    /**
+     * Persist the local session transcript. Defaults to true.
+     *
+     * Set to false for an ephemeral query that cannot be resumed. This option
+     * cannot be combined with sessionStore because external mirroring consumes
+     * locally committed transcript entries.
+     */
+    persistSession?: boolean;
     resume?: string;
+    /** Mirrors locally committed transcript entries to an external store. */
+    sessionStore?: SessionStore;
+    /** `batched` flushes at result boundaries; `eager` drains every CLI frame. */
+    sessionStoreFlush?: SessionStoreFlush;
+    /** Timeout for loading a session from an external store. Defaults to 60 seconds. */
+    loadTimeoutMs?: number;
     sessionId?: string;
     settings?: string | Settings;
     settingSources?: SettingSource[];
@@ -187,6 +202,11 @@ export type Options = {
         preset: 'qodercli';
         append?: string;
     };
+    /**
+     * Prompt patches forwarded to the model service for model-aware system
+     * prompt selection. Route keys are interpreted by the service.
+     */
+    modelRequestPatches?: ModelPromptPatches;
     /**
      * Pull-mode model selection callback.
      *
@@ -259,7 +279,25 @@ export interface SpawnedProcess {
  * 配置 MCP servers 请通过 `Options.mcpServers`（启动时一次性配置）。
  */
 export interface Query extends AsyncGenerator<SDKMessage, void> {
-    interrupt(): Promise<void>;
+    /**
+     * Request interruption of the active turn.
+     *
+     * CLIs advertising `interrupt_receipt_v1` return UUIDs of queued messages
+     * that survive the interrupt. Older CLIs return `undefined`.
+     */
+    interrupt(): Promise<SDKControlInterruptResponse | undefined>;
+    /**
+     * Remove a UUID-stamped async user message while it is still queued.
+     *
+     * Returns `true` only when the CLI removes that UUID from the queue.
+     *
+     * After messages have been dequeued into the in-flight coalesced batch, this
+     * method returns `false`. While that reservation remains active, cancelling
+     * the last UUID-bearing message marks the batch to be dropped; cancelling a
+     * non-representative UUID is a no-op. `false` alone does not prove a batch
+     * was dropped.
+     */
+    cancelAsyncMessage(messageUuid: string): Promise<boolean>;
     setPermissionMode(mode: PermissionMode): Promise<void>;
     setModel(model?: string): Promise<void>;
     /**

package/dist/types/session.d.ts

@@ -26,6 +26,11 @@ export type SessionMessage = {
     session_id: string;
     message: unknown;
     parent_tool_use_id: string | null;
+    /**
+     * Agent ID of the subagent that spawned this subagent. Null for main-session
+     * messages, depth-one subagents, and transcripts without this metadata.
+     */
+    parent_agent_id: string | null;
     /**
      * ISO 8601 timestamp of when this transcript entry was written to the
      * jsonl file. Mirrors the on-disk `timestamp` field. Optional because
@@ -61,16 +66,19 @@ export type SessionMessage = {
         };
     };
 };
-export type ListSessionsOptions = {
+type SessionStoreOptions = {
+    sessionStore?: SessionStore;
+};
+export type ListSessionsOptions = SessionStoreOptions & {
     dir?: string;
     limit?: number;
     offset?: number;
     includeWorktrees?: boolean;
 };
-export type GetSessionInfoOptions = {
+export type GetSessionInfoOptions = SessionStoreOptions & {
     dir?: string;
 };
-export type GetSessionMessagesOptions = {
+export type GetSessionMessagesOptions = SessionStoreOptions & {
     dir?: string;
     limit?: number;
     offset?: number;
@@ -80,15 +88,15 @@ export type GetSessionMessagesOptions = {
      */
     includeSystemMessages?: boolean;
 };
-export type GetSubagentMessagesOptions = {
+export type GetSubagentMessagesOptions = SessionStoreOptions & {
     dir?: string;
     limit?: number;
     offset?: number;
 };
-export type ListSubagentsOptions = {
+export type ListSubagentsOptions = SessionStoreOptions & {
     dir?: string;
 };
-export type SessionMutationOptions = {
+export type SessionMutationOptions = SessionStoreOptions & {
     dir?: string;
 };
 export type ForkSessionOptions = SessionMutationOptions & {
@@ -106,4 +114,6 @@ export type RewindFilesResult = {
     filesChanged?: string[];
     insertions?: number;
     deletions?: number;
-};
+};
+import type { SessionStore } from '../session/session-store.js';
+export {};

package/dist/types/settings.d.ts

@@ -1,137 +1,19 @@
 import type { PermissionMode } from './permissions.js';
-type MarketplaceSource = {
-    source: 'url';
-    url: string;
-    headers?: Record<string, string>;
-} | {
-    source: 'github';
-    repo: string;
-    ref?: string;
-    path?: string;
-    sparsePaths?: string[];
-} | {
-    source: 'git';
-    url: string;
-    ref?: string;
-    path?: string;
-    sparsePaths?: string[];
-} | {
-    source: 'npm';
-    package: string;
-} | {
-    source: 'file';
-    path: string;
-} | {
-    source: 'directory';
-    path: string;
-} | {
-    source: 'hostPattern';
-    hostPattern: string;
-} | {
-    source: 'pathPattern';
-    pathPattern: string;
-} | {
-    source: 'settings';
-    name: string;
-    plugins: PluginEntry[];
-    owner?: {
-        name: string;
-        email?: string;
-        url?: string;
-    };
-};
-type PluginSourceType = string | {
-    source: 'npm';
-    package: string;
-    version?: string;
-    registry?: string;
-} | {
-    source: 'pip';
-    package: string;
-    version?: string;
-    registry?: string;
-} | {
-    source: 'url';
-    url: string;
-    ref?: string;
-    sha?: string;
-} | {
-    source: 'github';
-    repo: string;
-    ref?: string;
-    sha?: string;
-} | {
-    source: 'git-subdir';
-    url: string;
-    path: string;
-    ref?: string;
-    sha?: string;
-};
-type PluginEntry = {
-    name: string;
-    source: PluginSourceType;
-    description?: string;
-    version?: string;
-    strict?: boolean;
-};
-type CommandHookEntry = {
-    type: 'command';
-    command: string;
-    if?: string;
-    shell?: 'bash' | 'powershell';
-    timeout?: number;
-    statusMessage?: string;
-    once?: boolean;
-    async?: boolean;
-    asyncRewake?: boolean;
-};
-type PromptHookEntry = {
-    type: 'prompt';
-    prompt: string;
-    if?: string;
-    timeout?: number;
-    model?: string;
-    statusMessage?: string;
-    once?: boolean;
-};
-type AgentHookEntry = {
-    type: 'agent';
-    prompt: string;
-    if?: string;
-    timeout?: number;
-    model?: string;
-    statusMessage?: string;
-    once?: boolean;
-};
-type HttpHookEntry = {
-    type: 'http';
-    url: string;
-    if?: string;
-    timeout?: number;
-    headers?: Record<string, string>;
-    allowedEnvVars?: string[];
-    statusMessage?: string;
-    once?: boolean;
-};
-type HookEntry = CommandHookEntry | PromptHookEntry | AgentHookEntry | HttpHookEntry;
+/**
+ * Settings fields with a verified qodercli execution path.
+ *
+ * Unknown keys remain pass-through so callers can use settings introduced by
+ * a newer paired CLI, but the SDK only gives first-class types to capabilities
+ * that are implemented and tested.
+ */
 export interface Settings {
-    apiKeyHelper?: string;
-    awsCredentialExport?: string;
-    awsAuthRefresh?: string;
-    gcpAuthRefresh?: string;
-    fileSuggestion?: {
-        type: 'command';
-        command: string;
-    };
-    respectGitignore?: boolean;
-    cleanupPeriodDays?: number;
-    env?: Record<string, string>;
-    attribution?: {
-        commit?: string;
-        pr?: string;
+    general?: {
+        fileCheckpointing?: {
+            enabled?: boolean;
+            [k: string]: unknown;
+        };
+        [k: string]: unknown;
     };
-    includeCoAuthoredBy?: boolean;
-    includeGitInstructions?: boolean;
     security?: {
         disableYoloMode?: boolean;
         [k: string]: unknown;
@@ -145,113 +27,19 @@ export interface Settings {
         additionalDirectories?: string[];
         [k: string]: unknown;
     };
-    model?: string;
-    availableModels?: string[];
-    modelOverrides?: Record<string, string>;
-    enableAllProjectMcpServers?: boolean;
-    enabledMcpjsonServers?: string[];
-    disabledMcpjsonServers?: string[];
-    allowedMcpServers?: {
-        serverName?: string;
-        serverCommand?: [string, ...string[]];
-        serverUrl?: string;
-    }[];
-    deniedMcpServers?: {
-        serverName?: string;
-        serverCommand?: [string, ...string[]];
-        serverUrl?: string;
-    }[];
-    hooks?: {
-        [k: string]: {
-            matcher?: string;
-            hooks: HookEntry[];
-        }[];
-    };
-    worktree?: {
-        symlinkDirectories?: string[];
-        sparsePaths?: string[];
+    mcp?: {
+        lazyLoad?: boolean;
+        [k: string]: unknown;
     };
-    disableAllHooks?: boolean;
-    defaultShell?: 'bash' | 'powershell';
-    allowManagedHooksOnly?: boolean;
-    allowedHttpHookUrls?: string[];
-    httpHookAllowedEnvVars?: string[];
-    allowManagedPermissionRulesOnly?: boolean;
-    allowManagedMcpServersOnly?: boolean;
-    strictPluginOnlyCustomization?: boolean | ('skills' | 'agents' | 'hooks' | 'mcp')[];
+    model?: string;
+    outputStyle?: string;
     skillOverrides?: Record<string, 'on' | 'name-only' | 'user-invocable-only' | 'off'>;
     skillListingMaxDescChars?: number;
     skillListingBudgetFraction?: number;
-    statusLine?: {
-        type: 'command';
-        command: string;
-        padding?: number;
-    };
     enabledPlugins?: Record<string, string[] | boolean | Record<string, unknown>>;
-    extraKnownMarketplaces?: Record<string, {
-        source: MarketplaceSource;
-        installLocation?: string;
-        autoUpdate?: boolean;
-    }>;
-    strictKnownMarketplaces?: MarketplaceSource[];
-    blockedMarketplaces?: MarketplaceSource[];
-    forceLoginOrgUUID?: string;
-    otelHeadersHelper?: string;
-    outputStyle?: string;
-    language?: string;
-    skipWebFetchPreflight?: boolean;
-    feedbackSurveyRate?: number;
-    spinnerTipsEnabled?: boolean;
-    spinnerVerbs?: {
-        mode: 'append' | 'replace';
-        verbs: string[];
-    };
-    spinnerTipsOverride?: {
-        excludeDefault?: boolean;
-        tips: string[];
-    };
-    syntaxHighlightingDisabled?: boolean;
-    terminalTitleFromRename?: boolean;
-    alwaysThinkingEnabled?: boolean;
-    effortLevel?: 'low' | 'medium' | 'high';
-    advisorModel?: string;
-    fastMode?: boolean;
-    fastModePerSessionOptIn?: boolean;
-    promptSuggestionEnabled?: boolean;
-    showClearContextOnPlanAccept?: boolean;
-    agent?: string;
-    companyAnnouncements?: string[];
     pluginConfigs?: Record<string, {
         mcpServers?: Record<string, Record<string, string | number | boolean | string[]>>;
-        options?: Record<string, string | number | boolean | string[]>;
     }>;
-    remote?: {
-        defaultEnvironmentId?: string;
-    };
-    autoUpdatesChannel?: 'latest' | 'stable';
-    minimumVersion?: string;
-    plansDirectory?: string;
-    channelsEnabled?: boolean;
-    allowedChannelPlugins?: {
-        marketplace: string;
-        plugin: string;
-    }[];
-    prefersReducedMotion?: boolean;
-    autoMemoryEnabled?: boolean;
-    autoMemoryDirectory?: string;
-    autoDreamEnabled?: boolean;
-    showThinkingSummaries?: boolean;
-    skipDangerousModePermissionPrompt?: boolean;
-    disableAutoMode?: 'disable';
-    sshConfigs?: {
-        id: string;
-        name: string;
-        sshHost: string;
-        sshPort?: number;
-        sshIdentityFile?: string;
-        startDirectory?: string;
-    }[];
-    pluginTrustMessage?: string;
     [k: string]: unknown;
 }
 export type ResolvedSettingsSource = {
@@ -271,5 +59,4 @@ export type ResolvedSettings = {
  * returned settings. Callers should use this before acting on resolved project
  * settings in SDK-hosted settings flows.
  */
-export declare function filterEscalatingDefaultMode(resolved: ResolvedSettings): Settings;
-export {};
+export declare function filterEscalatingDefaultMode(resolved: ResolvedSettings): Settings;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qoder-ai/qoder-agent-sdk",
-  "version": "1.0.14",
+  "version": "1.0.16",
   "description": "TypeScript SDK for building Qoder-powered coding agents.",
   "type": "module",
   "main": "dist/index.js",
@@ -25,18 +25,6 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
-    "./browser": {
-      "types": "./dist/browser/index.d.ts",
-      "default": "./dist/browser/index.js"
-    },
-    "./bridge": {
-      "types": "./dist/bridge/index.d.ts",
-      "default": "./dist/bridge/index.js"
-    },
-    "./embed": {
-      "types": "./dist/embed/embed.d.ts",
-      "default": "./dist/embed/embed.js"
-    },
     "./protocol": {
       "types": "./dist/protocol/index.d.ts",
       "default": "./dist/protocol/index.js"
@@ -64,6 +52,7 @@
     "demo:image": "node examples/image-input-demo/demo.mjs",
     "demo:models": "npm run build && node examples/list-models-demo/demo.mjs",
     "demo:usage": "npm run build && node examples/usage-info-demo/demo.mjs",
+    "demo:steer-control": "npm run build && node examples/steer-control-demo/demo.mjs",
     "demo:chat": "npm run build && node examples/interactive-chat-demo/demo.mjs",
     "demo:mcp-oauth": "npm run build && node examples/mcp-oauth-demo/demo.mjs",
     "demo:inprocess-mcp": "npm run build && node examples/inprocess-mcp-demo/demo.mjs",
@@ -87,6 +76,7 @@
     "test:query-runtime-control:unit": "npm run build && node --test tests/query-runtime-control/unit/*.test.mjs",
     "test:query-runtime-control:functional": "npm run build && node --test tests/query-runtime-control/functional/*.test.mjs",
     "test:worker-runtime:functional": "npm run build && node --test tests/worker-runtime/functional/*.test.mjs",
+    "test:skills-loading-control:unit": "npm run build && node --test tests/skills-loading-control/unit/*.test.mjs",
     "test:skills-loading-control:functional": "npm run build && node --test tests/skills-loading-control/functional/*.test.mjs",
     "test:plugins-loading-control:unit": "npm run build && node --test tests/plugins-loading-control/unit/*.test.mjs",
     "test:plugins-loading-control:functional": "npm run build && node --test tests/plugins-loading-control/functional/*.test.mjs",
@@ -112,6 +102,6 @@
     "typescript": "^5.7.0",
     "zod": "^4.0.0"
   },
-  "qoderCliVersion": "1.0.45",
+  "qoderCliVersion": "1.1.7",
   "license": "SEE LICENSE IN LICENSE"
 }

package/dist/bridge/bridge-api.d.ts

@@ -1,14 +0,0 @@
-/**
- * Bridge API — HTTP endpoints for CCR session management.
- */
-import type { RemoteCredentials } from '../types/bridge.js';
-/**
- * POST /v1/code/sessions — Create a fresh CCR session.
- * Returns the session ID (cse_* format) or null on failure.
- */
-export declare function createCodeSession(baseUrl: string, accessToken: string, title: string, timeoutMs: number, tags?: string[]): Promise<string | null>;
-/**
- * POST /v1/code/sessions/{id}/bridge — Mint a worker JWT.
- * This call IS the worker register (bumps epoch server-side).
- */
-export declare function fetchRemoteCredentials(sessionId: string, baseUrl: string, accessToken: string, timeoutMs: number, trustedDeviceToken?: string): Promise<RemoteCredentials | null>;

package/dist/bridge/bridge-session.d.ts

@@ -1,6 +0,0 @@
-import type { AttachBridgeSessionOptions, BridgeSessionHandle } from '../types/bridge.js';
-/**
- * Attach to an existing bridge session.
- * Creates the transport (SSE + CCR), wires routing, returns a session handle.
- */
-export declare function attachBridgeSession(opts: AttachBridgeSessionOptions): Promise<BridgeSessionHandle>;