@qoder-ai/qoder-agent-sdk 1.0.23 → 1.0.25

package/README.md

@@ -213,6 +213,30 @@ for await (const message of q) {
 }
 ```
 
+## Code Security
+
+Built-in code security is disabled by default in SDK sessions. Enable only the
+capabilities the integration needs:
+
+```ts
+const q = query({
+  prompt: "Review this repository for security issues.",
+  options: {
+    auth: qodercliAuth(),
+    cwd: process.cwd(),
+    securityScan: {
+      l1StaticCheck: true,
+      l2LightweightScan: true,
+      l3DeepScan: false,
+    },
+  },
+});
+```
+
+Omitted switches remain disabled. The top-level option is authoritative for
+the SDK session. Enabling any switch also makes the native security skill
+available; project and file scans do not have a separate switch.
+
 ## Tools and Permissions
 
 Qoder Agent can use tools such as file reads, file edits, shell commands, and

package/dist/core/brand.d.ts

@@ -1,6 +1,16 @@
 export type SdkBrand = 'global' | 'cn';
 export declare const SDK_BRAND: SdkBrand;
 export declare const IS_CN_SDK: boolean;
+/**
+ * Prefix for all Qoder environment variables recognized by the CLI.
+ * Global builds use `QODER_`, CN builds use `QODERCN_`.
+ */
+export declare const SDK_BRAND_ENV_PREFIX: string;
+/**
+ * Environment variable the CLI reads to resolve a VPC private-deployment
+ * endpoint. VPC mode only activates in CN builds.
+ */
+export declare const SDK_VPC_ENDPOINT_ENV: string;
 export declare const SDK_BRAND_CONFIG: {
     productName: string;
     packageName: string;

package/dist/core/constants.d.ts

@@ -40,11 +40,12 @@ export declare const CLI_EXIT_CODE_AUTH_ERROR = 41;
  * `options.tools`.
  *
  * Keep this list explicit so new qodercli built-ins do not automatically
- * become SDK-visible. Goal, cron, workflow, plan-mode transition, Bash PTY,
- * worktree, topic, and background-task control tools remain opt-in via
- * `options.tools`.
+ * become SDK-visible. UpdateGoal is included so an active goal started through
+ * the SDK control plane can terminate itself. Goal creation/read, cron,
+ * workflow, plan-mode transition, Bash PTY, worktree, topic, and
+ * background-task control tools remain opt-in via `options.tools`.
  */
-export declare const SDK_DEFAULT_TOOLS: readonly ["Agent", "AskUserQuestion", "Bash", "Edit", "Glob", "Grep", "ImageGen", "ImageSearch", "NotebookEdit", "Read", "Skill", "TaskCreate", "TaskGet", "TaskUpdate", "TaskList", "WebFetch", "WebSearch", "Write"];
+export declare const SDK_DEFAULT_TOOLS: readonly ["Agent", "AskUserQuestion", "Bash", "Edit", "Glob", "Grep", "ImageGen", "ImageSearch", "NotebookEdit", "Read", "Skill", "TaskCreate", "TaskGet", "TaskUpdate", "TaskList", "UpdateGoal", "WebFetch", "WebSearch", "Write"];
 export declare const SDK_TASK_TOOLS: readonly ["TaskCreate", "TaskGet", "TaskUpdate", "TaskList"];
 /**
  * Resolve the SDK's curated default tool surface against qodercli's Task

package/dist/core/process-transport.d.ts

@@ -15,7 +15,7 @@ import type { SdkPluginConfig, ToolConfig } from '../types/common.js';
 import type { PermissionMode } from '../types/permissions.js';
 import type { McpServerConfigForProcessTransport, McpServerToolPolicy } from '../types/mcp.js';
 import type { InternalAuthOptions } from '../types/auth.js';
-import type { SpawnedProcess, SpawnOptions, SettingSource } from '../types/options.js';
+import type { SecurityScanOptions, SpawnedProcess, SpawnOptions, SettingSource } from '../types/options.js';
 import type { DiagnosticsSink } from './sdk-diagnostics.js';
 export declare class QoderCliProcessError extends Error {
     readonly code: "QODER_CLI_PROCESS_ERROR";
@@ -47,6 +47,11 @@ export interface ProcessTransportOptions {
     /** Custom environment variables (defaults to process.env) */
     env?: Record<string, string | undefined>;
     proxy?: string;
+    /**
+     * VPC private-deployment endpoint (CN deployments only). Written to the
+     * `QODERCN_VPC_ENDPOINT` / `QODER_VPC_ENDPOINT` env var for the child.
+     */
+    vpcEndpoint?: string;
     /** stderr handling mode */
     stderr?: 'inherit' | 'pipe' | 'ignore';
     /** Optional callback for child-process stderr output */
@@ -93,6 +98,7 @@ export interface ProcessTransportOptions {
     allowedMcpServerNames?: string[];
     strictMcpConfig?: boolean;
     settings?: string | Record<string, unknown>;
+    securityScan?: SecurityScanOptions;
     settingSources?: SettingSource[];
     additionalDirectories?: string[];
     plugins?: SdkPluginConfig[];

package/dist/core/runtime-command.d.ts

@@ -0,0 +1,14 @@
+export interface RuntimeCommandOptions {
+    pathToQoderCLIExecutable?: string;
+    cwd?: string;
+    env?: Record<string, string | undefined>;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}
+export interface RuntimeCommandResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}
+/** Run a standalone qodercli subcommand using the packaged runtime carrier. */
+export declare function runRuntimeCommand(args: string[], options?: RuntimeCommandOptions): Promise<RuntimeCommandResult>;

package/dist/core/runtime-launch-options.d.ts

@@ -4,7 +4,7 @@ import type { InternalAuthOptions } from '../types/auth.js';
 import type { PermissionMode } from '../types/permissions.js';
 import type { McpServerConfigForProcessTransport } from '../protocol/mcp.js';
 import type { McpServerToolPolicy } from '../types/mcp.js';
-import type { SettingSource } from '../types/options.js';
+import type { SecurityScanOptions, SettingSource } from '../types/options.js';
 export declare class AuthAccessTokenEnvVarError extends Error {
     readonly code: "auth_access_token_env_var_not_configured";
     constructor(envVar: string);
@@ -21,6 +21,7 @@ export interface RuntimeLaunchOptions {
     cwd?: string;
     env?: Record<string, string | undefined>;
     proxy?: string;
+    vpcEndpoint?: string;
     auth?: InternalAuthOptions;
     model?: string;
     debug?: boolean;
@@ -50,6 +51,7 @@ export interface RuntimeLaunchOptions {
     allowedMcpServerNames?: string[];
     strictMcpConfig?: boolean;
     settings?: string | Record<string, unknown>;
+    securityScan?: SecurityScanOptions;
     settingSources?: SettingSource[];
     additionalDirectories?: string[];
     plugins?: SdkPluginConfig[];
@@ -79,6 +81,7 @@ export declare class RuntimeLaunchOptionsBuilder {
     buildArgs(): string[];
     private buildSettingsArg;
     private applyFileCheckpointingSetting;
+    private applySecurityScanSetting;
     private applySettingsCompatibility;
     private toQoderDefaultPermissionMode;
     private applyAdditionalDirectories;

package/dist/core/security-scan-options.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { SecurityScanOptions } from '../types/options.js';
+export declare function normalizeSecurityScanOptions(value: SecurityScanOptions): Required<SecurityScanOptions>;

package/dist/core/worker-runtime-launch.d.ts

@@ -0,0 +1,16 @@
+import type { PreparedWorkerRuntimePath } from './worker-runtime-assets.js';
+export declare const WORKER_CWD_ENV = "QODER_WORKER_CWD";
+export interface WorkerRuntimeLaunchContext {
+    env: Record<string, string>;
+    workerData: Record<string, unknown>;
+}
+/**
+ * Build the environment and workerData contract consumed by qoderWorkerRuntime.
+ * Query transports and one-shot commands must use the same contract so cwd and
+ * sidecar assets resolve identically in both launch modes.
+ */
+export declare function buildWorkerRuntimeLaunchContext(preparedRuntime: PreparedWorkerRuntimePath, options: {
+    cwd: string;
+    env: Record<string, string>;
+    workerData?: Record<string, unknown>;
+}): WorkerRuntimeLaunchContext;

package/dist/core/worker-runtime-path.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveQoderWorkerRuntimePath(explicitPath?: string): string;
+export declare function hasResolvableQoderWorkerRuntime(explicitPath?: string): boolean;

package/dist/core/worker-transport.d.ts

@@ -11,6 +11,8 @@ import type { ProcessTransportOptions } from './process-transport.js';
 import type { StdoutMessage } from '../types/control.js';
 import type { DiagnosticsSink } from './sdk-diagnostics.js';
 import { type RuntimeLaunchOptions } from './runtime-launch-options.js';
+import { hasResolvableQoderWorkerRuntime, resolveQoderWorkerRuntimePath } from './worker-runtime-path.js';
+export { hasResolvableQoderWorkerRuntime, resolveQoderWorkerRuntimePath };
 export declare class QoderWorkerRuntimeError extends Error {
     readonly code: "QODER_WORKER_RUNTIME_ERROR";
     readonly exitCode?: number;
@@ -93,6 +95,4 @@ export declare class WorkerRuntimeTransport implements Transport {
     private cleanupAbortListener;
     private cleanupAuthPayload;
     private fireAuthExpired;
-}
-export declare function resolveQoderWorkerRuntimePath(explicitPath?: string): string;
-export declare function hasResolvableQoderWorkerRuntime(explicitPath?: string): boolean;
+}

package/dist/global/plugins.d.ts

@@ -1,17 +1,11 @@
-import type { PluginDetails, InstallPluginResult, PluginValidationReport, ValidatePluginOptions, UninstallPluginResult } from '../types/plugins.js';
+import type { PluginDetails, InstallPluginResult, PluginToggleOptions, PluginValidationReport, ValidatePluginOptions, UninstallPluginResult } from '../types/plugins.js';
 export declare function listPlugins(opts?: {
     orgId?: string;
     cliPath?: string;
     env?: Record<string, string>;
 }): Promise<PluginDetails[]>;
-export declare function enablePlugin(id: string, opts?: {
-    cliPath?: string;
-    env?: Record<string, string>;
-}): Promise<void>;
-export declare function disablePlugin(id: string, opts?: {
-    cliPath?: string;
-    env?: Record<string, string>;
-}): Promise<void>;
+export declare function enablePlugin(id: string, opts?: PluginToggleOptions): Promise<void>;
+export declare function disablePlugin(id: string, opts?: PluginToggleOptions): Promise<void>;
 export declare function installPlugin(path: string, opts?: {
     cliPath?: string;
     env?: Record<string, string>;

package/dist/index.d.ts

@@ -70,7 +70,7 @@ export { importSessionToStore } from './session/session-import.js';
 export type { ImportSessionToStoreOptions } from './session/session-import.js';
 export type { SessionKey, SessionStore, SessionStoreEntry, SessionStoreFlush, } from './session/session-store.js';
 export { listPlugins, enablePlugin, disablePlugin, installPlugin, uninstallPlugin, validatePlugin, } from './global/plugins.js';
-export type { PluginDetails, PluginResources, InstallPluginResult, UninstallPluginResult, PluginValidationSeverity, PluginValidationPhase, PluginValidationPosition, PluginValidationLocation, PluginValidationDiagnostic, PluginValidationReport, ValidatePluginOptions, } from './types/plugins.js';
+export type { PluginScope, PluginToggleOptions, PluginDetails, PluginResources, InstallPluginResult, UninstallPluginResult, PluginValidationSeverity, PluginValidationPhase, PluginValidationPosition, PluginValidationLocation, PluginValidationDiagnostic, PluginValidationReport, ValidatePluginOptions, } from './types/plugins.js';
 export { submitFeedback } from './feedback.js';
 export type { SubmitFeedbackParams, SubmitFeedbackOptions, IntegrationMode, } from './feedback.js';
 export { AbortError, ModelPolicyTimeoutError, ProtocolVersionMismatchError, UnsupportedCliCapabilityError, } from './core/errors.js';
@@ -86,13 +86,14 @@ export type { AccessTokenInput, AuthOptions, FetchServiceAccountToken, ServiceAc
  */
 export type { FetchJobToken, JobTokenAuthOptions, JobTokenRequest, JobTokenResult, } from './types/auth.js';
 export type { AccountInfo, UsageAddOnQuotaBucket, UsageInfo, UsageOrgResourcePackage, UsageQuotaBucket, SessionCreditsUsage, ApiKeySource, ExitReason, FastModeState, ConfigScope, SettingSource, SDKAssistantMessageError, SDKStatus, EffortLevel, ThinkingAdaptive, ThinkingEnabled, ThinkingDisabled, ThinkingConfig, ModelInfo, ModelSource, ServerModelJson, ServerModelJsonValue, ModelStrategy, ModelPromotion, LocalizedModelText, ModelContextConfig, ModelContextWindowEntry, ModelEffortEntry, ModelThinkingConfig, ModelThinkingDisabled, ModelThinkingEnabled, ModelUsage, NonNullableUsage, SlashCommand, ToolConfig, SdkPluginConfig, } from './types/common.js';
-export type { SDKMessage, SDKAssistantMessage, SDKToolNonExecutionKind, SDKToolResultMeta, SDKUserMessage, SDKUserMessageReplay, SDKResultMessage, SDKResultSuccess, SDKResultError, SDKSystemMessage, SDKSystemInitMessage, SDKSystemMessageSubtype, SDKSystemMessageBySubtype, SDKPartialAssistantMessage, SDKCompactBoundaryMessage, SDKStatusMessage, SDKAPIRetryMessage, SDKHookStartedMessage, SDKHookProgressMessage, SDKHookResponseMessage, SDKPermissionDeniedMessage, SDKMirrorErrorMessage, SDKTaskNotificationMessage, SDKTaskStartedMessage, SDKTaskProgressMessage, SDKTaskUpdatedMessage, SDKBackgroundTasksChangedMessage, SDKSessionStateChangedMessage, SDKSessionTitleChangedMessage, SDKFilesPersistedEvent, SDKElicitationCompleteMessage, SDKPromptSuggestionMessage, SDKCloudAgentEventMessage, SDKPermissionDenial, } from './types/messages.js';
+export type { SDKMessage, SDKAssistantMessage, SDKToolNonExecutionKind, SDKToolResultMeta, SDKUserMessage, SDKUserMessageReplay, SDKResultMessage, SDKResultSuccess, SDKResultError, SDKSystemMessage, SDKSystemInitMessage, SDKSystemMessageSubtype, SDKSystemMessageBySubtype, SDKPartialAssistantMessage, SDKCompactBoundaryMessage, SDKStatusMessage, SDKAPIRetryMessage, SDKModelQueueStatusMessage, SDKControlRequestProgressMessage, SDKHookStartedMessage, SDKHookProgressMessage, SDKHookResponseMessage, SDKPermissionDeniedMessage, SDKMirrorErrorMessage, SDKTaskNotificationMessage, SDKTaskStartedMessage, SDKTaskProgressMessage, SDKTaskUpdatedMessage, SDKBackgroundTasksChangedMessage, SDKSessionStateChangedMessage, SDKSessionTitleChangedMessage, SDKFilesPersistedEvent, SDKElicitationCompleteMessage, SDKPromptSuggestionMessage, SDKCloudAgentEventMessage, SDKMemoryGenerationMessage, SDKMemoryConsumptionMessage, SDKPermissionDenial, } from './types/messages.js';
 export type { DefaultRuntimeTransport, } from './core/default-runtime.js';
 export type { QueryTransportCreateOptions, QueryTransportProviderOption, } from './core/query-transport.js';
 export type { ProcessTransportOptions } from './core/process-transport.js';
 export type { WorkerRuntimeTransportOptions, WorkerTransportOptions, } from './core/worker-transport.js';
 export type { QueryTransportProvider, Transport, } from './core/transport.js';
-export type { Options, QueryTransportOptions, Query, SpawnOptions, SpawnedProcess, ElicitationRequest, ElicitationResult, OnElicitation, PromptRequest, PromptRequestOption, PromptResponse, CanUseTool, } from './types/options.js';
+export type { Options, QueryTransportOptions, Query, SpawnOptions, SpawnedProcess, ElicitationRequest, ElicitationResult, OnElicitation, PromptRequest, PromptRequestOption, PromptResponse, CanUseTool, SecurityScanOptions, } from './types/options.js';
+export type { EffectiveMemoryConfig, MemoryConsumptionFile, MemoryConsumptionOptions, MemoryConsumptionResult, MemoryGenerationGateInput, MemoryGenerationGateResult, MemoryGenerationOptions, MemoryGenerationFailedFile, MemoryGenerationResult, MemoryMode, MemoryOptions, MemoryRoot, MemoryRootAccess, MemoryShouldGenerate, } from './types/memory.js';
 export type { AgentCreateParams, BetaManagedAgentsAgentToolName, BetaManagedAgentsAgentToolset20260401Params, BetaManagedAgentsCustomSkillParams, BetaManagedAgentsFileResourceParams, BetaManagedAgentsModel, BetaManagedAgentsSkillParams, BetaManagedAgentsURLMCPServerParams, CloudAgentOptions, CloudAgentReference, CloudAgentStreamOptions, CloudSessionResource, CloudSessionCreateParams, CloudSessionCreateReference, CloudSessionExistingReference, CloudSessionReference, SessionCreateParams, } from './types/cloud-agent.js';
 export type { SettingSource as SettingSourceFromOptions } from './types/options.js';
 export type { PermissionMode, PermissionBehavior, PermissionDecisionClassification, PermissionUpdateDestination, PermissionRuleValue, PermissionUpdate, PermissionResult, CanUseToolOptions, } from './types/permissions.js';
@@ -103,7 +104,7 @@ export type { SDKSessionInfo, SessionMessage, ListSessionsOptions, GetSessionInf
 export type { Settings, ResolveSettingsOptions, ResolvedSettingSource, ResolvedSettings, ResolvedSettingsSource, SettingsProvenanceEntry, } from './types/settings.js';
 export { filterEscalatingDefaultMode } from './types/settings.js';
 export type { QoderModelPurpose } from './types/control.js';
-export type { SDKControlRequest, SDKControlResponse, SDKControlInterruptResponse, SDKControlInitializeResponse, SDKControlGetContextUsageResponse, SDKControlGetUsageInfoRequest, SDKControlGetUsageInfoResponse, SDKControlAddDirectoriesResponse, SDKControlReloadPluginsResponse, SDKControlStopTaskRequest, SDKControlBackgroundTasksRequest, SDKControlBackgroundTasksResponse, } from './types/control.js';
+export type { SDKControlRequest, SDKControlResponse, SDKControlInterruptResponse, SDKControlInitializeResponse, SDKControlGetContextUsageResponse, SDKControlGetUsageInfoRequest, SDKControlGetUsageInfoResponse, SideQuestionHistoryEntry, AskSideQuestionOptions, SideQuestionRefusalFallback, SideQuestionResult, SDKControlAddDirectoriesResponse, SDKControlReloadPluginsResponse, SDKControlStopTaskRequest, SDKControlBackgroundTasksRequest, SDKControlBackgroundTasksResponse, } from './types/control.js';
 export type { SDKControlGetModelPolicyRequest, SDKControlGetModelPolicyResponse, SDKCapabilities, ModelPolicyContext, ModelPolicyResult, ModelPolicyProvider, } from './types/model-policy-provider.js';
 export type { SDKControlGetByokConfigRequest, SDKControlGetByokConfigResponse, SDKControlValidateByokModelRequest, SDKControlValidateByokModelResponse, BYOKModelValidationInput, BYOKProviderInfo, BYOKModelTypeInfo, BYOKModelInfo, CustomModel, } from './types/byok.js';
 export { isBashToolBackgroundLaunchResult } from './types/tools.js';