@qodo/sdk 0.13.3 → 2.0.0-next.0

package/dist/qar/envelopes.js

@@ -0,0 +1,67 @@
+/**
+ * QAR envelope discriminated union — public surface.
+ *
+ * Backed by the codegen output in `./generated/envelope.ts` (regenerated from
+ * `schemas/qar/envelope.json` via `npm run codegen:qar`). This file is the
+ * curated overlay: it re-exports the codegen variants under both their
+ * QAR-native names (`TaskStart`, `TaskContinue`, …) and the SDK-2.0
+ * `…Envelope` aliases, and it sharpens the codegen output where the wire
+ * is stricter than the schema can express:
+ *
+ *   - `kind` is required (Pydantic exports it with a default, which makes
+ *     json-schema-to-typescript emit it optional). On the wire it is always
+ *     present and acts as the discriminator.
+ *   - `envelope_version` is the literal `1` (same Pydantic-default reason).
+ *   - `message_id` / `session_id` / `parent_message_id` are branded UUID
+ *     strings (`MessageId` / `SessionId`) so callers cannot accidentally
+ *     swap them at API boundaries — a property the JSON Schema can't
+ *     express but the SDK relies on.
+ *
+ * The direction whitelists below stay hand-written: they're an SDK-side
+ * projection of QAR's `protocol/envelopes.py` taxonomy.
+ */
+/** Direction whitelists — kept in sync with QAR's `protocol/envelopes.py` taxonomy. */
+export const CLIENT_TO_SERVER_KINDS = [
+    'task.start',
+    'task.continue',
+    'task.cancel',
+    'task.resubscribe',
+    'task.forceResume',
+    'tool.response',
+];
+export const SERVER_TO_CLIENT_KINDS = [
+    'task.started',
+    'task.delta',
+    'task.done',
+    'task.canceling',
+    'task.force_resumed',
+    'tool.request',
+    'agent.spawn',
+    'bulletin.post',
+    'flow.pause',
+    'flow.resume',
+    'error',
+];
+/**
+ * Kinds the wire allows in both directions. Mirrors QAR's
+ * `protocol/envelopes.BIDIRECTIONAL_KINDS = {"state.update", "artifact.add"}`.
+ *
+ * **`artifact.add`** is on the QAR-side bidirectional whitelist so a future
+ * SDK client-emitted artifact path (a tool handler attaching a file, a skill
+ * pushing a structured record) can land without a wire-contract change. The
+ * SDK currently does not emit `artifact.add` — `ArtifactsClient` is
+ * observer-only and the outbound-payload union (`OutboundPayload` in
+ * `connection.ts`) does not include `artifact.add`. Aligning the taxonomy
+ * here matches the cross-repo wire contract (per the 2026-05-13 retro) so
+ * the SDK never rejects an inbound `artifact.add` for direction reasons.
+ * Same precedent as `state.update`: bidirectional on the wire, observer-only
+ * on the public surface today.
+ *
+ * If you're auditing where SDK-side emission lands: ArtifactsClient.onArtifact
+ * is the read path; emit lives in a future ticket.
+ */
+export const BIDIRECTIONAL_KINDS = [
+    'state.update',
+    'artifact.add',
+];
+//# sourceMappingURL=envelopes.js.map

package/dist/qar/envelopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelopes.js","sourceRoot":"","sources":["../../src/qar/envelopes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA4OH,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,YAAY;IACZ,eAAe;IACf,aAAa;IACb,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;CAC2B,CAAC;AAE7C,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,cAAc;IACd,YAAY;IACZ,WAAW;IACX,gBAAgB;IAChB,oBAAoB;IACpB,cAAc;IACd,aAAa;IACb,eAAe;IACf,YAAY;IACZ,aAAa;IACb,OAAO;CACmC,CAAC;AAE7C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,cAAc;IACd,cAAc;CAC4B,CAAC"}

package/dist/qar/generated/envelope.d.ts

@@ -0,0 +1,332 @@
+/**
+ * GENERATED — DO NOT EDIT BY HAND.
+ *
+ * Source: schemas/qar/envelope.json
+ * QAR commit: ec7705f96ecadf728d27ea022c51923a75ec93f8
+ * QAR ref: main
+ * Fetched: 2026-05-09
+ *
+ * Edit the upstream Pydantic models in qodo-ai/qodo-agent-runtime,
+ * re-run `python scripts/export-schemas.py` there, bump
+ * schemas/qar/.qar-version + the vendored JSON files, then
+ * `npm run codegen:qar` regenerates this file.
+ */
+export type Envelope = (TaskStart | TaskContinue | TaskCancel | TaskResubscribe | TaskDelta | TaskDone | ToolRequest | ToolResponse | StateUpdate | AgentSpawn | BulletinPost | ArtifactAdd | FlowPause | FlowResume | ErrorEnv);
+export interface TaskStart {
+    envelope_version?: 1;
+    kind?: "task.start";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: TaskStartPayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Client kicks off a fresh task on the session.
+ */
+export interface TaskStartPayload {
+    agent_id: string;
+    input: QodoTaskStartPayload;
+    skill?: (string | null);
+}
+/**
+ * Typed shape of ``task.start.input`` — owned by QAR, consumed by the SDK.
+ *
+ * Fields:
+ *
+ * * ``user_query`` — natural-language prompt the agent receives. Optional
+ *   because non-prompt agents (pure-tool sub-agents driven by orchestrators)
+ *   may carry only ``deps_overrides``. When unset, the dispatcher passes
+ *   an empty user prompt to the agent — ``deps_overrides`` and
+ *   ``metadata`` are NEVER serialised into the prompt string (they may
+ *   carry tenant-scoped credentials; see ``_input_to_prompt`` in
+ *   ``qar.protocol.ws_handler`` for the secrecy boundary).
+ * * ``deps_overrides`` — opaque per-tenant / per-session deps the runtime
+ *   merges into the agent's typed ``deps`` schema before dispatch.
+ *   Values are validated against the agent's ``deps_schema``.
+ *   Dispatcher-owned keys win the merge: ``tenant_id`` and ``session_id``
+ *   are always written from server-trusted state, so a malicious
+ *   client cannot spoof either by stuffing them into this map. The
+ *   ``bulletin`` key is dispatcher-owned *for orchestrator agents* —
+ *   i.e., topologies declaring ``multi_agent.bulletin_topics``;
+ *   non-orchestrator topologies don't have a ``bulletin`` field on
+ *   their deps schema and rejecting it falls out of Pydantic
+ *   ``extra="forbid"`` validation. This field stays ``dict`` here
+ *   because the wire envelope is generic over the union of every
+ *   agent's deps schema.
+ * * ``metadata`` — string-keyed/string-valued tracing metadata. Cardinality
+ *   is the operator's concern (don't put session ids here — they're already
+ *   on the envelope); included so Studio + downstream traces can stamp
+ *   arbitrary correlation tags without growing the envelope shape.
+ */
+export interface QodoTaskStartPayload {
+    deps_overrides?: ({
+        [k: string]: unknown | undefined;
+    } | null);
+    metadata?: ({
+        [k: string]: string | undefined;
+    } | null);
+    schema_version?: 1;
+    user_query?: (string | null);
+}
+/**
+ * W3C Trace Context (https://www.w3.org/TR/trace-context/).
+ */
+export interface TraceContext {
+    traceparent: string;
+    tracestate?: (string | null);
+}
+export interface TaskContinue {
+    envelope_version?: 1;
+    kind?: "task.continue";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: TaskContinuePayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Client sends additional input mid-task.
+ */
+export interface TaskContinuePayload {
+    input: {
+        [k: string]: unknown | undefined;
+    };
+    task_id: string;
+}
+export interface TaskCancel {
+    envelope_version?: 1;
+    kind?: "task.cancel";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: TaskCancelPayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Client requests cancellation of a running task.
+ */
+export interface TaskCancelPayload {
+    reason?: (string | null);
+    task_id: string;
+}
+export interface TaskResubscribe {
+    envelope_version?: 1;
+    kind?: "task.resubscribe";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: TaskResubscribePayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * A2A ``tasks/resubscribe`` semantics — replay since a known message_id.
+ */
+export interface TaskResubscribePayload {
+    since_message_id?: (string | null);
+    task_id?: (string | null);
+}
+export interface TaskDelta {
+    envelope_version?: 1;
+    kind?: "task.delta";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: TaskDeltaPayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Streaming delta for a running task (text chunk, partial state, etc.).
+ */
+export interface TaskDeltaPayload {
+    delta: {
+        [k: string]: unknown | undefined;
+    };
+    task_id: string;
+}
+export interface TaskDone {
+    envelope_version?: 1;
+    kind?: "task.done";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: TaskDonePayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Final outcome for a task — success or terminal error.
+ */
+export interface TaskDonePayload {
+    error?: (string | null);
+    output?: ({
+        [k: string]: unknown | undefined;
+    } | null);
+    status: ("completed" | "failed" | "canceled");
+    task_id: string;
+}
+export interface ToolRequest {
+    envelope_version?: 1;
+    kind?: "tool.request";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: ToolRequestPayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Server asks the SDK side to execute an MCP tool. MCP tunneled inside.
+ */
+export interface ToolRequestPayload {
+    arguments: {
+        [k: string]: unknown | undefined;
+    };
+    mcp_server?: (string | null);
+    tool_call_id: string;
+    tool_name: string;
+}
+export interface ToolResponse {
+    envelope_version?: 1;
+    kind?: "tool.response";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: ToolResponsePayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * SDK side returns the tool result.
+ */
+export interface ToolResponsePayload {
+    error?: (string | null);
+    outcome: ("success" | "error" | "denied");
+    result?: ({
+        [k: string]: unknown | undefined;
+    } | null);
+    tool_call_id: string;
+}
+export interface StateUpdate {
+    envelope_version?: 1;
+    kind?: "state.update";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: StateUpdatePayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Per-skill state change. ``skill`` keys the state schema; ``op`` is the
+ * mutation kind (``patch``/``replace``/``init``).
+ */
+export interface StateUpdatePayload {
+    op: ("patch" | "replace" | "init");
+    schema_version: number;
+    skill: string;
+    state: {
+        [k: string]: unknown | undefined;
+    };
+}
+export interface AgentSpawn {
+    envelope_version?: 1;
+    kind?: "agent.spawn";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: AgentSpawnPayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * A sub-agent has been spawned. Surfacing this to the client lets Studio
+ * render the multi-agent topology live.
+ */
+export interface AgentSpawnPayload {
+    child_agent_id: string;
+    parent_agent_id: string;
+    spawn_protocol: ("bulletin" | "direct");
+}
+export interface BulletinPost {
+    envelope_version?: 1;
+    kind?: "bulletin.post";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: {
+        [k: string]: unknown | undefined;
+    };
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+export interface ArtifactAdd {
+    envelope_version?: 1;
+    kind?: "artifact.add";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: {
+        [k: string]: unknown | undefined;
+    };
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+export interface FlowPause {
+    envelope_version?: 1;
+    kind?: "flow.pause";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: FlowPausePayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Server signals backpressure: client should pause non-critical sends.
+ */
+export interface FlowPausePayload {
+    high_watermark: number;
+    in_flight: number;
+}
+export interface FlowResume {
+    envelope_version?: 1;
+    kind?: "flow.resume";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: FlowResumePayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Server signals backpressure cleared.
+ */
+export interface FlowResumePayload {
+    in_flight: number;
+    low_watermark: number;
+}
+export interface ErrorEnv {
+    envelope_version?: 1;
+    kind?: "error";
+    message_id: string;
+    parent_message_id?: (string | null);
+    payload: ErrorPayload;
+    session_id: string;
+    trace_context: TraceContext;
+    ts: string;
+}
+/**
+ * Protocol-level error — schema mismatch, dispatch failure, etc.
+ */
+export interface ErrorPayload {
+    code: string;
+    message: string;
+    offending_message_id?: (string | null);
+}
+//# sourceMappingURL=envelope.d.ts.map

package/dist/qar/generated/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../../src/qar/generated/envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,MAAM,MAAM,QAAQ,GAAG,CAAC,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,eAAe,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAA;AAEhO,MAAM,WAAW,SAAS;IAC1B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,gBAAgB,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IACjC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,oBAAoB,CAAA;IAC3B,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CACtB;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,oBAAoB;IACrC,cAAc,CAAC,EAAE,CAAC;QAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,GAAG,IAAI,CAAC,CAAA;IACT,QAAQ,CAAC,EAAE,CAAC;QACZ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;KAC9B,GAAG,IAAI,CAAC,CAAA;IACT,cAAc,CAAC,EAAE,CAAC,CAAA;IAClB,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC3B;AACD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC3B;AACD,MAAM,WAAW,YAAY;IAC7B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,eAAe,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,mBAAmB,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACpC,KAAK,EAAE;QACP,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,CAAA;IACD,OAAO,EAAE,MAAM,CAAA;CACd;AACD,MAAM,WAAW,UAAU;IAC3B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,iBAAiB,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAClC,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACxB,OAAO,EAAE,MAAM,CAAA;CACd;AACD,MAAM,WAAW,eAAe;IAChC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,kBAAkB,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,sBAAsB,CAAA;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACvC,gBAAgB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAClC,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CACxB;AACD,MAAM,WAAW,SAAS;IAC1B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,gBAAgB,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IACjC,KAAK,EAAE;QACP,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,CAAA;IACD,OAAO,EAAE,MAAM,CAAA;CACd;AACD,MAAM,WAAW,QAAQ;IACzB,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,eAAe,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,eAAe;IAChC,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACvB,MAAM,CAAC,EAAE,CAAC;QACV,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,GAAG,IAAI,CAAC,CAAA;IACT,MAAM,EAAE,CAAC,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC,CAAA;IAC7C,OAAO,EAAE,MAAM,CAAA;CACd;AACD,MAAM,WAAW,WAAW;IAC5B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,kBAAkB,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACnC,SAAS,EAAE;QACX,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,CAAA;IACD,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAChB;AACD,MAAM,WAAW,YAAY;IAC7B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,eAAe,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,mBAAmB,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACpC,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACvB,OAAO,EAAE,CAAC,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAA;IACzC,MAAM,CAAC,EAAE,CAAC;QACV,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,GAAG,IAAI,CAAC,CAAA;IACT,YAAY,EAAE,MAAM,CAAA;CACnB;AACD,MAAM,WAAW,WAAW;IAC5B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,kBAAkB,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACnC,EAAE,EAAE,CAAC,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,CAAA;IAClC,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE;QACP,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,CAAA;CACA;AACD,MAAM,WAAW,UAAU;IAC3B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,iBAAiB,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAClC,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAA;CACtC;AACD,MAAM,WAAW,YAAY;IAC7B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,eAAe,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE;QACT,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,CAAA;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD,MAAM,WAAW,WAAW;IAC5B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE;QACT,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,CAAA;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD,MAAM,WAAW,SAAS;IAC1B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,gBAAgB,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IACjC,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;CAChB;AACD,MAAM,WAAW,UAAU;IAC3B,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,iBAAiB,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;CACpB;AACD,MAAM,WAAW,QAAQ;IACzB,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACpB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACnC,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,YAAY,CAAA;IAC3B,EAAE,EAAE,MAAM,CAAA;CACT;AACD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,oBAAoB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CACrC"}

package/dist/qar/generated/envelope.js

@@ -0,0 +1,15 @@
+/**
+ * GENERATED — DO NOT EDIT BY HAND.
+ *
+ * Source: schemas/qar/envelope.json
+ * QAR commit: ec7705f96ecadf728d27ea022c51923a75ec93f8
+ * QAR ref: main
+ * Fetched: 2026-05-09
+ *
+ * Edit the upstream Pydantic models in qodo-ai/qodo-agent-runtime,
+ * re-run `python scripts/export-schemas.py` there, bump
+ * schemas/qar/.qar-version + the vendored JSON files, then
+ * `npm run codegen:qar` regenerates this file.
+ */
+export {};
+//# sourceMappingURL=envelope.js.map

package/dist/qar/generated/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../../src/qar/generated/envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/qar/generated/qar-info.d.ts

@@ -0,0 +1,76 @@
+/**
+ * GENERATED — DO NOT EDIT BY HAND.
+ *
+ * Source: schemas/qar/qar-info.json
+ * QAR commit: ec7705f96ecadf728d27ea022c51923a75ec93f8
+ * QAR ref: main
+ * Fetched: 2026-05-09
+ *
+ * Edit the upstream Pydantic models in qodo-ai/qodo-agent-runtime,
+ * re-run `python scripts/export-schemas.py` there, bump
+ * schemas/qar/.qar-version + the vendored JSON files, then
+ * `npm run codegen:qar` regenerates this file.
+ */
+/**
+ * The /v1/info response document.
+ *
+ * Frozen + ``extra="forbid"`` so a typo on either side surfaces at
+ * validation time. ``schema_version`` is the SDK-side compatibility
+ * tripwire — bumping it requires coordinated client/server upgrade.
+ */
+export interface QARInfo {
+    base_url?: (string | null);
+    deployment_kind: ("qodo-cloud" | "self-tenant");
+    feature_flags?: {
+        [k: string]: boolean | undefined;
+    };
+    models?: ModelEntry[];
+    rate_limits?: {
+        [k: string]: RateLimitEntry | undefined;
+    };
+    runtime_version: string;
+    schema_version?: 1;
+    tools?: ToolEntry[];
+}
+/**
+ * One entry in the model catalogue.
+ *
+ * ``provider`` is the verbatim topology spec (``"litellm:claude-opus-4-7"``,
+ * ``"test"``, etc.). ``agent`` is the agent that exposes it; the SDK
+ * can group by ``agent`` or by ``provider`` depending on whether it's
+ * rendering a model picker or auditing the deployment surface.
+ */
+export interface ModelEntry {
+    agent: string;
+    max_tokens?: (number | null);
+    provider: string;
+    temperature: number;
+}
+/**
+ * One rate-limit policy entry.
+ *
+ * ``scope`` is ``"route"`` (per-endpoint cap) or ``"tenant"`` (per-tenant
+ * cap). ``window_seconds`` + ``limit`` define the budget. v0 returns
+ * no entries; the model is here so the wire shape doesn't churn when
+ * Phase 4+ wires the rate-limit substrate.
+ */
+export interface RateLimitEntry {
+    limit: number;
+    scope: ("route" | "tenant");
+    window_seconds: number;
+}
+/**
+ * One MCP tool inventory entry from the loaded topologies.
+ *
+ * ``agent`` keys back to the agent that exposes the tool — Studio renders
+ * the inventory grouped by agent; the SDK consumes the flat list and
+ * routes ``tool.request`` envelopes via ``tool_name`` directly.
+ * ``description`` is the docstring Pydantic AI extracted from the
+ * ``@tool`` callable; empty string when none.
+ */
+export interface ToolEntry {
+    agent: string;
+    description?: string;
+    name: string;
+}
+//# sourceMappingURL=qar-info.d.ts.map

package/dist/qar/generated/qar-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qar-info.d.ts","sourceRoot":"","sources":["../../../src/qar/generated/qar-info.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACxB,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC1B,eAAe,EAAE,CAAC,YAAY,GAAG,aAAa,CAAC,CAAA;IAC/C,aAAa,CAAC,EAAE;QAChB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,CAAA;IACD,MAAM,CAAC,EAAE,UAAU,EAAE,CAAA;IACrB,WAAW,CAAC,EAAE;QACd,CAAC,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;KACtC,CAAA;IACD,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,CAAC,CAAA;IAClB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CAClB;AACD;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;CAClB;AACD;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;CACrB;AACD;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;CACX"}

package/dist/qar/generated/qar-info.js

@@ -0,0 +1,15 @@
+/**
+ * GENERATED — DO NOT EDIT BY HAND.
+ *
+ * Source: schemas/qar/qar-info.json
+ * QAR commit: ec7705f96ecadf728d27ea022c51923a75ec93f8
+ * QAR ref: main
+ * Fetched: 2026-05-09
+ *
+ * Edit the upstream Pydantic models in qodo-ai/qodo-agent-runtime,
+ * re-run `python scripts/export-schemas.py` there, bump
+ * schemas/qar/.qar-version + the vendored JSON files, then
+ * `npm run codegen:qar` regenerates this file.
+ */
+export {};
+//# sourceMappingURL=qar-info.js.map

package/dist/qar/generated/qar-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qar-info.js","sourceRoot":"","sources":["../../../src/qar/generated/qar-info.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/qar/generated/qodo-task-start-payload.d.ts

@@ -0,0 +1,54 @@
+/**
+ * GENERATED — DO NOT EDIT BY HAND.
+ *
+ * Source: schemas/qar/qodo-task-start-payload.json
+ * QAR commit: ec7705f96ecadf728d27ea022c51923a75ec93f8
+ * QAR ref: main
+ * Fetched: 2026-05-09
+ *
+ * Edit the upstream Pydantic models in qodo-ai/qodo-agent-runtime,
+ * re-run `python scripts/export-schemas.py` there, bump
+ * schemas/qar/.qar-version + the vendored JSON files, then
+ * `npm run codegen:qar` regenerates this file.
+ */
+/**
+ * Typed shape of ``task.start.input`` — owned by QAR, consumed by the SDK.
+ *
+ * Fields:
+ *
+ * * ``user_query`` — natural-language prompt the agent receives. Optional
+ *   because non-prompt agents (pure-tool sub-agents driven by orchestrators)
+ *   may carry only ``deps_overrides``. When unset, the dispatcher passes
+ *   an empty user prompt to the agent — ``deps_overrides`` and
+ *   ``metadata`` are NEVER serialised into the prompt string (they may
+ *   carry tenant-scoped credentials; see ``_input_to_prompt`` in
+ *   ``qar.protocol.ws_handler`` for the secrecy boundary).
+ * * ``deps_overrides`` — opaque per-tenant / per-session deps the runtime
+ *   merges into the agent's typed ``deps`` schema before dispatch.
+ *   Values are validated against the agent's ``deps_schema``.
+ *   Dispatcher-owned keys win the merge: ``tenant_id`` and ``session_id``
+ *   are always written from server-trusted state, so a malicious
+ *   client cannot spoof either by stuffing them into this map. The
+ *   ``bulletin`` key is dispatcher-owned *for orchestrator agents* —
+ *   i.e., topologies declaring ``multi_agent.bulletin_topics``;
+ *   non-orchestrator topologies don't have a ``bulletin`` field on
+ *   their deps schema and rejecting it falls out of Pydantic
+ *   ``extra="forbid"`` validation. This field stays ``dict`` here
+ *   because the wire envelope is generic over the union of every
+ *   agent's deps schema.
+ * * ``metadata`` — string-keyed/string-valued tracing metadata. Cardinality
+ *   is the operator's concern (don't put session ids here — they're already
+ *   on the envelope); included so Studio + downstream traces can stamp
+ *   arbitrary correlation tags without growing the envelope shape.
+ */
+export interface QodoTaskStartPayload {
+    deps_overrides?: ({
+        [k: string]: unknown | undefined;
+    } | null);
+    metadata?: ({
+        [k: string]: string | undefined;
+    } | null);
+    schema_version?: 1;
+    user_query?: (string | null);
+}
+//# sourceMappingURL=qodo-task-start-payload.d.ts.map

package/dist/qar/generated/qodo-task-start-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qodo-task-start-payload.d.ts","sourceRoot":"","sources":["../../../src/qar/generated/qodo-task-start-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,oBAAoB;IACrC,cAAc,CAAC,EAAE,CAAC;QAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;KAC/B,GAAG,IAAI,CAAC,CAAA;IACT,QAAQ,CAAC,EAAE,CAAC;QACZ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;KAC9B,GAAG,IAAI,CAAC,CAAA;IACT,cAAc,CAAC,EAAE,CAAC,CAAA;IAClB,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;CAC3B"}

package/dist/qar/generated/qodo-task-start-payload.js

@@ -0,0 +1,15 @@
+/**
+ * GENERATED — DO NOT EDIT BY HAND.
+ *
+ * Source: schemas/qar/qodo-task-start-payload.json
+ * QAR commit: ec7705f96ecadf728d27ea022c51923a75ec93f8
+ * QAR ref: main
+ * Fetched: 2026-05-09
+ *
+ * Edit the upstream Pydantic models in qodo-ai/qodo-agent-runtime,
+ * re-run `python scripts/export-schemas.py` there, bump
+ * schemas/qar/.qar-version + the vendored JSON files, then
+ * `npm run codegen:qar` regenerates this file.
+ */
+export {};
+//# sourceMappingURL=qodo-task-start-payload.js.map

package/dist/qar/generated/qodo-task-start-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qodo-task-start-payload.js","sourceRoot":"","sources":["../../../src/qar/generated/qodo-task-start-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/qar/ids.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Branded ID types for the QAR wire vocabulary.
+ *
+ * `MessageId` / `SessionId` / `TaskId` are UUID strings on the wire (UUIDv7
+ * for `MessageId` per QAR's protocol module). They're branded here so the
+ * compiler stops consumers from mixing them up at API boundaries.
+ *
+ * `ToolCallId` is a free-form string assigned by the LLM provider; not a UUID.
+ */
+declare const Brand: unique symbol;
+type Branded<T, B extends string> = T & {
+    readonly [Brand]: B;
+};
+export type MessageId = Branded<string, 'MessageId'>;
+export type SessionId = Branded<string, 'SessionId'>;
+export type TaskId = Branded<string, 'TaskId'>;
+export type ToolCallId = Branded<string, 'ToolCallId'>;
+export {};
+//# sourceMappingURL=ids.d.ts.map

package/dist/qar/ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../src/qar/ids.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,CAAC,MAAM,KAAK,EAAE,OAAO,MAAM,CAAC;AACnC,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IAAI,CAAC,GAAG;IAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACrD,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACrD,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC/C,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC"}

package/dist/qar/ids.js

@@ -0,0 +1,11 @@
+/**
+ * Branded ID types for the QAR wire vocabulary.
+ *
+ * `MessageId` / `SessionId` / `TaskId` are UUID strings on the wire (UUIDv7
+ * for `MessageId` per QAR's protocol module). They're branded here so the
+ * compiler stops consumers from mixing them up at API boundaries.
+ *
+ * `ToolCallId` is a free-form string assigned by the LLM provider; not a UUID.
+ */
+export {};
+//# sourceMappingURL=ids.js.map

package/dist/qar/ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/qar/ids.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}