@robota-sdk/agent-cli 3.0.0-beta.83 → 3.0.0-beta.85

package/dist/node/command-executor-d6DdfUTD-3KEnsTnN.js

@@ -0,0 +1,2 @@
+;(function(){var v=parseInt(process.versions.node.split('.')[0],10);if(v<22){process.stderr.write('\n✗ Node.js 22+ is required (current: '+process.version+')\n\nUpgrade:\n  nvm:   nvm install 22 && nvm use 22\n  Volta: volta install node@22\n  Download: https://nodejs.org/en/download\n\n');process.exit(1);}})();
+import{n as e}from"./rolldown-runtime-rs7quPpn.js";import{r as t,s as n,w as r}from"./bounded-output-Bgx2Cgkx-C4ucXwLR.js";import{t as i}from"./rolldown-runtime-DK3Fl9T5-BeX3Bzvn.js";import{spawn as a}from"node:child_process";var o=e({n:()=>s,t:()=>d}),s=i({CommandExecutor:()=>d});const c=1e6;function l(e,n){let r=t({maxBytes:c}),i=t({maxBytes:c,retain:`tail`});return e.stdout?.on(`data`,e=>r.append(e)),e.stderr?.on(`data`,e=>i.append(e)),e.stdin?.on(`error`,()=>{}),e.stdin?.write(n),e.stdin?.end(),{stdoutOutput:r,stderrOutput:i}}function u(e,t,n,r){if(e===0)return{outcome:`allow`,source:`command`,stdout:n};if(e===2)return{outcome:`deny`,source:`command`,reason:r.trim()||`Blocked by hook`};let i=r.trim()?`: ${r.trim()}`:``;return{outcome:`error`,source:`command`,kind:`nonzero-exit`,reason:e===null?`Hook terminated by signal ${t??`unknown`}${i}`:`Hook exited ${e}${i}`}}var d=class{shellExecutable;type=`command`;constructor(e){this.shellExecutable=e}execute(e,t,i){let o=e.timeout??600,s=o*1e3,c=JSON.stringify(t);return new Promise(d=>{let f=!1,p=r({executable:this.shellExecutable}),m=a(p.command,p.commandArgs(e.command),{cwd:t.cwd,env:n(process.env,i,t.env)}),{stdoutOutput:h,stderrOutput:g}=l(m,c),_=setTimeout(()=>{f||(f=!0,m.kill(`SIGTERM`),d({outcome:`error`,source:`command`,kind:`timeout`,reason:`Hook timed out after ${o}s`}))},s);m.on(`close`,(e,t)=>{f||(f=!0,clearTimeout(_),d(u(e,t,h.toString(),g.toString())))}),m.on(`error`,e=>{f||(f=!0,clearTimeout(_),d({outcome:`error`,source:`command`,kind:`spawn-failure`,reason:e.message}))})})}};export{d as n,o as t};

package/dist/node/command-executor-d6DdfUTD-DhFSDHvb.js

@@ -0,0 +1,2 @@
+import{n as e}from"./rolldown-runtime-C9xYM0wc.js";import{r as t,s as n,w as r}from"./bounded-output-Bgx2Cgkx-28em7iHq.js";import{t as i}from"./rolldown-runtime-DK3Fl9T5-DK3Fl9T5.js";import{spawn as a}from"node:child_process";var o=e({n:()=>s,t:()=>d}),s=i({CommandExecutor:()=>d});const c=1e6;function l(e,n){let r=t({maxBytes:c}),i=t({maxBytes:c,retain:`tail`});return e.stdout?.on(`data`,e=>r.append(e)),e.stderr?.on(`data`,e=>i.append(e)),e.stdin?.on(`error`,()=>{}),e.stdin?.write(n),e.stdin?.end(),{stdoutOutput:r,stderrOutput:i}}function u(e,t,n,r){if(e===0)return{outcome:`allow`,source:`command`,stdout:n};if(e===2)return{outcome:`deny`,source:`command`,reason:r.trim()||`Blocked by hook`};let i=r.trim()?`: ${r.trim()}`:``;return{outcome:`error`,source:`command`,kind:`nonzero-exit`,reason:e===null?`Hook terminated by signal ${t??`unknown`}${i}`:`Hook exited ${e}${i}`}}var d=class{shellExecutable;type=`command`;constructor(e){this.shellExecutable=e}execute(e,t,i){let o=e.timeout??600,s=o*1e3,c=JSON.stringify(t);return new Promise(d=>{let f=!1,p=r({executable:this.shellExecutable}),m=a(p.command,p.commandArgs(e.command),{cwd:t.cwd,env:n(process.env,i,t.env)}),{stdoutOutput:h,stderrOutput:g}=l(m,c),_=setTimeout(()=>{f||(f=!0,m.kill(`SIGTERM`),d({outcome:`error`,source:`command`,kind:`timeout`,reason:`Hook timed out after ${o}s`}))},s);m.on(`close`,(e,t)=>{f||(f=!0,clearTimeout(_),d(u(e,t,h.toString(),g.toString())))}),m.on(`error`,e=>{f||(f=!0,clearTimeout(_),d({outcome:`error`,source:`command`,kind:`spawn-failure`,reason:e.message}))})})}};export{d as n,o as t};
+//# sourceMappingURL=command-executor-d6DdfUTD-DhFSDHvb.js.map

package/dist/node/{command-executor-DV-H2oD6-OKy8pwYH.js.map → command-executor-d6DdfUTD-DhFSDHvb.js.map}

@@ -1 +1 @@
-{"version":3,"file":"command-executor-DV-H2oD6-OKy8pwYH.js","names":["e","r","t","i","n"],"sources":["../../../agent-core/dist/node/command-executor-DV-H2oD6.js"],"sourcesContent":["import{t as e}from\"./rolldown-runtime-DK3Fl9T5.js\";import{f as t,s as n,t as r}from\"./bounded-output-DpjpS98g.js\";import{spawn as i}from\"node:child_process\";var a=e({CommandExecutor:()=>l});const o=1e6;function s(e,t){let n=r({maxBytes:o}),i=r({maxBytes:o,retain:`tail`});return e.stdout?.on(`data`,e=>n.append(e)),e.stderr?.on(`data`,e=>i.append(e)),e.stdin?.on(`error`,()=>{}),e.stdin?.write(t),e.stdin?.end(),{stdoutOutput:n,stderrOutput:i}}function c(e,t,n,r){if(e===0)return{outcome:`allow`,source:`command`,stdout:n};if(e===2)return{outcome:`deny`,source:`command`,reason:r.trim()||`Blocked by hook`};let i=r.trim()?`: ${r.trim()}`:``;return{outcome:`error`,source:`command`,kind:`nonzero-exit`,reason:e===null?`Hook terminated by signal ${t??`unknown`}${i}`:`Hook exited ${e}${i}`}}var l=class{shellExecutable;type=`command`;constructor(e){this.shellExecutable=e}execute(e,r,a){let o=e.timeout??600,l=o*1e3,u=JSON.stringify(r);return new Promise(d=>{let f=!1,p=t({executable:this.shellExecutable}),m=i(p.command,p.commandArgs(e.command),{cwd:r.cwd,env:n(process.env,a,r.env)}),{stdoutOutput:h,stderrOutput:g}=s(m,u),_=setTimeout(()=>{f||(f=!0,m.kill(`SIGTERM`),d({outcome:`error`,source:`command`,kind:`timeout`,reason:`Hook timed out after ${o}s`}))},l);m.on(`close`,(e,t)=>{f||(f=!0,clearTimeout(_),d(c(e,t,h.toString(),g.toString())))}),m.on(`error`,e=>{f||(f=!0,clearTimeout(_),d({outcome:`error`,source:`command`,kind:`spawn-failure`,reason:e.message}))})})}};export{a as n,l as t};\n//# sourceMappingURL=command-executor-DV-H2oD6.js.map"],"mappings":"wPAAiK,EAAEA,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,EAAEC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAEA,EAAE,CAAC,SAAS,EAAE,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,OAAO,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,OAAO,MAAM,CAAC,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,QAAQ,QAAQ,OAAO,UAAU,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,CAAC,QAAQ,OAAO,OAAO,UAAU,OAAO,EAAE,KAAK,GAAG,iBAAiB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,GAAG,MAAM,CAAC,QAAQ,QAAQ,OAAO,UAAU,KAAK,eAAe,OAAO,IAAI,KAAK,6BAA6B,GAAG,YAAY,IAAI,eAAe,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,gBAAgB,KAAK,UAAU,YAAY,EAAE,CAAC,KAAK,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,UAAU,CAAC,EAAE,OAAO,IAAI,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,EAAEC,EAAE,CAAC,WAAW,KAAK,eAAe,CAAC,EAAE,EAAEC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,IAAIC,EAAE,QAAQ,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,aAAa,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,SAAS,EAAE,EAAE,CAAC,QAAQ,QAAQ,OAAO,UAAU,KAAK,UAAU,OAAO,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,QAAQ,QAAQ,OAAO,UAAU,KAAK,gBAAgB,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command-executor-d6DdfUTD-DhFSDHvb.js","names":["e","r","t","i","n"],"sources":["../../../agent-core/dist/node/command-executor-d6DdfUTD.js"],"sourcesContent":["import{t as e}from\"./rolldown-runtime-DK3Fl9T5.js\";import{f as t,s as n,t as r}from\"./bounded-output-Bgx2Cgkx.js\";import{spawn as i}from\"node:child_process\";var a=e({CommandExecutor:()=>l});const o=1e6;function s(e,t){let n=r({maxBytes:o}),i=r({maxBytes:o,retain:`tail`});return e.stdout?.on(`data`,e=>n.append(e)),e.stderr?.on(`data`,e=>i.append(e)),e.stdin?.on(`error`,()=>{}),e.stdin?.write(t),e.stdin?.end(),{stdoutOutput:n,stderrOutput:i}}function c(e,t,n,r){if(e===0)return{outcome:`allow`,source:`command`,stdout:n};if(e===2)return{outcome:`deny`,source:`command`,reason:r.trim()||`Blocked by hook`};let i=r.trim()?`: ${r.trim()}`:``;return{outcome:`error`,source:`command`,kind:`nonzero-exit`,reason:e===null?`Hook terminated by signal ${t??`unknown`}${i}`:`Hook exited ${e}${i}`}}var l=class{shellExecutable;type=`command`;constructor(e){this.shellExecutable=e}execute(e,r,a){let o=e.timeout??600,l=o*1e3,u=JSON.stringify(r);return new Promise(d=>{let f=!1,p=t({executable:this.shellExecutable}),m=i(p.command,p.commandArgs(e.command),{cwd:r.cwd,env:n(process.env,a,r.env)}),{stdoutOutput:h,stderrOutput:g}=s(m,u),_=setTimeout(()=>{f||(f=!0,m.kill(`SIGTERM`),d({outcome:`error`,source:`command`,kind:`timeout`,reason:`Hook timed out after ${o}s`}))},l);m.on(`close`,(e,t)=>{f||(f=!0,clearTimeout(_),d(c(e,t,h.toString(),g.toString())))}),m.on(`error`,e=>{f||(f=!0,clearTimeout(_),d({outcome:`error`,source:`command`,kind:`spawn-failure`,reason:e.message}))})})}};export{a as n,l as t};\n//# sourceMappingURL=command-executor-d6DdfUTD.js.map"],"mappings":"6PAAiK,EAAEA,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,EAAEC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAEA,EAAE,CAAC,SAAS,EAAE,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,OAAO,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,OAAO,MAAM,CAAC,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,QAAQ,QAAQ,OAAO,UAAU,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,CAAC,QAAQ,OAAO,OAAO,UAAU,OAAO,EAAE,KAAK,GAAG,iBAAiB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,GAAG,MAAM,CAAC,QAAQ,QAAQ,OAAO,UAAU,KAAK,eAAe,OAAO,IAAI,KAAK,6BAA6B,GAAG,YAAY,IAAI,eAAe,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,gBAAgB,KAAK,UAAU,YAAY,EAAE,CAAC,KAAK,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,UAAU,CAAC,EAAE,OAAO,IAAI,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,EAAEC,EAAE,CAAC,WAAW,KAAK,eAAe,CAAC,EAAE,EAAEC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,IAAIC,EAAE,QAAQ,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,aAAa,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,SAAS,EAAE,EAAE,CAAC,QAAQ,QAAQ,OAAO,UAAU,KAAK,UAAU,OAAO,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,QAAQ,QAAQ,OAAO,UAAU,KAAK,gBAAgB,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/node/headless.js

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 ;(function(){var v=parseInt(process.versions.node.split('.')[0],10);if(v<22){process.stderr.write('\n✗ Node.js 22+ is required (current: '+process.version+')\n\nUpgrade:\n  nvm:   nvm install 22 && nvm use 22\n  Volta: volta install node@22\n  Download: https://nodejs.org/en/download\n\n');process.exit(1);}})();
-import{M as e,N as t,d as n,o as r,s as i,t as a,u as o}from"./cli-core-CfQhvbx3.js";if(t(),n(process.argv))o(r());else try{let t=i();!t.serve||t.printMode||t.goal!==void 0||t.positional.length>0||t.reset||t.configure||t.configureProvider!==void 0||t.checkUpdate||t.help||t.version?(process.stderr.write(`This headless runtime accepts only --serve.
-`),process.exitCode=2):a({},e).catch(e=>{process.stderr.write(`${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1})}catch(e){process.stderr.write(`${e instanceof Error?e.message:String(e)}\n`),process.exitCode=2}export{};
+import{F as e,P as t,c as n,d as r,f as i,o as a,s as o,t as s}from"./cli-core-DjVnz1-_.js";if(e(),r(o(process.argv)))i(a());else try{let e=n();!e.serve||e.printMode||e.goal!==void 0||e.positional.length>0||e.reset||e.configure||e.configureProvider!==void 0||e.checkUpdate||e.help||e.version?(process.stderr.write(`This headless runtime accepts only --serve.
+`),process.exitCode=2):s({},t).catch(e=>{process.stderr.write(`${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1})}catch(e){process.stderr.write(`${e instanceof Error?e.message:String(e)}\n`),process.exitCode=2}export{};

package/dist/node/{http-executor-cWzI2svn-TG_TMYKh.js → http-executor-ADn4locH-D-8crzF8.js}

@@ -1,2 +1,2 @@
-import{n as e}from"./rolldown-runtime-C9xYM0wc.js";import{r as t}from"./verdict-decoder-Dk_w2NG9-Bka7Cldj.js";import{t as n}from"./rolldown-runtime-DK3Fl9T5-DK3Fl9T5.js";var r=e({n:()=>i,t:()=>o}),i=n({HttpExecutor:()=>o});function a(e){return e.replace(/\$([A-Za-z_][A-Za-z0-9_]*)/g,(e,t)=>{let n=process.env[t];return n===void 0?e:n})}var o=class{type=`http`;async execute(e,n){let r=(e.timeout??10)*1e3,i={"Content-Type":`application/json`};if(e.headers)for(let[t,n]of Object.entries(e.headers))i[t]=a(n);try{let a=await fetch(e.url,{method:`POST`,headers:i,body:JSON.stringify(n),signal:AbortSignal.timeout(r)});return a.ok?t(await a.text(),`http`,n.hook_event_name):{outcome:`error`,source:`http`,kind:`http-status`,reason:`HTTP ${a.status} ${a.statusText}`}}catch(e){return s(e)}}};function s(e){return{outcome:`error`,source:`http`,kind:e instanceof Error&&e.name===`TimeoutError`?`timeout`:`transport-failure`,reason:e instanceof Error?e.message:String(e)}}export{o as n,r as t};
-//# sourceMappingURL=http-executor-cWzI2svn-TG_TMYKh.js.map
+import{n as e}from"./rolldown-runtime-C9xYM0wc.js";import{r as t}from"./verdict-decoder-Dz_rjoIZ-DA8BKB83.js";import{t as n}from"./rolldown-runtime-DK3Fl9T5-DK3Fl9T5.js";var r=e({n:()=>i,t:()=>o}),i=n({HttpExecutor:()=>o});function a(e){return e.replace(/\$([A-Za-z_][A-Za-z0-9_]*)/g,(e,t)=>{let n=process.env[t];return n===void 0?e:n})}var o=class{type=`http`;async execute(e,n){let r=(e.timeout??10)*1e3,i={"Content-Type":`application/json`};if(e.headers)for(let[t,n]of Object.entries(e.headers))i[t]=a(n);try{let a=await fetch(e.url,{method:`POST`,headers:i,body:JSON.stringify(n),signal:AbortSignal.timeout(r)});return a.ok?t(await a.text(),`http`,n.hook_event_name):{outcome:`error`,source:`http`,kind:`http-status`,reason:`HTTP ${a.status} ${a.statusText}`}}catch(e){return s(e)}}};function s(e){return{outcome:`error`,source:`http`,kind:e instanceof Error&&e.name===`TimeoutError`?`timeout`:`transport-failure`,reason:e instanceof Error?e.message:String(e)}}export{o as n,r as t};
+//# sourceMappingURL=http-executor-ADn4locH-D-8crzF8.js.map

package/dist/node/{http-executor-cWzI2svn-TG_TMYKh.js.map → http-executor-ADn4locH-D-8crzF8.js.map}

@@ -1 +1 @@
-{"version":3,"file":"http-executor-cWzI2svn-TG_TMYKh.js","names":["e","t"],"sources":["../../../agent-core/dist/node/http-executor-cWzI2svn.js"],"sourcesContent":["import{t as e}from\"./rolldown-runtime-DK3Fl9T5.js\";import{t}from\"./verdict-decoder-Dk_w2NG9.js\";var n=e({HttpExecutor:()=>i});function r(e){return e.replace(/\\$([A-Za-z_][A-Za-z0-9_]*)/g,(e,t)=>{let n=process.env[t];return n===void 0?e:n})}var i=class{type=`http`;async execute(e,n){let i=(e.timeout??10)*1e3,o={\"Content-Type\":`application/json`};if(e.headers)for(let[t,n]of Object.entries(e.headers))o[t]=r(n);try{let r=await fetch(e.url,{method:`POST`,headers:o,body:JSON.stringify(n),signal:AbortSignal.timeout(i)});return r.ok?t(await r.text(),`http`,n.hook_event_name):{outcome:`error`,source:`http`,kind:`http-status`,reason:`HTTP ${r.status} ${r.statusText}`}}catch(e){return a(e)}}};function a(e){return{outcome:`error`,source:`http`,kind:e instanceof Error&&e.name===`TimeoutError`?`timeout`:`transport-failure`,reason:e instanceof Error?e.message:String(e)}}export{n,i as t};\n//# sourceMappingURL=http-executor-cWzI2svn.js.map"],"mappings":"qMAAoG,EAAEA,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,QAAQ,+BAA+B,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,GAAG,OAAO,IAAI,IAAK,GAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,OAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC,eAAe,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,GAAG,CAAC,EAAE,KAAK,OAAO,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,MAAM,EAAE,IAAI,CAAC,OAAO,OAAO,QAAQ,EAAE,KAAK,KAAK,UAAU,CAAC,EAAE,OAAO,YAAY,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAGC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,QAAQ,QAAQ,OAAO,OAAO,KAAK,cAAc,OAAO,QAAQ,EAAE,OAAO,GAAG,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,QAAQ,OAAO,OAAO,KAAK,aAAa,OAAO,EAAE,OAAO,eAAe,UAAU,oBAAoB,OAAO,aAAa,MAAM,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC"}
+{"version":3,"file":"http-executor-ADn4locH-D-8crzF8.js","names":["e","t"],"sources":["../../../agent-core/dist/node/http-executor-ADn4locH.js"],"sourcesContent":["import{t as e}from\"./rolldown-runtime-DK3Fl9T5.js\";import{t}from\"./verdict-decoder-Dz_rjoIZ.js\";var n=e({HttpExecutor:()=>i});function r(e){return e.replace(/\\$([A-Za-z_][A-Za-z0-9_]*)/g,(e,t)=>{let n=process.env[t];return n===void 0?e:n})}var i=class{type=`http`;async execute(e,n){let i=(e.timeout??10)*1e3,o={\"Content-Type\":`application/json`};if(e.headers)for(let[t,n]of Object.entries(e.headers))o[t]=r(n);try{let r=await fetch(e.url,{method:`POST`,headers:o,body:JSON.stringify(n),signal:AbortSignal.timeout(i)});return r.ok?t(await r.text(),`http`,n.hook_event_name):{outcome:`error`,source:`http`,kind:`http-status`,reason:`HTTP ${r.status} ${r.statusText}`}}catch(e){return a(e)}}};function a(e){return{outcome:`error`,source:`http`,kind:e instanceof Error&&e.name===`TimeoutError`?`timeout`:`transport-failure`,reason:e instanceof Error?e.message:String(e)}}export{n,i as t};\n//# sourceMappingURL=http-executor-ADn4locH.js.map"],"mappings":"qMAAoG,EAAEA,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,QAAQ,+BAA+B,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,GAAG,OAAO,IAAI,IAAK,GAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,OAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC,eAAe,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,GAAG,CAAC,EAAE,KAAK,OAAO,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,MAAM,EAAE,IAAI,CAAC,OAAO,OAAO,QAAQ,EAAE,KAAK,KAAK,UAAU,CAAC,EAAE,OAAO,YAAY,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAGC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,QAAQ,QAAQ,OAAO,OAAO,KAAK,cAAc,OAAO,QAAQ,EAAE,OAAO,GAAG,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,QAAQ,OAAO,OAAO,KAAK,aAAa,OAAO,EAAE,OAAO,eAAe,UAAU,oBAAoB,OAAO,aAAa,MAAM,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC"}

package/dist/node/{http-executor-cWzI2svn-Ype0naht.js → http-executor-ADn4locH-uz5KV6N-.js}

@@ -1,2 +1,2 @@
 ;(function(){var v=parseInt(process.versions.node.split('.')[0],10);if(v<22){process.stderr.write('\n✗ Node.js 22+ is required (current: '+process.version+')\n\nUpgrade:\n  nvm:   nvm install 22 && nvm use 22\n  Volta: volta install node@22\n  Download: https://nodejs.org/en/download\n\n');process.exit(1);}})();
-import{n as e}from"./rolldown-runtime-rs7quPpn.js";import{r as t}from"./verdict-decoder-Dk_w2NG9-BKWMtxp8.js";import{t as n}from"./rolldown-runtime-DK3Fl9T5-BeX3Bzvn.js";var r=e({n:()=>i,t:()=>o}),i=n({HttpExecutor:()=>o});function a(e){return e.replace(/\$([A-Za-z_][A-Za-z0-9_]*)/g,(e,t)=>{let n=process.env[t];return n===void 0?e:n})}var o=class{type=`http`;async execute(e,n){let r=(e.timeout??10)*1e3,i={"Content-Type":`application/json`};if(e.headers)for(let[t,n]of Object.entries(e.headers))i[t]=a(n);try{let a=await fetch(e.url,{method:`POST`,headers:i,body:JSON.stringify(n),signal:AbortSignal.timeout(r)});return a.ok?t(await a.text(),`http`,n.hook_event_name):{outcome:`error`,source:`http`,kind:`http-status`,reason:`HTTP ${a.status} ${a.statusText}`}}catch(e){return s(e)}}};function s(e){return{outcome:`error`,source:`http`,kind:e instanceof Error&&e.name===`TimeoutError`?`timeout`:`transport-failure`,reason:e instanceof Error?e.message:String(e)}}export{o as n,r as t};
+import{n as e}from"./rolldown-runtime-rs7quPpn.js";import{r as t}from"./verdict-decoder-Dz_rjoIZ-qM0jJVsB.js";import{t as n}from"./rolldown-runtime-DK3Fl9T5-BeX3Bzvn.js";var r=e({n:()=>i,t:()=>o}),i=n({HttpExecutor:()=>o});function a(e){return e.replace(/\$([A-Za-z_][A-Za-z0-9_]*)/g,(e,t)=>{let n=process.env[t];return n===void 0?e:n})}var o=class{type=`http`;async execute(e,n){let r=(e.timeout??10)*1e3,i={"Content-Type":`application/json`};if(e.headers)for(let[t,n]of Object.entries(e.headers))i[t]=a(n);try{let a=await fetch(e.url,{method:`POST`,headers:i,body:JSON.stringify(n),signal:AbortSignal.timeout(r)});return a.ok?t(await a.text(),`http`,n.hook_event_name):{outcome:`error`,source:`http`,kind:`http-status`,reason:`HTTP ${a.status} ${a.statusText}`}}catch(e){return s(e)}}};function s(e){return{outcome:`error`,source:`http`,kind:e instanceof Error&&e.name===`TimeoutError`?`timeout`:`transport-failure`,reason:e instanceof Error?e.message:String(e)}}export{o as n,r as t};

package/dist/node/index.d.ts

@@ -3,7 +3,7 @@ import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/
 import "@modelcontextprotocol/sdk/shared/auth.js";
 import "@modelcontextprotocol/sdk/types.js";
 import "@modelcontextprotocol/sdk/shared/transport.js";
-//#region ../agent-core/dist/node/types-gNrckgFE.d.ts
+//#region ../agent-core/dist/node/types-Ge2XB-y-.d.ts
 //#region src/interfaces/universal-value.d.ts
 /**
  * Universal value type axis (recursive, JSON-like + Date).
@@ -91,7 +91,7 @@ interface IOutboundTraceContext {
 /** Claude Code compatible session end reasons. */
 type TSessionEndReason = 'clear' | 'resume' | 'logout' | 'prompt_input_exit' | 'bypass_permissions_disabled' | 'other';
 //#endregion
-//#region ../agent-core/dist/node/index-D4iJ5IsN.d.ts
+//#region ../agent-core/dist/node/index-DQrmrFn9.d.ts
 /**
  * Context data type - for execution contexts
  */
@@ -105,81 +105,37 @@ type TLoggerData = Record<string, TUniversalValue | Date | Error>;
  */
 type TToolParameters = Record<string, TUniversalValue>;
 //#endregion
-//#region src/interfaces/interaction.d.ts
-/**
- * UI-agnostic "ask the user" contract (CMD-004).
- *
- * The SSOT for the interaction action lives in agent-core so every interaction *source* can reach it:
- * command execution (`ICommandHostContext`, agent-framework) AND tool execution
- * (`IToolExecutionContext`, agent-core, for model-issued questions — CMD-005). These are pure types
- * with no runtime dependency, so the contract crosses a serialization/transport boundary unchanged
- * (no function-valued fields).
- *
- * A single shape covers every interaction kind, parameterised by fields rather than split into
- * variants:
- * - confirm    → two options, `maxSelect` 1
- * - single     → options, `maxSelect` 1
- * - multi      → options, `maxSelect` > 1
- * - free text  → no options, `allowFreeText` true
- * - secret     → free text with `masked` true
- */
-/** One predefined option the user can choose. */
-interface IActionOption {
-  value: string;
-  label: string;
-  description?: string;
+//#region src/interfaces/tool-continuation.d.ts
+/** Core-owned identity, independent of a provider's reusable tool-call identifier. */
+interface IToolActionIdentity {
+  executionId: string;
+  actionId: string;
+  parentCallId: string;
+  toolCallId: string;
+  toolName: string;
 }
-/** Pre-selected option values and/or prefilled free text for an action request. */
-interface IActionDefault {
-  values?: readonly string[];
-  text?: string;
+interface IToolContinuationPrompt {
+  kind: string;
+  data: TToolParameters;
 }
-/** One request for the user to answer. See the module doc for how the fields encode each kind. */
-interface IActionRequest {
-  /** Correlation key; the ask port resolves a given id exactly once (idempotent, first-answer wins). */
-  id: string;
-  title: string;
-  description?: string;
-  /** Predefined options. Empty/omitted ⇒ pure free-text entry. */
-  options?: readonly IActionOption[];
-  /** Minimum selections required (default 1). */
-  minSelect?: number;
-  /** Maximum selections allowed (default 1 ⇒ single; > 1 ⇒ multi). */
-  maxSelect?: number;
-  /** Allow a typed custom answer in addition to / instead of the options. */
-  allowFreeText?: boolean;
-  /** Free-text entry is masked (secret entry such as an API key); the renderer hides input. */
-  masked?: boolean;
-  /** Allow submitting empty free text. */
-  allowEmpty?: boolean;
-  /** Placeholder shown in the free-text field. */
-  placeholder?: string;
-  /** Maximum options shown before scrolling (renderer hint). */
-  maxVisible?: number;
-  /** Pre-selected option values and/or prefilled free text. */
-  default?: IActionDefault;
+interface IToolWaitRequest extends IToolActionIdentity, IToolContinuationPrompt {
+  requestId: string;
 }
-/**
- * The user's answer to an {@link IActionRequest}. `answer` carries the selected option values and/or
- * the typed text; `cancelled` means the user dismissed the request, or no interactive renderer was
- * available to answer it.
- */
-type TActionResponse = {
-  type: 'answer';
-  values: readonly string[];
-  text?: string;
-} | {
-  type: 'cancelled';
-};
-/**
- * The injected "ask the user" port — a single seam reachable by every interaction source (command
- * execution now; tool execution for model-issued questions later) and rendered per-environment by each
- * transport. The concurrency model (broadcast to attached interactive channels, first answer wins,
- * later answers for an already-resolved `id` ignored) is owned by the port implementation, not the
- * contract.
- */
-interface IUserInteraction {
-  ask(request: IActionRequest): Promise<TActionResponse>;
+interface IToolWaitResponse {
+  requestId: string;
+  responseId: string;
+  response: TToolParameters;
+}
+interface IToolWaitState {
+  request: IToolWaitRequest;
+  response?: IToolWaitResponse;
+}
+/** Available before effect admission. The runtime owns interpretation and authorization. */
+interface IToolContinuation {
+  readonly action: IToolActionIdentity;
+  readonly waits: readonly IToolWaitState[];
+  /** Return a saved response or persist a request and suspend this execution. */
+  request(prompt: IToolContinuationPrompt): Promise<TToolParameters>;
 }
 /**
  * Message metadata used across conversation history and provider adapters.
@@ -361,8 +317,6 @@ interface IModelRef {
   provider: string;
   model: string;
 }
-//#endregion
-//#region src/utils/provider-failure.d.ts
 /** Why a provider call failed, as far as switching models is concerned. */
 type TProviderFailureReason = 'overloaded' | 'service-unavailable' | 'server-error' | 'model-unavailable' | 'authentication' | 'billing' | 'rate-limit' | 'invalid-request' | 'network' | 'aborted' | 'unknown';
 //#endregion
@@ -804,24 +758,6 @@ interface IAIProvider {
    */
   close?(): Promise<void>;
 }
-/**
- * The catalog a search tool loads through — the port `IToolExecutionContext.deferredTools` carries.
- *
- * Narrow on purpose: a tool that can list and load must not be able to register, remove or execute.
- */
-interface IDeferredToolCatalog {
-  /**
-   * Deferred tools not yet loaded — the population a search can still discover. Empty while
-   * deferral is not engaged, because nothing is withheld then.
-   */
-  listDeferredTools(): IToolSchema[];
-  /**
-   * Mark the named deferred tools loaded for the rest of the session and return their schemas. A
-   * resident name is returned as it is (it was never withheld); an unknown name throws, naming the
-   * entry, and then nothing is loaded — the check runs over every name before the first load.
-   */
-  loadDeferredTools(names: readonly string[]): IToolSchema[];
-}
 //#endregion
 //#region src/event-service/interfaces.d.ts
 /**
@@ -896,7 +832,104 @@ interface IEventService {
   unsubscribe(listener: TEventListener): void;
 }
 //#endregion
+//#region src/interfaces/interaction.d.ts
+/**
+ * UI-agnostic "ask the user" contract (CMD-004).
+ *
+ * The SSOT for the interaction action lives in agent-core so every interaction *source* can reach it:
+ * command execution (`ICommandHostContext`, agent-framework) AND tool execution
+ * (`IToolExecutionContext`, agent-core, for model-issued questions — CMD-005). These are pure types
+ * with no runtime dependency, so the contract crosses a serialization/transport boundary unchanged
+ * (no function-valued fields).
+ *
+ * A single shape covers every interaction kind, parameterised by fields rather than split into
+ * variants:
+ * - confirm    → two options, `maxSelect` 1
+ * - single     → options, `maxSelect` 1
+ * - multi      → options, `maxSelect` > 1
+ * - free text  → no options, `allowFreeText` true
+ * - secret     → free text with `masked` true
+ */
+/** One predefined option the user can choose. */
+interface IActionOption {
+  value: string;
+  label: string;
+  description?: string;
+}
+/** Pre-selected option values and/or prefilled free text for an action request. */
+interface IActionDefault {
+  values?: readonly string[];
+  text?: string;
+}
+/** One request for the user to answer. See the module doc for how the fields encode each kind. */
+interface IActionRequest {
+  /** Correlation key; the ask port resolves a given id exactly once (idempotent, first-answer wins). */
+  id: string;
+  title: string;
+  description?: string;
+  /** Predefined options. Empty/omitted ⇒ pure free-text entry. */
+  options?: readonly IActionOption[];
+  /** Minimum selections required (default 1). */
+  minSelect?: number;
+  /** Maximum selections allowed (default 1 ⇒ single; > 1 ⇒ multi). */
+  maxSelect?: number;
+  /** Allow a typed custom answer in addition to / instead of the options. */
+  allowFreeText?: boolean;
+  /** Free-text entry is masked (secret entry such as an API key); the renderer hides input. */
+  masked?: boolean;
+  /** Allow submitting empty free text. */
+  allowEmpty?: boolean;
+  /** Placeholder shown in the free-text field. */
+  placeholder?: string;
+  /** Maximum options shown before scrolling (renderer hint). */
+  maxVisible?: number;
+  /** Pre-selected option values and/or prefilled free text. */
+  default?: IActionDefault;
+}
+/**
+ * The user's answer to an {@link IActionRequest}. `answer` carries the selected option values and/or
+ * the typed text; `cancelled` means the user dismissed the request, or no interactive renderer was
+ * available to answer it.
+ */
+type TActionResponse = {
+  type: 'answer';
+  values: readonly string[];
+  text?: string;
+} | {
+  type: 'cancelled';
+};
+/**
+ * The injected "ask the user" port — a single seam reachable by every interaction source (command
+ * execution now; tool execution for model-issued questions later) and rendered per-environment by each
+ * transport. The concurrency model (broadcast to attached interactive channels, first answer wins,
+ * later answers for an already-resolved `id` ignored) is owned by the port implementation, not the
+ * contract.
+ */
+interface IUserInteraction {
+  ask(request: IActionRequest): Promise<TActionResponse>;
+}
+/**
+ * The catalog a search tool loads through — the port `IToolExecutionContext.deferredTools` carries.
+ *
+ * Narrow on purpose: a tool that can list and load must not be able to register, remove or execute.
+ */
+interface IDeferredToolCatalog {
+  /**
+   * Deferred tools not yet loaded — the population a search can still discover. Empty while
+   * deferral is not engaged, because nothing is withheld then.
+   */
+  listDeferredTools(): IToolSchema[];
+  /**
+   * Mark the named deferred tools loaded for the rest of the session and return their schemas. A
+   * resident name is returned as it is (it was never withheld); an unknown name throws, naming the
+   * entry, and then nothing is loaded — the check runs over every name before the first load.
+   */
+  loadDeferredTools(names: readonly string[]): IToolSchema[];
+}
+//#endregion
 //#region src/interfaces/tool.d.ts
+/** Awaited host admission for effective parameters, immediately before a tool body. */
+type TToolEffectAdmission<TParameters = TToolParameters> = (parameters: TParameters) => Promise<void>;
 type TToolContextExtensionValue = TUniversalValue | Date | Error | TLoggerData | TContextData | TToolParameters | TToolMetadata;
 /**
  * Tool metadata structure - specific type definition
@@ -926,6 +959,10 @@ interface IToolResult {
 interface IToolExecutionContext {
   toolName: string;
   parameters: TToolParameters;
+  /** Runtime-owned barrier, consumed after permission and before entering the tool. */
+  beforeToolEffect?: TToolEffectAdmission;
+  /** Journaled pre-effect request/response port for admission-aware runtime wrappers. */
+  continuation?: IToolContinuation;
   /**
    * Run-scoped cancellation signal (CORE-018). Long-running tools MUST honor it: terminate
    * the underlying work (kill the child process, abort the network request) and return an
@@ -1046,6 +1083,11 @@ interface IParameterValidationResult {
 interface IToolContract<TParameters = TToolParameters, TResult = IToolResult> {
   readonly schema: IToolSchema;
   execute(parameters: TParameters, context: IToolExecutionContext): Promise<TResult>;
+  /**
+   * Wrappers await admission exactly once with final canonical arguments after preconditions and before
+   * the body. Denial returns without admission. Admission failures propagate unchanged.
+   */
+  executeWithAdmission?(parameters: TParameters, context: IToolExecutionContext, admit: TToolEffectAdmission<TParameters>): Promise<TResult>;
   validate(parameters: TParameters): boolean;
   validateParameters(parameters: TParameters): IParameterValidationResult;
   getDescription(): string;
@@ -1196,7 +1238,7 @@ interface IProviderDefinition {
    * LLM nodes' single `COST_PER_TOKEN_USD` scalar. The correct long-term home is the per-model
    * {@link IProviderModelCatalogEntry.costPerInputToken}/`costPerOutputToken`; this flat scalar is a
    * fidelity-preserving interim used only while model catalogs are `status:'unavailable'` (no per-model
-   * entries to attach cost to). Consumed by the collapsed `llm-text` node's `maxCostUsd` estimation. Absent
+   * entries to attach cost to). Consumed by the collapsed `llm-text` node's cost estimate. Absent
    * means cost is unknown for this provider and estimators must degrade explicitly.
    */
   costPerTokenUsd?: number;
@@ -1317,6 +1359,17 @@ interface ICapabilityDescriptor {
  * re-exports it. A transport-origin command runs as a local one by default; an optional policy may restrict (REMOTE-006).
  */
 type TCommandInvocationSource = 'user' | 'model' | 'remote';
+/**
+ * Whether a `'remote'`-sourced invocation is provably on this machine. The loopback-bound WS carrier
+ * (the desktop app and a locally served browser page) is `'local'`; the device-mesh/WebRTC carrier
+ * proves no locality ("a browser device proves no locality, so it is treated as another machine" —
+ * the same rule `ConnectionAuthority` already applies to pairing), so it is always `'remote'`. Absent
+ * (an in-process caller, an older host, or a test double) defaults to `'local'` — the allow-by-default
+ * posture the rest of the command layer already uses. A command that runs code from outside the
+ * session (installing a plugin) reads this to refuse a remote device even though `'remote'`-sourced
+ * commands otherwise run like a local one (REMOTE-006).
+ */
+type TCommandSurfaceLocality = 'local' | 'remote';
 /**
  * Who runs a command. `'runtime'`: the process that owns the session runs it, whichever surface
  * sent it. `'client'`: the surface the user is typing into runs it itself, because what it does
@@ -1351,6 +1404,11 @@ interface ICommand {
   execute?: (args: string) => void | Promise<void>;
   /** Full SKILL.md content (only for skill commands) */
   skillContent?: string;
+  /**
+   * The absolute directory the skill's file is in, when its source can name one. `${CLAUDE_SKILL_DIR}`
+   * in the skill's content expands to it, so the skill can point at files it ships beside SKILL.md.
+   */
+  skillDirectory?: string;
   /** Hint for the expected argument (Claude Code frontmatter) */
   argumentHint?: string;
   /** When true, models cannot invoke this skill autonomously */
@@ -1607,6 +1665,26 @@ interface IBackgroundTaskError {
  * TYPE-003: alias of the `agent-core` usage-triple SSOT (`ITokenUsage`) — derived, not re-declared.
  */
 type IBackgroundTaskUsage = ITokenUsage;
+/**
+ * Issue #3288 §1: why a tool call inside a task was refused — the same distinction the session-layer
+ * enforcer already records for its own denials (`hasApprover ? 'user' : 'no-approver'`), named here for
+ * a task's result rather than a live session's denial log: `'no-approver'` when no approver was
+ * attached at all (print mode, a truly headless run); `'denied-by-person'` when one was attached and
+ * answered no; `'approver-error'` when it threw or rejected instead of answering — a broken approver
+ * still fails the call closed rather than hanging it; `'cancelled'` when the task ended (finished,
+ * failed, or was stopped) before an attached approver's answer arrived — a `false` produced by that
+ * cutoff is not the same fact as a person's own denial, so it is never counted as one.
+ */
+type TBackgroundTaskPermissionDenialReason = 'denied-by-person' | 'no-approver' | 'approver-error' | 'cancelled';
+/**
+ * How many of a task's tool calls were refused, and why. Additive: a caller only reads this when at
+ * least one call was refused, so a task with none carries no new field — the result of a task that
+ * finished exactly as it always did is unchanged.
+ */
+interface IBackgroundTaskDeniedToolCalls {
+  readonly total: number;
+  readonly byReason: Readonly<Record<TBackgroundTaskPermissionDenialReason, number>>;
+}
 interface IBaseBackgroundTaskResult {
   taskId: string;
   output: string;
@@ -1616,6 +1694,8 @@ interface IAgentBackgroundTaskResult extends IBaseBackgroundTaskResult {
   kind: 'agent';
   /** ANALYTICS-001 (Phase 2): total token usage of an agent task, attributed to it in the parent log. */
   usage?: IBackgroundTaskUsage;
+  /** Issue #3288 §1: present only when the task had at least one tool call refused. */
+  deniedToolCalls?: IBackgroundTaskDeniedToolCalls;
 }
 interface IProcessBackgroundTaskResult extends IBaseBackgroundTaskResult {
   kind: 'process';
@@ -1861,7 +1941,7 @@ interface ISubagentJobState extends Pick<IBackgroundTaskState<'agent'>, 'id' | '
   error?: string;
 }
 //#endregion
-//#region ../agent-interface-session/dist/node/session-contracts-Cv9Jeiyw.d.ts
+//#region ../agent-interface-session/dist/node/session-contracts-C4R5bYiU.d.ts
 //#endregion
 //#region src/session-loop-contracts.d.ts
 /** A self-paced loop's durable lifecycle, independent of its disposable wake timer. */
@@ -2105,7 +2185,7 @@ interface ISessionReplayValidationResult {
  */
 type TWorkspaceRelation = 'same-worktree' | 'same-repo' | 'different-repo' | 'unknown';
 //#endregion
-//#region ../agent-framework/dist/node/createInteractiveRuntime-DSLwJcwG.d.ts
+//#region ../agent-framework/dist/node/createInteractiveRuntime-BhC0t5ec.d.ts
 //#region src/effort/effort-resolution.d.ts
 type TEffortSelection = TModelEffort | 'auto';
 type TEffortSource = 'command' | 'flag' | 'environment' | 'settings' | 'preset' | 'model-default';
@@ -2300,10 +2380,25 @@ interface ISessionUsageRecord {
 //#region src/command-api/agent-job-roles.d.ts
 /** Starting, steering and ending subagent jobs. */
 interface IAgentJobDispatch {
+  /**
+   * #3282 §4: the agent switcher's roster — `definedIn` is a plain-words location (a discovered
+   * file's path, or "Built-in") a person picking an agent can read.
+   */
   listAgentDefinitions(): Array<{
     name: string;
     description: string;
+    definedIn: string;
   }>;
+  /**
+   * #3282 §4: the agent type `/agent <name>` (no prompt) currently selects — the agent switcher
+   * shows it checked. Never throws; a host without the agent runtime just has the fallback default.
+   */
+  getDefaultAgentType(): string;
+  /**
+   * #3282 §4: `/agent <name>` (bare, no prompt) sets this — the agent type used as the default
+   * `agentType` whenever one is not otherwise named. Throws if the agent runtime is unavailable.
+   */
+  setDefaultAgentType(agentType: string): void;
   listAgentJobs(): ISubagentJobState[];
   spawnAgentJob(input: {
     agentType: string;
@@ -2379,7 +2474,7 @@ interface IAgentJobMonitors {
 interface IAgentJobLogs {
   readBackgroundTaskLog(taskId: string, cursor?: IBackgroundTaskLogCursor): Promise<IBackgroundTaskLogPage>;
 }
-/** Aggregate: all 15 members remain source-compatible. Declare a role port instead of this. */
+/** Aggregate of the five role interfaces above, kept source-compatible. Declare a role port instead of this. */
 interface IAgentJobHostContext extends IAgentJobDispatch, IAgentJobGroups, IAgentJobSchedules, IAgentJobMonitors, IAgentJobLogs {}
 //#endregion
 //#region src/command-api/preset/preset-application-types.d.ts
@@ -2563,9 +2658,22 @@ interface IPermissionRuleLayer {
   readonly deny: readonly string[];
   readonly ask: readonly string[];
 }
+/** One rule to remove from the settings layer it was declared in (#3282 §4a). */
+interface IPermissionRuleRemoval {
+  /** The `scope` of the {@link IPermissionRuleLayer} the rule was read from. */
+  readonly scope: string;
+  readonly kind: 'allow' | 'deny' | 'ask';
+  readonly pattern: string;
+}
 /** Where each configured permission rule comes from, read fresh on every call. */
 interface ICommandPermissionRulesAdapter {
   readLayers(): readonly IPermissionRuleLayer[];
+  /**
+   * #3282 §4a: remove one declared rule from its settings layer. Optional — a host with no write
+   * target for any layer (read-only rule discovery) makes rule removal fail EXPLICITLY wherever it
+   * is offered, never a silent no-op. Returns `false` when no writable layer matched the removal.
+   */
+  removeRule?(removal: IPermissionRuleRemoval): boolean;
 }
 /** How shell commands are confined: not at all, confined without prompts, or confined and asked. */
 type TSandboxCommandMode = 'off' | 'auto-allow' | 'regular';
@@ -2661,6 +2769,15 @@ interface ICommandMCPActivationSummary {
   readonly provenanceId: string;
   readonly definitionFingerprint: string;
   readonly securityIdentity: string;
+  /**
+   * #3282 §4 part b-2: this process's live connection outcome for an `allowed` server — absent for
+   * one that is not `allowed`, or has not been attempted yet. `'failed'`'s reason is
+   * {@link connectionFailureReason}; a connected server's tool names are {@link toolNames}.
+   */
+  readonly connection?: 'connected' | 'failed';
+  readonly connectionFailureReason?: string;
+  /** The names of the tools this server currently contributes; empty when not connected. */
+  readonly toolNames?: readonly string[];
 }
 /**
  * A definition-source-level problem — issue #2794: a configuration root that is not an object, no
@@ -2781,6 +2898,33 @@ interface ICommandMCPActivationAdapter {
    * a name it already had. Called once per sign-in that returned tools.
    */
   oauthToolsAdded?(serverId: string, added: readonly string[]): void;
+  /**
+   * #3282 §4 part b-2: `/mcp reload` and the Settings screen's "Reload servers" button. Retries
+   * every allowed server that is not currently connected; a server already connected is left
+   * running. Never rejects: a server that still cannot connect keeps its `list()` failure reason.
+   * Absent: the host offers no reload (the button/command then say so).
+   */
+  reload?(): Promise<{
+    readonly tools: readonly IToolWithEventService[];
+    readonly connectedServerIds: readonly string[];
+    readonly failedServerIds: readonly string[];
+    /**
+     * Identifies this call's staged tool provenance for `reloadToolsAdded`; absent when there is
+     * nothing to acknowledge (no server newly connected). Two `reload()` calls outstanding at once
+     * — `/mcp reload` runs inline, unblocked by the mid-turn gate, and an `update-settings` write
+     * is fire-and-forget, so this is reachable, not hypothetical — join the same connection pass
+     * and get the same token back; a fresh call started only after the last one's token was
+     * acknowledged gets a new one.
+     */
+    readonly reloadToken?: string;
+  }>;
+  /**
+   * Which of `reload`'s tools the session actually took, keyed to the `reloadToken` it returned;
+   * any other was left out for a name it already had. `token` not matching the currently staged
+   * reload — already committed, or superseded by a later call — makes this a no-op, so a late or
+   * duplicate acknowledgement can never clear or corrupt a different reload's provenance.
+   */
+  reloadToolsAdded?(token: string, added: readonly string[]): void;
 }
 /**
  * PEER-004 (#1863): a live session this one can address, as the operator sees it.
@@ -3219,6 +3363,17 @@ interface ICommandHostUserInteraction {
    */
   getUserInteraction(): IUserInteraction | undefined;
 }
+/**
+ * Whether THIS session is running with no provider configured yet (issue #3282 §3 setup mode).
+ *
+ * Exists for exactly one command (`/provider add`, deciding hot-swap vs. restart) — never inferred
+ * from settings, because an ordinary session started from an env-default provider also has none
+ * persisted. The member is optional so a host with no concept of setup mode costs nothing and is
+ * correctly read as "not in it" (`?.() === true`), never mistaken for a required capability.
+ */
+interface ICommandHostSetupState {
+  isSetupRequired?(): boolean;
+}
 /** Re-applying preset-owned configuration to the live session. */
 interface ICommandHostPresetApplication {
   /** Apply an additive response style to the live system prompt. */
@@ -3257,6 +3412,12 @@ interface ICommandHostContextReferences {
 interface ICommandHostWorkspace {
   getCwd(): string;
   getCommandInvocationSource(): TCommandInvocationSource;
+  /**
+   * #3282 §4 part b-2: whether THIS invocation is provably on this machine. Optional so an older or
+   * narrower host still satisfies this interface; a caller that needs it treats a missing method the
+   * same as `'local'` (allow-by-default, matching the rest of the command layer).
+   */
+  getCommandSurfaceLocality?(): TCommandSurfaceLocality;
 }
 /** What commands and skills this host can dispatch. */
 interface ICommandHostCatalog {
@@ -3338,8 +3499,8 @@ interface ICommandHostTerminalHandoff {
 interface ICommandHostAdapterAccess {
   getCommandHostAdapters?(): ICommandHostAdapters;
 }
-/** Aggregate: all 47 members remain source-compatible. Declare a role port instead of this. */
-interface ICommandHostContext extends ICommandHostSessionAccess, ICommandHostAgentJobs, ICommandHostUserInteraction, ICommandHostPresetApplication, ICommandHostContextWindow, ICommandHostContextReferences, ICommandHostWorkspace, ICommandHostCatalog, ICommandHostCheckpoints, ICommandHostMemory, ICommandHostBackgroundTasks, ICommandHostGoal, ICommandHostPlan, ICommandHostTerminalHandoff, ICommandHostAdapterAccess {}
+/** Aggregate: all 48 members remain source-compatible. Declare a role port instead of this. */
+interface ICommandHostContext extends ICommandHostSessionAccess, ICommandHostAgentJobs, ICommandHostUserInteraction, ICommandHostSetupState, ICommandHostPresetApplication, ICommandHostContextWindow, ICommandHostContextReferences, ICommandHostWorkspace, ICommandHostCatalog, ICommandHostCheckpoints, ICommandHostMemory, ICommandHostBackgroundTasks, ICommandHostGoal, ICommandHostPlan, ICommandHostTerminalHandoff, ICommandHostAdapterAccess {}
 //#endregion
 //#region src/command-api/contracts.d.ts
 type TSystemCommandLifecycle = 'inline' | 'blocking' | 'background';
@@ -3468,6 +3629,8 @@ interface IMCPActivationAuditEvent {
 interface IMCPActivationApprovalStore {
   list(): readonly IMCPActivationApprovalRecord[];
   put(record: IMCPActivationApprovalRecord): void;
+  /** Durable stores can commit a decision and its audit receipt in one transaction. */
+  putWithAudit?(record: IMCPActivationApprovalRecord, event: IMCPActivationAuditEvent): void;
   listAudit(): readonly IMCPActivationAuditEvent[];
   appendAudit(event: IMCPActivationAuditEvent): void;
 }