@tangle-network/sdk-provider-cli-base 0.13.19 → 0.13.20

package/dist/adapters/amp/index.d.mts

@@ -1,4 +1,4 @@
-import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase } from "../../index-BpO3fvbf.mjs";
+import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase } from "../../index-D-Q-mvnc.mjs";
 import { StreamParserConfig } from "@tangle-network/sdk-cli-runner";
 import { McpConfig, ProviderConfig, StreamEvent } from "@tangle-network/agent-interface";
 

package/dist/adapters/amp/index.mjs

@@ -1,4 +1,4 @@
-import { At as toolStartEvents, Dt as textDeltaEvents, F as jsonEventParser, H as CliProviderAdapterBase, K as localMcpArgv, Tt as sessionObservedEvents, V as recordCliTokenUsage, kt as toolResultEvents, q as localMcpEnv, wt as reasoningEvents } from "../../src-Fn8Pu1xq.mjs";
+import { At as toolResultEvents, Et as sessionObservedEvents, H as recordCliTokenUsage, I as jsonEventParser, J as localMcpEnv, Ot as textDeltaEvents, Tt as reasoningEvents, U as CliProviderAdapterBase, jt as toolStartEvents, q as localMcpArgv } from "../../src-DVjhkeiC.mjs";
 //#region src/adapters/amp/types.ts
 /**
 * Type guard for AMP events.

package/dist/adapters/factory-droids/index.d.mts

@@ -1,4 +1,4 @@
-import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase } from "../../index-BpO3fvbf.mjs";
+import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase } from "../../index-D-Q-mvnc.mjs";
 import { StreamParserConfig } from "@tangle-network/sdk-cli-runner";
 import { AgentExecutionInput, AgentExecutionResult, BackendCapabilities, InteractionResponse, McpConfig, ProviderConfig, SdkHostServices, StreamEvent } from "@tangle-network/agent-interface";
 

package/dist/adapters/factory-droids/index.mjs

@@ -1,4 +1,4 @@
-import { At as toolStartEvents, Dt as textDeltaEvents, Et as streamPartBase, F as jsonEventParser, G as isLocalMcpConfig, H as CliProviderAdapterBase, J as enabledInteractionKinds, K as localMcpArgv, Tt as sessionObservedEvents, V as recordCliTokenUsage, et as withTurnInteractions, k as McpInteractionSupport, kt as toolResultEvents, q as localMcpEnv, wt as reasoningEvents } from "../../src-Fn8Pu1xq.mjs";
+import { A as McpInteractionSupport, At as toolResultEvents, Dt as streamPartBase, Et as sessionObservedEvents, H as recordCliTokenUsage, I as jsonEventParser, J as localMcpEnv, K as isLocalMcpConfig, Ot as textDeltaEvents, Tt as reasoningEvents, U as CliProviderAdapterBase, Y as enabledInteractionKinds, jt as toolStartEvents, q as localMcpArgv, tt as withTurnInteractions } from "../../src-DVjhkeiC.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import { InteractionKind } from "@tangle-network/agent-interface";
 import { mkdir, readFile, writeFile } from "node:fs/promises";

package/dist/adapters/grok/index.d.mts

@@ -1,4 +1,4 @@
-import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase } from "../../index-BpO3fvbf.mjs";
+import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase } from "../../index-D-Q-mvnc.mjs";
 import { StreamParserConfig } from "@tangle-network/sdk-cli-runner";
 import { StreamEvent } from "@tangle-network/agent-interface";
 

package/dist/adapters/grok/index.mjs

@@ -1,4 +1,4 @@
-import { H as CliProviderAdapterBase, I as plaintextResponseParser, Tt as sessionObservedEvents, ot as prependPromptSection } from "../../src-Fn8Pu1xq.mjs";
+import { Et as sessionObservedEvents, L as plaintextResponseParser, U as CliProviderAdapterBase, st as prependPromptSection } from "../../src-DVjhkeiC.mjs";
 //#region src/adapters/grok/adapter.ts
 const DECLARE_MODEL = "d=$HOME/.grok; [ -z \"$GROK_HOME\" ] || d=$GROK_HOME; t=\"[model.\\\"$1\\\"]\"; mkdir -p \"$d\" && { grep -qxF \"$t\" \"$d/managed_config.toml\" 2>/dev/null || printf '%s\\nmodel = \"%s\"\\n' \"$t\" \"$1\" >> \"$d/managed_config.toml\"; }; shift; exec \"$@\"";
 var GrokProviderAdapter = class extends CliProviderAdapterBase {

package/dist/adapters/hermes/index.d.mts

@@ -1,4 +1,4 @@
-import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase, n as HarnessId } from "../../index-BpO3fvbf.mjs";
+import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase, n as HarnessId } from "../../index-D-Q-mvnc.mjs";
 import { i as PreparedAttachment } from "../../prompt-input-CD7okX8T.mjs";
 import { StreamParserConfig } from "@tangle-network/sdk-cli-runner";
 import { InputPart, McpConfig, StreamEvent } from "@tangle-network/agent-interface";

package/dist/adapters/hermes/index.mjs

@@ -1,4 +1,4 @@
-import { G as isLocalMcpConfig, H as CliProviderAdapterBase, I as plaintextResponseParser, K as localMcpArgv, Tt as sessionObservedEvents, V as recordCliTokenUsage, it as partitionImageAttachments, ot as prependPromptSection, q as localMcpEnv } from "../../src-Fn8Pu1xq.mjs";
+import { Et as sessionObservedEvents, H as recordCliTokenUsage, J as localMcpEnv, K as isLocalMcpConfig, L as plaintextResponseParser, U as CliProviderAdapterBase, at as partitionImageAttachments, q as localMcpArgv, st as prependPromptSection } from "../../src-DVjhkeiC.mjs";
 import { resolveTangleRouterDefaults } from "@tangle-network/agent-interface";
 import { lchown, mkdir, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";

package/dist/adapters/nanoclaw/index.d.mts

@@ -1,4 +1,4 @@
-import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase, n as HarnessId } from "../../index-BpO3fvbf.mjs";
+import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase, n as HarnessId } from "../../index-D-Q-mvnc.mjs";
 import { StreamParserConfig } from "@tangle-network/sdk-cli-runner";
 import { StreamEvent } from "@tangle-network/agent-interface";
 

package/dist/adapters/nanoclaw/index.mjs

@@ -1,4 +1,4 @@
-import { H as CliProviderAdapterBase, I as plaintextResponseParser, Tt as sessionObservedEvents, V as recordCliTokenUsage, ot as prependPromptSection, z as parseCliUsageLine } from "../../src-Fn8Pu1xq.mjs";
+import { B as parseCliUsageLine, Et as sessionObservedEvents, H as recordCliTokenUsage, L as plaintextResponseParser, U as CliProviderAdapterBase, st as prependPromptSection } from "../../src-DVjhkeiC.mjs";
 import { normalizeOpenAiCompatibleBaseUrl, resolveTangleRouterDefaults } from "@tangle-network/agent-interface";
 import { join } from "node:path";
 //#region src/adapters/nanoclaw/adapter.ts

package/dist/adapters/openclaw/index.d.mts

@@ -1,4 +1,4 @@
-import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase, n as HarnessId, o as WorkspacePlanApplication } from "../../index-BpO3fvbf.mjs";
+import { Mt as CliExecArgs, Pt as CliProviderConfig, Rt as ExecutionState, ht as CliProviderAdapterBase, n as HarnessId, o as WorkspacePlanApplication } from "../../index-D-Q-mvnc.mjs";
 import { StreamParserConfig } from "@tangle-network/sdk-cli-runner";
 import { CliAuthFile, ProviderConfig, StreamEvent } from "@tangle-network/agent-interface";
 

package/dist/adapters/openclaw/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as finalTextEvent, H as CliProviderAdapterBase, Tt as sessionObservedEvents, V as recordCliTokenUsage, ot as prependPromptSection, x as nativeEffortArgs } from "../../src-Fn8Pu1xq.mjs";
+import { Et as sessionObservedEvents, H as recordCliTokenUsage, S as nativeEffortArgs, U as CliProviderAdapterBase, st as prependPromptSection, wt as finalTextEvent } from "../../src-DVjhkeiC.mjs";
 import { resolveTangleRouterDefaults } from "@tangle-network/agent-interface";
 //#region src/adapters/openclaw/adapter.ts
 /** openclaw's default agent id; the synthesized config declares only it. */

package/dist/adapters/prime/index.d.mts

@@ -1,4 +1,4 @@
-import { At as AcpTurn, Ct as AcpBridgeConfig, dn as AcpBridgeSpawn, fn as AcpProcessSpec, mt as AcpProviderAdapterBase, wt as AcpContentBlock } from "../../index-BpO3fvbf.mjs";
+import { At as AcpTurn, Ct as AcpBridgeConfig, mn as AcpProcessSpec, mt as AcpProviderAdapterBase, pn as AcpBridgeSpawn, wt as AcpContentBlock } from "../../index-D-Q-mvnc.mjs";
 import { i as PreparedAttachment } from "../../prompt-input-CD7okX8T.mjs";
 import { PRIME_AGENT_DIR_ENV_VAR, PRIME_AGENT_DIR_ENV_VARS, PRIME_HARNESS_STATE_ENV_DENYLIST, PRIME_KERNEL_DEAD_MARKERS, PRIME_KERNEL_ENV_PASSTHROUGH, PRIME_MCP_UNSUPPORTED_REASON, PrimeHarnessStateError, PrimeMaterializeOptions, PrimeProfileControls, PrimeProfileControls as PrimeProfileControls$1, PrimeProfileError, PrimeProfileSkill, PrimeProfileSubagent, assertPrimeModelAgreement, hasPrimeProfileMaterial, matchPrimeKernelDeadMarker, materializePrimeProfileControls, primeAgentDirEnv, primeProfileNeedsAgentDir, primeSubagentEntryId as subagentEntryId, primeThinkingLevel, prunePrimeProfileMaterial, readPrimeProfileControls } from "@tangle-network/agent-profile-materialize";
 import { RpcBridge } from "@tangle-network/sdk-cli-runner";

package/dist/adapters/prime/index.mjs

@@ -1,4 +1,4 @@
-import { Ft as spawnAcpBridge, L as AcpProviderAdapterBase, ot as prependPromptSection } from "../../src-Fn8Pu1xq.mjs";
+import { It as spawnAcpBridge, R as AcpProviderAdapterBase, st as prependPromptSection } from "../../src-DVjhkeiC.mjs";
 import { PRIME_AGENT_DIR_ENV_VAR, PRIME_AGENT_DIR_ENV_VARS, PRIME_HARNESS_STATE_ENV_DENYLIST, PRIME_HARNESS_STATE_ENV_DENYLIST as PRIME_HARNESS_STATE_ENV_DENYLIST$1, PRIME_KERNEL_DEAD_MARKERS, PRIME_KERNEL_ENV_PASSTHROUGH, PRIME_KERNEL_ENV_PASSTHROUGH as PRIME_KERNEL_ENV_PASSTHROUGH$1, PRIME_MCP_UNSUPPORTED_REASON, PrimeHarnessStateError, PrimeProfileError, assertPrimeModelAgreement, assertPrimeModelAgreement as assertPrimeModelAgreement$1, buildPiModelsConfig, hasPrimeProfileMaterial, matchPrimeKernelDeadMarker, materializePrimeProfileControls, materializePrimeProfileControls as materializePrimeProfileControls$1, primeAgentDirEnv, primeAgentDirEnv as primeAgentDirEnv$1, primeHarnessStatePath, primeProfileNeedsAgentDir, primeSubagentEntryId as subagentEntryId, primeThinkingLevel, primeThinkingLevel as primeThinkingLevel$1, prunePrimeProfileMaterial, readPrimeProfileControls, readPrimeProfileControls as readPrimeProfileControls$1, writePrimeAgentFile } from "@tangle-network/agent-profile-materialize";
 import { isAbsolute, join, relative, sep } from "node:path";
 import { existsSync, lchownSync, lstatSync, mkdirSync } from "node:fs";

package/dist/{index-BpO3fvbf.d.mts → index-D-Q-mvnc.d.mts}

@@ -3,7 +3,7 @@ import { AskUserBridge, DEFAULT_INTERACTION_DECISION_TIMEOUT_MS as PERMISSION_DE
 import * as _$_tangle_network_agent_profile_materialize0 from "@tangle-network/agent-profile-materialize";
 import { BindableLaunchControl, CODEX_DISABLED_FEATURE_ARGS, HarnessId, HarnessId as HarnessId$1, WorkspacePlan, WorkspacePlanApplication, WorkspacePlanApplication as WorkspacePlanApplication$1, WorkspacePlanReceipt, codexDeveloperInstructionArgs } from "@tangle-network/agent-profile-materialize";
 import { CliExecResult, CliExitResult, CliLauncher, CliProcess, CliSpawnConfig, InvalidAttachmentError, JsonRpcError, RpcBridge, StreamParserConfig } from "@tangle-network/sdk-cli-runner";
-import { AgentExecutionInput, AgentExecutionOutcome, AgentExecutionResult, AgentProfile, AgentProfileSecretProvider, AgentRuntimeAttachments, BackendCapabilities, BackendMessage, CliAuthFile, DurablePlan, GetMessagesOptions, HarnessType, InputPart, InteractionExecutionBinding, InteractionResponse, LocalMcpConfig, McpConfig, McpStatusResponse, PlanProviderState, ProviderConfig, ReasoningEffort, RequestedInteractions, SdkHostServices, SdkPlanHost, SdkProviderAdapter, StreamEvent, TokenUsage, ToolPart } from "@tangle-network/agent-interface";
+import { AgentExecutionInput, AgentExecutionOutcome, AgentExecutionResult, AgentProfile, AgentProfileSecretProvider, AgentRuntimeAttachments, BackendCapabilities, BackendMessage, CliAuthFile, DurablePlan, GetMessagesOptions, HarnessType, InputPart, InteractionExecutionBinding, InteractionResponse, LocalMcpConfig, McpConfig, McpStatusResponse, PlanProviderState, ProviderConfig, ProxySecretReceipt, ReasoningEffort, RequestedInteractions, SdkHostServices, SdkPlanHost, SdkProviderAdapter, StreamEvent, TokenUsage, ToolPart } from "@tangle-network/agent-interface";
 import { HarnessSessionContract } from "@tangle-network/cli-agent-registry/session-contract";
 import * as _$_tangle_network_sdk_session_persistence0 from "@tangle-network/sdk-session-persistence";
 import { MessagePart, MessageStore, PersistedMessage, PersistedSession, SessionStore, readProviderMessageIds } from "@tangle-network/sdk-session-persistence";
@@ -39,16 +39,23 @@ declare function spawnAcpBridge(request: AcpBridgeSpawn): RpcBridge;
 declare const SECRET_REFERENCE_PREFIX = "TANGLE_PROFILE_SECRET_";
 declare const SECRET_REFERENCE: RegExp;
 declare function requireRecord(raw: unknown, message: string): Record<string, unknown>;
+type SecretProfileMcpStdio<Value = string> = {
+  name: string;
+  command: readonly string[];
+  environment: Readonly<Record<string, Value>>;
+};
 /** One MCP server the executor serves for a secret launch. */
 type SecretProfileMcpServer = {
   name: string; /** The server's own upstream URL. */
   url: string; /** Every header the upstream needs, credentials included. */
   headers: Readonly<Record<string, string>>;
-} | {
-  name: string; /** A stdio server whose environment names a secret: the executor runs this command outside the session's UID and serves it over loopback. */
-  command: readonly string[]; /** Its environment with every secret reference resolved. */
-  environment: Readonly<Record<string, string>>; /** Every secret value its environment references, whatever its length. */
+} | (SecretProfileMcpStdio & {
+  /** The executor serves this command unless its lease supplies an acknowledged direct projection. */
+  /** Every secret value its environment references, whatever its length. */
   secrets: readonly string[];
+});
+type SecretProfileMcpLease = (() => void | Promise<void>) & {
+  /** Only the accepted executor may supply this after exact Host installation ACK. */readonly directStdio?: readonly SecretProfileMcpStdio[];
 };
 /** The executor's loopback proxy for a secret launch's MCP servers. */
 type SecretProfileMcpCredentialProxy = {
@@ -56,19 +63,25 @@ type SecretProfileMcpCredentialProxy = {
     placeholder: string;
     urls: Readonly<Record<string, string>>;
   }>; /** Serve `servers` before resolving; release acknowledges lease termination before the turn settles or its scope is reused. */
-  lease(scope: string, servers: ReadonlyArray<SecretProfileMcpServer>): Promise<() => void | Promise<void>>; /** The scope's session ended: its placeholder is refused from now on and its stdio servers are stopped. */
+  lease(scope: string, servers: ReadonlyArray<SecretProfileMcpServer>, input?: AgentExecutionInput): Promise<SecretProfileMcpLease>; /** The scope's session ended: its placeholder is refused from now on and its stdio servers are stopped. */
   forget(scope: string): Promise<void>;
 };
+/** Snapshot the executor's projection; it may only replace an admitted stdio launch. */
+declare function directStdioMcpServers(lease: SecretProfileMcpLease | undefined, servers: readonly (SecretProfileMcpStdio<unknown> | {
+  name: string;
+  url: string;
+})[]): ReadonlyMap<string, SecretProfileMcpStdio>;
 /** A config value with its secret references resolved, or undefined. */
-declare function resolveReferences(value: string, references: Readonly<Record<string, string>>): string | undefined;
+declare function resolveReferences(value: string, references: Readonly<Record<string, string>>, secrets?: Set<string>): string | undefined;
 /** A stdio server the executor can run: its command and its environment with every secret reference resolved. */
 declare function servableStdioServer(name: string, entry: Record<string, unknown>, references: Readonly<Record<string, string>>): SecretProfileMcpServer | string;
 /** A remote server the executor can serve: its fixed upstream URL and every header with its secret references resolved. */
 declare function servableMcpServer(name: string, entry: Record<string, unknown>, references: Readonly<Record<string, string>>): SecretProfileMcpServer | string;
-/** Join the queue at `key`; `previous` settles when earlier holders release. */
+/** Earlier physical cleanup must succeed before another holder is admitted. */
 declare function joinQueue(queues: Map<string, Promise<void>>, key: string): {
   previous: Promise<void>;
   release: () => void;
+  retryCleanup(retry: () => Promise<void>): void;
 };
 declare function untilSettledOrAborted(previous: Promise<void>, signal: AbortSignal): Promise<void>;
 /** Every native discovery ancestor is sealed and free of ambient configuration. */
@@ -76,6 +89,7 @@ declare function assertSealedNativeSearchPath(cwd: string, configNames: readonly
 declare function secretSessionTurnQueue(view: string): {
   previous: Promise<void>;
   release: () => void;
+  retryCleanup(retry: () => Promise<void>): void;
 };
 /** An HTTP URL on loopback with an explicit port and no URL credentials. */
 declare function isLoopbackEndpoint(value: unknown): boolean;
@@ -108,6 +122,8 @@ interface CliProviderLogger {
   error(message: string, meta?: Record<string, unknown>): void;
 }
 interface CliProviderConfig {
+  /** Trusted executor metadata binds a native credential generation to its revision. */
+  proxySecretReceipt?: ProxySecretReceipt;
   /** Trusted native auth projection resolved by the owning execution host. */
   nativeAuthEnv?: Record<string, string>;
   nativeAuthSecretEnv?: string;
@@ -1250,5 +1266,5 @@ declare function homeXdgEnv(home: string): {
   XDG_STATE_HOME: string;
 };
 //#endregion
-export { deterministicFilePartId as $, SecretProfileMcpCredentialProxy as $t, isTrustedStoreBinary as A, AcpTurn as At, localMcpEnv as B, InteractionToggleKind as Bt, createRepeatedToolFailureGuard as C, AcpBridgeConfig as Ct, NATIVE_SESSION_CONTRACTS$1 as D, AcpNewSessionResult as Dt, nativeEffortArgs as E, AcpInitializeResult as Et, parseCliUsageLine as F, CliProviderLogger as Ft, InteractionMcpServerConfig$1 as G, interactionToggleEnabled as Gt, AskUserBridge as H, ToolCallState as Ht, readCliTokenUsage as I, CliProviderOptions as It, RequestPlanBridge as J, turnInteractionEnabled as Jt, PermissionPromptBridge as K, readEphemeralContext as Kt, recordCliTokenUsage as L, EphemeralContextInput as Lt, refuseSecretLaunch as M, CliExecArgs as Mt, resolveExecutableRealpath as N, CliExecutionInput as Nt, SEALED_NATIVE_HOME_LAYOUT as O, AcpPromptResult as Ot, accumulateCliTokenUsage as P, CliProviderConfig as Pt, deriveFilePart as Q, SECRET_REFERENCE_PREFIX as Qt, isLocalMcpConfig as R, ExecutionState as Rt, RepeatedToolFailureGuardOptions as S, ACP_PROTOCOL_VERSION as St, kimiThinkingArgs as T, AcpInitializeParams as Tt, DEFAULT_INTERACTION_MCP_SERVER_NAME as U, TurnEndReason as Ut, McpInteractionSupport as V, PerTurnInteractionInput as Vt, InteractionMcpServer$1 as W, enabledInteractionKinds as Wt, interactionMcpToolName as X, withTurnInteractions as Xt, brokerInteractionTools$1 as Y, withEphemeralContext as Yt, buildFileUrl as Z, SECRET_REFERENCE as Zt, toolResultEvents as _, createExecutionState as _t, PERMISSION_DECISION_TIMEOUT_MS as a, requireRecord as an, MANAGED_QUOTE_VERSION_HEADER as at, secretMcpScope as b, PreparedCliLaunch as bt, homeXdgEnv as c, servableMcpServer as cn, jsonEventParser as ct, finalTextEvent as d, AcpBridgeSpawn as dn, SessionRehydrationError as dt, SecretProfileMcpServer as en, inferMediaType as et, reasoningEvents as f, AcpProcessSpec as fn, rejectNotLaunched as ft, textSnapshotEvents as g, runtimeSecretsOverlay as gt, textDeltaEvents as h, CliProviderAdapterBase as ht, InteractionHttpBridge as i, joinQueue as in, EXECUTION_TRACE_HEADER as it, provenStoreBinary as j, acpContentText as jt, assertSealedNativeHome as k, AcpSessionUpdateParams as kt, TerminalPlanSupport as l, servableStdioServer as ln, plaintextResponseParser as lt, streamPartBase as m, AcpProviderAdapterBase as mt, HarnessId$1 as n, isLoopbackEndpoint as nn, EXECUTION_CORRELATION_HEADERS as nt, WorkspacePlanApplication$1 as o, resolveReferences as on, executionCorrelationHeaders as ot, sessionObservedEvents as p, spawnAcpBridge as pn, wasNeverLaunched as pt, RequestPermissionBridge as q, turnEndReason as qt, InteractionBroker$1 as r, isPlainRecord as rn, EXECUTION_ID_HEADER as rt, codexDeveloperInstructionArgs as s, secretSessionTurnQueue as sn, PlaintextResponse as st, CODEX_DISABLED_FEATURE_ARGS as t, assertSealedNativeSearchPath as tn, trackFilePart as tt, TerminalPlanSupportOptions as u, untilSettledOrAborted as un, InvalidAttachmentError as ut, toolStartEvents as v, CliTurnProcess as vt, trackReasoningBlock as w, AcpContentBlock as wt, RepeatedToolFailure as x, ACP_MIN_PROTOCOL_VERSION as xt, forgetSessionScopes as y, CliTurnSpawn as yt, localMcpArgv as z, InteractionToggleConfig as zt };
-//# sourceMappingURL=index-BpO3fvbf.d.mts.map
+export { deterministicFilePartId as $, SecretProfileMcpCredentialProxy as $t, isTrustedStoreBinary as A, AcpTurn as At, localMcpEnv as B, InteractionToggleKind as Bt, createRepeatedToolFailureGuard as C, AcpBridgeConfig as Ct, NATIVE_SESSION_CONTRACTS$1 as D, AcpNewSessionResult as Dt, nativeEffortArgs as E, AcpInitializeResult as Et, parseCliUsageLine as F, CliProviderLogger as Ft, InteractionMcpServerConfig$1 as G, interactionToggleEnabled as Gt, AskUserBridge as H, ToolCallState as Ht, readCliTokenUsage as I, CliProviderOptions as It, RequestPlanBridge as J, turnInteractionEnabled as Jt, PermissionPromptBridge as K, readEphemeralContext as Kt, recordCliTokenUsage as L, EphemeralContextInput as Lt, refuseSecretLaunch as M, CliExecArgs as Mt, resolveExecutableRealpath as N, CliExecutionInput as Nt, SEALED_NATIVE_HOME_LAYOUT as O, AcpPromptResult as Ot, accumulateCliTokenUsage as P, CliProviderConfig as Pt, deriveFilePart as Q, SECRET_REFERENCE_PREFIX as Qt, isLocalMcpConfig as R, ExecutionState as Rt, RepeatedToolFailureGuardOptions as S, ACP_PROTOCOL_VERSION as St, kimiThinkingArgs as T, AcpInitializeParams as Tt, DEFAULT_INTERACTION_MCP_SERVER_NAME as U, TurnEndReason as Ut, McpInteractionSupport as V, PerTurnInteractionInput as Vt, InteractionMcpServer$1 as W, enabledInteractionKinds as Wt, interactionMcpToolName as X, withTurnInteractions as Xt, brokerInteractionTools$1 as Y, withEphemeralContext as Yt, buildFileUrl as Z, SECRET_REFERENCE as Zt, toolResultEvents as _, createExecutionState as _t, PERMISSION_DECISION_TIMEOUT_MS as a, isPlainRecord as an, MANAGED_QUOTE_VERSION_HEADER as at, secretMcpScope as b, PreparedCliLaunch as bt, homeXdgEnv as c, resolveReferences as cn, jsonEventParser as ct, finalTextEvent as d, servableStdioServer as dn, SessionRehydrationError as dt, SecretProfileMcpLease as en, inferMediaType as et, reasoningEvents as f, untilSettledOrAborted as fn, rejectNotLaunched as ft, textSnapshotEvents as g, runtimeSecretsOverlay as gt, textDeltaEvents as h, spawnAcpBridge as hn, CliProviderAdapterBase as ht, InteractionHttpBridge as i, isLoopbackEndpoint as in, EXECUTION_TRACE_HEADER as it, provenStoreBinary as j, acpContentText as jt, assertSealedNativeHome as k, AcpSessionUpdateParams as kt, TerminalPlanSupport as l, secretSessionTurnQueue as ln, plaintextResponseParser as lt, streamPartBase as m, AcpProcessSpec as mn, AcpProviderAdapterBase as mt, HarnessId$1 as n, assertSealedNativeSearchPath as nn, EXECUTION_CORRELATION_HEADERS as nt, WorkspacePlanApplication$1 as o, joinQueue as on, executionCorrelationHeaders as ot, sessionObservedEvents as p, AcpBridgeSpawn as pn, wasNeverLaunched as pt, RequestPermissionBridge as q, turnEndReason as qt, InteractionBroker$1 as r, directStdioMcpServers as rn, EXECUTION_ID_HEADER as rt, codexDeveloperInstructionArgs as s, requireRecord as sn, PlaintextResponse as st, CODEX_DISABLED_FEATURE_ARGS as t, SecretProfileMcpServer as tn, trackFilePart as tt, TerminalPlanSupportOptions as u, servableMcpServer as un, InvalidAttachmentError as ut, toolStartEvents as v, CliTurnProcess as vt, trackReasoningBlock as w, AcpContentBlock as wt, RepeatedToolFailure as x, ACP_MIN_PROTOCOL_VERSION as xt, forgetSessionScopes as y, CliTurnSpawn as yt, localMcpArgv as z, InteractionToggleConfig as zt };
+//# sourceMappingURL=index-D-Q-mvnc.d.mts.map

package/dist/index.d.mts

@@ -1,3 +1,3 @@
-import { $ as deterministicFilePartId, $t as SecretProfileMcpCredentialProxy, A as isTrustedStoreBinary, At as AcpTurn, B as localMcpEnv, Bt as InteractionToggleKind, C as createRepeatedToolFailureGuard, Ct as AcpBridgeConfig, D as NATIVE_SESSION_CONTRACTS, Dt as AcpNewSessionResult, E as nativeEffortArgs, Et as AcpInitializeResult, F as parseCliUsageLine, Ft as CliProviderLogger, G as InteractionMcpServerConfig, Gt as interactionToggleEnabled, H as AskUserBridge, Ht as ToolCallState, I as readCliTokenUsage, It as CliProviderOptions, J as RequestPlanBridge, Jt as turnInteractionEnabled, K as PermissionPromptBridge, Kt as readEphemeralContext, L as recordCliTokenUsage, Lt as EphemeralContextInput, M as refuseSecretLaunch, Mt as CliExecArgs, N as resolveExecutableRealpath, Nt as CliExecutionInput, O as SEALED_NATIVE_HOME_LAYOUT, Ot as AcpPromptResult, P as accumulateCliTokenUsage, Pt as CliProviderConfig, Q as deriveFilePart, Qt as SECRET_REFERENCE_PREFIX, R as isLocalMcpConfig, Rt as ExecutionState, S as RepeatedToolFailureGuardOptions, St as ACP_PROTOCOL_VERSION, T as kimiThinkingArgs, Tt as AcpInitializeParams, U as DEFAULT_INTERACTION_MCP_SERVER_NAME, Ut as TurnEndReason, V as McpInteractionSupport, Vt as PerTurnInteractionInput, W as InteractionMcpServer, Wt as enabledInteractionKinds, X as interactionMcpToolName, Xt as withTurnInteractions, Y as brokerInteractionTools, Yt as withEphemeralContext, Z as buildFileUrl, Zt as SECRET_REFERENCE, _ as toolResultEvents, _t as createExecutionState, a as PERMISSION_DECISION_TIMEOUT_MS, an as requireRecord, at as MANAGED_QUOTE_VERSION_HEADER, b as secretMcpScope, bt as PreparedCliLaunch, c as homeXdgEnv, cn as servableMcpServer, ct as jsonEventParser, d as finalTextEvent, dn as AcpBridgeSpawn, dt as SessionRehydrationError, en as SecretProfileMcpServer, et as inferMediaType, f as reasoningEvents, fn as AcpProcessSpec, ft as rejectNotLaunched, g as textSnapshotEvents, gt as runtimeSecretsOverlay, h as textDeltaEvents, ht as CliProviderAdapterBase, i as InteractionHttpBridge, in as joinQueue, it as EXECUTION_TRACE_HEADER, j as provenStoreBinary, jt as acpContentText, k as assertSealedNativeHome, kt as AcpSessionUpdateParams, l as TerminalPlanSupport, ln as servableStdioServer, lt as plaintextResponseParser, m as streamPartBase, mt as AcpProviderAdapterBase, n as HarnessId, nn as isLoopbackEndpoint, nt as EXECUTION_CORRELATION_HEADERS, o as WorkspacePlanApplication, on as resolveReferences, ot as executionCorrelationHeaders, p as sessionObservedEvents, pn as spawnAcpBridge, pt as wasNeverLaunched, q as RequestPermissionBridge, qt as turnEndReason, r as InteractionBroker, rn as isPlainRecord, rt as EXECUTION_ID_HEADER, s as codexDeveloperInstructionArgs, sn as secretSessionTurnQueue, st as PlaintextResponse, t as CODEX_DISABLED_FEATURE_ARGS, tn as assertSealedNativeSearchPath, tt as trackFilePart, u as TerminalPlanSupportOptions, un as untilSettledOrAborted, ut as InvalidAttachmentError, v as toolStartEvents, vt as CliTurnProcess, w as trackReasoningBlock, wt as AcpContentBlock, x as RepeatedToolFailure, xt as ACP_MIN_PROTOCOL_VERSION, y as forgetSessionScopes, yt as CliTurnSpawn, z as localMcpArgv, zt as InteractionToggleConfig } from "./index-BpO3fvbf.mjs";
+import { $ as deterministicFilePartId, $t as SecretProfileMcpCredentialProxy, A as isTrustedStoreBinary, At as AcpTurn, B as localMcpEnv, Bt as InteractionToggleKind, C as createRepeatedToolFailureGuard, Ct as AcpBridgeConfig, D as NATIVE_SESSION_CONTRACTS, Dt as AcpNewSessionResult, E as nativeEffortArgs, Et as AcpInitializeResult, F as parseCliUsageLine, Ft as CliProviderLogger, G as InteractionMcpServerConfig, Gt as interactionToggleEnabled, H as AskUserBridge, Ht as ToolCallState, I as readCliTokenUsage, It as CliProviderOptions, J as RequestPlanBridge, Jt as turnInteractionEnabled, K as PermissionPromptBridge, Kt as readEphemeralContext, L as recordCliTokenUsage, Lt as EphemeralContextInput, M as refuseSecretLaunch, Mt as CliExecArgs, N as resolveExecutableRealpath, Nt as CliExecutionInput, O as SEALED_NATIVE_HOME_LAYOUT, Ot as AcpPromptResult, P as accumulateCliTokenUsage, Pt as CliProviderConfig, Q as deriveFilePart, Qt as SECRET_REFERENCE_PREFIX, R as isLocalMcpConfig, Rt as ExecutionState, S as RepeatedToolFailureGuardOptions, St as ACP_PROTOCOL_VERSION, T as kimiThinkingArgs, Tt as AcpInitializeParams, U as DEFAULT_INTERACTION_MCP_SERVER_NAME, Ut as TurnEndReason, V as McpInteractionSupport, Vt as PerTurnInteractionInput, W as InteractionMcpServer, Wt as enabledInteractionKinds, X as interactionMcpToolName, Xt as withTurnInteractions, Y as brokerInteractionTools, Yt as withEphemeralContext, Z as buildFileUrl, Zt as SECRET_REFERENCE, _ as toolResultEvents, _t as createExecutionState, a as PERMISSION_DECISION_TIMEOUT_MS, an as isPlainRecord, at as MANAGED_QUOTE_VERSION_HEADER, b as secretMcpScope, bt as PreparedCliLaunch, c as homeXdgEnv, cn as resolveReferences, ct as jsonEventParser, d as finalTextEvent, dn as servableStdioServer, dt as SessionRehydrationError, en as SecretProfileMcpLease, et as inferMediaType, f as reasoningEvents, fn as untilSettledOrAborted, ft as rejectNotLaunched, g as textSnapshotEvents, gt as runtimeSecretsOverlay, h as textDeltaEvents, hn as spawnAcpBridge, ht as CliProviderAdapterBase, i as InteractionHttpBridge, in as isLoopbackEndpoint, it as EXECUTION_TRACE_HEADER, j as provenStoreBinary, jt as acpContentText, k as assertSealedNativeHome, kt as AcpSessionUpdateParams, l as TerminalPlanSupport, ln as secretSessionTurnQueue, lt as plaintextResponseParser, m as streamPartBase, mn as AcpProcessSpec, mt as AcpProviderAdapterBase, n as HarnessId, nn as assertSealedNativeSearchPath, nt as EXECUTION_CORRELATION_HEADERS, o as WorkspacePlanApplication, on as joinQueue, ot as executionCorrelationHeaders, p as sessionObservedEvents, pn as AcpBridgeSpawn, pt as wasNeverLaunched, q as RequestPermissionBridge, qt as turnEndReason, r as InteractionBroker, rn as directStdioMcpServers, rt as EXECUTION_ID_HEADER, s as codexDeveloperInstructionArgs, sn as requireRecord, st as PlaintextResponse, t as CODEX_DISABLED_FEATURE_ARGS, tn as SecretProfileMcpServer, tt as trackFilePart, u as TerminalPlanSupportOptions, un as servableMcpServer, ut as InvalidAttachmentError, v as toolStartEvents, vt as CliTurnProcess, w as trackReasoningBlock, wt as AcpContentBlock, x as RepeatedToolFailure, xt as ACP_MIN_PROTOCOL_VERSION, y as forgetSessionScopes, yt as CliTurnSpawn, z as localMcpArgv, zt as InteractionToggleConfig } from "./index-D-Q-mvnc.mjs";
 import { a as partitionImageAttachments, i as PreparedAttachment, n as MAX_TOTAL_INLINE_IMAGE_BYTES, o as preparePromptInputParts, r as PROMPT_SECTION_SEPARATOR, s as prependPromptSection, t as MAX_INLINE_IMAGE_BYTES } from "./prompt-input-CD7okX8T.mjs";
-export { ACP_MIN_PROTOCOL_VERSION, ACP_PROTOCOL_VERSION, AcpBridgeConfig, AcpBridgeSpawn, AcpContentBlock, AcpInitializeParams, AcpInitializeResult, AcpNewSessionResult, AcpProcessSpec, AcpPromptResult, AcpProviderAdapterBase, AcpSessionUpdateParams, AcpTurn, AskUserBridge, CODEX_DISABLED_FEATURE_ARGS, CliExecArgs, CliExecutionInput, CliProviderAdapterBase, CliProviderConfig, CliProviderLogger, CliProviderOptions, CliTurnProcess, CliTurnSpawn, DEFAULT_INTERACTION_MCP_SERVER_NAME, EXECUTION_CORRELATION_HEADERS, EXECUTION_ID_HEADER, EXECUTION_TRACE_HEADER, EphemeralContextInput, ExecutionState, HarnessId, InteractionBroker, InteractionHttpBridge, InteractionMcpServer, InteractionMcpServerConfig, InteractionToggleConfig, InteractionToggleKind, InvalidAttachmentError, MANAGED_QUOTE_VERSION_HEADER, MAX_INLINE_IMAGE_BYTES, MAX_TOTAL_INLINE_IMAGE_BYTES, McpInteractionSupport, NATIVE_SESSION_CONTRACTS, PERMISSION_DECISION_TIMEOUT_MS, PROMPT_SECTION_SEPARATOR, PerTurnInteractionInput, PermissionPromptBridge, PlaintextResponse, PreparedAttachment, PreparedCliLaunch, RepeatedToolFailure, RepeatedToolFailureGuardOptions, RequestPermissionBridge, RequestPlanBridge, SEALED_NATIVE_HOME_LAYOUT, SECRET_REFERENCE, SECRET_REFERENCE_PREFIX, SecretProfileMcpCredentialProxy, SecretProfileMcpServer, SessionRehydrationError, TerminalPlanSupport, TerminalPlanSupportOptions, ToolCallState, TurnEndReason, WorkspacePlanApplication, accumulateCliTokenUsage, acpContentText, assertSealedNativeHome, assertSealedNativeSearchPath, brokerInteractionTools, buildFileUrl, codexDeveloperInstructionArgs, createExecutionState, createRepeatedToolFailureGuard, deriveFilePart, deterministicFilePartId, enabledInteractionKinds, executionCorrelationHeaders, finalTextEvent, forgetSessionScopes, homeXdgEnv, inferMediaType, interactionMcpToolName, interactionToggleEnabled, isLocalMcpConfig, isLoopbackEndpoint, isPlainRecord, isTrustedStoreBinary, joinQueue, jsonEventParser, kimiThinkingArgs, localMcpArgv, localMcpEnv, nativeEffortArgs, parseCliUsageLine, partitionImageAttachments, plaintextResponseParser, preparePromptInputParts, prependPromptSection, provenStoreBinary, readCliTokenUsage, readEphemeralContext, reasoningEvents, recordCliTokenUsage, refuseSecretLaunch, rejectNotLaunched, requireRecord, resolveExecutableRealpath, resolveReferences, runtimeSecretsOverlay, secretMcpScope, secretSessionTurnQueue, servableMcpServer, servableStdioServer, sessionObservedEvents, spawnAcpBridge, streamPartBase, textDeltaEvents, textSnapshotEvents, toolResultEvents, toolStartEvents, trackFilePart, trackReasoningBlock, turnEndReason, turnInteractionEnabled, untilSettledOrAborted, wasNeverLaunched, withEphemeralContext, withTurnInteractions };
+export { ACP_MIN_PROTOCOL_VERSION, ACP_PROTOCOL_VERSION, AcpBridgeConfig, AcpBridgeSpawn, AcpContentBlock, AcpInitializeParams, AcpInitializeResult, AcpNewSessionResult, AcpProcessSpec, AcpPromptResult, AcpProviderAdapterBase, AcpSessionUpdateParams, AcpTurn, AskUserBridge, CODEX_DISABLED_FEATURE_ARGS, CliExecArgs, CliExecutionInput, CliProviderAdapterBase, CliProviderConfig, CliProviderLogger, CliProviderOptions, CliTurnProcess, CliTurnSpawn, DEFAULT_INTERACTION_MCP_SERVER_NAME, EXECUTION_CORRELATION_HEADERS, EXECUTION_ID_HEADER, EXECUTION_TRACE_HEADER, EphemeralContextInput, ExecutionState, HarnessId, InteractionBroker, InteractionHttpBridge, InteractionMcpServer, InteractionMcpServerConfig, InteractionToggleConfig, InteractionToggleKind, InvalidAttachmentError, MANAGED_QUOTE_VERSION_HEADER, MAX_INLINE_IMAGE_BYTES, MAX_TOTAL_INLINE_IMAGE_BYTES, McpInteractionSupport, NATIVE_SESSION_CONTRACTS, PERMISSION_DECISION_TIMEOUT_MS, PROMPT_SECTION_SEPARATOR, PerTurnInteractionInput, PermissionPromptBridge, PlaintextResponse, PreparedAttachment, PreparedCliLaunch, RepeatedToolFailure, RepeatedToolFailureGuardOptions, RequestPermissionBridge, RequestPlanBridge, SEALED_NATIVE_HOME_LAYOUT, SECRET_REFERENCE, SECRET_REFERENCE_PREFIX, SecretProfileMcpCredentialProxy, SecretProfileMcpLease, SecretProfileMcpServer, SessionRehydrationError, TerminalPlanSupport, TerminalPlanSupportOptions, ToolCallState, TurnEndReason, WorkspacePlanApplication, accumulateCliTokenUsage, acpContentText, assertSealedNativeHome, assertSealedNativeSearchPath, brokerInteractionTools, buildFileUrl, codexDeveloperInstructionArgs, createExecutionState, createRepeatedToolFailureGuard, deriveFilePart, deterministicFilePartId, directStdioMcpServers, enabledInteractionKinds, executionCorrelationHeaders, finalTextEvent, forgetSessionScopes, homeXdgEnv, inferMediaType, interactionMcpToolName, interactionToggleEnabled, isLocalMcpConfig, isLoopbackEndpoint, isPlainRecord, isTrustedStoreBinary, joinQueue, jsonEventParser, kimiThinkingArgs, localMcpArgv, localMcpEnv, nativeEffortArgs, parseCliUsageLine, partitionImageAttachments, plaintextResponseParser, preparePromptInputParts, prependPromptSection, provenStoreBinary, readCliTokenUsage, readEphemeralContext, reasoningEvents, recordCliTokenUsage, refuseSecretLaunch, rejectNotLaunched, requireRecord, resolveExecutableRealpath, resolveReferences, runtimeSecretsOverlay, secretMcpScope, secretSessionTurnQueue, servableMcpServer, servableStdioServer, sessionObservedEvents, spawnAcpBridge, streamPartBase, textDeltaEvents, textSnapshotEvents, toolResultEvents, toolStartEvents, trackFilePart, trackReasoningBlock, turnEndReason, turnInteractionEnabled, untilSettledOrAborted, wasNeverLaunched, withEphemeralContext, withTurnInteractions };

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { $ as withEphemeralContext, A as TerminalPlanSupport, At as toolStartEvents, B as readCliTokenUsage, C as SEALED_NATIVE_HOME_LAYOUT, Ct as finalTextEvent, D as refuseSecretLaunch, Dt as textDeltaEvents, E as provenStoreBinary, Et as streamPartBase, F as jsonEventParser, Ft as spawnAcpBridge, G as isLocalMcpConfig, H as CliProviderAdapterBase, I as plaintextResponseParser, J as enabledInteractionKinds, K as localMcpArgv, L as AcpProviderAdapterBase, M as InteractionMcpServer, Mt as ACP_MIN_PROTOCOL_VERSION, N as brokerInteractionTools, Nt as ACP_PROTOCOL_VERSION, O as resolveExecutableRealpath, Ot as textSnapshotEvents, P as interactionMcpToolName, Pt as acpContentText, Q as turnInteractionEnabled, R as accumulateCliTokenUsage, S as NATIVE_SESSION_CONTRACTS, St as homeXdgEnv, T as isTrustedStoreBinary, Tt as sessionObservedEvents, U as createRepeatedToolFailureGuard, V as recordCliTokenUsage, W as createExecutionState, X as readEphemeralContext, Y as interactionToggleEnabled, Z as turnEndReason, _ as servableMcpServer, _t as EXECUTION_CORRELATION_HEADERS, a as codexDeveloperInstructionArgs, at as preparePromptInputParts, b as kimiThinkingArgs, bt as MANAGED_QUOTE_VERSION_HEADER, c as SECRET_REFERENCE, ct as deriveFilePart, d as isLoopbackEndpoint, dt as trackFilePart, et as withTurnInteractions, f as isPlainRecord, ft as InvalidAttachmentError, g as secretSessionTurnQueue, gt as runtimeSecretsOverlay, h as resolveReferences, ht as wasNeverLaunched, i as PERMISSION_DECISION_TIMEOUT_MS, it as partitionImageAttachments, j as DEFAULT_INTERACTION_MCP_SERVER_NAME, jt as trackReasoningBlock, k as McpInteractionSupport, kt as toolResultEvents, l as SECRET_REFERENCE_PREFIX, lt as deterministicFilePartId, m as requireRecord, mt as rejectNotLaunched, n as InteractionBroker, nt as MAX_TOTAL_INLINE_IMAGE_BYTES, o as forgetSessionScopes, ot as prependPromptSection, p as joinQueue, pt as SessionRehydrationError, q as localMcpEnv, r as InteractionHttpBridge, rt as PROMPT_SECTION_SEPARATOR, s as secretMcpScope, st as buildFileUrl, t as CODEX_DISABLED_FEATURE_ARGS, tt as MAX_INLINE_IMAGE_BYTES, u as assertSealedNativeSearchPath, ut as inferMediaType, v as servableStdioServer, vt as EXECUTION_ID_HEADER, w as assertSealedNativeHome, wt as reasoningEvents, x as nativeEffortArgs, xt as executionCorrelationHeaders, y as untilSettledOrAborted, yt as EXECUTION_TRACE_HEADER, z as parseCliUsageLine } from "./src-Fn8Pu1xq.mjs";
-export { ACP_MIN_PROTOCOL_VERSION, ACP_PROTOCOL_VERSION, AcpProviderAdapterBase, CODEX_DISABLED_FEATURE_ARGS, CliProviderAdapterBase, DEFAULT_INTERACTION_MCP_SERVER_NAME, EXECUTION_CORRELATION_HEADERS, EXECUTION_ID_HEADER, EXECUTION_TRACE_HEADER, InteractionBroker, InteractionHttpBridge, InteractionMcpServer, InvalidAttachmentError, MANAGED_QUOTE_VERSION_HEADER, MAX_INLINE_IMAGE_BYTES, MAX_TOTAL_INLINE_IMAGE_BYTES, McpInteractionSupport, NATIVE_SESSION_CONTRACTS, PERMISSION_DECISION_TIMEOUT_MS, PROMPT_SECTION_SEPARATOR, SEALED_NATIVE_HOME_LAYOUT, SECRET_REFERENCE, SECRET_REFERENCE_PREFIX, SessionRehydrationError, TerminalPlanSupport, accumulateCliTokenUsage, acpContentText, assertSealedNativeHome, assertSealedNativeSearchPath, brokerInteractionTools, buildFileUrl, codexDeveloperInstructionArgs, createExecutionState, createRepeatedToolFailureGuard, deriveFilePart, deterministicFilePartId, enabledInteractionKinds, executionCorrelationHeaders, finalTextEvent, forgetSessionScopes, homeXdgEnv, inferMediaType, interactionMcpToolName, interactionToggleEnabled, isLocalMcpConfig, isLoopbackEndpoint, isPlainRecord, isTrustedStoreBinary, joinQueue, jsonEventParser, kimiThinkingArgs, localMcpArgv, localMcpEnv, nativeEffortArgs, parseCliUsageLine, partitionImageAttachments, plaintextResponseParser, preparePromptInputParts, prependPromptSection, provenStoreBinary, readCliTokenUsage, readEphemeralContext, reasoningEvents, recordCliTokenUsage, refuseSecretLaunch, rejectNotLaunched, requireRecord, resolveExecutableRealpath, resolveReferences, runtimeSecretsOverlay, secretMcpScope, secretSessionTurnQueue, servableMcpServer, servableStdioServer, sessionObservedEvents, spawnAcpBridge, streamPartBase, textDeltaEvents, textSnapshotEvents, toolResultEvents, toolStartEvents, trackFilePart, trackReasoningBlock, turnEndReason, turnInteractionEnabled, untilSettledOrAborted, wasNeverLaunched, withEphemeralContext, withTurnInteractions };
+import { $ as turnInteractionEnabled, A as McpInteractionSupport, At as toolResultEvents, B as parseCliUsageLine, C as NATIVE_SESSION_CONTRACTS, Ct as homeXdgEnv, D as provenStoreBinary, Dt as streamPartBase, E as isTrustedStoreBinary, Et as sessionObservedEvents, F as interactionMcpToolName, Ft as acpContentText, G as createExecutionState, H as recordCliTokenUsage, I as jsonEventParser, It as spawnAcpBridge, J as localMcpEnv, K as isLocalMcpConfig, L as plaintextResponseParser, M as DEFAULT_INTERACTION_MCP_SERVER_NAME, Mt as trackReasoningBlock, N as InteractionMcpServer, Nt as ACP_MIN_PROTOCOL_VERSION, O as refuseSecretLaunch, Ot as textDeltaEvents, P as brokerInteractionTools, Pt as ACP_PROTOCOL_VERSION, Q as turnEndReason, R as AcpProviderAdapterBase, S as nativeEffortArgs, St as executionCorrelationHeaders, T as assertSealedNativeHome, Tt as reasoningEvents, U as CliProviderAdapterBase, V as readCliTokenUsage, W as createRepeatedToolFailureGuard, X as interactionToggleEnabled, Y as enabledInteractionKinds, Z as readEphemeralContext, _ as secretSessionTurnQueue, _t as runtimeSecretsOverlay, a as codexDeveloperInstructionArgs, at as partitionImageAttachments, b as untilSettledOrAborted, bt as EXECUTION_TRACE_HEADER, c as SECRET_REFERENCE, ct as buildFileUrl, d as directStdioMcpServers, dt as inferMediaType, et as withEphemeralContext, f as isLoopbackEndpoint, ft as trackFilePart, g as resolveReferences, gt as wasNeverLaunched, h as requireRecord, ht as rejectNotLaunched, i as PERMISSION_DECISION_TIMEOUT_MS, it as PROMPT_SECTION_SEPARATOR, j as TerminalPlanSupport, jt as toolStartEvents, k as resolveExecutableRealpath, kt as textSnapshotEvents, l as SECRET_REFERENCE_PREFIX, lt as deriveFilePart, m as joinQueue, mt as SessionRehydrationError, n as InteractionBroker, nt as MAX_INLINE_IMAGE_BYTES, o as forgetSessionScopes, ot as preparePromptInputParts, p as isPlainRecord, pt as InvalidAttachmentError, q as localMcpArgv, r as InteractionHttpBridge, rt as MAX_TOTAL_INLINE_IMAGE_BYTES, s as secretMcpScope, st as prependPromptSection, t as CODEX_DISABLED_FEATURE_ARGS, tt as withTurnInteractions, u as assertSealedNativeSearchPath, ut as deterministicFilePartId, v as servableMcpServer, vt as EXECUTION_CORRELATION_HEADERS, w as SEALED_NATIVE_HOME_LAYOUT, wt as finalTextEvent, x as kimiThinkingArgs, xt as MANAGED_QUOTE_VERSION_HEADER, y as servableStdioServer, yt as EXECUTION_ID_HEADER, z as accumulateCliTokenUsage } from "./src-DVjhkeiC.mjs";
+export { ACP_MIN_PROTOCOL_VERSION, ACP_PROTOCOL_VERSION, AcpProviderAdapterBase, CODEX_DISABLED_FEATURE_ARGS, CliProviderAdapterBase, DEFAULT_INTERACTION_MCP_SERVER_NAME, EXECUTION_CORRELATION_HEADERS, EXECUTION_ID_HEADER, EXECUTION_TRACE_HEADER, InteractionBroker, InteractionHttpBridge, InteractionMcpServer, InvalidAttachmentError, MANAGED_QUOTE_VERSION_HEADER, MAX_INLINE_IMAGE_BYTES, MAX_TOTAL_INLINE_IMAGE_BYTES, McpInteractionSupport, NATIVE_SESSION_CONTRACTS, PERMISSION_DECISION_TIMEOUT_MS, PROMPT_SECTION_SEPARATOR, SEALED_NATIVE_HOME_LAYOUT, SECRET_REFERENCE, SECRET_REFERENCE_PREFIX, SessionRehydrationError, TerminalPlanSupport, accumulateCliTokenUsage, acpContentText, assertSealedNativeHome, assertSealedNativeSearchPath, brokerInteractionTools, buildFileUrl, codexDeveloperInstructionArgs, createExecutionState, createRepeatedToolFailureGuard, deriveFilePart, deterministicFilePartId, directStdioMcpServers, enabledInteractionKinds, executionCorrelationHeaders, finalTextEvent, forgetSessionScopes, homeXdgEnv, inferMediaType, interactionMcpToolName, interactionToggleEnabled, isLocalMcpConfig, isLoopbackEndpoint, isPlainRecord, isTrustedStoreBinary, joinQueue, jsonEventParser, kimiThinkingArgs, localMcpArgv, localMcpEnv, nativeEffortArgs, parseCliUsageLine, partitionImageAttachments, plaintextResponseParser, preparePromptInputParts, prependPromptSection, provenStoreBinary, readCliTokenUsage, readEphemeralContext, reasoningEvents, recordCliTokenUsage, refuseSecretLaunch, rejectNotLaunched, requireRecord, resolveExecutableRealpath, resolveReferences, runtimeSecretsOverlay, secretMcpScope, secretSessionTurnQueue, servableMcpServer, servableStdioServer, sessionObservedEvents, spawnAcpBridge, streamPartBase, textDeltaEvents, textSnapshotEvents, toolResultEvents, toolStartEvents, trackFilePart, trackReasoningBlock, turnEndReason, turnInteractionEnabled, untilSettledOrAborted, wasNeverLaunched, withEphemeralContext, withTurnInteractions };

package/dist/{src-Fn8Pu1xq.mjs → src-DVjhkeiC.mjs}

@@ -2,7 +2,7 @@ import { DEFAULT_INTERACTION_DECISION_TIMEOUT_MS as PERMISSION_DECISION_TIMEOUT_
 import { CODEX_DISABLED_FEATURE_ARGS, HARNESS_LAUNCH_MATERIALIZE_OPTIONS, UNAVAILABLE_AGENT_PROFILE_SECRET_PROVIDER, applyWorkspacePlanWithSecretProvider, bindLaunchToolBinDirs, bindSecretSessionView, codexDeveloperInstructionArgs, enforceWorkspacePlanSupport, ensurePublicConcurrentProfileRoots, joinSystemPromptAdditions, keepsHarnessSystemPrompt, materializeProfile, modelIdsMatch, parseSandboxToolBinDirs, preparePublicConcurrentProfileRevision, prepareSecretConcurrentProfileRevision, resolveAgentProfileResources, secretSessionViewWorkspace } from "@tangle-network/agent-profile-materialize";
 import { BridgeClosedError, InvalidAttachmentError, JsonRpcError, RpcRequestTimeoutError, execCli, launchCliProcess, resolveRawCapturePath, spawnCliProcess, spawnRpcBridge } from "@tangle-network/sdk-cli-runner";
 import { createHash, createHmac, randomUUID } from "node:crypto";
-import { AgentExecutionError, AgentExecutionOutcomeSchema, AgentRuntimeAttachmentsSchema, InteractionExecutionBindingSchema, InteractionKind, REASONING_EFFORTS, agentProfileSchema, nativeReasoningControl, normalizeInputParts } from "@tangle-network/agent-interface";
+import { AgentExecutionError, AgentExecutionOutcomeSchema, AgentRuntimeAttachmentsSchema, InteractionExecutionBindingSchema, InteractionKind, ProxySecretReceiptSchema, REASONING_EFFORTS, agentProfileSchema, nativeReasoningControl, normalizeInputParts } from "@tangle-network/agent-interface";
 import { HarnessSessionContractError, assertArgvHonoursSessionContract, assertFlagsHonourSessionContract, assertStoreLocationHonoursSessionContract, compileSessionStoreGlob } from "@tangle-network/cli-agent-registry/session-contract";
 import { MAX_SECRET_PROFILE_REPLAY_CHARS, RESTORED_SESSION_CONTEXT_PREAMBLE, RESTORED_SESSION_CONTEXT_TAG, buildCompleteForkContextBlock, buildForkContextBlock, createMessageStore, createSessionStore, forkSessionWithMessages, readProviderMessageIds } from "@tangle-network/sdk-session-persistence";
 import { mkdir, open, readdir, writeFile } from "node:fs/promises";
@@ -19,6 +19,7 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { DatabaseSync } from "node:sqlite";
 import { StringDecoder } from "node:string_decoder";
 import { DEFAULT_INTERACTION_MCP_SERVER_NAME, InteractionMcpServer, interactionMcpToolName } from "@tangle-network/agent-core/interactions/mcp";
+import { addAbortListener } from "node:events";
 import { isRecord, isRecord as isPlainRecord } from "@tangle-network/agent-core";
 //#region src/acp-process-launch.ts
 /** Spawn an ACP agent over NDJSON stdio from `env` alone, never the sidecar's own environment. The adapter owns abort, so no signal. */
@@ -452,6 +453,8 @@ var InitializationTracker = class {
 */
 function overlayProviderConfig(provider, initialConfig, config) {
 	const nextConfig = cloneConfig(initialConfig);
+	const proxySecretReceipt = config.proxySecretReceipt;
+	if (proxySecretReceipt !== void 0) nextConfig.proxySecretReceipt = ProxySecretReceiptSchema.parse(proxySecretReceipt);
 	const runtimeAttachments = config.runtimeAttachments;
 	if (runtimeAttachments !== void 0) nextConfig.runtimeAttachments = structuredClone(runtimeAttachments);
 	const runtimeSecrets = config.runtimeSecrets;
@@ -1606,8 +1609,10 @@ var CliAdapterProfile = class extends CliAdapterLifecycle {
 		});
 		return plan;
 	}
-	async applyProfileResources(inputProfile, workspaceRoot, ownerId, sessionId) {
+	async applyProfileResources(inputProfile, workspaceRoot, inputOwnerId, sessionId) {
 		const profile = inputProfile ?? {};
+		let ownerId = inputOwnerId;
+		if (ownerId && this.config.proxySecretReceipt) ownerId = createHash("sha256").update(ownerId).update("\0").update(JSON.stringify(this.config.proxySecretReceipt)).digest("hex");
 		const harness = this.profileHarness;
 		if (!harness) {
 			if (hasPortableProfileControls(profile) || this.config.runtimeAttachments !== void 0) throw new Error(`${this.provider} does not support portable AgentProfile controls`);
@@ -1618,9 +1623,11 @@ var CliAdapterProfile = class extends CliAdapterLifecycle {
 		if (this.config.secretProfileRevisionRoot) return await this.applySecretProfileRevision(plan, this.config.secretProfileRevisionRoot, workspaceRoot, ownerId, sessionId);
 		if (this.config.publicProfileRevisionRoot) {
 			if (!ownerId) throw new Error("Concurrent public profile launch requires a session scope; idle prewarm is unsupported");
+			const roots = ensurePublicConcurrentProfileRoots(this.config.publicProfileRevisionRoot);
 			const revision = await preparePublicConcurrentProfileRevision({
 				plan,
-				...ensurePublicConcurrentProfileRoots(this.config.publicProfileRevisionRoot),
+				proxySecretReceipt: this.config.proxySecretReceipt,
+				...roots,
 				sharedWorkspaceDir: workspaceRoot,
 				ownerId,
 				secretProvider: runtimeSecretsOverlay(this.config.runtimeSecrets, this.profileSecretProvider)
@@ -1659,6 +1666,7 @@ var CliAdapterProfile = class extends CliAdapterLifecycle {
 		const roots = ensurePublicConcurrentProfileRoots(secretProfileRevisionRoot);
 		const revision = await prepareSecretConcurrentProfileRevision({
 			plan,
+			proxySecretReceipt: this.config.proxySecretReceipt,
 			providerConfig: this.secretProfileProviderConfig(),
 			...roots,
 			sharedWorkspaceDir: workspaceRoot,
@@ -4434,12 +4442,35 @@ const SECRET_REFERENCE = /\{env:(TANGLE_PROFILE_SECRET_[0-9A-F]{24})\}/g;
 function requireRecord(raw, message) {
 	return isRecord(raw) ? raw : refuseSecretLaunch(message);
 }
+/** Snapshot the executor's projection; it may only replace an admitted stdio launch. */
+function directStdioMcpServers(lease, servers) {
+	const direct = /* @__PURE__ */ new Map();
+	const projection = lease?.directStdio;
+	if (projection === void 0) return direct;
+	if (!Array.isArray(projection)) refuseSecretLaunch("Direct MCP projection must be an array");
+	for (const item of projection) {
+		const original = servers.find((server) => server.name === item?.name);
+		const environment = isRecord(item?.environment) ? { ...item.environment } : void 0;
+		if (!isRecord(item) || Object.keys(item).some((key) => ![
+			"name",
+			"command",
+			"environment"
+		].includes(key)) || !original || !("command" in original) || direct.has(item.name) || JSON.stringify(item.command) !== JSON.stringify(original.command) || !environment || Object.keys(environment).length !== Object.keys(original.environment).length || Object.keys(original.environment).some((key) => !Object.hasOwn(environment, key) || typeof environment[key] !== "string")) refuseSecretLaunch("Direct MCP projection differs from admitted stdio");
+		direct.set(item.name, Object.freeze({
+			name: item.name,
+			command: Object.freeze([...original.command]),
+			environment: Object.freeze(environment)
+		}));
+	}
+	return direct;
+}
 /** A config value with its secret references resolved, or undefined. */
-function resolveReferences(value, references) {
+function resolveReferences(value, references, secrets) {
 	let unresolved = false;
 	const resolved = value.replace(SECRET_REFERENCE, (_match, reference) => {
 		const secret = references[reference];
 		if (secret === void 0) unresolved = true;
+		if (secret) secrets?.add(secret);
 		return secret ?? "";
 	});
 	return unresolved || /\{(?:env|file):/.test(resolved) ? void 0 : resolved;
@@ -4455,13 +4486,9 @@ function servableStdioServer(name, entry, references) {
 	const secrets = /* @__PURE__ */ new Set();
 	for (const [variable, value] of Object.entries(declared)) {
 		if (typeof value !== "string") return `its ${variable} is not text`;
-		const resolved = resolveReferences(value, references);
+		const resolved = resolveReferences(value, references, secrets);
 		if (resolved === void 0) return `its ${variable} names a value the executor cannot resolve`;
 		environment[variable] = resolved;
-		for (const [, reference] of value.matchAll(SECRET_REFERENCE)) {
-			const secret = references[reference];
-			if (secret) secrets.add(secret);
-		}
 	}
 	return {
 		name,
@@ -4495,41 +4522,71 @@ function servableMcpServer(name, entry, references) {
 		headers
 	};
 }
-/** Join the queue at `key`; `previous` settles when earlier holders release. */
+const cleanupKey = Symbol.for("tangle.secret-native-turn-cleanup");
+const awaitQueuedTurn = (turn) => turn[cleanupKey]?.() ?? turn;
+/** Earlier physical cleanup must succeed before another holder is admitted. */
 function joinQueue(queues, key) {
 	const previous = queues.get(key) ?? Promise.resolve();
-	let release;
+	let finish;
+	let notify;
+	let cleanup;
+	let recovering;
+	const ready = new Promise((resolve) => {
+		notify = resolve;
+	});
 	const finished = new Promise((resolve) => {
-		release = resolve;
+		finish = resolve;
 	});
+	const release = () => {
+		finish();
+		notify();
+	};
 	const tail = previous.then(() => finished);
+	tail[cleanupKey] = async () => {
+		await awaitQueuedTurn(previous);
+		await ready;
+		if (cleanup) {
+			recovering ??= Promise.resolve().then(cleanup).then(() => {
+				cleanup = void 0;
+				release();
+			}).finally(() => {
+				recovering = void 0;
+			});
+			await recovering;
+		}
+		await tail;
+	};
 	queues.set(key, tail);
 	tail.then(() => {
+		delete tail[cleanupKey];
 		if (queues.get(key) === tail) queues.delete(key);
 	});
 	return {
-		previous,
-		release
+		previous: awaitQueuedTurn(previous),
+		release,
+		retryCleanup(retry) {
+			cleanup ??= retry;
+			notify();
+		}
 	};
 }
 function untilSettledOrAborted(previous, signal) {
 	const aborted = () => signal.reason ?? /* @__PURE__ */ new Error("Secret native turn aborted before its session view was free");
-	if (signal.aborted) return Promise.reject(aborted());
+	if (signal.aborted) {
+		previous.catch(() => {});
+		return Promise.reject(aborted());
+	}
 	return new Promise((resolve, reject) => {
-		const onAbort = () => reject(aborted());
-		signal.addEventListener("abort", onAbort, { once: true });
-		previous.then(() => {
-			signal.removeEventListener("abort", onAbort);
-			resolve();
-		});
+		const listener = addAbortListener(signal, () => reject(aborted()));
+		previous.then(resolve, reject).finally(() => listener[Symbol.dispose]());
 	});
 }
 /** Every native discovery ancestor is sealed and free of ambient configuration. */
 function assertSealedNativeSearchPath(cwd, configNames) {
-	for (let child = cwd, parent = dirname(cwd);; child = parent, parent = dirname(parent)) {
+	for (let child = cwd;; child = dirname(child)) {
 		const stat = lstatSync(child);
 		if (!stat.isDirectory() || stat.isSymbolicLink() || realpathSync(child) !== child || stat.uid !== 0 || (stat.mode & 18) !== 0 || child !== cwd && configNames.some((name) => lstatSync(join(child, name), { throwIfNoEntry: false }))) throw new Error("Secret native launch has mutable or ambient discovery authority");
-		if (parent === child) break;
+		if (dirname(child) === child) break;
 	}
 }
 /** One session view changes only after its previous physical native process exits. */
@@ -4581,6 +4638,6 @@ async function forgetSessionScopes(target) {
 	}
 }
 //#endregion
-export { withEphemeralContext as $, TerminalPlanSupport as A, toolStartEvents as At, readCliTokenUsage as B, SEALED_NATIVE_HOME_LAYOUT as C, finalTextEvent as Ct, refuseSecretLaunch as D, textDeltaEvents as Dt, provenStoreBinary as E, streamPartBase as Et, jsonEventParser as F, spawnAcpBridge as Ft, isLocalMcpConfig as G, CliProviderAdapterBase as H, plaintextResponseParser as I, enabledInteractionKinds as J, localMcpArgv as K, AcpProviderAdapterBase as L, InteractionMcpServer$1 as M, ACP_MIN_PROTOCOL_VERSION as Mt, brokerInteractionTools$1 as N, ACP_PROTOCOL_VERSION as Nt, resolveExecutableRealpath as O, textSnapshotEvents as Ot, interactionMcpToolName as P, acpContentText as Pt, turnInteractionEnabled as Q, accumulateCliTokenUsage as R, NATIVE_SESSION_CONTRACTS$1 as S, homeXdgEnv as St, isTrustedStoreBinary as T, sessionObservedEvents as Tt, createRepeatedToolFailureGuard as U, recordCliTokenUsage as V, createExecutionState as W, readEphemeralContext as X, interactionToggleEnabled as Y, turnEndReason as Z, servableMcpServer as _, EXECUTION_CORRELATION_HEADERS as _t, codexDeveloperInstructionArgs as a, preparePromptInputParts as at, kimiThinkingArgs as b, MANAGED_QUOTE_VERSION_HEADER as bt, SECRET_REFERENCE as c, deriveFilePart as ct, isLoopbackEndpoint as d, trackFilePart as dt, withTurnInteractions as et, isPlainRecord as f, InvalidAttachmentError as ft, secretSessionTurnQueue as g, runtimeSecretsOverlay as gt, resolveReferences as h, wasNeverLaunched as ht, PERMISSION_DECISION_TIMEOUT_MS as i, partitionImageAttachments as it, DEFAULT_INTERACTION_MCP_SERVER_NAME as j, trackReasoningBlock as jt, McpInteractionSupport as k, toolResultEvents as kt, SECRET_REFERENCE_PREFIX as l, deterministicFilePartId as lt, requireRecord as m, rejectNotLaunched as mt, InteractionBroker$1 as n, MAX_TOTAL_INLINE_IMAGE_BYTES as nt, forgetSessionScopes as o, prependPromptSection as ot, joinQueue as p, SessionRehydrationError as pt, localMcpEnv as q, InteractionHttpBridge as r, PROMPT_SECTION_SEPARATOR as rt, secretMcpScope as s, buildFileUrl as st, CODEX_DISABLED_FEATURE_ARGS as t, MAX_INLINE_IMAGE_BYTES as tt, assertSealedNativeSearchPath as u, inferMediaType as ut, servableStdioServer as v, EXECUTION_ID_HEADER as vt, assertSealedNativeHome as w, reasoningEvents as wt, nativeEffortArgs as x, executionCorrelationHeaders as xt, untilSettledOrAborted as y, EXECUTION_TRACE_HEADER as yt, parseCliUsageLine as z };
+export { turnInteractionEnabled as $, McpInteractionSupport as A, toolResultEvents as At, parseCliUsageLine as B, NATIVE_SESSION_CONTRACTS$1 as C, homeXdgEnv as Ct, provenStoreBinary as D, streamPartBase as Dt, isTrustedStoreBinary as E, sessionObservedEvents as Et, interactionMcpToolName as F, acpContentText as Ft, createExecutionState as G, recordCliTokenUsage as H, jsonEventParser as I, spawnAcpBridge as It, localMcpEnv as J, isLocalMcpConfig as K, plaintextResponseParser as L, DEFAULT_INTERACTION_MCP_SERVER_NAME as M, trackReasoningBlock as Mt, InteractionMcpServer$1 as N, ACP_MIN_PROTOCOL_VERSION as Nt, refuseSecretLaunch as O, textDeltaEvents as Ot, brokerInteractionTools$1 as P, ACP_PROTOCOL_VERSION as Pt, turnEndReason as Q, AcpProviderAdapterBase as R, nativeEffortArgs as S, executionCorrelationHeaders as St, assertSealedNativeHome as T, reasoningEvents as Tt, CliProviderAdapterBase as U, readCliTokenUsage as V, createRepeatedToolFailureGuard as W, interactionToggleEnabled as X, enabledInteractionKinds as Y, readEphemeralContext as Z, secretSessionTurnQueue as _, runtimeSecretsOverlay as _t, codexDeveloperInstructionArgs as a, partitionImageAttachments as at, untilSettledOrAborted as b, EXECUTION_TRACE_HEADER as bt, SECRET_REFERENCE as c, buildFileUrl as ct, directStdioMcpServers as d, inferMediaType as dt, withEphemeralContext as et, isLoopbackEndpoint as f, trackFilePart as ft, resolveReferences as g, wasNeverLaunched as gt, requireRecord as h, rejectNotLaunched as ht, PERMISSION_DECISION_TIMEOUT_MS as i, PROMPT_SECTION_SEPARATOR as it, TerminalPlanSupport as j, toolStartEvents as jt, resolveExecutableRealpath as k, textSnapshotEvents as kt, SECRET_REFERENCE_PREFIX as l, deriveFilePart as lt, joinQueue as m, SessionRehydrationError as mt, InteractionBroker$1 as n, MAX_INLINE_IMAGE_BYTES as nt, forgetSessionScopes as o, preparePromptInputParts as ot, isPlainRecord as p, InvalidAttachmentError as pt, localMcpArgv as q, InteractionHttpBridge as r, MAX_TOTAL_INLINE_IMAGE_BYTES as rt, secretMcpScope as s, prependPromptSection as st, CODEX_DISABLED_FEATURE_ARGS as t, withTurnInteractions as tt, assertSealedNativeSearchPath as u, deterministicFilePartId as ut, servableMcpServer as v, EXECUTION_CORRELATION_HEADERS as vt, SEALED_NATIVE_HOME_LAYOUT as w, finalTextEvent as wt, kimiThinkingArgs as x, MANAGED_QUOTE_VERSION_HEADER as xt, servableStdioServer as y, EXECUTION_ID_HEADER as yt, accumulateCliTokenUsage as z };
 
-//# sourceMappingURL=src-Fn8Pu1xq.mjs.map
+//# sourceMappingURL=src-DVjhkeiC.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sdk-provider-cli-base",
-  "version": "0.13.19",
+  "version": "0.13.20",
   "description": "Base adapter for CLI-based AI agent providers",
   "type": "module",
   "main": "./dist/index.mjs",
@@ -52,9 +52,9 @@
     "@modelcontextprotocol/sdk": "^1.32.2",
     "@tangle-network/agent-core": "^1.0.3",
     "@tangle-network/agent-interface": "^5.10.20",
-    "@tangle-network/agent-profile-materialize": "1.1.56",
+    "@tangle-network/agent-profile-materialize": "1.1.57",
     "@tangle-network/agent-trace-contract": "^2.2.0",
-    "@tangle-network/cli-agent-registry": "0.15.32",
+    "@tangle-network/cli-agent-registry": "0.15.33",
     "@tangle-network/sdk-cli-runner": "0.3.9",
     "@tangle-network/sdk-session-persistence": "0.7.5",
     "zod": "4.6.7"
@@ -71,8 +71,8 @@
     "registry": "https://registry.npmjs.org"
   },
   "tangleRelease": {
-    "sourceSha": "7f35269c55c7dbf9cc12ef1fd210bd1f9f8eab58",
-    "mergedAt": "2026-11-06T21:08:17-08:00"
+    "sourceSha": "8af7f9410f67473cf82e7c48ee3bf284a2afea77",
+    "mergedAt": "2026-11-07T00:12:57-08:00"
   },
   "scripts": {
     "build": "tsdown",