@theokit/agents 0.47.0 → 1.0.0

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/capability/capability.ts","../src/capability/capabilities.ts","../src/capability/registry.ts","../src/a2a/agent-card.ts","../src/a2a/mcp-server-manifest.ts","../src/a2a/a2a-client.ts","../src/conversation-scope.ts","../src/skills-resolver.ts","../src/acp/protocol.ts","../src/acp/client.ts"],"sourcesContent":["import { isDeepStrictEqual } from 'node:util'\n\nimport type { CompiledAgentOptions } from '../bridge/agent-compiler.js'\n\n/**\n * M52 — the capability layer: object-oriented, composable authoring that produces the EXISTING narrow\n * waist (`CompiledAgentOptions`), which `assembleM8CreateOptions` already turns into `Agent.create`\n * options. No new spec and no new adapter were invented (ADR-1/ADR-2) — a third representation would be\n * the very duplication this initiative removes.\n */\n\n/** Which capability contributed which fields — makes the wiring inspectable as DATA. */\nexport interface ProvenanceEntry {\n  readonly capability: string\n  readonly contributed: readonly string[]\n}\n\n/** The mutable draft a capability enriches. `tools`/`agents` are pre-seeded (required in the waist). */\nexport interface CompiledAgentOptionsDraft extends Partial<\n  Omit<CompiledAgentOptions, 'tools' | 'agents'>\n> {\n  tools: CompiledAgentOptions['tools']\n  agents: CompiledAgentOptions['agents']\n  readonly provenance: ProvenanceEntry[]\n}\n\n/**\n * **Strategy + value-level Decorator.** N independent ways to enrich an agent (model, tools, skills,\n * MCP, HITL…), added or removed without touching the builder — a central `switch` would violate OCP.\n */\nexport interface Capability {\n  /** Stable identity — used for provenance and conflict messages. */\n  readonly name: string\n  apply(draft: CompiledAgentOptionsDraft): void\n}\n\n/** Two capabilities set the same scalar field to different values — a composition bug, never last-wins. */\nexport class CapabilityConflictError extends Error {\n  override readonly name = 'CapabilityConflictError'\n  constructor(field: string, previous: unknown, next: unknown, capability: string) {\n    super(\n      // NUNCA ecoa os valores: um draft montado a partir de arquivo de config pode carregar\n      // token de MCP, header de auth, credencial de memória. Reporta a FORMA, como a validação\n      // de fronteira das capabilities já faz.\n      `capability \"${capability}\": campo \"${field}\" já declarado (${shapeOf(previous)}) ` +\n        `e redeclarado com valor diferente (${shapeOf(next)}) — declare uma vez só.`,\n    )\n  }\n}\n\n/** Type/shape of a value for diagnostics — never its content. */\nfunction shapeOf(value: unknown): string {\n  if (value === null) return 'null'\n  if (Array.isArray(value)) return `array(${value.length})`\n  if (typeof value === 'object') {\n    return `object{${Object.keys(value)\n      .sort((a, b) => a.localeCompare(b))\n      .join(',')}}`\n  }\n  return typeof value\n}\n\n/**\n * A fresh draft. `stream` is deliberately NOT seeded: a pre-seeded value would make\n * `setOnce(draft, 'stream', false, …)` throw a conflict against a default nobody declared, so\n * `stream: false` would be structurally unreachable. The default is applied at finalize instead.\n */\nexport function createDraft(): CompiledAgentOptionsDraft {\n  return { tools: [], agents: {}, provenance: [] }\n}\n\n/** A draft that has been finalized — the waist's required `stream` is settled. */\nexport type FinalizedDraft = CompiledAgentOptionsDraft & { stream: boolean }\n\n/** Apply capabilities in declaration order (deterministic) and return the draft. */\nexport function applyCapabilities(\n  capabilities: readonly Capability[],\n  draft: CompiledAgentOptionsDraft = createDraft(),\n): FinalizedDraft {\n  for (const c of capabilities) c.apply(draft)\n  draft.stream ??= true // same default the reference compiler emits\n  return draft as FinalizedDraft\n}\n\n/** Set a scalar exactly once — fail-fast on a conflicting redeclaration (Rule 8). */\nexport function setOnce<K extends keyof CompiledAgentOptionsDraft>(\n  draft: CompiledAgentOptionsDraft,\n  field: K,\n  value: CompiledAgentOptionsDraft[K],\n  capability: string,\n): void {\n  if (value === undefined) return // nothing to declare — never consume the slot with a hole\n  const previous = draft[field]\n  // DEEP equality, never reference identity: two capabilities may legitimately build the SAME\n  // logical value in separate objects (`compileSkillsSelection` returns a fresh object per call),\n  // and `previous !== value` would report those as a conflict that does not exist. CAVEAT, stated\n  // because it is not obvious: `isDeepStrictEqual` compares FUNCTIONS by identity, so a field whose\n  // value carries functions (resolvers, guardrail methods) stays identity-idempotent, not\n  // value-idempotent. Fail-fast is the safe side of that asymmetry.\n  if (previous !== undefined && !isDeepStrictEqual(previous, value)) {\n    throw new CapabilityConflictError(field, previous, value, capability)\n  }\n  draft[field] = value\n  draft.provenance.push({ capability, contributed: [field] })\n}\n","import type { InlineSkill } from '@theokit/sdk'\n\nimport type { CompiledTool } from '../bridge/agent-compiler.js'\nimport { compileSkillsSelection } from '../bridge/define-agent.js'\n\nimport { type Capability, type CompiledAgentOptionsDraft, setOnce } from './capability.js'\n\n/**\n * M52 — three real capabilities proving the contract against genuine variation: one that VALIDATES and\n * can conflict (model), one that ACCUMULATES (tools), and one that is pure DATA (skills — a plain\n * factory, because a class with no behavior would be ceremony: KISS).\n */\n\n/** Typed authoring failure — surfaced at build time, never a silent bad agent. */\nexport class ConfigurationError extends Error {\n  override readonly name = 'ConfigurationError'\n}\n\n/** Human-readable type of a rejected value — never its content (config files may hold secrets). */\nfunction describe(value: unknown): string {\n  if (value === null) return 'null'\n  return Array.isArray(value) ? 'array' : typeof value\n}\n\n/** Sets the model id (and optional reasoning effort). CLASS: it validates and can conflict. */\nexport class ModelCapability implements Capability {\n  readonly name = 'model'\n  constructor(\n    private readonly id: string,\n    private readonly reasoningEffort?: CompiledAgentOptionsDraft['reasoningEffort'],\n  ) {\n    // Boundary validation: the registry hands `unknown` straight from a config FILE, so a wrong\n    // type must fail here, typed and named — not as a raw `id.trim is not a function` three frames\n    // deep (rules/error-handling.md § 2: validate at the boundary, fail typed).\n    if (typeof id !== 'string') {\n      throw new ConfigurationError(`model: esperava string, recebi ${describe(id)}`)\n    }\n    if (id.trim().length === 0) throw new ConfigurationError('model: id não pode ser vazio')\n  }\n  apply(draft: CompiledAgentOptionsDraft): void {\n    setOnce(draft, 'model', this.id, this.name)\n    if (this.reasoningEffort !== undefined) {\n      setOnce(draft, 'reasoningEffort', this.reasoningEffort, this.name)\n    }\n  }\n}\n\n/** Adds tools. CLASS: it ACCUMULATES (never overwrites), which is behavior worth owning. */\nexport class ToolsCapability implements Capability {\n  readonly name = 'tools'\n  readonly #tools: readonly CompiledTool[]\n  constructor(tools: readonly CompiledTool[]) {\n    this.#tools = tools\n  }\n  apply(draft: CompiledAgentOptionsDraft): void {\n    draft.tools.push(...this.#tools)\n    draft.provenance.push({ capability: this.name, contributed: ['tools'] })\n  }\n}\n\n/**\n * Enables skills by name. FUNCTION, not class: it carries no behavior beyond assignment — a class here\n * would be ceremony (the honest counter-example to \"everything must be a class\").\n */\nexport const skills = (entries: readonly (string | InlineSkill)[]): Capability => {\n  // Boundary validation BEFORE anything spreads: a config file carrying `skills: \"code-review\"`\n  // would otherwise spread into eleven single-character skill names and reach Agent.create with no\n  // error at all — silent corruption, the worst failure mode for file-based authoring.\n  if (!Array.isArray(entries)) {\n    throw new ConfigurationError(`skills: esperava array de nomes, recebi ${describe(entries)}`)\n  }\n  for (const e of entries) {\n    // The reference compiler accepts `string | InlineSkill` (define-agent.ts § compileSkillsSelection),\n    // so inline skills must be accepted here too — rejecting them outright would make this layer less\n    // expressive than the path it claims equivalence with.\n    //\n    // ONE deliberate asymmetry, stated rather than glossed over: an inline skill with an empty\n    // `instructions` compiles through `defineAgent` but is REJECTED here. That object's body is\n    // unreachable at runtime (`SkillsManager.get` would fall back to `readFile(source)`, and a\n    // hand-rolled inline has no real `source`), so this rejects a broken agent at authoring time\n    // instead of at prompt-assembly time. It is an input rejection, never an output divergence.\n    if (typeof e === 'string') {\n      if (e.trim().length === 0) {\n        throw new ConfigurationError('skills: nome vazio — use um nome de skill não vazio')\n      }\n      continue\n    }\n    if (typeof e !== 'object' || e === null || Array.isArray(e)) {\n      throw new ConfigurationError(\n        `skills: entrada inválida (${describe(e)}) — use um nome ou um skill inline`,\n      )\n    }\n    // An inline skill reaches the `<skills>` system-prompt block. Accepting `{ name }` alone lets a\n    // malformed skill through with `undefined` description/instructions — the same silent\n    // corruption this boundary exists to stop, one level down. `InlineSkill extends Skill` requires\n    // all three (`@theokit/sdk` create-skill.d.ts + discover-skills.d.ts).\n    for (const field of ['name', 'description', 'instructions'] as const) {\n      const value = (e as Record<string, unknown>)[field]\n      if (typeof value !== 'string' || value.trim().length === 0) {\n        throw new ConfigurationError(\n          `skills: skill inline sem \\`${field}\\` válido (${describe(value)}) — ` +\n            'name, description e instructions são obrigatórios',\n        )\n      }\n    }\n  }\n  return {\n    name: 'skills',\n    apply: (draft) => {\n      // DELEGA ao compilador canônico (não reimplementa): `autoInject`, skills inline e o caminho\n      // resolver vivem numa fonte só — reimplementar aqui divergiria (foi o que a prova de\n      // equivalência pegou).\n      const compiled = compileSkillsSelection([...entries])\n      if (compiled.skills === undefined) return\n      // ACCUMULATES, never setOnce: skills is a merge-semantics field in the reference compiler\n      // (`defineAgent({skills:['a','b']})` → `['a','b']`). With setOnce a preset's baseline skills\n      // could never be extended at the call site — defeating the whole point of the Composite.\n      //\n      // CONCAT, never dedupe. The capability list IS the authoring list: `skills(['a']) +\n      // skills(['a'])` corresponds to authoring `['a','a']`, which the reference compiler maps to\n      // `['a','a']`. A dedupe here looks tidier but makes the merge path the ONLY place in this\n      // layer that diverges from the reference — the exact thing the milestone exists to prevent.\n      const previous = draft.skills\n      draft.skills =\n        previous === undefined\n          ? compiled.skills\n          : {\n              // The spread is exhaustive only because `compileSkillsSelection` emits a FIXED 3-key\n              // shape (`enabled`, `autoInject: true`, and `inline` iff non-empty) — `enabled` and\n              // `inline` are both re-derived below, and `autoInject` is the same literal on both\n              // sides. TRAP for the future: if a capability ever authors `autoInject: false`, this\n              // spread would silently normalize it back to `true`. Unreachable today (no capability\n              // and no reference array form can express it) — revisit when one can.\n              ...previous,\n              ...compiled.skills,\n              enabled: [...(previous.enabled ?? []), ...(compiled.skills.enabled ?? [])],\n              ...(previous.inline !== undefined || compiled.skills.inline !== undefined\n                ? { inline: [...(previous.inline ?? []), ...(compiled.skills.inline ?? [])] }\n                : {}),\n            }\n      draft.provenance.push({ capability: 'skills', contributed: ['skills'] })\n    },\n  }\n}\n","import type { Capability, CompiledAgentOptionsDraft } from './capability.js'\n\n/**\n * M52 — resolution + composition. The registry is what unlocks FILE-BASED authoring (a config lists\n * capability names): resolving name → capability without a switch that grows per feature (OCP).\n */\n\n/** Fail-fast with the known set — never `undefined` leaking into the pipeline. */\nexport class UnknownCapabilityError extends Error {\n  override readonly name = 'UnknownCapabilityError'\n  constructor(requested: string, known: readonly string[]) {\n    super(\n      `capability \"${requested}\" não registrada. Conhecidas: ${known.join(', ') || '(nenhuma)'}.`,\n    )\n  }\n}\n\n/** **Registry + Factory Method.** */\nexport class CapabilityRegistry {\n  readonly #factories = new Map<string, (arg: unknown) => Capability>()\n\n  register(name: string, factory: (arg: unknown) => Capability): this {\n    this.#factories.set(name, factory)\n    return this\n  }\n\n  has(name: string): boolean {\n    return this.#factories.has(name)\n  }\n\n  names(): string[] {\n    return [...this.#factories.keys()]\n  }\n\n  resolve(name: string, arg?: unknown): Capability {\n    const factory = this.#factories.get(name)\n    if (factory === undefined) throw new UnknownCapabilityError(name, this.names())\n    return factory(arg)\n  }\n}\n\n/**\n * **Composite** — a preset behaves like ONE capability, so a caller says `codingAgent()` instead of\n * spreading an array at the call site. Members apply in declaration order (deterministic).\n */\nexport class CapabilityPreset implements Capability {\n  readonly #members: readonly Capability[]\n  constructor(\n    readonly name: string,\n    members: readonly Capability[],\n  ) {\n    this.#members = members\n  }\n  apply(draft: CompiledAgentOptionsDraft): void {\n    for (const member of this.#members) member.apply(draft)\n  }\n}\n","/**\n * M15 (theokit-ai-first) — A2A agent card generation (ADR-0040 § D2, home/discovery concern).\n *\n * Produces an [A2A](https://github.com/google/A2A)-spec Agent Card from the framework's\n * `AgentManifestEntry`, so other systems can discover a TheoKit agent's capabilities over HTTP at\n * `/.well-known/<name>/agent-card.json`. Pure data transform — no LLM, no runtime (G2).\n */\nimport type { AgentManifestEntry } from '../manifest/agent-manifest.js'\n\n/** A single capability exposed by an A2A agent (maps from a TheoKit tool). */\nexport interface A2ASkill {\n  id: string\n  name: string\n  description: string\n}\n\n/** A2A agent-card capabilities block. */\nexport interface A2ACapabilities {\n  streaming: boolean\n  pushNotifications: boolean\n  stateTransitionHistory: boolean\n}\n\n/** An A2A-spec Agent Card (the subset TheoKit advertises). */\nexport interface AgentCard {\n  name: string\n  description: string\n  url: string\n  version: string\n  capabilities: A2ACapabilities\n  defaultInputModes: string[]\n  defaultOutputModes: string[]\n  skills: A2ASkill[]\n}\n\nexport interface BuildAgentCardOptions {\n  /** Absolute base URL of the deployment (e.g. `https://app.example.com`). A trailing slash is trimmed. */\n  baseUrl: string\n  /** Human description of the agent. Defaults to a generated sentence when omitted (spec requires non-empty). */\n  description?: string\n}\n\n/** Strip a single trailing slash so `${baseUrl}${route}` never doubles the separator. */\nfunction trimTrailingSlash(url: string): string {\n  return url.endsWith('/') ? url.slice(0, -1) : url\n}\n\n/** Build an A2A agent card from a manifest entry. */\nexport function buildAgentCard(entry: AgentManifestEntry, options: BuildAgentCardOptions): AgentCard {\n  const base = trimTrailingSlash(options.baseUrl)\n  return {\n    name: entry.name,\n    description: options.description ?? `TheoKit agent \"${entry.name}\".`,\n    url: `${base}${entry.route}`,\n    version: '1.0',\n    capabilities: {\n      streaming: entry.stream,\n      pushNotifications: false,\n      stateTransitionHistory: false,\n    },\n    defaultInputModes: ['text'],\n    defaultOutputModes: ['text'],\n    skills: entry.tools.map((t) => ({ id: t.name, name: t.name, description: t.description })),\n  }\n}\n\n/** The A2A discovery path for an agent: `/.well-known/<name>/agent-card.json`. */\nexport function wellKnownCardPath(agentName: string): string {\n  return `/.well-known/${agentName}/agent-card.json`\n}\n","/**\n * M16 (theokit-ai-first) — MCP server manifest generation (ADR-0040 § D2, home concern).\n *\n * Exposes a TheoKit agent's tools to external MCP clients as `tools/list` descriptors, so the app\n * can advertise its agents over its OWN HTTP routes. Pure data transform — no LLM, no runtime, and\n * NO stdio transport (that stays SDK-side per sdk-runtime.md). Serving these over `GET /mcp` and the\n * JSON-RPC envelope are follow-ups (mount path).\n */\nimport type { AgentManifestEntry } from '../manifest/agent-manifest.js'\n\n/** The MCP protocol revision these descriptors target. */\nexport const MCP_PROTOCOL_VERSION = '2024-11-05'\n\n/** A JSON-schema object (the shape MCP expects for a tool's `inputSchema`). */\nexport interface McpJsonSchema {\n  type: 'object'\n  properties: Record<string, unknown>\n  required?: string[]\n}\n\n/** An MCP `tools/list` tool descriptor. */\nexport interface McpToolDescriptor {\n  name: string\n  description: string\n  inputSchema: McpJsonSchema\n}\n\n/** MCP `initialize` server info. */\nexport interface McpServerInfo {\n  name: string\n  version: string\n  protocolVersion: string\n}\n\n/**\n * Map an agent's tools to MCP tool descriptors. The manifest tool carries name + description; the\n * per-tool JSON schema is not retained in the manifest, so a permissive empty-object schema is\n * emitted (MCP clients accept it and pass through arbitrary args). Wiring the real per-tool schema\n * is a follow-up once the manifest carries it.\n */\nexport function buildMcpToolDescriptors(entry: AgentManifestEntry): McpToolDescriptor[] {\n  return entry.tools.map((t) => ({\n    name: t.name,\n    description: t.description,\n    inputSchema: { type: 'object', properties: {} },\n  }))\n}\n\n/** Build the MCP `initialize` server-info block for an agent. */\nexport function mcpServerInfo(entry: AgentManifestEntry): McpServerInfo {\n  return { name: entry.name, version: '1.0', protocolVersion: MCP_PROTOCOL_VERSION }\n}\n","/**\n * M15 (theokit-ai-first) — A2A client: call a remote A2A agent as a tool (ADR-0040 § D2).\n *\n * `createA2ATool` returns a `CustomTool` whose handler POSTs the input message to a remote agent's\n * HTTP endpoint and returns its text response — cross-network delegation. Uses `fetch` (Web\n * Standards, G8). The target is a remote AGENT endpoint, not an LLM provider, so the G2 grep guard\n * (`openrouter.ai|api.openai.com|api.anthropic.com`) is unaffected. `fetchImpl` is injectable for tests.\n */\nimport type { CustomTool } from '@theokit/sdk'\n\n/** How to authenticate to the remote agent. */\nexport interface A2AAuth {\n  /** Bearer token → `Authorization: Bearer <token>`. */\n  bearer?: string\n  /** API-key header pair → `<name>: <value>` (e.g. `x-api-key`). */\n  apiKey?: { header: string; value: string }\n}\n\nexport interface A2AToolConfig {\n  /** Remote agent endpoint URL (POST target). */\n  url: string\n  /** Tool name the model calls. */\n  name: string\n  /** Tool description surfaced to the model. */\n  description: string\n  /** Static headers merged into every request. */\n  headers?: Record<string, string>\n  /** Auth applied to every request. */\n  auth?: A2AAuth\n  /** Injected fetch (defaults to the global). Narrowed to the call shape this client uses. */\n  fetchImpl?: (url: string, init: RequestInit) => Promise<Response>\n}\n\n/** Build the request headers from static headers + auth. */\nfunction buildHeaders(config: A2AToolConfig): Record<string, string> {\n  const headers: Record<string, string> = { 'content-type': 'application/json', ...config.headers }\n  if (config.auth?.bearer) headers.authorization = `Bearer ${config.auth.bearer}`\n  if (config.auth?.apiKey) headers[config.auth.apiKey.header] = config.auth.apiKey.value\n  return headers\n}\n\n/**\n * Create a tool that delegates to a remote A2A agent. The remote is expected to answer a\n * `{ message }` POST with a JSON body carrying a `response` (or `text`) string.\n */\nexport function createA2ATool(config: A2AToolConfig): CustomTool {\n  const doFetch = config.fetchImpl ?? fetch\n  return {\n    name: config.name,\n    description: config.description,\n    inputSchema: {\n      type: 'object',\n      properties: { message: { type: 'string', description: 'The message to send to the remote agent.' } },\n      required: ['message'],\n    },\n    handler: async (input: Record<string, unknown>): Promise<string> => {\n      // The input schema requires `message: string`; narrow defensively (never base-to-string).\n      const message = typeof input.message === 'string' ? input.message : ''\n      const res = await doFetch(config.url, {\n        method: 'POST',\n        headers: buildHeaders(config),\n        body: JSON.stringify({ message }),\n      })\n      if (!res.ok) {\n        throw new Error(`A2A call to \"${config.name}\" failed: ${res.status} ${res.statusText}`)\n      }\n      const data = (await res.json()) as { response?: string; text?: string }\n      return data.response ?? data.text ?? ''\n    },\n  }\n}\n","/**\n * M11 (theokit-ai-first) — {resource, thread} conversation scoping (ADR-0040 § D2, home concern).\n *\n * Maps a request's (resource, thread) pair to a deterministic, collision-safe conversation id so\n * multi-tenant apps isolate history without hand-building `user-${id}-thread-${id}` strings. This\n * is the app's request→conversation mapping — NOT the SDK's storage engine (which the derived id is\n * simply handed to). Background compression of long histories stays SDK-side.\n *\n * Encoding: each component is `encodeURIComponent`-escaped and joined with `/`. Since\n * `encodeURIComponent` escapes a raw `/` to `%2F`, the separator is unambiguous — `('a/b','c')` and\n * `('a','b/c')` derive DIFFERENT ids (collision-safe). Reversible via {@link parseConversationId}.\n */\n\nconst SEPARATOR = '/'\n\n/** Derive a deterministic conversation id from a (resource, thread) pair. Fails fast on empty input. */\nexport function deriveConversationId(resource: string, thread: string): string {\n  if (!resource) throw new Error('[@theokit/agents] deriveConversationId: resource must be non-empty')\n  if (!thread) throw new Error('[@theokit/agents] deriveConversationId: thread must be non-empty')\n  return `${encodeURIComponent(resource)}${SEPARATOR}${encodeURIComponent(thread)}`\n}\n\n/**\n * Reverse a derived conversation id back to its (resource, thread). Returns `null` for a value that\n * is not a derived scope id (no separator, or an empty component) — callers treat that as \"opaque id,\n * not scoped\".\n */\nexport function parseConversationId(id: string): { resource: string; thread: string } | null {\n  const idx = id.indexOf(SEPARATOR)\n  if (idx <= 0 || idx >= id.length - 1) return null\n  const resource = decodeURIComponent(id.slice(0, idx))\n  const thread = decodeURIComponent(id.slice(idx + 1))\n  if (!resource || !thread) return null\n  return { resource, thread }\n}\n","/**\n * M13 (theokit-ai-first) — per-request skills resolution (ADR-0040 § D2, home/boundary concern).\n *\n * The static `skills.enabled` filter already works (`compile-skills` maps `include` → the SDK's\n * `enabled`). This adds a PER-REQUEST resolver so multi-tenant apps expose different skill sets to\n * different users. A selection is either a static list or a function of the request context (the M7\n * run-context). Discovery + injection stay in the SDK; this only CHOOSES the enabled set per call.\n */\n\nimport type { InlineSkill } from '@theokit/sdk'\n\n/** The request context handed to a skills resolver (the M7 run-context — opaque per-request data). */\nexport type SkillsRequestContext = Record<string, unknown>\n\n/**\n * How the skill set is chosen:\n * - a static array of `string` (filesystem skill NAMES → `skills.enabled`) and/or `InlineSkill`\n *   objects from `createSkill` (code-defined skills → `skills.inline`, injected into the `<skills>`\n *   block). A mixed list is split at compile time.\n * - a function — resolved per request from the {@link SkillsRequestContext} (sync or async). The\n *   resolver returns filesystem skill NAMES (inline skills are static — declared on the agent).\n */\nexport type SkillsSelection =\n  | readonly (string | InlineSkill)[]\n  | ((ctx: SkillsRequestContext) => readonly string[] | Promise<readonly string[]>)\n\n/**\n * Resolve the enabled skill names for a request. Returns `undefined` when no selection is given (the\n * SDK then enables every discovered skill). Fails fast if a resolver returns a non-array. The static\n * array is compiled ahead of time (see `compileSkillsSelection`), so this is exercised for the\n * resolver form; a static array is defensively narrowed to its string (name) members.\n */\nexport async function resolveEnabledSkills(\n  selection: SkillsSelection | undefined,\n  ctx: SkillsRequestContext,\n): Promise<string[] | undefined> {\n  if (selection === undefined) return undefined\n  if (typeof selection !== 'function') {\n    return selection.filter((s): s is string => typeof s === 'string')\n  }\n  const resolved = await selection(ctx)\n  if (!Array.isArray(resolved)) {\n    throw new Error('[@theokit/agents] skills resolver must return an array of skill names')\n  }\n  return [...resolved]\n}\n","/**\n * M17 (theokit-ai-first) — ACP (Agent Client Protocol) stdio framing.\n *\n * ACP talks to a coding agent (Claude Code, Amp, Codex) over stdio as newline-delimited JSON. This\n * is the transport-agnostic CORE: encode a message to a line, and decode a byte/char stream that may\n * split a message across chunks. Pure — no subprocess, no Node API. The subprocess spawn lives in the\n * adapter layer (G8) / SDK; `createACPTool` (wrapping this codec + an injected transport) is a\n * follow-up once the adapter ships.\n */\n\n/** Serialize a message to a single newline-terminated JSON line. */\nexport function encodeAcpMessage(message: unknown): string {\n  return `${JSON.stringify(message)}\\n`\n}\n\n/**\n * Incremental decoder for newline-delimited JSON. Feed it chunks with {@link push}; it buffers a\n * partial trailing line across calls and returns every WHOLE message parsed so far. Blank lines are\n * skipped. A completed non-JSON line fails fast with a typed error (error-handling.md) — a corrupt\n * frame must never be silently dropped.\n */\nexport class AcpMessageDecoder {\n  private buffer = ''\n\n  /** Feed a chunk; returns the messages completed by this chunk (possibly empty). */\n  push(chunk: string): unknown[] {\n    this.buffer += chunk\n    const messages: unknown[] = []\n    let newlineIndex = this.buffer.indexOf('\\n')\n    while (newlineIndex !== -1) {\n      const line = this.buffer.slice(0, newlineIndex).trim()\n      this.buffer = this.buffer.slice(newlineIndex + 1)\n      if (line.length > 0) {\n        try {\n          messages.push(JSON.parse(line))\n        } catch (cause) {\n          throw new Error(`[@theokit/agents] ACP decode failed on line: ${line}`, { cause })\n        }\n      }\n      newlineIndex = this.buffer.indexOf('\\n')\n    }\n    return messages\n  }\n}\n","/**\n * M17 (theokit-ai-first) — ACP client: JSON-RPC over the stdio framing.\n *\n * Drives a coding agent (Claude Code, Amp, Codex) over an INJECTED {@link AcpTransport}. The\n * subprocess spawn is a Node API and lives in the adapter layer (G8); this client is transport-\n * agnostic and testable. It correlates responses to requests by `id`, and dispatches server→client\n * requests (e.g. `session/request_permission`) to a registered handler, replying with its decision.\n */\nimport { AcpMessageDecoder, encodeAcpMessage } from './protocol.js'\n\n/** The stdio channel to the coding-agent subprocess (abstracted for testability + G8). */\nexport interface AcpTransport {\n  /** Write one already-encoded (newline-terminated) line to the agent's stdin. */\n  send(line: string): void\n  /** Subscribe to raw lines/chunks from the agent's stdout. */\n  subscribe(onData: (chunk: string) => void): void\n}\n\ninterface JsonRpcResponse {\n  id: number\n  result?: unknown\n  error?: { code: number; message: string }\n}\ninterface JsonRpcServerRequest {\n  id: number\n  method: string\n  params?: unknown\n}\n\ninterface Pending {\n  resolve: (value: unknown) => void\n  reject: (err: Error) => void\n}\n/** Return a value or a Promise — `unknown` already includes `Promise<unknown>`; `await` handles both. */\ntype ServerRequestHandler = (params: unknown) => unknown\n\nfunction isResponse(m: Record<string, unknown>): m is JsonRpcResponse & Record<string, unknown> {\n  return typeof m.id === 'number' && (('result' in m) || ('error' in m)) && !('method' in m)\n}\nfunction isServerRequest(m: Record<string, unknown>): m is JsonRpcServerRequest & Record<string, unknown> {\n  return typeof m.method === 'string' && typeof m.id === 'number'\n}\n\nexport class AcpClient {\n  private nextId = 1\n  private readonly pending = new Map<number, Pending>()\n  private readonly handlers = new Map<string, ServerRequestHandler>()\n  private readonly decoder = new AcpMessageDecoder()\n\n  constructor(private readonly transport: AcpTransport) {\n    transport.subscribe((chunk) => {\n      for (const message of this.decoder.push(chunk)) {\n        this.dispatch(message as Record<string, unknown>)\n      }\n    })\n  }\n\n  /** Send a JSON-RPC request and resolve with its `result` (or reject on `error`). */\n  request(method: string, params: unknown): Promise<unknown> {\n    const id = this.nextId++\n    return new Promise<unknown>((resolve, reject) => {\n      this.pending.set(id, { resolve, reject })\n      this.transport.send(encodeAcpMessage({ jsonrpc: '2.0', id, method, params }))\n    })\n  }\n\n  /** Register a handler for a server→client request method (e.g. `session/request_permission`). */\n  onRequest(method: string, handler: ServerRequestHandler): void {\n    this.handlers.set(method, handler)\n  }\n\n  private dispatch(message: Record<string, unknown>): void {\n    if (isResponse(message)) {\n      const entry = this.pending.get(message.id)\n      if (!entry) return\n      this.pending.delete(message.id)\n      if (message.error) entry.reject(new Error(message.error.message))\n      else entry.resolve(message.result)\n      return\n    }\n    if (isServerRequest(message)) {\n      void this.handleServerRequest(message)\n    }\n  }\n\n  private async handleServerRequest(req: JsonRpcServerRequest): Promise<void> {\n    const handler = this.handlers.get(req.method)\n    if (!handler) {\n      this.transport.send(\n        encodeAcpMessage({ jsonrpc: '2.0', id: req.id, error: { code: -32601, message: `No handler: ${req.method}` } }),\n      )\n      return\n    }\n    try {\n      const result = await handler(req.params)\n      this.transport.send(encodeAcpMessage({ jsonrpc: '2.0', id: req.id, result }))\n    } catch (err) {\n      this.transport.send(\n        encodeAcpMessage({\n          jsonrpc: '2.0',\n          id: req.id,\n          error: { code: -32603, message: err instanceof Error ? err.message : 'handler failed' },\n        }),\n      )\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAASA,yBAAyB;AAqC3B,IAAMC,0BAAN,cAAsCC,MAAAA;EArC7C,OAqC6CA;;;EACzBC,OAAO;EACzB,YAAYC,OAAeC,UAAmBC,MAAeC,YAAoB;AAC/E;;;;MAIE,eAAeA,UAAAA,aAAuBH,KAAAA,sBAAwBI,QAAQH,QAAAA,CAAAA,wCAC9BG,QAAQF,IAAAA,CAAAA;IAA8B;EAElF;AACF;AAGA,SAASE,QAAQC,OAAc;AAC7B,MAAIA,UAAU,KAAM,QAAO;AAC3B,MAAIC,MAAMC,QAAQF,KAAAA,EAAQ,QAAO,SAASA,MAAMG,MAAM;AACtD,MAAI,OAAOH,UAAU,UAAU;AAC7B,WAAO,UAAUI,OAAOC,KAAKL,KAAAA,EAC1BM,KAAK,CAACC,GAAGC,MAAMD,EAAEE,cAAcD,CAAAA,CAAAA,EAC/BE,KAAK,GAAA,CAAA;EACV;AACA,SAAO,OAAOV;AAChB;AATSD;AAgBF,SAASY,cAAAA;AACd,SAAO;IAAEC,OAAO,CAAA;IAAIC,QAAQ,CAAC;IAAGC,YAAY,CAAA;EAAG;AACjD;AAFgBH;AAQT,SAASI,kBACdC,cACAC,QAAmCN,YAAAA,GAAa;AAEhD,aAAWO,KAAKF,aAAcE,GAAEC,MAAMF,KAAAA;AACtCA,QAAMG,WAAW;AACjB,SAAOH;AACT;AAPgBF;AAUT,SAASM,QACdJ,OACAtB,OACAK,OACAF,YAAkB;AAElB,MAAIE,UAAUsB,OAAW;AACzB,QAAM1B,WAAWqB,MAAMtB,KAAAA;AAOvB,MAAIC,aAAa0B,UAAa,CAACC,kBAAkB3B,UAAUI,KAAAA,GAAQ;AACjE,UAAM,IAAIR,wBAAwBG,OAAOC,UAAUI,OAAOF,UAAAA;EAC5D;AACAmB,QAAMtB,KAAAA,IAASK;AACfiB,QAAMH,WAAWU,KAAK;IAAE1B;IAAY2B,aAAa;MAAC9B;;EAAO,CAAA;AAC3D;AAnBgB0B;;;ACvET,IAAMK,qBAAN,cAAiCC,MAAAA;EAXxC,OAWwCA;;;EACpBC,OAAO;AAC3B;AAGA,SAASC,SAASC,OAAc;AAC9B,MAAIA,UAAU,KAAM,QAAO;AAC3B,SAAOC,MAAMC,QAAQF,KAAAA,IAAS,UAAU,OAAOA;AACjD;AAHSD;AAMF,IAAMI,kBAAN,MAAMA;EAtBb,OAsBaA;;;;;EACFL,OAAO;EAChB,YACmBM,IACAC,iBACjB;SAFiBD,KAAAA;SACAC,kBAAAA;AAKjB,QAAI,OAAOD,OAAO,UAAU;AAC1B,YAAM,IAAIR,mBAAmB,kCAAkCG,SAASK,EAAAA,CAAAA,EAAK;IAC/E;AACA,QAAIA,GAAGE,KAAI,EAAGC,WAAW,EAAG,OAAM,IAAIX,mBAAmB,iCAAA;EAC3D;EACAY,MAAMC,OAAwC;AAC5CC,YAAQD,OAAO,SAAS,KAAKL,IAAI,KAAKN,IAAI;AAC1C,QAAI,KAAKO,oBAAoBM,QAAW;AACtCD,cAAQD,OAAO,mBAAmB,KAAKJ,iBAAiB,KAAKP,IAAI;IACnE;EACF;AACF;AAGO,IAAMc,kBAAN,MAAMA;EA7Cb,OA6CaA;;;EACFd,OAAO;EACP;EACT,YAAYe,OAAgC;AAC1C,SAAK,SAASA;EAChB;EACAL,MAAMC,OAAwC;AAC5CA,UAAMI,MAAMC,KAAI,GAAI,KAAK,MAAM;AAC/BL,UAAMM,WAAWD,KAAK;MAAEE,YAAY,KAAKlB;MAAMmB,aAAa;QAAC;;IAAS,CAAA;EACxE;AACF;AAMO,IAAMC,SAAS,wBAACC,YAAAA;AAIrB,MAAI,CAAClB,MAAMC,QAAQiB,OAAAA,GAAU;AAC3B,UAAM,IAAIvB,mBAAmB,2CAA2CG,SAASoB,OAAAA,CAAAA,EAAU;EAC7F;AACA,aAAWC,KAAKD,SAAS;AAUvB,QAAI,OAAOC,MAAM,UAAU;AACzB,UAAIA,EAAEd,KAAI,EAAGC,WAAW,GAAG;AACzB,cAAM,IAAIX,mBAAmB,6DAAA;MAC/B;AACA;IACF;AACA,QAAI,OAAOwB,MAAM,YAAYA,MAAM,QAAQnB,MAAMC,QAAQkB,CAAAA,GAAI;AAC3D,YAAM,IAAIxB,mBACR,gCAA6BG,SAASqB,CAAAA,CAAAA,yCAAsC;IAEhF;AAKA,eAAWC,SAAS;MAAC;MAAQ;MAAe;OAA0B;AACpE,YAAMrB,QAASoB,EAA8BC,KAAAA;AAC7C,UAAI,OAAOrB,UAAU,YAAYA,MAAMM,KAAI,EAAGC,WAAW,GAAG;AAC1D,cAAM,IAAIX,mBACR,8BAA8ByB,KAAAA,iBAAmBtB,SAASC,KAAAA,CAAAA,kEACxD;MAEN;IACF;EACF;AACA,SAAO;IACLF,MAAM;IACNU,OAAO,wBAACC,UAAAA;AAIN,YAAMa,WAAWC,uBAAuB;WAAIJ;OAAQ;AACpD,UAAIG,SAASJ,WAAWP,OAAW;AASnC,YAAMa,WAAWf,MAAMS;AACvBT,YAAMS,SACJM,aAAab,SACTW,SAASJ,SACT;;;;;;;QAOE,GAAGM;QACH,GAAGF,SAASJ;QACZO,SAAS;aAAKD,SAASC,WAAW,CAAA;aAASH,SAASJ,OAAOO,WAAW,CAAA;;QACtE,GAAID,SAASE,WAAWf,UAAaW,SAASJ,OAAOQ,WAAWf,SAC5D;UAAEe,QAAQ;eAAKF,SAASE,UAAU,CAAA;eAASJ,SAASJ,OAAOQ,UAAU,CAAA;;QAAK,IAC1E,CAAC;MACP;AACNjB,YAAMM,WAAWD,KAAK;QAAEE,YAAY;QAAUC,aAAa;UAAC;;MAAU,CAAA;IACxE,GAjCO;EAkCT;AACF,GA/EsB;;;ACxDf,IAAMU,yBAAN,cAAqCC,MAAAA;EAN5C,OAM4CA;;;EACxBC,OAAO;EACzB,YAAYC,WAAmBC,OAA0B;AACvD,UACE,eAAeD,SAAAA,oCAA0CC,MAAMC,KAAK,IAAA,KAAS,WAAA,GAAc;EAE/F;AACF;AAGO,IAAMC,qBAAN,MAAMA;EAhBb,OAgBaA;;;EACF,aAAa,oBAAIC,IAAAA;EAE1BC,SAASN,MAAcO,SAA6C;AAClE,SAAK,WAAWC,IAAIR,MAAMO,OAAAA;AAC1B,WAAO;EACT;EAEAE,IAAIT,MAAuB;AACzB,WAAO,KAAK,WAAWS,IAAIT,IAAAA;EAC7B;EAEAU,QAAkB;AAChB,WAAO;SAAI,KAAK,WAAWC,KAAI;;EACjC;EAEAC,QAAQZ,MAAca,KAA2B;AAC/C,UAAMN,UAAU,KAAK,WAAWO,IAAId,IAAAA;AACpC,QAAIO,YAAYQ,OAAW,OAAM,IAAIjB,uBAAuBE,MAAM,KAAKU,MAAK,CAAA;AAC5E,WAAOH,QAAQM,GAAAA;EACjB;AACF;AAMO,IAAMG,mBAAN,MAAMA;EA3Cb,OA2CaA;;;;EACF;EACT,YACWhB,MACTiB,SACA;SAFSjB,OAAAA;AAGT,SAAK,WAAWiB;EAClB;EACAC,MAAMC,OAAwC;AAC5C,eAAWC,UAAU,KAAK,SAAUA,QAAOF,MAAMC,KAAAA;EACnD;AACF;;;ACbA,SAASE,kBAAkBC,KAAW;AACpC,SAAOA,IAAIC,SAAS,GAAA,IAAOD,IAAIE,MAAM,GAAG,EAAC,IAAKF;AAChD;AAFSD;AAKF,SAASI,eAAeC,OAA2BC,SAA8B;AACtF,QAAMC,OAAOP,kBAAkBM,QAAQE,OAAO;AAC9C,SAAO;IACLC,MAAMJ,MAAMI;IACZC,aAAaJ,QAAQI,eAAe,kBAAkBL,MAAMI,IAAI;IAChER,KAAK,GAAGM,IAAAA,GAAOF,MAAMM,KAAK;IAC1BC,SAAS;IACTC,cAAc;MACZC,WAAWT,MAAMU;MACjBC,mBAAmB;MACnBC,wBAAwB;IAC1B;IACAC,mBAAmB;MAAC;;IACpBC,oBAAoB;MAAC;;IACrBC,QAAQf,MAAMgB,MAAMC,IAAI,CAACC,OAAO;MAAEC,IAAID,EAAEd;MAAMA,MAAMc,EAAEd;MAAMC,aAAaa,EAAEb;IAAY,EAAA;EACzF;AACF;AAhBgBN;AAmBT,SAASqB,kBAAkBC,WAAiB;AACjD,SAAO,gBAAgBA,SAAAA;AACzB;AAFgBD;;;ACxDT,IAAME,uBAAuB;AA6B7B,SAASC,wBAAwBC,OAAyB;AAC/D,SAAOA,MAAMC,MAAMC,IAAI,CAACC,OAAO;IAC7BC,MAAMD,EAAEC;IACRC,aAAaF,EAAEE;IACfC,aAAa;MAAEC,MAAM;MAAUC,YAAY,CAAC;IAAE;EAChD,EAAA;AACF;AANgBT;AAST,SAASU,cAAcT,OAAyB;AACrD,SAAO;IAAEI,MAAMJ,MAAMI;IAAMM,SAAS;IAAOC,iBAAiBb;EAAqB;AACnF;AAFgBW;;;ACfhB,SAASG,aAAaC,QAAqB;AACzC,QAAMC,UAAkC;IAAE,gBAAgB;IAAoB,GAAGD,OAAOC;EAAQ;AAChG,MAAID,OAAOE,MAAMC,OAAQF,SAAQG,gBAAgB,UAAUJ,OAAOE,KAAKC,MAAM;AAC7E,MAAIH,OAAOE,MAAMG,OAAQJ,SAAQD,OAAOE,KAAKG,OAAOC,MAAM,IAAIN,OAAOE,KAAKG,OAAOE;AACjF,SAAON;AACT;AALSF;AAWF,SAASS,cAAcR,QAAqB;AACjD,QAAMS,UAAUT,OAAOU,aAAaC;AACpC,SAAO;IACLC,MAAMZ,OAAOY;IACbC,aAAab,OAAOa;IACpBC,aAAa;MACXC,MAAM;MACNC,YAAY;QAAEC,SAAS;UAAEF,MAAM;UAAUF,aAAa;QAA2C;MAAE;MACnGK,UAAU;QAAC;;IACb;IACAC,SAAS,8BAAOC,UAAAA;AAEd,YAAMH,UAAU,OAAOG,MAAMH,YAAY,WAAWG,MAAMH,UAAU;AACpE,YAAMI,MAAM,MAAMZ,QAAQT,OAAOsB,KAAK;QACpCC,QAAQ;QACRtB,SAASF,aAAaC,MAAAA;QACtBwB,MAAMC,KAAKC,UAAU;UAAET;QAAQ,CAAA;MACjC,CAAA;AACA,UAAI,CAACI,IAAIM,IAAI;AACX,cAAM,IAAIC,MAAM,gBAAgB5B,OAAOY,IAAI,aAAaS,IAAIQ,MAAM,IAAIR,IAAIS,UAAU,EAAE;MACxF;AACA,YAAMC,OAAQ,MAAMV,IAAIW,KAAI;AAC5B,aAAOD,KAAKE,YAAYF,KAAKG,QAAQ;IACvC,GAbS;EAcX;AACF;AAzBgB1B;;;AChChB,IAAM2B,YAAY;AAGX,SAASC,qBAAqBC,UAAkBC,QAAc;AACnE,MAAI,CAACD,SAAU,OAAM,IAAIE,MAAM,oEAAA;AAC/B,MAAI,CAACD,OAAQ,OAAM,IAAIC,MAAM,kEAAA;AAC7B,SAAO,GAAGC,mBAAmBH,QAAAA,CAAAA,GAAYF,SAAAA,GAAYK,mBAAmBF,MAAAA,CAAAA;AAC1E;AAJgBF;AAWT,SAASK,oBAAoBC,IAAU;AAC5C,QAAMC,MAAMD,GAAGE,QAAQT,SAAAA;AACvB,MAAIQ,OAAO,KAAKA,OAAOD,GAAGG,SAAS,EAAG,QAAO;AAC7C,QAAMR,WAAWS,mBAAmBJ,GAAGK,MAAM,GAAGJ,GAAAA,CAAAA;AAChD,QAAML,SAASQ,mBAAmBJ,GAAGK,MAAMJ,MAAM,CAAA,CAAA;AACjD,MAAI,CAACN,YAAY,CAACC,OAAQ,QAAO;AACjC,SAAO;IAAED;IAAUC;EAAO;AAC5B;AAPgBG;;;ACKhB,eAAsBO,qBACpBC,WACAC,KAAyB;AAEzB,MAAID,cAAcE,OAAW,QAAOA;AACpC,MAAI,OAAOF,cAAc,YAAY;AACnC,WAAOA,UAAUG,OAAO,CAACC,MAAmB,OAAOA,MAAM,QAAA;EAC3D;AACA,QAAMC,WAAW,MAAML,UAAUC,GAAAA;AACjC,MAAI,CAACK,MAAMC,QAAQF,QAAAA,GAAW;AAC5B,UAAM,IAAIG,MAAM,uEAAA;EAClB;AACA,SAAO;OAAIH;;AACb;AAbsBN;;;ACrBf,SAASU,iBAAiBC,SAAgB;AAC/C,SAAO,GAAGC,KAAKC,UAAUF,OAAAA,CAAAA;;AAC3B;AAFgBD;AAUT,IAAMI,oBAAN,MAAMA;EArBb,OAqBaA;;;EACHC,SAAS;;EAGjBC,KAAKC,OAA0B;AAC7B,SAAKF,UAAUE;AACf,UAAMC,WAAsB,CAAA;AAC5B,QAAIC,eAAe,KAAKJ,OAAOK,QAAQ,IAAA;AACvC,WAAOD,iBAAiB,IAAI;AAC1B,YAAME,OAAO,KAAKN,OAAOO,MAAM,GAAGH,YAAAA,EAAcI,KAAI;AACpD,WAAKR,SAAS,KAAKA,OAAOO,MAAMH,eAAe,CAAA;AAC/C,UAAIE,KAAKG,SAAS,GAAG;AACnB,YAAI;AACFN,mBAASF,KAAKJ,KAAKa,MAAMJ,IAAAA,CAAAA;QAC3B,SAASK,OAAO;AACd,gBAAM,IAAIC,MAAM,gDAAgDN,IAAAA,IAAQ;YAAEK;UAAM,CAAA;QAClF;MACF;AACAP,qBAAe,KAAKJ,OAAOK,QAAQ,IAAA;IACrC;AACA,WAAOF;EACT;AACF;;;ACPA,SAASU,WAAWC,GAA0B;AAC5C,SAAO,OAAOA,EAAEC,OAAO,aAAc,YAAYD,KAAO,WAAWA,MAAO,EAAE,YAAYA;AAC1F;AAFSD;AAGT,SAASG,gBAAgBF,GAA0B;AACjD,SAAO,OAAOA,EAAEG,WAAW,YAAY,OAAOH,EAAEC,OAAO;AACzD;AAFSC;AAIF,IAAME,YAAN,MAAMA;EA3Cb,OA2CaA;;;;EACHC,SAAS;EACAC,UAAU,oBAAIC,IAAAA;EACdC,WAAW,oBAAID,IAAAA;EACfE,UAAU,IAAIC,kBAAAA;EAE/B,YAA6BC,WAAyB;SAAzBA,YAAAA;AAC3BA,cAAUC,UAAU,CAACC,UAAAA;AACnB,iBAAWC,WAAW,KAAKL,QAAQM,KAAKF,KAAAA,GAAQ;AAC9C,aAAKG,SAASF,OAAAA;MAChB;IACF,CAAA;EACF;;EAGAG,QAAQd,QAAgBe,QAAmC;AACzD,UAAMjB,KAAK,KAAKI;AAChB,WAAO,IAAIc,QAAiB,CAACC,SAASC,WAAAA;AACpC,WAAKf,QAAQgB,IAAIrB,IAAI;QAAEmB;QAASC;MAAO,CAAA;AACvC,WAAKV,UAAUY,KAAKC,iBAAiB;QAAEC,SAAS;QAAOxB;QAAIE;QAAQe;MAAO,CAAA,CAAA;IAC5E,CAAA;EACF;;EAGAQ,UAAUvB,QAAgBwB,SAAqC;AAC7D,SAAKnB,SAASc,IAAInB,QAAQwB,OAAAA;EAC5B;EAEQX,SAASF,SAAwC;AACvD,QAAIf,WAAWe,OAAAA,GAAU;AACvB,YAAMc,QAAQ,KAAKtB,QAAQuB,IAAIf,QAAQb,EAAE;AACzC,UAAI,CAAC2B,MAAO;AACZ,WAAKtB,QAAQwB,OAAOhB,QAAQb,EAAE;AAC9B,UAAIa,QAAQiB,MAAOH,OAAMP,OAAO,IAAIW,MAAMlB,QAAQiB,MAAMjB,OAAO,CAAA;UAC1Dc,OAAMR,QAAQN,QAAQmB,MAAM;AACjC;IACF;AACA,QAAI/B,gBAAgBY,OAAAA,GAAU;AAC5B,WAAK,KAAKoB,oBAAoBpB,OAAAA;IAChC;EACF;EAEA,MAAcoB,oBAAoBC,KAA0C;AAC1E,UAAMR,UAAU,KAAKnB,SAASqB,IAAIM,IAAIhC,MAAM;AAC5C,QAAI,CAACwB,SAAS;AACZ,WAAKhB,UAAUY,KACbC,iBAAiB;QAAEC,SAAS;QAAOxB,IAAIkC,IAAIlC;QAAI8B,OAAO;UAAEK,MAAM;UAAQtB,SAAS,eAAeqB,IAAIhC,MAAM;QAAG;MAAE,CAAA,CAAA;AAE/G;IACF;AACA,QAAI;AACF,YAAM8B,SAAS,MAAMN,QAAQQ,IAAIjB,MAAM;AACvC,WAAKP,UAAUY,KAAKC,iBAAiB;QAAEC,SAAS;QAAOxB,IAAIkC,IAAIlC;QAAIgC;MAAO,CAAA,CAAA;IAC5E,SAASI,KAAK;AACZ,WAAK1B,UAAUY,KACbC,iBAAiB;QACfC,SAAS;QACTxB,IAAIkC,IAAIlC;QACR8B,OAAO;UAAEK,MAAM;UAAQtB,SAASuB,eAAeL,QAAQK,IAAIvB,UAAU;QAAiB;MACxF,CAAA,CAAA;IAEJ;EACF;AACF;","names":["isDeepStrictEqual","CapabilityConflictError","Error","name","field","previous","next","capability","shapeOf","value","Array","isArray","length","Object","keys","sort","a","b","localeCompare","join","createDraft","tools","agents","provenance","applyCapabilities","capabilities","draft","c","apply","stream","setOnce","undefined","isDeepStrictEqual","push","contributed","ConfigurationError","Error","name","describe","value","Array","isArray","ModelCapability","id","reasoningEffort","trim","length","apply","draft","setOnce","undefined","ToolsCapability","tools","push","provenance","capability","contributed","skills","entries","e","field","compiled","compileSkillsSelection","previous","enabled","inline","UnknownCapabilityError","Error","name","requested","known","join","CapabilityRegistry","Map","register","factory","set","has","names","keys","resolve","arg","get","undefined","CapabilityPreset","members","apply","draft","member","trimTrailingSlash","url","endsWith","slice","buildAgentCard","entry","options","base","baseUrl","name","description","route","version","capabilities","streaming","stream","pushNotifications","stateTransitionHistory","defaultInputModes","defaultOutputModes","skills","tools","map","t","id","wellKnownCardPath","agentName","MCP_PROTOCOL_VERSION","buildMcpToolDescriptors","entry","tools","map","t","name","description","inputSchema","type","properties","mcpServerInfo","version","protocolVersion","buildHeaders","config","headers","auth","bearer","authorization","apiKey","header","value","createA2ATool","doFetch","fetchImpl","fetch","name","description","inputSchema","type","properties","message","required","handler","input","res","url","method","body","JSON","stringify","ok","Error","status","statusText","data","json","response","text","SEPARATOR","deriveConversationId","resource","thread","Error","encodeURIComponent","parseConversationId","id","idx","indexOf","length","decodeURIComponent","slice","resolveEnabledSkills","selection","ctx","undefined","filter","s","resolved","Array","isArray","Error","encodeAcpMessage","message","JSON","stringify","AcpMessageDecoder","buffer","push","chunk","messages","newlineIndex","indexOf","line","slice","trim","length","parse","cause","Error","isResponse","m","id","isServerRequest","method","AcpClient","nextId","pending","Map","handlers","decoder","AcpMessageDecoder","transport","subscribe","chunk","message","push","dispatch","request","params","Promise","resolve","reject","set","send","encodeAcpMessage","jsonrpc","onRequest","handler","entry","get","delete","error","Error","result","handleServerRequest","req","code","err"]}
+{"version":3,"sources":["../src/capability/capability.ts","../src/capability/capabilities.ts","../src/capability/registry.ts","../src/capability/agent-capabilities.ts","../src/capability/toolbox.ts","../src/a2a/agent-card.ts","../src/a2a/mcp-server-manifest.ts","../src/a2a/a2a-client.ts","../src/conversation-scope.ts","../src/skills-resolver.ts","../src/acp/protocol.ts","../src/acp/client.ts"],"sourcesContent":["import { isDeepStrictEqual } from 'node:util'\n\nimport type { CompiledAgentOptions } from '../bridge/agent-compiler.js'\n\n/**\n * M52 — the capability layer: object-oriented, composable authoring that produces the EXISTING narrow\n * waist (`CompiledAgentOptions`), which `assembleM8CreateOptions` already turns into `Agent.create`\n * options. No new spec and no new adapter were invented (ADR-1/ADR-2) — a third representation would be\n * the very duplication this initiative removes.\n */\n\n/** Which capability contributed which fields — makes the wiring inspectable as DATA. */\nexport interface ProvenanceEntry {\n  readonly capability: string\n  readonly contributed: readonly string[]\n}\n\n/** The mutable draft a capability enriches. `tools`/`agents` are pre-seeded (required in the waist). */\nexport interface CompiledAgentOptionsDraft extends Partial<\n  Omit<CompiledAgentOptions, 'tools' | 'agents'>\n> {\n  tools: CompiledAgentOptions['tools']\n  agents: CompiledAgentOptions['agents']\n  readonly provenance: ProvenanceEntry[]\n}\n\n/**\n * **Strategy + value-level Decorator.** N independent ways to enrich an agent (model, tools, skills,\n * MCP, HITL…), added or removed without touching the builder — a central `switch` would violate OCP.\n */\nexport interface Capability {\n  /** Stable identity — used for provenance and conflict messages. */\n  readonly name: string\n  apply(draft: CompiledAgentOptionsDraft): void\n}\n\n/** Two capabilities set the same scalar field to different values — a composition bug, never last-wins. */\nexport class CapabilityConflictError extends Error {\n  override readonly name = 'CapabilityConflictError'\n  constructor(field: string, previous: unknown, next: unknown, capability: string) {\n    super(\n      // NUNCA ecoa os valores: um draft montado a partir de arquivo de config pode carregar\n      // token de MCP, header de auth, credencial de memória. Reporta a FORMA, como a validação\n      // de fronteira das capabilities já faz.\n      `capability \"${capability}\": campo \"${field}\" já declarado (${shapeOf(previous)}) ` +\n        `e redeclarado com valor diferente (${shapeOf(next)}) — declare uma vez só.`,\n    )\n  }\n}\n\n/** Type/shape of a value for diagnostics — never its content. */\nfunction shapeOf(value: unknown): string {\n  if (value === null) return 'null'\n  if (Array.isArray(value)) return `array(${value.length})`\n  if (typeof value === 'object') {\n    return `object{${Object.keys(value)\n      .sort((a, b) => a.localeCompare(b))\n      .join(',')}}`\n  }\n  return typeof value\n}\n\n/**\n * A fresh draft. `stream` is deliberately NOT seeded: a pre-seeded value would make\n * `setOnce(draft, 'stream', false, …)` throw a conflict against a default nobody declared, so\n * `stream: false` would be structurally unreachable. The default is applied at finalize instead.\n */\nexport function createDraft(): CompiledAgentOptionsDraft {\n  return { tools: [], agents: {}, provenance: [] }\n}\n\n/** A draft that has been finalized — the waist's required `stream` is settled. */\nexport type FinalizedDraft = CompiledAgentOptionsDraft & { stream: boolean }\n\n/** Apply capabilities in declaration order (deterministic) and return the draft. */\nexport function applyCapabilities(\n  capabilities: readonly Capability[],\n  draft: CompiledAgentOptionsDraft = createDraft(),\n): FinalizedDraft {\n  for (const c of capabilities) c.apply(draft)\n  draft.stream ??= true // same default the reference compiler emits\n  return draft as FinalizedDraft\n}\n\n/** Set a scalar exactly once — fail-fast on a conflicting redeclaration (Rule 8). */\nexport function setOnce<K extends keyof CompiledAgentOptionsDraft>(\n  draft: CompiledAgentOptionsDraft,\n  field: K,\n  value: CompiledAgentOptionsDraft[K],\n  capability: string,\n): void {\n  if (value === undefined) return // nothing to declare — never consume the slot with a hole\n  const previous = draft[field]\n  // DEEP equality, never reference identity: two capabilities may legitimately build the SAME\n  // logical value in separate objects (`compileSkillsSelection` returns a fresh object per call),\n  // and `previous !== value` would report those as a conflict that does not exist. CAVEAT, stated\n  // because it is not obvious: `isDeepStrictEqual` compares FUNCTIONS by identity, so a field whose\n  // value carries functions (resolvers, guardrail methods) stays identity-idempotent, not\n  // value-idempotent. Fail-fast is the safe side of that asymmetry.\n  if (previous !== undefined && !isDeepStrictEqual(previous, value)) {\n    throw new CapabilityConflictError(field, previous, value, capability)\n  }\n  draft[field] = value\n  draft.provenance.push({ capability, contributed: [field] })\n}\n","import type { InlineSkill } from '@theokit/sdk'\n\nimport type { CompiledTool } from '../bridge/agent-compiler.js'\nimport { compileSkillsSelection } from '../bridge/define-agent.js'\n\nimport { type Capability, type CompiledAgentOptionsDraft, setOnce } from './capability.js'\n\n/**\n * M52 — three real capabilities proving the contract against genuine variation: one that VALIDATES and\n * can conflict (model), one that ACCUMULATES (tools), and one that is pure DATA (skills — a plain\n * factory, because a class with no behavior would be ceremony: KISS).\n */\n\n/** Typed authoring failure — surfaced at build time, never a silent bad agent. */\nexport class ConfigurationError extends Error {\n  override readonly name = 'ConfigurationError'\n}\n\n/** Human-readable type of a rejected value — never its content (config files may hold secrets). */\nfunction describe(value: unknown): string {\n  if (value === null) return 'null'\n  return Array.isArray(value) ? 'array' : typeof value\n}\n\n/** Sets the model id (and optional reasoning effort). CLASS: it validates and can conflict. */\nexport class ModelCapability implements Capability {\n  readonly name = 'model'\n  constructor(\n    private readonly id: string,\n    private readonly reasoningEffort?: CompiledAgentOptionsDraft['reasoningEffort'],\n  ) {\n    // Boundary validation: the registry hands `unknown` straight from a config FILE, so a wrong\n    // type must fail here, typed and named — not as a raw `id.trim is not a function` three frames\n    // deep (rules/error-handling.md § 2: validate at the boundary, fail typed).\n    if (typeof id !== 'string') {\n      throw new ConfigurationError(`model: esperava string, recebi ${describe(id)}`)\n    }\n    if (id.trim().length === 0) throw new ConfigurationError('model: id não pode ser vazio')\n  }\n  apply(draft: CompiledAgentOptionsDraft): void {\n    setOnce(draft, 'model', this.id, this.name)\n    if (this.reasoningEffort !== undefined) {\n      setOnce(draft, 'reasoningEffort', this.reasoningEffort, this.name)\n    }\n  }\n}\n\n/** Adds tools. CLASS: it ACCUMULATES (never overwrites), which is behavior worth owning. */\nexport class ToolsCapability implements Capability {\n  readonly name = 'tools'\n  readonly #tools: readonly CompiledTool[]\n  constructor(tools: readonly CompiledTool[]) {\n    this.#tools = tools\n  }\n  apply(draft: CompiledAgentOptionsDraft): void {\n    draft.tools.push(...this.#tools)\n    draft.provenance.push({ capability: this.name, contributed: ['tools'] })\n  }\n}\n\n/**\n * Enables skills by name. FUNCTION, not class: it carries no behavior beyond assignment — a class here\n * would be ceremony (the honest counter-example to \"everything must be a class\").\n */\nexport const skills = (entries: readonly (string | InlineSkill)[]): Capability => {\n  // Boundary validation BEFORE anything spreads: a config file carrying `skills: \"code-review\"`\n  // would otherwise spread into eleven single-character skill names and reach Agent.create with no\n  // error at all — silent corruption, the worst failure mode for file-based authoring.\n  if (!Array.isArray(entries)) {\n    throw new ConfigurationError(`skills: esperava array de nomes, recebi ${describe(entries)}`)\n  }\n  for (const e of entries) {\n    // The reference compiler accepts `string | InlineSkill` (define-agent.ts § compileSkillsSelection),\n    // so inline skills must be accepted here too — rejecting them outright would make this layer less\n    // expressive than the path it claims equivalence with.\n    //\n    // ONE deliberate asymmetry, stated rather than glossed over: an inline skill with an empty\n    // `instructions` compiles through `defineAgent` but is REJECTED here. That object's body is\n    // unreachable at runtime (`SkillsManager.get` would fall back to `readFile(source)`, and a\n    // hand-rolled inline has no real `source`), so this rejects a broken agent at authoring time\n    // instead of at prompt-assembly time. It is an input rejection, never an output divergence.\n    if (typeof e === 'string') {\n      if (e.trim().length === 0) {\n        throw new ConfigurationError('skills: nome vazio — use um nome de skill não vazio')\n      }\n      continue\n    }\n    if (typeof e !== 'object' || e === null || Array.isArray(e)) {\n      throw new ConfigurationError(\n        `skills: entrada inválida (${describe(e)}) — use um nome ou um skill inline`,\n      )\n    }\n    // An inline skill reaches the `<skills>` system-prompt block. Accepting `{ name }` alone lets a\n    // malformed skill through with `undefined` description/instructions — the same silent\n    // corruption this boundary exists to stop, one level down. `InlineSkill extends Skill` requires\n    // all three (`@theokit/sdk` create-skill.d.ts + discover-skills.d.ts).\n    for (const field of ['name', 'description', 'instructions'] as const) {\n      const value = (e as Record<string, unknown>)[field]\n      if (typeof value !== 'string' || value.trim().length === 0) {\n        throw new ConfigurationError(\n          `skills: skill inline sem \\`${field}\\` válido (${describe(value)}) — ` +\n            'name, description e instructions são obrigatórios',\n        )\n      }\n    }\n  }\n  return {\n    name: 'skills',\n    apply: (draft) => {\n      // DELEGA ao compilador canônico (não reimplementa): `autoInject`, skills inline e o caminho\n      // resolver vivem numa fonte só — reimplementar aqui divergiria (foi o que a prova de\n      // equivalência pegou).\n      const compiled = compileSkillsSelection(entries.slice())\n      if (compiled.skills === undefined) return\n      // ACCUMULATES, never setOnce: skills is a merge-semantics field in the reference compiler\n      // (`defineAgent({skills:['a','b']})` → `['a','b']`). With setOnce a preset's baseline skills\n      // could never be extended at the call site — defeating the whole point of the Composite.\n      //\n      // CONCAT, never dedupe. The capability list IS the authoring list: `skills(['a']) +\n      // skills(['a'])` corresponds to authoring `['a','a']`, which the reference compiler maps to\n      // `['a','a']`. A dedupe here looks tidier but makes the merge path the ONLY place in this\n      // layer that diverges from the reference — the exact thing the milestone exists to prevent.\n      const previous = draft.skills\n      draft.skills =\n        previous === undefined\n          ? compiled.skills\n          : {\n              // The spread is exhaustive only because `compileSkillsSelection` emits a FIXED 3-key\n              // shape (`enabled`, `autoInject: true`, and `inline` iff non-empty) — `enabled` and\n              // `inline` are both re-derived below, and `autoInject` is the same literal on both\n              // sides. TRAP for the future: if a capability ever authors `autoInject: false`, this\n              // spread would silently normalize it back to `true`. Unreachable today (no capability\n              // and no reference array form can express it) — revisit when one can.\n              ...previous,\n              ...compiled.skills,\n              enabled: [...(previous.enabled ?? []), ...(compiled.skills.enabled ?? [])],\n              ...(previous.inline !== undefined || compiled.skills.inline !== undefined\n                ? { inline: [...(previous.inline ?? []), ...(compiled.skills.inline ?? [])] }\n                : {}),\n            }\n      draft.provenance.push({ capability: 'skills', contributed: ['skills'] })\n    },\n  }\n}\n","import type { Capability, CompiledAgentOptionsDraft } from './capability.js'\n\n/**\n * M52 — resolution + composition. The registry is what unlocks FILE-BASED authoring (a config lists\n * capability names): resolving name → capability without a switch that grows per feature (OCP).\n */\n\n/** Fail-fast with the known set — never `undefined` leaking into the pipeline. */\nexport class UnknownCapabilityError extends Error {\n  override readonly name = 'UnknownCapabilityError'\n  constructor(requested: string, known: readonly string[]) {\n    super(\n      `capability \"${requested}\" não registrada. Conhecidas: ${known.join(', ') || '(nenhuma)'}.`,\n    )\n  }\n}\n\n/** **Registry + Factory Method.** */\nexport class CapabilityRegistry {\n  readonly #factories = new Map<string, (arg: unknown) => Capability>()\n\n  register(name: string, factory: (arg: unknown) => Capability): this {\n    this.#factories.set(name, factory)\n    return this\n  }\n\n  has(name: string): boolean {\n    return this.#factories.has(name)\n  }\n\n  names(): string[] {\n    return [...this.#factories.keys()]\n  }\n\n  resolve(name: string, arg?: unknown): Capability {\n    const factory = this.#factories.get(name)\n    if (factory === undefined) throw new UnknownCapabilityError(name, this.names())\n    return factory(arg)\n  }\n}\n\n/**\n * **Composite** — a preset behaves like ONE capability, so a caller says `codingAgent()` instead of\n * spreading an array at the call site. Members apply in declaration order (deterministic).\n */\nexport class CapabilityPreset implements Capability {\n  readonly #members: readonly Capability[]\n  constructor(\n    readonly name: string,\n    members: readonly Capability[],\n  ) {\n    this.#members = members\n  }\n  apply(draft: CompiledAgentOptionsDraft): void {\n    for (const member of this.#members) member.apply(draft)\n  }\n}\n","import type { CompiledAgentOptions } from '../bridge/agent-compiler.js'\nimport {\n  compileContextWindow,\n  type ContextWindowOptions,\n} from '../bridge/compile-context-window.js'\nimport { compileSkills, type SkillsOptions } from '../bridge/compile-skills.js'\n\nimport { ConfigurationError } from './capabilities.js'\nimport { type Capability, type CompiledAgentOptionsDraft, setOnce } from './capability.js'\n\n/**\n * M53 — the capabilities that replace the waist-bound agent decorators, one per field the decorator\n * pipeline produces today (`docs/agents/decorator-to-capability.md` § A).\n *\n * Most are pure assignment: a class per field would be 13 near-identical classes, which ADR 0001 § 4\n * already rejects as ceremony. They are built by one factory instead; the two that carry real\n * behavior (`AgentConfigCapability`, `MainLoopCapability`) are written out.\n */\n\n/**\n * A capability for a waist field that is pure data — no validation, no merge, no precedence.\n * The declared field name doubles as the capability's identity in `provenance` and conflicts.\n */\nfunction fieldCapability<K extends keyof CompiledAgentOptionsDraft>(\n  name: string,\n  field: K,\n): (value: NonNullable<CompiledAgentOptionsDraft[K]>) => Capability {\n  return (value) => ({\n    name,\n    apply: (draft) => {\n      setOnce(draft, field, value as CompiledAgentOptionsDraft[K], name)\n    },\n  })\n}\n\n/** `@Memory` → `memory`. */\nexport const memory = fieldCapability('memory', 'memory')\n/**\n * `@ContextWindow` → `context`. DELEGATES to `compileContextWindow`, which is the canonical\n * `ContextWindowOptions → ContextSettings` conversion (it also reports the metadata-only knobs).\n * Taking a pre-converted value here would duplicate that knowledge — the exact divergence the M52\n * zero-behavior proof caught in `skills`.\n */\nexport const contextWindow = (options: ContextWindowOptions): Capability => ({\n  name: 'context-window',\n  apply: (draft) => {\n    setOnce(draft, 'context', compileContextWindow(options).context, 'context-window')\n  },\n})\n/** `@ProjectContext` → `projectContext`. */\nexport const projectContext = fieldCapability('project-context', 'projectContext')\n/** `@MCP` → `mcpServers`. */\nexport const mcpServers = fieldCapability('mcp', 'mcpServers')\n/** `@Guardrails` → `guardrails`. */\nexport const guardrails = fieldCapability('guardrails', 'guardrails')\n/**\n * `@Checkpoint` → `checkpoint`. Carries the non-durable WARNING the metadata walk used to emit: only\n * `'filesystem'` selects the SDK's durable store, so any other storage cannot resume across\n * requests. The warning moves WITH the feature — a declared checkpoint that silently cannot resume\n * is exactly the kind of no-op this project refuses to ship.\n */\nexport const checkpoint = (options: CompiledAgentOptions['checkpoint']): Capability => ({\n  name: 'checkpoint',\n  apply: (draft) => {\n    if (options !== undefined && options.storage !== 'filesystem') {\n      console.warn(\n        `[THEO_AGENT_CHECKPOINT_STORAGE_METADATA_ONLY] checkpoint({ storage: '${options.storage ?? 'memory'}' }) ` +\n          `does NOT resume across requests — only 'filesystem' selects the SDK's durable conversation ` +\n          `store. Use checkpoint({ storage: 'filesystem' }) for cross-request resume.`,\n      )\n    }\n    setOnce(draft, 'checkpoint', options, 'checkpoint')\n  },\n})\n/** `@HumanInTheLoop` → `hitl` (keyed `\"<toolbox>.<tool>\"`, as `compileHitlGates` keys it today). */\nexport const humanInTheLoop = fieldCapability('human-in-the-loop', 'hitl')\n/**\n * `@SubAgents` → `agents`. MERGES instead of `setOnce`: `agents` is a pre-seeded collection on the\n * draft (`createDraft` gives it `{}`), so a `setOnce` would conflict against the seed itself — the\n * same trap the pre-seeded `stream` sprang in M52. Merging also lets a preset declare a baseline\n * child set that a call site extends.\n */\nexport const subAgents = (children: CompiledAgentOptions['agents']): Capability => ({\n  name: 'sub-agents',\n  apply: (draft) => {\n    for (const [name, child] of Object.entries(children)) {\n      if (name in draft.agents && draft.agents[name] !== child) {\n        throw new ConfigurationError(\n          `sub-agents: filho \"${name}\" declarado duas vezes com definições diferentes`,\n        )\n      }\n      draft.agents[name] = child\n    }\n    draft.provenance.push({ capability: 'sub-agents', contributed: ['agents'] })\n  },\n})\n/**\n * `@Skills({ include, autoDiscover })` → `skills`. Delegates to `compileSkills` (same reason as\n * `contextWindow`). Distinct from the M52 `skills([...])`, which takes the plain name/inline list.\n */\nexport const skillsOptions = (options: SkillsOptions): Capability => ({\n  name: 'skills',\n  apply: (draft) => {\n    setOnce(draft, 'skills', compileSkills(options), 'skills')\n  },\n})\n\n/** Functional-path fields that had no decorator source — closing the gap list, not adding surface. */\nexport const settingSources = fieldCapability('setting-sources', 'settingSources')\nexport const plugins = fieldCapability('plugins', 'plugins')\nexport const runContext = fieldCapability('run-context', 'runContext')\nexport const skillsResolver = fieldCapability('skills-resolver', 'skillsResolver')\n\n/** The scalar agent config (name/route are HTTP concerns, never agent config). */\nexport interface AgentConfig {\n  readonly systemPrompt?: CompiledAgentOptions['systemPrompt']\n  readonly parseThinkTags?: boolean\n  readonly stripToolDialect?: boolean\n  readonly recoverLeakedToolCalls?: boolean\n  readonly stream?: boolean\n  readonly maxIterations?: number\n  readonly timeoutMs?: number\n}\n\n/**\n * Scalar waist fields (formerly the `@Agent` options). CLASS, not a factory: it validates, and it is the one\n * capability that writes fields another capability may legitimately override (see\n * {@link MainLoopCapability}).\n */\nexport class AgentConfigCapability implements Capability {\n  readonly name = 'agent-config'\n  constructor(private readonly config: AgentConfig) {\n    // The registry hands this `unknown` straight from a config file, so the guard is real at\n    // runtime even though the declared type makes it look redundant to the compiler.\n    // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- boundary check: the value may not be an object at runtime\n    if (typeof config !== 'object' || config === null) {\n      throw new ConfigurationError('agent-config: esperava um objeto de configuração')\n    }\n    for (const field of ['maxIterations', 'timeoutMs'] as const) {\n      const value = config[field]\n      if (value !== undefined && (!Number.isFinite(value) || value <= 0)) {\n        throw new ConfigurationError(`agent-config: \\`${field}\\` deve ser um número positivo`)\n      }\n    }\n  }\n\n  apply(draft: CompiledAgentOptionsDraft): void {\n    // `maxIterations`/`timeoutMs` are the two fields `main-loop` outranks (see MainLoopCapability).\n    // Skipping them when main-loop already contributed makes the precedence ORDER-INDEPENDENT while\n    // still letting two agent-config declarations conflict with each other.\n    const claimedByMainLoop = (field: string): boolean =>\n      draft.provenance.some((p) => p.capability === 'main-loop' && p.contributed.includes(field))\n    if (!claimedByMainLoop('maxIterations')) {\n      setOnce(draft, 'maxIterations', this.config.maxIterations, this.name)\n    }\n    if (!claimedByMainLoop('timeoutMs')) {\n      setOnce(draft, 'timeoutMs', this.config.timeoutMs, this.name)\n    }\n    setOnce(draft, 'systemPrompt', this.config.systemPrompt, this.name)\n    setOnce(draft, 'parseThinkTags', this.config.parseThinkTags, this.name)\n    setOnce(draft, 'stripToolDialect', this.config.stripToolDialect, this.name)\n    setOnce(draft, 'recoverLeakedToolCalls', this.config.recoverLeakedToolCalls, this.name)\n    setOnce(draft, 'stream', this.config.stream, this.name)\n  }\n}\n\n/**\n * `@MainLoop({ maxIterations, timeoutMs })` → the same two fields `@Agent` can write.\n *\n * PRECEDENCE, preserved deliberately: `compileAgent` resolves these as\n * `mainLoop.x ?? agentConfig.x` — the main-loop declaration WINS when both are present. A plain\n * `setOnce` would raise a conflict where the pipeline has a defined winner, so this capability\n * OVERRIDES instead. That is the one place in the layer where a later write beats an earlier one,\n * and it exists to keep behavior identical, not for convenience.\n */\nexport class MainLoopCapability implements Capability {\n  readonly name = 'main-loop'\n  constructor(private readonly config: { maxIterations?: number; timeoutMs?: number }) {}\n\n  apply(draft: CompiledAgentOptionsDraft): void {\n    const contributed: string[] = []\n    if (this.config.maxIterations !== undefined) {\n      draft.maxIterations = this.config.maxIterations\n      contributed.push('maxIterations')\n    }\n    if (this.config.timeoutMs !== undefined) {\n      draft.timeoutMs = this.config.timeoutMs\n      contributed.push('timeoutMs')\n    }\n    if (contributed.length > 0) draft.provenance.push({ capability: this.name, contributed })\n  }\n}\n","import {\n  compileTools,\n  type ClassToken,\n  type CompiledTool,\n  type ToolboxWalkResult,\n} from '../bridge/agent-compiler.js'\nimport type { ApprovalOptions, HumanInTheLoopOptions, ToolOptions } from '../types.js'\n\nimport { ConfigurationError } from './capabilities.js'\nimport type { Capability, CompiledAgentOptionsDraft } from './capability.js'\n\n/**\n * M53 — tools without `@Toolbox`/`@Tool`.\n *\n * A toolbox class declares its tools as DATA (`static tools`) and keeps its handlers as ordinary\n * methods; the capability takes an INSTANCE. That preserves what the decorators actually bought —\n * grouping under a namespace and handlers bound to the instance (so a toolbox can hold state and\n * injected dependencies) — with no metadata reflection at all.\n *\n * The compilation itself is NOT reimplemented: it delegates to `compileTools`, the same function the\n * decorator path calls, so namespacing (`toolRuntimeName`), handler binding and the fail-fast checks\n * stay in one place.\n *\n * @example\n * ```ts\n * class SupportTools {\n *   static tools: ToolDeclaration[] = [\n *     { name: 'search', description: 'Search tickets', input: z.object({ q: z.string() }), method: 'search' },\n *   ]\n *   async search({ q }: { q: string }): Promise<string> { return `found ${q}` }\n * }\n *\n * const agent = applyCapabilities([\n *   new ModelCapability('openai/gpt-5.4'),\n *   new ToolboxCapability(new SupportTools(), { namespace: 'support' }),\n * ])\n * ```\n */\nexport interface ToolDeclaration extends ToolOptions {\n  /** Method on the toolbox instance that implements this tool. */\n  readonly method: string\n  /** Require human approval before the tool runs (surfaced in the manifest). */\n  readonly approval?: ApprovalOptions\n  /** Gate the tool behind human-in-the-loop (M4). */\n  readonly hitl?: HumanInTheLoopOptions\n  /** Manifest-only observability flags. */\n  readonly trace?: boolean\n  readonly audit?: boolean\n}\n\n/** A toolbox instance whose class declares its tools. */\nexport interface ToolboxSource {\n  readonly constructor: { tools?: readonly ToolDeclaration[] }\n}\n\nexport interface ToolboxOptions {\n  /** Prefix for every tool name (`\"<namespace>.<tool>\"`), as `@Toolbox({ namespace })` did. */\n  readonly namespace?: string\n  /** Declarations, when they are not on the class as `static tools`. */\n  readonly tools?: readonly ToolDeclaration[]\n}\n\nexport class ToolboxCapability implements Capability {\n  readonly name = 'toolbox'\n  readonly #instance: object\n  readonly #declarations: readonly ToolDeclaration[]\n  readonly #namespace: string\n\n  constructor(instance: object, options: ToolboxOptions = {}) {\n    // Boundary check: the registry hands this `unknown` straight from a config file, so the guard is\n    // real at runtime even though the declared type makes it look redundant to the compiler.\n    // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- may not be an object at runtime\n    if (typeof instance !== 'object' || instance === null) {\n      throw new ConfigurationError('toolbox: esperava uma instância de toolbox')\n    }\n    const declared =\n      options.tools ?? (instance.constructor as { tools?: readonly ToolDeclaration[] }).tools\n    if (declared === undefined || declared.length === 0) {\n      throw new ConfigurationError(\n        `toolbox: ${instance.constructor.name} não declara tools — use \\`static tools = [...]\\` ou a opção \\`tools\\``,\n      )\n    }\n    for (const tool of declared) {\n      // Validate here rather than at call time: a missing method only surfaces when the model\n      // decides to call the tool, which is the worst moment to discover a typo.\n      if (typeof (instance as Record<string, unknown>)[tool.method] !== 'function') {\n        throw new ConfigurationError(\n          `toolbox: ${instance.constructor.name}.${tool.method} não é um método (tool \"${tool.name}\")`,\n        )\n      }\n    }\n    this.#instance = instance\n    this.#declarations = declared\n    this.#namespace = options.namespace ?? ''\n  }\n\n  /** The compiled tools this toolbox contributes — the same shape the decorator path produces. */\n  compile(): CompiledTool[] {\n    // `constructor` is typed `Function` by lib.d.ts; here it is used purely as an IDENTITY key\n    // into the instances map, which is what `ClassToken` models.\n    const token = this.#instance.constructor as ClassToken\n    const walk: ToolboxWalkResult = {\n      class: token,\n      namespace: this.#namespace,\n      guards: [],\n      tools: this.#declarations.map((tool) => ({\n        propertyKey: tool.method,\n        config: tool,\n        guards: [],\n        approval: tool.approval,\n        trace: tool.trace ?? false,\n        audit: tool.audit ?? false,\n        ...(tool.hitl !== undefined ? { hitl: tool.hitl } : {}),\n      })),\n    }\n    return compileTools([walk], new Map([[token, this.#instance]]))\n  }\n\n  apply(draft: CompiledAgentOptionsDraft): void {\n    // ACCUMULATES: several toolboxes compose into one agent, exactly as several `@Toolbox` classes did.\n    draft.tools.push(...this.compile())\n    draft.provenance.push({ capability: this.name, contributed: ['tools'] })\n\n    // `hitl` is keyed `\"<namespace>.<tool>\"` — the same key `compileHitlGates` builds. Collecting\n    // the pairs first keeps `hitl` narrowed by the guard, with no assertion.\n    const gates: [string, HumanInTheLoopOptions][] = []\n    for (const tool of this.#declarations) {\n      if (tool.hitl === undefined) continue\n      gates.push([\n        this.#namespace === '' ? tool.name : `${this.#namespace}.${tool.name}`,\n        tool.hitl,\n      ])\n    }\n    if (gates.length === 0) return\n    draft.hitl ??= new Map()\n    for (const [key, options] of gates) draft.hitl.set(key, options)\n    draft.provenance.push({ capability: this.name, contributed: ['hitl'] })\n  }\n}\n","/**\n * M15 (theokit-ai-first) — A2A agent card generation (ADR-0040 § D2, home/discovery concern).\n *\n * Produces an [A2A](https://github.com/google/A2A)-spec Agent Card from the framework's\n * `AgentManifestEntry`, so other systems can discover a TheoKit agent's capabilities over HTTP at\n * `/.well-known/<name>/agent-card.json`. Pure data transform — no LLM, no runtime (G2).\n */\nimport type { AgentManifestEntry } from '../manifest/agent-manifest.js'\n\n/** A single capability exposed by an A2A agent (maps from a TheoKit tool). */\nexport interface A2ASkill {\n  id: string\n  name: string\n  description: string\n}\n\n/** A2A agent-card capabilities block. */\nexport interface A2ACapabilities {\n  streaming: boolean\n  pushNotifications: boolean\n  stateTransitionHistory: boolean\n}\n\n/** An A2A-spec Agent Card (the subset TheoKit advertises). */\nexport interface AgentCard {\n  name: string\n  description: string\n  url: string\n  version: string\n  capabilities: A2ACapabilities\n  defaultInputModes: string[]\n  defaultOutputModes: string[]\n  skills: A2ASkill[]\n}\n\nexport interface BuildAgentCardOptions {\n  /** Absolute base URL of the deployment (e.g. `https://app.example.com`). A trailing slash is trimmed. */\n  baseUrl: string\n  /** Human description of the agent. Defaults to a generated sentence when omitted (spec requires non-empty). */\n  description?: string\n}\n\n/** Strip a single trailing slash so `${baseUrl}${route}` never doubles the separator. */\nfunction trimTrailingSlash(url: string): string {\n  return url.endsWith('/') ? url.slice(0, -1) : url\n}\n\n/** Build an A2A agent card from a manifest entry. */\nexport function buildAgentCard(entry: AgentManifestEntry, options: BuildAgentCardOptions): AgentCard {\n  const base = trimTrailingSlash(options.baseUrl)\n  return {\n    name: entry.name,\n    description: options.description ?? `TheoKit agent \"${entry.name}\".`,\n    url: `${base}${entry.route}`,\n    version: '1.0',\n    capabilities: {\n      streaming: entry.stream,\n      pushNotifications: false,\n      stateTransitionHistory: false,\n    },\n    defaultInputModes: ['text'],\n    defaultOutputModes: ['text'],\n    skills: entry.tools.map((t) => ({ id: t.name, name: t.name, description: t.description })),\n  }\n}\n\n/** The A2A discovery path for an agent: `/.well-known/<name>/agent-card.json`. */\nexport function wellKnownCardPath(agentName: string): string {\n  return `/.well-known/${agentName}/agent-card.json`\n}\n","/**\n * M16 (theokit-ai-first) — MCP server manifest generation (ADR-0040 § D2, home concern).\n *\n * Exposes a TheoKit agent's tools to external MCP clients as `tools/list` descriptors, so the app\n * can advertise its agents over its OWN HTTP routes. Pure data transform — no LLM, no runtime, and\n * NO stdio transport (that stays SDK-side per sdk-runtime.md). Serving these over `GET /mcp` and the\n * JSON-RPC envelope are follow-ups (mount path).\n */\nimport type { AgentManifestEntry } from '../manifest/agent-manifest.js'\n\n/** The MCP protocol revision these descriptors target. */\nexport const MCP_PROTOCOL_VERSION = '2024-11-05'\n\n/** A JSON-schema object (the shape MCP expects for a tool's `inputSchema`). */\nexport interface McpJsonSchema {\n  type: 'object'\n  properties: Record<string, unknown>\n  required?: string[]\n}\n\n/** An MCP `tools/list` tool descriptor. */\nexport interface McpToolDescriptor {\n  name: string\n  description: string\n  inputSchema: McpJsonSchema\n}\n\n/** MCP `initialize` server info. */\nexport interface McpServerInfo {\n  name: string\n  version: string\n  protocolVersion: string\n}\n\n/**\n * Map an agent's tools to MCP tool descriptors. The manifest tool carries name + description; the\n * per-tool JSON schema is not retained in the manifest, so a permissive empty-object schema is\n * emitted (MCP clients accept it and pass through arbitrary args). Wiring the real per-tool schema\n * is a follow-up once the manifest carries it.\n */\nexport function buildMcpToolDescriptors(entry: AgentManifestEntry): McpToolDescriptor[] {\n  return entry.tools.map((t) => ({\n    name: t.name,\n    description: t.description,\n    inputSchema: { type: 'object', properties: {} },\n  }))\n}\n\n/** Build the MCP `initialize` server-info block for an agent. */\nexport function mcpServerInfo(entry: AgentManifestEntry): McpServerInfo {\n  return { name: entry.name, version: '1.0', protocolVersion: MCP_PROTOCOL_VERSION }\n}\n","/**\n * M15 (theokit-ai-first) — A2A client: call a remote A2A agent as a tool (ADR-0040 § D2).\n *\n * `createA2ATool` returns a `CustomTool` whose handler POSTs the input message to a remote agent's\n * HTTP endpoint and returns its text response — cross-network delegation. Uses `fetch` (Web\n * Standards, G8). The target is a remote AGENT endpoint, not an LLM provider, so the G2 grep guard\n * (`openrouter.ai|api.openai.com|api.anthropic.com`) is unaffected. `fetchImpl` is injectable for tests.\n */\nimport type { CustomTool } from '@theokit/sdk'\n\n/** How to authenticate to the remote agent. */\nexport interface A2AAuth {\n  /** Bearer token → `Authorization: Bearer <token>`. */\n  bearer?: string\n  /** API-key header pair → `<name>: <value>` (e.g. `x-api-key`). */\n  apiKey?: { header: string; value: string }\n}\n\nexport interface A2AToolConfig {\n  /** Remote agent endpoint URL (POST target). */\n  url: string\n  /** Tool name the model calls. */\n  name: string\n  /** Tool description surfaced to the model. */\n  description: string\n  /** Static headers merged into every request. */\n  headers?: Record<string, string>\n  /** Auth applied to every request. */\n  auth?: A2AAuth\n  /** Injected fetch (defaults to the global). Narrowed to the call shape this client uses. */\n  fetchImpl?: (url: string, init: RequestInit) => Promise<Response>\n}\n\n/** Build the request headers from static headers + auth. */\nfunction buildHeaders(config: A2AToolConfig): Record<string, string> {\n  const headers: Record<string, string> = { 'content-type': 'application/json', ...config.headers }\n  if (config.auth?.bearer) headers.authorization = `Bearer ${config.auth.bearer}`\n  if (config.auth?.apiKey) headers[config.auth.apiKey.header] = config.auth.apiKey.value\n  return headers\n}\n\n/**\n * Create a tool that delegates to a remote A2A agent. The remote is expected to answer a\n * `{ message }` POST with a JSON body carrying a `response` (or `text`) string.\n */\nexport function createA2ATool(config: A2AToolConfig): CustomTool {\n  const doFetch = config.fetchImpl ?? fetch\n  return {\n    name: config.name,\n    description: config.description,\n    inputSchema: {\n      type: 'object',\n      properties: { message: { type: 'string', description: 'The message to send to the remote agent.' } },\n      required: ['message'],\n    },\n    handler: async (input: Record<string, unknown>): Promise<string> => {\n      // The input schema requires `message: string`; narrow defensively (never base-to-string).\n      const message = typeof input.message === 'string' ? input.message : ''\n      const res = await doFetch(config.url, {\n        method: 'POST',\n        headers: buildHeaders(config),\n        body: JSON.stringify({ message }),\n      })\n      if (!res.ok) {\n        throw new Error(`A2A call to \"${config.name}\" failed: ${res.status} ${res.statusText}`)\n      }\n      const data = (await res.json()) as { response?: string; text?: string }\n      return data.response ?? data.text ?? ''\n    },\n  }\n}\n","/**\n * M11 (theokit-ai-first) — {resource, thread} conversation scoping (ADR-0040 § D2, home concern).\n *\n * Maps a request's (resource, thread) pair to a deterministic, collision-safe conversation id so\n * multi-tenant apps isolate history without hand-building `user-${id}-thread-${id}` strings. This\n * is the app's request→conversation mapping — NOT the SDK's storage engine (which the derived id is\n * simply handed to). Background compression of long histories stays SDK-side.\n *\n * Encoding: each component is `encodeURIComponent`-escaped and joined with `/`. Since\n * `encodeURIComponent` escapes a raw `/` to `%2F`, the separator is unambiguous — `('a/b','c')` and\n * `('a','b/c')` derive DIFFERENT ids (collision-safe). Reversible via {@link parseConversationId}.\n */\n\nconst SEPARATOR = '/'\n\n/** Derive a deterministic conversation id from a (resource, thread) pair. Fails fast on empty input. */\nexport function deriveConversationId(resource: string, thread: string): string {\n  if (!resource) throw new Error('[@theokit/agents] deriveConversationId: resource must be non-empty')\n  if (!thread) throw new Error('[@theokit/agents] deriveConversationId: thread must be non-empty')\n  return `${encodeURIComponent(resource)}${SEPARATOR}${encodeURIComponent(thread)}`\n}\n\n/**\n * Reverse a derived conversation id back to its (resource, thread). Returns `null` for a value that\n * is not a derived scope id (no separator, or an empty component) — callers treat that as \"opaque id,\n * not scoped\".\n */\nexport function parseConversationId(id: string): { resource: string; thread: string } | null {\n  const idx = id.indexOf(SEPARATOR)\n  if (idx <= 0 || idx >= id.length - 1) return null\n  const resource = decodeURIComponent(id.slice(0, idx))\n  const thread = decodeURIComponent(id.slice(idx + 1))\n  if (!resource || !thread) return null\n  return { resource, thread }\n}\n","/**\n * M13 (theokit-ai-first) — per-request skills resolution (ADR-0040 § D2, home/boundary concern).\n *\n * The static `skills.enabled` filter already works (`compile-skills` maps `include` → the SDK's\n * `enabled`). This adds a PER-REQUEST resolver so multi-tenant apps expose different skill sets to\n * different users. A selection is either a static list or a function of the request context (the M7\n * run-context). Discovery + injection stay in the SDK; this only CHOOSES the enabled set per call.\n */\n\nimport type { InlineSkill } from '@theokit/sdk'\n\n/** The request context handed to a skills resolver (the M7 run-context — opaque per-request data). */\nexport type SkillsRequestContext = Record<string, unknown>\n\n/**\n * How the skill set is chosen:\n * - a static array of `string` (filesystem skill NAMES → `skills.enabled`) and/or `InlineSkill`\n *   objects from `createSkill` (code-defined skills → `skills.inline`, injected into the `<skills>`\n *   block). A mixed list is split at compile time.\n * - a function — resolved per request from the {@link SkillsRequestContext} (sync or async). The\n *   resolver returns filesystem skill NAMES (inline skills are static — declared on the agent).\n */\nexport type SkillsSelection =\n  | readonly (string | InlineSkill)[]\n  | ((ctx: SkillsRequestContext) => readonly string[] | Promise<readonly string[]>)\n\n/**\n * Resolve the enabled skill names for a request. Returns `undefined` when no selection is given (the\n * SDK then enables every discovered skill). Fails fast if a resolver returns a non-array. The static\n * array is compiled ahead of time (see `compileSkillsSelection`), so this is exercised for the\n * resolver form; a static array is defensively narrowed to its string (name) members.\n */\nexport async function resolveEnabledSkills(\n  selection: SkillsSelection | undefined,\n  ctx: SkillsRequestContext,\n): Promise<string[] | undefined> {\n  if (selection === undefined) return undefined\n  if (typeof selection !== 'function') {\n    return selection.filter((s): s is string => typeof s === 'string')\n  }\n  const resolved: unknown = await selection(ctx)\n  if (!Array.isArray(resolved)) {\n    throw new Error('[@theokit/agents] skills resolver must return an array of skill names')\n  }\n  // The resolver is USER code, so the array's ITEMS are validated too — previously only the array\n  // shape was checked and a `[42, null]` would have reached `Agent.create` as \"skill names\".\n  const names = resolved as readonly unknown[]\n  if (!names.every((n): n is string => typeof n === 'string' && n.trim().length > 0)) {\n    throw new Error('[@theokit/agents] skills resolver must return non-empty skill NAME strings')\n  }\n  return [...names]\n}\n","/**\n * M17 (theokit-ai-first) — ACP (Agent Client Protocol) stdio framing.\n *\n * ACP talks to a coding agent (Claude Code, Amp, Codex) over stdio as newline-delimited JSON. This\n * is the transport-agnostic CORE: encode a message to a line, and decode a byte/char stream that may\n * split a message across chunks. Pure — no subprocess, no Node API. The subprocess spawn lives in the\n * adapter layer (G8) / SDK; `createACPTool` (wrapping this codec + an injected transport) is a\n * follow-up once the adapter ships.\n */\n\n/** Serialize a message to a single newline-terminated JSON line. */\nexport function encodeAcpMessage(message: unknown): string {\n  return `${JSON.stringify(message)}\\n`\n}\n\n/**\n * Incremental decoder for newline-delimited JSON. Feed it chunks with {@link push}; it buffers a\n * partial trailing line across calls and returns every WHOLE message parsed so far. Blank lines are\n * skipped. A completed non-JSON line fails fast with a typed error (error-handling.md) — a corrupt\n * frame must never be silently dropped.\n */\nexport class AcpMessageDecoder {\n  private buffer = ''\n\n  /** Feed a chunk; returns the messages completed by this chunk (possibly empty). */\n  push(chunk: string): unknown[] {\n    this.buffer += chunk\n    const messages: unknown[] = []\n    let newlineIndex = this.buffer.indexOf('\\n')\n    while (newlineIndex !== -1) {\n      const line = this.buffer.slice(0, newlineIndex).trim()\n      this.buffer = this.buffer.slice(newlineIndex + 1)\n      if (line.length > 0) {\n        try {\n          messages.push(JSON.parse(line))\n        } catch (cause) {\n          throw new Error(`[@theokit/agents] ACP decode failed on line: ${line}`, { cause })\n        }\n      }\n      newlineIndex = this.buffer.indexOf('\\n')\n    }\n    return messages\n  }\n}\n","/**\n * M17 (theokit-ai-first) — ACP client: JSON-RPC over the stdio framing.\n *\n * Drives a coding agent (Claude Code, Amp, Codex) over an INJECTED {@link AcpTransport}. The\n * subprocess spawn is a Node API and lives in the adapter layer (G8); this client is transport-\n * agnostic and testable. It correlates responses to requests by `id`, and dispatches server→client\n * requests (e.g. `session/request_permission`) to a registered handler, replying with its decision.\n */\nimport { AcpMessageDecoder, encodeAcpMessage } from './protocol.js'\n\n/** The stdio channel to the coding-agent subprocess (abstracted for testability + G8). */\nexport interface AcpTransport {\n  /** Write one already-encoded (newline-terminated) line to the agent's stdin. */\n  send(line: string): void\n  /** Subscribe to raw lines/chunks from the agent's stdout. */\n  subscribe(onData: (chunk: string) => void): void\n}\n\ninterface JsonRpcResponse {\n  id: number\n  result?: unknown\n  error?: { code: number; message: string }\n}\ninterface JsonRpcServerRequest {\n  id: number\n  method: string\n  params?: unknown\n}\n\ninterface Pending {\n  resolve: (value: unknown) => void\n  reject: (err: Error) => void\n}\n/** Return a value or a Promise — `unknown` already includes `Promise<unknown>`; `await` handles both. */\ntype ServerRequestHandler = (params: unknown) => unknown\n\nfunction isResponse(m: Record<string, unknown>): m is JsonRpcResponse & Record<string, unknown> {\n  return typeof m.id === 'number' && (('result' in m) || ('error' in m)) && !('method' in m)\n}\nfunction isServerRequest(m: Record<string, unknown>): m is JsonRpcServerRequest & Record<string, unknown> {\n  return typeof m.method === 'string' && typeof m.id === 'number'\n}\n\nexport class AcpClient {\n  private nextId = 1\n  private readonly pending = new Map<number, Pending>()\n  private readonly handlers = new Map<string, ServerRequestHandler>()\n  private readonly decoder = new AcpMessageDecoder()\n\n  constructor(private readonly transport: AcpTransport) {\n    transport.subscribe((chunk) => {\n      for (const message of this.decoder.push(chunk)) {\n        this.dispatch(message as Record<string, unknown>)\n      }\n    })\n  }\n\n  /** Send a JSON-RPC request and resolve with its `result` (or reject on `error`). */\n  request(method: string, params: unknown): Promise<unknown> {\n    const id = this.nextId++\n    return new Promise<unknown>((resolve, reject) => {\n      this.pending.set(id, { resolve, reject })\n      this.transport.send(encodeAcpMessage({ jsonrpc: '2.0', id, method, params }))\n    })\n  }\n\n  /** Register a handler for a server→client request method (e.g. `session/request_permission`). */\n  onRequest(method: string, handler: ServerRequestHandler): void {\n    this.handlers.set(method, handler)\n  }\n\n  private dispatch(message: Record<string, unknown>): void {\n    if (isResponse(message)) {\n      const entry = this.pending.get(message.id)\n      if (!entry) return\n      this.pending.delete(message.id)\n      if (message.error) entry.reject(new Error(message.error.message))\n      else entry.resolve(message.result)\n      return\n    }\n    if (isServerRequest(message)) {\n      void this.handleServerRequest(message)\n    }\n  }\n\n  private async handleServerRequest(req: JsonRpcServerRequest): Promise<void> {\n    const handler = this.handlers.get(req.method)\n    if (!handler) {\n      this.transport.send(\n        encodeAcpMessage({ jsonrpc: '2.0', id: req.id, error: { code: -32601, message: `No handler: ${req.method}` } }),\n      )\n      return\n    }\n    try {\n      const result = await handler(req.params)\n      this.transport.send(encodeAcpMessage({ jsonrpc: '2.0', id: req.id, result }))\n    } catch (err) {\n      this.transport.send(\n        encodeAcpMessage({\n          jsonrpc: '2.0',\n          id: req.id,\n          error: { code: -32603, message: err instanceof Error ? err.message : 'handler failed' },\n        }),\n      )\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAASA,yBAAyB;AAqC3B,IAAMC,0BAAN,cAAsCC,MAAAA;EArC7C,OAqC6CA;;;EACzBC,OAAO;EACzB,YAAYC,OAAeC,UAAmBC,MAAeC,YAAoB;AAC/E;;;;MAIE,eAAeA,UAAAA,aAAuBH,KAAAA,sBAAwBI,QAAQH,QAAAA,CAAAA,wCAC9BG,QAAQF,IAAAA,CAAAA;IAA8B;EAElF;AACF;AAGA,SAASE,QAAQC,OAAc;AAC7B,MAAIA,UAAU,KAAM,QAAO;AAC3B,MAAIC,MAAMC,QAAQF,KAAAA,EAAQ,QAAO,SAASA,MAAMG,MAAM;AACtD,MAAI,OAAOH,UAAU,UAAU;AAC7B,WAAO,UAAUI,OAAOC,KAAKL,KAAAA,EAC1BM,KAAK,CAACC,GAAGC,MAAMD,EAAEE,cAAcD,CAAAA,CAAAA,EAC/BE,KAAK,GAAA,CAAA;EACV;AACA,SAAO,OAAOV;AAChB;AATSD;AAgBF,SAASY,cAAAA;AACd,SAAO;IAAEC,OAAO,CAAA;IAAIC,QAAQ,CAAC;IAAGC,YAAY,CAAA;EAAG;AACjD;AAFgBH;AAQT,SAASI,kBACdC,cACAC,QAAmCN,YAAAA,GAAa;AAEhD,aAAWO,KAAKF,aAAcE,GAAEC,MAAMF,KAAAA;AACtCA,QAAMG,WAAW;AACjB,SAAOH;AACT;AAPgBF;AAUT,SAASM,QACdJ,OACAtB,OACAK,OACAF,YAAkB;AAElB,MAAIE,UAAUsB,OAAW;AACzB,QAAM1B,WAAWqB,MAAMtB,KAAAA;AAOvB,MAAIC,aAAa0B,UAAa,CAACC,kBAAkB3B,UAAUI,KAAAA,GAAQ;AACjE,UAAM,IAAIR,wBAAwBG,OAAOC,UAAUI,OAAOF,UAAAA;EAC5D;AACAmB,QAAMtB,KAAAA,IAASK;AACfiB,QAAMH,WAAWU,KAAK;IAAE1B;IAAY2B,aAAa;MAAC9B;;EAAO,CAAA;AAC3D;AAnBgB0B;;;ACvET,IAAMK,qBAAN,cAAiCC,MAAAA;EAXxC,OAWwCA;;;EACpBC,OAAO;AAC3B;AAGA,SAASC,SAASC,OAAc;AAC9B,MAAIA,UAAU,KAAM,QAAO;AAC3B,SAAOC,MAAMC,QAAQF,KAAAA,IAAS,UAAU,OAAOA;AACjD;AAHSD;AAMF,IAAMI,kBAAN,MAAMA;EAtBb,OAsBaA;;;;;EACFL,OAAO;EAChB,YACmBM,IACAC,iBACjB;SAFiBD,KAAAA;SACAC,kBAAAA;AAKjB,QAAI,OAAOD,OAAO,UAAU;AAC1B,YAAM,IAAIR,mBAAmB,kCAAkCG,SAASK,EAAAA,CAAAA,EAAK;IAC/E;AACA,QAAIA,GAAGE,KAAI,EAAGC,WAAW,EAAG,OAAM,IAAIX,mBAAmB,iCAAA;EAC3D;EACAY,MAAMC,OAAwC;AAC5CC,YAAQD,OAAO,SAAS,KAAKL,IAAI,KAAKN,IAAI;AAC1C,QAAI,KAAKO,oBAAoBM,QAAW;AACtCD,cAAQD,OAAO,mBAAmB,KAAKJ,iBAAiB,KAAKP,IAAI;IACnE;EACF;AACF;AAGO,IAAMc,kBAAN,MAAMA;EA7Cb,OA6CaA;;;EACFd,OAAO;EACP;EACT,YAAYe,OAAgC;AAC1C,SAAK,SAASA;EAChB;EACAL,MAAMC,OAAwC;AAC5CA,UAAMI,MAAMC,KAAI,GAAI,KAAK,MAAM;AAC/BL,UAAMM,WAAWD,KAAK;MAAEE,YAAY,KAAKlB;MAAMmB,aAAa;QAAC;;IAAS,CAAA;EACxE;AACF;AAMO,IAAMC,SAAS,wBAACC,YAAAA;AAIrB,MAAI,CAAClB,MAAMC,QAAQiB,OAAAA,GAAU;AAC3B,UAAM,IAAIvB,mBAAmB,2CAA2CG,SAASoB,OAAAA,CAAAA,EAAU;EAC7F;AACA,aAAWC,KAAKD,SAAS;AAUvB,QAAI,OAAOC,MAAM,UAAU;AACzB,UAAIA,EAAEd,KAAI,EAAGC,WAAW,GAAG;AACzB,cAAM,IAAIX,mBAAmB,6DAAA;MAC/B;AACA;IACF;AACA,QAAI,OAAOwB,MAAM,YAAYA,MAAM,QAAQnB,MAAMC,QAAQkB,CAAAA,GAAI;AAC3D,YAAM,IAAIxB,mBACR,gCAA6BG,SAASqB,CAAAA,CAAAA,yCAAsC;IAEhF;AAKA,eAAWC,SAAS;MAAC;MAAQ;MAAe;OAA0B;AACpE,YAAMrB,QAASoB,EAA8BC,KAAAA;AAC7C,UAAI,OAAOrB,UAAU,YAAYA,MAAMM,KAAI,EAAGC,WAAW,GAAG;AAC1D,cAAM,IAAIX,mBACR,8BAA8ByB,KAAAA,iBAAmBtB,SAASC,KAAAA,CAAAA,kEACxD;MAEN;IACF;EACF;AACA,SAAO;IACLF,MAAM;IACNU,OAAO,wBAACC,UAAAA;AAIN,YAAMa,WAAWC,uBAAuBJ,QAAQK,MAAK,CAAA;AACrD,UAAIF,SAASJ,WAAWP,OAAW;AASnC,YAAMc,WAAWhB,MAAMS;AACvBT,YAAMS,SACJO,aAAad,SACTW,SAASJ,SACT;;;;;;;QAOE,GAAGO;QACH,GAAGH,SAASJ;QACZQ,SAAS;aAAKD,SAASC,WAAW,CAAA;aAASJ,SAASJ,OAAOQ,WAAW,CAAA;;QACtE,GAAID,SAASE,WAAWhB,UAAaW,SAASJ,OAAOS,WAAWhB,SAC5D;UAAEgB,QAAQ;eAAKF,SAASE,UAAU,CAAA;eAASL,SAASJ,OAAOS,UAAU,CAAA;;QAAK,IAC1E,CAAC;MACP;AACNlB,YAAMM,WAAWD,KAAK;QAAEE,YAAY;QAAUC,aAAa;UAAC;;MAAU,CAAA;IACxE,GAjCO;EAkCT;AACF,GA/EsB;;;ACxDf,IAAMW,yBAAN,cAAqCC,MAAAA;EAN5C,OAM4CA;;;EACxBC,OAAO;EACzB,YAAYC,WAAmBC,OAA0B;AACvD,UACE,eAAeD,SAAAA,oCAA0CC,MAAMC,KAAK,IAAA,KAAS,WAAA,GAAc;EAE/F;AACF;AAGO,IAAMC,qBAAN,MAAMA;EAhBb,OAgBaA;;;EACF,aAAa,oBAAIC,IAAAA;EAE1BC,SAASN,MAAcO,SAA6C;AAClE,SAAK,WAAWC,IAAIR,MAAMO,OAAAA;AAC1B,WAAO;EACT;EAEAE,IAAIT,MAAuB;AACzB,WAAO,KAAK,WAAWS,IAAIT,IAAAA;EAC7B;EAEAU,QAAkB;AAChB,WAAO;SAAI,KAAK,WAAWC,KAAI;;EACjC;EAEAC,QAAQZ,MAAca,KAA2B;AAC/C,UAAMN,UAAU,KAAK,WAAWO,IAAId,IAAAA;AACpC,QAAIO,YAAYQ,OAAW,OAAM,IAAIjB,uBAAuBE,MAAM,KAAKU,MAAK,CAAA;AAC5E,WAAOH,QAAQM,GAAAA;EACjB;AACF;AAMO,IAAMG,mBAAN,MAAMA;EA3Cb,OA2CaA;;;;EACF;EACT,YACWhB,MACTiB,SACA;SAFSjB,OAAAA;AAGT,SAAK,WAAWiB;EAClB;EACAC,MAAMC,OAAwC;AAC5C,eAAWC,UAAU,KAAK,SAAUA,QAAOF,MAAMC,KAAAA;EACnD;AACF;;;ACjCA,SAASE,gBACPC,MACAC,OAAQ;AAER,SAAO,CAACC,WAAW;IACjBF;IACAG,OAAO,wBAACC,UAAAA;AACNC,cAAQD,OAAOH,OAAOC,OAAuCF,IAAAA;IAC/D,GAFO;EAGT;AACF;AAVSD;AAaF,IAAMO,SAASP,gBAAgB,UAAU,QAAA;AAOzC,IAAMQ,gBAAgB,wBAACC,aAA+C;EAC3ER,MAAM;EACNG,OAAO,wBAACC,UAAAA;AACNC,YAAQD,OAAO,WAAWK,qBAAqBD,OAAAA,EAASE,SAAS,gBAAA;EACnE,GAFO;AAGT,IAL6B;AAOtB,IAAMC,iBAAiBZ,gBAAgB,mBAAmB,gBAAA;AAE1D,IAAMa,aAAab,gBAAgB,OAAO,YAAA;AAE1C,IAAMc,aAAad,gBAAgB,cAAc,YAAA;AAOjD,IAAMe,aAAa,wBAACN,aAA6D;EACtFR,MAAM;EACNG,OAAO,wBAACC,UAAAA;AACN,QAAII,YAAYO,UAAaP,QAAQQ,YAAY,cAAc;AAC7DC,cAAQC,KACN,wEAAwEV,QAAQQ,WAAW,QAAA,iLAEb;IAElF;AACAX,YAAQD,OAAO,cAAcI,SAAS,YAAA;EACxC,GATO;AAUT,IAZ0B;AAcnB,IAAMW,iBAAiBpB,gBAAgB,qBAAqB,MAAA;AAO5D,IAAMqB,YAAY,wBAACC,cAA0D;EAClFrB,MAAM;EACNG,OAAO,wBAACC,UAAAA;AACN,eAAW,CAACJ,MAAMsB,KAAAA,KAAUC,OAAOC,QAAQH,QAAAA,GAAW;AACpD,UAAIrB,QAAQI,MAAMqB,UAAUrB,MAAMqB,OAAOzB,IAAAA,MAAUsB,OAAO;AACxD,cAAM,IAAII,mBACR,sBAAsB1B,IAAAA,wDAAsD;MAEhF;AACAI,YAAMqB,OAAOzB,IAAAA,IAAQsB;IACvB;AACAlB,UAAMuB,WAAWC,KAAK;MAAEC,YAAY;MAAcC,aAAa;QAAC;;IAAU,CAAA;EAC5E,GAVO;AAWT,IAbyB;AAkBlB,IAAMC,gBAAgB,wBAACvB,aAAwC;EACpER,MAAM;EACNG,OAAO,wBAACC,UAAAA;AACNC,YAAQD,OAAO,UAAU4B,cAAcxB,OAAAA,GAAU,QAAA;EACnD,GAFO;AAGT,IAL6B;AAQtB,IAAMyB,iBAAiBlC,gBAAgB,mBAAmB,gBAAA;AAC1D,IAAMmC,UAAUnC,gBAAgB,WAAW,SAAA;AAC3C,IAAMoC,aAAapC,gBAAgB,eAAe,YAAA;AAClD,IAAMqC,iBAAiBrC,gBAAgB,mBAAmB,gBAAA;AAkB1D,IAAMsC,wBAAN,MAAMA;EAhIb,OAgIaA;;;;EACFrC,OAAO;EAChB,YAA6BsC,QAAqB;SAArBA,SAAAA;AAI3B,QAAI,OAAOA,WAAW,YAAYA,WAAW,MAAM;AACjD,YAAM,IAAIZ,mBAAmB,wDAAA;IAC/B;AACA,eAAWzB,SAAS;MAAC;MAAiB;OAAuB;AAC3D,YAAMC,QAAQoC,OAAOrC,KAAAA;AACrB,UAAIC,UAAUa,WAAc,CAACwB,OAAOC,SAAStC,KAAAA,KAAUA,SAAS,IAAI;AAClE,cAAM,IAAIwB,mBAAmB,mBAAmBzB,KAAAA,mCAAqC;MACvF;IACF;EACF;EAEAE,MAAMC,OAAwC;AAI5C,UAAMqC,oBAAoB,wBAACxC,UACzBG,MAAMuB,WAAWe,KAAK,CAACC,MAAMA,EAAEd,eAAe,eAAec,EAAEb,YAAYc,SAAS3C,KAAAA,CAAAA,GAD5D;AAE1B,QAAI,CAACwC,kBAAkB,eAAA,GAAkB;AACvCpC,cAAQD,OAAO,iBAAiB,KAAKkC,OAAOO,eAAe,KAAK7C,IAAI;IACtE;AACA,QAAI,CAACyC,kBAAkB,WAAA,GAAc;AACnCpC,cAAQD,OAAO,aAAa,KAAKkC,OAAOQ,WAAW,KAAK9C,IAAI;IAC9D;AACAK,YAAQD,OAAO,gBAAgB,KAAKkC,OAAOS,cAAc,KAAK/C,IAAI;AAClEK,YAAQD,OAAO,kBAAkB,KAAKkC,OAAOU,gBAAgB,KAAKhD,IAAI;AACtEK,YAAQD,OAAO,oBAAoB,KAAKkC,OAAOW,kBAAkB,KAAKjD,IAAI;AAC1EK,YAAQD,OAAO,0BAA0B,KAAKkC,OAAOY,wBAAwB,KAAKlD,IAAI;AACtFK,YAAQD,OAAO,UAAU,KAAKkC,OAAOa,QAAQ,KAAKnD,IAAI;EACxD;AACF;AAWO,IAAMoD,qBAAN,MAAMA;EA9Kb,OA8KaA;;;;EACFpD,OAAO;EAChB,YAA6BsC,QAAwD;SAAxDA,SAAAA;EAAyD;EAEtFnC,MAAMC,OAAwC;AAC5C,UAAM0B,cAAwB,CAAA;AAC9B,QAAI,KAAKQ,OAAOO,kBAAkB9B,QAAW;AAC3CX,YAAMyC,gBAAgB,KAAKP,OAAOO;AAClCf,kBAAYF,KAAK,eAAA;IACnB;AACA,QAAI,KAAKU,OAAOQ,cAAc/B,QAAW;AACvCX,YAAM0C,YAAY,KAAKR,OAAOQ;AAC9BhB,kBAAYF,KAAK,WAAA;IACnB;AACA,QAAIE,YAAYuB,SAAS,EAAGjD,OAAMuB,WAAWC,KAAK;MAAEC,YAAY,KAAK7B;MAAM8B;IAAY,CAAA;EACzF;AACF;;;ACjIO,IAAMwB,oBAAN,MAAMA;EA9Db,OA8DaA;;;EACFC,OAAO;EACP;EACA;EACA;EAET,YAAYC,UAAkBC,UAA0B,CAAC,GAAG;AAI1D,QAAI,OAAOD,aAAa,YAAYA,aAAa,MAAM;AACrD,YAAM,IAAIE,mBAAmB,+CAAA;IAC/B;AACA,UAAMC,WACJF,QAAQG,SAAUJ,SAAS,YAAuDI;AACpF,QAAID,aAAaE,UAAaF,SAASG,WAAW,GAAG;AACnD,YAAM,IAAIJ,mBACR,YAAYF,SAAS,YAAYD,IAAI,sFAAwE;IAEjH;AACA,eAAWQ,QAAQJ,UAAU;AAG3B,UAAI,OAAQH,SAAqCO,KAAKC,MAAM,MAAM,YAAY;AAC5E,cAAM,IAAIN,mBACR,YAAYF,SAAS,YAAYD,IAAI,IAAIQ,KAAKC,MAAM,oCAA2BD,KAAKR,IAAI,IAAI;MAEhG;IACF;AACA,SAAK,YAAYC;AACjB,SAAK,gBAAgBG;AACrB,SAAK,aAAaF,QAAQQ,aAAa;EACzC;;EAGAC,UAA0B;AAGxB,UAAMC,QAAQ,KAAK,UAAU;AAC7B,UAAMC,OAA0B;MAC9BC,OAAOF;MACPF,WAAW,KAAK;MAChBK,QAAQ,CAAA;MACRV,OAAO,KAAK,cAAcW,IAAI,CAACR,UAAU;QACvCS,aAAaT,KAAKC;QAClBS,QAAQV;QACRO,QAAQ,CAAA;QACRI,UAAUX,KAAKW;QACfC,OAAOZ,KAAKY,SAAS;QACrBC,OAAOb,KAAKa,SAAS;QACrB,GAAIb,KAAKc,SAAShB,SAAY;UAAEgB,MAAMd,KAAKc;QAAK,IAAI,CAAC;MACvD,EAAA;IACF;AACA,WAAOC,aAAa;MAACV;OAAO,oBAAIW,IAAI;MAAC;QAACZ;QAAO,KAAK;;KAAW,CAAA;EAC/D;EAEAa,MAAMC,OAAwC;AAE5CA,UAAMrB,MAAMsB,KAAI,GAAI,KAAKhB,QAAO,CAAA;AAChCe,UAAME,WAAWD,KAAK;MAAEE,YAAY,KAAK7B;MAAM8B,aAAa;QAAC;;IAAS,CAAA;AAItE,UAAMC,QAA2C,CAAA;AACjD,eAAWvB,QAAQ,KAAK,eAAe;AACrC,UAAIA,KAAKc,SAAShB,OAAW;AAC7ByB,YAAMJ,KAAK;QACT,KAAK,eAAe,KAAKnB,KAAKR,OAAO,GAAG,KAAK,UAAU,IAAIQ,KAAKR,IAAI;QACpEQ,KAAKc;OACN;IACH;AACA,QAAIS,MAAMxB,WAAW,EAAG;AACxBmB,UAAMJ,SAAS,oBAAIE,IAAAA;AACnB,eAAW,CAACQ,KAAK9B,OAAAA,KAAY6B,MAAOL,OAAMJ,KAAKW,IAAID,KAAK9B,OAAAA;AACxDwB,UAAME,WAAWD,KAAK;MAAEE,YAAY,KAAK7B;MAAM8B,aAAa;QAAC;;IAAQ,CAAA;EACvE;AACF;;;AC/FA,SAASI,kBAAkBC,KAAW;AACpC,SAAOA,IAAIC,SAAS,GAAA,IAAOD,IAAIE,MAAM,GAAG,EAAC,IAAKF;AAChD;AAFSD;AAKF,SAASI,eAAeC,OAA2BC,SAA8B;AACtF,QAAMC,OAAOP,kBAAkBM,QAAQE,OAAO;AAC9C,SAAO;IACLC,MAAMJ,MAAMI;IACZC,aAAaJ,QAAQI,eAAe,kBAAkBL,MAAMI,IAAI;IAChER,KAAK,GAAGM,IAAAA,GAAOF,MAAMM,KAAK;IAC1BC,SAAS;IACTC,cAAc;MACZC,WAAWT,MAAMU;MACjBC,mBAAmB;MACnBC,wBAAwB;IAC1B;IACAC,mBAAmB;MAAC;;IACpBC,oBAAoB;MAAC;;IACrBC,QAAQf,MAAMgB,MAAMC,IAAI,CAACC,OAAO;MAAEC,IAAID,EAAEd;MAAMA,MAAMc,EAAEd;MAAMC,aAAaa,EAAEb;IAAY,EAAA;EACzF;AACF;AAhBgBN;AAmBT,SAASqB,kBAAkBC,WAAiB;AACjD,SAAO,gBAAgBA,SAAAA;AACzB;AAFgBD;;;ACxDT,IAAME,uBAAuB;AA6B7B,SAASC,wBAAwBC,OAAyB;AAC/D,SAAOA,MAAMC,MAAMC,IAAI,CAACC,OAAO;IAC7BC,MAAMD,EAAEC;IACRC,aAAaF,EAAEE;IACfC,aAAa;MAAEC,MAAM;MAAUC,YAAY,CAAC;IAAE;EAChD,EAAA;AACF;AANgBT;AAST,SAASU,cAAcT,OAAyB;AACrD,SAAO;IAAEI,MAAMJ,MAAMI;IAAMM,SAAS;IAAOC,iBAAiBb;EAAqB;AACnF;AAFgBW;;;ACfhB,SAASG,aAAaC,QAAqB;AACzC,QAAMC,UAAkC;IAAE,gBAAgB;IAAoB,GAAGD,OAAOC;EAAQ;AAChG,MAAID,OAAOE,MAAMC,OAAQF,SAAQG,gBAAgB,UAAUJ,OAAOE,KAAKC,MAAM;AAC7E,MAAIH,OAAOE,MAAMG,OAAQJ,SAAQD,OAAOE,KAAKG,OAAOC,MAAM,IAAIN,OAAOE,KAAKG,OAAOE;AACjF,SAAON;AACT;AALSF;AAWF,SAASS,cAAcR,QAAqB;AACjD,QAAMS,UAAUT,OAAOU,aAAaC;AACpC,SAAO;IACLC,MAAMZ,OAAOY;IACbC,aAAab,OAAOa;IACpBC,aAAa;MACXC,MAAM;MACNC,YAAY;QAAEC,SAAS;UAAEF,MAAM;UAAUF,aAAa;QAA2C;MAAE;MACnGK,UAAU;QAAC;;IACb;IACAC,SAAS,8BAAOC,UAAAA;AAEd,YAAMH,UAAU,OAAOG,MAAMH,YAAY,WAAWG,MAAMH,UAAU;AACpE,YAAMI,MAAM,MAAMZ,QAAQT,OAAOsB,KAAK;QACpCC,QAAQ;QACRtB,SAASF,aAAaC,MAAAA;QACtBwB,MAAMC,KAAKC,UAAU;UAAET;QAAQ,CAAA;MACjC,CAAA;AACA,UAAI,CAACI,IAAIM,IAAI;AACX,cAAM,IAAIC,MAAM,gBAAgB5B,OAAOY,IAAI,aAAaS,IAAIQ,MAAM,IAAIR,IAAIS,UAAU,EAAE;MACxF;AACA,YAAMC,OAAQ,MAAMV,IAAIW,KAAI;AAC5B,aAAOD,KAAKE,YAAYF,KAAKG,QAAQ;IACvC,GAbS;EAcX;AACF;AAzBgB1B;;;AChChB,IAAM2B,YAAY;AAGX,SAASC,qBAAqBC,UAAkBC,QAAc;AACnE,MAAI,CAACD,SAAU,OAAM,IAAIE,MAAM,oEAAA;AAC/B,MAAI,CAACD,OAAQ,OAAM,IAAIC,MAAM,kEAAA;AAC7B,SAAO,GAAGC,mBAAmBH,QAAAA,CAAAA,GAAYF,SAAAA,GAAYK,mBAAmBF,MAAAA,CAAAA;AAC1E;AAJgBF;AAWT,SAASK,oBAAoBC,IAAU;AAC5C,QAAMC,MAAMD,GAAGE,QAAQT,SAAAA;AACvB,MAAIQ,OAAO,KAAKA,OAAOD,GAAGG,SAAS,EAAG,QAAO;AAC7C,QAAMR,WAAWS,mBAAmBJ,GAAGK,MAAM,GAAGJ,GAAAA,CAAAA;AAChD,QAAML,SAASQ,mBAAmBJ,GAAGK,MAAMJ,MAAM,CAAA,CAAA;AACjD,MAAI,CAACN,YAAY,CAACC,OAAQ,QAAO;AACjC,SAAO;IAAED;IAAUC;EAAO;AAC5B;AAPgBG;;;ACKhB,eAAsBO,qBACpBC,WACAC,KAAyB;AAEzB,MAAID,cAAcE,OAAW,QAAOA;AACpC,MAAI,OAAOF,cAAc,YAAY;AACnC,WAAOA,UAAUG,OAAO,CAACC,MAAmB,OAAOA,MAAM,QAAA;EAC3D;AACA,QAAMC,WAAoB,MAAML,UAAUC,GAAAA;AAC1C,MAAI,CAACK,MAAMC,QAAQF,QAAAA,GAAW;AAC5B,UAAM,IAAIG,MAAM,uEAAA;EAClB;AAGA,QAAMC,QAAQJ;AACd,MAAI,CAACI,MAAMC,MAAM,CAACC,MAAmB,OAAOA,MAAM,YAAYA,EAAEC,KAAI,EAAGC,SAAS,CAAA,GAAI;AAClF,UAAM,IAAIL,MAAM,4EAAA;EAClB;AACA,SAAO;OAAIC;;AACb;AAnBsBV;;;ACrBf,SAASe,iBAAiBC,SAAgB;AAC/C,SAAO,GAAGC,KAAKC,UAAUF,OAAAA,CAAAA;;AAC3B;AAFgBD;AAUT,IAAMI,oBAAN,MAAMA;EArBb,OAqBaA;;;EACHC,SAAS;;EAGjBC,KAAKC,OAA0B;AAC7B,SAAKF,UAAUE;AACf,UAAMC,WAAsB,CAAA;AAC5B,QAAIC,eAAe,KAAKJ,OAAOK,QAAQ,IAAA;AACvC,WAAOD,iBAAiB,IAAI;AAC1B,YAAME,OAAO,KAAKN,OAAOO,MAAM,GAAGH,YAAAA,EAAcI,KAAI;AACpD,WAAKR,SAAS,KAAKA,OAAOO,MAAMH,eAAe,CAAA;AAC/C,UAAIE,KAAKG,SAAS,GAAG;AACnB,YAAI;AACFN,mBAASF,KAAKJ,KAAKa,MAAMJ,IAAAA,CAAAA;QAC3B,SAASK,OAAO;AACd,gBAAM,IAAIC,MAAM,gDAAgDN,IAAAA,IAAQ;YAAEK;UAAM,CAAA;QAClF;MACF;AACAP,qBAAe,KAAKJ,OAAOK,QAAQ,IAAA;IACrC;AACA,WAAOF;EACT;AACF;;;ACPA,SAASU,WAAWC,GAA0B;AAC5C,SAAO,OAAOA,EAAEC,OAAO,aAAc,YAAYD,KAAO,WAAWA,MAAO,EAAE,YAAYA;AAC1F;AAFSD;AAGT,SAASG,gBAAgBF,GAA0B;AACjD,SAAO,OAAOA,EAAEG,WAAW,YAAY,OAAOH,EAAEC,OAAO;AACzD;AAFSC;AAIF,IAAME,YAAN,MAAMA;EA3Cb,OA2CaA;;;;EACHC,SAAS;EACAC,UAAU,oBAAIC,IAAAA;EACdC,WAAW,oBAAID,IAAAA;EACfE,UAAU,IAAIC,kBAAAA;EAE/B,YAA6BC,WAAyB;SAAzBA,YAAAA;AAC3BA,cAAUC,UAAU,CAACC,UAAAA;AACnB,iBAAWC,WAAW,KAAKL,QAAQM,KAAKF,KAAAA,GAAQ;AAC9C,aAAKG,SAASF,OAAAA;MAChB;IACF,CAAA;EACF;;EAGAG,QAAQd,QAAgBe,QAAmC;AACzD,UAAMjB,KAAK,KAAKI;AAChB,WAAO,IAAIc,QAAiB,CAACC,SAASC,WAAAA;AACpC,WAAKf,QAAQgB,IAAIrB,IAAI;QAAEmB;QAASC;MAAO,CAAA;AACvC,WAAKV,UAAUY,KAAKC,iBAAiB;QAAEC,SAAS;QAAOxB;QAAIE;QAAQe;MAAO,CAAA,CAAA;IAC5E,CAAA;EACF;;EAGAQ,UAAUvB,QAAgBwB,SAAqC;AAC7D,SAAKnB,SAASc,IAAInB,QAAQwB,OAAAA;EAC5B;EAEQX,SAASF,SAAwC;AACvD,QAAIf,WAAWe,OAAAA,GAAU;AACvB,YAAMc,QAAQ,KAAKtB,QAAQuB,IAAIf,QAAQb,EAAE;AACzC,UAAI,CAAC2B,MAAO;AACZ,WAAKtB,QAAQwB,OAAOhB,QAAQb,EAAE;AAC9B,UAAIa,QAAQiB,MAAOH,OAAMP,OAAO,IAAIW,MAAMlB,QAAQiB,MAAMjB,OAAO,CAAA;UAC1Dc,OAAMR,QAAQN,QAAQmB,MAAM;AACjC;IACF;AACA,QAAI/B,gBAAgBY,OAAAA,GAAU;AAC5B,WAAK,KAAKoB,oBAAoBpB,OAAAA;IAChC;EACF;EAEA,MAAcoB,oBAAoBC,KAA0C;AAC1E,UAAMR,UAAU,KAAKnB,SAASqB,IAAIM,IAAIhC,MAAM;AAC5C,QAAI,CAACwB,SAAS;AACZ,WAAKhB,UAAUY,KACbC,iBAAiB;QAAEC,SAAS;QAAOxB,IAAIkC,IAAIlC;QAAI8B,OAAO;UAAEK,MAAM;UAAQtB,SAAS,eAAeqB,IAAIhC,MAAM;QAAG;MAAE,CAAA,CAAA;AAE/G;IACF;AACA,QAAI;AACF,YAAM8B,SAAS,MAAMN,QAAQQ,IAAIjB,MAAM;AACvC,WAAKP,UAAUY,KAAKC,iBAAiB;QAAEC,SAAS;QAAOxB,IAAIkC,IAAIlC;QAAIgC;MAAO,CAAA,CAAA;IAC5E,SAASI,KAAK;AACZ,WAAK1B,UAAUY,KACbC,iBAAiB;QACfC,SAAS;QACTxB,IAAIkC,IAAIlC;QACR8B,OAAO;UAAEK,MAAM;UAAQtB,SAASuB,eAAeL,QAAQK,IAAIvB,UAAU;QAAiB;MACxF,CAAA,CAAA;IAEJ;EACF;AACF;","names":["isDeepStrictEqual","CapabilityConflictError","Error","name","field","previous","next","capability","shapeOf","value","Array","isArray","length","Object","keys","sort","a","b","localeCompare","join","createDraft","tools","agents","provenance","applyCapabilities","capabilities","draft","c","apply","stream","setOnce","undefined","isDeepStrictEqual","push","contributed","ConfigurationError","Error","name","describe","value","Array","isArray","ModelCapability","id","reasoningEffort","trim","length","apply","draft","setOnce","undefined","ToolsCapability","tools","push","provenance","capability","contributed","skills","entries","e","field","compiled","compileSkillsSelection","slice","previous","enabled","inline","UnknownCapabilityError","Error","name","requested","known","join","CapabilityRegistry","Map","register","factory","set","has","names","keys","resolve","arg","get","undefined","CapabilityPreset","members","apply","draft","member","fieldCapability","name","field","value","apply","draft","setOnce","memory","contextWindow","options","compileContextWindow","context","projectContext","mcpServers","guardrails","checkpoint","undefined","storage","console","warn","humanInTheLoop","subAgents","children","child","Object","entries","agents","ConfigurationError","provenance","push","capability","contributed","skillsOptions","compileSkills","settingSources","plugins","runContext","skillsResolver","AgentConfigCapability","config","Number","isFinite","claimedByMainLoop","some","p","includes","maxIterations","timeoutMs","systemPrompt","parseThinkTags","stripToolDialect","recoverLeakedToolCalls","stream","MainLoopCapability","length","ToolboxCapability","name","instance","options","ConfigurationError","declared","tools","undefined","length","tool","method","namespace","compile","token","walk","class","guards","map","propertyKey","config","approval","trace","audit","hitl","compileTools","Map","apply","draft","push","provenance","capability","contributed","gates","key","set","trimTrailingSlash","url","endsWith","slice","buildAgentCard","entry","options","base","baseUrl","name","description","route","version","capabilities","streaming","stream","pushNotifications","stateTransitionHistory","defaultInputModes","defaultOutputModes","skills","tools","map","t","id","wellKnownCardPath","agentName","MCP_PROTOCOL_VERSION","buildMcpToolDescriptors","entry","tools","map","t","name","description","inputSchema","type","properties","mcpServerInfo","version","protocolVersion","buildHeaders","config","headers","auth","bearer","authorization","apiKey","header","value","createA2ATool","doFetch","fetchImpl","fetch","name","description","inputSchema","type","properties","message","required","handler","input","res","url","method","body","JSON","stringify","ok","Error","status","statusText","data","json","response","text","SEPARATOR","deriveConversationId","resource","thread","Error","encodeURIComponent","parseConversationId","id","idx","indexOf","length","decodeURIComponent","slice","resolveEnabledSkills","selection","ctx","undefined","filter","s","resolved","Array","isArray","Error","names","every","n","trim","length","encodeAcpMessage","message","JSON","stringify","AcpMessageDecoder","buffer","push","chunk","messages","newlineIndex","indexOf","line","slice","trim","length","parse","cause","Error","isResponse","m","id","isServerRequest","method","AcpClient","nextId","pending","Map","handlers","decoder","AcpMessageDecoder","transport","subscribe","chunk","message","push","dispatch","request","params","Promise","resolve","reject","set","send","encodeAcpMessage","jsonrpc","onRequest","handler","entry","get","delete","error","Error","result","handleServerRequest","req","code","err"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theokit/agents",
-  "version": "0.47.0",
+  "version": "1.0.0",
   "description": "AI agents as first-class citizens of the TheoKit pipeline. The fluent agent()/tool() builders compile to SDK Agent.create() (M31 builder-only authoring API).",
   "type": "module",
   "sideEffects": false,
@@ -30,7 +30,6 @@
     "@theokit/sdk": "^4.0.1",
     "@theokit/sdk-tools": ">=0.11.0 <1.0.0",
     "ai": ">=7.0.0",
-    "reflect-metadata": ">=0.2.0",
     "zod": "^4.0.0"
   },
   "peerDependenciesMeta": {
@@ -45,13 +44,12 @@
     "@theokit/sdk": "^4.1.0",
     "@theokit/sdk-tools": "^0.11.0",
     "ai": "^7.0.14",
-    "reflect-metadata": "^0.2.2",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "vitest": "^3.2.6",
     "zod": "^4.4.3",
-    "@theokit/http": "0.7.0",
-    "@theokit/presenter": "0.3.0"
+    "@theokit/presenter": "0.3.0",
+    "@theokit/http": "1.0.0"
   },
   "engines": {
     "node": ">=22.12.0"