@theokit/agents 13.0.0-next.10 → 13.0.0-next.12

package/CHANGELOG.md

@@ -1,5 +1,77 @@
 # @theokit/agents
 
+## 13.0.0-next.12
+
+### Minor Changes
+
+- a7e35bb: A guardrail returning `action: 'redact'` with no replacement `text` now throws
+  `MalformedGuardrailResultError` instead of silently redacting nothing.
+
+  `GuardrailResult.text` is optional, so such a guard compiles and reads like a working one. The
+  pipeline tested `r.text !== undefined` and moved on, so the caller received the original text and
+  believed a guard had run on it — the operator believing a protection is in place when none is.
+
+  **This is a behaviour change.** A guard relying on the previous no-op will now throw. That is
+  deliberate: the alternative is unredacted output reaching a model because a guard was written wrong.
+  `text: ''` is unaffected and always was a real redaction — a guard choosing to erase everything.
+
+  `MalformedGuardrailResultError` is exported from `@theokit/agents`, carries the guard's name and the
+  phase, and is not retryable.
+
+  This also reaches the streaming path (`moderateOutputStream`), which shares the same pipeline: a
+  malformed guard there now throws where it previously continued.
+
+### Patch Changes
+
+- 2bc27d3: `inheritHooks` no longer lets a member's `transform_tool_result` or `pre_user_send` handler replace
+  its parent's — both now chain parent-first, matching the six events that already composed.
+
+  `inheritHooks` documents its security property as "the parent's refusal is evaluated first, and a
+  member can only ever ADD a reason to refuse". For these two events the plain object spread did the
+  opposite: a member declaring either handler silently discarded the parent's. The reachable surface is the EXPORTED `inheritHooks`, called with two handler maps.
+  `delegate()` passes `undefined` for the member (`agent-orchestrator.ts:175`), so that path composed
+  nothing and was never affected — a distinction the first version of this note got wrong.
+
+  `pre_user_send` composes additively — both contributions reach the model, parent first — because
+  `PreUserSendResult` carries only `recalledContext` and the seam exposes no prompt mutation.
+
+- eaac7b0: The "will NOT fire" warning for a declared-but-unwired hook event now names where the capability
+  already lives, instead of ending "the handler does not exist yet".
+
+  Two of the three unwired events are served today by purpose-built seams — `Guardrail.checkOutput`
+  for `transform_llm_output`, and `createToolHooksPlugin({ processInput })` for `pre_user_send` — so
+  the old message told consumers to wait for work that will not come. The third, `on_session_end`, is
+  named as genuinely uncovered, with the reason: its handler returns `void` and cannot refuse an
+  ending, so wiring it would produce a hook that runs and cannot decide.
+
+  Nothing is wired. `HOOK_EVENTS`, `WIRED_EVENTS` and `OBSERVATIONAL_EVENTS` keep the same members.
+
+- ec899f4: An observational hook handler is now assigned to its own key rather than chosen by comparison.
+
+  The dispatch loop used a two-branch conditional over a list of two event names, so a third
+  observational event would have landed on `post_assistant_reply` — silently, with no test objecting.
+  No behaviour changes for the events wired today; the fix removes the trap for the next one added.
+
+## 13.0.0-next.11
+
+### Patch Changes
+
+- 5451233: Say, where a consumer can read it, why `CompatSurface` has five names and the SDK's has four
+
+  `CompatSurface` gained `'commands'` in #704 because this package reads
+  `<projectDir>/.claude/commands/*.md` itself. The SDK's own union still has four. A caller who
+  builds SDK `local` options directly therefore cannot pass a value of this type, and `TS2345` names
+  the mismatch without naming the reason.
+
+  The explanation existed only in `//` comments, which do not survive into the emitted `.d.ts` — so
+  it was invisible to exactly the audience that hits the error. It now lives in the JSDoc block that
+  does ship, together with the guidance to derive the SDK's four from this five rather than writing a
+  second list by hand: a hand-copied list goes stale the day a surface is added, which is the
+  divergence #704 existed to remove.
+
+  Documentation only; no behaviour changes. Reported by a consumer who hit the compiler error while
+  converging four call sites onto one declaration, and who supplied the sentence that was missing.
+
 ## 13.0.0-next.10
 
 ### Minor Changes

package/dist/{agent-compiler-CvYfM-0t.d.ts → agent-compiler-aim29SS_.d.ts}

@@ -1,7 +1,7 @@
 import { InlineSkill, SystemPromptResolver, SettingSource, MemorySettings, SkillsSettings, ContextSettings } from '@theokit/sdk';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 import { R as ReasoningEffort, a as MemoryOptions, P as ProjectContextOptions, M as McpServersMap, H as HumanInTheLoopOptions, C as CheckpointOptions, T as ToolOptions, A as ApprovalOptions, B as BudgetOptions } from './types-C16Wuh9E.js';
-import { R as ResolvedCompatSource } from './setting-sources-gate-tadmHT0c.js';
+import { R as ResolvedCompatSource } from './setting-sources-gate-D2NS1GsB.js';
 
 /**
  * M9 (theokit-ai-first) — guardrail contract + typed errors.
@@ -36,15 +36,36 @@ interface Guardrail {
 }
 /** Which boundary phase a violation happened in. */
 type GuardrailPhase = 'input' | 'output';
-/** Thrown (fail-fast) when a guard returns `action: 'block'`. Typed per error-handling.md. */
 /**
- * M80 — extends {@link TheokitAgentError}, not plain `Error`.
+ * A guard declared `redact` and supplied no replacement text.
  *
- * `isTransientError` is defined over `TheokitAgentError`, so a class outside that hierarchy is
- * INVISIBLE to it and the only recourse left to a consumer is matching on message text — a regex
- * over an eight-level `cause` chain, which is what one actually wrote. `code` is stable across a
- * rename of the class; `isRetryable` is DECLARED rather than defaulted, because a default would be a
- * retry policy nobody chose.
+ * Distinct from {@link GuardrailViolationError} on purpose: that one says the guard REFUSED
+ * something, which is a decision working as designed. This says the guard is MALFORMED — it asked
+ * for a redaction and gave nothing to redact with, so nothing was redacted.
+ *
+ * Until B-008 this condition was silent: `pipeline.ts` tested `r.text !== undefined` and moved on, so
+ * the caller received the original text and believed a guard had run on it. That is the shape this
+ * package's hook engine calls "worse than no hook at all" — a belief in a protection that is not
+ * there. Throwing is fail-fast per `rules/error-handling.md § 2`, and the alternative was leaving
+ * unredacted output to reach a model because a guard was written wrong.
+ *
+ * `''` is NOT this case. An empty replacement is a guard choosing to erase everything, which is the
+ * strongest redaction available, and treating it as absent would invert the defect.
+ */
+declare class MalformedGuardrailResultError extends TheokitAgentError {
+    readonly guardName: string;
+    readonly phase: GuardrailPhase;
+    readonly name = "MalformedGuardrailResultError";
+    constructor(guardName: string, phase: GuardrailPhase);
+}
+/**
+ * Thrown (fail-fast) when a guard returns `action: 'block'`. Typed per error-handling.md.
+ *
+ * M80 — extends {@link TheokitAgentError}, not plain `Error`. `isTransientError` is defined over
+ * `TheokitAgentError`, so a class outside that hierarchy is INVISIBLE to it and the only recourse
+ * left to a consumer is matching on message text — a regex over an eight-level `cause` chain, which
+ * is what one actually wrote. `code` is stable across a rename of the class; `isRetryable` is
+ * DECLARED rather than defaulted, because a default would be a retry policy nobody chose.
  */
 declare class GuardrailViolationError extends TheokitAgentError {
     readonly guardName: string;
@@ -299,4 +320,4 @@ interface CompiledAgentOptions {
     skillsResolver?: SkillsSelection;
 }
 
-export { type CompiledAgentOptions as C, type Guardrail as G, type HookApprovalGate as H, type SkillsSelection as S, type ToolWalkResult as T, type CompiledTool as a, CostBudgetExceededError as b, type GuardrailAction as c, type GuardrailPhase as d, type GuardrailResult as e, GuardrailViolationError as f, type HookApprovalRequest as g, HookGateUnsupportedError as h, type SkillsRequestContext as i, type ToolboxWalkResult as j, compileTools as k, resolveEnabledSkills as r };
+export { type CompiledAgentOptions as C, type Guardrail as G, type HookApprovalGate as H, MalformedGuardrailResultError as M, type SkillsSelection as S, type ToolWalkResult as T, type CompiledTool as a, CostBudgetExceededError as b, type GuardrailAction as c, type GuardrailPhase as d, type GuardrailResult as e, GuardrailViolationError as f, type HookApprovalRequest as g, HookGateUnsupportedError as h, type SkillsRequestContext as i, type ToolboxWalkResult as j, compileTools as k, resolveEnabledSkills as r };

package/dist/{bridge-entry-B3BRB3e_.d.ts → bridge-entry-D_85aOn3.d.ts}

@@ -1,14 +1,14 @@
 import { ExecutionContext } from '@theokit/http';
 import { c as AgentOptions, T as ToolOptions, P as ProjectContextOptions, H as HumanInTheLoopOptions, R as ReasoningEffort, M as McpServersMap } from './types-C16Wuh9E.js';
-import { C as CompiledAgentOptions, a as CompiledTool, G as Guardrail, S as SkillsSelection, H as HookApprovalGate } from './agent-compiler-CvYfM-0t.js';
+import { C as CompiledAgentOptions, a as CompiledTool, G as Guardrail, S as SkillsSelection, H as HookApprovalGate } from './agent-compiler-aim29SS_.js';
 import { SkillsSettings, ContextSettings, SystemPromptResolver, ModelSelection, PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition as AgentDefinition$1, BudgetTracker, CustomTool, RunEventSink, MemorySettings } from '@theokit/sdk';
-import { S as StreamEvent, f as ApprovalRequiredEvent, a4 as MaskError } from './delegation-scoring-BZdtCdMN.js';
+import { S as StreamEvent, f as ApprovalRequiredEvent, a4 as MaskError } from './delegation-scoring-CNX1SQzT.js';
 import { RetryOptions } from '@theokit/sdk/retry';
 import { SandboxPosture } from '@theokit/sdk/sandbox';
-import { A as AgentDefinition } from './define-agent-Dp6e7chT.js';
+import { A as AgentDefinition } from './define-agent-Bh3TjozZ.js';
 import { z } from 'zod';
 import { H as HookHandlers } from './hook-handlers-Cw2FsnE5.js';
-import { S as SettingSourcesSelection } from './setting-sources-gate-tadmHT0c.js';
+import { S as SettingSourcesSelection } from './setting-sources-gate-D2NS1GsB.js';
 import { WireChunk } from '@theokit/presenter/wire';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 

package/dist/bridge.d.ts

@@ -1,8 +1,8 @@
-export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, A as AgentManifestEntry, i as AgentManifestSource, j as AgentManifestTool, b as AgentModule, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, a as ApprovalPosture, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, R as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, U as agentsPlugin, V as applyPosture, X as buildModelSelection, Y as compileAgentModule, Z as compileContextWindow, _ as compileLoadedAgentModule, $ as compileProjectContext, a0 as compileSkills, a1 as createAgentExecutionContext, a2 as createApiErrorHandler, a3 as createSdkAgentStream, a4 as createThinkTagExtractor, a5 as createToolHooksPlugin, a6 as extractThinkTagStream, a7 as generateAgentManifest, a8 as generateAgentRoutes, a9 as isAgentContext, aa as loadMcpJson, ab as mcpRegistry, ac as mcpToolApprovals, ad as projectContextMetadataOnlyKnobs, ae as reasoningEffortOf, af as resolveMcpServers, ag as runWithApiErrorHandling, ah as shouldAutoApprove, s as streamAgentUIMessages, ai as toAgentFactory, aj as translateSdkEvent, ak as withClockCap, al as withEphemeralAgent } from './bridge-entry-B3BRB3e_.js';
-export { C as CompiledAgentOptions, a as CompiledTool, H as HookApprovalGate, g as HookApprovalRequest, h as HookGateUnsupportedError, T as ToolWalkResult, j as ToolboxWalkResult, k as compileTools } from './agent-compiler-CvYfM-0t.js';
-export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, c as DelegationResult, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, P as PartialToolCallEvent, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, S as StreamEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, a0 as presentUIMessageStream, a3 as streamAgentResponse } from './delegation-scoring-BZdtCdMN.js';
-export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, c as compileAgentDefinition, i as isAgentDefinition } from './define-agent-Dp6e7chT.js';
-export { C as CompatSurface, P as ProjectSettingsGrant, R as ResolvedCompatSource, a as SettingSourceCapability, S as SettingSourcesSelection, U as UntrustedSettingSourceError, r as resolveCompatSources, b as resolveSettingSources } from './setting-sources-gate-tadmHT0c.js';
+export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, A as AgentManifestEntry, i as AgentManifestSource, j as AgentManifestTool, b as AgentModule, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, a as ApprovalPosture, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, R as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, U as agentsPlugin, V as applyPosture, X as buildModelSelection, Y as compileAgentModule, Z as compileContextWindow, _ as compileLoadedAgentModule, $ as compileProjectContext, a0 as compileSkills, a1 as createAgentExecutionContext, a2 as createApiErrorHandler, a3 as createSdkAgentStream, a4 as createThinkTagExtractor, a5 as createToolHooksPlugin, a6 as extractThinkTagStream, a7 as generateAgentManifest, a8 as generateAgentRoutes, a9 as isAgentContext, aa as loadMcpJson, ab as mcpRegistry, ac as mcpToolApprovals, ad as projectContextMetadataOnlyKnobs, ae as reasoningEffortOf, af as resolveMcpServers, ag as runWithApiErrorHandling, ah as shouldAutoApprove, s as streamAgentUIMessages, ai as toAgentFactory, aj as translateSdkEvent, ak as withClockCap, al as withEphemeralAgent } from './bridge-entry-D_85aOn3.js';
+export { C as CompiledAgentOptions, a as CompiledTool, H as HookApprovalGate, g as HookApprovalRequest, h as HookGateUnsupportedError, T as ToolWalkResult, j as ToolboxWalkResult, k as compileTools } from './agent-compiler-aim29SS_.js';
+export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, c as DelegationResult, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, P as PartialToolCallEvent, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, S as StreamEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, a0 as presentUIMessageStream, a3 as streamAgentResponse } from './delegation-scoring-CNX1SQzT.js';
+export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, c as compileAgentDefinition, i as isAgentDefinition } from './define-agent-Bh3TjozZ.js';
+export { C as CompatSurface, P as ProjectSettingsGrant, R as ResolvedCompatSource, a as SettingSourceCapability, S as SettingSourcesSelection, U as UntrustedSettingSourceError, r as resolveCompatSources, b as resolveSettingSources } from './setting-sources-gate-D2NS1GsB.js';
 import '@theokit/http';
 import './types-C16Wuh9E.js';
 import '@theokit/sdk';

package/dist/bridge.js

@@ -29,7 +29,7 @@ import {
   runWithApiErrorHandling,
   streamAgentResponse,
   streamAgentUIMessages
-} from "./chunk-6YJIXBMA.js";
+} from "./chunk-THGIRKEE.js";
 import {
   APPROVAL_MODES,
   BudgetExceededError,
@@ -55,8 +55,8 @@ import {
   translateSdkEvent,
   withClockCap,
   withEphemeralAgent
-} from "./chunk-FXQF7LS3.js";
-import "./chunk-RKWCXVYG.js";
+} from "./chunk-O3VYC2KJ.js";
+import "./chunk-MJ6FRILJ.js";
 import {
   AGENT_BRAND,
   UntrustedSettingSourceError,
@@ -64,7 +64,7 @@ import {
   isAgentDefinition,
   resolveCompatSources,
   resolveSettingSources
-} from "./chunk-43O2CCZR.js";
+} from "./chunk-KTOWSF2S.js";
 import "./chunk-OXNDJSAJ.js";
 import "./chunk-Z4QWC7IK.js";
 export {

package/dist/{chunk-43O2CCZR.js → chunk-KTOWSF2S.js}

@@ -232,4 +232,4 @@ export {
   compileAgentDefinition,
   compileSkillsSelection
 };
-//# sourceMappingURL=chunk-43O2CCZR.js.map
+//# sourceMappingURL=chunk-KTOWSF2S.js.map

package/dist/{chunk-43O2CCZR.js.map → chunk-KTOWSF2S.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/bridge/setting-sources-gate.ts","../src/bridge/define-agent.ts"],"mappings":";;;;;AACA,SAASA,yBAAyB;AAgJ3B,IAAMC,8BAAN,cAA0CC,kBAAAA;EAhJjD,OAgJiDA;;;;;EAC7BC,OAAO;EAEzB,YACEC,SAESC,aAEAC,YACT;AACA,UAAMF,OAAAA,GAAAA,KAJGC,cAAAA,aAAAA,KAEAC,aAAAA;EAGX;AACF;AAaO,SAASC,sBACdC,WAA8C;AAE9C,MAAIA,cAAcC,OAAW,QAAO,CAAA;AAEpC,QAAMC,UAA2B,CAAA;AACjC,MAAIF,UAAUG,SAAS,KAAMD,SAAQE,KAAK,MAAA;AAE1C,QAAMC,QAAQL,UAAUM;AACxB,MAAID,UAAUJ,QAAW;AACvB,UAAMM,UAAUF,MAAMG;AACtB,QAAI,CAACD,QAAQE,OAAOC,iBAAiB;AACnC,YAAM,IAAIjB,4BACR,iKACgEc,QAAQI,KAAK,iBACpEJ,QAAQK,MAAM,wGAEvBL,QAAQK,QACR,iBAAA;IAEJ;AACAV,YAAQE,KAAK,SAAA;EACf;AAEA,SAAOF;AACT;AAzBgBH;AA4CT,SAASc,qBACdb,WAA8C;AAE9C,MAAIA,WAAWc,eAAeb,OAAW,QAAO,CAAA;AAEhD,QAAMM,UAAUP,UAAUc,WAAWN;AACrC,MAAI,CAACD,QAAQE,OAAOC,iBAAiB;AACnC,UAAM,IAAIjB,4BACR,6KAEKc,QAAQI,KAAK,iBAAiBJ,QAAQK,MAAM,oNAGjDL,QAAQK,QACR,iBAAA;EAEJ;AAiBA,QAAMG,WAAWf,UAAUc,WAAWE;AACtC,MAAID,UAAUE,WAAW,GAAG;AAC1B,UAAM,IAAIxB,4BACR,6QAGAO,UAAUc,WAAWN,UAAUI,QAC/B,iBAAA;EAEJ;AACA,MAAIG,aAAad,OAAW,QAAO;IAAC;MAAEiB,MAAM;MAAeF,QAAQ;WAAID;;IAAU;;AACjF,SAAO;IAAC;;AACV;AA7CgBF;;;ACnLT,IAAMM,cAA6BC,uBAAOC,IAAI,0BAAA;AAgJ9C,SAASC,YACdC,QAAiC;AAEjCC,2BAAyBD,OAAOE,aAAa;AAC7C,SAAO;IAAE,GAAGF;IAAQ,CAACJ,WAAAA,GAAc;EAAK;AAC1C;AALgBG;AAgBhB,SAASE,yBAAyBE,OAAyB;AACzD,MAAIA,UAAUC,OAAW;AACzB,MAAI,CAACC,OAAOC,UAAUH,KAAAA,KAAUA,QAAQ,GAAG;AACzC,UAAM,IAAII,MACR,mEAAmEC,OAAOL,KAAAA,CAAAA,GAAS;EAEvF;AACF;AAPSF;AAUF,SAASQ,kBAAkBN,OAAc;AAC9C,SACE,OAAOA,UAAU,YACjBA,UAAU,QACTA,MAAkDP,WAAAA,MAAiB;AAExE;AANgBa;AAehB,SAASC,eAAeC,MAAgB;AAMtC,QAAMC,UAAUD,KAAKC;AAIrB,QAAMC,WAAyB;IAC7BC,MAAMH,KAAKG;IACXC,aAAaJ,KAAKI;IAClBC,aAAaL,KAAKK;IAClBJ,SAAS,wBAACK,OAAOC,QAAQN,QAAQK,OAAOC,GAAAA,GAA/B;EACX;AAMA,aAAWC,OAAOC,OAAOC,sBAAsBV,IAAAA,GAAO;;AAClDE,aAAgDM,GAAAA,IAChDR,KACAQ,GAAAA;EACJ;AACA,SAAON;AACT;AA3BSH;AAiCF,SAASY,uBAAuBC,KAAoB;AACzD,SAAO;IACLC,OAAOD,IAAIC;IACXC,iBAAiBF,IAAIE;IACrBC,cAAcH,IAAII;IAClBC,QAAQL,IAAIK,SAAS,CAAA,GAAIC,IAAInB,cAAAA;IAC7BoB,QAAQ,CAAC;IACTC,QAAQ;;;IAGR,GAAIR,IAAIS,YAAY5B,SAAY;MAAE6B,YAAYV,IAAIS;IAAQ,IAAI,CAAC;;IAE/D,GAAIT,IAAIW,eAAe9B,SAAY;MAAE8B,YAAYX,IAAIW;IAAW,IAAI,CAAC;;;IAGrE,GAAIX,IAAIrB,kBAAkBE,SAAY;MAAEF,eAAeqB,IAAIrB;IAAc,IAAI,CAAC;;IAE9E,GAAIqB,IAAIY,cAAc/B,SAAY;MAAEgC,MAAMC,iBAAiBd,GAAAA;IAAK,IAAI,CAAC;;IAErE,GAAGe,uBAAuBf,IAAIgB,MAAM;;;;;IAKpC,GAAIhB,IAAIiB,mBAAmBpC,SACvB;MAAEoC,gBAAgBC,sBAAsBlB,IAAIiB,cAAc;IAAE,IAC5D,CAAC;;;;;;;;;IASL,GAAIjB,IAAIiB,gBAAgBE,eAAetC,SACnC;MAAEuC,eAAeC,qBAAqBrB,IAAIiB,cAAc;IAAE,IAC1D,CAAC;;;;IAIL,GAAIjB,IAAIsB,iBAAiBzC,SAAY;MAAEyC,cAActB,IAAIsB;IAAa,IAAI,CAAC;;IAE3E,GAAItB,IAAIuB,WAAW1C,SAAY;MAAE0C,QAAQvB,IAAIuB;IAAO,IAAI,CAAC;;;;IAIzD,GAAGC,uBAAuBxB,GAAAA;;;IAG1B,GAAIA,IAAIyB,eAAe5C,SAAY;MAAE4C,YAAYzB,IAAIyB;IAAW,IAAI,CAAC;EACvE;AACF;AApDgB1B;AAkEhB,SAASyB,uBAAuBxB,KAAoB;AAClD,QAAMM,MAAON,IAAsD0B;AACnE,QAAMC,UAAU9B,OAAO8B,QAAQrB,OAAO,CAAC,CAAA,EAAGsB,OAAO,CAAC,CAAA,EAAGC,CAAAA,MAAO,OAAOA,MAAM,UAAA;AACzE,QAAMC,WAAW9B,IAAI+B,WAAW,CAAA;AAEhC,MAAIJ,QAAQK,WAAW,GAAG;AACxB,WAAOhC,IAAI+B,YAAYlD,SAAY;MAAEkD,SAAS/B,IAAI+B;IAAQ,IAAI,CAAC;EACjE;AAIA,QAAME,SAAS;IACb1C,MAAM;IACN2C,SAAS;IACTC,MAAM;IACNC,SAASzC,KAAmE;AAC1E,iBAAW,CAAC0C,UAAUhD,OAAAA,KAAYsC,SAAS;AACzChC,YAAI2C,GAAGD,UAAUhD,OAAAA;MACnB;IACF;EACF;AACA,SAAO;IAAE0C,SAAS;SAAID;MAAUG;;EAAQ;AAC1C;AAtBST;AAwBF,SAAST,uBACdC,QAAmC;AAEnC,MAAIA,WAAWnC,OAAW,QAAO,CAAC;AAClC,MAAI,OAAOmC,WAAW,WAAY,QAAO;IAAEuB,gBAAgBvB;EAAO;AAClE,QAAMwB,UAAoB,CAAA;AAC1B,QAAMC,SAAwB,CAAA;AAC9B,aAAWC,SAAS1B,QAAQ;AAC1B,QAAI,OAAO0B,UAAU,SAAUF,SAAQG,KAAKD,KAAAA;QACvCD,QAAOE,KAAKD,KAAAA;EACnB;AACA,SAAO;IACL1B,QAAQ;MAAEwB;MAASI,YAAY;MAAM,GAAIH,OAAOT,SAAS,IAAI;QAAES;MAAO,IAAI,CAAC;IAAG;EAChF;AACF;AAdgB1B;AAqBhB,SAASD,iBAAiBd,KAAoB;AAC5C,QAAM6C,YAAY,IAAIC,KAAK9C,IAAIK,SAAS,CAAA,GAAIC,IAAI,CAACyC,MAAMA,EAAExD,IAAI,CAAA;AAC7D,QAAMyD,QAAQ,oBAAIC,IAAAA;AAClB,aAAW,CAACC,UAAUC,OAAAA,KAAYtD,OAAO8B,QAAQ3B,IAAIY,aAAa,CAAC,CAAA,GAAI;AACrE,QAAI,CAACiC,UAAUO,IAAIF,QAAAA,GAAW;AAC5B,YAAM,IAAIlE,MACR,mEAAmEkE,QAAAA,sBAC9C;WAAIL;QAAWQ,KAAK,IAAA,KAAS,QAAA,GAAW;IAEjE;AACAL,UAAMM,IAAIJ,UAAUC,OAAAA;EACtB;AACA,SAAOH;AACT;AAbSlC;","names":["TheokitAgentError","UntrustedSettingSourceError","TheokitAgentError","name","message","trustSource","capability","resolveSettingSources","selection","undefined","sources","user","push","grant","project","posture","trustedBy","allows","projectSettings","level","source","resolveCompatSources","claudeCode","surfaces","import","length","kind","AGENT_BRAND","Symbol","for","defineAgent","config","assertValidMaxIterations","maxIterations","value","undefined","Number","isInteger","Error","String","isAgentDefinition","toCompiledTool","tool","handler","compiled","name","description","inputSchema","input","ctx","sym","Object","getOwnPropertySymbols","compileAgentDefinition","def","model","reasoningEffort","systemPrompt","system","tools","map","agents","stream","context","runContext","guardrails","approvals","hitl","compileApprovals","compileSkillsSelection","skills","settingSources","resolveSettingSources","claudeCode","compatSources","resolveCompatSources","hookApproval","memory","compileHooksAndPlugins","mcpServers","hooks","entries","filter","h","explicit","plugins","length","plugin","version","kind","register","hookName","on","skillsResolver","enabled","inline","entry","push","autoInject","toolNames","Set","t","gates","Map","toolName","options","has","join","set"]}
+{"version":3,"sources":["../src/bridge/setting-sources-gate.ts","../src/bridge/define-agent.ts"],"mappings":";;;;;AACA,SAASA,yBAAyB;AAuJ3B,IAAMC,8BAAN,cAA0CC,kBAAAA;EAvJjD,OAuJiDA;;;;;EAC7BC,OAAO;EAEzB,YACEC,SAESC,aAEAC,YACT;AACA,UAAMF,OAAAA,GAAAA,KAJGC,cAAAA,aAAAA,KAEAC,aAAAA;EAGX;AACF;AAaO,SAASC,sBACdC,WAA8C;AAE9C,MAAIA,cAAcC,OAAW,QAAO,CAAA;AAEpC,QAAMC,UAA2B,CAAA;AACjC,MAAIF,UAAUG,SAAS,KAAMD,SAAQE,KAAK,MAAA;AAE1C,QAAMC,QAAQL,UAAUM;AACxB,MAAID,UAAUJ,QAAW;AACvB,UAAMM,UAAUF,MAAMG;AACtB,QAAI,CAACD,QAAQE,OAAOC,iBAAiB;AACnC,YAAM,IAAIjB,4BACR,iKACgEc,QAAQI,KAAK,iBACpEJ,QAAQK,MAAM,wGAEvBL,QAAQK,QACR,iBAAA;IAEJ;AACAV,YAAQE,KAAK,SAAA;EACf;AAEA,SAAOF;AACT;AAzBgBH;AA4CT,SAASc,qBACdb,WAA8C;AAE9C,MAAIA,WAAWc,eAAeb,OAAW,QAAO,CAAA;AAEhD,QAAMM,UAAUP,UAAUc,WAAWN;AACrC,MAAI,CAACD,QAAQE,OAAOC,iBAAiB;AACnC,UAAM,IAAIjB,4BACR,6KAEKc,QAAQI,KAAK,iBAAiBJ,QAAQK,MAAM,oNAGjDL,QAAQK,QACR,iBAAA;EAEJ;AAiBA,QAAMG,WAAWf,UAAUc,WAAWE;AACtC,MAAID,UAAUE,WAAW,GAAG;AAC1B,UAAM,IAAIxB,4BACR,6QAGAO,UAAUc,WAAWN,UAAUI,QAC/B,iBAAA;EAEJ;AACA,MAAIG,aAAad,OAAW,QAAO;IAAC;MAAEiB,MAAM;MAAeF,QAAQ;WAAID;;IAAU;;AACjF,SAAO;IAAC;;AACV;AA7CgBF;;;AC1LT,IAAMM,cAA6BC,uBAAOC,IAAI,0BAAA;AAgJ9C,SAASC,YACdC,QAAiC;AAEjCC,2BAAyBD,OAAOE,aAAa;AAC7C,SAAO;IAAE,GAAGF;IAAQ,CAACJ,WAAAA,GAAc;EAAK;AAC1C;AALgBG;AAgBhB,SAASE,yBAAyBE,OAAyB;AACzD,MAAIA,UAAUC,OAAW;AACzB,MAAI,CAACC,OAAOC,UAAUH,KAAAA,KAAUA,QAAQ,GAAG;AACzC,UAAM,IAAII,MACR,mEAAmEC,OAAOL,KAAAA,CAAAA,GAAS;EAEvF;AACF;AAPSF;AAUF,SAASQ,kBAAkBN,OAAc;AAC9C,SACE,OAAOA,UAAU,YACjBA,UAAU,QACTA,MAAkDP,WAAAA,MAAiB;AAExE;AANgBa;AAehB,SAASC,eAAeC,MAAgB;AAMtC,QAAMC,UAAUD,KAAKC;AAIrB,QAAMC,WAAyB;IAC7BC,MAAMH,KAAKG;IACXC,aAAaJ,KAAKI;IAClBC,aAAaL,KAAKK;IAClBJ,SAAS,wBAACK,OAAOC,QAAQN,QAAQK,OAAOC,GAAAA,GAA/B;EACX;AAMA,aAAWC,OAAOC,OAAOC,sBAAsBV,IAAAA,GAAO;;AAClDE,aAAgDM,GAAAA,IAChDR,KACAQ,GAAAA;EACJ;AACA,SAAON;AACT;AA3BSH;AAiCF,SAASY,uBAAuBC,KAAoB;AACzD,SAAO;IACLC,OAAOD,IAAIC;IACXC,iBAAiBF,IAAIE;IACrBC,cAAcH,IAAII;IAClBC,QAAQL,IAAIK,SAAS,CAAA,GAAIC,IAAInB,cAAAA;IAC7BoB,QAAQ,CAAC;IACTC,QAAQ;;;IAGR,GAAIR,IAAIS,YAAY5B,SAAY;MAAE6B,YAAYV,IAAIS;IAAQ,IAAI,CAAC;;IAE/D,GAAIT,IAAIW,eAAe9B,SAAY;MAAE8B,YAAYX,IAAIW;IAAW,IAAI,CAAC;;;IAGrE,GAAIX,IAAIrB,kBAAkBE,SAAY;MAAEF,eAAeqB,IAAIrB;IAAc,IAAI,CAAC;;IAE9E,GAAIqB,IAAIY,cAAc/B,SAAY;MAAEgC,MAAMC,iBAAiBd,GAAAA;IAAK,IAAI,CAAC;;IAErE,GAAGe,uBAAuBf,IAAIgB,MAAM;;;;;IAKpC,GAAIhB,IAAIiB,mBAAmBpC,SACvB;MAAEoC,gBAAgBC,sBAAsBlB,IAAIiB,cAAc;IAAE,IAC5D,CAAC;;;;;;;;;IASL,GAAIjB,IAAIiB,gBAAgBE,eAAetC,SACnC;MAAEuC,eAAeC,qBAAqBrB,IAAIiB,cAAc;IAAE,IAC1D,CAAC;;;;IAIL,GAAIjB,IAAIsB,iBAAiBzC,SAAY;MAAEyC,cAActB,IAAIsB;IAAa,IAAI,CAAC;;IAE3E,GAAItB,IAAIuB,WAAW1C,SAAY;MAAE0C,QAAQvB,IAAIuB;IAAO,IAAI,CAAC;;;;IAIzD,GAAGC,uBAAuBxB,GAAAA;;;IAG1B,GAAIA,IAAIyB,eAAe5C,SAAY;MAAE4C,YAAYzB,IAAIyB;IAAW,IAAI,CAAC;EACvE;AACF;AApDgB1B;AAkEhB,SAASyB,uBAAuBxB,KAAoB;AAClD,QAAMM,MAAON,IAAsD0B;AACnE,QAAMC,UAAU9B,OAAO8B,QAAQrB,OAAO,CAAC,CAAA,EAAGsB,OAAO,CAAC,CAAA,EAAGC,CAAAA,MAAO,OAAOA,MAAM,UAAA;AACzE,QAAMC,WAAW9B,IAAI+B,WAAW,CAAA;AAEhC,MAAIJ,QAAQK,WAAW,GAAG;AACxB,WAAOhC,IAAI+B,YAAYlD,SAAY;MAAEkD,SAAS/B,IAAI+B;IAAQ,IAAI,CAAC;EACjE;AAIA,QAAME,SAAS;IACb1C,MAAM;IACN2C,SAAS;IACTC,MAAM;IACNC,SAASzC,KAAmE;AAC1E,iBAAW,CAAC0C,UAAUhD,OAAAA,KAAYsC,SAAS;AACzChC,YAAI2C,GAAGD,UAAUhD,OAAAA;MACnB;IACF;EACF;AACA,SAAO;IAAE0C,SAAS;SAAID;MAAUG;;EAAQ;AAC1C;AAtBST;AAwBF,SAAST,uBACdC,QAAmC;AAEnC,MAAIA,WAAWnC,OAAW,QAAO,CAAC;AAClC,MAAI,OAAOmC,WAAW,WAAY,QAAO;IAAEuB,gBAAgBvB;EAAO;AAClE,QAAMwB,UAAoB,CAAA;AAC1B,QAAMC,SAAwB,CAAA;AAC9B,aAAWC,SAAS1B,QAAQ;AAC1B,QAAI,OAAO0B,UAAU,SAAUF,SAAQG,KAAKD,KAAAA;QACvCD,QAAOE,KAAKD,KAAAA;EACnB;AACA,SAAO;IACL1B,QAAQ;MAAEwB;MAASI,YAAY;MAAM,GAAIH,OAAOT,SAAS,IAAI;QAAES;MAAO,IAAI,CAAC;IAAG;EAChF;AACF;AAdgB1B;AAqBhB,SAASD,iBAAiBd,KAAoB;AAC5C,QAAM6C,YAAY,IAAIC,KAAK9C,IAAIK,SAAS,CAAA,GAAIC,IAAI,CAACyC,MAAMA,EAAExD,IAAI,CAAA;AAC7D,QAAMyD,QAAQ,oBAAIC,IAAAA;AAClB,aAAW,CAACC,UAAUC,OAAAA,KAAYtD,OAAO8B,QAAQ3B,IAAIY,aAAa,CAAC,CAAA,GAAI;AACrE,QAAI,CAACiC,UAAUO,IAAIF,QAAAA,GAAW;AAC5B,YAAM,IAAIlE,MACR,mEAAmEkE,QAAAA,sBAC9C;WAAIL;QAAWQ,KAAK,IAAA,KAAS,QAAA,GAAW;IAEjE;AACAL,UAAMM,IAAIJ,UAAUC,OAAAA;EACtB;AACA,SAAOH;AACT;AAbSlC;","names":["TheokitAgentError","UntrustedSettingSourceError","TheokitAgentError","name","message","trustSource","capability","resolveSettingSources","selection","undefined","sources","user","push","grant","project","posture","trustedBy","allows","projectSettings","level","source","resolveCompatSources","claudeCode","surfaces","import","length","kind","AGENT_BRAND","Symbol","for","defineAgent","config","assertValidMaxIterations","maxIterations","value","undefined","Number","isInteger","Error","String","isAgentDefinition","toCompiledTool","tool","handler","compiled","name","description","inputSchema","input","ctx","sym","Object","getOwnPropertySymbols","compileAgentDefinition","def","model","reasoningEffort","systemPrompt","system","tools","map","agents","stream","context","runContext","guardrails","approvals","hitl","compileApprovals","compileSkillsSelection","skills","settingSources","resolveSettingSources","claudeCode","compatSources","resolveCompatSources","hookApproval","memory","compileHooksAndPlugins","mcpServers","hooks","entries","filter","h","explicit","plugins","length","plugin","version","kind","register","hookName","on","skillsResolver","enabled","inline","entry","push","autoInject","toolNames","Set","t","gates","Map","toolName","options","has","join","set"]}

package/dist/{chunk-RKWCXVYG.js → chunk-MJ6FRILJ.js}

@@ -4,7 +4,7 @@ import {
 
 // src/bridge/delegation-hooks.ts
 function bothOf(parent, own) {
-  return parent !== void 0 && own !== void 0 ? [
+  return typeof parent === "function" && typeof own === "function" ? [
     parent,
     own
   ] : void 0;
@@ -60,6 +60,70 @@ function composeObservers(merged, parent, own) {
   if (reply) merged.post_assistant_reply = chainObserver(reply[0], reply[1]);
 }
 __name(composeObservers, "composeObservers");
+function chainRecall(parent, own) {
+  return async (ctx) => {
+    const parts = [];
+    for (const [side, handler] of [
+      [
+        "parent",
+        parent
+      ],
+      [
+        "member",
+        own
+      ]
+    ]) {
+      try {
+        const text = (await handler(ctx))?.recalledContext;
+        if (text !== void 0 && text.length > 0) parts.push(text);
+      } catch (cause) {
+        console.warn(`[delegation] a ${side} pre_user_send threw; its contribution is lost`, cause);
+      }
+    }
+    return parts.length > 0 ? {
+      recalledContext: parts.join("\n\n")
+    } : void 0;
+  };
+}
+__name(chainRecall, "chainRecall");
+var COMPOSITION = {
+  pre_tool_call: "chained",
+  post_tool_call: "chained",
+  on_session_start: "chained",
+  on_session_end: "chained",
+  post_assistant_reply: "chained",
+  transform_llm_output: "chained",
+  transform_tool_result: "chained",
+  pre_user_send: "chained"
+};
+var CHAINED_HOOKS = Object.entries(COMPOSITION).filter(([, mode]) => mode === "chained").map(([key]) => key);
+var EXEMPT_HOOKS = Object.entries(COMPOSITION).filter(([, mode]) => mode === "exempt").map(([key]) => key);
+function chainToolResult(parent, own) {
+  return async (results, ctx) => {
+    let current = results;
+    try {
+      current = await parent(current, ctx);
+    } catch (cause) {
+      console.warn(`[delegation] a parent transform_tool_result threw; its change is lost`, cause);
+    }
+    try {
+      return await own(current, ctx);
+    } catch (cause) {
+      console.warn(`[delegation] a member transform_tool_result threw; the parent's result stands`, cause);
+      return current;
+    }
+  };
+}
+__name(chainToolResult, "chainToolResult");
+function composeTransforms(merged, parent, own) {
+  const llm = bothOf(parent?.transform_llm_output, own?.transform_llm_output);
+  if (llm) merged.transform_llm_output = chainTransform(llm[0], llm[1]);
+  const toolResult = bothOf(parent?.transform_tool_result, own?.transform_tool_result);
+  if (toolResult) merged.transform_tool_result = chainToolResult(toolResult[0], toolResult[1]);
+  const recall = bothOf(parent?.pre_user_send, own?.pre_user_send);
+  if (recall) merged.pre_user_send = chainRecall(recall[0], recall[1]);
+}
+__name(composeTransforms, "composeTransforms");
 function inheritHooks(parent, own) {
   const merged = {
     ...parent ?? {},
@@ -71,9 +135,7 @@ function inheritHooks(parent, own) {
   ].filter((gate) => gate !== void 0);
   if (gates.length > 0) merged.pre_tool_call = chainVeto(...gates);
   composeObservers(merged, parent, own);
-  if (parent?.transform_llm_output && own?.transform_llm_output) {
-    merged.transform_llm_output = chainTransform(parent.transform_llm_output, own.transform_llm_output);
-  }
+  composeTransforms(merged, parent, own);
   return merged;
 }
 __name(inheritHooks, "inheritHooks");
@@ -97,4 +159,4 @@ export {
   inheritHooks,
   hooksPlugin
 };
-//# sourceMappingURL=chunk-RKWCXVYG.js.map
+//# sourceMappingURL=chunk-MJ6FRILJ.js.map

package/dist/chunk-MJ6FRILJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bridge/delegation-hooks.ts"],"mappings":";;;;;AAoCA,SAASA,OAAUC,QAAuBC,KAAkB;AAM1D,SAAO,OAAOD,WAAW,cAAc,OAAOC,QAAQ,aAAa;IAACD;IAAQC;MAAOC;AACrF;AAPSH;AA+BT,SAASI,aAAaC,OAA6B;AACjD,SAAO,OAAOC,QAAAA;AACZ,eAAWC,QAAQF,OAAO;AACxB,UAAIG;AACJ,UAAI;AACFA,mBAAW,MAAMD,KAAKD,GAAAA;MACxB,SAASG,OAAO;AAGd,cAAMC,SAASD,iBAAiBE,QAAQF,MAAMG,UAAUC,OAAOJ,KAAAA;AAC/D,eAAO;UAAEK,OAAO;UAAMF,SAAS,0CAA0CF,MAAAA;QAAS;MACpF;AACA,UAAIF,UAAUM,UAAU,KAAM,QAAON;IACvC;AACA,WAAOL;EACT;AACF;AAhBSC;AAmBT,SAASW,cACPd,QACAC,KAAwC;AAExC,SAAO,OAAOI,QAAAA;AACZ,eAAWU,WAAW;MAACf;MAAQC;OAAM;AACnC,UAAI;AACF,cAAMc,QAAQV,GAAAA;MAChB,SAASG,OAAO;AAMd,cAAMC,SAASD,iBAAiBE,QAAQF,MAAMG,UAAUC,OAAOJ,KAAAA;AAC/DQ,gBAAQC,KAAK,oEAAoER,MAAAA,EAAQ;MAC3F;IACF;EACF;AACF;AAnBSK;AAsBT,SAASI,eACPlB,QACAC,KAA2D;AAE3D,SAAO,OAAOkB,OAAOd,QAAQJ,IAAI,MAAMD,OAAOmB,OAAOd,GAAAA,GAAMA,GAAAA;AAC7D;AALSa;AAeT,SAASE,iBACPC,QACArB,QACAC,KAA6B;AAE7B,QAAMqB,OAAOvB,OAAOC,QAAQuB,gBAAgBtB,KAAKsB,cAAAA;AACjD,MAAID,KAAMD,QAAOE,iBAAiBT,cAAcQ,KAAK,CAAA,GAAIA,KAAK,CAAA,CAAE;AAChE,QAAME,QAAQzB,OAAOC,QAAQyB,kBAAkBxB,KAAKwB,gBAAAA;AACpD,MAAID,MAAOH,QAAOI,mBAAmBX,cAAcU,MAAM,CAAA,GAAIA,MAAM,CAAA,CAAE;AACrE,QAAME,MAAM3B,OAAOC,QAAQ2B,gBAAgB1B,KAAK0B,cAAAA;AAChD,MAAID,IAAKL,QAAOM,iBAAiBb,cAAcY,IAAI,CAAA,GAAIA,IAAI,CAAA,CAAE;AAC7D,QAAME,QAAQ7B,OAAOC,QAAQ6B,sBAAsB5B,KAAK4B,oBAAAA;AACxD,MAAID,MAAOP,QAAOQ,uBAAuBf,cAAcc,MAAM,CAAA,GAAIA,MAAM,CAAA,CAAE;AAC3E;AAbSR;AAuBT,SAASU,YACP9B,QACAC,KAA+C;AAE/C,SAAO,OAAOI,QAAAA;AAIZ,UAAM0B,QAAkB,CAAA;AACxB,eAAW,CAACC,MAAMC,OAAAA,KAAY;MAC5B;QAAC;QAAUjC;;MACX;QAAC;QAAUC;;OACD;AACV,UAAI;AACF,cAAMiC,QAAQ,MAAMD,QAAQ5B,GAAAA,IAAO8B;AACnC,YAAID,SAAShC,UAAagC,KAAKE,SAAS,EAAGL,OAAMM,KAAKH,IAAAA;MACxD,SAAS1B,OAAO;AACdQ,gBAAQC,KAAK,kBAAkBe,IAAAA,kDAAsDxB,KAAAA;MACvF;IACF;AAGA,WAAOuB,MAAMK,SAAS,IAAI;MAAED,iBAAiBJ,MAAMO,KAAK,MAAA;IAAQ,IAAIpC;EACtE;AACF;AAxBS4B;AAqCT,IAAMS,cAA0E;EAC9EC,eAAe;EACfjB,gBAAgB;EAChBE,kBAAkB;EAClBE,gBAAgB;EAChBE,sBAAsB;EACtBY,sBAAsB;EACtBC,uBAAuB;EACvBC,eAAe;AACjB;AAGO,IAAMC,gBAAgBC,OAAOC,QAAQP,WAAAA,EACzCQ,OAAO,CAAC,CAAA,EAAGC,IAAAA,MAAUA,SAAS,SAAA,EAC9BC,IAAI,CAAC,CAACC,GAAAA,MAASA,GAAAA;AAUX,IAAMC,eAAeN,OAAOC,QAAQP,WAAAA,EACxCQ,OAAO,CAAC,CAAA,EAAGC,IAAAA,MAAUA,SAAS,QAAA,EAC9BC,IAAI,CAAC,CAACC,GAAAA,MAASA,GAAAA;AAelB,SAASE,gBACPpD,QACAC,KAAuD;AAEvD,SAAO,OAAUoD,SAAYhD,QAAAA;AAC3B,QAAIiD,UAAUD;AACd,QAAI;AACFC,gBAAU,MAAMtD,OAAOsD,SAASjD,GAAAA;IAClC,SAASG,OAAO;AACdQ,cAAQC,KAAK,yEAAyET,KAAAA;IACxF;AACA,QAAI;AACF,aAAO,MAAMP,IAAIqD,SAASjD,GAAAA;IAC5B,SAASG,OAAO;AAEdQ,cAAQC,KACN,iFACAT,KAAAA;AAEF,aAAO8C;IACT;EACF;AACF;AAtBSF;AAuCT,SAASG,kBACPlC,QACArB,QACAC,KAA6B;AAE7B,QAAMuD,MAAMzD,OAAOC,QAAQyC,sBAAsBxC,KAAKwC,oBAAAA;AACtD,MAAIe,IAAKnC,QAAOoB,uBAAuBvB,eAAesC,IAAI,CAAA,GAAIA,IAAI,CAAA,CAAE;AACpE,QAAMC,aAAa1D,OAAOC,QAAQ0C,uBAAuBzC,KAAKyC,qBAAAA;AAC9D,MAAIe,WAAYpC,QAAOqB,wBAAwBU,gBAAgBK,WAAW,CAAA,GAAIA,WAAW,CAAA,CAAE;AAC3F,QAAMC,SAAS3D,OAAOC,QAAQ2C,eAAe1C,KAAK0C,aAAAA;AAClD,MAAIe,OAAQrC,QAAOsB,gBAAgBb,YAAY4B,OAAO,CAAA,GAAIA,OAAO,CAAA,CAAE;AACrE;AAXSH;AAuBF,SAASI,aACd3D,QACAC,KAA6B;AAE7B,QAAMoB,SAAuB;IAAE,GAAIrB,UAAU,CAAC;IAAI,GAAIC,OAAO,CAAC;EAAG;AAIjE,QAAMG,QAAQ;IAACJ,QAAQwC;IAAevC,KAAKuC;IAAeO,OACxD,CAACzC,SAA8BA,SAASJ,MAAAA;AAE1C,MAAIE,MAAMgC,SAAS,EAAGf,QAAOmB,gBAAgBrC,UAAAA,GAAaC,KAAAA;AAE1DgB,mBAAiBC,QAAQrB,QAAQC,GAAAA;AAEjCsD,oBAAkBlC,QAAQrB,QAAQC,GAAAA;AAElC,SAAOoB;AACT;AAlBgBsC;AA8BT,SAASC,YAAYC,UAAsB;AAChD,QAAMf,UAAUD,OAAOC,QAAQe,QAAAA,EAAUd,OAAO,CAAC,CAAA,EAAGe,CAAAA,MAAO,OAAOA,MAAM,UAAA;AACxE,MAAIhB,QAAQV,WAAW,EAAG,QAAOlC;AACjC,SAAO;IACL6D,MAAM;IACNC,SAAS;IACTC,MAAM;IACNC,SAAS7D,KAAG;AACV,iBAAW,CAAC8D,UAAUlC,OAAAA,KAAYa,SAAS;AAQzCzC,YAAI+D,GAAGD,UAAUlC,OAAAA;MACnB;IACF;EACF;AACF;AApBgB2B;","names":["bothOf","parent","own","undefined","chainVeto","gates","ctx","gate","decision","cause","reason","Error","message","String","block","chainObserver","observe","console","warn","chainTransform","value","composeObservers","merged","post","post_tool_call","start","on_session_start","end","on_session_end","reply","post_assistant_reply","chainRecall","parts","side","handler","text","recalledContext","length","push","join","COMPOSITION","pre_tool_call","transform_llm_output","transform_tool_result","pre_user_send","CHAINED_HOOKS","Object","entries","filter","mode","map","key","EXEMPT_HOOKS","chainToolResult","results","current","composeTransforms","llm","toolResult","recall","inheritHooks","hooksPlugin","handlers","h","name","version","kind","register","hookName","on"]}

package/dist/{chunk-FXQF7LS3.js → chunk-O3VYC2KJ.js}

@@ -1,10 +1,10 @@
 import {
   hooksPlugin,
   inheritHooks
-} from "./chunk-RKWCXVYG.js";
+} from "./chunk-MJ6FRILJ.js";
 import {
   compileAgentDefinition
-} from "./chunk-43O2CCZR.js";
+} from "./chunk-KTOWSF2S.js";
 import {
   createRunUsageMeter
 } from "./chunk-OXNDJSAJ.js";
@@ -56,6 +56,21 @@ __name(compileProjectContext, "compileProjectContext");
 
 // src/guardrails/types.ts
 import { TheokitAgentError } from "@theokit/sdk/errors";
+var MalformedGuardrailResultError = class extends TheokitAgentError {
+  static {
+    __name(this, "MalformedGuardrailResultError");
+  }
+  guardName;
+  phase;
+  name = "MalformedGuardrailResultError";
+  constructor(guardName, phase) {
+    super(`Guardrail "${guardName}" returned action 'redact' for ${phase} with no replacement text. Nothing was redacted. Supply \`text\` (\`''\` erases), or return 'allow' or 'block'.`, {
+      code: "GUARDRAIL_RESULT_MALFORMED",
+      // A guard written wrong is not written right on the next attempt.
+      isRetryable: false
+    }), this.guardName = guardName, this.phase = phase;
+  }
+};
 var GuardrailViolationError = class extends TheokitAgentError {
   static {
     __name(this, "GuardrailViolationError");
@@ -210,30 +225,30 @@ function outputModeration(options) {
 __name(outputModeration, "outputModeration");
 
 // src/guardrails/pipeline.ts
-async function runInputGuards(text, guards) {
+async function runGuards(text, guards, phase) {
+  const check = phase === "input" ? "checkInput" : "checkOutput";
   let current = text;
   for (const g of guards) {
-    if (!g.checkInput) continue;
-    const r = await g.checkInput(current);
+    const fn = g[check];
+    if (!fn) continue;
+    const r = await fn.call(g, current);
     if (r.action === "block") {
-      throw new GuardrailViolationError(g.name, "input", r.reason ?? "blocked");
+      throw new GuardrailViolationError(g.name, phase, r.reason ?? "blocked");
+    }
+    if (r.action === "redact") {
+      if (r.text === void 0) throw new MalformedGuardrailResultError(g.name, phase);
+      current = r.text;
     }
-    if (r.action === "redact" && r.text !== void 0) current = r.text;
   }
   return current;
 }
+__name(runGuards, "runGuards");
+async function runInputGuards(text, guards) {
+  return runGuards(text, guards, "input");
+}
 __name(runInputGuards, "runInputGuards");
 async function runOutputGuards(text, guards) {
-  let current = text;
-  for (const g of guards) {
-    if (!g.checkOutput) continue;
-    const r = await g.checkOutput(current);
-    if (r.action === "block") {
-      throw new GuardrailViolationError(g.name, "output", r.reason ?? "blocked");
-    }
-    if (r.action === "redact" && r.text !== void 0) current = r.text;
-  }
-  return current;
+  return runGuards(text, guards, "output");
 }
 __name(runOutputGuards, "runOutputGuards");
 
@@ -2502,6 +2517,7 @@ __name(delegateWithScoring, "delegateWithScoring");
 export {
   projectContextMetadataOnlyKnobs,
   compileProjectContext,
+  MalformedGuardrailResultError,
   GuardrailViolationError,
   CostBudgetExceededError,
   estimateTokens,
@@ -2553,4 +2569,4 @@ export {
   delegateBackground,
   delegateWithScoring
 };
-//# sourceMappingURL=chunk-FXQF7LS3.js.map
+//# sourceMappingURL=chunk-O3VYC2KJ.js.map