@theokit/agents 13.0.0-next.10 → 13.0.0-next.2

package/CHANGELOG.md

@@ -1,208 +1,5 @@
 # @theokit/agents
 
-## 13.0.0-next.10
-
-### Minor Changes
-
-- ca44ee7: A narrowed foreign root can name `commands`
-
-  `settingSources.claudeCode.import` narrows the foreign root to named surfaces, and `CompatSurface`
-  listed four of them — `hooks`, `plugins`, `skills`, `subagents`. It fed a fifth: this package loads
-  `<projectDir>/.claude/commands/*.md` itself, outside the SDK's `compatSources` path. The name was
-  missing from the vocabulary, so a consumer could neither ask for that directory nor be told it had
-  gone unread, and `loadCustomCommands` tested `sources.includes('claude-code')` — string equality
-  against a union whose narrowed member is an object, so every narrowed list read as _not declared_.
-
-  `CompatSurface` now includes `'commands'`, and the loader understands both shapes: the bare source
-  name grants every surface the root feeds, the narrowed form grants the ones it names.
-
-  Purely additive — before this, no narrowed list reached the directory at all, so nothing that works
-  today stops working. A narrowed list that wants foreign commands adds `'commands'` to `import`.
-
-  An enumeration used to narrow a root must cover every surface that root feeds; otherwise it is not
-  a narrowing but an undeclared drop. Reported as usetheokit/theokit#704, found by measuring a claim
-  in a consumer's adoption report rather than by any test here — the fifth time a gap in this
-  package's public surface was invisible from inside it.
-
-## 13.0.0-next.9
-
-### Minor Changes
-
-- c59abf6: A foreign configuration root can be imported in part
-
-  `resolveCompatSources` returned the bare literal `'claude-code'`, which the SDK reads as "import
-  every surface" — hooks, plugins, skills, subagents. `settingSources.claudeCode.import` now names the
-  surfaces, and the resolved value carries them.
-
-  The distinction is the reason the grant exists: `.claude/` usually arrives with the clone and its
-  `hooks.json` executes shell, so "take the skills, refuse the hooks" is the ordinary thing to want,
-  and the only choices were all of it or none of it.
-
-  Absent `import` still means the whole root, so nothing existing changes. An EMPTY list is refused
-  rather than guessed: "no surfaces" and "unset, so all of them" are both defensible readings of `[]`,
-  they differ by whether shell executes, and picking one would settle a security question by
-  convention.
-
-  `CompatSurface` and `ResolvedCompatSource` are declared here rather than imported from the SDK, for
-  the reason already recorded beside the literal: they do not exist in `@theokit/sdk@4.52.1`, this
-  package's declared floor.
-
-  Closes usetheokit/theokit#686.
-
-## 13.0.0-next.8
-
-### Minor Changes
-
-- feb5781: `AgentBuilder.create().hookApproval()` — the fluent twin of `defineAgent({ hookApproval })`
-
-  `13.0.0-next.7` shipped the hook approval gate reachable through `defineAgent` and capabilities, and
-  not through the fluent builder. A consumer that authors with `AgentBuilder.create()` had no way to
-  reach it: `.use()` composes presets rather than sinking capabilities, and the definition reaches
-  `streamAgentTurnInProcess` with `local` already assembled, so there was no downstream place to inject
-  `local.hooks` by hand either.
-
-  Fifth instance of one family and a NEW variant. The first four were "the symbol exists and the barrel
-  omits it", which the emitted-export guard now catches. This one is the opposite: the symbol is
-  exported, on the compiled waist, and reachable through one authoring door — the other door simply
-  does not offer it, and an export check is green on that.
-
-  So the guard for this variant builds the SAME agent through BOTH doors and asserts they arrive at the
-  same compiled waist. It catches the worst case too: an interface that declares the method while the
-  factory never wires it compiles, does nothing, and fails this test.
-
-## 13.0.0-next.7
-
-### Patch Changes
-
-- a2b0a59: The hook gate's vocabulary crosses with the capability that takes it
-
-  `13.0.0-next.6` exported `HookApprovalCapability` and withheld `HookApprovalGate`,
-  `HookApprovalRequest` and `HookGateUnsupportedError`. A consumer could build the gate, and could
-  neither type the object it takes nor catch its refusal by class — which matters more here than
-  usual, because refusing loudly is the whole design.
-
-  Fourth instance of the same shape (#663 `AgentModule`, #668 `transcriptOf`, #675 `RegistryOutcome`),
-  and the first three were each found by installing the published package. The source is correct every
-  time: the type IS exported from its own module, and only the barrel omits it.
-
-  A guard now reads the EMITTED `dist/index.d.ts` export list rather than the source, and it was
-  proved able to fail by removing one export and watching it name that one.
-
-## 13.0.0-next.6
-
-### Minor Changes
-
-- 462bb62: The pre-spawn hook approval gate crosses the layer, or refuses to pretend it did
-
-  `@theokit/sdk@5.4.0` added `local.hooks.approve` — a consumer's decision point before the runtime
-  spawns a hook. This layer never forwarded it, so a hook declared in a config root, including a
-  foreign dialect imported through `compatSources`, ran shell without passing the consumer's approval.
-
-  Measured in a consumer against 5.4.0, with a control arm proving the zero was not an empty turn:
-
-  ```
-  control_nothing             fires=0  tool_ran=yes
-  claude_project_unapproved   fires=1  tool_ran=yes
-  ```
-
-  `defineAgent({ hookApproval })` and the new `HookApprovalCapability` now carry it to
-  `Agent.create({ local: { hooks } })`. Named `hookApproval` rather than `hooks` because
-  `defineAgent({ hooks })` is already the LIFECYCLE seam, and two security-relevant things under one
-  name is how a consumer configures the wrong one.
-
-  **Declaring it against an SDK older than 5.4.0 is REFUSED, not forwarded.** The option is 5.4.0-only
-  while this package's floor is `^4.52.1`, so a pass-through would compile and do nothing on most
-  admitted versions — a gate that silently does not gate, which is worse than offering none, because
-  whoever configured it stops looking. An unreadable SDK version is refused for the same reason:
-  "cannot tell" and "is gated" must not collapse.
-
-  The floor is unchanged, so no consumer is pinned to a newer SDK for a feature they did not ask for.
-
-  Closes usetheokit/theokit#686 (the `hooks` half; `resolveCompatSources` widening is tracked there).
-
-## 13.0.0-next.5
-
-### Patch Changes
-
-- 9915c19: `RegistryOutcome` is exported alongside the field that uses it
-
-  `registryOutcome` shipped in `13.0.0-next.4` and its type did not, so a consumer could read the
-  value and not name it — `function handle(o: RegistryOutcome)` did not compile. A union whose members
-  cannot be named is read as `string`, which loses every distinction it exists to make.
-
-  Third instance of the same omission (`AgentModule` in #663, `transcriptOf` in #668), and the third
-  found by installing the published package into an empty project rather than by reading the source.
-
-## 13.0.0-next.4
-
-### Minor Changes
-
-- a7f4d3d: `deleteSession` stops reporting a registry removal it cannot confirm
-
-  `registryRemoved` was computed as `outcome !== false`, so a remover that resolved saying **nothing**
-  was reported as a removal. That is the shape `Agent.delete` has — `Promise<void>` — and below
-  `@theokit/sdk@5.3.1` it is what a no-op returns: measured in `4.52.1`, `removeRegisteredAgent`
-  mutates an in-memory map and schedules a save only when the entry was in it, while `delete` — unlike
-  `list` — never hydrates from disk. In any freshly started process the entry is not in memory, so the
-  call resolves having left `registry.json` untouched and throws nothing.
-
-  Breaking, inside the unreleased 13.0.0 line:
-
-  - `DeleteSessionResult.registryRemoved: boolean` is replaced by
-    `registryOutcome: 'removed' | 'nothing-to-remove' | 'unconfirmed' | 'failed' | 'not-attempted'`.
-    Renamed rather than retyped: `if (result.registryRemoved)` would have kept compiling while
-    silently changing which branch it took.
-  - `SessionInUseError.registryRemoved` becomes `registryOutcome`, and the refusal no longer advertises
-    "the registry entry was already removed" for a half it cannot confirm — it tells the caller to
-    verify instead.
-
-  `not-attempted` and `unconfirmed` are distinct on purpose: "nobody asked" and "we asked and got
-  silence" lead a caller to opposite actions, and the old boolean said `false` to both.
-
-  The declared SDK range is unchanged. `5.3.1` fixes the behaviour and not the signature — `delete`
-  still returns `Promise<void>` — so `unconfirmed` remains the honest answer on every admitted version,
-  and raising the floor is a separate decision that would make the removal happen without making it
-  reportable.
-
-  Closes usetheokit/theokit#675.
-
-## 13.0.0-next.3
-
-### Minor Changes
-
-- 59d6dcc: A transcript nobody can read is listed without an id, and keeps its protection
-
-  `listSessions` fell back to the filename stem whenever the first record could not be read. Under
-  `@theokit/sdk` 5.x that stem is a one-way hash of the id, so the fallback did not return a degraded
-  id — it returned an identifier belonging to no session. Session GC keyed protection on it, so a
-  session someone had DECLARED protected lost its protection and was planned for deletion, while the
-  registry removal was called with the hash and left the real entry behind.
-
-  Protection now runs in the direction that has a function. `transcriptPath(root, cwd, id)` is total on
-  both majors and its inverse is not, so protection is keyed by transcript PATH and caller-supplied ids
-  are mapped forward onto paths. Whether a transcript can be read stops mattering to whether it is
-  protected.
-
-  Breaking, inside the unreleased 13.0.0 line:
-
-  - `SessionSummary.id` is `string | undefined`, alongside a new `idSource: 'transcript' | 'unavailable'`.
-    It is never derived from the filename.
-  - **`protectedTranscripts` is RENAMED to `protectedTranscriptPaths`, and the rename is the fix.** Its
-    keys changed from session ids to transcript paths while the signature stayed `Map<string, string>`,
-    so a consumer that mapped the keys forward through `transcriptPath` — correct when they were ids —
-    kept compiling and started double-mapping, leaving its protection array matching nothing. Measured
-    on a real consumer against this build: `deleteSession` collected a session holding a LIVE writer
-    lease. The old name is gone rather than aliased; a silent break that loses data is worse than a
-    loud one, and an alias would have preserved the silence. `transcriptOf(id, cwd, root)` maps forward
-    for callers that hold an id.
-  - `GCCandidate.id`, `GCKept.id` and `GCError.id` admit `undefined` for the same reason.
-  - `RunTranscriptGCResult` gains `orphaned` — transcripts collected whose session id could not be
-    read, by path. A separate list rather than a second meaning inside `removed`, which answers "which
-    sessions did I collect"; `theo sessions gc` reports both, and never prints a filename where an id
-    belongs.
-
-  Closes usetheokit/theokit#668.
-
 ## 13.0.0-next.2
 
 ### Minor Changes

package/dist/{agent-compiler-CvYfM-0t.d.ts → agent-compiler-uhleFZj_.d.ts}

@@ -1,7 +1,6 @@
 import { InlineSkill, SystemPromptResolver, SettingSource, MemorySettings, SkillsSettings, ContextSettings } from '@theokit/sdk';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 import { R as ReasoningEffort, a as MemoryOptions, P as ProjectContextOptions, M as McpServersMap, H as HumanInTheLoopOptions, C as CheckpointOptions, T as ToolOptions, A as ApprovalOptions, B as BudgetOptions } from './types-C16Wuh9E.js';
-import { R as ResolvedCompatSource } from './setting-sources-gate-tadmHT0c.js';
 
 /**
  * M9 (theokit-ai-first) — guardrail contract + typed errors.
@@ -98,58 +97,6 @@ type SkillsSelection = readonly (string | InlineSkill)[] | ((ctx: SkillsRequestC
  */
 declare function resolveEnabledSkills(selection: SkillsSelection | undefined, ctx: SkillsRequestContext): Promise<string[] | undefined>;
 
-/**
- * Project the M8 fields from `CompiledAgentOptions` into `Agent.create()` arguments. Only the async
- * `@ProjectContext` resolver is built here (it does I/O, so the compiler keeps it raw). `applied`
- * lists which decorators contributed, for the observability log (wiring triad — runtime metric).
- */
-/**
- * #686 — a consumer's decision point before the SDK spawns a hook, forwarded to
- * `Agent.create({ local: { hooks } })`.
- *
- * Declared here rather than imported: the SDK's `HookApprovalGate` landed in `5.4.0` and this
- * package's floor is `^4.52.1`, so importing the type would refuse to build on every version below
- * it. The shape is structural and small, which is the same reasoning `compatSources` already
- * records — "a string union is declarable here".
- *
- * The SDK calls the option `hooks`. On this layer's authoring surface it is `hookApproval`, because
- * `defineAgent({ hooks })` is already the LIFECYCLE seam and two different security-relevant things
- * under one name is how a consumer configures the wrong one.
- */
-interface HookApprovalGate {
-    readonly approve?: (request: HookApprovalRequest) => boolean | Promise<boolean>;
-}
-/** What the consumer is shown when asked to approve a hook. Mirrors the SDK's shape (5.4.0). */
-interface HookApprovalRequest {
-    readonly command: string;
-    readonly event: string;
-    readonly sourcePath?: string;
-    readonly matcher?: string;
-}
-/**
- * Refuses when the installed SDK cannot honour a declared hook gate.
- *
- * ## Why this THROWS where its `compatSources` sibling only warns
- *
- * That one guards a configuration source: ignored, the foreign root is not read, and the agent runs
- * with less than was asked for. This one guards a SECURITY decision. Ignored, the agent runs with
- * MORE than was asked for — every hook spawns unreviewed — while the consumer believes it is gated
- * and stops looking. The consumer that reported #686 asked for the refusal in those words: they
- * would rather have no gate than a silent one, because their `doctor` would otherwise publish a
- * guarantee that is false on `@theokit/sdk@5.0.0`.
- *
- * ## Why an unreadable version is a refusal and not a shrug
- *
- * The sibling stays silent when it cannot read the version, and that is right for a diagnostic. Here
- * "cannot tell" and "is gated" must not collapse: unproven is not proven, and this whole issue is
- * one instance of that confusion. A bundled SDK that hides `package.json` gets an explicit refusal
- * naming what it could not read, which is recoverable; a silent pass is not.
- */
-declare class HookGateUnsupportedError extends TheokitAgentError {
-    readonly name = "HookGateUnsupportedError";
-    constructor(version: string | undefined);
-}
-
 /**
  * Agent compiler — transforms decorator metadata into SDK calls.
  *
@@ -246,15 +193,7 @@ interface CompiledAgentOptions {
      * Resolved at compile time by `resolveCompatSources`, exactly like `settingSources`: a value here
      * can only hold a source some posture granted, so the adapter projects rather than decides.
      */
-    compatSources?: readonly ResolvedCompatSource[];
-    /**
-     * #686 — the consumer's pre-spawn approval gate, forwarded to `Agent.create({ local: { hooks } })`.
-     *
-     * Distinct from `hitl` (which gates TOOLS at run time) and from the lifecycle `plugins` below
-     * (which react to events). This one decides whether a hook declared in a config root — including
-     * a foreign dialect imported through `compatSources` — is spawned at all.
-     */
-    hookApproval?: HookApprovalGate;
+    compatSources?: readonly string[];
     /** Code `Plugin` objects forwarded to `Agent.create({ plugins })` (lifecycle-hook seam). */
     plugins?: readonly unknown[];
     tools: CompiledTool[];
@@ -299,4 +238,4 @@ interface CompiledAgentOptions {
     skillsResolver?: SkillsSelection;
 }
 
-export { type CompiledAgentOptions as C, type Guardrail as G, type HookApprovalGate as H, type SkillsSelection as S, type ToolWalkResult as T, type CompiledTool as a, CostBudgetExceededError as b, type GuardrailAction as c, type GuardrailPhase as d, type GuardrailResult as e, GuardrailViolationError as f, type HookApprovalRequest as g, HookGateUnsupportedError as h, type SkillsRequestContext as i, type ToolboxWalkResult as j, compileTools as k, resolveEnabledSkills as r };
+export { type CompiledAgentOptions as C, type Guardrail as G, type SkillsSelection as S, type ToolWalkResult as T, type CompiledTool as a, CostBudgetExceededError as b, type GuardrailAction as c, type GuardrailPhase as d, type GuardrailResult as e, GuardrailViolationError as f, type SkillsRequestContext as g, type ToolboxWalkResult as h, compileTools as i, resolveEnabledSkills as r };

package/dist/{bridge-entry-B3BRB3e_.d.ts → bridge-entry--4VYlECy.d.ts}

@@ -1,14 +1,13 @@
 import { ExecutionContext } from '@theokit/http';
 import { c as AgentOptions, T as ToolOptions, P as ProjectContextOptions, H as HumanInTheLoopOptions, R as ReasoningEffort, M as McpServersMap } from './types-C16Wuh9E.js';
-import { C as CompiledAgentOptions, a as CompiledTool, G as Guardrail, S as SkillsSelection, H as HookApprovalGate } from './agent-compiler-CvYfM-0t.js';
+import { C as CompiledAgentOptions, a as CompiledTool, G as Guardrail, S as SkillsSelection } from './agent-compiler-uhleFZj_.js';
 import { SkillsSettings, ContextSettings, SystemPromptResolver, ModelSelection, PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition as AgentDefinition$1, BudgetTracker, CustomTool, RunEventSink, MemorySettings } from '@theokit/sdk';
-import { S as StreamEvent, f as ApprovalRequiredEvent, a4 as MaskError } from './delegation-scoring-BZdtCdMN.js';
+import { S as StreamEvent, f as ApprovalRequiredEvent, a4 as MaskError } from './delegation-scoring--OiOTcAW.js';
 import { RetryOptions } from '@theokit/sdk/retry';
 import { SandboxPosture } from '@theokit/sdk/sandbox';
-import { A as AgentDefinition } from './define-agent-Dp6e7chT.js';
+import { A as AgentDefinition, S as SettingSourcesSelection } from './define-agent-BL3jMyJi.js';
 import { z } from 'zod';
 import { H as HookHandlers } from './hook-handlers-Cw2FsnE5.js';
-import { S as SettingSourcesSelection } from './setting-sources-gate-tadmHT0c.js';
 import { WireChunk } from '@theokit/presenter/wire';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 
@@ -913,22 +912,6 @@ interface AgentBuilder<TInput extends z.ZodType | UnsetMarker = UnsetMarker, TMo
      * whose `cwd` is its own deploy, false for an agent pointed at a repository someone else wrote.
      */
     settingSources(selection: SettingSourcesSelection): AgentBuilder<TInput, TModel, TContext, TTools>;
-    /**
-     * #686 — decide whether a hook declared in a config root is spawned AT ALL, before it runs.
-     *
-     * The fluent twin of `defineAgent({ hookApproval })`. It exists because a consumer that builds
-     * through this chain had no way to reach the gate: `.use()` composes presets rather than sinking
-     * capabilities, and the definition reaches `streamAgentTurnInProcess` with `local` already
-     * assembled, so there was no downstream place to inject it either.
-     *
-     * Distinct from {@link AgentBuilder.hooks} below, which ATTACHES lifecycle hooks. This one decides
-     * whether hooks somebody ELSE declared — in `.theokit/`, or in a foreign dialect imported through
-     * `settingSources` — are allowed to run.
-     *
-     * Requires `@theokit/sdk >= 5.4.0`. Declaring it against an older SDK is refused at assembly
-     * rather than forwarded: a gate that silently does not gate is worse than none.
-     */
-    hookApproval(gate: HookApprovalGate): AgentBuilder<TInput, TModel, TContext, TTools>;
     /**
      * M49 — enable the SDK's durable memory for this agent (`.theokit/memory/` in the run cwd:
      * `Remember:` capture with secret redaction, auto-injected recall, memory tools). Takes the SDK's

package/dist/bridge.d.ts

@@ -1,8 +1,7 @@
-export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, A as AgentManifestEntry, i as AgentManifestSource, j as AgentManifestTool, b as AgentModule, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, a as ApprovalPosture, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, R as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, U as agentsPlugin, V as applyPosture, X as buildModelSelection, Y as compileAgentModule, Z as compileContextWindow, _ as compileLoadedAgentModule, $ as compileProjectContext, a0 as compileSkills, a1 as createAgentExecutionContext, a2 as createApiErrorHandler, a3 as createSdkAgentStream, a4 as createThinkTagExtractor, a5 as createToolHooksPlugin, a6 as extractThinkTagStream, a7 as generateAgentManifest, a8 as generateAgentRoutes, a9 as isAgentContext, aa as loadMcpJson, ab as mcpRegistry, ac as mcpToolApprovals, ad as projectContextMetadataOnlyKnobs, ae as reasoningEffortOf, af as resolveMcpServers, ag as runWithApiErrorHandling, ah as shouldAutoApprove, s as streamAgentUIMessages, ai as toAgentFactory, aj as translateSdkEvent, ak as withClockCap, al as withEphemeralAgent } from './bridge-entry-B3BRB3e_.js';
-export { C as CompiledAgentOptions, a as CompiledTool, H as HookApprovalGate, g as HookApprovalRequest, h as HookGateUnsupportedError, T as ToolWalkResult, j as ToolboxWalkResult, k as compileTools } from './agent-compiler-CvYfM-0t.js';
-export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, c as DelegationResult, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, P as PartialToolCallEvent, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, S as StreamEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, a0 as presentUIMessageStream, a3 as streamAgentResponse } from './delegation-scoring-BZdtCdMN.js';
-export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, c as compileAgentDefinition, i as isAgentDefinition } from './define-agent-Dp6e7chT.js';
-export { C as CompatSurface, P as ProjectSettingsGrant, R as ResolvedCompatSource, a as SettingSourceCapability, S as SettingSourcesSelection, U as UntrustedSettingSourceError, r as resolveCompatSources, b as resolveSettingSources } from './setting-sources-gate-tadmHT0c.js';
+export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, A as AgentManifestEntry, i as AgentManifestSource, j as AgentManifestTool, b as AgentModule, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, a as ApprovalPosture, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, R as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, U as agentsPlugin, V as applyPosture, X as buildModelSelection, Y as compileAgentModule, Z as compileContextWindow, _ as compileLoadedAgentModule, $ as compileProjectContext, a0 as compileSkills, a1 as createAgentExecutionContext, a2 as createApiErrorHandler, a3 as createSdkAgentStream, a4 as createThinkTagExtractor, a5 as createToolHooksPlugin, a6 as extractThinkTagStream, a7 as generateAgentManifest, a8 as generateAgentRoutes, a9 as isAgentContext, aa as loadMcpJson, ab as mcpRegistry, ac as mcpToolApprovals, ad as projectContextMetadataOnlyKnobs, ae as reasoningEffortOf, af as resolveMcpServers, ag as runWithApiErrorHandling, ah as shouldAutoApprove, s as streamAgentUIMessages, ai as toAgentFactory, aj as translateSdkEvent, ak as withClockCap, al as withEphemeralAgent } from './bridge-entry--4VYlECy.js';
+export { C as CompiledAgentOptions, a as CompiledTool, T as ToolWalkResult, h as ToolboxWalkResult, i as compileTools } from './agent-compiler-uhleFZj_.js';
+export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, c as DelegationResult, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, P as PartialToolCallEvent, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, S as StreamEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, a0 as presentUIMessageStream, a3 as streamAgentResponse } from './delegation-scoring--OiOTcAW.js';
+export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, P as ProjectSettingsGrant, c as SettingSourceCapability, S as SettingSourcesSelection, U as UntrustedSettingSourceError, d as compileAgentDefinition, i as isAgentDefinition, r as resolveCompatSources, e as resolveSettingSources } from './define-agent-BL3jMyJi.js';
 import '@theokit/http';
 import './types-C16Wuh9E.js';
 import '@theokit/sdk';

package/dist/bridge.js

@@ -29,14 +29,13 @@ import {
   runWithApiErrorHandling,
   streamAgentResponse,
   streamAgentUIMessages
-} from "./chunk-6YJIXBMA.js";
+} from "./chunk-LTPL32XW.js";
 import {
   APPROVAL_MODES,
   BudgetExceededError,
   DelegationBudgetExceededError,
   DelegationError,
   DelegationTimeoutError,
-  HookGateUnsupportedError,
   WRITE_SCOPED_TOOLS,
   applyPosture,
   buildModelSelection,
@@ -55,7 +54,7 @@ import {
   translateSdkEvent,
   withClockCap,
   withEphemeralAgent
-} from "./chunk-FXQF7LS3.js";
+} from "./chunk-GHRHJPJS.js";
 import "./chunk-RKWCXVYG.js";
 import {
   AGENT_BRAND,
@@ -64,7 +63,7 @@ import {
   isAgentDefinition,
   resolveCompatSources,
   resolveSettingSources
-} from "./chunk-43O2CCZR.js";
+} from "./chunk-OAQEWLQJ.js";
 import "./chunk-OXNDJSAJ.js";
 import "./chunk-Z4QWC7IK.js";
 export {
@@ -77,7 +76,6 @@ export {
   DelegationBudgetExceededError,
   DelegationError,
   DelegationTimeoutError,
-  HookGateUnsupportedError,
   McpFileError,
   UntrustedSettingSourceError,
   WRITE_SCOPED_TOOLS,