@theokit/agents 13.0.0-next.5 → 13.0.0-next.7

package/CHANGELOG.md

@@ -1,5 +1,55 @@
 # @theokit/agents
 
+## 13.0.0-next.7
+
+### Patch Changes
+
+- a2b0a59: The hook gate's vocabulary crosses with the capability that takes it
+
+  `13.0.0-next.6` exported `HookApprovalCapability` and withheld `HookApprovalGate`,
+  `HookApprovalRequest` and `HookGateUnsupportedError`. A consumer could build the gate, and could
+  neither type the object it takes nor catch its refusal by class — which matters more here than
+  usual, because refusing loudly is the whole design.
+
+  Fourth instance of the same shape (#663 `AgentModule`, #668 `transcriptOf`, #675 `RegistryOutcome`),
+  and the first three were each found by installing the published package. The source is correct every
+  time: the type IS exported from its own module, and only the barrel omits it.
+
+  A guard now reads the EMITTED `dist/index.d.ts` export list rather than the source, and it was
+  proved able to fail by removing one export and watching it name that one.
+
+## 13.0.0-next.6
+
+### Minor Changes
+
+- 462bb62: The pre-spawn hook approval gate crosses the layer, or refuses to pretend it did
+
+  `@theokit/sdk@5.4.0` added `local.hooks.approve` — a consumer's decision point before the runtime
+  spawns a hook. This layer never forwarded it, so a hook declared in a config root, including a
+  foreign dialect imported through `compatSources`, ran shell without passing the consumer's approval.
+
+  Measured in a consumer against 5.4.0, with a control arm proving the zero was not an empty turn:
+
+  ```
+  control_nothing             fires=0  tool_ran=yes
+  claude_project_unapproved   fires=1  tool_ran=yes
+  ```
+
+  `defineAgent({ hookApproval })` and the new `HookApprovalCapability` now carry it to
+  `Agent.create({ local: { hooks } })`. Named `hookApproval` rather than `hooks` because
+  `defineAgent({ hooks })` is already the LIFECYCLE seam, and two security-relevant things under one
+  name is how a consumer configures the wrong one.
+
+  **Declaring it against an SDK older than 5.4.0 is REFUSED, not forwarded.** The option is 5.4.0-only
+  while this package's floor is `^4.52.1`, so a pass-through would compile and do nothing on most
+  admitted versions — a gate that silently does not gate, which is worse than offering none, because
+  whoever configured it stops looking. An unreadable SDK version is refused for the same reason:
+  "cannot tell" and "is gated" must not collapse.
+
+  The floor is unchanged, so no consumer is pinned to a newer SDK for a feature they did not ask for.
+
+  Closes usetheokit/theokit#686 (the `hooks` half; `resolveCompatSources` widening is tracked there).
+
 ## 13.0.0-next.5
 
 ### Patch Changes

package/dist/{agent-compiler-uhleFZj_.d.ts → agent-compiler-C2jIZ4CZ.d.ts}

@@ -97,6 +97,58 @@ type SkillsSelection = readonly (string | InlineSkill)[] | ((ctx: SkillsRequestC
  */
 declare function resolveEnabledSkills(selection: SkillsSelection | undefined, ctx: SkillsRequestContext): Promise<string[] | undefined>;
 
+/**
+ * Project the M8 fields from `CompiledAgentOptions` into `Agent.create()` arguments. Only the async
+ * `@ProjectContext` resolver is built here (it does I/O, so the compiler keeps it raw). `applied`
+ * lists which decorators contributed, for the observability log (wiring triad — runtime metric).
+ */
+/**
+ * #686 — a consumer's decision point before the SDK spawns a hook, forwarded to
+ * `Agent.create({ local: { hooks } })`.
+ *
+ * Declared here rather than imported: the SDK's `HookApprovalGate` landed in `5.4.0` and this
+ * package's floor is `^4.52.1`, so importing the type would refuse to build on every version below
+ * it. The shape is structural and small, which is the same reasoning `compatSources` already
+ * records — "a string union is declarable here".
+ *
+ * The SDK calls the option `hooks`. On this layer's authoring surface it is `hookApproval`, because
+ * `defineAgent({ hooks })` is already the LIFECYCLE seam and two different security-relevant things
+ * under one name is how a consumer configures the wrong one.
+ */
+interface HookApprovalGate {
+    readonly approve?: (request: HookApprovalRequest) => boolean | Promise<boolean>;
+}
+/** What the consumer is shown when asked to approve a hook. Mirrors the SDK's shape (5.4.0). */
+interface HookApprovalRequest {
+    readonly command: string;
+    readonly event: string;
+    readonly sourcePath?: string;
+    readonly matcher?: string;
+}
+/**
+ * Refuses when the installed SDK cannot honour a declared hook gate.
+ *
+ * ## Why this THROWS where its `compatSources` sibling only warns
+ *
+ * That one guards a configuration source: ignored, the foreign root is not read, and the agent runs
+ * with less than was asked for. This one guards a SECURITY decision. Ignored, the agent runs with
+ * MORE than was asked for — every hook spawns unreviewed — while the consumer believes it is gated
+ * and stops looking. The consumer that reported #686 asked for the refusal in those words: they
+ * would rather have no gate than a silent one, because their `doctor` would otherwise publish a
+ * guarantee that is false on `@theokit/sdk@5.0.0`.
+ *
+ * ## Why an unreadable version is a refusal and not a shrug
+ *
+ * The sibling stays silent when it cannot read the version, and that is right for a diagnostic. Here
+ * "cannot tell" and "is gated" must not collapse: unproven is not proven, and this whole issue is
+ * one instance of that confusion. A bundled SDK that hides `package.json` gets an explicit refusal
+ * naming what it could not read, which is recoverable; a silent pass is not.
+ */
+declare class HookGateUnsupportedError extends TheokitAgentError {
+    readonly name = "HookGateUnsupportedError";
+    constructor(version: string | undefined);
+}
+
 /**
  * Agent compiler — transforms decorator metadata into SDK calls.
  *
@@ -194,6 +246,14 @@ interface CompiledAgentOptions {
      * can only hold a source some posture granted, so the adapter projects rather than decides.
      */
     compatSources?: readonly string[];
+    /**
+     * #686 — the consumer's pre-spawn approval gate, forwarded to `Agent.create({ local: { hooks } })`.
+     *
+     * Distinct from `hitl` (which gates TOOLS at run time) and from the lifecycle `plugins` below
+     * (which react to events). This one decides whether a hook declared in a config root — including
+     * a foreign dialect imported through `compatSources` — is spawned at all.
+     */
+    hookApproval?: HookApprovalGate;
     /** Code `Plugin` objects forwarded to `Agent.create({ plugins })` (lifecycle-hook seam). */
     plugins?: readonly unknown[];
     tools: CompiledTool[];
@@ -238,4 +298,4 @@ interface CompiledAgentOptions {
     skillsResolver?: SkillsSelection;
 }
 
-export { type CompiledAgentOptions as C, type Guardrail as G, type SkillsSelection as S, type ToolWalkResult as T, type CompiledTool as a, CostBudgetExceededError as b, type GuardrailAction as c, type GuardrailPhase as d, type GuardrailResult as e, GuardrailViolationError as f, type SkillsRequestContext as g, type ToolboxWalkResult as h, compileTools as i, resolveEnabledSkills as r };
+export { type CompiledAgentOptions as C, type Guardrail as G, type HookApprovalGate as H, type SkillsSelection as S, type ToolWalkResult as T, type CompiledTool as a, CostBudgetExceededError as b, type GuardrailAction as c, type GuardrailPhase as d, type GuardrailResult as e, GuardrailViolationError as f, type HookApprovalRequest as g, HookGateUnsupportedError as h, type SkillsRequestContext as i, type ToolboxWalkResult as j, compileTools as k, resolveEnabledSkills as r };

package/dist/{bridge-entry--4VYlECy.d.ts → bridge-entry-Db0SZbYj.d.ts}

@@ -1,11 +1,11 @@
 import { ExecutionContext } from '@theokit/http';
 import { c as AgentOptions, T as ToolOptions, P as ProjectContextOptions, H as HumanInTheLoopOptions, R as ReasoningEffort, M as McpServersMap } from './types-C16Wuh9E.js';
-import { C as CompiledAgentOptions, a as CompiledTool, G as Guardrail, S as SkillsSelection } from './agent-compiler-uhleFZj_.js';
+import { C as CompiledAgentOptions, a as CompiledTool, G as Guardrail, S as SkillsSelection } from './agent-compiler-C2jIZ4CZ.js';
 import { SkillsSettings, ContextSettings, SystemPromptResolver, ModelSelection, PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition as AgentDefinition$1, BudgetTracker, CustomTool, RunEventSink, MemorySettings } from '@theokit/sdk';
-import { S as StreamEvent, f as ApprovalRequiredEvent, a4 as MaskError } from './delegation-scoring--OiOTcAW.js';
+import { S as StreamEvent, f as ApprovalRequiredEvent, a4 as MaskError } from './delegation-scoring-BrBQXvIp.js';
 import { RetryOptions } from '@theokit/sdk/retry';
 import { SandboxPosture } from '@theokit/sdk/sandbox';
-import { A as AgentDefinition, S as SettingSourcesSelection } from './define-agent-BL3jMyJi.js';
+import { A as AgentDefinition, S as SettingSourcesSelection } from './define-agent-WYnUlWaH.js';
 import { z } from 'zod';
 import { H as HookHandlers } from './hook-handlers-Cw2FsnE5.js';
 import { WireChunk } from '@theokit/presenter/wire';

package/dist/bridge.d.ts

@@ -1,7 +1,7 @@
-export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, A as AgentManifestEntry, i as AgentManifestSource, j as AgentManifestTool, b as AgentModule, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, a as ApprovalPosture, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, R as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, U as agentsPlugin, V as applyPosture, X as buildModelSelection, Y as compileAgentModule, Z as compileContextWindow, _ as compileLoadedAgentModule, $ as compileProjectContext, a0 as compileSkills, a1 as createAgentExecutionContext, a2 as createApiErrorHandler, a3 as createSdkAgentStream, a4 as createThinkTagExtractor, a5 as createToolHooksPlugin, a6 as extractThinkTagStream, a7 as generateAgentManifest, a8 as generateAgentRoutes, a9 as isAgentContext, aa as loadMcpJson, ab as mcpRegistry, ac as mcpToolApprovals, ad as projectContextMetadataOnlyKnobs, ae as reasoningEffortOf, af as resolveMcpServers, ag as runWithApiErrorHandling, ah as shouldAutoApprove, s as streamAgentUIMessages, ai as toAgentFactory, aj as translateSdkEvent, ak as withClockCap, al as withEphemeralAgent } from './bridge-entry--4VYlECy.js';
-export { C as CompiledAgentOptions, a as CompiledTool, T as ToolWalkResult, h as ToolboxWalkResult, i as compileTools } from './agent-compiler-uhleFZj_.js';
-export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, c as DelegationResult, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, P as PartialToolCallEvent, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, S as StreamEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, a0 as presentUIMessageStream, a3 as streamAgentResponse } from './delegation-scoring--OiOTcAW.js';
-export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, P as ProjectSettingsGrant, c as SettingSourceCapability, S as SettingSourcesSelection, U as UntrustedSettingSourceError, d as compileAgentDefinition, i as isAgentDefinition, r as resolveCompatSources, e as resolveSettingSources } from './define-agent-BL3jMyJi.js';
+export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, A as AgentManifestEntry, i as AgentManifestSource, j as AgentManifestTool, b as AgentModule, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, a as ApprovalPosture, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, R as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, U as agentsPlugin, V as applyPosture, X as buildModelSelection, Y as compileAgentModule, Z as compileContextWindow, _ as compileLoadedAgentModule, $ as compileProjectContext, a0 as compileSkills, a1 as createAgentExecutionContext, a2 as createApiErrorHandler, a3 as createSdkAgentStream, a4 as createThinkTagExtractor, a5 as createToolHooksPlugin, a6 as extractThinkTagStream, a7 as generateAgentManifest, a8 as generateAgentRoutes, a9 as isAgentContext, aa as loadMcpJson, ab as mcpRegistry, ac as mcpToolApprovals, ad as projectContextMetadataOnlyKnobs, ae as reasoningEffortOf, af as resolveMcpServers, ag as runWithApiErrorHandling, ah as shouldAutoApprove, s as streamAgentUIMessages, ai as toAgentFactory, aj as translateSdkEvent, ak as withClockCap, al as withEphemeralAgent } from './bridge-entry-Db0SZbYj.js';
+export { C as CompiledAgentOptions, a as CompiledTool, H as HookApprovalGate, g as HookApprovalRequest, h as HookGateUnsupportedError, T as ToolWalkResult, j as ToolboxWalkResult, k as compileTools } from './agent-compiler-C2jIZ4CZ.js';
+export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, c as DelegationResult, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, P as PartialToolCallEvent, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, S as StreamEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, a0 as presentUIMessageStream, a3 as streamAgentResponse } from './delegation-scoring-BrBQXvIp.js';
+export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, P as ProjectSettingsGrant, c as SettingSourceCapability, S as SettingSourcesSelection, U as UntrustedSettingSourceError, d as compileAgentDefinition, i as isAgentDefinition, r as resolveCompatSources, e as resolveSettingSources } from './define-agent-WYnUlWaH.js';
 import '@theokit/http';
 import './types-C16Wuh9E.js';
 import '@theokit/sdk';

package/dist/bridge.js

@@ -29,13 +29,14 @@ import {
   runWithApiErrorHandling,
   streamAgentResponse,
   streamAgentUIMessages
-} from "./chunk-LTPL32XW.js";
+} from "./chunk-YVPQ3KSA.js";
 import {
   APPROVAL_MODES,
   BudgetExceededError,
   DelegationBudgetExceededError,
   DelegationError,
   DelegationTimeoutError,
+  HookGateUnsupportedError,
   WRITE_SCOPED_TOOLS,
   applyPosture,
   buildModelSelection,
@@ -54,7 +55,7 @@ import {
   translateSdkEvent,
   withClockCap,
   withEphemeralAgent
-} from "./chunk-GHRHJPJS.js";
+} from "./chunk-NZTLBLHB.js";
 import "./chunk-RKWCXVYG.js";
 import {
   AGENT_BRAND,
@@ -63,7 +64,7 @@ import {
   isAgentDefinition,
   resolveCompatSources,
   resolveSettingSources
-} from "./chunk-OAQEWLQJ.js";
+} from "./chunk-X4IGZHOV.js";
 import "./chunk-OXNDJSAJ.js";
 import "./chunk-Z4QWC7IK.js";
 export {
@@ -76,6 +77,7 @@ export {
   DelegationBudgetExceededError,
   DelegationError,
   DelegationTimeoutError,
+  HookGateUnsupportedError,
   McpFileError,
   UntrustedSettingSourceError,
   WRITE_SCOPED_TOOLS,

package/dist/{chunk-GHRHJPJS.js → chunk-NZTLBLHB.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-RKWCXVYG.js";
 import {
   compileAgentDefinition
-} from "./chunk-OAQEWLQJ.js";
+} from "./chunk-X4IGZHOV.js";
 import {
   createRunUsageMeter
 } from "./chunk-OXNDJSAJ.js";
@@ -517,6 +517,174 @@ function reasoningEffortOf(model) {
 }
 __name(reasoningEffortOf, "reasoningEffortOf");
 
+// src/bridge/sdk-adapter-create-options.ts
+import { createRequire } from "module";
+import { TheokitAgentError as TheokitAgentError2 } from "@theokit/sdk/errors";
+var HOOK_GATE_SINCE = {
+  major: 5,
+  minor: 4
+};
+var HookGateUnsupportedError = class extends TheokitAgentError2 {
+  static {
+    __name(this, "HookGateUnsupportedError");
+  }
+  name = "HookGateUnsupportedError";
+  constructor(version) {
+    super(`a hook approval gate was declared, but the installed @theokit/sdk (${version ?? "version unreadable"}) cannot honour it: \`local.hooks\` landed in ${String(HOOK_GATE_SINCE.major)}.${String(HOOK_GATE_SINCE.minor)}.0. Forwarding it anyway would leave every hook spawning unreviewed while the gate reports as installed. Upgrade @theokit/sdk, or remove \`hookApproval\` and keep whatever refusal you have today (usetheokit/theokit#686).`, {
+      code: "hook_gate_unsupported",
+      isRetryable: false
+    });
+  }
+};
+function assertSdkCanGateHooks(version) {
+  const [major, minor] = (version ?? "").split(".").map((n) => Number.parseInt(n, 10));
+  const known = Number.isFinite(major) && Number.isFinite(minor);
+  const supported = known && (major > HOOK_GATE_SINCE.major || major === HOOK_GATE_SINCE.major && minor >= HOOK_GATE_SINCE.minor);
+  if (!supported) throw new HookGateUnsupportedError(version);
+}
+__name(assertSdkCanGateHooks, "assertSdkCanGateHooks");
+function installedSdkVersion() {
+  try {
+    return createRequire(import.meta.url)("@theokit/sdk/package.json").version;
+  } catch {
+    return void 0;
+  }
+}
+__name(installedSdkVersion, "installedSdkVersion");
+var sdkCompatWarningEmitted = false;
+function warnIfSdkCannotReadCompatSources() {
+  if (sdkCompatWarningEmitted) return;
+  let version;
+  try {
+    version = createRequire(import.meta.url)("@theokit/sdk/package.json").version;
+  } catch {
+    return;
+  }
+  const major = Number.parseInt(version?.split(".")[0] ?? "", 10);
+  if (!Number.isFinite(major) || major >= 5) return;
+  sdkCompatWarningEmitted = true;
+  console.warn(`[theokit/agents] \`compatSources\` was declared, but @theokit/sdk@${version} does not know that option and will ignore it \u2014 the foreign configuration root will NOT be read. It landed in 5.0.0. Until this package's floor can name a stable 5.x, override the SDK in your workspace (usetheokit/theokit#634).`);
+}
+__name(warnIfSdkCannotReadCompatSources, "warnIfSdkCannotReadCompatSources");
+function applyLocalSources(compiled, options, applied) {
+  if (compiled.settingSources !== void 0 && compiled.settingSources.length > 0) {
+    options.local = {
+      ...options.local,
+      settingSources: [
+        ...compiled.settingSources
+      ]
+    };
+    applied.push("settingSources");
+  }
+  if (compiled.compatSources !== void 0 && compiled.compatSources.length > 0) {
+    options.local = {
+      ...options.local,
+      compatSources: [
+        ...compiled.compatSources
+      ]
+    };
+    applied.push("compatSources");
+    warnIfSdkCannotReadCompatSources();
+  }
+}
+__name(applyLocalSources, "applyLocalSources");
+function applyHookApproval(compiled, options, applied, sdkVersion) {
+  if (compiled.hookApproval === void 0) return;
+  assertSdkCanGateHooks(sdkVersion ?? installedSdkVersion());
+  options.local = {
+    ...options.local,
+    hooks: compiled.hookApproval
+  };
+  applied.push("hookApproval");
+}
+__name(applyHookApproval, "applyHookApproval");
+function assembleM8CreateOptions(compiled, deps = {}) {
+  const options = {};
+  const applied = [];
+  const base = compiled.systemPrompt;
+  if (compiled.skills) {
+    options.skills = compiled.skills;
+    applied.push("skills");
+  }
+  if (compiled.plugins) {
+    options.plugins = compiled.plugins;
+    applied.push("plugins");
+  }
+  applyLocalSources(compiled, options, applied);
+  applyHookApproval(compiled, options, applied, deps.sdkVersion);
+  if (compiled.context) {
+    options.context = compiled.context;
+    applied.push("context");
+  }
+  if (compiled.projectContext) {
+    options.systemPrompt = compileProjectContext(compiled.projectContext, base);
+    applied.push("projectContext");
+  } else if (base !== void 0) {
+    options.systemPrompt = base;
+  }
+  if (compiled.mcpServers && Object.keys(compiled.mcpServers).length > 0) {
+    options.mcpServers = compiled.mcpServers;
+    applied.push("mcpServers");
+  }
+  if (compiled.memory !== void 0) {
+    if ("enabled" in compiled.memory) {
+      options.memory = compiled.memory;
+    } else {
+      const dropped = Object.keys(compiled.memory);
+      if (dropped.length > 0) {
+        process.stderr.write(`[theokit-agents] @Memory decorator options not yet mapped to the SDK (${dropped.join(", ")}) \u2014 memory enabled with defaults
+`);
+      }
+      options.memory = {
+        enabled: true
+      };
+    }
+    applied.push("memory");
+  }
+  return {
+    options,
+    applied
+  };
+}
+__name(assembleM8CreateOptions, "assembleM8CreateOptions");
+function stopReasonOf(result) {
+  if (result.stoppedByDoomLoop === true) return "no_progress";
+  if (result.stoppedAtIterationLimit === true) return "step_limit";
+  return void 0;
+}
+__name(stopReasonOf, "stopReasonOf");
+function realUsageDone(result, t0, model) {
+  const u = result.usage;
+  const inputTokens = u?.inputTokens ?? 0;
+  const outputTokens = u?.outputTokens ?? 0;
+  const stopReason = stopReasonOf(result);
+  return {
+    type: "done",
+    result: result.result ?? "",
+    // V4-O: forward the SDK reasoning/cache buckets (0 when the provider omits them) so a
+    // consumer keeps full per-turn usage through the loop into DelegationResult (passthrough — ADR D1).
+    usage: {
+      inputTokens,
+      outputTokens,
+      totalTokens: inputTokens + outputTokens,
+      reasoningTokens: u?.reasoningTokens ?? 0,
+      cacheReadTokens: u?.cacheReadTokens ?? 0,
+      cacheWriteTokens: u?.cacheWriteTokens ?? 0
+    },
+    durationMs: Date.now() - t0,
+    cost: result.cost?.amount ?? 0,
+    ...terminalExtras(stopReason, model)
+  };
+}
+__name(realUsageDone, "realUsageDone");
+function terminalExtras(stopReason, model) {
+  const extras = {};
+  if (stopReason !== void 0) extras.stopReason = stopReason;
+  if (model !== void 0) extras.model = model;
+  return extras;
+}
+__name(terminalExtras, "terminalExtras");
+
 // src/bridge/event-translator.ts
 function asString(value, fallback) {
   if (typeof value === "string") return value;
@@ -888,127 +1056,6 @@ function resolveProjection(def, overrides) {
 }
 __name(resolveProjection, "resolveProjection");
 
-// src/bridge/sdk-adapter-create-options.ts
-import { createRequire } from "module";
-var sdkCompatWarningEmitted = false;
-function warnIfSdkCannotReadCompatSources() {
-  if (sdkCompatWarningEmitted) return;
-  let version;
-  try {
-    version = createRequire(import.meta.url)("@theokit/sdk/package.json").version;
-  } catch {
-    return;
-  }
-  const major = Number.parseInt(version?.split(".")[0] ?? "", 10);
-  if (!Number.isFinite(major) || major >= 5) return;
-  sdkCompatWarningEmitted = true;
-  console.warn(`[theokit/agents] \`compatSources\` was declared, but @theokit/sdk@${version} does not know that option and will ignore it \u2014 the foreign configuration root will NOT be read. It landed in 5.0.0. Until this package's floor can name a stable 5.x, override the SDK in your workspace (usetheokit/theokit#634).`);
-}
-__name(warnIfSdkCannotReadCompatSources, "warnIfSdkCannotReadCompatSources");
-function assembleM8CreateOptions(compiled) {
-  const options = {};
-  const applied = [];
-  const base = compiled.systemPrompt;
-  if (compiled.skills) {
-    options.skills = compiled.skills;
-    applied.push("skills");
-  }
-  if (compiled.plugins) {
-    options.plugins = compiled.plugins;
-    applied.push("plugins");
-  }
-  if (compiled.settingSources !== void 0 && compiled.settingSources.length > 0) {
-    options.local = {
-      ...options.local,
-      settingSources: [
-        ...compiled.settingSources
-      ]
-    };
-    applied.push("settingSources");
-  }
-  if (compiled.compatSources !== void 0 && compiled.compatSources.length > 0) {
-    options.local = {
-      ...options.local,
-      compatSources: [
-        ...compiled.compatSources
-      ]
-    };
-    applied.push("compatSources");
-    warnIfSdkCannotReadCompatSources();
-  }
-  if (compiled.context) {
-    options.context = compiled.context;
-    applied.push("context");
-  }
-  if (compiled.projectContext) {
-    options.systemPrompt = compileProjectContext(compiled.projectContext, base);
-    applied.push("projectContext");
-  } else if (base !== void 0) {
-    options.systemPrompt = base;
-  }
-  if (compiled.mcpServers && Object.keys(compiled.mcpServers).length > 0) {
-    options.mcpServers = compiled.mcpServers;
-    applied.push("mcpServers");
-  }
-  if (compiled.memory !== void 0) {
-    if ("enabled" in compiled.memory) {
-      options.memory = compiled.memory;
-    } else {
-      const dropped = Object.keys(compiled.memory);
-      if (dropped.length > 0) {
-        process.stderr.write(`[theokit-agents] @Memory decorator options not yet mapped to the SDK (${dropped.join(", ")}) \u2014 memory enabled with defaults
-`);
-      }
-      options.memory = {
-        enabled: true
-      };
-    }
-    applied.push("memory");
-  }
-  return {
-    options,
-    applied
-  };
-}
-__name(assembleM8CreateOptions, "assembleM8CreateOptions");
-function stopReasonOf(result) {
-  if (result.stoppedByDoomLoop === true) return "no_progress";
-  if (result.stoppedAtIterationLimit === true) return "step_limit";
-  return void 0;
-}
-__name(stopReasonOf, "stopReasonOf");
-function realUsageDone(result, t0, model) {
-  const u = result.usage;
-  const inputTokens = u?.inputTokens ?? 0;
-  const outputTokens = u?.outputTokens ?? 0;
-  const stopReason = stopReasonOf(result);
-  return {
-    type: "done",
-    result: result.result ?? "",
-    // V4-O: forward the SDK reasoning/cache buckets (0 when the provider omits them) so a
-    // consumer keeps full per-turn usage through the loop into DelegationResult (passthrough — ADR D1).
-    usage: {
-      inputTokens,
-      outputTokens,
-      totalTokens: inputTokens + outputTokens,
-      reasoningTokens: u?.reasoningTokens ?? 0,
-      cacheReadTokens: u?.cacheReadTokens ?? 0,
-      cacheWriteTokens: u?.cacheWriteTokens ?? 0
-    },
-    durationMs: Date.now() - t0,
-    cost: result.cost?.amount ?? 0,
-    ...terminalExtras(stopReason, model)
-  };
-}
-__name(realUsageDone, "realUsageDone");
-function terminalExtras(stopReason, model) {
-  const extras = {};
-  if (stopReason !== void 0) extras.stopReason = stopReason;
-  if (model !== void 0) extras.model = model;
-  return extras;
-}
-__name(terminalExtras, "terminalExtras");
-
 // src/bridge/sdk-error.ts
 function sdkErrorEvent(err) {
   const sdkErr = err;
@@ -1235,14 +1282,14 @@ async function* stripToolDialectStream(source) {
 __name(stripToolDialectStream, "stripToolDialectStream");
 
 // src/bridge/turn-retry.ts
-import { TheokitAgentError as TheokitAgentError2 } from "@theokit/sdk/errors";
+import { TheokitAgentError as TheokitAgentError3 } from "@theokit/sdk/errors";
 function asText(value) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 __name(asText, "asText");
 function startFailure(event, outcome) {
   if (outcome.failure !== void 0) return outcome.failure;
-  return new TheokitAgentError2(asText(event.message) ?? "The turn failed before producing any output.", {
+  return new TheokitAgentError3(asText(event.message) ?? "The turn failed before producing any output.", {
     code: asText(event.code) ?? "TURN_START_FAILED",
     isRetryable: event.retryable === true
   });
@@ -1733,8 +1780,8 @@ var noopReflectionStrategy = {
 };
 
 // src/bridge/delegation-types.ts
-import { TheokitAgentError as TheokitAgentError3 } from "@theokit/sdk/errors";
-var DelegationBudgetExceededError = class extends TheokitAgentError3 {
+import { TheokitAgentError as TheokitAgentError4 } from "@theokit/sdk/errors";
+var DelegationBudgetExceededError = class extends TheokitAgentError4 {
   static {
     __name(this, "DelegationBudgetExceededError");
   }
@@ -1751,7 +1798,7 @@ var DelegationBudgetExceededError = class extends TheokitAgentError3 {
   }
 };
 var BudgetExceededError = DelegationBudgetExceededError;
-var DelegationError = class extends TheokitAgentError3 {
+var DelegationError = class extends TheokitAgentError4 {
   static {
     __name(this, "DelegationError");
   }
@@ -2341,8 +2388,8 @@ async function delegate(spec, message, opts = {}) {
 __name(delegate, "delegate");
 
 // src/bridge/delegation-lifecycle.ts
-import { TheokitAgentError as TheokitAgentError4 } from "@theokit/sdk/errors";
-var DelegationTimeoutError = class extends TheokitAgentError4 {
+import { TheokitAgentError as TheokitAgentError5 } from "@theokit/sdk/errors";
+var DelegationTimeoutError = class extends TheokitAgentError5 {
   static {
     __name(this, "DelegationTimeoutError");
   }
@@ -2474,6 +2521,7 @@ export {
   applyPosture,
   buildModelSelection,
   reasoningEffortOf,
+  HookGateUnsupportedError,
   translateSdkEvent,
   createThinkTagExtractor,
   extractThinkTagStream,
@@ -2505,4 +2553,4 @@ export {
   delegateBackground,
   delegateWithScoring
 };
-//# sourceMappingURL=chunk-GHRHJPJS.js.map
+//# sourceMappingURL=chunk-NZTLBLHB.js.map