@theokit/agents 13.0.0-next.8 → 13.0.0

package/dist/{define-agent-WYnUlWaH.d.ts → define-agent-DhwNmdej.d.ts}

@@ -1,157 +1,9 @@
-import { TrustPosture, SettingSource, CustomTool, MemorySettings } from '@theokit/sdk';
+import { CustomTool, MemorySettings, TelemetrySettings } from '@theokit/sdk';
 import { z } from 'zod';
-import { G as Guardrail, S as SkillsSelection, H as HookApprovalGate, C as CompiledAgentOptions } from './agent-compiler-C2jIZ4CZ.js';
+import { G as Guardrail, S as SkillsSelection, H as HookApprovalGate, C as CodePlugin, a as CompiledAgentOptions } from './agent-compiler-B0hb6HCo.js';
 import { R as ReasoningEffort, H as HumanInTheLoopOptions, M as McpServersMap } from './types-C16Wuh9E.js';
 import { H as HookHandlers } from './hook-handlers-Cw2FsnE5.js';
-import { TheokitAgentError } from '@theokit/sdk/errors';
-
-/**
- * M68 — the trust gate for `settingSources`.
- *
- * ## The defect this module closes
- *
- * `settingSources` enables on-disk config discovery. `'user'` reads `~/.theokit/` — the operator's
- * own machine, which no third party controls. `'project'` reads `<cwd>/.theokit/`, **including
- * `hooks.json`, which executes shell**.
- *
- * The previous API took `readonly SettingSource[]`, and its JSDoc justified the risk this way:
- * *"it is opt-in because `.theokit/` is the app's own repo (informed consent)"*. That premise holds
- * for a web app whose `cwd` is its own deploy. It does **not** hold for the class of product this
- * framework addresses — an agent whose `cwd` is a repository the user just cloned. There `.theokit/`
- * is attacker-controlled content, and enabling `'project'` is remote code execution on the first
- * `build()`.
- *
- * Documenting it did not prevent it. The measured consumer (TheoCode) did not trust the API: it
- * gated from the outside, with a `posture.allows` of its own (`chat.ts:386`, comment B-008). It
- * already **had** the right decision and could not pass it through, because the API only accepted
- * strings. The gate existed on its side and evaporated at the boundary.
- *
- * ## The evidence is the SDK's, not one invented here
- *
- * `TrustPosture` is `@theokit/sdk`'s own trust primitive, and `recordWiring`'s doc says *"a posture
- * is the only thing in this package that retains a capability"*. A bespoke type would make two trust
- * grammars coexist and drift apart (ADR 0063).
- */
-/**
- * The framework's capability vocabulary — deliberately a single name (ADR 0065).
- *
- * `allows` is all-or-nothing in the SDK: every declared `K` gets the same boolean. A finer
- * vocabulary (`hooks`, `skills`, `subagents`, `mcp`) would promise the consumer it can gate one
- * without gating the other, and the primitive does not deliver that. An API that suggests a
- * distinction the runtime does not make teaches the wrong thing, and the error only surfaces when
- * somebody depends on the distinction.
- */
-type SettingSourceCapability = 'projectSettings';
-/** Authorization to read config from the working directory. Requires the posture, never a claim. */
-interface ProjectSettingsGrant {
-    /**
-     * Typically the output of `resolveTrustPosture` — which is what gives it `source` (`'env' |
-     * 'store' | 'default'`) and therefore a refusal that says WHERE the decision came from instead of
-     * merely denying.
-     */
-    readonly trustedBy: TrustPosture<SettingSourceCapability>;
-}
-/**
- * Which on-disk config roots the agent may read.
- *
- * The asymmetry is the design: `user` is a boolean because `~/.theokit/` belongs to the operator;
- * `project` requires evidence because `<cwd>/.theokit/` may not. Omitting a root is not enabling it
- * — never "enabling without a gate". The asymmetry is inherited from the SDK itself, whose
- * `TrustPostureInput.envOverride` documents that `false` and `undefined` both mean "the operator did
- * not turn it on", not "turned it off".
- */
-interface SettingSourcesSelection {
-    /** `~/.theokit/` — the operator's machine. No gate: no third party controls it. */
-    readonly user?: boolean;
-    /** `<cwd>/.theokit/` — controlled by whoever wrote the open repository. Requires evidence. */
-    readonly project?: ProjectSettingsGrant;
-    /**
-     * `<cwd>/.claude/` — a FOREIGN configuration dialect, read only once declared
-     * (`usetheokit/theokit-sdk#524`).
-     *
-     * ## Two questions, and which half of this field answers each
-     *
-     * The SDK's docblock separates them, and the separation is the whole point of `compatSources`:
-     * a trust gate answers *"do I trust the code in this directory?"*; importing another product's
-     * configuration answers *"do I want it imported into this one?"*. They come apart in the ordinary
-     * case, because `.claude/` is populated in exactly the repository one trusts most — for a
-     * different tool, by a teammate who never heard of this runtime.
-     *
-     * So the two are answered by two different things here, and it matters which:
-     *
-     * | Question | Answered by |
-     * |---|---|
-     * | do I want the foreign dialect imported? | **declaring this field at all** — omitting is not enabling |
-     * | do I trust this directory's code to run? | the `TrustPosture` inside the grant |
-     *
-     * ## Why the grant is `ProjectSettingsGrant` and not a vocabulary of its own
-     *
-     * Not because the two questions are the same — they are not. Because a separate grant could not
-     * carry the distinction even if it existed: `TrustPosture.allows` is `Record<K, boolean>` and the
-     * SDK documents every value as moving together with the level, so a `'foreignDialects'` capability
-     * beside `'projectSettings'` would promise an operator they can grant one and withhold the other,
-     * and `resolveTrustPosture` would hand back the same boolean for both. That is precisely the
-     * failure ADR 0065 exists to prevent, and inventing the second name would commit it while looking
-     * like rigour.
-     *
-     * The consent half is therefore carried by the declaration, which is a real and sufficient
-     * boundary: an operator who trusts a repository completely still reads no `.claude/` until they
-     * write this field. What the grant adds on top is stricter than the SDK — there, listing a dialect
-     * is enough — and the extra strictness is deliberate: this reads a `hooks.json` that executes
-     * shell out of a directory that usually arrived with the clone.
-     */
-    readonly claudeCode?: ProjectSettingsGrant;
-}
-/**
- * Refusal to read the working directory for lack of trust.
- *
- * Descends from `TheokitAgentError` because typed errors are an unbreakable rule here — and because
- * `isTransientError` only sees this hierarchy. A class extending plain `Error` would be invisible to
- * the predicate that separates recoverable from unrecoverable (the defect M67 fixed in five
- * classes).
- */
-declare class UntrustedSettingSourceError extends TheokitAgentError {
-    /** Where the trust decision came from: `'env' | 'store' | 'default'`. */
-    readonly trustSource: string;
-    /** The refused capability. */
-    readonly capability: SettingSourceCapability;
-    readonly name = "UntrustedSettingSourceError";
-    constructor(message: string, 
-    /** Where the trust decision came from: `'env' | 'store' | 'default'`. */
-    trustSource: string, 
-    /** The refused capability. */
-    capability: SettingSourceCapability);
-}
-/**
- * Translate the declared selection into the `SettingSource`s the SDK accepts, refusing what the
- * posture does not authorize.
- *
- * Refuses rather than ignores (ADR 0064). Ignoring would leave the product running in the belief
- * that the repository's hooks are active — a silent failure mode, on the wrong side. The SDK already
- * picked that side for the same problem: `recordWiring` throws `UngatedCapabilityError` when
- * somebody registers a capability the posture does not gate.
- *
- * @throws {UntrustedSettingSourceError} when `project` is requested and the posture does not grant it.
- */
-declare function resolveSettingSources(selection: SettingSourcesSelection | undefined): readonly SettingSource[];
-/**
- * The foreign configuration dialects this layer forwards, once the posture authorises them.
- *
- * ## Why it is a separate function and the same vocabulary
- *
- * Separate because the SDK takes them on a separate option (`local.compatSources`); the same
- * `ProjectSettingsGrant` because the thing being authorised is identical — reading a `hooks.json`
- * that executes shell out of a directory the operator does not necessarily control.
- *
- * ## What it deliberately does NOT do
- *
- * Validate the source NAME. The SDK DROPS an unrecognised name rather than turning it into
- * `<cwd>/<name>`, so a typo fails closed there; turning that into a throw here would convert a safe
- * default into a crash. This gate decides authorisation, never vocabulary.
- *
- * @throws {UntrustedSettingSourceError} when a source is requested and the posture does not grant it.
- */
-declare function resolveCompatSources(selection: SettingSourcesSelection | undefined): readonly string[];
+import { S as SettingSourcesSelection } from './setting-sources-gate-DFu51i50.js';
 
 /**
  * M2 (theokit-ai-first) — `defineAgent`, the zero-config imperative agent surface.
@@ -257,17 +109,40 @@ interface DefineAgentConfig<TInput extends z.ZodType = z.ZodType> {
      */
     hookApproval?: HookApprovalGate;
     /**
+     * B-054 — `MEMORY.md` here is NOT the Claude Code CLI's auto-memory file. This is the durable
+     * subsystem below: a SQLite+FTS5 store under `.theokit/memory/`, with `memory_search`/`memory_get`
+     * tools and no index cap. The CLI's lives under its own home (`CLAUDE_CONFIG_DIR` or `~/.claude`),
+     * is capped at 200 lines / 25 KB on read, and is swept on `cleanupPeriodDays` — none of which is
+     * implemented here. The SDK READS that directory for interop and does not write to it.
+     *
+     * Same filename, different directory, different semantics. Stated at both ends because a checklist
+     * that greps for `MEMORY.md` finds one and concludes the other exists.
+     *
      * M49 — durable memory (the SDK's `.theokit/memory/` subsystem: `Remember:` capture, MEMORY.md
      * store, auto-injected `<memory>` block, `memory_search`/`memory_get` tools). The shape is the
      * SDK's own `MemorySettings` — the canonical runtime contract. Projected into
      * `Agent.create({ memory })` by `assembleM8CreateOptions`.
      */
     memory?: MemorySettings;
+    /**
+     * B-072 — OpenTelemetry for this agent. Forwarded verbatim to `Agent.create({ telemetry })`,
+     * where the SDK emits spans for `agent.send`, `llm.call`, `tool.call` and `memory.search`.
+     *
+     * `{ enabled: true }` is the minimal opt-in. `@opentelemetry/api` is an OPTIONAL peer of the SDK:
+     * without it the whole thing is a silent no-op, which is the usual reason a run reports no spans.
+     */
+    telemetry?: TelemetrySettings;
     /**
      * Code `Plugin` objects forwarded to `Agent.create({ plugins })` — EXTENSION units (tools,
      * commands, model providers, memory adapters). For lifecycle interception use {@link hooks}.
      */
-    plugins?: readonly unknown[];
+    /**
+     * Code plugins — `{ name, register }`. NOT the Claude Code filesystem-bundle form, which is
+     * declared by living in a `plugins/` directory rather than by being passed here (B-055).
+     *
+     * `readonly unknown[]` is what let the wrong shape through silently.
+     */
+    plugins?: readonly CodePlugin[];
     /**
      * Lifecycle hooks keyed by `HookName` (`pre_tool_call` may veto via `{ block, message }`). Set by
      * the builder's `hooks()`; converted into a code plugin at `build()` and never reaching the SDK
@@ -310,4 +185,4 @@ declare function isAgentDefinition(value: unknown): value is AgentDefinition;
  */
 declare function compileAgentDefinition(def: AgentDefinition): CompiledAgentOptions;
 
-export { type AgentDefinition as A, type DefineAgentConfig as D, type InferAgentInput as I, type ProjectSettingsGrant as P, type SettingSourcesSelection as S, UntrustedSettingSourceError as U, AGENT_BRAND as a, type InferAgentToolNames as b, type SettingSourceCapability as c, compileAgentDefinition as d, resolveSettingSources as e, isAgentDefinition as i, resolveCompatSources as r };
+export { type AgentDefinition as A, type DefineAgentConfig as D, type InferAgentInput as I, AGENT_BRAND as a, type InferAgentToolNames as b, compileAgentDefinition as c, isAgentDefinition as i };

package/dist/{delegation-scoring-BrBQXvIp.d.ts → delegation-scoring-BzJEheml.d.ts}

@@ -1,6 +1,6 @@
 import { PluginsSettings, ProviderRoutingSettings, AgentDefinition, BudgetTracker, CustomTool } from '@theokit/sdk';
 import { RetryOptions } from '@theokit/sdk/retry';
-import { C as CompiledAgentOptions, a as CompiledTool } from './agent-compiler-C2jIZ4CZ.js';
+import { a as CompiledAgentOptions, b as CompiledTool } from './agent-compiler-B0hb6HCo.js';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 import { z } from 'zod';
 import { b as MainLoopMeta } from './types-C16Wuh9E.js';

package/dist/hooks.d.ts

@@ -264,38 +264,6 @@ interface HookRunResult {
  */
 declare function runHookCommand(input: HookRunInput): Promise<HookRunResult>;
 
-/**
- * Hook inheritance for a delegated member — the authority a sub-agent runs under.
- *
- * ## Why this exists
- *
- * `delegate()` already merges the parent's TOOLS and clamps the parent's BUDGET into the member's
- * run. It did not carry the parent's HOOKS, so a member could call a tool the parent's
- * `pre_tool_call` gate had refused. The failure is silent and green: nothing throws, nothing warns,
- * and the member's own suite passes because the member never declared the gate.
- *
- * The only real consumer of this layer found it and closed it with sixteen lines of its own. Sixteen
- * lines standing between a squad and the parent's veto is not a consumer's job — it is authority
- * inheritance, and a consumer who does not know the rule exists has the hole and no way to see it.
- *
- * ## The composition rule: inheritance may only TIGHTEN
- *
- * A Chain of Responsibility over the two handler maps, with one asymmetry that carries the whole
- * security property: for `pre_tool_call`, BOTH gates run and the FIRST refusal wins. A member cannot
- * widen what the parent refused — if it could, the parent's gate would be decorative.
- *
- * A free function rather than a class: there is no state to hold and no second implementation to
- * swap. Wrapping a pure fold in a class would be the ceremony parsimony refuses (`parsimony-ladder`
- * rung 5), and this module's whole surface is one composition.
- *
- * ## Failure posture
- *
- * A gate that throws REFUSES. An inherited gate that opens on its own error is worse than no gate,
- * because it reads as protection — `error-handling.md § 2` forbids that swallow. Observers
- * (`post_tool_call`, session lifecycle) are fire-and-forget by contract, so a broken notifier is
- * isolated and never becomes the reason a turn failed.
- */
-
 /** The code-plugin envelope the SDK dispatches hooks through. */
 interface CodePlugin {
     readonly name: string;

package/dist/hooks.js

@@ -5,7 +5,7 @@ import {
 import {
   hooksPlugin,
   inheritHooks
-} from "./chunk-RKWCXVYG.js";
+} from "./chunk-MJ6FRILJ.js";
 import {
   __name
 } from "./chunk-Z4QWC7IK.js";
@@ -113,6 +113,28 @@ function killGroup(pid) {
 }
 __name(killGroup, "killGroup");
 
+// src/hooks/unwired-events.ts
+var UNWIRED_EVENT_REASONS = Object.freeze({
+  transform_llm_output: Object.freeze({
+    seam: "Guardrail.checkOutput",
+    reason: "returning action 'redact' replaces the model's text and continues"
+  }),
+  pre_user_send: Object.freeze({
+    seam: "createToolHooksPlugin({ processInput })",
+    reason: "contributes text before the model, additively"
+  }),
+  on_session_end: Object.freeze({
+    seam: null,
+    reason: "no seam delivers this: the handler returns void and cannot refuse an ending"
+  })
+});
+function unwiredEventAdvice(event, reasons = UNWIRED_EVENT_REASONS) {
+  const entry = reasons[event];
+  if (entry === void 0) return "the handler does not exist yet.";
+  return entry.seam === null ? `${entry.reason}.` : `use ${entry.seam} instead: ${entry.reason}.`;
+}
+__name(unwiredEventAdvice, "unwiredEventAdvice");
+
 // src/hooks/hook-spec.ts
 var HOOK_EVENTS = [
   "pre_tool_call",
@@ -157,13 +179,14 @@ function parseHookSpecs(input) {
 }
 __name(parseHookSpecs, "parseHookSpecs");
 var IGNORE_WARNING = /* @__PURE__ */ __name(() => void 0, "IGNORE_WARNING");
-var WIRED_EVENTS = /* @__PURE__ */ new Set([
+var WIRED_EVENT_LIST = [
   "pre_tool_call",
   "post_tool_call",
   "transform_tool_result",
   "on_session_start",
   "post_assistant_reply"
-]);
+];
+var WIRED_EVENTS = new Set(WIRED_EVENT_LIST);
 function buildHookHandlers(specs, options) {
   const warn = options.onWarn ?? IGNORE_WARNING;
   if (!options.trusted) {
@@ -183,9 +206,7 @@ function buildHookHandlers(specs, options) {
   if (runnable.length === 0) return {};
   for (const spec of runnable) {
     if (!WIRED_EVENTS.has(spec.event)) {
-      warn(`hook declared on "${spec.event}" will NOT fire: this engine wires ${[
-        ...WIRED_EVENTS
-      ].join(" and ")} only. The event is accepted by the schema and the approval is real \u2014 the handler does not exist yet.`);
+      warn(`hook declared on "${spec.event}" will NOT fire \u2014 ${unwiredEventAdvice(spec.event)}`);
     }
   }
   const handlers = {};
@@ -272,13 +293,7 @@ function buildHookHandlers(specs, options) {
   if (transformHooks.length > 0) {
     handlers.transform_tool_result = buildTransformHandler(transformHooks, options, warn, chainBudgetMs);
   }
-  for (const event of OBSERVATIONAL_EVENTS) {
-    const list = runnable.filter((spec) => spec.event === event);
-    if (list.length === 0) continue;
-    const fire = buildObservationalHandler(event, list, options, warn, chainBudgetMs);
-    if (event === "on_session_start") handlers.on_session_start = fire;
-    else handlers.post_assistant_reply = fire;
-  }
+  assignObservationalHandlers(handlers, OBSERVATIONAL_EVENTS, (event, list) => buildObservationalHandler(event, list, options, warn, chainBudgetMs), runnable);
   return handlers;
 }
 __name(buildHookHandlers, "buildHookHandlers");
@@ -295,8 +310,13 @@ function identityOf(spec) {
 __name(identityOf, "identityOf");
 function matches(spec, toolName) {
   if (spec.matcher === void 0) return true;
+  const trimmed = spec.matcher.trim();
+  if (trimmed === "" || trimmed === "*") return true;
+  if (trimmed.includes(",")) {
+    return trimmed.split(",").map((name) => name.trim()).filter((name) => name !== "").includes(toolName);
+  }
   try {
-    return new RegExp(spec.matcher).test(toolName);
+    return new RegExp(trimmed).test(toolName);
   } catch {
     return false;
   }
@@ -366,6 +386,14 @@ ${fenceHookOutput(feedback)}`;
   };
 }
 __name(buildTransformHandler, "buildTransformHandler");
+function assignObservationalHandlers(handlers, events, make, specs = []) {
+  for (const event of events) {
+    const list = specs.filter((spec) => spec.event === event);
+    if (list.length === 0) continue;
+    handlers[event] = make(event, list);
+  }
+}
+__name(assignObservationalHandlers, "assignObservationalHandlers");
 function buildObservationalHandler(event, list, options, warn, chainBudgetMs) {
   return async () => {
     const started = Date.now();

package/dist/hooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hooks/hook-spec.ts","../src/hooks/hook-fingerprint.ts","../src/hooks/hook-runner.ts","../src/hooks/approval-store.ts"],"mappings":";;;;;;;;;;;;;AAAA,SAASA,mBAAmB;AAG5B,SAASC,yBAAyB;AAClC,SAASC,SAAS;;;ACJlB,SAASC,kBAAkB;AAsC3B,IAAMC,kBAAkB;AASjB,SAASC,gBAAgBC,UAAsB;AACpD,QAAMC,YAAY;IAChBD,SAASE;IACTF,SAASG;IACTH,SAASI,WAAW;IACpBC,OAAOL,SAASM,SAAS;IACzBC,KAAKT,eAAAA;AACP,SAAOU,WAAW,QAAA,EAAUC,OAAOR,WAAW,MAAA,EAAQS,OAAO,KAAA;AAC/D;AARgBX;;;AC/ChB,SAASY,aAAa;AA+Bf,IAAMC,mBAAmB;AAQzB,IAAMC,kBAAkB;AAGxB,IAAMC,0BAA0B;AAgCvC,eAAsBC,eAAeC,OAAmB;AACtD,SAAO,IAAIC,QAAuB,CAACC,aAAAA;AAcjC,UAAMC,QAAQC,MAAMJ,MAAMK,SAAS;MACjCC,KAAKN,MAAMM;MACXC,OAAO;;MAEPC,UAAU;MACVC,KAAKT,MAAMS;MACXC,OAAO;QAAC;QAAQ;QAAQ;;IAC1B,CAAA;AAEA,QAAIC,SAAS;AACb,QAAIC,SAAS;AACb,QAAIC,YAAY;AAChB,QAAIC,WAAW;AACf,QAAIC,UAAU;AAEd,UAAMC,UAAU,wBAACC,SAAiBC,UAAAA;AAChC,UAAID,QAAQE,UAAUvB,kBAAkB;AACtCiB,oBAAY;AACZ,eAAOI;MACT;AACA,YAAMG,OAAOH,UAAUC,MAAMG,SAAS,MAAA;AACtC,UAAID,KAAKD,UAAUvB,iBAAkB,QAAOwB;AAC5CP,kBAAY;AACZ,aAAOO,KAAKE,MAAM,GAAG1B,gBAAAA;IACvB,GATgB;AAWhBO,UAAMQ,OAAOY,GAAG,QAAQ,CAACL,UAAAA;AACvBP,eAASK,QAAQL,QAAQO,KAAAA;IAC3B,CAAA;AACAf,UAAMS,OAAOW,GAAG,QAAQ,CAACL,UAAAA;AACvBN,eAASI,QAAQJ,QAAQM,KAAAA;IAC3B,CAAA;AAEA,UAAMM,SAAS,wBAACC,aAAAA;AACd,UAAIV,QAAS;AACbA,gBAAU;AACVW,mBAAaC,KAAAA;AACbD,mBAAaE,UAAAA;AACb1B,MAAAA,SAAQ;QAAEuB;QAAUd;QAAQC;QAAQC;QAAWC;MAAS,CAAA;IAC1D,GANe;AAQf,UAAMa,QAAQE,WAAW,MAAA;AACvBf,iBAAW;AACXgB,gBAAU3B,MAAM4B,GAAG;IACrB,GAAG/B,MAAMgC,SAAS;AAIlB,QAAIJ,aAA4CC,WAAW,MAAMI,QAAW,CAAA;AAC5E9B,UAAMoB,GAAG,QAAQ,CAACW,SAAAA;AAEhBN,mBAAaC,WAAW,MAAA;AACtBL,eAAOU,IAAAA;MACT,GAAGrC,eAAAA;IACL,CAAA;AACAM,UAAMoB,GAAG,SAAS,CAACW,SAAAA;AACjBV,aAAOU,IAAAA;IACT,CAAA;AACA/B,UAAMoB,GAAG,SAAS,MAAA;AAChBC,aAAO,IAAA;IACT,CAAA;AAYArB,UAAMgC,MAAMZ,GAAG,SAAS,MAAMU,MAAAA;AAC9B,QAAIjC,MAAMmC,UAAUF,OAAW9B,OAAMgC,MAAMC,IAAIpC,MAAMmC,KAAK;QACrDhC,OAAMgC,MAAMC,IAAG;EACtB,CAAA;AACF;AA3FsBrC;AAoGtB,SAAS+B,UAAUC,KAAuB;AACxC,MAAIA,QAAQE,OAAW;AACvB,MAAI;AACFI,YAAQC,KAAK,CAACP,KAAK,SAAA;EACrB,QAAQ;EAER;AACF;AAPSD;;;AF1IF,IAAMS,cAAc;EACzB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAMK,IAAMC,0BAA0B;AAQhC,IAAMC,8BAA8B;AAQpC,IAAMC,iBAAiBC,EAC3BC,OAAO;EACNC,OAAOF,EAAEG,KAAKP,WAAAA;EACdQ,SAASJ,EACNK,OAAM,EACNC,IAAI,CAAA,EAQJC,OAAO,CAACC,UAAU,CAAC,wBAAwBC,KAAKD,KAAAA,GAAQ;IACvDE,SAAS;EACX,CAAA;;EAEFC,SAASX,EAAEK,OAAM,EAAGO,SAAQ;EAC5BC,YAAYb,EAAEc,OAAM,EAAGC,IAAG,EAAGC,SAAQ,EAAGC,QAAQpB,uBAAAA;AAClD,CAAA,EACCqB,OAAM;AAWF,IAAMC,gBAAN,cAA4BC,kBAAAA;EAjGnC,OAiGmCA;;;EACfC,OAAO;EACzB,YAAYX,SAAiB;AAC3B,UAAMA,SAAS;MACbY,MAAM;;MAENC,aAAa;IACf,CAAA;EACF;AACF;AASO,SAASC,eAAeC,OAAc;AAC3C,QAAMC,SAAS1B,EAAE2B,MAAM5B,cAAAA,EAAgB6B,UAAUH,KAAAA;AACjD,MAAI,CAACC,OAAOG,SAAS;AACnB,UAAM,IAAIV,cACR,+BAA+BO,OAAOI,MAAMC,OACzCC,IAAI,CAACC,UAAU,GAAGA,MAAMC,KAAKC,KAAK,GAAA,CAAA,KAASF,MAAMvB,OAAO,EAAE,EAC1DyB,KAAK,IAAA,CAAA,EAAO;EAEnB;AACA,SAAOT,OAAOU;AAChB;AAVgBZ;AAuEhB,IAAMa,iBAAiB,6BAAYC,QAAZ;AAUvB,IAAMC,eAAe,oBAAIC,IAAe;EACtC;EACA;EACA;EACA;EACA;CACD;AAQM,SAASC,kBACdC,OACAC,SAAiC;AAEjC,QAAMC,OAAOD,QAAQE,UAAUR;AAC/B,MAAI,CAACM,QAAQG,SAAS;AACpB,QAAIJ,MAAMK,SAAS,GAAG;AACpBH,WACE,GAAGI,OAAON,MAAMK,MAAM,CAAA,0EAAsE;IAEhG;AACA,WAAO,CAAC;EACV;AAEA,QAAME,gBAAgBN,QAAQO,eAAeC;AAC7C,QAAMC,WAAWV,MAAMW,OAAO,CAACC,SAAAA;AAC7B,UAAMC,WAAWZ,QAAQY,SAASC,IAAIP,cAAcQ,WAAWH,IAAAA,CAAAA,CAAAA;AAC/D,QAAI,CAACC,UAAU;AACbX,WACE,wCAAwCU,KAAKlD,OAAO,QAAQkD,KAAKpD,KAAK,sGACa;IAEvF;AACA,WAAOqD;EACT,CAAA;AACA,MAAIH,SAASL,WAAW,EAAG,QAAO,CAAC;AASnC,aAAWO,QAAQF,UAAU;AAC3B,QAAI,CAACb,aAAaiB,IAAIF,KAAKpD,KAAK,GAAG;AACjC0C,WACE,qBAAqBU,KAAKpD,KAAK,sCAC1B;WAAIqC;QAAcJ,KAAK,OAAA,CAAA,4GAC0B;IAE1D;EACF;AAEA,QAAMuB,WAAyB,CAAC;AAChC,QAAMC,gBACJC,KAAKC,IAAG,GAAIT,SAASpB,IAAI,CAACsB,SAASA,KAAKzC,UAAU,CAAA,IAAKiD;AAMzD,QAAMC,WAAWX,SAASC,OAAO,CAACC,SAASA,KAAKpD,UAAU,eAAA;AAC1D,MAAI6D,SAAShB,SAAS,GAAG;AACvBW,aAASM,gBAAgB,OAAOC,QAAAA;AAC9B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWd,QAAQS,UAAU;AAC3B,YAAII,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxC,gBAAMjD,UAAU;AAGhBiC,kBAAQ0B,SAAS;YAAEC,MAAML,IAAI5C;YAAMkD,QAAQ7D;UAAQ,CAAA;AACnD,iBAAO;YAAE8D,OAAO;YAAM9D;UAAQ;QAChC;AACA,YAAI,CAAC+D,QAAQnB,MAAMW,IAAI5C,IAAI,EAAG;AAC9B,cAAMqD,SAAS,MAAMC,eAAe;UAClCvE,SAASkD,KAAKlD;UACdwE,KAAKjC,QAAQiC;UACbC,WAAWvB,KAAKzC;UAChBiE,OAAOC,KAAKC,UAAU;YAAEV,MAAML,IAAI5C;YAAM4D,MAAMhB,IAAIgB;UAAK,CAAA;UACvD,GAAItC,QAAQuC,QAAQ5C,UAAa;YAAE4C,KAAKvC,QAAQuC;UAAI;QACtD,CAAA;AACA,YAAIR,OAAOS,aAAa,GAAG;AACzB,gBAAMzE,UAAU0E,gBACdV,OAAOW,UAAUX,OAAOY,UAAU,eAAetC,OAAO0B,OAAOS,QAAQ,CAAA,EAAG;AAE5ExC,kBAAQ0B,SAAS;YAAEC,MAAML,IAAI5C;YAAMkD,QAAQ7D;UAAQ,CAAA;AACnD,iBAAO;YAAE8D,OAAO;YAAM9D;UAAQ;QAChC;MACF;AACA,aAAO4B;IACT;EACF;AAEA,QAAMiD,YAAYnC,SAASC,OAAO,CAACC,SAASA,KAAKpD,UAAU,gBAAA;AAC3D,MAAIqF,UAAUxC,SAAS,GAAG;AACxBW,aAAS8B,iBAAiB,OAAOvB,QAAAA;AAC/B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWd,QAAQiC,WAAW;AAC5B,YAAIpB,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCf,eAAK,wEAAA;AACL;QACF;AACA,YAAI,CAAC6B,QAAQnB,MAAMW,IAAI5C,IAAI,EAAG;AAC9B,YAAI;AACF,gBAAMqD,SAAS,MAAMC,eAAe;YAClCvE,SAASkD,KAAKlD;YACdwE,KAAKjC,QAAQiC;YACbC,WAAWvB,KAAKzC;YAChBiE,OAAOC,KAAKC,UAAU;cAAEV,MAAML,IAAI5C;cAAM4D,MAAMhB,IAAIgB;cAAMP,QAAQT,IAAIS;YAAO,CAAA;YAC3E,GAAI/B,QAAQuC,QAAQ5C,UAAa;cAAE4C,KAAKvC,QAAQuC;YAAI;UACtD,CAAA;AACA,cAAIR,OAAOS,aAAa,GAAG;AAEzBvC,iBAAK,cAAcU,KAAKlD,OAAO,YAAY4C,OAAO0B,OAAOS,QAAQ,CAAA,EAAG;UACtE;AACA,cAAIT,OAAOe,UAAW7C,MAAK,cAAcU,KAAKlD,OAAO,wBAAwB;QAC/E,SAAS0B,OAAO;AACdc,eAAK,cAAcU,KAAKlD,OAAO,aAAc0B,MAAgBpB,OAAO,EAAE;QACxE;MACF;IACF;EACF;AAEA,QAAMgF,iBAAiBtC,SAASC,OAAO,CAACC,SAASA,KAAKpD,UAAU,uBAAA;AAChE,MAAIwF,eAAe3C,SAAS,GAAG;AAC7BW,aAASiC,wBAAwBC,sBAC/BF,gBACA/C,SACAC,MACAe,aAAAA;EAEJ;AAEA,aAAWzD,SAAS2F,sBAAsB;AACxC,UAAMC,OAAO1C,SAASC,OAAO,CAACC,SAASA,KAAKpD,UAAUA,KAAAA;AACtD,QAAI4F,KAAK/C,WAAW,EAAG;AACvB,UAAMgD,OAAOC,0BAA0B9F,OAAO4F,MAAMnD,SAASC,MAAMe,aAAAA;AACnE,QAAIzD,UAAU,mBAAoBwD,UAASuC,mBAAmBF;QACzDrC,UAASwC,uBAAuBH;EACvC;AAEA,SAAOrC;AACT;AArIgBjB;AAwIhB,SAASgB,WAAWH,MAAc;AAChC,SAAO;IACLlD,SAASkD,KAAKlD;IACdF,OAAOoD,KAAKpD;IACZ,GAAIoD,KAAK3C,YAAY2B,UAAa;MAAE3B,SAAS2C,KAAK3C;IAAQ;IAC1DkE,WAAWvB,KAAKzC;EAClB;AACF;AAPS4C;AAoBT,SAASgB,QAAQnB,MAAgB6C,UAAgB;AAC/C,MAAI7C,KAAK3C,YAAY2B,OAAW,QAAO;AACvC,MAAI;AAEF,WAAO,IAAI8D,OAAO9C,KAAK3C,OAAO,EAAEF,KAAK0F,QAAAA;EACvC,QAAQ;AACN,WAAO;EACT;AACF;AARS1B;AAsBF,SAASW,gBAAgBiB,QAAc;AAC5C,QAAMC,QAAQC,YAAY,CAAA,EAAGC,SAAS,KAAA;AACtC,QAAMC,OAAO,uBAAuBH,KAAAA;AACpC,QAAMI,QAAQ,wBAAwBJ,KAAAA;AAGtC,QAAMK,UAAUN,OAAOO,WAAWF,OAAOA,MAAME,WAAW,KAAK,MAAA,CAAA;AAC/D,SAAO,GAAGH,IAAAA;EAASE,OAAAA;EAAYD,KAAAA;AACjC;AARgBtB;AAWhB,IAAMS,uBAAuB;EAAC;EAAoB;;AAYlD,SAASD,sBACPF,gBACA/C,SACAC,MACAe,eAAqB;AAErB,MAAIkD,YAAYlE,QAAQmE,sBAAsBhH;AAE9C,SAAO,OAAUiH,SAAY9C,QAAAA;AAC3B,QAAI4C,aAAa,GAAG;AAClBjE,WACE,6JACqE;AAEvE,aAAOmE;IACT;AACAF,iBAAa;AAEb,QAAIG,MAAMD;AACV,UAAM7C,UAAUC,KAAKC,IAAG;AACxB,eAAWd,QAAQoC,gBAAgB;AACjC,UAAIvB,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCf,aAAK,+EAAA;AACL;MACF;AAUA,YAAMqE,UACJ3D,KAAK3C,YAAY2B,UAAa2B,IAAIiD,UAAUnE,WAAW,IACnD;QAACT;UACD2B,IAAIiD,UAAU7D,OAAO,CAAC8D,SAAS1C,QAAQnB,MAAM6D,KAAK9F,IAAI,CAAA;AAE5D,iBAAW8F,QAAQF,SAAS;AAC1B,cAAMvC,SAAS,MAAMC,eAAe;UAClCvE,SAASkD,KAAKlD;UACdwE,KAAKjC,QAAQiC;UACbC,WAAWvB,KAAKzC;UAChBiE,OAAOC,KAAKC,UAAU;YACpBV,MAAM6C,MAAM9F;;;;;YAKZA,MAAM8F,MAAM9F;YACZ4D,MAAMkC,MAAMlC,QAAQ,CAAC;YACrBP,QAAQsC;UACV,CAAA;UACA,GAAIrE,QAAQuC,QAAQ5C,UAAa;YAAE4C,KAAKvC,QAAQuC;UAAI;QACtD,CAAA;AAGA,YAAIR,OAAOS,aAAa,GAAG;AACzBvC,eAAK,uDAAuDU,KAAKlD,OAAO,GAAG;AAC3E;QACF;AACA,cAAMgH,WAAW1C,OAAOW,OAAOgC,KAAI;AACnC,YAAID,SAASrE,SAAS,EACpBiE,OAAM,GAAGhE,OAAOgE,GAAAA,CAAAA;EAAS5B,gBAAgBgC,QAAAA,CAAAA;MAC7C;IACF;AACA,WAAOJ;EACT;AACF;AArESpB;AA6ET,SAASI,0BACP9F,OACA4F,MACAnD,SACAC,MACAe,eAAqB;AAErB,SAAO,YAAA;AACL,UAAMO,UAAUC,KAAKC,IAAG;AACxB,eAAWd,QAAQwC,MAAM;AACvB,UAAI3B,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCf,aAAK,GAAG1C,KAAAA,0DAA+D;AACvE;MACF;AACA,YAAMwE,SAAS,MAAMC,eAAe;QAClCvE,SAASkD,KAAKlD;QACdwE,KAAKjC,QAAQiC;QACbC,WAAWvB,KAAKzC;QAChB,GAAI8B,QAAQuC,QAAQ5C,UAAa;UAAE4C,KAAKvC,QAAQuC;QAAI;MACtD,CAAA;AACA,UAAIR,OAAOS,aAAa,GAAG;AACzBvC,aACE,GAAG1C,KAAAA,kCAAuCoD,KAAKlD,OAAO,YAAY4C,OAAO0B,OAAOS,QAAQ,CAAA,EAAG;MAE/F;IACF;EACF;AACF;AA3BSa;;;AGhdT,SAASsB,oBAAoB;AAC7B,SAASC,MAAMC,eAAe;AAuC9B,SAASC,OAAOC,UAAiD;AAC/D,SAAO,GAAGA,SAASC,KAAK,IAAID,SAASE,WAAW,EAAA;AAClD;AAFSH;AAeT,SAASI,eAAeC,KAAW;AACjC,MAAI;AAEF,WAAOC,aAAaD,GAAAA;EACtB,QAAQ;AACN,WAAOE,QAAQF,GAAAA;EACjB;AACF;AAPSD;AASF,IAAMI,oBAAN,MAAMA;EAxFb,OAwFaA;;;;EAEFC;;;;;;;EAQTC;EAEA;EAEA,YAAYC,SAAmC;AAC7C,SAAKF,OAAOG,KAAKD,QAAQE,MAAM,YAAY,qBAAA;EAC7C;;EAGAC,qBAAqBC,OAAoC;AACvD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO,IAAIE,IACT;SAAI,KAAK,MAAK,EAAGC,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,MAAMA,EAAEE,WAAW,CAAA;EAEtF;;;;;;;EAQAC,UAAUR,OAA0C;AAClD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO;SAAI,KAAK,MAAK,EAAGG,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,OAAO;MAAE,GAAGA;IAAE,EAAA;EACtF;EAEAI,QAAQvB,UAAwBc,OAA8B;AAC5D,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMU,UAAU;SAAI,KAAK,MAAK,EAAGP,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA;AACrE,QAAIS,QAAQC,KAAK,CAACN,MAAMA,EAAEE,gBAAgBK,gBAAgB1B,QAAAA,CAAAA,EAAY,QAAO;AAO7E,UAAM2B,OAAO5B,OAAOC,QAAAA;AACpB,eAAW4B,UAAUJ,SAAS;AAC5B,UAAIzB,OAAO6B,MAAAA,MAAYD,QAAQC,OAAOC,YAAY7B,SAAS6B,QAAS,QAAO;IAC7E;AACA,WAAO;EACT;EAEAC,QAAQ9B,UAAwBc,OAAqB;AACnD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMiB,UAAU,KAAK,MAAK;AAC1BA,YAAQC,IAAI,GAAGjB,GAAAA,KAAYW,gBAAgB1B,QAAAA,CAAAA,IAAa;MACtDqB,aAAaK,gBAAgB1B,QAAAA;MAC7Bc,OAAOC;MACPc,SAAS7B,SAAS6B;MAClB5B,OAAOD,SAASC;MAChB,GAAID,SAASE,YAAY+B,SAAY,CAAC,IAAI;QAAE/B,SAASF,SAASE;MAAQ;MACtEgC,aAAY,oBAAIC,KAAAA,GAAOC,YAAW;IACpC,CAAA;AACA,SAAK,SAASL,OAAAA;EAChB;EAEAM,OAAOrC,UAAwBc,OAAqB;AAClD,UAAMiB,UAAU,KAAK,MAAK;AAC1B,QAAIA,QAAQO,OAAO,GAAGnC,eAAeW,KAAAA,CAAAA,KAAeY,gBAAgB1B,QAAAA,CAAAA,EAAW,GAAG;AAChF,WAAK,SAAS+B,OAAAA;IAChB;EACF;;;;;;;EAQA,QAAK;AACH,UAAM,EAAEQ,OAAOC,MAAK,IAAKC,eACvB,KAAKjC,MACL,CAACkC,QAAAA;AACC,YAAMC,SAAkBC,KAAKC,MAAMH,GAAAA;AACnC,UAAI,CAACI,MAAMC,QAAQJ,MAAAA,EAAS,OAAM,IAAIK,MAAM,uCAAA;AAC5C,aAAOL;IACT,GACA,CAAA,CAAE;AAEJ,SAAKlC,gBAAgB+B;AAErB,SAAK,WAAW,IAAIS,IAAIV,MAAMnB,IAAI,CAACD,MAAM;MAAC,GAAGA,EAAEL,KAAK,KAASK,EAAEE,WAAW;MAAIF;KAAE,CAAA;AAChF,WAAO,KAAK;EACd;EAEA,SAASY,SAAoC;AAC3CmB,oBAAgB,KAAK1C,MAAM,MAAM,GAAGoC,KAAKO,UAAU;SAAIpB,QAAQd,OAAM;OAAK,MAAM,CAAA,CAAA;CAAM;EACxF;AACF;","names":["randomBytes","TheokitAgentError","z","createHash","FIELD_SEPARATOR","hookFingerprint","identity","canonical","command","event","matcher","String","timeoutMs","join","createHash","update","digest","spawn","MAX_OUTPUT_BYTES","DRAIN_BUDGET_MS","CHAIN_BUDGET_MULTIPLIER","runHookCommand","input","Promise","resolve","child","spawn","command","cwd","shell","detached","env","stdio","stdout","stderr","truncated","timedOut","settled","capture","current","chunk","length","next","toString","slice","on","settle","exitCode","clearTimeout","timer","drainTimer","setTimeout","killGroup","pid","timeoutMs","undefined","code","stdin","end","process","kill","HOOK_EVENTS","DEFAULT_HOOK_TIMEOUT_MS","DEFAULT_CONTINUATION_BUDGET","hookSpecSchema","z","object","event","enum","command","string","min","refine","value","test","message","matcher","optional","timeout_ms","number","int","positive","default","strict","HookSpecError","TheokitAgentError","name","code","isRetryable","parseHookSpecs","input","parsed","array","safeParse","success","error","issues","map","issue","path","join","data","IGNORE_WARNING","undefined","WIRED_EVENTS","Set","buildHookHandlers","specs","options","warn","onWarn","trusted","length","String","fingerprintOf","fingerprint","hookFingerprint","runnable","filter","spec","approved","has","identityOf","handlers","chainBudgetMs","Math","max","CHAIN_BUDGET_MULTIPLIER","preHooks","pre_tool_call","ctx","started","Date","now","onVeto","tool","reason","block","matches","result","runHookCommand","cwd","timeoutMs","stdin","JSON","stringify","args","env","exitCode","fenceHookOutput","stdout","stderr","postHooks","post_tool_call","truncated","transformHooks","transform_tool_result","buildTransformHandler","OBSERVATIONAL_EVENTS","list","fire","buildObservationalHandler","on_session_start","post_assistant_reply","toolName","RegExp","output","nonce","randomBytes","toString","open","close","escaped","replaceAll","remaining","continuationBudget","results","out","targets","toolCalls","call","feedback","trim","realpathSync","join","resolve","slotOf","identity","event","matcher","canonicalScope","dir","realpathSync","resolve","HookApprovalStore","path","lastReadError","options","join","home","approvedFingerprints","scope","key","Set","values","filter","r","map","fingerprint","approvals","stateOf","inScope","some","hookFingerprint","slot","record","command","approve","records","set","undefined","approvedAt","Date","toISOString","revoke","delete","value","error","readSecureJson","raw","parsed","JSON","parse","Array","isArray","Error","Map","writeSecureJson","stringify"]}
+{"version":3,"sources":["../src/hooks/hook-spec.ts","../src/hooks/hook-fingerprint.ts","../src/hooks/hook-runner.ts","../src/hooks/unwired-events.ts","../src/hooks/approval-store.ts"],"mappings":";;;;;;;;;;;;;AAAA,SAASA,mBAAmB;AAG5B,SAASC,yBAAyB;AAClC,SAASC,SAAS;;;ACJlB,SAASC,kBAAkB;AAsC3B,IAAMC,kBAAkB;AASjB,SAASC,gBAAgBC,UAAsB;AACpD,QAAMC,YAAY;IAChBD,SAASE;IACTF,SAASG;IACTH,SAASI,WAAW;IACpBC,OAAOL,SAASM,SAAS;IACzBC,KAAKT,eAAAA;AACP,SAAOU,WAAW,QAAA,EAAUC,OAAOR,WAAW,MAAA,EAAQS,OAAO,KAAA;AAC/D;AARgBX;;;AC/ChB,SAASY,aAAa;AA+Bf,IAAMC,mBAAmB;AAQzB,IAAMC,kBAAkB;AAGxB,IAAMC,0BAA0B;AAgCvC,eAAsBC,eAAeC,OAAmB;AACtD,SAAO,IAAIC,QAAuB,CAACC,aAAAA;AAcjC,UAAMC,QAAQC,MAAMJ,MAAMK,SAAS;MACjCC,KAAKN,MAAMM;MACXC,OAAO;;MAEPC,UAAU;MACVC,KAAKT,MAAMS;MACXC,OAAO;QAAC;QAAQ;QAAQ;;IAC1B,CAAA;AAEA,QAAIC,SAAS;AACb,QAAIC,SAAS;AACb,QAAIC,YAAY;AAChB,QAAIC,WAAW;AACf,QAAIC,UAAU;AAEd,UAAMC,UAAU,wBAACC,SAAiBC,UAAAA;AAChC,UAAID,QAAQE,UAAUvB,kBAAkB;AACtCiB,oBAAY;AACZ,eAAOI;MACT;AACA,YAAMG,OAAOH,UAAUC,MAAMG,SAAS,MAAA;AACtC,UAAID,KAAKD,UAAUvB,iBAAkB,QAAOwB;AAC5CP,kBAAY;AACZ,aAAOO,KAAKE,MAAM,GAAG1B,gBAAAA;IACvB,GATgB;AAWhBO,UAAMQ,OAAOY,GAAG,QAAQ,CAACL,UAAAA;AACvBP,eAASK,QAAQL,QAAQO,KAAAA;IAC3B,CAAA;AACAf,UAAMS,OAAOW,GAAG,QAAQ,CAACL,UAAAA;AACvBN,eAASI,QAAQJ,QAAQM,KAAAA;IAC3B,CAAA;AAEA,UAAMM,SAAS,wBAACC,aAAAA;AACd,UAAIV,QAAS;AACbA,gBAAU;AACVW,mBAAaC,KAAAA;AACbD,mBAAaE,UAAAA;AACb1B,MAAAA,SAAQ;QAAEuB;QAAUd;QAAQC;QAAQC;QAAWC;MAAS,CAAA;IAC1D,GANe;AAQf,UAAMa,QAAQE,WAAW,MAAA;AACvBf,iBAAW;AACXgB,gBAAU3B,MAAM4B,GAAG;IACrB,GAAG/B,MAAMgC,SAAS;AAIlB,QAAIJ,aAA4CC,WAAW,MAAMI,QAAW,CAAA;AAC5E9B,UAAMoB,GAAG,QAAQ,CAACW,SAAAA;AAEhBN,mBAAaC,WAAW,MAAA;AACtBL,eAAOU,IAAAA;MACT,GAAGrC,eAAAA;IACL,CAAA;AACAM,UAAMoB,GAAG,SAAS,CAACW,SAAAA;AACjBV,aAAOU,IAAAA;IACT,CAAA;AACA/B,UAAMoB,GAAG,SAAS,MAAA;AAChBC,aAAO,IAAA;IACT,CAAA;AAYArB,UAAMgC,MAAMZ,GAAG,SAAS,MAAMU,MAAAA;AAC9B,QAAIjC,MAAMmC,UAAUF,OAAW9B,OAAMgC,MAAMC,IAAIpC,MAAMmC,KAAK;QACrDhC,OAAMgC,MAAMC,IAAG;EACtB,CAAA;AACF;AA3FsBrC;AAoGtB,SAAS+B,UAAUC,KAAuB;AACxC,MAAIA,QAAQE,OAAW;AACvB,MAAI;AACFI,YAAQC,KAAK,CAACP,KAAK,SAAA;EACrB,QAAQ;EAER;AACF;AAPSD;;;AC1GF,IAAMS,wBACXC,OAAOC,OAAO;EACZC,sBAAsBF,OAAOC,OAAO;IAClCE,MAAM;IACNC,QAAQ;EACV,CAAA;EACAC,eAAeL,OAAOC,OAAO;IAC3BE,MAAM;IACNC,QAAQ;EACV,CAAA;EACAE,gBAAgBN,OAAOC,OAAO;IAC5BE,MAAM;IACNC,QAAQ;EACV,CAAA;AACF,CAAA;AAcK,SAASG,mBACdC,OACAC,UAAoEV,uBAAqB;AAEzF,QAAMW,QAAQD,QAAQD,KAAAA;AACtB,MAAIE,UAAUC,OAAW,QAAO;AAChC,SAAOD,MAAMP,SAAS,OAAO,GAAGO,MAAMN,MAAM,MAAM,OAAOM,MAAMP,IAAI,aAAaO,MAAMN,MAAM;AAC9F;AAPgBG;;;AH3DT,IAAMK,cAAc;EACzB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAMK,IAAMC,0BAA0B;AAQhC,IAAMC,8BAA8B;AAQpC,IAAMC,iBAAiBC,EAC3BC,OAAO;EACNC,OAAOF,EAAEG,KAAKP,WAAAA;EACdQ,SAASJ,EACNK,OAAM,EACNC,IAAI,CAAA,EAQJC,OAAO,CAACC,UAAU,CAAC,wBAAwBC,KAAKD,KAAAA,GAAQ;IACvDE,SAAS;EACX,CAAA;;EAEFC,SAASX,EAAEK,OAAM,EAAGO,SAAQ;EAC5BC,YAAYb,EAAEc,OAAM,EAAGC,IAAG,EAAGC,SAAQ,EAAGC,QAAQpB,uBAAAA;AAClD,CAAA,EACCqB,OAAM;AAWF,IAAMC,gBAAN,cAA4BC,kBAAAA;EAlGnC,OAkGmCA;;;EACfC,OAAO;EACzB,YAAYX,SAAiB;AAC3B,UAAMA,SAAS;MACbY,MAAM;;MAENC,aAAa;IACf,CAAA;EACF;AACF;AASO,SAASC,eAAeC,OAAc;AAC3C,QAAMC,SAAS1B,EAAE2B,MAAM5B,cAAAA,EAAgB6B,UAAUH,KAAAA;AACjD,MAAI,CAACC,OAAOG,SAAS;AACnB,UAAM,IAAIV,cACR,+BAA+BO,OAAOI,MAAMC,OACzCC,IAAI,CAACC,UAAU,GAAGA,MAAMC,KAAKC,KAAK,GAAA,CAAA,KAASF,MAAMvB,OAAO,EAAE,EAC1DyB,KAAK,IAAA,CAAA,EAAO;EAEnB;AACA,SAAOT,OAAOU;AAChB;AAVgBZ;AAuEhB,IAAMa,iBAAiB,6BAAYC,QAAZ;AAUvB,IAAMC,mBAAmB;EACvB;EACA;EACA;EACA;EACA;;AAUF,IAAMC,eAAe,IAAIC,IAAeF,gBAAAA;AAQjC,SAASG,kBACdC,OACAC,SAAiC;AAEjC,QAAMC,OAAOD,QAAQE,UAAUT;AAC/B,MAAI,CAACO,QAAQG,SAAS;AACpB,QAAIJ,MAAMK,SAAS,GAAG;AACpBH,WACE,GAAGI,OAAON,MAAMK,MAAM,CAAA,0EAAsE;IAEhG;AACA,WAAO,CAAC;EACV;AAEA,QAAME,gBAAgBN,QAAQO,eAAeC;AAC7C,QAAMC,WAAWV,MAAMW,OAAO,CAACC,SAAAA;AAC7B,UAAMC,WAAWZ,QAAQY,SAASC,IAAIP,cAAcQ,WAAWH,IAAAA,CAAAA,CAAAA;AAC/D,QAAI,CAACC,UAAU;AACbX,WACE,wCAAwCU,KAAKnD,OAAO,QAAQmD,KAAKrD,KAAK,sGACa;IAEvF;AACA,WAAOsD;EACT,CAAA;AACA,MAAIH,SAASL,WAAW,EAAG,QAAO,CAAC;AASnC,aAAWO,QAAQF,UAAU;AAC3B,QAAI,CAACb,aAAaiB,IAAIF,KAAKrD,KAAK,GAAG;AAGjC2C,WAAK,qBAAqBU,KAAKrD,KAAK,0BAAqByD,mBAAmBJ,KAAKrD,KAAK,CAAA,EAAG;IAC3F;EACF;AAEA,QAAM0D,WAAyB,CAAC;AAChC,QAAMC,gBACJC,KAAKC,IAAG,GAAIV,SAASrB,IAAI,CAACuB,SAASA,KAAK1C,UAAU,CAAA,IAAKmD;AAMzD,QAAMC,WAAWZ,SAASC,OAAO,CAACC,SAASA,KAAKrD,UAAU,eAAA;AAC1D,MAAI+D,SAASjB,SAAS,GAAG;AACvBY,aAASM,gBAAgB,OAAOC,QAAAA;AAC9B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWf,QAAQU,UAAU;AAC3B,YAAII,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxC,gBAAMnD,UAAU;AAGhBkC,kBAAQ2B,SAAS;YAAEC,MAAML,IAAI9C;YAAMoD,QAAQ/D;UAAQ,CAAA;AACnD,iBAAO;YAAEgE,OAAO;YAAMhE;UAAQ;QAChC;AACA,YAAI,CAACiE,QAAQpB,MAAMY,IAAI9C,IAAI,EAAG;AAC9B,cAAMuD,SAAS,MAAMC,eAAe;UAClCzE,SAASmD,KAAKnD;UACd0E,KAAKlC,QAAQkC;UACbC,WAAWxB,KAAK1C;UAChBmE,OAAOC,KAAKC,UAAU;YAAEV,MAAML,IAAI9C;YAAM8D,MAAMhB,IAAIgB;UAAK,CAAA;UACvD,GAAIvC,QAAQwC,QAAQ9C,UAAa;YAAE8C,KAAKxC,QAAQwC;UAAI;QACtD,CAAA;AACA,YAAIR,OAAOS,aAAa,GAAG;AACzB,gBAAM3E,UAAU4E,gBACdV,OAAOW,UAAUX,OAAOY,UAAU,eAAevC,OAAO2B,OAAOS,QAAQ,CAAA,EAAG;AAE5EzC,kBAAQ2B,SAAS;YAAEC,MAAML,IAAI9C;YAAMoD,QAAQ/D;UAAQ,CAAA;AACnD,iBAAO;YAAEgE,OAAO;YAAMhE;UAAQ;QAChC;MACF;AACA,aAAO4B;IACT;EACF;AAEA,QAAMmD,YAAYpC,SAASC,OAAO,CAACC,SAASA,KAAKrD,UAAU,gBAAA;AAC3D,MAAIuF,UAAUzC,SAAS,GAAG;AACxBY,aAAS8B,iBAAiB,OAAOvB,QAAAA;AAC/B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWf,QAAQkC,WAAW;AAC5B,YAAIpB,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxChB,eAAK,wEAAA;AACL;QACF;AACA,YAAI,CAAC8B,QAAQpB,MAAMY,IAAI9C,IAAI,EAAG;AAC9B,YAAI;AACF,gBAAMuD,SAAS,MAAMC,eAAe;YAClCzE,SAASmD,KAAKnD;YACd0E,KAAKlC,QAAQkC;YACbC,WAAWxB,KAAK1C;YAChBmE,OAAOC,KAAKC,UAAU;cAAEV,MAAML,IAAI9C;cAAM8D,MAAMhB,IAAIgB;cAAMP,QAAQT,IAAIS;YAAO,CAAA;YAC3E,GAAIhC,QAAQwC,QAAQ9C,UAAa;cAAE8C,KAAKxC,QAAQwC;YAAI;UACtD,CAAA;AACA,cAAIR,OAAOS,aAAa,GAAG;AAEzBxC,iBAAK,cAAcU,KAAKnD,OAAO,YAAY6C,OAAO2B,OAAOS,QAAQ,CAAA,EAAG;UACtE;AACA,cAAIT,OAAOe,UAAW9C,MAAK,cAAcU,KAAKnD,OAAO,wBAAwB;QAC/E,SAAS0B,OAAO;AACde,eAAK,cAAcU,KAAKnD,OAAO,aAAc0B,MAAgBpB,OAAO,EAAE;QACxE;MACF;IACF;EACF;AAEA,QAAMkF,iBAAiBvC,SAASC,OAAO,CAACC,SAASA,KAAKrD,UAAU,uBAAA;AAChE,MAAI0F,eAAe5C,SAAS,GAAG;AAC7BY,aAASiC,wBAAwBC,sBAC/BF,gBACAhD,SACAC,MACAgB,aAAAA;EAEJ;AAEAkC,8BACEnC,UACAoC,sBACA,CAAC9F,OAAO+F,SAASC,0BAA0BhG,OAAO+F,MAAMrD,SAASC,MAAMgB,aAAAA,GACvER,QAAAA;AAGF,SAAOO;AACT;AAlIgBlB;AAqIhB,SAASgB,WAAWH,MAAc;AAChC,SAAO;IACLnD,SAASmD,KAAKnD;IACdF,OAAOqD,KAAKrD;IACZ,GAAIqD,KAAK5C,YAAY2B,UAAa;MAAE3B,SAAS4C,KAAK5C;IAAQ;IAC1DoE,WAAWxB,KAAK1C;EAClB;AACF;AAPS6C;AAoBT,SAASiB,QAAQpB,MAAgB4C,UAAgB;AAC/C,MAAI5C,KAAK5C,YAAY2B,OAAW,QAAO;AAOvC,QAAM8D,UAAU7C,KAAK5C,QAAQ0F,KAAI;AACjC,MAAID,YAAY,MAAMA,YAAY,IAAK,QAAO;AAI9C,MAAIA,QAAQE,SAAS,GAAA,GAAM;AACzB,WAAOF,QACJG,MAAM,GAAA,EACNvE,IAAI,CAACX,SAASA,KAAKgF,KAAI,CAAA,EACvB/C,OAAO,CAACjC,SAASA,SAAS,EAAA,EAC1BiF,SAASH,QAAAA;EACd;AAEA,MAAI;AAEF,WAAO,IAAIK,OAAOJ,OAAAA,EAAS3F,KAAK0F,QAAAA;EAClC,QAAQ;AAEN,WAAO;EACT;AACF;AA5BSxB;AA6CF,SAAS8B,gBAAgBC,QAAc;AAC5C,QAAMC,QAAQC,YAAY,CAAA,EAAGC,SAAS,KAAA;AACtC,QAAMC,OAAO,uBAAuBH,KAAAA;AACpC,QAAMI,QAAQ,wBAAwBJ,KAAAA;AAGtC,QAAMK,UAAUN,OAAOO,WAAWF,OAAOA,MAAME,WAAW,KAAK,MAAA,CAAA;AAC/D,SAAO,GAAGH,IAAAA;EAASE,OAAAA;EAAYD,KAAAA;AACjC;AARgBN;AAqBhB,IAAMS,uBAAuB;EAC3B;EACA;;AA2CF,SAASC,sBACPC,gBACAC,SACAC,MACAC,eAAqB;AAErB,MAAIC,YAAYH,QAAQI,sBAAsBC;AAE9C,SAAO,OAAUC,SAAYC,QAAAA;AAC3B,QAAIJ,aAAa,GAAG;AAClBF,WACE,6JACqE;AAEvE,aAAOK;IACT;AACAH,iBAAa;AAEb,QAAIK,MAAMF;AACV,UAAMG,UAAUC,KAAKC,IAAG;AACxB,eAAWC,QAAQb,gBAAgB;AACjC,UAAIW,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCD,aAAK,+EAAA;AACL;MACF;AAUA,YAAMY,UACJD,KAAKE,YAAYC,UAAaR,IAAIS,UAAUC,WAAW,IACnD;QAACF;UACDR,IAAIS,UAAUE,OAAO,CAACC,SAASC,QAAQR,MAAMO,KAAKE,IAAI,CAAA;AAE5D,iBAAWF,QAAQN,SAAS;AAC1B,cAAMS,SAAS,MAAMC,eAAe;UAClCC,SAASZ,KAAKY;UACdC,KAAKzB,QAAQyB;UACbC,WAAWd,KAAKe;UAChBC,OAAOC,KAAKC,UAAU;YACpBC,MAAMZ,MAAME;;;;;YAKZA,MAAMF,MAAME;YACZW,MAAMb,MAAMa,QAAQ,CAAC;YACrBV,QAAQd;UACV,CAAA;UACA,GAAIR,QAAQiC,QAAQlB,UAAa;YAAEkB,KAAKjC,QAAQiC;UAAI;QACtD,CAAA;AAGA,YAAIX,OAAOY,aAAa,GAAG;AACzBjC,eAAK,uDAAuDW,KAAKY,OAAO,GAAG;AAC3E;QACF;AACA,cAAMW,WAAWb,OAAOc,OAAOC,KAAI;AACnC,YAAIF,SAASlB,SAAS,EACpBT,OAAM,GAAG8B,OAAO9B,GAAAA,CAAAA;EAASpB,gBAAgB+C,QAAAA,CAAAA;MAC7C;IACF;AACA,WAAO3B;EACT;AACF;AArESV;AAyFF,SAASyC,4BACdC,UACAC,QACAC,MACAC,QAA6B,CAAA,GAAE;AAE/B,aAAWC,SAASH,QAAQ;AAC1B,UAAMI,OAAOF,MAAMzB,OAAO,CAACN,SAASA,KAAKgC,UAAUA,KAAAA;AACnD,QAAIC,KAAK5B,WAAW,EAAG;AAGvBuB,aAASI,KAAAA,IAASF,KAAKE,OAAOC,IAAAA;EAChC;AACF;AAbgBN;AAehB,SAASO,0BACPF,OACAC,MACA7C,SACAC,MACAC,eAAqB;AAErB,SAAO,YAAA;AACL,UAAMO,UAAUC,KAAKC,IAAG;AACxB,eAAWC,QAAQiC,MAAM;AACvB,UAAInC,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCD,aAAK,GAAG2C,KAAAA,0DAA+D;AACvE;MACF;AACA,YAAMtB,SAAS,MAAMC,eAAe;QAClCC,SAASZ,KAAKY;QACdC,KAAKzB,QAAQyB;QACbC,WAAWd,KAAKe;QAChB,GAAI3B,QAAQiC,QAAQlB,UAAa;UAAEkB,KAAKjC,QAAQiC;QAAI;MACtD,CAAA;AACA,UAAIX,OAAOY,aAAa,GAAG;AACzBjC,aACE,GAAG2C,KAAAA,kCAAuChC,KAAKY,OAAO,YAAYc,OAAOhB,OAAOY,QAAQ,CAAA,EAAG;MAE/F;IACF;EACF;AACF;AA3BSY;;;AIpjBT,SAASC,oBAAoB;AAC7B,SAASC,MAAMC,eAAe;AAuC9B,SAASC,OAAOC,UAAiD;AAC/D,SAAO,GAAGA,SAASC,KAAK,IAAID,SAASE,WAAW,EAAA;AAClD;AAFSH;AAeT,SAASI,eAAeC,KAAW;AACjC,MAAI;AAEF,WAAOC,aAAaD,GAAAA;EACtB,QAAQ;AACN,WAAOE,QAAQF,GAAAA;EACjB;AACF;AAPSD;AASF,IAAMI,oBAAN,MAAMA;EAxFb,OAwFaA;;;;EAEFC;;;;;;;EAQTC;EAEA;EAEA,YAAYC,SAAmC;AAC7C,SAAKF,OAAOG,KAAKD,QAAQE,MAAM,YAAY,qBAAA;EAC7C;;EAGAC,qBAAqBC,OAAoC;AACvD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO,IAAIE,IACT;SAAI,KAAK,MAAK,EAAGC,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,MAAMA,EAAEE,WAAW,CAAA;EAEtF;;;;;;;EAQAC,UAAUR,OAA0C;AAClD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO;SAAI,KAAK,MAAK,EAAGG,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,OAAO;MAAE,GAAGA;IAAE,EAAA;EACtF;EAEAI,QAAQvB,UAAwBc,OAA8B;AAC5D,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMU,UAAU;SAAI,KAAK,MAAK,EAAGP,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA;AACrE,QAAIS,QAAQC,KAAK,CAACN,MAAMA,EAAEE,gBAAgBK,gBAAgB1B,QAAAA,CAAAA,EAAY,QAAO;AAO7E,UAAM2B,OAAO5B,OAAOC,QAAAA;AACpB,eAAW4B,UAAUJ,SAAS;AAC5B,UAAIzB,OAAO6B,MAAAA,MAAYD,QAAQC,OAAOC,YAAY7B,SAAS6B,QAAS,QAAO;IAC7E;AACA,WAAO;EACT;EAEAC,QAAQ9B,UAAwBc,OAAqB;AACnD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMiB,UAAU,KAAK,MAAK;AAC1BA,YAAQC,IAAI,GAAGjB,GAAAA,KAAYW,gBAAgB1B,QAAAA,CAAAA,IAAa;MACtDqB,aAAaK,gBAAgB1B,QAAAA;MAC7Bc,OAAOC;MACPc,SAAS7B,SAAS6B;MAClB5B,OAAOD,SAASC;MAChB,GAAID,SAASE,YAAY+B,SAAY,CAAC,IAAI;QAAE/B,SAASF,SAASE;MAAQ;MACtEgC,aAAY,oBAAIC,KAAAA,GAAOC,YAAW;IACpC,CAAA;AACA,SAAK,SAASL,OAAAA;EAChB;EAEAM,OAAOrC,UAAwBc,OAAqB;AAClD,UAAMiB,UAAU,KAAK,MAAK;AAC1B,QAAIA,QAAQO,OAAO,GAAGnC,eAAeW,KAAAA,CAAAA,KAAeY,gBAAgB1B,QAAAA,CAAAA,EAAW,GAAG;AAChF,WAAK,SAAS+B,OAAAA;IAChB;EACF;;;;;;;EAQA,QAAK;AACH,UAAM,EAAEQ,OAAOC,MAAK,IAAKC,eACvB,KAAKjC,MACL,CAACkC,QAAAA;AACC,YAAMC,SAAkBC,KAAKC,MAAMH,GAAAA;AACnC,UAAI,CAACI,MAAMC,QAAQJ,MAAAA,EAAS,OAAM,IAAIK,MAAM,uCAAA;AAC5C,aAAOL;IACT,GACA,CAAA,CAAE;AAEJ,SAAKlC,gBAAgB+B;AAErB,SAAK,WAAW,IAAIS,IAAIV,MAAMnB,IAAI,CAACD,MAAM;MAAC,GAAGA,EAAEL,KAAK,KAASK,EAAEE,WAAW;MAAIF;KAAE,CAAA;AAChF,WAAO,KAAK;EACd;EAEA,SAASY,SAAoC;AAC3CmB,oBAAgB,KAAK1C,MAAM,MAAM,GAAGoC,KAAKO,UAAU;SAAIpB,QAAQd,OAAM;OAAK,MAAM,CAAA,CAAA;CAAM;EACxF;AACF;","names":["randomBytes","TheokitAgentError","z","createHash","FIELD_SEPARATOR","hookFingerprint","identity","canonical","command","event","matcher","String","timeoutMs","join","createHash","update","digest","spawn","MAX_OUTPUT_BYTES","DRAIN_BUDGET_MS","CHAIN_BUDGET_MULTIPLIER","runHookCommand","input","Promise","resolve","child","spawn","command","cwd","shell","detached","env","stdio","stdout","stderr","truncated","timedOut","settled","capture","current","chunk","length","next","toString","slice","on","settle","exitCode","clearTimeout","timer","drainTimer","setTimeout","killGroup","pid","timeoutMs","undefined","code","stdin","end","process","kill","UNWIRED_EVENT_REASONS","Object","freeze","transform_llm_output","seam","reason","pre_user_send","on_session_end","unwiredEventAdvice","event","reasons","entry","undefined","HOOK_EVENTS","DEFAULT_HOOK_TIMEOUT_MS","DEFAULT_CONTINUATION_BUDGET","hookSpecSchema","z","object","event","enum","command","string","min","refine","value","test","message","matcher","optional","timeout_ms","number","int","positive","default","strict","HookSpecError","TheokitAgentError","name","code","isRetryable","parseHookSpecs","input","parsed","array","safeParse","success","error","issues","map","issue","path","join","data","IGNORE_WARNING","undefined","WIRED_EVENT_LIST","WIRED_EVENTS","Set","buildHookHandlers","specs","options","warn","onWarn","trusted","length","String","fingerprintOf","fingerprint","hookFingerprint","runnable","filter","spec","approved","has","identityOf","unwiredEventAdvice","handlers","chainBudgetMs","Math","max","CHAIN_BUDGET_MULTIPLIER","preHooks","pre_tool_call","ctx","started","Date","now","onVeto","tool","reason","block","matches","result","runHookCommand","cwd","timeoutMs","stdin","JSON","stringify","args","env","exitCode","fenceHookOutput","stdout","stderr","postHooks","post_tool_call","truncated","transformHooks","transform_tool_result","buildTransformHandler","assignObservationalHandlers","OBSERVATIONAL_EVENTS","list","buildObservationalHandler","toolName","trimmed","trim","includes","split","RegExp","fenceHookOutput","output","nonce","randomBytes","toString","open","close","escaped","replaceAll","OBSERVATIONAL_EVENTS","buildTransformHandler","transformHooks","options","warn","chainBudgetMs","remaining","continuationBudget","DEFAULT_CONTINUATION_BUDGET","results","ctx","out","started","Date","now","spec","targets","matcher","undefined","toolCalls","length","filter","call","matches","name","result","runHookCommand","command","cwd","timeoutMs","timeout_ms","stdin","JSON","stringify","tool","args","env","exitCode","feedback","stdout","trim","String","assignObservationalHandlers","handlers","events","make","specs","event","list","buildObservationalHandler","realpathSync","join","resolve","slotOf","identity","event","matcher","canonicalScope","dir","realpathSync","resolve","HookApprovalStore","path","lastReadError","options","join","home","approvedFingerprints","scope","key","Set","values","filter","r","map","fingerprint","approvals","stateOf","inScope","some","hookFingerprint","slot","record","command","approve","records","set","undefined","approvedAt","Date","toISOString","revoke","delete","value","error","readSecureJson","raw","parsed","JSON","parse","Array","isArray","Error","Map","writeSecureJson","stringify"]}