@theokit/agents 13.0.0-next.9 → 13.0.0

package/dist/{delegation-scoring-MbnqL68u.d.ts → delegation-scoring-BzJEheml.d.ts}

@@ -1,6 +1,6 @@
 import { PluginsSettings, ProviderRoutingSettings, AgentDefinition, BudgetTracker, CustomTool } from '@theokit/sdk';
 import { RetryOptions } from '@theokit/sdk/retry';
-import { C as CompiledAgentOptions, b as CompiledTool } from './agent-compiler-DZorqtK2.js';
+import { a as CompiledAgentOptions, b as CompiledTool } from './agent-compiler-B0hb6HCo.js';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 import { z } from 'zod';
 import { b as MainLoopMeta } from './types-C16Wuh9E.js';

package/dist/hooks.d.ts

@@ -264,38 +264,6 @@ interface HookRunResult {
  */
 declare function runHookCommand(input: HookRunInput): Promise<HookRunResult>;
 
-/**
- * Hook inheritance for a delegated member — the authority a sub-agent runs under.
- *
- * ## Why this exists
- *
- * `delegate()` already merges the parent's TOOLS and clamps the parent's BUDGET into the member's
- * run. It did not carry the parent's HOOKS, so a member could call a tool the parent's
- * `pre_tool_call` gate had refused. The failure is silent and green: nothing throws, nothing warns,
- * and the member's own suite passes because the member never declared the gate.
- *
- * The only real consumer of this layer found it and closed it with sixteen lines of its own. Sixteen
- * lines standing between a squad and the parent's veto is not a consumer's job — it is authority
- * inheritance, and a consumer who does not know the rule exists has the hole and no way to see it.
- *
- * ## The composition rule: inheritance may only TIGHTEN
- *
- * A Chain of Responsibility over the two handler maps, with one asymmetry that carries the whole
- * security property: for `pre_tool_call`, BOTH gates run and the FIRST refusal wins. A member cannot
- * widen what the parent refused — if it could, the parent's gate would be decorative.
- *
- * A free function rather than a class: there is no state to hold and no second implementation to
- * swap. Wrapping a pure fold in a class would be the ceremony parsimony refuses (`parsimony-ladder`
- * rung 5), and this module's whole surface is one composition.
- *
- * ## Failure posture
- *
- * A gate that throws REFUSES. An inherited gate that opens on its own error is worse than no gate,
- * because it reads as protection — `error-handling.md § 2` forbids that swallow. Observers
- * (`post_tool_call`, session lifecycle) are fire-and-forget by contract, so a broken notifier is
- * isolated and never becomes the reason a turn failed.
- */
-
 /** The code-plugin envelope the SDK dispatches hooks through. */
 interface CodePlugin {
     readonly name: string;

package/dist/hooks.js

@@ -5,7 +5,7 @@ import {
 import {
   hooksPlugin,
   inheritHooks
-} from "./chunk-RKWCXVYG.js";
+} from "./chunk-MJ6FRILJ.js";
 import {
   __name
 } from "./chunk-Z4QWC7IK.js";
@@ -113,6 +113,28 @@ function killGroup(pid) {
 }
 __name(killGroup, "killGroup");
 
+// src/hooks/unwired-events.ts
+var UNWIRED_EVENT_REASONS = Object.freeze({
+  transform_llm_output: Object.freeze({
+    seam: "Guardrail.checkOutput",
+    reason: "returning action 'redact' replaces the model's text and continues"
+  }),
+  pre_user_send: Object.freeze({
+    seam: "createToolHooksPlugin({ processInput })",
+    reason: "contributes text before the model, additively"
+  }),
+  on_session_end: Object.freeze({
+    seam: null,
+    reason: "no seam delivers this: the handler returns void and cannot refuse an ending"
+  })
+});
+function unwiredEventAdvice(event, reasons = UNWIRED_EVENT_REASONS) {
+  const entry = reasons[event];
+  if (entry === void 0) return "the handler does not exist yet.";
+  return entry.seam === null ? `${entry.reason}.` : `use ${entry.seam} instead: ${entry.reason}.`;
+}
+__name(unwiredEventAdvice, "unwiredEventAdvice");
+
 // src/hooks/hook-spec.ts
 var HOOK_EVENTS = [
   "pre_tool_call",
@@ -157,13 +179,14 @@ function parseHookSpecs(input) {
 }
 __name(parseHookSpecs, "parseHookSpecs");
 var IGNORE_WARNING = /* @__PURE__ */ __name(() => void 0, "IGNORE_WARNING");
-var WIRED_EVENTS = /* @__PURE__ */ new Set([
+var WIRED_EVENT_LIST = [
   "pre_tool_call",
   "post_tool_call",
   "transform_tool_result",
   "on_session_start",
   "post_assistant_reply"
-]);
+];
+var WIRED_EVENTS = new Set(WIRED_EVENT_LIST);
 function buildHookHandlers(specs, options) {
   const warn = options.onWarn ?? IGNORE_WARNING;
   if (!options.trusted) {
@@ -183,9 +206,7 @@ function buildHookHandlers(specs, options) {
   if (runnable.length === 0) return {};
   for (const spec of runnable) {
     if (!WIRED_EVENTS.has(spec.event)) {
-      warn(`hook declared on "${spec.event}" will NOT fire: this engine wires ${[
-        ...WIRED_EVENTS
-      ].join(" and ")} only. The event is accepted by the schema and the approval is real \u2014 the handler does not exist yet.`);
+      warn(`hook declared on "${spec.event}" will NOT fire \u2014 ${unwiredEventAdvice(spec.event)}`);
     }
   }
   const handlers = {};
@@ -272,13 +293,7 @@ function buildHookHandlers(specs, options) {
   if (transformHooks.length > 0) {
     handlers.transform_tool_result = buildTransformHandler(transformHooks, options, warn, chainBudgetMs);
   }
-  for (const event of OBSERVATIONAL_EVENTS) {
-    const list = runnable.filter((spec) => spec.event === event);
-    if (list.length === 0) continue;
-    const fire = buildObservationalHandler(event, list, options, warn, chainBudgetMs);
-    if (event === "on_session_start") handlers.on_session_start = fire;
-    else handlers.post_assistant_reply = fire;
-  }
+  assignObservationalHandlers(handlers, OBSERVATIONAL_EVENTS, (event, list) => buildObservationalHandler(event, list, options, warn, chainBudgetMs), runnable);
   return handlers;
 }
 __name(buildHookHandlers, "buildHookHandlers");
@@ -295,8 +310,13 @@ function identityOf(spec) {
 __name(identityOf, "identityOf");
 function matches(spec, toolName) {
   if (spec.matcher === void 0) return true;
+  const trimmed = spec.matcher.trim();
+  if (trimmed === "" || trimmed === "*") return true;
+  if (trimmed.includes(",")) {
+    return trimmed.split(",").map((name) => name.trim()).filter((name) => name !== "").includes(toolName);
+  }
   try {
-    return new RegExp(spec.matcher).test(toolName);
+    return new RegExp(trimmed).test(toolName);
   } catch {
     return false;
   }
@@ -366,6 +386,14 @@ ${fenceHookOutput(feedback)}`;
   };
 }
 __name(buildTransformHandler, "buildTransformHandler");
+function assignObservationalHandlers(handlers, events, make, specs = []) {
+  for (const event of events) {
+    const list = specs.filter((spec) => spec.event === event);
+    if (list.length === 0) continue;
+    handlers[event] = make(event, list);
+  }
+}
+__name(assignObservationalHandlers, "assignObservationalHandlers");
 function buildObservationalHandler(event, list, options, warn, chainBudgetMs) {
   return async () => {
     const started = Date.now();

package/dist/hooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hooks/hook-spec.ts","../src/hooks/hook-fingerprint.ts","../src/hooks/hook-runner.ts","../src/hooks/approval-store.ts"],"mappings":";;;;;;;;;;;;;AAAA,SAASA,mBAAmB;AAG5B,SAASC,yBAAyB;AAClC,SAASC,SAAS;;;ACJlB,SAASC,kBAAkB;AAsC3B,IAAMC,kBAAkB;AASjB,SAASC,gBAAgBC,UAAsB;AACpD,QAAMC,YAAY;IAChBD,SAASE;IACTF,SAASG;IACTH,SAASI,WAAW;IACpBC,OAAOL,SAASM,SAAS;IACzBC,KAAKT,eAAAA;AACP,SAAOU,WAAW,QAAA,EAAUC,OAAOR,WAAW,MAAA,EAAQS,OAAO,KAAA;AAC/D;AARgBX;;;AC/ChB,SAASY,aAAa;AA+Bf,IAAMC,mBAAmB;AAQzB,IAAMC,kBAAkB;AAGxB,IAAMC,0BAA0B;AAgCvC,eAAsBC,eAAeC,OAAmB;AACtD,SAAO,IAAIC,QAAuB,CAACC,aAAAA;AAcjC,UAAMC,QAAQC,MAAMJ,MAAMK,SAAS;MACjCC,KAAKN,MAAMM;MACXC,OAAO;;MAEPC,UAAU;MACVC,KAAKT,MAAMS;MACXC,OAAO;QAAC;QAAQ;QAAQ;;IAC1B,CAAA;AAEA,QAAIC,SAAS;AACb,QAAIC,SAAS;AACb,QAAIC,YAAY;AAChB,QAAIC,WAAW;AACf,QAAIC,UAAU;AAEd,UAAMC,UAAU,wBAACC,SAAiBC,UAAAA;AAChC,UAAID,QAAQE,UAAUvB,kBAAkB;AACtCiB,oBAAY;AACZ,eAAOI;MACT;AACA,YAAMG,OAAOH,UAAUC,MAAMG,SAAS,MAAA;AACtC,UAAID,KAAKD,UAAUvB,iBAAkB,QAAOwB;AAC5CP,kBAAY;AACZ,aAAOO,KAAKE,MAAM,GAAG1B,gBAAAA;IACvB,GATgB;AAWhBO,UAAMQ,OAAOY,GAAG,QAAQ,CAACL,UAAAA;AACvBP,eAASK,QAAQL,QAAQO,KAAAA;IAC3B,CAAA;AACAf,UAAMS,OAAOW,GAAG,QAAQ,CAACL,UAAAA;AACvBN,eAASI,QAAQJ,QAAQM,KAAAA;IAC3B,CAAA;AAEA,UAAMM,SAAS,wBAACC,aAAAA;AACd,UAAIV,QAAS;AACbA,gBAAU;AACVW,mBAAaC,KAAAA;AACbD,mBAAaE,UAAAA;AACb1B,MAAAA,SAAQ;QAAEuB;QAAUd;QAAQC;QAAQC;QAAWC;MAAS,CAAA;IAC1D,GANe;AAQf,UAAMa,QAAQE,WAAW,MAAA;AACvBf,iBAAW;AACXgB,gBAAU3B,MAAM4B,GAAG;IACrB,GAAG/B,MAAMgC,SAAS;AAIlB,QAAIJ,aAA4CC,WAAW,MAAMI,QAAW,CAAA;AAC5E9B,UAAMoB,GAAG,QAAQ,CAACW,SAAAA;AAEhBN,mBAAaC,WAAW,MAAA;AACtBL,eAAOU,IAAAA;MACT,GAAGrC,eAAAA;IACL,CAAA;AACAM,UAAMoB,GAAG,SAAS,CAACW,SAAAA;AACjBV,aAAOU,IAAAA;IACT,CAAA;AACA/B,UAAMoB,GAAG,SAAS,MAAA;AAChBC,aAAO,IAAA;IACT,CAAA;AAYArB,UAAMgC,MAAMZ,GAAG,SAAS,MAAMU,MAAAA;AAC9B,QAAIjC,MAAMmC,UAAUF,OAAW9B,OAAMgC,MAAMC,IAAIpC,MAAMmC,KAAK;QACrDhC,OAAMgC,MAAMC,IAAG;EACtB,CAAA;AACF;AA3FsBrC;AAoGtB,SAAS+B,UAAUC,KAAuB;AACxC,MAAIA,QAAQE,OAAW;AACvB,MAAI;AACFI,YAAQC,KAAK,CAACP,KAAK,SAAA;EACrB,QAAQ;EAER;AACF;AAPSD;;;AF1IF,IAAMS,cAAc;EACzB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAMK,IAAMC,0BAA0B;AAQhC,IAAMC,8BAA8B;AAQpC,IAAMC,iBAAiBC,EAC3BC,OAAO;EACNC,OAAOF,EAAEG,KAAKP,WAAAA;EACdQ,SAASJ,EACNK,OAAM,EACNC,IAAI,CAAA,EAQJC,OAAO,CAACC,UAAU,CAAC,wBAAwBC,KAAKD,KAAAA,GAAQ;IACvDE,SAAS;EACX,CAAA;;EAEFC,SAASX,EAAEK,OAAM,EAAGO,SAAQ;EAC5BC,YAAYb,EAAEc,OAAM,EAAGC,IAAG,EAAGC,SAAQ,EAAGC,QAAQpB,uBAAAA;AAClD,CAAA,EACCqB,OAAM;AAWF,IAAMC,gBAAN,cAA4BC,kBAAAA;EAjGnC,OAiGmCA;;;EACfC,OAAO;EACzB,YAAYX,SAAiB;AAC3B,UAAMA,SAAS;MACbY,MAAM;;MAENC,aAAa;IACf,CAAA;EACF;AACF;AASO,SAASC,eAAeC,OAAc;AAC3C,QAAMC,SAAS1B,EAAE2B,MAAM5B,cAAAA,EAAgB6B,UAAUH,KAAAA;AACjD,MAAI,CAACC,OAAOG,SAAS;AACnB,UAAM,IAAIV,cACR,+BAA+BO,OAAOI,MAAMC,OACzCC,IAAI,CAACC,UAAU,GAAGA,MAAMC,KAAKC,KAAK,GAAA,CAAA,KAASF,MAAMvB,OAAO,EAAE,EAC1DyB,KAAK,IAAA,CAAA,EAAO;EAEnB;AACA,SAAOT,OAAOU;AAChB;AAVgBZ;AAuEhB,IAAMa,iBAAiB,6BAAYC,QAAZ;AAUvB,IAAMC,eAAe,oBAAIC,IAAe;EACtC;EACA;EACA;EACA;EACA;CACD;AAQM,SAASC,kBACdC,OACAC,SAAiC;AAEjC,QAAMC,OAAOD,QAAQE,UAAUR;AAC/B,MAAI,CAACM,QAAQG,SAAS;AACpB,QAAIJ,MAAMK,SAAS,GAAG;AACpBH,WACE,GAAGI,OAAON,MAAMK,MAAM,CAAA,0EAAsE;IAEhG;AACA,WAAO,CAAC;EACV;AAEA,QAAME,gBAAgBN,QAAQO,eAAeC;AAC7C,QAAMC,WAAWV,MAAMW,OAAO,CAACC,SAAAA;AAC7B,UAAMC,WAAWZ,QAAQY,SAASC,IAAIP,cAAcQ,WAAWH,IAAAA,CAAAA,CAAAA;AAC/D,QAAI,CAACC,UAAU;AACbX,WACE,wCAAwCU,KAAKlD,OAAO,QAAQkD,KAAKpD,KAAK,sGACa;IAEvF;AACA,WAAOqD;EACT,CAAA;AACA,MAAIH,SAASL,WAAW,EAAG,QAAO,CAAC;AASnC,aAAWO,QAAQF,UAAU;AAC3B,QAAI,CAACb,aAAaiB,IAAIF,KAAKpD,KAAK,GAAG;AACjC0C,WACE,qBAAqBU,KAAKpD,KAAK,sCAC1B;WAAIqC;QAAcJ,KAAK,OAAA,CAAA,4GAC0B;IAE1D;EACF;AAEA,QAAMuB,WAAyB,CAAC;AAChC,QAAMC,gBACJC,KAAKC,IAAG,GAAIT,SAASpB,IAAI,CAACsB,SAASA,KAAKzC,UAAU,CAAA,IAAKiD;AAMzD,QAAMC,WAAWX,SAASC,OAAO,CAACC,SAASA,KAAKpD,UAAU,eAAA;AAC1D,MAAI6D,SAAShB,SAAS,GAAG;AACvBW,aAASM,gBAAgB,OAAOC,QAAAA;AAC9B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWd,QAAQS,UAAU;AAC3B,YAAII,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxC,gBAAMjD,UAAU;AAGhBiC,kBAAQ0B,SAAS;YAAEC,MAAML,IAAI5C;YAAMkD,QAAQ7D;UAAQ,CAAA;AACnD,iBAAO;YAAE8D,OAAO;YAAM9D;UAAQ;QAChC;AACA,YAAI,CAAC+D,QAAQnB,MAAMW,IAAI5C,IAAI,EAAG;AAC9B,cAAMqD,SAAS,MAAMC,eAAe;UAClCvE,SAASkD,KAAKlD;UACdwE,KAAKjC,QAAQiC;UACbC,WAAWvB,KAAKzC;UAChBiE,OAAOC,KAAKC,UAAU;YAAEV,MAAML,IAAI5C;YAAM4D,MAAMhB,IAAIgB;UAAK,CAAA;UACvD,GAAItC,QAAQuC,QAAQ5C,UAAa;YAAE4C,KAAKvC,QAAQuC;UAAI;QACtD,CAAA;AACA,YAAIR,OAAOS,aAAa,GAAG;AACzB,gBAAMzE,UAAU0E,gBACdV,OAAOW,UAAUX,OAAOY,UAAU,eAAetC,OAAO0B,OAAOS,QAAQ,CAAA,EAAG;AAE5ExC,kBAAQ0B,SAAS;YAAEC,MAAML,IAAI5C;YAAMkD,QAAQ7D;UAAQ,CAAA;AACnD,iBAAO;YAAE8D,OAAO;YAAM9D;UAAQ;QAChC;MACF;AACA,aAAO4B;IACT;EACF;AAEA,QAAMiD,YAAYnC,SAASC,OAAO,CAACC,SAASA,KAAKpD,UAAU,gBAAA;AAC3D,MAAIqF,UAAUxC,SAAS,GAAG;AACxBW,aAAS8B,iBAAiB,OAAOvB,QAAAA;AAC/B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWd,QAAQiC,WAAW;AAC5B,YAAIpB,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCf,eAAK,wEAAA;AACL;QACF;AACA,YAAI,CAAC6B,QAAQnB,MAAMW,IAAI5C,IAAI,EAAG;AAC9B,YAAI;AACF,gBAAMqD,SAAS,MAAMC,eAAe;YAClCvE,SAASkD,KAAKlD;YACdwE,KAAKjC,QAAQiC;YACbC,WAAWvB,KAAKzC;YAChBiE,OAAOC,KAAKC,UAAU;cAAEV,MAAML,IAAI5C;cAAM4D,MAAMhB,IAAIgB;cAAMP,QAAQT,IAAIS;YAAO,CAAA;YAC3E,GAAI/B,QAAQuC,QAAQ5C,UAAa;cAAE4C,KAAKvC,QAAQuC;YAAI;UACtD,CAAA;AACA,cAAIR,OAAOS,aAAa,GAAG;AAEzBvC,iBAAK,cAAcU,KAAKlD,OAAO,YAAY4C,OAAO0B,OAAOS,QAAQ,CAAA,EAAG;UACtE;AACA,cAAIT,OAAOe,UAAW7C,MAAK,cAAcU,KAAKlD,OAAO,wBAAwB;QAC/E,SAAS0B,OAAO;AACdc,eAAK,cAAcU,KAAKlD,OAAO,aAAc0B,MAAgBpB,OAAO,EAAE;QACxE;MACF;IACF;EACF;AAEA,QAAMgF,iBAAiBtC,SAASC,OAAO,CAACC,SAASA,KAAKpD,UAAU,uBAAA;AAChE,MAAIwF,eAAe3C,SAAS,GAAG;AAC7BW,aAASiC,wBAAwBC,sBAC/BF,gBACA/C,SACAC,MACAe,aAAAA;EAEJ;AAEA,aAAWzD,SAAS2F,sBAAsB;AACxC,UAAMC,OAAO1C,SAASC,OAAO,CAACC,SAASA,KAAKpD,UAAUA,KAAAA;AACtD,QAAI4F,KAAK/C,WAAW,EAAG;AACvB,UAAMgD,OAAOC,0BAA0B9F,OAAO4F,MAAMnD,SAASC,MAAMe,aAAAA;AACnE,QAAIzD,UAAU,mBAAoBwD,UAASuC,mBAAmBF;QACzDrC,UAASwC,uBAAuBH;EACvC;AAEA,SAAOrC;AACT;AArIgBjB;AAwIhB,SAASgB,WAAWH,MAAc;AAChC,SAAO;IACLlD,SAASkD,KAAKlD;IACdF,OAAOoD,KAAKpD;IACZ,GAAIoD,KAAK3C,YAAY2B,UAAa;MAAE3B,SAAS2C,KAAK3C;IAAQ;IAC1DkE,WAAWvB,KAAKzC;EAClB;AACF;AAPS4C;AAoBT,SAASgB,QAAQnB,MAAgB6C,UAAgB;AAC/C,MAAI7C,KAAK3C,YAAY2B,OAAW,QAAO;AACvC,MAAI;AAEF,WAAO,IAAI8D,OAAO9C,KAAK3C,OAAO,EAAEF,KAAK0F,QAAAA;EACvC,QAAQ;AACN,WAAO;EACT;AACF;AARS1B;AAsBF,SAASW,gBAAgBiB,QAAc;AAC5C,QAAMC,QAAQC,YAAY,CAAA,EAAGC,SAAS,KAAA;AACtC,QAAMC,OAAO,uBAAuBH,KAAAA;AACpC,QAAMI,QAAQ,wBAAwBJ,KAAAA;AAGtC,QAAMK,UAAUN,OAAOO,WAAWF,OAAOA,MAAME,WAAW,KAAK,MAAA,CAAA;AAC/D,SAAO,GAAGH,IAAAA;EAASE,OAAAA;EAAYD,KAAAA;AACjC;AARgBtB;AAWhB,IAAMS,uBAAuB;EAAC;EAAoB;;AAYlD,SAASD,sBACPF,gBACA/C,SACAC,MACAe,eAAqB;AAErB,MAAIkD,YAAYlE,QAAQmE,sBAAsBhH;AAE9C,SAAO,OAAUiH,SAAY9C,QAAAA;AAC3B,QAAI4C,aAAa,GAAG;AAClBjE,WACE,6JACqE;AAEvE,aAAOmE;IACT;AACAF,iBAAa;AAEb,QAAIG,MAAMD;AACV,UAAM7C,UAAUC,KAAKC,IAAG;AACxB,eAAWd,QAAQoC,gBAAgB;AACjC,UAAIvB,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCf,aAAK,+EAAA;AACL;MACF;AAUA,YAAMqE,UACJ3D,KAAK3C,YAAY2B,UAAa2B,IAAIiD,UAAUnE,WAAW,IACnD;QAACT;UACD2B,IAAIiD,UAAU7D,OAAO,CAAC8D,SAAS1C,QAAQnB,MAAM6D,KAAK9F,IAAI,CAAA;AAE5D,iBAAW8F,QAAQF,SAAS;AAC1B,cAAMvC,SAAS,MAAMC,eAAe;UAClCvE,SAASkD,KAAKlD;UACdwE,KAAKjC,QAAQiC;UACbC,WAAWvB,KAAKzC;UAChBiE,OAAOC,KAAKC,UAAU;YACpBV,MAAM6C,MAAM9F;;;;;YAKZA,MAAM8F,MAAM9F;YACZ4D,MAAMkC,MAAMlC,QAAQ,CAAC;YACrBP,QAAQsC;UACV,CAAA;UACA,GAAIrE,QAAQuC,QAAQ5C,UAAa;YAAE4C,KAAKvC,QAAQuC;UAAI;QACtD,CAAA;AAGA,YAAIR,OAAOS,aAAa,GAAG;AACzBvC,eAAK,uDAAuDU,KAAKlD,OAAO,GAAG;AAC3E;QACF;AACA,cAAMgH,WAAW1C,OAAOW,OAAOgC,KAAI;AACnC,YAAID,SAASrE,SAAS,EACpBiE,OAAM,GAAGhE,OAAOgE,GAAAA,CAAAA;EAAS5B,gBAAgBgC,QAAAA,CAAAA;MAC7C;IACF;AACA,WAAOJ;EACT;AACF;AArESpB;AA6ET,SAASI,0BACP9F,OACA4F,MACAnD,SACAC,MACAe,eAAqB;AAErB,SAAO,YAAA;AACL,UAAMO,UAAUC,KAAKC,IAAG;AACxB,eAAWd,QAAQwC,MAAM;AACvB,UAAI3B,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCf,aAAK,GAAG1C,KAAAA,0DAA+D;AACvE;MACF;AACA,YAAMwE,SAAS,MAAMC,eAAe;QAClCvE,SAASkD,KAAKlD;QACdwE,KAAKjC,QAAQiC;QACbC,WAAWvB,KAAKzC;QAChB,GAAI8B,QAAQuC,QAAQ5C,UAAa;UAAE4C,KAAKvC,QAAQuC;QAAI;MACtD,CAAA;AACA,UAAIR,OAAOS,aAAa,GAAG;AACzBvC,aACE,GAAG1C,KAAAA,kCAAuCoD,KAAKlD,OAAO,YAAY4C,OAAO0B,OAAOS,QAAQ,CAAA,EAAG;MAE/F;IACF;EACF;AACF;AA3BSa;;;AGhdT,SAASsB,oBAAoB;AAC7B,SAASC,MAAMC,eAAe;AAuC9B,SAASC,OAAOC,UAAiD;AAC/D,SAAO,GAAGA,SAASC,KAAK,IAAID,SAASE,WAAW,EAAA;AAClD;AAFSH;AAeT,SAASI,eAAeC,KAAW;AACjC,MAAI;AAEF,WAAOC,aAAaD,GAAAA;EACtB,QAAQ;AACN,WAAOE,QAAQF,GAAAA;EACjB;AACF;AAPSD;AASF,IAAMI,oBAAN,MAAMA;EAxFb,OAwFaA;;;;EAEFC;;;;;;;EAQTC;EAEA;EAEA,YAAYC,SAAmC;AAC7C,SAAKF,OAAOG,KAAKD,QAAQE,MAAM,YAAY,qBAAA;EAC7C;;EAGAC,qBAAqBC,OAAoC;AACvD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO,IAAIE,IACT;SAAI,KAAK,MAAK,EAAGC,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,MAAMA,EAAEE,WAAW,CAAA;EAEtF;;;;;;;EAQAC,UAAUR,OAA0C;AAClD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO;SAAI,KAAK,MAAK,EAAGG,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,OAAO;MAAE,GAAGA;IAAE,EAAA;EACtF;EAEAI,QAAQvB,UAAwBc,OAA8B;AAC5D,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMU,UAAU;SAAI,KAAK,MAAK,EAAGP,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA;AACrE,QAAIS,QAAQC,KAAK,CAACN,MAAMA,EAAEE,gBAAgBK,gBAAgB1B,QAAAA,CAAAA,EAAY,QAAO;AAO7E,UAAM2B,OAAO5B,OAAOC,QAAAA;AACpB,eAAW4B,UAAUJ,SAAS;AAC5B,UAAIzB,OAAO6B,MAAAA,MAAYD,QAAQC,OAAOC,YAAY7B,SAAS6B,QAAS,QAAO;IAC7E;AACA,WAAO;EACT;EAEAC,QAAQ9B,UAAwBc,OAAqB;AACnD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMiB,UAAU,KAAK,MAAK;AAC1BA,YAAQC,IAAI,GAAGjB,GAAAA,KAAYW,gBAAgB1B,QAAAA,CAAAA,IAAa;MACtDqB,aAAaK,gBAAgB1B,QAAAA;MAC7Bc,OAAOC;MACPc,SAAS7B,SAAS6B;MAClB5B,OAAOD,SAASC;MAChB,GAAID,SAASE,YAAY+B,SAAY,CAAC,IAAI;QAAE/B,SAASF,SAASE;MAAQ;MACtEgC,aAAY,oBAAIC,KAAAA,GAAOC,YAAW;IACpC,CAAA;AACA,SAAK,SAASL,OAAAA;EAChB;EAEAM,OAAOrC,UAAwBc,OAAqB;AAClD,UAAMiB,UAAU,KAAK,MAAK;AAC1B,QAAIA,QAAQO,OAAO,GAAGnC,eAAeW,KAAAA,CAAAA,KAAeY,gBAAgB1B,QAAAA,CAAAA,EAAW,GAAG;AAChF,WAAK,SAAS+B,OAAAA;IAChB;EACF;;;;;;;EAQA,QAAK;AACH,UAAM,EAAEQ,OAAOC,MAAK,IAAKC,eACvB,KAAKjC,MACL,CAACkC,QAAAA;AACC,YAAMC,SAAkBC,KAAKC,MAAMH,GAAAA;AACnC,UAAI,CAACI,MAAMC,QAAQJ,MAAAA,EAAS,OAAM,IAAIK,MAAM,uCAAA;AAC5C,aAAOL;IACT,GACA,CAAA,CAAE;AAEJ,SAAKlC,gBAAgB+B;AAErB,SAAK,WAAW,IAAIS,IAAIV,MAAMnB,IAAI,CAACD,MAAM;MAAC,GAAGA,EAAEL,KAAK,KAASK,EAAEE,WAAW;MAAIF;KAAE,CAAA;AAChF,WAAO,KAAK;EACd;EAEA,SAASY,SAAoC;AAC3CmB,oBAAgB,KAAK1C,MAAM,MAAM,GAAGoC,KAAKO,UAAU;SAAIpB,QAAQd,OAAM;OAAK,MAAM,CAAA,CAAA;CAAM;EACxF;AACF;","names":["randomBytes","TheokitAgentError","z","createHash","FIELD_SEPARATOR","hookFingerprint","identity","canonical","command","event","matcher","String","timeoutMs","join","createHash","update","digest","spawn","MAX_OUTPUT_BYTES","DRAIN_BUDGET_MS","CHAIN_BUDGET_MULTIPLIER","runHookCommand","input","Promise","resolve","child","spawn","command","cwd","shell","detached","env","stdio","stdout","stderr","truncated","timedOut","settled","capture","current","chunk","length","next","toString","slice","on","settle","exitCode","clearTimeout","timer","drainTimer","setTimeout","killGroup","pid","timeoutMs","undefined","code","stdin","end","process","kill","HOOK_EVENTS","DEFAULT_HOOK_TIMEOUT_MS","DEFAULT_CONTINUATION_BUDGET","hookSpecSchema","z","object","event","enum","command","string","min","refine","value","test","message","matcher","optional","timeout_ms","number","int","positive","default","strict","HookSpecError","TheokitAgentError","name","code","isRetryable","parseHookSpecs","input","parsed","array","safeParse","success","error","issues","map","issue","path","join","data","IGNORE_WARNING","undefined","WIRED_EVENTS","Set","buildHookHandlers","specs","options","warn","onWarn","trusted","length","String","fingerprintOf","fingerprint","hookFingerprint","runnable","filter","spec","approved","has","identityOf","handlers","chainBudgetMs","Math","max","CHAIN_BUDGET_MULTIPLIER","preHooks","pre_tool_call","ctx","started","Date","now","onVeto","tool","reason","block","matches","result","runHookCommand","cwd","timeoutMs","stdin","JSON","stringify","args","env","exitCode","fenceHookOutput","stdout","stderr","postHooks","post_tool_call","truncated","transformHooks","transform_tool_result","buildTransformHandler","OBSERVATIONAL_EVENTS","list","fire","buildObservationalHandler","on_session_start","post_assistant_reply","toolName","RegExp","output","nonce","randomBytes","toString","open","close","escaped","replaceAll","remaining","continuationBudget","results","out","targets","toolCalls","call","feedback","trim","realpathSync","join","resolve","slotOf","identity","event","matcher","canonicalScope","dir","realpathSync","resolve","HookApprovalStore","path","lastReadError","options","join","home","approvedFingerprints","scope","key","Set","values","filter","r","map","fingerprint","approvals","stateOf","inScope","some","hookFingerprint","slot","record","command","approve","records","set","undefined","approvedAt","Date","toISOString","revoke","delete","value","error","readSecureJson","raw","parsed","JSON","parse","Array","isArray","Error","Map","writeSecureJson","stringify"]}
+{"version":3,"sources":["../src/hooks/hook-spec.ts","../src/hooks/hook-fingerprint.ts","../src/hooks/hook-runner.ts","../src/hooks/unwired-events.ts","../src/hooks/approval-store.ts"],"mappings":";;;;;;;;;;;;;AAAA,SAASA,mBAAmB;AAG5B,SAASC,yBAAyB;AAClC,SAASC,SAAS;;;ACJlB,SAASC,kBAAkB;AAsC3B,IAAMC,kBAAkB;AASjB,SAASC,gBAAgBC,UAAsB;AACpD,QAAMC,YAAY;IAChBD,SAASE;IACTF,SAASG;IACTH,SAASI,WAAW;IACpBC,OAAOL,SAASM,SAAS;IACzBC,KAAKT,eAAAA;AACP,SAAOU,WAAW,QAAA,EAAUC,OAAOR,WAAW,MAAA,EAAQS,OAAO,KAAA;AAC/D;AARgBX;;;AC/ChB,SAASY,aAAa;AA+Bf,IAAMC,mBAAmB;AAQzB,IAAMC,kBAAkB;AAGxB,IAAMC,0BAA0B;AAgCvC,eAAsBC,eAAeC,OAAmB;AACtD,SAAO,IAAIC,QAAuB,CAACC,aAAAA;AAcjC,UAAMC,QAAQC,MAAMJ,MAAMK,SAAS;MACjCC,KAAKN,MAAMM;MACXC,OAAO;;MAEPC,UAAU;MACVC,KAAKT,MAAMS;MACXC,OAAO;QAAC;QAAQ;QAAQ;;IAC1B,CAAA;AAEA,QAAIC,SAAS;AACb,QAAIC,SAAS;AACb,QAAIC,YAAY;AAChB,QAAIC,WAAW;AACf,QAAIC,UAAU;AAEd,UAAMC,UAAU,wBAACC,SAAiBC,UAAAA;AAChC,UAAID,QAAQE,UAAUvB,kBAAkB;AACtCiB,oBAAY;AACZ,eAAOI;MACT;AACA,YAAMG,OAAOH,UAAUC,MAAMG,SAAS,MAAA;AACtC,UAAID,KAAKD,UAAUvB,iBAAkB,QAAOwB;AAC5CP,kBAAY;AACZ,aAAOO,KAAKE,MAAM,GAAG1B,gBAAAA;IACvB,GATgB;AAWhBO,UAAMQ,OAAOY,GAAG,QAAQ,CAACL,UAAAA;AACvBP,eAASK,QAAQL,QAAQO,KAAAA;IAC3B,CAAA;AACAf,UAAMS,OAAOW,GAAG,QAAQ,CAACL,UAAAA;AACvBN,eAASI,QAAQJ,QAAQM,KAAAA;IAC3B,CAAA;AAEA,UAAMM,SAAS,wBAACC,aAAAA;AACd,UAAIV,QAAS;AACbA,gBAAU;AACVW,mBAAaC,KAAAA;AACbD,mBAAaE,UAAAA;AACb1B,MAAAA,SAAQ;QAAEuB;QAAUd;QAAQC;QAAQC;QAAWC;MAAS,CAAA;IAC1D,GANe;AAQf,UAAMa,QAAQE,WAAW,MAAA;AACvBf,iBAAW;AACXgB,gBAAU3B,MAAM4B,GAAG;IACrB,GAAG/B,MAAMgC,SAAS;AAIlB,QAAIJ,aAA4CC,WAAW,MAAMI,QAAW,CAAA;AAC5E9B,UAAMoB,GAAG,QAAQ,CAACW,SAAAA;AAEhBN,mBAAaC,WAAW,MAAA;AACtBL,eAAOU,IAAAA;MACT,GAAGrC,eAAAA;IACL,CAAA;AACAM,UAAMoB,GAAG,SAAS,CAACW,SAAAA;AACjBV,aAAOU,IAAAA;IACT,CAAA;AACA/B,UAAMoB,GAAG,SAAS,MAAA;AAChBC,aAAO,IAAA;IACT,CAAA;AAYArB,UAAMgC,MAAMZ,GAAG,SAAS,MAAMU,MAAAA;AAC9B,QAAIjC,MAAMmC,UAAUF,OAAW9B,OAAMgC,MAAMC,IAAIpC,MAAMmC,KAAK;QACrDhC,OAAMgC,MAAMC,IAAG;EACtB,CAAA;AACF;AA3FsBrC;AAoGtB,SAAS+B,UAAUC,KAAuB;AACxC,MAAIA,QAAQE,OAAW;AACvB,MAAI;AACFI,YAAQC,KAAK,CAACP,KAAK,SAAA;EACrB,QAAQ;EAER;AACF;AAPSD;;;AC1GF,IAAMS,wBACXC,OAAOC,OAAO;EACZC,sBAAsBF,OAAOC,OAAO;IAClCE,MAAM;IACNC,QAAQ;EACV,CAAA;EACAC,eAAeL,OAAOC,OAAO;IAC3BE,MAAM;IACNC,QAAQ;EACV,CAAA;EACAE,gBAAgBN,OAAOC,OAAO;IAC5BE,MAAM;IACNC,QAAQ;EACV,CAAA;AACF,CAAA;AAcK,SAASG,mBACdC,OACAC,UAAoEV,uBAAqB;AAEzF,QAAMW,QAAQD,QAAQD,KAAAA;AACtB,MAAIE,UAAUC,OAAW,QAAO;AAChC,SAAOD,MAAMP,SAAS,OAAO,GAAGO,MAAMN,MAAM,MAAM,OAAOM,MAAMP,IAAI,aAAaO,MAAMN,MAAM;AAC9F;AAPgBG;;;AH3DT,IAAMK,cAAc;EACzB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAMK,IAAMC,0BAA0B;AAQhC,IAAMC,8BAA8B;AAQpC,IAAMC,iBAAiBC,EAC3BC,OAAO;EACNC,OAAOF,EAAEG,KAAKP,WAAAA;EACdQ,SAASJ,EACNK,OAAM,EACNC,IAAI,CAAA,EAQJC,OAAO,CAACC,UAAU,CAAC,wBAAwBC,KAAKD,KAAAA,GAAQ;IACvDE,SAAS;EACX,CAAA;;EAEFC,SAASX,EAAEK,OAAM,EAAGO,SAAQ;EAC5BC,YAAYb,EAAEc,OAAM,EAAGC,IAAG,EAAGC,SAAQ,EAAGC,QAAQpB,uBAAAA;AAClD,CAAA,EACCqB,OAAM;AAWF,IAAMC,gBAAN,cAA4BC,kBAAAA;EAlGnC,OAkGmCA;;;EACfC,OAAO;EACzB,YAAYX,SAAiB;AAC3B,UAAMA,SAAS;MACbY,MAAM;;MAENC,aAAa;IACf,CAAA;EACF;AACF;AASO,SAASC,eAAeC,OAAc;AAC3C,QAAMC,SAAS1B,EAAE2B,MAAM5B,cAAAA,EAAgB6B,UAAUH,KAAAA;AACjD,MAAI,CAACC,OAAOG,SAAS;AACnB,UAAM,IAAIV,cACR,+BAA+BO,OAAOI,MAAMC,OACzCC,IAAI,CAACC,UAAU,GAAGA,MAAMC,KAAKC,KAAK,GAAA,CAAA,KAASF,MAAMvB,OAAO,EAAE,EAC1DyB,KAAK,IAAA,CAAA,EAAO;EAEnB;AACA,SAAOT,OAAOU;AAChB;AAVgBZ;AAuEhB,IAAMa,iBAAiB,6BAAYC,QAAZ;AAUvB,IAAMC,mBAAmB;EACvB;EACA;EACA;EACA;EACA;;AAUF,IAAMC,eAAe,IAAIC,IAAeF,gBAAAA;AAQjC,SAASG,kBACdC,OACAC,SAAiC;AAEjC,QAAMC,OAAOD,QAAQE,UAAUT;AAC/B,MAAI,CAACO,QAAQG,SAAS;AACpB,QAAIJ,MAAMK,SAAS,GAAG;AACpBH,WACE,GAAGI,OAAON,MAAMK,MAAM,CAAA,0EAAsE;IAEhG;AACA,WAAO,CAAC;EACV;AAEA,QAAME,gBAAgBN,QAAQO,eAAeC;AAC7C,QAAMC,WAAWV,MAAMW,OAAO,CAACC,SAAAA;AAC7B,UAAMC,WAAWZ,QAAQY,SAASC,IAAIP,cAAcQ,WAAWH,IAAAA,CAAAA,CAAAA;AAC/D,QAAI,CAACC,UAAU;AACbX,WACE,wCAAwCU,KAAKnD,OAAO,QAAQmD,KAAKrD,KAAK,sGACa;IAEvF;AACA,WAAOsD;EACT,CAAA;AACA,MAAIH,SAASL,WAAW,EAAG,QAAO,CAAC;AASnC,aAAWO,QAAQF,UAAU;AAC3B,QAAI,CAACb,aAAaiB,IAAIF,KAAKrD,KAAK,GAAG;AAGjC2C,WAAK,qBAAqBU,KAAKrD,KAAK,0BAAqByD,mBAAmBJ,KAAKrD,KAAK,CAAA,EAAG;IAC3F;EACF;AAEA,QAAM0D,WAAyB,CAAC;AAChC,QAAMC,gBACJC,KAAKC,IAAG,GAAIV,SAASrB,IAAI,CAACuB,SAASA,KAAK1C,UAAU,CAAA,IAAKmD;AAMzD,QAAMC,WAAWZ,SAASC,OAAO,CAACC,SAASA,KAAKrD,UAAU,eAAA;AAC1D,MAAI+D,SAASjB,SAAS,GAAG;AACvBY,aAASM,gBAAgB,OAAOC,QAAAA;AAC9B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWf,QAAQU,UAAU;AAC3B,YAAII,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxC,gBAAMnD,UAAU;AAGhBkC,kBAAQ2B,SAAS;YAAEC,MAAML,IAAI9C;YAAMoD,QAAQ/D;UAAQ,CAAA;AACnD,iBAAO;YAAEgE,OAAO;YAAMhE;UAAQ;QAChC;AACA,YAAI,CAACiE,QAAQpB,MAAMY,IAAI9C,IAAI,EAAG;AAC9B,cAAMuD,SAAS,MAAMC,eAAe;UAClCzE,SAASmD,KAAKnD;UACd0E,KAAKlC,QAAQkC;UACbC,WAAWxB,KAAK1C;UAChBmE,OAAOC,KAAKC,UAAU;YAAEV,MAAML,IAAI9C;YAAM8D,MAAMhB,IAAIgB;UAAK,CAAA;UACvD,GAAIvC,QAAQwC,QAAQ9C,UAAa;YAAE8C,KAAKxC,QAAQwC;UAAI;QACtD,CAAA;AACA,YAAIR,OAAOS,aAAa,GAAG;AACzB,gBAAM3E,UAAU4E,gBACdV,OAAOW,UAAUX,OAAOY,UAAU,eAAevC,OAAO2B,OAAOS,QAAQ,CAAA,EAAG;AAE5EzC,kBAAQ2B,SAAS;YAAEC,MAAML,IAAI9C;YAAMoD,QAAQ/D;UAAQ,CAAA;AACnD,iBAAO;YAAEgE,OAAO;YAAMhE;UAAQ;QAChC;MACF;AACA,aAAO4B;IACT;EACF;AAEA,QAAMmD,YAAYpC,SAASC,OAAO,CAACC,SAASA,KAAKrD,UAAU,gBAAA;AAC3D,MAAIuF,UAAUzC,SAAS,GAAG;AACxBY,aAAS8B,iBAAiB,OAAOvB,QAAAA;AAC/B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWf,QAAQkC,WAAW;AAC5B,YAAIpB,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxChB,eAAK,wEAAA;AACL;QACF;AACA,YAAI,CAAC8B,QAAQpB,MAAMY,IAAI9C,IAAI,EAAG;AAC9B,YAAI;AACF,gBAAMuD,SAAS,MAAMC,eAAe;YAClCzE,SAASmD,KAAKnD;YACd0E,KAAKlC,QAAQkC;YACbC,WAAWxB,KAAK1C;YAChBmE,OAAOC,KAAKC,UAAU;cAAEV,MAAML,IAAI9C;cAAM8D,MAAMhB,IAAIgB;cAAMP,QAAQT,IAAIS;YAAO,CAAA;YAC3E,GAAIhC,QAAQwC,QAAQ9C,UAAa;cAAE8C,KAAKxC,QAAQwC;YAAI;UACtD,CAAA;AACA,cAAIR,OAAOS,aAAa,GAAG;AAEzBxC,iBAAK,cAAcU,KAAKnD,OAAO,YAAY6C,OAAO2B,OAAOS,QAAQ,CAAA,EAAG;UACtE;AACA,cAAIT,OAAOe,UAAW9C,MAAK,cAAcU,KAAKnD,OAAO,wBAAwB;QAC/E,SAAS0B,OAAO;AACde,eAAK,cAAcU,KAAKnD,OAAO,aAAc0B,MAAgBpB,OAAO,EAAE;QACxE;MACF;IACF;EACF;AAEA,QAAMkF,iBAAiBvC,SAASC,OAAO,CAACC,SAASA,KAAKrD,UAAU,uBAAA;AAChE,MAAI0F,eAAe5C,SAAS,GAAG;AAC7BY,aAASiC,wBAAwBC,sBAC/BF,gBACAhD,SACAC,MACAgB,aAAAA;EAEJ;AAEAkC,8BACEnC,UACAoC,sBACA,CAAC9F,OAAO+F,SAASC,0BAA0BhG,OAAO+F,MAAMrD,SAASC,MAAMgB,aAAAA,GACvER,QAAAA;AAGF,SAAOO;AACT;AAlIgBlB;AAqIhB,SAASgB,WAAWH,MAAc;AAChC,SAAO;IACLnD,SAASmD,KAAKnD;IACdF,OAAOqD,KAAKrD;IACZ,GAAIqD,KAAK5C,YAAY2B,UAAa;MAAE3B,SAAS4C,KAAK5C;IAAQ;IAC1DoE,WAAWxB,KAAK1C;EAClB;AACF;AAPS6C;AAoBT,SAASiB,QAAQpB,MAAgB4C,UAAgB;AAC/C,MAAI5C,KAAK5C,YAAY2B,OAAW,QAAO;AAOvC,QAAM8D,UAAU7C,KAAK5C,QAAQ0F,KAAI;AACjC,MAAID,YAAY,MAAMA,YAAY,IAAK,QAAO;AAI9C,MAAIA,QAAQE,SAAS,GAAA,GAAM;AACzB,WAAOF,QACJG,MAAM,GAAA,EACNvE,IAAI,CAACX,SAASA,KAAKgF,KAAI,CAAA,EACvB/C,OAAO,CAACjC,SAASA,SAAS,EAAA,EAC1BiF,SAASH,QAAAA;EACd;AAEA,MAAI;AAEF,WAAO,IAAIK,OAAOJ,OAAAA,EAAS3F,KAAK0F,QAAAA;EAClC,QAAQ;AAEN,WAAO;EACT;AACF;AA5BSxB;AA6CF,SAAS8B,gBAAgBC,QAAc;AAC5C,QAAMC,QAAQC,YAAY,CAAA,EAAGC,SAAS,KAAA;AACtC,QAAMC,OAAO,uBAAuBH,KAAAA;AACpC,QAAMI,QAAQ,wBAAwBJ,KAAAA;AAGtC,QAAMK,UAAUN,OAAOO,WAAWF,OAAOA,MAAME,WAAW,KAAK,MAAA,CAAA;AAC/D,SAAO,GAAGH,IAAAA;EAASE,OAAAA;EAAYD,KAAAA;AACjC;AARgBN;AAqBhB,IAAMS,uBAAuB;EAC3B;EACA;;AA2CF,SAASC,sBACPC,gBACAC,SACAC,MACAC,eAAqB;AAErB,MAAIC,YAAYH,QAAQI,sBAAsBC;AAE9C,SAAO,OAAUC,SAAYC,QAAAA;AAC3B,QAAIJ,aAAa,GAAG;AAClBF,WACE,6JACqE;AAEvE,aAAOK;IACT;AACAH,iBAAa;AAEb,QAAIK,MAAMF;AACV,UAAMG,UAAUC,KAAKC,IAAG;AACxB,eAAWC,QAAQb,gBAAgB;AACjC,UAAIW,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCD,aAAK,+EAAA;AACL;MACF;AAUA,YAAMY,UACJD,KAAKE,YAAYC,UAAaR,IAAIS,UAAUC,WAAW,IACnD;QAACF;UACDR,IAAIS,UAAUE,OAAO,CAACC,SAASC,QAAQR,MAAMO,KAAKE,IAAI,CAAA;AAE5D,iBAAWF,QAAQN,SAAS;AAC1B,cAAMS,SAAS,MAAMC,eAAe;UAClCC,SAASZ,KAAKY;UACdC,KAAKzB,QAAQyB;UACbC,WAAWd,KAAKe;UAChBC,OAAOC,KAAKC,UAAU;YACpBC,MAAMZ,MAAME;;;;;YAKZA,MAAMF,MAAME;YACZW,MAAMb,MAAMa,QAAQ,CAAC;YACrBV,QAAQd;UACV,CAAA;UACA,GAAIR,QAAQiC,QAAQlB,UAAa;YAAEkB,KAAKjC,QAAQiC;UAAI;QACtD,CAAA;AAGA,YAAIX,OAAOY,aAAa,GAAG;AACzBjC,eAAK,uDAAuDW,KAAKY,OAAO,GAAG;AAC3E;QACF;AACA,cAAMW,WAAWb,OAAOc,OAAOC,KAAI;AACnC,YAAIF,SAASlB,SAAS,EACpBT,OAAM,GAAG8B,OAAO9B,GAAAA,CAAAA;EAASpB,gBAAgB+C,QAAAA,CAAAA;MAC7C;IACF;AACA,WAAO3B;EACT;AACF;AArESV;AAyFF,SAASyC,4BACdC,UACAC,QACAC,MACAC,QAA6B,CAAA,GAAE;AAE/B,aAAWC,SAASH,QAAQ;AAC1B,UAAMI,OAAOF,MAAMzB,OAAO,CAACN,SAASA,KAAKgC,UAAUA,KAAAA;AACnD,QAAIC,KAAK5B,WAAW,EAAG;AAGvBuB,aAASI,KAAAA,IAASF,KAAKE,OAAOC,IAAAA;EAChC;AACF;AAbgBN;AAehB,SAASO,0BACPF,OACAC,MACA7C,SACAC,MACAC,eAAqB;AAErB,SAAO,YAAA;AACL,UAAMO,UAAUC,KAAKC,IAAG;AACxB,eAAWC,QAAQiC,MAAM;AACvB,UAAInC,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCD,aAAK,GAAG2C,KAAAA,0DAA+D;AACvE;MACF;AACA,YAAMtB,SAAS,MAAMC,eAAe;QAClCC,SAASZ,KAAKY;QACdC,KAAKzB,QAAQyB;QACbC,WAAWd,KAAKe;QAChB,GAAI3B,QAAQiC,QAAQlB,UAAa;UAAEkB,KAAKjC,QAAQiC;QAAI;MACtD,CAAA;AACA,UAAIX,OAAOY,aAAa,GAAG;AACzBjC,aACE,GAAG2C,KAAAA,kCAAuChC,KAAKY,OAAO,YAAYc,OAAOhB,OAAOY,QAAQ,CAAA,EAAG;MAE/F;IACF;EACF;AACF;AA3BSY;;;AIpjBT,SAASC,oBAAoB;AAC7B,SAASC,MAAMC,eAAe;AAuC9B,SAASC,OAAOC,UAAiD;AAC/D,SAAO,GAAGA,SAASC,KAAK,IAAID,SAASE,WAAW,EAAA;AAClD;AAFSH;AAeT,SAASI,eAAeC,KAAW;AACjC,MAAI;AAEF,WAAOC,aAAaD,GAAAA;EACtB,QAAQ;AACN,WAAOE,QAAQF,GAAAA;EACjB;AACF;AAPSD;AASF,IAAMI,oBAAN,MAAMA;EAxFb,OAwFaA;;;;EAEFC;;;;;;;EAQTC;EAEA;EAEA,YAAYC,SAAmC;AAC7C,SAAKF,OAAOG,KAAKD,QAAQE,MAAM,YAAY,qBAAA;EAC7C;;EAGAC,qBAAqBC,OAAoC;AACvD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO,IAAIE,IACT;SAAI,KAAK,MAAK,EAAGC,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,MAAMA,EAAEE,WAAW,CAAA;EAEtF;;;;;;;EAQAC,UAAUR,OAA0C;AAClD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO;SAAI,KAAK,MAAK,EAAGG,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,OAAO;MAAE,GAAGA;IAAE,EAAA;EACtF;EAEAI,QAAQvB,UAAwBc,OAA8B;AAC5D,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMU,UAAU;SAAI,KAAK,MAAK,EAAGP,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA;AACrE,QAAIS,QAAQC,KAAK,CAACN,MAAMA,EAAEE,gBAAgBK,gBAAgB1B,QAAAA,CAAAA,EAAY,QAAO;AAO7E,UAAM2B,OAAO5B,OAAOC,QAAAA;AACpB,eAAW4B,UAAUJ,SAAS;AAC5B,UAAIzB,OAAO6B,MAAAA,MAAYD,QAAQC,OAAOC,YAAY7B,SAAS6B,QAAS,QAAO;IAC7E;AACA,WAAO;EACT;EAEAC,QAAQ9B,UAAwBc,OAAqB;AACnD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMiB,UAAU,KAAK,MAAK;AAC1BA,YAAQC,IAAI,GAAGjB,GAAAA,KAAYW,gBAAgB1B,QAAAA,CAAAA,IAAa;MACtDqB,aAAaK,gBAAgB1B,QAAAA;MAC7Bc,OAAOC;MACPc,SAAS7B,SAAS6B;MAClB5B,OAAOD,SAASC;MAChB,GAAID,SAASE,YAAY+B,SAAY,CAAC,IAAI;QAAE/B,SAASF,SAASE;MAAQ;MACtEgC,aAAY,oBAAIC,KAAAA,GAAOC,YAAW;IACpC,CAAA;AACA,SAAK,SAASL,OAAAA;EAChB;EAEAM,OAAOrC,UAAwBc,OAAqB;AAClD,UAAMiB,UAAU,KAAK,MAAK;AAC1B,QAAIA,QAAQO,OAAO,GAAGnC,eAAeW,KAAAA,CAAAA,KAAeY,gBAAgB1B,QAAAA,CAAAA,EAAW,GAAG;AAChF,WAAK,SAAS+B,OAAAA;IAChB;EACF;;;;;;;EAQA,QAAK;AACH,UAAM,EAAEQ,OAAOC,MAAK,IAAKC,eACvB,KAAKjC,MACL,CAACkC,QAAAA;AACC,YAAMC,SAAkBC,KAAKC,MAAMH,GAAAA;AACnC,UAAI,CAACI,MAAMC,QAAQJ,MAAAA,EAAS,OAAM,IAAIK,MAAM,uCAAA;AAC5C,aAAOL;IACT,GACA,CAAA,CAAE;AAEJ,SAAKlC,gBAAgB+B;AAErB,SAAK,WAAW,IAAIS,IAAIV,MAAMnB,IAAI,CAACD,MAAM;MAAC,GAAGA,EAAEL,KAAK,KAASK,EAAEE,WAAW;MAAIF;KAAE,CAAA;AAChF,WAAO,KAAK;EACd;EAEA,SAASY,SAAoC;AAC3CmB,oBAAgB,KAAK1C,MAAM,MAAM,GAAGoC,KAAKO,UAAU;SAAIpB,QAAQd,OAAM;OAAK,MAAM,CAAA,CAAA;CAAM;EACxF;AACF;","names":["randomBytes","TheokitAgentError","z","createHash","FIELD_SEPARATOR","hookFingerprint","identity","canonical","command","event","matcher","String","timeoutMs","join","createHash","update","digest","spawn","MAX_OUTPUT_BYTES","DRAIN_BUDGET_MS","CHAIN_BUDGET_MULTIPLIER","runHookCommand","input","Promise","resolve","child","spawn","command","cwd","shell","detached","env","stdio","stdout","stderr","truncated","timedOut","settled","capture","current","chunk","length","next","toString","slice","on","settle","exitCode","clearTimeout","timer","drainTimer","setTimeout","killGroup","pid","timeoutMs","undefined","code","stdin","end","process","kill","UNWIRED_EVENT_REASONS","Object","freeze","transform_llm_output","seam","reason","pre_user_send","on_session_end","unwiredEventAdvice","event","reasons","entry","undefined","HOOK_EVENTS","DEFAULT_HOOK_TIMEOUT_MS","DEFAULT_CONTINUATION_BUDGET","hookSpecSchema","z","object","event","enum","command","string","min","refine","value","test","message","matcher","optional","timeout_ms","number","int","positive","default","strict","HookSpecError","TheokitAgentError","name","code","isRetryable","parseHookSpecs","input","parsed","array","safeParse","success","error","issues","map","issue","path","join","data","IGNORE_WARNING","undefined","WIRED_EVENT_LIST","WIRED_EVENTS","Set","buildHookHandlers","specs","options","warn","onWarn","trusted","length","String","fingerprintOf","fingerprint","hookFingerprint","runnable","filter","spec","approved","has","identityOf","unwiredEventAdvice","handlers","chainBudgetMs","Math","max","CHAIN_BUDGET_MULTIPLIER","preHooks","pre_tool_call","ctx","started","Date","now","onVeto","tool","reason","block","matches","result","runHookCommand","cwd","timeoutMs","stdin","JSON","stringify","args","env","exitCode","fenceHookOutput","stdout","stderr","postHooks","post_tool_call","truncated","transformHooks","transform_tool_result","buildTransformHandler","assignObservationalHandlers","OBSERVATIONAL_EVENTS","list","buildObservationalHandler","toolName","trimmed","trim","includes","split","RegExp","fenceHookOutput","output","nonce","randomBytes","toString","open","close","escaped","replaceAll","OBSERVATIONAL_EVENTS","buildTransformHandler","transformHooks","options","warn","chainBudgetMs","remaining","continuationBudget","DEFAULT_CONTINUATION_BUDGET","results","ctx","out","started","Date","now","spec","targets","matcher","undefined","toolCalls","length","filter","call","matches","name","result","runHookCommand","command","cwd","timeoutMs","timeout_ms","stdin","JSON","stringify","tool","args","env","exitCode","feedback","stdout","trim","String","assignObservationalHandlers","handlers","events","make","specs","event","list","buildObservationalHandler","realpathSync","join","resolve","slotOf","identity","event","matcher","canonicalScope","dir","realpathSync","resolve","HookApprovalStore","path","lastReadError","options","join","home","approvedFingerprints","scope","key","Set","values","filter","r","map","fingerprint","approvals","stateOf","inScope","some","hookFingerprint","slot","record","command","approve","records","set","undefined","approvedAt","Date","toISOString","revoke","delete","value","error","readSecureJson","raw","parsed","JSON","parse","Array","isArray","Error","Map","writeSecureJson","stringify"]}

package/dist/index.d.ts

@@ -1,19 +1,22 @@
 import { PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition, BudgetTracker, CustomTool, GoalLoopAgent, GoalOptions, runGoalLoop, GoalEvent, GoalResult, InlineSkill, Agent as Agent$1, ListAgentsOptions, ListResult, SDKAgentInfo } from '@theokit/sdk';
-export { CustomTool, DiagnosticsSink, GenerateObjectError, GoalEvent, GoalLoopAgent, GoalOptions, GoalResult, JudgeCredentialError, JudgeResult, LayerOrderError, McpAuthConfig, McpHttpServerConfig, McpOAuthConfig, McpServerConfig, McpStdioServerConfig, Provider, RunEvent, SDKAgent, SessionRecord, Squad, StreamObjectError, Tool, ToolError, ToolResultContentBlock, TrustLevel, TrustPosture, TrustPostureInput, TrustSource, UngatedCapabilityError, Verdict, WiredEntity, applySecurityFloor, auditEnvReachability, foldLayers, recordWiring, resolveTrustPosture, setDiagnosticsSink, verifyLayerOrdering } from '@theokit/sdk';
+export { BudgetTracker, CustomTool, DiagnosticsSink, GenerateObjectError, GoalEvent, GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JudgeCredentialError, JudgeResult, LayerOrderError, McpAuthConfig, McpHttpServerConfig, McpOAuthConfig, McpServerConfig, McpStdioServerConfig, Plugin, PluginsSettings, Provider, ProviderRoutingSettings, RunEvent, SDKAgent, SessionRecord, SessionStore, Squad, StreamObjectError, Tool, ToolError, ToolResultContentBlock, TrustLevel, TrustPosture, TrustPostureInput, TrustSource, UngatedCapabilityError, Verdict, WiredEntity, applySecurityFloor, auditEnvReachability, foldLayers, recordWiring, resolveTrustPosture, setDiagnosticsSink, verifyLayerOrdering } from '@theokit/sdk';
 import { b as MainLoopMeta, R as ReasoningEffort, T as ToolOptions, A as ApprovalOptions, H as HumanInTheLoopOptions } from './types-C16Wuh9E.js';
 export { c as AgentOptions, B as BudgetOptions, d as MainLoopOptions, M as McpServersMap, e as PolicyHandler, f as TimeoutAction, g as ToolboxOptions } from './types-C16Wuh9E.js';
-import { C as ContextWindowOptions, S as SkillsOptions, A as AgentManifestEntry, H as HitlDecision, s as streamAgentUIMessages, a as ApprovalPosture, b as AgentModule } from './bridge-entry-B0FqqPlt.js';
-export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, i as AgentManifestSource, j as AgentManifestTool, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, t as ApprovalRequest, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, R as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, U as agentsPlugin, V as applyPosture, X as buildModelSelection, Y as compileAgentModule, Z as compileContextWindow, _ as compileLoadedAgentModule, $ as compileProjectContext, a0 as compileSkills, a1 as createAgentExecutionContext, a2 as createApiErrorHandler, a3 as createSdkAgentStream, a4 as createThinkTagExtractor, a5 as createToolHooksPlugin, a6 as extractThinkTagStream, a7 as generateAgentManifest, a8 as generateAgentRoutes, a9 as isAgentContext, aa as loadMcpJson, ab as mcpRegistry, ac as mcpToolApprovals, ad as projectContextMetadataOnlyKnobs, ae as reasoningEffortOf, af as resolveMcpServers, ag as runWithApiErrorHandling, ah as shouldAutoApprove, ai as toAgentFactory, aj as translateSdkEvent, ak as withClockCap, al as withEphemeralAgent } from './bridge-entry-B0FqqPlt.js';
+import { C as ContextWindowOptions, S as SkillsOptions, A as AgentManifestEntry, H as HitlDecision, s as streamAgentUIMessages, a as ApprovalPosture, b as AgentModule } from './bridge-entry-DBkqwe6b.js';
+export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, i as AgentManifestSource, j as AgentManifestTool, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, t as ApprovalRequest, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, R as RuntimeOverrides, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, U as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, V as agentsPlugin, X as applyPosture, Y as buildModelSelection, Z as compileAgentModule, _ as compileContextWindow, $ as compileLoadedAgentModule, a0 as compileProjectContext, a1 as compileSkills, a2 as createAgentExecutionContext, a3 as createApiErrorHandler, a4 as createSdkAgentStream, a5 as createThinkTagExtractor, a6 as createToolHooksPlugin, a7 as extractThinkTagStream, a8 as generateAgentManifest, a9 as generateAgentRoutes, aa as isAgentContext, ab as loadMcpJson, ac as mcpRegistry, ad as mcpToolApprovals, ae as projectContextMetadataOnlyKnobs, af as reasoningEffortOf, ag as resolveMcpServers, ah as runWithApiErrorHandling, ai as shouldAutoApprove, aj as toAgentFactory, ak as translateSdkEvent, al as withClockCap, am as withEphemeralAgent } from './bridge-entry-DBkqwe6b.js';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 export * from '@theokit/sdk/errors';
 export { ConfigurationError, BudgetExceededError as WindowBudgetExceededError } from '@theokit/sdk/errors';
-import { G as Guardrail, C as CompiledAgentOptions, b as CompiledTool, a as SettingSourcesSelection } from './agent-compiler-DZorqtK2.js';
-export { c as CompatSurface, d as CostBudgetExceededError, e as GuardrailAction, f as GuardrailPhase, g as GuardrailResult, h as GuardrailViolationError, H as HookApprovalGate, i as HookApprovalRequest, j as HookGateUnsupportedError, P as ProjectSettingsGrant, R as ResolvedCompatSource, k as SettingSourceCapability, l as SkillsRequestContext, S as SkillsSelection, T as ToolWalkResult, m as ToolboxWalkResult, U as UntrustedSettingSourceError, n as compileTools, r as resolveCompatSources, o as resolveEnabledSkills, p as resolveSettingSources } from './agent-compiler-DZorqtK2.js';
-import { L as LoopStrategy, R as ReflectionStrategy, b as RoundStreamFactory, S as StreamEvent, c as DelegationResult } from './delegation-scoring-MbnqL68u.js';
-export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, j as DEFAULT_MAX_ITERATIONS, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, p as LoopFinishReason, q as LoopOutcome, r as LoopStrategyConfig, P as PartialToolCallEvent, s as ReflectionContext, t as ReflectionResult, u as ReflectionStrategyConfig, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, Z as ladderReflectionStrategy, _ as loopStrategyConfigSchema, $ as noopReflectionStrategy, a0 as presentUIMessageStream, a1 as reflectionStrategyConfigSchema, a2 as resolveLoopStrategy, a3 as streamAgentResponse } from './delegation-scoring-MbnqL68u.js';
-export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, c as compileAgentDefinition, i as isAgentDefinition } from './define-agent-D9b3h3VU.js';
+import { G as Guardrail, a as CompiledAgentOptions, b as CompiledTool } from './agent-compiler-B0hb6HCo.js';
+export { c as CompatImportUnsupportedError, d as CostBudgetExceededError, e as GuardrailAction, f as GuardrailError, g as GuardrailPhase, h as GuardrailResult, i as GuardrailViolationError, H as HookApprovalGate, j as HookApprovalRequest, k as HookGateUnsupportedError, M as MalformedGuardrailResultError, l as SkillsRequestContext, S as SkillsSelection, T as ToolWalkResult, m as ToolboxWalkResult, U as UnreadableTextPayloadError, n as compileTools, r as resolveEnabledSkills } from './agent-compiler-B0hb6HCo.js';
+import { S as SettingSourcesSelection } from './setting-sources-gate-DFu51i50.js';
+export { C as CompatSurface, a as GatedCompatSource, G as GatedSettingSource, P as ProjectSettingsGrant, R as ResolvedCompatSource, b as SettingSourceCapability, U as UntrustedSettingSourceError, r as resolveCompatSources, c as resolveSettingSources } from './setting-sources-gate-DFu51i50.js';
+import { L as LoopStrategy, R as ReflectionStrategy, b as RoundStreamFactory, S as StreamEvent, c as DelegationResult } from './delegation-scoring-BzJEheml.js';
+export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, j as DEFAULT_MAX_ITERATIONS, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, p as LoopFinishReason, q as LoopOutcome, r as LoopStrategyConfig, P as PartialToolCallEvent, s as ReflectionContext, t as ReflectionResult, u as ReflectionStrategyConfig, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, Z as ladderReflectionStrategy, _ as loopStrategyConfigSchema, $ as noopReflectionStrategy, a0 as presentUIMessageStream, a1 as reflectionStrategyConfigSchema, a2 as resolveLoopStrategy, a3 as streamAgentResponse } from './delegation-scoring-BzJEheml.js';
+export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, c as compileAgentDefinition, i as isAgentDefinition } from './define-agent-DhwNmdej.js';
 import { RetryOptions } from '@theokit/sdk/retry';
 export * from '@theokit/sdk/retry';
+export { RetryOptions } from '@theokit/sdk/retry';
 import { CompressibleMessage } from '@theokit/sdk/compaction';
 export { CONTEXT_WINDOW_FLOOR, CONTEXT_WINDOW_MARGIN, CompressibleMessage, ContextWindowMarginError, ContextWindowSource, EffectiveContextWindow, resolveEffectiveContextWindow } from '@theokit/sdk/compaction';
 import { z } from 'zod';
@@ -23,7 +26,7 @@ export * from '@theokit/sdk/concurrency';
 export * from '@theokit/sdk/messages';
 export * from '@theokit/sdk/models';
 import { DiscoverSubagentsOptions } from '@theokit/sdk/subagents-loader';
-export { AgentDefinition as SubagentDefinition, discoverSubagents, loadSubagentDefinition } from '@theokit/sdk/subagents-loader';
+export { DiscoverSubagentsOptions, AgentDefinition as SubagentDefinition, discoverSubagents, loadSubagentDefinition } from '@theokit/sdk/subagents-loader';
 export { H as HookHandlers } from './hook-handlers-Cw2FsnE5.js';
 import { WireChunk } from '@theokit/presenter/wire';
 export { WireChunk, WireDataPart } from '@theokit/presenter/wire';
@@ -80,19 +83,22 @@ declare function outputModeration(options: OutputModerationOptions): Guardrail;
 /**
  * M9 (theokit-ai-first) — the guardrail pipeline: apply guards in order at a boundary phase.
  *
- * Fail-fast (error-handling.md): a `block` throws {@link GuardrailViolationError} immediately.
- * A `redact` threads the transformed text into the next guard. Independent of the SDK runtime —
- * this runs at the framework boundary, before/after the SDK does its work.
+ * Fail-fast (error-handling.md): a `block` throws {@link GuardrailViolationError} immediately, and a
+ * `redact` with no replacement throws {@link MalformedGuardrailResultError} — B-008, where that case
+ * used to pass the original text through in silence. A well-formed `redact` threads its replacement
+ * into the next guard. Independent of the SDK runtime — this runs at the framework boundary.
  */
 
 /**
  * Run every guard's `checkInput` in order against `text`. Returns the (possibly redacted) text.
- * Throws {@link GuardrailViolationError} on the first `block`. Guards without `checkInput` are skipped.
+ * Throws on the first `block`, or on a `redact` that supplies no replacement. Guards without
+ * `checkInput` are skipped.
  */
 declare function runInputGuards(text: string, guards: readonly Guardrail[]): Promise<string>;
 /**
  * Run every guard's `checkOutput` in order against `text`. Returns the (possibly redacted) text.
- * Throws {@link GuardrailViolationError} on the first `block`. Guards without `checkOutput` are skipped.
+ * Throws on the first `block`, or on a `redact` that supplies no replacement. Guards without
+ * `checkOutput` are skipped.
  */
 declare function runOutputGuards(text: string, guards: readonly Guardrail[]): Promise<string>;
 
@@ -102,8 +108,104 @@ declare function runOutputGuards(text: string, guards: readonly Guardrail[]): Pr
  * @param inner       the source stream (yields events, returns a result).
  * @param guards      the guardrails; only those with `checkOutput` participate.
  * @param extractText pulls the human-visible text out of an event (return `undefined` for non-text).
+ * @param rebuildText builds ONE event carrying the moderated text, GIVEN the text-carrying event it
+ *                    replaces. Required, not optional (B-012): optional would let this function
+ *                    compute a redaction it cannot apply, which is the defect it was added to remove.
+ *
+ *                    **`extractText` MUST match exactly one event kind.** This is the parameter's
+ *                    real contract and it is a constraint, not a convenience.
+ *
+ *                    When it matches several, they COLLAPSE INTO ONE. Measured against the built
+ *                    artifact: `[thinking('CoT: the key is sk-abc'), message(' Here you go.')]`
+ *                    yields a single `message` reading `"CoT: the key is [R] Here you go."` — the
+ *                    model's private reasoning inside a visible event, and no `thinking` event
+ *                    survives. Reverse the order and the visible answer is swallowed into a
+ *                    `thinking` event instead.
+ *
+ *                    `replaced` does NOT prevent that, and an earlier version of this docblock, of
+ *                    the changeset and of a test comment all said it did. What it buys is narrower
+ *                    and worth having: the surviving event keeps the KIND and the metadata of the
+ *                    text-carrying event it replaces, instead of being rebuilt from the text alone.
+ *                    Without it, `[thinking, message]` collapsed into whatever kind `rebuildText`
+ *                    hard-coded; with it, the caller chooses. The collapse itself is unchanged.
+ *
+ *                    So a consumer who wants reasoning moderated must run a SECOND
+ *                    `moderateOutputStream` over that kind, not widen one `extractText` to cover
+ *                    both.
+ *
+ *                    `replaced` is ALWAYS an event, and used to be typed `E | undefined` for a case
+ *                    that cannot happen. The absence check below returns before `runOutputGuards` is
+ *                    ever called when no event carried text, so by the time `rebuildText` runs there
+ *                    is always a text-carrying event to replace. Proof, from the accumulation loop:
+ *                    `accumulated` grows only inside `if (text !== undefined)`, and `textAt` records
+ *                    that same predicate — so `!textAt.includes(true)` implies `accumulated === ''`,
+ *                    the absence check fires, and everything after it has `textAt.includes(true)`.
+ *                    The package's own test already pinned the opposite of the old wording
+ *                    (`rebuildText is never called for a channel that is not there`), and three
+ *                    shipping artifacts described the unreachable case as a live one.
+ *
+ *                    Note the boundary that IS real — an event whose extracted text is the EMPTY
+ *                    STRING is still text-carrying, and can be the one replaced. For
+ *                    `[text('secret'), text('')]` the moderated string lands on the trailing empty
+ *                    delta, so a `{ ...replaced }` caller inherits the terminator's metadata rather
+ *                    than the content-bearing event's.
+ * @param rebuildResult applies the moderated text to the generator's RETURN value.
+ *
+ *                      A stream has two channels and this function moderated one of them for a
+ *                      release. The events were redacted; `step.value` — the aggregate a caller
+ *                      reads from `run()`, or from the generator's return — was accumulated
+ *                      upstream from the PRE-moderation events and carried the original text.
+ *                      Measured against the built artifact: the guard computed `"the key is [R]"`
+ *                      and `run().response` was `"the key is sk-abc123"`.
+ *
+ *                      That is this function's own defect, verbatim, one channel over: the
+ *                      redaction was computed and not applied. Required for the same reason
+ *                      `rebuildText` is — optional would restore it under a nicer name — and
+ *                      passed rather than re-derived, because re-running `runOutputGuards` on the
+ *                      aggregate would apply a non-idempotent guard twice (a disclaimer appender
+ *                      would append two disclaimers).
+ *
+ *                      Return `result` unchanged when it carries no moderated text. That is
+ *                      correct and not a no-op only in that case; when it DOES carry the text,
+ *                      returning it unchanged drops the redaction, and no type can tell the two
+ *                      apart.
+ *
  */
-declare function moderateOutputStream<E, R>(inner: AsyncGenerator<E, R>, guards: readonly Guardrail[], extractText: (event: E) => string | undefined): AsyncGenerator<E, R>;
+declare function moderateOutputStream<E, R>(inner: AsyncGenerator<E, R>, guards: readonly Guardrail[], extractText: (event: E) => string | undefined, rebuildText: (text: string, replaced: E) => E, rebuildResult: (text: string, result: R) => R): AsyncGenerator<E, R>;
+/**
+ * The `extractText` for an event kind that announces itself as text — one implementation, used by
+ * every seam that moderates a stream.
+ *
+ * B-021 existed because there were two hand-written copies of `typeof e.content === 'string'`, in
+ * `AgentRunner.stream()` and in the served endpoint, and both returned `undefined` for a non-string.
+ * `moderateOutputStream` reads `undefined` as "this event carries no text", so the payload was never
+ * accumulated, never shown to a guard, and yielded verbatim — the DELIVER direction, with a guard
+ * declared to stop exactly that.
+ *
+ * Two different questions were collapsed into one answer:
+ *
+ * | The event | What the extractor must say |
+ * |---|---|
+ * | another kind entirely | `undefined` — not this channel |
+ * | this kind, content readable | the text |
+ * | this kind, content unreadable | **throw** — a guard cannot examine it |
+ *
+ * The third row is the one that was missing, and it cannot be expressed by a return value that also
+ * means "not this kind". Refused rather than coerced: coercing would moderate `"[object Object]"`,
+ * consulting a guard about a string the model never produced while the real payload rides along
+ * underneath.
+ *
+ * Reachable in practice rather than in theory — `StreamEvent` is `{ type: string; [key: string]:
+ * unknown }`, `event-translator.ts` casts an unvalidated provider content block to `{ text?: string
+ * }`, and a consumer-supplied `streamFactory` is a public option.
+ *
+ * Only consulted when a guard defines `checkOutput`: {@link moderateOutputStream} is a transparent
+ * pass-through otherwise, so an agent that declared no guard never meets this error however
+ * malformed the stream is.
+ */
+declare function textPayloadExtractor<E extends {
+    type?: unknown;
+}>(kind: string, read: (event: E) => unknown): (event: E) => string | undefined;
 
 /**
  * TranscriptCompactionStrategy — a named, callable transcript-compaction authoring layer
@@ -690,6 +792,24 @@ declare class GuardrailsCapability extends FieldCapability<'guardrails'> {
  * `'filesystem'` selects the SDK's durable store, so any other storage cannot resume across
  * requests. The warning moves WITH the feature — a declared checkpoint that silently cannot resume
  * is exactly the kind of no-op this project refuses to ship.
+ *
+ * ## This is RUN-STATE checkpointing. It is not file undo, and the name is shared (B-059)
+ *
+ * What this saves is the conversation: enough to RESUME a run. It does not snapshot the files an
+ * agent edited and cannot restore one.
+ *
+ * The distinction is written here because the word is the whole problem. Measured 2026-09-11:
+ * `rewindFiles`, `rewind_files`, `restoreFile` and `backup` return 0 files in this package, 0 in the
+ * SDK's `.d.ts` and 0 in `@theokit/sdk-tools`, while `checkpoint` returns six — all of them this
+ * subject. **Any parity checklist that greps for `checkpoint` is satisfied by the wrong one**, and
+ * reports a capability that does not exist.
+ *
+ * So a consumer building an interactive coding agent implements snapshot and restore themselves.
+ * There is no pre-write seam on the edit tools to hang it on either, which is the part that makes it
+ * a feature rather than a wiring job — and the reason it is stated here instead of half-built.
+ *
+ * Pinned by `tests/unit/run-state-checkpointing-is-not-file-undo.test.ts`, which goes red if a file
+ * surface ever appears — at which point this section should go with it.
  */
 declare class CheckpointCapability implements Capability {
     private readonly options;
@@ -711,6 +831,25 @@ declare class HumanInTheLoopCapability extends FieldCapability<'hitl'> {
  * draft (`createDraft` gives it `{}`), so a `setOnce` would conflict against the seed itself — the
  * same trap the pre-seeded `stream` sprang in M52. Merging also lets a preset declare a baseline
  * child set that a call site extends.
+ *
+ * ## How far this reaches
+ *
+ * **What it populates IS projected into `Agent.create`.** `assembleM8CreateOptions` forwards
+ * `compiled.agents` to `Agent.create({ agents })`, so declaring a sub-agent through this capability
+ * spawns one.
+ *
+ * That was not true until B-034. `M8CreateOptions` had no `agents` field, `agent-compiler.ts`
+ * recorded the gap as ADR D3 — "a resolver here is carried, not invoked" — and declaring a sub-agent
+ * through this capability compiled cleanly and spawned nothing, while the class crossed the public
+ * barrel alongside `SubagentDefinition`, `discoverSubagents`, `loadSubagentDefinition` and
+ * `listSubagentNames`. A consumer read the barrel, assembled the authoring chain and met silence:
+ * the "the type crossed, the capability did not" shape `bridge/index.ts` names four times by issue
+ * number. The deferral was a decision; the consumer discovering it at runtime was not.
+ *
+ * The children are SDK `AgentDefinition`s (`SubagentDefinition` on the barrel), the same shape the
+ * per-run door `RuntimeOverrides.agents` always took. A per-run value still WINS over this one —
+ * `sdk-adapter.ts` spreads `...m8, ...extra`, and a per-run override that lost to a compile-time
+ * value would be the opposite of what "override" promises.
  */
 declare class SubAgentsCapability implements Capability {
     private readonly children;
@@ -754,6 +893,42 @@ declare class HookApprovalCapability extends FieldCapability<'hookApproval'> {
     readonly name = "hook-approval";
     protected readonly field: "hookApproval";
 }
+/**
+ * B-060 — `sessionStore`, the store the SDK resumes from.
+ *
+ * A `FieldCapability` like its neighbours: one field, set once. There is nothing to merge — two
+ * declared stores is a contradiction about where history lives, not a composition.
+ */
+declare class SessionStoreCapability extends FieldCapability<'sessionStore'> {
+    readonly name = "session-store";
+    protected readonly field: "sessionStore";
+}
+/**
+ * B-056 — `canUseTool`, the seam that sees an `ask` verdict.
+ *
+ * A `FieldCapability`: one gate, set once. Two gates would be two answers to one question, and
+ * composing them would mean inventing a precedence nobody declared.
+ */
+declare class CanUseToolCapability extends FieldCapability<'canUseTool'> {
+    readonly name = "can-use-tool";
+    protected readonly field: "canUseTool";
+}
+/**
+ * B-072 — OpenTelemetry settings, the door onto a tracer the SDK already runs.
+ *
+ * A `FieldCapability` because telemetry is one setting block set once: two of them would be two
+ * answers to "which service name do these spans carry", and composing them would mean inventing a
+ * precedence nobody declared — the same reasoning `CanUseToolCapability` records above.
+ *
+ * It exists because the waist gained `telemetry` and `capability-zero-behavior.test.ts` refuses to
+ * compile while a waist field has no capability expressing it. That gate is the reason this is a
+ * whole door rather than half of one: the projection alone would have let `defineAgent` reach the
+ * SDK while the capability path could not, and the two paths are asserted deep-equal.
+ */
+declare class TelemetryCapability extends FieldCapability<'telemetry'> {
+    readonly name = "telemetry";
+    protected readonly field: "telemetry";
+}
 declare class PluginsCapability extends FieldCapability<'plugins'> {
     readonly name = "plugins";
     protected readonly field: "plugins";
@@ -1375,4 +1550,4 @@ type AgentWithNarrowedList = Omit<typeof Agent$1, 'list'> & {
 type AgentWithNarrowedListAlias = AgentWithNarrowedList;
 declare const Agent: AgentWithNarrowedList;
 
-export { type A2AAuth, type A2ACapabilities, type A2ASkill, type A2AToolConfig, AcpClient, AcpMessageDecoder, type AcpTransport, Agent, type AgentCard, type AgentConfig, AgentConfigCapability, AgentManifestEntry, AgentModule, AgentRunner, AgentRunnerBuilder, type AgentRunnerRunOptions, type AgentShape, type AgentWithNarrowedListAlias, ApprovalOptions, ApprovalPosture, type BuildAgentCardOptions, type Capability, CapabilityConflictError, CapabilityPreset, CapabilityRegistry, CheckpointCapability, type CompactionCallOptions, type CompactionStrategyConfig, CompiledAgentOptions, type CompiledAgentOptionsDraft, CompiledTool, ContextWindowCapability, type CostGuardOptions, DEFAULT_KEEP_TOKENS, DelegationResult, FieldCapability, type FinalizedDraft, GoalRunner, type GoalRunnerDeps, Guardrail, GuardrailsCapability, HitlDecision, HookApprovalCapability, HumanInTheLoopCapability, HumanInTheLoopOptions, type InProcessApprovalRequest, InProcessApprovalRequiredError, type InProcessAwaitApproval, type ListOptionsWithoutPaginationAlias, LoopStrategy, MCP_PROTOCOL_VERSION, MainLoopCapability, MainLoopMeta, type McpJsonSchema, type McpServerInfo, McpServersCapability, type McpToolDescriptor, MemoryCapability, ModelCapability, type NamedTool, type OutputModerationOptions, type PiiOptions, PluginsCapability, ProjectContextCapability, type PromptInjectionOptions, type ProvenanceEntry, ReasoningEffort, ReflectionStrategy, RoundStreamFactory, RunContextCapability, SettingSourcesCapability, SettingSourcesSelection, SkillsCapability, SkillsOptionsCapability, SkillsResolverCapability, type StreamAgentTurnDeps, type StreamAgentTurnInProcessInput, StreamEvent, SubAgentsCapability, type Summarize, type ToolComNome, type ToolDeclaration, ToolOptions, ToolboxCapability, type ToolboxSource, ToolsCapability, Toolset, ToolsetError, type TranscriptCompactionStrategy, UnknownCapabilityError, applyCapabilities, buildAgentCard, buildMcpToolDescriptors, compactionStrategyConfigSchema, costGuard, createA2ATool, createDraft, declareAgentShape, deriveConversationId, encodeAcpMessage, estimateTokens, formatGoalEvent, listSubagentNames, mcpServerInfo, moderateOutputStream, outputModeration, parseConversationId, piiDetector, promptInjectionDetector, resolveCompactionStrategy, runInputGuards, runOutputGuards, setOnce, streamAgentTurnInProcess, streamAgentUIMessages, tokenBudgetCompactionStrategy, unicodeNormalizer, wellKnownCardPath };
+export { type A2AAuth, type A2ACapabilities, type A2ASkill, type A2AToolConfig, AcpClient, AcpMessageDecoder, type AcpTransport, Agent, type AgentCard, type AgentConfig, AgentConfigCapability, AgentManifestEntry, AgentModule, AgentRunner, AgentRunnerBuilder, type AgentRunnerRunOptions, type AgentShape, type AgentWithNarrowedListAlias, ApprovalOptions, ApprovalPosture, type BuildAgentCardOptions, CanUseToolCapability, type Capability, CapabilityConflictError, CapabilityPreset, CapabilityRegistry, CheckpointCapability, type CompactionCallOptions, type CompactionStrategyConfig, CompiledAgentOptions, type CompiledAgentOptionsDraft, CompiledTool, ContextWindowCapability, ContextWindowOptions, type CostGuardOptions, DEFAULT_KEEP_TOKENS, DelegationResult, FieldCapability, type FinalizedDraft, GoalRunner, type GoalRunnerDeps, Guardrail, GuardrailsCapability, HitlDecision, HookApprovalCapability, HumanInTheLoopCapability, HumanInTheLoopOptions, type InProcessApprovalRequest, InProcessApprovalRequiredError, type InProcessAwaitApproval, type ListOptionsWithoutPaginationAlias, LoopStrategy, MCP_PROTOCOL_VERSION, MainLoopCapability, MainLoopMeta, type McpJsonSchema, type McpServerInfo, McpServersCapability, type McpToolDescriptor, MemoryCapability, ModelCapability, type NamedTool, type OutputModerationOptions, type PiiOptions, PluginsCapability, ProjectContextCapability, type PromptInjectionOptions, type ProvenanceEntry, ReasoningEffort, ReflectionStrategy, RoundStreamFactory, RunContextCapability, SessionStoreCapability, SettingSourcesCapability, SettingSourcesSelection, SkillsCapability, SkillsOptions, SkillsOptionsCapability, SkillsResolverCapability, type StreamAgentTurnDeps, type StreamAgentTurnInProcessInput, StreamEvent, SubAgentsCapability, type Summarize, TelemetryCapability, type ToolComNome, type ToolDeclaration, ToolOptions, ToolboxCapability, type ToolboxSource, ToolsCapability, Toolset, ToolsetError, type TranscriptCompactionStrategy, UnknownCapabilityError, applyCapabilities, buildAgentCard, buildMcpToolDescriptors, compactionStrategyConfigSchema, costGuard, createA2ATool, createDraft, declareAgentShape, deriveConversationId, encodeAcpMessage, estimateTokens, formatGoalEvent, listSubagentNames, mcpServerInfo, moderateOutputStream, outputModeration, parseConversationId, piiDetector, promptInjectionDetector, resolveCompactionStrategy, runInputGuards, runOutputGuards, setOnce, streamAgentTurnInProcess, streamAgentUIMessages, textPayloadExtractor, tokenBudgetCompactionStrategy, unicodeNormalizer, wellKnownCardPath };