@theokit/agents 7.4.2 → 7.6.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 usetheo.dev
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/auth.d.ts

@@ -1,5 +1,5 @@
 import { OAuthProviderConfig, CredentialStoreConfig, ResolvedCredential, ensureFreshCredential, OpenAIDeviceConfig, openaiDeviceLogin, OAuthTokens, DeviceDeps } from '@theokit/sdk/auth';
-export { CredentialError, CredentialStoreConfig, DeviceCodeGrant, DeviceDeps, DeviceOAuthConfig, OAuthProviderConfig, OAuthTokens, OpenAIDeviceConfig, ResolveCredentialOptions, ResolvedCredential, authFilePath, credentialHome, deviceLogin, ensureFreshCredential, extractAccountId, openaiDeviceLogin, persistOAuthTokens, pollDeviceToken, readAuthFile, readStoredOAuth, refreshOAuthTokens, requestDeviceCode, writeCredential } from '@theokit/sdk/auth';
+export { CredentialError, CredentialStoreConfig, DeviceCodeGrant, DeviceDeps, DeviceOAuthConfig, OAuthProviderConfig, OAuthTokens, OpenAIDeviceConfig, ResolveCredentialOptions, ResolvedCredential, assertSecureModes, authFilePath, credentialHome, deviceLogin, ensureFreshCredential, extractAccountId, openaiDeviceLogin, persistOAuthTokens, pollDeviceToken, readAuthFile, readStoredOAuth, refreshOAuthTokens, requestDeviceCode, writeCredential } from '@theokit/sdk/auth';
 
 /**
  * M60 — `AuthProvider`, the OO contract that unifies the SDK's free OAuth-lifecycle functions

package/dist/auth.js

@@ -1,19 +1,19 @@
-// src/auth/auth-provider.ts
 import {
-  authFilePath,
-  ensureFreshCredential,
-  openaiDeviceLogin,
-  persistOAuthTokens,
-  readStoredOAuth
-} from "@theokit/sdk/auth";
+  __name
+} from "./chunk-Z4QWC7IK.js";
+
+// src/auth/auth-provider.ts
+import { authFilePath, ensureFreshCredential, openaiDeviceLogin, persistOAuthTokens, readStoredOAuth } from "@theokit/sdk/auth";
 import { withFileLock } from "@theokit/sdk/persistence";
 var RefreshFailure = class extends Error {
+  static {
+    __name(this, "RefreshFailure");
+  }
+  transient;
   constructor(message, transient) {
-    super(message);
-    this.transient = transient;
+    super(message), this.transient = transient;
     this.name = "RefreshFailure";
   }
-  transient;
 };
 var TRANSIENT_REASONS = [
   "ETIMEDOUT",
@@ -26,36 +26,39 @@ var TRANSIENT_REASONS = [
 function classifyRefreshFailure(err) {
   const text = err instanceof Error ? `${err.name}: ${err.message}` : String(err);
   if (/invalid_grant|invalid_request|unauthorized_client/i.test(text)) {
-    return new RefreshFailure(
-      "the refresh token is no longer valid \u2014 log in again. Retrying does not change the outcome.",
-      false
-    );
+    return new RefreshFailure("the refresh token is no longer valid \u2014 log in again. Retrying does not change the outcome.", false);
   }
   const transient = TRANSIENT_REASONS.some((m) => text.includes(m)) || /\b(5\d{2})\b|timeout|network/i.test(text);
-  return new RefreshFailure(
-    transient ? "transient failure refreshing the credential" : "failure refreshing the credential",
-    transient
-  );
+  return new RefreshFailure(transient ? "transient failure refreshing the credential" : "failure refreshing the credential", transient);
 }
+__name(classifyRefreshFailure, "classifyRefreshFailure");
 function waitWithJitter(attempt, baseMs = 200, random = Math.random) {
   const base = baseMs * 2 ** attempt;
   return Math.round(base * (0.75 + random() * 0.5));
 }
+__name(waitWithJitter, "waitWithJitter");
 var AuthProvider = class _AuthProvider {
+  static {
+    __name(this, "AuthProvider");
+  }
+  config;
+  store;
   constructor(config, store) {
     this.config = config;
     this.store = store;
   }
-  config;
-  store;
   /**
-   * Refresh a resolved credential if stale. Delegates to `ensureFreshCredential` with the held
-   * `config` + `store`; `env` (for reading the store's env overrides) + the `{ fetch, now }` HTTP deps
-   * thread through. Returns the fresh `ResolvedCredential` — never logs the rotated token.
-   */
+  * Refresh a resolved credential if stale. Delegates to `ensureFreshCredential` with the held
+  * `config` + `store`; `env` (for reading the store's env overrides) + the `{ fetch, now }` HTTP deps
+  * thread through. Returns the fresh `ResolvedCredential` — never logs the rotated token.
+  */
   async ensureFresh(resolved, deps, env) {
     if (resolved.kind !== "oauth") {
-      return ensureFreshCredential(resolved, { config: this.config, store: this.store, env }, deps);
+      return ensureFreshCredential(resolved, {
+        config: this.config,
+        store: this.store,
+        env
+      }, deps);
     }
     const filePath = authFilePath(this.store, env);
     const inFlight = _AuthProvider.refreshInFlight.get(filePath);
@@ -71,25 +74,29 @@ var AuthProvider = class _AuthProvider {
   /** In-flight refresh per store path — the key is the file, not the instance. */
   static refreshInFlight = /* @__PURE__ */ new Map();
   /**
-   * The refresh itself, serialized across PROCESSES and with a re-read.
-   *
-   * The re-read is not a detail: without it the lock merely serializes, and the second process
-   * decides using the state it read BEFORE waiting — refreshing again and invalidating the token the
-   * first one just wrote. It is classic double-checked locking, and it is what the two-process test
-   * catches.
-   */
+  * The refresh itself, serialized across PROCESSES and with a re-read.
+  *
+  * The re-read is not a detail: without it the lock merely serializes, and the second process
+  * decides using the state it read BEFORE waiting — refreshing again and invalidating the token the
+  * first one just wrote. It is classic double-checked locking, and it is what the two-process test
+  * catches.
+  */
   refreshUnderLock(filePath, resolved, deps, env) {
     return withFileLock(filePath, async () => {
       const doDisco = readStoredOAuth(this.store, env);
-      const current = doDisco !== void 0 ? { ...resolved, apiKey: doDisco.access, expiresAt: doDisco.expires } : resolved;
+      const current = doDisco !== void 0 ? {
+        ...resolved,
+        apiKey: doDisco.access,
+        expiresAt: doDisco.expires
+      } : resolved;
       const MAX_ATTEMPTS = 3;
       for (let attempt = 0; ; attempt++) {
         try {
-          return await ensureFreshCredential(
-            current,
-            { config: this.config, store: this.store, env },
-            deps
-          );
+          return await ensureFreshCredential(current, {
+            config: this.config,
+            store: this.store,
+            env
+          }, deps);
         } catch (err) {
           const failure = classifyRefreshFailure(err);
           if (!failure.transient || attempt >= MAX_ATTEMPTS - 1) throw failure;
@@ -99,43 +106,26 @@ var AuthProvider = class _AuthProvider {
     });
   }
   /**
-   * Run the headless OpenAI device-login flow. Delegates to `openaiDeviceLogin` (which JWT-extracts the
-   * account id). `deviceConfig` is passed per-call because it is a distinct endpoint set from the
-   * refresh `config`. Returns `OAuthTokens` — the caller persists them via {@link AuthProvider.persist}.
-   */
+  * Run the headless OpenAI device-login flow. Delegates to `openaiDeviceLogin` (which JWT-extracts the
+  * account id). `deviceConfig` is passed per-call because it is a distinct endpoint set from the
+  * refresh `config`. Returns `OAuthTokens` — the caller persists them via {@link AuthProvider.persist}.
+  */
   deviceLogin(deviceConfig, deps, hooks) {
     return openaiDeviceLogin(deviceConfig, deps, hooks);
   }
   /**
-   * Persist freshly-obtained tokens through the held `store`. Delegates to `persistOAuthTokens` and
-   * returns the credential-file path (never the token). `env` selects the store's home override.
-   */
+  * Persist freshly-obtained tokens through the held `store`. Delegates to `persistOAuthTokens` and
+  * returns the credential-file path (never the token). `env` selects the store's home override.
+  */
   persist(provider, tokens, env) {
     return persistOAuthTokens(provider, tokens, this.store, env);
   }
 };
 
 // src/auth-entry.ts
-import {
-  authFilePath as authFilePath2,
-  CredentialError,
-  credentialHome,
-  readAuthFile,
-  readStoredOAuth as readStoredOAuth2,
-  writeCredential
-} from "@theokit/sdk/auth";
-import {
-  deviceLogin,
-  openaiDeviceLogin as openaiDeviceLogin3,
-  pollDeviceToken,
-  requestDeviceCode
-} from "@theokit/sdk/auth";
-import {
-  ensureFreshCredential as ensureFreshCredential2,
-  extractAccountId,
-  persistOAuthTokens as persistOAuthTokens2,
-  refreshOAuthTokens
-} from "@theokit/sdk/auth";
+import { assertSecureModes, authFilePath as authFilePath2, CredentialError, credentialHome, readAuthFile, readStoredOAuth as readStoredOAuth2, writeCredential } from "@theokit/sdk/auth";
+import { deviceLogin, openaiDeviceLogin as openaiDeviceLogin3, pollDeviceToken, requestDeviceCode } from "@theokit/sdk/auth";
+import { ensureFreshCredential as ensureFreshCredential2, extractAccountId, persistOAuthTokens as persistOAuthTokens2, refreshOAuthTokens } from "@theokit/sdk/auth";
 
 // src/auth/device-provider.ts
 import { openaiDeviceLogin as openaiDeviceLogin2 } from "@theokit/sdk/auth";
@@ -147,7 +137,12 @@ var CODEX_OAUTH = {
   clientId: process.env[CODEX_CLIENT_ID_ENV_VAR] ?? CODEX_CLIENT_ID,
   authorizeEndpoint: `${CODEX_ISSUER}/oauth/authorize`,
   tokenEndpoint: `${CODEX_ISSUER}/oauth/token`,
-  scopes: ["openid", "profile", "email", "offline_access"],
+  scopes: [
+    "openid",
+    "profile",
+    "email",
+    "offline_access"
+  ],
   redirectUri: `${CODEX_ISSUER}/deviceauth/callback`
 };
 var CODEX_DEVICE = {
@@ -165,7 +160,7 @@ var CODEX_PROVIDER = Object.freeze({
       type: "oauth",
       // Points at OpenAI's variant. An RFC 8628 provider would point at `deviceLogin`, and that is
       // how the two shapes coexist with no discriminant.
-      authorize: (deps, hooks) => openaiDeviceLogin2(CODEX_DEVICE, deps, hooks)
+      authorize: /* @__PURE__ */ __name((deps, hooks) => openaiDeviceLogin2(CODEX_DEVICE, deps, hooks), "authorize")
     }),
     Object.freeze({
       label: "Manually enter API Key",
@@ -180,29 +175,33 @@ function comDefaults(deps) {
     now: deps?.now ?? Date.now
   };
 }
+__name(comDefaults, "comDefaults");
 async function loginWithDevice(provider, method, store, hooks, opts = {}) {
   if (provider.methods.length === 0) {
-    throw new TypeError(
-      `provider "${provider.name}" declares no authentication method \u2014 there is nothing to choose`
-    );
+    throw new TypeError(`provider "${provider.name}" declares no authentication method \u2014 there is nothing to choose`);
   }
   if (!provider.methods.includes(method)) {
     throw new TypeError(`method "${method.label}" does not belong to provider "${provider.name}"`);
   }
   if (method.type !== "oauth") {
-    throw new TypeError(
-      `method "${method.label}" is an api-key method, not a device method \u2014 use the api-key path`
-    );
+    throw new TypeError(`method "${method.label}" is an api-key method, not a device method \u2014 use the api-key path`);
   }
   const tokens = await method.authorize(comDefaults(opts.deps), hooks);
   const path = new AuthProvider(provider.oauth, store).persist(provider.name, tokens, opts.env);
-  return tokens.accountId === void 0 ? { path } : { path, accountId: tokens.accountId };
+  return tokens.accountId === void 0 ? {
+    path
+  } : {
+    path,
+    accountId: tokens.accountId
+  };
 }
+__name(loginWithDevice, "loginWithDevice");
 export {
   AuthProvider,
   CODEX_CLIENT_ID_ENV_VAR,
   CODEX_PROVIDER,
   CredentialError,
+  assertSecureModes,
   authFilePath2 as authFilePath,
   credentialHome,
   deviceLogin,

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth/auth-provider.ts","../src/auth-entry.ts","../src/auth/device-provider.ts"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP,SAAS,oBAAoB;AAkCtB,IAAM,iBAAN,cAA6B,MAAM;AAAA,EACxC,YACE,SAES,WACT;AACA,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EAJW;AAKb;AAMA,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,SAAS,uBAAuB,KAA8B;AACnE,QAAM,OAAO,eAAe,QAAQ,GAAG,IAAI,IAAI,KAAK,IAAI,OAAO,KAAK,OAAO,GAAG;AAC9E,MAAI,qDAAqD,KAAK,IAAI,GAAG;AACnE,WAAO,IAAI;AAAA,MACT;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,YACJ,kBAAkB,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,KAAK,gCAAgC,KAAK,IAAI;AAC9F,SAAO,IAAI;AAAA,IACT,YAAY,gDAAgD;AAAA,IAC5D;AAAA,EACF;AACF;AAGO,SAAS,eAAe,SAAiB,SAAS,KAAK,SAAS,KAAK,QAAgB;AAC1F,QAAM,OAAO,SAAS,KAAK;AAC3B,SAAO,KAAK,MAAM,QAAQ,OAAO,OAAO,IAAI,IAAI;AAClD;AAEO,IAAM,eAAN,MAAM,cAAa;AAAA,EACxB,YACmB,QACA,OACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQnB,MAAM,YACJ,UACA,MACA,KAC6B;AAC7B,QAAI,SAAS,SAAS,SAAS;AAI7B,aAAO,sBAAsB,UAAU,EAAE,QAAQ,KAAK,QAAQ,OAAO,KAAK,OAAO,IAAI,GAAG,IAAI;AAAA,IAC9F;AAEA,UAAM,WAAmB,aAAa,KAAK,OAAO,GAAG;AAUrD,UAAM,WAAW,cAAa,gBAAgB,IAAI,QAAQ;AAC1D,QAAI,aAAa,OAAW,QAAO;AAEnC,UAAM,UAAU,KAAK,iBAAiB,UAAU,UAAU,MAAM,GAAG;AACnE,kBAAa,gBAAgB,IAAI,UAAU,OAAO;AAClD,QAAI;AACF,aAAO,MAAM;AAAA,IACf,UAAE;AACA,oBAAa,gBAAgB,OAAO,QAAQ;AAAA,IAC9C;AAAA,EACF;AAAA;AAAA,EAGA,OAAwB,kBAAkB,oBAAI,IAAyC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAU/E,iBACN,UACA,UACA,MACA,KAC6B;AAE7B,WAAO,aAAa,UAAU,YAAY;AAExC,YAAM,UAAU,gBAAgB,KAAK,OAAO,GAAG;AAC/C,YAAM,UACJ,YAAY,SACR,EAAE,GAAG,UAAU,QAAQ,QAAQ,QAAQ,WAAW,QAAQ,QAAQ,IAClE;AAQN,YAAM,eAAe;AACrB,eAAS,UAAU,KAAK,WAAW;AACjC,YAAI;AACF,iBAAO,MAAM;AAAA,YACX;AAAA,YACA,EAAE,QAAQ,KAAK,QAAQ,OAAO,KAAK,OAAO,IAAI;AAAA,YAC9C;AAAA,UACF;AAAA,QACF,SAAS,KAAK;AACZ,gBAAM,UAAU,uBAAuB,GAAG;AAC1C,cAAI,CAAC,QAAQ,aAAa,WAAW,eAAe,EAAG,OAAM;AAC7D,gBAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,eAAe,OAAO,CAAC,CAAC;AAAA,QAC7E;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EAEH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YACE,cACA,MACA,OACsB;AACtB,WAAO,kBAAkB,cAAc,MAAM,KAAK;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,UAAkB,QAAqB,KAAkD;AAC/F,WAAO,mBAAmB,UAAU,QAAQ,KAAK,OAAO,GAAG;AAAA,EAC7D;AACF;;;ACzLA;AAAA,EACE,gBAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,mBAAAC;AAAA,EACA;AAAA,OACK;AAsBP;AAAA,EACE;AAAA,EACA,qBAAAC;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAwBP;AAAA,EACE,yBAAAC;AAAA,EACA;AAAA,EACA,sBAAAC;AAAA,EACA;AAAA,OACK;;;ACjFP,SAAS,qBAAAC,0BAAyB;AA4ElC,IAAM,kBAAkB;AACxB,IAAM,eAAe;AAQd,IAAM,0BAA0B;AAEvC,IAAM,cAAmC;AAAA,EACvC,UAAU;AAAA,EACV,UAAU,QAAQ,IAAI,uBAAuB,KAAK;AAAA,EAClD,mBAAmB,GAAG,YAAY;AAAA,EAClC,eAAe,GAAG,YAAY;AAAA,EAC9B,QAAQ,CAAC,UAAU,WAAW,SAAS,gBAAgB;AAAA,EACvD,aAAa,GAAG,YAAY;AAC9B;AAMA,IAAM,eAAmC;AAAA,EACvC,GAAG;AAAA,EACH,wBAAwB,GAAG,YAAY;AAAA,EACvC,oBAAoB,GAAG,YAAY;AAAA,EACnC,iBAAiB,GAAG,YAAY;AAClC;AASO,IAAM,iBAAqC,OAAO,OAAO;AAAA,EAC9D,MAAM;AAAA,EACN,OAAO,OAAO,OAAO,WAAW;AAAA,EAChC,SAAS,OAAO,OAAO;AAAA,IACrB,OAAO,OAAO;AAAA,MACZ,OAAO;AAAA,MACP,MAAM;AAAA;AAAA;AAAA,MAGN,WAAW,CAAC,MAAkB,UAC5BC,mBAAkB,cAAc,MAAM,KAAK;AAAA,IAC/C,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,MACZ,OAAO;AAAA,MACP,MAAM;AAAA,IACR,CAAC;AAAA,EACH,CAAC;AACH,CAAC;AAeD,SAAS,YAAY,MAAwC;AAC3D,SAAO;AAAA,IACL,OAAO,MAAM,SAAS;AAAA,IACtB,OAAO,MAAM,UAAU,CAAC,OAAe,IAAI,QAAc,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAAA,IAC7F,KAAK,MAAM,OAAO,KAAK;AAAA,EACzB;AACF;AAeA,eAAsB,gBACpB,UACA,QACA,OACA,OACA,OAA+B,CAAC,GACe;AAI/C,MAAI,SAAS,QAAQ,WAAW,GAAG;AACjC,UAAM,IAAI;AAAA,MACR,aAAa,SAAS,IAAI;AAAA,IAC5B;AAAA,EACF;AACA,MAAI,CAAC,SAAS,QAAQ,SAAS,MAAM,GAAG;AACtC,UAAM,IAAI,UAAU,WAAW,OAAO,KAAK,kCAAkC,SAAS,IAAI,GAAG;AAAA,EAC/F;AACA,MAAI,OAAO,SAAS,SAAS;AAC3B,UAAM,IAAI;AAAA,MACR,WAAW,OAAO,KAAK;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,OAAO,UAAU,YAAY,KAAK,IAAI,GAAG,KAAK;AACnE,QAAM,OAAO,IAAI,aAAa,SAAS,OAAO,KAAK,EAAE,QAAQ,SAAS,MAAM,QAAQ,KAAK,GAAG;AAE5F,SAAO,OAAO,cAAc,SAAY,EAAE,KAAK,IAAI,EAAE,MAAM,WAAW,OAAO,UAAU;AACzF;","names":["authFilePath","readStoredOAuth","openaiDeviceLogin","ensureFreshCredential","persistOAuthTokens","openaiDeviceLogin","openaiDeviceLogin"]}
+{"version":3,"sources":["../src/auth/auth-provider.ts","../src/auth-entry.ts","../src/auth/device-provider.ts"],"mappings":";;;;;AAAA,SACEA,cACAC,uBACAC,mBACAC,oBACAC,uBACK;AAQP,SAASC,oBAAoB;AAkCtB,IAAMC,iBAAN,cAA6BC,MAAAA;EAhDpC,OAgDoCA;;;;EAClC,YACEC,SAESC,WACT;AACA,UAAMD,OAAAA,GAAAA,KAFGC,YAAAA;AAGT,SAAKC,OAAO;EACd;AACF;AAMA,IAAMC,oBAAoB;EACxB;EACA;EACA;EACA;EACA;EACA;;AAIK,SAASC,uBAAuBC,KAAY;AACjD,QAAMC,OAAOD,eAAeN,QAAQ,GAAGM,IAAIH,IAAI,KAAKG,IAAIL,OAAO,KAAKO,OAAOF,GAAAA;AAC3E,MAAI,qDAAqDG,KAAKF,IAAAA,GAAO;AACnE,WAAO,IAAIR,eACT,mGACA,KAAA;EAEJ;AACA,QAAMG,YACJE,kBAAkBM,KAAK,CAACC,MAAMJ,KAAKK,SAASD,CAAAA,CAAAA,KAAO,gCAAgCF,KAAKF,IAAAA;AAC1F,SAAO,IAAIR,eACTG,YAAY,gDAAgD,qCAC5DA,SAAAA;AAEJ;AAdgBG;AAiBT,SAASQ,eAAeC,SAAiBC,SAAS,KAAKC,SAASC,KAAKD,QAAM;AAChF,QAAME,OAAOH,SAAS,KAAKD;AAC3B,SAAOG,KAAKE,MAAMD,QAAQ,OAAOF,OAAAA,IAAW,IAAE;AAChD;AAHgBH;AAKT,IAAMO,eAAN,MAAMA,cAAAA;EA/Fb,OA+FaA;;;;;EACX,YACmBC,QACAC,OACjB;SAFiBD,SAAAA;SACAC,QAAAA;EAChB;;;;;;EAOH,MAAMC,YACJC,UACAC,MACAC,KAC6B;AAC7B,QAAIF,SAASG,SAAS,SAAS;AAI7B,aAAOC,sBAAsBJ,UAAU;QAAEH,QAAQ,KAAKA;QAAQC,OAAO,KAAKA;QAAOI;MAAI,GAAGD,IAAAA;IAC1F;AAEA,UAAMI,WAAmBC,aAAa,KAAKR,OAAOI,GAAAA;AAUlD,UAAMK,WAAWX,cAAaY,gBAAgBC,IAAIJ,QAAAA;AAClD,QAAIE,aAAaG,OAAW,QAAOH;AAEnC,UAAMI,UAAU,KAAKC,iBAAiBP,UAAUL,UAAUC,MAAMC,GAAAA;AAChEN,kBAAaY,gBAAgBK,IAAIR,UAAUM,OAAAA;AAC3C,QAAI;AACF,aAAO,MAAMA;IACf,UAAA;AACEf,oBAAaY,gBAAgBM,OAAOT,QAAAA;IACtC;EACF;;EAGA,OAAwBG,kBAAkB,oBAAIO,IAAAA;;;;;;;;;EAUtCH,iBACNP,UACAL,UACAC,MACAC,KAC6B;AAE7B,WAAOc,aAAaX,UAAU,YAAA;AAE5B,YAAMY,UAAUC,gBAAgB,KAAKpB,OAAOI,GAAAA;AAC5C,YAAMiB,UACJF,YAAYP,SACR;QAAE,GAAGV;QAAUoB,QAAQH,QAAQI;QAAQC,WAAWL,QAAQM;MAAQ,IAClEvB;AAQN,YAAMwB,eAAe;AACrB,eAASlC,UAAU,KAAKA,WAAW;AACjC,YAAI;AACF,iBAAO,MAAMc,sBACXe,SACA;YAAEtB,QAAQ,KAAKA;YAAQC,OAAO,KAAKA;YAAOI;UAAI,GAC9CD,IAAAA;QAEJ,SAASnB,KAAK;AACZ,gBAAM2C,UAAU5C,uBAAuBC,GAAAA;AACvC,cAAI,CAAC2C,QAAQ/C,aAAaY,WAAWkC,eAAe,EAAG,OAAMC;AAC7D,gBAAM,IAAIC,QAAQ,CAACC,YAAYC,WAAWD,SAAStC,eAAeC,OAAAA,CAAAA,CAAAA;QACpE;MACF;IACF,CAAA;EAEF;;;;;;EAOAuC,YACEC,cACA7B,MACA8B,OACsB;AACtB,WAAOC,kBAAkBF,cAAc7B,MAAM8B,KAAAA;EAC/C;;;;;EAMAE,QAAQC,UAAkBC,QAAqBjC,KAAkD;AAC/F,WAAOkC,mBAAmBF,UAAUC,QAAQ,KAAKrC,OAAOI,GAAAA;EAC1D;AACF;;;ACrLA,SACEmC,mBACAC,gBAAAA,eACAC,iBACAC,gBACAC,cACAC,mBAAAA,kBACAC,uBACK;AAsBP,SACEC,aACAC,qBAAAA,oBACAC,iBACAC,yBACK;AAwBP,SACEC,yBAAAA,wBACAC,kBACAC,sBAAAA,qBACAC,0BACK;;;ACtFP,SAASC,qBAAAA,0BAAyB;AA4ElC,IAAMC,kBAAkB;AACxB,IAAMC,eAAe;AAQd,IAAMC,0BAA0B;AAEvC,IAAMC,cAAmC;EACvCC,UAAU;EACVC,UAAUC,QAAQC,IAAIL,uBAAAA,KAA4BF;EAClDQ,mBAAmB,GAAGP,YAAAA;EACtBQ,eAAe,GAAGR,YAAAA;EAClBS,QAAQ;IAAC;IAAU;IAAW;IAAS;;EACvCC,aAAa,GAAGV,YAAAA;AAClB;AAMA,IAAMW,eAAmC;EACvC,GAAGT;EACHU,wBAAwB,GAAGZ,YAAAA;EAC3Ba,oBAAoB,GAAGb,YAAAA;EACvBc,iBAAiB,GAAGd,YAAAA;AACtB;AASO,IAAMe,iBAAqCC,OAAOC,OAAO;EAC9DC,MAAM;EACNC,OAAOH,OAAOC,OAAOf,WAAAA;EACrBkB,SAASJ,OAAOC,OAAO;IACrBD,OAAOC,OAAO;MACZI,OAAO;MACPC,MAAM;;;MAGNC,WAAW,wBAACC,MAAkBC,UAC5BC,mBAAkBf,cAAca,MAAMC,KAAAA,GAD7B;IAEb,CAAA;IACAT,OAAOC,OAAO;MACZI,OAAO;MACPC,MAAM;IACR,CAAA;GACD;AACH,CAAA;AAeA,SAASK,YAAYH,MAA0B;AAC7C,SAAO;IACLI,OAAOJ,MAAMI,SAASA;IACtBC,OAAOL,MAAMK,UAAU,CAACC,OAAe,IAAIC,QAAc,CAACC,YAAYC,WAAWD,SAASF,EAAAA,CAAAA;IAC1FI,KAAKV,MAAMU,OAAOC,KAAKD;EACzB;AACF;AANSP;AAqBT,eAAsBS,gBACpBjC,UACAkC,QACAC,OACAb,OACAc,OAA+B,CAAC,GAAC;AAKjC,MAAIpC,SAASiB,QAAQoB,WAAW,GAAG;AACjC,UAAM,IAAIC,UACR,aAAatC,SAASe,IAAI,uEAAkE;EAEhG;AACA,MAAI,CAACf,SAASiB,QAAQsB,SAASL,MAAAA,GAAS;AACtC,UAAM,IAAII,UAAU,WAAWJ,OAAOhB,KAAK,kCAAkClB,SAASe,IAAI,GAAG;EAC/F;AACA,MAAImB,OAAOf,SAAS,SAAS;AAC3B,UAAM,IAAImB,UACR,WAAWJ,OAAOhB,KAAK,yEAAoE;EAE/F;AAEA,QAAMsB,SAAS,MAAMN,OAAOd,UAAUI,YAAYY,KAAKf,IAAI,GAAGC,KAAAA;AAC9D,QAAMmB,OAAO,IAAIC,aAAa1C,SAASgB,OAAOmB,KAAAA,EAAOQ,QAAQ3C,SAASe,MAAMyB,QAAQJ,KAAKjC,GAAG;AAE5F,SAAOqC,OAAOI,cAAcC,SAAY;IAAEJ;EAAK,IAAI;IAAEA;IAAMG,WAAWJ,OAAOI;EAAU;AACzF;AA5BsBX;","names":["authFilePath","ensureFreshCredential","openaiDeviceLogin","persistOAuthTokens","readStoredOAuth","withFileLock","RefreshFailure","Error","message","transient","name","TRANSIENT_REASONS","classifyRefreshFailure","err","text","String","test","some","m","includes","waitWithJitter","attempt","baseMs","random","Math","base","round","AuthProvider","config","store","ensureFresh","resolved","deps","env","kind","ensureFreshCredential","filePath","authFilePath","inFlight","refreshInFlight","get","undefined","promise","refreshUnderLock","set","delete","Map","withFileLock","doDisco","readStoredOAuth","current","apiKey","access","expiresAt","expires","MAX_ATTEMPTS","failure","Promise","resolve","setTimeout","deviceLogin","deviceConfig","hooks","openaiDeviceLogin","persist","provider","tokens","persistOAuthTokens","assertSecureModes","authFilePath","CredentialError","credentialHome","readAuthFile","readStoredOAuth","writeCredential","deviceLogin","openaiDeviceLogin","pollDeviceToken","requestDeviceCode","ensureFreshCredential","extractAccountId","persistOAuthTokens","refreshOAuthTokens","openaiDeviceLogin","CODEX_CLIENT_ID","CODEX_ISSUER","CODEX_CLIENT_ID_ENV_VAR","CODEX_OAUTH","provider","clientId","process","env","authorizeEndpoint","tokenEndpoint","scopes","redirectUri","CODEX_DEVICE","deviceUsercodeEndpoint","devicePollEndpoint","verificationUri","CODEX_PROVIDER","Object","freeze","name","oauth","methods","label","type","authorize","deps","hooks","openaiDeviceLogin","comDefaults","fetch","sleep","ms","Promise","resolve","setTimeout","now","Date","loginWithDevice","method","store","opts","length","TypeError","includes","tokens","path","AuthProvider","persist","accountId","undefined"]}

package/dist/{bridge-entry-Z8GjrwH4.d.ts → bridge-entry-CvmBrmc9.d.ts}

@@ -1,5 +1,5 @@
 import { ExecutionContext } from '@theokit/http';
-import { McpServerConfig, SystemPromptResolver, InlineSkill, SettingSource, MemorySettings, SkillsSettings, ContextSettings, PreToolCallContext, PreToolCallDecision, PostToolCallContext, ToolResultTransformContext, TransformContext, SessionLifecycleContext, PreUserSendContext, PreUserSendResult, PostAssistantReplyContext, CustomTool, ModelSelection, PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition as AgentDefinition$1, BudgetTracker, RunEventSink } from '@theokit/sdk';
+import { McpServerConfig, SystemPromptResolver, InlineSkill, SettingSource, MemorySettings, SkillsSettings, ContextSettings, PreToolCallContext, PreToolCallDecision, PostToolCallContext, ToolResultTransformContext, TransformContext, SessionLifecycleContext, PreUserSendContext, PreUserSendResult, PostAssistantReplyContext, CustomTool, ModelSelection, PluginsSettings, Plugin, ProviderRoutingSettings, AgentDefinition as AgentDefinition$1, BudgetTracker, RunEventSink, TrustPosture } from '@theokit/sdk';
 import { z } from 'zod';
 import { WireChunk } from '@theokit/presenter/wire';
 import { RetryOptions } from '@theokit/sdk/retry';
@@ -480,9 +480,11 @@ declare function compileContextWindow(options: ContextWindowOptions): CompiledCo
  * composes the documented `systemPrompt` seam (`string | SystemPromptResolver`):
  * the resolver prepends `buildEnvContext` + `buildRepoMap` (`@theokit/sdk-tools`)
  * and the nearest `THEO.md` (`@theokit/sdk/project#readProjectInstructions`) to
- * the agent's base prompt (ADR D3). The SDK primitives are dynamically imported
- * so `@theokit/sdk-tools` stays an OPTIONAL peer — only loaded when a `@ProjectContext`
- * agent actually sends.
+ * the agent's base prompt (ADR D3). The SDK primitives are dynamically imported so they stay out of
+ * the eager module graph — only loaded when a `@ProjectContext` agent actually sends. (The original
+ * reason given here was "so `@theokit/sdk-tools` stays an OPTIONAL peer"; it is a hard dependency of
+ * this package, and `tools-entry.ts` re-exports it statically. The laziness is still worth keeping,
+ * for the reason above.)
  *
  * Knobs with no primitive mapping (`indexStrategy`, `relevanceStrategy`,
  * `maxFilesInContext`, `includeExtensions`, `rootMarkers`) are reported via
@@ -2180,6 +2182,100 @@ declare class McpFileError extends TheokitAgentError {
  */
 declare function loadMcpJson(cwd: string, opts?: LoadMcpJsonOptions): McpServersMap;
 
+/**
+ * M68 — the trust gate for `settingSources`.
+ *
+ * ## The defect this module closes
+ *
+ * `settingSources` enables on-disk config discovery. `'user'` reads `~/.theokit/` — the operator's
+ * own machine, which no third party controls. `'project'` reads `<cwd>/.theokit/`, **including
+ * `hooks.json`, which executes shell**.
+ *
+ * The previous API took `readonly SettingSource[]`, and its JSDoc justified the risk this way:
+ * *"it is opt-in because `.theokit/` is the app's own repo (informed consent)"*. That premise holds
+ * for a web app whose `cwd` is its own deploy. It does **not** hold for the class of product this
+ * framework addresses — an agent whose `cwd` is a repository the user just cloned. There `.theokit/`
+ * is attacker-controlled content, and enabling `'project'` is remote code execution on the first
+ * `build()`.
+ *
+ * Documenting it did not prevent it. The measured consumer (TheoCode) did not trust the API: it
+ * gated from the outside, with a `posture.allows` of its own (`chat.ts:386`, comment B-008). It
+ * already **had** the right decision and could not pass it through, because the API only accepted
+ * strings. The gate existed on its side and evaporated at the boundary.
+ *
+ * ## The evidence is the SDK's, not one invented here
+ *
+ * `TrustPosture` is `@theokit/sdk`'s own trust primitive, and `recordWiring`'s doc says *"a posture
+ * is the only thing in this package that retains a capability"*. A bespoke type would make two trust
+ * grammars coexist and drift apart (ADR 0063).
+ */
+/**
+ * The framework's capability vocabulary — deliberately a single name (ADR 0065).
+ *
+ * `allows` is all-or-nothing in the SDK: every declared `K` gets the same boolean. A finer
+ * vocabulary (`hooks`, `skills`, `subagents`, `mcp`) would promise the consumer it can gate one
+ * without gating the other, and the primitive does not deliver that. An API that suggests a
+ * distinction the runtime does not make teaches the wrong thing, and the error only surfaces when
+ * somebody depends on the distinction.
+ */
+type SettingSourceCapability = 'projectSettings';
+/** Authorization to read config from the working directory. Requires the posture, never a claim. */
+interface ProjectSettingsGrant {
+    /**
+     * Typically the output of `resolveTrustPosture` — which is what gives it `source` (`'env' |
+     * 'store' | 'default'`) and therefore a refusal that says WHERE the decision came from instead of
+     * merely denying.
+     */
+    readonly trustedBy: TrustPosture<SettingSourceCapability>;
+}
+/**
+ * Which on-disk config roots the agent may read.
+ *
+ * The asymmetry is the design: `user` is a boolean because `~/.theokit/` belongs to the operator;
+ * `project` requires evidence because `<cwd>/.theokit/` may not. Omitting a root is not enabling it
+ * — never "enabling without a gate". The asymmetry is inherited from the SDK itself, whose
+ * `TrustPostureInput.envOverride` documents that `false` and `undefined` both mean "the operator did
+ * not turn it on", not "turned it off".
+ */
+interface SettingSourcesSelection {
+    /** `~/.theokit/` — the operator's machine. No gate: no third party controls it. */
+    readonly user?: boolean;
+    /** `<cwd>/.theokit/` — controlled by whoever wrote the open repository. Requires evidence. */
+    readonly project?: ProjectSettingsGrant;
+}
+/**
+ * Refusal to read the working directory for lack of trust.
+ *
+ * Descends from `TheokitAgentError` because typed errors are an unbreakable rule here — and because
+ * `isTransientError` only sees this hierarchy. A class extending plain `Error` would be invisible to
+ * the predicate that separates recoverable from unrecoverable (the defect M67 fixed in five
+ * classes).
+ */
+declare class UntrustedSettingSourceError extends TheokitAgentError {
+    /** Where the trust decision came from: `'env' | 'store' | 'default'`. */
+    readonly trustSource: string;
+    /** The refused capability. */
+    readonly capability: SettingSourceCapability;
+    readonly name = "UntrustedSettingSourceError";
+    constructor(message: string, 
+    /** Where the trust decision came from: `'env' | 'store' | 'default'`. */
+    trustSource: string, 
+    /** The refused capability. */
+    capability: SettingSourceCapability);
+}
+/**
+ * Translate the declared selection into the `SettingSource`s the SDK accepts, refusing what the
+ * posture does not authorize.
+ *
+ * Refuses rather than ignores (ADR 0064). Ignoring would leave the product running in the belief
+ * that the repository's hooks are active — a silent failure mode, on the wrong side. The SDK already
+ * picked that side for the same problem: `recordWiring` throws `UngatedCapabilityError` when
+ * somebody registers a capability the posture does not gate.
+ *
+ * @throws {UntrustedSettingSourceError} when `project` is requested and the posture does not grant it.
+ */
+declare function resolveSettingSources(selection: SettingSourcesSelection | undefined): readonly SettingSource[];
+
 /**
  * Agent manifest generator — build-time JSON describing all agents, tools, guards, policies.
  *
@@ -2325,4 +2421,4 @@ declare function agentsPlugin(opts: AgentsPluginOptions): {
     register(app: PluginApp): void;
 };
 
-export { type DelegateOptions as $, type ApprovalOptions as A, type ApiErrorDecision as B, type CompiledAgentOptions as C, type DelegationResult as D, type ApiErrorPolicy as E, type ApprovalRequiredEvent as F, type Guardrail as G, type HumanInTheLoopOptions as H, type ArtifactChunkEvent as I, type ArtifactStartEvent as J, type BackgroundDelegation as K, type LoopStrategy as L, type MainLoopMeta as M, type BeforeToolCallContext as N, BudgetExceededError as O, type BudgetOptions as P, type CheckpointSavedEvent as Q, type ReflectionStrategy as R, type StreamEvent as S, type ToolOptions as T, type CompiledContextWindow as U, ContextualTool as V, CostBudgetExceededError as W, DEFAULT_MAX_ITERATIONS as X, type DefineAgentConfig as Y, type DefinitionOrThunk as Z, type DelegateFn as _, type CompiledTool as a, createSdkAgentStream as a$, DelegationBudgetExceededError as a0, DelegationError as a1, type DoneEvent as a2, type ErrorEvent as a3, type FileEditEvent as a4, type GuardrailAction as a5, type GuardrailPhase as a6, type GuardrailResult as a7, GuardrailViolationError as a8, type HookHandlers as a9, type SdkSendOptions as aA, type SdkTurnHandle as aB, type Segment as aC, type SkillsRequestContext as aD, type SkillsSelection as aE, type StateUpdateEvent as aF, type TextDeltaEvent as aG, type ThinkingEvent as aH, type TimeoutAction as aI, type ToolCallEvent as aJ, type ToolCallVeto as aK, type ToolHooks as aL, type ToolHooksPlugin as aM, type ToolResultEvent as aN, type ToolWalkResult as aO, type ToolboxOptions as aP, type ToolboxWalkResult as aQ, agentsPlugin as aR, buildModelSelection as aS, compileAgentDefinition as aT, compileAgentModule as aU, compileContextWindow as aV, compileProjectContext as aW, compileSkills as aX, compileTools as aY, createAgentExecutionContext as aZ, createApiErrorHandler as a_, type InferAgentInput as aa, type InferAgentToolNames as ab, type IterationEvent as ac, type LLMCallContext as ad, type LoopFinishReason as ae, type LoopOutcome as af, type LoopStrategyConfig as ag, type MainLoopOptions as ah, type McpApprovalSpec as ai, McpFileError as aj, type McpRegistryConfig as ak, type McpRequestContext as al, type McpSelection as am, type McpServersMap as an, type PartialToolCallEvent as ao, type PolicyHandler as ap, type ProcessInputContext as aq, type ReflectionContext as ar, type ReflectionResult as as, type ReflectionStrategyConfig as at, type RunStartedEvent as au, type ScoreVerdict as av, type ScoredDelegation as aw, type Scorer as ax, type SdkAgentHandle as ay, type SdkMessage as az, type ReasoningEffort as b, createThinkTagExtractor as b0, createToolHooksPlugin as b1, delegate as b2, delegateBackground as b3, delegateWithScoring as b4, extractThinkTagStream as b5, generateAgentManifest as b6, generateAgentRoutes as b7, isAgentContext as b8, isAgentDefinition as b9, isApprovalRequired as ba, isDone as bb, isError as bc, isPartialToolCall as bd, isTextDelta as be, isToolCall as bf, isToolResult as bg, ladderReflectionStrategy as bh, loadMcpJson as bi, loopStrategyConfigSchema as bj, mcpRegistry as bk, mcpToolApprovals as bl, noopReflectionStrategy as bm, presentUIMessageStream as bn, projectContextMetadataOnlyKnobs as bo, reasoningEffortOf as bp, reflectionStrategyConfigSchema as bq, resolveEnabledSkills as br, resolveLoopStrategy as bs, resolveMcpServers as bt, runWithApiErrorHandling as bu, streamAgentResponse as bv, toAgentFactory as bw, translateSdkEvent as bx, type RoundStreamFactory as c, type ContextWindowOptions as d, type SkillsOptions as e, type AgentManifestEntry as f, type HitlDecision as g, type ApprovalPosture as h, AGENT_BRAND as i, type AfterToolCallContext as j, AgentBuilder as k, type AgentDefinition as l, AgentDefinitionError as m, type AgentExecutionContext as n, type AgentManifest as o, type AgentManifestSource as p, type AgentManifestTool as q, type AgentOptions as r, streamAgentUIMessages as s, type AgentRoute as t, type AgentRouteContext as u, type AgentRunInfo as v, type AgentStreamEvent as w, type AgentTurnMetadata as x, type AgentsPluginOptions as y, type ApiErrorContext as z };
+export { type DelegateOptions as $, type ApprovalOptions as A, type ApiErrorDecision as B, type CompiledAgentOptions as C, type DelegationResult as D, type ApiErrorPolicy as E, type ApprovalRequiredEvent as F, type Guardrail as G, type HumanInTheLoopOptions as H, type ArtifactChunkEvent as I, type ArtifactStartEvent as J, type BackgroundDelegation as K, type LoopStrategy as L, type MainLoopMeta as M, type BeforeToolCallContext as N, BudgetExceededError as O, type BudgetOptions as P, type CheckpointSavedEvent as Q, type ReflectionStrategy as R, type StreamEvent as S, type ToolOptions as T, type CompiledContextWindow as U, ContextualTool as V, CostBudgetExceededError as W, DEFAULT_MAX_ITERATIONS as X, type DefineAgentConfig as Y, type DefinitionOrThunk as Z, type DelegateFn as _, type CompiledTool as a, compileSkills as a$, DelegationBudgetExceededError as a0, DelegationError as a1, type DoneEvent as a2, type ErrorEvent as a3, type FileEditEvent as a4, type GuardrailAction as a5, type GuardrailPhase as a6, type GuardrailResult as a7, GuardrailViolationError as a8, type HookHandlers as a9, type SdkMessage as aA, type SdkSendOptions as aB, type SdkTurnHandle as aC, type Segment as aD, type SettingSourceCapability as aE, type SettingSourcesSelection as aF, type SkillsRequestContext as aG, type SkillsSelection as aH, type StateUpdateEvent as aI, type TextDeltaEvent as aJ, type ThinkingEvent as aK, type TimeoutAction as aL, type ToolCallEvent as aM, type ToolCallVeto as aN, type ToolHooks as aO, type ToolHooksPlugin as aP, type ToolResultEvent as aQ, type ToolWalkResult as aR, type ToolboxOptions as aS, type ToolboxWalkResult as aT, UntrustedSettingSourceError as aU, agentsPlugin as aV, buildModelSelection as aW, compileAgentDefinition as aX, compileAgentModule as aY, compileContextWindow as aZ, compileProjectContext as a_, type InferAgentInput as aa, type InferAgentToolNames as ab, type IterationEvent as ac, type LLMCallContext as ad, type LoopFinishReason as ae, type LoopOutcome as af, type LoopStrategyConfig as ag, type MainLoopOptions as ah, type McpApprovalSpec as ai, McpFileError as aj, type McpRegistryConfig as ak, type McpRequestContext as al, type McpSelection as am, type McpServersMap as an, type PartialToolCallEvent as ao, type PolicyHandler as ap, type ProcessInputContext as aq, type ProjectSettingsGrant as ar, type ReflectionContext as as, type ReflectionResult as at, type ReflectionStrategyConfig as au, type RunStartedEvent as av, type ScoreVerdict as aw, type ScoredDelegation as ax, type Scorer as ay, type SdkAgentHandle as az, type ReasoningEffort as b, compileTools as b0, createAgentExecutionContext as b1, createApiErrorHandler as b2, createSdkAgentStream as b3, createThinkTagExtractor as b4, createToolHooksPlugin as b5, delegate as b6, delegateBackground as b7, delegateWithScoring as b8, extractThinkTagStream as b9, streamAgentResponse as bA, toAgentFactory as bB, translateSdkEvent as bC, generateAgentManifest as ba, generateAgentRoutes as bb, isAgentContext as bc, isAgentDefinition as bd, isApprovalRequired as be, isDone as bf, isError as bg, isPartialToolCall as bh, isTextDelta as bi, isToolCall as bj, isToolResult as bk, ladderReflectionStrategy as bl, loadMcpJson as bm, loopStrategyConfigSchema as bn, mcpRegistry as bo, mcpToolApprovals as bp, noopReflectionStrategy as bq, presentUIMessageStream as br, projectContextMetadataOnlyKnobs as bs, reasoningEffortOf as bt, reflectionStrategyConfigSchema as bu, resolveEnabledSkills as bv, resolveLoopStrategy as bw, resolveMcpServers as bx, resolveSettingSources as by, runWithApiErrorHandling as bz, type RoundStreamFactory as c, type ContextWindowOptions as d, type SkillsOptions as e, type AgentManifestEntry as f, type HitlDecision as g, type ApprovalPosture as h, AGENT_BRAND as i, type AfterToolCallContext as j, AgentBuilder as k, type AgentDefinition as l, AgentDefinitionError as m, type AgentExecutionContext as n, type AgentManifest as o, type AgentManifestSource as p, type AgentManifestTool as q, type AgentOptions as r, streamAgentUIMessages as s, type AgentRoute as t, type AgentRouteContext as u, type AgentRunInfo as v, type AgentStreamEvent as w, type AgentTurnMetadata as x, type AgentsPluginOptions as y, type ApiErrorContext as z };