@theokit/sdk 2.0.0 → 2.1.0

package/dist/eval.js

@@ -1,8 +1,8 @@
-import { randomUUID, createHash, randomBytes } from 'crypto';
-import { stat, readFile, rename, mkdir, rm, readdir, open, unlink, appendFile, statfs, access } from 'fs/promises';
+import { randomUUID, randomBytes, createHash } from 'crypto';
+import { readFile, unlink, mkdir, open, rename, statfs, stat, rm, readdir, appendFile, access } from 'fs/promises';
 import { join, dirname, resolve, sep, relative, isAbsolute } from 'path';
 import { z, toJSONSchema } from 'zod';
-import { existsSync, realpathSync, lstatSync, readlinkSync, mkdirSync, readFileSync, readdirSync } from 'fs';
+import { mkdirSync, readdirSync, existsSync, realpathSync, lstatSync, readlinkSync, readFileSync } from 'fs';
 import { AsyncLocalStorage } from 'async_hooks';
 import { createRequire } from 'module';
 import { homedir } from 'os';
@@ -19,6 +19,24 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/internal/default-retriable.ts
+function defaultRetriableForCode(code) {
+  switch (code) {
+    case "rate_limit":
+    case "timeout":
+    case "server_error":
+    case "network":
+    case "provider_unreachable":
+      return true;
+    default:
+      return false;
+  }
+}
+var init_default_retriable = __esm({
+  "src/internal/default-retriable.ts"() {
+  }
+});
+
 // src/internal/security/redact.ts
 function readEnvOnce() {
   const raw = process.env.THEOKIT_REDACT_SECRETS;
@@ -169,7 +187,8 @@ __export(errors_exports, {
   UnsupportedBudgetOperationError: () => UnsupportedBudgetOperationError,
   UnsupportedRunOperationError: () => UnsupportedRunOperationError,
   UnsupportedTaskOperationError: () => UnsupportedTaskOperationError,
-  coerceToKnownAgentRunErrorCode: () => coerceToKnownAgentRunErrorCode
+  coerceToKnownAgentRunErrorCode: () => coerceToKnownAgentRunErrorCode,
+  isTransientError: () => isTransientError
 });
 function coerceToKnownAgentRunErrorCode(code) {
   if (code !== void 0 && KNOWN_AGENT_RUN_ERROR_CODES.has(code)) {
@@ -201,21 +220,13 @@ function safeStringify(value) {
     return String(value);
   }
 }
-function defaultRetriableForCode(code) {
-  switch (code) {
-    case "rate_limit":
-    case "timeout":
-    case "server_error":
-    case "network":
-    case "provider_unreachable":
-      return true;
-    default:
-      return false;
-  }
+function isTransientError(err) {
+  return err instanceof TheokitAgentError && err.isRetryable === true;
 }
 var KNOWN_AGENT_RUN_ERROR_CODES, TheokitAgentError, AuthenticationError, RateLimitError, ConfigurationError, IntegrationNotConnectedError, NetworkError, UnknownAgentError, AgentRunError, UnsupportedRunOperationError, CredentialPoolExhaustedError, MemoryAdapterError, InvalidTaskIdError, TaskNotFoundError, UnsupportedTaskOperationError, BudgetExceededError, AgentDisposedError, UnsupportedBudgetOperationError;
 var init_errors = __esm({
   "src/errors.ts"() {
+    init_default_retriable();
     init_redact();
     KNOWN_AGENT_RUN_ERROR_CODES = /* @__PURE__ */ new Set([
       "rate_limit",
@@ -582,7 +593,7 @@ var init_atomic_write = __esm({
   }
 });
 
-// src/internal/runtime/yaml-frontmatter.ts
+// src/internal/runtime/context/yaml-frontmatter.ts
 function parseSimpleYaml(text) {
   const fields = {};
   for (const line of text.split(/\r?\n/)) {
@@ -606,7 +617,7 @@ function coerce(raw) {
   return raw;
 }
 var init_yaml_frontmatter = __esm({
-  "src/internal/runtime/yaml-frontmatter.ts"() {
+  "src/internal/runtime/context/yaml-frontmatter.ts"() {
   }
 });
 async function loadMarkdownEntities(opts) {
@@ -809,11 +820,54 @@ function checkToolWhitelist(toolName) {
 }
 var toolWhitelistStore;
 var init_async_local_storage = __esm({
-  "src/internal/runtime/async-local-storage.ts"() {
+  "src/internal/runtime/concurrency/async-local-storage.ts"() {
     toolWhitelistStore = new AsyncLocalStorage();
   }
 });
 
+// src/internal/runtime/concurrency/async-semaphore.ts
+function createSemaphore(permits) {
+  if (!Number.isInteger(permits) || permits < 1) {
+    throw new ConfigurationError(
+      `async-semaphore: permits must be a positive integer, got ${permits}`,
+      { code: "invalid_concurrency" }
+    );
+  }
+  let active = 0;
+  const queue = [];
+  function tryGrant() {
+    if (active < permits && queue.length > 0) {
+      const resolve3 = queue.shift();
+      if (resolve3 !== void 0) {
+        active += 1;
+        resolve3();
+      }
+    }
+  }
+  return {
+    inFlight: () => active,
+    pending: () => queue.length + active,
+    async acquire() {
+      await new Promise((resolve3) => {
+        queue.push(resolve3);
+        tryGrant();
+      });
+      let released = false;
+      return () => {
+        if (released) return;
+        released = true;
+        active -= 1;
+        tryGrant();
+      };
+    }
+  };
+}
+var init_async_semaphore = __esm({
+  "src/internal/runtime/concurrency/async-semaphore.ts"() {
+    init_errors();
+  }
+});
+
 // src/internal/llm/credential-pool-types.ts
 var COOLDOWN_MS, DEFAULT_COOLDOWN_MS;
 var init_credential_pool_types = __esm({
@@ -1158,7 +1212,7 @@ var init_local_agent_plugins = __esm({
   }
 });
 
-// src/internal/runtime/run-until.ts
+// src/internal/runtime/lifecycle/run-until.ts
 var run_until_exports = {};
 __export(run_until_exports, {
   composeContinuation: () => composeContinuation,
@@ -1251,7 +1305,7 @@ Your last response was:
 ${lastResponse.slice(0, 1e3)}`;
 }
 var init_run_until = __esm({
-  "src/internal/runtime/run-until.ts"() {
+  "src/internal/runtime/lifecycle/run-until.ts"() {
   }
 });
 
@@ -1362,16 +1416,16 @@ var init_judge_call = __esm({
 // src/internal/runtime/registry/agent-factory-registry.ts
 var agent_factory_registry_exports = {};
 __export(agent_factory_registry_exports, {
-  getAgentCreate: () => getAgentCreate,
-  setAgentCreate: () => setAgentCreate
+  getAgentFacade: () => getAgentFacade,
+  setAgentFacade: () => setAgentFacade
 });
-function setAgentCreate(fn) {
-  registered3 = fn;
+function setAgentFacade(facade) {
+  registered3 = facade;
 }
-function getAgentCreate() {
+function getAgentFacade() {
   if (registered3 === void 0) {
     throw new Error(
-      "internal: Agent.create not registered. The `agent.ts` module must be loaded before LocalAgent.runUntil/fork are invoked."
+      "internal: Agent facade not registered. The `agent.ts` module must be loaded before internal subsystems (LocalAgent.runUntil/fork, eval, scorers, cron) invoke it."
     );
   }
   return registered3;
@@ -1382,7 +1436,7 @@ var init_agent_factory_registry = __esm({
   }
 });
 
-// src/internal/runtime/fork-agent.ts
+// src/internal/runtime/lifecycle/fork-agent.ts
 var fork_agent_exports = {};
 __export(fork_agent_exports, {
   filterMemoryPlugins: () => filterMemoryPlugins,
@@ -1442,7 +1496,7 @@ function extractUsage(result) {
   };
 }
 var init_fork_agent = __esm({
-  "src/internal/runtime/fork-agent.ts"() {
+  "src/internal/runtime/lifecycle/fork-agent.ts"() {
     init_async_local_storage();
     init_local_agent_plugins();
   }
@@ -1465,49 +1519,6 @@ var init_task = __esm({
   }
 });
 
-// src/internal/runtime/async-semaphore.ts
-function createSemaphore(permits) {
-  if (!Number.isInteger(permits) || permits < 1) {
-    throw new ConfigurationError(
-      `async-semaphore: permits must be a positive integer, got ${permits}`,
-      { code: "invalid_concurrency" }
-    );
-  }
-  let active = 0;
-  const queue = [];
-  function tryGrant() {
-    if (active < permits && queue.length > 0) {
-      const resolve3 = queue.shift();
-      if (resolve3 !== void 0) {
-        active += 1;
-        resolve3();
-      }
-    }
-  }
-  return {
-    inFlight: () => active,
-    pending: () => queue.length + active,
-    async acquire() {
-      await new Promise((resolve3) => {
-        queue.push(resolve3);
-        tryGrant();
-      });
-      let released = false;
-      return () => {
-        if (released) return;
-        released = true;
-        active -= 1;
-        tryGrant();
-      };
-    }
-  };
-}
-var init_async_semaphore = __esm({
-  "src/internal/runtime/async-semaphore.ts"() {
-    init_errors();
-  }
-});
-
 // src/internal/task/ring-buffer.ts
 var RingBuffer;
 var init_ring_buffer = __esm({
@@ -3079,8 +3090,21 @@ function sanitizeIdentifier(input, options) {
   }
   return input.toLowerCase();
 }
+function safeFilenameForId(id, options) {
+  if (id.length === 0) {
+    throw new ConfigurationError("Filename id must be a non-empty string", {
+      code: "invalid_filename_id"
+    });
+  }
+  const maxLen = options?.maxLen;
+  const lower = id.toLowerCase();
+  if (lower.length <= maxLen && IDENTIFIER_PATTERN.test(lower)) {
+    return lower;
+  }
+  return `h-${createHash("sha256").update(id).digest("hex").slice(0, 16)}`;
+}
 
-// src/internal/runtime/default-model.ts
+// src/internal/runtime/config/default-model.ts
 var DEFAULT_AGENTIC_MODEL_ID = "google/gemini-2.0-flash-001";
 
 // src/internal/runtime/registry/agent-registry-store.ts
@@ -3401,7 +3425,7 @@ async function flushRegistrySaves(cwd) {
   }
 }
 
-// src/internal/runtime/system-prompt.ts
+// src/internal/runtime/system-prompt/system-prompt.ts
 async function resolveSystemPrompt(agent, override, ctx) {
   if (override !== void 0) return override;
   if (agent === void 0) return void 0;
@@ -5784,28 +5808,6 @@ function parseDecisionFromStdout(stdout) {
   return { decision: "allow" };
 }
 
-// src/internal/runtime/memory/memory-path-selector.ts
-var PORT_MEMORY_PATH_ENV_VAR = "THEOKIT_PORT_MEMORY_PATH";
-function shouldUsePortMemoryPath() {
-  const env = globalThis.process?.env;
-  if (env === void 0) return false;
-  const val = env[PORT_MEMORY_PATH_ENV_VAR];
-  return val === "1" || val === "true";
-}
-function resolveMemoryProviderForLoop(consumerSupplied, defaultAdapter, portPathEnabled) {
-  if (consumerSupplied !== void 0) return consumerSupplied;
-  if (portPathEnabled) return defaultAdapter;
-  return void 0;
-}
-function resolveMemoryToolsForLoop(legacyTools, portPathEnabled) {
-  if (portPathEnabled) return void 0;
-  return legacyTools;
-}
-function resolveActiveMemorySummaryForSend(legacySummary, portPathEnabled) {
-  if (portPathEnabled) return void 0;
-  return legacySummary;
-}
-
 // src/internal/memory/storage/session-summary-writer.ts
 init_atomic_write();
 var MAX_TURN_CHARS = 2e3;
@@ -5813,10 +5815,7 @@ function sessionsDir(cwd) {
   return join(memoryDir(cwd), "sessions");
 }
 function sessionSummaryPath(cwd, runId) {
-  return join(sessionsDir(cwd), `${sanitizeRunId(runId)}.md`);
-}
-function sanitizeRunId(runId) {
-  return runId.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 128);
+  return join(sessionsDir(cwd), `${safeFilenameForId(runId, { maxLen: 128 })}.md`);
 }
 function truncate(text) {
   if (text.length <= MAX_TURN_CHARS) return text;
@@ -5849,6 +5848,28 @@ async function writeSessionSummary(input) {
   await replaceFileAtomic(path, body);
 }
 
+// src/internal/runtime/memory/memory-path-selector.ts
+var PORT_MEMORY_PATH_ENV_VAR = "THEOKIT_PORT_MEMORY_PATH";
+function shouldUsePortMemoryPath() {
+  const env = globalThis.process?.env;
+  if (env === void 0) return false;
+  const val = env[PORT_MEMORY_PATH_ENV_VAR];
+  return val === "1" || val === "true";
+}
+function resolveMemoryProviderForLoop(consumerSupplied, defaultAdapter, portPathEnabled) {
+  if (consumerSupplied !== void 0) return consumerSupplied;
+  if (portPathEnabled) return defaultAdapter;
+  return void 0;
+}
+function resolveMemoryToolsForLoop(legacyTools, portPathEnabled) {
+  if (portPathEnabled) return void 0;
+  return legacyTools;
+}
+function resolveActiveMemorySummaryForSend(legacySummary, portPathEnabled) {
+  if (portPathEnabled) return void 0;
+  return legacySummary;
+}
+
 // src/internal/runtime/session/agent-session-store.ts
 init_atomic_write();
 var VALID_ROLES = /* @__PURE__ */ new Set([
@@ -6105,7 +6126,7 @@ function clearSession(agentId) {
   sessions.delete(agentId);
 }
 
-// src/internal/runtime/post-run-lifecycle.ts
+// src/internal/runtime/lifecycle/post-run-lifecycle.ts
 async function runPostRunLifecycle(inputs) {
   const {
     run,
@@ -6337,7 +6358,7 @@ var liveAgentRegistry = new LiveAgentRegistry();
 // src/internal/runtime/skills/subagents-loader.ts
 init_errors();
 
-// src/internal/runtime/workspace-dir.ts
+// src/internal/runtime/config/workspace-dir.ts
 init_errors();
 async function readWorkspaceDir(root, errorCode, describe) {
   try {
@@ -6623,7 +6644,7 @@ var SystemPromptPipeline = class _SystemPromptPipeline {
   }
 };
 
-// src/internal/runtime/validate-agent-options.ts
+// src/internal/runtime/validation/validate-agent-options.ts
 init_errors();
 function validateAgentOptions(options) {
   rejectProgrammaticHooks(options);
@@ -6818,6 +6839,71 @@ function validateMemory(options) {
   }
 }
 
+// src/internal/runtime/config/providers-manager.ts
+var ProvidersManagerImpl = class {
+  constructor(model, providers, plugins) {
+    this.model = model;
+    this.providers = providers;
+    this.plugins = plugins;
+  }
+  model;
+  providers;
+  plugins;
+  routes() {
+    const resolved = [];
+    const modelProvider = providerFromModel(this.model);
+    const seen = /* @__PURE__ */ new Set();
+    if (this.providers?.routes !== void 0) {
+      for (const route of this.providers.routes) {
+        const resolvedRoute = resolveRoute(route, modelProvider, this.plugins);
+        if (!seen.has(route.capability)) {
+          seen.add(route.capability);
+          resolved.push(resolvedRoute);
+        }
+      }
+    }
+    return Promise.resolve(resolved);
+  }
+};
+function providerFromModel(model) {
+  if (model === void 0) return void 0;
+  const id = model.id;
+  if (id.includes(":")) return id.split(":")[0];
+  return void 0;
+}
+function resolveRoute(route, modelProvider, plugins) {
+  if (route.capability === "chat" && modelProvider === route.provider) {
+    const modelName = extractModelName(modelProvider, route);
+    const base = {
+      capability: route.capability,
+      provider: route.provider,
+      reason: "explicit-model-provider"
+    };
+    if (modelName !== void 0) base.model = modelName;
+    return base;
+  }
+  if (plugins?.enabled !== void 0 && plugins.enabled.length > 0) {
+    return {
+      capability: route.capability,
+      provider: route.provider,
+      reason: "first-available-plugin-provider"
+    };
+  }
+  return {
+    capability: route.capability,
+    provider: route.provider,
+    reason: "explicit-route"
+  };
+}
+function extractModelName(prefix, route) {
+  if (route.model !== void 0) return route.model;
+  return prefix === route.provider ? defaultModelForProvider(prefix) : void 0;
+}
+function defaultModelForProvider(provider) {
+  if (provider === "anthropic") return "claude-3-7-sonnet";
+  return void 0;
+}
+
 // src/internal/runtime/context/context-manager.ts
 init_errors();
 init_markdown_config_loader();
@@ -7614,71 +7700,6 @@ async function loadPluginManifestFromMarkdown(pluginsRoot, folderName) {
   return metadata;
 }
 
-// src/internal/runtime/providers-manager.ts
-var ProvidersManagerImpl = class {
-  constructor(model, providers, plugins) {
-    this.model = model;
-    this.providers = providers;
-    this.plugins = plugins;
-  }
-  model;
-  providers;
-  plugins;
-  routes() {
-    const resolved = [];
-    const modelProvider = providerFromModel(this.model);
-    const seen = /* @__PURE__ */ new Set();
-    if (this.providers?.routes !== void 0) {
-      for (const route of this.providers.routes) {
-        const resolvedRoute = resolveRoute(route, modelProvider, this.plugins);
-        if (!seen.has(route.capability)) {
-          seen.add(route.capability);
-          resolved.push(resolvedRoute);
-        }
-      }
-    }
-    return Promise.resolve(resolved);
-  }
-};
-function providerFromModel(model) {
-  if (model === void 0) return void 0;
-  const id = model.id;
-  if (id.includes(":")) return id.split(":")[0];
-  return void 0;
-}
-function resolveRoute(route, modelProvider, plugins) {
-  if (route.capability === "chat" && modelProvider === route.provider) {
-    const modelName = extractModelName(modelProvider, route);
-    const base = {
-      capability: route.capability,
-      provider: route.provider,
-      reason: "explicit-model-provider"
-    };
-    if (modelName !== void 0) base.model = modelName;
-    return base;
-  }
-  if (plugins?.enabled !== void 0 && plugins.enabled.length > 0) {
-    return {
-      capability: route.capability,
-      provider: route.provider,
-      reason: "first-available-plugin-provider"
-    };
-  }
-  return {
-    capability: route.capability,
-    provider: route.provider,
-    reason: "explicit-route"
-  };
-}
-function extractModelName(prefix, route) {
-  if (route.model !== void 0) return route.model;
-  return prefix === route.provider ? defaultModelForProvider(prefix) : void 0;
-}
-function defaultModelForProvider(provider) {
-  if (provider === "anthropic") return "claude-3-7-sonnet";
-  return void 0;
-}
-
 // src/internal/runtime/skills/skills-manager.ts
 init_errors();
 
@@ -8025,7 +8046,7 @@ var IterationBudget = class {
   }
 };
 
-// src/internal/runtime/validate-response.ts
+// src/internal/runtime/validation/validate-response.ts
 function validateResponse(response) {
   const trimmed = response.content.trim();
   const toolCallsArr = Array.isArray(response.toolCalls) ? response.toolCalls : [];
@@ -8411,6 +8432,27 @@ async function emitTextDeltaCallback(inputs, text) {
 // src/internal/agent-loop/tool-dispatch.ts
 init_async_local_storage();
 
+// src/internal/runtime/concurrency/map-with-concurrency.ts
+init_async_semaphore();
+var NEVER_ABORT = new AbortController().signal;
+async function mapWithConcurrency(items, concurrency, fn, options) {
+  const semaphore = createSemaphore(concurrency);
+  const signal = NEVER_ABORT;
+  return Promise.all(
+    items.map(async (item, index) => {
+      const release = await semaphore.acquire();
+      try {
+        if (signal.aborted) {
+          throw signal.reason instanceof Error ? signal.reason : new Error("mapWithConcurrency: aborted");
+        }
+        return await fn(item, index, signal);
+      } finally {
+        release();
+      }
+    })
+  );
+}
+
 // src/internal/tool-dispatch/repair-middleware.ts
 var DECIMAL_RE = /^-?\d+(\.\d+)?$/;
 function repairToolCall(raw, registry) {
@@ -8484,7 +8526,7 @@ function coerceArgsToSchema(args, schema) {
   return { value: out, changed };
 }
 
-// src/internal/runtime/shell-tool.ts
+// src/internal/runtime/tools/shell-tool.ts
 async function runShell(options) {
   if (options.sandbox === true && isObviouslyUnsafe(options.command)) {
     return {
@@ -8585,38 +8627,12 @@ ${result.stderr}`.trim();
 // src/internal/agent-loop/tool-dispatch.ts
 async function dispatchTools(inputs, tools, toolCalls, events) {
   const maxConcurrent = inputs.maxConcurrentTools ?? 4;
-  return boundedParallel(
-    maxConcurrent,
+  return mapWithConcurrency(
     toolCalls,
+    maxConcurrent,
     (call) => dispatchSingleCall(inputs, tools, call, events)
   );
 }
-async function boundedParallel(max, items, fn) {
-  let running = 0;
-  const queue = [];
-  async function acquire() {
-    if (running < max) {
-      running++;
-      return;
-    }
-    await new Promise((resolve3) => queue.push(resolve3));
-    running++;
-  }
-  function release() {
-    running--;
-    if (queue.length > 0) queue.shift()();
-  }
-  return Promise.all(
-    items.map(async (item) => {
-      await acquire();
-      try {
-        return await fn(item);
-      } finally {
-        release();
-      }
-    })
-  );
-}
 async function dispatchSingleCall(inputs, tools, call, events) {
   const { call: workingCall, repairs } = applyRepairAndExtractCall(tools, call);
   const callId = generateCallId();
@@ -9685,10 +9701,10 @@ function registerBuiltins() {
   registerCatalogProviders();
 }
 
-// src/internal/errors/mappers/anthropic.ts
+// src/internal/error-mappers/anthropic.ts
 init_errors();
 
-// src/internal/errors/mappers/shared.ts
+// src/internal/error-mappers/shared.ts
 var RAW_MAX_BYTES = 2048;
 function parseRetryAfter(headers) {
   if (headers === void 0) return void 0;
@@ -9717,7 +9733,7 @@ function buildErrorMetadata(args) {
   };
 }
 
-// src/internal/errors/mappers/anthropic.ts
+// src/internal/error-mappers/anthropic.ts
 function mapAnthropicError(args) {
   const { status, body, headers, endpoint } = args;
   const code = mapAnthropicStatusToCode(status, body);
@@ -10057,7 +10073,7 @@ function buildAnthropicBody(request) {
 // src/internal/llm/bedrock-anthropic.ts
 init_errors();
 
-// src/internal/errors/mappers/bedrock.ts
+// src/internal/error-mappers/bedrock.ts
 init_errors();
 function classifyBedrockError(args, awsType, message) {
   if (args.status === 429 || awsType.includes("Throttling") || awsType.includes("TooManyRequests")) {
@@ -10194,7 +10210,7 @@ function buildBedrockBody(request) {
 init_credential_pool();
 init_credential_pool_context();
 
-// src/internal/errors/mappers/openai-compatible.ts
+// src/internal/error-mappers/openai-compatible.ts
 init_errors();
 function mapOpenAICompatibleError(args) {
   const { providerId, status, body, headers, endpoint } = args;
@@ -10358,7 +10374,7 @@ function readOpenAiContent(body) {
   return void 0;
 }
 
-// src/internal/errors/mappers/ollama.ts
+// src/internal/error-mappers/ollama.ts
 init_errors();
 function mapOllamaTransportError(args) {
   if (args.providerId !== "ollama") return void 0;
@@ -11008,7 +11024,7 @@ function abortError2(signal) {
 // src/internal/llm/vertex-anthropic.ts
 init_errors();
 
-// src/internal/errors/mappers/vertex.ts
+// src/internal/error-mappers/vertex.ts
 init_errors();
 var VERTEX_RULES = [
   { test: (s, e) => s === 429 || e === "RESOURCE_EXHAUSTED", code: "rate_limit" },
@@ -11550,6 +11566,16 @@ function resolveMcpCwd(configCwd) {
   return safePathJoin(process.cwd(), configCwd);
 }
 
+// src/internal/providers/register-plugin-providers.ts
+function registerPluginProviderProfiles(entries) {
+  let registered4 = 0;
+  for (const entry of entries) {
+    registerProvider(entry.profile);
+    registered4 += 1;
+  }
+  return registered4;
+}
+
 // src/internal/tool-registry/personality-filter.ts
 init_hooks_source();
 function applyPersonalityFilter(exposedTools, whitelist, opts) {
@@ -11626,12 +11652,27 @@ function createRealLocalRun(options) {
   registerRun(handle);
   return handle;
 }
-function buildLoopInputs(options, runId, userText) {
+var pluginProvidersAnnounced = false;
+function resolveRunProvider(options) {
   registerBuiltins();
+  const profiles = options.pluginManager?.aggregated.providerProfiles ?? [];
+  const registered4 = registerPluginProviderProfiles(profiles);
+  if (registered4 > 0 && !pluginProvidersAnnounced) {
+    pluginProvidersAnnounced = true;
+    const names = profiles.map((e) => e.profile.name).join(", ");
+    process.stderr.write(
+      `[theokit-sdk] registered ${registered4} plugin provider profile(s): ${names}
+`
+    );
+  }
   const parsedModel = parseModelId(options.model?.id);
   const inferredProvider = parsedModel.provider !== void 0 && getProviderProfile(parsedModel.provider) !== void 0 ? parsedModel.provider : void 0;
   const primary = options.agentOptions.providers?.routes?.[0]?.provider ?? inferredProvider ?? detectPrimaryProvider();
   const effectiveModelId = inferredProvider !== void 0 ? parsedModel.name : options.model?.id ?? "claude-sonnet-4-6";
+  return { primary, effectiveModelId };
+}
+function buildLoopInputs(options, runId, userText) {
+  const { primary, effectiveModelId } = resolveRunProvider(options);
   const fallback = options.agentOptions.providers?.fallback;
   const apiKeys = options.agentOptions.providers?.apiKeys;
   const credentialPoolStrategy = options.agentOptions.providers?.credentialPoolStrategy;
@@ -12249,7 +12290,7 @@ async function embedTexts(input) {
       pending
     });
   }
-  await runBatches(input, pending, results);
+  await embedInBoundedBatches(input, pending, results);
   return results.map((v) => v ?? new Array(dimension).fill(0));
 }
 function classifyEntry(args) {
@@ -12268,45 +12309,34 @@ function classifyEntry(args) {
   args.pending.push({ index: args.index, text: args.text, key });
 }
 var MAX_CONCURRENT_BATCHES = 3;
-async function runBatches(input, pending, results) {
+async function embedInBoundedBatches(input, pending, results) {
   const batches = [];
   for (let offset = 0; offset < pending.length; offset += MAX_BATCH) {
     batches.push(pending.slice(offset, offset + MAX_BATCH));
   }
-  let running = 0;
-  const queue = [];
-  await Promise.all(batches.map((batch) => processBatch(input, batch, results, acquire, release)));
-  async function acquire() {
-    if (running >= MAX_CONCURRENT_BATCHES) await new Promise((r) => queue.push(r));
-    running++;
-  }
-  function release() {
-    running--;
-    if (queue.length > 0) queue.shift()();
-  }
+  await mapWithConcurrency(
+    batches,
+    MAX_CONCURRENT_BATCHES,
+    (batch) => processBatch(input, batch, results)
+  );
 }
-async function processBatch(input, batch, results, acquire, release) {
-  await acquire();
-  try {
-    const vectors = await embedBatch({
-      apiKey: input.apiKey,
-      baseUrl: input.baseUrl,
-      embeddingsPath: input.embeddingsPath,
-      model: input.model,
-      inputs: batch.map((b) => b.text),
-      fetchImpl: input.fetchImpl,
-      stats: input.stats,
-      providerId: input.providerId
-    });
-    for (let j = 0; j < batch.length; j++) {
-      const slot = batch[j];
-      const vector = vectors[j];
-      if (slot === void 0 || vector === void 0) continue;
-      results[slot.index] = vector;
-      input.cache.set(slot.key, vector);
-    }
-  } finally {
-    release();
+async function processBatch(input, batch, results) {
+  const vectors = await embedBatch({
+    apiKey: input.apiKey,
+    baseUrl: input.baseUrl,
+    embeddingsPath: input.embeddingsPath,
+    model: input.model,
+    inputs: batch.map((b) => b.text),
+    fetchImpl: input.fetchImpl,
+    stats: input.stats,
+    providerId: input.providerId
+  });
+  for (let j = 0; j < batch.length; j++) {
+    const slot = batch[j];
+    const vector = vectors[j];
+    if (slot === void 0 || vector === void 0) continue;
+    results[slot.index] = vector;
+    input.cache.set(slot.key, vector);
   }
 }
 async function embedBatch(opts) {
@@ -12739,7 +12769,7 @@ function sanitizeFts5Query(query) {
   return text.trim();
 }
 
-// src/internal/memory/index-db.ts
+// src/internal/persistence/sqlite-open.ts
 init_errors();
 
 // src/internal/persistence/sqlite-wal.ts
@@ -12767,6 +12797,57 @@ function logFallback(label, reason) {
   );
 }
 
+// src/internal/persistence/sqlite-open.ts
+async function openSqliteResilient(options) {
+  await mkdir(dirname(options.filePath), { recursive: true });
+  try {
+    return await openConcrete(options);
+  } catch (cause) {
+    if (options.recoverCorrupt !== false && isCorruptionError(cause)) {
+      await renameAside(options.filePath, options.label ?? "sqlite");
+      return await openConcrete(options);
+    }
+    throw cause;
+  }
+}
+async function openConcrete(options) {
+  const db = await loadDriver(options.filePath);
+  applyWalWithFallback(db, options.label ?? "sqlite");
+  await options.onOpen?.(db);
+  return db;
+}
+async function loadDriver(filePath) {
+  try {
+    const mod = await import('better-sqlite3');
+    const Ctor = mod.default ?? mod;
+    if (typeof Ctor !== "function") {
+      throw new Error(`better-sqlite3 export is not a constructor (got ${typeof Ctor})`);
+    }
+    return new Ctor(filePath);
+  } catch (cause) {
+    const message = cause instanceof Error ? cause.message : String(cause);
+    throw new ConfigurationError(
+      `Failed to load SQLite driver. Install \`better-sqlite3\` or run on Node 22.5+ for built-in \`node:sqlite\`. Cause: ${message}`,
+      { code: "sqlite_driver_unavailable", cause }
+    );
+  }
+}
+function isCorruptionError(cause) {
+  if (!(cause instanceof Error)) return false;
+  const msg = cause.message.toLowerCase();
+  return msg.includes("malformed") || msg.includes("not a database") || msg.includes("encrypted") || msg.includes("disk image is malformed");
+}
+async function renameAside(filePath, label) {
+  const asidePath = `${filePath}.corrupt-${Date.now()}`;
+  await rename(filePath, asidePath).catch(() => void 0);
+  await rename(`${filePath}-wal`, `${asidePath}-wal`).catch(() => void 0);
+  await rename(`${filePath}-shm`, `${asidePath}-shm`).catch(() => void 0);
+  process.stderr.write(
+    `[theokit-sdk] ${label} database corrupt; renamed aside to ${asidePath} and rebuilt schema
+`
+  );
+}
+
 // src/internal/memory/index-schema.ts
 var SCHEMA_STATEMENTS = [
   `CREATE TABLE IF NOT EXISTS files (
@@ -12810,52 +12891,15 @@ var PRAGMA_STATEMENTS = [
 
 // src/internal/memory/index-db.ts
 async function openMemoryDb(opts) {
-  await mkdir(dirname(opts.filePath), { recursive: true });
-  try {
-    return await openConcrete(opts.filePath);
-  } catch (cause) {
-    if (opts.recoverCorrupt !== false && isCorruptionError(cause)) {
-      await renameAside(opts.filePath);
-      return await openConcrete(opts.filePath);
+  return openSqliteResilient({
+    filePath: opts.filePath,
+    label: "memory-index",
+    recoverCorrupt: opts.recoverCorrupt,
+    onOpen: (db) => {
+      for (const pragma of PRAGMA_STATEMENTS) db.exec(pragma);
+      for (const stmt of SCHEMA_STATEMENTS) db.exec(stmt);
     }
-    throw cause;
-  }
-}
-async function openConcrete(filePath) {
-  const db = await loadDriver(filePath);
-  applyWalWithFallback(db, "memory-index");
-  for (const pragma of PRAGMA_STATEMENTS) db.exec(pragma);
-  for (const stmt of SCHEMA_STATEMENTS) db.exec(stmt);
-  return db;
-}
-async function loadDriver(filePath) {
-  try {
-    const mod = await import('better-sqlite3');
-    const Ctor = mod.default ?? mod;
-    const db = new Ctor(filePath);
-    return db;
-  } catch (cause) {
-    const message = cause instanceof Error ? cause.message : String(cause);
-    throw new ConfigurationError(
-      `Failed to load SQLite driver. Install \`better-sqlite3\` or run on Node 22.5+ for built-in \`node:sqlite\`. Cause: ${message}`,
-      { code: "sqlite_driver_unavailable", cause }
-    );
-  }
-}
-function isCorruptionError(cause) {
-  if (!(cause instanceof Error)) return false;
-  const msg = cause.message.toLowerCase();
-  return msg.includes("malformed") || msg.includes("not a database") || msg.includes("encrypted") || msg.includes("disk image is malformed");
-}
-async function renameAside(filePath) {
-  const asidePath = `${filePath}.corrupt-${Date.now()}`;
-  await rename(filePath, asidePath).catch(() => void 0);
-  await rename(`${filePath}-wal`, `${asidePath}-wal`).catch(() => void 0);
-  await rename(`${filePath}-shm`, `${asidePath}-shm`).catch(() => void 0);
-  process.stderr.write(
-    `[theokit-sdk] memory index corrupt; renamed aside to ${asidePath} and rebuilt schema
-`
-  );
+  });
 }
 function defaultIndexPath(cwd) {
   return join(cwd, ".theokit", "memory", ".index", "memory.sqlite");
@@ -14258,8 +14302,8 @@ function localAgentRunUntil(agent, goal, options) {
   async function* wrap() {
     const { runUntilImpl: runUntilImpl2 } = await Promise.resolve().then(() => (init_run_until(), run_until_exports));
     const { judgeCallImpl: judgeCallImpl2 } = await Promise.resolve().then(() => (init_judge_call(), judge_call_exports));
-    const { getAgentCreate: getAgentCreate2 } = await Promise.resolve().then(() => (init_agent_factory_registry(), agent_factory_registry_exports));
-    const create = getAgentCreate2();
+    const { getAgentFacade: getAgentFacade2 } = await Promise.resolve().then(() => (init_agent_factory_registry(), agent_factory_registry_exports));
+    const create = getAgentFacade2().create;
     const deps = {
       judge: async (ctx, opts) => judgeCallImpl2(ctx, opts, { create })
     };
@@ -14269,9 +14313,9 @@ function localAgentRunUntil(agent, goal, options) {
 }
 async function localAgentFork(parent, options) {
   const { forkAgentImpl: forkAgentImpl2 } = await Promise.resolve().then(() => (init_fork_agent(), fork_agent_exports));
-  const { getAgentCreate: getAgentCreate2 } = await Promise.resolve().then(() => (init_agent_factory_registry(), agent_factory_registry_exports));
+  const { getAgentFacade: getAgentFacade2 } = await Promise.resolve().then(() => (init_agent_factory_registry(), agent_factory_registry_exports));
   const { withPersonalityContext: withPersonalityContext2 } = await Promise.resolve().then(() => (init_context(), context_exports));
-  const create = getAgentCreate2();
+  const create = getAgentFacade2().create;
   return withPersonalityContext2(
     { slug: parent.personalitySlugSnapshot, isFork: true },
     () => forkAgentImpl2(parent, options, { create })
@@ -14292,7 +14336,7 @@ async function persistMemoryFactIfWritePrompt(workspaceCwd, memoryConfig, userTe
 // src/internal/runtime/local-agent/local-agent-send.ts
 init_errors();
 
-// src/internal/runtime/abort-utils.ts
+// src/internal/runtime/concurrency/abort-utils.ts
 function anySignal(signals) {
   const filtered = signals.filter((s) => s !== void 0);
   if (filtered.length === 0) {
@@ -15321,7 +15365,16 @@ async function getOrCreateUncached(agentId, options) {
     throw err;
   }
 }
-setAgentCreate((options) => Agent.create(options));
+setAgentFacade({
+  create: (options) => Agent.create(options),
+  prompt: (message, options) => Agent.prompt(message, options),
+  get: (agentId) => Agent.get(agentId),
+  resume: (agentId, options) => Agent.resume(agentId, options),
+  batch: (prompts, options) => Agent.batch(prompts, options)
+});
+
+// src/internal/eval/runner.ts
+init_agent_factory_registry();
 
 // src/internal/eval/aggregate.ts
 function percentile(sorted, p) {
@@ -15624,7 +15677,7 @@ async function runRowsViaBatch(entries, agentOptions, scorers, concurrency, sign
     concurrency,
     ...signal !== void 0 ? { signal } : {}
   };
-  const batchResults = await Agent.batch(prompts, batchOpts);
+  const batchResults = await getAgentFacade().batch(prompts, batchOpts);
   const rows = [];
   for (let i = 0; i < batchResults.length; i += 1) {
     const entry = entries[i];
@@ -15697,6 +15750,7 @@ async function runEval(options, runOpts) {
 }
 
 // src/internal/scorers/llm-judge.ts
+init_agent_factory_registry();
 function buildPrompt(subject, criteria, rubric, expected) {
   const scoreHint = rubric === "discrete" ? "between 0 and 1 (use 0 for fail, 1 for pass)" : "between 0.0 and 1.0";
   const expectedBlock = expected !== void 0 ? `EXPECTED (reference): ${JSON.stringify(expected)}
@@ -15721,7 +15775,7 @@ function buildPrompt(subject, criteria, rubric, expected) {
 var SCORE_REGEX = /\{\s*"score"\s*:\s*([0-9]*\.?[0-9]+)\s*,\s*"reason"\s*:\s*"([^"]*)"\s*\}/;
 async function callJudge(message, options) {
   try {
-    const result = await Agent.prompt(message, {
+    const result = await getAgentFacade().prompt(message, {
       apiKey: options.apiKey,
       model: options.model,
       local: { cwd: process.cwd(), sandboxOptions: { enabled: false } },