@theokit/sdk 2.0.0 → 2.1.0

package/dist/index.js

@@ -1,7 +1,7 @@
+import { createHash, randomUUID, randomBytes } from 'crypto';
 import { existsSync, rmSync, mkdirSync, renameSync, readFileSync, realpathSync, lstatSync, readlinkSync, readdirSync } from 'fs';
 import { join, dirname, relative, resolve, sep, isAbsolute } from 'path';
-import { createHash, randomUUID, randomBytes } from 'crypto';
-import { readFile, stat, rm, readdir, mkdir, appendFile, rename, open, unlink, statfs, access } from 'fs/promises';
+import { readFile, stat, rm, readdir, mkdir, appendFile, open, rename, unlink, statfs, access } from 'fs/promises';
 import { z, toJSONSchema } from 'zod';
 import { AsyncLocalStorage } from 'async_hooks';
 import { createRequire } from 'module';
@@ -20,6 +20,24 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/internal/default-retriable.ts
+function defaultRetriableForCode(code) {
+  switch (code) {
+    case "rate_limit":
+    case "timeout":
+    case "server_error":
+    case "network":
+    case "provider_unreachable":
+      return true;
+    default:
+      return false;
+  }
+}
+var init_default_retriable = __esm({
+  "src/internal/default-retriable.ts"() {
+  }
+});
+
 // src/internal/security/redact.ts
 function readEnvOnce() {
   const raw = process.env.THEOKIT_REDACT_SECRETS;
@@ -176,7 +194,8 @@ __export(errors_exports, {
   UnsupportedBudgetOperationError: () => UnsupportedBudgetOperationError,
   UnsupportedRunOperationError: () => UnsupportedRunOperationError,
   UnsupportedTaskOperationError: () => UnsupportedTaskOperationError,
-  coerceToKnownAgentRunErrorCode: () => coerceToKnownAgentRunErrorCode
+  coerceToKnownAgentRunErrorCode: () => coerceToKnownAgentRunErrorCode,
+  isTransientError: () => isTransientError
 });
 function coerceToKnownAgentRunErrorCode(code) {
   if (code !== void 0 && KNOWN_AGENT_RUN_ERROR_CODES.has(code)) {
@@ -208,21 +227,13 @@ function safeStringify(value) {
     return String(value);
   }
 }
-function defaultRetriableForCode(code) {
-  switch (code) {
-    case "rate_limit":
-    case "timeout":
-    case "server_error":
-    case "network":
-    case "provider_unreachable":
-      return true;
-    default:
-      return false;
-  }
+function isTransientError(err) {
+  return err instanceof TheokitAgentError && err.isRetryable === true;
 }
 var KNOWN_AGENT_RUN_ERROR_CODES, TheokitAgentError, AuthenticationError, RateLimitError, ConfigurationError, IntegrationNotConnectedError, NetworkError, UnknownAgentError, AgentRunError, UnsupportedRunOperationError, CredentialPoolExhaustedError, MemoryAdapterError, InvalidTaskIdError, TaskNotFoundError, UnsupportedTaskOperationError, BudgetExceededError, AgentDisposedError, UnsupportedBudgetOperationError;
 var init_errors = __esm({
   "src/errors.ts"() {
+    init_default_retriable();
     init_redact();
     KNOWN_AGENT_RUN_ERROR_CODES = /* @__PURE__ */ new Set([
       "rate_limit",
@@ -646,6 +657,19 @@ function sanitizeIdentifier(input, options) {
   }
   return input.toLowerCase();
 }
+function safeFilenameForId(id, options) {
+  if (id.length === 0) {
+    throw new ConfigurationError("Filename id must be a non-empty string", {
+      code: "invalid_filename_id"
+    });
+  }
+  const maxLen = options?.maxLen;
+  const lower = id.toLowerCase();
+  if (lower.length <= maxLen && IDENTIFIER_PATTERN.test(lower)) {
+    return lower;
+  }
+  return `h-${createHash("sha256").update(id).digest("hex").slice(0, 16)}`;
+}
 var PathTraversalError, IDENTIFIER_PATTERN;
 var init_path_guard = __esm({
   "src/internal/security/path-guard.ts"() {
@@ -836,7 +860,7 @@ var init_markdown_store = __esm({
   }
 });
 
-// src/internal/runtime/yaml-frontmatter.ts
+// src/internal/runtime/context/yaml-frontmatter.ts
 function parseSimpleYaml(text) {
   const fields = {};
   for (const line of text.split(/\r?\n/)) {
@@ -860,7 +884,7 @@ function coerce(raw) {
   return raw;
 }
 var init_yaml_frontmatter = __esm({
-  "src/internal/runtime/yaml-frontmatter.ts"() {
+  "src/internal/runtime/context/yaml-frontmatter.ts"() {
   }
 });
 async function loadMarkdownEntities(opts) {
@@ -1048,10 +1072,7 @@ function sessionsDir(cwd) {
   return join(memoryDir(cwd), "sessions");
 }
 function sessionSummaryPath(cwd, runId) {
-  return join(sessionsDir(cwd), `${sanitizeRunId(runId)}.md`);
-}
-function sanitizeRunId(runId) {
-  return runId.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 128);
+  return join(sessionsDir(cwd), `${safeFilenameForId(runId, { maxLen: 128 })}.md`);
 }
 function truncate(text) {
   if (text.length <= MAX_TURN_CHARS) return text;
@@ -1087,6 +1108,7 @@ var MAX_TURN_CHARS;
 var init_session_summary_writer = __esm({
   "src/internal/memory/storage/session-summary-writer.ts"() {
     init_atomic_write();
+    init_path_guard();
     init_types();
     init_markdown_store();
     MAX_TURN_CHARS = 2e3;
@@ -1111,11 +1133,54 @@ function checkToolWhitelist(toolName) {
 }
 var toolWhitelistStore;
 var init_async_local_storage = __esm({
-  "src/internal/runtime/async-local-storage.ts"() {
+  "src/internal/runtime/concurrency/async-local-storage.ts"() {
     toolWhitelistStore = new AsyncLocalStorage();
   }
 });
 
+// src/internal/runtime/concurrency/async-semaphore.ts
+function createSemaphore(permits) {
+  if (!Number.isInteger(permits) || permits < 1) {
+    throw new ConfigurationError(
+      `async-semaphore: permits must be a positive integer, got ${permits}`,
+      { code: "invalid_concurrency" }
+    );
+  }
+  let active = 0;
+  const queue = [];
+  function tryGrant() {
+    if (active < permits && queue.length > 0) {
+      const resolve3 = queue.shift();
+      if (resolve3 !== void 0) {
+        active += 1;
+        resolve3();
+      }
+    }
+  }
+  return {
+    inFlight: () => active,
+    pending: () => queue.length + active,
+    async acquire() {
+      await new Promise((resolve3) => {
+        queue.push(resolve3);
+        tryGrant();
+      });
+      let released = false;
+      return () => {
+        if (released) return;
+        released = true;
+        active -= 1;
+        tryGrant();
+      };
+    }
+  };
+}
+var init_async_semaphore = __esm({
+  "src/internal/runtime/concurrency/async-semaphore.ts"() {
+    init_errors();
+  }
+});
+
 // src/internal/llm/credential-pool-types.ts
 var COOLDOWN_MS, DEFAULT_COOLDOWN_MS;
 var init_credential_pool_types = __esm({
@@ -1497,6 +1562,61 @@ var init_sqlite_wal = __esm({
     warnedLabels = /* @__PURE__ */ new Set();
   }
 });
+async function openSqliteResilient(options) {
+  await mkdir(dirname(options.filePath), { recursive: true });
+  try {
+    return await openConcrete(options);
+  } catch (cause) {
+    if (options.recoverCorrupt !== false && isCorruptionError(cause)) {
+      await renameAside(options.filePath, options.label ?? "sqlite");
+      return await openConcrete(options);
+    }
+    throw cause;
+  }
+}
+async function openConcrete(options) {
+  const db = await loadDriver(options.filePath);
+  applyWalWithFallback(db, options.label ?? "sqlite");
+  await options.onOpen?.(db);
+  return db;
+}
+async function loadDriver(filePath) {
+  try {
+    const mod = await import('better-sqlite3');
+    const Ctor = mod.default ?? mod;
+    if (typeof Ctor !== "function") {
+      throw new Error(`better-sqlite3 export is not a constructor (got ${typeof Ctor})`);
+    }
+    return new Ctor(filePath);
+  } catch (cause) {
+    const message = cause instanceof Error ? cause.message : String(cause);
+    throw new ConfigurationError(
+      `Failed to load SQLite driver. Install \`better-sqlite3\` or run on Node 22.5+ for built-in \`node:sqlite\`. Cause: ${message}`,
+      { code: "sqlite_driver_unavailable", cause }
+    );
+  }
+}
+function isCorruptionError(cause) {
+  if (!(cause instanceof Error)) return false;
+  const msg = cause.message.toLowerCase();
+  return msg.includes("malformed") || msg.includes("not a database") || msg.includes("encrypted") || msg.includes("disk image is malformed");
+}
+async function renameAside(filePath, label) {
+  const asidePath = `${filePath}.corrupt-${Date.now()}`;
+  await rename(filePath, asidePath).catch(() => void 0);
+  await rename(`${filePath}-wal`, `${asidePath}-wal`).catch(() => void 0);
+  await rename(`${filePath}-shm`, `${asidePath}-shm`).catch(() => void 0);
+  process.stderr.write(
+    `[theokit-sdk] ${label} database corrupt; renamed aside to ${asidePath} and rebuilt schema
+`
+  );
+}
+var init_sqlite_open = __esm({
+  "src/internal/persistence/sqlite-open.ts"() {
+    init_errors();
+    init_sqlite_wal();
+  }
+});
 
 // src/internal/memory/index-schema.ts
 var SCHEMA_STATEMENTS, PRAGMA_STATEMENTS;
@@ -1544,60 +1664,22 @@ var init_index_schema = __esm({
   }
 });
 async function openMemoryDb(opts) {
-  await mkdir(dirname(opts.filePath), { recursive: true });
-  try {
-    return await openConcrete(opts.filePath);
-  } catch (cause) {
-    if (opts.recoverCorrupt !== false && isCorruptionError(cause)) {
-      await renameAside(opts.filePath);
-      return await openConcrete(opts.filePath);
+  return openSqliteResilient({
+    filePath: opts.filePath,
+    label: "memory-index",
+    recoverCorrupt: opts.recoverCorrupt,
+    onOpen: (db) => {
+      for (const pragma of PRAGMA_STATEMENTS) db.exec(pragma);
+      for (const stmt of SCHEMA_STATEMENTS) db.exec(stmt);
     }
-    throw cause;
-  }
-}
-async function openConcrete(filePath) {
-  const db = await loadDriver(filePath);
-  applyWalWithFallback(db, "memory-index");
-  for (const pragma of PRAGMA_STATEMENTS) db.exec(pragma);
-  for (const stmt of SCHEMA_STATEMENTS) db.exec(stmt);
-  return db;
-}
-async function loadDriver(filePath) {
-  try {
-    const mod = await import('better-sqlite3');
-    const Ctor = mod.default ?? mod;
-    const db = new Ctor(filePath);
-    return db;
-  } catch (cause) {
-    const message = cause instanceof Error ? cause.message : String(cause);
-    throw new ConfigurationError(
-      `Failed to load SQLite driver. Install \`better-sqlite3\` or run on Node 22.5+ for built-in \`node:sqlite\`. Cause: ${message}`,
-      { code: "sqlite_driver_unavailable", cause }
-    );
-  }
-}
-function isCorruptionError(cause) {
-  if (!(cause instanceof Error)) return false;
-  const msg = cause.message.toLowerCase();
-  return msg.includes("malformed") || msg.includes("not a database") || msg.includes("encrypted") || msg.includes("disk image is malformed");
-}
-async function renameAside(filePath) {
-  const asidePath = `${filePath}.corrupt-${Date.now()}`;
-  await rename(filePath, asidePath).catch(() => void 0);
-  await rename(`${filePath}-wal`, `${asidePath}-wal`).catch(() => void 0);
-  await rename(`${filePath}-shm`, `${asidePath}-shm`).catch(() => void 0);
-  process.stderr.write(
-    `[theokit-sdk] memory index corrupt; renamed aside to ${asidePath} and rebuilt schema
-`
-  );
+  });
 }
 function defaultIndexPath(cwd) {
   return join(cwd, ".theokit", "memory", ".index", "memory.sqlite");
 }
 var init_index_db = __esm({
   "src/internal/memory/index-db.ts"() {
-    init_errors();
-    init_sqlite_wal();
+    init_sqlite_open();
     init_index_schema();
   }
 });
@@ -2490,7 +2572,7 @@ var init_local_agent_plugins = __esm({
   }
 });
 
-// src/internal/runtime/run-until.ts
+// src/internal/runtime/lifecycle/run-until.ts
 var run_until_exports = {};
 __export(run_until_exports, {
   composeContinuation: () => composeContinuation,
@@ -2583,7 +2665,7 @@ Your last response was:
 ${lastResponse.slice(0, 1e3)}`;
 }
 var init_run_until = __esm({
-  "src/internal/runtime/run-until.ts"() {
+  "src/internal/runtime/lifecycle/run-until.ts"() {
   }
 });
 
@@ -2694,16 +2776,16 @@ var init_judge_call = __esm({
 // src/internal/runtime/registry/agent-factory-registry.ts
 var agent_factory_registry_exports = {};
 __export(agent_factory_registry_exports, {
-  getAgentCreate: () => getAgentCreate,
-  setAgentCreate: () => setAgentCreate
+  getAgentFacade: () => getAgentFacade,
+  setAgentFacade: () => setAgentFacade
 });
-function setAgentCreate(fn) {
-  registered3 = fn;
+function setAgentFacade(facade) {
+  registered3 = facade;
 }
-function getAgentCreate() {
+function getAgentFacade() {
   if (registered3 === void 0) {
     throw new Error(
-      "internal: Agent.create not registered. The `agent.ts` module must be loaded before LocalAgent.runUntil/fork are invoked."
+      "internal: Agent facade not registered. The `agent.ts` module must be loaded before internal subsystems (LocalAgent.runUntil/fork, eval, scorers, cron) invoke it."
     );
   }
   return registered3;
@@ -2714,7 +2796,7 @@ var init_agent_factory_registry = __esm({
   }
 });
 
-// src/internal/runtime/fork-agent.ts
+// src/internal/runtime/lifecycle/fork-agent.ts
 var fork_agent_exports = {};
 __export(fork_agent_exports, {
   filterMemoryPlugins: () => filterMemoryPlugins,
@@ -2774,7 +2856,7 @@ function extractUsage(result) {
   };
 }
 var init_fork_agent = __esm({
-  "src/internal/runtime/fork-agent.ts"() {
+  "src/internal/runtime/lifecycle/fork-agent.ts"() {
     init_async_local_storage();
     init_local_agent_plugins();
   }
@@ -2797,49 +2879,6 @@ var init_task = __esm({
   }
 });
 
-// src/internal/runtime/async-semaphore.ts
-function createSemaphore(permits) {
-  if (!Number.isInteger(permits) || permits < 1) {
-    throw new ConfigurationError(
-      `async-semaphore: permits must be a positive integer, got ${permits}`,
-      { code: "invalid_concurrency" }
-    );
-  }
-  let active = 0;
-  const queue = [];
-  function tryGrant() {
-    if (active < permits && queue.length > 0) {
-      const resolve3 = queue.shift();
-      if (resolve3 !== void 0) {
-        active += 1;
-        resolve3();
-      }
-    }
-  }
-  return {
-    inFlight: () => active,
-    pending: () => queue.length + active,
-    async acquire() {
-      await new Promise((resolve3) => {
-        queue.push(resolve3);
-        tryGrant();
-      });
-      let released = false;
-      return () => {
-        if (released) return;
-        released = true;
-        active -= 1;
-        tryGrant();
-      };
-    }
-  };
-}
-var init_async_semaphore = __esm({
-  "src/internal/runtime/async-semaphore.ts"() {
-    init_errors();
-  }
-});
-
 // src/internal/task/ring-buffer.ts
 var RingBuffer;
 var init_ring_buffer = __esm({
@@ -5648,7 +5687,7 @@ init_errors();
 init_cwd_mutex();
 init_path_guard();
 
-// src/internal/runtime/default-model.ts
+// src/internal/runtime/config/default-model.ts
 var DEFAULT_AGENTIC_MODEL_ID = "google/gemini-2.0-flash-001";
 
 // src/internal/runtime/registry/agent-registry-store.ts
@@ -5969,7 +6008,7 @@ async function flushRegistrySaves(cwd) {
   }
 }
 
-// src/internal/runtime/system-prompt.ts
+// src/internal/runtime/system-prompt/system-prompt.ts
 async function resolveSystemPrompt(agent, override, ctx) {
   if (override !== void 0) return override;
   if (agent === void 0) return void 0;
@@ -8264,6 +8303,9 @@ function parseDecisionFromStdout(stdout) {
   return { decision: "allow" };
 }
 
+// src/internal/runtime/lifecycle/post-run-lifecycle.ts
+init_session_summary_writer();
+
 // src/internal/runtime/memory/memory-path-selector.ts
 var PORT_MEMORY_PATH_ENV_VAR = "THEOKIT_PORT_MEMORY_PATH";
 function shouldUsePortMemoryPath() {
@@ -8286,9 +8328,6 @@ function resolveActiveMemorySummaryForSend(legacySummary, portPathEnabled) {
   return legacySummary;
 }
 
-// src/internal/runtime/post-run-lifecycle.ts
-init_session_summary_writer();
-
 // src/internal/runtime/session/agent-session-store.ts
 init_atomic_write();
 init_security();
@@ -8547,7 +8586,7 @@ function clearSession(agentId) {
   sessions.delete(agentId);
 }
 
-// src/internal/runtime/post-run-lifecycle.ts
+// src/internal/runtime/lifecycle/post-run-lifecycle.ts
 async function runPostRunLifecycle(inputs) {
   const {
     run,
@@ -8779,7 +8818,7 @@ var liveAgentRegistry = new LiveAgentRegistry();
 // src/internal/runtime/skills/subagents-loader.ts
 init_errors();
 
-// src/internal/runtime/workspace-dir.ts
+// src/internal/runtime/config/workspace-dir.ts
 init_errors();
 async function readWorkspaceDir(root, errorCode, describe) {
   try {
@@ -9065,7 +9104,7 @@ var SystemPromptPipeline = class _SystemPromptPipeline {
   }
 };
 
-// src/internal/runtime/validate-agent-options.ts
+// src/internal/runtime/validation/validate-agent-options.ts
 init_errors();
 function validateAgentOptions(options) {
   rejectProgrammaticHooks(options);
@@ -9260,6 +9299,71 @@ function validateMemory(options) {
   }
 }
 
+// src/internal/runtime/config/providers-manager.ts
+var ProvidersManagerImpl = class {
+  constructor(model, providers, plugins) {
+    this.model = model;
+    this.providers = providers;
+    this.plugins = plugins;
+  }
+  model;
+  providers;
+  plugins;
+  routes() {
+    const resolved = [];
+    const modelProvider = providerFromModel(this.model);
+    const seen = /* @__PURE__ */ new Set();
+    if (this.providers?.routes !== void 0) {
+      for (const route of this.providers.routes) {
+        const resolvedRoute = resolveRoute(route, modelProvider, this.plugins);
+        if (!seen.has(route.capability)) {
+          seen.add(route.capability);
+          resolved.push(resolvedRoute);
+        }
+      }
+    }
+    return Promise.resolve(resolved);
+  }
+};
+function providerFromModel(model) {
+  if (model === void 0) return void 0;
+  const id = model.id;
+  if (id.includes(":")) return id.split(":")[0];
+  return void 0;
+}
+function resolveRoute(route, modelProvider, plugins) {
+  if (route.capability === "chat" && modelProvider === route.provider) {
+    const modelName = extractModelName(modelProvider, route);
+    const base = {
+      capability: route.capability,
+      provider: route.provider,
+      reason: "explicit-model-provider"
+    };
+    if (modelName !== void 0) base.model = modelName;
+    return base;
+  }
+  if (plugins?.enabled !== void 0 && plugins.enabled.length > 0) {
+    return {
+      capability: route.capability,
+      provider: route.provider,
+      reason: "first-available-plugin-provider"
+    };
+  }
+  return {
+    capability: route.capability,
+    provider: route.provider,
+    reason: "explicit-route"
+  };
+}
+function extractModelName(prefix, route) {
+  if (route.model !== void 0) return route.model;
+  return prefix === route.provider ? defaultModelForProvider(prefix) : void 0;
+}
+function defaultModelForProvider(provider) {
+  if (provider === "anthropic") return "claude-3-7-sonnet";
+  return void 0;
+}
+
 // src/internal/runtime/context/context-manager.ts
 init_errors();
 init_markdown_config_loader();
@@ -10057,71 +10161,6 @@ async function loadPluginManifestFromMarkdown(pluginsRoot, folderName) {
   return metadata;
 }
 
-// src/internal/runtime/providers-manager.ts
-var ProvidersManagerImpl = class {
-  constructor(model, providers, plugins) {
-    this.model = model;
-    this.providers = providers;
-    this.plugins = plugins;
-  }
-  model;
-  providers;
-  plugins;
-  routes() {
-    const resolved = [];
-    const modelProvider = providerFromModel(this.model);
-    const seen = /* @__PURE__ */ new Set();
-    if (this.providers?.routes !== void 0) {
-      for (const route of this.providers.routes) {
-        const resolvedRoute = resolveRoute(route, modelProvider, this.plugins);
-        if (!seen.has(route.capability)) {
-          seen.add(route.capability);
-          resolved.push(resolvedRoute);
-        }
-      }
-    }
-    return Promise.resolve(resolved);
-  }
-};
-function providerFromModel(model) {
-  if (model === void 0) return void 0;
-  const id = model.id;
-  if (id.includes(":")) return id.split(":")[0];
-  return void 0;
-}
-function resolveRoute(route, modelProvider, plugins) {
-  if (route.capability === "chat" && modelProvider === route.provider) {
-    const modelName = extractModelName(modelProvider, route);
-    const base = {
-      capability: route.capability,
-      provider: route.provider,
-      reason: "explicit-model-provider"
-    };
-    if (modelName !== void 0) base.model = modelName;
-    return base;
-  }
-  if (plugins?.enabled !== void 0 && plugins.enabled.length > 0) {
-    return {
-      capability: route.capability,
-      provider: route.provider,
-      reason: "first-available-plugin-provider"
-    };
-  }
-  return {
-    capability: route.capability,
-    provider: route.provider,
-    reason: "explicit-route"
-  };
-}
-function extractModelName(prefix, route) {
-  if (route.model !== void 0) return route.model;
-  return prefix === route.provider ? defaultModelForProvider(prefix) : void 0;
-}
-function defaultModelForProvider(provider) {
-  if (provider === "anthropic") return "claude-3-7-sonnet";
-  return void 0;
-}
-
 // src/internal/runtime/skills/skills-manager.ts
 init_errors();
 init_path_guard();
@@ -10469,7 +10508,7 @@ var IterationBudget = class {
   }
 };
 
-// src/internal/runtime/validate-response.ts
+// src/internal/runtime/validation/validate-response.ts
 function validateResponse(response) {
   const trimmed = response.content.trim();
   const toolCallsArr = Array.isArray(response.toolCalls) ? response.toolCalls : [];
@@ -10855,6 +10894,27 @@ async function emitTextDeltaCallback(inputs, text) {
 // src/internal/agent-loop/tool-dispatch.ts
 init_async_local_storage();
 
+// src/internal/runtime/concurrency/map-with-concurrency.ts
+init_async_semaphore();
+var NEVER_ABORT = new AbortController().signal;
+async function mapWithConcurrency(items, concurrency, fn, options) {
+  const semaphore = createSemaphore(concurrency);
+  const signal = NEVER_ABORT;
+  return Promise.all(
+    items.map(async (item, index) => {
+      const release = await semaphore.acquire();
+      try {
+        if (signal.aborted) {
+          throw signal.reason instanceof Error ? signal.reason : new Error("mapWithConcurrency: aborted");
+        }
+        return await fn(item, index, signal);
+      } finally {
+        release();
+      }
+    })
+  );
+}
+
 // src/internal/tool-dispatch/repair-middleware.ts
 var DECIMAL_RE = /^-?\d+(\.\d+)?$/;
 function repairToolCall(raw, registry3) {
@@ -10928,7 +10988,7 @@ function coerceArgsToSchema(args, schema) {
   return { value: out, changed };
 }
 
-// src/internal/runtime/shell-tool.ts
+// src/internal/runtime/tools/shell-tool.ts
 async function runShell(options) {
   if (options.sandbox === true && isObviouslyUnsafe(options.command)) {
     return {
@@ -11029,38 +11089,12 @@ ${result.stderr}`.trim();
 // src/internal/agent-loop/tool-dispatch.ts
 async function dispatchTools(inputs, tools, toolCalls, events) {
   const maxConcurrent = inputs.maxConcurrentTools ?? 4;
-  return boundedParallel(
-    maxConcurrent,
+  return mapWithConcurrency(
     toolCalls,
+    maxConcurrent,
     (call) => dispatchSingleCall(inputs, tools, call, events)
   );
 }
-async function boundedParallel(max, items, fn) {
-  let running = 0;
-  const queue = [];
-  async function acquire() {
-    if (running < max) {
-      running++;
-      return;
-    }
-    await new Promise((resolve3) => queue.push(resolve3));
-    running++;
-  }
-  function release() {
-    running--;
-    if (queue.length > 0) queue.shift()();
-  }
-  return Promise.all(
-    items.map(async (item) => {
-      await acquire();
-      try {
-        return await fn(item);
-      } finally {
-        release();
-      }
-    })
-  );
-}
 async function dispatchSingleCall(inputs, tools, call, events) {
   const { call: workingCall, repairs } = applyRepairAndExtractCall(tools, call);
   const callId = generateCallId();
@@ -12143,10 +12177,10 @@ function registerBuiltins() {
   registerCatalogProviders();
 }
 
-// src/internal/errors/mappers/anthropic.ts
+// src/internal/error-mappers/anthropic.ts
 init_errors();
 
-// src/internal/errors/mappers/shared.ts
+// src/internal/error-mappers/shared.ts
 init_security();
 var RAW_MAX_BYTES = 2048;
 function parseRetryAfter(headers) {
@@ -12176,7 +12210,7 @@ function buildErrorMetadata(args) {
   };
 }
 
-// src/internal/errors/mappers/anthropic.ts
+// src/internal/error-mappers/anthropic.ts
 function mapAnthropicError(args) {
   const { status, body, headers, endpoint } = args;
   const code = mapAnthropicStatusToCode(status, body);
@@ -12516,7 +12550,7 @@ function buildAnthropicBody(request) {
 // src/internal/llm/bedrock-anthropic.ts
 init_errors();
 
-// src/internal/errors/mappers/bedrock.ts
+// src/internal/error-mappers/bedrock.ts
 init_errors();
 function classifyBedrockError(args, awsType, message) {
   if (args.status === 429 || awsType.includes("Throttling") || awsType.includes("TooManyRequests")) {
@@ -12653,7 +12687,7 @@ function buildBedrockBody(request) {
 init_credential_pool();
 init_credential_pool_context();
 
-// src/internal/errors/mappers/openai-compatible.ts
+// src/internal/error-mappers/openai-compatible.ts
 init_errors();
 function mapOpenAICompatibleError(args) {
   const { providerId, status, body, headers, endpoint } = args;
@@ -12817,7 +12851,7 @@ function readOpenAiContent(body) {
   return void 0;
 }
 
-// src/internal/errors/mappers/ollama.ts
+// src/internal/error-mappers/ollama.ts
 init_errors();
 function mapOllamaTransportError(args) {
   if (args.providerId !== "ollama") return void 0;
@@ -13467,7 +13501,7 @@ function abortError2(signal) {
 // src/internal/llm/vertex-anthropic.ts
 init_errors();
 
-// src/internal/errors/mappers/vertex.ts
+// src/internal/error-mappers/vertex.ts
 init_errors();
 var VERTEX_RULES = [
   { test: (s, e) => s === 429 || e === "RESOURCE_EXHAUSTED", code: "rate_limit" },
@@ -14010,6 +14044,16 @@ function resolveMcpCwd(configCwd) {
   return safePathJoin(process.cwd(), configCwd);
 }
 
+// src/internal/providers/register-plugin-providers.ts
+function registerPluginProviderProfiles(entries) {
+  let registered4 = 0;
+  for (const entry of entries) {
+    registerProvider(entry.profile);
+    registered4 += 1;
+  }
+  return registered4;
+}
+
 // src/internal/tool-registry/personality-filter.ts
 init_hooks_source();
 function applyPersonalityFilter(exposedTools, whitelist, opts) {
@@ -14086,12 +14130,27 @@ function createRealLocalRun(options) {
   registerRun(handle);
   return handle;
 }
-function buildLoopInputs(options, runId, userText) {
+var pluginProvidersAnnounced = false;
+function resolveRunProvider(options) {
   registerBuiltins();
+  const profiles = options.pluginManager?.aggregated.providerProfiles ?? [];
+  const registered4 = registerPluginProviderProfiles(profiles);
+  if (registered4 > 0 && !pluginProvidersAnnounced) {
+    pluginProvidersAnnounced = true;
+    const names = profiles.map((e) => e.profile.name).join(", ");
+    process.stderr.write(
+      `[theokit-sdk] registered ${registered4} plugin provider profile(s): ${names}
+`
+    );
+  }
   const parsedModel = parseModelId(options.model?.id);
   const inferredProvider = parsedModel.provider !== void 0 && getProviderProfile(parsedModel.provider) !== void 0 ? parsedModel.provider : void 0;
   const primary = options.agentOptions.providers?.routes?.[0]?.provider ?? inferredProvider ?? detectPrimaryProvider();
   const effectiveModelId = inferredProvider !== void 0 ? parsedModel.name : options.model?.id ?? "claude-sonnet-4-6";
+  return { primary, effectiveModelId };
+}
+function buildLoopInputs(options, runId, userText) {
+  const { primary, effectiveModelId } = resolveRunProvider(options);
   const fallback = options.agentOptions.providers?.fallback;
   const apiKeys = options.agentOptions.providers?.apiKeys;
   const credentialPoolStrategy = options.agentOptions.providers?.credentialPoolStrategy;
@@ -14681,7 +14740,7 @@ async function embedTexts(input) {
       pending
     });
   }
-  await runBatches(input, pending, results);
+  await embedInBoundedBatches(input, pending, results);
   return results.map((v) => v ?? new Array(dimension).fill(0));
 }
 function classifyEntry(args) {
@@ -14700,45 +14759,34 @@ function classifyEntry(args) {
   args.pending.push({ index: args.index, text: args.text, key: key2 });
 }
 var MAX_CONCURRENT_BATCHES = 3;
-async function runBatches(input, pending, results) {
+async function embedInBoundedBatches(input, pending, results) {
   const batches = [];
   for (let offset = 0; offset < pending.length; offset += MAX_BATCH) {
     batches.push(pending.slice(offset, offset + MAX_BATCH));
   }
-  let running = 0;
-  const queue = [];
-  await Promise.all(batches.map((batch) => processBatch(input, batch, results, acquire, release)));
-  async function acquire() {
-    if (running >= MAX_CONCURRENT_BATCHES) await new Promise((r) => queue.push(r));
-    running++;
-  }
-  function release() {
-    running--;
-    if (queue.length > 0) queue.shift()();
-  }
+  await mapWithConcurrency(
+    batches,
+    MAX_CONCURRENT_BATCHES,
+    (batch) => processBatch(input, batch, results)
+  );
 }
-async function processBatch(input, batch, results, acquire, release) {
-  await acquire();
-  try {
-    const vectors = await embedBatch({
-      apiKey: input.apiKey,
-      baseUrl: input.baseUrl,
-      embeddingsPath: input.embeddingsPath,
-      model: input.model,
-      inputs: batch.map((b) => b.text),
-      fetchImpl: input.fetchImpl,
-      stats: input.stats,
-      providerId: input.providerId
-    });
-    for (let j = 0; j < batch.length; j++) {
-      const slot = batch[j];
-      const vector = vectors[j];
-      if (slot === void 0 || vector === void 0) continue;
-      results[slot.index] = vector;
-      input.cache.set(slot.key, vector);
-    }
-  } finally {
-    release();
+async function processBatch(input, batch, results) {
+  const vectors = await embedBatch({
+    apiKey: input.apiKey,
+    baseUrl: input.baseUrl,
+    embeddingsPath: input.embeddingsPath,
+    model: input.model,
+    inputs: batch.map((b) => b.text),
+    fetchImpl: input.fetchImpl,
+    stats: input.stats,
+    providerId: input.providerId
+  });
+  for (let j = 0; j < batch.length; j++) {
+    const slot = batch[j];
+    const vector = vectors[j];
+    if (slot === void 0 || vector === void 0) continue;
+    results[slot.index] = vector;
+    input.cache.set(slot.key, vector);
   }
 }
 async function embedBatch(opts) {
@@ -15784,8 +15832,8 @@ function localAgentRunUntil(agent, goal, options) {
   async function* wrap() {
     const { runUntilImpl: runUntilImpl2 } = await Promise.resolve().then(() => (init_run_until(), run_until_exports));
     const { judgeCallImpl: judgeCallImpl2 } = await Promise.resolve().then(() => (init_judge_call(), judge_call_exports));
-    const { getAgentCreate: getAgentCreate2 } = await Promise.resolve().then(() => (init_agent_factory_registry(), agent_factory_registry_exports));
-    const create = getAgentCreate2();
+    const { getAgentFacade: getAgentFacade2 } = await Promise.resolve().then(() => (init_agent_factory_registry(), agent_factory_registry_exports));
+    const create = getAgentFacade2().create;
     const deps = {
       judge: async (ctx, opts) => judgeCallImpl2(ctx, opts, { create })
     };
@@ -15795,9 +15843,9 @@ function localAgentRunUntil(agent, goal, options) {
 }
 async function localAgentFork(parent, options) {
   const { forkAgentImpl: forkAgentImpl2 } = await Promise.resolve().then(() => (init_fork_agent(), fork_agent_exports));
-  const { getAgentCreate: getAgentCreate2 } = await Promise.resolve().then(() => (init_agent_factory_registry(), agent_factory_registry_exports));
+  const { getAgentFacade: getAgentFacade2 } = await Promise.resolve().then(() => (init_agent_factory_registry(), agent_factory_registry_exports));
   const { withPersonalityContext: withPersonalityContext2 } = await Promise.resolve().then(() => (init_context(), context_exports));
-  const create = getAgentCreate2();
+  const create = getAgentFacade2().create;
   return withPersonalityContext2(
     { slug: parent.personalitySlugSnapshot, isFork: true },
     () => forkAgentImpl2(parent, options, { create })
@@ -15818,7 +15866,7 @@ async function persistMemoryFactIfWritePrompt(workspaceCwd, memoryConfig, userTe
 // src/internal/runtime/local-agent/local-agent-send.ts
 init_errors();
 
-// src/internal/runtime/abort-utils.ts
+// src/internal/runtime/concurrency/abort-utils.ts
 function anySignal(signals) {
   const filtered = signals.filter((s) => s !== void 0);
   if (filtered.length === 0) {
@@ -16847,7 +16895,13 @@ async function getOrCreateUncached(agentId, options) {
     throw err;
   }
 }
-setAgentCreate((options) => Agent.create(options));
+setAgentFacade({
+  create: (options) => Agent.create(options),
+  prompt: (message, options) => Agent.prompt(message, options),
+  get: (agentId) => Agent.get(agentId),
+  resume: (agentId, options) => Agent.resume(agentId, options),
+  batch: (prompts, options) => Agent.batch(prompts, options)
+});
 
 // src/agent-factory.ts
 function createAgentFactory(common) {
@@ -17285,6 +17339,7 @@ init_errors();
 
 // src/internal/cron/run-job.ts
 init_errors();
+init_agent_factory_registry();
 async function runCronJob(job) {
   if (job.agent !== void 0) return runWithEphemeralAgent(job.agent, job.message);
   if (job.agentId !== void 0) return runWithExistingAgent(job.agentId, job.message);
@@ -17293,18 +17348,18 @@ async function runCronJob(job) {
   });
 }
 async function runWithExistingAgent(agentId, message) {
-  const info = await Agent.get(agentId).catch(() => void 0);
+  const info = await getAgentFacade().get(agentId).catch(() => void 0);
   if (info === void 0) {
     throw new UnknownAgentError(
       `Cron job references agentId "${agentId}" but no such agent is registered. The agent may have been disposed or the process restarted without persisting the agent registry.`,
       { code: "agent_not_registered" }
     );
   }
-  const agent = await Agent.resume(agentId);
+  const agent = await getAgentFacade().resume(agentId);
   return agent.send(message);
 }
 async function runWithEphemeralAgent(baseOptions, message) {
-  const agent = await Agent.create(baseOptions);
+  const agent = await getAgentFacade().create(baseOptions);
   return agent.send(message);
 }
 
@@ -17692,6 +17747,16 @@ async function updateJobStatus(jobId, enabled) {
   return updated;
 }
 
+// src/define-provider.ts
+function defineProvider(profile, opts) {
+  return {
+    name: profile.name,
+    version: opts?.version ?? "1.0.0",
+    kind: "model-provider",
+    profile
+  };
+}
+
 // src/define-tool.ts
 init_to_json_schema();
 function defineTool(spec) {
@@ -19201,6 +19266,6 @@ function safeStringify2(v) {
   }
 }
 
-export { Agent, AgentBuilder, AgentDisposedError, AgentRunError, AuthenticationError, Budget, BudgetExceededError, ConfigurationError, Cron, EventBus, FileSystemConversationStorage, GenerateObjectError, InMemoryConversationStorage, IntegrationNotConnectedError, InvalidTaskIdError, JobQueue, Memory, MemoryAdapterError, NetworkError, PermissionEngine, RateLimitError, Security, StreamObjectError, Task, TaskNotFoundError, Theokit, TheokitAgentError, UnknownAgentError, UnsupportedBudgetOperationError, UnsupportedRunOperationError, UnsupportedTaskOperationError, UsageAccumulator, chargeAndCheckThresholds, computeCost, createAgentFactory, createCounterBudgetTracker, createNoopMemoryProvider, createSquad, definePlugin, defineTool, extractRawId, getPricingEntry, inferApiMode, migrateSqliteToLance2 as migrateSqliteToLance, mkMemoryId, normalizeUsage, preflightCheck, toShareGptTrajectory, withCwdMutex };
+export { Agent, AgentBuilder, AgentDisposedError, AgentRunError, AuthenticationError, Budget, BudgetExceededError, ConfigurationError, Cron, EventBus, FileSystemConversationStorage, GenerateObjectError, InMemoryConversationStorage, IntegrationNotConnectedError, InvalidTaskIdError, JobQueue, Memory, MemoryAdapterError, NetworkError, PermissionEngine, RateLimitError, Security, StreamObjectError, Task, TaskNotFoundError, Theokit, TheokitAgentError, UnknownAgentError, UnsupportedBudgetOperationError, UnsupportedRunOperationError, UnsupportedTaskOperationError, UsageAccumulator, chargeAndCheckThresholds, computeCost, createAgentFactory, createCounterBudgetTracker, createNoopMemoryProvider, createSquad, definePlugin, defineProvider, defineTool, extractRawId, getPricingEntry, inferApiMode, isTransientError, migrateSqliteToLance2 as migrateSqliteToLance, mkMemoryId, normalizeUsage, preflightCheck, toShareGptTrajectory, withCwdMutex };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map