@theokit/sdk 2.15.1 → 2.18.0

package/dist/index.d.cts

@@ -1,9 +1,9 @@
-import { T as TheokitAgentError, B as BudgetOptions, a as BudgetHandle, b as BudgetSnapshot } from './errors-Bart0ptP.cjs';
-export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, f as BudgetExceedEvent, g as BudgetExceededError, h as BudgetLimit, i as BudgetMode, j as BudgetScope, k as BudgetThresholdEvent, l as BudgetWindow, C as ConfigurationError, E as ErrorCode, m as ErrorMetadata, I as IntegrationNotConnectedError, n as InvalidTaskIdError, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-Bart0ptP.cjs';
-import { A as AgentOptions, L as LocalOptions, P as ProviderRoutingSettings, S as SystemPromptResolver, C as CloudOptions, M as MemorySettings, a as AgentDefinition, b as ContextSettings, c as PluginsSettings, d as SkillsSettings, e as SDKAgent, f as ListAgentsOptions, g as ListResult, h as SDKAgentInfo, G as GetAgentOptions, i as ListRunsOptions, j as GetRunOptions, k as AgentOperationOptions, l as ProviderProfile, m as Plugin, n as ConversationStorageAdapter, o as StoredMessage, B as BudgetTracker, p as MemoryProvider, q as MemoryId, r as PreToolCallDecision, s as SDKProvider } from './cron-BxLSz1UH.cjs';
-export { t as ActiveMemoryPassArgs, u as ActiveMemoryPassResult, v as AgentMemory, w as BudgetCheck, x as BudgetTotal, y as BudgetUsageEvent, z as CloudEnv, D as CloudRepo, E as ContextBudget, F as ContextManagerKind, H as ContextSnapshot, I as ContextSource, J as ContextSourceStatus, K as Cron, N as CronCreateOptions, O as CronGetOptions, Q as CronJob, R as CronJobStatus, T as CronListOptions, U as CronOperationOptions, V as CronRunOptions, W as CronRuntime, X as CronSchedulerStatus, Y as CronStartOptions, Z as GoalEvent, _ as GoalOptions, $ as GoalResult, a0 as HookName, a1 as InvalidateCacheOptions, a2 as MemoryAdapter, a3 as MemoryAdapterCapabilities, a4 as MemoryContext, a5 as MemoryFact, a6 as MemoryProviderHandle, a7 as MemoryProviderInitOptions, a8 as MemoryRevision, a9 as MemoryToolSchema, aa as MemoryTurnMessage, ab as PersonalityPreset, ac as PluginContext, ad as PostAssistantReplyContext, ae as PreToolCallContext, af as PreUserSendContext, ag as PreUserSendResult, ah as ProviderCapability, ai as ProviderRoute, aj as RecordSessionSummaryArgs, ak as ResolvedProviderRoute, al as RunUntilIterator, am as SDKAgentPlugins, an as SDKAgentSkills, ao as SDKArtifact, ap as SDKContextManager, aq as SDKPluginMetadata, ar as SDKProvidersManager, as as SettingSource, at as SystemPromptContext, au as SystemPromptMemoryFact, av as SystemPromptSkillRef, aw as TelemetrySettings, ax as definePlugin } from './cron-BxLSz1UH.cjs';
-import { R as RunResult, M as ModelSelection, C as CustomTool, a as McpServerConfig, b as Run, S as SDKMessage } from './run-DXy_MVwz.cjs';
-export { A as AgentConversationTurn, c as AssistantMessage, d as ConversationStep, e as ConversationTurn, f as CostBreakdown, g as CostSource, h as CostStatus, D as DoomLoopThresholds, I as InteractionUpdate, i as McpAuthConfig, j as McpHttpServerConfig, k as McpOAuthConfig, l as McpStdioServerConfig, m as ModelParameterValue, P as PartialToolCallUpdate, n as RunErrorDetail, o as RunGitInfo, p as RunOperation, q as RunStatus, r as RunToCompletionOptions, s as RunToCompletionResult, t as SDKAssistantMessage, u as SDKImage, v as SDKImageDimension, w as SDKObjectDelta, x as SDKRequestMessage, y as SDKStatusMessage, z as SDKSystemMessage, B as SDKTaskMessage, E as SDKThinkingMessage, F as SDKToolUseMessage, G as SDKUserMessage, H as SDKUserMessageEvent, J as SendOptions, K as ShellCommand, L as ShellConversationTurn, N as ShellOutput, O as ShellOutputDeltaUpdate, Q as StepCompletedUpdate, T as StepStartedUpdate, U as StreamToCompletionResult, V as SummaryCompletedUpdate, W as SummaryStartedUpdate, X as SummaryUpdate, Y as TextBlock, Z as TextDeltaUpdate, _ as ThinkingCompletedUpdate, $ as ThinkingDeltaUpdate, a0 as ThinkingMessage, a1 as TokenDeltaUpdate, a2 as TokenUsage, a3 as ToolCall, a4 as ToolCallCompletedUpdate, a5 as ToolCallStartedUpdate, a6 as ToolResult, a7 as ToolUseBlock, a8 as TurnEndedUpdate, a9 as UserMessage, aa as UserMessageAppendedUpdate } from './run-DXy_MVwz.cjs';
+import { T as TheokitAgentError, B as BudgetOptions, a as BudgetHandle, b as BudgetSnapshot } from './errors-1tVcX3Fq.cjs';
+export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, f as BudgetExceedEvent, g as BudgetExceededError, h as BudgetLimit, i as BudgetMode, j as BudgetScope, k as BudgetThresholdEvent, l as BudgetWindow, C as ConfigurationError, E as ErrorCode, m as ErrorMetadata, I as IntegrationNotConnectedError, n as InvalidTaskIdError, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-1tVcX3Fq.cjs';
+import { A as AgentOptions, L as LocalOptions, P as ProviderRoutingSettings, S as SystemPromptResolver, C as CloudOptions, M as MemorySettings, a as AgentDefinition, b as ContextSettings, c as PluginsSettings, d as SkillsSettings, e as SDKAgent, f as ListAgentsOptions, g as ListResult, h as SDKAgentInfo, G as GetAgentOptions, i as ListRunsOptions, j as GetRunOptions, k as AgentOperationOptions, l as ProviderProfile, m as Plugin, n as ConversationStorageAdapter, o as StoredMessage, B as BudgetTracker, p as MemoryProvider, q as MemoryId, r as PreToolCallDecision, s as SDKProvider } from './cron-ZLSKbDbB.cjs';
+export { t as ActiveMemoryPassArgs, u as ActiveMemoryPassResult, v as AgentMemory, w as BudgetCheck, x as BudgetTotal, y as BudgetUsageEvent, z as CloudEnv, D as CloudRepo, E as ContextBudget, F as ContextManagerKind, H as ContextSnapshot, I as ContextSource, J as ContextSourceStatus, K as Cron, N as CronCreateOptions, O as CronGetOptions, Q as CronJob, R as CronJobStatus, T as CronListOptions, U as CronOperationOptions, V as CronRunOptions, W as CronRuntime, X as CronSchedulerStatus, Y as CronStartOptions, Z as GoalEvent, _ as GoalOptions, $ as GoalResult, a0 as HookName, a1 as InvalidateCacheOptions, a2 as MemoryAdapter, a3 as MemoryAdapterCapabilities, a4 as MemoryContext, a5 as MemoryFact, a6 as MemoryProviderHandle, a7 as MemoryProviderInitOptions, a8 as MemoryRevision, a9 as MemoryToolSchema, aa as MemoryTurnMessage, ab as PersonalityPreset, ac as PluginContext, ad as PostAssistantReplyContext, ae as PreToolCallContext, af as PreUserSendContext, ag as PreUserSendResult, ah as ProviderCapability, ai as ProviderRoute, aj as RecordSessionSummaryArgs, ak as ResolvedProviderRoute, al as RunUntilIterator, am as SDKAgentPlugins, an as SDKAgentSkills, ao as SDKArtifact, ap as SDKContextManager, aq as SDKPluginMetadata, ar as SDKProvidersManager, as as SettingSource, at as SystemPromptContext, au as SystemPromptMemoryFact, av as SystemPromptSkillRef, aw as TelemetrySettings, ax as definePlugin } from './cron-ZLSKbDbB.cjs';
+import { R as RunResult, M as ModelSelection, C as CustomTool, a as McpServerConfig, b as Run, S as SDKMessage } from './run-pE-34AAo.cjs';
+export { A as AgentConversationTurn, c as AssistantMessage, d as ConversationStep, e as ConversationTurn, f as CostBreakdown, g as CostSource, h as CostStatus, D as DoomLoopThresholds, I as InteractionUpdate, i as McpAuthConfig, j as McpHttpServerConfig, k as McpOAuthConfig, l as McpStdioServerConfig, m as ModelParameterValue, P as PartialToolCallUpdate, n as RunErrorDetail, o as RunGitInfo, p as RunOperation, q as RunStatus, r as RunToCompletionOptions, s as RunToCompletionResult, t as SDKAssistantMessage, u as SDKImage, v as SDKImageDimension, w as SDKObjectDelta, x as SDKRequestMessage, y as SDKStatusMessage, z as SDKSystemMessage, B as SDKTaskMessage, E as SDKThinkingMessage, F as SDKToolUseMessage, G as SDKUserMessage, H as SDKUserMessageEvent, J as SendOptions, K as ShellCommand, L as ShellConversationTurn, N as ShellOutput, O as ShellOutputDeltaUpdate, Q as StepCompletedUpdate, T as StepStartedUpdate, U as StreamToCompletionResult, V as SummaryCompletedUpdate, W as SummaryStartedUpdate, X as SummaryUpdate, Y as TextBlock, Z as TextDeltaUpdate, _ as ThinkingCompletedUpdate, $ as ThinkingDeltaUpdate, a0 as ThinkingMessage, a1 as TokenDeltaUpdate, a2 as TokenUsage, a3 as ToolCall, a4 as ToolCallCompletedUpdate, a5 as ToolCallStartedUpdate, a6 as ToolResult, a7 as ToolResultGuardOptions, a8 as ToolUseBlock, a9 as TurnEndedUpdate, aa as UserMessage, ab as UserMessageAppendedUpdate } from './run-pE-34AAo.cjs';
 import * as zod from 'zod';
 import { ZodType, z } from 'zod';
 
@@ -904,8 +904,15 @@ interface DefineToolSpec<T extends ZodType> {
     description: string;
     /** Zod schema describing the input. Must be `z.object(...)` at the root for the LLM tool contract. */
     inputSchema: T;
-    /** Handler invoked with the parsed input. Type is inferred via `z.infer<T>`. */
-    handler: (input: z.infer<T>) => string | Promise<string>;
+    /**
+     * Handler invoked with the parsed input. Type is inferred via `z.infer<T>`.
+     * #65 — an optional 2nd `ToolContext` argument carries the run's `AbortSignal`,
+     * so a cooperative handler can stop early when the run is cancelled. Existing
+     * single-argument handlers are unaffected.
+     */
+    handler: (input: z.infer<T>, ctx?: {
+        signal?: AbortSignal;
+    }) => string | Promise<string>;
     /**
      * Sanitize the raw model-emitted args BEFORE schema validation (`@theokit/sdk/sanitize`).
      * `true` trims whitespace; an object opts into coercion / JSON-repair. Coercion is schema-aware
@@ -940,7 +947,10 @@ declare function defineTool<T extends ZodType>(spec: DefineToolSpec<T>): CustomT
  */
 type EventHandler<T> = (payload: T) => void;
 declare class EventBus<Events extends Record<string, unknown>> {
+    #private;
     private handlers;
+    /** M3 #64 — number of handler invocations that threw (and were logged). */
+    get handlerErrorCount(): number;
     /**
      * Subscribe to an event. Returns an unsubscribe function.
      */
@@ -983,9 +993,15 @@ declare class FileSystemConversationStorage implements ConversationStorageAdapte
     constructor(opts?: FileSystemConversationStorageOptions);
     /** Exposed for tests + diagnostics. The path is sanitized at use sites. */
     get root(): string;
-    getMessages(conversationId: string): Promise<readonly StoredMessage[]>;
+    getMessages(conversationId: string, opts?: {
+        offset?: number;
+        limit?: number;
+    }): Promise<readonly StoredMessage[]>;
     appendMessage(conversationId: string, message: StoredMessage): Promise<void>;
+    appendMessages(conversationId: string, messages: readonly StoredMessage[]): Promise<void>;
+    truncateConversation(conversationId: string, keepCount: number): Promise<number>;
     deleteConversation(conversationId: string): Promise<void>;
+    deleteScope(prefix: string): Promise<number>;
     listConversationIds(opts?: {
         limit?: number;
     }): Promise<readonly string[]>;
@@ -1009,9 +1025,15 @@ declare class FileSystemConversationStorage implements ConversationStorageAdapte
 
 declare class InMemoryConversationStorage implements ConversationStorageAdapter {
     #private;
-    getMessages(conversationId: string): Promise<readonly StoredMessage[]>;
+    getMessages(conversationId: string, opts?: {
+        offset?: number;
+        limit?: number;
+    }): Promise<readonly StoredMessage[]>;
     appendMessage(conversationId: string, message: StoredMessage): Promise<void>;
+    appendMessages(conversationId: string, messages: readonly StoredMessage[]): Promise<void>;
+    truncateConversation(conversationId: string, keepCount: number): Promise<number>;
     deleteConversation(conversationId: string): Promise<void>;
+    deleteScope(prefix: string): Promise<number>;
     listConversationIds(opts?: {
         limit?: number;
     }): Promise<readonly string[]>;
@@ -1132,10 +1154,15 @@ declare function buildReplayHistory(base: readonly StoredMessage[], events: read
 declare function createNoopMemoryProvider(): MemoryProvider;
 
 /**
- * `JobQueue` — background job queue with status tracking.
+ * `JobQueue` — background job queue with status tracking, cancellation, and an
+ * optional concurrency bound.
+ *
+ * EC-1: all enqueued functions are wrapped in Promise.resolve().then() so
+ * synchronous throws become rejections.
  *
- * EC-1: all enqueued functions are wrapped in Promise.resolve().then()
- * to ensure synchronous throws become rejections.
+ * #58: each job runs under an `AbortController` whose signal is passed to the
+ * job fn, so `cancel()` actually interrupts a running job (not just a status
+ * flip); an optional `maxConcurrency` bounds how many jobs run at once.
  */
 type JobStatus = "pending" | "running" | "completed" | "failed" | "cancelled";
 interface Job<T> {
@@ -1144,17 +1171,34 @@ interface Job<T> {
     result?: T;
     error?: string;
 }
-declare class JobQueue {
-    private jobs;
+/** #58 — construction options. */
+interface JobQueueOptions {
     /**
-     * Enqueue a background function. Returns the job ID immediately.
-     * EC-1: wraps fn in Promise.resolve().then() so sync throws are caught.
+     * Max jobs running concurrently. Omit for unbounded (previous behavior).
+     * Values < 1 are clamped to 1 (an invalid bound must not deadlock).
      */
-    enqueue<T>(fn: () => Promise<T>): string;
+    maxConcurrency?: number;
+}
+declare class JobQueue {
+    #private;
+    private jobs;
+    private controllers;
+    private readonly maxConcurrency;
+    private running;
+    private readonly waiting;
+    constructor(options?: JobQueueOptions);
+    /**
+     * Enqueue a background function. Returns the job ID immediately. The function
+     * receives an `AbortSignal` that fires when the job is cancelled (#58) — a
+     * cooperative job should observe it to stop early. Existing `() => Promise<T>`
+     * callers are unaffected (the signal argument is simply ignored).
+     */
+    enqueue<T>(fn: (signal: AbortSignal) => Promise<T>): string;
     getJob(id: string): Job<unknown> | undefined;
     list(): Job<unknown>[];
     /**
-     * Cancel a pending or running job. Returns true if cancelled.
+     * Cancel a pending or running job. Returns true if cancelled. #58 — aborts the
+     * job's `AbortSignal` so a cooperative running job is actually interrupted.
      */
     cancel(id: string): boolean;
 }
@@ -1349,31 +1393,56 @@ declare function migrateSqliteToLance(options: MigrateOptions): Promise<MigrateR
 /**
  * `PermissionEngine` — first-match permission rules for tool invocations.
  *
- * Evaluates a tool name against an ordered list of rules. First matching rule
- * wins; when no rule matches the `defaultAction` is returned (M7-4 — default
- * `"allow"`, opt into default-deny via `{ defaultAction: "deny" }`).
+ * Evaluates a tool name (and optional arguments, #55) against an ordered list
+ * of rules. First matching rule wins; when no rule matches the `defaultAction`
+ * is returned. #55 — the default is now `"ask"` (FAIL-CLOSED): a permission
+ * engine that cannot positively allow must not silently allow. Opt back into
+ * the previous fail-open behavior with `{ defaultAction: "allow" }`.
  */
 type PermissionAction = "allow" | "deny" | "ask";
+/**
+ * #55 — an argument matcher. A rule with `args` gates on the tool's argument
+ * VALUES, not just its name: an exact string, a RegExp (tested against the
+ * stringified value), or a predicate. Every declared arg must match for the
+ * rule to apply — so `{ tool: "shell", args: { command: /rm\s+-rf/ } }` denies
+ * a destructive shell call while leaving `ls` to fall through.
+ */
+type ArgMatcher = string | RegExp | ((value: unknown) => boolean);
 interface PermissionRule {
     /** Tool name (exact string) or pattern (RegExp). */
     tool: string | RegExp;
+    /**
+     * #55 — optional per-argument matchers. When present, the rule matches only
+     * if the tool name matches AND every declared arg predicate matches the
+     * corresponding call argument. A missing/undefined arg fails its predicate
+     * (the rule does not match) — never throws.
+     */
+    args?: Record<string, ArgMatcher>;
     /** Action to take when rule matches. */
     action: PermissionAction;
 }
 /** Options for {@link PermissionEngine}. */
 interface PermissionEngineOptions {
-    /** Action when no rule matches. Default `"allow"` (backward-compatible). M7-4. */
+    /**
+     * Action when no rule matches. #55 — default is now `"ask"` (fail-closed): a
+     * permission engine that cannot positively allow must not silently allow.
+     * Pass `"allow"` to restore the previous fail-open behavior.
+     */
     readonly defaultAction?: PermissionAction;
 }
 declare class PermissionEngine {
+    #private;
     private readonly rules;
     private readonly defaultAction;
     constructor(rules: PermissionRule[], options?: PermissionEngineOptions);
     /**
-     * Evaluate a tool name against the rules. First match wins; falls back to the
-     * configured `defaultAction` (default `"allow"`) when no rule matches.
+     * Evaluate a tool name (and optional arguments) against the rules. First
+     * match wins; falls back to the configured `defaultAction` (default `"ask"`,
+     * fail-closed) when no rule matches. #55 — a rule with `args` gates on the
+     * argument values, so the same tool name can resolve to different actions
+     * depending on what it is asked to do.
      */
-    evaluate(toolName: string): PermissionAction;
+    evaluate(toolName: string, args?: Record<string, unknown>): PermissionAction;
 }
 
 /**
@@ -1471,6 +1540,32 @@ declare class Security {
     static addPattern(re: RegExp): void;
 }
 
+/**
+ * M3 #62 — scoped session state.
+ *
+ * A conversation id can be namespaced by SCOPE so a consumer keeps app-durable,
+ * user-durable, and ephemeral (temp) session data separated in the same store:
+ *
+ * - `app:`  — durable state shared across users (app-level memory).
+ * - `user:` — durable state for one user.
+ * - `temp:` — ephemeral state; prune it with `adapter.deleteScope("temp")` on
+ *   logout / session end so it never accumulates.
+ *
+ * The scope is a prefix on the conversation id (`"<scope>__<id>"`), so it works
+ * with any {@link ConversationStorageAdapter} — no new storage surface required.
+ * The `__` separator is path-safe (unlike `:`, which the FS adapter's identifier
+ * guard rejects). `deleteScope(prefix)` (optional on the adapter) removes every
+ * conversation with that prefix in one call.
+ *
+ * @public
+ */
+/** M3 #62 — session state scope. */
+type SessionScope = "app" | "user" | "temp";
+/** M3 #62 — build a scope-namespaced conversation id (`"<scope>__<id>"`). */
+declare function scopedConversationId(scope: SessionScope, id: string): string;
+/** M3 #62 — the id prefix (`"<scope>__"`) used to match a scope's conversations. */
+declare function sessionScopePrefix(scope: SessionScope): string;
+
 /**
  * Public type contract for `Workflow.create / .run / .resume` (Adoption
  * Roadmap #5; ADRs D230-D248).
@@ -2107,4 +2202,4 @@ declare function toShareGptTrajectory(result: BatchResult, options?: {
     model?: string;
 }): ShareGptTrajectory | null;
 
-export { Agent, AgentBuilder, AgentDefinition, type AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, BudgetTracker, CloudOptions, ContextSettings, ConversationStorageAdapter, type CounterBudgetTrackerOptions, CustomTool, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DreamingSweepOptions, type DreamingSweepResult, EventBus, type EvictReason, FileSystemConversationStorage, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, InMemoryConversationStorage, JobQueue, ListAgentsOptions, ListResult, ListRunsOptions, LiveAgentRegistry, LocalOptions, McpServerConfig, Memory, MemoryId, MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionPluginOptions, type PermissionRule, Plugin, PluginsSettings, PreToolCallDecision, ProviderProfile, ProviderRoutingSettings, type ReplayHistoryOptions, Run, RunResult, SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, Security, type ShareGptMessage, type ShareGptTrajectory, SkillsSettings, type Squad, type SquadOptions, type SquadRun, StoredMessage, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, Theokit, TheokitAgentError, type TheokitRequestOptions, UsageAccumulator, buildReplayHistory, chargeAndCheckThresholds, computeCost, createAgentFactory, createCounterBudgetTracker, createNoopMemoryProvider, createPermissionPlugin, createSquad, defineProvider, defineTool, extractRawId, getPricingEntry, inferApiMode, isValidTaskId, migrateSqliteToLance, mkMemoryId, normalizeUsage, preflightCheck, toShareGptTrajectory, withCwdMutex };
+export { Agent, AgentBuilder, AgentDefinition, type AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, BudgetTracker, CloudOptions, ContextSettings, ConversationStorageAdapter, type CounterBudgetTrackerOptions, CustomTool, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DreamingSweepOptions, type DreamingSweepResult, EventBus, type EvictReason, FileSystemConversationStorage, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, InMemoryConversationStorage, JobQueue, type JobQueueOptions, ListAgentsOptions, ListResult, ListRunsOptions, LiveAgentRegistry, LocalOptions, McpServerConfig, Memory, MemoryId, MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionPluginOptions, type PermissionRule, Plugin, PluginsSettings, PreToolCallDecision, ProviderProfile, ProviderRoutingSettings, type ReplayHistoryOptions, Run, RunResult, SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, Security, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillsSettings, type Squad, type SquadOptions, type SquadRun, StoredMessage, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, Theokit, TheokitAgentError, type TheokitRequestOptions, UsageAccumulator, buildReplayHistory, chargeAndCheckThresholds, computeCost, createAgentFactory, createCounterBudgetTracker, createNoopMemoryProvider, createPermissionPlugin, createSquad, defineProvider, defineTool, extractRawId, getPricingEntry, inferApiMode, isValidTaskId, migrateSqliteToLance, mkMemoryId, normalizeUsage, preflightCheck, scopedConversationId, sessionScopePrefix, toShareGptTrajectory, withCwdMutex };

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-import { T as TheokitAgentError, B as BudgetOptions, a as BudgetHandle, b as BudgetSnapshot } from './errors-DJuuubJK.js';
-export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, f as BudgetExceedEvent, g as BudgetExceededError, h as BudgetLimit, i as BudgetMode, j as BudgetScope, k as BudgetThresholdEvent, l as BudgetWindow, C as ConfigurationError, E as ErrorCode, m as ErrorMetadata, I as IntegrationNotConnectedError, n as InvalidTaskIdError, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-DJuuubJK.js';
-import { A as AgentOptions, L as LocalOptions, P as ProviderRoutingSettings, S as SystemPromptResolver, C as CloudOptions, M as MemorySettings, a as AgentDefinition, b as ContextSettings, c as PluginsSettings, d as SkillsSettings, e as SDKAgent, f as ListAgentsOptions, g as ListResult, h as SDKAgentInfo, G as GetAgentOptions, i as ListRunsOptions, j as GetRunOptions, k as AgentOperationOptions, l as ProviderProfile, m as Plugin, n as ConversationStorageAdapter, o as StoredMessage, B as BudgetTracker, p as MemoryProvider, q as MemoryId, r as PreToolCallDecision, s as SDKProvider } from './cron-DcaoP7aW.js';
-export { t as ActiveMemoryPassArgs, u as ActiveMemoryPassResult, v as AgentMemory, w as BudgetCheck, x as BudgetTotal, y as BudgetUsageEvent, z as CloudEnv, D as CloudRepo, E as ContextBudget, F as ContextManagerKind, H as ContextSnapshot, I as ContextSource, J as ContextSourceStatus, K as Cron, N as CronCreateOptions, O as CronGetOptions, Q as CronJob, R as CronJobStatus, T as CronListOptions, U as CronOperationOptions, V as CronRunOptions, W as CronRuntime, X as CronSchedulerStatus, Y as CronStartOptions, Z as GoalEvent, _ as GoalOptions, $ as GoalResult, a0 as HookName, a1 as InvalidateCacheOptions, a2 as MemoryAdapter, a3 as MemoryAdapterCapabilities, a4 as MemoryContext, a5 as MemoryFact, a6 as MemoryProviderHandle, a7 as MemoryProviderInitOptions, a8 as MemoryRevision, a9 as MemoryToolSchema, aa as MemoryTurnMessage, ab as PersonalityPreset, ac as PluginContext, ad as PostAssistantReplyContext, ae as PreToolCallContext, af as PreUserSendContext, ag as PreUserSendResult, ah as ProviderCapability, ai as ProviderRoute, aj as RecordSessionSummaryArgs, ak as ResolvedProviderRoute, al as RunUntilIterator, am as SDKAgentPlugins, an as SDKAgentSkills, ao as SDKArtifact, ap as SDKContextManager, aq as SDKPluginMetadata, ar as SDKProvidersManager, as as SettingSource, at as SystemPromptContext, au as SystemPromptMemoryFact, av as SystemPromptSkillRef, aw as TelemetrySettings, ax as definePlugin } from './cron-DcaoP7aW.js';
-import { R as RunResult, M as ModelSelection, C as CustomTool, a as McpServerConfig, b as Run, S as SDKMessage } from './run-DXy_MVwz.js';
-export { A as AgentConversationTurn, c as AssistantMessage, d as ConversationStep, e as ConversationTurn, f as CostBreakdown, g as CostSource, h as CostStatus, D as DoomLoopThresholds, I as InteractionUpdate, i as McpAuthConfig, j as McpHttpServerConfig, k as McpOAuthConfig, l as McpStdioServerConfig, m as ModelParameterValue, P as PartialToolCallUpdate, n as RunErrorDetail, o as RunGitInfo, p as RunOperation, q as RunStatus, r as RunToCompletionOptions, s as RunToCompletionResult, t as SDKAssistantMessage, u as SDKImage, v as SDKImageDimension, w as SDKObjectDelta, x as SDKRequestMessage, y as SDKStatusMessage, z as SDKSystemMessage, B as SDKTaskMessage, E as SDKThinkingMessage, F as SDKToolUseMessage, G as SDKUserMessage, H as SDKUserMessageEvent, J as SendOptions, K as ShellCommand, L as ShellConversationTurn, N as ShellOutput, O as ShellOutputDeltaUpdate, Q as StepCompletedUpdate, T as StepStartedUpdate, U as StreamToCompletionResult, V as SummaryCompletedUpdate, W as SummaryStartedUpdate, X as SummaryUpdate, Y as TextBlock, Z as TextDeltaUpdate, _ as ThinkingCompletedUpdate, $ as ThinkingDeltaUpdate, a0 as ThinkingMessage, a1 as TokenDeltaUpdate, a2 as TokenUsage, a3 as ToolCall, a4 as ToolCallCompletedUpdate, a5 as ToolCallStartedUpdate, a6 as ToolResult, a7 as ToolUseBlock, a8 as TurnEndedUpdate, a9 as UserMessage, aa as UserMessageAppendedUpdate } from './run-DXy_MVwz.js';
+import { T as TheokitAgentError, B as BudgetOptions, a as BudgetHandle, b as BudgetSnapshot } from './errors-qyVYfk9H.js';
+export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, f as BudgetExceedEvent, g as BudgetExceededError, h as BudgetLimit, i as BudgetMode, j as BudgetScope, k as BudgetThresholdEvent, l as BudgetWindow, C as ConfigurationError, E as ErrorCode, m as ErrorMetadata, I as IntegrationNotConnectedError, n as InvalidTaskIdError, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-qyVYfk9H.js';
+import { A as AgentOptions, L as LocalOptions, P as ProviderRoutingSettings, S as SystemPromptResolver, C as CloudOptions, M as MemorySettings, a as AgentDefinition, b as ContextSettings, c as PluginsSettings, d as SkillsSettings, e as SDKAgent, f as ListAgentsOptions, g as ListResult, h as SDKAgentInfo, G as GetAgentOptions, i as ListRunsOptions, j as GetRunOptions, k as AgentOperationOptions, l as ProviderProfile, m as Plugin, n as ConversationStorageAdapter, o as StoredMessage, B as BudgetTracker, p as MemoryProvider, q as MemoryId, r as PreToolCallDecision, s as SDKProvider } from './cron-Bbg0mBOv.js';
+export { t as ActiveMemoryPassArgs, u as ActiveMemoryPassResult, v as AgentMemory, w as BudgetCheck, x as BudgetTotal, y as BudgetUsageEvent, z as CloudEnv, D as CloudRepo, E as ContextBudget, F as ContextManagerKind, H as ContextSnapshot, I as ContextSource, J as ContextSourceStatus, K as Cron, N as CronCreateOptions, O as CronGetOptions, Q as CronJob, R as CronJobStatus, T as CronListOptions, U as CronOperationOptions, V as CronRunOptions, W as CronRuntime, X as CronSchedulerStatus, Y as CronStartOptions, Z as GoalEvent, _ as GoalOptions, $ as GoalResult, a0 as HookName, a1 as InvalidateCacheOptions, a2 as MemoryAdapter, a3 as MemoryAdapterCapabilities, a4 as MemoryContext, a5 as MemoryFact, a6 as MemoryProviderHandle, a7 as MemoryProviderInitOptions, a8 as MemoryRevision, a9 as MemoryToolSchema, aa as MemoryTurnMessage, ab as PersonalityPreset, ac as PluginContext, ad as PostAssistantReplyContext, ae as PreToolCallContext, af as PreUserSendContext, ag as PreUserSendResult, ah as ProviderCapability, ai as ProviderRoute, aj as RecordSessionSummaryArgs, ak as ResolvedProviderRoute, al as RunUntilIterator, am as SDKAgentPlugins, an as SDKAgentSkills, ao as SDKArtifact, ap as SDKContextManager, aq as SDKPluginMetadata, ar as SDKProvidersManager, as as SettingSource, at as SystemPromptContext, au as SystemPromptMemoryFact, av as SystemPromptSkillRef, aw as TelemetrySettings, ax as definePlugin } from './cron-Bbg0mBOv.js';
+import { R as RunResult, M as ModelSelection, C as CustomTool, a as McpServerConfig, b as Run, S as SDKMessage } from './run-pE-34AAo.js';
+export { A as AgentConversationTurn, c as AssistantMessage, d as ConversationStep, e as ConversationTurn, f as CostBreakdown, g as CostSource, h as CostStatus, D as DoomLoopThresholds, I as InteractionUpdate, i as McpAuthConfig, j as McpHttpServerConfig, k as McpOAuthConfig, l as McpStdioServerConfig, m as ModelParameterValue, P as PartialToolCallUpdate, n as RunErrorDetail, o as RunGitInfo, p as RunOperation, q as RunStatus, r as RunToCompletionOptions, s as RunToCompletionResult, t as SDKAssistantMessage, u as SDKImage, v as SDKImageDimension, w as SDKObjectDelta, x as SDKRequestMessage, y as SDKStatusMessage, z as SDKSystemMessage, B as SDKTaskMessage, E as SDKThinkingMessage, F as SDKToolUseMessage, G as SDKUserMessage, H as SDKUserMessageEvent, J as SendOptions, K as ShellCommand, L as ShellConversationTurn, N as ShellOutput, O as ShellOutputDeltaUpdate, Q as StepCompletedUpdate, T as StepStartedUpdate, U as StreamToCompletionResult, V as SummaryCompletedUpdate, W as SummaryStartedUpdate, X as SummaryUpdate, Y as TextBlock, Z as TextDeltaUpdate, _ as ThinkingCompletedUpdate, $ as ThinkingDeltaUpdate, a0 as ThinkingMessage, a1 as TokenDeltaUpdate, a2 as TokenUsage, a3 as ToolCall, a4 as ToolCallCompletedUpdate, a5 as ToolCallStartedUpdate, a6 as ToolResult, a7 as ToolResultGuardOptions, a8 as ToolUseBlock, a9 as TurnEndedUpdate, aa as UserMessage, ab as UserMessageAppendedUpdate } from './run-pE-34AAo.js';
 import * as zod from 'zod';
 import { ZodType, z } from 'zod';
 
@@ -904,8 +904,15 @@ interface DefineToolSpec<T extends ZodType> {
     description: string;
     /** Zod schema describing the input. Must be `z.object(...)` at the root for the LLM tool contract. */
     inputSchema: T;
-    /** Handler invoked with the parsed input. Type is inferred via `z.infer<T>`. */
-    handler: (input: z.infer<T>) => string | Promise<string>;
+    /**
+     * Handler invoked with the parsed input. Type is inferred via `z.infer<T>`.
+     * #65 — an optional 2nd `ToolContext` argument carries the run's `AbortSignal`,
+     * so a cooperative handler can stop early when the run is cancelled. Existing
+     * single-argument handlers are unaffected.
+     */
+    handler: (input: z.infer<T>, ctx?: {
+        signal?: AbortSignal;
+    }) => string | Promise<string>;
     /**
      * Sanitize the raw model-emitted args BEFORE schema validation (`@theokit/sdk/sanitize`).
      * `true` trims whitespace; an object opts into coercion / JSON-repair. Coercion is schema-aware
@@ -940,7 +947,10 @@ declare function defineTool<T extends ZodType>(spec: DefineToolSpec<T>): CustomT
  */
 type EventHandler<T> = (payload: T) => void;
 declare class EventBus<Events extends Record<string, unknown>> {
+    #private;
     private handlers;
+    /** M3 #64 — number of handler invocations that threw (and were logged). */
+    get handlerErrorCount(): number;
     /**
      * Subscribe to an event. Returns an unsubscribe function.
      */
@@ -983,9 +993,15 @@ declare class FileSystemConversationStorage implements ConversationStorageAdapte
     constructor(opts?: FileSystemConversationStorageOptions);
     /** Exposed for tests + diagnostics. The path is sanitized at use sites. */
     get root(): string;
-    getMessages(conversationId: string): Promise<readonly StoredMessage[]>;
+    getMessages(conversationId: string, opts?: {
+        offset?: number;
+        limit?: number;
+    }): Promise<readonly StoredMessage[]>;
     appendMessage(conversationId: string, message: StoredMessage): Promise<void>;
+    appendMessages(conversationId: string, messages: readonly StoredMessage[]): Promise<void>;
+    truncateConversation(conversationId: string, keepCount: number): Promise<number>;
     deleteConversation(conversationId: string): Promise<void>;
+    deleteScope(prefix: string): Promise<number>;
     listConversationIds(opts?: {
         limit?: number;
     }): Promise<readonly string[]>;
@@ -1009,9 +1025,15 @@ declare class FileSystemConversationStorage implements ConversationStorageAdapte
 
 declare class InMemoryConversationStorage implements ConversationStorageAdapter {
     #private;
-    getMessages(conversationId: string): Promise<readonly StoredMessage[]>;
+    getMessages(conversationId: string, opts?: {
+        offset?: number;
+        limit?: number;
+    }): Promise<readonly StoredMessage[]>;
     appendMessage(conversationId: string, message: StoredMessage): Promise<void>;
+    appendMessages(conversationId: string, messages: readonly StoredMessage[]): Promise<void>;
+    truncateConversation(conversationId: string, keepCount: number): Promise<number>;
     deleteConversation(conversationId: string): Promise<void>;
+    deleteScope(prefix: string): Promise<number>;
     listConversationIds(opts?: {
         limit?: number;
     }): Promise<readonly string[]>;
@@ -1132,10 +1154,15 @@ declare function buildReplayHistory(base: readonly StoredMessage[], events: read
 declare function createNoopMemoryProvider(): MemoryProvider;
 
 /**
- * `JobQueue` — background job queue with status tracking.
+ * `JobQueue` — background job queue with status tracking, cancellation, and an
+ * optional concurrency bound.
+ *
+ * EC-1: all enqueued functions are wrapped in Promise.resolve().then() so
+ * synchronous throws become rejections.
  *
- * EC-1: all enqueued functions are wrapped in Promise.resolve().then()
- * to ensure synchronous throws become rejections.
+ * #58: each job runs under an `AbortController` whose signal is passed to the
+ * job fn, so `cancel()` actually interrupts a running job (not just a status
+ * flip); an optional `maxConcurrency` bounds how many jobs run at once.
  */
 type JobStatus = "pending" | "running" | "completed" | "failed" | "cancelled";
 interface Job<T> {
@@ -1144,17 +1171,34 @@ interface Job<T> {
     result?: T;
     error?: string;
 }
-declare class JobQueue {
-    private jobs;
+/** #58 — construction options. */
+interface JobQueueOptions {
     /**
-     * Enqueue a background function. Returns the job ID immediately.
-     * EC-1: wraps fn in Promise.resolve().then() so sync throws are caught.
+     * Max jobs running concurrently. Omit for unbounded (previous behavior).
+     * Values < 1 are clamped to 1 (an invalid bound must not deadlock).
      */
-    enqueue<T>(fn: () => Promise<T>): string;
+    maxConcurrency?: number;
+}
+declare class JobQueue {
+    #private;
+    private jobs;
+    private controllers;
+    private readonly maxConcurrency;
+    private running;
+    private readonly waiting;
+    constructor(options?: JobQueueOptions);
+    /**
+     * Enqueue a background function. Returns the job ID immediately. The function
+     * receives an `AbortSignal` that fires when the job is cancelled (#58) — a
+     * cooperative job should observe it to stop early. Existing `() => Promise<T>`
+     * callers are unaffected (the signal argument is simply ignored).
+     */
+    enqueue<T>(fn: (signal: AbortSignal) => Promise<T>): string;
     getJob(id: string): Job<unknown> | undefined;
     list(): Job<unknown>[];
     /**
-     * Cancel a pending or running job. Returns true if cancelled.
+     * Cancel a pending or running job. Returns true if cancelled. #58 — aborts the
+     * job's `AbortSignal` so a cooperative running job is actually interrupted.
      */
     cancel(id: string): boolean;
 }
@@ -1349,31 +1393,56 @@ declare function migrateSqliteToLance(options: MigrateOptions): Promise<MigrateR
 /**
  * `PermissionEngine` — first-match permission rules for tool invocations.
  *
- * Evaluates a tool name against an ordered list of rules. First matching rule
- * wins; when no rule matches the `defaultAction` is returned (M7-4 — default
- * `"allow"`, opt into default-deny via `{ defaultAction: "deny" }`).
+ * Evaluates a tool name (and optional arguments, #55) against an ordered list
+ * of rules. First matching rule wins; when no rule matches the `defaultAction`
+ * is returned. #55 — the default is now `"ask"` (FAIL-CLOSED): a permission
+ * engine that cannot positively allow must not silently allow. Opt back into
+ * the previous fail-open behavior with `{ defaultAction: "allow" }`.
  */
 type PermissionAction = "allow" | "deny" | "ask";
+/**
+ * #55 — an argument matcher. A rule with `args` gates on the tool's argument
+ * VALUES, not just its name: an exact string, a RegExp (tested against the
+ * stringified value), or a predicate. Every declared arg must match for the
+ * rule to apply — so `{ tool: "shell", args: { command: /rm\s+-rf/ } }` denies
+ * a destructive shell call while leaving `ls` to fall through.
+ */
+type ArgMatcher = string | RegExp | ((value: unknown) => boolean);
 interface PermissionRule {
     /** Tool name (exact string) or pattern (RegExp). */
     tool: string | RegExp;
+    /**
+     * #55 — optional per-argument matchers. When present, the rule matches only
+     * if the tool name matches AND every declared arg predicate matches the
+     * corresponding call argument. A missing/undefined arg fails its predicate
+     * (the rule does not match) — never throws.
+     */
+    args?: Record<string, ArgMatcher>;
     /** Action to take when rule matches. */
     action: PermissionAction;
 }
 /** Options for {@link PermissionEngine}. */
 interface PermissionEngineOptions {
-    /** Action when no rule matches. Default `"allow"` (backward-compatible). M7-4. */
+    /**
+     * Action when no rule matches. #55 — default is now `"ask"` (fail-closed): a
+     * permission engine that cannot positively allow must not silently allow.
+     * Pass `"allow"` to restore the previous fail-open behavior.
+     */
     readonly defaultAction?: PermissionAction;
 }
 declare class PermissionEngine {
+    #private;
     private readonly rules;
     private readonly defaultAction;
     constructor(rules: PermissionRule[], options?: PermissionEngineOptions);
     /**
-     * Evaluate a tool name against the rules. First match wins; falls back to the
-     * configured `defaultAction` (default `"allow"`) when no rule matches.
+     * Evaluate a tool name (and optional arguments) against the rules. First
+     * match wins; falls back to the configured `defaultAction` (default `"ask"`,
+     * fail-closed) when no rule matches. #55 — a rule with `args` gates on the
+     * argument values, so the same tool name can resolve to different actions
+     * depending on what it is asked to do.
      */
-    evaluate(toolName: string): PermissionAction;
+    evaluate(toolName: string, args?: Record<string, unknown>): PermissionAction;
 }
 
 /**
@@ -1471,6 +1540,32 @@ declare class Security {
     static addPattern(re: RegExp): void;
 }
 
+/**
+ * M3 #62 — scoped session state.
+ *
+ * A conversation id can be namespaced by SCOPE so a consumer keeps app-durable,
+ * user-durable, and ephemeral (temp) session data separated in the same store:
+ *
+ * - `app:`  — durable state shared across users (app-level memory).
+ * - `user:` — durable state for one user.
+ * - `temp:` — ephemeral state; prune it with `adapter.deleteScope("temp")` on
+ *   logout / session end so it never accumulates.
+ *
+ * The scope is a prefix on the conversation id (`"<scope>__<id>"`), so it works
+ * with any {@link ConversationStorageAdapter} — no new storage surface required.
+ * The `__` separator is path-safe (unlike `:`, which the FS adapter's identifier
+ * guard rejects). `deleteScope(prefix)` (optional on the adapter) removes every
+ * conversation with that prefix in one call.
+ *
+ * @public
+ */
+/** M3 #62 — session state scope. */
+type SessionScope = "app" | "user" | "temp";
+/** M3 #62 — build a scope-namespaced conversation id (`"<scope>__<id>"`). */
+declare function scopedConversationId(scope: SessionScope, id: string): string;
+/** M3 #62 — the id prefix (`"<scope>__"`) used to match a scope's conversations. */
+declare function sessionScopePrefix(scope: SessionScope): string;
+
 /**
  * Public type contract for `Workflow.create / .run / .resume` (Adoption
  * Roadmap #5; ADRs D230-D248).
@@ -2107,4 +2202,4 @@ declare function toShareGptTrajectory(result: BatchResult, options?: {
     model?: string;
 }): ShareGptTrajectory | null;
 
-export { Agent, AgentBuilder, AgentDefinition, type AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, BudgetTracker, CloudOptions, ContextSettings, ConversationStorageAdapter, type CounterBudgetTrackerOptions, CustomTool, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DreamingSweepOptions, type DreamingSweepResult, EventBus, type EvictReason, FileSystemConversationStorage, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, InMemoryConversationStorage, JobQueue, ListAgentsOptions, ListResult, ListRunsOptions, LiveAgentRegistry, LocalOptions, McpServerConfig, Memory, MemoryId, MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionPluginOptions, type PermissionRule, Plugin, PluginsSettings, PreToolCallDecision, ProviderProfile, ProviderRoutingSettings, type ReplayHistoryOptions, Run, RunResult, SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, Security, type ShareGptMessage, type ShareGptTrajectory, SkillsSettings, type Squad, type SquadOptions, type SquadRun, StoredMessage, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, Theokit, TheokitAgentError, type TheokitRequestOptions, UsageAccumulator, buildReplayHistory, chargeAndCheckThresholds, computeCost, createAgentFactory, createCounterBudgetTracker, createNoopMemoryProvider, createPermissionPlugin, createSquad, defineProvider, defineTool, extractRawId, getPricingEntry, inferApiMode, isValidTaskId, migrateSqliteToLance, mkMemoryId, normalizeUsage, preflightCheck, toShareGptTrajectory, withCwdMutex };
+export { Agent, AgentBuilder, AgentDefinition, type AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, BudgetTracker, CloudOptions, ContextSettings, ConversationStorageAdapter, type CounterBudgetTrackerOptions, CustomTool, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DreamingSweepOptions, type DreamingSweepResult, EventBus, type EvictReason, FileSystemConversationStorage, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, InMemoryConversationStorage, JobQueue, type JobQueueOptions, ListAgentsOptions, ListResult, ListRunsOptions, LiveAgentRegistry, LocalOptions, McpServerConfig, Memory, MemoryId, MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionPluginOptions, type PermissionRule, Plugin, PluginsSettings, PreToolCallDecision, ProviderProfile, ProviderRoutingSettings, type ReplayHistoryOptions, Run, RunResult, SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, Security, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillsSettings, type Squad, type SquadOptions, type SquadRun, StoredMessage, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, Theokit, TheokitAgentError, type TheokitRequestOptions, UsageAccumulator, buildReplayHistory, chargeAndCheckThresholds, computeCost, createAgentFactory, createCounterBudgetTracker, createNoopMemoryProvider, createPermissionPlugin, createSquad, defineProvider, defineTool, extractRawId, getPricingEntry, inferApiMode, isValidTaskId, migrateSqliteToLance, mkMemoryId, normalizeUsage, preflightCheck, scopedConversationId, sessionScopePrefix, toShareGptTrajectory, withCwdMutex };