@theokit/sdk 3.5.0 → 3.6.0

package/dist/index.cjs

@@ -976,10 +976,10 @@ function buildToolPrompt(prompt) {
 Respond by calling the \`output\` tool with the structured answer that matches the schema.`;
 }
 function setupStructuredOutput(schema, maxRetries) {
-  const z10 = requireZod();
+  const z11 = requireZod();
   const jsonSchema = toJsonSchema(schema, { unrepresentable: "any" });
   return {
-    z: z10,
+    z: z11,
     jsonSchema,
     maxRetries: maxRetries ?? 1,
     initialUsage: { inputTokens: 0, outputTokens: 0 }
@@ -5769,6 +5769,213 @@ var init_subagents_loader = __esm({
     init_yaml_frontmatter();
   }
 });
+function loadJsonrepair() {
+  if (cachedJsonrepair === void 0) {
+    const req = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)));
+    cachedJsonrepair = req("jsonrepair").jsonrepair;
+  }
+  return cachedJsonrepair;
+}
+function isPlainObject(v) {
+  return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+function toFiniteNumber(raw) {
+  if (raw === "") return void 0;
+  const n = Number(raw);
+  return Number.isFinite(n) && String(n) === raw ? n : void 0;
+}
+function tryJson(raw, repair) {
+  const t = raw.trimStart();
+  if (!(t.startsWith("{") || t.startsWith("["))) return void 0;
+  try {
+    return JSON.parse(repair ? loadJsonrepair()(t) : t);
+  } catch {
+    return void 0;
+  }
+}
+function heuristicCoerce(raw, repairJson) {
+  if (raw === "true") return true;
+  if (raw === "false") return false;
+  if (raw === "null") return null;
+  const n = toFiniteNumber(raw);
+  if (n !== void 0) return n;
+  const json = tryJson(raw, false) ?? (repairJson ? tryJson(raw, true) : void 0);
+  return json === void 0 ? raw : json;
+}
+function coerceCandidates(raw, repairJson) {
+  const out = [];
+  if (raw === "true") out.push(true);
+  else if (raw === "false") out.push(false);
+  else if (raw === "null") out.push(null);
+  const n = toFiniteNumber(raw);
+  if (n !== void 0) out.push(n);
+  const json = tryJson(raw, false) ?? (repairJson ? tryJson(raw, true) : void 0);
+  if (json !== void 0) out.push(json);
+  out.push(raw);
+  return out;
+}
+function objectShape(schema) {
+  const shape = schema?.shape;
+  return shape !== null && typeof shape === "object" ? shape : void 0;
+}
+var cachedJsonrepair;
+var init_coerce = __esm({
+  "src/sanitize/coerce.ts"() {
+  }
+});
+
+// src/sanitize/sanitize-tool-input.ts
+function applyTrim(key2, value, ctx) {
+  const trimmed = value.trim();
+  if (trimmed !== value) ctx.notes.push(`trimmed "${key2}"`);
+  return trimmed;
+}
+function applyCoerce(key2, raw, ctx) {
+  const field = ctx.shape?.[key2];
+  let coerced = raw;
+  if (field) {
+    for (const candidate of coerceCandidates(raw, ctx.repairJson)) {
+      if (field.safeParse(candidate).success) {
+        coerced = candidate;
+        break;
+      }
+    }
+  } else {
+    coerced = heuristicCoerce(raw, ctx.repairJson);
+  }
+  if (coerced !== raw) ctx.notes.push(`coerced "${key2}"`);
+  return coerced;
+}
+function applyRepair(key2, value, ctx) {
+  const repaired = tryJson(value, true);
+  if (repaired === void 0) return value;
+  ctx.notes.push(`repaired json "${key2}"`);
+  return repaired;
+}
+function sanitizeString(key2, value, ctx) {
+  let out = ctx.trim ? applyTrim(key2, value, ctx) : value;
+  if (ctx.coerce && typeof out === "string") out = applyCoerce(key2, out, ctx);
+  if (ctx.repairJson && !ctx.coerce && typeof out === "string") out = applyRepair(key2, out, ctx);
+  return out;
+}
+function walk(input, ctx, depth) {
+  const out = {};
+  for (const [key2, value] of Object.entries(input)) {
+    if (typeof value === "string") out[key2] = sanitizeString(key2, value, ctx);
+    else if (ctx.deep && depth < ctx.maxDepth && isPlainObject(value))
+      out[key2] = walk(value, ctx, depth + 1);
+    else out[key2] = value;
+  }
+  return out;
+}
+function sanitizeToolInput(input, options) {
+  if (!isPlainObject(input)) return { value: input, changed: false, notes: [] };
+  const ctx = {
+    trim: options?.trim ?? true,
+    coerce: options?.coerce ?? false,
+    repairJson: options?.repairJson ?? false,
+    deep: options?.deep ?? false,
+    maxDepth: options?.maxDepth ?? 8,
+    shape: objectShape(options?.schema),
+    notes: []
+  };
+  const value = walk(input, ctx, 0);
+  return { value, changed: ctx.notes.length > 0, notes: ctx.notes };
+}
+var init_sanitize_tool_input = __esm({
+  "src/sanitize/sanitize-tool-input.ts"() {
+    init_coerce();
+  }
+});
+
+// src/define-tool.ts
+async function runValidated(spec, input, ctx) {
+  const raw = spec.sanitize ? sanitizeToolInput(input, {
+    ...spec.sanitize === true ? {} : spec.sanitize,
+    schema: spec.inputSchema
+  }).value : input;
+  const parsed = spec.inputSchema.parse(raw);
+  const out = await spec.handler(parsed, ctx);
+  return spec.outputSchema === void 0 ? out : spec.outputSchema.parse(out);
+}
+function serializeOutput(validated) {
+  return typeof validated === "string" ? validated : JSON.stringify(validated);
+}
+function shapeModelOutput(spec, validated) {
+  if (spec.toModelOutput !== void 0) return spec.toModelOutput(validated);
+  return serializeOutput(validated);
+}
+function defineTool(spec) {
+  const inputSchema = toJsonSchema(spec.inputSchema, {
+    unrepresentable: "any"
+  });
+  const handler = async (input, ctx) => {
+    const validated = await runValidated(spec, input, ctx);
+    return shapeModelOutput(spec, validated);
+  };
+  const tool = { name: spec.name, description: spec.description, inputSchema, handler };
+  if (spec.toModelOutput !== void 0) {
+    const resolver = async (input, ctx) => {
+      const validated = await runValidated(spec, input, ctx);
+      return { model: shapeModelOutput(spec, validated), app: serializeOutput(validated) };
+    };
+    handler[TOOL_SPLIT_RESOLVER] = resolver;
+  }
+  return tool;
+}
+var TOOL_SPLIT_RESOLVER; exports.Tool = void 0;
+var init_define_tool = __esm({
+  "src/define-tool.ts"() {
+    init_to_json_schema();
+    init_sanitize_tool_input();
+    TOOL_SPLIT_RESOLVER = /* @__PURE__ */ Symbol("theokit.toolSplitResolver");
+    exports.Tool = class {
+      constructor() {
+      }
+      static create(spec) {
+        return defineTool(spec);
+      }
+    };
+  }
+});
+function createThinkTool() {
+  return exports.Tool.create({
+    name: "think",
+    description: "Scratchpad: reason through ONE step before answering. No side effects \u2014 your private reasoning space. Call it repeatedly before the final answer.",
+    inputSchema: zod.z.object({ thought: zod.z.string().min(1, "think: `thought` must be non-empty.") }),
+    handler: ({ thought }) => thought
+  });
+}
+function isNativeReasoning(model) {
+  if (model === void 0 || typeof model === "string") return false;
+  const params = model.params;
+  if (params === void 0) return false;
+  return params.some((p) => NATIVE_REASONING_PARAM_IDS.has(p.id));
+}
+function warnDoubleReasoningOnce() {
+  if (warned2.has("double-reasoning")) return;
+  warned2.add("double-reasoning");
+  process.stderr.write(
+    "[theokit-sdk] `reasoning: true` skipped \u2014 a native reasoning model is configured (model.params thinking/reasoning); native reasoning wins. Remove one to silence.\n"
+  );
+}
+function reasoningActive(reasoning, model) {
+  if (reasoning !== true) return false;
+  if (isNativeReasoning(model)) {
+    warnDoubleReasoningOnce();
+    return false;
+  }
+  return true;
+}
+var NATIVE_REASONING_PARAM_IDS, REASONING_PREAMBLE, warned2;
+var init_native_reasoning = __esm({
+  "src/internal/runtime/reasoning/native-reasoning.ts"() {
+    init_define_tool();
+    NATIVE_REASONING_PARAM_IDS = /* @__PURE__ */ new Set(["thinking", "reasoning", "reasoning_effort"]);
+    REASONING_PREAMBLE = "Think step by step before answering: use the `think` tool to reason through each step, validate your work, then answer. Reason about magnitude before comparing numbers.";
+    warned2 = /* @__PURE__ */ new Set();
+  }
+});
 
 // src/internal/runtime/skills/skill-frontmatter.ts
 function asString(v) {
@@ -6020,6 +6227,9 @@ async function buildAssemblyContext(inputs, userText, baseSystemPrompt, memoryFa
   if (activeMemorySummary !== void 0 && activeMemorySummary.length > 0) {
     assemblyCtx.activeMemorySummary = activeMemorySummary;
   }
+  if (reasoningActive(inputs.options.reasoning, inputs.model)) {
+    assemblyCtx.reasoning = true;
+  }
   if (inputs.context !== void 0) {
     await inputs.context.applyScope(contextPaths);
     const internal = inputs.context.internalAssemblySnapshot();
@@ -6041,6 +6251,7 @@ async function assembleSystemPromptForSend(inputs, userText, baseSystemPrompt, m
 }
 var init_local_assembly = __esm({
   "src/internal/runtime/system-prompt/local-assembly.ts"() {
+    init_native_reasoning();
     init_skills_manager();
   }
 });
@@ -6176,6 +6387,21 @@ ${lines.join("\n")}
   }
 });
 
+// src/internal/runtime/system-prompt/sources/reasoning-provider.ts
+var ReasoningPromptProvider;
+var init_reasoning_provider = __esm({
+  "src/internal/runtime/system-prompt/sources/reasoning-provider.ts"() {
+    init_native_reasoning();
+    ReasoningPromptProvider = class {
+      id = "reasoning";
+      priority = 1;
+      contribute(ctx) {
+        return Promise.resolve(ctx.reasoning === true ? REASONING_PREAMBLE : void 0);
+      }
+    };
+  }
+});
+
 // src/internal/runtime/skills/skills-block.ts
 function buildSkillsBlock(skills) {
   if (skills.length === 0) return void 0;
@@ -6218,6 +6444,7 @@ var init_pipeline = __esm({
     init_base_provider();
     init_context_provider();
     init_memory_provider();
+    init_reasoning_provider();
     init_skills_provider();
     SystemPromptPipeline = class _SystemPromptPipeline {
       providers;
@@ -6257,6 +6484,7 @@ var init_pipeline = __esm({
        */
       static default() {
         return new _SystemPromptPipeline([
+          new ReasoningPromptProvider(),
           new ActiveMemoryPromptProvider(),
           new ContextPromptProvider(),
           new SkillsPromptProvider(),
@@ -7753,171 +7981,12 @@ var init_local_run = __esm({
     };
   }
 });
-function inheritSubAgentCredentials(tool, creds) {
-  const sink = tool[INHERIT_CREDENTIALS];
-  if (typeof sink === "function") sink(creds);
-}
-async function applyDelegationStart(spec, input, iteration) {
-  if (spec.onDelegationStart === void 0) return { input };
-  const decision = await spec.onDelegationStart({ input, name: spec.name, iteration });
-  if (decision === void 0) return { input };
-  if (decision.proceed === false)
-    return { reject: decision.rejectionReason ?? "(delegation rejected)" };
-  return {
-    input: decision.modifiedInput ?? input,
-    ...decision.modifiedMaxSteps !== void 0 ? { maxSteps: decision.modifiedMaxSteps } : {}
-  };
-}
-async function collectChildToolResults(run) {
-  const lines = [];
-  for await (const event of run.stream()) {
-    if (event.type === "tool_call" && event.status === "completed") {
-      const rendered = typeof event.result === "string" ? event.result : JSON.stringify(event.result ?? null);
-      lines.push(`${event.name}: ${rendered}`);
-    }
-  }
-  if (lines.length === 0) return "";
-  return `
 
-<subagent-tool-results>
-${lines.join("\n")}
-</subagent-tool-results>`;
-}
-function buildChildCreateOptions(spec, inherited) {
-  const model = spec.model ? { id: spec.model } : inherited?.model;
-  return {
-    ...inherited?.apiKey !== void 0 ? { apiKey: inherited.apiKey } : {},
-    ...model !== void 0 ? { model } : {},
-    ...inherited?.plugins !== void 0 ? { plugins: inherited.plugins } : {},
-    systemPrompt: spec.instructions,
-    tools: spec.tools ?? []
-  };
-}
-async function runChildAgent(spec, input, signal, maxSteps, inherited) {
-  const { Agent: Agent2 } = await Promise.resolve().then(() => (init_agent(), agent_exports));
-  const agent = await Agent2.create(buildChildCreateOptions(spec, inherited));
-  try {
-    const sendOptions = {
-      ...signal !== void 0 ? { signal } : {},
-      ...maxSteps !== void 0 ? { maxIterations: maxSteps } : {},
-      // SE3 — a delegated child's turn is initiated by the coordinating parent.
-      origin: { kind: "coordinator" }
-    };
-    const run = await agent.send(input, sendOptions);
-    const result = await run.wait();
-    const text = result.result ?? "(no response)";
-    return spec.includeToolResults === true ? text + await collectChildToolResults(run) : text;
-  } finally {
-    agent.dispose();
-  }
-}
-async function notifyDelegationError(spec, input, error, iteration) {
-  if (spec.onDelegationComplete === void 0) return;
+// src/types/run-events.ts
+function emitRunEvent(sink, event) {
+  if (sink === void 0) return;
   try {
-    await spec.onDelegationComplete({ input, name: spec.name, error, iteration });
-  } catch {
-  }
-}
-function applyMessageFilter(spec, input, messages) {
-  if (spec.messageFilter === void 0 || messages === void 0) return input;
-  const filtered = spec.messageFilter({ messages, input, name: spec.name });
-  if (filtered.length === 0) return input;
-  const preamble = filtered.map((m) => `${m.role}: ${m.content}`).join("\n");
-  return `Prior conversation:
-${preamble}
-
-Task:
-${input}`;
-}
-async function applyDelegationComplete(spec, input, result, iteration) {
-  if (spec.onDelegationComplete === void 0) return result;
-  const completion = await spec.onDelegationComplete({ input, name: spec.name, result, iteration });
-  return completion?.feedback !== void 0 ? result + completion.feedback : result;
-}
-function defineSubAgent(spec, _parentDepth = 0) {
-  const currentDepth = _parentDepth + 1;
-  const maxDepth = spec.maxDelegationDepth ?? 3;
-  if (currentDepth > maxDepth) {
-    throw new MaxDelegationDepthError(currentDepth, maxDepth);
-  }
-  const inputZod = zod.z.object({
-    input: zod.z.string().describe("Task for the subagent")
-  });
-  const inputSchema = {
-    type: "object",
-    properties: {
-      input: { type: "string", description: "Task for the subagent" }
-    },
-    required: ["input"],
-    additionalProperties: false
-  };
-  let iteration = 0;
-  let inherited;
-  const tool = {
-    name: spec.name,
-    description: spec.description,
-    inputSchema,
-    handler: async (rawInput, ctx) => {
-      const { input: parsed } = inputZod.parse(rawInput);
-      iteration += 1;
-      const capturedIteration = iteration;
-      const start = await applyDelegationStart(spec, parsed, capturedIteration);
-      if ("reject" in start) return start.reject;
-      const input = applyMessageFilter(spec, start.input, ctx?.messages);
-      let result;
-      try {
-        result = await runChildAgent(spec, input, ctx?.signal, start.maxSteps, inherited);
-      } catch (error) {
-        await notifyDelegationError(spec, input, error, capturedIteration);
-        throw error;
-      }
-      return applyDelegationComplete(spec, input, result, capturedIteration);
-    }
-  };
-  Object.defineProperty(tool, INHERIT_CREDENTIALS, {
-    value: ((creds) => {
-      inherited = creds;
-    }),
-    enumerable: false
-  });
-  return tool;
-}
-function subAgentToolsFromDefinitions(agents2, parentTools) {
-  return Object.entries(agents2).map(([name, def]) => {
-    const whitelist = Array.isArray(def.tools) && def.tools.length > 0 ? new Set(def.tools) : void 0;
-    const childTools = whitelist ? parentTools.filter((t) => whitelist.has(t.name)) : parentTools;
-    return defineSubAgent({
-      name,
-      description: def.description,
-      instructions: def.prompt,
-      ...def.model !== void 0 && def.model !== "inherit" ? { model: def.model.id } : {},
-      tools: [...childTools]
-    });
-  });
-}
-var INHERIT_CREDENTIALS, MaxDelegationDepthError;
-var init_subagent = __esm({
-  "src/a2a/subagent.ts"() {
-    INHERIT_CREDENTIALS = /* @__PURE__ */ Symbol("theokit.subagent.inheritCredentials");
-    MaxDelegationDepthError = class extends Error {
-      constructor(currentDepth, maxDepth) {
-        super(`Max delegation depth ${maxDepth} exceeded (current: ${currentDepth})`);
-        this.currentDepth = currentDepth;
-        this.maxDepth = maxDepth;
-        this.name = "MaxDelegationDepthError";
-      }
-      currentDepth;
-      maxDepth;
-      code = "max_delegation_depth";
-    };
-  }
-});
-
-// src/types/run-events.ts
-function emitRunEvent(sink, event) {
-  if (sink === void 0) return;
-  try {
-    sink(event);
+    sink(event);
   } catch {
   }
 }
@@ -8742,253 +8811,84 @@ var init_repair_middleware = __esm({
     DECIMAL_RE = /^-?\d+(\.\d+)?$/;
   }
 });
-function loadJsonrepair() {
-  if (cachedJsonrepair === void 0) {
-    const req = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)));
-    cachedJsonrepair = req("jsonrepair").jsonrepair;
-  }
-  return cachedJsonrepair;
-}
-function isPlainObject(v) {
-  return v !== null && typeof v === "object" && !Array.isArray(v);
-}
-function toFiniteNumber(raw) {
-  if (raw === "") return void 0;
-  const n = Number(raw);
-  return Number.isFinite(n) && String(n) === raw ? n : void 0;
+
+// src/tool-error.ts
+function renderToolErrorMessage(content) {
+  if (typeof content === "string") return content;
+  return content.map((block) => block.type === "text" ? block.text : `[${block.source.media_type} image]`).join("\n");
 }
-function tryJson(raw, repair) {
-  const t = raw.trimStart();
-  if (!(t.startsWith("{") || t.startsWith("["))) return void 0;
-  try {
-    return JSON.parse(repair ? loadJsonrepair()(t) : t);
-  } catch {
-    return void 0;
+exports.ToolError = void 0;
+var init_tool_error = __esm({
+  "src/tool-error.ts"() {
+    init_errors();
+    exports.ToolError = class extends exports.TheokitAgentError {
+      name = "ToolError";
+      /** The error content surfaced to the model: a string, or text/image blocks. */
+      content;
+      constructor(content, options = {}) {
+        super(renderToolErrorMessage(content), { ...options, isRetryable: false });
+        this.content = content;
+      }
+    };
   }
+});
+
+// src/internal/runtime/tools/shell-tool.ts
+async function runShell(options) {
+  if (options.sandbox === true && isObviouslyUnsafe(options.command)) {
+    return {
+      stdout: "",
+      stderr: `Sandbox refused command: ${options.command}`,
+      exitCode: 126,
+      timedOut: false
+    };
+  }
+  const result = await spawnAndCollect({
+    command: "sh",
+    args: ["-c", options.command],
+    cwd: options.cwd,
+    ...options.env !== void 0 ? { env: options.env } : {},
+    ...options.timeoutMs !== void 0 ? { timeoutMs: options.timeoutMs } : {}
+  });
+  const stderr = result.spawnError !== void 0 ? result.stderr + result.spawnError.message : result.stderr;
+  return {
+    stdout: result.stdout,
+    stderr,
+    exitCode: result.exitCode,
+    timedOut: result.timedOut
+  };
 }
-function heuristicCoerce(raw, repairJson) {
-  if (raw === "true") return true;
-  if (raw === "false") return false;
-  if (raw === "null") return null;
-  const n = toFiniteNumber(raw);
-  if (n !== void 0) return n;
-  const json = tryJson(raw, false) ?? (repairJson ? tryJson(raw, true) : void 0);
-  return json === void 0 ? raw : json;
-}
-function coerceCandidates(raw, repairJson) {
-  const out = [];
-  if (raw === "true") out.push(true);
-  else if (raw === "false") out.push(false);
-  else if (raw === "null") out.push(null);
-  const n = toFiniteNumber(raw);
-  if (n !== void 0) out.push(n);
-  const json = tryJson(raw, false) ?? (repairJson ? tryJson(raw, true) : void 0);
-  if (json !== void 0) out.push(json);
-  out.push(raw);
-  return out;
-}
-function objectShape(schema) {
-  const shape = schema?.shape;
-  return shape !== null && typeof shape === "object" ? shape : void 0;
+function isObviouslyUnsafe(command) {
+  if (/(^|\s)(rm|mv|cp)\s+[^|;]*\s+\/(etc|var|root)\b/.test(command)) return true;
+  if (/sudo\s/.test(command)) return true;
+  return false;
 }
-var cachedJsonrepair;
-var init_coerce = __esm({
-  "src/sanitize/coerce.ts"() {
+var init_shell_tool = __esm({
+  "src/internal/runtime/tools/shell-tool.ts"() {
+    init_spawn_collect();
   }
 });
 
-// src/sanitize/sanitize-tool-input.ts
-function applyTrim(key2, value, ctx) {
-  const trimmed = value.trim();
-  if (trimmed !== value) ctx.notes.push(`trimmed "${key2}"`);
-  return trimmed;
-}
-function applyCoerce(key2, raw, ctx) {
-  const field = ctx.shape?.[key2];
-  let coerced = raw;
-  if (field) {
-    for (const candidate of coerceCandidates(raw, ctx.repairJson)) {
-      if (field.safeParse(candidate).success) {
-        coerced = candidate;
-        break;
-      }
-    }
-  } else {
-    coerced = heuristicCoerce(raw, ctx.repairJson);
+// src/internal/agent-loop/tool-executors.ts
+async function executeTool(inputs, resolved, call) {
+  if (resolved === void 0) {
+    return { stdout: "", stderr: `Unknown tool ${call.name}`, exitCode: 127 };
   }
-  if (coerced !== raw) ctx.notes.push(`coerced "${key2}"`);
-  return coerced;
+  if (resolved.origin === "shell") return runShellTool(inputs, call);
+  if (resolved.origin === "memory") return runMemoryTool(resolved, call, inputs.context);
+  if (resolved.origin === "custom")
+    return runCustomTool(resolved, call, inputs.signal, inputs.context, inputs.messages);
+  return runMcpTool(inputs, resolved, call);
 }
-function applyRepair(key2, value, ctx) {
-  const repaired = tryJson(value, true);
-  if (repaired === void 0) return value;
-  ctx.notes.push(`repaired json "${key2}"`);
-  return repaired;
+async function runMemoryTool(resolved, call, context) {
+  return runHandlerTool("memory", resolved.memoryHandler, call, void 0, context);
 }
-function sanitizeString(key2, value, ctx) {
-  let out = ctx.trim ? applyTrim(key2, value, ctx) : value;
-  if (ctx.coerce && typeof out === "string") out = applyCoerce(key2, out, ctx);
-  if (ctx.repairJson && !ctx.coerce && typeof out === "string") out = applyRepair(key2, out, ctx);
-  return out;
+async function runCustomTool(resolved, call, signal, context, messages) {
+  return runHandlerTool("custom", resolved.customHandler, call, signal, context, messages);
 }
-function walk(input, ctx, depth) {
-  const out = {};
-  for (const [key2, value] of Object.entries(input)) {
-    if (typeof value === "string") out[key2] = sanitizeString(key2, value, ctx);
-    else if (ctx.deep && depth < ctx.maxDepth && isPlainObject(value))
-      out[key2] = walk(value, ctx, depth + 1);
-    else out[key2] = value;
-  }
-  return out;
-}
-function sanitizeToolInput(input, options) {
-  if (!isPlainObject(input)) return { value: input, changed: false, notes: [] };
-  const ctx = {
-    trim: options?.trim ?? true,
-    coerce: options?.coerce ?? false,
-    repairJson: options?.repairJson ?? false,
-    deep: options?.deep ?? false,
-    maxDepth: options?.maxDepth ?? 8,
-    shape: objectShape(options?.schema),
-    notes: []
-  };
-  const value = walk(input, ctx, 0);
-  return { value, changed: ctx.notes.length > 0, notes: ctx.notes };
-}
-var init_sanitize_tool_input = __esm({
-  "src/sanitize/sanitize-tool-input.ts"() {
-    init_coerce();
-  }
-});
-
-// src/define-tool.ts
-async function runValidated(spec, input, ctx) {
-  const raw = spec.sanitize ? sanitizeToolInput(input, {
-    ...spec.sanitize === true ? {} : spec.sanitize,
-    schema: spec.inputSchema
-  }).value : input;
-  const parsed = spec.inputSchema.parse(raw);
-  const out = await spec.handler(parsed, ctx);
-  return spec.outputSchema === void 0 ? out : spec.outputSchema.parse(out);
-}
-function serializeOutput(validated) {
-  return typeof validated === "string" ? validated : JSON.stringify(validated);
-}
-function shapeModelOutput(spec, validated) {
-  if (spec.toModelOutput !== void 0) return spec.toModelOutput(validated);
-  return serializeOutput(validated);
-}
-function defineTool(spec) {
-  const inputSchema = toJsonSchema(spec.inputSchema, {
-    unrepresentable: "any"
-  });
-  const handler = async (input, ctx) => {
-    const validated = await runValidated(spec, input, ctx);
-    return shapeModelOutput(spec, validated);
-  };
-  const tool = { name: spec.name, description: spec.description, inputSchema, handler };
-  if (spec.toModelOutput !== void 0) {
-    const resolver = async (input, ctx) => {
-      const validated = await runValidated(spec, input, ctx);
-      return { model: shapeModelOutput(spec, validated), app: serializeOutput(validated) };
-    };
-    handler[TOOL_SPLIT_RESOLVER] = resolver;
-  }
-  return tool;
-}
-var TOOL_SPLIT_RESOLVER; exports.Tool = void 0;
-var init_define_tool = __esm({
-  "src/define-tool.ts"() {
-    init_to_json_schema();
-    init_sanitize_tool_input();
-    TOOL_SPLIT_RESOLVER = /* @__PURE__ */ Symbol("theokit.toolSplitResolver");
-    exports.Tool = class {
-      constructor() {
-      }
-      static create(spec) {
-        return defineTool(spec);
-      }
-    };
-  }
-});
-
-// src/tool-error.ts
-function renderToolErrorMessage(content) {
-  if (typeof content === "string") return content;
-  return content.map((block) => block.type === "text" ? block.text : `[${block.source.media_type} image]`).join("\n");
-}
-exports.ToolError = void 0;
-var init_tool_error = __esm({
-  "src/tool-error.ts"() {
-    init_errors();
-    exports.ToolError = class extends exports.TheokitAgentError {
-      name = "ToolError";
-      /** The error content surfaced to the model: a string, or text/image blocks. */
-      content;
-      constructor(content, options = {}) {
-        super(renderToolErrorMessage(content), { ...options, isRetryable: false });
-        this.content = content;
-      }
-    };
-  }
-});
-
-// src/internal/runtime/tools/shell-tool.ts
-async function runShell(options) {
-  if (options.sandbox === true && isObviouslyUnsafe(options.command)) {
-    return {
-      stdout: "",
-      stderr: `Sandbox refused command: ${options.command}`,
-      exitCode: 126,
-      timedOut: false
-    };
-  }
-  const result = await spawnAndCollect({
-    command: "sh",
-    args: ["-c", options.command],
-    cwd: options.cwd,
-    ...options.env !== void 0 ? { env: options.env } : {},
-    ...options.timeoutMs !== void 0 ? { timeoutMs: options.timeoutMs } : {}
-  });
-  const stderr = result.spawnError !== void 0 ? result.stderr + result.spawnError.message : result.stderr;
-  return {
-    stdout: result.stdout,
-    stderr,
-    exitCode: result.exitCode,
-    timedOut: result.timedOut
-  };
-}
-function isObviouslyUnsafe(command) {
-  if (/(^|\s)(rm|mv|cp)\s+[^|;]*\s+\/(etc|var|root)\b/.test(command)) return true;
-  if (/sudo\s/.test(command)) return true;
-  return false;
-}
-var init_shell_tool = __esm({
-  "src/internal/runtime/tools/shell-tool.ts"() {
-    init_spawn_collect();
-  }
-});
-
-// src/internal/agent-loop/tool-executors.ts
-async function executeTool(inputs, resolved, call) {
-  if (resolved === void 0) {
-    return { stdout: "", stderr: `Unknown tool ${call.name}`, exitCode: 127 };
-  }
-  if (resolved.origin === "shell") return runShellTool(inputs, call);
-  if (resolved.origin === "memory") return runMemoryTool(resolved, call, inputs.context);
-  if (resolved.origin === "custom")
-    return runCustomTool(resolved, call, inputs.signal, inputs.context, inputs.messages);
-  return runMcpTool(inputs, resolved, call);
-}
-async function runMemoryTool(resolved, call, context) {
-  return runHandlerTool("memory", resolved.memoryHandler, call, void 0, context);
-}
-async function runCustomTool(resolved, call, signal, context, messages) {
-  return runHandlerTool("custom", resolved.customHandler, call, signal, context, messages);
-}
-async function runHandlerTool(kind, handler, call, signal, context, messages) {
-  if (handler === void 0) {
-    return { stdout: "", stderr: `${kind} tool ${call.name} has no handler`, exitCode: 127 };
+async function runHandlerTool(kind, handler, call, signal, context, messages) {
+  if (handler === void 0) {
+    return { stdout: "", stderr: `${kind} tool ${call.name} has no handler`, exitCode: 127 };
   }
   try {
     const split = handler[TOOL_SPLIT_RESOLVER];
@@ -13362,6 +13262,198 @@ var init_register_plugin_providers = __esm({
   }
 });
 
+// src/internal/runtime/local-agent/real-local-run-provider.ts
+function inferProviderFromApiKey(apiKey) {
+  if (apiKey === void 0 || apiKey.length === 0) return void 0;
+  const byPrefix = [
+    { provider: "openrouter", prefix: "sk-or-" },
+    { provider: "anthropic", prefix: "sk-ant-" },
+    { provider: "openai", prefix: "sk-" }
+  ];
+  for (const { provider, prefix } of byPrefix) {
+    if (apiKey.startsWith(prefix) && getProviderProfile(provider) !== void 0) {
+      return provider;
+    }
+  }
+  return void 0;
+}
+function detectPrimaryProvider() {
+  if (process.env.ANTHROPIC_API_KEY !== void 0 && process.env.ANTHROPIC_API_KEY.length > 0) {
+    return "anthropic";
+  }
+  if (process.env.OPENAI_API_KEY !== void 0 && process.env.OPENAI_API_KEY.length > 0) {
+    return "openai";
+  }
+  if (process.env.OPENROUTER_API_KEY !== void 0 && process.env.OPENROUTER_API_KEY.length > 0) {
+    return "openrouter";
+  }
+  return "openai";
+}
+var init_real_local_run_provider = __esm({
+  "src/internal/runtime/local-agent/real-local-run-provider.ts"() {
+    init_providers();
+  }
+});
+function inheritSubAgentCredentials(tool, creds) {
+  const sink = tool[INHERIT_CREDENTIALS];
+  if (typeof sink === "function") sink(creds);
+}
+async function applyDelegationStart(spec, input, iteration) {
+  if (spec.onDelegationStart === void 0) return { input };
+  const decision = await spec.onDelegationStart({ input, name: spec.name, iteration });
+  if (decision === void 0) return { input };
+  if (decision.proceed === false)
+    return { reject: decision.rejectionReason ?? "(delegation rejected)" };
+  return {
+    input: decision.modifiedInput ?? input,
+    ...decision.modifiedMaxSteps !== void 0 ? { maxSteps: decision.modifiedMaxSteps } : {}
+  };
+}
+async function collectChildToolResults(run) {
+  const lines = [];
+  for await (const event of run.stream()) {
+    if (event.type === "tool_call" && event.status === "completed") {
+      const rendered = typeof event.result === "string" ? event.result : JSON.stringify(event.result ?? null);
+      lines.push(`${event.name}: ${rendered}`);
+    }
+  }
+  if (lines.length === 0) return "";
+  return `
+
+<subagent-tool-results>
+${lines.join("\n")}
+</subagent-tool-results>`;
+}
+function buildChildCreateOptions(spec, inherited) {
+  const model = spec.model ? { id: spec.model } : inherited?.model;
+  return {
+    ...inherited?.apiKey !== void 0 ? { apiKey: inherited.apiKey } : {},
+    ...model !== void 0 ? { model } : {},
+    ...inherited?.plugins !== void 0 ? { plugins: inherited.plugins } : {},
+    systemPrompt: spec.instructions,
+    tools: spec.tools ?? []
+  };
+}
+async function runChildAgent(spec, input, signal, maxSteps, inherited) {
+  const { Agent: Agent2 } = await Promise.resolve().then(() => (init_agent(), agent_exports));
+  const agent = await Agent2.create(buildChildCreateOptions(spec, inherited));
+  try {
+    const sendOptions = {
+      ...signal !== void 0 ? { signal } : {},
+      ...maxSteps !== void 0 ? { maxIterations: maxSteps } : {},
+      // SE3 — a delegated child's turn is initiated by the coordinating parent.
+      origin: { kind: "coordinator" }
+    };
+    const run = await agent.send(input, sendOptions);
+    const result = await run.wait();
+    const text = result.result ?? "(no response)";
+    return spec.includeToolResults === true ? text + await collectChildToolResults(run) : text;
+  } finally {
+    agent.dispose();
+  }
+}
+async function notifyDelegationError(spec, input, error, iteration) {
+  if (spec.onDelegationComplete === void 0) return;
+  try {
+    await spec.onDelegationComplete({ input, name: spec.name, error, iteration });
+  } catch {
+  }
+}
+function applyMessageFilter(spec, input, messages) {
+  if (spec.messageFilter === void 0 || messages === void 0) return input;
+  const filtered = spec.messageFilter({ messages, input, name: spec.name });
+  if (filtered.length === 0) return input;
+  const preamble = filtered.map((m) => `${m.role}: ${m.content}`).join("\n");
+  return `Prior conversation:
+${preamble}
+
+Task:
+${input}`;
+}
+async function applyDelegationComplete(spec, input, result, iteration) {
+  if (spec.onDelegationComplete === void 0) return result;
+  const completion = await spec.onDelegationComplete({ input, name: spec.name, result, iteration });
+  return completion?.feedback !== void 0 ? result + completion.feedback : result;
+}
+function defineSubAgent(spec, _parentDepth = 0) {
+  const currentDepth = _parentDepth + 1;
+  const maxDepth = spec.maxDelegationDepth ?? 3;
+  if (currentDepth > maxDepth) {
+    throw new MaxDelegationDepthError(currentDepth, maxDepth);
+  }
+  const inputZod = zod.z.object({
+    input: zod.z.string().describe("Task for the subagent")
+  });
+  const inputSchema = {
+    type: "object",
+    properties: {
+      input: { type: "string", description: "Task for the subagent" }
+    },
+    required: ["input"],
+    additionalProperties: false
+  };
+  let iteration = 0;
+  let inherited;
+  const tool = {
+    name: spec.name,
+    description: spec.description,
+    inputSchema,
+    handler: async (rawInput, ctx) => {
+      const { input: parsed } = inputZod.parse(rawInput);
+      iteration += 1;
+      const capturedIteration = iteration;
+      const start = await applyDelegationStart(spec, parsed, capturedIteration);
+      if ("reject" in start) return start.reject;
+      const input = applyMessageFilter(spec, start.input, ctx?.messages);
+      let result;
+      try {
+        result = await runChildAgent(spec, input, ctx?.signal, start.maxSteps, inherited);
+      } catch (error) {
+        await notifyDelegationError(spec, input, error, capturedIteration);
+        throw error;
+      }
+      return applyDelegationComplete(spec, input, result, capturedIteration);
+    }
+  };
+  Object.defineProperty(tool, INHERIT_CREDENTIALS, {
+    value: ((creds) => {
+      inherited = creds;
+    }),
+    enumerable: false
+  });
+  return tool;
+}
+function subAgentToolsFromDefinitions(agents2, parentTools) {
+  return Object.entries(agents2).map(([name, def]) => {
+    const whitelist = Array.isArray(def.tools) && def.tools.length > 0 ? new Set(def.tools) : void 0;
+    const childTools = whitelist ? parentTools.filter((t) => whitelist.has(t.name)) : parentTools;
+    return defineSubAgent({
+      name,
+      description: def.description,
+      instructions: def.prompt,
+      ...def.model !== void 0 && def.model !== "inherit" ? { model: def.model.id } : {},
+      tools: [...childTools]
+    });
+  });
+}
+var INHERIT_CREDENTIALS, MaxDelegationDepthError;
+var init_subagent = __esm({
+  "src/a2a/subagent.ts"() {
+    INHERIT_CREDENTIALS = /* @__PURE__ */ Symbol("theokit.subagent.inheritCredentials");
+    MaxDelegationDepthError = class extends Error {
+      constructor(currentDepth, maxDepth) {
+        super(`Max delegation depth ${maxDepth} exceeded (current: ${currentDepth})`);
+        this.currentDepth = currentDepth;
+        this.maxDepth = maxDepth;
+        this.name = "MaxDelegationDepthError";
+      }
+      currentDepth;
+      maxDepth;
+      code = "max_delegation_depth";
+    };
+  }
+});
+
 // src/internal/tool-registry/personality-filter.ts
 function applyPersonalityFilter(exposedTools, whitelist, opts) {
   if (whitelist === void 0) return exposedTools;
@@ -13417,36 +13509,49 @@ var init_personality_filter = __esm({
   }
 });
 
-// src/internal/runtime/local-agent/real-local-run-provider.ts
-function inferProviderFromApiKey(apiKey) {
-  if (apiKey === void 0 || apiKey.length === 0) return void 0;
-  const byPrefix = [
-    { provider: "openrouter", prefix: "sk-or-" },
-    { provider: "anthropic", prefix: "sk-ant-" },
-    { provider: "openai", prefix: "sk-" }
-  ];
-  for (const { provider, prefix } of byPrefix) {
-    if (apiKey.startsWith(prefix) && getProviderProfile(provider) !== void 0) {
-      return provider;
-    }
-  }
-  return void 0;
+// src/internal/runtime/local-agent/real-local-run-tools.ts
+function declarativeSubagentTools(agents2, parentTools) {
+  if (agents2 === void 0 || Object.keys(agents2).length === 0) return [];
+  return subAgentToolsFromDefinitions(agents2, parentTools);
 }
-function detectPrimaryProvider() {
-  if (process.env.ANTHROPIC_API_KEY !== void 0 && process.env.ANTHROPIC_API_KEY.length > 0) {
-    return "anthropic";
-  }
-  if (process.env.OPENAI_API_KEY !== void 0 && process.env.OPENAI_API_KEY.length > 0) {
-    return "openai";
-  }
-  if (process.env.OPENROUTER_API_KEY !== void 0 && process.env.OPENROUTER_API_KEY.length > 0) {
-    return "openrouter";
+function bindParentCredentials(tools, agentOptions) {
+  const parentPlugins = Array.isArray(agentOptions.plugins) ? agentOptions.plugins : void 0;
+  const credentials = {
+    ...agentOptions.apiKey !== void 0 ? { apiKey: agentOptions.apiKey } : {},
+    ...typeof agentOptions.model === "object" ? { model: agentOptions.model } : {},
+    ...parentPlugins !== void 0 ? { plugins: parentPlugins } : {}
+  };
+  for (const tool of tools) inheritSubAgentCredentials(tool, credentials);
+}
+function buildCustomToolsInput(agentOptions, sendOptions, pluginManager, personalityToolWhitelist, agentId, personalityName, subagents, effectiveModel) {
+  const baseTools = sendOptions?.tools ?? agentOptions.tools ?? [];
+  const agentsForTools = subagents !== void 0 && Object.keys(subagents).length > 0 ? subagents : agentOptions.agents;
+  const subagentTools = declarativeSubagentTools(agentsForTools, baseTools);
+  const pluginTools = pluginManager?.aggregated.tools ?? [];
+  const reasoningTools = reasoningActive(agentOptions.reasoning, effectiveModel) ? [createThinkTool()] : [];
+  if (baseTools.length === 0 && subagentTools.length === 0 && pluginTools.length === 0 && reasoningTools.length === 0) {
+    return {};
   }
-  return "openai";
+  const allTools = [...baseTools, ...subagentTools, ...pluginTools, ...reasoningTools];
+  bindParentCredentials(allTools, agentOptions);
+  const merged = allTools.map((tool) => ({
+    name: tool.name,
+    description: tool.description,
+    inputSchema: tool.inputSchema,
+    handler: tool.handler
+  }));
+  const customTools = applyPersonalityFilter(merged, personalityToolWhitelist, {
+    agentId,
+    personalityName
+  });
+  if (customTools.length === 0 && personalityToolWhitelist === void 0) return {};
+  return { customTools };
 }
-var init_real_local_run_provider = __esm({
-  "src/internal/runtime/local-agent/real-local-run-provider.ts"() {
-    init_providers();
+var init_real_local_run_tools = __esm({
+  "src/internal/runtime/local-agent/real-local-run-tools.ts"() {
+    init_subagent();
+    init_personality_filter();
+    init_native_reasoning();
   }
 });
 
@@ -13565,7 +13670,8 @@ function buildLoopInputs(options, runId, userText) {
       options.personalityToolWhitelist,
       options.agentId,
       options.personalityName,
-      options.subagents
+      options.subagents,
+      options.model
     ),
     ...options.pluginManager !== void 0 ? { pluginManager: options.pluginManager } : {},
     // D318 — forward SendOptions.signal to the agent loop so streamLlmTurn
@@ -13603,40 +13709,6 @@ function buildLoopInputs(options, runId, userText) {
     ...options.agentOptions.memoryProvider !== void 0 ? { memoryProvider: options.agentOptions.memoryProvider } : {}
   };
 }
-function declarativeSubagentTools(agents2, parentTools) {
-  if (agents2 === void 0 || Object.keys(agents2).length === 0) return [];
-  return subAgentToolsFromDefinitions(agents2, parentTools);
-}
-function bindParentCredentials(tools, agentOptions) {
-  const parentPlugins = Array.isArray(agentOptions.plugins) ? agentOptions.plugins : void 0;
-  const credentials = {
-    ...agentOptions.apiKey !== void 0 ? { apiKey: agentOptions.apiKey } : {},
-    ...typeof agentOptions.model === "object" ? { model: agentOptions.model } : {},
-    ...parentPlugins !== void 0 ? { plugins: parentPlugins } : {}
-  };
-  for (const tool of tools) inheritSubAgentCredentials(tool, credentials);
-}
-function buildCustomToolsInput(agentOptions, sendOptions, pluginManager, personalityToolWhitelist, agentId, personalityName, subagents) {
-  const baseTools = sendOptions?.tools ?? agentOptions.tools ?? [];
-  const agentsForTools = subagents !== void 0 && Object.keys(subagents).length > 0 ? subagents : agentOptions.agents;
-  const subagentTools = declarativeSubagentTools(agentsForTools, baseTools);
-  const pluginTools = pluginManager?.aggregated.tools ?? [];
-  if (baseTools.length === 0 && subagentTools.length === 0 && pluginTools.length === 0) return {};
-  const allTools = [...baseTools, ...subagentTools, ...pluginTools];
-  bindParentCredentials(allTools, agentOptions);
-  const merged = allTools.map((tool) => ({
-    name: tool.name,
-    description: tool.description,
-    inputSchema: tool.inputSchema,
-    handler: tool.handler
-  }));
-  const customTools = applyPersonalityFilter(merged, personalityToolWhitelist, {
-    agentId,
-    personalityName
-  });
-  if (customTools.length === 0 && personalityToolWhitelist === void 0) return {};
-  return { customTools };
-}
 function buildMcpMap(options) {
   const map = /* @__PURE__ */ new Map();
   const inline = options.sendOptions.mcpServers ?? options.agentOptions.mcpServers;
@@ -13649,7 +13721,6 @@ function buildMcpMap(options) {
 var pluginProvidersAnnounced, RealLocalRun;
 var init_real_local_run = __esm({
   "src/internal/runtime/local-agent/real-local-run.ts"() {
-    init_subagent();
     init_errors();
     init_run_events();
     init_loop();
@@ -13662,11 +13733,11 @@ var init_real_local_run = __esm({
     init_providers();
     init_register_plugin_providers();
     init_tracer();
-    init_personality_filter();
     init_async_local_storage();
     init_fixture_run_base();
     init_run_registry();
     init_real_local_run_provider();
+    init_real_local_run_tools();
     pluginProvidersAnnounced = false;
     RealLocalRun = class extends FixtureRunBase {
       buildInputs;