@theokit/sdk 4.22.0 → 4.24.0

package/dist/{run-DFM1H2jW.d.cts → run-OJbGyweZ.d.cts}

@@ -105,7 +105,7 @@ declare class PermissionEngine {
  *
  * @public
  */
-type RunEvent = RunToolProgressEvent | RunRateLimitEvent | RunPermissionDeniedEvent | RunTaskStartedEvent | RunTaskUpdatedEvent | RunTaskCompletedEvent | RunCompactBoundaryEvent | RunTripwireEvent | RunCompletionCheckEvent;
+type RunEvent = RunToolProgressEvent | RunRateLimitEvent | RunPermissionDeniedEvent | RunTaskStartedEvent | RunTaskUpdatedEvent | RunTaskCompletedEvent | RunCompactBoundaryEvent | RunCompactionFallbackEvent | RunTripwireEvent | RunCompletionCheckEvent;
 /**
  * SE24 — a guardrail processor called `abort()`; the run stops with a tripwire.
  * Delivered via {@link SendOptions.onRunEvent} (mirrors the `RunResult.tripwire`
@@ -180,6 +180,25 @@ interface RunCompactBoundaryEvent {
     /** Token count before compaction, when known. */
     readonly preTokens?: number;
 }
+/**
+ * M77 — auto-compaction is budgeting against a FLOOR, because neither the catalog nor the caller
+ * supplied a context window for this model.
+ *
+ * The prior behaviour was to disable auto-compaction entirely and write one line to stderr per
+ * process. That is fail-OPEN: the conversation grows until the provider rejects it. This event exists
+ * so a surface can say "I am running without a real budget" instead of the user discovering it at the
+ * moment of failure.
+ *
+ * Not emitted when the window came from the catalog (the normal path) or from an explicit caller
+ * override (the caller already knows).
+ */
+interface RunCompactionFallbackEvent {
+    readonly type: "compaction_fallback";
+    /** The model whose window is unknown — what the user needs to fix in configuration. */
+    readonly model: string;
+    /** The floor being budgeted against, after the safety margin. */
+    readonly window: number;
+}
 /**
  * SE2 — the opt-in sink for {@link RunEvent}s. Supplied via `SendOptions.onRunEvent`.
  * Synchronous + best-effort: a throwing sink must never break the run (the emitter

package/dist/{run-DFM1H2jW.d.ts → run-OJbGyweZ.d.ts}

@@ -105,7 +105,7 @@ declare class PermissionEngine {
  *
  * @public
  */
-type RunEvent = RunToolProgressEvent | RunRateLimitEvent | RunPermissionDeniedEvent | RunTaskStartedEvent | RunTaskUpdatedEvent | RunTaskCompletedEvent | RunCompactBoundaryEvent | RunTripwireEvent | RunCompletionCheckEvent;
+type RunEvent = RunToolProgressEvent | RunRateLimitEvent | RunPermissionDeniedEvent | RunTaskStartedEvent | RunTaskUpdatedEvent | RunTaskCompletedEvent | RunCompactBoundaryEvent | RunCompactionFallbackEvent | RunTripwireEvent | RunCompletionCheckEvent;
 /**
  * SE24 — a guardrail processor called `abort()`; the run stops with a tripwire.
  * Delivered via {@link SendOptions.onRunEvent} (mirrors the `RunResult.tripwire`
@@ -180,6 +180,25 @@ interface RunCompactBoundaryEvent {
     /** Token count before compaction, when known. */
     readonly preTokens?: number;
 }
+/**
+ * M77 — auto-compaction is budgeting against a FLOOR, because neither the catalog nor the caller
+ * supplied a context window for this model.
+ *
+ * The prior behaviour was to disable auto-compaction entirely and write one line to stderr per
+ * process. That is fail-OPEN: the conversation grows until the provider rejects it. This event exists
+ * so a surface can say "I am running without a real budget" instead of the user discovering it at the
+ * moment of failure.
+ *
+ * Not emitted when the window came from the catalog (the normal path) or from an explicit caller
+ * override (the caller already knows).
+ */
+interface RunCompactionFallbackEvent {
+    readonly type: "compaction_fallback";
+    /** The model whose window is unknown — what the user needs to fix in configuration. */
+    readonly model: string;
+    /** The floor being budgeted against, after the safety margin. */
+    readonly window: number;
+}
 /**
  * SE2 — the opt-in sink for {@link RunEvent}s. Supplied via `SendOptions.onRunEvent`.
  * Synchronous + best-effort: a throwing sink must never break the run (the emitter

package/dist/types/agent.d.ts

@@ -332,6 +332,20 @@ export interface AgentOptions {
     local?: LocalOptions;
     cloud?: CloudOptions;
     mcpServers?: Record<string, McpServerConfig>;
+    /**
+     * M77 — how long an MCP client lives.
+     *
+     * `'run'` (DEFAULT, and the historical behaviour) spawns a client per `send` and drops it when the
+     * run ends. `'session'` pools clients per `(agentId, server, config)` and keeps them across turns,
+     * which is what the reference does — Codex holds its connection manager in `SessionServices`
+     * (`core/src/state/service.rs:116`). Measured cost of the per-run path: 193 / 138 / 134 ms of
+     * spawn + handshake on every turn.
+     *
+     * Opt-in rather than default because it changes the FAILURE model: a server that dies mid-session
+     * becomes a reachable state. One-shot and cron runs gain nothing from pooling and would pay that
+     * risk, so they keep `'run'` unless they ask otherwise.
+     */
+    mcpLifecycle?: "run" | "session";
     agents?: Record<string, AgentDefinition>;
     agentId?: string;
     /** Context manager configuration. See `agent.context`. */

package/dist/types/run-events.d.ts

@@ -16,7 +16,7 @@
  *
  * @public
  */
-export type RunEvent = RunToolProgressEvent | RunRateLimitEvent | RunPermissionDeniedEvent | RunTaskStartedEvent | RunTaskUpdatedEvent | RunTaskCompletedEvent | RunCompactBoundaryEvent | RunTripwireEvent | RunCompletionCheckEvent;
+export type RunEvent = RunToolProgressEvent | RunRateLimitEvent | RunPermissionDeniedEvent | RunTaskStartedEvent | RunTaskUpdatedEvent | RunTaskCompletedEvent | RunCompactBoundaryEvent | RunCompactionFallbackEvent | RunTripwireEvent | RunCompletionCheckEvent;
 /**
  * SE24 — a guardrail processor called `abort()`; the run stops with a tripwire.
  * Delivered via {@link SendOptions.onRunEvent} (mirrors the `RunResult.tripwire`
@@ -91,6 +91,25 @@ export interface RunCompactBoundaryEvent {
     /** Token count before compaction, when known. */
     readonly preTokens?: number;
 }
+/**
+ * M77 — auto-compaction is budgeting against a FLOOR, because neither the catalog nor the caller
+ * supplied a context window for this model.
+ *
+ * The prior behaviour was to disable auto-compaction entirely and write one line to stderr per
+ * process. That is fail-OPEN: the conversation grows until the provider rejects it. This event exists
+ * so a surface can say "I am running without a real budget" instead of the user discovering it at the
+ * moment of failure.
+ *
+ * Not emitted when the window came from the catalog (the normal path) or from an explicit caller
+ * override (the caller already knows).
+ */
+export interface RunCompactionFallbackEvent {
+    readonly type: "compaction_fallback";
+    /** The model whose window is unknown — what the user needs to fix in configuration. */
+    readonly model: string;
+    /** The floor being budgeted against, after the safety margin. */
+    readonly window: number;
+}
 /**
  * SE2 — the opt-in sink for {@link RunEvent}s. Supplied via `SendOptions.onRunEvent`.
  * Synchronous + best-effort: a throwing sink must never break the run (the emitter