@theokit/sdk 4.23.0 → 4.25.0

package/dist/chunk-VK7MAV65.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/runtime/lifecycle/run-to-completion.ts"],"names":[],"mappings":";;;AA+BO,IAAM,kBAAA,GAAqB;AAE3B,IAAM,2BAAA,GACX;AAQK,SAAS,aAAa,MAAA,EAA4B;AACvD,EAAA,OAAA,CAAQ,MAAA,CAAO,MAAA,IAAU,EAAA,EAAI,IAAA,EAAK,KAAM,EAAA;AAC1C;AASO,SAAS,aAAA,CACd,MAAA,EACA,KAAA,EACA,SAAA,EACA,WAAA,EACe;AAIf,EAAA,IAAI,MAAA,CAAO,iBAAA,KAAsB,IAAA,EAAM,OAAO,aAAA;AAC9C,EAAA,IAAI,MAAA,CAAO,uBAAA,KAA4B,IAAA,EAAM,OAAO,MAAA;AAEpD,EAAA,IAAI,YAAA,CAAa,MAAM,CAAA,IAAK,WAAA,IAAe,GAAG,OAAO,aAAA;AACrD,EAAA,IAAI,KAAA,IAAS,WAAW,OAAO,YAAA;AAC/B,EAAA,OAAO,UAAA;AACT;AAWO,SAAS,QAAA,CACd,KACA,CAAA,EACwB;AACxB,EAAA,IAAI,CAAA,KAAM,QAAW,OAAO,GAAA;AAC5B,EAAA,MAAM,WAAA,GAAA,CAAe,GAAA,EAAK,WAAA,IAAe,CAAA,IAAK,CAAA,CAAE,WAAA;AAChD,EAAA,MAAM,YAAA,GAAA,CAAgB,GAAA,EAAK,YAAA,IAAgB,CAAA,IAAK,CAAA,CAAE,YAAA;AAClD,EAAA,MAAM,MAAA,GAAS,CAAC,CAAA,EAAuB,CAAA,KACrC,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,MAAA,GAAY,MAAA,GAAA,CAAa,CAAA,IAAK,CAAA,KAAM,CAAA,IAAK,CAAA,CAAA;AACpE,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,YAAA;AAAA,IACA,aAAa,WAAA,GAAc,YAAA;AAAA,IAC3B,eAAA,EAAiB,MAAA,CAAO,GAAA,EAAK,eAAA,EAAiB,EAAE,eAAe,CAAA;AAAA,IAC/D,gBAAA,EAAkB,MAAA,CAAO,GAAA,EAAK,gBAAA,EAAkB,EAAE,gBAAgB,CAAA;AAAA,IAClE,eAAA,EAAiB,MAAA,CAAO,GAAA,EAAK,eAAA,EAAiB,EAAE,eAAe;AAAA,GACjE;AACF;AAMO,SAAS,WAAA,CACd,QAAA,EACA,MAAA,EACA,UAAA,EACA,KAAA,EACuB;AACvB,EAAA,OAAO,EAAE,QAAA,EAAU,MAAA,EAAQ,UAAA,EAAY,GAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAM,GAAI,EAAC,EAAG;AACnF;AASA,eAAsB,gBAAA,CACpB,KAAA,EACA,UAAA,EACA,KAAA,EACA,aACA,MAAA,EAC4C;AAC5C,EAAA,MAAM,WAAA,GAAc,EAAE,KAAA,EAAO,CAAA;AAC7B,EAAA,OAAO,MAAA,EAAQ,YAAY,IAAA,GAAO,WAAA,CAAY,cAAc,KAAA,EAAO,UAAA,EAAY,KAAK,CAAA,GAAI,MAAA;AAC1F;AAsBO,SAAS,oBAAoB,OAAA,EAAwD;AAC1F,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,SAAS,SAAA,IAAa,kBAAA;AAAA,IACjC,kBAAA,EAAoB,SAAS,kBAAA,IAAsB,2BAAA;AAAA,IACnD,aAAa,OAAA,EAAS,WAAA;AAAA,IACtB,QAAQ,OAAA,EAAS,MAAA;AAAA,IACjB,aAAa,OAAA,EAAS,WAAA;AAAA,IACtB,KAAA,EAAO,EAAE,KAAA,EAAO,MAAA,EAAW,aAAa,CAAA;AAAE,GAC5C;AACF;AAGO,SAAS,cAAA,CAAe,KAAA,EAAe,OAAA,EAAiB,kBAAA,EAAoC;AACjG,EAAA,OAAO,KAAA,KAAU,IAAI,OAAA,GAAU,kBAAA;AACjC;AAQA,eAAe,UACb,KAAA,EACA,MAAA,EACA,WAAA,EACA,KAAA,EACA,WACA,KAAA,EACuB;AAGvB,EAAA,MAAM,YAAA,GACJ,KAAA,KAAU,CAAA,GAAI,WAAA,GAAc,EAAE,GAAI,WAAA,IAAe,EAAC,EAAI,MAAA,EAAQ,EAAE,IAAA,EAAM,qBAAoB,EAAE;AAC9F,EAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,IAAA,CAAK,QAAQ,YAAY,CAAA;AACjD,EAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,IAAA,EAAK;AAC9B,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,KAAA,EAAO,OAAO,KAAK,CAAA;AAChD,EAAA,MAAM,WAAW,aAAA,CAAc,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAW,MAAM,WAAW,CAAA;AAC1E,EAAA,IAAI,QAAA,KAAa,UAAA,EAAY,OAAO,EAAE,QAAA,EAAU,YAAY,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,KAAK,CAAA,EAAE;AAC5F,EAAA,MAAM,cAAc,YAAA,CAAa,MAAM,CAAA,GAAI,KAAA,CAAM,cAAc,CAAA,GAAI,CAAA;AACnE,EAAA,OAAO,EAAE,IAAA,EAAM,EAAE,OAAO,WAAA,EAAY,EAAG,YAAY,MAAA,EAAO;AAC5D;AAOA,eAAsB,mBAAA,CACpB,KAAA,EACA,OAAA,EACA,OAAA,EACgC;AAChC,EAAA,MAAM,GAAA,GAAM,oBAAoB,OAAO,CAAA;AACvC,EAAA,IAAI,QAAQ,GAAA,CAAI,KAAA;AAEhB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,IAAK,KAAA,IAAS,CAAA,EAAG;AAChC,IAAA,MAAM,MAAA,GAAS,cAAA,CAAe,KAAA,EAAO,OAAA,EAAS,IAAI,kBAAkB,CAAA;AACpE,IAAA,MAAM,OAAA,GAAU,MAAM,SAAA,CAAU,KAAA,EAAO,MAAA,EAAQ,IAAI,WAAA,EAAa,KAAA,EAAO,GAAA,CAAI,SAAA,EAAW,KAAK,CAAA;AAC3F,IAAA,IAAI,UAAA,IAAc,OAAA,EAAS,OAAO,OAAA,CAAQ,QAAA;AAG1C,IAAA,KAAA,GAAQ,OAAA,CAAQ,IAAA;AAChB,IAAA,MAAM,UAAU,MAAM,gBAAA;AAAA,MACpB,KAAA;AAAA,MACA,OAAA,CAAQ,UAAA;AAAA,MACR,KAAA,CAAM,KAAA;AAAA,MACN,GAAA,CAAI,WAAA;AAAA,MACJ,GAAA,CAAI;AAAA,KACN;AACA,IAAA,IAAI,OAAA,KAAY,QAAW,OAAO,OAAA;AAAA,EACpC;AACF","file":"chunk-VK7MAV65.cjs","sourcesContent":["/**\n * `runToCompletion` continuation driver (M1 Phase 3 — plan m1-run-to-completion).\n *\n * Drives repeated `send()`s on a STATEFUL agent until a genuine terminal,\n * consuming the `RunResult.stoppedAtIterationLimit` signal shipped in 2.2.0.\n * The agent's session preserves conversation history across sends, so after a\n * truncated round the driver only re-sends a short continuation prompt (it does\n * NOT reconstruct history). Mirrors the injectable shape of `run-until.ts` and\n * absorbs the outer-loop policy hand-rolled in `theocode/server/lib/agent-loop.ts`.\n *\n * The core is decision-pure + injectable (`agent` is only the `.send` port) so\n * every terminal is unit-testable with a fake send — fixture mode never sets\n * `stoppedAtIterationLimit`, so injection is the only deterministic path.\n *\n * @internal\n */\n\nimport type {\n  RunResult,\n  RunToCompletionOptions,\n  RunToCompletionResult,\n  SendOptions,\n} from \"../../../types/run.js\";\nimport type { TokenUsage } from \"../../../types/usage.js\";\n\n/** Minimal agent port the driver needs — the instance `.send()` surface. */\nexport interface RunToCompletionAgent {\n  send(message: string, options?: SendOptions): Promise<{ wait(): Promise<RunResult> }>;\n}\n\n/** @internal — shared with the streaming twin (`stream-to-completion.ts`, V3-4). */\nexport const DEFAULT_MAX_ROUNDS = 5;\n/** @internal — shared with the streaming twin (`stream-to-completion.ts`, V3-4). */\nexport const DEFAULT_CONTINUATION_PROMPT =\n  \"Continue from where you left off and finish the task. If it is already complete, give the final answer.\";\n\ntype RoundDecision = \"done\" | \"continue\" | \"step_limit\" | \"no_progress\";\n\n/**\n * True when a round produced no observable output text.\n * @internal — shared with the streaming twin (`stream-to-completion.ts`, V3-4).\n */\nexport function isEmptyRound(result: RunResult): boolean {\n  return (result.result ?? \"\").trim() === \"\";\n}\n\n/**\n * Pure decision: given a round's result + position + the running empty streak,\n * decide whether to finish (`done`), keep going (`continue`), or bail\n * (`step_limit` / `no_progress`).\n *\n * @internal\n */\nexport function classifyRound(\n  result: RunResult,\n  round: number,\n  maxRounds: number,\n  emptyStreak: number,\n): RoundDecision {\n  // Doom-loop stop is a genuine terminal (the model repeated identical tool calls) — classify it as\n  // `no_progress` FIRST, before the iteration-limit check, so it is never mistaken for a truncation\n  // to re-send (which would re-trigger the loop). Complements the empty-round `no_progress` below.\n  if (result.stoppedByDoomLoop === true) return \"no_progress\";\n  if (result.stoppedAtIterationLimit !== true) return \"done\";\n  // Truncated at the iteration ceiling.\n  if (isEmptyRound(result) && emptyStreak >= 1) return \"no_progress\";\n  if (round >= maxRounds) return \"step_limit\";\n  return \"continue\";\n}\n\n/**\n * Sum a round's usage into the running aggregate. `requests` is intentionally\n * dropped (concatenating per-run request breakdowns across continuation rounds\n * would falsely imply a single multi-call run). `totalTokens` is DERIVED\n * (`inputTokens + outputTokens`), never summed independently, to preserve the\n * EC-10 invariant (`usage.ts`) at this aggregation boundary even if a provider\n * folded extra buckets into a round's own `totalTokens`.\n */\n/** @internal — shared with the streaming twin (`stream-to-completion.ts`, V3-4). */\nexport function addUsage(\n  acc: TokenUsage | undefined,\n  u: TokenUsage | undefined,\n): TokenUsage | undefined {\n  if (u === undefined) return acc;\n  const inputTokens = (acc?.inputTokens ?? 0) + u.inputTokens;\n  const outputTokens = (acc?.outputTokens ?? 0) + u.outputTokens;\n  const sumOpt = (a: number | undefined, b: number | undefined): number | undefined =>\n    a === undefined && b === undefined ? undefined : (a ?? 0) + (b ?? 0);\n  return {\n    inputTokens,\n    outputTokens,\n    totalTokens: inputTokens + outputTokens,\n    cacheReadTokens: sumOpt(acc?.cacheReadTokens, u.cacheReadTokens),\n    cacheWriteTokens: sumOpt(acc?.cacheWriteTokens, u.cacheWriteTokens),\n    reasoningTokens: sumOpt(acc?.reasoningTokens, u.reasoningTokens),\n  };\n}\n\n/**\n * Assemble the result object, omitting `usage` when no round reported any.\n * @internal — shared with the streaming twin (`stream-to-completion.ts`, V3-4).\n */\nexport function buildResult(\n  terminal: RunToCompletionResult[\"terminal\"],\n  rounds: number,\n  lastResult: RunResult,\n  usage: TokenUsage | undefined,\n): RunToCompletionResult {\n  return { terminal, rounds, lastResult, ...(usage !== undefined ? { usage } : {}) };\n}\n\n/**\n * The shared between-rounds tail: fire `onTruncated`, then — re-reading `aborted`\n * (a getter that can flip between rounds) — return a `step_limit` result if the\n * signal aborted, else `undefined` to continue. Used by BOTH the stateful driver\n * and its streaming twin (V3-4), so the continuation-end policy has one home.\n * @internal\n */\nexport async function continuationTail(\n  round: number,\n  lastResult: RunResult,\n  usage: TokenUsage | undefined,\n  onTruncated: ((event: { round: number }) => void | Promise<void>) | undefined,\n  signal: AbortSignal | undefined,\n): Promise<RunToCompletionResult | undefined> {\n  await onTruncated?.({ round });\n  return signal?.aborted === true ? buildResult(\"step_limit\", round, lastResult, usage) : undefined;\n}\n\n/**\n * Carried state between continuation rounds.\n * @internal — shared with the streaming twin (`stream-to-completion.ts`, V3-4).\n */\nexport interface RoundState {\n  usage: TokenUsage | undefined;\n  emptyStreak: number;\n}\n\n/** Resolved continuation config + fresh initial state — shared by both drivers. @internal */\nexport interface ResolvedContinuation {\n  maxRounds: number;\n  continuationPrompt: string;\n  onTruncated: ((event: { round: number }) => void | Promise<void>) | undefined;\n  signal: AbortSignal | undefined;\n  sendOptions: SendOptions | undefined;\n  state: RoundState;\n}\n\n/** Resolve options to the continuation config + a fresh state. One home for the defaults. @internal */\nexport function resolveContinuation(options?: RunToCompletionOptions): ResolvedContinuation {\n  return {\n    maxRounds: options?.maxRounds ?? DEFAULT_MAX_ROUNDS,\n    continuationPrompt: options?.continuationPrompt ?? DEFAULT_CONTINUATION_PROMPT,\n    onTruncated: options?.onTruncated,\n    signal: options?.signal,\n    sendOptions: options?.sendOptions,\n    state: { usage: undefined, emptyStreak: 0 },\n  };\n}\n\n/** The round's prompt: the task on round 0, the continuation prompt after. @internal */\nexport function promptForRound(round: number, message: string, continuationPrompt: string): string {\n  return round === 0 ? message : continuationPrompt;\n}\n\n/** A round either reaches a terminal, or yields the state to carry into the next round. */\ntype RoundOutcome =\n  | { terminal: RunToCompletionResult }\n  | { next: RoundState; lastResult: RunResult };\n\n/** Send one round, fold usage, classify. Splits the loop body out to cap complexity. */\nasync function stepRound(\n  agent: RunToCompletionAgent,\n  prompt: string,\n  sendOptions: SendOptions | undefined,\n  round: number,\n  maxRounds: number,\n  state: RoundState,\n): Promise<RoundOutcome> {\n  // SE3 — a continuation round (round > 0) is a driver-initiated turn; stamp its\n  // provenance so a consumer can tell it apart from the caller's first send.\n  const roundOptions: SendOptions | undefined =\n    round === 0 ? sendOptions : { ...(sendOptions ?? {}), origin: { kind: \"auto-continuation\" } };\n  const run = await agent.send(prompt, roundOptions);\n  const result = await run.wait();\n  const usage = addUsage(state.usage, result.usage);\n  const decision = classifyRound(result, round, maxRounds, state.emptyStreak);\n  if (decision !== \"continue\") return { terminal: buildResult(decision, round, result, usage) };\n  const emptyStreak = isEmptyRound(result) ? state.emptyStreak + 1 : 0;\n  return { next: { usage, emptyStreak }, lastResult: result };\n}\n\n/**\n * Drive `agent.send()` until a terminal. See {@link RunToCompletionOptions}.\n *\n * @internal\n */\nexport async function runToCompletionImpl(\n  agent: RunToCompletionAgent,\n  message: string,\n  options?: RunToCompletionOptions,\n): Promise<RunToCompletionResult> {\n  const cfg = resolveContinuation(options);\n  let state = cfg.state;\n\n  for (let round = 0; ; round += 1) {\n    const prompt = promptForRound(round, message, cfg.continuationPrompt);\n    const outcome = await stepRound(agent, prompt, cfg.sendOptions, round, cfg.maxRounds, state);\n    if (\"terminal\" in outcome) return outcome.terminal;\n\n    // Truncated and below the round budget — re-send next iteration.\n    state = outcome.next;\n    const aborted = await continuationTail(\n      round,\n      outcome.lastResult,\n      state.usage,\n      cfg.onTruncated,\n      cfg.signal,\n    );\n    if (aborted !== undefined) return aborted;\n  }\n}\n"]}

package/dist/chunk-VYCKUKPA.cjs

@@ -0,0 +1,106 @@
+'use strict';
+
+var buffer = require('buffer');
+var crypto = require('crypto');
+
+// src/server/auth/oauth-transaction-store.ts
+var COOKIE_NAME = "__Host-theo_oauth_tx";
+var TX_LIFETIME_MS = 10 * 60 * 1e3;
+var HKDF_INFO = "theokit:oauth-tx-v1";
+async function deriveKey(secret) {
+  const secretBytes = new TextEncoder().encode(secret);
+  if (secretBytes.byteLength < 32) {
+    throw new AuthSecretTooShortError(secretBytes.byteLength);
+  }
+  const saltRaw = process.env.THEOKIT_OAUTH_TX_SALT ?? "";
+  const salt = new TextEncoder().encode(saltRaw);
+  const ikm = await crypto.webcrypto.subtle.importKey("raw", secretBytes, "HKDF", false, ["deriveBits"]);
+  const derived = await crypto.webcrypto.subtle.deriveBits(
+    { name: "HKDF", hash: "SHA-256", salt, info: new TextEncoder().encode(HKDF_INFO) },
+    ikm,
+    256
+  );
+  return crypto.webcrypto.subtle.importKey("raw", derived, { name: "AES-GCM" }, true, [
+    "encrypt",
+    "decrypt"
+  ]);
+}
+var AuthSecretTooShortError = class extends Error {
+  name = "AuthSecretTooShortError";
+  constructor(actualBytes) {
+    super(
+      `OAuth transaction secret must be at least 32 bytes (got ${actualBytes}). Generate a fresh value with: openssl rand -base64 33`
+    );
+  }
+};
+async function __TESTING__deriveKey(secret) {
+  return deriveKey(secret);
+}
+async function encodeTransaction(tx, secret) {
+  const key = await deriveKey(secret);
+  const iv = crypto.webcrypto.getRandomValues(new Uint8Array(12));
+  const plaintext = new TextEncoder().encode(JSON.stringify(tx));
+  const ciphertext = await crypto.webcrypto.subtle.encrypt({ name: "AES-GCM", iv }, key, plaintext);
+  const combined = new Uint8Array(iv.length + ciphertext.byteLength);
+  combined.set(iv, 0);
+  combined.set(new Uint8Array(ciphertext), iv.length);
+  return buffer.Buffer.from(combined).toString("base64url");
+}
+async function decodeTransaction(encoded, secret) {
+  try {
+    const key = await deriveKey(secret);
+    const combined = buffer.Buffer.from(encoded, "base64url");
+    const iv = combined.slice(0, 12);
+    const ciphertext = combined.slice(12);
+    const plaintext = await crypto.webcrypto.subtle.decrypt({ name: "AES-GCM", iv }, key, ciphertext);
+    const tx = JSON.parse(new TextDecoder().decode(plaintext));
+    return tx;
+  } catch {
+    return null;
+  }
+}
+function getCookie(req, name) {
+  const header = req.headers.cookie;
+  if (!header) return null;
+  for (const part of header.split(";")) {
+    const [k, ...v] = part.trim().split("=");
+    if (k === name) return v.join("=");
+  }
+  return null;
+}
+function clearCookie(res, name) {
+  const clear = `${name}=; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT`;
+  const existing = res.getHeader("Set-Cookie");
+  const preserved = Array.isArray(existing) ? existing.filter((c) => !c.startsWith(`${name}=`)) : typeof existing === "string" && !existing.startsWith(`${name}=`) ? [existing] : [];
+  res.setHeader("Set-Cookie", [...preserved, clear]);
+}
+async function getTransaction(req, secret) {
+  const raw = getCookie(req, COOKIE_NAME);
+  if (!raw) return null;
+  const tx = await decodeTransaction(raw, secret);
+  if (!tx) return null;
+  if (tx.expiresAt < Date.now()) return null;
+  return tx;
+}
+function clearTransaction(res) {
+  clearCookie(res, COOKIE_NAME);
+}
+function newTransaction(opts) {
+  const now = Date.now();
+  return {
+    state: opts.state,
+    pkceVerifier: opts.pkceVerifier,
+    returnTo: opts.returnTo,
+    createdAt: now,
+    expiresAt: now + TX_LIFETIME_MS
+  };
+}
+
+exports.AuthSecretTooShortError = AuthSecretTooShortError;
+exports.__TESTING__deriveKey = __TESTING__deriveKey;
+exports.clearTransaction = clearTransaction;
+exports.encodeTransaction = encodeTransaction;
+exports.getTransaction = getTransaction;
+exports.newTransaction = newTransaction;
+//# sourceMappingURL=chunk-VYCKUKPA.cjs.map
+//# sourceMappingURL=chunk-VYCKUKPA.cjs.map

package/dist/chunk-VYCKUKPA.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/auth/oauth-transaction-store.ts"],"names":["webcrypto","Buffer"],"mappings":";;;;;;AA8BA,IAAM,WAAA,GAAc,sBAAA;AACpB,IAAM,cAAA,GAAiB,KAAK,EAAA,GAAK,GAAA;AAKjC,IAAM,SAAA,GAAY,qBAAA;AAmBlB,eAAe,UAAU,MAAA,EAA8C;AACrE,EAAA,MAAM,WAAA,GAAc,IAAI,WAAA,EAAY,CAAE,OAAO,MAAM,CAAA;AACnD,EAAA,IAAI,WAAA,CAAY,aAAa,EAAA,EAAI;AAC/B,IAAA,MAAM,IAAI,uBAAA,CAAwB,WAAA,CAAY,UAAU,CAAA;AAAA,EAC1D;AACA,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,GAAA,CAAI,qBAAA,IAAyB,EAAA;AACrD,EAAA,MAAM,IAAA,GAAO,IAAI,WAAA,EAAY,CAAE,OAAO,OAAO,CAAA;AAE7C,EAAA,MAAM,GAAA,GAAM,MAAMA,gBAAA,CAAU,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,WAAA,EAAa,MAAA,EAAQ,KAAA,EAAO,CAAC,YAAY,CAAC,CAAA;AAE9F,EAAA,MAAM,OAAA,GAAU,MAAMA,gBAAA,CAAU,MAAA,CAAO,UAAA;AAAA,IACrC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,SAAS,CAAA,EAAE;AAAA,IACjF,GAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAOA,gBAAA,CAAU,OAAO,SAAA,CAAU,KAAA,EAAO,SAAS,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,IAAA,EAAM;AAAA,IAC3E,SAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;AASO,IAAM,uBAAA,GAAN,cAAsC,KAAA,CAAM;AAAA,EAC/B,IAAA,GAAO,yBAAA;AAAA,EACzB,YAAY,WAAA,EAAqB;AAC/B,IAAA,KAAA;AAAA,MACE,2DAA2D,WAAW,CAAA,uDAAA;AAAA,KAExE;AAAA,EACF;AACF;AASA,eAAsB,qBAAqB,MAAA,EAA8C;AACvF,EAAA,OAAO,UAAU,MAAM,CAAA;AACzB;AAEA,eAAsB,iBAAA,CAAkB,IAAsB,MAAA,EAAiC;AAC7F,EAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,MAAM,CAAA;AAClC,EAAA,MAAM,KAAKA,gBAAA,CAAU,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AACvD,EAAA,MAAM,SAAA,GAAY,IAAI,WAAA,EAAY,CAAE,OAAO,IAAA,CAAK,SAAA,CAAU,EAAE,CAAC,CAAA;AAC7D,EAAA,MAAM,UAAA,GAAa,MAAMA,gBAAA,CAAU,MAAA,CAAO,OAAA,CAAQ,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAG,EAAG,GAAA,EAAK,SAAS,CAAA;AACzF,EAAA,MAAM,WAAW,IAAI,UAAA,CAAW,EAAA,CAAG,MAAA,GAAS,WAAW,UAAU,CAAA;AACjE,EAAA,QAAA,CAAS,GAAA,CAAI,IAAI,CAAC,CAAA;AAClB,EAAA,QAAA,CAAS,IAAI,IAAI,UAAA,CAAW,UAAU,CAAA,EAAG,GAAG,MAAM,CAAA;AAClD,EAAA,OAAOC,aAAA,CAAO,IAAA,CAAK,QAAQ,CAAA,CAAE,SAAS,WAAW,CAAA;AACnD;AAEA,eAAe,iBAAA,CACb,SACA,MAAA,EACkC;AAClC,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,MAAM,CAAA;AAClC,IAAA,MAAM,QAAA,GAAWA,aAAA,CAAO,IAAA,CAAK,OAAA,EAAS,WAAW,CAAA;AACjD,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC/B,IAAA,MAAM,UAAA,GAAa,QAAA,CAAS,KAAA,CAAM,EAAE,CAAA;AACpC,IAAA,MAAM,SAAA,GAAY,MAAMD,gBAAA,CAAU,MAAA,CAAO,OAAA,CAAQ,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAG,EAAG,GAAA,EAAK,UAAU,CAAA;AACzF,IAAA,MAAM,EAAA,GAAK,KAAK,KAAA,CAAM,IAAI,aAAY,CAAE,MAAA,CAAO,SAAS,CAAC,CAAA;AACzD,IAAA,OAAO,EAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,SAAA,CAAU,KAAsB,IAAA,EAA6B;AACpE,EAAA,MAAM,MAAA,GAAS,IAAI,OAAA,CAAQ,MAAA;AAC3B,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA,EAAG;AACpC,IAAA,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,IAAA,CAAK,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,CAAA;AACvC,IAAA,IAAI,CAAA,KAAM,IAAA,EAAM,OAAO,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA,EACnC;AACA,EAAA,OAAO,IAAA;AACT;AA+BA,SAAS,WAAA,CAAY,KAAqB,IAAA,EAAoB;AAC5D,EAAA,MAAM,KAAA,GAAQ,GAAG,IAAI,CAAA,2FAAA,CAAA;AACrB,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,SAAA,CAAU,YAAY,CAAA;AAC3C,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,OAAA,CAAQ,QAAQ,CAAA,GACpC,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,UAAA,CAAW,GAAG,IAAI,CAAA,CAAA,CAAG,CAAC,CAAA,GAChD,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,QAAA,CAAS,UAAA,CAAW,CAAA,EAAG,IAAI,CAAA,CAAA,CAAG,CAAA,GAC7D,CAAC,QAAQ,IACT,EAAC;AACP,EAAA,GAAA,CAAI,UAAU,YAAA,EAAc,CAAC,GAAG,SAAA,EAAW,KAAK,CAAC,CAAA;AACnD;AAaA,eAAsB,cAAA,CACpB,KACA,MAAA,EACkC;AAClC,EAAA,MAAM,GAAA,GAAM,SAAA,CAAU,GAAA,EAAK,WAAW,CAAA;AACtC,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,MAAM,EAAA,GAAK,MAAM,iBAAA,CAAkB,GAAA,EAAK,MAAM,CAAA;AAC9C,EAAA,IAAI,CAAC,IAAI,OAAO,IAAA;AAEhB,EAAA,IAAI,EAAA,CAAG,SAAA,GAAY,IAAA,CAAK,GAAA,IAAO,OAAO,IAAA;AACtC,EAAA,OAAO,EAAA;AACT;AAEO,SAAS,iBAAiB,GAAA,EAA2B;AAC1D,EAAA,WAAA,CAAY,KAAK,WAAW,CAAA;AAC9B;AAEO,SAAS,eAAe,IAAA,EAIV;AACnB,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,OAAO;AAAA,IACL,OAAO,IAAA,CAAK,KAAA;AAAA,IACZ,cAAc,IAAA,CAAK,YAAA;AAAA,IACnB,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,SAAA,EAAW,GAAA;AAAA,IACX,WAAW,GAAA,GAAM;AAAA,GACnB;AACF","file":"chunk-VYCKUKPA.cjs","sourcesContent":["/**\n * @theokit/sdk/server/auth — encrypted OAuth transaction cookie store\n *\n * Per ADR D5 — cookie-state pattern (no Redis/db dependency in core).\n *\n * Stores OAuthTransaction (state + pkceVerifier + returnTo + expiry) in a\n * single signed+encrypted HttpOnly cookie. Stateless, works in edge/serverless.\n *\n * Cookie name: `__Host-theo_oauth_tx` (T5.3 — RFC 6265bis prefix)\n * Lifetime: 10 minutes (per D5 invariant)\n * Encryption: AES-256-GCM via Node's webcrypto subtle API\n *\n * Note: this is a minimal in-package implementation. Production deployments\n * may prefer using `theokit/server/auth/crypto`'s encrypt/decrypt helpers\n * via the SessionManager's existing secret rotation chain. For T1.2 we keep\n * it self-contained to avoid cross-package peer-dep complexity; T2+ may\n * refactor to share SessionManager's encrypt path.\n */\n\nimport { Buffer } from \"node:buffer\";\nimport { webcrypto } from \"node:crypto\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { OAuthTransaction } from \"./types.js\";\n\n// T5.3 — `__Host-` prefix per RFC 6265bis. Browsers enforce that any\n// cookie with this prefix MUST be set with `Secure`, MUST NOT carry a\n// `Domain` attribute, and MUST have `Path=/`. This blocks the\n// subdomain-fixation vector where a malicious page on\n// `evil.example.com` could plant a same-name cookie that the parent\n// app at `example.com` would happily decrypt.\nconst COOKIE_NAME = \"__Host-theo_oauth_tx\";\nconst TX_LIFETIME_MS = 10 * 60 * 1000; // 10 minutes per D5\n\n// T5.1 — HKDF info string fixed per plan; bump version (v1 → v2) only when\n// the AES-GCM derivation contract itself changes (which would invalidate\n// all in-flight cookies).\nconst HKDF_INFO = \"theokit:oauth-tx-v1\";\n\n/**\n * T5.1 — Derive a 32-byte AES-256-GCM key from `secret` via HKDF-SHA256\n * (RFC 5869). Replaces the pre-T5.1 zero-padding scheme that was NOT a\n * KDF and produced near-identical keys for near-identical secrets.\n *\n * Contract:\n * - `secret` MUST be ≥ 32 bytes (256 bits) — throws otherwise.\n * - Salt is sourced from `THEOKIT_OAUTH_TX_SALT` env (UTF-8 string);\n *   when unset, RFC 5869's zero-string fallback is used and operators\n *   accept the default cross-app collision risk.\n * - `info` is fixed at \"theokit:oauth-tx-v1\" so v1 cookies decrypt\n *   forever even if a future v2 derivation ships alongside.\n *\n * Throws `AuthSecretTooShortError` (typed) when secret < 32 bytes.\n *\n * @internal\n */\nasync function deriveKey(secret: string): Promise<webcrypto.CryptoKey> {\n  const secretBytes = new TextEncoder().encode(secret);\n  if (secretBytes.byteLength < 32) {\n    throw new AuthSecretTooShortError(secretBytes.byteLength);\n  }\n  const saltRaw = process.env.THEOKIT_OAUTH_TX_SALT ?? \"\";\n  const salt = new TextEncoder().encode(saltRaw);\n  // Import the raw secret as HKDF input keying material.\n  const ikm = await webcrypto.subtle.importKey(\"raw\", secretBytes, \"HKDF\", false, [\"deriveBits\"]);\n  // Derive 256 bits via HKDF-SHA256.\n  const derived = await webcrypto.subtle.deriveBits(\n    { name: \"HKDF\", hash: \"SHA-256\", salt, info: new TextEncoder().encode(HKDF_INFO) },\n    ikm,\n    256,\n  );\n  // Wrap the derived bits as an AES-GCM key.\n  return webcrypto.subtle.importKey(\"raw\", derived, { name: \"AES-GCM\" }, true, [\n    \"encrypt\",\n    \"decrypt\",\n  ]);\n}\n\n/**\n * T5.1 — Typed error thrown when an OAuth tx-cookie secret has < 32\n * bytes of entropy. Surfaces the actual byte length so operators can\n * diagnose mis-configured env vars without leaking the secret itself.\n *\n * @public\n */\nexport class AuthSecretTooShortError extends Error {\n  override readonly name = \"AuthSecretTooShortError\";\n  constructor(actualBytes: number) {\n    super(\n      `OAuth transaction secret must be at least 32 bytes (got ${actualBytes}). ` +\n        \"Generate a fresh value with: openssl rand -base64 33\",\n    );\n  }\n}\n\n/**\n * T5.1 — Test seam for the HKDF derivation. NOT included in the public\n * barrel — exposed only so unit tests can assert avalanche / determinism\n * properties without round-tripping through encodeTransaction.\n *\n * @internal\n */\nexport async function __TESTING__deriveKey(secret: string): Promise<webcrypto.CryptoKey> {\n  return deriveKey(secret);\n}\n\nexport async function encodeTransaction(tx: OAuthTransaction, secret: string): Promise<string> {\n  const key = await deriveKey(secret);\n  const iv = webcrypto.getRandomValues(new Uint8Array(12));\n  const plaintext = new TextEncoder().encode(JSON.stringify(tx));\n  const ciphertext = await webcrypto.subtle.encrypt({ name: \"AES-GCM\", iv }, key, plaintext);\n  const combined = new Uint8Array(iv.length + ciphertext.byteLength);\n  combined.set(iv, 0);\n  combined.set(new Uint8Array(ciphertext), iv.length);\n  return Buffer.from(combined).toString(\"base64url\");\n}\n\nasync function decodeTransaction(\n  encoded: string,\n  secret: string,\n): Promise<OAuthTransaction | null> {\n  try {\n    const key = await deriveKey(secret);\n    const combined = Buffer.from(encoded, \"base64url\");\n    const iv = combined.slice(0, 12);\n    const ciphertext = combined.slice(12);\n    const plaintext = await webcrypto.subtle.decrypt({ name: \"AES-GCM\", iv }, key, ciphertext);\n    const tx = JSON.parse(new TextDecoder().decode(plaintext)) as OAuthTransaction;\n    return tx;\n  } catch {\n    return null;\n  }\n}\n\nfunction getCookie(req: IncomingMessage, name: string): string | null {\n  const header = req.headers.cookie;\n  if (!header) return null;\n  for (const part of header.split(\";\")) {\n    const [k, ...v] = part.trim().split(\"=\");\n    if (k === name) return v.join(\"=\");\n  }\n  return null;\n}\n\nfunction setCookie(res: ServerResponse, name: string, value: string): void {\n  const existing = res.getHeader(\"Set-Cookie\");\n  const cookie = `${name}=${value}; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=${TX_LIFETIME_MS / 1000}`;\n  if (Array.isArray(existing)) {\n    res.setHeader(\"Set-Cookie\", [...existing, cookie]);\n  } else if (typeof existing === \"string\") {\n    res.setHeader(\"Set-Cookie\", [existing, cookie]);\n  } else {\n    res.setHeader(\"Set-Cookie\", cookie);\n  }\n}\n\n/**\n * T5.3 — Clear the tx cookie deterministically. Emits exactly ONE\n * Set-Cookie line for `name` (filtering any prior occurrences of the\n * same name from a pre-existing Set-Cookie header) with:\n *\n *   - empty value\n *   - `Max-Age=0` (modern browsers — immediate delete)\n *   - `Expires=Thu, 01 Jan 1970 00:00:00 GMT` (legacy fallback)\n *   - `HttpOnly`, `Secure`, `SameSite=Lax`, `Path=/` — preserved so the\n *     `__Host-` prefix contract is honored even on the clear path\n *\n * Pre-T5.3 this function called setCookie() with an empty value (which\n * still carried `Max-Age=600`) AND then issued a second explicit\n * `Max-Age=0` clear into the Set-Cookie header. The double-write\n * produced a duplicate response header that some legacy clients did\n * not handle deterministically.\n */\nfunction clearCookie(res: ServerResponse, name: string): void {\n  const clear = `${name}=; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT`;\n  const existing = res.getHeader(\"Set-Cookie\");\n  const preserved = Array.isArray(existing)\n    ? existing.filter((c) => !c.startsWith(`${name}=`))\n    : typeof existing === \"string\" && !existing.startsWith(`${name}=`)\n      ? [existing]\n      : [];\n  res.setHeader(\"Set-Cookie\", [...preserved, clear]);\n}\n\nasync function _setTransaction(\n  res: ServerResponse,\n  tx: OAuthTransaction,\n  secret: string,\n): Promise<void> {\n  const encoded = await encodeTransaction(tx, secret);\n  setCookie(res, COOKIE_NAME, encoded);\n}\n// Reserved internal helper — not currently invoked (drop-in for future T2.x refactor that consolidates SessionManager + tx-store crypto paths). Underscore prefix per biome noUnusedVariables documented escape.\nvoid _setTransaction;\n\nexport async function getTransaction(\n  req: IncomingMessage,\n  secret: string,\n): Promise<OAuthTransaction | null> {\n  const raw = getCookie(req, COOKIE_NAME);\n  if (!raw) return null;\n  const tx = await decodeTransaction(raw, secret);\n  if (!tx) return null;\n  // Check expiry\n  if (tx.expiresAt < Date.now()) return null;\n  return tx;\n}\n\nexport function clearTransaction(res: ServerResponse): void {\n  clearCookie(res, COOKIE_NAME);\n}\n\nexport function newTransaction(opts: {\n  state: string;\n  pkceVerifier?: string;\n  returnTo?: string;\n}): OAuthTransaction {\n  const now = Date.now();\n  return {\n    state: opts.state,\n    pkceVerifier: opts.pkceVerifier,\n    returnTo: opts.returnTo,\n    createdAt: now,\n    expiresAt: now + TX_LIFETIME_MS,\n  };\n}\n"]}

package/dist/chunk-VYHJZVL5.cjs

@@ -0,0 +1,29 @@
+'use strict';
+
+// src/internal/llm/model-identifier.ts
+var PROVIDER_ALIASES = {
+  "llama-cpp": "llamacpp",
+  "llama.cpp": "llamacpp",
+  "lm-studio": "lmstudio",
+  lm_studio: "lmstudio"
+};
+function parseModelId(modelId) {
+  if (modelId === void 0 || modelId.length === 0) {
+    return { provider: void 0, name: "" };
+  }
+  const slash = modelId.indexOf("/");
+  if (slash <= 0 || slash === modelId.length - 1) {
+    return { provider: void 0, name: modelId };
+  }
+  const rawProvider = modelId.slice(0, slash).trim().toLowerCase();
+  const name = modelId.slice(slash + 1).trim();
+  if (rawProvider.length === 0 || name.length === 0) {
+    return { provider: void 0, name: modelId };
+  }
+  const canonical = PROVIDER_ALIASES[rawProvider] ?? rawProvider;
+  return { provider: canonical, name };
+}
+
+exports.parseModelId = parseModelId;
+//# sourceMappingURL=chunk-VYHJZVL5.cjs.map
+//# sourceMappingURL=chunk-VYHJZVL5.cjs.map

package/dist/chunk-VYHJZVL5.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/llm/model-identifier.ts"],"names":[],"mappings":";;;AAkCA,IAAM,gBAAA,GAAqD;AAAA,EACzD,WAAA,EAAa,UAAA;AAAA,EACb,WAAA,EAAa,UAAA;AAAA,EACb,WAAA,EAAa,UAAA;AAAA,EACb,SAAA,EAAW;AACb,CAAA;AAEO,SAAS,aAAa,OAAA,EAA4C;AACvE,EAAA,IAAI,OAAA,KAAY,MAAA,IAAa,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AACjD,IAAA,OAAO,EAAE,QAAA,EAAU,MAAA,EAAW,IAAA,EAAM,EAAA,EAAG;AAAA,EACzC;AACA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACjC,EAAA,IAAI,KAAA,IAAS,CAAA,IAAK,KAAA,KAAU,OAAA,CAAQ,SAAS,CAAA,EAAG;AAC9C,IAAA,OAAO,EAAE,QAAA,EAAU,MAAA,EAAW,IAAA,EAAM,OAAA,EAAQ;AAAA,EAC9C;AACA,EAAA,MAAM,WAAA,GAAc,QAAQ,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA,CAAE,IAAA,GAAO,WAAA,EAAY;AAC/D,EAAA,MAAM,OAAO,OAAA,CAAQ,KAAA,CAAM,KAAA,GAAQ,CAAC,EAAE,IAAA,EAAK;AAC3C,EAAA,IAAI,WAAA,CAAY,MAAA,KAAW,CAAA,IAAK,IAAA,CAAK,WAAW,CAAA,EAAG;AACjD,IAAA,OAAO,EAAE,QAAA,EAAU,MAAA,EAAW,IAAA,EAAM,OAAA,EAAQ;AAAA,EAC9C;AACA,EAAA,MAAM,SAAA,GAAY,gBAAA,CAAiB,WAAW,CAAA,IAAK,WAAA;AACnD,EAAA,OAAO,EAAE,QAAA,EAAU,SAAA,EAAW,IAAA,EAAK;AACrC","file":"chunk-VYHJZVL5.cjs","sourcesContent":["/**\n * Model identifier parsing (T1.2 follow-up, ADR D182 zero-config UX).\n *\n * SDK callers pass model strings like:\n *   - `\"ollama/llama3.2:3b\"`             → provider=\"ollama\", name=\"llama3.2:3b\"\n *   - `\"anthropic/claude-3-5-sonnet\"`    → provider=\"anthropic\", name=\"claude-3-5-sonnet\"\n *   - `\"openrouter/meta-llama/llama-3\"`  → provider=\"openrouter\", name=\"meta-llama/llama-3\"\n *   - `\"claude-sonnet-4-6\"`              → provider=undefined, name=\"claude-sonnet-4-6\"\n *\n * The first `/` separates the provider from the rest. Models with embedded\n * slashes (e.g. OpenRouter routing) keep the remainder intact. Tag suffixes\n * (`:latest`, `:3b`) are preserved as part of the name — Ollama expects them.\n *\n * **Returns `undefined` provider** when no `/` is present so callers can\n * fall back to env-var detection. Empty/whitespace components are treated\n * as no-prefix.\n *\n * Aligned with peer-project `extensions/ollama/src/discovery-shared.ts`\n * (`OLLAMA_PROVIDER_ID = \"ollama\"`) and Hermes `hermes_cli/providers.py`\n * (ALIASES table, `normalize_provider`).\n *\n * Public via `@theokit/sdk/models` (M5-8).\n *\n * @public\n */\n\nexport interface ParsedModelId {\n  /** Provider name extracted from the prefix (lowercase), or undefined. */\n  provider: string | undefined;\n  /** Model name to send to the provider — prefix stripped. */\n  name: string;\n}\n\n/** Provider aliases mirrored from Hermes `hermes_cli/providers.py` ALIASES. */\nconst PROVIDER_ALIASES: Readonly<Record<string, string>> = {\n  \"llama-cpp\": \"llamacpp\",\n  \"llama.cpp\": \"llamacpp\",\n  \"lm-studio\": \"lmstudio\",\n  lm_studio: \"lmstudio\",\n};\n\nexport function parseModelId(modelId: string | undefined): ParsedModelId {\n  if (modelId === undefined || modelId.length === 0) {\n    return { provider: undefined, name: \"\" };\n  }\n  const slash = modelId.indexOf(\"/\");\n  if (slash <= 0 || slash === modelId.length - 1) {\n    return { provider: undefined, name: modelId };\n  }\n  const rawProvider = modelId.slice(0, slash).trim().toLowerCase();\n  const name = modelId.slice(slash + 1).trim();\n  if (rawProvider.length === 0 || name.length === 0) {\n    return { provider: undefined, name: modelId };\n  }\n  const canonical = PROVIDER_ALIASES[rawProvider] ?? rawProvider;\n  return { provider: canonical, name };\n}\n"]}

package/dist/chunk-WA3FO4R7.js

@@ -0,0 +1,155 @@
+import { TheokitAgentError } from './chunk-WLKFWQSJ.js';
+import { redactSecrets } from './chunk-JTFYYKDT.js';
+
+// src/internal/runtime/compression/compression-helpers.ts
+function selectCompressionWindow(messages, preserveLast = 6) {
+  if (messages.length <= preserveLast) {
+    return { toCompress: [], toPreserve: [...messages] };
+  }
+  return {
+    toCompress: messages.slice(0, -preserveLast),
+    toPreserve: messages.slice(-preserveLast)
+  };
+}
+
+// src/compaction.ts
+var CHECKPOINT_MARKER = "[[theokit:checkpoint]] ";
+var SUMMARY_TEMPLATE = `Summarize the conversation so far into these sections (keep every header even if empty):
+
+## Goal
+What the user is ultimately trying to achieve.
+
+## Constraints
+Hard requirements, conventions, and rules stated.
+
+## Progress
+What has been done so far.
+
+## Decisions
+Choices made and their rationale.
+
+## Next
+The immediate next steps.
+
+## Critical
+Anything that MUST NOT be forgotten (preserve verbatim: error messages, exact values).
+
+## Files
+File paths touched or referenced (verbatim).`;
+function assertMarker(marker) {
+  if (marker === "") {
+    throw new TheokitAgentError("compaction marker must be non-empty", {
+      code: "invalid_argument"
+    });
+  }
+}
+function isSystemPrompt(message, marker) {
+  return message.role === "system" && !message.content.startsWith(marker);
+}
+function selectByTokenBudget(messages, keepTokens) {
+  let acc = 0;
+  let splitIndex = messages.length;
+  for (let i = messages.length - 1; i >= 0; i -= 1) {
+    acc += estimateTokens(messages[i]?.content ?? "");
+    if (acc > keepTokens && i < messages.length - 1) {
+      splitIndex = i + 1;
+      break;
+    }
+    splitIndex = i;
+  }
+  return { head: messages.slice(0, splitIndex), recent: messages.slice(splitIndex) };
+}
+function splitByRecent(messages, keepRecent, marker) {
+  const systemPrompts = messages.filter((m) => isSystemPrompt(m, marker));
+  const rest = messages.filter((m) => !isSystemPrompt(m, marker));
+  const { toCompress, toPreserve } = selectCompressionWindow(rest, keepRecent);
+  return { systemPrompts, head: toCompress, recent: toPreserve };
+}
+var FAILSAFE_ABORT = /* @__PURE__ */ Symbol("failsafe-abort");
+async function runSummarize(summarize, head, template, failSafe) {
+  try {
+    return await summarize(head, template);
+  } catch (err) {
+    if (!failSafe) throw err;
+    console.warn(
+      `[compaction] summarizer failed \u2014 proceeding uncompacted: ${redactSecrets(err instanceof Error ? err.message : String(err))}`
+    );
+    return FAILSAFE_ABORT;
+  }
+}
+async function compactTranscript(messages, options = {}) {
+  const marker = options.marker ?? CHECKPOINT_MARKER;
+  assertMarker(marker);
+  const split = options.keepTokens != null ? { systemPrompts: [], ...selectByTokenBudget(messages, options.keepTokens) } : splitByRecent(messages, options.keepRecent ?? 6, marker);
+  if (split.head.length === 0) {
+    return [...messages];
+  }
+  if (!options.summarize) {
+    return [...split.systemPrompts, ...split.recent];
+  }
+  const template = options.summaryTemplate ?? SUMMARY_TEMPLATE;
+  const summary = await runSummarize(
+    options.summarize,
+    split.head,
+    template,
+    options.failSafe ?? false
+  );
+  if (summary === FAILSAFE_ABORT) {
+    return [...messages];
+  }
+  return [...split.systemPrompts, summary, ...split.recent];
+}
+function buildCheckpoint(label, marker = CHECKPOINT_MARKER) {
+  assertMarker(marker);
+  return { role: "system", content: marker + (label ?? "") };
+}
+function filterFromLatestCheckpoint(messages, options = {}) {
+  const marker = options.marker ?? CHECKPOINT_MARKER;
+  const offset = options.include === "from" ? 0 : 1;
+  for (let i = messages.length - 1; i >= 0; i -= 1) {
+    if (messages[i]?.content.startsWith(marker)) {
+      return messages.slice(i + offset);
+    }
+  }
+  return [...messages];
+}
+function isContextOverflowError(err) {
+  return err instanceof TheokitAgentError && (err.code === "context_too_long" || err.metadata?.code === "context_too_long");
+}
+var ContextWindowMarginError = class extends TheokitAgentError {
+  constructor(margin) {
+    super(
+      `context-window margin must be in (0, 1], got ${String(margin)}. A margin above 1 grows the assumed window and delays compaction past the real limit.`,
+      { code: "invalid_context_window_margin" }
+    );
+    this.margin = margin;
+  }
+  margin;
+};
+var CONTEXT_WINDOW_MARGIN = 0.95;
+var CONTEXT_WINDOW_FLOOR = 128e3;
+function resolveEffectiveContextWindow(input) {
+  if (!(input.margin > 0) || input.margin > 1) {
+    throw new ContextWindowMarginError(input.margin);
+  }
+  const withMargin = (raw) => Math.floor(raw * input.margin);
+  if (input.override !== void 0) {
+    const clamped = input.catalog !== void 0 && input.override > input.catalog;
+    const raw = clamped ? input.catalog : input.override;
+    return { window: withMargin(raw), source: "override", clamped };
+  }
+  if (input.catalog !== void 0) {
+    return { window: withMargin(input.catalog), source: "catalog", clamped: false };
+  }
+  return { window: withMargin(input.floor ?? 0), source: "fallback", clamped: false };
+}
+function estimateTokens(text) {
+  return Math.ceil(text.length / 4);
+}
+function shouldCompact(input) {
+  return input.estimated >= input.contextWindow - input.buffer - (input.maxOutput ?? 0);
+}
+
+export { CHECKPOINT_MARKER, CONTEXT_WINDOW_FLOOR, CONTEXT_WINDOW_MARGIN, ContextWindowMarginError, SUMMARY_TEMPLATE, buildCheckpoint, compactTranscript, estimateTokens, filterFromLatestCheckpoint, isContextOverflowError, resolveEffectiveContextWindow, shouldCompact };
+//# sourceMappingURL=chunk-WA3FO4R7.js.map
+//# sourceMappingURL=chunk-WA3FO4R7.js.map

package/dist/chunk-WA3FO4R7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/runtime/compression/compression-helpers.ts","../src/compaction.ts"],"names":[],"mappings":";;;;AA0BO,SAAS,uBAAA,CACd,QAAA,EACA,YAAA,GAAe,CAAA,EACO;AACtB,EAAA,IAAI,QAAA,CAAS,UAAU,YAAA,EAAc;AACnC,IAAA,OAAO,EAAE,YAAY,EAAC,EAAG,YAAY,CAAC,GAAG,QAAQ,CAAA,EAAE;AAAA,EACrD;AACA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,CAAC,YAAY,CAAA;AAAA,IAC3C,UAAA,EAAY,QAAA,CAAS,KAAA,CAAM,CAAC,YAAY;AAAA,GAC1C;AACF;;;ACMO,IAAM,iBAAA,GAAoB;AAQ1B,IAAM,gBAAA,GAAmB,CAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA,4CAAA;AAwBhC,SAAS,aAAa,MAAA,EAAsB;AAC1C,EAAA,IAAI,WAAW,EAAA,EAAI;AACjB,IAAA,MAAM,IAAI,kBAAkB,qCAAA,EAAuC;AAAA,MACjE,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACF;AAGA,SAAS,cAAA,CAAe,SAA8B,MAAA,EAAyB;AAC7E,EAAA,OAAO,QAAQ,IAAA,KAAS,QAAA,IAAY,CAAC,OAAA,CAAQ,OAAA,CAAQ,WAAW,MAAM,CAAA;AACxE;AAcA,SAAS,mBAAA,CACP,UACA,UAAA,EACgE;AAChE,EAAA,IAAI,GAAA,GAAM,CAAA;AACV,EAAA,IAAI,aAAa,QAAA,CAAS,MAAA;AAC1B,EAAA,KAAA,IAAS,IAAI,QAAA,CAAS,MAAA,GAAS,GAAG,CAAA,IAAK,CAAA,EAAG,KAAK,CAAA,EAAG;AAChD,IAAA,GAAA,IAAO,cAAA,CAAe,QAAA,CAAS,CAAC,CAAA,EAAG,WAAW,EAAE,CAAA;AAChD,IAAA,IAAI,GAAA,GAAM,UAAA,IAAc,CAAA,GAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AAC/C,MAAA,UAAA,GAAa,CAAA,GAAI,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,UAAA,GAAa,CAAA;AAAA,EACf;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,EAAG,MAAA,EAAQ,QAAA,CAAS,KAAA,CAAM,UAAU,CAAA,EAAE;AACnF;AAGA,SAAS,aAAA,CACP,QAAA,EACA,UAAA,EACA,MAAA,EACiB;AACjB,EAAA,MAAM,aAAA,GAAgB,SAAS,MAAA,CAAO,CAAC,MAAM,cAAA,CAAe,CAAA,EAAG,MAAM,CAAC,CAAA;AACtE,EAAA,MAAM,IAAA,GAAO,SAAS,MAAA,CAAO,CAAC,MAAM,CAAC,cAAA,CAAe,CAAA,EAAG,MAAM,CAAC,CAAA;AAC9D,EAAA,MAAM,EAAE,UAAA,EAAY,UAAA,EAAW,GAAI,uBAAA,CAAwB,MAAM,UAAU,CAAA;AAC3E,EAAA,OAAO,EAAE,aAAA,EAAe,IAAA,EAAM,UAAA,EAAY,QAAQ,UAAA,EAAW;AAC/D;AAyBA,IAAM,cAAA,0BAAwB,gBAAgB,CAAA;AAG9C,eAAe,YAAA,CACb,SAAA,EACA,IAAA,EACA,QAAA,EACA,QAAA,EACsD;AACtD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,SAAA,CAAU,IAAA,EAAM,QAAQ,CAAA;AAAA,EACvC,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,CAAC,UAAU,MAAM,GAAA;AAKrB,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,CAAA,8DAAA,EAA4D,cAAc,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAC,CAAA;AAAA,KAC7H;AACA,IAAA,OAAO,cAAA;AAAA,EACT;AACF;AASA,eAAsB,iBAAA,CACpB,QAAA,EACA,OAAA,GAAoC,EAAC,EACL;AAChC,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,iBAAA;AACjC,EAAA,YAAA,CAAa,MAAM,CAAA;AACnB,EAAA,MAAM,KAAA,GACJ,QAAQ,UAAA,IAAc,IAAA,GAClB,EAAE,aAAA,EAAe,IAAI,GAAG,mBAAA,CAAoB,UAAU,OAAA,CAAQ,UAAU,GAAE,GAC1E,aAAA,CAAc,UAAU,OAAA,CAAQ,UAAA,IAAc,GAAG,MAAM,CAAA;AAC7D,EAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAC3B,IAAA,OAAO,CAAC,GAAG,QAAQ,CAAA;AAAA,EACrB;AACA,EAAA,IAAI,CAAC,QAAQ,SAAA,EAAW;AACtB,IAAA,OAAO,CAAC,GAAG,KAAA,CAAM,aAAA,EAAe,GAAG,MAAM,MAAM,CAAA;AAAA,EACjD;AACA,EAAA,MAAM,QAAA,GAAW,QAAQ,eAAA,IAAmB,gBAAA;AAC5C,EAAA,MAAM,UAAU,MAAM,YAAA;AAAA,IACpB,OAAA,CAAQ,SAAA;AAAA,IACR,KAAA,CAAM,IAAA;AAAA,IACN,QAAA;AAAA,IACA,QAAQ,QAAA,IAAY;AAAA,GACtB;AACA,EAAA,IAAI,YAAY,cAAA,EAAgB;AAC9B,IAAA,OAAO,CAAC,GAAG,QAAQ,CAAA;AAAA,EACrB;AACA,EAAA,OAAO,CAAC,GAAG,KAAA,CAAM,eAAe,OAAA,EAAS,GAAG,MAAM,MAAM,CAAA;AAC1D;AAMO,SAAS,eAAA,CACd,KAAA,EACA,MAAA,GAAiB,iBAAA,EACI;AACrB,EAAA,YAAA,CAAa,MAAM,CAAA;AACnB,EAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,OAAA,EAAS,MAAA,IAAU,SAAS,EAAA,CAAA,EAAI;AAC3D;AAkBO,SAAS,0BAAA,CACd,QAAA,EACA,OAAA,GAAmC,EAAC,EACb;AACvB,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,iBAAA;AACjC,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,KAAY,MAAA,GAAS,CAAA,GAAI,CAAA;AAChD,EAAA,KAAA,IAAS,IAAI,QAAA,CAAS,MAAA,GAAS,GAAG,CAAA,IAAK,CAAA,EAAG,KAAK,CAAA,EAAG;AAChD,IAAA,IAAI,SAAS,CAAC,CAAA,EAAG,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3C,MAAA,OAAO,QAAA,CAAS,KAAA,CAAM,CAAA,GAAI,MAAM,CAAA;AAAA,IAClC;AAAA,EACF;AACA,EAAA,OAAO,CAAC,GAAG,QAAQ,CAAA;AACrB;AAQO,SAAS,uBAAuB,GAAA,EAAuB;AAC5D,EAAA,OACE,eAAe,iBAAA,KACd,GAAA,CAAI,SAAS,kBAAA,IAAsB,GAAA,CAAI,UAAU,IAAA,KAAS,kBAAA,CAAA;AAE/D;AAOO,IAAM,wBAAA,GAAN,cAAuC,iBAAA,CAAkB;AAAA,EAC9D,YAAqB,MAAA,EAAgB;AACnC,IAAA,KAAA;AAAA,MACE,CAAA,6CAAA,EAAgD,MAAA,CAAO,MAAM,CAAC,CAAA,sFAAA,CAAA;AAAA,MAE9D,EAAE,MAAM,+BAAA;AAAgC,KAC1C;AALmB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAMrB;AAAA,EANqB,MAAA;AAOvB;AAUO,IAAM,qBAAA,GAAwB;AAgB9B,IAAM,oBAAA,GAAuB;AAiD7B,SAAS,8BACd,KAAA,EACwB;AACxB,EAAA,IAAI,EAAE,KAAA,CAAM,MAAA,GAAS,CAAA,CAAA,IAAM,KAAA,CAAM,SAAS,CAAA,EAAG;AAC3C,IAAA,MAAM,IAAI,wBAAA,CAAyB,KAAA,CAAM,MAAM,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,aAAa,CAAC,GAAA,KAAwB,KAAK,KAAA,CAAM,GAAA,GAAM,MAAM,MAAM,CAAA;AAEzE,EAAA,IAAI,KAAA,CAAM,aAAa,MAAA,EAAW;AAChC,IAAA,MAAM,UAAU,KAAA,CAAM,OAAA,KAAY,MAAA,IAAa,KAAA,CAAM,WAAW,KAAA,CAAM,OAAA;AACtE,IAAA,MAAM,GAAA,GAAM,OAAA,GAAW,KAAA,CAAM,OAAA,GAAqB,KAAA,CAAM,QAAA;AACxD,IAAA,OAAO,EAAE,MAAA,EAAQ,UAAA,CAAW,GAAG,CAAA,EAAG,MAAA,EAAQ,YAAY,OAAA,EAAQ;AAAA,EAChE;AAEA,EAAA,IAAI,KAAA,CAAM,YAAY,MAAA,EAAW;AAC/B,IAAA,OAAO,EAAE,QAAQ,UAAA,CAAW,KAAA,CAAM,OAAO,CAAA,EAAG,MAAA,EAAQ,SAAA,EAAW,OAAA,EAAS,KAAA,EAAM;AAAA,EAChF;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,UAAA,CAAW,KAAA,CAAM,KAAA,IAAS,CAAC,CAAA,EAAG,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAS,KAAA,EAAM;AACpF;AAyBO,SAAS,eAAe,IAAA,EAAsB;AACnD,EAAA,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA;AAClC;AAUO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,SAAA,IAAa,KAAA,CAAM,gBAAgB,KAAA,CAAM,MAAA,IAAU,MAAM,SAAA,IAAa,CAAA,CAAA;AACrF","file":"chunk-WA3FO4R7.js","sourcesContent":["/**\n * Compression helpers (T2.3, ADR D92).\n *\n * Scaffold for future compression LLM integration:\n *   - `selectCompressionWindow` — splits messages into compress/preserve halves\n *   - `assertCompressionReduced` — 10% reduction floor to detect \"compression placebo\"\n *\n * The compression LLM call itself is out of scope for this plan (requires\n * an auxiliary-model ADR). These helpers are used by `Agent.send` when a\n * future iteration adds compression.\n *\n * @internal\n */\n\nexport interface CompressionWindow<M> {\n  toCompress: M[];\n  toPreserve: M[];\n}\n\n/**\n * Split `messages` into the half to compress (older) and the half to\n * preserve verbatim (recent). When `messages.length <= preserveLast`,\n * everything is preserved.\n *\n * @internal\n */\nexport function selectCompressionWindow<M>(\n  messages: readonly M[],\n  preserveLast = 6,\n): CompressionWindow<M> {\n  if (messages.length <= preserveLast) {\n    return { toCompress: [], toPreserve: [...messages] };\n  }\n  return {\n    toCompress: messages.slice(0, -preserveLast),\n    toPreserve: messages.slice(-preserveLast),\n  };\n}\n\nexport interface CompressionCheck {\n  reduced: boolean;\n  reductionPct: number;\n  reason?: string;\n}\n\n/**\n * Check that compression actually reduced token count by at least `minPct`\n * (default 10%). Returns `{ reduced: false }` for spirals-in-formation\n * (compression LLM outputs that grow or barely shrink).\n *\n * @internal\n */\nexport function assertCompressionReduced(\n  before: number,\n  after: number,\n  minPct = 10,\n): CompressionCheck {\n  if (before <= 0) {\n    return { reduced: false, reductionPct: 0, reason: \"before count was zero\" };\n  }\n  const reductionPct = ((before - after) / before) * 100;\n  if (reductionPct >= minPct) {\n    return { reduced: true, reductionPct };\n  }\n  return {\n    reduced: false,\n    reductionPct,\n    reason: `compression reduced ${reductionPct.toFixed(1)}% (< ${minPct}% min). Spiral likely.`,\n  };\n}\n","/**\n * Public compaction / context-management helpers (M2-1, extended V3-3).\n *\n * Promotes the SDK's compaction capability to a public surface so consumers can\n * compact a transcript, mark/filter conversation checkpoints, and detect\n * context-overflow — without reaching into `internal/`.\n *\n * Two recent-window modes (V3-3):\n *  - `keepRecent` (turn-count, default) — keeps the last N turns verbatim and\n *    always preserves leading system PROMPTS; reuses the internal\n *    `selectCompressionWindow` (no second algorithm).\n *  - `keepTokens` (token-budget) — keeps the trailing turns whose accumulated\n *    `estimateTokens` fits the budget (theocode `splitTranscript` semantics). In\n *    this mode leading system prompts are NOT special-cased (D6).\n *\n * Summarization is delegated to a caller-supplied callback (which receives the\n * older window + the summary template). With `failSafe`, a thrown summarizer\n * returns the ORIGINAL transcript + a structured warn (compaction is an\n * optimization, never a cause of data loss); without it, the error propagates.\n *\n * Public from the `@theokit/sdk/compaction` sub-path.\n */\n\nimport { TheokitAgentError } from \"./errors.js\";\nimport { selectCompressionWindow } from \"./internal/runtime/compression/compression-helpers.js\";\nimport { redactSecrets } from \"./internal/security/redact.js\";\n\n/**\n * Minimal message shape for compaction/compression input. THE canonical public origin (leaf type —\n * rollup-plugin-dts cannot re-export types from internal modules into entry bundles; M42 lesson).\n *\n * @public\n */\nexport interface CompressibleMessage {\n  role: \"user\" | \"assistant\" | \"system\";\n  content: string;\n}\n\n/**\n * Sentinel prefix marking a conversation checkpoint turn. A visible, structured,\n * prose-unlikely token (no invisible/control bytes — safe to persist and to read\n * in source). Only {@link buildCheckpoint} should produce content beginning with it.\n */\nexport const CHECKPOINT_MARKER = \"[[theokit:checkpoint]] \";\n\n/**\n * The 7-section summary template handed to the `summarize` callback (theocode\n * parity shape). Every header is always present so the summarizer cannot silently\n * drop a category; the model is told to preserve file paths, commands, and error\n * text verbatim. Override per-call via {@link CompactTranscriptOptions.summaryTemplate}.\n */\nexport const SUMMARY_TEMPLATE = `Summarize the conversation so far into these sections (keep every header even if empty):\n\n## Goal\nWhat the user is ultimately trying to achieve.\n\n## Constraints\nHard requirements, conventions, and rules stated.\n\n## Progress\nWhat has been done so far.\n\n## Decisions\nChoices made and their rationale.\n\n## Next\nThe immediate next steps.\n\n## Critical\nAnything that MUST NOT be forgotten (preserve verbatim: error messages, exact values).\n\n## Files\nFile paths touched or referenced (verbatim).`;\n\n/** Reject an empty marker — it would match every turn via `startsWith(\"\")` (EC-3). */\nfunction assertMarker(marker: string): void {\n  if (marker === \"\") {\n    throw new TheokitAgentError(\"compaction marker must be non-empty\", {\n      code: \"invalid_argument\",\n    });\n  }\n}\n\n/** True for a real system prompt — a `system` turn that is NOT a checkpoint marker. */\nfunction isSystemPrompt(message: CompressibleMessage, marker: string): boolean {\n  return message.role === \"system\" && !message.content.startsWith(marker);\n}\n\n/** Carried split: leading system prompts (preserved), the older window, the verbatim tail. */\ninterface TranscriptSplit {\n  systemPrompts: CompressibleMessage[];\n  head: CompressibleMessage[];\n  recent: CompressibleMessage[];\n}\n\n/**\n * Token-budget split (theocode `splitTranscript`): walk from the END accumulating\n * `estimateTokens` until `keepTokens` is exceeded; everything older is the head.\n * Always keeps ≥ 1 recent turn. No system-prompt special-casing (D6).\n */\nfunction selectByTokenBudget(\n  messages: CompressibleMessage[],\n  keepTokens: number,\n): { head: CompressibleMessage[]; recent: CompressibleMessage[] } {\n  let acc = 0;\n  let splitIndex = messages.length;\n  for (let i = messages.length - 1; i >= 0; i -= 1) {\n    acc += estimateTokens(messages[i]?.content ?? \"\");\n    if (acc > keepTokens && i < messages.length - 1) {\n      splitIndex = i + 1;\n      break;\n    }\n    splitIndex = i;\n  }\n  return { head: messages.slice(0, splitIndex), recent: messages.slice(splitIndex) };\n}\n\n/** Turn-count split (M2): preserve leading system prompts; window the rest by `keepRecent`. */\nfunction splitByRecent(\n  messages: CompressibleMessage[],\n  keepRecent: number,\n  marker: string,\n): TranscriptSplit {\n  const systemPrompts = messages.filter((m) => isSystemPrompt(m, marker));\n  const rest = messages.filter((m) => !isSystemPrompt(m, marker));\n  const { toCompress, toPreserve } = selectCompressionWindow(rest, keepRecent);\n  return { systemPrompts, head: toCompress, recent: toPreserve };\n}\n\n/** Options for {@link compactTranscript}. */\nexport interface CompactTranscriptOptions {\n  /** Trailing turns preserved verbatim by COUNT (default 6). Ignored when `keepTokens` is set. */\n  keepRecent?: number;\n  /**\n   * Trailing turns preserved verbatim by TOKEN BUDGET (theocode mode). When set,\n   * takes precedence over `keepRecent` and disables system-prompt preservation (D6).\n   */\n  keepTokens?: number;\n  /** Checkpoint marker (default {@link CHECKPOINT_MARKER}). Must be non-empty. */\n  marker?: string;\n  /** Summary template passed to `summarize` (default {@link SUMMARY_TEMPLATE}). */\n  summaryTemplate?: string;\n  /** Summarize the older window into one turn; if omitted, the older window is dropped. */\n  summarize?: (older: CompressibleMessage[], template: string) => Promise<CompressibleMessage>;\n  /**\n   * When true, a thrown `summarize` returns the ORIGINAL transcript + a structured\n   * warn (compaction never loses data). Default false: the error propagates.\n   */\n  failSafe?: boolean;\n}\n\n/** Sentinel returned by {@link runSummarize} when fail-safe swallowed a throw. */\nconst FAILSAFE_ABORT = Symbol(\"failsafe-abort\");\n\n/** Run the summarizer; on throw, either propagate or (fail-safe) warn + signal abort. */\nasync function runSummarize(\n  summarize: NonNullable<CompactTranscriptOptions[\"summarize\"]>,\n  head: CompressibleMessage[],\n  template: string,\n  failSafe: boolean,\n): Promise<CompressibleMessage | typeof FAILSAFE_ABORT> {\n  try {\n    return await summarize(head, template);\n  } catch (err) {\n    if (!failSafe) throw err;\n    // Unbreakable Rule 8 — never fail silently. The breadcrumb points at the root\n    // cause when a summarizer fails every turn and context grows unchecked. The\n    // summarizer is caller-supplied, so its error text is routed through\n    // `redactSecrets` (ADR D68 — no unredacted output sink in src/).\n    console.warn(\n      `[compaction] summarizer failed — proceeding uncompacted: ${redactSecrets(err instanceof Error ? err.message : String(err))}`,\n    );\n    return FAILSAFE_ABORT;\n  }\n}\n\n/**\n * Compact a transcript. In `keepRecent` mode (default) the last `keepRecent` turns\n * are kept verbatim and leading system PROMPTS preserved; in `keepTokens` mode the\n * trailing turns within the token budget are kept (no system special-casing, D6).\n * The older window is summarized (via `summarize`, receiving the template) or\n * dropped. Never mutates the input.\n */\nexport async function compactTranscript(\n  messages: CompressibleMessage[],\n  options: CompactTranscriptOptions = {},\n): Promise<CompressibleMessage[]> {\n  const marker = options.marker ?? CHECKPOINT_MARKER;\n  assertMarker(marker);\n  const split =\n    options.keepTokens != null\n      ? { systemPrompts: [], ...selectByTokenBudget(messages, options.keepTokens) }\n      : splitByRecent(messages, options.keepRecent ?? 6, marker);\n  if (split.head.length === 0) {\n    return [...messages];\n  }\n  if (!options.summarize) {\n    return [...split.systemPrompts, ...split.recent];\n  }\n  const template = options.summaryTemplate ?? SUMMARY_TEMPLATE;\n  const summary = await runSummarize(\n    options.summarize,\n    split.head,\n    template,\n    options.failSafe ?? false,\n  );\n  if (summary === FAILSAFE_ABORT) {\n    return [...messages];\n  }\n  return [...split.systemPrompts, summary, ...split.recent];\n}\n\n/**\n * Build a checkpoint marker turn (a `system` turn whose content starts with\n * `marker`, default {@link CHECKPOINT_MARKER}). `marker` must be non-empty.\n */\nexport function buildCheckpoint(\n  label?: string,\n  marker: string = CHECKPOINT_MARKER,\n): CompressibleMessage {\n  assertMarker(marker);\n  return { role: \"system\", content: marker + (label ?? \"\") };\n}\n\n/** Options for {@link filterFromLatestCheckpoint}. */\nexport interface FilterCheckpointOptions {\n  /** Marker to scan for (default {@link CHECKPOINT_MARKER}). */\n  marker?: string;\n  /**\n   * `'after'` (default, M2) returns turns AFTER the latest marker (exclusive);\n   * `'from'` (theocode) returns turns FROM the latest marker (inclusive).\n   */\n  include?: \"after\" | \"from\";\n}\n\n/**\n * Return the turns relative to the most recent checkpoint marker (all turns if\n * none). `include: 'after'` (default) excludes the checkpoint; `'from'` includes\n * it (the summary stands in for the pruned head). Never mutates the input.\n */\nexport function filterFromLatestCheckpoint(\n  messages: CompressibleMessage[],\n  options: FilterCheckpointOptions = {},\n): CompressibleMessage[] {\n  const marker = options.marker ?? CHECKPOINT_MARKER;\n  const offset = options.include === \"from\" ? 0 : 1;\n  for (let i = messages.length - 1; i >= 0; i -= 1) {\n    if (messages[i]?.content.startsWith(marker)) {\n      return messages.slice(i + offset);\n    }\n  }\n  return [...messages];\n}\n\n/**\n * True iff `err` is a {@link TheokitAgentError} (or subclass) reporting a\n * context-window-exceeded condition (the typed `context_too_long` code). Reads\n * both `code` (set by provider mappers) and `metadata.code` (the preferred field)\n * — never a brittle message regex.\n */\nexport function isContextOverflowError(err: unknown): boolean {\n  return (\n    err instanceof TheokitAgentError &&\n    (err.code === \"context_too_long\" || err.metadata?.code === \"context_too_long\")\n  );\n}\n\n/**\n * M77 — the margin is outside `(0, 1]`. Typed, because a margin > 1 would GROW the assumed window,\n * which is the unsafe direction: `shouldCompact` is monotonically decreasing in `contextWindow`, so\n * overestimating it makes the trigger fire too late and the context overflow.\n */\nexport class ContextWindowMarginError extends TheokitAgentError {\n  constructor(readonly margin: number) {\n    super(\n      `context-window margin must be in (0, 1], got ${String(margin)}. ` +\n        `A margin above 1 grows the assumed window and delays compaction past the real limit.`,\n      { code: \"invalid_context_window_margin\" },\n    );\n  }\n}\n\n/**\n * M77 — default safety margin on the context window.\n *\n * `0.95` is not a guess: it is the single reference's value. Codex ships\n * `effective_context_window_percent: 95` (`models-manager/src/model_info.rs:158`) and never budgets\n * against 100% of a window. Being MULTIPLICATIVE, it stays conservative at any window size, which a\n * fixed subtraction would not.\n */\nexport const CONTEXT_WINDOW_MARGIN = 0.95;\n\n/**\n * M77 — the floor used ONLY when neither the catalog nor the caller knows the window.\n *\n * Honest about its own weakness. This number has **one** source (the M77 milestone text); the search\n * for a second one failed, because the reference has no fallback at all — Codex returns `Option` and\n * its callers early-return (`core/src/session/turn_context.rs:213`, `core/src/compact_remote.rs:374`).\n *\n * It is conservative only UPWARD. For a model whose real window is larger, budgeting against 128k\n * compacts early — wasteful but safe. For a model whose real window is SMALLER (an 8k or 32k model\n * absent from the catalog), it compacts too late and the context still overflows. That residual risk\n * is real and is why {@link resolveEffectiveContextWindow} never lets this floor compete with a known\n * catalog value, and why the `compaction_fallback` event exists: a surface can show that the budget is\n * a guess instead of the user finding out when the provider rejects the request.\n */\nexport const CONTEXT_WINDOW_FLOOR = 128_000;\n\n/** Where the effective window came from — carried into the M77 structured event. */\nexport type ContextWindowSource = \"override\" | \"catalog\" | \"fallback\";\n\n/** Input to {@link resolveEffectiveContextWindow}. */\nexport interface EffectiveContextWindowInput {\n  /** Caller-supplied window, in tokens. Clamped by `catalog` when both are present. */\n  readonly override?: number | undefined;\n  /** The model's window from the catalog, in tokens. Absent when the model is unknown. */\n  readonly catalog?: number | undefined;\n  /** Safety margin in `(0, 1]`. Codex uses 0.95 (`model_info.rs:158`). */\n  readonly margin: number;\n  /** Conservative floor used ONLY when neither `override` nor `catalog` is available. */\n  readonly floor?: number | undefined;\n}\n\n/** Result of {@link resolveEffectiveContextWindow}. */\nexport interface EffectiveContextWindow {\n  /** The window to budget against, after clamp and margin. */\n  readonly window: number;\n  /** Which input won — `\"fallback\"` means neither override nor catalog was available. */\n  readonly source: ContextWindowSource;\n  /** `true` when an `override` above the catalog window was clamped down to it. */\n  readonly clamped: boolean;\n}\n\n/**\n * Resolve the window to budget against — the fail-SAFE replacement for reading the catalog directly.\n *\n * Today `post-run-lifecycle.ts` reads `getCatalogModelInfo(model)?.limit?.context` and, when that is\n * `undefined`, auto-compaction simply never fires. That is fail-OPEN: the context grows until the\n * provider rejects the request. (The comment there calls it \"fail-safe\" — M77 corrects it.)\n *\n * Three techniques, two of them borrowed from the single reference:\n *\n *  1. **Override, CLAMPED by the catalog** — Codex `models-manager/src/model_info.rs:26-31` lets\n *     config override the window but limits it with `context_window.min(max_context_window)`.\n *     Without the clamp, declaring 999k on a 200k model reopens the overflow through another door.\n *  2. **Multiplicative margin** — Codex `model_info.rs:158` (`effective_context_window_percent: 95`)\n *     never budgets against 100% of the window. Being multiplicative, it is conservative for ANY\n *     window size.\n *  3. **Floor, only when nothing is known** — deliberately NOT a blanket default. A fixed floor is\n *     conservative only upward: applied to a small model it would inflate the assumed window and\n *     reproduce the very fail-open this function exists to close. Hence the floor never competes\n *     with a known catalog value.\n *\n * Pure — no catalog lookup, no I/O. The caller supplies the numbers, mirroring `shouldCompact`.\n */\nexport function resolveEffectiveContextWindow(\n  input: EffectiveContextWindowInput,\n): EffectiveContextWindow {\n  if (!(input.margin > 0) || input.margin > 1) {\n    throw new ContextWindowMarginError(input.margin);\n  }\n\n  const withMargin = (raw: number): number => Math.floor(raw * input.margin);\n\n  if (input.override !== undefined) {\n    const clamped = input.catalog !== undefined && input.override > input.catalog;\n    const raw = clamped ? (input.catalog as number) : input.override;\n    return { window: withMargin(raw), source: \"override\", clamped };\n  }\n\n  if (input.catalog !== undefined) {\n    return { window: withMargin(input.catalog), source: \"catalog\", clamped: false };\n  }\n\n  return { window: withMargin(input.floor ?? 0), source: \"fallback\", clamped: false };\n}\n\n/** Input to {@link shouldCompact}: an estimate, the model's window, and reserved headroom. */\nexport interface ShouldCompactInput {\n  /** Estimated token count of the next request (e.g. from {@link estimateTokens}). */\n  readonly estimated: number;\n  /** The model's total context window, in tokens. */\n  readonly contextWindow: number;\n  /** Tokens to reserve as headroom (output + safety margin). */\n  readonly buffer: number;\n  /**\n   * Tokens reserved for the model's response generation, SEPARATE from `buffer`.\n   * Default 0 — omitting it preserves the legacy\n   * `estimated >= contextWindow - buffer` result.\n   */\n  readonly maxOutput?: number;\n}\n\n/**\n * Tokenizer-free token estimate via the conventional ~4-chars-per-token\n * heuristic: `ceil(text.length / 4)`. `\"\"` → 0; any non-empty text → ≥ 1.\n * A cheap PRE-CALL gate for {@link shouldCompact} — NOT exact tokenization\n * (a consumer needing exactness supplies their own tokenizer). Uses UTF-16\n * `.length` (code units), so multibyte text is approximate.\n */\nexport function estimateTokens(text: string): number {\n  return Math.ceil(text.length / 4);\n}\n\n/**\n * Decide BEFORE sending whether to compact: `true` when the `estimated` token\n * count leaves less than `buffer` headroom in the `contextWindow`\n * (`estimated >= contextWindow - buffer`). A `buffer >= contextWindow`\n * (non-positive threshold) always returns `true`. Pure — the caller supplies\n * the window (e.g. from `resolveModelCapabilities`), keeping this decoupled\n * from the per-model catalog.\n */\nexport function shouldCompact(input: ShouldCompactInput): boolean {\n  return input.estimated >= input.contextWindow - input.buffer - (input.maxOutput ?? 0);\n}\n"]}

package/dist/chunk-WJVHMTKB.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var zod = require('zod');
+
+// src/internal/zod/to-json-schema.ts
+function toJsonSchema(schema, options = { unrepresentable: "any" }) {
+  return zod.toJSONSchema(schema, options);
+}
+
+exports.toJsonSchema = toJsonSchema;
+//# sourceMappingURL=chunk-WJVHMTKB.cjs.map
+//# sourceMappingURL=chunk-WJVHMTKB.cjs.map

package/dist/chunk-WJVHMTKB.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/zod/to-json-schema.ts"],"names":["toJSONSchema"],"mappings":";;;;;AA4BO,SAAS,aACd,MAAA,EACA,OAAA,GAA+B,EAAE,eAAA,EAAiB,OAAM,EAC/B;AAGzB,EAAA,OAAOA,gBAAA,CAAa,QAA8C,OAAO,CAAA;AAI3E","file":"chunk-WJVHMTKB.cjs","sourcesContent":["/**\n * Zod v4 → JSON Schema adapter.\n *\n * Uses Zod v4's native `z.toJSONSchema()` directly. The v3 fallback path\n * was removed after the zod-v4-migration plan (ADR D2) locked the workspace\n * to `zod ^4.0.0` only — the `zod-to-json-schema` peer dep is no longer\n * needed.\n *\n * @internal\n */\n\nimport { toJSONSchema } from \"zod\";\n\ninterface ToJsonSchemaOptions {\n  /** `\"any\"` keeps transforms/refinements as `{}` (loose). Default: `\"any\"`. */\n  unrepresentable?: \"any\" | \"throw\";\n}\n\n/**\n * Convert a Zod schema to a JSON Schema object via Zod v4 native.\n *\n * Accepts `unknown` because callers pass `T extends ZodType` generics that\n * don't structurally satisfy Zod v4's `$ZodType` parameter. The cast is\n * safe: any schema created by `z.object()` / `z.string()` etc. IS a valid\n * input to `toJSONSchema` at runtime.\n *\n * @internal\n */\nexport function toJsonSchema(\n  schema: unknown,\n  options: ToJsonSchemaOptions = { unrepresentable: \"any\" },\n): Record<string, unknown> {\n  // Cast to the exact parameter type `toJSONSchema` expects rather than `any`:\n  // any z.* schema IS a valid input at runtime (see the doc comment above).\n  return toJSONSchema(schema as Parameters<typeof toJSONSchema>[0], options) as Record<\n    string,\n    unknown\n  >;\n}\n"]}