@theokit/sdk 4.27.0 → 4.28.0

package/dist/index.d.cts

@@ -1,7 +1,7 @@
 import { T as TheokitAgentError, B as BudgetOptions, a as BudgetHandle, b as BudgetSnapshot, E as ErrorMetadata } from './errors-BdL-buYn.cjs';
 export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, f as BudgetExceedEvent, g as BudgetExceededError, h as BudgetLimit, i as BudgetMode, j as BudgetScope, k as BudgetThresholdEvent, l as BudgetWindow, C as ConfigurationError, m as ErrorCode, I as IntegrationNotConnectedError, n as InvalidTaskIdError, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-BdL-buYn.cjs';
-import { A as AgentOptions, L as LocalOptions, P as ProviderRoutingSettings, S as SystemPromptResolver, C as CloudOptions, M as MemorySettings, a as AgentDefinition, b as ContextSettings, c as PluginsSettings, d as SkillsSettings, e as SDKAgent, f as ListAgentsOptions, g as ListResult, h as SDKAgentInfo, G as GetAgentOptions, i as ListRunsOptions, j as GetRunOptions, k as AgentOperationOptions, l as Plugin$1, m as ProviderProfile, I as InlineSkill, J as JudgeResult, n as GoalOptions, o as GoalEvent, p as GoalResult, B as BudgetTracker, q as MemoryProvider, r as MemoryId, s as PreToolCallDecision, t as StepResult, u as SDKProvider } from './cron-DzZ9TMa2.cjs';
-export { v as ActiveMemoryPassArgs, w as ActiveMemoryPassResult, x as AgentMemory, y as BudgetCheck, z as BudgetTotal, D as BudgetUsageEvent, E as CloudEnv, F as CloudRepo, H as ContextBudget, K as ContextManagerKind, N as ContextSnapshot, O as ContextSource, Q as ContextSourceStatus, R as CreateSkillSpec, T as Cron, U as CronCreateOptions, V as CronGetOptions, W as CronJob, X as CronJobStatus, Y as CronListOptions, Z as CronOperationOptions, _ as CronRunOptions, $ as CronRuntime, a0 as CronSchedulerStatus, a1 as CronStartOptions, a2 as HookName, a3 as InvalidateCacheOptions, a4 as MemoryAdapter, a5 as MemoryAdapterCapabilities, a6 as MemoryContext, a7 as MemoryFact, a8 as MemoryProviderHandle, a9 as MemoryProviderInitOptions, aa as MemoryRevision, ab as MemoryToolSchema, ac as MemoryTurnMessage, ad as PersonalityPreset, ae as PluginContext, af as PostAssistantReplyContext, ag as PreToolCallContext, ah as PreUserSendContext, ai as PreUserSendResult, aj as ProviderCapability, ak as ProviderRoute, al as ProviderTransform, am as ProviderTransformContext, an as RecordSessionSummaryArgs, ao as ResolvedProviderRoute, ap as RunUntilIterator, aq as SDKAgentPlugins, ar as SDKAgentSkillDetail, as as SDKAgentSkills, at as SDKArtifact, au as SDKContextManager, av as SDKPluginMetadata, aw as SDKProvidersManager, ax as SessionRecord, ay as SessionStore, az as SettingSource, aA as Skill, aB as SkillsResolver, aC as SkillsResolverContext, aD as SystemPromptContext, aE as SystemPromptMemoryFact, aF as SystemPromptSkillRef, aG as TelemetrySettings, aH as Verdict } from './cron-DzZ9TMa2.cjs';
+import { A as AgentOptions, L as LocalOptions, P as ProviderRoutingSettings, S as SystemPromptResolver, C as CloudOptions, M as MemorySettings, a as AgentDefinition, b as ContextSettings, c as PluginsSettings, d as SkillsSettings, e as SDKAgent, f as ListAgentsOptions, g as ListResult, h as SDKAgentInfo, G as GetAgentOptions, i as ListRunsOptions, j as GetRunOptions, k as AgentOperationOptions, l as Plugin$1, m as ProviderProfile, I as InlineSkill, J as JudgeResult, n as GoalOptions, o as GoalEvent, p as GoalResult, B as BudgetTracker, q as MemoryProvider, r as MemoryId, s as PreToolCallDecision, t as StepResult, u as SDKProvider } from './cron-CoQREV_k.cjs';
+export { v as ActiveMemoryPassArgs, w as ActiveMemoryPassResult, x as AgentMemory, y as BudgetCheck, z as BudgetTotal, D as BudgetUsageEvent, E as CloudEnv, F as CloudRepo, H as ContextBudget, K as ContextManagerKind, N as ContextSnapshot, O as ContextSource, Q as ContextSourceStatus, R as CreateSkillSpec, T as Cron, U as CronCreateOptions, V as CronGetOptions, W as CronJob, X as CronJobStatus, Y as CronListOptions, Z as CronOperationOptions, _ as CronRunOptions, $ as CronRuntime, a0 as CronSchedulerStatus, a1 as CronStartOptions, a2 as HookName, a3 as InvalidateCacheOptions, a4 as MemoryAdapter, a5 as MemoryAdapterCapabilities, a6 as MemoryContext, a7 as MemoryFact, a8 as MemoryProviderHandle, a9 as MemoryProviderInitOptions, aa as MemoryRevision, ab as MemoryToolSchema, ac as MemoryTurnMessage, ad as PersonalityPreset, ae as PluginContext, af as PostAssistantReplyContext, ag as PreToolCallContext, ah as PreUserSendContext, ai as PreUserSendResult, aj as ProviderCapability, ak as ProviderRoute, al as ProviderTransform, am as ProviderTransformContext, an as RecordSessionSummaryArgs, ao as ResolvedProviderRoute, ap as RunUntilIterator, aq as SDKAgentPlugins, ar as SDKAgentSkillDetail, as as SDKAgentSkills, at as SDKArtifact, au as SDKContextManager, av as SDKPluginMetadata, aw as SDKProvidersManager, ax as SessionRecord, ay as SessionStore, az as SettingSource, aA as Skill, aB as SkillsResolver, aC as SkillsResolverContext, aD as SystemPromptContext, aE as SystemPromptMemoryFact, aF as SystemPromptSkillRef, aG as TelemetrySettings, aH as Verdict } from './cron-CoQREV_k.cjs';
 import { R as RunResult, M as ModelSelection, C as CustomTool, a as McpServerConfig, b as Run, P as Processor, T as ToolResultContentBlock, c as PermissionMode, d as PermissionEngine, e as RunEventSink, S as SDKMessage } from './run-OJbGyweZ.cjs';
 export { A as AgentConversationTurn, f as AssistantMessage, g as CompletionCheck, h as CompletionCheckResult, i as ConversationStep, j as ConversationTurn, k as CostBreakdown, l as CostSource, m as CostStatus, D as DoomLoopThresholds, G as GenerateOptions, n as GenerateRunResult, I as ImageBlock, o as InputProcessorContext, p as InteractionUpdate, q as McpAuthConfig, r as McpHttpServerConfig, s as McpOAuthConfig, t as McpStdioServerConfig, u as MessageOrigin, v as ModelParameterValue, O as OutputProcessorContext, w as PartialToolCallUpdate, x as PermissionAction, y as PermissionEngineOptions, z as PermissionRule, B as ProcessorControls, E as ProcessorTripwire, F as ProcessorViolation, H as RunCompactBoundaryEvent, J as RunCompletionCheckEvent, K as RunErrorDetail, L as RunEvent, N as RunGitInfo, Q as RunOperation, U as RunPermissionDeniedEvent, V as RunRateLimitEvent, W as RunStatus, X as RunTaskCompletedEvent, Y as RunTaskStartedEvent, Z as RunTaskUpdatedEvent, _ as RunToCompletionOptions, $ as RunToCompletionResult, a0 as RunToolProgressEvent, a1 as RunTripwireEvent, a2 as SDKAssistantMessage, a3 as SDKImage, a4 as SDKImageDimension, a5 as SDKObjectDelta, a6 as SDKRequestMessage, a7 as SDKStatusMessage, a8 as SDKSystemMessage, a9 as SDKTaskMessage, aa as SDKThinkingMessage, ab as SDKToolUseMessage, ac as SDKUserMessage, ad as SDKUserMessageEvent, ae as SendOptions, af as ShellCommand, ag as ShellConversationTurn, ah as ShellOutput, ai as ShellOutputDeltaUpdate, aj as StepCompletedUpdate, ak as StepStartedUpdate, al as StreamToCompletionResult, am as SummaryCompletedUpdate, an as SummaryStartedUpdate, ao as SummaryUpdate, ap as TextBlock, aq as TextDeltaUpdate, ar as ThinkingCompletedUpdate, as as ThinkingDeltaUpdate, at as ThinkingMessage, au as TokenDeltaUpdate, av as TokenUsage, aw as ToolCall, ax as ToolCallCompletedUpdate, ay as ToolCallStartedUpdate, az as ToolContextMessage, aA as ToolResult, aB as ToolResultGuardOptions, aC as ToolUseBlock, aD as TurnEndedUpdate, aE as UserMessage, aF as UserMessageAppendedUpdate, aG as applyMode, aH as emitRunEvent } from './run-OJbGyweZ.cjs';
 import * as zod from 'zod';

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { T as TheokitAgentError, B as BudgetOptions, a as BudgetHandle, b as BudgetSnapshot, E as ErrorMetadata } from './errors-DHZtSNnj.js';
 export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, f as BudgetExceedEvent, g as BudgetExceededError, h as BudgetLimit, i as BudgetMode, j as BudgetScope, k as BudgetThresholdEvent, l as BudgetWindow, C as ConfigurationError, m as ErrorCode, I as IntegrationNotConnectedError, n as InvalidTaskIdError, M as MemoryAdapterError, o as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, p as TaskNotFoundError, U as UnknownAgentError, q as UnsupportedBudgetOperationError, r as UnsupportedRunOperationError, s as UnsupportedTaskOperationError, t as isTransientError } from './errors-DHZtSNnj.js';
-import { A as AgentOptions, L as LocalOptions, P as ProviderRoutingSettings, S as SystemPromptResolver, C as CloudOptions, M as MemorySettings, a as AgentDefinition, b as ContextSettings, c as PluginsSettings, d as SkillsSettings, e as SDKAgent, f as ListAgentsOptions, g as ListResult, h as SDKAgentInfo, G as GetAgentOptions, i as ListRunsOptions, j as GetRunOptions, k as AgentOperationOptions, l as Plugin$1, m as ProviderProfile, I as InlineSkill, J as JudgeResult, n as GoalOptions, o as GoalEvent, p as GoalResult, B as BudgetTracker, q as MemoryProvider, r as MemoryId, s as PreToolCallDecision, t as StepResult, u as SDKProvider } from './cron-DPUZzncH.js';
-export { v as ActiveMemoryPassArgs, w as ActiveMemoryPassResult, x as AgentMemory, y as BudgetCheck, z as BudgetTotal, D as BudgetUsageEvent, E as CloudEnv, F as CloudRepo, H as ContextBudget, K as ContextManagerKind, N as ContextSnapshot, O as ContextSource, Q as ContextSourceStatus, R as CreateSkillSpec, T as Cron, U as CronCreateOptions, V as CronGetOptions, W as CronJob, X as CronJobStatus, Y as CronListOptions, Z as CronOperationOptions, _ as CronRunOptions, $ as CronRuntime, a0 as CronSchedulerStatus, a1 as CronStartOptions, a2 as HookName, a3 as InvalidateCacheOptions, a4 as MemoryAdapter, a5 as MemoryAdapterCapabilities, a6 as MemoryContext, a7 as MemoryFact, a8 as MemoryProviderHandle, a9 as MemoryProviderInitOptions, aa as MemoryRevision, ab as MemoryToolSchema, ac as MemoryTurnMessage, ad as PersonalityPreset, ae as PluginContext, af as PostAssistantReplyContext, ag as PreToolCallContext, ah as PreUserSendContext, ai as PreUserSendResult, aj as ProviderCapability, ak as ProviderRoute, al as ProviderTransform, am as ProviderTransformContext, an as RecordSessionSummaryArgs, ao as ResolvedProviderRoute, ap as RunUntilIterator, aq as SDKAgentPlugins, ar as SDKAgentSkillDetail, as as SDKAgentSkills, at as SDKArtifact, au as SDKContextManager, av as SDKPluginMetadata, aw as SDKProvidersManager, ax as SessionRecord, ay as SessionStore, az as SettingSource, aA as Skill, aB as SkillsResolver, aC as SkillsResolverContext, aD as SystemPromptContext, aE as SystemPromptMemoryFact, aF as SystemPromptSkillRef, aG as TelemetrySettings, aH as Verdict } from './cron-DPUZzncH.js';
+import { A as AgentOptions, L as LocalOptions, P as ProviderRoutingSettings, S as SystemPromptResolver, C as CloudOptions, M as MemorySettings, a as AgentDefinition, b as ContextSettings, c as PluginsSettings, d as SkillsSettings, e as SDKAgent, f as ListAgentsOptions, g as ListResult, h as SDKAgentInfo, G as GetAgentOptions, i as ListRunsOptions, j as GetRunOptions, k as AgentOperationOptions, l as Plugin$1, m as ProviderProfile, I as InlineSkill, J as JudgeResult, n as GoalOptions, o as GoalEvent, p as GoalResult, B as BudgetTracker, q as MemoryProvider, r as MemoryId, s as PreToolCallDecision, t as StepResult, u as SDKProvider } from './cron-BN6JJlDw.js';
+export { v as ActiveMemoryPassArgs, w as ActiveMemoryPassResult, x as AgentMemory, y as BudgetCheck, z as BudgetTotal, D as BudgetUsageEvent, E as CloudEnv, F as CloudRepo, H as ContextBudget, K as ContextManagerKind, N as ContextSnapshot, O as ContextSource, Q as ContextSourceStatus, R as CreateSkillSpec, T as Cron, U as CronCreateOptions, V as CronGetOptions, W as CronJob, X as CronJobStatus, Y as CronListOptions, Z as CronOperationOptions, _ as CronRunOptions, $ as CronRuntime, a0 as CronSchedulerStatus, a1 as CronStartOptions, a2 as HookName, a3 as InvalidateCacheOptions, a4 as MemoryAdapter, a5 as MemoryAdapterCapabilities, a6 as MemoryContext, a7 as MemoryFact, a8 as MemoryProviderHandle, a9 as MemoryProviderInitOptions, aa as MemoryRevision, ab as MemoryToolSchema, ac as MemoryTurnMessage, ad as PersonalityPreset, ae as PluginContext, af as PostAssistantReplyContext, ag as PreToolCallContext, ah as PreUserSendContext, ai as PreUserSendResult, aj as ProviderCapability, ak as ProviderRoute, al as ProviderTransform, am as ProviderTransformContext, an as RecordSessionSummaryArgs, ao as ResolvedProviderRoute, ap as RunUntilIterator, aq as SDKAgentPlugins, ar as SDKAgentSkillDetail, as as SDKAgentSkills, at as SDKArtifact, au as SDKContextManager, av as SDKPluginMetadata, aw as SDKProvidersManager, ax as SessionRecord, ay as SessionStore, az as SettingSource, aA as Skill, aB as SkillsResolver, aC as SkillsResolverContext, aD as SystemPromptContext, aE as SystemPromptMemoryFact, aF as SystemPromptSkillRef, aG as TelemetrySettings, aH as Verdict } from './cron-BN6JJlDw.js';
 import { R as RunResult, M as ModelSelection, C as CustomTool, a as McpServerConfig, b as Run, P as Processor, T as ToolResultContentBlock, c as PermissionMode, d as PermissionEngine, e as RunEventSink, S as SDKMessage } from './run-OJbGyweZ.js';
 export { A as AgentConversationTurn, f as AssistantMessage, g as CompletionCheck, h as CompletionCheckResult, i as ConversationStep, j as ConversationTurn, k as CostBreakdown, l as CostSource, m as CostStatus, D as DoomLoopThresholds, G as GenerateOptions, n as GenerateRunResult, I as ImageBlock, o as InputProcessorContext, p as InteractionUpdate, q as McpAuthConfig, r as McpHttpServerConfig, s as McpOAuthConfig, t as McpStdioServerConfig, u as MessageOrigin, v as ModelParameterValue, O as OutputProcessorContext, w as PartialToolCallUpdate, x as PermissionAction, y as PermissionEngineOptions, z as PermissionRule, B as ProcessorControls, E as ProcessorTripwire, F as ProcessorViolation, H as RunCompactBoundaryEvent, J as RunCompletionCheckEvent, K as RunErrorDetail, L as RunEvent, N as RunGitInfo, Q as RunOperation, U as RunPermissionDeniedEvent, V as RunRateLimitEvent, W as RunStatus, X as RunTaskCompletedEvent, Y as RunTaskStartedEvent, Z as RunTaskUpdatedEvent, _ as RunToCompletionOptions, $ as RunToCompletionResult, a0 as RunToolProgressEvent, a1 as RunTripwireEvent, a2 as SDKAssistantMessage, a3 as SDKImage, a4 as SDKImageDimension, a5 as SDKObjectDelta, a6 as SDKRequestMessage, a7 as SDKStatusMessage, a8 as SDKSystemMessage, a9 as SDKTaskMessage, aa as SDKThinkingMessage, ab as SDKToolUseMessage, ac as SDKUserMessage, ad as SDKUserMessageEvent, ae as SendOptions, af as ShellCommand, ag as ShellConversationTurn, ah as ShellOutput, ai as ShellOutputDeltaUpdate, aj as StepCompletedUpdate, ak as StepStartedUpdate, al as StreamToCompletionResult, am as SummaryCompletedUpdate, an as SummaryStartedUpdate, ao as SummaryUpdate, ap as TextBlock, aq as TextDeltaUpdate, ar as ThinkingCompletedUpdate, as as ThinkingDeltaUpdate, at as ThinkingMessage, au as TokenDeltaUpdate, av as TokenUsage, aw as ToolCall, ax as ToolCallCompletedUpdate, ay as ToolCallStartedUpdate, az as ToolContextMessage, aA as ToolResult, aB as ToolResultGuardOptions, aC as ToolUseBlock, aD as TurnEndedUpdate, aE as UserMessage, aF as UserMessageAppendedUpdate, aG as applyMode, aH as emitRunEvent } from './run-OJbGyweZ.js';
 import * as zod from 'zod';

package/dist/index.js

@@ -6,9 +6,9 @@ import './chunk-GJAGKFTR.js';
 import { Workflow, agentStep } from './chunk-BFWPZMG7.js';
 import './chunk-UVNG67DG.js';
 import './chunk-CAH3G4IS.js';
-export { Cron } from './chunk-OX772BEW.js';
-import { MEMORY_EMBEDDING_ADAPTERS, resolveApiKey, shouldUseFixtureMode, isFixtureApiKey, httpRequest, DEFAULT_AGENTIC_MODEL_ID, Agent } from './chunk-6M76Z3AI.js';
-export { Agent, AgentBuilder, Tool, ToolError, UsageAccumulator, computeCost, getPricingEntry } from './chunk-6M76Z3AI.js';
+export { Cron } from './chunk-PF5Y5BHG.js';
+import { MEMORY_EMBEDDING_ADAPTERS, resolveApiKey, shouldUseFixtureMode, isFixtureApiKey, httpRequest, DEFAULT_AGENTIC_MODEL_ID, Agent } from './chunk-XW6RXVGB.js';
+export { Agent, AgentBuilder, Tool, ToolError, UsageAccumulator, computeCost, getPricingEntry } from './chunk-XW6RXVGB.js';
 import { configure, submit, list, get, cancel, subscribe } from './chunk-HRA3CPGG.js';
 export { emitRunEvent } from './chunk-HRA3CPGG.js';
 import './chunk-SQLZ7ONU.js';
@@ -695,7 +695,7 @@ var EventBus = class {
 // src/goal-loop.ts
 function runGoalLoop(agent, goal, options, depsOverride) {
   async function* wrap() {
-    const { runUntilImpl } = await import('./run-until-K7IO7ZPQ.js');
+    const { runUntilImpl } = await import('./run-until-YZ2ODWOF.js');
     const deps = depsOverride ?? await (async () => {
       const { judgeCallImpl } = await import('./judge-call-D7R3ZTZS.js');
       const { getAgentFacade } = await import('./agent-factory-registry-ZVTABLEY.js');

package/dist/{run-until-K7IO7ZPQ.js → run-until-YZ2ODWOF.js}

@@ -59,6 +59,7 @@ async function* runUntilImpl(agent, goal, options, deps) {
     const judgeOpts = {};
     if (options?.judgeModel !== void 0) judgeOpts.judgeModel = options.judgeModel;
     if (options?.judgeApiKey !== void 0) judgeOpts.apiKey = options.judgeApiKey;
+    if (options?.agentModel !== void 0) judgeOpts.agentModel = options.agentModel;
     const judgeCtx = { goal, lastResponse };
     if (options?.subgoals !== void 0) judgeCtx.subgoals = options.subgoals;
     const judgment = await deps.judge(judgeCtx, judgeOpts);
@@ -173,5 +174,5 @@ ${lastResponse.slice(-1e3)}`
 }
 
 export { composeContinuation, runUntilImpl };
-//# sourceMappingURL=run-until-K7IO7ZPQ.js.map
-//# sourceMappingURL=run-until-K7IO7ZPQ.js.map
+//# sourceMappingURL=run-until-YZ2ODWOF.js.map
+//# sourceMappingURL=run-until-YZ2ODWOF.js.map

package/dist/run-until-YZ2ODWOF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/runtime/lifecycle/run-until.ts"],"names":[],"mappings":";;;AA+BA,gBAAuB,YAAA,CACrB,KAAA,EACA,IAAA,EACA,OAAA,EACA,IAAA,EAC6C;AAC7C,EAAA,MAAM,QAAA,GAAW,SAAS,QAAA,IAAY,EAAA;AACtC,EAAA,MAAM,QAAA,GAAW,SAAS,2BAAA,IAA+B,CAAA;AACzD,EAAA,MAAM,cAAc,OAAA,EAAS,WAAA;AAC7B,EAAA,MAAM,SAAS,OAAA,EAAS,MAAA;AAKxB,EAAA,MAAM,SAAA,GAAY,MAAe,MAAA,KAAW,MAAA,IAAa,MAAA,CAAO,OAAA;AAChE,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,mBAAA,GAAsB,CAAA;AAC1B,EAAA,IAAI,UAAA,GAAa,CAAA;AACjB,EAAA,IAAI,YAAA,GAAe,EAAA;AAGnB,EAAA,IAAI,WAAU,EAAG;AACf,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,eAAA;AAAA,MACN,MAAA,EAAQ,QAAA;AAAA,MACR,MAAA,EAAQ;AAAA,KACV;AACA,IAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,WAAW,CAAA,EAAG,UAAA,EAAY,eAAe,MAAA,EAAU;AAAA,EAChF;AAEA,EAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,MAAA,EAAQ,QAAA,EAAU,QAAQ,cAAA,EAAe;AAExE,EAAA,OAAO,OAAO,QAAA,EAAU;AACtB,IAAA,IAAI,WAAU,EAAG;AACf,MAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,MAAA,EAAQ,QAAA,EAAU,QAAQ,yBAAA,EAA0B;AACnF,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,QAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AAEA,IAAA,IAAA,IAAQ,CAAA;AACR,IAAA,MAAM,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,IAAA,EAAK;AAEvC,IAAA,MAAM,qBAAqB,IAAA,KAAS,CAAA,GAAI,IAAA,GAAO,mBAAA,CAAoB,MAAM,YAAY,CAAA;AAErF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,IAAA,CAAK,kBAAkB,CAAA;AAI/C,IAAA,MAAM,gBAAgB,MAAY;AAChC,MAAA,KAAM,IAAyC,MAAA,IAAS;AAAA,IAC1D,CAAA;AACA,IAAA,IAAI,WAAW,MAAA,EAAW;AACxB,MAAA,IAAI,MAAA,CAAO,SAAS,aAAA,EAAc;AAAA,kBACtB,gBAAA,CAAiB,OAAA,EAAS,eAAe,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,IACrE;AACA,IAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,IAAA,EAAK;AAC9B,IAAA,IAAI,MAAA,KAAW,MAAA,EAAW,MAAA,CAAO,mBAAA,CAAoB,SAAS,aAAa,CAAA;AAC3E,IAAA,YAAA,GAAe,OAAO,MAAA,IAAU,EAAA;AAEhC,IAAA,MAAM,UAAA,GAAc,OAAgD,KAAA,EAAO,WAAA;AAC3E,IAAA,IAAI,OAAO,UAAA,KAAe,QAAA,EAAU,UAAA,IAAc,UAAA;AAElD,IAAA,IAAI,WAAU,EAAG;AACf,MAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,MAAA,EAAQ,QAAA,EAAU,QAAQ,yBAAA,EAA0B;AACnF,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,QAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AACA,IAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,SAAS,YAAA,EAAa;AAE5D,IAAA,MAAM,YAA0B,EAAC;AACjC,IAAA,IAAI,OAAA,EAAS,UAAA,KAAe,MAAA,EAAW,SAAA,CAAU,aAAa,OAAA,CAAQ,UAAA;AACtE,IAAA,IAAI,OAAA,EAAS,WAAA,KAAgB,MAAA,EAAW,SAAA,CAAU,SAAS,OAAA,CAAQ,WAAA;AAEnE,IAAA,IAAI,OAAA,EAAS,UAAA,KAAe,MAAA,EAAW,SAAA,CAAU,aAAa,OAAA,CAAQ,UAAA;AACtE,IAAA,MAAM,QAAA,GAAyB,EAAE,IAAA,EAAM,YAAA,EAAa;AACpD,IAAA,IAAI,OAAA,EAAS,QAAA,KAAa,MAAA,EAAW,QAAA,CAAS,WAAW,OAAA,CAAQ,QAAA;AACjE,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,UAAU,SAAS,CAAA;AACrD,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,eAAA;AAAA,MACN,IAAA;AAAA,MACA,SAAS,QAAA,CAAS,OAAA;AAAA,MAClB,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,aAAa,QAAA,CAAS;AAAA,KACxB;AAEA,IAAA,IAAI,SAAS,WAAA,EAAa;AACxB,MAAA,mBAAA,IAAuB,CAAA;AACvB,MAAA,IAAI,uBAAuB,QAAA,EAAU;AACnC,QAAA,MAAM;AAAA,UACJ,IAAA,EAAM,eAAA;AAAA,UACN,MAAA,EAAQ,QAAA;AAAA,UACR,MAAA,EAAQ,+BAA+B,mBAAmB,CAAA,yBAAA;AAAA,SAC5D;AACA,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ,QAAA;AAAA,UACR,SAAA,EAAW,IAAA;AAAA,UACX,UAAA;AAAA,UACA,eAAe,YAAA,IAAgB;AAAA,SACjC;AAAA,MACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,mBAAA,GAAsB,CAAA;AAAA,IACxB;AAEA,IAAA,IAAI,QAAA,CAAS,YAAY,MAAA,EAAQ;AAC/B,MAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,QAAQ,WAAA,EAAa,MAAA,EAAQ,SAAS,MAAA,EAAO;AAC5E,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,WAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AAKA,IAAA,IAAI,QAAA,CAAS,YAAY,SAAA,EAAW;AAClC,MAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,QAAQ,SAAA,EAAW,MAAA,EAAQ,SAAS,MAAA,EAAO;AAC1E,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,SAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AACA,IAAA,IAAI,QAAA,CAAS,YAAY,SAAA,EAAW;AAClC,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,WAAA;AAAA,QACR,MAAA,EAAQ,CAAA,SAAA,EAAY,QAAA,CAAS,MAAM,CAAA;AAAA,OACrC;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,WAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AAGA,IAAA,IAAI,WAAA,KAAgB,MAAA,IAAa,UAAA,IAAc,WAAA,EAAa;AAC1D,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,MAAA,EAAQ,CAAA,cAAA,EAAiB,WAAW,CAAA,WAAA,EAAc,UAAU,CAAA,KAAA;AAAA,OAC9D;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,gBAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AAEA,IAAA,MAAM,EAAE,IAAA,EAAM,cAAA,EAAgB,IAAA,EAAM,QAAQ,kBAAA,EAAmB;AAAA,EACjE;AAEA,EAAA,MAAM;AAAA,IACJ,IAAA,EAAM,eAAA;AAAA,IACN,MAAA,EAAQ,QAAA;AAAA,IACR,MAAA,EAAQ,cAAc,QAAQ,CAAA,WAAA;AAAA,GAChC;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,QAAA;AAAA,IACR,SAAA,EAAW,IAAA;AAAA,IACX,UAAA;AAAA,IACA,eAAe,YAAA,IAAgB;AAAA,GACjC;AACF;AASO,SAAS,mBAAA,CAAoB,MAAc,YAAA,EAA8B;AAI9E,EAAA,OAAO;AAAA,IACL,wBAAA;AAAA,IACA,0CAAA;AAAA,IACA,EAAA;AAAA,IACA,CAAA;AAAA,EAAgB,IAAI;AAAA,YAAA,CAAA;AAAA,IACpB,EAAA;AAAA,IACA,wBAAA;AAAA,IACA,kGAAA;AAAA,IACA,mGAAA;AAAA,IACA,2BAAA;AAAA,IACA,EAAA;AAAA,IACA,qBAAA;AAAA,IACA,kGAAA;AAAA,IACA,uGAAA;AAAA,IACA,EAAA;AAAA,IACA,mBAAA;AAAA,IACA,uGAAA;AAAA,IACA,oGAAA;AAAA,IACA,EAAA;AAAA,IACA,CAAA;AAAA,EAA4B,YAAA,CAAa,KAAA,CAAM,IAAK,CAAC,CAAA;AAAA,GACvD,CAAE,KAAK,IAAI,CAAA;AACb","file":"run-until-YZ2ODWOF.js","sourcesContent":["/**\n * Goal-driven Ralph loop (T3.2, ADRs D115-D121).\n *\n * `runUntilImpl` is an `AsyncGenerator<GoalEvent, GoalResult, void>`:\n * yields events as the loop progresses, returns the final result when\n * the goal completes, fails, or is paused. The auxiliary judge model is\n * injected via `deps.judge` so the generator stays free of the `Agent`\n * façade import.\n *\n * EC-C fix: pre-aborted signals emit only `[paused]`, not `[active, paused]`.\n * EC-D: `maxTurns: 0` is supported (vacuous yield active → failed).\n *\n * @internal\n */\n\nimport type { SDKAgent } from \"../../../types/agent.js\";\nimport type {\n  GoalEvent,\n  GoalOptions,\n  GoalResult,\n  JudgeResult,\n} from \"../../../types/goal-events.js\";\nimport type { JudgeContext, JudgeOptions } from \"../../judge/judge-call.js\";\nimport { GOAL_CONTINUATION_MARKER } from \"./goal-marker.js\";\n\n/** DI contract: the judge is the only external touchpoint. */\nexport interface RunUntilDeps {\n  judge: (ctx: JudgeContext, opts?: JudgeOptions) => Promise<JudgeResult>;\n}\n\n// biome-ignore lint/complexity/noExcessiveCognitiveComplexity: the goal-loop interleaves turn-start, send, judge, continuation, abort-check, and failure-bail — extracting helpers harms the linear narrative.\nexport async function* runUntilImpl(\n  agent: SDKAgent,\n  goal: string,\n  options: GoalOptions | undefined,\n  deps: RunUntilDeps,\n): AsyncGenerator<GoalEvent, GoalResult, void> {\n  const maxTurns = options?.maxTurns ?? 20;\n  const maxFails = options?.maxConsecutiveJudgeFailures ?? 3;\n  const tokenBudget = options?.tokenBudget; // M55 — undefined ⇒ ilimitado\n  const signal = options?.signal;\n  // Use a function (not direct property access) so TS does not narrow\n  // `signal.aborted` to `false | undefined` after the initial check.\n  // AbortSignal.aborted is a getter that can flip true between calls.\n  // biome-ignore lint/complexity/useOptionalChain: optional-chain would re-narrow signal?.aborted to `false | undefined` after the first check, defeating the purpose of this helper.\n  const isAborted = (): boolean => signal !== undefined && signal.aborted;\n  let turn = 0;\n  let consecutiveFailures = 0;\n  let tokensUsed = 0; // M55 — soma observada (0 se usage ausente — fail-open)\n  let lastResponse = \"\";\n\n  // EC-C: signal already aborted BEFORE first event → emit only [paused].\n  if (isAborted()) {\n    yield {\n      type: \"status_change\",\n      status: \"paused\",\n      reason: \"aborted via AbortSignal before first turn\",\n    };\n    return { status: \"paused\", turnsUsed: 0, tokensUsed, finalResponse: undefined };\n  }\n\n  yield { type: \"status_change\", status: \"active\", reason: \"Goal started\" };\n\n  while (turn < maxTurns) {\n    if (isAborted()) {\n      yield { type: \"status_change\", status: \"paused\", reason: \"aborted via AbortSignal\" };\n      return {\n        status: \"paused\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n\n    turn += 1;\n    yield { type: \"turn_start\", turn, goal };\n\n    const continuationPrompt = turn === 1 ? goal : composeContinuation(goal, lastResponse);\n\n    const run = await agent.send(continuationPrompt);\n    // M55 review HIGH — thread the abort INTO the in-flight run: without this, Esc mid-turn is\n    // cosmetic (the turn keeps mutating the workspace until it finishes on its own). `run.cancel()`\n    // aborts the stream + in-flight tool calls (types/run.ts contract).\n    const cancelOnAbort = (): void => {\n      void (run as { cancel?: () => Promise<void> }).cancel?.();\n    };\n    if (signal !== undefined) {\n      if (signal.aborted) cancelOnAbort();\n      else signal.addEventListener(\"abort\", cancelOnAbort, { once: true });\n    }\n    const result = await run.wait();\n    if (signal !== undefined) signal.removeEventListener(\"abort\", cancelOnAbort);\n    lastResponse = result.result ?? \"\";\n    // M55 — token accounting fail-open: só soma quando o run reporta usage.\n    const turnTokens = (result as { usage?: { totalTokens?: number } }).usage?.totalTokens;\n    if (typeof turnTokens === \"number\") tokensUsed += turnTokens;\n    // Re-check aborted right after the turn lands: a cancelled turn must NOT spend a judge call.\n    if (isAborted()) {\n      yield { type: \"status_change\", status: \"paused\", reason: \"aborted via AbortSignal\" };\n      return {\n        status: \"paused\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n    yield { type: \"agent_response\", turn, content: lastResponse };\n\n    const judgeOpts: JudgeOptions = {};\n    if (options?.judgeModel !== undefined) judgeOpts.judgeModel = options.judgeModel;\n    if (options?.judgeApiKey !== undefined) judgeOpts.apiKey = options.judgeApiKey;\n    // M80 — encaminha o modelo do agente conduzido para o judge derivar quando `judgeModel` é omitido.\n    if (options?.agentModel !== undefined) judgeOpts.agentModel = options.agentModel;\n    const judgeCtx: JudgeContext = { goal, lastResponse };\n    if (options?.subgoals !== undefined) judgeCtx.subgoals = options.subgoals;\n    const judgment = await deps.judge(judgeCtx, judgeOpts);\n    yield {\n      type: \"judge_verdict\",\n      turn,\n      verdict: judgment.verdict,\n      reason: judgment.reason,\n      parseFailed: judgment.parseFailed,\n    };\n\n    if (judgment.parseFailed) {\n      consecutiveFailures += 1;\n      if (consecutiveFailures >= maxFails) {\n        yield {\n          type: \"status_change\",\n          status: \"failed\",\n          reason: `judge model too unreliable (${consecutiveFailures} parse failures in a row)`,\n        };\n        return {\n          status: \"failed\",\n          turnsUsed: turn,\n          tokensUsed,\n          finalResponse: lastResponse || undefined,\n        };\n      }\n    } else {\n      consecutiveFailures = 0;\n    }\n\n    if (judgment.verdict === \"done\") {\n      yield { type: \"status_change\", status: \"completed\", reason: judgment.reason };\n      return {\n        status: \"completed\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n    // M80 — o braço que faltava. Sem ele, um judge que reconhecesse impossibilidade só podia dizer\n    // \"continue\", e o loop repetia o mesmo turno até estourar o orçamento — reportando `failed` por\n    // limite em vez de `blocked` por impossibilidade. Duas causas distintas com o mesmo desfecho\n    // visível, e o consumidor precisava reconciliar depois do loop para distingui-las.\n    if (judgment.verdict === \"blocked\") {\n      yield { type: \"status_change\", status: \"blocked\", reason: judgment.reason };\n      return {\n        status: \"blocked\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n    if (judgment.verdict === \"skipped\") {\n      yield {\n        type: \"status_change\",\n        status: \"completed\",\n        reason: `skipped: ${judgment.reason}`,\n      };\n      return {\n        status: \"completed\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n\n    // M55 — checagem de token budget APÓS o turno (Codex: wind-down suave, para o loop).\n    if (tokenBudget !== undefined && tokensUsed >= tokenBudget) {\n      yield {\n        type: \"status_change\",\n        status: \"budget_limited\",\n        reason: `token budget (${tokenBudget}) reached: ${tokensUsed} used`,\n      };\n      return {\n        status: \"budget_limited\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n\n    yield { type: \"continuation\", turn, prompt: continuationPrompt };\n  }\n\n  yield {\n    type: \"status_change\",\n    status: \"failed\",\n    reason: `max turns (${maxTurns}) exhausted`,\n  };\n  return {\n    status: \"failed\",\n    turnsUsed: turn,\n    tokensUsed,\n    finalResponse: lastResponse || undefined,\n  };\n}\n\n/**\n * Build the continuation user message for turns 2+. Keeps last response\n * preview short so we don't bloat the prompt cache.\n *\n * @internal\n */\n\nexport function composeContinuation(goal: string, lastResponse: string): string {\n  // M55 — Codex-faithful continuation (ext/goal templates/goals/continuation.md): keep the FULL\n  // objective intact, work from current-state evidence, and audit completion requirement-by-requirement\n  // before declaring done. Improves the quality of what the judge then evaluates.\n  return [\n    GOAL_CONTINUATION_MARKER,\n    \"Continue working toward the active goal.\",\n    \"\",\n    `<objective>\\n${goal}\\n</objective>`,\n    \"\",\n    \"Continuation behavior:\",\n    \"- This goal persists across turns. Keep the full objective intact; if it cannot be finished now,\",\n    \"  make concrete progress toward the real requested end state and do not redefine success around a\",\n    \"  smaller or easier task.\",\n    \"\",\n    \"Work from evidence:\",\n    \"- Use the current worktree and external state as authoritative. Inspect the current state before\",\n    \"  relying on it. Improve, replace, or remove existing work as needed to satisfy the actual objective.\",\n    \"\",\n    \"Completion audit:\",\n    \"- Before deciding the goal is achieved, treat completion as unproven and verify it against the actual\",\n    \"  current state, requirement by requirement. Treat uncertain or indirect evidence as not achieved.\",\n    \"\",\n    `Your last response was:\\n${lastResponse.slice(-1000)}`,\n  ].join(\"\\n\");\n}\n"]}

package/dist/{run-until-ZD4PRLNJ.cjs → run-until-ZZ2JLPJM.cjs}

@@ -61,6 +61,7 @@ async function* runUntilImpl(agent, goal, options, deps) {
     const judgeOpts = {};
     if (options?.judgeModel !== void 0) judgeOpts.judgeModel = options.judgeModel;
     if (options?.judgeApiKey !== void 0) judgeOpts.apiKey = options.judgeApiKey;
+    if (options?.agentModel !== void 0) judgeOpts.agentModel = options.agentModel;
     const judgeCtx = { goal, lastResponse };
     if (options?.subgoals !== void 0) judgeCtx.subgoals = options.subgoals;
     const judgment = await deps.judge(judgeCtx, judgeOpts);
@@ -176,5 +177,5 @@ ${lastResponse.slice(-1e3)}`
 
 exports.composeContinuation = composeContinuation;
 exports.runUntilImpl = runUntilImpl;
-//# sourceMappingURL=run-until-ZD4PRLNJ.cjs.map
-//# sourceMappingURL=run-until-ZD4PRLNJ.cjs.map
+//# sourceMappingURL=run-until-ZZ2JLPJM.cjs.map
+//# sourceMappingURL=run-until-ZZ2JLPJM.cjs.map

package/dist/run-until-ZZ2JLPJM.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/runtime/lifecycle/run-until.ts"],"names":["GOAL_CONTINUATION_MARKER"],"mappings":";;;;;AA+BA,gBAAuB,YAAA,CACrB,KAAA,EACA,IAAA,EACA,OAAA,EACA,IAAA,EAC6C;AAC7C,EAAA,MAAM,QAAA,GAAW,SAAS,QAAA,IAAY,EAAA;AACtC,EAAA,MAAM,QAAA,GAAW,SAAS,2BAAA,IAA+B,CAAA;AACzD,EAAA,MAAM,cAAc,OAAA,EAAS,WAAA;AAC7B,EAAA,MAAM,SAAS,OAAA,EAAS,MAAA;AAKxB,EAAA,MAAM,SAAA,GAAY,MAAe,MAAA,KAAW,MAAA,IAAa,MAAA,CAAO,OAAA;AAChE,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI,mBAAA,GAAsB,CAAA;AAC1B,EAAA,IAAI,UAAA,GAAa,CAAA;AACjB,EAAA,IAAI,YAAA,GAAe,EAAA;AAGnB,EAAA,IAAI,WAAU,EAAG;AACf,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,eAAA;AAAA,MACN,MAAA,EAAQ,QAAA;AAAA,MACR,MAAA,EAAQ;AAAA,KACV;AACA,IAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,WAAW,CAAA,EAAG,UAAA,EAAY,eAAe,MAAA,EAAU;AAAA,EAChF;AAEA,EAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,MAAA,EAAQ,QAAA,EAAU,QAAQ,cAAA,EAAe;AAExE,EAAA,OAAO,OAAO,QAAA,EAAU;AACtB,IAAA,IAAI,WAAU,EAAG;AACf,MAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,MAAA,EAAQ,QAAA,EAAU,QAAQ,yBAAA,EAA0B;AACnF,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,QAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AAEA,IAAA,IAAA,IAAQ,CAAA;AACR,IAAA,MAAM,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,IAAA,EAAK;AAEvC,IAAA,MAAM,qBAAqB,IAAA,KAAS,CAAA,GAAI,IAAA,GAAO,mBAAA,CAAoB,MAAM,YAAY,CAAA;AAErF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,IAAA,CAAK,kBAAkB,CAAA;AAI/C,IAAA,MAAM,gBAAgB,MAAY;AAChC,MAAA,KAAM,IAAyC,MAAA,IAAS;AAAA,IAC1D,CAAA;AACA,IAAA,IAAI,WAAW,MAAA,EAAW;AACxB,MAAA,IAAI,MAAA,CAAO,SAAS,aAAA,EAAc;AAAA,kBACtB,gBAAA,CAAiB,OAAA,EAAS,eAAe,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,IACrE;AACA,IAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,IAAA,EAAK;AAC9B,IAAA,IAAI,MAAA,KAAW,MAAA,EAAW,MAAA,CAAO,mBAAA,CAAoB,SAAS,aAAa,CAAA;AAC3E,IAAA,YAAA,GAAe,OAAO,MAAA,IAAU,EAAA;AAEhC,IAAA,MAAM,UAAA,GAAc,OAAgD,KAAA,EAAO,WAAA;AAC3E,IAAA,IAAI,OAAO,UAAA,KAAe,QAAA,EAAU,UAAA,IAAc,UAAA;AAElD,IAAA,IAAI,WAAU,EAAG;AACf,MAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,MAAA,EAAQ,QAAA,EAAU,QAAQ,yBAAA,EAA0B;AACnF,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,QAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AACA,IAAA,MAAM,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,SAAS,YAAA,EAAa;AAE5D,IAAA,MAAM,YAA0B,EAAC;AACjC,IAAA,IAAI,OAAA,EAAS,UAAA,KAAe,MAAA,EAAW,SAAA,CAAU,aAAa,OAAA,CAAQ,UAAA;AACtE,IAAA,IAAI,OAAA,EAAS,WAAA,KAAgB,MAAA,EAAW,SAAA,CAAU,SAAS,OAAA,CAAQ,WAAA;AAEnE,IAAA,IAAI,OAAA,EAAS,UAAA,KAAe,MAAA,EAAW,SAAA,CAAU,aAAa,OAAA,CAAQ,UAAA;AACtE,IAAA,MAAM,QAAA,GAAyB,EAAE,IAAA,EAAM,YAAA,EAAa;AACpD,IAAA,IAAI,OAAA,EAAS,QAAA,KAAa,MAAA,EAAW,QAAA,CAAS,WAAW,OAAA,CAAQ,QAAA;AACjE,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,UAAU,SAAS,CAAA;AACrD,IAAA,MAAM;AAAA,MACJ,IAAA,EAAM,eAAA;AAAA,MACN,IAAA;AAAA,MACA,SAAS,QAAA,CAAS,OAAA;AAAA,MAClB,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,aAAa,QAAA,CAAS;AAAA,KACxB;AAEA,IAAA,IAAI,SAAS,WAAA,EAAa;AACxB,MAAA,mBAAA,IAAuB,CAAA;AACvB,MAAA,IAAI,uBAAuB,QAAA,EAAU;AACnC,QAAA,MAAM;AAAA,UACJ,IAAA,EAAM,eAAA;AAAA,UACN,MAAA,EAAQ,QAAA;AAAA,UACR,MAAA,EAAQ,+BAA+B,mBAAmB,CAAA,yBAAA;AAAA,SAC5D;AACA,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ,QAAA;AAAA,UACR,SAAA,EAAW,IAAA;AAAA,UACX,UAAA;AAAA,UACA,eAAe,YAAA,IAAgB;AAAA,SACjC;AAAA,MACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,mBAAA,GAAsB,CAAA;AAAA,IACxB;AAEA,IAAA,IAAI,QAAA,CAAS,YAAY,MAAA,EAAQ;AAC/B,MAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,QAAQ,WAAA,EAAa,MAAA,EAAQ,SAAS,MAAA,EAAO;AAC5E,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,WAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AAKA,IAAA,IAAI,QAAA,CAAS,YAAY,SAAA,EAAW;AAClC,MAAA,MAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,QAAQ,SAAA,EAAW,MAAA,EAAQ,SAAS,MAAA,EAAO;AAC1E,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,SAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AACA,IAAA,IAAI,QAAA,CAAS,YAAY,SAAA,EAAW;AAClC,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,WAAA;AAAA,QACR,MAAA,EAAQ,CAAA,SAAA,EAAY,QAAA,CAAS,MAAM,CAAA;AAAA,OACrC;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,WAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AAGA,IAAA,IAAI,WAAA,KAAgB,MAAA,IAAa,UAAA,IAAc,WAAA,EAAa;AAC1D,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,gBAAA;AAAA,QACR,MAAA,EAAQ,CAAA,cAAA,EAAiB,WAAW,CAAA,WAAA,EAAc,UAAU,CAAA,KAAA;AAAA,OAC9D;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,gBAAA;AAAA,QACR,SAAA,EAAW,IAAA;AAAA,QACX,UAAA;AAAA,QACA,eAAe,YAAA,IAAgB;AAAA,OACjC;AAAA,IACF;AAEA,IAAA,MAAM,EAAE,IAAA,EAAM,cAAA,EAAgB,IAAA,EAAM,QAAQ,kBAAA,EAAmB;AAAA,EACjE;AAEA,EAAA,MAAM;AAAA,IACJ,IAAA,EAAM,eAAA;AAAA,IACN,MAAA,EAAQ,QAAA;AAAA,IACR,MAAA,EAAQ,cAAc,QAAQ,CAAA,WAAA;AAAA,GAChC;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,QAAA;AAAA,IACR,SAAA,EAAW,IAAA;AAAA,IACX,UAAA;AAAA,IACA,eAAe,YAAA,IAAgB;AAAA,GACjC;AACF;AASO,SAAS,mBAAA,CAAoB,MAAc,YAAA,EAA8B;AAI9E,EAAA,OAAO;AAAA,IACLA,0CAAA;AAAA,IACA,0CAAA;AAAA,IACA,EAAA;AAAA,IACA,CAAA;AAAA,EAAgB,IAAI;AAAA,YAAA,CAAA;AAAA,IACpB,EAAA;AAAA,IACA,wBAAA;AAAA,IACA,kGAAA;AAAA,IACA,mGAAA;AAAA,IACA,2BAAA;AAAA,IACA,EAAA;AAAA,IACA,qBAAA;AAAA,IACA,kGAAA;AAAA,IACA,uGAAA;AAAA,IACA,EAAA;AAAA,IACA,mBAAA;AAAA,IACA,uGAAA;AAAA,IACA,oGAAA;AAAA,IACA,EAAA;AAAA,IACA,CAAA;AAAA,EAA4B,YAAA,CAAa,KAAA,CAAM,IAAK,CAAC,CAAA;AAAA,GACvD,CAAE,KAAK,IAAI,CAAA;AACb","file":"run-until-ZZ2JLPJM.cjs","sourcesContent":["/**\n * Goal-driven Ralph loop (T3.2, ADRs D115-D121).\n *\n * `runUntilImpl` is an `AsyncGenerator<GoalEvent, GoalResult, void>`:\n * yields events as the loop progresses, returns the final result when\n * the goal completes, fails, or is paused. The auxiliary judge model is\n * injected via `deps.judge` so the generator stays free of the `Agent`\n * façade import.\n *\n * EC-C fix: pre-aborted signals emit only `[paused]`, not `[active, paused]`.\n * EC-D: `maxTurns: 0` is supported (vacuous yield active → failed).\n *\n * @internal\n */\n\nimport type { SDKAgent } from \"../../../types/agent.js\";\nimport type {\n  GoalEvent,\n  GoalOptions,\n  GoalResult,\n  JudgeResult,\n} from \"../../../types/goal-events.js\";\nimport type { JudgeContext, JudgeOptions } from \"../../judge/judge-call.js\";\nimport { GOAL_CONTINUATION_MARKER } from \"./goal-marker.js\";\n\n/** DI contract: the judge is the only external touchpoint. */\nexport interface RunUntilDeps {\n  judge: (ctx: JudgeContext, opts?: JudgeOptions) => Promise<JudgeResult>;\n}\n\n// biome-ignore lint/complexity/noExcessiveCognitiveComplexity: the goal-loop interleaves turn-start, send, judge, continuation, abort-check, and failure-bail — extracting helpers harms the linear narrative.\nexport async function* runUntilImpl(\n  agent: SDKAgent,\n  goal: string,\n  options: GoalOptions | undefined,\n  deps: RunUntilDeps,\n): AsyncGenerator<GoalEvent, GoalResult, void> {\n  const maxTurns = options?.maxTurns ?? 20;\n  const maxFails = options?.maxConsecutiveJudgeFailures ?? 3;\n  const tokenBudget = options?.tokenBudget; // M55 — undefined ⇒ ilimitado\n  const signal = options?.signal;\n  // Use a function (not direct property access) so TS does not narrow\n  // `signal.aborted` to `false | undefined` after the initial check.\n  // AbortSignal.aborted is a getter that can flip true between calls.\n  // biome-ignore lint/complexity/useOptionalChain: optional-chain would re-narrow signal?.aborted to `false | undefined` after the first check, defeating the purpose of this helper.\n  const isAborted = (): boolean => signal !== undefined && signal.aborted;\n  let turn = 0;\n  let consecutiveFailures = 0;\n  let tokensUsed = 0; // M55 — soma observada (0 se usage ausente — fail-open)\n  let lastResponse = \"\";\n\n  // EC-C: signal already aborted BEFORE first event → emit only [paused].\n  if (isAborted()) {\n    yield {\n      type: \"status_change\",\n      status: \"paused\",\n      reason: \"aborted via AbortSignal before first turn\",\n    };\n    return { status: \"paused\", turnsUsed: 0, tokensUsed, finalResponse: undefined };\n  }\n\n  yield { type: \"status_change\", status: \"active\", reason: \"Goal started\" };\n\n  while (turn < maxTurns) {\n    if (isAborted()) {\n      yield { type: \"status_change\", status: \"paused\", reason: \"aborted via AbortSignal\" };\n      return {\n        status: \"paused\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n\n    turn += 1;\n    yield { type: \"turn_start\", turn, goal };\n\n    const continuationPrompt = turn === 1 ? goal : composeContinuation(goal, lastResponse);\n\n    const run = await agent.send(continuationPrompt);\n    // M55 review HIGH — thread the abort INTO the in-flight run: without this, Esc mid-turn is\n    // cosmetic (the turn keeps mutating the workspace until it finishes on its own). `run.cancel()`\n    // aborts the stream + in-flight tool calls (types/run.ts contract).\n    const cancelOnAbort = (): void => {\n      void (run as { cancel?: () => Promise<void> }).cancel?.();\n    };\n    if (signal !== undefined) {\n      if (signal.aborted) cancelOnAbort();\n      else signal.addEventListener(\"abort\", cancelOnAbort, { once: true });\n    }\n    const result = await run.wait();\n    if (signal !== undefined) signal.removeEventListener(\"abort\", cancelOnAbort);\n    lastResponse = result.result ?? \"\";\n    // M55 — token accounting fail-open: só soma quando o run reporta usage.\n    const turnTokens = (result as { usage?: { totalTokens?: number } }).usage?.totalTokens;\n    if (typeof turnTokens === \"number\") tokensUsed += turnTokens;\n    // Re-check aborted right after the turn lands: a cancelled turn must NOT spend a judge call.\n    if (isAborted()) {\n      yield { type: \"status_change\", status: \"paused\", reason: \"aborted via AbortSignal\" };\n      return {\n        status: \"paused\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n    yield { type: \"agent_response\", turn, content: lastResponse };\n\n    const judgeOpts: JudgeOptions = {};\n    if (options?.judgeModel !== undefined) judgeOpts.judgeModel = options.judgeModel;\n    if (options?.judgeApiKey !== undefined) judgeOpts.apiKey = options.judgeApiKey;\n    // M80 — encaminha o modelo do agente conduzido para o judge derivar quando `judgeModel` é omitido.\n    if (options?.agentModel !== undefined) judgeOpts.agentModel = options.agentModel;\n    const judgeCtx: JudgeContext = { goal, lastResponse };\n    if (options?.subgoals !== undefined) judgeCtx.subgoals = options.subgoals;\n    const judgment = await deps.judge(judgeCtx, judgeOpts);\n    yield {\n      type: \"judge_verdict\",\n      turn,\n      verdict: judgment.verdict,\n      reason: judgment.reason,\n      parseFailed: judgment.parseFailed,\n    };\n\n    if (judgment.parseFailed) {\n      consecutiveFailures += 1;\n      if (consecutiveFailures >= maxFails) {\n        yield {\n          type: \"status_change\",\n          status: \"failed\",\n          reason: `judge model too unreliable (${consecutiveFailures} parse failures in a row)`,\n        };\n        return {\n          status: \"failed\",\n          turnsUsed: turn,\n          tokensUsed,\n          finalResponse: lastResponse || undefined,\n        };\n      }\n    } else {\n      consecutiveFailures = 0;\n    }\n\n    if (judgment.verdict === \"done\") {\n      yield { type: \"status_change\", status: \"completed\", reason: judgment.reason };\n      return {\n        status: \"completed\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n    // M80 — o braço que faltava. Sem ele, um judge que reconhecesse impossibilidade só podia dizer\n    // \"continue\", e o loop repetia o mesmo turno até estourar o orçamento — reportando `failed` por\n    // limite em vez de `blocked` por impossibilidade. Duas causas distintas com o mesmo desfecho\n    // visível, e o consumidor precisava reconciliar depois do loop para distingui-las.\n    if (judgment.verdict === \"blocked\") {\n      yield { type: \"status_change\", status: \"blocked\", reason: judgment.reason };\n      return {\n        status: \"blocked\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n    if (judgment.verdict === \"skipped\") {\n      yield {\n        type: \"status_change\",\n        status: \"completed\",\n        reason: `skipped: ${judgment.reason}`,\n      };\n      return {\n        status: \"completed\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n\n    // M55 — checagem de token budget APÓS o turno (Codex: wind-down suave, para o loop).\n    if (tokenBudget !== undefined && tokensUsed >= tokenBudget) {\n      yield {\n        type: \"status_change\",\n        status: \"budget_limited\",\n        reason: `token budget (${tokenBudget}) reached: ${tokensUsed} used`,\n      };\n      return {\n        status: \"budget_limited\",\n        turnsUsed: turn,\n        tokensUsed,\n        finalResponse: lastResponse || undefined,\n      };\n    }\n\n    yield { type: \"continuation\", turn, prompt: continuationPrompt };\n  }\n\n  yield {\n    type: \"status_change\",\n    status: \"failed\",\n    reason: `max turns (${maxTurns}) exhausted`,\n  };\n  return {\n    status: \"failed\",\n    turnsUsed: turn,\n    tokensUsed,\n    finalResponse: lastResponse || undefined,\n  };\n}\n\n/**\n * Build the continuation user message for turns 2+. Keeps last response\n * preview short so we don't bloat the prompt cache.\n *\n * @internal\n */\n\nexport function composeContinuation(goal: string, lastResponse: string): string {\n  // M55 — Codex-faithful continuation (ext/goal templates/goals/continuation.md): keep the FULL\n  // objective intact, work from current-state evidence, and audit completion requirement-by-requirement\n  // before declaring done. Improves the quality of what the judge then evaluates.\n  return [\n    GOAL_CONTINUATION_MARKER,\n    \"Continue working toward the active goal.\",\n    \"\",\n    `<objective>\\n${goal}\\n</objective>`,\n    \"\",\n    \"Continuation behavior:\",\n    \"- This goal persists across turns. Keep the full objective intact; if it cannot be finished now,\",\n    \"  make concrete progress toward the real requested end state and do not redefine success around a\",\n    \"  smaller or easier task.\",\n    \"\",\n    \"Work from evidence:\",\n    \"- Use the current worktree and external state as authoritative. Inspect the current state before\",\n    \"  relying on it. Improve, replace, or remove existing work as needed to satisfy the actual objective.\",\n    \"\",\n    \"Completion audit:\",\n    \"- Before deciding the goal is achieved, treat completion as unproven and verify it against the actual\",\n    \"  current state, requirement by requirement. Treat uncertain or indirect evidence as not achieved.\",\n    \"\",\n    `Your last response was:\\n${lastResponse.slice(-1000)}`,\n  ].join(\"\\n\");\n}\n"]}

package/dist/server/auth/index.d.cts

@@ -1,15 +1,211 @@
+import { IncomingMessage, ServerResponse } from 'node:http';
+
 /**
- * @theokit/sdk/server/auth — public barrel
+ * @theokit/sdk/server/auth — typed error classes
  *
- * Per ADR D6 (sub-path export) — consumers import via `@theokit/sdk/server/auth`
- * NOT main `@theokit/sdk` barrel. Tree-shaking + allows breaking changes in
- * auth surface without affecting Agent runtime consumers.
+ * Plan T1.2 + v1.1 EC-1 (AuthCancelledError for OAuth provider error response RFC 6749 §4.1.2.1).
+ */
+/**
+ * Thrown at `defineAuth()` time when configuration is invalid
+ * (e.g., duplicate provider name, invalid email shape per EC-V1-12).
+ */
+declare class AuthConfigError extends Error {
+    readonly name = "AuthConfigError";
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Thrown at `startSignIn(providerName, ...)` or `finishSignIn(providerName, ...)`
+ * when the named provider is not registered in `providers[]`.
+ */
+declare class AuthProviderNotFoundError extends Error {
+    readonly name = "AuthProviderNotFoundError";
+    readonly providerName: string;
+    constructor(providerName: string);
+}
+/**
+ * Thrown during OAuth callback handling for state mismatches, expired
+ * transactions, missing query params, or provider 4xx/5xx errors.
+ *
+ * Typed `code` field lets consumers branch on cause:
+ *   - 'oauth_transaction_expired' — cookie tx > 10min old (per ADR D5)
+ *   - 'oauth_state_mismatch' — query state ≠ cookie state (CSRF defense per RFC 6749 §10.12)
+ *   - 'oauth_provider_error' — non-access_denied error in callback URL
+ *   - 'oauth_token_exchange_failed' — provider rejected code-for-tokens swap
+ *   - 'oauth_userinfo_failed' — userinfo endpoint returned error
+ *   - 'oauth_missing_code_or_state' — required query params absent
+ */
+declare class AuthCallbackError extends Error {
+    readonly name: string;
+    readonly code: string;
+    constructor(code: string, message?: string);
+}
+/**
+ * Per v1.1 EC-1 MUST FIX — typed subclass of AuthCallbackError for the
+ * specific case where user declined consent at provider screen.
+ *
+ * OAuth 2.0 RFC 6749 §4.1.2.1: provider redirects with `?error=access_denied`.
+ * Apps can catch this distinctly from network/server errors to render
+ * "Login cancelled — try again" UX instead of opaque "callback failed".
+ */
+declare class AuthCancelledError extends AuthCallbackError {
+    readonly name: string;
+    readonly errorDescription?: string;
+    constructor(errorDescription?: string);
+}
+
+/**
+ * @theokit/sdk/server/auth — orchestrator types (Caminho C Hybrid per G11)
+ *
+ * Plan: g11-auth-architecture-implementation v1.4 (sha256 4d381020...)
+ * Blueprint: g11-auth-architecture-decision v1.1 (SHIPPABLE 97.9)
+ * AUTH-DELEGATION lock (theokit/CLAUDE.md:217-225) — these types are the
+ * orchestrator contract; concrete OAuth/email providers ship in opt-in
+ * @theokit/auth-* packages (adapters layer per ADR D11).
+ */
+
+/**
+ * SessionManager contract (matches theokit/packages/theo/src/server/auth/session.ts:49).
+ * Imported as type-only — runtime depends via peerDep `theokit@>=0.2.4`.
+ */
+interface SessionManager<TSession> {
+    getSession(req: IncomingMessage): Promise<TSession | null>;
+    createSession(res: ServerResponse, data: TSession): Promise<void>;
+    destroySession(res: ServerResponse): void;
+    rotateSession(req: IncomingMessage, res: ServerResponse): Promise<TSession | null>;
+}
+/**
+ * Per ADR D5 — OAuth transaction state stored in encrypted HttpOnly cookie
+ * (cookie-state pattern). Expires within 10 minutes per invariant.
+ */
+interface OAuthTransaction {
+    state: string;
+    pkceVerifier?: string;
+    returnTo?: string;
+    createdAt: number;
+    expiresAt: number;
+}
+/**
+ * Per ADR D9 — provider profile types are provider-specific (not unified).
+ * Each @theokit/auth-* package exports its own profile shape.
+ * Generic param TProfile lets consumers narrow via discriminated unions on providerName.
+ */
+interface AuthResult<TProfile, TName extends string = string> {
+    profile: TProfile;
+    providerName: TName;
+    rawTokens?: {
+        accessToken: string;
+        refreshToken?: string;
+        idToken?: string;
+        expiresAt?: number;
+    };
+}
+/**
+ * Provider contract — each @theokit/auth-* package implements this.
+ * Per blueprint Q5 + ADR D11 (adapters layer).
+ */
+interface AuthProvider<TProfile, TName extends string = string> {
+    name: TName;
+    createAuthorizationURL(tx: OAuthTransaction): URL | Promise<URL>;
+    handleCallback(req: IncomingMessage, tx: OAuthTransaction): Promise<AuthResult<TProfile, TName>>;
+}
+/**
+ * `defineAuth(opts)` configuration shape — Caminho C (Hybrid).
+ * `providers` optional: empty = Caminho A escape hatch (manual signIn only).
+ * `onSignIn` invoked after provider callback success; returns TSession to persist.
+ */
+interface DefineAuthOptions<TSession> {
+    session: SessionManager<TSession>;
+    providers?: AuthProvider<unknown, string>[];
+    onSignIn?: <TProfile>(args: {
+        profile: TProfile;
+        provider: string;
+    }) => Promise<TSession>;
+    onSignOut?: (session: TSession | null) => Promise<void> | void;
+}
+/**
+ * Returned by `defineAuth<TSession>(opts)` — 5-method orchestrator surface.
+ *
+ * - startSignIn: returns Response.redirect to provider authorization URL with state cookie
+ * - finishSignIn: handles provider callback; verifies state; calls onSignIn; rotates session ID
+ *   (OWASP A07:2021 per EC-10); creates session cookie; clears transaction cookie
+ * - signIn: Caminho A escape hatch — skip OAuth flow; directly persist session from external profile
+ * - signOut: destroys session cookie + invokes onSignOut callback
+ * - getSession: read-only passthrough to session.getSession
+ */
+interface AuthOrchestrator<TSession> {
+    startSignIn(providerName: string, req: IncomingMessage, opts?: {
+        returnTo?: string;
+    }): Promise<Response>;
+    finishSignIn(providerName: string, req: IncomingMessage, res: ServerResponse): Promise<{
+        session: TSession;
+        returnTo?: string;
+    }>;
+    signIn<TProfile>(profile: TProfile, providerName: string, req: IncomingMessage, res: ServerResponse): Promise<TSession>;
+    signOut(res: ServerResponse): void | Promise<void>;
+    getSession(req: IncomingMessage): Promise<TSession | null>;
+}
+
+/**
+ * @theokit/sdk/server/auth — encrypted OAuth transaction cookie store
+ *
+ * Per ADR D5 — cookie-state pattern (no Redis/db dependency in core).
+ *
+ * Stores OAuthTransaction (state + pkceVerifier + returnTo + expiry) in a
+ * single signed+encrypted HttpOnly cookie. Stateless, works in edge/serverless.
+ *
+ * Cookie name: `__Host-theo_oauth_tx` (T5.3 — RFC 6265bis prefix)
+ * Lifetime: 10 minutes (per D5 invariant)
+ * Encryption: AES-256-GCM via Node's webcrypto subtle API
+ *
+ * Note: this is a minimal in-package implementation. Production deployments
+ * may prefer using `theokit/server/auth/crypto`'s encrypt/decrypt helpers
+ * via the SessionManager's existing secret rotation chain. For T1.2 we keep
+ * it self-contained to avoid cross-package peer-dep complexity; T2+ may
+ * refactor to share SessionManager's encrypt path.
+ */
+
+/**
+ * T5.1 — Typed error thrown when an OAuth tx-cookie secret has < 32
+ * bytes of entropy. Surfaces the actual byte length so operators can
+ * diagnose mis-configured env vars without leaking the secret itself.
+ *
+ * @public
+ */
+declare class AuthSecretTooShortError extends Error {
+    readonly name = "AuthSecretTooShortError";
+    constructor(actualBytes: number);
+}
+
+/**
+ * @theokit/sdk/server/auth — defineAuth orchestrator runtime (Caminho C Hybrid)
+ *
+ * Plan T1.2 implementation per blueprint Q5 § Caminho C signatures.
+ * Composes existing primitives + the v1.1 EC-1/EC-2/EC-10 fixes.
+ */
+
+/** SE36 — `Auth.create` replaces `defineAuth` (ADR 0015). @public */
+declare class Auth {
+    private constructor();
+    static create<TSession>(opts: DefineAuthOptions<TSession>): AuthOrchestrator<TSession>;
+}
+
+/**
+ * @theokit/sdk/server/auth — same-origin returnTo validator
+ *
+ * Per v1.1 EC-2 MUST FIX — OWASP A01:2021 open-redirect mitigation.
+ *
+ * Without this check, attacker craft `/login?returnTo=https://evil.com` would
+ * cause post-login redirect to attacker domain with authenticated session cookie.
  *
- * T1.1 shipped types-only.
- * T1.2 adds runtime: defineAuth() + 4 typed error classes + validateReturnTo helper.
+ * Rules:
+ *   - undefined/empty returnTo → default '/'
+ *   - protocol-relative `//evil.com` → default '/' (URL parser would resolve to baseUrl protocol)
+ *   - absolute URL with origin ≠ baseUrl.origin → default '/' (cross-origin redirect)
+ *   - absolute URL with origin === baseUrl.origin → keep (same-origin allowed)
+ *   - relative path starting with '/' → keep (same-app navigation)
+ *   - relative path not starting with '/' → default '/' (defensive)
  */
-export { AuthCallbackError, AuthCancelledError, AuthConfigError, AuthProviderNotFoundError, } from "./errors.js";
-export { AuthSecretTooShortError } from "./oauth-transaction-store.js";
-export { Auth } from "./orchestrator.js";
-export type { AuthOrchestrator, AuthProvider, AuthResult, DefineAuthOptions, OAuthTransaction, SessionManager, } from "./types.js";
-export { validateReturnTo } from "./validate-return-to.js";
+declare function validateReturnTo(returnTo: string | undefined, baseUrl: URL): string;
+
+export { Auth, AuthCallbackError, AuthCancelledError, AuthConfigError, type AuthOrchestrator, type AuthProvider, AuthProviderNotFoundError, type AuthResult, AuthSecretTooShortError, type DefineAuthOptions, type OAuthTransaction, type SessionManager, validateReturnTo };

package/dist/server/auth/index.d.ts

@@ -1,15 +1,211 @@
+import { IncomingMessage, ServerResponse } from 'node:http';
+
 /**
- * @theokit/sdk/server/auth — public barrel
+ * @theokit/sdk/server/auth — typed error classes
  *
- * Per ADR D6 (sub-path export) — consumers import via `@theokit/sdk/server/auth`
- * NOT main `@theokit/sdk` barrel. Tree-shaking + allows breaking changes in
- * auth surface without affecting Agent runtime consumers.
+ * Plan T1.2 + v1.1 EC-1 (AuthCancelledError for OAuth provider error response RFC 6749 §4.1.2.1).
+ */
+/**
+ * Thrown at `defineAuth()` time when configuration is invalid
+ * (e.g., duplicate provider name, invalid email shape per EC-V1-12).
+ */
+declare class AuthConfigError extends Error {
+    readonly name = "AuthConfigError";
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Thrown at `startSignIn(providerName, ...)` or `finishSignIn(providerName, ...)`
+ * when the named provider is not registered in `providers[]`.
+ */
+declare class AuthProviderNotFoundError extends Error {
+    readonly name = "AuthProviderNotFoundError";
+    readonly providerName: string;
+    constructor(providerName: string);
+}
+/**
+ * Thrown during OAuth callback handling for state mismatches, expired
+ * transactions, missing query params, or provider 4xx/5xx errors.
+ *
+ * Typed `code` field lets consumers branch on cause:
+ *   - 'oauth_transaction_expired' — cookie tx > 10min old (per ADR D5)
+ *   - 'oauth_state_mismatch' — query state ≠ cookie state (CSRF defense per RFC 6749 §10.12)
+ *   - 'oauth_provider_error' — non-access_denied error in callback URL
+ *   - 'oauth_token_exchange_failed' — provider rejected code-for-tokens swap
+ *   - 'oauth_userinfo_failed' — userinfo endpoint returned error
+ *   - 'oauth_missing_code_or_state' — required query params absent
+ */
+declare class AuthCallbackError extends Error {
+    readonly name: string;
+    readonly code: string;
+    constructor(code: string, message?: string);
+}
+/**
+ * Per v1.1 EC-1 MUST FIX — typed subclass of AuthCallbackError for the
+ * specific case where user declined consent at provider screen.
+ *
+ * OAuth 2.0 RFC 6749 §4.1.2.1: provider redirects with `?error=access_denied`.
+ * Apps can catch this distinctly from network/server errors to render
+ * "Login cancelled — try again" UX instead of opaque "callback failed".
+ */
+declare class AuthCancelledError extends AuthCallbackError {
+    readonly name: string;
+    readonly errorDescription?: string;
+    constructor(errorDescription?: string);
+}
+
+/**
+ * @theokit/sdk/server/auth — orchestrator types (Caminho C Hybrid per G11)
+ *
+ * Plan: g11-auth-architecture-implementation v1.4 (sha256 4d381020...)
+ * Blueprint: g11-auth-architecture-decision v1.1 (SHIPPABLE 97.9)
+ * AUTH-DELEGATION lock (theokit/CLAUDE.md:217-225) — these types are the
+ * orchestrator contract; concrete OAuth/email providers ship in opt-in
+ * @theokit/auth-* packages (adapters layer per ADR D11).
+ */
+
+/**
+ * SessionManager contract (matches theokit/packages/theo/src/server/auth/session.ts:49).
+ * Imported as type-only — runtime depends via peerDep `theokit@>=0.2.4`.
+ */
+interface SessionManager<TSession> {
+    getSession(req: IncomingMessage): Promise<TSession | null>;
+    createSession(res: ServerResponse, data: TSession): Promise<void>;
+    destroySession(res: ServerResponse): void;
+    rotateSession(req: IncomingMessage, res: ServerResponse): Promise<TSession | null>;
+}
+/**
+ * Per ADR D5 — OAuth transaction state stored in encrypted HttpOnly cookie
+ * (cookie-state pattern). Expires within 10 minutes per invariant.
+ */
+interface OAuthTransaction {
+    state: string;
+    pkceVerifier?: string;
+    returnTo?: string;
+    createdAt: number;
+    expiresAt: number;
+}
+/**
+ * Per ADR D9 — provider profile types are provider-specific (not unified).
+ * Each @theokit/auth-* package exports its own profile shape.
+ * Generic param TProfile lets consumers narrow via discriminated unions on providerName.
+ */
+interface AuthResult<TProfile, TName extends string = string> {
+    profile: TProfile;
+    providerName: TName;
+    rawTokens?: {
+        accessToken: string;
+        refreshToken?: string;
+        idToken?: string;
+        expiresAt?: number;
+    };
+}
+/**
+ * Provider contract — each @theokit/auth-* package implements this.
+ * Per blueprint Q5 + ADR D11 (adapters layer).
+ */
+interface AuthProvider<TProfile, TName extends string = string> {
+    name: TName;
+    createAuthorizationURL(tx: OAuthTransaction): URL | Promise<URL>;
+    handleCallback(req: IncomingMessage, tx: OAuthTransaction): Promise<AuthResult<TProfile, TName>>;
+}
+/**
+ * `defineAuth(opts)` configuration shape — Caminho C (Hybrid).
+ * `providers` optional: empty = Caminho A escape hatch (manual signIn only).
+ * `onSignIn` invoked after provider callback success; returns TSession to persist.
+ */
+interface DefineAuthOptions<TSession> {
+    session: SessionManager<TSession>;
+    providers?: AuthProvider<unknown, string>[];
+    onSignIn?: <TProfile>(args: {
+        profile: TProfile;
+        provider: string;
+    }) => Promise<TSession>;
+    onSignOut?: (session: TSession | null) => Promise<void> | void;
+}
+/**
+ * Returned by `defineAuth<TSession>(opts)` — 5-method orchestrator surface.
+ *
+ * - startSignIn: returns Response.redirect to provider authorization URL with state cookie
+ * - finishSignIn: handles provider callback; verifies state; calls onSignIn; rotates session ID
+ *   (OWASP A07:2021 per EC-10); creates session cookie; clears transaction cookie
+ * - signIn: Caminho A escape hatch — skip OAuth flow; directly persist session from external profile
+ * - signOut: destroys session cookie + invokes onSignOut callback
+ * - getSession: read-only passthrough to session.getSession
+ */
+interface AuthOrchestrator<TSession> {
+    startSignIn(providerName: string, req: IncomingMessage, opts?: {
+        returnTo?: string;
+    }): Promise<Response>;
+    finishSignIn(providerName: string, req: IncomingMessage, res: ServerResponse): Promise<{
+        session: TSession;
+        returnTo?: string;
+    }>;
+    signIn<TProfile>(profile: TProfile, providerName: string, req: IncomingMessage, res: ServerResponse): Promise<TSession>;
+    signOut(res: ServerResponse): void | Promise<void>;
+    getSession(req: IncomingMessage): Promise<TSession | null>;
+}
+
+/**
+ * @theokit/sdk/server/auth — encrypted OAuth transaction cookie store
+ *
+ * Per ADR D5 — cookie-state pattern (no Redis/db dependency in core).
+ *
+ * Stores OAuthTransaction (state + pkceVerifier + returnTo + expiry) in a
+ * single signed+encrypted HttpOnly cookie. Stateless, works in edge/serverless.
+ *
+ * Cookie name: `__Host-theo_oauth_tx` (T5.3 — RFC 6265bis prefix)
+ * Lifetime: 10 minutes (per D5 invariant)
+ * Encryption: AES-256-GCM via Node's webcrypto subtle API
+ *
+ * Note: this is a minimal in-package implementation. Production deployments
+ * may prefer using `theokit/server/auth/crypto`'s encrypt/decrypt helpers
+ * via the SessionManager's existing secret rotation chain. For T1.2 we keep
+ * it self-contained to avoid cross-package peer-dep complexity; T2+ may
+ * refactor to share SessionManager's encrypt path.
+ */
+
+/**
+ * T5.1 — Typed error thrown when an OAuth tx-cookie secret has < 32
+ * bytes of entropy. Surfaces the actual byte length so operators can
+ * diagnose mis-configured env vars without leaking the secret itself.
+ *
+ * @public
+ */
+declare class AuthSecretTooShortError extends Error {
+    readonly name = "AuthSecretTooShortError";
+    constructor(actualBytes: number);
+}
+
+/**
+ * @theokit/sdk/server/auth — defineAuth orchestrator runtime (Caminho C Hybrid)
+ *
+ * Plan T1.2 implementation per blueprint Q5 § Caminho C signatures.
+ * Composes existing primitives + the v1.1 EC-1/EC-2/EC-10 fixes.
+ */
+
+/** SE36 — `Auth.create` replaces `defineAuth` (ADR 0015). @public */
+declare class Auth {
+    private constructor();
+    static create<TSession>(opts: DefineAuthOptions<TSession>): AuthOrchestrator<TSession>;
+}
+
+/**
+ * @theokit/sdk/server/auth — same-origin returnTo validator
+ *
+ * Per v1.1 EC-2 MUST FIX — OWASP A01:2021 open-redirect mitigation.
+ *
+ * Without this check, attacker craft `/login?returnTo=https://evil.com` would
+ * cause post-login redirect to attacker domain with authenticated session cookie.
  *
- * T1.1 shipped types-only.
- * T1.2 adds runtime: defineAuth() + 4 typed error classes + validateReturnTo helper.
+ * Rules:
+ *   - undefined/empty returnTo → default '/'
+ *   - protocol-relative `//evil.com` → default '/' (URL parser would resolve to baseUrl protocol)
+ *   - absolute URL with origin ≠ baseUrl.origin → default '/' (cross-origin redirect)
+ *   - absolute URL with origin === baseUrl.origin → keep (same-origin allowed)
+ *   - relative path starting with '/' → keep (same-app navigation)
+ *   - relative path not starting with '/' → default '/' (defensive)
  */
-export { AuthCallbackError, AuthCancelledError, AuthConfigError, AuthProviderNotFoundError, } from "./errors.js";
-export { AuthSecretTooShortError } from "./oauth-transaction-store.js";
-export { Auth } from "./orchestrator.js";
-export type { AuthOrchestrator, AuthProvider, AuthResult, DefineAuthOptions, OAuthTransaction, SessionManager, } from "./types.js";
-export { validateReturnTo } from "./validate-return-to.js";
+declare function validateReturnTo(returnTo: string | undefined, baseUrl: URL): string;
+
+export { Auth, AuthCallbackError, AuthCancelledError, AuthConfigError, type AuthOrchestrator, type AuthProvider, AuthProviderNotFoundError, type AuthResult, AuthSecretTooShortError, type DefineAuthOptions, type OAuthTransaction, type SessionManager, validateReturnTo };