@theokit/sdk 4.35.0 → 4.37.0

package/dist/{inject-session-SMH56NXP.cjs → inject-session-DM4SKTZO.cjs}

@@ -1,16 +1,16 @@
 'use strict';
 
-var chunkG4WI3VW2_cjs = require('./chunk-G4WI3VW2.cjs');
+var chunkH5YVJB4K_cjs = require('./chunk-H5YVJB4K.cjs');
 var chunkIT3PWBW4_cjs = require('./chunk-IT3PWBW4.cjs');
-var chunk2DYI7MIF_cjs = require('./chunk-2DYI7MIF.cjs');
-require('./chunk-TIZ4TS5V.cjs');
-require('./chunk-BEURCLDV.cjs');
+var chunkIEUDKUPM_cjs = require('./chunk-IEUDKUPM.cjs');
+require('./chunk-ICYBIC6N.cjs');
+require('./chunk-LTCOPATU.cjs');
 
 // src/internal/session/inject-session.ts
 async function injectSessionTurn(opts) {
-  await chunkG4WI3VW2_cjs.enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {
+  await chunkH5YVJB4K_cjs.enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {
     const prior = await opts.store.readRecords(opts.loc.agentId);
-    const transcript = chunk2DYI7MIF_cjs.SessionTranscript.fromRecords(prior, {
+    const transcript = chunkIEUDKUPM_cjs.SessionTranscript.fromRecords(prior, {
       cwd: opts.loc.cwd,
       sessionId: opts.sessionId,
       model: opts.loc.model ?? "unknown"
@@ -23,5 +23,5 @@ async function injectSessionTurn(opts) {
 }
 
 exports.injectSessionTurn = injectSessionTurn;
-//# sourceMappingURL=inject-session-SMH56NXP.cjs.map
-//# sourceMappingURL=inject-session-SMH56NXP.cjs.map
+//# sourceMappingURL=inject-session-DM4SKTZO.cjs.map
+//# sourceMappingURL=inject-session-DM4SKTZO.cjs.map

package/dist/{inject-session-SMH56NXP.cjs.map → inject-session-DM4SKTZO.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":["enqueueSessionWrite","SessionTranscript","invalidateSessionCache"],"mappings":";;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAMA,sCAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAaC,mCAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAAC,wCAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-SMH56NXP.cjs","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}
+{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":["enqueueSessionWrite","SessionTranscript","invalidateSessionCache"],"mappings":";;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAMA,sCAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAaC,mCAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAAC,wCAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-DM4SKTZO.cjs","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}

package/dist/{inject-session-V5FTK72N.js → inject-session-UXNJQTZ6.js}

@@ -1,8 +1,8 @@
-import { enqueueSessionWrite } from './chunk-7BTE3RXJ.js';
+import { enqueueSessionWrite } from './chunk-5SB4V74H.js';
 import { invalidateSessionCache } from './chunk-EEZ7CFMM.js';
-import { SessionTranscript } from './chunk-Q56IYTBZ.js';
-import './chunk-S2BBRVQX.js';
-import './chunk-JTFYYKDT.js';
+import { SessionTranscript } from './chunk-XAEAMI5H.js';
+import './chunk-56OXYUZE.js';
+import './chunk-TAPQWDW2.js';
 
 // src/internal/session/inject-session.ts
 async function injectSessionTurn(opts) {
@@ -21,5 +21,5 @@ async function injectSessionTurn(opts) {
 }
 
 export { injectSessionTurn };
-//# sourceMappingURL=inject-session-V5FTK72N.js.map
-//# sourceMappingURL=inject-session-V5FTK72N.js.map
+//# sourceMappingURL=inject-session-UXNJQTZ6.js.map
+//# sourceMappingURL=inject-session-UXNJQTZ6.js.map

package/dist/{inject-session-V5FTK72N.js.map → inject-session-UXNJQTZ6.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":[],"mappings":";;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAM,oBAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAa,iBAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAA,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-V5FTK72N.js","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}
+{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":[],"mappings":";;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAM,oBAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAa,iBAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAA,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-UXNJQTZ6.js","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}

package/dist/internal/diagnostics.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Canal único de diagnóstico da biblioteca — silencioso por padrão (#147).
+ *
+ * ## O problema
+ *
+ * O SDK escrevia diagnósticos direto em `process.stderr` a partir de caminhos quentes —
+ * 92 sítios em 51 arquivos sob `internal/`. Numa host de TUI (Ink, alternate screen), essas
+ * escritas se intercalam com o render e **corrompem o frame**. E o host não tinha como
+ * interceptá-las: não havia logger injetável. Um consumidor chegou a instalar
+ * `proper-lockfile` só para calar UMA delas.
+ *
+ * Uma biblioteca não pode assumir que `stdout`/`stderr` são sinks livres. Quem é dono do
+ * terminal é a aplicação, não a dependência.
+ *
+ * ## O contrato
+ *
+ * - **`setDiagnosticsSink(fn)`** entrega as mensagens à aplicação, que decide onde colocá-las
+ *   (uma linha de status, um arquivo, um painel). É o que faltava para uma TUI conviver com o SDK.
+ * - **Sem sink, vai para o `stderr`** — exatamente como antes desta mudança.
+ *
+ * ## Por que o padrão NÃO mudou (ainda), e isso é deliberado
+ *
+ * A #147 pede silêncio por padrão, e é o alvo certo. Mas **58 arquivos de teste** asseram hoje
+ * que estes diagnósticos chegam ao `stderr` — eles codificam o contrato "o aviso É emitido", que
+ * continua valendo e não deve ser perdido. Virar o padrão sem migrá-los reprovaria ~53 testes, e
+ * migrá-los às pressas, em quatro formas diferentes de espionar o `stderr`, é a receita para
+ * enfraquecer 58 suítes de uma vez.
+ *
+ * Então esta mudança entrega a metade que DESTRAVA o consumidor — o host de TUI agora consegue
+ * interceptar, que era o bloqueio relatado ("no way to intercept these; no injectable logger") — e
+ * deixa a virada do padrão como migração própria, com custo medido. Um host que quer silêncio
+ * hoje instala `setDiagnosticsSink(() => {})`.
+ *
+ * ## O que isto NÃO é
+ *
+ * Não é um logger com níveis, formatação ou destinos múltiplos. É o mínimo que resolve o
+ * bloqueio relatado; um logger completo aqui seria inventar requisito que ninguém pediu.
+ */
+/** Recebe cada mensagem de diagnóstico já formatada, com o `\n` final. */
+export type DiagnosticsSink = (message: string) => void;
+/**
+ * Instala (ou remove, passando `undefined`) o destino dos diagnósticos.
+ *
+ * Quando há sink, ele é o ÚNICO destino — o `stderr` não recebe cópia. Duplicar destinos
+ * devolveria o problema à TUI que instalou o sink justamente para tirar as mensagens do terminal.
+ */
+export declare function setDiagnosticsSink(next: DiagnosticsSink | undefined): void;
+/**
+ * Emite uma mensagem de diagnóstico da biblioteca.
+ *
+ * Substitui `process.stderr.write` nos caminhos internos. Nunca lança: um sink defeituoso não
+ * pode derrubar o run que ele apenas observa.
+ */
+export declare function diag(message: string): void;

package/dist/internal/local-agent/local-agent-invalidate.d.ts

@@ -1,8 +1 @@
-/**
- * `Agent.invalidateCache` helpers extracted from LocalAgent (T3.2 / T4.3,
- * ADR D94). Keeps `local-agent.ts` under the 400-LoC gate while providing
- * the deferred-vs-applyNow semantics + EC-7 failure-path cleanup.
- *
- * @internal
- */
 export {};

package/dist/internal/local-agent/local-agent-lifecycle.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Lifecycle helpers for {@link import("./local-agent.js").LocalAgent} — writer-lease
+ * acquisition/release, `dispose()` teardown, and `reload()` re-discovery.
+ *
+ * Extracted from `local-agent.ts` to keep that file under the 400-LoC guard (G8),
+ * mirroring `local-agent-runtime-extensions.ts`. The grouping is by CONCEPT, not by
+ * leftover: all four helpers below answer "what does this agent own outside a single
+ * run, and how is it handed back?" — the store lease, the pooled MCP clients, the
+ * pending disk writes, and the file-discovered submanagers.
+ *
+ * @internal
+ */
+export {};

package/dist/internal/local-agent/local-agent.d.ts

@@ -1,93 +1 @@
-import { type GenerateOptions, type GenerateRunResult } from "../../agent-generate.js";
-import type { AgentOptions, ModelSelection, SDKAgent, SDKArtifact } from "../../types/agent.js";
-import type { Run, SDKUserMessage, SendOptions } from "../../types/run.js";
-import type { PersonalityPreset } from "../personality/types.js";
-import type { ProvidersManagerImpl } from "../runtime/config/providers-manager.js";
-import type { FileContextManager } from "../runtime/context/context-manager.js";
-import { HooksExecutor } from "../runtime/hooks/hooks-executor.js";
-import type { PluginMetadata } from "../runtime/plugins/plugins-manager.js";
-import type { SkillsHandle } from "../runtime/skills/skills-manager.js";
-export declare class LocalAgent implements SDKAgent {
-    #private;
-    readonly agentId: string;
-    model: ModelSelection | undefined;
-    context?: FileContextManager;
-    providers?: ProvidersManagerImpl;
-    skills?: SkillsHandle;
-    plugins?: {
-        list: () => Promise<PluginMetadata[]>;
-    };
-    memory?: import("../../types/memory-adapter.js").AgentMemory;
-    private readonly options;
-    private readonly workspaceCwd;
-    /**
-     * SE40 — base dir for the native Claude-shaped session transcript. Default
-     * `~/.theokit`; set `local.baseDir: "~/.claude"` for Claude Code CLI interop.
-     */
-    private readonly transcriptBaseDir;
-    /**
-     * SE41 — the session record store. Defaults to the FS transcript store (byte-
-     * identical to SE40); `local.sessionStore` injects an external store (Postgres /
-     * Redis / KV) so resume works on serverless (ephemeral FS) and multi-host.
-     */
-    private readonly sessionStore;
-    /**
-     * D319: lifecycle AbortController fired on `dispose()`. Composed with the
-     * caller's `SendOptions.signal` via `anySignal` so the LLM `fetch()`
-     * aborts on either signal (user cancel OR dispose).
-     */
-    private readonly lifecycleAbortController;
-    private readonly settingSourcesIncludeProject;
-    private readonly settingSourcesIncludePlugins;
-    private resolvedSubagents;
-    private disposed;
-    private invalidationPending;
-    private readonly skillsManager;
-    private readonly pluginsManager;
-    private readonly hooksExecutor;
-    private readonly systemPromptPipeline;
-    private readonly memoryGlue;
-    private readonly personalityStore;
-    /** T0.1 — telemetry handle shared with sendLocked + memory recall path. */
-    private readonly _telemetry;
-    constructor(options: AgentOptions);
-    initialize(): Promise<void>;
-    /** Expose the hooks executor so the agent loop can fire PreToolUse/etc. */
-    hooks(): HooksExecutor;
-    generate<T extends import("zod").ZodType>(message: string | SDKUserMessage, options: GenerateOptions<T>): Promise<GenerateRunResult<import("zod").z.infer<T>>>;
-    send(message: string | SDKUserMessage, options?: SendOptions): Promise<Run>;
-    private runLockedSendCycle;
-    private sendLocked;
-    private assemblyInputs;
-    private resolveSystemPrompt;
-    private applyModelOverride;
-    private runPreHook;
-    private dispatchRun;
-    close(): void;
-    reload(): Promise<void>;
-    dispose(): Promise<void>;
-    [Symbol.asyncDispose](): Promise<void>;
-    /**
-     * Activate a personality preset (Hermes #26, ADRs D160-D164).
-     *
-     * Reserved names `none`, `default`, `neutral` clear the active preset.
-     *
-     * - `opts.save: true` → persist across process restarts (delete on clear,
-     *   never write null — EC-B).
-     * - `opts.reset: true` → also clear session history (preserves by default).
-     *
-     * Always invalidates the prompt cache (D94 deferred default).
-     *
-     * @public
-     */
-    usePersonality(name: string, opts?: {
-        save?: boolean;
-        reset?: boolean;
-    }): Promise<PersonalityPreset | null>;
-    listArtifacts(): Promise<SDKArtifact[]>;
-    downloadArtifact(_path: string): Promise<Buffer>;
-    runUntil(goal?: string, options?: import("../../types/goal-events.js").GoalOptions): import("../../types/goal-events.js").RunUntilIterator;
-    fork(options: import("../runtime/lifecycle/fork-agent.js").ForkOptions): Promise<import("../runtime/lifecycle/fork-agent.js").ForkResult>;
-    runToCompletion(message: string, options?: import("../../types/run.js").RunToCompletionOptions): Promise<import("../../types/run.js").RunToCompletionResult>;
-    streamToCompletion(message: string, options?: import("../../types/run.js").RunToCompletionOptions): AsyncGenerator<import("../../types/messages.js").SDKMessage, import("../../types/run.js").StreamToCompletionResult>;
-}
+export {};

package/dist/internal/persistence/index.cjs

@@ -1,13 +1,13 @@
 'use strict';
 
 var chunkPNVDQL5Y_cjs = require('../../chunk-PNVDQL5Y.cjs');
-var chunk6M6A6WWW_cjs = require('../../chunk-6M6A6WWW.cjs');
-var chunkCJVMDRQB_cjs = require('../../chunk-CJVMDRQB.cjs');
-var chunkJD74LN7R_cjs = require('../../chunk-JD74LN7R.cjs');
+var chunkD4ZUJTFB_cjs = require('../../chunk-D4ZUJTFB.cjs');
+var chunkTQI3KRXZ_cjs = require('../../chunk-TQI3KRXZ.cjs');
+var chunkFK4EJD2I_cjs = require('../../chunk-FK4EJD2I.cjs');
 var chunkYLQQX5W2_cjs = require('../../chunk-YLQQX5W2.cjs');
-var chunkTIZ4TS5V_cjs = require('../../chunk-TIZ4TS5V.cjs');
-require('../../chunk-A44COQJJ.cjs');
-require('../../chunk-BEURCLDV.cjs');
+var chunkICYBIC6N_cjs = require('../../chunk-ICYBIC6N.cjs');
+require('../../chunk-MHCKWQR3.cjs');
+require('../../chunk-LTCOPATU.cjs');
 var promises = require('fs/promises');
 
 async function createExclusive(path, data, options) {
@@ -41,67 +41,67 @@ Object.defineProperty(exports, "PersistenceSchema", {
 });
 Object.defineProperty(exports, "displayTheokitHome", {
   enumerable: true,
-  get: function () { return chunk6M6A6WWW_cjs.displayTheokitHome; }
+  get: function () { return chunkD4ZUJTFB_cjs.displayTheokitHome; }
 });
 Object.defineProperty(exports, "getProfilesRoot", {
   enumerable: true,
-  get: function () { return chunk6M6A6WWW_cjs.getProfilesRoot; }
+  get: function () { return chunkD4ZUJTFB_cjs.getProfilesRoot; }
 });
 Object.defineProperty(exports, "getTheokitHome", {
   enumerable: true,
-  get: function () { return chunk6M6A6WWW_cjs.getTheokitHome; }
+  get: function () { return chunkD4ZUJTFB_cjs.getTheokitHome; }
 });
 Object.defineProperty(exports, "migrateSchema", {
   enumerable: true,
-  get: function () { return chunk6M6A6WWW_cjs.migrateSchema; }
+  get: function () { return chunkD4ZUJTFB_cjs.migrateSchema; }
 });
 Object.defineProperty(exports, "readVersionedJson", {
   enumerable: true,
-  get: function () { return chunk6M6A6WWW_cjs.readVersionedJson; }
+  get: function () { return chunkD4ZUJTFB_cjs.readVersionedJson; }
 });
 Object.defineProperty(exports, "writeVersionedJson", {
   enumerable: true,
-  get: function () { return chunk6M6A6WWW_cjs.writeVersionedJson; }
+  get: function () { return chunkD4ZUJTFB_cjs.writeVersionedJson; }
 });
 Object.defineProperty(exports, "JsonlParseError", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.JsonlParseError; }
+  get: function () { return chunkTQI3KRXZ_cjs.JsonlParseError; }
 });
 Object.defineProperty(exports, "appendJsonl", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.appendJsonl; }
+  get: function () { return chunkTQI3KRXZ_cjs.appendJsonl; }
 });
 Object.defineProperty(exports, "loadJsonl", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.loadJsonl; }
+  get: function () { return chunkTQI3KRXZ_cjs.loadJsonl; }
 });
 Object.defineProperty(exports, "readJsonlIds", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.readJsonlIds; }
+  get: function () { return chunkTQI3KRXZ_cjs.readJsonlIds; }
 });
 Object.defineProperty(exports, "withFileLock", {
   enumerable: true,
-  get: function () { return chunkCJVMDRQB_cjs.withFileLock; }
+  get: function () { return chunkTQI3KRXZ_cjs.withFileLock; }
 });
 Object.defineProperty(exports, "applyWalWithFallback", {
   enumerable: true,
-  get: function () { return chunkJD74LN7R_cjs.applyWalWithFallback; }
+  get: function () { return chunkFK4EJD2I_cjs.applyWalWithFallback; }
 });
 Object.defineProperty(exports, "containsCjk", {
   enumerable: true,
-  get: function () { return chunkJD74LN7R_cjs.containsCjk; }
+  get: function () { return chunkFK4EJD2I_cjs.containsCjk; }
 });
 Object.defineProperty(exports, "isCorruptionError", {
   enumerable: true,
-  get: function () { return chunkJD74LN7R_cjs.isCorruptionError; }
+  get: function () { return chunkFK4EJD2I_cjs.isCorruptionError; }
 });
 Object.defineProperty(exports, "openSqliteResilient", {
   enumerable: true,
-  get: function () { return chunkJD74LN7R_cjs.openSqliteResilient; }
+  get: function () { return chunkFK4EJD2I_cjs.openSqliteResilient; }
 });
 Object.defineProperty(exports, "sanitizeFts5Query", {
   enumerable: true,
-  get: function () { return chunkJD74LN7R_cjs.sanitizeFts5Query; }
+  get: function () { return chunkFK4EJD2I_cjs.sanitizeFts5Query; }
 });
 Object.defineProperty(exports, "withCwdMutex", {
   enumerable: true,
@@ -109,15 +109,15 @@ Object.defineProperty(exports, "withCwdMutex", {
 });
 Object.defineProperty(exports, "atomicWriteJson", {
   enumerable: true,
-  get: function () { return chunkTIZ4TS5V_cjs.atomicWriteJson; }
+  get: function () { return chunkICYBIC6N_cjs.atomicWriteJson; }
 });
 Object.defineProperty(exports, "atomicWriteText", {
   enumerable: true,
-  get: function () { return chunkTIZ4TS5V_cjs.atomicWriteText; }
+  get: function () { return chunkICYBIC6N_cjs.atomicWriteText; }
 });
 Object.defineProperty(exports, "replaceFileAtomic", {
   enumerable: true,
-  get: function () { return chunkTIZ4TS5V_cjs.replaceFileAtomic; }
+  get: function () { return chunkICYBIC6N_cjs.replaceFileAtomic; }
 });
 exports.casUpdate = casUpdate;
 exports.createExclusive = createExclusive;

package/dist/internal/persistence/index.js

@@ -1,11 +1,11 @@
 export { PersistenceSchema } from '../../chunk-CAH3G4IS.js';
-export { displayTheokitHome, getProfilesRoot, getTheokitHome, migrateSchema, readVersionedJson, writeVersionedJson } from '../../chunk-XV2RBL6D.js';
-export { JsonlParseError, appendJsonl, loadJsonl, readJsonlIds, withFileLock } from '../../chunk-UAYYNWYJ.js';
-export { applyWalWithFallback, containsCjk, isCorruptionError, openSqliteResilient, sanitizeFts5Query } from '../../chunk-77FOZCOT.js';
+export { displayTheokitHome, getProfilesRoot, getTheokitHome, migrateSchema, readVersionedJson, writeVersionedJson } from '../../chunk-ZW345YOI.js';
+export { JsonlParseError, appendJsonl, loadJsonl, readJsonlIds, withFileLock } from '../../chunk-YHZXBDAW.js';
+export { applyWalWithFallback, containsCjk, isCorruptionError, openSqliteResilient, sanitizeFts5Query } from '../../chunk-GLUWH6JO.js';
 export { withCwdMutex } from '../../chunk-2XLKLVVR.js';
-export { atomicWriteJson, atomicWriteText, replaceFileAtomic } from '../../chunk-S2BBRVQX.js';
-import '../../chunk-WLKFWQSJ.js';
-import '../../chunk-JTFYYKDT.js';
+export { atomicWriteJson, atomicWriteText, replaceFileAtomic } from '../../chunk-56OXYUZE.js';
+import '../../chunk-CD73YHEH.js';
+import '../../chunk-TAPQWDW2.js';
 import { open } from 'fs/promises';
 
 async function createExclusive(path, data, options) {

package/dist/internal/persistence/sqlite-wal.d.cts

@@ -1,10 +1 @@
-/**
- * SQLite WAL mode helper with NFS/SMB/FUSE fallback to DELETE (ADR D63).
- *
- * WAL is faster (concurrent readers + one writer) but unsupported on some
- * network/FUSE filesystems. Try WAL; if the pragma returns something else
- * or throws, fall back to DELETE journal mode. Warn one time per label.
- *
- * @internal
- */
 export {};

package/dist/internal/persistence/sqlite-wal.d.ts

@@ -1,10 +1 @@
-/**
- * SQLite WAL mode helper with NFS/SMB/FUSE fallback to DELETE (ADR D63).
- *
- * WAL is faster (concurrent readers + one writer) but unsupported on some
- * network/FUSE filesystems. Try WAL; if the pragma returns something else
- * or throws, fall back to DELETE journal mode. Warn one time per label.
- *
- * @internal
- */
 export {};

package/dist/internal/persistence/transcript-ops.d.cts

@@ -42,6 +42,20 @@ export interface ForkTranscriptOptions {
      * registry entry. The caller supplies them because only the caller knows which session is live.
      */
     readonly liveSessionPaths?: readonly string[];
+    /**
+     * M107 — permission bits for the created destination. Default: `0o600`.
+     *
+     * A transcript carries the conversation. Before M107 no mode was passed at all, so the file was
+     * born `0o666 & ~umask` — measured `0o664` (group-WRITABLE) on a `umask 002` machine, `0o644` on
+     * `umask 022`, `0o466` on `umask 0200`. This is a DEFAULT and not a required knob on purpose: a
+     * knob would reach zero consumers by omission, which is the failure mode that matters.
+     *
+     * As with any `open` mode, the `umask` may still CLEAR bits — under `umask 0200` the result is
+     * `0o400`. That is accepted: the invariant bought here is "neither group nor others", and `0o400`
+     * satisfies it more strictly. The SDK deliberately does not `fchmod` the default back, because
+     * that would hand back a bit the operator asked to remove.
+     */
+    readonly mode?: number;
 }
 /**
  * Copy `src` into `dst`, keeping the first `beforeRecordIndex` records. The SOURCE is never touched.

package/dist/internal/persistence/transcript-ops.d.ts

@@ -42,6 +42,20 @@ export interface ForkTranscriptOptions {
      * registry entry. The caller supplies them because only the caller knows which session is live.
      */
     readonly liveSessionPaths?: readonly string[];
+    /**
+     * M107 — permission bits for the created destination. Default: `0o600`.
+     *
+     * A transcript carries the conversation. Before M107 no mode was passed at all, so the file was
+     * born `0o666 & ~umask` — measured `0o664` (group-WRITABLE) on a `umask 002` machine, `0o644` on
+     * `umask 022`, `0o466` on `umask 0200`. This is a DEFAULT and not a required knob on purpose: a
+     * knob would reach zero consumers by omission, which is the failure mode that matters.
+     *
+     * As with any `open` mode, the `umask` may still CLEAR bits — under `umask 0200` the result is
+     * `0o400`. That is accepted: the invariant bought here is "neither group nor others", and `0o400`
+     * satisfies it more strictly. The SDK deliberately does not `fchmod` the default back, because
+     * that would hand back a bit the operator asked to remove.
+     */
+    readonly mode?: number;
 }
 /**
  * Copy `src` into `dst`, keeping the first `beforeRecordIndex` records. The SOURCE is never touched.

package/dist/internal/plugins/lifecycle.d.cts

@@ -10,5 +10,6 @@
  *
  * @internal
  */
+import type { HookHandler } from "./types.js";
 export declare function runFireAndForgetHooks<C>(handlers: ReadonlyArray<HookHandler>, ctx: C): Promise<void>;
 export declare function runTransformHooks<T>(handlers: ReadonlyArray<HookHandler>, initial: T): Promise<T>;

package/dist/internal/plugins/lifecycle.d.ts

@@ -10,5 +10,6 @@
  *
  * @internal
  */
+import type { HookHandler } from "./types.js";
 export declare function runFireAndForgetHooks<C>(handlers: ReadonlyArray<HookHandler>, ctx: C): Promise<void>;
 export declare function runTransformHooks<T>(handlers: ReadonlyArray<HookHandler>, initial: T): Promise<T>;

package/dist/internal/runtime/fixtures/fixture-run-base.d.ts

@@ -28,6 +28,25 @@ export declare abstract class FixtureRunBase implements Run {
      */
     protected notifyNewEvents(): void;
     stream(): AsyncGenerator<SDKMessage, void>;
+    /**
+     * theokit#101 — quando o run termina em erro, `stream()` tem de DIZER.
+     *
+     * O erro sempre existiu: o loop o registra em `ctx.error` e `wait()` devolve
+     * `status: 'error'` com a mensagem. Só o `stream()` não o mencionava — ele drena
+     * `script.events` e para. Uma falha de provider (404 "No endpoints found", auth, timeout)
+     * produzia um turno que parecia bem-sucedido e vazio, em TODA superfície que consome o
+     * stream: HTTP web, MCP, stdio, TUI in-process.
+     *
+     * Erro silencioso é o pior tipo (Regra Inquebrável 8). E a assimetria era o que o tornava
+     * difícil de diagnosticar: quem depurasse por `wait()` via o erro e não reproduziria o
+     * relato de quem depurava pelo stream.
+     *
+     * Emite `SDKStatusMessage` com `status: "ERROR"` — o tipo JÁ EXISTE na união `SDKMessage`
+     * e já é esperado por quem consome. Um tipo novo seria breaking para todo consumidor que
+     * faz switch exaustivo; este é aditivo, e um consumidor que ignore `status` simplesmente
+     * segue como antes — nunca pior que hoje.
+     */
+    private terminalErrorEvent;
     wait(): Promise<RunResult>;
     cancel(): Promise<void>;
     conversation(): Promise<ConversationTurn[]>;

package/dist/internal/runtime/registry/agent-registry.d.ts

@@ -1,7 +1,6 @@
 import type { AgentRuntime, RegisteredAgent } from "./agent-registry-contract.js";
 export declare function registerAgent(agent: RegisteredAgent): void;
 export declare function getRegisteredAgent(agentId: string): RegisteredAgent | undefined;
-export declare function listRegisteredAgents(runtime?: AgentRuntime): RegisteredAgent[];
 export declare function updateRegisteredAgent(agentId: string, update: Partial<RegisteredAgent>): RegisteredAgent | undefined;
 export declare function removeRegisteredAgent(agentId: string): boolean;
 export declare function clearAgentRegistry(): void;

package/dist/internal/security/index.cjs

@@ -1,51 +1,51 @@
 'use strict';
 
 require('../../chunk-MUUQ2WFJ.cjs');
-var chunkKIO7QFIV_cjs = require('../../chunk-KIO7QFIV.cjs');
-require('../../chunk-A44COQJJ.cjs');
-var chunkBEURCLDV_cjs = require('../../chunk-BEURCLDV.cjs');
+var chunkYBFDBOUN_cjs = require('../../chunk-YBFDBOUN.cjs');
+require('../../chunk-MHCKWQR3.cjs');
+var chunkLTCOPATU_cjs = require('../../chunk-LTCOPATU.cjs');
 
 
 
 Object.defineProperty(exports, "ForbiddenPathError", {
   enumerable: true,
-  get: function () { return chunkKIO7QFIV_cjs.ForbiddenPathError; }
+  get: function () { return chunkYBFDBOUN_cjs.ForbiddenPathError; }
 });
 Object.defineProperty(exports, "PathTraversalError", {
   enumerable: true,
-  get: function () { return chunkKIO7QFIV_cjs.PathTraversalError; }
+  get: function () { return chunkYBFDBOUN_cjs.PathTraversalError; }
 });
 Object.defineProperty(exports, "assertNoSymlinkEscape", {
   enumerable: true,
-  get: function () { return chunkKIO7QFIV_cjs.assertNoSymlinkEscape; }
+  get: function () { return chunkYBFDBOUN_cjs.assertNoSymlinkEscape; }
 });
 Object.defineProperty(exports, "isForbiddenPath", {
   enumerable: true,
-  get: function () { return chunkKIO7QFIV_cjs.isForbiddenPath; }
+  get: function () { return chunkYBFDBOUN_cjs.isForbiddenPath; }
 });
 Object.defineProperty(exports, "safePathJoin", {
   enumerable: true,
-  get: function () { return chunkKIO7QFIV_cjs.safePathJoin; }
+  get: function () { return chunkYBFDBOUN_cjs.safePathJoin; }
 });
 Object.defineProperty(exports, "sanitizeIdentifier", {
   enumerable: true,
-  get: function () { return chunkKIO7QFIV_cjs.sanitizeIdentifier; }
+  get: function () { return chunkYBFDBOUN_cjs.sanitizeIdentifier; }
 });
 Object.defineProperty(exports, "validateArtifactPath", {
   enumerable: true,
-  get: function () { return chunkKIO7QFIV_cjs.validateArtifactPath; }
+  get: function () { return chunkYBFDBOUN_cjs.validateArtifactPath; }
 });
 Object.defineProperty(exports, "addPattern", {
   enumerable: true,
-  get: function () { return chunkBEURCLDV_cjs.addPattern; }
+  get: function () { return chunkLTCOPATU_cjs.addPattern; }
 });
 Object.defineProperty(exports, "maskToken", {
   enumerable: true,
-  get: function () { return chunkBEURCLDV_cjs.maskToken; }
+  get: function () { return chunkLTCOPATU_cjs.maskToken; }
 });
 Object.defineProperty(exports, "redactSecrets", {
   enumerable: true,
-  get: function () { return chunkBEURCLDV_cjs.redactSecrets; }
+  get: function () { return chunkLTCOPATU_cjs.redactSecrets; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/internal/security/index.js

@@ -1,6 +1,6 @@
 import '../../chunk-FD2UT76F.js';
-export { ForbiddenPathError, PathTraversalError, assertNoSymlinkEscape, isForbiddenPath, safePathJoin, sanitizeIdentifier, validateArtifactPath } from '../../chunk-POQT2OIF.js';
-import '../../chunk-WLKFWQSJ.js';
-export { addPattern, maskToken, redactSecrets } from '../../chunk-JTFYYKDT.js';
+export { ForbiddenPathError, PathTraversalError, assertNoSymlinkEscape, isForbiddenPath, safePathJoin, sanitizeIdentifier, validateArtifactPath } from '../../chunk-WDGCZDRG.js';
+import '../../chunk-CD73YHEH.js';
+export { addPattern, maskToken, redactSecrets } from '../../chunk-TAPQWDW2.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/internal/security/redact.d.cts

@@ -1,21 +1,3 @@
-/**
- * Canonical secret redaction module (ADRs D68-D73).
- *
- * Single source of truth for credential pattern masking across the SDK.
- * Wired at output boundaries: `ErrorMetadata.raw` (mappers/shared.ts),
- * telemetry span attributes (telemetry/tracer.ts), transcript JSONL
- * appends (agent-session-store.ts), migration logger output
- * (memory/migrate-sqlite-to-lance.ts).
- *
- * - D68: central module, single source of truth (replaces 2 duplicates)
- * - D69: env snapshot at module init (prompt-injection defense)
- * - D70: ON by default, warn on opt-out
- * - D71: two-bucket masking — short fully masked, long preserves prefix+suffix
- * - D72: `codeFile` opt-out for legitimate prefix-shaped content
- * - D73: redact at OUTPUT boundaries, not at storage
- *
- * @internal
- */
 export declare function redactSecrets(text: unknown, opts?: {
     codeFile?: boolean;
 }): string;

package/dist/internal/security/redact.d.ts

@@ -1,21 +1,3 @@
-/**
- * Canonical secret redaction module (ADRs D68-D73).
- *
- * Single source of truth for credential pattern masking across the SDK.
- * Wired at output boundaries: `ErrorMetadata.raw` (mappers/shared.ts),
- * telemetry span attributes (telemetry/tracer.ts), transcript JSONL
- * appends (agent-session-store.ts), migration logger output
- * (memory/migrate-sqlite-to-lance.ts).
- *
- * - D68: central module, single source of truth (replaces 2 duplicates)
- * - D69: env snapshot at module init (prompt-injection defense)
- * - D70: ON by default, warn on opt-out
- * - D71: two-bucket masking — short fully masked, long preserves prefix+suffix
- * - D72: `codeFile` opt-out for legitimate prefix-shaped content
- * - D73: redact at OUTPUT boundaries, not at storage
- *
- * @internal
- */
 export declare function redactSecrets(text: unknown, opts?: {
     codeFile?: boolean;
 }): string;