@theokit/sdk 4.40.0 → 4.41.1

package/CHANGELOG.md

@@ -1,5 +1,78 @@
 # Changelog
 
+## 4.41.1
+
+### Patch Changes
+
+- 8bdbf44: **Security.** Confine `@path` context imports to the repository they are declared in.
+
+  `CLAUDE.md` and `GEMINI.md` are discovered by walking up to the git root and carry
+  `followImports: true`, so their content is repository-controlled. The resolver applied no
+  root: it handled `~/...` and absolute paths explicitly, so a line that was exactly
+  `@~/.ssh/id_rsa` in a cloned repository had that file read and inlined into the agent's
+  system prompt — and from there sent to the model provider. The traversal guard that already
+  existed (`isSafePattern`) validates the discovery _pattern_, one layer away from the import
+  _target_, so it never saw this.
+
+  `resolveImports` now takes an optional `projectRoot` and refuses a target resolving outside
+  it, comparing after symlink resolution and forwarding the root through recursion so the
+  boundary cannot be crossed on a later hop. The discovery runner supplies `gitRoot ?? cwd` —
+  the same value it already uses to keep absolute paths out of `<source name="">` — and
+  `runDiscovery` accepts `importRoot` for an embedder whose trust boundary is narrower than
+  the repository. A refused import becomes `[@import outside the project root, refused: <path>]`
+  and never the file's bytes; the placeholder echoes the path as written, not as resolved, so
+  the refusal does not leak the machine's layout back into the same untrusted document.
+
+  Callers that pass no root keep the previous behaviour, so this is additive for anyone using
+  `resolveImports` directly outside the discovery path.
+
+## 4.41.0
+
+### Minor Changes
+
+- ea99026: Three facts the SDK already knew are now answerable, instead of being re-derived by every consumer.
+
+  - `assertSecureModes(dir, file)` — the 0700-dir / 0600-file gate, exported from `@theokit/sdk/auth`.
+    Its own docstring names the attack it prevents (a writable directory lets someone swap the
+    credential file for a symlink to their own), and that reasoning is not specific to this SDK's
+    credential file: consumers keep sensitive stores beside it and were reading them with no check at
+    all, because the gate was private.
+
+  - `writableRootsFor(mode, cwd)` — what a sandbox mode may write to, answerable WITHOUT spawning.
+    `buildBwrapArgv` knew it, but only while building an argv, and consumers need the answer earlier:
+    tools are scoped at agent construction, before any process exists. `[]` means nothing is writable;
+    `null` means unrestricted — not `["/"]`, because unrestricted is the absence of a root rather than
+    a root that happens to be `/`.
+
+  - `atomicWriteTempTarget(name)` — the file a leftover `<file>.<pid>.<hex>.tmp` was replacing.
+    `replaceFileAtomic` creates those and has no opinion about sweeping them, so a consumer wanting to
+    had to know a format that lived only in the implementation. Deliberately strict about pid digits
+    and a 16-char hex suffix: matching any `.tmp` would claim other tools' scratch on a path whose
+    purpose is deleting files.
+
+  Each is derived from the same helper its writer uses, so the answer and the behaviour cannot drift
+  apart. All three were measured from a consumer that had reimplemented them — one of them by copying
+  a regex out of a compiled chunk.
+
+- 994808f: Emit `mcp_server_failed` on the typed run-event stream when a configured MCP server's tools cannot be listed. Additive `RunEvent` variant; the sink stays opt-in and no existing signature changed.
+- 4d64479: `classifySessionArtifact(name, isDirectory)` — what a file in a project directory is, when this SDK
+  wrote it.
+
+  Four kinds get created here and reasoned about nowhere: `<id>.jsonl` (`transcriptPath`),
+  `<id>.jsonl.writer.lock` (the writer lease), `<id>.jsonl.lock` (`withFileLock`, a DIRECTORY since it
+  locks by `mkdir`), and `<file>.<pid>.<hex>.tmp` (`replaceFileAtomic`, left behind by a crash between
+  the open and the rename). There is no retention, no collector, and there was no way even to ask what
+  an entry is — so a consumer reclaiming disk had to re-derive the suffixes from this source, and a
+  suffix changing here would have left its classifier mislabelling files on a path that deletes them.
+
+  Deliberately NOT a garbage collector. Retention is policy — how many days, how many to keep, which
+  session is live, whether to delete at all — and the application is the only one that can answer that.
+  What belongs here is the half only the SDK can: what did I write, and what is it.
+
+  `undefined` means "not written by this SDK", which is the answer that matters most — a caller
+  deleting what it does not recognise is how someone's editor swap file gets collected. The `temp` case
+  defers to `atomicWriteTempTarget` rather than matching `.tmp`, for that reason.
+
 ## 4.40.0
 
 ### Minor Changes

package/README.md

@@ -24,11 +24,11 @@
 
 > **Public beta.** APIs may change before general availability.
 
-For the full reference, see the [root README](https://github.com/usetheodev/theokit-sdk#readme) and the [**Harness Capability Map**](https://github.com/usetheodev/theokit-sdk/blob/main/docs/harness-capability-map.md). The exported TypeScript types are the canonical contract.
+For the full reference, see the [root README](https://github.com/usetheodev/theokit-sdk#readme) and the [**Harness Capability Map**](https://github.com/usetheodev/theokit-sdk/blob/main/wiki/reference/harness-capability-map.md). The exported TypeScript types are the canonical contract.
 
 ## Capability map
 
-New here? The [**Theo Harness Capability Map**](https://github.com/usetheodev/theokit-sdk/blob/main/docs/harness-capability-map.md) is the discovery front-door — every harness primitive with its import path, signature, and a one-line example (find `compactTranscript`, `buildRepoMap`, `isTransientError`, `@theokit/sdk/persistence`, ... without reading source). The exported TypeScript types are the canonical contract.
+New here? The [**Theo Harness Capability Map**](https://github.com/usetheodev/theokit-sdk/blob/main/wiki/reference/harness-capability-map.md) is the discovery front-door — every harness primitive with its import path, signature, and a one-line example (find `compactTranscript`, `buildRepoMap`, `isTransientError`, `@theokit/sdk/persistence`, ... without reading source). The exported TypeScript types are the canonical contract.
 
 It also **ships inside this package** — no network needed, and pinned to the version you installed:
 

package/dist/{agent-BzZwYFiw.d.ts → agent-BiCINq25.d.ts}

@@ -1,4 +1,4 @@
-import { M as ModelSelection, ad as SDKUserMessage, af as SendOptions, b as Run, G as GenerateOptions, n as GenerateRunResult, $ as RunToCompletionOptions, a0 as RunToCompletionResult, S as SDKMessage, am as StreamToCompletionResult, C as CustomTool, c as PermissionMode, a as McpServerConfig, P as Processor } from './run-XXnwwGOT.js';
+import { M as ModelSelection, ad as SDKUserMessage, af as SendOptions, b as Run, G as GenerateOptions, n as GenerateRunResult, $ as RunToCompletionOptions, a0 as RunToCompletionResult, S as SDKMessage, am as StreamToCompletionResult, C as CustomTool, c as PermissionMode, a as McpServerConfig, P as Processor } from './run-C8FBAC8o.js';
 import * as zod from 'zod';
 
 /**
@@ -36,7 +36,7 @@ type TranscriptBlock = {
     is_error?: boolean;
 };
 /**
- * O corpo de mensagem de um {@link SessionRecord}.
+ * The message body of a {@link SessionRecord}.
  *
  * **It is NOT called `SessionMessage`** — that name already exists in
  * `internal/session/session-types.ts` with the shape `{role, text}`, incompatible with this one.

package/dist/agent-JDJEBJHU.cjs

@@ -0,0 +1,55 @@
+'use strict';
+
+var chunkRPL3POFZ_cjs = require('./chunk-RPL3POFZ.cjs');
+require('./chunk-BV2MWEMV.cjs');
+require('./chunk-KCQUYQ3V.cjs');
+require('./chunk-BUUUWQMB.cjs');
+require('./chunk-ZO2L5U6F.cjs');
+require('./chunk-NRA36JKG.cjs');
+require('./chunk-FMIKUGF2.cjs');
+require('./chunk-HLNLYLNN.cjs');
+require('./chunk-4JBHSLQO.cjs');
+require('./chunk-FZ4YMZA3.cjs');
+require('./chunk-GH52NOCL.cjs');
+require('./chunk-HECR7KF5.cjs');
+require('./chunk-BBZYXVLZ.cjs');
+require('./chunk-6X2HUT4A.cjs');
+require('./chunk-7PESI6YD.cjs');
+require('./chunk-S4Q5OMIK.cjs');
+require('./chunk-2RW7K6FN.cjs');
+require('./chunk-MUUQ2WFJ.cjs');
+require('./chunk-6JSIEDKL.cjs');
+require('./chunk-B4YA6BRS.cjs');
+require('./chunk-NINIJCHU.cjs');
+require('./chunk-YPEPCZHF.cjs');
+require('./chunk-VJ26EKGJ.cjs');
+require('./chunk-OEFFPR2S.cjs');
+require('./chunk-27DYRARU.cjs');
+require('./chunk-JA4FEA5Z.cjs');
+require('./chunk-WCXOKGOQ.cjs');
+require('./chunk-6W4U2G3J.cjs');
+require('./chunk-BV42CCRP.cjs');
+require('./chunk-YLQQX5W2.cjs');
+require('./chunk-XR4LPBXH.cjs');
+require('./chunk-WJVHMTKB.cjs');
+require('./chunk-NETYW4V3.cjs');
+require('./chunk-X2YQP452.cjs');
+require('./chunk-NNNUQELM.cjs');
+require('./chunk-VYHJZVL5.cjs');
+require('./chunk-GLEKLAUW.cjs');
+require('./chunk-4JRRFRV4.cjs');
+require('./chunk-C6Y6CWYD.cjs');
+require('./chunk-64TJCXY5.cjs');
+require('./chunk-XA3TSBAH.cjs');
+require('./chunk-BRHRQOJA.cjs');
+require('./chunk-YULF6FPB.cjs');
+require('./chunk-ZHPET3LZ.cjs');
+
+
+
+Object.defineProperty(exports, "Agent", {
+  enumerable: true,
+  get: function () { return chunkRPL3POFZ_cjs.Agent; }
+});
+//# sourceMappingURL=agent-JDJEBJHU.cjs.map
+//# sourceMappingURL=agent-JDJEBJHU.cjs.map

package/dist/{agent-OOXJJD6A.cjs.map → agent-JDJEBJHU.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-OOXJJD6A.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-JDJEBJHU.cjs"}

package/dist/agent-LVKAYADR.js

@@ -0,0 +1,46 @@
+export { Agent } from './chunk-DHLVOLUX.js';
+import './chunk-2SFBB54R.js';
+import './chunk-GNMPCZNN.js';
+import './chunk-K2BQQ445.js';
+import './chunk-IMX5YODO.js';
+import './chunk-PYM5OUL4.js';
+import './chunk-UTYCG4RB.js';
+import './chunk-F4RUADRC.js';
+import './chunk-4QEC4CCS.js';
+import './chunk-ZTEAJAE6.js';
+import './chunk-RJBHWM6D.js';
+import './chunk-J5RW43IR.js';
+import './chunk-AM2CNBKE.js';
+import './chunk-ZS6SLELQ.js';
+import './chunk-LLE7HPRI.js';
+import './chunk-SNKY3C2L.js';
+import './chunk-OXNYIMZZ.js';
+import './chunk-FD2UT76F.js';
+import './chunk-U54XCYG3.js';
+import './chunk-RP5HQVLD.js';
+import './chunk-6X6ID4MO.js';
+import './chunk-UJ7IQJAG.js';
+import './chunk-7AD3ZTZL.js';
+import './chunk-AZ6FKDQR.js';
+import './chunk-Q4DTGCSD.js';
+import './chunk-HKSSM5RK.js';
+import './chunk-AF4BBKIF.js';
+import './chunk-ZNW2TXLO.js';
+import './chunk-2WB6EIYW.js';
+import './chunk-2XLKLVVR.js';
+import './chunk-NOM2YWFP.js';
+import './chunk-4VPXM6UU.js';
+import './chunk-VQFSEKU5.js';
+import './chunk-TJRPNBY5.js';
+import './chunk-FRQ6F44U.js';
+import './chunk-X2FR4OIT.js';
+import './chunk-Z6N6SDNR.js';
+import './chunk-L4JFQCG4.js';
+import './chunk-5NBUH3NO.js';
+import './chunk-2S6B5B2A.js';
+import './chunk-6FSQ3CHQ.js';
+import './chunk-OLLOUAUJ.js';
+import './chunk-MRKSSN36.js';
+import './chunk-PBML2FHN.js';
+//# sourceMappingURL=agent-LVKAYADR.js.map
+//# sourceMappingURL=agent-LVKAYADR.js.map

package/dist/{agent-MSR3DHO4.js.map → agent-LVKAYADR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-MSR3DHO4.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-LVKAYADR.js"}

package/dist/{agent-DxEL4fHh.d.cts → agent-Zta1kvGH.d.cts}

@@ -1,4 +1,4 @@
-import { M as ModelSelection, ad as SDKUserMessage, af as SendOptions, b as Run, G as GenerateOptions, n as GenerateRunResult, $ as RunToCompletionOptions, a0 as RunToCompletionResult, S as SDKMessage, am as StreamToCompletionResult, C as CustomTool, c as PermissionMode, a as McpServerConfig, P as Processor } from './run-XXnwwGOT.cjs';
+import { M as ModelSelection, ad as SDKUserMessage, af as SendOptions, b as Run, G as GenerateOptions, n as GenerateRunResult, $ as RunToCompletionOptions, a0 as RunToCompletionResult, S as SDKMessage, am as StreamToCompletionResult, C as CustomTool, c as PermissionMode, a as McpServerConfig, P as Processor } from './run-C8FBAC8o.cjs';
 import * as zod from 'zod';
 
 /**
@@ -36,7 +36,7 @@ type TranscriptBlock = {
     is_error?: boolean;
 };
 /**
- * O corpo de mensagem de um {@link SessionRecord}.
+ * The message body of a {@link SessionRecord}.
  *
  * **It is NOT called `SessionMessage`** — that name already exists in
  * `internal/session/session-types.ts` with the shape `{role, text}`, incompatible with this one.

package/dist/agent-session-store-EPUERCUU.cjs

@@ -0,0 +1,23 @@
+'use strict';
+
+var chunkFZ4YMZA3_cjs = require('./chunk-FZ4YMZA3.cjs');
+require('./chunk-WCXOKGOQ.cjs');
+require('./chunk-NETYW4V3.cjs');
+require('./chunk-ZHPET3LZ.cjs');
+
+
+
+Object.defineProperty(exports, "appendCompactBoundaryRecord", {
+  enumerable: true,
+  get: function () { return chunkFZ4YMZA3_cjs.appendCompactBoundaryRecord; }
+});
+Object.defineProperty(exports, "persistTurn", {
+  enumerable: true,
+  get: function () { return chunkFZ4YMZA3_cjs.persistTurn; }
+});
+Object.defineProperty(exports, "readSessionMessages", {
+  enumerable: true,
+  get: function () { return chunkFZ4YMZA3_cjs.readSessionMessages; }
+});
+//# sourceMappingURL=agent-session-store-EPUERCUU.cjs.map
+//# sourceMappingURL=agent-session-store-EPUERCUU.cjs.map

package/dist/{agent-session-store-RHTLZ5OX.cjs.map → agent-session-store-EPUERCUU.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-session-store-RHTLZ5OX.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-session-store-EPUERCUU.cjs"}

package/dist/agent-session-store-TXP5ZVOD.js

@@ -0,0 +1,6 @@
+export { appendCompactBoundaryRecord, persistTurn, readSessionMessages } from './chunk-ZTEAJAE6.js';
+import './chunk-AF4BBKIF.js';
+import './chunk-VQFSEKU5.js';
+import './chunk-PBML2FHN.js';
+//# sourceMappingURL=agent-session-store-TXP5ZVOD.js.map
+//# sourceMappingURL=agent-session-store-TXP5ZVOD.js.map

package/dist/{agent-session-store-EGTTYSKS.js.map → agent-session-store-TXP5ZVOD.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-session-store-EGTTYSKS.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-session-store-TXP5ZVOD.js"}

package/dist/auth/index.cjs

@@ -1,9 +1,9 @@
 'use strict';
 
-var chunkV7CA3CX5_cjs = require('../chunk-V7CA3CX5.cjs');
+var chunk4JRRFRV4_cjs = require('../chunk-4JRRFRV4.cjs');
 var chunkC6Y6CWYD_cjs = require('../chunk-C6Y6CWYD.cjs');
-require('../chunk-E7WWIX34.cjs');
-require('../chunk-A76OFN2B.cjs');
+require('../chunk-YULF6FPB.cjs');
+require('../chunk-ZHPET3LZ.cjs');
 
 // src/internal/auth/oauth-device.ts
 var POLLING_SAFETY_MARGIN_MS = 3e3;
@@ -183,7 +183,7 @@ async function openaiDeviceLogin(config, deps, hooks) {
           "device poll returned no authorization_code"
         );
       }
-      const tokens = await chunkV7CA3CX5_cjs.exchangeCode(
+      const tokens = await chunk4JRRFRV4_cjs.exchangeCode(
         config,
         { code: data.authorization_code, verifier: data.code_verifier },
         deps
@@ -227,47 +227,51 @@ function extractAccountId(tokens) {
 
 Object.defineProperty(exports, "CredentialError", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.CredentialError; }
+  get: function () { return chunk4JRRFRV4_cjs.CredentialError; }
+});
+Object.defineProperty(exports, "assertSecureModes", {
+  enumerable: true,
+  get: function () { return chunk4JRRFRV4_cjs.assertSecureModes; }
 });
 Object.defineProperty(exports, "authFilePath", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.authFilePath; }
+  get: function () { return chunk4JRRFRV4_cjs.authFilePath; }
 });
 Object.defineProperty(exports, "credentialHome", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.credentialHome; }
+  get: function () { return chunk4JRRFRV4_cjs.credentialHome; }
 });
 Object.defineProperty(exports, "ensureFreshCredential", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.ensureFreshCredential; }
+  get: function () { return chunk4JRRFRV4_cjs.ensureFreshCredential; }
 });
 Object.defineProperty(exports, "exchangeCode", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.exchangeCode; }
+  get: function () { return chunk4JRRFRV4_cjs.exchangeCode; }
 });
 Object.defineProperty(exports, "persistOAuthTokens", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.persistOAuthTokens; }
+  get: function () { return chunk4JRRFRV4_cjs.persistOAuthTokens; }
 });
 Object.defineProperty(exports, "readAuthFile", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.readAuthFile; }
+  get: function () { return chunk4JRRFRV4_cjs.readAuthFile; }
 });
 Object.defineProperty(exports, "readStoredOAuth", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.readStoredOAuth; }
+  get: function () { return chunk4JRRFRV4_cjs.readStoredOAuth; }
 });
 Object.defineProperty(exports, "refreshOAuthTokens", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.refreshOAuthTokens; }
+  get: function () { return chunk4JRRFRV4_cjs.refreshOAuthTokens; }
 });
 Object.defineProperty(exports, "resolveCredential", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.resolveCredential; }
+  get: function () { return chunk4JRRFRV4_cjs.resolveCredential; }
 });
 Object.defineProperty(exports, "writeCredential", {
   enumerable: true,
-  get: function () { return chunkV7CA3CX5_cjs.writeCredential; }
+  get: function () { return chunk4JRRFRV4_cjs.writeCredential; }
 });
 exports.deviceLogin = deviceLogin;
 exports.extractAccountId = extractAccountId;

package/dist/auth/index.d.cts

@@ -13,7 +13,7 @@
  * @packageDocumentation
  */
 export type { CredentialStoreConfig, DeviceCodeGrant, DeviceDeps, DeviceOAuthConfig, HttpDeps, OAuthProviderConfig, OAuthTokens, OpenAIDeviceConfig, ResolvedCredential, StoredApiCredential, StoredCredential, StoredOAuthCredential, } from "../internal/auth/auth-types.js";
-export { authFilePath, CredentialError, credentialHome, readAuthFile, readStoredOAuth, writeCredential, } from "../internal/auth/credential-store.js";
+export { assertSecureModes, authFilePath, CredentialError, credentialHome, readAuthFile, readStoredOAuth, writeCredential, } from "../internal/auth/credential-store.js";
 export { deviceLogin, extractAccountId, openaiDeviceLogin, parseJwtClaims, pollDeviceToken, requestDeviceCode, requestOpenAIUsercode, } from "../internal/auth/oauth-device.js";
 export { ensureFreshCredential, exchangeCode, persistOAuthTokens, refreshOAuthTokens, } from "../internal/auth/oauth-engine.js";
 export { type ResolveCredentialOptions, resolveCredential, } from "../internal/auth/resolve-credential.js";

package/dist/auth/index.d.ts

@@ -13,7 +13,7 @@
  * @packageDocumentation
  */
 export type { CredentialStoreConfig, DeviceCodeGrant, DeviceDeps, DeviceOAuthConfig, HttpDeps, OAuthProviderConfig, OAuthTokens, OpenAIDeviceConfig, ResolvedCredential, StoredApiCredential, StoredCredential, StoredOAuthCredential, } from "../internal/auth/auth-types.js";
-export { authFilePath, CredentialError, credentialHome, readAuthFile, readStoredOAuth, writeCredential, } from "../internal/auth/credential-store.js";
+export { assertSecureModes, authFilePath, CredentialError, credentialHome, readAuthFile, readStoredOAuth, writeCredential, } from "../internal/auth/credential-store.js";
 export { deviceLogin, extractAccountId, openaiDeviceLogin, parseJwtClaims, pollDeviceToken, requestDeviceCode, requestOpenAIUsercode, } from "../internal/auth/oauth-device.js";
 export { ensureFreshCredential, exchangeCode, persistOAuthTokens, refreshOAuthTokens, } from "../internal/auth/oauth-engine.js";
 export { type ResolveCredentialOptions, resolveCredential, } from "../internal/auth/resolve-credential.js";

package/dist/auth/index.js

@@ -1,8 +1,8 @@
-import { exchangeCode } from '../chunk-AKMPQJPX.js';
-export { CredentialError, authFilePath, credentialHome, ensureFreshCredential, exchangeCode, persistOAuthTokens, readAuthFile, readStoredOAuth, refreshOAuthTokens, resolveCredential, writeCredential } from '../chunk-AKMPQJPX.js';
+import { exchangeCode } from '../chunk-L4JFQCG4.js';
+export { CredentialError, assertSecureModes, authFilePath, credentialHome, ensureFreshCredential, exchangeCode, persistOAuthTokens, readAuthFile, readStoredOAuth, refreshOAuthTokens, resolveCredential, writeCredential } from '../chunk-L4JFQCG4.js';
 import { AuthCallbackError } from '../chunk-5NBUH3NO.js';
-import '../chunk-VQ33XLC6.js';
-import '../chunk-RNCN2TTP.js';
+import '../chunk-MRKSSN36.js';
+import '../chunk-PBML2FHN.js';
 
 // src/internal/auth/oauth-device.ts
 var POLLING_SAFETY_MARGIN_MS = 3e3;

package/dist/{batch-WX2HLXX2.js → batch-OUF4N2TM.js}

@@ -1,12 +1,12 @@
-import { submit, get } from './chunk-UIPTINIF.js';
+import { submit, get } from './chunk-GNMPCZNN.js';
 import './chunk-K2BQQ445.js';
-import { newPooledCredential, CredentialPool, withCredentialPool } from './chunk-MI3OKONE.js';
-import { createSemaphore } from './chunk-F4SQTWVR.js';
+import { newPooledCredential, CredentialPool, withCredentialPool } from './chunk-F4RUADRC.js';
+import { createSemaphore } from './chunk-Q4DTGCSD.js';
 import './chunk-2XLKLVVR.js';
-import './chunk-BM7VYZED.js';
-import './chunk-5XPKYDK7.js';
-import { ConfigurationError, TheokitAgentError } from './chunk-VQ33XLC6.js';
-import { diag } from './chunk-RNCN2TTP.js';
+import './chunk-NOM2YWFP.js';
+import './chunk-VQFSEKU5.js';
+import { ConfigurationError, TheokitAgentError } from './chunk-MRKSSN36.js';
+import { diag } from './chunk-PBML2FHN.js';
 import { randomUUID } from 'crypto';
 
 function validateBatchInput(prompts, options) {
@@ -237,5 +237,5 @@ function buildPoolsFromApiKeys(apiKeys, strategy) {
 }
 
 export { batchImpl, validateBatchInput };
-//# sourceMappingURL=batch-WX2HLXX2.js.map
-//# sourceMappingURL=batch-WX2HLXX2.js.map
+//# sourceMappingURL=batch-OUF4N2TM.js.map
+//# sourceMappingURL=batch-OUF4N2TM.js.map

package/dist/{batch-WX2HLXX2.js.map → batch-OUF4N2TM.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/batch.ts"],"names":[],"mappings":";;;;;;;;;;;AAgDO,SAAS,kBAAA,CACd,SACA,OAAA,EACM;AACN,EAAA,MAAM,EAAE,aAAY,GAAI,OAAA;AACxB,EAAA,IAAI,WAAA,KAAgB,WAAc,CAAC,MAAA,CAAO,UAAU,WAAW,CAAA,IAAK,cAAc,CAAA,CAAA,EAAI;AACpF,IAAA,MAAM,IAAI,kBAAA;AAAA,MACR,2DAA2D,WAAW,CAAA,CAAA;AAAA,MACtE,EAAE,MAAM,qBAAA;AAAsB,KAChC;AAAA,EACF;AACA,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,IAAA,MAAM,IAAA,GAAO,QAAQ,CAAC,CAAA;AACtB,IAAA,MAAM,MAAA,GAAS,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,EAAM,MAAA;AACvD,IAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,CAAO,WAAW,CAAA,EAAG;AACrD,MAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,4BAAA,EAA+B,CAAC,CAAA,2BAAA,CAAA,EAA+B;AAAA,QAC1F,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AAAA,EACF;AACF;AAOA,eAAsB,SAAA,CACpB,OAAA,EACA,OAAA,EACA,IAAA,EACwB;AAExB,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,EAAC;AAKlC,EAAA,kBAAA,CAAmB,SAAS,OAAO,CAAA;AAKnC,EAAA,MAAM,WAAA,GAAc,qBAAA;AAAA,IAClB,QAAQ,SAAA,EAAW,OAAA;AAAA,IACnB,QAAQ,SAAA,EAAW;AAAA,GACrB;AACA,EAAA,MAAM,IAAA,GAAO,MAA8B,QAAA,CAAS,OAAA,EAAS,SAAS,IAAI,CAAA;AAC1E,EAAA,MAAM,QAAA,GAAW,MACf,WAAA,CAAY,IAAA,GAAO,IAAI,kBAAA,CAAmB,WAAA,EAAa,IAAI,CAAA,GAAI,IAAA,EAAK;AAGtE,EAAA,IAAI,OAAA,CAAQ,SAAS,MAAA,EAAW;AAC9B,IAAA,OAAO,eAAA,CAAgB,OAAA,CAAQ,MAAA,EAAQ,OAAA,CAAQ,MAAM,QAAQ,CAAA;AAAA,EAC/D;AACA,EAAA,OAAO,QAAA,EAAS;AAClB;AAEA,eAAe,eAAA,CACb,KAAA,EACA,OAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,OAAA,KAAY,IAAA,GAAO,EAAC,GAAI,OAAA;AACrC,EAAA,MAAM,EAAA,GAAK,IAAA,CAAK,EAAA,IAAM,CAAA,EAAA,EAAK,YAAY,CAAA,CAAA;AACvC,EAAA,MAAM,IAAA,GAAgC;AAAA,IACpC,KAAA;AAAA,IACA,GAAI,IAAA,CAAK,IAAA,IAAQ;AAAC,GACpB;AACA,EAAA,IAAI,UAAyB,EAAC;AAC9B,EAAA,MAAM,MAAA,CAAmB;AAAA,IACvB,IAAA,EAAM,OAAA;AAAA,IACN,IAAA,EAAM,OAAO,GAAA,KAAQ;AACnB,MAAA,OAAA,GAAU,MAAM,IAAA,EAAK;AACrB,MAAA,MAAM,YAAY,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,MAAA;AAC9C,MAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,GAAS,SAAA;AAChC,MAAA,GAAA,CAAI,KAAK,EAAE,KAAA,EAAO,QAAQ,MAAA,EAAQ,SAAA,EAAW,QAAQ,CAAA;AACrD,MAAA,OAAO,EAAE,KAAA,EAAO,OAAA,CAAQ,MAAA,EAAQ,WAAW,MAAA,EAAO;AAAA,IACpD,CAAA;AAAA,IACA,EAAA;AAAA,IACA,IAAA;AAAA,IACA,mBAAA,EAAqB;AAAA,GACtB,CAAA;AAED,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,EAAM,CAAA,EAAA,EAAK;AAC7B,IAAA,MAAM,CAAA,GAAI,MAAM,GAAA,CAAgB,EAAE,CAAA;AAClC,IAAA,IAAI,CAAA,EAAG,UAAU,UAAA,IAAc,CAAA,EAAG,UAAU,OAAA,IAAW,CAAA,EAAG,UAAU,WAAA,EAAa;AACjF,IAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,CAAC,CAAC,CAAA;AAAA,EAC3C;AACA,EAAA,OAAO,OAAA;AACT;AAEA,eAAe,QAAA,CACb,OAAA,EACA,OAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,SAAA,GAAY,QAAQ,WAAA,IAAe,CAAA;AAGzC,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,QAAQ,MAAM,CAAA;AACpD,EAAA,MAAM,SAAA,GAAY,gBAAgB,SAAS,CAAA;AAC3C,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AACvC,EAAA,MAAM,OAAA,GAAyB,IAAI,KAAA,CAAM,KAAA,CAAM,MAAM,CAAA;AACrD,EAAA,MAAM,QAAA,GAAW,EAAE,SAAA,EAAW,CAAA,EAAG,QAAQ,CAAA,EAAE;AAC3C,EAAA,IAAI,OAAA,GAAU,KAAA;AAEd,EAAA,MAAM,UAAU,MAAY;AAC1B,IAAA,OAAA,GAAU,IAAA;AAAA,EACZ,CAAA;AACA,EAAA,OAAA,CAAQ,MAAA,EAAQ,gBAAA,CAAiB,OAAA,EAAS,OAAO,CAAA;AAEjD,EAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,OAAA,KAAY,IAAA,EAAM,OAAA,GAAU,IAAA;AAEhD,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,CAAQ,GAAA;AAAA,MACZ,KAAA,CAAM,GAAA,CAAI,OAAO,IAAA,EAAM,KAAA,KAAU;AAC/B,QAAA,MAAM,OAAA,GAAU,MAAM,SAAA,CAAU,OAAA,EAAQ;AACxC,QAAA,IAAI;AACF,UAAA,IAAI,OAAA,EAAS;AACX,YAAA,OAAA,CAAQ,KAAK,CAAA,GAAI,WAAA,CAAY,IAAA,EAAM,KAAA,EAAO,QAAQ,MAAM,CAAA;AAAA,UAC1D,CAAA,MAAO;AACL,YAAA,OAAA,CAAQ,KAAK,CAAA,GAAI,MAAM,OAAO,IAAA,EAAM,KAAA,EAAO,SAAS,IAAI,CAAA;AAAA,UAC1D;AAAA,QACF,CAAA,SAAE;AACA,UAAA,OAAA,EAAQ;AAAA,QACV;AACA,QAAA,IAAI,OAAA,CAAQ,KAAK,CAAA,CAAE,EAAA,WAAa,SAAA,IAAa,CAAA;AAAA,sBAC/B,MAAA,IAAU,CAAA;AACxB,QAAA,MAAM,cAAA,CAAe,OAAA,CAAQ,QAAA,EAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AACrD,QAAA,gBAAA,CAAiB,QAAQ,UAAA,EAAY;AAAA,UACnC,OAAO,KAAA,CAAM,MAAA;AAAA,UACb,WAAW,QAAA,CAAS,SAAA;AAAA,UACpB,QAAQ,QAAA,CAAS,MAAA;AAAA,UACjB,QAAA,EAAU,UAAU,QAAA,EAAS;AAAA,UAC7B,OAAA,EAAS,KAAK,GAAA,CAAI,CAAA,EAAG,UAAU,OAAA,EAAQ,GAAI,SAAA,CAAU,QAAA,EAAU;AAAA,SAChE,CAAA;AAAA,MACH,CAAC;AAAA,KACH;AAAA,EACF,CAAA,SAAE;AACA,IAAA,OAAA,CAAQ,MAAA,EAAQ,mBAAA,CAAoB,OAAA,EAAS,OAAO,CAAA;AAAA,EACtD;AAEA,EAAA,OAAO,QAAQ,MAAA,GAAS,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,GAAI,OAAA;AAC3D;AAEA,eAAe,MAAA,CACb,IAAA,EACA,KAAA,EACA,OAAA,EACA,IAAA,EACsB;AACtB,EAAA,MAAM,EAAA,GAAK,KAAK,GAAA,EAAI;AACpB,EAAA,MAAM,SAAA,GAAY,iBAAA,CAAkB,IAAA,EAAM,OAAO,CAAA;AAEjD,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA;AACzC,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AACxC,MAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,IAAA,EAAK;AAC9B,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,IAAA;AAAA,QACJ,KAAA;AAAA,QACA,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,MAAA;AAAA,QACA,GAAI,KAAK,QAAA,KAAa,KAAA,CAAA,GAAY,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS,GAAI,EAAC;AAAA,QACjE,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,OAC3B;AAAA,IACF,CAAA,SAAE;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,MAAM,OAAA,EAAQ;AAAA,MACtB,SAAS,UAAA,EAAY;AAEnB,QAAA,IAAA;AAAA,UACE,CAAA,qDAAA,EAAwD,KAAK,CAAA,EAAA,EAC3D,UAAA,YAAsB,QAAQ,UAAA,CAAW,OAAA,GAAU,MAAA,CAAO,UAAU,CACtE;AAAA;AAAA,SACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA;AAAA,MACA,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,KAAA,EAAO,eAAe,GAAG,CAAA;AAAA,MACzB,GAAI,KAAK,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS,GAAI,EAAC;AAAA,MACjE,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,KAC3B;AAAA,EACF;AACF;AAEA,SAAS,iBAAA,CAAkB,MAAiB,OAAA,EAAqC;AAC/E,EAAA,MAAM;AAAA,IACJ,WAAA,EAAa,EAAA;AAAA,IACb,MAAA,EAAQ,EAAA;AAAA,IACR,QAAA,EAAU,GAAA;AAAA,IACV,UAAA,EAAY,GAAA;AAAA,IACZ,MAAA,EAAQ,EAAA;AAAA,IACR,IAAA,EAAM,EAAA;AAAA,IACN,GAAG;AAAA,GACL,GAAI,OAAA;AAOJ,EAAA,MAAM,SAAA,GAAY,IAAA;AAClB,EAAA,IAAI,IAAA,CAAK,iBAAiB,MAAA,EAAW;AACnC,IAAA,OAAO,EAAE,GAAG,SAAA,EAAW,YAAA,EAAc,KAAK,YAAA,EAAa;AAAA,EACzD;AACA,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,cAAc,YAAA,EAA6C;AAClE,EAAA,OAAO,OAAO,YAAA,KAAiB,QAAA,GAAW,EAAE,MAAA,EAAQ,cAAa,GAAI,YAAA;AACvE;AAEA,SAAS,WAAA,CAAY,IAAA,EAAiB,KAAA,EAAe,MAAA,EAAmC;AAEtF,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,MAAA,EAAQ,kBAAkB,iBAAA,EAAmB;AAC/C,IAAA,KAAA,GAAQ,MAAA,CAAO,MAAA;AAAA,EACjB,CAAA,MAAA,IAAW,MAAA,EAAQ,MAAA,YAAkB,KAAA,EAAO;AAC1C,IAAA,KAAA,GAAQ,IAAI,iBAAA,CAAkB,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS;AAAA,MACnD,IAAA,EAAM,SAAA;AAAA,MACN,OAAO,MAAA,CAAO;AAAA,KACf,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,KAAA,GAAQ,IAAI,iBAAA,CAAkB,+BAAA,EAAiC,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,EACpF;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,KAAA;AAAA,IACJ,KAAA;AAAA,IACA,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,KAAA;AAAA,IACA,GAAI,KAAK,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS,GAAI,EAAC;AAAA,IACjE,UAAA,EAAY;AAAA,GACd;AACF;AAEA,SAAS,eAAe,GAAA,EAAiC;AACvD,EAAA,IAAI,GAAA,YAAe,mBAAmB,OAAO,GAAA;AAC7C,EAAA,IAAI,eAAe,KAAA,EAAO;AACxB,IAAA,OAAO,IAAI,kBAAkB,GAAA,CAAI,OAAA,EAAS,EAAE,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,GAAA,EAAK,CAAA;AAAA,EAC3E;AACA,EAAA,OAAO,IAAI,kBAAkB,MAAA,CAAO,GAAG,GAAG,EAAE,IAAA,EAAM,WAAW,CAAA;AAC/D;AAEA,eAAe,cAAA,CAAe,IAA8B,MAAA,EAAoC;AAC9F,EAAA,IAAI,OAAO,MAAA,EAAW;AACtB,EAAA,IAAI;AACF,IAAA,MAAM,GAAG,MAAM,CAAA;AAAA,EACjB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAA;AAAA,MACE,iDACE,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CACjD;AAAA;AAAA,KACF;AAAA,EACF;AACF;AAEA,SAAS,gBAAA,CAAiB,IAAgC,QAAA,EAA+B;AACvF,EAAA,IAAI,OAAO,MAAA,EAAW;AACtB,EAAA,IAAI;AACF,IAAA,EAAA,CAAG,QAAQ,CAAA;AAAA,EACb,SAAS,GAAA,EAAK;AACZ,IAAA,IAAA;AAAA,MACE,mDACE,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CACjD;AAAA;AAAA,KACF;AAAA,EACF;AACF;AAOA,SAAS,qBAAA,CACP,SACA,QAAA,EAC6B;AAC7B,EAAA,MAAM,KAAA,uBAAY,GAAA,EAA4B;AAC9C,EAAA,IAAI,OAAA,KAAY,QAAW,OAAO,KAAA;AAClC,EAAA,KAAA,MAAW,CAAC,QAAA,EAAU,IAAI,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AACtD,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC1B,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AACtF,IAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACzB,IAAA,MAAM,UAAU,QAAA,CAAS,GAAA;AAAA,MAAI,CAAC,KAAA,EAAO,CAAA,KACnC,mBAAA,CAAoB,EAAE,QAAA,EAAU,WAAA,EAAa,KAAA,EAAO,QAAA,EAAU,CAAA,EAAG,MAAA,EAAQ,QAAA,EAAU;AAAA,KACrF;AACA,IAAA,KAAA,CAAM,GAAA;AAAA,MACJ,QAAA;AAAA,MACA,IAAI,cAAA,CAAe,QAAA,EAAU,SAAS,QAAA,GAAW,QAAQ,KAAK,YAAY;AAAA,KAC5E;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT","file":"batch-WX2HLXX2.js","sourcesContent":["/**\n * `Agent.batch(prompts, options)` core (ADRs D134-D140).\n *\n * Fans out N prompts via bounded concurrency, isolates failures per-prompt,\n * preserves input order in the result array, supports streaming callbacks\n * + AbortSignal. The credential pool (D131) is shared across all\n * in-flight agents via `withCredentialPool` ALS scope (EC-A fix).\n *\n * @internal\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { ConfigurationError, TheokitAgentError } from \"./errors.js\";\nimport { diag } from \"./internal/diagnostics.js\";\nimport { CredentialPool, newPooledCredential } from \"./internal/llm/credential-pool.js\";\nimport { withCredentialPool } from \"./internal/llm/credential-pool-context.js\";\nimport type { CredentialPoolStrategy } from \"./internal/llm/credential-pool-types.js\";\nimport { createSemaphore } from \"./internal/runtime/concurrency/async-semaphore.js\";\nimport { get as taskRegistryGet, submit as taskRegistrySubmit } from \"./internal/task/registry.js\";\nimport type { AgentOptions, SDKAgent } from \"./types/agent.js\";\nimport type { BatchItem, BatchOptions, BatchProgress, BatchResult } from \"./types/batch.js\";\n\n/** DI contract — keeps batch.ts cycle-free from agent.ts. @internal */\ninterface BatchDeps {\n  create: (options: AgentOptions) => Promise<SDKAgent>;\n}\n\n/**\n * Pre-flight boundary validation for `Agent.batch` (arch-review Gap 3).\n *\n * Mirrors the in-repo `validateAgentOptions` / `validateCronExpression`\n * pattern: throws `ConfigurationError` with a stable code on the first\n * violation, returns silently otherwise. Pure — no I/O.\n *\n * Rules:\n * - `concurrency`, when provided, must be a positive integer (rejects\n *   0/negative/non-integer/NaN/Infinity). Previously this was caught only\n *   incidentally deep inside `createSemaphore` with a leaky \"permits\"\n *   message, AND after task wrapping (dangling Task on invalid input).\n * - every prompt item must carry a non-empty string prompt. Previously\n *   `normalizeItem` passed `prompt: \"\"` / non-string straight to\n *   `agent.send`. (Whitespace-only strings are intentionally NOT rejected —\n *   an empty string is a structural error; judging content is not this\n *   validator's job, and the repo's property tests treat any length>=1\n *   string as a valid prompt.)\n *\n * @internal\n */\nexport function validateBatchInput(\n  prompts: ReadonlyArray<string | BatchItem>,\n  options: BatchOptions,\n): void {\n  const { concurrency } = options;\n  if (concurrency !== undefined && (!Number.isInteger(concurrency) || concurrency < 1)) {\n    throw new ConfigurationError(\n      `Agent.batch concurrency must be a positive integer, got ${concurrency}`,\n      { code: \"invalid_concurrency\" },\n    );\n  }\n  for (let i = 0; i < prompts.length; i++) {\n    const item = prompts[i];\n    const prompt = typeof item === \"string\" ? item : item?.prompt;\n    if (typeof prompt !== \"string\" || prompt.length === 0) {\n      throw new ConfigurationError(`Agent.batch prompt at index ${i} must be a non-empty string`, {\n        code: \"invalid_batch_item\",\n      });\n    }\n  }\n}\n\n/**\n * Run N prompts in parallel with bounded concurrency.\n *\n * @internal\n */\nexport async function batchImpl(\n  prompts: ReadonlyArray<string | BatchItem>,\n  options: BatchOptions,\n  deps: BatchDeps,\n): Promise<BatchResult[]> {\n  // EC-1: empty array → no work, no agents created.\n  if (prompts.length === 0) return [];\n\n  // Pre-flight boundary validation (arch-review Gap 3). MUST run before pool\n  // build AND before wrapBatchAsTask so invalid input never registers a\n  // dangling Task or builds a credential pool (fail-fast, Rule 8).\n  validateBatchInput(prompts, options);\n\n  // EC-A fix: build credential pools ONCE and share via AsyncLocalStorage.\n  // Without this each Agent.create() would build its own pool from identical\n  // apiKeys → 4× rate-limit wastage per concurrency window.\n  const sharedPools = buildPoolsFromApiKeys(\n    options.providers?.apiKeys,\n    options.providers?.credentialPoolStrategy,\n  );\n  const exec = (): Promise<BatchResult[]> => runBatch(prompts, options, deps);\n  const withPool = (): Promise<BatchResult[]> =>\n    sharedPools.size > 0 ? withCredentialPool(sharedPools, exec) : exec();\n  // T3.3: opt-in Task wrapping (ADRs D363, D374). Register the whole\n  // batch as a single Task (kind=\"batch\") with `b-` prefix (D368/EC-5).\n  if (options.task !== undefined) {\n    return wrapBatchAsTask(prompts.length, options.task, withPool);\n  }\n  return withPool();\n}\n\nasync function wrapBatchAsTask(\n  total: number,\n  taskOpt: true | { id?: string; meta?: Record<string, unknown> },\n  exec: () => Promise<BatchResult[]>,\n): Promise<BatchResult[]> {\n  const opts = taskOpt === true ? {} : taskOpt;\n  const id = opts.id ?? `b-${randomUUID()}`;\n  const meta: Record<string, unknown> = {\n    total,\n    ...(opts.meta ?? {}),\n  };\n  let results: BatchResult[] = [];\n  await taskRegistrySubmit({\n    kind: \"batch\",\n    work: async (ctx) => {\n      results = await exec();\n      const succeeded = results.filter((r) => r.ok).length;\n      const failed = results.length - succeeded;\n      ctx.emit({ total: results.length, succeeded, failed });\n      return { total: results.length, succeeded, failed };\n    },\n    id,\n    meta,\n    allowReservedPrefix: true,\n  });\n  // submit returns immediately with a queued handle. Wait for terminal.\n  for (let i = 0; i < 5000; i++) {\n    const h = await taskRegistryGet(id);\n    if (h?.state === \"finished\" || h?.state === \"error\" || h?.state === \"cancelled\") break;\n    await new Promise((r) => setTimeout(r, 5));\n  }\n  return results;\n}\n\nasync function runBatch(\n  prompts: ReadonlyArray<string | BatchItem>,\n  options: BatchOptions,\n  deps: BatchDeps,\n): Promise<BatchResult[]> {\n  const requested = options.concurrency ?? 4;\n  // createSemaphore throws on invalid (EC-2).\n  // EC-3: cap to prompts.length to avoid idle workers.\n  const effective = Math.min(requested, prompts.length);\n  const semaphore = createSemaphore(effective);\n  const items = prompts.map(normalizeItem);\n  const results: BatchResult[] = new Array(items.length);\n  const counters = { completed: 0, failed: 0 };\n  let aborted = false;\n\n  const onAbort = (): void => {\n    aborted = true;\n  };\n  options.signal?.addEventListener(\"abort\", onAbort);\n  // EC-C: pre-aborted signal — treat as already-aborted before any work.\n  if (options.signal?.aborted === true) aborted = true;\n\n  try {\n    await Promise.all(\n      items.map(async (item, index) => {\n        const release = await semaphore.acquire();\n        try {\n          if (aborted) {\n            results[index] = abortResult(item, index, options.signal);\n          } else {\n            results[index] = await runOne(item, index, options, deps);\n          }\n        } finally {\n          release();\n        }\n        if (results[index].ok) counters.completed += 1;\n        else counters.failed += 1;\n        await safeCallResult(options.onResult, results[index]);\n        safeCallProgress(options.onProgress, {\n          total: items.length,\n          completed: counters.completed,\n          failed: counters.failed,\n          inFlight: semaphore.inFlight(),\n          pending: Math.max(0, semaphore.pending() - semaphore.inFlight()),\n        });\n      }),\n    );\n  } finally {\n    options.signal?.removeEventListener(\"abort\", onAbort);\n  }\n\n  return options.filter ? results.filter(options.filter) : results;\n}\n\nasync function runOne(\n  item: BatchItem,\n  index: number,\n  options: BatchOptions,\n  deps: BatchDeps,\n): Promise<BatchResult> {\n  const t0 = Date.now();\n  const agentOpts = buildAgentOptions(item, options);\n\n  try {\n    const agent = await deps.create(agentOpts);\n    try {\n      const run = await agent.send(item.prompt);\n      const result = await run.wait();\n      return {\n        ok: true,\n        index,\n        prompt: item.prompt,\n        result,\n        ...(item.metadata !== undefined ? { metadata: item.metadata } : {}),\n        durationMs: Date.now() - t0,\n      };\n    } finally {\n      // EC-8: dispose failure → stderr warn, don't fail the result.\n      try {\n        await agent.dispose();\n      } catch (disposeErr) {\n        // theokit#147 — the interceptable channel; a batch run must not write onto a TUI's frame.\n        diag(\n          `[theokit-sdk] batch: agent.dispose failed for prompt ${index}: ${\n            disposeErr instanceof Error ? disposeErr.message : String(disposeErr)\n          }\\n`,\n        );\n      }\n    }\n  } catch (err) {\n    return {\n      ok: false,\n      index,\n      prompt: item.prompt,\n      error: toTheokitError(err),\n      ...(item.metadata !== undefined ? { metadata: item.metadata } : {}),\n      durationMs: Date.now() - t0,\n    };\n  }\n}\n\nfunction buildAgentOptions(item: BatchItem, options: BatchOptions): AgentOptions {\n  const {\n    concurrency: _c,\n    filter: _f,\n    onResult: _or,\n    onProgress: _op,\n    signal: _s,\n    task: _t,\n    ...rest\n  } = options;\n  void _c;\n  void _f;\n  void _or;\n  void _op;\n  void _s;\n  void _t;\n  const agentOpts = rest as AgentOptions;\n  if (item.systemPrompt !== undefined) {\n    return { ...agentOpts, systemPrompt: item.systemPrompt };\n  }\n  return agentOpts;\n}\n\nfunction normalizeItem(promptOrItem: string | BatchItem): BatchItem {\n  return typeof promptOrItem === \"string\" ? { prompt: promptOrItem } : promptOrItem;\n}\n\nfunction abortResult(item: BatchItem, index: number, signal?: AbortSignal): BatchResult {\n  // EC-D: propagate signal.reason when set (preserves caller's error).\n  let error: TheokitAgentError;\n  if (signal?.reason instanceof TheokitAgentError) {\n    error = signal.reason;\n  } else if (signal?.reason instanceof Error) {\n    error = new TheokitAgentError(signal.reason.message, {\n      code: \"aborted\",\n      cause: signal.reason,\n    });\n  } else {\n    error = new TheokitAgentError(\"Batch aborted via AbortSignal\", { code: \"aborted\" });\n  }\n  return {\n    ok: false,\n    index,\n    prompt: item.prompt,\n    error,\n    ...(item.metadata !== undefined ? { metadata: item.metadata } : {}),\n    durationMs: 0,\n  };\n}\n\nfunction toTheokitError(err: unknown): TheokitAgentError {\n  if (err instanceof TheokitAgentError) return err;\n  if (err instanceof Error) {\n    return new TheokitAgentError(err.message, { code: \"unknown\", cause: err });\n  }\n  return new TheokitAgentError(String(err), { code: \"unknown\" });\n}\n\nasync function safeCallResult(cb: BatchOptions[\"onResult\"], result: BatchResult): Promise<void> {\n  if (cb === undefined) return;\n  try {\n    await cb(result);\n  } catch (err) {\n    diag(\n      `[theokit-sdk] batch: onResult callback threw: ${\n        err instanceof Error ? err.message : String(err)\n      }\\n`,\n    );\n  }\n}\n\nfunction safeCallProgress(cb: BatchOptions[\"onProgress\"], progress: BatchProgress): void {\n  if (cb === undefined) return;\n  try {\n    cb(progress);\n  } catch (err) {\n    diag(\n      `[theokit-sdk] batch: onProgress callback threw: ${\n        err instanceof Error ? err.message : String(err)\n      }\\n`,\n    );\n  }\n}\n\n/**\n * EC-A: construct shared pools from options.apiKeys. Empty/invalid → empty Map.\n *\n * @internal\n */\nfunction buildPoolsFromApiKeys(\n  apiKeys: Record<string, string[]> | undefined,\n  strategy: Record<string, CredentialPoolStrategy> | undefined,\n): Map<string, CredentialPool> {\n  const pools = new Map<string, CredentialPool>();\n  if (apiKeys === undefined) return pools;\n  for (const [provider, keys] of Object.entries(apiKeys)) {\n    if (!Array.isArray(keys)) continue;\n    const filtered = keys.filter((k): k is string => typeof k === \"string\" && k.length > 0);\n    if (filtered.length < 2) continue; // 1-key pools aren't pools\n    const entries = filtered.map((token, i) =>\n      newPooledCredential({ provider, accessToken: token, priority: i, source: \"manual\" }),\n    );\n    pools.set(\n      provider,\n      new CredentialPool(provider, entries, strategy?.[provider] ?? \"fill_first\"),\n    );\n  }\n  return pools;\n}\n"]}
+{"version":3,"sources":["../src/batch.ts"],"names":[],"mappings":";;;;;;;;;;;AAgDO,SAAS,kBAAA,CACd,SACA,OAAA,EACM;AACN,EAAA,MAAM,EAAE,aAAY,GAAI,OAAA;AACxB,EAAA,IAAI,WAAA,KAAgB,WAAc,CAAC,MAAA,CAAO,UAAU,WAAW,CAAA,IAAK,cAAc,CAAA,CAAA,EAAI;AACpF,IAAA,MAAM,IAAI,kBAAA;AAAA,MACR,2DAA2D,WAAW,CAAA,CAAA;AAAA,MACtE,EAAE,MAAM,qBAAA;AAAsB,KAChC;AAAA,EACF;AACA,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,IAAA,MAAM,IAAA,GAAO,QAAQ,CAAC,CAAA;AACtB,IAAA,MAAM,MAAA,GAAS,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,EAAM,MAAA;AACvD,IAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,CAAO,WAAW,CAAA,EAAG;AACrD,MAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,4BAAA,EAA+B,CAAC,CAAA,2BAAA,CAAA,EAA+B;AAAA,QAC1F,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AAAA,EACF;AACF;AAOA,eAAsB,SAAA,CACpB,OAAA,EACA,OAAA,EACA,IAAA,EACwB;AAExB,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,EAAC;AAKlC,EAAA,kBAAA,CAAmB,SAAS,OAAO,CAAA;AAKnC,EAAA,MAAM,WAAA,GAAc,qBAAA;AAAA,IAClB,QAAQ,SAAA,EAAW,OAAA;AAAA,IACnB,QAAQ,SAAA,EAAW;AAAA,GACrB;AACA,EAAA,MAAM,IAAA,GAAO,MAA8B,QAAA,CAAS,OAAA,EAAS,SAAS,IAAI,CAAA;AAC1E,EAAA,MAAM,QAAA,GAAW,MACf,WAAA,CAAY,IAAA,GAAO,IAAI,kBAAA,CAAmB,WAAA,EAAa,IAAI,CAAA,GAAI,IAAA,EAAK;AAGtE,EAAA,IAAI,OAAA,CAAQ,SAAS,MAAA,EAAW;AAC9B,IAAA,OAAO,eAAA,CAAgB,OAAA,CAAQ,MAAA,EAAQ,OAAA,CAAQ,MAAM,QAAQ,CAAA;AAAA,EAC/D;AACA,EAAA,OAAO,QAAA,EAAS;AAClB;AAEA,eAAe,eAAA,CACb,KAAA,EACA,OAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,OAAA,KAAY,IAAA,GAAO,EAAC,GAAI,OAAA;AACrC,EAAA,MAAM,EAAA,GAAK,IAAA,CAAK,EAAA,IAAM,CAAA,EAAA,EAAK,YAAY,CAAA,CAAA;AACvC,EAAA,MAAM,IAAA,GAAgC;AAAA,IACpC,KAAA;AAAA,IACA,GAAI,IAAA,CAAK,IAAA,IAAQ;AAAC,GACpB;AACA,EAAA,IAAI,UAAyB,EAAC;AAC9B,EAAA,MAAM,MAAA,CAAmB;AAAA,IACvB,IAAA,EAAM,OAAA;AAAA,IACN,IAAA,EAAM,OAAO,GAAA,KAAQ;AACnB,MAAA,OAAA,GAAU,MAAM,IAAA,EAAK;AACrB,MAAA,MAAM,YAAY,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,MAAA;AAC9C,MAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,GAAS,SAAA;AAChC,MAAA,GAAA,CAAI,KAAK,EAAE,KAAA,EAAO,QAAQ,MAAA,EAAQ,SAAA,EAAW,QAAQ,CAAA;AACrD,MAAA,OAAO,EAAE,KAAA,EAAO,OAAA,CAAQ,MAAA,EAAQ,WAAW,MAAA,EAAO;AAAA,IACpD,CAAA;AAAA,IACA,EAAA;AAAA,IACA,IAAA;AAAA,IACA,mBAAA,EAAqB;AAAA,GACtB,CAAA;AAED,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,EAAM,CAAA,EAAA,EAAK;AAC7B,IAAA,MAAM,CAAA,GAAI,MAAM,GAAA,CAAgB,EAAE,CAAA;AAClC,IAAA,IAAI,CAAA,EAAG,UAAU,UAAA,IAAc,CAAA,EAAG,UAAU,OAAA,IAAW,CAAA,EAAG,UAAU,WAAA,EAAa;AACjF,IAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,CAAC,CAAC,CAAA;AAAA,EAC3C;AACA,EAAA,OAAO,OAAA;AACT;AAEA,eAAe,QAAA,CACb,OAAA,EACA,OAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,SAAA,GAAY,QAAQ,WAAA,IAAe,CAAA;AAGzC,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,QAAQ,MAAM,CAAA;AACpD,EAAA,MAAM,SAAA,GAAY,gBAAgB,SAAS,CAAA;AAC3C,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AACvC,EAAA,MAAM,OAAA,GAAyB,IAAI,KAAA,CAAM,KAAA,CAAM,MAAM,CAAA;AACrD,EAAA,MAAM,QAAA,GAAW,EAAE,SAAA,EAAW,CAAA,EAAG,QAAQ,CAAA,EAAE;AAC3C,EAAA,IAAI,OAAA,GAAU,KAAA;AAEd,EAAA,MAAM,UAAU,MAAY;AAC1B,IAAA,OAAA,GAAU,IAAA;AAAA,EACZ,CAAA;AACA,EAAA,OAAA,CAAQ,MAAA,EAAQ,gBAAA,CAAiB,OAAA,EAAS,OAAO,CAAA;AAEjD,EAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,OAAA,KAAY,IAAA,EAAM,OAAA,GAAU,IAAA;AAEhD,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,CAAQ,GAAA;AAAA,MACZ,KAAA,CAAM,GAAA,CAAI,OAAO,IAAA,EAAM,KAAA,KAAU;AAC/B,QAAA,MAAM,OAAA,GAAU,MAAM,SAAA,CAAU,OAAA,EAAQ;AACxC,QAAA,IAAI;AACF,UAAA,IAAI,OAAA,EAAS;AACX,YAAA,OAAA,CAAQ,KAAK,CAAA,GAAI,WAAA,CAAY,IAAA,EAAM,KAAA,EAAO,QAAQ,MAAM,CAAA;AAAA,UAC1D,CAAA,MAAO;AACL,YAAA,OAAA,CAAQ,KAAK,CAAA,GAAI,MAAM,OAAO,IAAA,EAAM,KAAA,EAAO,SAAS,IAAI,CAAA;AAAA,UAC1D;AAAA,QACF,CAAA,SAAE;AACA,UAAA,OAAA,EAAQ;AAAA,QACV;AACA,QAAA,IAAI,OAAA,CAAQ,KAAK,CAAA,CAAE,EAAA,WAAa,SAAA,IAAa,CAAA;AAAA,sBAC/B,MAAA,IAAU,CAAA;AACxB,QAAA,MAAM,cAAA,CAAe,OAAA,CAAQ,QAAA,EAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AACrD,QAAA,gBAAA,CAAiB,QAAQ,UAAA,EAAY;AAAA,UACnC,OAAO,KAAA,CAAM,MAAA;AAAA,UACb,WAAW,QAAA,CAAS,SAAA;AAAA,UACpB,QAAQ,QAAA,CAAS,MAAA;AAAA,UACjB,QAAA,EAAU,UAAU,QAAA,EAAS;AAAA,UAC7B,OAAA,EAAS,KAAK,GAAA,CAAI,CAAA,EAAG,UAAU,OAAA,EAAQ,GAAI,SAAA,CAAU,QAAA,EAAU;AAAA,SAChE,CAAA;AAAA,MACH,CAAC;AAAA,KACH;AAAA,EACF,CAAA,SAAE;AACA,IAAA,OAAA,CAAQ,MAAA,EAAQ,mBAAA,CAAoB,OAAA,EAAS,OAAO,CAAA;AAAA,EACtD;AAEA,EAAA,OAAO,QAAQ,MAAA,GAAS,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,GAAI,OAAA;AAC3D;AAEA,eAAe,MAAA,CACb,IAAA,EACA,KAAA,EACA,OAAA,EACA,IAAA,EACsB;AACtB,EAAA,MAAM,EAAA,GAAK,KAAK,GAAA,EAAI;AACpB,EAAA,MAAM,SAAA,GAAY,iBAAA,CAAkB,IAAA,EAAM,OAAO,CAAA;AAEjD,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA;AACzC,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AACxC,MAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,IAAA,EAAK;AAC9B,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,IAAA;AAAA,QACJ,KAAA;AAAA,QACA,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,MAAA;AAAA,QACA,GAAI,KAAK,QAAA,KAAa,KAAA,CAAA,GAAY,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS,GAAI,EAAC;AAAA,QACjE,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,OAC3B;AAAA,IACF,CAAA,SAAE;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,MAAM,OAAA,EAAQ;AAAA,MACtB,SAAS,UAAA,EAAY;AAEnB,QAAA,IAAA;AAAA,UACE,CAAA,qDAAA,EAAwD,KAAK,CAAA,EAAA,EAC3D,UAAA,YAAsB,QAAQ,UAAA,CAAW,OAAA,GAAU,MAAA,CAAO,UAAU,CACtE;AAAA;AAAA,SACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA;AAAA,MACA,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,KAAA,EAAO,eAAe,GAAG,CAAA;AAAA,MACzB,GAAI,KAAK,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS,GAAI,EAAC;AAAA,MACjE,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,KAC3B;AAAA,EACF;AACF;AAEA,SAAS,iBAAA,CAAkB,MAAiB,OAAA,EAAqC;AAC/E,EAAA,MAAM;AAAA,IACJ,WAAA,EAAa,EAAA;AAAA,IACb,MAAA,EAAQ,EAAA;AAAA,IACR,QAAA,EAAU,GAAA;AAAA,IACV,UAAA,EAAY,GAAA;AAAA,IACZ,MAAA,EAAQ,EAAA;AAAA,IACR,IAAA,EAAM,EAAA;AAAA,IACN,GAAG;AAAA,GACL,GAAI,OAAA;AAOJ,EAAA,MAAM,SAAA,GAAY,IAAA;AAClB,EAAA,IAAI,IAAA,CAAK,iBAAiB,MAAA,EAAW;AACnC,IAAA,OAAO,EAAE,GAAG,SAAA,EAAW,YAAA,EAAc,KAAK,YAAA,EAAa;AAAA,EACzD;AACA,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,cAAc,YAAA,EAA6C;AAClE,EAAA,OAAO,OAAO,YAAA,KAAiB,QAAA,GAAW,EAAE,MAAA,EAAQ,cAAa,GAAI,YAAA;AACvE;AAEA,SAAS,WAAA,CAAY,IAAA,EAAiB,KAAA,EAAe,MAAA,EAAmC;AAEtF,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,MAAA,EAAQ,kBAAkB,iBAAA,EAAmB;AAC/C,IAAA,KAAA,GAAQ,MAAA,CAAO,MAAA;AAAA,EACjB,CAAA,MAAA,IAAW,MAAA,EAAQ,MAAA,YAAkB,KAAA,EAAO;AAC1C,IAAA,KAAA,GAAQ,IAAI,iBAAA,CAAkB,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS;AAAA,MACnD,IAAA,EAAM,SAAA;AAAA,MACN,OAAO,MAAA,CAAO;AAAA,KACf,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,KAAA,GAAQ,IAAI,iBAAA,CAAkB,+BAAA,EAAiC,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,EACpF;AACA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,KAAA;AAAA,IACJ,KAAA;AAAA,IACA,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,KAAA;AAAA,IACA,GAAI,KAAK,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS,GAAI,EAAC;AAAA,IACjE,UAAA,EAAY;AAAA,GACd;AACF;AAEA,SAAS,eAAe,GAAA,EAAiC;AACvD,EAAA,IAAI,GAAA,YAAe,mBAAmB,OAAO,GAAA;AAC7C,EAAA,IAAI,eAAe,KAAA,EAAO;AACxB,IAAA,OAAO,IAAI,kBAAkB,GAAA,CAAI,OAAA,EAAS,EAAE,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,GAAA,EAAK,CAAA;AAAA,EAC3E;AACA,EAAA,OAAO,IAAI,kBAAkB,MAAA,CAAO,GAAG,GAAG,EAAE,IAAA,EAAM,WAAW,CAAA;AAC/D;AAEA,eAAe,cAAA,CAAe,IAA8B,MAAA,EAAoC;AAC9F,EAAA,IAAI,OAAO,MAAA,EAAW;AACtB,EAAA,IAAI;AACF,IAAA,MAAM,GAAG,MAAM,CAAA;AAAA,EACjB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAA;AAAA,MACE,iDACE,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CACjD;AAAA;AAAA,KACF;AAAA,EACF;AACF;AAEA,SAAS,gBAAA,CAAiB,IAAgC,QAAA,EAA+B;AACvF,EAAA,IAAI,OAAO,MAAA,EAAW;AACtB,EAAA,IAAI;AACF,IAAA,EAAA,CAAG,QAAQ,CAAA;AAAA,EACb,SAAS,GAAA,EAAK;AACZ,IAAA,IAAA;AAAA,MACE,mDACE,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CACjD;AAAA;AAAA,KACF;AAAA,EACF;AACF;AAOA,SAAS,qBAAA,CACP,SACA,QAAA,EAC6B;AAC7B,EAAA,MAAM,KAAA,uBAAY,GAAA,EAA4B;AAC9C,EAAA,IAAI,OAAA,KAAY,QAAW,OAAO,KAAA;AAClC,EAAA,KAAA,MAAW,CAAC,QAAA,EAAU,IAAI,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AACtD,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AAC1B,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA;AACtF,IAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACzB,IAAA,MAAM,UAAU,QAAA,CAAS,GAAA;AAAA,MAAI,CAAC,KAAA,EAAO,CAAA,KACnC,mBAAA,CAAoB,EAAE,QAAA,EAAU,WAAA,EAAa,KAAA,EAAO,QAAA,EAAU,CAAA,EAAG,MAAA,EAAQ,QAAA,EAAU;AAAA,KACrF;AACA,IAAA,KAAA,CAAM,GAAA;AAAA,MACJ,QAAA;AAAA,MACA,IAAI,cAAA,CAAe,QAAA,EAAU,SAAS,QAAA,GAAW,QAAQ,KAAK,YAAY;AAAA,KAC5E;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT","file":"batch-OUF4N2TM.js","sourcesContent":["/**\n * `Agent.batch(prompts, options)` core (ADRs D134-D140).\n *\n * Fans out N prompts via bounded concurrency, isolates failures per-prompt,\n * preserves input order in the result array, supports streaming callbacks\n * + AbortSignal. The credential pool (D131) is shared across all\n * in-flight agents via `withCredentialPool` ALS scope (EC-A fix).\n *\n * @internal\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { ConfigurationError, TheokitAgentError } from \"./errors.js\";\nimport { diag } from \"./internal/diagnostics.js\";\nimport { CredentialPool, newPooledCredential } from \"./internal/llm/credential-pool.js\";\nimport { withCredentialPool } from \"./internal/llm/credential-pool-context.js\";\nimport type { CredentialPoolStrategy } from \"./internal/llm/credential-pool-types.js\";\nimport { createSemaphore } from \"./internal/runtime/concurrency/async-semaphore.js\";\nimport { get as taskRegistryGet, submit as taskRegistrySubmit } from \"./internal/task/registry.js\";\nimport type { AgentOptions, SDKAgent } from \"./types/agent.js\";\nimport type { BatchItem, BatchOptions, BatchProgress, BatchResult } from \"./types/batch.js\";\n\n/** DI contract — keeps batch.ts cycle-free from agent.ts. @internal */\ninterface BatchDeps {\n  create: (options: AgentOptions) => Promise<SDKAgent>;\n}\n\n/**\n * Pre-flight boundary validation for `Agent.batch` (arch-review Gap 3).\n *\n * Mirrors the in-repo `validateAgentOptions` / `validateCronExpression`\n * pattern: throws `ConfigurationError` with a stable code on the first\n * violation, returns silently otherwise. Pure — no I/O.\n *\n * Rules:\n * - `concurrency`, when provided, must be a positive integer (rejects\n *   0/negative/non-integer/NaN/Infinity). Previously this was caught only\n *   incidentally deep inside `createSemaphore` with a leaky \"permits\"\n *   message, AND after task wrapping (dangling Task on invalid input).\n * - every prompt item must carry a non-empty string prompt. Previously\n *   `normalizeItem` passed `prompt: \"\"` / non-string straight to\n *   `agent.send`. (Whitespace-only strings are intentionally NOT rejected —\n *   an empty string is a structural error; judging content is not this\n *   validator's job, and the repo's property tests treat any length>=1\n *   string as a valid prompt.)\n *\n * @internal\n */\nexport function validateBatchInput(\n  prompts: ReadonlyArray<string | BatchItem>,\n  options: BatchOptions,\n): void {\n  const { concurrency } = options;\n  if (concurrency !== undefined && (!Number.isInteger(concurrency) || concurrency < 1)) {\n    throw new ConfigurationError(\n      `Agent.batch concurrency must be a positive integer, got ${concurrency}`,\n      { code: \"invalid_concurrency\" },\n    );\n  }\n  for (let i = 0; i < prompts.length; i++) {\n    const item = prompts[i];\n    const prompt = typeof item === \"string\" ? item : item?.prompt;\n    if (typeof prompt !== \"string\" || prompt.length === 0) {\n      throw new ConfigurationError(`Agent.batch prompt at index ${i} must be a non-empty string`, {\n        code: \"invalid_batch_item\",\n      });\n    }\n  }\n}\n\n/**\n * Run N prompts in parallel with bounded concurrency.\n *\n * @internal\n */\nexport async function batchImpl(\n  prompts: ReadonlyArray<string | BatchItem>,\n  options: BatchOptions,\n  deps: BatchDeps,\n): Promise<BatchResult[]> {\n  // EC-1: empty array → no work, no agents created.\n  if (prompts.length === 0) return [];\n\n  // Pre-flight boundary validation (arch-review Gap 3). MUST run before pool\n  // build AND before wrapBatchAsTask so invalid input never registers a\n  // dangling Task or builds a credential pool (fail-fast, Rule 8).\n  validateBatchInput(prompts, options);\n\n  // EC-A fix: build credential pools ONCE and share via AsyncLocalStorage.\n  // Without this each Agent.create() would build its own pool from identical\n  // apiKeys → 4× rate-limit wastage per concurrency window.\n  const sharedPools = buildPoolsFromApiKeys(\n    options.providers?.apiKeys,\n    options.providers?.credentialPoolStrategy,\n  );\n  const exec = (): Promise<BatchResult[]> => runBatch(prompts, options, deps);\n  const withPool = (): Promise<BatchResult[]> =>\n    sharedPools.size > 0 ? withCredentialPool(sharedPools, exec) : exec();\n  // T3.3: opt-in Task wrapping (ADRs D363, D374). Register the whole\n  // batch as a single Task (kind=\"batch\") with `b-` prefix (D368/EC-5).\n  if (options.task !== undefined) {\n    return wrapBatchAsTask(prompts.length, options.task, withPool);\n  }\n  return withPool();\n}\n\nasync function wrapBatchAsTask(\n  total: number,\n  taskOpt: true | { id?: string; meta?: Record<string, unknown> },\n  exec: () => Promise<BatchResult[]>,\n): Promise<BatchResult[]> {\n  const opts = taskOpt === true ? {} : taskOpt;\n  const id = opts.id ?? `b-${randomUUID()}`;\n  const meta: Record<string, unknown> = {\n    total,\n    ...(opts.meta ?? {}),\n  };\n  let results: BatchResult[] = [];\n  await taskRegistrySubmit({\n    kind: \"batch\",\n    work: async (ctx) => {\n      results = await exec();\n      const succeeded = results.filter((r) => r.ok).length;\n      const failed = results.length - succeeded;\n      ctx.emit({ total: results.length, succeeded, failed });\n      return { total: results.length, succeeded, failed };\n    },\n    id,\n    meta,\n    allowReservedPrefix: true,\n  });\n  // submit returns immediately with a queued handle. Wait for terminal.\n  for (let i = 0; i < 5000; i++) {\n    const h = await taskRegistryGet(id);\n    if (h?.state === \"finished\" || h?.state === \"error\" || h?.state === \"cancelled\") break;\n    await new Promise((r) => setTimeout(r, 5));\n  }\n  return results;\n}\n\nasync function runBatch(\n  prompts: ReadonlyArray<string | BatchItem>,\n  options: BatchOptions,\n  deps: BatchDeps,\n): Promise<BatchResult[]> {\n  const requested = options.concurrency ?? 4;\n  // createSemaphore throws on invalid (EC-2).\n  // EC-3: cap to prompts.length to avoid idle workers.\n  const effective = Math.min(requested, prompts.length);\n  const semaphore = createSemaphore(effective);\n  const items = prompts.map(normalizeItem);\n  const results: BatchResult[] = new Array(items.length);\n  const counters = { completed: 0, failed: 0 };\n  let aborted = false;\n\n  const onAbort = (): void => {\n    aborted = true;\n  };\n  options.signal?.addEventListener(\"abort\", onAbort);\n  // EC-C: pre-aborted signal — treat as already-aborted before any work.\n  if (options.signal?.aborted === true) aborted = true;\n\n  try {\n    await Promise.all(\n      items.map(async (item, index) => {\n        const release = await semaphore.acquire();\n        try {\n          if (aborted) {\n            results[index] = abortResult(item, index, options.signal);\n          } else {\n            results[index] = await runOne(item, index, options, deps);\n          }\n        } finally {\n          release();\n        }\n        if (results[index].ok) counters.completed += 1;\n        else counters.failed += 1;\n        await safeCallResult(options.onResult, results[index]);\n        safeCallProgress(options.onProgress, {\n          total: items.length,\n          completed: counters.completed,\n          failed: counters.failed,\n          inFlight: semaphore.inFlight(),\n          pending: Math.max(0, semaphore.pending() - semaphore.inFlight()),\n        });\n      }),\n    );\n  } finally {\n    options.signal?.removeEventListener(\"abort\", onAbort);\n  }\n\n  return options.filter ? results.filter(options.filter) : results;\n}\n\nasync function runOne(\n  item: BatchItem,\n  index: number,\n  options: BatchOptions,\n  deps: BatchDeps,\n): Promise<BatchResult> {\n  const t0 = Date.now();\n  const agentOpts = buildAgentOptions(item, options);\n\n  try {\n    const agent = await deps.create(agentOpts);\n    try {\n      const run = await agent.send(item.prompt);\n      const result = await run.wait();\n      return {\n        ok: true,\n        index,\n        prompt: item.prompt,\n        result,\n        ...(item.metadata !== undefined ? { metadata: item.metadata } : {}),\n        durationMs: Date.now() - t0,\n      };\n    } finally {\n      // EC-8: dispose failure → stderr warn, don't fail the result.\n      try {\n        await agent.dispose();\n      } catch (disposeErr) {\n        // theokit#147 — the interceptable channel; a batch run must not write onto a TUI's frame.\n        diag(\n          `[theokit-sdk] batch: agent.dispose failed for prompt ${index}: ${\n            disposeErr instanceof Error ? disposeErr.message : String(disposeErr)\n          }\\n`,\n        );\n      }\n    }\n  } catch (err) {\n    return {\n      ok: false,\n      index,\n      prompt: item.prompt,\n      error: toTheokitError(err),\n      ...(item.metadata !== undefined ? { metadata: item.metadata } : {}),\n      durationMs: Date.now() - t0,\n    };\n  }\n}\n\nfunction buildAgentOptions(item: BatchItem, options: BatchOptions): AgentOptions {\n  const {\n    concurrency: _c,\n    filter: _f,\n    onResult: _or,\n    onProgress: _op,\n    signal: _s,\n    task: _t,\n    ...rest\n  } = options;\n  void _c;\n  void _f;\n  void _or;\n  void _op;\n  void _s;\n  void _t;\n  const agentOpts = rest as AgentOptions;\n  if (item.systemPrompt !== undefined) {\n    return { ...agentOpts, systemPrompt: item.systemPrompt };\n  }\n  return agentOpts;\n}\n\nfunction normalizeItem(promptOrItem: string | BatchItem): BatchItem {\n  return typeof promptOrItem === \"string\" ? { prompt: promptOrItem } : promptOrItem;\n}\n\nfunction abortResult(item: BatchItem, index: number, signal?: AbortSignal): BatchResult {\n  // EC-D: propagate signal.reason when set (preserves caller's error).\n  let error: TheokitAgentError;\n  if (signal?.reason instanceof TheokitAgentError) {\n    error = signal.reason;\n  } else if (signal?.reason instanceof Error) {\n    error = new TheokitAgentError(signal.reason.message, {\n      code: \"aborted\",\n      cause: signal.reason,\n    });\n  } else {\n    error = new TheokitAgentError(\"Batch aborted via AbortSignal\", { code: \"aborted\" });\n  }\n  return {\n    ok: false,\n    index,\n    prompt: item.prompt,\n    error,\n    ...(item.metadata !== undefined ? { metadata: item.metadata } : {}),\n    durationMs: 0,\n  };\n}\n\nfunction toTheokitError(err: unknown): TheokitAgentError {\n  if (err instanceof TheokitAgentError) return err;\n  if (err instanceof Error) {\n    return new TheokitAgentError(err.message, { code: \"unknown\", cause: err });\n  }\n  return new TheokitAgentError(String(err), { code: \"unknown\" });\n}\n\nasync function safeCallResult(cb: BatchOptions[\"onResult\"], result: BatchResult): Promise<void> {\n  if (cb === undefined) return;\n  try {\n    await cb(result);\n  } catch (err) {\n    diag(\n      `[theokit-sdk] batch: onResult callback threw: ${\n        err instanceof Error ? err.message : String(err)\n      }\\n`,\n    );\n  }\n}\n\nfunction safeCallProgress(cb: BatchOptions[\"onProgress\"], progress: BatchProgress): void {\n  if (cb === undefined) return;\n  try {\n    cb(progress);\n  } catch (err) {\n    diag(\n      `[theokit-sdk] batch: onProgress callback threw: ${\n        err instanceof Error ? err.message : String(err)\n      }\\n`,\n    );\n  }\n}\n\n/**\n * EC-A: construct shared pools from options.apiKeys. Empty/invalid → empty Map.\n *\n * @internal\n */\nfunction buildPoolsFromApiKeys(\n  apiKeys: Record<string, string[]> | undefined,\n  strategy: Record<string, CredentialPoolStrategy> | undefined,\n): Map<string, CredentialPool> {\n  const pools = new Map<string, CredentialPool>();\n  if (apiKeys === undefined) return pools;\n  for (const [provider, keys] of Object.entries(apiKeys)) {\n    if (!Array.isArray(keys)) continue;\n    const filtered = keys.filter((k): k is string => typeof k === \"string\" && k.length > 0);\n    if (filtered.length < 2) continue; // 1-key pools aren't pools\n    const entries = filtered.map((token, i) =>\n      newPooledCredential({ provider, accessToken: token, priority: i, source: \"manual\" }),\n    );\n    pools.set(\n      provider,\n      new CredentialPool(provider, entries, strategy?.[provider] ?? \"fill_first\"),\n    );\n  }\n  return pools;\n}\n"]}