@theokit/sdk 4.41.1 → 4.42.0

package/dist/{inject-session-DDC36KKP.cjs → inject-session-I3HK3AHB.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkZO2L5U6F_cjs = require('./chunk-ZO2L5U6F.cjs');
+var chunkFAUKVJCC_cjs = require('./chunk-FAUKVJCC.cjs');
 var chunk4JBHSLQO_cjs = require('./chunk-4JBHSLQO.cjs');
 require('./chunk-FZ4YMZA3.cjs');
 var chunkWCXOKGOQ_cjs = require('./chunk-WCXOKGOQ.cjs');
@@ -9,7 +9,7 @@ require('./chunk-ZHPET3LZ.cjs');
 
 // src/internal/session/inject-session.ts
 async function injectSessionTurn(opts) {
-  await chunkZO2L5U6F_cjs.enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {
+  await chunkFAUKVJCC_cjs.enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {
     const prior = await opts.store.readRecords(opts.loc.agentId);
     const transcript = chunkWCXOKGOQ_cjs.SessionTranscript.fromRecords(prior, {
       cwd: opts.loc.cwd,
@@ -24,5 +24,5 @@ async function injectSessionTurn(opts) {
 }
 
 exports.injectSessionTurn = injectSessionTurn;
-//# sourceMappingURL=inject-session-DDC36KKP.cjs.map
-//# sourceMappingURL=inject-session-DDC36KKP.cjs.map
+//# sourceMappingURL=inject-session-I3HK3AHB.cjs.map
+//# sourceMappingURL=inject-session-I3HK3AHB.cjs.map

package/dist/{inject-session-DDC36KKP.cjs.map → inject-session-I3HK3AHB.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":["enqueueSessionWrite","SessionTranscript","invalidateSessionCache"],"mappings":";;;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAMA,sCAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAaC,mCAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAAC,wCAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-DDC36KKP.cjs","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}
+{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":["enqueueSessionWrite","SessionTranscript","invalidateSessionCache"],"mappings":";;;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAMA,sCAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAaC,mCAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAAC,wCAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-I3HK3AHB.cjs","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}

package/dist/{inject-session-UBM4KVSV.js → inject-session-NR64GB3T.js}

@@ -1,4 +1,4 @@
-import { enqueueSessionWrite } from './chunk-IMX5YODO.js';
+import { enqueueSessionWrite } from './chunk-UJ7HK7BX.js';
 import { invalidateSessionCache } from './chunk-4QEC4CCS.js';
 import './chunk-ZTEAJAE6.js';
 import { SessionTranscript } from './chunk-AF4BBKIF.js';
@@ -22,5 +22,5 @@ async function injectSessionTurn(opts) {
 }
 
 export { injectSessionTurn };
-//# sourceMappingURL=inject-session-UBM4KVSV.js.map
-//# sourceMappingURL=inject-session-UBM4KVSV.js.map
+//# sourceMappingURL=inject-session-NR64GB3T.js.map
+//# sourceMappingURL=inject-session-NR64GB3T.js.map

package/dist/{inject-session-UBM4KVSV.js.map → inject-session-NR64GB3T.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":[],"mappings":";;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAM,oBAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAa,iBAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAA,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-UBM4KVSV.js","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}
+{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":[],"mappings":";;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAM,oBAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAa,iBAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAA,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-NR64GB3T.js","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}

package/dist/server/auth/index.d.cts

@@ -1,211 +1,15 @@
-import { IncomingMessage, ServerResponse } from 'node:http';
-
 /**
- * @theokit/sdk/server/auth — typed error classes
+ * @theokit/sdk/server/auth — public barrel
  *
- * Plan T1.2 + v1.1 EC-1 (AuthCancelledError for OAuth provider error response RFC 6749 §4.1.2.1).
- */
-/**
- * Thrown at `defineAuth()` time when configuration is invalid
- * (e.g., duplicate provider name, invalid email shape per EC-V1-12).
- */
-declare class AuthConfigError extends Error {
-    readonly name = "AuthConfigError";
-    readonly code: string;
-    constructor(code: string, message: string);
-}
-/**
- * Thrown at `startSignIn(providerName, ...)` or `finishSignIn(providerName, ...)`
- * when the named provider is not registered in `providers[]`.
- */
-declare class AuthProviderNotFoundError extends Error {
-    readonly name = "AuthProviderNotFoundError";
-    readonly providerName: string;
-    constructor(providerName: string);
-}
-/**
- * Thrown during OAuth callback handling for state mismatches, expired
- * transactions, missing query params, or provider 4xx/5xx errors.
- *
- * Typed `code` field lets consumers branch on cause:
- *   - 'oauth_transaction_expired' — cookie tx > 10min old (per ADR D5)
- *   - 'oauth_state_mismatch' — query state ≠ cookie state (CSRF defense per RFC 6749 §10.12)
- *   - 'oauth_provider_error' — non-access_denied error in callback URL
- *   - 'oauth_token_exchange_failed' — provider rejected code-for-tokens swap
- *   - 'oauth_userinfo_failed' — userinfo endpoint returned error
- *   - 'oauth_missing_code_or_state' — required query params absent
- */
-declare class AuthCallbackError extends Error {
-    readonly name: string;
-    readonly code: string;
-    constructor(code: string, message?: string);
-}
-/**
- * Per v1.1 EC-1 MUST FIX — typed subclass of AuthCallbackError for the
- * specific case where user declined consent at provider screen.
- *
- * OAuth 2.0 RFC 6749 §4.1.2.1: provider redirects with `?error=access_denied`.
- * Apps can catch this distinctly from network/server errors to render
- * "Login cancelled — try again" UX instead of opaque "callback failed".
- */
-declare class AuthCancelledError extends AuthCallbackError {
-    readonly name: string;
-    readonly errorDescription?: string;
-    constructor(errorDescription?: string);
-}
-
-/**
- * @theokit/sdk/server/auth — orchestrator types (Path C Hybrid per G11)
- *
- * Plan: g11-auth-architecture-implementation v1.4 (sha256 4d381020...)
- * Blueprint: g11-auth-architecture-decision v1.1 (SHIPPABLE 97.9)
- * AUTH-DELEGATION lock (theokit/CLAUDE.md:217-225) — these types are the
- * orchestrator contract; concrete OAuth/email providers ship in opt-in
- * @theokit/auth-* packages (adapters layer per ADR D11).
- */
-
-/**
- * SessionManager contract (matches theokit/packages/theo/src/server/auth/session.ts:49).
- * Imported as type-only — runtime depends via peerDep `theokit@>=0.2.4`.
- */
-interface SessionManager<TSession> {
-    getSession(req: IncomingMessage): Promise<TSession | null>;
-    createSession(res: ServerResponse, data: TSession): Promise<void>;
-    destroySession(res: ServerResponse): void;
-    rotateSession(req: IncomingMessage, res: ServerResponse): Promise<TSession | null>;
-}
-/**
- * Per ADR D5 — OAuth transaction state stored in encrypted HttpOnly cookie
- * (cookie-state pattern). Expires within 10 minutes per invariant.
- */
-interface OAuthTransaction {
-    state: string;
-    pkceVerifier?: string;
-    returnTo?: string;
-    createdAt: number;
-    expiresAt: number;
-}
-/**
- * Per ADR D9 — provider profile types are provider-specific (not unified).
- * Each @theokit/auth-* package exports its own profile shape.
- * Generic param TProfile lets consumers narrow via discriminated unions on providerName.
- */
-interface AuthResult<TProfile, TName extends string = string> {
-    profile: TProfile;
-    providerName: TName;
-    rawTokens?: {
-        accessToken: string;
-        refreshToken?: string;
-        idToken?: string;
-        expiresAt?: number;
-    };
-}
-/**
- * Provider contract — each @theokit/auth-* package implements this.
- * Per blueprint Q5 + ADR D11 (adapters layer).
- */
-interface AuthProvider<TProfile, TName extends string = string> {
-    name: TName;
-    createAuthorizationURL(tx: OAuthTransaction): URL | Promise<URL>;
-    handleCallback(req: IncomingMessage, tx: OAuthTransaction): Promise<AuthResult<TProfile, TName>>;
-}
-/**
- * `defineAuth(opts)` configuration shape — Path C (Hybrid).
- * `providers` optional: empty = Path A escape hatch (manual signIn only).
- * `onSignIn` invoked after provider callback success; returns TSession to persist.
- */
-interface DefineAuthOptions<TSession> {
-    session: SessionManager<TSession>;
-    providers?: AuthProvider<unknown, string>[];
-    onSignIn?: <TProfile>(args: {
-        profile: TProfile;
-        provider: string;
-    }) => Promise<TSession>;
-    onSignOut?: (session: TSession | null) => Promise<void> | void;
-}
-/**
- * Returned by `defineAuth<TSession>(opts)` — 5-method orchestrator surface.
- *
- * - startSignIn: returns Response.redirect to provider authorization URL with state cookie
- * - finishSignIn: handles provider callback; verifies state; calls onSignIn; rotates session ID
- *   (OWASP A07:2021 per EC-10); creates session cookie; clears transaction cookie
- * - signIn: Path A escape hatch — skip OAuth flow; directly persist session from external profile
- * - signOut: destroys session cookie + invokes onSignOut callback
- * - getSession: read-only passthrough to session.getSession
- */
-interface AuthOrchestrator<TSession> {
-    startSignIn(providerName: string, req: IncomingMessage, opts?: {
-        returnTo?: string;
-    }): Promise<Response>;
-    finishSignIn(providerName: string, req: IncomingMessage, res: ServerResponse): Promise<{
-        session: TSession;
-        returnTo?: string;
-    }>;
-    signIn<TProfile>(profile: TProfile, providerName: string, req: IncomingMessage, res: ServerResponse): Promise<TSession>;
-    signOut(res: ServerResponse): void | Promise<void>;
-    getSession(req: IncomingMessage): Promise<TSession | null>;
-}
-
-/**
- * @theokit/sdk/server/auth — encrypted OAuth transaction cookie store
- *
- * Per ADR D5 — cookie-state pattern (no Redis/db dependency in core).
- *
- * Stores OAuthTransaction (state + pkceVerifier + returnTo + expiry) in a
- * single signed+encrypted HttpOnly cookie. Stateless, works in edge/serverless.
- *
- * Cookie name: `__Host-theo_oauth_tx` (T5.3 — RFC 6265bis prefix)
- * Lifetime: 10 minutes (per D5 invariant)
- * Encryption: AES-256-GCM via Node's webcrypto subtle API
- *
- * Note: this is a minimal in-package implementation. Production deployments
- * may prefer using `theokit/server/auth/crypto`'s encrypt/decrypt helpers
- * via the SessionManager's existing secret rotation chain. For T1.2 we keep
- * it self-contained to avoid cross-package peer-dep complexity; T2+ may
- * refactor to share SessionManager's encrypt path.
- */
-
-/**
- * T5.1 — Typed error thrown when an OAuth tx-cookie secret has < 32
- * bytes of entropy. Surfaces the actual byte length so operators can
- * diagnose mis-configured env vars without leaking the secret itself.
- *
- * @public
- */
-declare class AuthSecretTooShortError extends Error {
-    readonly name = "AuthSecretTooShortError";
-    constructor(actualBytes: number);
-}
-
-/**
- * @theokit/sdk/server/auth — defineAuth orchestrator runtime (Path C Hybrid)
- *
- * Plan T1.2 implementation per blueprint Q5 § Path C signatures.
- * Composes existing primitives + the v1.1 EC-1/EC-2/EC-10 fixes.
- */
-
-/** SE36 — `Auth.create` replaces `defineAuth` (ADR 0015). @public */
-declare class Auth {
-    private constructor();
-    static create<TSession>(opts: DefineAuthOptions<TSession>): AuthOrchestrator<TSession>;
-}
-
-/**
- * @theokit/sdk/server/auth — same-origin returnTo validator
- *
- * Per v1.1 EC-2 MUST FIX — OWASP A01:2021 open-redirect mitigation.
- *
- * Without this check, attacker craft `/login?returnTo=https://evil.com` would
- * cause post-login redirect to attacker domain with authenticated session cookie.
+ * Per ADR D6 (sub-path export) — consumers import via `@theokit/sdk/server/auth`
+ * NOT main `@theokit/sdk` barrel. Tree-shaking + allows breaking changes in
+ * auth surface without affecting Agent runtime consumers.
  *
- * Rules:
- *   - undefined/empty returnTo → default '/'
- *   - protocol-relative `//evil.com` → default '/' (URL parser would resolve to baseUrl protocol)
- *   - absolute URL with origin ≠ baseUrl.origin → default '/' (cross-origin redirect)
- *   - absolute URL with origin === baseUrl.origin → keep (same-origin allowed)
- *   - relative path starting with '/' → keep (same-app navigation)
- *   - relative path not starting with '/' → default '/' (defensive)
+ * T1.1 shipped types-only.
+ * T1.2 adds runtime: defineAuth() + 4 typed error classes + validateReturnTo helper.
  */
-declare function validateReturnTo(returnTo: string | undefined, baseUrl: URL): string;
-
-export { Auth, AuthCallbackError, AuthCancelledError, AuthConfigError, type AuthOrchestrator, type AuthProvider, AuthProviderNotFoundError, type AuthResult, AuthSecretTooShortError, type DefineAuthOptions, type OAuthTransaction, type SessionManager, validateReturnTo };
+export { AuthCallbackError, AuthCancelledError, AuthConfigError, AuthProviderNotFoundError, } from "./errors.js";
+export { AuthSecretTooShortError } from "./oauth-transaction-store.js";
+export { Auth } from "./orchestrator.js";
+export type { AuthOrchestrator, AuthProvider, AuthResult, DefineAuthOptions, OAuthTransaction, SessionManager, } from "./types.js";
+export { validateReturnTo } from "./validate-return-to.js";

package/dist/server/auth/index.d.ts

@@ -1,211 +1,15 @@
-import { IncomingMessage, ServerResponse } from 'node:http';
-
 /**
- * @theokit/sdk/server/auth — typed error classes
+ * @theokit/sdk/server/auth — public barrel
  *
- * Plan T1.2 + v1.1 EC-1 (AuthCancelledError for OAuth provider error response RFC 6749 §4.1.2.1).
- */
-/**
- * Thrown at `defineAuth()` time when configuration is invalid
- * (e.g., duplicate provider name, invalid email shape per EC-V1-12).
- */
-declare class AuthConfigError extends Error {
-    readonly name = "AuthConfigError";
-    readonly code: string;
-    constructor(code: string, message: string);
-}
-/**
- * Thrown at `startSignIn(providerName, ...)` or `finishSignIn(providerName, ...)`
- * when the named provider is not registered in `providers[]`.
- */
-declare class AuthProviderNotFoundError extends Error {
-    readonly name = "AuthProviderNotFoundError";
-    readonly providerName: string;
-    constructor(providerName: string);
-}
-/**
- * Thrown during OAuth callback handling for state mismatches, expired
- * transactions, missing query params, or provider 4xx/5xx errors.
- *
- * Typed `code` field lets consumers branch on cause:
- *   - 'oauth_transaction_expired' — cookie tx > 10min old (per ADR D5)
- *   - 'oauth_state_mismatch' — query state ≠ cookie state (CSRF defense per RFC 6749 §10.12)
- *   - 'oauth_provider_error' — non-access_denied error in callback URL
- *   - 'oauth_token_exchange_failed' — provider rejected code-for-tokens swap
- *   - 'oauth_userinfo_failed' — userinfo endpoint returned error
- *   - 'oauth_missing_code_or_state' — required query params absent
- */
-declare class AuthCallbackError extends Error {
-    readonly name: string;
-    readonly code: string;
-    constructor(code: string, message?: string);
-}
-/**
- * Per v1.1 EC-1 MUST FIX — typed subclass of AuthCallbackError for the
- * specific case where user declined consent at provider screen.
- *
- * OAuth 2.0 RFC 6749 §4.1.2.1: provider redirects with `?error=access_denied`.
- * Apps can catch this distinctly from network/server errors to render
- * "Login cancelled — try again" UX instead of opaque "callback failed".
- */
-declare class AuthCancelledError extends AuthCallbackError {
-    readonly name: string;
-    readonly errorDescription?: string;
-    constructor(errorDescription?: string);
-}
-
-/**
- * @theokit/sdk/server/auth — orchestrator types (Path C Hybrid per G11)
- *
- * Plan: g11-auth-architecture-implementation v1.4 (sha256 4d381020...)
- * Blueprint: g11-auth-architecture-decision v1.1 (SHIPPABLE 97.9)
- * AUTH-DELEGATION lock (theokit/CLAUDE.md:217-225) — these types are the
- * orchestrator contract; concrete OAuth/email providers ship in opt-in
- * @theokit/auth-* packages (adapters layer per ADR D11).
- */
-
-/**
- * SessionManager contract (matches theokit/packages/theo/src/server/auth/session.ts:49).
- * Imported as type-only — runtime depends via peerDep `theokit@>=0.2.4`.
- */
-interface SessionManager<TSession> {
-    getSession(req: IncomingMessage): Promise<TSession | null>;
-    createSession(res: ServerResponse, data: TSession): Promise<void>;
-    destroySession(res: ServerResponse): void;
-    rotateSession(req: IncomingMessage, res: ServerResponse): Promise<TSession | null>;
-}
-/**
- * Per ADR D5 — OAuth transaction state stored in encrypted HttpOnly cookie
- * (cookie-state pattern). Expires within 10 minutes per invariant.
- */
-interface OAuthTransaction {
-    state: string;
-    pkceVerifier?: string;
-    returnTo?: string;
-    createdAt: number;
-    expiresAt: number;
-}
-/**
- * Per ADR D9 — provider profile types are provider-specific (not unified).
- * Each @theokit/auth-* package exports its own profile shape.
- * Generic param TProfile lets consumers narrow via discriminated unions on providerName.
- */
-interface AuthResult<TProfile, TName extends string = string> {
-    profile: TProfile;
-    providerName: TName;
-    rawTokens?: {
-        accessToken: string;
-        refreshToken?: string;
-        idToken?: string;
-        expiresAt?: number;
-    };
-}
-/**
- * Provider contract — each @theokit/auth-* package implements this.
- * Per blueprint Q5 + ADR D11 (adapters layer).
- */
-interface AuthProvider<TProfile, TName extends string = string> {
-    name: TName;
-    createAuthorizationURL(tx: OAuthTransaction): URL | Promise<URL>;
-    handleCallback(req: IncomingMessage, tx: OAuthTransaction): Promise<AuthResult<TProfile, TName>>;
-}
-/**
- * `defineAuth(opts)` configuration shape — Path C (Hybrid).
- * `providers` optional: empty = Path A escape hatch (manual signIn only).
- * `onSignIn` invoked after provider callback success; returns TSession to persist.
- */
-interface DefineAuthOptions<TSession> {
-    session: SessionManager<TSession>;
-    providers?: AuthProvider<unknown, string>[];
-    onSignIn?: <TProfile>(args: {
-        profile: TProfile;
-        provider: string;
-    }) => Promise<TSession>;
-    onSignOut?: (session: TSession | null) => Promise<void> | void;
-}
-/**
- * Returned by `defineAuth<TSession>(opts)` — 5-method orchestrator surface.
- *
- * - startSignIn: returns Response.redirect to provider authorization URL with state cookie
- * - finishSignIn: handles provider callback; verifies state; calls onSignIn; rotates session ID
- *   (OWASP A07:2021 per EC-10); creates session cookie; clears transaction cookie
- * - signIn: Path A escape hatch — skip OAuth flow; directly persist session from external profile
- * - signOut: destroys session cookie + invokes onSignOut callback
- * - getSession: read-only passthrough to session.getSession
- */
-interface AuthOrchestrator<TSession> {
-    startSignIn(providerName: string, req: IncomingMessage, opts?: {
-        returnTo?: string;
-    }): Promise<Response>;
-    finishSignIn(providerName: string, req: IncomingMessage, res: ServerResponse): Promise<{
-        session: TSession;
-        returnTo?: string;
-    }>;
-    signIn<TProfile>(profile: TProfile, providerName: string, req: IncomingMessage, res: ServerResponse): Promise<TSession>;
-    signOut(res: ServerResponse): void | Promise<void>;
-    getSession(req: IncomingMessage): Promise<TSession | null>;
-}
-
-/**
- * @theokit/sdk/server/auth — encrypted OAuth transaction cookie store
- *
- * Per ADR D5 — cookie-state pattern (no Redis/db dependency in core).
- *
- * Stores OAuthTransaction (state + pkceVerifier + returnTo + expiry) in a
- * single signed+encrypted HttpOnly cookie. Stateless, works in edge/serverless.
- *
- * Cookie name: `__Host-theo_oauth_tx` (T5.3 — RFC 6265bis prefix)
- * Lifetime: 10 minutes (per D5 invariant)
- * Encryption: AES-256-GCM via Node's webcrypto subtle API
- *
- * Note: this is a minimal in-package implementation. Production deployments
- * may prefer using `theokit/server/auth/crypto`'s encrypt/decrypt helpers
- * via the SessionManager's existing secret rotation chain. For T1.2 we keep
- * it self-contained to avoid cross-package peer-dep complexity; T2+ may
- * refactor to share SessionManager's encrypt path.
- */
-
-/**
- * T5.1 — Typed error thrown when an OAuth tx-cookie secret has < 32
- * bytes of entropy. Surfaces the actual byte length so operators can
- * diagnose mis-configured env vars without leaking the secret itself.
- *
- * @public
- */
-declare class AuthSecretTooShortError extends Error {
-    readonly name = "AuthSecretTooShortError";
-    constructor(actualBytes: number);
-}
-
-/**
- * @theokit/sdk/server/auth — defineAuth orchestrator runtime (Path C Hybrid)
- *
- * Plan T1.2 implementation per blueprint Q5 § Path C signatures.
- * Composes existing primitives + the v1.1 EC-1/EC-2/EC-10 fixes.
- */
-
-/** SE36 — `Auth.create` replaces `defineAuth` (ADR 0015). @public */
-declare class Auth {
-    private constructor();
-    static create<TSession>(opts: DefineAuthOptions<TSession>): AuthOrchestrator<TSession>;
-}
-
-/**
- * @theokit/sdk/server/auth — same-origin returnTo validator
- *
- * Per v1.1 EC-2 MUST FIX — OWASP A01:2021 open-redirect mitigation.
- *
- * Without this check, attacker craft `/login?returnTo=https://evil.com` would
- * cause post-login redirect to attacker domain with authenticated session cookie.
+ * Per ADR D6 (sub-path export) — consumers import via `@theokit/sdk/server/auth`
+ * NOT main `@theokit/sdk` barrel. Tree-shaking + allows breaking changes in
+ * auth surface without affecting Agent runtime consumers.
  *
- * Rules:
- *   - undefined/empty returnTo → default '/'
- *   - protocol-relative `//evil.com` → default '/' (URL parser would resolve to baseUrl protocol)
- *   - absolute URL with origin ≠ baseUrl.origin → default '/' (cross-origin redirect)
- *   - absolute URL with origin === baseUrl.origin → keep (same-origin allowed)
- *   - relative path starting with '/' → keep (same-app navigation)
- *   - relative path not starting with '/' → default '/' (defensive)
+ * T1.1 shipped types-only.
+ * T1.2 adds runtime: defineAuth() + 4 typed error classes + validateReturnTo helper.
  */
-declare function validateReturnTo(returnTo: string | undefined, baseUrl: URL): string;
-
-export { Auth, AuthCallbackError, AuthCancelledError, AuthConfigError, type AuthOrchestrator, type AuthProvider, AuthProviderNotFoundError, type AuthResult, AuthSecretTooShortError, type DefineAuthOptions, type OAuthTransaction, type SessionManager, validateReturnTo };
+export { AuthCallbackError, AuthCancelledError, AuthConfigError, AuthProviderNotFoundError, } from "./errors.js";
+export { AuthSecretTooShortError } from "./oauth-transaction-store.js";
+export { Auth } from "./orchestrator.js";
+export type { AuthOrchestrator, AuthProvider, AuthResult, DefineAuthOptions, OAuthTransaction, SessionManager, } from "./types.js";
+export { validateReturnTo } from "./validate-return-to.js";

package/dist/server/errors-envelope.d.cts

@@ -1,8 +1,3 @@
-import { T as TheokitAgentError } from '../errors-BSoXcl3F.cjs';
-export { M as MemoryAdapterError } from '../errors-BSoXcl3F.cjs';
-import '../run-C8FBAC8o.cjs';
-import 'zod';
-
 /**
  * @theokit/sdk/server/errors-envelope — G5 T2.2 boundary translation.
  *
@@ -17,7 +12,7 @@ import 'zod';
  * dependency on `theokit`. Consumer code that uses both packages gets the
  * same shape via duck-typing.
  */
-
+import { MemoryAdapterError, TheokitAgentError } from "../errors.js";
 /**
  * Canonical envelope code union for cross-layer SDK boundary. Subset of the
  * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.
@@ -26,13 +21,13 @@ import 'zod';
  *
  * @public
  */
-type TheokitErrorCode = "UNAUTHORIZED" | "RATE_LIMITED" | "INTERNAL_SERVER_ERROR" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "AGENT_RUN_ERROR" | "PROVIDER_KEY_MISSING" | "BUDGET_EXCEEDED" | "CREDENTIAL_POOL_EXHAUSTED";
+export type TheokitErrorCode = "UNAUTHORIZED" | "RATE_LIMITED" | "INTERNAL_SERVER_ERROR" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "AGENT_RUN_ERROR" | "PROVIDER_KEY_MISSING" | "BUDGET_EXCEEDED" | "CREDENTIAL_POOL_EXHAUSTED";
 /**
  * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.
  *
  * @public
  */
-interface TheokitErrorEnvelope<TExt = unknown> {
+export interface TheokitErrorEnvelope<TExt = unknown> {
     readonly code: TheokitErrorCode;
     readonly message: string;
     readonly cause?: unknown;
@@ -54,7 +49,7 @@ interface TheokitErrorEnvelope<TExt = unknown> {
  *
  * @public
  */
-declare function toEnvelope(value: unknown): TheokitErrorEnvelope;
+export declare function toEnvelope(value: unknown): TheokitErrorEnvelope;
 /**
  * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound
  * boundary (e.g., on a worker process receiving an envelope from the main
@@ -62,6 +57,5 @@ declare function toEnvelope(value: unknown): TheokitErrorEnvelope;
  *
  * @public
  */
-declare function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError;
-
-export { type TheokitErrorCode, type TheokitErrorEnvelope, fromEnvelope, toEnvelope };
+export declare function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError;
+export { MemoryAdapterError };

package/dist/server/errors-envelope.d.ts

@@ -1,8 +1,3 @@
-import { T as TheokitAgentError } from '../errors-CHllybaU.js';
-export { M as MemoryAdapterError } from '../errors-CHllybaU.js';
-import '../run-C8FBAC8o.js';
-import 'zod';
-
 /**
  * @theokit/sdk/server/errors-envelope — G5 T2.2 boundary translation.
  *
@@ -17,7 +12,7 @@ import 'zod';
  * dependency on `theokit`. Consumer code that uses both packages gets the
  * same shape via duck-typing.
  */
-
+import { MemoryAdapterError, TheokitAgentError } from "../errors.js";
 /**
  * Canonical envelope code union for cross-layer SDK boundary. Subset of the
  * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.
@@ -26,13 +21,13 @@ import 'zod';
  *
  * @public
  */
-type TheokitErrorCode = "UNAUTHORIZED" | "RATE_LIMITED" | "INTERNAL_SERVER_ERROR" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "AGENT_RUN_ERROR" | "PROVIDER_KEY_MISSING" | "BUDGET_EXCEEDED" | "CREDENTIAL_POOL_EXHAUSTED";
+export type TheokitErrorCode = "UNAUTHORIZED" | "RATE_LIMITED" | "INTERNAL_SERVER_ERROR" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "AGENT_RUN_ERROR" | "PROVIDER_KEY_MISSING" | "BUDGET_EXCEEDED" | "CREDENTIAL_POOL_EXHAUSTED";
 /**
  * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.
  *
  * @public
  */
-interface TheokitErrorEnvelope<TExt = unknown> {
+export interface TheokitErrorEnvelope<TExt = unknown> {
     readonly code: TheokitErrorCode;
     readonly message: string;
     readonly cause?: unknown;
@@ -54,7 +49,7 @@ interface TheokitErrorEnvelope<TExt = unknown> {
  *
  * @public
  */
-declare function toEnvelope(value: unknown): TheokitErrorEnvelope;
+export declare function toEnvelope(value: unknown): TheokitErrorEnvelope;
 /**
  * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound
  * boundary (e.g., on a worker process receiving an envelope from the main
@@ -62,6 +57,5 @@ declare function toEnvelope(value: unknown): TheokitErrorEnvelope;
  *
  * @public
  */
-declare function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError;
-
-export { type TheokitErrorCode, type TheokitErrorEnvelope, fromEnvelope, toEnvelope };
+export declare function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError;
+export { MemoryAdapterError };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theokit/sdk",
-  "version": "4.41.1",
+  "version": "4.42.0",
   "description": "TypeScript SDK for the Theo agent harness — same surface, local or cloud.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/usetheodev/theokit-sdk#readme",
@@ -58,6 +58,16 @@
         "default": "./dist/compaction.cjs"
       }
     },
+    "./context": {
+      "import": {
+        "types": "./dist/context/index.d.ts",
+        "default": "./dist/context/index.js"
+      },
+      "require": {
+        "types": "./dist/context/index.d.cts",
+        "default": "./dist/context/index.cjs"
+      }
+    },
     "./messages": {
       "import": {
         "types": "./dist/messages.d.ts",