@theokit/sdk 4.53.1 → 4.55.0

package/dist/server/auth/types.d.cts

@@ -1,5 +1,5 @@
 /**
- * @theokit/sdk/server/auth — orchestrator types (Path C Hybrid per G11)
+ * Orchestrator types (Path C Hybrid per G11) — `@theokit/sdk/server/auth`.
  *
  * Plan: g11-auth-architecture-implementation v1.4 (sha256 4d381020...)
  * Blueprint: g11-auth-architecture-decision v1.1 (SHIPPABLE 97.9)

package/dist/server/auth/types.d.ts

@@ -1,5 +1,5 @@
 /**
- * @theokit/sdk/server/auth — orchestrator types (Path C Hybrid per G11)
+ * Orchestrator types (Path C Hybrid per G11) — `@theokit/sdk/server/auth`.
  *
  * Plan: g11-auth-architecture-implementation v1.4 (sha256 4d381020...)
  * Blueprint: g11-auth-architecture-decision v1.1 (SHIPPABLE 97.9)

package/dist/server/auth/validate-return-to.d.cts

@@ -1,17 +1,27 @@
 /**
- * @theokit/sdk/server/auth — same-origin returnTo validator
+ * Clamp a caller-supplied `returnTo` to a same-origin destination, falling back
+ * to `'/'` for anything else. This is the open-redirect guard for a post-login
+ * redirect (`@theokit/sdk/server/auth`; OWASP A01:2021, v1.1 EC-2). Without it,
+ * `/login?returnTo=https://evil.com` would send the freshly authenticated session
+ * to an attacker's domain.
  *
- * Per v1.1 EC-2 MUST FIX — OWASP A01:2021 open-redirect mitigation.
+ *   validateReturnTo(req.query.returnTo, new URL("https://app.example.com"));
  *
- * Without this check, attacker craft `/login?returnTo=https://evil.com` would
- * cause post-login redirect to attacker domain with authenticated session cookie.
+ * Pure and synchronous. It never throws and always returns a string:
+ *   - undefined / empty / whitespace-only `returnTo` -> `'/'`
+ *   - protocol-relative `//evil.com` -> `'/'` (a browser would resolve it against
+ *     the current protocol)
+ *   - absolute URL whose origin differs from `baseUrl.origin` -> `'/'`
+ *   - absolute URL on `baseUrl.origin` -> its `pathname + search + hash`, with
+ *     the origin dropped
+ *   - relative path starting with `'/'` -> kept verbatim
+ *   - anything else, including `javascript:` and `data:` -> `'/'`
  *
- * Rules:
- *   - undefined/empty returnTo → default '/'
- *   - protocol-relative `//evil.com` → default '/' (URL parser would resolve to baseUrl protocol)
- *   - absolute URL with origin ≠ baseUrl.origin → default '/' (cross-origin redirect)
- *   - absolute URL with origin === baseUrl.origin → keep (same-origin allowed)
- *   - relative path starting with '/' → keep (same-app navigation)
- *   - relative path not starting with '/' → default '/' (defensive)
+ * `baseUrl` is compared by ORIGIN only (scheme + host + port); its path is
+ * ignored, so an app mounted under a sub-path gets no extra containment from it.
+ *
+ * Trap: this defends the origin, not the route. A same-origin relative path is
+ * returned unchanged — `..` segments included, and with no notion of whether the
+ * user is allowed there. Authorise the destination separately.
  */
 export declare function validateReturnTo(returnTo: string | undefined, baseUrl: URL): string;

package/dist/server/auth/validate-return-to.d.ts

@@ -1,17 +1,27 @@
 /**
- * @theokit/sdk/server/auth — same-origin returnTo validator
+ * Clamp a caller-supplied `returnTo` to a same-origin destination, falling back
+ * to `'/'` for anything else. This is the open-redirect guard for a post-login
+ * redirect (`@theokit/sdk/server/auth`; OWASP A01:2021, v1.1 EC-2). Without it,
+ * `/login?returnTo=https://evil.com` would send the freshly authenticated session
+ * to an attacker's domain.
  *
- * Per v1.1 EC-2 MUST FIX — OWASP A01:2021 open-redirect mitigation.
+ *   validateReturnTo(req.query.returnTo, new URL("https://app.example.com"));
  *
- * Without this check, attacker craft `/login?returnTo=https://evil.com` would
- * cause post-login redirect to attacker domain with authenticated session cookie.
+ * Pure and synchronous. It never throws and always returns a string:
+ *   - undefined / empty / whitespace-only `returnTo` -> `'/'`
+ *   - protocol-relative `//evil.com` -> `'/'` (a browser would resolve it against
+ *     the current protocol)
+ *   - absolute URL whose origin differs from `baseUrl.origin` -> `'/'`
+ *   - absolute URL on `baseUrl.origin` -> its `pathname + search + hash`, with
+ *     the origin dropped
+ *   - relative path starting with `'/'` -> kept verbatim
+ *   - anything else, including `javascript:` and `data:` -> `'/'`
  *
- * Rules:
- *   - undefined/empty returnTo → default '/'
- *   - protocol-relative `//evil.com` → default '/' (URL parser would resolve to baseUrl protocol)
- *   - absolute URL with origin ≠ baseUrl.origin → default '/' (cross-origin redirect)
- *   - absolute URL with origin === baseUrl.origin → keep (same-origin allowed)
- *   - relative path starting with '/' → keep (same-app navigation)
- *   - relative path not starting with '/' → default '/' (defensive)
+ * `baseUrl` is compared by ORIGIN only (scheme + host + port); its path is
+ * ignored, so an app mounted under a sub-path gets no extra containment from it.
+ *
+ * Trap: this defends the origin, not the route. A same-origin relative path is
+ * returned unchanged — `..` segments included, and with no notion of whether the
+ * user is allowed there. Authorise the destination separately.
  */
 export declare function validateReturnTo(returnTo: string | undefined, baseUrl: URL): string;

package/dist/server/errors-envelope.cjs

@@ -1,7 +1,8 @@
 'use strict';
 
-var chunkLPVIRJVF_cjs = require('../chunk-LPVIRJVF.cjs');
-require('../chunk-BM6N4KHO.cjs');
+var chunkK3FW2XZD_cjs = require('../chunk-K3FW2XZD.cjs');
+require('../chunk-JTB5Q42C.cjs');
+require('../chunk-NUKRL3I6.cjs');
 
 // src/server/errors-envelope.ts
 var NAME_TO_CODE = /* @__PURE__ */ new Map([
@@ -37,7 +38,7 @@ function toEnvelope(value) {
 }
 function buildMeta(name, err) {
   const meta = { sdkErrorName: name };
-  if (err instanceof chunkLPVIRJVF_cjs.TheokitAgentError && err.metadata !== void 0) {
+  if (err instanceof chunkK3FW2XZD_cjs.TheokitAgentError && err.metadata !== void 0) {
     meta.provider = err.metadata.provider;
     meta.endpoint = err.metadata.endpoint;
     if (err.metadata.statusCode !== void 0) {
@@ -47,13 +48,13 @@ function buildMeta(name, err) {
   return meta;
 }
 function buildExt(err) {
-  if (err instanceof chunkLPVIRJVF_cjs.RateLimitError && err.metadata?.retryAfter !== void 0) {
+  if (err instanceof chunkK3FW2XZD_cjs.RateLimitError && err.metadata?.retryAfter !== void 0) {
     return {
       retryable: true,
       retryAfterMs: err.metadata.retryAfter * 1e3
     };
   }
-  if (err instanceof chunkLPVIRJVF_cjs.CredentialPoolExhaustedError && err.nextRetryAt !== void 0) {
+  if (err instanceof chunkK3FW2XZD_cjs.CredentialPoolExhaustedError && err.nextRetryAt !== void 0) {
     const delayMs = Math.max(0, err.nextRetryAt - Date.now());
     return {
       retryable: true,
@@ -63,22 +64,22 @@ function buildExt(err) {
   return void 0;
 }
 var CODE_TO_RECONSTRUCTOR = /* @__PURE__ */ new Map([
-  ["UNAUTHORIZED", (env) => new chunkLPVIRJVF_cjs.AuthenticationError(env.message)],
+  ["UNAUTHORIZED", (env) => new chunkK3FW2XZD_cjs.AuthenticationError(env.message)],
   [
     "RATE_LIMITED",
-    (env) => new chunkLPVIRJVF_cjs.RateLimitError(env.message, env.cause !== void 0 ? { cause: env.cause } : {})
+    (env) => new chunkK3FW2XZD_cjs.RateLimitError(env.message, env.cause !== void 0 ? { cause: env.cause } : {})
   ],
-  ["PROVIDER_KEY_MISSING", (env) => new chunkLPVIRJVF_cjs.ConfigurationError(env.message)],
-  ["SERVICE_UNAVAILABLE", (env) => new chunkLPVIRJVF_cjs.NetworkError(env.message)],
-  ["GATEWAY_TIMEOUT", (env) => new chunkLPVIRJVF_cjs.NetworkError(env.message)],
+  ["PROVIDER_KEY_MISSING", (env) => new chunkK3FW2XZD_cjs.ConfigurationError(env.message)],
+  ["SERVICE_UNAVAILABLE", (env) => new chunkK3FW2XZD_cjs.NetworkError(env.message)],
+  ["GATEWAY_TIMEOUT", (env) => new chunkK3FW2XZD_cjs.NetworkError(env.message)],
   [
     "AGENT_RUN_ERROR",
-    (env) => new chunkLPVIRJVF_cjs.AgentRunError(env.message, {
+    (env) => new chunkK3FW2XZD_cjs.AgentRunError(env.message, {
       code: "unknown",
       ...env.cause !== void 0 ? { cause: env.cause } : {}
     })
   ],
-  ["INTERNAL_SERVER_ERROR", (env) => new chunkLPVIRJVF_cjs.UnknownAgentError(env.message)]
+  ["INTERNAL_SERVER_ERROR", (env) => new chunkK3FW2XZD_cjs.UnknownAgentError(env.message)]
   // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require
   // domain-specific args (budgetName, provider) that the envelope doesn't
   // always carry. Fall back to UnknownAgentError when those fields are
@@ -88,12 +89,12 @@ var CODE_TO_RECONSTRUCTOR = /* @__PURE__ */ new Map([
 function fromEnvelope(env) {
   const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);
   if (reconstructor) return reconstructor(env);
-  return new chunkLPVIRJVF_cjs.UnknownAgentError(env.message);
+  return new chunkK3FW2XZD_cjs.UnknownAgentError(env.message);
 }
 
 Object.defineProperty(exports, "MemoryAdapterError", {
   enumerable: true,
-  get: function () { return chunkLPVIRJVF_cjs.MemoryAdapterError; }
+  get: function () { return chunkK3FW2XZD_cjs.MemoryAdapterError; }
 });
 exports.fromEnvelope = fromEnvelope;
 exports.toEnvelope = toEnvelope;

package/dist/server/errors-envelope.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/errors-envelope.ts"],"names":["TheokitAgentError","RateLimitError","CredentialPoolExhaustedError","AuthenticationError","ConfigurationError","NetworkError","AgentRunError","UnknownAgentError"],"mappings":";;;;;;AAoEA,IAAM,YAAA,uBAA0D,GAAA,CAA8B;AAAA,EAC5F,CAAC,uBAAuB,cAAc,CAAA;AAAA,EACtC,CAAC,kBAAkB,cAAc,CAAA;AAAA,EACjC,CAAC,sBAAsB,sBAAsB,CAAA;AAAA,EAC7C,CAAC,gCAAgC,sBAAsB,CAAA;AAAA,EACvD,CAAC,gBAAgB,qBAAqB,CAAA;AAAA,EACtC,CAAC,iBAAiB,iBAAiB,CAAA;AAAA,EACnC,CAAC,uBAAuB,iBAAiB,CAAA;AAAA,EACzC,CAAC,gCAAgC,2BAA2B,CAAA;AAAA,EAC5D,CAAC,qBAAqB,uBAAuB,CAAA;AAAA,EAC7C,CAAC,sBAAsB,uBAAuB;AAChD,CAAC,CAAA;AAiBM,SAAS,WAAW,KAAA,EAAsC;AAC/D,EAAA,IAAI,EAAE,iBAAiB,KAAA,CAAA,EAAQ;AAC7B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ;AAAA,KAC/C;AAAA,EACF;AACA,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,uBAAA;AACvC,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAClC,EAAA,MAAM,GAAA,GAAM,SAAS,KAAK,CAAA;AAC1B,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,OAAQ,KAAA,CAAsC,KAAA;AAAA,IAC9C,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,MAAc,GAAA,EAAqC;AACpE,EAAA,MAAM,IAAA,GAAgC,EAAE,YAAA,EAAc,IAAA,EAAK;AAC3D,EAAA,IAAI,GAAA,YAAeA,mCAAA,IAAqB,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClE,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,UAAA,KAAe,MAAA,EAAW;AACzC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAI,QAAA,CAAS,UAAA;AAAA,IACjC;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,IAAI,GAAA,YAAeC,gCAAA,IAAkB,GAAA,CAAI,QAAA,EAAU,eAAe,MAAA,EAAW;AAC3E,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc,GAAA,CAAI,QAAA,CAAS,UAAA,GAAa;AAAA,KAC1C;AAAA,EACF;AACA,EAAA,IAAI,GAAA,YAAeC,8CAAA,IAAgC,GAAA,CAAI,WAAA,KAAgB,MAAA,EAAW;AAChF,IAAA,MAAM,OAAA,GAAU,KAAK,GAAA,CAAI,CAAA,EAAG,IAAI,WAAA,GAAc,IAAA,CAAK,KAAK,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAUA,IAAM,qBAAA,uBAGE,GAAA,CAAwE;AAAA,EAC9E,CAAC,gBAAgB,CAAC,GAAA,KAAQ,IAAIC,qCAAA,CAAoB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D;AAAA,IACE,cAAA;AAAA,IACA,CAAC,GAAA,KAAQ,IAAIF,gCAAA,CAAe,IAAI,OAAA,EAAS,GAAA,CAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAE;AAAA,GAC9F;AAAA,EACA,CAAC,wBAAwB,CAAC,GAAA,KAAQ,IAAIG,oCAAA,CAAmB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EACrE,CAAC,uBAAuB,CAAC,GAAA,KAAQ,IAAIC,8BAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D,CAAC,mBAAmB,CAAC,GAAA,KAAQ,IAAIA,8BAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC1D;AAAA,IACE,iBAAA;AAAA,IACA,CAAC,GAAA,KACC,IAAIC,+BAAA,CAAc,IAAI,OAAA,EAAS;AAAA,MAC7B,IAAA,EAAM,SAAA;AAAA,MACN,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACvD;AAAA,GACL;AAAA,EACA,CAAC,yBAAyB,CAAC,GAAA,KAAQ,IAAIC,mCAAA,CAAkB,GAAA,CAAI,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAMvE,CAAC,CAAA;AASM,SAAS,aAAa,GAAA,EAA8C;AACzE,EAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AACxD,EAAA,IAAI,aAAA,EAAe,OAAO,aAAA,CAAc,GAAG,CAAA;AAI3C,EAAA,OAAO,IAAIA,mCAAA,CAAkB,GAAA,CAAI,OAAO,CAAA;AAC1C","file":"errors-envelope.cjs","sourcesContent":["/**\n * @theokit/sdk/server/errors-envelope — G5 T2.2 boundary translation.\n *\n * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.\n * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;\n * `toEnvelope(err)` translates outward at the Agent.send -> RunResult egress\n * edge, `fromEnvelope(env)` reconstructs class identity on the inbound edge\n * (so consumer code can keep using `instanceof RateLimitError` patterns).\n *\n * Structurally-compatible envelope shape: identical fields to theokit/server\n * `TheoErrorEnvelope`. Re-declared locally to keep `@theokit/sdk` free of any\n * dependency on `theokit`. Consumer code that uses both packages gets the\n * same shape via duck-typing.\n */\n\nimport {\n  AgentRunError,\n  AuthenticationError,\n  ConfigurationError,\n  CredentialPoolExhaustedError,\n  MemoryAdapterError,\n  NetworkError,\n  RateLimitError,\n  TheokitAgentError,\n  UnknownAgentError,\n} from \"../errors.js\";\n\n/**\n * Canonical envelope code union for cross-layer SDK boundary. Subset of the\n * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.\n * Other layers (theokit/server, theokit/client, theokit/ui) handle the broader\n * union; the SDK never needs the HTTP-only codes (PRECONDITION_FAILED, etc.).\n *\n * @public\n */\nexport type TheokitErrorCode =\n  | \"UNAUTHORIZED\"\n  | \"RATE_LIMITED\"\n  | \"INTERNAL_SERVER_ERROR\"\n  | \"SERVICE_UNAVAILABLE\"\n  | \"GATEWAY_TIMEOUT\"\n  // SDK / agent-domain\n  | \"AGENT_RUN_ERROR\"\n  | \"PROVIDER_KEY_MISSING\"\n  | \"BUDGET_EXCEEDED\"\n  | \"CREDENTIAL_POOL_EXHAUSTED\";\n\n/**\n * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.\n *\n * @public\n */\nexport interface TheokitErrorEnvelope<TExt = unknown> {\n  readonly code: TheokitErrorCode;\n  readonly message: string;\n  readonly cause?: unknown;\n  readonly meta?: Record<string, unknown>;\n  readonly ext?: TExt;\n}\n\n/**\n * Class-name -> envelope code mapping. Indexed by `Error.name` string so\n * subclasses inherit the mapping unless they override their `name` field.\n *\n * `IntegrationNotConnectedError` (subclass of `ConfigurationError`) takes\n * its own row because its `name` is `IntegrationNotConnectedError` and the\n * map is name-exact, not prototype-walked.\n */\nconst NAME_TO_CODE: ReadonlyMap<string, TheokitErrorCode> = new Map<string, TheokitErrorCode>([\n  [\"AuthenticationError\", \"UNAUTHORIZED\"],\n  [\"RateLimitError\", \"RATE_LIMITED\"],\n  [\"ConfigurationError\", \"PROVIDER_KEY_MISSING\"],\n  [\"IntegrationNotConnectedError\", \"PROVIDER_KEY_MISSING\"],\n  [\"NetworkError\", \"SERVICE_UNAVAILABLE\"],\n  [\"AgentRunError\", \"AGENT_RUN_ERROR\"],\n  [\"BudgetExceededError\", \"BUDGET_EXCEEDED\"],\n  [\"CredentialPoolExhaustedError\", \"CREDENTIAL_POOL_EXHAUSTED\"],\n  [\"UnknownAgentError\", \"INTERNAL_SERVER_ERROR\"],\n  [\"MemoryAdapterError\", \"INTERNAL_SERVER_ERROR\"],\n]);\n\n/**\n * Translate any SDK error (or arbitrary thrown value) into the canonical\n * envelope shape at the wire boundary.\n *\n * - `TheokitAgentError` family → mapped by `Error.name` string.\n * - Plain `Error` → INTERNAL_SERVER_ERROR.\n * - Non-Error values → INTERNAL_SERVER_ERROR with synthetic message.\n *\n * Meta carries `sdkErrorName` for telemetry; provider metadata (when present\n * via SDK's `ErrorMetadata`) flows through `meta.provider` / `meta.endpoint`\n * / `meta.statusCode` for diagnostics. `RateLimitError` populates a\n * `RetryableExt`-shaped ext when `metadata.retryAfter` (seconds) is set.\n *\n * @public\n */\nexport function toEnvelope(value: unknown): TheokitErrorEnvelope {\n  if (!(value instanceof Error)) {\n    return {\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: typeof value === \"string\" ? value : \"Unknown error\",\n    };\n  }\n  const name = value.name;\n  const code = NAME_TO_CODE.get(name) ?? \"INTERNAL_SERVER_ERROR\";\n  const meta = buildMeta(name, value);\n  const ext = buildExt(value);\n  return {\n    code,\n    message: value.message,\n    cause: (value as Error & { cause?: unknown }).cause,\n    meta,\n    ext,\n  };\n}\n\nfunction buildMeta(name: string, err: Error): Record<string, unknown> {\n  const meta: Record<string, unknown> = { sdkErrorName: name };\n  if (err instanceof TheokitAgentError && err.metadata !== undefined) {\n    meta.provider = err.metadata.provider;\n    meta.endpoint = err.metadata.endpoint;\n    if (err.metadata.statusCode !== undefined) {\n      meta.statusCode = err.metadata.statusCode;\n    }\n  }\n  return meta;\n}\n\nfunction buildExt(err: Error): unknown {\n  if (err instanceof RateLimitError && err.metadata?.retryAfter !== undefined) {\n    return {\n      retryable: true as const,\n      retryAfterMs: err.metadata.retryAfter * 1000,\n    };\n  }\n  if (err instanceof CredentialPoolExhaustedError && err.nextRetryAt !== undefined) {\n    const delayMs = Math.max(0, err.nextRetryAt - Date.now());\n    return {\n      retryable: true as const,\n      retryAfterMs: delayMs,\n    };\n  }\n  return undefined;\n}\n\n/**\n * Code -> reconstructor mapping. Each entry returns a fresh instance of the\n * SDK class hierarchy from an envelope, preserving message and (where the\n * constructor supports it) cause/ext context.\n *\n * Unmapped codes fall through to `UnknownAgentError` so consumer code that\n * relies on `err instanceof TheokitAgentError` still works.\n */\nconst CODE_TO_RECONSTRUCTOR: ReadonlyMap<\n  TheokitErrorCode,\n  (env: TheokitErrorEnvelope) => TheokitAgentError\n> = new Map<TheokitErrorCode, (env: TheokitErrorEnvelope) => TheokitAgentError>([\n  [\"UNAUTHORIZED\", (env) => new AuthenticationError(env.message)],\n  [\n    \"RATE_LIMITED\",\n    (env) => new RateLimitError(env.message, env.cause !== undefined ? { cause: env.cause } : {}),\n  ],\n  [\"PROVIDER_KEY_MISSING\", (env) => new ConfigurationError(env.message)],\n  [\"SERVICE_UNAVAILABLE\", (env) => new NetworkError(env.message)],\n  [\"GATEWAY_TIMEOUT\", (env) => new NetworkError(env.message)],\n  [\n    \"AGENT_RUN_ERROR\",\n    (env) =>\n      new AgentRunError(env.message, {\n        code: \"unknown\",\n        ...(env.cause !== undefined ? { cause: env.cause } : {}),\n      }),\n  ],\n  [\"INTERNAL_SERVER_ERROR\", (env) => new UnknownAgentError(env.message)],\n  // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require\n  // domain-specific args (budgetName, provider) that the envelope doesn't\n  // always carry. Fall back to UnknownAgentError when those fields are\n  // missing; consumer code that needs the typed class should call the\n  // constructor directly.\n]);\n\n/**\n * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound\n * boundary (e.g., on a worker process receiving an envelope from the main\n * process via IPC, or on a client deserializing a `RunResult.error`).\n *\n * @public\n */\nexport function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError {\n  const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);\n  if (reconstructor) return reconstructor(env);\n  // Round-trip preservation: if the envelope's meta.sdkErrorName matches a\n  // class without a generic reconstructor (e.g., BudgetExceededError), we\n  // can't rebuild without domain args. Fall back to UnknownAgentError.\n  return new UnknownAgentError(env.message);\n}\n\n// Re-export for ergonomic consumption alongside fromEnvelope.\nexport { MemoryAdapterError };\n"]}
+{"version":3,"sources":["../../src/server/errors-envelope.ts"],"names":["TheokitAgentError","RateLimitError","CredentialPoolExhaustedError","AuthenticationError","ConfigurationError","NetworkError","AgentRunError","UnknownAgentError"],"mappings":";;;;;;;AAoEA,IAAM,YAAA,uBAA0D,GAAA,CAA8B;AAAA,EAC5F,CAAC,uBAAuB,cAAc,CAAA;AAAA,EACtC,CAAC,kBAAkB,cAAc,CAAA;AAAA,EACjC,CAAC,sBAAsB,sBAAsB,CAAA;AAAA,EAC7C,CAAC,gCAAgC,sBAAsB,CAAA;AAAA,EACvD,CAAC,gBAAgB,qBAAqB,CAAA;AAAA,EACtC,CAAC,iBAAiB,iBAAiB,CAAA;AAAA,EACnC,CAAC,uBAAuB,iBAAiB,CAAA;AAAA,EACzC,CAAC,gCAAgC,2BAA2B,CAAA;AAAA,EAC5D,CAAC,qBAAqB,uBAAuB,CAAA;AAAA,EAC7C,CAAC,sBAAsB,uBAAuB;AAChD,CAAC,CAAA;AAiBM,SAAS,WAAW,KAAA,EAAsC;AAC/D,EAAA,IAAI,EAAE,iBAAiB,KAAA,CAAA,EAAQ;AAC7B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ;AAAA,KAC/C;AAAA,EACF;AACA,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,uBAAA;AACvC,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAClC,EAAA,MAAM,GAAA,GAAM,SAAS,KAAK,CAAA;AAC1B,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,OAAQ,KAAA,CAAsC,KAAA;AAAA,IAC9C,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,MAAc,GAAA,EAAqC;AACpE,EAAA,MAAM,IAAA,GAAgC,EAAE,YAAA,EAAc,IAAA,EAAK;AAC3D,EAAA,IAAI,GAAA,YAAeA,mCAAA,IAAqB,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClE,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,UAAA,KAAe,MAAA,EAAW;AACzC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAI,QAAA,CAAS,UAAA;AAAA,IACjC;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,IAAI,GAAA,YAAeC,gCAAA,IAAkB,GAAA,CAAI,QAAA,EAAU,eAAe,MAAA,EAAW;AAC3E,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc,GAAA,CAAI,QAAA,CAAS,UAAA,GAAa;AAAA,KAC1C;AAAA,EACF;AACA,EAAA,IAAI,GAAA,YAAeC,8CAAA,IAAgC,GAAA,CAAI,WAAA,KAAgB,MAAA,EAAW;AAChF,IAAA,MAAM,OAAA,GAAU,KAAK,GAAA,CAAI,CAAA,EAAG,IAAI,WAAA,GAAc,IAAA,CAAK,KAAK,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAUA,IAAM,qBAAA,uBAGE,GAAA,CAAwE;AAAA,EAC9E,CAAC,gBAAgB,CAAC,GAAA,KAAQ,IAAIC,qCAAA,CAAoB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D;AAAA,IACE,cAAA;AAAA,IACA,CAAC,GAAA,KAAQ,IAAIF,gCAAA,CAAe,IAAI,OAAA,EAAS,GAAA,CAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAE;AAAA,GAC9F;AAAA,EACA,CAAC,wBAAwB,CAAC,GAAA,KAAQ,IAAIG,oCAAA,CAAmB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EACrE,CAAC,uBAAuB,CAAC,GAAA,KAAQ,IAAIC,8BAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D,CAAC,mBAAmB,CAAC,GAAA,KAAQ,IAAIA,8BAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC1D;AAAA,IACE,iBAAA;AAAA,IACA,CAAC,GAAA,KACC,IAAIC,+BAAA,CAAc,IAAI,OAAA,EAAS;AAAA,MAC7B,IAAA,EAAM,SAAA;AAAA,MACN,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACvD;AAAA,GACL;AAAA,EACA,CAAC,yBAAyB,CAAC,GAAA,KAAQ,IAAIC,mCAAA,CAAkB,GAAA,CAAI,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAMvE,CAAC,CAAA;AASM,SAAS,aAAa,GAAA,EAA8C;AACzE,EAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AACxD,EAAA,IAAI,aAAA,EAAe,OAAO,aAAA,CAAc,GAAG,CAAA;AAI3C,EAAA,OAAO,IAAIA,mCAAA,CAAkB,GAAA,CAAI,OAAO,CAAA;AAC1C","file":"errors-envelope.cjs","sourcesContent":["/**\n * G5 T2.2 boundary translation — `@theokit/sdk/server/errors-envelope`.\n *\n * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.\n * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;\n * `toEnvelope(err)` translates outward at the Agent.send -> RunResult egress\n * edge, `fromEnvelope(env)` reconstructs class identity on the inbound edge\n * (so consumer code can keep using `instanceof RateLimitError` patterns).\n *\n * Structurally-compatible envelope shape: identical fields to theokit/server\n * `TheoErrorEnvelope`. Re-declared locally to keep `@theokit/sdk` free of any\n * dependency on `theokit`. Consumer code that uses both packages gets the\n * same shape via duck-typing.\n */\n\nimport {\n  AgentRunError,\n  AuthenticationError,\n  ConfigurationError,\n  CredentialPoolExhaustedError,\n  MemoryAdapterError,\n  NetworkError,\n  RateLimitError,\n  TheokitAgentError,\n  UnknownAgentError,\n} from \"../errors.js\";\n\n/**\n * Canonical envelope code union for cross-layer SDK boundary. Subset of the\n * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.\n * Other layers (theokit/server, theokit/client, theokit/ui) handle the broader\n * union; the SDK never needs the HTTP-only codes (PRECONDITION_FAILED, etc.).\n *\n * @public\n */\nexport type TheokitErrorCode =\n  | \"UNAUTHORIZED\"\n  | \"RATE_LIMITED\"\n  | \"INTERNAL_SERVER_ERROR\"\n  | \"SERVICE_UNAVAILABLE\"\n  | \"GATEWAY_TIMEOUT\"\n  // SDK / agent-domain\n  | \"AGENT_RUN_ERROR\"\n  | \"PROVIDER_KEY_MISSING\"\n  | \"BUDGET_EXCEEDED\"\n  | \"CREDENTIAL_POOL_EXHAUSTED\";\n\n/**\n * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.\n *\n * @public\n */\nexport interface TheokitErrorEnvelope<TExt = unknown> {\n  readonly code: TheokitErrorCode;\n  readonly message: string;\n  readonly cause?: unknown;\n  readonly meta?: Record<string, unknown>;\n  readonly ext?: TExt;\n}\n\n/**\n * Class-name -> envelope code mapping. Indexed by `Error.name` string so\n * subclasses inherit the mapping unless they override their `name` field.\n *\n * `IntegrationNotConnectedError` (subclass of `ConfigurationError`) takes\n * its own row because its `name` is `IntegrationNotConnectedError` and the\n * map is name-exact, not prototype-walked.\n */\nconst NAME_TO_CODE: ReadonlyMap<string, TheokitErrorCode> = new Map<string, TheokitErrorCode>([\n  [\"AuthenticationError\", \"UNAUTHORIZED\"],\n  [\"RateLimitError\", \"RATE_LIMITED\"],\n  [\"ConfigurationError\", \"PROVIDER_KEY_MISSING\"],\n  [\"IntegrationNotConnectedError\", \"PROVIDER_KEY_MISSING\"],\n  [\"NetworkError\", \"SERVICE_UNAVAILABLE\"],\n  [\"AgentRunError\", \"AGENT_RUN_ERROR\"],\n  [\"BudgetExceededError\", \"BUDGET_EXCEEDED\"],\n  [\"CredentialPoolExhaustedError\", \"CREDENTIAL_POOL_EXHAUSTED\"],\n  [\"UnknownAgentError\", \"INTERNAL_SERVER_ERROR\"],\n  [\"MemoryAdapterError\", \"INTERNAL_SERVER_ERROR\"],\n]);\n\n/**\n * Translate any SDK error (or arbitrary thrown value) into the canonical\n * envelope shape at the wire boundary.\n *\n * - `TheokitAgentError` family → mapped by `Error.name` string.\n * - Plain `Error` → INTERNAL_SERVER_ERROR.\n * - Non-Error values → INTERNAL_SERVER_ERROR with synthetic message.\n *\n * Meta carries `sdkErrorName` for telemetry; provider metadata (when present\n * via SDK's `ErrorMetadata`) flows through `meta.provider` / `meta.endpoint`\n * / `meta.statusCode` for diagnostics. `RateLimitError` populates a\n * `RetryableExt`-shaped ext when `metadata.retryAfter` (seconds) is set.\n *\n * @public\n */\nexport function toEnvelope(value: unknown): TheokitErrorEnvelope {\n  if (!(value instanceof Error)) {\n    return {\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: typeof value === \"string\" ? value : \"Unknown error\",\n    };\n  }\n  const name = value.name;\n  const code = NAME_TO_CODE.get(name) ?? \"INTERNAL_SERVER_ERROR\";\n  const meta = buildMeta(name, value);\n  const ext = buildExt(value);\n  return {\n    code,\n    message: value.message,\n    cause: (value as Error & { cause?: unknown }).cause,\n    meta,\n    ext,\n  };\n}\n\nfunction buildMeta(name: string, err: Error): Record<string, unknown> {\n  const meta: Record<string, unknown> = { sdkErrorName: name };\n  if (err instanceof TheokitAgentError && err.metadata !== undefined) {\n    meta.provider = err.metadata.provider;\n    meta.endpoint = err.metadata.endpoint;\n    if (err.metadata.statusCode !== undefined) {\n      meta.statusCode = err.metadata.statusCode;\n    }\n  }\n  return meta;\n}\n\nfunction buildExt(err: Error): unknown {\n  if (err instanceof RateLimitError && err.metadata?.retryAfter !== undefined) {\n    return {\n      retryable: true as const,\n      retryAfterMs: err.metadata.retryAfter * 1000,\n    };\n  }\n  if (err instanceof CredentialPoolExhaustedError && err.nextRetryAt !== undefined) {\n    const delayMs = Math.max(0, err.nextRetryAt - Date.now());\n    return {\n      retryable: true as const,\n      retryAfterMs: delayMs,\n    };\n  }\n  return undefined;\n}\n\n/**\n * Code -> reconstructor mapping. Each entry returns a fresh instance of the\n * SDK class hierarchy from an envelope, preserving message and (where the\n * constructor supports it) cause/ext context.\n *\n * Unmapped codes fall through to `UnknownAgentError` so consumer code that\n * relies on `err instanceof TheokitAgentError` still works.\n */\nconst CODE_TO_RECONSTRUCTOR: ReadonlyMap<\n  TheokitErrorCode,\n  (env: TheokitErrorEnvelope) => TheokitAgentError\n> = new Map<TheokitErrorCode, (env: TheokitErrorEnvelope) => TheokitAgentError>([\n  [\"UNAUTHORIZED\", (env) => new AuthenticationError(env.message)],\n  [\n    \"RATE_LIMITED\",\n    (env) => new RateLimitError(env.message, env.cause !== undefined ? { cause: env.cause } : {}),\n  ],\n  [\"PROVIDER_KEY_MISSING\", (env) => new ConfigurationError(env.message)],\n  [\"SERVICE_UNAVAILABLE\", (env) => new NetworkError(env.message)],\n  [\"GATEWAY_TIMEOUT\", (env) => new NetworkError(env.message)],\n  [\n    \"AGENT_RUN_ERROR\",\n    (env) =>\n      new AgentRunError(env.message, {\n        code: \"unknown\",\n        ...(env.cause !== undefined ? { cause: env.cause } : {}),\n      }),\n  ],\n  [\"INTERNAL_SERVER_ERROR\", (env) => new UnknownAgentError(env.message)],\n  // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require\n  // domain-specific args (budgetName, provider) that the envelope doesn't\n  // always carry. Fall back to UnknownAgentError when those fields are\n  // missing; consumer code that needs the typed class should call the\n  // constructor directly.\n]);\n\n/**\n * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound\n * boundary (e.g., on a worker process receiving an envelope from the main\n * process via IPC, or on a client deserializing a `RunResult.error`).\n *\n * @public\n */\nexport function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError {\n  const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);\n  if (reconstructor) return reconstructor(env);\n  // Round-trip preservation: if the envelope's meta.sdkErrorName matches a\n  // class without a generic reconstructor (e.g., BudgetExceededError), we\n  // can't rebuild without domain args. Fall back to UnknownAgentError.\n  return new UnknownAgentError(env.message);\n}\n\n// Re-export for ergonomic consumption alongside fromEnvelope.\nexport { MemoryAdapterError };\n"]}

package/dist/server/errors-envelope.d.cts

@@ -1,10 +1,10 @@
-import { T as TheokitAgentError } from '../errors-BSoXcl3F.cjs';
-export { M as MemoryAdapterError } from '../errors-BSoXcl3F.cjs';
-import '../run-C8FBAC8o.cjs';
+import { T as TheokitAgentError } from '../errors-BgJH9PHi.cjs';
+export { M as MemoryAdapterError } from '../errors-BgJH9PHi.cjs';
+import '../run-BYSHf58D.cjs';
 import 'zod';
 
 /**
- * @theokit/sdk/server/errors-envelope — G5 T2.2 boundary translation.
+ * G5 T2.2 boundary translation — `@theokit/sdk/server/errors-envelope`.
  *
  * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.
  * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;

package/dist/server/errors-envelope.d.ts

@@ -1,10 +1,10 @@
-import { T as TheokitAgentError } from '../errors-CHllybaU.js';
-export { M as MemoryAdapterError } from '../errors-CHllybaU.js';
-import '../run-C8FBAC8o.js';
+import { T as TheokitAgentError } from '../errors-C5fJUqLk.js';
+export { M as MemoryAdapterError } from '../errors-C5fJUqLk.js';
+import '../run-BYSHf58D.js';
 import 'zod';
 
 /**
- * @theokit/sdk/server/errors-envelope — G5 T2.2 boundary translation.
+ * G5 T2.2 boundary translation — `@theokit/sdk/server/errors-envelope`.
  *
  * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.
  * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;

package/dist/server/errors-envelope.js

@@ -1,6 +1,7 @@
-import { TheokitAgentError, RateLimitError, CredentialPoolExhaustedError, UnknownAgentError, AuthenticationError, ConfigurationError, NetworkError, AgentRunError } from '../chunk-U4UJHOSH.js';
-export { MemoryAdapterError } from '../chunk-U4UJHOSH.js';
-import '../chunk-5F5NWKPN.js';
+import { TheokitAgentError, RateLimitError, CredentialPoolExhaustedError, UnknownAgentError, AuthenticationError, ConfigurationError, NetworkError, AgentRunError } from '../chunk-IDCKSLYH.js';
+export { MemoryAdapterError } from '../chunk-IDCKSLYH.js';
+import '../chunk-T7XEKOVW.js';
+import '../chunk-T7O6K6PX.js';
 
 // src/server/errors-envelope.ts
 var NAME_TO_CODE = /* @__PURE__ */ new Map([

package/dist/server/errors-envelope.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/errors-envelope.ts"],"names":[],"mappings":";;;;;AAoEA,IAAM,YAAA,uBAA0D,GAAA,CAA8B;AAAA,EAC5F,CAAC,uBAAuB,cAAc,CAAA;AAAA,EACtC,CAAC,kBAAkB,cAAc,CAAA;AAAA,EACjC,CAAC,sBAAsB,sBAAsB,CAAA;AAAA,EAC7C,CAAC,gCAAgC,sBAAsB,CAAA;AAAA,EACvD,CAAC,gBAAgB,qBAAqB,CAAA;AAAA,EACtC,CAAC,iBAAiB,iBAAiB,CAAA;AAAA,EACnC,CAAC,uBAAuB,iBAAiB,CAAA;AAAA,EACzC,CAAC,gCAAgC,2BAA2B,CAAA;AAAA,EAC5D,CAAC,qBAAqB,uBAAuB,CAAA;AAAA,EAC7C,CAAC,sBAAsB,uBAAuB;AAChD,CAAC,CAAA;AAiBM,SAAS,WAAW,KAAA,EAAsC;AAC/D,EAAA,IAAI,EAAE,iBAAiB,KAAA,CAAA,EAAQ;AAC7B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ;AAAA,KAC/C;AAAA,EACF;AACA,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,uBAAA;AACvC,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAClC,EAAA,MAAM,GAAA,GAAM,SAAS,KAAK,CAAA;AAC1B,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,OAAQ,KAAA,CAAsC,KAAA;AAAA,IAC9C,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,MAAc,GAAA,EAAqC;AACpE,EAAA,MAAM,IAAA,GAAgC,EAAE,YAAA,EAAc,IAAA,EAAK;AAC3D,EAAA,IAAI,GAAA,YAAe,iBAAA,IAAqB,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClE,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,UAAA,KAAe,MAAA,EAAW;AACzC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAI,QAAA,CAAS,UAAA;AAAA,IACjC;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,IAAI,GAAA,YAAe,cAAA,IAAkB,GAAA,CAAI,QAAA,EAAU,eAAe,MAAA,EAAW;AAC3E,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc,GAAA,CAAI,QAAA,CAAS,UAAA,GAAa;AAAA,KAC1C;AAAA,EACF;AACA,EAAA,IAAI,GAAA,YAAe,4BAAA,IAAgC,GAAA,CAAI,WAAA,KAAgB,MAAA,EAAW;AAChF,IAAA,MAAM,OAAA,GAAU,KAAK,GAAA,CAAI,CAAA,EAAG,IAAI,WAAA,GAAc,IAAA,CAAK,KAAK,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAUA,IAAM,qBAAA,uBAGE,GAAA,CAAwE;AAAA,EAC9E,CAAC,gBAAgB,CAAC,GAAA,KAAQ,IAAI,mBAAA,CAAoB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D;AAAA,IACE,cAAA;AAAA,IACA,CAAC,GAAA,KAAQ,IAAI,cAAA,CAAe,IAAI,OAAA,EAAS,GAAA,CAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAE;AAAA,GAC9F;AAAA,EACA,CAAC,wBAAwB,CAAC,GAAA,KAAQ,IAAI,kBAAA,CAAmB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EACrE,CAAC,uBAAuB,CAAC,GAAA,KAAQ,IAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D,CAAC,mBAAmB,CAAC,GAAA,KAAQ,IAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC1D;AAAA,IACE,iBAAA;AAAA,IACA,CAAC,GAAA,KACC,IAAI,aAAA,CAAc,IAAI,OAAA,EAAS;AAAA,MAC7B,IAAA,EAAM,SAAA;AAAA,MACN,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACvD;AAAA,GACL;AAAA,EACA,CAAC,yBAAyB,CAAC,GAAA,KAAQ,IAAI,iBAAA,CAAkB,GAAA,CAAI,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAMvE,CAAC,CAAA;AASM,SAAS,aAAa,GAAA,EAA8C;AACzE,EAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AACxD,EAAA,IAAI,aAAA,EAAe,OAAO,aAAA,CAAc,GAAG,CAAA;AAI3C,EAAA,OAAO,IAAI,iBAAA,CAAkB,GAAA,CAAI,OAAO,CAAA;AAC1C","file":"errors-envelope.js","sourcesContent":["/**\n * @theokit/sdk/server/errors-envelope — G5 T2.2 boundary translation.\n *\n * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.\n * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;\n * `toEnvelope(err)` translates outward at the Agent.send -> RunResult egress\n * edge, `fromEnvelope(env)` reconstructs class identity on the inbound edge\n * (so consumer code can keep using `instanceof RateLimitError` patterns).\n *\n * Structurally-compatible envelope shape: identical fields to theokit/server\n * `TheoErrorEnvelope`. Re-declared locally to keep `@theokit/sdk` free of any\n * dependency on `theokit`. Consumer code that uses both packages gets the\n * same shape via duck-typing.\n */\n\nimport {\n  AgentRunError,\n  AuthenticationError,\n  ConfigurationError,\n  CredentialPoolExhaustedError,\n  MemoryAdapterError,\n  NetworkError,\n  RateLimitError,\n  TheokitAgentError,\n  UnknownAgentError,\n} from \"../errors.js\";\n\n/**\n * Canonical envelope code union for cross-layer SDK boundary. Subset of the\n * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.\n * Other layers (theokit/server, theokit/client, theokit/ui) handle the broader\n * union; the SDK never needs the HTTP-only codes (PRECONDITION_FAILED, etc.).\n *\n * @public\n */\nexport type TheokitErrorCode =\n  | \"UNAUTHORIZED\"\n  | \"RATE_LIMITED\"\n  | \"INTERNAL_SERVER_ERROR\"\n  | \"SERVICE_UNAVAILABLE\"\n  | \"GATEWAY_TIMEOUT\"\n  // SDK / agent-domain\n  | \"AGENT_RUN_ERROR\"\n  | \"PROVIDER_KEY_MISSING\"\n  | \"BUDGET_EXCEEDED\"\n  | \"CREDENTIAL_POOL_EXHAUSTED\";\n\n/**\n * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.\n *\n * @public\n */\nexport interface TheokitErrorEnvelope<TExt = unknown> {\n  readonly code: TheokitErrorCode;\n  readonly message: string;\n  readonly cause?: unknown;\n  readonly meta?: Record<string, unknown>;\n  readonly ext?: TExt;\n}\n\n/**\n * Class-name -> envelope code mapping. Indexed by `Error.name` string so\n * subclasses inherit the mapping unless they override their `name` field.\n *\n * `IntegrationNotConnectedError` (subclass of `ConfigurationError`) takes\n * its own row because its `name` is `IntegrationNotConnectedError` and the\n * map is name-exact, not prototype-walked.\n */\nconst NAME_TO_CODE: ReadonlyMap<string, TheokitErrorCode> = new Map<string, TheokitErrorCode>([\n  [\"AuthenticationError\", \"UNAUTHORIZED\"],\n  [\"RateLimitError\", \"RATE_LIMITED\"],\n  [\"ConfigurationError\", \"PROVIDER_KEY_MISSING\"],\n  [\"IntegrationNotConnectedError\", \"PROVIDER_KEY_MISSING\"],\n  [\"NetworkError\", \"SERVICE_UNAVAILABLE\"],\n  [\"AgentRunError\", \"AGENT_RUN_ERROR\"],\n  [\"BudgetExceededError\", \"BUDGET_EXCEEDED\"],\n  [\"CredentialPoolExhaustedError\", \"CREDENTIAL_POOL_EXHAUSTED\"],\n  [\"UnknownAgentError\", \"INTERNAL_SERVER_ERROR\"],\n  [\"MemoryAdapterError\", \"INTERNAL_SERVER_ERROR\"],\n]);\n\n/**\n * Translate any SDK error (or arbitrary thrown value) into the canonical\n * envelope shape at the wire boundary.\n *\n * - `TheokitAgentError` family → mapped by `Error.name` string.\n * - Plain `Error` → INTERNAL_SERVER_ERROR.\n * - Non-Error values → INTERNAL_SERVER_ERROR with synthetic message.\n *\n * Meta carries `sdkErrorName` for telemetry; provider metadata (when present\n * via SDK's `ErrorMetadata`) flows through `meta.provider` / `meta.endpoint`\n * / `meta.statusCode` for diagnostics. `RateLimitError` populates a\n * `RetryableExt`-shaped ext when `metadata.retryAfter` (seconds) is set.\n *\n * @public\n */\nexport function toEnvelope(value: unknown): TheokitErrorEnvelope {\n  if (!(value instanceof Error)) {\n    return {\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: typeof value === \"string\" ? value : \"Unknown error\",\n    };\n  }\n  const name = value.name;\n  const code = NAME_TO_CODE.get(name) ?? \"INTERNAL_SERVER_ERROR\";\n  const meta = buildMeta(name, value);\n  const ext = buildExt(value);\n  return {\n    code,\n    message: value.message,\n    cause: (value as Error & { cause?: unknown }).cause,\n    meta,\n    ext,\n  };\n}\n\nfunction buildMeta(name: string, err: Error): Record<string, unknown> {\n  const meta: Record<string, unknown> = { sdkErrorName: name };\n  if (err instanceof TheokitAgentError && err.metadata !== undefined) {\n    meta.provider = err.metadata.provider;\n    meta.endpoint = err.metadata.endpoint;\n    if (err.metadata.statusCode !== undefined) {\n      meta.statusCode = err.metadata.statusCode;\n    }\n  }\n  return meta;\n}\n\nfunction buildExt(err: Error): unknown {\n  if (err instanceof RateLimitError && err.metadata?.retryAfter !== undefined) {\n    return {\n      retryable: true as const,\n      retryAfterMs: err.metadata.retryAfter * 1000,\n    };\n  }\n  if (err instanceof CredentialPoolExhaustedError && err.nextRetryAt !== undefined) {\n    const delayMs = Math.max(0, err.nextRetryAt - Date.now());\n    return {\n      retryable: true as const,\n      retryAfterMs: delayMs,\n    };\n  }\n  return undefined;\n}\n\n/**\n * Code -> reconstructor mapping. Each entry returns a fresh instance of the\n * SDK class hierarchy from an envelope, preserving message and (where the\n * constructor supports it) cause/ext context.\n *\n * Unmapped codes fall through to `UnknownAgentError` so consumer code that\n * relies on `err instanceof TheokitAgentError` still works.\n */\nconst CODE_TO_RECONSTRUCTOR: ReadonlyMap<\n  TheokitErrorCode,\n  (env: TheokitErrorEnvelope) => TheokitAgentError\n> = new Map<TheokitErrorCode, (env: TheokitErrorEnvelope) => TheokitAgentError>([\n  [\"UNAUTHORIZED\", (env) => new AuthenticationError(env.message)],\n  [\n    \"RATE_LIMITED\",\n    (env) => new RateLimitError(env.message, env.cause !== undefined ? { cause: env.cause } : {}),\n  ],\n  [\"PROVIDER_KEY_MISSING\", (env) => new ConfigurationError(env.message)],\n  [\"SERVICE_UNAVAILABLE\", (env) => new NetworkError(env.message)],\n  [\"GATEWAY_TIMEOUT\", (env) => new NetworkError(env.message)],\n  [\n    \"AGENT_RUN_ERROR\",\n    (env) =>\n      new AgentRunError(env.message, {\n        code: \"unknown\",\n        ...(env.cause !== undefined ? { cause: env.cause } : {}),\n      }),\n  ],\n  [\"INTERNAL_SERVER_ERROR\", (env) => new UnknownAgentError(env.message)],\n  // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require\n  // domain-specific args (budgetName, provider) that the envelope doesn't\n  // always carry. Fall back to UnknownAgentError when those fields are\n  // missing; consumer code that needs the typed class should call the\n  // constructor directly.\n]);\n\n/**\n * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound\n * boundary (e.g., on a worker process receiving an envelope from the main\n * process via IPC, or on a client deserializing a `RunResult.error`).\n *\n * @public\n */\nexport function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError {\n  const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);\n  if (reconstructor) return reconstructor(env);\n  // Round-trip preservation: if the envelope's meta.sdkErrorName matches a\n  // class without a generic reconstructor (e.g., BudgetExceededError), we\n  // can't rebuild without domain args. Fall back to UnknownAgentError.\n  return new UnknownAgentError(env.message);\n}\n\n// Re-export for ergonomic consumption alongside fromEnvelope.\nexport { MemoryAdapterError };\n"]}
+{"version":3,"sources":["../../src/server/errors-envelope.ts"],"names":[],"mappings":";;;;;;AAoEA,IAAM,YAAA,uBAA0D,GAAA,CAA8B;AAAA,EAC5F,CAAC,uBAAuB,cAAc,CAAA;AAAA,EACtC,CAAC,kBAAkB,cAAc,CAAA;AAAA,EACjC,CAAC,sBAAsB,sBAAsB,CAAA;AAAA,EAC7C,CAAC,gCAAgC,sBAAsB,CAAA;AAAA,EACvD,CAAC,gBAAgB,qBAAqB,CAAA;AAAA,EACtC,CAAC,iBAAiB,iBAAiB,CAAA;AAAA,EACnC,CAAC,uBAAuB,iBAAiB,CAAA;AAAA,EACzC,CAAC,gCAAgC,2BAA2B,CAAA;AAAA,EAC5D,CAAC,qBAAqB,uBAAuB,CAAA;AAAA,EAC7C,CAAC,sBAAsB,uBAAuB;AAChD,CAAC,CAAA;AAiBM,SAAS,WAAW,KAAA,EAAsC;AAC/D,EAAA,IAAI,EAAE,iBAAiB,KAAA,CAAA,EAAQ;AAC7B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ;AAAA,KAC/C;AAAA,EACF;AACA,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,uBAAA;AACvC,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAClC,EAAA,MAAM,GAAA,GAAM,SAAS,KAAK,CAAA;AAC1B,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,OAAQ,KAAA,CAAsC,KAAA;AAAA,IAC9C,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,MAAc,GAAA,EAAqC;AACpE,EAAA,MAAM,IAAA,GAAgC,EAAE,YAAA,EAAc,IAAA,EAAK;AAC3D,EAAA,IAAI,GAAA,YAAe,iBAAA,IAAqB,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClE,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,UAAA,KAAe,MAAA,EAAW;AACzC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAI,QAAA,CAAS,UAAA;AAAA,IACjC;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,IAAI,GAAA,YAAe,cAAA,IAAkB,GAAA,CAAI,QAAA,EAAU,eAAe,MAAA,EAAW;AAC3E,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc,GAAA,CAAI,QAAA,CAAS,UAAA,GAAa;AAAA,KAC1C;AAAA,EACF;AACA,EAAA,IAAI,GAAA,YAAe,4BAAA,IAAgC,GAAA,CAAI,WAAA,KAAgB,MAAA,EAAW;AAChF,IAAA,MAAM,OAAA,GAAU,KAAK,GAAA,CAAI,CAAA,EAAG,IAAI,WAAA,GAAc,IAAA,CAAK,KAAK,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAUA,IAAM,qBAAA,uBAGE,GAAA,CAAwE;AAAA,EAC9E,CAAC,gBAAgB,CAAC,GAAA,KAAQ,IAAI,mBAAA,CAAoB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D;AAAA,IACE,cAAA;AAAA,IACA,CAAC,GAAA,KAAQ,IAAI,cAAA,CAAe,IAAI,OAAA,EAAS,GAAA,CAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAE;AAAA,GAC9F;AAAA,EACA,CAAC,wBAAwB,CAAC,GAAA,KAAQ,IAAI,kBAAA,CAAmB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EACrE,CAAC,uBAAuB,CAAC,GAAA,KAAQ,IAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D,CAAC,mBAAmB,CAAC,GAAA,KAAQ,IAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC1D;AAAA,IACE,iBAAA;AAAA,IACA,CAAC,GAAA,KACC,IAAI,aAAA,CAAc,IAAI,OAAA,EAAS;AAAA,MAC7B,IAAA,EAAM,SAAA;AAAA,MACN,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACvD;AAAA,GACL;AAAA,EACA,CAAC,yBAAyB,CAAC,GAAA,KAAQ,IAAI,iBAAA,CAAkB,GAAA,CAAI,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAMvE,CAAC,CAAA;AASM,SAAS,aAAa,GAAA,EAA8C;AACzE,EAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AACxD,EAAA,IAAI,aAAA,EAAe,OAAO,aAAA,CAAc,GAAG,CAAA;AAI3C,EAAA,OAAO,IAAI,iBAAA,CAAkB,GAAA,CAAI,OAAO,CAAA;AAC1C","file":"errors-envelope.js","sourcesContent":["/**\n * G5 T2.2 boundary translation — `@theokit/sdk/server/errors-envelope`.\n *\n * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.\n * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;\n * `toEnvelope(err)` translates outward at the Agent.send -> RunResult egress\n * edge, `fromEnvelope(env)` reconstructs class identity on the inbound edge\n * (so consumer code can keep using `instanceof RateLimitError` patterns).\n *\n * Structurally-compatible envelope shape: identical fields to theokit/server\n * `TheoErrorEnvelope`. Re-declared locally to keep `@theokit/sdk` free of any\n * dependency on `theokit`. Consumer code that uses both packages gets the\n * same shape via duck-typing.\n */\n\nimport {\n  AgentRunError,\n  AuthenticationError,\n  ConfigurationError,\n  CredentialPoolExhaustedError,\n  MemoryAdapterError,\n  NetworkError,\n  RateLimitError,\n  TheokitAgentError,\n  UnknownAgentError,\n} from \"../errors.js\";\n\n/**\n * Canonical envelope code union for cross-layer SDK boundary. Subset of the\n * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.\n * Other layers (theokit/server, theokit/client, theokit/ui) handle the broader\n * union; the SDK never needs the HTTP-only codes (PRECONDITION_FAILED, etc.).\n *\n * @public\n */\nexport type TheokitErrorCode =\n  | \"UNAUTHORIZED\"\n  | \"RATE_LIMITED\"\n  | \"INTERNAL_SERVER_ERROR\"\n  | \"SERVICE_UNAVAILABLE\"\n  | \"GATEWAY_TIMEOUT\"\n  // SDK / agent-domain\n  | \"AGENT_RUN_ERROR\"\n  | \"PROVIDER_KEY_MISSING\"\n  | \"BUDGET_EXCEEDED\"\n  | \"CREDENTIAL_POOL_EXHAUSTED\";\n\n/**\n * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.\n *\n * @public\n */\nexport interface TheokitErrorEnvelope<TExt = unknown> {\n  readonly code: TheokitErrorCode;\n  readonly message: string;\n  readonly cause?: unknown;\n  readonly meta?: Record<string, unknown>;\n  readonly ext?: TExt;\n}\n\n/**\n * Class-name -> envelope code mapping. Indexed by `Error.name` string so\n * subclasses inherit the mapping unless they override their `name` field.\n *\n * `IntegrationNotConnectedError` (subclass of `ConfigurationError`) takes\n * its own row because its `name` is `IntegrationNotConnectedError` and the\n * map is name-exact, not prototype-walked.\n */\nconst NAME_TO_CODE: ReadonlyMap<string, TheokitErrorCode> = new Map<string, TheokitErrorCode>([\n  [\"AuthenticationError\", \"UNAUTHORIZED\"],\n  [\"RateLimitError\", \"RATE_LIMITED\"],\n  [\"ConfigurationError\", \"PROVIDER_KEY_MISSING\"],\n  [\"IntegrationNotConnectedError\", \"PROVIDER_KEY_MISSING\"],\n  [\"NetworkError\", \"SERVICE_UNAVAILABLE\"],\n  [\"AgentRunError\", \"AGENT_RUN_ERROR\"],\n  [\"BudgetExceededError\", \"BUDGET_EXCEEDED\"],\n  [\"CredentialPoolExhaustedError\", \"CREDENTIAL_POOL_EXHAUSTED\"],\n  [\"UnknownAgentError\", \"INTERNAL_SERVER_ERROR\"],\n  [\"MemoryAdapterError\", \"INTERNAL_SERVER_ERROR\"],\n]);\n\n/**\n * Translate any SDK error (or arbitrary thrown value) into the canonical\n * envelope shape at the wire boundary.\n *\n * - `TheokitAgentError` family → mapped by `Error.name` string.\n * - Plain `Error` → INTERNAL_SERVER_ERROR.\n * - Non-Error values → INTERNAL_SERVER_ERROR with synthetic message.\n *\n * Meta carries `sdkErrorName` for telemetry; provider metadata (when present\n * via SDK's `ErrorMetadata`) flows through `meta.provider` / `meta.endpoint`\n * / `meta.statusCode` for diagnostics. `RateLimitError` populates a\n * `RetryableExt`-shaped ext when `metadata.retryAfter` (seconds) is set.\n *\n * @public\n */\nexport function toEnvelope(value: unknown): TheokitErrorEnvelope {\n  if (!(value instanceof Error)) {\n    return {\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: typeof value === \"string\" ? value : \"Unknown error\",\n    };\n  }\n  const name = value.name;\n  const code = NAME_TO_CODE.get(name) ?? \"INTERNAL_SERVER_ERROR\";\n  const meta = buildMeta(name, value);\n  const ext = buildExt(value);\n  return {\n    code,\n    message: value.message,\n    cause: (value as Error & { cause?: unknown }).cause,\n    meta,\n    ext,\n  };\n}\n\nfunction buildMeta(name: string, err: Error): Record<string, unknown> {\n  const meta: Record<string, unknown> = { sdkErrorName: name };\n  if (err instanceof TheokitAgentError && err.metadata !== undefined) {\n    meta.provider = err.metadata.provider;\n    meta.endpoint = err.metadata.endpoint;\n    if (err.metadata.statusCode !== undefined) {\n      meta.statusCode = err.metadata.statusCode;\n    }\n  }\n  return meta;\n}\n\nfunction buildExt(err: Error): unknown {\n  if (err instanceof RateLimitError && err.metadata?.retryAfter !== undefined) {\n    return {\n      retryable: true as const,\n      retryAfterMs: err.metadata.retryAfter * 1000,\n    };\n  }\n  if (err instanceof CredentialPoolExhaustedError && err.nextRetryAt !== undefined) {\n    const delayMs = Math.max(0, err.nextRetryAt - Date.now());\n    return {\n      retryable: true as const,\n      retryAfterMs: delayMs,\n    };\n  }\n  return undefined;\n}\n\n/**\n * Code -> reconstructor mapping. Each entry returns a fresh instance of the\n * SDK class hierarchy from an envelope, preserving message and (where the\n * constructor supports it) cause/ext context.\n *\n * Unmapped codes fall through to `UnknownAgentError` so consumer code that\n * relies on `err instanceof TheokitAgentError` still works.\n */\nconst CODE_TO_RECONSTRUCTOR: ReadonlyMap<\n  TheokitErrorCode,\n  (env: TheokitErrorEnvelope) => TheokitAgentError\n> = new Map<TheokitErrorCode, (env: TheokitErrorEnvelope) => TheokitAgentError>([\n  [\"UNAUTHORIZED\", (env) => new AuthenticationError(env.message)],\n  [\n    \"RATE_LIMITED\",\n    (env) => new RateLimitError(env.message, env.cause !== undefined ? { cause: env.cause } : {}),\n  ],\n  [\"PROVIDER_KEY_MISSING\", (env) => new ConfigurationError(env.message)],\n  [\"SERVICE_UNAVAILABLE\", (env) => new NetworkError(env.message)],\n  [\"GATEWAY_TIMEOUT\", (env) => new NetworkError(env.message)],\n  [\n    \"AGENT_RUN_ERROR\",\n    (env) =>\n      new AgentRunError(env.message, {\n        code: \"unknown\",\n        ...(env.cause !== undefined ? { cause: env.cause } : {}),\n      }),\n  ],\n  [\"INTERNAL_SERVER_ERROR\", (env) => new UnknownAgentError(env.message)],\n  // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require\n  // domain-specific args (budgetName, provider) that the envelope doesn't\n  // always carry. Fall back to UnknownAgentError when those fields are\n  // missing; consumer code that needs the typed class should call the\n  // constructor directly.\n]);\n\n/**\n * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound\n * boundary (e.g., on a worker process receiving an envelope from the main\n * process via IPC, or on a client deserializing a `RunResult.error`).\n *\n * @public\n */\nexport function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError {\n  const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);\n  if (reconstructor) return reconstructor(env);\n  // Round-trip preservation: if the envelope's meta.sdkErrorName matches a\n  // class without a generic reconstructor (e.g., BudgetExceededError), we\n  // can't rebuild without domain args. Fall back to UnknownAgentError.\n  return new UnknownAgentError(env.message);\n}\n\n// Re-export for ergonomic consumption alongside fromEnvelope.\nexport { MemoryAdapterError };\n"]}

package/dist/session-transcript-AKDYYGXQ.js

@@ -0,0 +1,6 @@
+export { SessionTranscript, defaultBaseDir, encodeProjectDir, expandTilde, readTranscript, reconstructMessages, safeSessionId, transcriptPath, transcriptRoot, writeTranscript } from './chunk-DZBSJX6J.js';
+import './chunk-VF7EWVDG.js';
+import './chunk-T7XEKOVW.js';
+import './chunk-T7O6K6PX.js';
+//# sourceMappingURL=session-transcript-AKDYYGXQ.js.map
+//# sourceMappingURL=session-transcript-AKDYYGXQ.js.map

package/dist/{session-transcript-RAKEK76V.js.map → session-transcript-AKDYYGXQ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-RAKEK76V.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-AKDYYGXQ.js"}

package/dist/session-transcript-JXHFTB7G.cjs

@@ -0,0 +1,51 @@
+'use strict';
+
+var chunkJHPGF3FP_cjs = require('./chunk-JHPGF3FP.cjs');
+require('./chunk-I6TGFUCO.cjs');
+require('./chunk-JTB5Q42C.cjs');
+require('./chunk-NUKRL3I6.cjs');
+
+
+
+Object.defineProperty(exports, "SessionTranscript", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.SessionTranscript; }
+});
+Object.defineProperty(exports, "defaultBaseDir", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.defaultBaseDir; }
+});
+Object.defineProperty(exports, "encodeProjectDir", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.encodeProjectDir; }
+});
+Object.defineProperty(exports, "expandTilde", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.expandTilde; }
+});
+Object.defineProperty(exports, "readTranscript", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.readTranscript; }
+});
+Object.defineProperty(exports, "reconstructMessages", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.reconstructMessages; }
+});
+Object.defineProperty(exports, "safeSessionId", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.safeSessionId; }
+});
+Object.defineProperty(exports, "transcriptPath", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.transcriptPath; }
+});
+Object.defineProperty(exports, "transcriptRoot", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.transcriptRoot; }
+});
+Object.defineProperty(exports, "writeTranscript", {
+  enumerable: true,
+  get: function () { return chunkJHPGF3FP_cjs.writeTranscript; }
+});
+//# sourceMappingURL=session-transcript-JXHFTB7G.cjs.map
+//# sourceMappingURL=session-transcript-JXHFTB7G.cjs.map

package/dist/{session-transcript-DOM3UTXR.cjs.map → session-transcript-JXHFTB7G.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-DOM3UTXR.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-JXHFTB7G.cjs"}

package/dist/skills.cjs

@@ -1,21 +1,22 @@
 'use strict';
 
-var chunkZN2DGEY3_cjs = require('./chunk-ZN2DGEY3.cjs');
-require('./chunk-ZT57WTUJ.cjs');
+var chunk3YJNUKYN_cjs = require('./chunk-3YJNUKYN.cjs');
+require('./chunk-R3UPQFKK.cjs');
 require('./chunk-VKJ7V7EB.cjs');
-require('./chunk-SZHU7A5B.cjs');
-require('./chunk-LPVIRJVF.cjs');
-require('./chunk-BM6N4KHO.cjs');
+require('./chunk-IWBGCBR6.cjs');
+require('./chunk-K3FW2XZD.cjs');
+require('./chunk-JTB5Q42C.cjs');
+require('./chunk-NUKRL3I6.cjs');
 
 
 
 Object.defineProperty(exports, "buildSkillsBlock", {
   enumerable: true,
-  get: function () { return chunkZN2DGEY3_cjs.buildSkillsBlock; }
+  get: function () { return chunk3YJNUKYN_cjs.buildSkillsBlock; }
 });
 Object.defineProperty(exports, "discoverSkills", {
   enumerable: true,
-  get: function () { return chunkZN2DGEY3_cjs.discoverSkills; }
+  get: function () { return chunk3YJNUKYN_cjs.discoverSkills; }
 });
 //# sourceMappingURL=skills.cjs.map
 //# sourceMappingURL=skills.cjs.map

package/dist/skills.js

@@ -1,8 +1,9 @@
-export { buildSkillsBlock, discoverSkills } from './chunk-OY7O3Q6R.js';
-import './chunk-SK4QLUBK.js';
+export { buildSkillsBlock, discoverSkills } from './chunk-4ERPXIVB.js';
+import './chunk-QARJGQSA.js';
 import './chunk-RIAM53CP.js';
-import './chunk-DGOG5NXR.js';
-import './chunk-U4UJHOSH.js';
-import './chunk-5F5NWKPN.js';
+import './chunk-AG5JPQIY.js';
+import './chunk-IDCKSLYH.js';
+import './chunk-T7XEKOVW.js';
+import './chunk-T7O6K6PX.js';
 //# sourceMappingURL=skills.js.map
 //# sourceMappingURL=skills.js.map

package/dist/stream-object-BUCF5PHO.cjs

@@ -0,0 +1,21 @@
+'use strict';
+
+var chunkROYPRJH4_cjs = require('./chunk-ROYPRJH4.cjs');
+require('./chunk-QDED6YO6.cjs');
+require('./chunk-WJVHMTKB.cjs');
+require('./chunk-K3FW2XZD.cjs');
+require('./chunk-JTB5Q42C.cjs');
+require('./chunk-NUKRL3I6.cjs');
+
+
+
+Object.defineProperty(exports, "StreamObjectError", {
+  enumerable: true,
+  get: function () { return chunkROYPRJH4_cjs.StreamObjectError; }
+});
+Object.defineProperty(exports, "streamObjectImpl", {
+  enumerable: true,
+  get: function () { return chunkROYPRJH4_cjs.streamObjectImpl; }
+});
+//# sourceMappingURL=stream-object-BUCF5PHO.cjs.map
+//# sourceMappingURL=stream-object-BUCF5PHO.cjs.map

package/dist/{stream-object-L3Q7PBMF.cjs.map → stream-object-BUCF5PHO.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"stream-object-L3Q7PBMF.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"stream-object-BUCF5PHO.cjs"}

package/dist/stream-object-L57K4OFS.js

@@ -0,0 +1,8 @@
+export { StreamObjectError, streamObjectImpl } from './chunk-WKRSH2VR.js';
+import './chunk-AEOZTXVW.js';
+import './chunk-4VPXM6UU.js';
+import './chunk-IDCKSLYH.js';
+import './chunk-T7XEKOVW.js';
+import './chunk-T7O6K6PX.js';
+//# sourceMappingURL=stream-object-L57K4OFS.js.map
+//# sourceMappingURL=stream-object-L57K4OFS.js.map

package/dist/{stream-object-ZYXWS4B2.js.map → stream-object-L57K4OFS.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"stream-object-ZYXWS4B2.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"stream-object-L57K4OFS.js"}

package/dist/{stream-to-completion-DFJ5T3BK.js → stream-to-completion-QV5HCL3J.js}

@@ -1,4 +1,4 @@
-import { resolveContinuation, promptForRound, continuationTail, addUsage, classifyRound, buildResult, isEmptyRound } from './chunk-UCFONJBG.js';
+import { resolveContinuation, promptForRound, continuationTail, addUsage, classifyRound, buildResult, isEmptyRound } from './chunk-EPSICJLZ.js';
 
 // src/internal/runtime/lifecycle/stream-to-completion.ts
 function decideRound(result, round, maxRounds, state) {
@@ -26,5 +26,5 @@ async function* streamToCompletionImpl(agent, message, options) {
 }
 
 export { streamToCompletionImpl };
-//# sourceMappingURL=stream-to-completion-DFJ5T3BK.js.map
-//# sourceMappingURL=stream-to-completion-DFJ5T3BK.js.map
+//# sourceMappingURL=stream-to-completion-QV5HCL3J.js.map
+//# sourceMappingURL=stream-to-completion-QV5HCL3J.js.map

package/dist/{stream-to-completion-DFJ5T3BK.js.map → stream-to-completion-QV5HCL3J.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/runtime/lifecycle/stream-to-completion.ts"],"names":[],"mappings":";;;AA2DA,SAAS,WAAA,CACP,MAAA,EACA,KAAA,EACA,SAAA,EACA,KAAA,EACe;AACf,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,KAAA,EAAO,OAAO,KAAK,CAAA;AAChD,EAAA,MAAM,WAAW,aAAA,CAAc,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAW,MAAM,WAAW,CAAA;AAC1E,EAAA,IAAI,QAAA,KAAa,UAAA,EAAY,OAAO,EAAE,QAAA,EAAU,YAAY,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,KAAK,CAAA,EAAE;AAC5F,EAAA,MAAM,cAAc,YAAA,CAAa,MAAM,CAAA,GAAI,KAAA,CAAM,cAAc,CAAA,GAAI,CAAA;AACnE,EAAA,OAAO,EAAE,IAAA,EAAM,EAAE,KAAA,EAAO,aAAY,EAAE;AACxC;AAQA,gBAAuB,sBAAA,CACrB,KAAA,EACA,OAAA,EACA,OAAA,EACsD;AACtD,EAAA,MAAM,GAAA,GAAM,oBAAoB,OAAO,CAAA;AACvC,EAAA,IAAI,QAAQ,GAAA,CAAI,KAAA;AAEhB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,IAAK,KAAA,IAAS,CAAA,EAAG;AAChC,IAAA,MAAM,MAAA,GAAS,cAAA,CAAe,KAAA,EAAO,OAAA,EAAS,IAAI,kBAAkB,CAAA;AAEpE,IAAA,MAAM,YAAA,GACJ,KAAA,KAAU,CAAA,GACN,GAAA,CAAI,cACJ,EAAE,GAAI,GAAA,CAAI,WAAA,IAAe,EAAC,EAAI,MAAA,EAAQ,EAAE,IAAA,EAAM,qBAA6B,EAAE;AACnF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,IAAA,CAAK,QAAQ,YAAY,CAAA;AAGjD,IAAA,OAAO,IAAI,MAAA,EAAO;AAClB,IAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,IAAA,EAAK;AAE9B,IAAA,MAAM,WAAW,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO,GAAA,CAAI,WAAW,KAAK,CAAA;AAChE,IAAA,IAAI,UAAA,IAAc,QAAA,EAAU,OAAO,QAAA,CAAS,QAAA;AAE5C,IAAA,KAAA,GAAQ,QAAA,CAAS,IAAA;AACjB,IAAA,MAAM,OAAA,GAAU,MAAM,gBAAA,CAAiB,KAAA,EAAO,MAAA,EAAQ,MAAM,KAAA,EAAO,GAAA,CAAI,WAAA,EAAa,GAAA,CAAI,MAAM,CAAA;AAC9F,IAAA,IAAI,OAAA,KAAY,QAAW,OAAO,OAAA;AAAA,EACpC;AACF","file":"stream-to-completion-DFJ5T3BK.js","sourcesContent":["/**\n * `streamToCompletion` — the STREAMING continuation driver (V3-4, plan\n * v34-stream-to-completion). The streaming twin of `runToCompletion`: it yields\n * each round's `SDKMessage`s LIVE (the V3-4 (a) gap a UI needs) while reusing the\n * SAME terminal policy as the M1 driver — `classifyRound` (done / step_limit /\n * no_progress) + bounded re-prompt + `addUsage` aggregation. It is NOT a second\n * policy (D1): the only difference from `runToCompletion` is surfacing events over\n * `Run.stream()` instead of returning only the final `Run.wait()` result.\n *\n * Stateful, like `runToCompletion` (the agent's session preserves history via the\n * native transcript; the continuation prompt is short). A stateless consumer\n * reconstructs history from the on-disk native transcript into a fresh agent.\n *\n * The `StreamToCompletionResult` is the generator's RETURN value, read via a\n * manual `gen.next()` loop (`while (!res.done) res = await gen.next()` → `res.value`).\n * A plain `for await...of` consumes the yielded messages but discards the return\n * value (EC-1).\n *\n * @internal\n */\n\nimport type { SDKMessage } from \"../../../types/messages.js\";\nimport type {\n  RunResult,\n  RunToCompletionOptions,\n  SendOptions,\n  StreamToCompletionResult,\n} from \"../../../types/run.js\";\n\nimport {\n  addUsage,\n  buildResult,\n  classifyRound,\n  continuationTail,\n  isEmptyRound,\n  promptForRound,\n  type RoundState,\n  resolveContinuation,\n} from \"./run-to-completion.js\";\n\n/** One streamed round handle: drain `stream()` (live events) then `wait()` (terminal result). */\ninterface StreamRun {\n  stream(): AsyncGenerator<SDKMessage, void>;\n  wait(): Promise<RunResult>;\n}\n\n/** Minimal agent port the streaming driver needs — the instance `.send()` surface. */\nexport interface StreamToCompletionAgent {\n  send(message: string, options?: SendOptions): Promise<StreamRun>;\n}\n\n/** A round either reaches a terminal, or yields the state to carry forward. */\ntype RoundDecision = { terminal: StreamToCompletionResult } | { next: RoundState };\n\n/**\n * Fold this round's usage, classify it (reusing the M1 policy), and decide\n * whether to finish or carry state into the next round. Splits the decision out\n * of the generator body to keep its cognitive complexity in budget.\n */\nfunction decideRound(\n  result: RunResult,\n  round: number,\n  maxRounds: number,\n  state: RoundState,\n): RoundDecision {\n  const usage = addUsage(state.usage, result.usage);\n  const decision = classifyRound(result, round, maxRounds, state.emptyStreak);\n  if (decision !== \"continue\") return { terminal: buildResult(decision, round, result, usage) };\n  const emptyStreak = isEmptyRound(result) ? state.emptyStreak + 1 : 0;\n  return { next: { usage, emptyStreak } };\n}\n\n/**\n * Drive `agent.send()` until a terminal, YIELDING each round's `SDKMessage`s\n * live. Returns the {@link StreamToCompletionResult} (the generator return value).\n *\n * @internal\n */\nexport async function* streamToCompletionImpl(\n  agent: StreamToCompletionAgent,\n  message: string,\n  options?: RunToCompletionOptions,\n): AsyncGenerator<SDKMessage, StreamToCompletionResult> {\n  const cfg = resolveContinuation(options);\n  let state = cfg.state;\n\n  for (let round = 0; ; round += 1) {\n    const prompt = promptForRound(round, message, cfg.continuationPrompt);\n    // SE3 — a continuation round is a driver-initiated turn; stamp its provenance.\n    const roundOptions =\n      round === 0\n        ? cfg.sendOptions\n        : { ...(cfg.sendOptions ?? {}), origin: { kind: \"auto-continuation\" as const } };\n    const run = await agent.send(prompt, roundOptions);\n\n    // (a) STREAMING: delegate the round's events live, before classifying.\n    yield* run.stream();\n    const result = await run.wait();\n\n    const decision = decideRound(result, round, cfg.maxRounds, state);\n    if (\"terminal\" in decision) return decision.terminal;\n\n    state = decision.next;\n    const aborted = await continuationTail(round, result, state.usage, cfg.onTruncated, cfg.signal);\n    if (aborted !== undefined) return aborted;\n  }\n}\n"]}
+{"version":3,"sources":["../src/internal/runtime/lifecycle/stream-to-completion.ts"],"names":[],"mappings":";;;AA2DA,SAAS,WAAA,CACP,MAAA,EACA,KAAA,EACA,SAAA,EACA,KAAA,EACe;AACf,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,KAAA,EAAO,OAAO,KAAK,CAAA;AAChD,EAAA,MAAM,WAAW,aAAA,CAAc,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAW,MAAM,WAAW,CAAA;AAC1E,EAAA,IAAI,QAAA,KAAa,UAAA,EAAY,OAAO,EAAE,QAAA,EAAU,YAAY,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,KAAK,CAAA,EAAE;AAC5F,EAAA,MAAM,cAAc,YAAA,CAAa,MAAM,CAAA,GAAI,KAAA,CAAM,cAAc,CAAA,GAAI,CAAA;AACnE,EAAA,OAAO,EAAE,IAAA,EAAM,EAAE,KAAA,EAAO,aAAY,EAAE;AACxC;AAQA,gBAAuB,sBAAA,CACrB,KAAA,EACA,OAAA,EACA,OAAA,EACsD;AACtD,EAAA,MAAM,GAAA,GAAM,oBAAoB,OAAO,CAAA;AACvC,EAAA,IAAI,QAAQ,GAAA,CAAI,KAAA;AAEhB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,IAAK,KAAA,IAAS,CAAA,EAAG;AAChC,IAAA,MAAM,MAAA,GAAS,cAAA,CAAe,KAAA,EAAO,OAAA,EAAS,IAAI,kBAAkB,CAAA;AAEpE,IAAA,MAAM,YAAA,GACJ,KAAA,KAAU,CAAA,GACN,GAAA,CAAI,cACJ,EAAE,GAAI,GAAA,CAAI,WAAA,IAAe,EAAC,EAAI,MAAA,EAAQ,EAAE,IAAA,EAAM,qBAA6B,EAAE;AACnF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,IAAA,CAAK,QAAQ,YAAY,CAAA;AAGjD,IAAA,OAAO,IAAI,MAAA,EAAO;AAClB,IAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,IAAA,EAAK;AAE9B,IAAA,MAAM,WAAW,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO,GAAA,CAAI,WAAW,KAAK,CAAA;AAChE,IAAA,IAAI,UAAA,IAAc,QAAA,EAAU,OAAO,QAAA,CAAS,QAAA;AAE5C,IAAA,KAAA,GAAQ,QAAA,CAAS,IAAA;AACjB,IAAA,MAAM,OAAA,GAAU,MAAM,gBAAA,CAAiB,KAAA,EAAO,MAAA,EAAQ,MAAM,KAAA,EAAO,GAAA,CAAI,WAAA,EAAa,GAAA,CAAI,MAAM,CAAA;AAC9F,IAAA,IAAI,OAAA,KAAY,QAAW,OAAO,OAAA;AAAA,EACpC;AACF","file":"stream-to-completion-QV5HCL3J.js","sourcesContent":["/**\n * `streamToCompletion` — the STREAMING continuation driver (V3-4, plan\n * v34-stream-to-completion). The streaming twin of `runToCompletion`: it yields\n * each round's `SDKMessage`s LIVE (the V3-4 (a) gap a UI needs) while reusing the\n * SAME terminal policy as the M1 driver — `classifyRound` (done / step_limit /\n * no_progress) + bounded re-prompt + `addUsage` aggregation. It is NOT a second\n * policy (D1): the only difference from `runToCompletion` is surfacing events over\n * `Run.stream()` instead of returning only the final `Run.wait()` result.\n *\n * Stateful, like `runToCompletion` (the agent's session preserves history via the\n * native transcript; the continuation prompt is short). A stateless consumer\n * reconstructs history from the on-disk native transcript into a fresh agent.\n *\n * The `StreamToCompletionResult` is the generator's RETURN value, read via a\n * manual `gen.next()` loop (`while (!res.done) res = await gen.next()` → `res.value`).\n * A plain `for await...of` consumes the yielded messages but discards the return\n * value (EC-1).\n *\n * @internal\n */\n\nimport type { SDKMessage } from \"../../../types/messages.js\";\nimport type {\n  RunResult,\n  RunToCompletionOptions,\n  SendOptions,\n  StreamToCompletionResult,\n} from \"../../../types/run.js\";\n\nimport {\n  addUsage,\n  buildResult,\n  classifyRound,\n  continuationTail,\n  isEmptyRound,\n  promptForRound,\n  type RoundState,\n  resolveContinuation,\n} from \"./run-to-completion.js\";\n\n/** One streamed round handle: drain `stream()` (live events) then `wait()` (terminal result). */\ninterface StreamRun {\n  stream(): AsyncGenerator<SDKMessage, void>;\n  wait(): Promise<RunResult>;\n}\n\n/** Minimal agent port the streaming driver needs — the instance `.send()` surface. */\nexport interface StreamToCompletionAgent {\n  send(message: string, options?: SendOptions): Promise<StreamRun>;\n}\n\n/** A round either reaches a terminal, or yields the state to carry forward. */\ntype RoundDecision = { terminal: StreamToCompletionResult } | { next: RoundState };\n\n/**\n * Fold this round's usage, classify it (reusing the M1 policy), and decide\n * whether to finish or carry state into the next round. Splits the decision out\n * of the generator body to keep its cognitive complexity in budget.\n */\nfunction decideRound(\n  result: RunResult,\n  round: number,\n  maxRounds: number,\n  state: RoundState,\n): RoundDecision {\n  const usage = addUsage(state.usage, result.usage);\n  const decision = classifyRound(result, round, maxRounds, state.emptyStreak);\n  if (decision !== \"continue\") return { terminal: buildResult(decision, round, result, usage) };\n  const emptyStreak = isEmptyRound(result) ? state.emptyStreak + 1 : 0;\n  return { next: { usage, emptyStreak } };\n}\n\n/**\n * Drive `agent.send()` until a terminal, YIELDING each round's `SDKMessage`s\n * live. Returns the {@link StreamToCompletionResult} (the generator return value).\n *\n * @internal\n */\nexport async function* streamToCompletionImpl(\n  agent: StreamToCompletionAgent,\n  message: string,\n  options?: RunToCompletionOptions,\n): AsyncGenerator<SDKMessage, StreamToCompletionResult> {\n  const cfg = resolveContinuation(options);\n  let state = cfg.state;\n\n  for (let round = 0; ; round += 1) {\n    const prompt = promptForRound(round, message, cfg.continuationPrompt);\n    // SE3 — a continuation round is a driver-initiated turn; stamp its provenance.\n    const roundOptions =\n      round === 0\n        ? cfg.sendOptions\n        : { ...(cfg.sendOptions ?? {}), origin: { kind: \"auto-continuation\" as const } };\n    const run = await agent.send(prompt, roundOptions);\n\n    // (a) STREAMING: delegate the round's events live, before classifying.\n    yield* run.stream();\n    const result = await run.wait();\n\n    const decision = decideRound(result, round, cfg.maxRounds, state);\n    if (\"terminal\" in decision) return decision.terminal;\n\n    state = decision.next;\n    const aborted = await continuationTail(round, result, state.usage, cfg.onTruncated, cfg.signal);\n    if (aborted !== undefined) return aborted;\n  }\n}\n"]}

package/dist/{stream-to-completion-H2MHISSK.cjs → stream-to-completion-SRISU5AB.cjs}

@@ -1,20 +1,20 @@
 'use strict';
 
-var chunkVK7MAV65_cjs = require('./chunk-VK7MAV65.cjs');
+var chunkQKLOP4VC_cjs = require('./chunk-QKLOP4VC.cjs');
 
 // src/internal/runtime/lifecycle/stream-to-completion.ts
 function decideRound(result, round, maxRounds, state) {
-  const usage = chunkVK7MAV65_cjs.addUsage(state.usage, result.usage);
-  const decision = chunkVK7MAV65_cjs.classifyRound(result, round, maxRounds, state.emptyStreak);
-  if (decision !== "continue") return { terminal: chunkVK7MAV65_cjs.buildResult(decision, round, result, usage) };
-  const emptyStreak = chunkVK7MAV65_cjs.isEmptyRound(result) ? state.emptyStreak + 1 : 0;
+  const usage = chunkQKLOP4VC_cjs.addUsage(state.usage, result.usage);
+  const decision = chunkQKLOP4VC_cjs.classifyRound(result, round, maxRounds, state.emptyStreak);
+  if (decision !== "continue") return { terminal: chunkQKLOP4VC_cjs.buildResult(decision, round, result, usage) };
+  const emptyStreak = chunkQKLOP4VC_cjs.isEmptyRound(result) ? state.emptyStreak + 1 : 0;
   return { next: { usage, emptyStreak } };
 }
 async function* streamToCompletionImpl(agent, message, options) {
-  const cfg = chunkVK7MAV65_cjs.resolveContinuation(options);
+  const cfg = chunkQKLOP4VC_cjs.resolveContinuation(options);
   let state = cfg.state;
   for (let round = 0; ; round += 1) {
-    const prompt = chunkVK7MAV65_cjs.promptForRound(round, message, cfg.continuationPrompt);
+    const prompt = chunkQKLOP4VC_cjs.promptForRound(round, message, cfg.continuationPrompt);
     const roundOptions = round === 0 ? cfg.sendOptions : { ...cfg.sendOptions ?? {}, origin: { kind: "auto-continuation" } };
     const run = await agent.send(prompt, roundOptions);
     yield* run.stream();
@@ -22,11 +22,11 @@ async function* streamToCompletionImpl(agent, message, options) {
     const decision = decideRound(result, round, cfg.maxRounds, state);
     if ("terminal" in decision) return decision.terminal;
     state = decision.next;
-    const aborted = await chunkVK7MAV65_cjs.continuationTail(round, result, state.usage, cfg.onTruncated, cfg.signal);
+    const aborted = await chunkQKLOP4VC_cjs.continuationTail(round, result, state.usage, cfg.onTruncated, cfg.signal);
     if (aborted !== void 0) return aborted;
   }
 }
 
 exports.streamToCompletionImpl = streamToCompletionImpl;
-//# sourceMappingURL=stream-to-completion-H2MHISSK.cjs.map
-//# sourceMappingURL=stream-to-completion-H2MHISSK.cjs.map
+//# sourceMappingURL=stream-to-completion-SRISU5AB.cjs.map
+//# sourceMappingURL=stream-to-completion-SRISU5AB.cjs.map

package/dist/{stream-to-completion-H2MHISSK.cjs.map → stream-to-completion-SRISU5AB.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/runtime/lifecycle/stream-to-completion.ts"],"names":["addUsage","classifyRound","buildResult","isEmptyRound","resolveContinuation","promptForRound","continuationTail"],"mappings":";;;;;AA2DA,SAAS,WAAA,CACP,MAAA,EACA,KAAA,EACA,SAAA,EACA,KAAA,EACe;AACf,EAAA,MAAM,KAAA,GAAQA,0BAAA,CAAS,KAAA,CAAM,KAAA,EAAO,OAAO,KAAK,CAAA;AAChD,EAAA,MAAM,WAAWC,+BAAA,CAAc,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAW,MAAM,WAAW,CAAA;AAC1E,EAAA,IAAI,QAAA,KAAa,UAAA,EAAY,OAAO,EAAE,QAAA,EAAUC,8BAAY,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,KAAK,CAAA,EAAE;AAC5F,EAAA,MAAM,cAAcC,8BAAA,CAAa,MAAM,CAAA,GAAI,KAAA,CAAM,cAAc,CAAA,GAAI,CAAA;AACnE,EAAA,OAAO,EAAE,IAAA,EAAM,EAAE,KAAA,EAAO,aAAY,EAAE;AACxC;AAQA,gBAAuB,sBAAA,CACrB,KAAA,EACA,OAAA,EACA,OAAA,EACsD;AACtD,EAAA,MAAM,GAAA,GAAMC,sCAAoB,OAAO,CAAA;AACvC,EAAA,IAAI,QAAQ,GAAA,CAAI,KAAA;AAEhB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,IAAK,KAAA,IAAS,CAAA,EAAG;AAChC,IAAA,MAAM,MAAA,GAASC,gCAAA,CAAe,KAAA,EAAO,OAAA,EAAS,IAAI,kBAAkB,CAAA;AAEpE,IAAA,MAAM,YAAA,GACJ,KAAA,KAAU,CAAA,GACN,GAAA,CAAI,cACJ,EAAE,GAAI,GAAA,CAAI,WAAA,IAAe,EAAC,EAAI,MAAA,EAAQ,EAAE,IAAA,EAAM,qBAA6B,EAAE;AACnF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,IAAA,CAAK,QAAQ,YAAY,CAAA;AAGjD,IAAA,OAAO,IAAI,MAAA,EAAO;AAClB,IAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,IAAA,EAAK;AAE9B,IAAA,MAAM,WAAW,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO,GAAA,CAAI,WAAW,KAAK,CAAA;AAChE,IAAA,IAAI,UAAA,IAAc,QAAA,EAAU,OAAO,QAAA,CAAS,QAAA;AAE5C,IAAA,KAAA,GAAQ,QAAA,CAAS,IAAA;AACjB,IAAA,MAAM,OAAA,GAAU,MAAMC,kCAAA,CAAiB,KAAA,EAAO,MAAA,EAAQ,MAAM,KAAA,EAAO,GAAA,CAAI,WAAA,EAAa,GAAA,CAAI,MAAM,CAAA;AAC9F,IAAA,IAAI,OAAA,KAAY,QAAW,OAAO,OAAA;AAAA,EACpC;AACF","file":"stream-to-completion-H2MHISSK.cjs","sourcesContent":["/**\n * `streamToCompletion` — the STREAMING continuation driver (V3-4, plan\n * v34-stream-to-completion). The streaming twin of `runToCompletion`: it yields\n * each round's `SDKMessage`s LIVE (the V3-4 (a) gap a UI needs) while reusing the\n * SAME terminal policy as the M1 driver — `classifyRound` (done / step_limit /\n * no_progress) + bounded re-prompt + `addUsage` aggregation. It is NOT a second\n * policy (D1): the only difference from `runToCompletion` is surfacing events over\n * `Run.stream()` instead of returning only the final `Run.wait()` result.\n *\n * Stateful, like `runToCompletion` (the agent's session preserves history via the\n * native transcript; the continuation prompt is short). A stateless consumer\n * reconstructs history from the on-disk native transcript into a fresh agent.\n *\n * The `StreamToCompletionResult` is the generator's RETURN value, read via a\n * manual `gen.next()` loop (`while (!res.done) res = await gen.next()` → `res.value`).\n * A plain `for await...of` consumes the yielded messages but discards the return\n * value (EC-1).\n *\n * @internal\n */\n\nimport type { SDKMessage } from \"../../../types/messages.js\";\nimport type {\n  RunResult,\n  RunToCompletionOptions,\n  SendOptions,\n  StreamToCompletionResult,\n} from \"../../../types/run.js\";\n\nimport {\n  addUsage,\n  buildResult,\n  classifyRound,\n  continuationTail,\n  isEmptyRound,\n  promptForRound,\n  type RoundState,\n  resolveContinuation,\n} from \"./run-to-completion.js\";\n\n/** One streamed round handle: drain `stream()` (live events) then `wait()` (terminal result). */\ninterface StreamRun {\n  stream(): AsyncGenerator<SDKMessage, void>;\n  wait(): Promise<RunResult>;\n}\n\n/** Minimal agent port the streaming driver needs — the instance `.send()` surface. */\nexport interface StreamToCompletionAgent {\n  send(message: string, options?: SendOptions): Promise<StreamRun>;\n}\n\n/** A round either reaches a terminal, or yields the state to carry forward. */\ntype RoundDecision = { terminal: StreamToCompletionResult } | { next: RoundState };\n\n/**\n * Fold this round's usage, classify it (reusing the M1 policy), and decide\n * whether to finish or carry state into the next round. Splits the decision out\n * of the generator body to keep its cognitive complexity in budget.\n */\nfunction decideRound(\n  result: RunResult,\n  round: number,\n  maxRounds: number,\n  state: RoundState,\n): RoundDecision {\n  const usage = addUsage(state.usage, result.usage);\n  const decision = classifyRound(result, round, maxRounds, state.emptyStreak);\n  if (decision !== \"continue\") return { terminal: buildResult(decision, round, result, usage) };\n  const emptyStreak = isEmptyRound(result) ? state.emptyStreak + 1 : 0;\n  return { next: { usage, emptyStreak } };\n}\n\n/**\n * Drive `agent.send()` until a terminal, YIELDING each round's `SDKMessage`s\n * live. Returns the {@link StreamToCompletionResult} (the generator return value).\n *\n * @internal\n */\nexport async function* streamToCompletionImpl(\n  agent: StreamToCompletionAgent,\n  message: string,\n  options?: RunToCompletionOptions,\n): AsyncGenerator<SDKMessage, StreamToCompletionResult> {\n  const cfg = resolveContinuation(options);\n  let state = cfg.state;\n\n  for (let round = 0; ; round += 1) {\n    const prompt = promptForRound(round, message, cfg.continuationPrompt);\n    // SE3 — a continuation round is a driver-initiated turn; stamp its provenance.\n    const roundOptions =\n      round === 0\n        ? cfg.sendOptions\n        : { ...(cfg.sendOptions ?? {}), origin: { kind: \"auto-continuation\" as const } };\n    const run = await agent.send(prompt, roundOptions);\n\n    // (a) STREAMING: delegate the round's events live, before classifying.\n    yield* run.stream();\n    const result = await run.wait();\n\n    const decision = decideRound(result, round, cfg.maxRounds, state);\n    if (\"terminal\" in decision) return decision.terminal;\n\n    state = decision.next;\n    const aborted = await continuationTail(round, result, state.usage, cfg.onTruncated, cfg.signal);\n    if (aborted !== undefined) return aborted;\n  }\n}\n"]}
+{"version":3,"sources":["../src/internal/runtime/lifecycle/stream-to-completion.ts"],"names":["addUsage","classifyRound","buildResult","isEmptyRound","resolveContinuation","promptForRound","continuationTail"],"mappings":";;;;;AA2DA,SAAS,WAAA,CACP,MAAA,EACA,KAAA,EACA,SAAA,EACA,KAAA,EACe;AACf,EAAA,MAAM,KAAA,GAAQA,0BAAA,CAAS,KAAA,CAAM,KAAA,EAAO,OAAO,KAAK,CAAA;AAChD,EAAA,MAAM,WAAWC,+BAAA,CAAc,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAW,MAAM,WAAW,CAAA;AAC1E,EAAA,IAAI,QAAA,KAAa,UAAA,EAAY,OAAO,EAAE,QAAA,EAAUC,8BAAY,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,KAAK,CAAA,EAAE;AAC5F,EAAA,MAAM,cAAcC,8BAAA,CAAa,MAAM,CAAA,GAAI,KAAA,CAAM,cAAc,CAAA,GAAI,CAAA;AACnE,EAAA,OAAO,EAAE,IAAA,EAAM,EAAE,KAAA,EAAO,aAAY,EAAE;AACxC;AAQA,gBAAuB,sBAAA,CACrB,KAAA,EACA,OAAA,EACA,OAAA,EACsD;AACtD,EAAA,MAAM,GAAA,GAAMC,sCAAoB,OAAO,CAAA;AACvC,EAAA,IAAI,QAAQ,GAAA,CAAI,KAAA;AAEhB,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,IAAK,KAAA,IAAS,CAAA,EAAG;AAChC,IAAA,MAAM,MAAA,GAASC,gCAAA,CAAe,KAAA,EAAO,OAAA,EAAS,IAAI,kBAAkB,CAAA;AAEpE,IAAA,MAAM,YAAA,GACJ,KAAA,KAAU,CAAA,GACN,GAAA,CAAI,cACJ,EAAE,GAAI,GAAA,CAAI,WAAA,IAAe,EAAC,EAAI,MAAA,EAAQ,EAAE,IAAA,EAAM,qBAA6B,EAAE;AACnF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,IAAA,CAAK,QAAQ,YAAY,CAAA;AAGjD,IAAA,OAAO,IAAI,MAAA,EAAO;AAClB,IAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,IAAA,EAAK;AAE9B,IAAA,MAAM,WAAW,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO,GAAA,CAAI,WAAW,KAAK,CAAA;AAChE,IAAA,IAAI,UAAA,IAAc,QAAA,EAAU,OAAO,QAAA,CAAS,QAAA;AAE5C,IAAA,KAAA,GAAQ,QAAA,CAAS,IAAA;AACjB,IAAA,MAAM,OAAA,GAAU,MAAMC,kCAAA,CAAiB,KAAA,EAAO,MAAA,EAAQ,MAAM,KAAA,EAAO,GAAA,CAAI,WAAA,EAAa,GAAA,CAAI,MAAM,CAAA;AAC9F,IAAA,IAAI,OAAA,KAAY,QAAW,OAAO,OAAA;AAAA,EACpC;AACF","file":"stream-to-completion-SRISU5AB.cjs","sourcesContent":["/**\n * `streamToCompletion` — the STREAMING continuation driver (V3-4, plan\n * v34-stream-to-completion). The streaming twin of `runToCompletion`: it yields\n * each round's `SDKMessage`s LIVE (the V3-4 (a) gap a UI needs) while reusing the\n * SAME terminal policy as the M1 driver — `classifyRound` (done / step_limit /\n * no_progress) + bounded re-prompt + `addUsage` aggregation. It is NOT a second\n * policy (D1): the only difference from `runToCompletion` is surfacing events over\n * `Run.stream()` instead of returning only the final `Run.wait()` result.\n *\n * Stateful, like `runToCompletion` (the agent's session preserves history via the\n * native transcript; the continuation prompt is short). A stateless consumer\n * reconstructs history from the on-disk native transcript into a fresh agent.\n *\n * The `StreamToCompletionResult` is the generator's RETURN value, read via a\n * manual `gen.next()` loop (`while (!res.done) res = await gen.next()` → `res.value`).\n * A plain `for await...of` consumes the yielded messages but discards the return\n * value (EC-1).\n *\n * @internal\n */\n\nimport type { SDKMessage } from \"../../../types/messages.js\";\nimport type {\n  RunResult,\n  RunToCompletionOptions,\n  SendOptions,\n  StreamToCompletionResult,\n} from \"../../../types/run.js\";\n\nimport {\n  addUsage,\n  buildResult,\n  classifyRound,\n  continuationTail,\n  isEmptyRound,\n  promptForRound,\n  type RoundState,\n  resolveContinuation,\n} from \"./run-to-completion.js\";\n\n/** One streamed round handle: drain `stream()` (live events) then `wait()` (terminal result). */\ninterface StreamRun {\n  stream(): AsyncGenerator<SDKMessage, void>;\n  wait(): Promise<RunResult>;\n}\n\n/** Minimal agent port the streaming driver needs — the instance `.send()` surface. */\nexport interface StreamToCompletionAgent {\n  send(message: string, options?: SendOptions): Promise<StreamRun>;\n}\n\n/** A round either reaches a terminal, or yields the state to carry forward. */\ntype RoundDecision = { terminal: StreamToCompletionResult } | { next: RoundState };\n\n/**\n * Fold this round's usage, classify it (reusing the M1 policy), and decide\n * whether to finish or carry state into the next round. Splits the decision out\n * of the generator body to keep its cognitive complexity in budget.\n */\nfunction decideRound(\n  result: RunResult,\n  round: number,\n  maxRounds: number,\n  state: RoundState,\n): RoundDecision {\n  const usage = addUsage(state.usage, result.usage);\n  const decision = classifyRound(result, round, maxRounds, state.emptyStreak);\n  if (decision !== \"continue\") return { terminal: buildResult(decision, round, result, usage) };\n  const emptyStreak = isEmptyRound(result) ? state.emptyStreak + 1 : 0;\n  return { next: { usage, emptyStreak } };\n}\n\n/**\n * Drive `agent.send()` until a terminal, YIELDING each round's `SDKMessage`s\n * live. Returns the {@link StreamToCompletionResult} (the generator return value).\n *\n * @internal\n */\nexport async function* streamToCompletionImpl(\n  agent: StreamToCompletionAgent,\n  message: string,\n  options?: RunToCompletionOptions,\n): AsyncGenerator<SDKMessage, StreamToCompletionResult> {\n  const cfg = resolveContinuation(options);\n  let state = cfg.state;\n\n  for (let round = 0; ; round += 1) {\n    const prompt = promptForRound(round, message, cfg.continuationPrompt);\n    // SE3 — a continuation round is a driver-initiated turn; stamp its provenance.\n    const roundOptions =\n      round === 0\n        ? cfg.sendOptions\n        : { ...(cfg.sendOptions ?? {}), origin: { kind: \"auto-continuation\" as const } };\n    const run = await agent.send(prompt, roundOptions);\n\n    // (a) STREAMING: delegate the round's events live, before classifying.\n    yield* run.stream();\n    const result = await run.wait();\n\n    const decision = decideRound(result, round, cfg.maxRounds, state);\n    if (\"terminal\" in decision) return decision.terminal;\n\n    state = decision.next;\n    const aborted = await continuationTail(round, result, state.usage, cfg.onTruncated, cfg.signal);\n    if (aborted !== undefined) return aborted;\n  }\n}\n"]}