@theokit/sdk 4.54.0 → 4.55.0

package/CHANGELOG.md

@@ -1,5 +1,101 @@
 # Changelog
 
+## 4.55.0
+
+### Minor Changes
+
+- 1988b1d: Responses-API requests now carry `prompt_cache_key`, so the provider can reuse the cached prompt
+  prefix between rounds instead of re-charging the whole system prompt and tool schema every time.
+
+  Measured on a consumer product against OpenAI Codex — same provider, same model, same reasoning
+  effort, same task — the SDK sent a THIRD of the bytes (24,691 c vs 76,331 c) and paid 2.8x the tokens
+  (24,914 vs 9,036). The difference was not what was sent; it was that theirs was cached and ours was
+  not, because no key told the provider which prefix to match.
+
+  The key is derived (SHA-256, truncated, prefixed) from the run's session identity — the id
+  `Agent.getOrCreate(sessionId)` keys on — so it is identical across every round of a turn and every
+  turn of a session, different for unrelated sessions, and stable across a process restart, while
+  disclosing nothing about a caller-chosen session name. Both halves matter: a key that changes per
+  round caches nothing, and a key shared between sessions asks the provider to match one conversation's
+  prefix against another's.
+
+  Alongside it, a provider profile may now declare `encryptedReasoning: true`. When it does, the
+  request adds `include: ["reasoning.encrypted_content"]` and `reasoning.context: "all_turns"`, and the
+  transport replays the ciphertext the provider returned immediately before the tool call it produced,
+  so the model does not re-derive its chain of thought on every round. It is off by default and on for
+  the builtin `openai-chatgpt` profile: `include` is a documented Responses-API field but
+  `reasoning.context` is not, and that endpoint is the one where acceptance was observed rather than
+  assumed. Every other provider's request body is unchanged.
+
+  `store` stays `false`, now as a recorded decision rather than an unexamined default. Codex sends
+  `true`; SDK requests routinely carry a consumer's source code and shell output from machines whose
+  operator never agreed to server-side retention, and nothing in the caching work needs it — the cache
+  key handles the prefix and the encrypted-reasoning carry is precisely the mechanism for keeping
+  reasoning without server-side state.
+
+  Fixes `usetheokit/theokit-sdk#383`.
+
+- 63b0831: A local agent can now withhold the SDK's builtin tools from the catalog it declares to the model,
+  and a disabled memory store no longer writes a session transcript into the consumer's repository.
+
+  `AgentOptions.withheldBuiltinTools?: readonly BuiltinToolName[]` names builtins — `shell`,
+  `memory_search`, `memory_get` — that this agent must not declare. Absent or empty, every builtin the
+  rest of the configuration would register is declared exactly as before, so nothing changes for an
+  agent that does not ask.
+
+  The option exists because denying a tool and never offering it are different things. A consumer
+  whose sandbox scope cannot admit `shell` could already refuse the call in a `pre_tool_call` hook, and
+  paid for the tool twice anyway: 267 characters of schema in every request of every round, plus a
+  round the model can spend discovering a refusal it had no way to anticipate. Withholding removes the
+  tool from the catalog, so the model is never shown what it cannot have. Withholding also releases the
+  name — a withheld `shell` may be replaced by a custom tool called `shell` without the
+  `tool_reserved_name` error, since the reservation exists to prevent a collision that no longer
+  exists. Builtins still declared stay reserved.
+
+  Fixes `usetheokit/theokit-sdk#381`.
+
+  `memory: { enabled: false }` now suppresses the per-run session transcript at
+  `<cwd>/.theokit/memory/sessions/<runId>.md`. It previously did not: that write was gated on the run's
+  status and nothing else, so an agent with memory switched off still had the full user prompt and
+  assistant reply written into the working directory — someone else's git repository, in the reported
+  case. Every other memory surface already honoured the flag, so "memory is off" was true of the
+  subsystem apart from the one part of it that creates files. Both writers are covered, the legacy
+  call and the `MemoryProvider.recordSessionSummary` port.
+
+  Leaving `memory` unset is unchanged and still writes, because that file is what
+  `memory_search({ corpus: "sessions" })` reads once memory is switched on; treating an absent config
+  as off would empty that corpus for consumers who asked for nothing. Writing `enabled: false` is the
+  opt-out.
+
+  So: if you run an agent inside a repository and were adding `.theokit/` to `.gitignore` to keep
+  prompts and replies out of it, `memory: { enabled: false }` now stops them being written at all.
+  `memory_search({ corpus: "sessions" })` returns nothing for those runs, which is the trade — no
+  transcript on disk, nothing to recall from it.
+
+  Fixes `usetheokit/theokit-sdk#382`.
+
+### Patch Changes
+
+- a3bdbd1: The Responses transport now reads `input_tokens_details.cached_tokens` and `.cache_write_tokens`,
+  so a consumer can tell what a turn actually cost.
+
+  `input_tokens` INCLUDES the slice the provider served from its prompt cache. This transport reported
+  `cacheReadTokens: 0` regardless, so adding input to output counted tokens nobody is paying for.
+  Measured on a three-round turn with `prompt_cache_key` in use: the provider reported
+  `cached_tokens: 4608` on every round, and the consumer received 9,835 where 619 were new — 16x.
+
+  The sibling Chat Completions transport has always read the equivalent
+  (`prompt_tokens_details.cached_tokens`); this one read `output_tokens_details.reasoning_tokens`
+  beside it and skipped this one. The response type declared neither, so it was invisible at the type
+  level too.
+
+  It matters beyond an inaccurate number: it makes the SDK look expensive when it is not. Comparing a
+  consumer against OpenAI Codex on identical tasks, the gross figure said 2.8x. Codex reports the net
+  figure (`non_cached_input + output`). Measured with the same formula on both sides, the same task
+  costs 14,317 against 13,560 — inside the run-to-run variance.
+
+  Fixes `usetheokit/theokit-sdk#386`.
+
 ## 4.54.0
 
 ### Minor Changes

package/dist/{agent-CIUgz7cN.d.cts → agent-D3Xr_-6Z.d.cts}

@@ -551,6 +551,19 @@ interface ProviderProfile {
      * Default off — only enable for routes/models known to leak (e.g. a qwen3-coder profile variant).
      */
     extractToolCallsFromContent?: boolean;
+    /**
+     * Opt-in encrypted-reasoning carry for `apiMode: "responses_api"` (usetheokit/theokit-sdk#383).
+     * When `true`, the request adds `include: ["reasoning.encrypted_content"]` and
+     * `reasoning.context: "all_turns"`, and the transport replays the ciphertext the provider returned
+     * so the model does not re-derive its chain of thought on every round of a turn.
+     *
+     * Default off, and deliberately per-profile rather than per-`apiMode`: `include` is a documented
+     * Responses-API field but `reasoning.context` is not, so a provider that validates strictly
+     * answers it with `400`. Enable it only for a backend measured to accept both — the builtin
+     * `openai-chatgpt` profile is one, because issue #383 captured OpenAI Codex sending exactly these
+     * fields to that endpoint. Ignored by every other `apiMode`.
+     */
+    encryptedReasoning?: boolean;
 }
 
 /**
@@ -799,6 +812,19 @@ type Plugin = (BasePlugin & {
  * @public
  */
 type SettingSource = "project" | "user" | "team" | "mdm" | "plugins" | "all";
+/**
+ * A tool the SDK declares to the model on its own initiative — not one the consumer passed in
+ * {@link AgentOptions.tools}, and not one an MCP server exposed.
+ *
+ * These three names are also the ones the SDK reserves: a custom tool may not claim them. Listing
+ * one in {@link AgentOptions.withheldBuiltinTools} both stops it being declared and releases the
+ * name, because nothing of the SDK's is occupying it any more.
+ *
+ * Named for usetheokit/theokit-sdk#381, which is the report that the catalog had no opt-out.
+ *
+ * @public
+ */
+type BuiltinToolName = "shell" | "memory_search" | "memory_get";
 /**
  * Local agent configuration.
  *
@@ -809,14 +835,17 @@ type SettingSource = "project" | "user" | "team" | "mdm" | "plugins" | "all";
  *    an evaluation invalidated this way: the working directory held the benchmark's answer key, and
  *    two transcripts show the model citing it. Deny it explicitly if that matters —
  *    `{ tool: "shell", action: "deny" }` on a {@link PermissionEngine} rule is terminal under every
- *    permission mode, including `bypass`. Note the tool still appears in the advertised catalog, so
- *    the model may attempt it and be refused, rather than never seeing it.
+ *    permission mode, including `bypass`. A deny rule still leaves the tool in the advertised
+ *    catalog, so the model may attempt it and be refused; to keep it out of the catalog entirely,
+ *    pass `withheldBuiltinTools: ["shell"]` on {@link AgentOptions} (usetheokit/theokit-sdk#381).
  *
  * 2. **Finished runs write a transcript to disk**, at `.theokit/memory/sessions/<runId>.md` under
  *    the workspace `cwd`, with the full prompt and reply. This happens with no `memory` config and
- *    with `settingSources: []` — it is what `memory_search({ corpus: "sessions" })` reads. It is not
- *    currently opt-out. If the workspace is a git repository, add `.theokit/` to `.gitignore`: one
- *    report describes a transcript reaching a public repo before it was noticed.
+ *    with `settingSources: []` — it is what `memory_search({ corpus: "sessions" })` reads. Opt out
+ *    with `memory: { enabled: false }`, which suppresses the write entirely
+ *    (usetheokit/theokit-sdk#382). Leaving `memory`
+ *    unset still writes, so if the workspace is a git repository, add `.theokit/` to `.gitignore`:
+ *    one report describes a transcript reaching a public repo before it was noticed.
  *
  * @public
  */
@@ -1220,6 +1249,32 @@ interface AgentOptions {
      * See {@link CustomTool}.
      */
     tools?: CustomTool[];
+    /**
+     * Builtin tools this agent must NOT declare to the model. Absent or empty ⇒ every builtin the
+     * rest of the configuration would register is declared, exactly as before this option existed.
+     *
+     * WHY WITHHOLDING IS NOT THE SAME AS DENYING. A consumer that cannot allow `shell` — because it
+     * reaches outside their own sandbox scope — can already refuse the call in a `pre_tool_call` hook
+     * or with a {@link PermissionEngine} deny rule. That stops the execution and pays for the offer
+     * twice over: the schema rides in EVERY request of EVERY round (measured at 267 characters for
+     * `shell`, 1,462 for `memory_search` + `memory_get` together — usetheokit/theokit-sdk#381), and
+     * the model can spend a whole round discovering a refusal it had no way to anticipate. Declaring
+     * a tool that is guaranteed to be refused is the wrong shape; withholding removes it from the
+     * catalog, so the model is never offered what it cannot have.
+     *
+     * WITHHOLDING RELEASES THE NAME. `withheldBuiltinTools: ["shell"]` lets {@link AgentOptions.tools}
+     * declare a tool called `shell` without the `tool_reserved_name` error — the reservation exists to
+     * stop a collision with the SDK's own tool, and there is no longer one to collide with. Every
+     * builtin still declared stays reserved.
+     *
+     * This governs DECLARATION, not authorization. A withheld builtin is simply absent from the
+     * catalog: a model that invents the name anyway gets `Unknown tool <name>` (exit 127) rather than
+     * an execution, but nothing here evaluates a policy. Keep the deny rule if you need one that a
+     * per-send `tools` override cannot reopen.
+     *
+     * @public
+     */
+    withheldBuiltinTools?: readonly BuiltinToolName[];
     /**
      * SE37 — opt-in reasoning. When `true`, the agent gets a chain-of-thought
      * preamble prepended to its system prompt AND the `think` reasoning tool
@@ -1583,4 +1638,4 @@ interface ListResult<T> {
     nextCursor?: string;
 }
 
-export { type TelemetrySettings as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type PostAssistantReplyContext as D, type PostToolCallContext as E, type PreToolCallContext as F, type GetAgentOptions as G, type HookName as H, type InlineSkill as I, type PreUserSendContext as J, type PreUserSendResult as K, type LocalOptions as L, type MemorySettings as M, type ProviderTransform as N, type ProviderTransformContext as O, type Plugin as P, type SessionLifecycleContext as Q, type RecordSessionSummaryArgs as R, type SystemPromptResolver as S, type SessionRecord as T, type SessionStore as U, type SettingSource as V, Skill as W, type SkillsResolver as X, type SkillsResolverContext as Y, type SystemPromptContext as Z, type SystemPromptMemoryFact as _, type AgentDefinition as a, type ToolCallSummary as a0, type ToolResultTransformContext as a1, type TransformContext as a2, type SkillsSettings as b, type ListAgentsOptions as c, type ListResult as d, type SDKAgentInfo as e, type ListRunsOptions as f, type GetRunOptions as g, type AgentOperationOptions as h, type AgentDescription as i, type ProviderProfile as j, type MemoryProvider as k, type PreToolCallDecision as l, type ActiveMemoryPassArgs as m, type ActiveMemoryPassResult as n, type AgentSubagentDescription as o, type AgentToolDescription as p, type BudgetCheck as q, type BudgetTotal as r, type BudgetUsageEvent as s, type CloudEnv as t, type CloudRepo as u, type CreateSkillSpec as v, type MemoryProviderFactory as w, type MemoryProviderHandle as x, type MemoryProviderInitOptions as y, type PluginContext as z };
+export { type SystemPromptMemoryFact as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type PluginContext as D, type PostAssistantReplyContext as E, type PostToolCallContext as F, type GetAgentOptions as G, type HookName as H, type InlineSkill as I, type PreToolCallContext as J, type PreUserSendContext as K, type LocalOptions as L, type MemorySettings as M, type PreUserSendResult as N, type ProviderTransform as O, type Plugin as P, type ProviderTransformContext as Q, type RecordSessionSummaryArgs as R, type SystemPromptResolver as S, type SessionLifecycleContext as T, type SessionRecord as U, type SessionStore as V, type SettingSource as W, Skill as X, type SkillsResolver as Y, type SkillsResolverContext as Z, type SystemPromptContext as _, type AgentDefinition as a, type TelemetrySettings as a0, type ToolCallSummary as a1, type ToolResultTransformContext as a2, type TransformContext as a3, type SkillsSettings as b, type ListAgentsOptions as c, type ListResult as d, type SDKAgentInfo as e, type ListRunsOptions as f, type GetRunOptions as g, type AgentOperationOptions as h, type AgentDescription as i, type ProviderProfile as j, type MemoryProvider as k, type PreToolCallDecision as l, type ActiveMemoryPassArgs as m, type ActiveMemoryPassResult as n, type AgentSubagentDescription as o, type AgentToolDescription as p, type BudgetCheck as q, type BudgetTotal as r, type BudgetUsageEvent as s, type BuiltinToolName as t, type CloudEnv as u, type CloudRepo as v, type CreateSkillSpec as w, type MemoryProviderFactory as x, type MemoryProviderHandle as y, type MemoryProviderInitOptions as z };

package/dist/{agent-DSec-E0c.d.ts → agent-DIu6FooJ.d.ts}

@@ -551,6 +551,19 @@ interface ProviderProfile {
      * Default off — only enable for routes/models known to leak (e.g. a qwen3-coder profile variant).
      */
     extractToolCallsFromContent?: boolean;
+    /**
+     * Opt-in encrypted-reasoning carry for `apiMode: "responses_api"` (usetheokit/theokit-sdk#383).
+     * When `true`, the request adds `include: ["reasoning.encrypted_content"]` and
+     * `reasoning.context: "all_turns"`, and the transport replays the ciphertext the provider returned
+     * so the model does not re-derive its chain of thought on every round of a turn.
+     *
+     * Default off, and deliberately per-profile rather than per-`apiMode`: `include` is a documented
+     * Responses-API field but `reasoning.context` is not, so a provider that validates strictly
+     * answers it with `400`. Enable it only for a backend measured to accept both — the builtin
+     * `openai-chatgpt` profile is one, because issue #383 captured OpenAI Codex sending exactly these
+     * fields to that endpoint. Ignored by every other `apiMode`.
+     */
+    encryptedReasoning?: boolean;
 }
 
 /**
@@ -799,6 +812,19 @@ type Plugin = (BasePlugin & {
  * @public
  */
 type SettingSource = "project" | "user" | "team" | "mdm" | "plugins" | "all";
+/**
+ * A tool the SDK declares to the model on its own initiative — not one the consumer passed in
+ * {@link AgentOptions.tools}, and not one an MCP server exposed.
+ *
+ * These three names are also the ones the SDK reserves: a custom tool may not claim them. Listing
+ * one in {@link AgentOptions.withheldBuiltinTools} both stops it being declared and releases the
+ * name, because nothing of the SDK's is occupying it any more.
+ *
+ * Named for usetheokit/theokit-sdk#381, which is the report that the catalog had no opt-out.
+ *
+ * @public
+ */
+type BuiltinToolName = "shell" | "memory_search" | "memory_get";
 /**
  * Local agent configuration.
  *
@@ -809,14 +835,17 @@ type SettingSource = "project" | "user" | "team" | "mdm" | "plugins" | "all";
  *    an evaluation invalidated this way: the working directory held the benchmark's answer key, and
  *    two transcripts show the model citing it. Deny it explicitly if that matters —
  *    `{ tool: "shell", action: "deny" }` on a {@link PermissionEngine} rule is terminal under every
- *    permission mode, including `bypass`. Note the tool still appears in the advertised catalog, so
- *    the model may attempt it and be refused, rather than never seeing it.
+ *    permission mode, including `bypass`. A deny rule still leaves the tool in the advertised
+ *    catalog, so the model may attempt it and be refused; to keep it out of the catalog entirely,
+ *    pass `withheldBuiltinTools: ["shell"]` on {@link AgentOptions} (usetheokit/theokit-sdk#381).
  *
  * 2. **Finished runs write a transcript to disk**, at `.theokit/memory/sessions/<runId>.md` under
  *    the workspace `cwd`, with the full prompt and reply. This happens with no `memory` config and
- *    with `settingSources: []` — it is what `memory_search({ corpus: "sessions" })` reads. It is not
- *    currently opt-out. If the workspace is a git repository, add `.theokit/` to `.gitignore`: one
- *    report describes a transcript reaching a public repo before it was noticed.
+ *    with `settingSources: []` — it is what `memory_search({ corpus: "sessions" })` reads. Opt out
+ *    with `memory: { enabled: false }`, which suppresses the write entirely
+ *    (usetheokit/theokit-sdk#382). Leaving `memory`
+ *    unset still writes, so if the workspace is a git repository, add `.theokit/` to `.gitignore`:
+ *    one report describes a transcript reaching a public repo before it was noticed.
  *
  * @public
  */
@@ -1220,6 +1249,32 @@ interface AgentOptions {
      * See {@link CustomTool}.
      */
     tools?: CustomTool[];
+    /**
+     * Builtin tools this agent must NOT declare to the model. Absent or empty ⇒ every builtin the
+     * rest of the configuration would register is declared, exactly as before this option existed.
+     *
+     * WHY WITHHOLDING IS NOT THE SAME AS DENYING. A consumer that cannot allow `shell` — because it
+     * reaches outside their own sandbox scope — can already refuse the call in a `pre_tool_call` hook
+     * or with a {@link PermissionEngine} deny rule. That stops the execution and pays for the offer
+     * twice over: the schema rides in EVERY request of EVERY round (measured at 267 characters for
+     * `shell`, 1,462 for `memory_search` + `memory_get` together — usetheokit/theokit-sdk#381), and
+     * the model can spend a whole round discovering a refusal it had no way to anticipate. Declaring
+     * a tool that is guaranteed to be refused is the wrong shape; withholding removes it from the
+     * catalog, so the model is never offered what it cannot have.
+     *
+     * WITHHOLDING RELEASES THE NAME. `withheldBuiltinTools: ["shell"]` lets {@link AgentOptions.tools}
+     * declare a tool called `shell` without the `tool_reserved_name` error — the reservation exists to
+     * stop a collision with the SDK's own tool, and there is no longer one to collide with. Every
+     * builtin still declared stays reserved.
+     *
+     * This governs DECLARATION, not authorization. A withheld builtin is simply absent from the
+     * catalog: a model that invents the name anyway gets `Unknown tool <name>` (exit 127) rather than
+     * an execution, but nothing here evaluates a policy. Keep the deny rule if you need one that a
+     * per-send `tools` override cannot reopen.
+     *
+     * @public
+     */
+    withheldBuiltinTools?: readonly BuiltinToolName[];
     /**
      * SE37 — opt-in reasoning. When `true`, the agent gets a chain-of-thought
      * preamble prepended to its system prompt AND the `think` reasoning tool
@@ -1583,4 +1638,4 @@ interface ListResult<T> {
     nextCursor?: string;
 }
 
-export { type TelemetrySettings as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type PostAssistantReplyContext as D, type PostToolCallContext as E, type PreToolCallContext as F, type GetAgentOptions as G, type HookName as H, type InlineSkill as I, type PreUserSendContext as J, type PreUserSendResult as K, type LocalOptions as L, type MemorySettings as M, type ProviderTransform as N, type ProviderTransformContext as O, type Plugin as P, type SessionLifecycleContext as Q, type RecordSessionSummaryArgs as R, type SystemPromptResolver as S, type SessionRecord as T, type SessionStore as U, type SettingSource as V, Skill as W, type SkillsResolver as X, type SkillsResolverContext as Y, type SystemPromptContext as Z, type SystemPromptMemoryFact as _, type AgentDefinition as a, type ToolCallSummary as a0, type ToolResultTransformContext as a1, type TransformContext as a2, type SkillsSettings as b, type ListAgentsOptions as c, type ListResult as d, type SDKAgentInfo as e, type ListRunsOptions as f, type GetRunOptions as g, type AgentOperationOptions as h, type AgentDescription as i, type ProviderProfile as j, type MemoryProvider as k, type PreToolCallDecision as l, type ActiveMemoryPassArgs as m, type ActiveMemoryPassResult as n, type AgentSubagentDescription as o, type AgentToolDescription as p, type BudgetCheck as q, type BudgetTotal as r, type BudgetUsageEvent as s, type CloudEnv as t, type CloudRepo as u, type CreateSkillSpec as v, type MemoryProviderFactory as w, type MemoryProviderHandle as x, type MemoryProviderInitOptions as y, type PluginContext as z };
+export { type SystemPromptMemoryFact as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type PluginContext as D, type PostAssistantReplyContext as E, type PostToolCallContext as F, type GetAgentOptions as G, type HookName as H, type InlineSkill as I, type PreToolCallContext as J, type PreUserSendContext as K, type LocalOptions as L, type MemorySettings as M, type PreUserSendResult as N, type ProviderTransform as O, type Plugin as P, type ProviderTransformContext as Q, type RecordSessionSummaryArgs as R, type SystemPromptResolver as S, type SessionLifecycleContext as T, type SessionRecord as U, type SessionStore as V, type SettingSource as W, Skill as X, type SkillsResolver as Y, type SkillsResolverContext as Z, type SystemPromptContext as _, type AgentDefinition as a, type TelemetrySettings as a0, type ToolCallSummary as a1, type ToolResultTransformContext as a2, type TransformContext as a3, type SkillsSettings as b, type ListAgentsOptions as c, type ListResult as d, type SDKAgentInfo as e, type ListRunsOptions as f, type GetRunOptions as g, type AgentOperationOptions as h, type AgentDescription as i, type ProviderProfile as j, type MemoryProvider as k, type PreToolCallDecision as l, type ActiveMemoryPassArgs as m, type ActiveMemoryPassResult as n, type AgentSubagentDescription as o, type AgentToolDescription as p, type BudgetCheck as q, type BudgetTotal as r, type BudgetUsageEvent as s, type BuiltinToolName as t, type CloudEnv as u, type CloudRepo as v, type CreateSkillSpec as w, type MemoryProviderFactory as x, type MemoryProviderHandle as y, type MemoryProviderInitOptions as z };

package/dist/{agent-VGD5WL4N.js → agent-HDEVVUBS.js}

@@ -1,5 +1,5 @@
-export { Agent } from './chunk-TPTZA6NI.js';
-import './chunk-DUIF54UP.js';
+export { Agent } from './chunk-I5BE5M5L.js';
+import './chunk-OHBIUXKM.js';
 import './chunk-DAPSQZT4.js';
 import './chunk-YMA4S2WO.js';
 import './chunk-2SFBB54R.js';
@@ -8,7 +8,7 @@ import './chunk-K2BQQ445.js';
 import './chunk-XN7NOENA.js';
 import './chunk-H73MEMQB.js';
 import './chunk-GJ6RK75E.js';
-import './chunk-VDEWG5TV.js';
+import './chunk-MVAPK2BX.js';
 import './chunk-3E77SX4H.js';
 import './chunk-WTMU7J4U.js';
 import './chunk-5JLFFPCH.js';
@@ -40,13 +40,13 @@ import './chunk-2QKTVKH3.js';
 import './chunk-AG5JPQIY.js';
 import './chunk-F7AQV62G.js';
 import './chunk-R7WIIPUR.js';
-import './chunk-SSQZA3DZ.js';
-import './chunk-FXEUP75G.js';
+import './chunk-2BDH744Z.js';
+import './chunk-Q4CMI2LP.js';
 import './chunk-44MBDIHG.js';
 import './chunk-UQGQFBRL.js';
 import './chunk-3OR54XG4.js';
 import './chunk-IDCKSLYH.js';
 import './chunk-T7XEKOVW.js';
 import './chunk-T7O6K6PX.js';
-//# sourceMappingURL=agent-VGD5WL4N.js.map
-//# sourceMappingURL=agent-VGD5WL4N.js.map
+//# sourceMappingURL=agent-HDEVVUBS.js.map
+//# sourceMappingURL=agent-HDEVVUBS.js.map

package/dist/{agent-VGD5WL4N.js.map → agent-HDEVVUBS.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-VGD5WL4N.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-HDEVVUBS.js"}

package/dist/{agent-NOEGF4GI.cjs → agent-R2HOJFZJ.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkUFAO4T7Z_cjs = require('./chunk-UFAO4T7Z.cjs');
-require('./chunk-5BJV5UPY.cjs');
+var chunkF5WMX4EA_cjs = require('./chunk-F5WMX4EA.cjs');
+require('./chunk-V2UUGUY4.cjs');
 require('./chunk-5UOVYM3P.cjs');
 require('./chunk-53CBTBWO.cjs');
 require('./chunk-BV2MWEMV.cjs');
@@ -10,7 +10,7 @@ require('./chunk-BUUUWQMB.cjs');
 require('./chunk-EI2Q7SJ5.cjs');
 require('./chunk-GHX4P3V2.cjs');
 require('./chunk-YPJ5NH5N.cjs');
-require('./chunk-UNDROG5N.cjs');
+require('./chunk-HLPSLDGL.cjs');
 require('./chunk-F3YZMOAU.cjs');
 require('./chunk-4OTIXDMU.cjs');
 require('./chunk-DQKERTND.cjs');
@@ -42,8 +42,8 @@ require('./chunk-HJBMA5MB.cjs');
 require('./chunk-IWBGCBR6.cjs');
 require('./chunk-XSX2UU6Y.cjs');
 require('./chunk-3EE6LVWT.cjs');
-require('./chunk-3KGLRRFC.cjs');
-require('./chunk-RM7Y65IG.cjs');
+require('./chunk-6HTXPPHK.cjs');
+require('./chunk-NIRE5CNO.cjs');
 require('./chunk-5USCYPPI.cjs');
 require('./chunk-BVZW2B5V.cjs');
 require('./chunk-52NKC5HT.cjs');
@@ -55,7 +55,7 @@ require('./chunk-NUKRL3I6.cjs');
 
 Object.defineProperty(exports, "Agent", {
   enumerable: true,
-  get: function () { return chunkUFAO4T7Z_cjs.Agent; }
+  get: function () { return chunkF5WMX4EA_cjs.Agent; }
 });
-//# sourceMappingURL=agent-NOEGF4GI.cjs.map
-//# sourceMappingURL=agent-NOEGF4GI.cjs.map
+//# sourceMappingURL=agent-R2HOJFZJ.cjs.map
+//# sourceMappingURL=agent-R2HOJFZJ.cjs.map

package/dist/{agent-NOEGF4GI.cjs.map → agent-R2HOJFZJ.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-NOEGF4GI.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-R2HOJFZJ.cjs"}

package/dist/{chunk-SSQZA3DZ.js → chunk-2BDH744Z.js}

@@ -1,4 +1,4 @@
-import { registerBuiltins, listProviders, getProviderProfile } from './chunk-FXEUP75G.js';
+import { registerBuiltins, listProviders, getProviderProfile } from './chunk-Q4CMI2LP.js';
 
 // src/providers.ts
 function listProviders2() {
@@ -11,5 +11,5 @@ function getProviderProfile2(name) {
 }
 
 export { getProviderProfile2 as getProviderProfile, listProviders2 as listProviders };
-//# sourceMappingURL=chunk-SSQZA3DZ.js.map
-//# sourceMappingURL=chunk-SSQZA3DZ.js.map
+//# sourceMappingURL=chunk-2BDH744Z.js.map
+//# sourceMappingURL=chunk-2BDH744Z.js.map

package/dist/{chunk-SSQZA3DZ.js.map → chunk-2BDH744Z.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","getProviderProfile"],"mappings":";;;AA4BO,SAASA,cAAAA,GAA4C;AAC1D,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,aAAA,EAAa;AACtB;AAQO,SAASC,oBAAmB,IAAA,EAA2C;AAC5E,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,mBAAW,IAAI,CAAA;AACxB","file":"chunk-SSQZA3DZ.js","sourcesContent":["/**\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}
+{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","getProviderProfile"],"mappings":";;;AA4BO,SAASA,cAAAA,GAA4C;AAC1D,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,aAAA,EAAa;AACtB;AAQO,SAASC,oBAAmB,IAAA,EAA2C;AAC5E,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,mBAAW,IAAI,CAAA;AACxB","file":"chunk-2BDH744Z.js","sourcesContent":["/**\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}

package/dist/chunk-6HTXPPHK.cjs

@@ -0,0 +1,18 @@
+'use strict';
+
+var chunkNIRE5CNO_cjs = require('./chunk-NIRE5CNO.cjs');
+
+// src/providers.ts
+function listProviders2() {
+  chunkNIRE5CNO_cjs.registerBuiltins();
+  return chunkNIRE5CNO_cjs.listProviders();
+}
+function getProviderProfile2(name) {
+  chunkNIRE5CNO_cjs.registerBuiltins();
+  return chunkNIRE5CNO_cjs.getProviderProfile(name);
+}
+
+exports.getProviderProfile = getProviderProfile2;
+exports.listProviders = listProviders2;
+//# sourceMappingURL=chunk-6HTXPPHK.cjs.map
+//# sourceMappingURL=chunk-6HTXPPHK.cjs.map

package/dist/{chunk-3KGLRRFC.cjs.map → chunk-6HTXPPHK.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","registerBuiltins","getProviderProfile"],"mappings":";;;;;AA4BO,SAASA,cAAAA,GAA4C;AAC1D,EAAAC,kCAAA,EAAiB;AACjB,EAAA,OAAOD,+BAAA,EAAa;AACtB;AAQO,SAASE,oBAAmB,IAAA,EAA2C;AAC5E,EAAAD,kCAAA,EAAiB;AACjB,EAAA,OAAOC,qCAAW,IAAI,CAAA;AACxB","file":"chunk-3KGLRRFC.cjs","sourcesContent":["/**\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}
+{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","registerBuiltins","getProviderProfile"],"mappings":";;;;;AA4BO,SAASA,cAAAA,GAA4C;AAC1D,EAAAC,kCAAA,EAAiB;AACjB,EAAA,OAAOD,+BAAA,EAAa;AACtB;AAQO,SAASE,oBAAmB,IAAA,EAA2C;AAC5E,EAAAD,kCAAA,EAAiB;AACjB,EAAA,OAAOC,qCAAW,IAAI,CAAA;AACxB","file":"chunk-6HTXPPHK.cjs","sourcesContent":["/**\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}