@theokit/sdk 4.63.4 → 5.0.0-next.2

package/dist/server/errors-envelope.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/errors-envelope.ts"],"names":["TheokitAgentError","RateLimitError","CredentialPoolExhaustedError","AuthenticationError","ConfigurationError","NetworkError","AgentRunError","UnknownAgentError"],"mappings":";;;;;;;AAoEA,IAAM,YAAA,uBAA0D,GAAA,CAA8B;AAAA,EAC5F,CAAC,uBAAuB,cAAc,CAAA;AAAA,EACtC,CAAC,kBAAkB,cAAc,CAAA;AAAA,EACjC,CAAC,sBAAsB,sBAAsB,CAAA;AAAA,EAC7C,CAAC,gCAAgC,sBAAsB,CAAA;AAAA,EACvD,CAAC,gBAAgB,qBAAqB,CAAA;AAAA,EACtC,CAAC,iBAAiB,iBAAiB,CAAA;AAAA,EACnC,CAAC,uBAAuB,iBAAiB,CAAA;AAAA,EACzC,CAAC,gCAAgC,2BAA2B,CAAA;AAAA,EAC5D,CAAC,qBAAqB,uBAAuB,CAAA;AAAA,EAC7C,CAAC,sBAAsB,uBAAuB;AAChD,CAAC,CAAA;AAiBM,SAAS,WAAW,KAAA,EAAsC;AAC/D,EAAA,IAAI,EAAE,iBAAiB,KAAA,CAAA,EAAQ;AAC7B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ;AAAA,KAC/C;AAAA,EACF;AACA,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,uBAAA;AACvC,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAClC,EAAA,MAAM,GAAA,GAAM,SAAS,KAAK,CAAA;AAC1B,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,OAAQ,KAAA,CAAsC,KAAA;AAAA,IAC9C,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,MAAc,GAAA,EAAqC;AACpE,EAAA,MAAM,IAAA,GAAgC,EAAE,YAAA,EAAc,IAAA,EAAK;AAC3D,EAAA,IAAI,GAAA,YAAeA,mCAAA,IAAqB,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClE,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,UAAA,KAAe,MAAA,EAAW;AACzC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAI,QAAA,CAAS,UAAA;AAAA,IACjC;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,IAAI,GAAA,YAAeC,gCAAA,IAAkB,GAAA,CAAI,QAAA,EAAU,eAAe,MAAA,EAAW;AAC3E,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc,GAAA,CAAI,QAAA,CAAS,UAAA,GAAa;AAAA,KAC1C;AAAA,EACF;AACA,EAAA,IAAI,GAAA,YAAeC,8CAAA,IAAgC,GAAA,CAAI,WAAA,KAAgB,MAAA,EAAW;AAChF,IAAA,MAAM,OAAA,GAAU,KAAK,GAAA,CAAI,CAAA,EAAG,IAAI,WAAA,GAAc,IAAA,CAAK,KAAK,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAUA,IAAM,qBAAA,uBAGE,GAAA,CAAwE;AAAA,EAC9E,CAAC,gBAAgB,CAAC,GAAA,KAAQ,IAAIC,qCAAA,CAAoB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D;AAAA,IACE,cAAA;AAAA,IACA,CAAC,GAAA,KAAQ,IAAIF,gCAAA,CAAe,IAAI,OAAA,EAAS,GAAA,CAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAE;AAAA,GAC9F;AAAA,EACA,CAAC,wBAAwB,CAAC,GAAA,KAAQ,IAAIG,oCAAA,CAAmB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EACrE,CAAC,uBAAuB,CAAC,GAAA,KAAQ,IAAIC,8BAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D,CAAC,mBAAmB,CAAC,GAAA,KAAQ,IAAIA,8BAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC1D;AAAA,IACE,iBAAA;AAAA,IACA,CAAC,GAAA,KACC,IAAIC,+BAAA,CAAc,IAAI,OAAA,EAAS;AAAA,MAC7B,IAAA,EAAM,SAAA;AAAA,MACN,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACvD;AAAA,GACL;AAAA,EACA,CAAC,yBAAyB,CAAC,GAAA,KAAQ,IAAIC,mCAAA,CAAkB,GAAA,CAAI,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAMvE,CAAC,CAAA;AASM,SAAS,aAAa,GAAA,EAA8C;AACzE,EAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AACxD,EAAA,IAAI,aAAA,EAAe,OAAO,aAAA,CAAc,GAAG,CAAA;AAI3C,EAAA,OAAO,IAAIA,mCAAA,CAAkB,GAAA,CAAI,OAAO,CAAA;AAC1C","file":"errors-envelope.cjs","sourcesContent":["/**\n * G5 T2.2 boundary translation — `@theokit/sdk/server/errors-envelope`.\n *\n * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.\n * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;\n * `toEnvelope(err)` translates outward at the Agent.send -> RunResult egress\n * edge, `fromEnvelope(env)` reconstructs class identity on the inbound edge\n * (so consumer code can keep using `instanceof RateLimitError` patterns).\n *\n * Structurally-compatible envelope shape: identical fields to theokit/server\n * `TheoErrorEnvelope`. Re-declared locally to keep `@theokit/sdk` free of any\n * dependency on `theokit`. Consumer code that uses both packages gets the\n * same shape via duck-typing.\n */\n\nimport {\n  AgentRunError,\n  AuthenticationError,\n  ConfigurationError,\n  CredentialPoolExhaustedError,\n  MemoryAdapterError,\n  NetworkError,\n  RateLimitError,\n  TheokitAgentError,\n  UnknownAgentError,\n} from \"../errors.js\";\n\n/**\n * Canonical envelope code union for cross-layer SDK boundary. Subset of the\n * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.\n * Other layers (theokit/server, theokit/client, theokit/ui) handle the broader\n * union; the SDK never needs the HTTP-only codes (PRECONDITION_FAILED, etc.).\n *\n * @public\n */\nexport type TheokitErrorCode =\n  | \"UNAUTHORIZED\"\n  | \"RATE_LIMITED\"\n  | \"INTERNAL_SERVER_ERROR\"\n  | \"SERVICE_UNAVAILABLE\"\n  | \"GATEWAY_TIMEOUT\"\n  // SDK / agent-domain\n  | \"AGENT_RUN_ERROR\"\n  | \"PROVIDER_KEY_MISSING\"\n  | \"BUDGET_EXCEEDED\"\n  | \"CREDENTIAL_POOL_EXHAUSTED\";\n\n/**\n * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.\n *\n * @public\n */\nexport interface TheokitErrorEnvelope<TExt = unknown> {\n  readonly code: TheokitErrorCode;\n  readonly message: string;\n  readonly cause?: unknown;\n  readonly meta?: Record<string, unknown>;\n  readonly ext?: TExt;\n}\n\n/**\n * Class-name -> envelope code mapping. Indexed by `Error.name` string so\n * subclasses inherit the mapping unless they override their `name` field.\n *\n * `IntegrationNotConnectedError` (subclass of `ConfigurationError`) takes\n * its own row because its `name` is `IntegrationNotConnectedError` and the\n * map is name-exact, not prototype-walked.\n */\nconst NAME_TO_CODE: ReadonlyMap<string, TheokitErrorCode> = new Map<string, TheokitErrorCode>([\n  [\"AuthenticationError\", \"UNAUTHORIZED\"],\n  [\"RateLimitError\", \"RATE_LIMITED\"],\n  [\"ConfigurationError\", \"PROVIDER_KEY_MISSING\"],\n  [\"IntegrationNotConnectedError\", \"PROVIDER_KEY_MISSING\"],\n  [\"NetworkError\", \"SERVICE_UNAVAILABLE\"],\n  [\"AgentRunError\", \"AGENT_RUN_ERROR\"],\n  [\"BudgetExceededError\", \"BUDGET_EXCEEDED\"],\n  [\"CredentialPoolExhaustedError\", \"CREDENTIAL_POOL_EXHAUSTED\"],\n  [\"UnknownAgentError\", \"INTERNAL_SERVER_ERROR\"],\n  [\"MemoryAdapterError\", \"INTERNAL_SERVER_ERROR\"],\n]);\n\n/**\n * Translate any SDK error (or arbitrary thrown value) into the canonical\n * envelope shape at the wire boundary.\n *\n * - `TheokitAgentError` family → mapped by `Error.name` string.\n * - Plain `Error` → INTERNAL_SERVER_ERROR.\n * - Non-Error values → INTERNAL_SERVER_ERROR with synthetic message.\n *\n * Meta carries `sdkErrorName` for telemetry; provider metadata (when present\n * via SDK's `ErrorMetadata`) flows through `meta.provider` / `meta.endpoint`\n * / `meta.statusCode` for diagnostics. `RateLimitError` populates a\n * `RetryableExt`-shaped ext when `metadata.retryAfter` (seconds) is set.\n *\n * @public\n */\nexport function toEnvelope(value: unknown): TheokitErrorEnvelope {\n  if (!(value instanceof Error)) {\n    return {\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: typeof value === \"string\" ? value : \"Unknown error\",\n    };\n  }\n  const name = value.name;\n  const code = NAME_TO_CODE.get(name) ?? \"INTERNAL_SERVER_ERROR\";\n  const meta = buildMeta(name, value);\n  const ext = buildExt(value);\n  return {\n    code,\n    message: value.message,\n    cause: (value as Error & { cause?: unknown }).cause,\n    meta,\n    ext,\n  };\n}\n\nfunction buildMeta(name: string, err: Error): Record<string, unknown> {\n  const meta: Record<string, unknown> = { sdkErrorName: name };\n  if (err instanceof TheokitAgentError && err.metadata !== undefined) {\n    meta.provider = err.metadata.provider;\n    meta.endpoint = err.metadata.endpoint;\n    if (err.metadata.statusCode !== undefined) {\n      meta.statusCode = err.metadata.statusCode;\n    }\n  }\n  return meta;\n}\n\nfunction buildExt(err: Error): unknown {\n  if (err instanceof RateLimitError && err.metadata?.retryAfter !== undefined) {\n    return {\n      retryable: true as const,\n      retryAfterMs: err.metadata.retryAfter * 1000,\n    };\n  }\n  if (err instanceof CredentialPoolExhaustedError && err.nextRetryAt !== undefined) {\n    const delayMs = Math.max(0, err.nextRetryAt - Date.now());\n    return {\n      retryable: true as const,\n      retryAfterMs: delayMs,\n    };\n  }\n  return undefined;\n}\n\n/**\n * Code -> reconstructor mapping. Each entry returns a fresh instance of the\n * SDK class hierarchy from an envelope, preserving message and (where the\n * constructor supports it) cause/ext context.\n *\n * Unmapped codes fall through to `UnknownAgentError` so consumer code that\n * relies on `err instanceof TheokitAgentError` still works.\n */\nconst CODE_TO_RECONSTRUCTOR: ReadonlyMap<\n  TheokitErrorCode,\n  (env: TheokitErrorEnvelope) => TheokitAgentError\n> = new Map<TheokitErrorCode, (env: TheokitErrorEnvelope) => TheokitAgentError>([\n  [\"UNAUTHORIZED\", (env) => new AuthenticationError(env.message)],\n  [\n    \"RATE_LIMITED\",\n    (env) => new RateLimitError(env.message, env.cause !== undefined ? { cause: env.cause } : {}),\n  ],\n  [\"PROVIDER_KEY_MISSING\", (env) => new ConfigurationError(env.message)],\n  [\"SERVICE_UNAVAILABLE\", (env) => new NetworkError(env.message)],\n  [\"GATEWAY_TIMEOUT\", (env) => new NetworkError(env.message)],\n  [\n    \"AGENT_RUN_ERROR\",\n    (env) =>\n      new AgentRunError(env.message, {\n        code: \"unknown\",\n        ...(env.cause !== undefined ? { cause: env.cause } : {}),\n      }),\n  ],\n  [\"INTERNAL_SERVER_ERROR\", (env) => new UnknownAgentError(env.message)],\n  // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require\n  // domain-specific args (budgetName, provider) that the envelope doesn't\n  // always carry. Fall back to UnknownAgentError when those fields are\n  // missing; consumer code that needs the typed class should call the\n  // constructor directly.\n]);\n\n/**\n * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound\n * boundary (e.g., on a worker process receiving an envelope from the main\n * process via IPC, or on a client deserializing a `RunResult.error`).\n *\n * @public\n */\nexport function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError {\n  const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);\n  if (reconstructor) return reconstructor(env);\n  // Round-trip preservation: if the envelope's meta.sdkErrorName matches a\n  // class without a generic reconstructor (e.g., BudgetExceededError), we\n  // can't rebuild without domain args. Fall back to UnknownAgentError.\n  return new UnknownAgentError(env.message);\n}\n\n// Re-export for ergonomic consumption alongside fromEnvelope.\nexport { MemoryAdapterError };\n"]}
+{"version":3,"sources":["../../src/server/errors-envelope.ts"],"names":["TheokitAgentError","RateLimitError","CredentialPoolExhaustedError","AuthenticationError","ConfigurationError","NetworkError","AgentRunError","UnknownAgentError"],"mappings":";;;;;;AAoEA,IAAM,YAAA,uBAA0D,GAAA,CAA8B;AAAA,EAC5F,CAAC,uBAAuB,cAAc,CAAA;AAAA,EACtC,CAAC,kBAAkB,cAAc,CAAA;AAAA,EACjC,CAAC,sBAAsB,sBAAsB,CAAA;AAAA,EAC7C,CAAC,gCAAgC,sBAAsB,CAAA;AAAA,EACvD,CAAC,gBAAgB,qBAAqB,CAAA;AAAA,EACtC,CAAC,iBAAiB,iBAAiB,CAAA;AAAA,EACnC,CAAC,uBAAuB,iBAAiB,CAAA;AAAA,EACzC,CAAC,gCAAgC,2BAA2B,CAAA;AAAA,EAC5D,CAAC,qBAAqB,uBAAuB,CAAA;AAAA,EAC7C,CAAC,sBAAsB,uBAAuB;AAChD,CAAC,CAAA;AAiBM,SAAS,WAAW,KAAA,EAAsC;AAC/D,EAAA,IAAI,EAAE,iBAAiB,KAAA,CAAA,EAAQ;AAC7B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ;AAAA,KAC/C;AAAA,EACF;AACA,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,uBAAA;AACvC,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAClC,EAAA,MAAM,GAAA,GAAM,SAAS,KAAK,CAAA;AAC1B,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,OAAQ,KAAA,CAAsC,KAAA;AAAA,IAC9C,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,MAAc,GAAA,EAAqC;AACpE,EAAA,MAAM,IAAA,GAAgC,EAAE,YAAA,EAAc,IAAA,EAAK;AAC3D,EAAA,IAAI,GAAA,YAAeA,mCAAA,IAAqB,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClE,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,UAAA,KAAe,MAAA,EAAW;AACzC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAI,QAAA,CAAS,UAAA;AAAA,IACjC;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,IAAI,GAAA,YAAeC,gCAAA,IAAkB,GAAA,CAAI,QAAA,EAAU,eAAe,MAAA,EAAW;AAC3E,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc,GAAA,CAAI,QAAA,CAAS,UAAA,GAAa;AAAA,KAC1C;AAAA,EACF;AACA,EAAA,IAAI,GAAA,YAAeC,8CAAA,IAAgC,GAAA,CAAI,WAAA,KAAgB,MAAA,EAAW;AAChF,IAAA,MAAM,OAAA,GAAU,KAAK,GAAA,CAAI,CAAA,EAAG,IAAI,WAAA,GAAc,IAAA,CAAK,KAAK,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAUA,IAAM,qBAAA,uBAGE,GAAA,CAAwE;AAAA,EAC9E,CAAC,gBAAgB,CAAC,GAAA,KAAQ,IAAIC,qCAAA,CAAoB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D;AAAA,IACE,cAAA;AAAA,IACA,CAAC,GAAA,KAAQ,IAAIF,gCAAA,CAAe,IAAI,OAAA,EAAS,GAAA,CAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAE;AAAA,GAC9F;AAAA,EACA,CAAC,wBAAwB,CAAC,GAAA,KAAQ,IAAIG,oCAAA,CAAmB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EACrE,CAAC,uBAAuB,CAAC,GAAA,KAAQ,IAAIC,8BAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D,CAAC,mBAAmB,CAAC,GAAA,KAAQ,IAAIA,8BAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC1D;AAAA,IACE,iBAAA;AAAA,IACA,CAAC,GAAA,KACC,IAAIC,+BAAA,CAAc,IAAI,OAAA,EAAS;AAAA,MAC7B,IAAA,EAAM,SAAA;AAAA,MACN,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACvD;AAAA,GACL;AAAA,EACA,CAAC,yBAAyB,CAAC,GAAA,KAAQ,IAAIC,mCAAA,CAAkB,GAAA,CAAI,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAMvE,CAAC,CAAA;AASM,SAAS,aAAa,GAAA,EAA8C;AACzE,EAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AACxD,EAAA,IAAI,aAAA,EAAe,OAAO,aAAA,CAAc,GAAG,CAAA;AAI3C,EAAA,OAAO,IAAIA,mCAAA,CAAkB,GAAA,CAAI,OAAO,CAAA;AAC1C","file":"errors-envelope.cjs","sourcesContent":["/**\n * G5 T2.2 boundary translation — `@theokit/sdk/server/errors-envelope`.\n *\n * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.\n * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;\n * `toEnvelope(err)` translates outward at the Agent.send -> RunResult egress\n * edge, `fromEnvelope(env)` reconstructs class identity on the inbound edge\n * (so consumer code can keep using `instanceof RateLimitError` patterns).\n *\n * Structurally-compatible envelope shape: identical fields to theokit/server\n * `TheoErrorEnvelope`. Re-declared locally to keep `@theokit/sdk` free of any\n * dependency on `theokit`. Consumer code that uses both packages gets the\n * same shape via duck-typing.\n */\n\nimport {\n  AgentRunError,\n  AuthenticationError,\n  ConfigurationError,\n  CredentialPoolExhaustedError,\n  MemoryAdapterError,\n  NetworkError,\n  RateLimitError,\n  TheokitAgentError,\n  UnknownAgentError,\n} from \"../errors.js\";\n\n/**\n * Canonical envelope code union for cross-layer SDK boundary. Subset of the\n * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.\n * Other layers (theokit/server, theokit/client, theokit/ui) handle the broader\n * union; the SDK never needs the HTTP-only codes (PRECONDITION_FAILED, etc.).\n *\n * @public\n */\nexport type TheokitErrorCode =\n  | \"UNAUTHORIZED\"\n  | \"RATE_LIMITED\"\n  | \"INTERNAL_SERVER_ERROR\"\n  | \"SERVICE_UNAVAILABLE\"\n  | \"GATEWAY_TIMEOUT\"\n  // SDK / agent-domain\n  | \"AGENT_RUN_ERROR\"\n  | \"PROVIDER_KEY_MISSING\"\n  | \"BUDGET_EXCEEDED\"\n  | \"CREDENTIAL_POOL_EXHAUSTED\";\n\n/**\n * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.\n *\n * @public\n */\nexport interface TheokitErrorEnvelope<TExt = unknown> {\n  readonly code: TheokitErrorCode;\n  readonly message: string;\n  readonly cause?: unknown;\n  readonly meta?: Record<string, unknown>;\n  readonly ext?: TExt;\n}\n\n/**\n * Class-name -> envelope code mapping. Indexed by `Error.name` string so\n * subclasses inherit the mapping unless they override their `name` field.\n *\n * `IntegrationNotConnectedError` (subclass of `ConfigurationError`) takes\n * its own row because its `name` is `IntegrationNotConnectedError` and the\n * map is name-exact, not prototype-walked.\n */\nconst NAME_TO_CODE: ReadonlyMap<string, TheokitErrorCode> = new Map<string, TheokitErrorCode>([\n  [\"AuthenticationError\", \"UNAUTHORIZED\"],\n  [\"RateLimitError\", \"RATE_LIMITED\"],\n  [\"ConfigurationError\", \"PROVIDER_KEY_MISSING\"],\n  [\"IntegrationNotConnectedError\", \"PROVIDER_KEY_MISSING\"],\n  [\"NetworkError\", \"SERVICE_UNAVAILABLE\"],\n  [\"AgentRunError\", \"AGENT_RUN_ERROR\"],\n  [\"BudgetExceededError\", \"BUDGET_EXCEEDED\"],\n  [\"CredentialPoolExhaustedError\", \"CREDENTIAL_POOL_EXHAUSTED\"],\n  [\"UnknownAgentError\", \"INTERNAL_SERVER_ERROR\"],\n  [\"MemoryAdapterError\", \"INTERNAL_SERVER_ERROR\"],\n]);\n\n/**\n * Translate any SDK error (or arbitrary thrown value) into the canonical\n * envelope shape at the wire boundary.\n *\n * - `TheokitAgentError` family → mapped by `Error.name` string.\n * - Plain `Error` → INTERNAL_SERVER_ERROR.\n * - Non-Error values → INTERNAL_SERVER_ERROR with synthetic message.\n *\n * Meta carries `sdkErrorName` for telemetry; provider metadata (when present\n * via SDK's `ErrorMetadata`) flows through `meta.provider` / `meta.endpoint`\n * / `meta.statusCode` for diagnostics. `RateLimitError` populates a\n * `RetryableExt`-shaped ext when `metadata.retryAfter` (seconds) is set.\n *\n * @public\n */\nexport function toEnvelope(value: unknown): TheokitErrorEnvelope {\n  if (!(value instanceof Error)) {\n    return {\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: typeof value === \"string\" ? value : \"Unknown error\",\n    };\n  }\n  const name = value.name;\n  const code = NAME_TO_CODE.get(name) ?? \"INTERNAL_SERVER_ERROR\";\n  const meta = buildMeta(name, value);\n  const ext = buildExt(value);\n  return {\n    code,\n    message: value.message,\n    cause: (value as Error & { cause?: unknown }).cause,\n    meta,\n    ext,\n  };\n}\n\nfunction buildMeta(name: string, err: Error): Record<string, unknown> {\n  const meta: Record<string, unknown> = { sdkErrorName: name };\n  if (err instanceof TheokitAgentError && err.metadata !== undefined) {\n    meta.provider = err.metadata.provider;\n    meta.endpoint = err.metadata.endpoint;\n    if (err.metadata.statusCode !== undefined) {\n      meta.statusCode = err.metadata.statusCode;\n    }\n  }\n  return meta;\n}\n\nfunction buildExt(err: Error): unknown {\n  if (err instanceof RateLimitError && err.metadata?.retryAfter !== undefined) {\n    return {\n      retryable: true as const,\n      retryAfterMs: err.metadata.retryAfter * 1000,\n    };\n  }\n  if (err instanceof CredentialPoolExhaustedError && err.nextRetryAt !== undefined) {\n    const delayMs = Math.max(0, err.nextRetryAt - Date.now());\n    return {\n      retryable: true as const,\n      retryAfterMs: delayMs,\n    };\n  }\n  return undefined;\n}\n\n/**\n * Code -> reconstructor mapping. Each entry returns a fresh instance of the\n * SDK class hierarchy from an envelope, preserving message and (where the\n * constructor supports it) cause/ext context.\n *\n * Unmapped codes fall through to `UnknownAgentError` so consumer code that\n * relies on `err instanceof TheokitAgentError` still works.\n */\nconst CODE_TO_RECONSTRUCTOR: ReadonlyMap<\n  TheokitErrorCode,\n  (env: TheokitErrorEnvelope) => TheokitAgentError\n> = new Map<TheokitErrorCode, (env: TheokitErrorEnvelope) => TheokitAgentError>([\n  [\"UNAUTHORIZED\", (env) => new AuthenticationError(env.message)],\n  [\n    \"RATE_LIMITED\",\n    (env) => new RateLimitError(env.message, env.cause !== undefined ? { cause: env.cause } : {}),\n  ],\n  [\"PROVIDER_KEY_MISSING\", (env) => new ConfigurationError(env.message)],\n  [\"SERVICE_UNAVAILABLE\", (env) => new NetworkError(env.message)],\n  [\"GATEWAY_TIMEOUT\", (env) => new NetworkError(env.message)],\n  [\n    \"AGENT_RUN_ERROR\",\n    (env) =>\n      new AgentRunError(env.message, {\n        code: \"unknown\",\n        ...(env.cause !== undefined ? { cause: env.cause } : {}),\n      }),\n  ],\n  [\"INTERNAL_SERVER_ERROR\", (env) => new UnknownAgentError(env.message)],\n  // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require\n  // domain-specific args (budgetName, provider) that the envelope doesn't\n  // always carry. Fall back to UnknownAgentError when those fields are\n  // missing; consumer code that needs the typed class should call the\n  // constructor directly.\n]);\n\n/**\n * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound\n * boundary (e.g., on a worker process receiving an envelope from the main\n * process via IPC, or on a client deserializing a `RunResult.error`).\n *\n * @public\n */\nexport function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError {\n  const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);\n  if (reconstructor) return reconstructor(env);\n  // Round-trip preservation: if the envelope's meta.sdkErrorName matches a\n  // class without a generic reconstructor (e.g., BudgetExceededError), we\n  // can't rebuild without domain args. Fall back to UnknownAgentError.\n  return new UnknownAgentError(env.message);\n}\n\n// Re-export for ergonomic consumption alongside fromEnvelope.\nexport { MemoryAdapterError };\n"]}

package/dist/server/errors-envelope.d.cts

@@ -1,6 +1,6 @@
-import { T as TheokitAgentError } from '../errors-BgJH9PHi.cjs';
-export { M as MemoryAdapterError } from '../errors-BgJH9PHi.cjs';
-import '../run-BYSHf58D.cjs';
+export { M as MemoryAdapterError } from '../errors-DrDEgyz1.cjs';
+import { T as TheokitAgentError } from '../errors-base-B5g01neU.cjs';
+import '../run-CTAdRU3U.cjs';
 import 'zod';
 
 /**

package/dist/server/errors-envelope.d.ts

@@ -1,6 +1,6 @@
-import { T as TheokitAgentError } from '../errors-C5fJUqLk.js';
-export { M as MemoryAdapterError } from '../errors-C5fJUqLk.js';
-import '../run-BYSHf58D.js';
+export { M as MemoryAdapterError } from '../errors-CLOAyuiv.js';
+import { T as TheokitAgentError } from '../errors-base-B5g01neU.js';
+import '../run-CTAdRU3U.js';
 import 'zod';
 
 /**

package/dist/server/errors-envelope.js

@@ -1,7 +1,6 @@
-import { TheokitAgentError, RateLimitError, CredentialPoolExhaustedError, UnknownAgentError, AuthenticationError, ConfigurationError, NetworkError, AgentRunError } from '../chunk-ZZMZWBR6.js';
-export { MemoryAdapterError } from '../chunk-ZZMZWBR6.js';
-import '../chunk-D4CUGAKZ.js';
-import '../chunk-XEQ3TM66.js';
+import { TheokitAgentError, RateLimitError, CredentialPoolExhaustedError, UnknownAgentError, AuthenticationError, ConfigurationError, NetworkError, AgentRunError } from '../chunk-ALUN2B4W.js';
+export { MemoryAdapterError } from '../chunk-ALUN2B4W.js';
+import '../chunk-CZJ6Q7CW.js';
 
 // src/server/errors-envelope.ts
 var NAME_TO_CODE = /* @__PURE__ */ new Map([

package/dist/server/errors-envelope.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/errors-envelope.ts"],"names":[],"mappings":";;;;;;AAoEA,IAAM,YAAA,uBAA0D,GAAA,CAA8B;AAAA,EAC5F,CAAC,uBAAuB,cAAc,CAAA;AAAA,EACtC,CAAC,kBAAkB,cAAc,CAAA;AAAA,EACjC,CAAC,sBAAsB,sBAAsB,CAAA;AAAA,EAC7C,CAAC,gCAAgC,sBAAsB,CAAA;AAAA,EACvD,CAAC,gBAAgB,qBAAqB,CAAA;AAAA,EACtC,CAAC,iBAAiB,iBAAiB,CAAA;AAAA,EACnC,CAAC,uBAAuB,iBAAiB,CAAA;AAAA,EACzC,CAAC,gCAAgC,2BAA2B,CAAA;AAAA,EAC5D,CAAC,qBAAqB,uBAAuB,CAAA;AAAA,EAC7C,CAAC,sBAAsB,uBAAuB;AAChD,CAAC,CAAA;AAiBM,SAAS,WAAW,KAAA,EAAsC;AAC/D,EAAA,IAAI,EAAE,iBAAiB,KAAA,CAAA,EAAQ;AAC7B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ;AAAA,KAC/C;AAAA,EACF;AACA,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,uBAAA;AACvC,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAClC,EAAA,MAAM,GAAA,GAAM,SAAS,KAAK,CAAA;AAC1B,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,OAAQ,KAAA,CAAsC,KAAA;AAAA,IAC9C,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,MAAc,GAAA,EAAqC;AACpE,EAAA,MAAM,IAAA,GAAgC,EAAE,YAAA,EAAc,IAAA,EAAK;AAC3D,EAAA,IAAI,GAAA,YAAe,iBAAA,IAAqB,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClE,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,UAAA,KAAe,MAAA,EAAW;AACzC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAI,QAAA,CAAS,UAAA;AAAA,IACjC;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,IAAI,GAAA,YAAe,cAAA,IAAkB,GAAA,CAAI,QAAA,EAAU,eAAe,MAAA,EAAW;AAC3E,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc,GAAA,CAAI,QAAA,CAAS,UAAA,GAAa;AAAA,KAC1C;AAAA,EACF;AACA,EAAA,IAAI,GAAA,YAAe,4BAAA,IAAgC,GAAA,CAAI,WAAA,KAAgB,MAAA,EAAW;AAChF,IAAA,MAAM,OAAA,GAAU,KAAK,GAAA,CAAI,CAAA,EAAG,IAAI,WAAA,GAAc,IAAA,CAAK,KAAK,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAUA,IAAM,qBAAA,uBAGE,GAAA,CAAwE;AAAA,EAC9E,CAAC,gBAAgB,CAAC,GAAA,KAAQ,IAAI,mBAAA,CAAoB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D;AAAA,IACE,cAAA;AAAA,IACA,CAAC,GAAA,KAAQ,IAAI,cAAA,CAAe,IAAI,OAAA,EAAS,GAAA,CAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAE;AAAA,GAC9F;AAAA,EACA,CAAC,wBAAwB,CAAC,GAAA,KAAQ,IAAI,kBAAA,CAAmB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EACrE,CAAC,uBAAuB,CAAC,GAAA,KAAQ,IAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D,CAAC,mBAAmB,CAAC,GAAA,KAAQ,IAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC1D;AAAA,IACE,iBAAA;AAAA,IACA,CAAC,GAAA,KACC,IAAI,aAAA,CAAc,IAAI,OAAA,EAAS;AAAA,MAC7B,IAAA,EAAM,SAAA;AAAA,MACN,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACvD;AAAA,GACL;AAAA,EACA,CAAC,yBAAyB,CAAC,GAAA,KAAQ,IAAI,iBAAA,CAAkB,GAAA,CAAI,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAMvE,CAAC,CAAA;AASM,SAAS,aAAa,GAAA,EAA8C;AACzE,EAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AACxD,EAAA,IAAI,aAAA,EAAe,OAAO,aAAA,CAAc,GAAG,CAAA;AAI3C,EAAA,OAAO,IAAI,iBAAA,CAAkB,GAAA,CAAI,OAAO,CAAA;AAC1C","file":"errors-envelope.js","sourcesContent":["/**\n * G5 T2.2 boundary translation — `@theokit/sdk/server/errors-envelope`.\n *\n * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.\n * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;\n * `toEnvelope(err)` translates outward at the Agent.send -> RunResult egress\n * edge, `fromEnvelope(env)` reconstructs class identity on the inbound edge\n * (so consumer code can keep using `instanceof RateLimitError` patterns).\n *\n * Structurally-compatible envelope shape: identical fields to theokit/server\n * `TheoErrorEnvelope`. Re-declared locally to keep `@theokit/sdk` free of any\n * dependency on `theokit`. Consumer code that uses both packages gets the\n * same shape via duck-typing.\n */\n\nimport {\n  AgentRunError,\n  AuthenticationError,\n  ConfigurationError,\n  CredentialPoolExhaustedError,\n  MemoryAdapterError,\n  NetworkError,\n  RateLimitError,\n  TheokitAgentError,\n  UnknownAgentError,\n} from \"../errors.js\";\n\n/**\n * Canonical envelope code union for cross-layer SDK boundary. Subset of the\n * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.\n * Other layers (theokit/server, theokit/client, theokit/ui) handle the broader\n * union; the SDK never needs the HTTP-only codes (PRECONDITION_FAILED, etc.).\n *\n * @public\n */\nexport type TheokitErrorCode =\n  | \"UNAUTHORIZED\"\n  | \"RATE_LIMITED\"\n  | \"INTERNAL_SERVER_ERROR\"\n  | \"SERVICE_UNAVAILABLE\"\n  | \"GATEWAY_TIMEOUT\"\n  // SDK / agent-domain\n  | \"AGENT_RUN_ERROR\"\n  | \"PROVIDER_KEY_MISSING\"\n  | \"BUDGET_EXCEEDED\"\n  | \"CREDENTIAL_POOL_EXHAUSTED\";\n\n/**\n * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.\n *\n * @public\n */\nexport interface TheokitErrorEnvelope<TExt = unknown> {\n  readonly code: TheokitErrorCode;\n  readonly message: string;\n  readonly cause?: unknown;\n  readonly meta?: Record<string, unknown>;\n  readonly ext?: TExt;\n}\n\n/**\n * Class-name -> envelope code mapping. Indexed by `Error.name` string so\n * subclasses inherit the mapping unless they override their `name` field.\n *\n * `IntegrationNotConnectedError` (subclass of `ConfigurationError`) takes\n * its own row because its `name` is `IntegrationNotConnectedError` and the\n * map is name-exact, not prototype-walked.\n */\nconst NAME_TO_CODE: ReadonlyMap<string, TheokitErrorCode> = new Map<string, TheokitErrorCode>([\n  [\"AuthenticationError\", \"UNAUTHORIZED\"],\n  [\"RateLimitError\", \"RATE_LIMITED\"],\n  [\"ConfigurationError\", \"PROVIDER_KEY_MISSING\"],\n  [\"IntegrationNotConnectedError\", \"PROVIDER_KEY_MISSING\"],\n  [\"NetworkError\", \"SERVICE_UNAVAILABLE\"],\n  [\"AgentRunError\", \"AGENT_RUN_ERROR\"],\n  [\"BudgetExceededError\", \"BUDGET_EXCEEDED\"],\n  [\"CredentialPoolExhaustedError\", \"CREDENTIAL_POOL_EXHAUSTED\"],\n  [\"UnknownAgentError\", \"INTERNAL_SERVER_ERROR\"],\n  [\"MemoryAdapterError\", \"INTERNAL_SERVER_ERROR\"],\n]);\n\n/**\n * Translate any SDK error (or arbitrary thrown value) into the canonical\n * envelope shape at the wire boundary.\n *\n * - `TheokitAgentError` family → mapped by `Error.name` string.\n * - Plain `Error` → INTERNAL_SERVER_ERROR.\n * - Non-Error values → INTERNAL_SERVER_ERROR with synthetic message.\n *\n * Meta carries `sdkErrorName` for telemetry; provider metadata (when present\n * via SDK's `ErrorMetadata`) flows through `meta.provider` / `meta.endpoint`\n * / `meta.statusCode` for diagnostics. `RateLimitError` populates a\n * `RetryableExt`-shaped ext when `metadata.retryAfter` (seconds) is set.\n *\n * @public\n */\nexport function toEnvelope(value: unknown): TheokitErrorEnvelope {\n  if (!(value instanceof Error)) {\n    return {\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: typeof value === \"string\" ? value : \"Unknown error\",\n    };\n  }\n  const name = value.name;\n  const code = NAME_TO_CODE.get(name) ?? \"INTERNAL_SERVER_ERROR\";\n  const meta = buildMeta(name, value);\n  const ext = buildExt(value);\n  return {\n    code,\n    message: value.message,\n    cause: (value as Error & { cause?: unknown }).cause,\n    meta,\n    ext,\n  };\n}\n\nfunction buildMeta(name: string, err: Error): Record<string, unknown> {\n  const meta: Record<string, unknown> = { sdkErrorName: name };\n  if (err instanceof TheokitAgentError && err.metadata !== undefined) {\n    meta.provider = err.metadata.provider;\n    meta.endpoint = err.metadata.endpoint;\n    if (err.metadata.statusCode !== undefined) {\n      meta.statusCode = err.metadata.statusCode;\n    }\n  }\n  return meta;\n}\n\nfunction buildExt(err: Error): unknown {\n  if (err instanceof RateLimitError && err.metadata?.retryAfter !== undefined) {\n    return {\n      retryable: true as const,\n      retryAfterMs: err.metadata.retryAfter * 1000,\n    };\n  }\n  if (err instanceof CredentialPoolExhaustedError && err.nextRetryAt !== undefined) {\n    const delayMs = Math.max(0, err.nextRetryAt - Date.now());\n    return {\n      retryable: true as const,\n      retryAfterMs: delayMs,\n    };\n  }\n  return undefined;\n}\n\n/**\n * Code -> reconstructor mapping. Each entry returns a fresh instance of the\n * SDK class hierarchy from an envelope, preserving message and (where the\n * constructor supports it) cause/ext context.\n *\n * Unmapped codes fall through to `UnknownAgentError` so consumer code that\n * relies on `err instanceof TheokitAgentError` still works.\n */\nconst CODE_TO_RECONSTRUCTOR: ReadonlyMap<\n  TheokitErrorCode,\n  (env: TheokitErrorEnvelope) => TheokitAgentError\n> = new Map<TheokitErrorCode, (env: TheokitErrorEnvelope) => TheokitAgentError>([\n  [\"UNAUTHORIZED\", (env) => new AuthenticationError(env.message)],\n  [\n    \"RATE_LIMITED\",\n    (env) => new RateLimitError(env.message, env.cause !== undefined ? { cause: env.cause } : {}),\n  ],\n  [\"PROVIDER_KEY_MISSING\", (env) => new ConfigurationError(env.message)],\n  [\"SERVICE_UNAVAILABLE\", (env) => new NetworkError(env.message)],\n  [\"GATEWAY_TIMEOUT\", (env) => new NetworkError(env.message)],\n  [\n    \"AGENT_RUN_ERROR\",\n    (env) =>\n      new AgentRunError(env.message, {\n        code: \"unknown\",\n        ...(env.cause !== undefined ? { cause: env.cause } : {}),\n      }),\n  ],\n  [\"INTERNAL_SERVER_ERROR\", (env) => new UnknownAgentError(env.message)],\n  // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require\n  // domain-specific args (budgetName, provider) that the envelope doesn't\n  // always carry. Fall back to UnknownAgentError when those fields are\n  // missing; consumer code that needs the typed class should call the\n  // constructor directly.\n]);\n\n/**\n * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound\n * boundary (e.g., on a worker process receiving an envelope from the main\n * process via IPC, or on a client deserializing a `RunResult.error`).\n *\n * @public\n */\nexport function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError {\n  const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);\n  if (reconstructor) return reconstructor(env);\n  // Round-trip preservation: if the envelope's meta.sdkErrorName matches a\n  // class without a generic reconstructor (e.g., BudgetExceededError), we\n  // can't rebuild without domain args. Fall back to UnknownAgentError.\n  return new UnknownAgentError(env.message);\n}\n\n// Re-export for ergonomic consumption alongside fromEnvelope.\nexport { MemoryAdapterError };\n"]}
+{"version":3,"sources":["../../src/server/errors-envelope.ts"],"names":[],"mappings":";;;;;AAoEA,IAAM,YAAA,uBAA0D,GAAA,CAA8B;AAAA,EAC5F,CAAC,uBAAuB,cAAc,CAAA;AAAA,EACtC,CAAC,kBAAkB,cAAc,CAAA;AAAA,EACjC,CAAC,sBAAsB,sBAAsB,CAAA;AAAA,EAC7C,CAAC,gCAAgC,sBAAsB,CAAA;AAAA,EACvD,CAAC,gBAAgB,qBAAqB,CAAA;AAAA,EACtC,CAAC,iBAAiB,iBAAiB,CAAA;AAAA,EACnC,CAAC,uBAAuB,iBAAiB,CAAA;AAAA,EACzC,CAAC,gCAAgC,2BAA2B,CAAA;AAAA,EAC5D,CAAC,qBAAqB,uBAAuB,CAAA;AAAA,EAC7C,CAAC,sBAAsB,uBAAuB;AAChD,CAAC,CAAA;AAiBM,SAAS,WAAW,KAAA,EAAsC;AAC/D,EAAA,IAAI,EAAE,iBAAiB,KAAA,CAAA,EAAQ;AAC7B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,uBAAA;AAAA,MACN,OAAA,EAAS,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ;AAAA,KAC/C;AAAA,EACF;AACA,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,uBAAA;AACvC,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAClC,EAAA,MAAM,GAAA,GAAM,SAAS,KAAK,CAAA;AAC1B,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,OAAQ,KAAA,CAAsC,KAAA;AAAA,IAC9C,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,SAAA,CAAU,MAAc,GAAA,EAAqC;AACpE,EAAA,MAAM,IAAA,GAAgC,EAAE,YAAA,EAAc,IAAA,EAAK;AAC3D,EAAA,IAAI,GAAA,YAAe,iBAAA,IAAqB,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClE,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,QAAA;AAC7B,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,UAAA,KAAe,MAAA,EAAW;AACzC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAI,QAAA,CAAS,UAAA;AAAA,IACjC;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,IAAI,GAAA,YAAe,cAAA,IAAkB,GAAA,CAAI,QAAA,EAAU,eAAe,MAAA,EAAW;AAC3E,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc,GAAA,CAAI,QAAA,CAAS,UAAA,GAAa;AAAA,KAC1C;AAAA,EACF;AACA,EAAA,IAAI,GAAA,YAAe,4BAAA,IAAgC,GAAA,CAAI,WAAA,KAAgB,MAAA,EAAW;AAChF,IAAA,MAAM,OAAA,GAAU,KAAK,GAAA,CAAI,CAAA,EAAG,IAAI,WAAA,GAAc,IAAA,CAAK,KAAK,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,IAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAUA,IAAM,qBAAA,uBAGE,GAAA,CAAwE;AAAA,EAC9E,CAAC,gBAAgB,CAAC,GAAA,KAAQ,IAAI,mBAAA,CAAoB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D;AAAA,IACE,cAAA;AAAA,IACA,CAAC,GAAA,KAAQ,IAAI,cAAA,CAAe,IAAI,OAAA,EAAS,GAAA,CAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAE;AAAA,GAC9F;AAAA,EACA,CAAC,wBAAwB,CAAC,GAAA,KAAQ,IAAI,kBAAA,CAAmB,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EACrE,CAAC,uBAAuB,CAAC,GAAA,KAAQ,IAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC9D,CAAC,mBAAmB,CAAC,GAAA,KAAQ,IAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AAAA,EAC1D;AAAA,IACE,iBAAA;AAAA,IACA,CAAC,GAAA,KACC,IAAI,aAAA,CAAc,IAAI,OAAA,EAAS;AAAA,MAC7B,IAAA,EAAM,SAAA;AAAA,MACN,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACvD;AAAA,GACL;AAAA,EACA,CAAC,yBAAyB,CAAC,GAAA,KAAQ,IAAI,iBAAA,CAAkB,GAAA,CAAI,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAMvE,CAAC,CAAA;AASM,SAAS,aAAa,GAAA,EAA8C;AACzE,EAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA;AACxD,EAAA,IAAI,aAAA,EAAe,OAAO,aAAA,CAAc,GAAG,CAAA;AAI3C,EAAA,OAAO,IAAI,iBAAA,CAAkB,GAAA,CAAI,OAAO,CAAA;AAC1C","file":"errors-envelope.js","sourcesContent":["/**\n * G5 T2.2 boundary translation — `@theokit/sdk/server/errors-envelope`.\n *\n * Per plan g5-error-envelope-cross-layer v1.0 § Phase 2 / T2.2.\n * Blueprint ADR D3 — SDK keeps the 15+ Error class hierarchy internally;\n * `toEnvelope(err)` translates outward at the Agent.send -> RunResult egress\n * edge, `fromEnvelope(env)` reconstructs class identity on the inbound edge\n * (so consumer code can keep using `instanceof RateLimitError` patterns).\n *\n * Structurally-compatible envelope shape: identical fields to theokit/server\n * `TheoErrorEnvelope`. Re-declared locally to keep `@theokit/sdk` free of any\n * dependency on `theokit`. Consumer code that uses both packages gets the\n * same shape via duck-typing.\n */\n\nimport {\n  AgentRunError,\n  AuthenticationError,\n  ConfigurationError,\n  CredentialPoolExhaustedError,\n  MemoryAdapterError,\n  NetworkError,\n  RateLimitError,\n  TheokitAgentError,\n  UnknownAgentError,\n} from \"../errors.js\";\n\n/**\n * Canonical envelope code union for cross-layer SDK boundary. Subset of the\n * full `TheoErrorCode` (theokit/server) covering codes the SDK actually emits.\n * Other layers (theokit/server, theokit/client, theokit/ui) handle the broader\n * union; the SDK never needs the HTTP-only codes (PRECONDITION_FAILED, etc.).\n *\n * @public\n */\nexport type TheokitErrorCode =\n  | \"UNAUTHORIZED\"\n  | \"RATE_LIMITED\"\n  | \"INTERNAL_SERVER_ERROR\"\n  | \"SERVICE_UNAVAILABLE\"\n  | \"GATEWAY_TIMEOUT\"\n  // SDK / agent-domain\n  | \"AGENT_RUN_ERROR\"\n  | \"PROVIDER_KEY_MISSING\"\n  | \"BUDGET_EXCEEDED\"\n  | \"CREDENTIAL_POOL_EXHAUSTED\";\n\n/**\n * Envelope shape — structurally identical to theokit/server `TheoErrorEnvelope`.\n *\n * @public\n */\nexport interface TheokitErrorEnvelope<TExt = unknown> {\n  readonly code: TheokitErrorCode;\n  readonly message: string;\n  readonly cause?: unknown;\n  readonly meta?: Record<string, unknown>;\n  readonly ext?: TExt;\n}\n\n/**\n * Class-name -> envelope code mapping. Indexed by `Error.name` string so\n * subclasses inherit the mapping unless they override their `name` field.\n *\n * `IntegrationNotConnectedError` (subclass of `ConfigurationError`) takes\n * its own row because its `name` is `IntegrationNotConnectedError` and the\n * map is name-exact, not prototype-walked.\n */\nconst NAME_TO_CODE: ReadonlyMap<string, TheokitErrorCode> = new Map<string, TheokitErrorCode>([\n  [\"AuthenticationError\", \"UNAUTHORIZED\"],\n  [\"RateLimitError\", \"RATE_LIMITED\"],\n  [\"ConfigurationError\", \"PROVIDER_KEY_MISSING\"],\n  [\"IntegrationNotConnectedError\", \"PROVIDER_KEY_MISSING\"],\n  [\"NetworkError\", \"SERVICE_UNAVAILABLE\"],\n  [\"AgentRunError\", \"AGENT_RUN_ERROR\"],\n  [\"BudgetExceededError\", \"BUDGET_EXCEEDED\"],\n  [\"CredentialPoolExhaustedError\", \"CREDENTIAL_POOL_EXHAUSTED\"],\n  [\"UnknownAgentError\", \"INTERNAL_SERVER_ERROR\"],\n  [\"MemoryAdapterError\", \"INTERNAL_SERVER_ERROR\"],\n]);\n\n/**\n * Translate any SDK error (or arbitrary thrown value) into the canonical\n * envelope shape at the wire boundary.\n *\n * - `TheokitAgentError` family → mapped by `Error.name` string.\n * - Plain `Error` → INTERNAL_SERVER_ERROR.\n * - Non-Error values → INTERNAL_SERVER_ERROR with synthetic message.\n *\n * Meta carries `sdkErrorName` for telemetry; provider metadata (when present\n * via SDK's `ErrorMetadata`) flows through `meta.provider` / `meta.endpoint`\n * / `meta.statusCode` for diagnostics. `RateLimitError` populates a\n * `RetryableExt`-shaped ext when `metadata.retryAfter` (seconds) is set.\n *\n * @public\n */\nexport function toEnvelope(value: unknown): TheokitErrorEnvelope {\n  if (!(value instanceof Error)) {\n    return {\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: typeof value === \"string\" ? value : \"Unknown error\",\n    };\n  }\n  const name = value.name;\n  const code = NAME_TO_CODE.get(name) ?? \"INTERNAL_SERVER_ERROR\";\n  const meta = buildMeta(name, value);\n  const ext = buildExt(value);\n  return {\n    code,\n    message: value.message,\n    cause: (value as Error & { cause?: unknown }).cause,\n    meta,\n    ext,\n  };\n}\n\nfunction buildMeta(name: string, err: Error): Record<string, unknown> {\n  const meta: Record<string, unknown> = { sdkErrorName: name };\n  if (err instanceof TheokitAgentError && err.metadata !== undefined) {\n    meta.provider = err.metadata.provider;\n    meta.endpoint = err.metadata.endpoint;\n    if (err.metadata.statusCode !== undefined) {\n      meta.statusCode = err.metadata.statusCode;\n    }\n  }\n  return meta;\n}\n\nfunction buildExt(err: Error): unknown {\n  if (err instanceof RateLimitError && err.metadata?.retryAfter !== undefined) {\n    return {\n      retryable: true as const,\n      retryAfterMs: err.metadata.retryAfter * 1000,\n    };\n  }\n  if (err instanceof CredentialPoolExhaustedError && err.nextRetryAt !== undefined) {\n    const delayMs = Math.max(0, err.nextRetryAt - Date.now());\n    return {\n      retryable: true as const,\n      retryAfterMs: delayMs,\n    };\n  }\n  return undefined;\n}\n\n/**\n * Code -> reconstructor mapping. Each entry returns a fresh instance of the\n * SDK class hierarchy from an envelope, preserving message and (where the\n * constructor supports it) cause/ext context.\n *\n * Unmapped codes fall through to `UnknownAgentError` so consumer code that\n * relies on `err instanceof TheokitAgentError` still works.\n */\nconst CODE_TO_RECONSTRUCTOR: ReadonlyMap<\n  TheokitErrorCode,\n  (env: TheokitErrorEnvelope) => TheokitAgentError\n> = new Map<TheokitErrorCode, (env: TheokitErrorEnvelope) => TheokitAgentError>([\n  [\"UNAUTHORIZED\", (env) => new AuthenticationError(env.message)],\n  [\n    \"RATE_LIMITED\",\n    (env) => new RateLimitError(env.message, env.cause !== undefined ? { cause: env.cause } : {}),\n  ],\n  [\"PROVIDER_KEY_MISSING\", (env) => new ConfigurationError(env.message)],\n  [\"SERVICE_UNAVAILABLE\", (env) => new NetworkError(env.message)],\n  [\"GATEWAY_TIMEOUT\", (env) => new NetworkError(env.message)],\n  [\n    \"AGENT_RUN_ERROR\",\n    (env) =>\n      new AgentRunError(env.message, {\n        code: \"unknown\",\n        ...(env.cause !== undefined ? { cause: env.cause } : {}),\n      }),\n  ],\n  [\"INTERNAL_SERVER_ERROR\", (env) => new UnknownAgentError(env.message)],\n  // BUDGET_EXCEEDED + CREDENTIAL_POOL_EXHAUSTED reconstructors require\n  // domain-specific args (budgetName, provider) that the envelope doesn't\n  // always carry. Fall back to UnknownAgentError when those fields are\n  // missing; consumer code that needs the typed class should call the\n  // constructor directly.\n]);\n\n/**\n * Hydrate an envelope back into the SDK class hierarchy. Use at the inbound\n * boundary (e.g., on a worker process receiving an envelope from the main\n * process via IPC, or on a client deserializing a `RunResult.error`).\n *\n * @public\n */\nexport function fromEnvelope(env: TheokitErrorEnvelope): TheokitAgentError {\n  const reconstructor = CODE_TO_RECONSTRUCTOR.get(env.code);\n  if (reconstructor) return reconstructor(env);\n  // Round-trip preservation: if the envelope's meta.sdkErrorName matches a\n  // class without a generic reconstructor (e.g., BudgetExceededError), we\n  // can't rebuild without domain args. Fall back to UnknownAgentError.\n  return new UnknownAgentError(env.message);\n}\n\n// Re-export for ergonomic consumption alongside fromEnvelope.\nexport { MemoryAdapterError };\n"]}

package/dist/session-transcript-LGHSNVY5.cjs

@@ -0,0 +1,62 @@
+'use strict';
+
+var chunkGZV6AVRL_cjs = require('./chunk-GZV6AVRL.cjs');
+require('./chunk-JLRLCBJ4.cjs');
+require('./chunk-6LHQPOMI.cjs');
+
+
+
+Object.defineProperty(exports, "SessionTranscript", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.SessionTranscript; }
+});
+Object.defineProperty(exports, "defaultBaseDir", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.defaultBaseDir; }
+});
+Object.defineProperty(exports, "encodeProjectDir", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.encodeProjectDir; }
+});
+Object.defineProperty(exports, "expandTilde", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.expandTilde; }
+});
+Object.defineProperty(exports, "isSessionUuid", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.isSessionUuid; }
+});
+Object.defineProperty(exports, "legacyTranscriptPath", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.legacyTranscriptPath; }
+});
+Object.defineProperty(exports, "readTranscript", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.readTranscript; }
+});
+Object.defineProperty(exports, "reconstructMessages", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.reconstructMessages; }
+});
+Object.defineProperty(exports, "safeSessionId", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.safeSessionId; }
+});
+Object.defineProperty(exports, "sessionUuidFor", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.sessionUuidFor; }
+});
+Object.defineProperty(exports, "transcriptPath", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.transcriptPath; }
+});
+Object.defineProperty(exports, "transcriptRoot", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.transcriptRoot; }
+});
+Object.defineProperty(exports, "writeTranscript", {
+  enumerable: true,
+  get: function () { return chunkGZV6AVRL_cjs.writeTranscript; }
+});
+//# sourceMappingURL=session-transcript-LGHSNVY5.cjs.map
+//# sourceMappingURL=session-transcript-LGHSNVY5.cjs.map

package/dist/{session-transcript-6WNITKRE.cjs.map → session-transcript-LGHSNVY5.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-6WNITKRE.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-LGHSNVY5.cjs"}

package/dist/session-transcript-VTBTCGQX.js

@@ -0,0 +1,5 @@
+export { SessionTranscript, defaultBaseDir, encodeProjectDir, expandTilde, isSessionUuid, legacyTranscriptPath, readTranscript, reconstructMessages, safeSessionId, sessionUuidFor, transcriptPath, transcriptRoot, writeTranscript } from './chunk-JOFVLOFY.js';
+import './chunk-3JHIFQ4I.js';
+import './chunk-CZJ6Q7CW.js';
+//# sourceMappingURL=session-transcript-VTBTCGQX.js.map
+//# sourceMappingURL=session-transcript-VTBTCGQX.js.map

package/dist/{session-transcript-XAEKW6P7.js.map → session-transcript-VTBTCGQX.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-XAEKW6P7.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"session-transcript-VTBTCGQX.js"}

package/dist/skills.cjs

@@ -1,22 +1,21 @@
 'use strict';
 
-var chunkOHLDPWTA_cjs = require('./chunk-OHLDPWTA.cjs');
-require('./chunk-V2BOS4WF.cjs');
-require('./chunk-VKJ7V7EB.cjs');
-require('./chunk-4CLOXP6H.cjs');
-require('./chunk-4ZHTIJNE.cjs');
-require('./chunk-XL7Q7HB2.cjs');
-require('./chunk-EG4QM7ZJ.cjs');
+var chunkUGRS7ZA7_cjs = require('./chunk-UGRS7ZA7.cjs');
+require('./chunk-7A6535RA.cjs');
+require('./chunk-SA6K24NB.cjs');
+require('./chunk-HW7SEELD.cjs');
+require('./chunk-J7J7J2GN.cjs');
+require('./chunk-6LHQPOMI.cjs');
 
 
 
 Object.defineProperty(exports, "buildSkillsBlock", {
   enumerable: true,
-  get: function () { return chunkOHLDPWTA_cjs.buildSkillsBlock; }
+  get: function () { return chunkUGRS7ZA7_cjs.buildSkillsBlock; }
 });
 Object.defineProperty(exports, "discoverSkills", {
   enumerable: true,
-  get: function () { return chunkOHLDPWTA_cjs.discoverSkills; }
+  get: function () { return chunkUGRS7ZA7_cjs.discoverSkills; }
 });
 //# sourceMappingURL=skills.cjs.map
 //# sourceMappingURL=skills.cjs.map

package/dist/skills.js

@@ -1,9 +1,8 @@
-export { buildSkillsBlock, discoverSkills } from './chunk-O73J46PV.js';
-import './chunk-HS7AVXTF.js';
-import './chunk-RIAM53CP.js';
-import './chunk-LXQ6HKPS.js';
-import './chunk-ZZMZWBR6.js';
-import './chunk-D4CUGAKZ.js';
-import './chunk-XEQ3TM66.js';
+export { buildSkillsBlock, discoverSkills } from './chunk-XDANGA2C.js';
+import './chunk-EH6XD3FY.js';
+import './chunk-UKMBRMGT.js';
+import './chunk-JNAA4G4H.js';
+import './chunk-ALUN2B4W.js';
+import './chunk-CZJ6Q7CW.js';
 //# sourceMappingURL=skills.js.map
 //# sourceMappingURL=skills.js.map

package/dist/stream-object-HBFMIZLD.js

@@ -0,0 +1,7 @@
+export { StreamObjectError, streamObjectImpl } from './chunk-5WKQDIGO.js';
+import './chunk-47TF32NQ.js';
+import './chunk-7I5Z3UBJ.js';
+import './chunk-ALUN2B4W.js';
+import './chunk-CZJ6Q7CW.js';
+//# sourceMappingURL=stream-object-HBFMIZLD.js.map
+//# sourceMappingURL=stream-object-HBFMIZLD.js.map

package/dist/{stream-object-UF4QRQRU.js.map → stream-object-HBFMIZLD.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"stream-object-UF4QRQRU.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"stream-object-HBFMIZLD.js"}

package/dist/stream-object-QSKHISDJ.cjs

@@ -0,0 +1,20 @@
+'use strict';
+
+var chunkTFG5IBZS_cjs = require('./chunk-TFG5IBZS.cjs');
+require('./chunk-7JJ3A6AT.cjs');
+require('./chunk-AA27GEYS.cjs');
+require('./chunk-J7J7J2GN.cjs');
+require('./chunk-6LHQPOMI.cjs');
+
+
+
+Object.defineProperty(exports, "StreamObjectError", {
+  enumerable: true,
+  get: function () { return chunkTFG5IBZS_cjs.StreamObjectError; }
+});
+Object.defineProperty(exports, "streamObjectImpl", {
+  enumerable: true,
+  get: function () { return chunkTFG5IBZS_cjs.streamObjectImpl; }
+});
+//# sourceMappingURL=stream-object-QSKHISDJ.cjs.map
+//# sourceMappingURL=stream-object-QSKHISDJ.cjs.map

package/dist/{stream-object-ZJTQNKY3.cjs.map → stream-object-QSKHISDJ.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"stream-object-ZJTQNKY3.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"stream-object-QSKHISDJ.cjs"}

package/dist/stream-object.d.ts

@@ -1,4 +1,5 @@
 import type { ZodType } from "zod";
+import { StructuredOutputError } from "./errors.js";
 import type { LocalOptions, ModelSelection } from "./types/agent.js";
 import type { ProviderRoutingSettings } from "./types/providers.js";
 /**
@@ -67,9 +68,6 @@ export type StreamObjectEvent<T> = {
  *
  * @public
  */
-export declare class StreamObjectError extends Error {
+export declare class StreamObjectError extends StructuredOutputError {
     readonly name = "StreamObjectError";
-    readonly code: "no_tool_call" | "parse_failed";
-    readonly cause?: unknown;
-    constructor(code: "no_tool_call" | "parse_failed", message: string, cause?: unknown);
 }

package/dist/subagents-loader-TPZLTXYZ.cjs

@@ -0,0 +1,16 @@
+'use strict';
+
+var chunkSYVWE64W_cjs = require('./chunk-SYVWE64W.cjs');
+require('./chunk-GGZ5GPE3.cjs');
+require('./chunk-HW7SEELD.cjs');
+require('./chunk-J7J7J2GN.cjs');
+require('./chunk-6LHQPOMI.cjs');
+
+
+
+Object.defineProperty(exports, "loadSubagents", {
+  enumerable: true,
+  get: function () { return chunkSYVWE64W_cjs.loadSubagents; }
+});
+//# sourceMappingURL=subagents-loader-TPZLTXYZ.cjs.map
+//# sourceMappingURL=subagents-loader-TPZLTXYZ.cjs.map

package/dist/{subagents-loader-UCNO7FUH.cjs.map → subagents-loader-TPZLTXYZ.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"subagents-loader-UCNO7FUH.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"subagents-loader-TPZLTXYZ.cjs"}

package/dist/subagents-loader-Y6JFYXAY.js

@@ -0,0 +1,7 @@
+export { loadSubagents } from './chunk-4S5TWFIZ.js';
+import './chunk-67ADYSTW.js';
+import './chunk-JNAA4G4H.js';
+import './chunk-ALUN2B4W.js';
+import './chunk-CZJ6Q7CW.js';
+//# sourceMappingURL=subagents-loader-Y6JFYXAY.js.map
+//# sourceMappingURL=subagents-loader-Y6JFYXAY.js.map

package/dist/{subagents-loader-XP5ERVDZ.js.map → subagents-loader-Y6JFYXAY.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"subagents-loader-XP5ERVDZ.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"subagents-loader-Y6JFYXAY.js"}

package/dist/subagents-loader.cjs

@@ -1,11 +1,10 @@
 'use strict';
 
-var chunk43ZQRWAP_cjs = require('./chunk-43ZQRWAP.cjs');
-require('./chunk-AKJP2STZ.cjs');
-require('./chunk-4CLOXP6H.cjs');
-var chunk4ZHTIJNE_cjs = require('./chunk-4ZHTIJNE.cjs');
-require('./chunk-XL7Q7HB2.cjs');
-require('./chunk-EG4QM7ZJ.cjs');
+var chunkSYVWE64W_cjs = require('./chunk-SYVWE64W.cjs');
+require('./chunk-GGZ5GPE3.cjs');
+require('./chunk-HW7SEELD.cjs');
+var chunkJ7J7J2GN_cjs = require('./chunk-J7J7J2GN.cjs');
+require('./chunk-6LHQPOMI.cjs');
 
 // src/subagents-loader.ts
 var ACCEPTED_SOURCES = ["project"];
@@ -14,7 +13,7 @@ function resolveSources(options) {
   if (declared === void 0) return ACCEPTED_SOURCES;
   for (const source of declared) {
     if (!ACCEPTED_SOURCES.includes(source)) {
-      throw new chunk4ZHTIJNE_cjs.ConfigurationError(
+      throw new chunkJ7J7J2GN_cjs.ConfigurationError(
         `Unknown subagent setting source "${String(source)}" (accepted: ${ACCEPTED_SOURCES.join(", ")})`,
         { code: "subagent_unknown_setting_source" }
       );
@@ -24,7 +23,7 @@ function resolveSources(options) {
 }
 async function discoverSubagents(cwd, options) {
   const sources = resolveSources(options);
-  return chunk43ZQRWAP_cjs.loadSubagents(cwd, sources.includes("project"), void 0);
+  return chunkSYVWE64W_cjs.loadSubagents(cwd, sources.includes("project"), void 0);
 }
 async function loadSubagentDefinition(name, cwd, options) {
   return (await discoverSubagents(cwd, options))[name];

package/dist/subagents-loader.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/subagents-loader.ts"],"names":["ConfigurationError","loadSubagents"],"mappings":";;;;;;;;;;AAuCA,IAAM,gBAAA,GAA8C,CAAC,SAAS,CAAA;AAgB9D,SAAS,eAAe,OAAA,EAA0E;AAChG,EAAA,MAAM,WAAW,OAAA,EAAS,cAAA;AAC1B,EAAA,IAAI,QAAA,KAAa,QAAW,OAAO,gBAAA;AACnC,EAAA,KAAA,MAAW,UAAU,QAAA,EAAU;AAC7B,IAAA,IAAI,CAAC,gBAAA,CAAiB,QAAA,CAAS,MAAM,CAAA,EAAG;AACtC,MAAA,MAAM,IAAIA,oCAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,OAAO,MAAM,CAAC,gBAAgB,gBAAA,CAAiB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,QAC7F,EAAE,MAAM,iCAAA;AAAkC,OAC5C;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAOA,eAAsB,iBAAA,CACpB,KACA,OAAA,EAC0C;AAC1C,EAAA,MAAM,OAAA,GAAU,eAAe,OAAO,CAAA;AACtC,EAAA,OAAOC,gCAAc,GAAA,EAAK,OAAA,CAAQ,QAAA,CAAS,SAAS,GAAG,MAAS,CAAA;AAClE;AAQA,eAAsB,sBAAA,CACpB,IAAA,EACA,GAAA,EACA,OAAA,EACsC;AACtC,EAAA,OAAA,CAAQ,MAAM,iBAAA,CAAkB,GAAA,EAAK,OAAO,GAAG,IAAI,CAAA;AACrD","file":"subagents-loader.cjs","sourcesContent":["/**\n * M81 — `.theokit/agents` discovery, exposed so a consumer can read the on-disk subagent\n * definitions with one import instead of hand-rolling a second parser.\n *\n * ## Why this file exists\n *\n * `src/skills.ts` already exposed `discoverSkills` for the sibling domain. Subagents had the same\n * loader — `internal/runtime/skills/subagents-loader.ts` — with no public door. A consumer behind\n * the layer boundary (the agent-builder never imports `@theokit/sdk*` directly) could not reach it,\n * so re-implementing was the only legal option. It re-implemented, and then wrote a test whose only\n * job was to watch the two parsers for drift. That test is the cleanest possible evidence that the\n * duplication should not exist.\n *\n * ## What crosses is the PARSED config\n *\n * The return is `AgentDefinition` — already interpreted — never the `.md` text or the frontmatter\n * shape. Exporting the file format would freeze an internal detail as public API; exporting the\n * parsed value leaves the format free to change.\n */\n\nimport { ConfigurationError } from \"./errors.js\";\nimport { loadSubagents } from \"./internal/runtime/skills/subagents-loader.js\";\nimport type { AgentDefinition } from \"./types/agent.js\";\n\n/**\n * The parsed subagent definition this module hands back.\n *\n * Re-exported here — beside the loader that produces it — so a consumer can NAME the value it\n * receives without reaching into `types/agent`, which no subpath publishes. A layer above may then\n * alias it (`AgentDefinition as SubagentDefinition`) to sidestep a name it has already spent.\n */\nexport type { AgentDefinition } from \"./types/agent.js\";\n\n/**\n * Where subagent definitions may be read from. A closed union rather than a boolean: a third\n * source can join it without breaking the signature, and the call site reads as what it means.\n */\nexport type SubagentSource = \"project\";\n\nconst ACCEPTED_SOURCES: readonly SubagentSource[] = [\"project\"];\n\n/** Options for {@link discoverSubagents} / {@link loadSubagentDefinition}. */\nexport interface DiscoverSubagentsOptions {\n  /**\n   * Which sources to read. Defaults to `[\"project\"]` — `<cwd>/.theokit/agents/*.md`.\n   *\n   * An empty list reads NOTHING: the directory is never opened, so a caller that has not yet\n   * established trust in `cwd` can decline the read rather than filter its result.\n   */\n  readonly settingSources?: readonly SubagentSource[];\n}\n\n// Validated at the boundary (error-handling.md § 2): the union is erased at runtime, so a JS\n// caller — or a value crossing a serialization hop — can still carry a source nobody honors.\n// Dropping it silently would read as \"no subagents found\", which is the same shape as success.\nfunction resolveSources(options: DiscoverSubagentsOptions | undefined): readonly SubagentSource[] {\n  const declared = options?.settingSources;\n  if (declared === undefined) return ACCEPTED_SOURCES;\n  for (const source of declared) {\n    if (!ACCEPTED_SOURCES.includes(source)) {\n      throw new ConfigurationError(\n        `Unknown subagent setting source \"${String(source)}\" (accepted: ${ACCEPTED_SOURCES.join(\", \")})`,\n        { code: \"subagent_unknown_setting_source\" },\n      );\n    }\n  }\n  return declared;\n}\n\n/**\n * Discover the subagents defined under `<cwd>/.theokit/agents/*.md`.\n *\n * An absent directory yields `{}` — a project without subagents is the common case, not an error.\n */\nexport async function discoverSubagents(\n  cwd: string,\n  options?: DiscoverSubagentsOptions,\n): Promise<Record<string, AgentDefinition>> {\n  const sources = resolveSources(options);\n  return loadSubagents(cwd, sources.includes(\"project\"), undefined);\n}\n\n/**\n * Load ONE subagent definition by name, or `undefined` when it is not defined on disk.\n *\n * A thin selector over {@link discoverSubagents} rather than a second reader: one parser is the\n * whole point of this module.\n */\nexport async function loadSubagentDefinition(\n  name: string,\n  cwd: string,\n  options?: DiscoverSubagentsOptions,\n): Promise<AgentDefinition | undefined> {\n  return (await discoverSubagents(cwd, options))[name];\n}\n"]}
+{"version":3,"sources":["../src/subagents-loader.ts"],"names":["ConfigurationError","loadSubagents"],"mappings":";;;;;;;;;AAyCA,IAAM,gBAAA,GAA8C,CAAC,SAAS,CAAA;AAgB9D,SAAS,eAAe,OAAA,EAA0E;AAChG,EAAA,MAAM,WAAW,OAAA,EAAS,cAAA;AAC1B,EAAA,IAAI,QAAA,KAAa,QAAW,OAAO,gBAAA;AACnC,EAAA,KAAA,MAAW,UAAU,QAAA,EAAU;AAC7B,IAAA,IAAI,CAAC,gBAAA,CAAiB,QAAA,CAAS,MAAM,CAAA,EAAG;AACtC,MAAA,MAAM,IAAIA,oCAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,OAAO,MAAM,CAAC,gBAAgB,gBAAA,CAAiB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,QAC7F,EAAE,MAAM,iCAAA;AAAkC,OAC5C;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAOA,eAAsB,iBAAA,CACpB,KACA,OAAA,EAC0C;AAC1C,EAAA,MAAM,OAAA,GAAU,eAAe,OAAO,CAAA;AACtC,EAAA,OAAOC,gCAAc,GAAA,EAAK,OAAA,CAAQ,QAAA,CAAS,SAAS,GAAG,MAAS,CAAA;AAClE;AAQA,eAAsB,sBAAA,CACpB,IAAA,EACA,GAAA,EACA,OAAA,EACsC;AACtC,EAAA,OAAA,CAAQ,MAAM,iBAAA,CAAkB,GAAA,EAAK,OAAO,GAAG,IAAI,CAAA;AACrD","file":"subagents-loader.cjs","sourcesContent":["/**\n * Published as `@theokit/sdk/subagents-loader`.\n *\n * M81 — `.theokit/agents` discovery, exposed so a consumer can read the on-disk subagent\n * definitions with one import instead of hand-rolling a second parser.\n *\n * ## Why this file exists\n *\n * `src/skills.ts` already exposed `discoverSkills` for the sibling domain. Subagents had the same\n * loader — `internal/runtime/skills/subagents-loader.ts` — with no public door. A consumer behind\n * the layer boundary (the agent-builder never imports `@theokit/sdk*` directly) could not reach it,\n * so re-implementing was the only legal option. It re-implemented, and then wrote a test whose only\n * job was to watch the two parsers for drift. That test is the cleanest possible evidence that the\n * duplication should not exist.\n *\n * ## What crosses is the PARSED config\n *\n * The return is `AgentDefinition` — already interpreted — never the `.md` text or the frontmatter\n * shape. Exporting the file format would freeze an internal detail as public API; exporting the\n * parsed value leaves the format free to change.\n */\n\nimport { ConfigurationError } from \"./errors.js\";\nimport { loadSubagents } from \"./internal/runtime/skills/subagents-loader.js\";\nimport type { AgentDefinition } from \"./types/agent.js\";\n\n/**\n * The parsed subagent definition this module hands back.\n *\n * Re-exported here — beside the loader that produces it — so a consumer can NAME the value it\n * receives without reaching into `types/agent`, which no subpath publishes. A layer above may then\n * alias it (`AgentDefinition as SubagentDefinition`) to sidestep a name it has already spent.\n */\nexport type { AgentDefinition } from \"./types/agent.js\";\n\n/**\n * Where subagent definitions may be read from. A closed union rather than a boolean: a third\n * source can join it without breaking the signature, and the call site reads as what it means.\n */\nexport type SubagentSource = \"project\";\n\nconst ACCEPTED_SOURCES: readonly SubagentSource[] = [\"project\"];\n\n/** Options for {@link discoverSubagents} / {@link loadSubagentDefinition}. */\nexport interface DiscoverSubagentsOptions {\n  /**\n   * Which sources to read. Defaults to `[\"project\"]` — `<cwd>/.theokit/agents/*.md`.\n   *\n   * An empty list reads NOTHING: the directory is never opened, so a caller that has not yet\n   * established trust in `cwd` can decline the read rather than filter its result.\n   */\n  readonly settingSources?: readonly SubagentSource[];\n}\n\n// Validated at the boundary (error-handling.md § 2): the union is erased at runtime, so a JS\n// caller — or a value crossing a serialization hop — can still carry a source nobody honors.\n// Dropping it silently would read as \"no subagents found\", which is the same shape as success.\nfunction resolveSources(options: DiscoverSubagentsOptions | undefined): readonly SubagentSource[] {\n  const declared = options?.settingSources;\n  if (declared === undefined) return ACCEPTED_SOURCES;\n  for (const source of declared) {\n    if (!ACCEPTED_SOURCES.includes(source)) {\n      throw new ConfigurationError(\n        `Unknown subagent setting source \"${String(source)}\" (accepted: ${ACCEPTED_SOURCES.join(\", \")})`,\n        { code: \"subagent_unknown_setting_source\" },\n      );\n    }\n  }\n  return declared;\n}\n\n/**\n * Discover the subagents defined under `<cwd>/.theokit/agents/*.md`.\n *\n * An absent directory yields `{}` — a project without subagents is the common case, not an error.\n */\nexport async function discoverSubagents(\n  cwd: string,\n  options?: DiscoverSubagentsOptions,\n): Promise<Record<string, AgentDefinition>> {\n  const sources = resolveSources(options);\n  return loadSubagents(cwd, sources.includes(\"project\"), undefined);\n}\n\n/**\n * Load ONE subagent definition by name, or `undefined` when it is not defined on disk.\n *\n * A thin selector over {@link discoverSubagents} rather than a second reader: one parser is the\n * whole point of this module.\n */\nexport async function loadSubagentDefinition(\n  name: string,\n  cwd: string,\n  options?: DiscoverSubagentsOptions,\n): Promise<AgentDefinition | undefined> {\n  return (await discoverSubagents(cwd, options))[name];\n}\n"]}

package/dist/subagents-loader.d.cts

@@ -1,9 +1,11 @@
-import { a as AgentDefinition } from './agent-X0DKA943.cjs';
-import './sdk-agent-DEoKhA8a.cjs';
-import './run-BYSHf58D.cjs';
+import { a as AgentDefinition } from './agent-C3KO5LKm.cjs';
+import './sdk-agent-BOiKqOgL.cjs';
+import './run-CTAdRU3U.cjs';
 import 'zod';
 
 /**
+ * Published as `@theokit/sdk/subagents-loader`.
+ *
  * M81 — `.theokit/agents` discovery, exposed so a consumer can read the on-disk subagent
  * definitions with one import instead of hand-rolling a second parser.
  *

package/dist/subagents-loader.d.ts

@@ -1,9 +1,11 @@
-import { a as AgentDefinition } from './agent-BFno7Sfn.js';
-import './sdk-agent-D8qJVkuV.js';
-import './run-BYSHf58D.js';
+import { a as AgentDefinition } from './agent-CvmTR9uf.js';
+import './sdk-agent-D4a_BR_6.js';
+import './run-CTAdRU3U.js';
 import 'zod';
 
 /**
+ * Published as `@theokit/sdk/subagents-loader`.
+ *
  * M81 — `.theokit/agents` discovery, exposed so a consumer can read the on-disk subagent
  * definitions with one import instead of hand-rolling a second parser.
  *

package/dist/subagents-loader.js

@@ -1,9 +1,8 @@
-import { loadSubagents } from './chunk-LKBEROHN.js';
-import './chunk-247ZTLNU.js';
-import './chunk-LXQ6HKPS.js';
-import { ConfigurationError } from './chunk-ZZMZWBR6.js';
-import './chunk-D4CUGAKZ.js';
-import './chunk-XEQ3TM66.js';
+import { loadSubagents } from './chunk-4S5TWFIZ.js';
+import './chunk-67ADYSTW.js';
+import './chunk-JNAA4G4H.js';
+import { ConfigurationError } from './chunk-ALUN2B4W.js';
+import './chunk-CZJ6Q7CW.js';
 
 // src/subagents-loader.ts
 var ACCEPTED_SOURCES = ["project"];

package/dist/subagents-loader.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/subagents-loader.ts"],"names":[],"mappings":";;;;;;;;AAuCA,IAAM,gBAAA,GAA8C,CAAC,SAAS,CAAA;AAgB9D,SAAS,eAAe,OAAA,EAA0E;AAChG,EAAA,MAAM,WAAW,OAAA,EAAS,cAAA;AAC1B,EAAA,IAAI,QAAA,KAAa,QAAW,OAAO,gBAAA;AACnC,EAAA,KAAA,MAAW,UAAU,QAAA,EAAU;AAC7B,IAAA,IAAI,CAAC,gBAAA,CAAiB,QAAA,CAAS,MAAM,CAAA,EAAG;AACtC,MAAA,MAAM,IAAI,kBAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,OAAO,MAAM,CAAC,gBAAgB,gBAAA,CAAiB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,QAC7F,EAAE,MAAM,iCAAA;AAAkC,OAC5C;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAOA,eAAsB,iBAAA,CACpB,KACA,OAAA,EAC0C;AAC1C,EAAA,MAAM,OAAA,GAAU,eAAe,OAAO,CAAA;AACtC,EAAA,OAAO,cAAc,GAAA,EAAK,OAAA,CAAQ,QAAA,CAAS,SAAS,GAAG,MAAS,CAAA;AAClE;AAQA,eAAsB,sBAAA,CACpB,IAAA,EACA,GAAA,EACA,OAAA,EACsC;AACtC,EAAA,OAAA,CAAQ,MAAM,iBAAA,CAAkB,GAAA,EAAK,OAAO,GAAG,IAAI,CAAA;AACrD","file":"subagents-loader.js","sourcesContent":["/**\n * M81 — `.theokit/agents` discovery, exposed so a consumer can read the on-disk subagent\n * definitions with one import instead of hand-rolling a second parser.\n *\n * ## Why this file exists\n *\n * `src/skills.ts` already exposed `discoverSkills` for the sibling domain. Subagents had the same\n * loader — `internal/runtime/skills/subagents-loader.ts` — with no public door. A consumer behind\n * the layer boundary (the agent-builder never imports `@theokit/sdk*` directly) could not reach it,\n * so re-implementing was the only legal option. It re-implemented, and then wrote a test whose only\n * job was to watch the two parsers for drift. That test is the cleanest possible evidence that the\n * duplication should not exist.\n *\n * ## What crosses is the PARSED config\n *\n * The return is `AgentDefinition` — already interpreted — never the `.md` text or the frontmatter\n * shape. Exporting the file format would freeze an internal detail as public API; exporting the\n * parsed value leaves the format free to change.\n */\n\nimport { ConfigurationError } from \"./errors.js\";\nimport { loadSubagents } from \"./internal/runtime/skills/subagents-loader.js\";\nimport type { AgentDefinition } from \"./types/agent.js\";\n\n/**\n * The parsed subagent definition this module hands back.\n *\n * Re-exported here — beside the loader that produces it — so a consumer can NAME the value it\n * receives without reaching into `types/agent`, which no subpath publishes. A layer above may then\n * alias it (`AgentDefinition as SubagentDefinition`) to sidestep a name it has already spent.\n */\nexport type { AgentDefinition } from \"./types/agent.js\";\n\n/**\n * Where subagent definitions may be read from. A closed union rather than a boolean: a third\n * source can join it without breaking the signature, and the call site reads as what it means.\n */\nexport type SubagentSource = \"project\";\n\nconst ACCEPTED_SOURCES: readonly SubagentSource[] = [\"project\"];\n\n/** Options for {@link discoverSubagents} / {@link loadSubagentDefinition}. */\nexport interface DiscoverSubagentsOptions {\n  /**\n   * Which sources to read. Defaults to `[\"project\"]` — `<cwd>/.theokit/agents/*.md`.\n   *\n   * An empty list reads NOTHING: the directory is never opened, so a caller that has not yet\n   * established trust in `cwd` can decline the read rather than filter its result.\n   */\n  readonly settingSources?: readonly SubagentSource[];\n}\n\n// Validated at the boundary (error-handling.md § 2): the union is erased at runtime, so a JS\n// caller — or a value crossing a serialization hop — can still carry a source nobody honors.\n// Dropping it silently would read as \"no subagents found\", which is the same shape as success.\nfunction resolveSources(options: DiscoverSubagentsOptions | undefined): readonly SubagentSource[] {\n  const declared = options?.settingSources;\n  if (declared === undefined) return ACCEPTED_SOURCES;\n  for (const source of declared) {\n    if (!ACCEPTED_SOURCES.includes(source)) {\n      throw new ConfigurationError(\n        `Unknown subagent setting source \"${String(source)}\" (accepted: ${ACCEPTED_SOURCES.join(\", \")})`,\n        { code: \"subagent_unknown_setting_source\" },\n      );\n    }\n  }\n  return declared;\n}\n\n/**\n * Discover the subagents defined under `<cwd>/.theokit/agents/*.md`.\n *\n * An absent directory yields `{}` — a project without subagents is the common case, not an error.\n */\nexport async function discoverSubagents(\n  cwd: string,\n  options?: DiscoverSubagentsOptions,\n): Promise<Record<string, AgentDefinition>> {\n  const sources = resolveSources(options);\n  return loadSubagents(cwd, sources.includes(\"project\"), undefined);\n}\n\n/**\n * Load ONE subagent definition by name, or `undefined` when it is not defined on disk.\n *\n * A thin selector over {@link discoverSubagents} rather than a second reader: one parser is the\n * whole point of this module.\n */\nexport async function loadSubagentDefinition(\n  name: string,\n  cwd: string,\n  options?: DiscoverSubagentsOptions,\n): Promise<AgentDefinition | undefined> {\n  return (await discoverSubagents(cwd, options))[name];\n}\n"]}
+{"version":3,"sources":["../src/subagents-loader.ts"],"names":[],"mappings":";;;;;;;AAyCA,IAAM,gBAAA,GAA8C,CAAC,SAAS,CAAA;AAgB9D,SAAS,eAAe,OAAA,EAA0E;AAChG,EAAA,MAAM,WAAW,OAAA,EAAS,cAAA;AAC1B,EAAA,IAAI,QAAA,KAAa,QAAW,OAAO,gBAAA;AACnC,EAAA,KAAA,MAAW,UAAU,QAAA,EAAU;AAC7B,IAAA,IAAI,CAAC,gBAAA,CAAiB,QAAA,CAAS,MAAM,CAAA,EAAG;AACtC,MAAA,MAAM,IAAI,kBAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,OAAO,MAAM,CAAC,gBAAgB,gBAAA,CAAiB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,QAC7F,EAAE,MAAM,iCAAA;AAAkC,OAC5C;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAOA,eAAsB,iBAAA,CACpB,KACA,OAAA,EAC0C;AAC1C,EAAA,MAAM,OAAA,GAAU,eAAe,OAAO,CAAA;AACtC,EAAA,OAAO,cAAc,GAAA,EAAK,OAAA,CAAQ,QAAA,CAAS,SAAS,GAAG,MAAS,CAAA;AAClE;AAQA,eAAsB,sBAAA,CACpB,IAAA,EACA,GAAA,EACA,OAAA,EACsC;AACtC,EAAA,OAAA,CAAQ,MAAM,iBAAA,CAAkB,GAAA,EAAK,OAAO,GAAG,IAAI,CAAA;AACrD","file":"subagents-loader.js","sourcesContent":["/**\n * Published as `@theokit/sdk/subagents-loader`.\n *\n * M81 — `.theokit/agents` discovery, exposed so a consumer can read the on-disk subagent\n * definitions with one import instead of hand-rolling a second parser.\n *\n * ## Why this file exists\n *\n * `src/skills.ts` already exposed `discoverSkills` for the sibling domain. Subagents had the same\n * loader — `internal/runtime/skills/subagents-loader.ts` — with no public door. A consumer behind\n * the layer boundary (the agent-builder never imports `@theokit/sdk*` directly) could not reach it,\n * so re-implementing was the only legal option. It re-implemented, and then wrote a test whose only\n * job was to watch the two parsers for drift. That test is the cleanest possible evidence that the\n * duplication should not exist.\n *\n * ## What crosses is the PARSED config\n *\n * The return is `AgentDefinition` — already interpreted — never the `.md` text or the frontmatter\n * shape. Exporting the file format would freeze an internal detail as public API; exporting the\n * parsed value leaves the format free to change.\n */\n\nimport { ConfigurationError } from \"./errors.js\";\nimport { loadSubagents } from \"./internal/runtime/skills/subagents-loader.js\";\nimport type { AgentDefinition } from \"./types/agent.js\";\n\n/**\n * The parsed subagent definition this module hands back.\n *\n * Re-exported here — beside the loader that produces it — so a consumer can NAME the value it\n * receives without reaching into `types/agent`, which no subpath publishes. A layer above may then\n * alias it (`AgentDefinition as SubagentDefinition`) to sidestep a name it has already spent.\n */\nexport type { AgentDefinition } from \"./types/agent.js\";\n\n/**\n * Where subagent definitions may be read from. A closed union rather than a boolean: a third\n * source can join it without breaking the signature, and the call site reads as what it means.\n */\nexport type SubagentSource = \"project\";\n\nconst ACCEPTED_SOURCES: readonly SubagentSource[] = [\"project\"];\n\n/** Options for {@link discoverSubagents} / {@link loadSubagentDefinition}. */\nexport interface DiscoverSubagentsOptions {\n  /**\n   * Which sources to read. Defaults to `[\"project\"]` — `<cwd>/.theokit/agents/*.md`.\n   *\n   * An empty list reads NOTHING: the directory is never opened, so a caller that has not yet\n   * established trust in `cwd` can decline the read rather than filter its result.\n   */\n  readonly settingSources?: readonly SubagentSource[];\n}\n\n// Validated at the boundary (error-handling.md § 2): the union is erased at runtime, so a JS\n// caller — or a value crossing a serialization hop — can still carry a source nobody honors.\n// Dropping it silently would read as \"no subagents found\", which is the same shape as success.\nfunction resolveSources(options: DiscoverSubagentsOptions | undefined): readonly SubagentSource[] {\n  const declared = options?.settingSources;\n  if (declared === undefined) return ACCEPTED_SOURCES;\n  for (const source of declared) {\n    if (!ACCEPTED_SOURCES.includes(source)) {\n      throw new ConfigurationError(\n        `Unknown subagent setting source \"${String(source)}\" (accepted: ${ACCEPTED_SOURCES.join(\", \")})`,\n        { code: \"subagent_unknown_setting_source\" },\n      );\n    }\n  }\n  return declared;\n}\n\n/**\n * Discover the subagents defined under `<cwd>/.theokit/agents/*.md`.\n *\n * An absent directory yields `{}` — a project without subagents is the common case, not an error.\n */\nexport async function discoverSubagents(\n  cwd: string,\n  options?: DiscoverSubagentsOptions,\n): Promise<Record<string, AgentDefinition>> {\n  const sources = resolveSources(options);\n  return loadSubagents(cwd, sources.includes(\"project\"), undefined);\n}\n\n/**\n * Load ONE subagent definition by name, or `undefined` when it is not defined on disk.\n *\n * A thin selector over {@link discoverSubagents} rather than a second reader: one parser is the\n * whole point of this module.\n */\nexport async function loadSubagentDefinition(\n  name: string,\n  cwd: string,\n  options?: DiscoverSubagentsOptions,\n): Promise<AgentDefinition | undefined> {\n  return (await discoverSubagents(cwd, options))[name];\n}\n"]}

package/dist/subagents.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkVJ26EKGJ_cjs = require('./chunk-VJ26EKGJ.cjs');
+var chunkIJ7M6GOG_cjs = require('./chunk-IJ7M6GOG.cjs');
 
 // src/internal/runtime/skills/subagent-tool-scope.ts
 function subagentToolWhitelist(definition) {
@@ -9,7 +9,7 @@ function subagentToolWhitelist(definition) {
 }
 function withSubagentToolScope(definition, fn) {
   const whitelist = subagentToolWhitelist(definition);
-  return whitelist ? chunkVJ26EKGJ_cjs.withToolWhitelist(whitelist, fn) : fn();
+  return whitelist ? chunkIJ7M6GOG_cjs.withToolWhitelist(whitelist, fn) : fn();
 }
 
 exports.subagentToolWhitelist = subagentToolWhitelist;

package/dist/subagents.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/runtime/skills/subagent-tool-scope.ts"],"names":["withToolWhitelist"],"mappings":";;;;;AAYO,SAAS,sBAAsB,UAAA,EAAsD;AAC1F,EAAA,MAAM,EAAE,OAAM,GAAI,UAAA;AAClB,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,SAAS,CAAA,GAAI,IAAI,GAAA,CAAI,KAAK,CAAA,GAAI,MAAA;AACrE;AAeO,SAAS,qBAAA,CACd,YACA,EAAA,EACY;AACZ,EAAA,MAAM,SAAA,GAAY,sBAAsB,UAAU,CAAA;AAClD,EAAA,OAAO,SAAA,GAAYA,mCAAA,CAAkB,SAAA,EAAW,EAAE,IAAI,EAAA,EAAG;AAC3D","file":"subagents.cjs","sourcesContent":["import type { AgentDefinition } from \"../../../types/agent.js\";\nimport { withToolWhitelist } from \"../concurrency/async-local-storage.js\";\n\n/**\n * Resolve a sub-agent's tool whitelist from its {@link AgentDefinition.tools}\n * (M4-6). Returns a `Set` of allowed tool names when `tools` is a non-empty\n * array, else `undefined` (unscoped — the sub-agent inherits the parent's full\n * toolset). The `Set` is the exact shape `withToolWhitelist` /\n * `ForkOptions.allowedTools` consume.\n *\n * @public\n */\nexport function subagentToolWhitelist(definition: AgentDefinition): Set<string> | undefined {\n  const { tools } = definition;\n  return Array.isArray(tools) && tools.length > 0 ? new Set(tools) : undefined;\n}\n\n/**\n * Run `fn` under the sub-agent's tool whitelist (M4-6). When the definition\n * declares `tools`, the run executes inside `withToolWhitelist(set, fn)` — so\n * every tool call the sub-agent makes is vetoed at dispatch (`checkToolWhitelist`,\n * the same enforcement forks use) unless its canonical name is whitelisted: a\n * `tools: [\"read_file\"]` sub-agent provably cannot call `write_file`/`shell_exec`.\n * Enforcement is `withToolWhitelist`, NOT `PermissionEngine`.\n *\n * An unscoped definition (no/empty `tools`) runs `fn` directly — the parent's\n * full toolset is preserved.\n *\n * @public\n */\nexport function withSubagentToolScope<T>(\n  definition: AgentDefinition,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const whitelist = subagentToolWhitelist(definition);\n  return whitelist ? withToolWhitelist(whitelist, fn) : fn();\n}\n"]}
+{"version":3,"sources":["../src/internal/runtime/skills/subagent-tool-scope.ts"],"names":["withToolWhitelist"],"mappings":";;;;;AAYO,SAAS,sBAAsB,UAAA,EAAsD;AAC1F,EAAA,MAAM,EAAE,OAAM,GAAI,UAAA;AAClB,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,SAAS,CAAA,GAAI,IAAI,GAAA,CAAI,KAAK,CAAA,GAAI,MAAA;AACrE;AAeO,SAAS,qBAAA,CACd,YACA,EAAA,EACY;AACZ,EAAA,MAAM,SAAA,GAAY,sBAAsB,UAAU,CAAA;AAClD,EAAA,OAAO,SAAA,GAAYA,mCAAA,CAAkB,SAAA,EAAW,EAAE,IAAI,EAAA,EAAG;AAC3D","file":"subagents.cjs","sourcesContent":["import type { AgentDefinition } from \"../../../types/agent.js\";\nimport { withToolWhitelist } from \"../../concurrency/async-local-storage.js\";\n\n/**\n * Resolve a sub-agent's tool whitelist from its {@link AgentDefinition.tools}\n * (M4-6). Returns a `Set` of allowed tool names when `tools` is a non-empty\n * array, else `undefined` (unscoped — the sub-agent inherits the parent's full\n * toolset). The `Set` is the exact shape `withToolWhitelist` /\n * `ForkOptions.allowedTools` consume.\n *\n * @public\n */\nexport function subagentToolWhitelist(definition: AgentDefinition): Set<string> | undefined {\n  const { tools } = definition;\n  return Array.isArray(tools) && tools.length > 0 ? new Set(tools) : undefined;\n}\n\n/**\n * Run `fn` under the sub-agent's tool whitelist (M4-6). When the definition\n * declares `tools`, the run executes inside `withToolWhitelist(set, fn)` — so\n * every tool call the sub-agent makes is vetoed at dispatch (`checkToolWhitelist`,\n * the same enforcement forks use) unless its canonical name is whitelisted: a\n * `tools: [\"read_file\"]` sub-agent provably cannot call `write_file`/`shell_exec`.\n * Enforcement is `withToolWhitelist`, NOT `PermissionEngine`.\n *\n * An unscoped definition (no/empty `tools`) runs `fn` directly — the parent's\n * full toolset is preserved.\n *\n * @public\n */\nexport function withSubagentToolScope<T>(\n  definition: AgentDefinition,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const whitelist = subagentToolWhitelist(definition);\n  return whitelist ? withToolWhitelist(whitelist, fn) : fn();\n}\n"]}

package/dist/subagents.js

@@ -1,4 +1,4 @@
-import { withToolWhitelist } from './chunk-7AD3ZTZL.js';
+import { withToolWhitelist } from './chunk-SAGRF4IB.js';
 
 // src/internal/runtime/skills/subagent-tool-scope.ts
 function subagentToolWhitelist(definition) {

package/dist/subagents.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/runtime/skills/subagent-tool-scope.ts"],"names":[],"mappings":";;;AAYO,SAAS,sBAAsB,UAAA,EAAsD;AAC1F,EAAA,MAAM,EAAE,OAAM,GAAI,UAAA;AAClB,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,SAAS,CAAA,GAAI,IAAI,GAAA,CAAI,KAAK,CAAA,GAAI,MAAA;AACrE;AAeO,SAAS,qBAAA,CACd,YACA,EAAA,EACY;AACZ,EAAA,MAAM,SAAA,GAAY,sBAAsB,UAAU,CAAA;AAClD,EAAA,OAAO,SAAA,GAAY,iBAAA,CAAkB,SAAA,EAAW,EAAE,IAAI,EAAA,EAAG;AAC3D","file":"subagents.js","sourcesContent":["import type { AgentDefinition } from \"../../../types/agent.js\";\nimport { withToolWhitelist } from \"../concurrency/async-local-storage.js\";\n\n/**\n * Resolve a sub-agent's tool whitelist from its {@link AgentDefinition.tools}\n * (M4-6). Returns a `Set` of allowed tool names when `tools` is a non-empty\n * array, else `undefined` (unscoped — the sub-agent inherits the parent's full\n * toolset). The `Set` is the exact shape `withToolWhitelist` /\n * `ForkOptions.allowedTools` consume.\n *\n * @public\n */\nexport function subagentToolWhitelist(definition: AgentDefinition): Set<string> | undefined {\n  const { tools } = definition;\n  return Array.isArray(tools) && tools.length > 0 ? new Set(tools) : undefined;\n}\n\n/**\n * Run `fn` under the sub-agent's tool whitelist (M4-6). When the definition\n * declares `tools`, the run executes inside `withToolWhitelist(set, fn)` — so\n * every tool call the sub-agent makes is vetoed at dispatch (`checkToolWhitelist`,\n * the same enforcement forks use) unless its canonical name is whitelisted: a\n * `tools: [\"read_file\"]` sub-agent provably cannot call `write_file`/`shell_exec`.\n * Enforcement is `withToolWhitelist`, NOT `PermissionEngine`.\n *\n * An unscoped definition (no/empty `tools`) runs `fn` directly — the parent's\n * full toolset is preserved.\n *\n * @public\n */\nexport function withSubagentToolScope<T>(\n  definition: AgentDefinition,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const whitelist = subagentToolWhitelist(definition);\n  return whitelist ? withToolWhitelist(whitelist, fn) : fn();\n}\n"]}
+{"version":3,"sources":["../src/internal/runtime/skills/subagent-tool-scope.ts"],"names":[],"mappings":";;;AAYO,SAAS,sBAAsB,UAAA,EAAsD;AAC1F,EAAA,MAAM,EAAE,OAAM,GAAI,UAAA;AAClB,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,SAAS,CAAA,GAAI,IAAI,GAAA,CAAI,KAAK,CAAA,GAAI,MAAA;AACrE;AAeO,SAAS,qBAAA,CACd,YACA,EAAA,EACY;AACZ,EAAA,MAAM,SAAA,GAAY,sBAAsB,UAAU,CAAA;AAClD,EAAA,OAAO,SAAA,GAAY,iBAAA,CAAkB,SAAA,EAAW,EAAE,IAAI,EAAA,EAAG;AAC3D","file":"subagents.js","sourcesContent":["import type { AgentDefinition } from \"../../../types/agent.js\";\nimport { withToolWhitelist } from \"../../concurrency/async-local-storage.js\";\n\n/**\n * Resolve a sub-agent's tool whitelist from its {@link AgentDefinition.tools}\n * (M4-6). Returns a `Set` of allowed tool names when `tools` is a non-empty\n * array, else `undefined` (unscoped — the sub-agent inherits the parent's full\n * toolset). The `Set` is the exact shape `withToolWhitelist` /\n * `ForkOptions.allowedTools` consume.\n *\n * @public\n */\nexport function subagentToolWhitelist(definition: AgentDefinition): Set<string> | undefined {\n  const { tools } = definition;\n  return Array.isArray(tools) && tools.length > 0 ? new Set(tools) : undefined;\n}\n\n/**\n * Run `fn` under the sub-agent's tool whitelist (M4-6). When the definition\n * declares `tools`, the run executes inside `withToolWhitelist(set, fn)` — so\n * every tool call the sub-agent makes is vetoed at dispatch (`checkToolWhitelist`,\n * the same enforcement forks use) unless its canonical name is whitelisted: a\n * `tools: [\"read_file\"]` sub-agent provably cannot call `write_file`/`shell_exec`.\n * Enforcement is `withToolWhitelist`, NOT `PermissionEngine`.\n *\n * An unscoped definition (no/empty `tools`) runs `fn` directly — the parent's\n * full toolset is preserved.\n *\n * @public\n */\nexport function withSubagentToolScope<T>(\n  definition: AgentDefinition,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const whitelist = subagentToolWhitelist(definition);\n  return whitelist ? withToolWhitelist(whitelist, fn) : fn();\n}\n"]}

package/dist/subscription/define-subscription.d.cts

@@ -61,7 +61,10 @@ export interface DefineSubscriptionOptions<TInput, TOutput> {
  * @public
  */
 export declare function defineSubscription<TInput, TOutput>(opts: DefineSubscriptionOptions<TInput, TOutput>): SubscriptionDescriptor<TInput, TOutput>;
-/** SE36 — `Subscription.create` replaces `defineSubscription` (ADR 0015). @public */
+/** SE36 — `Subscription.create` replaces `defineSubscription` (ADR 0015). @public  *
+ * `Subscription.create` returns a **`SubscriptionDescriptor<TInput, TOutput>`**, not a
+ * `Subscription`. The class is the namespace; the descriptor is the product.
+ */
 export declare class Subscription {
     private constructor();
     static create<TInput, TOutput>(opts: DefineSubscriptionOptions<TInput, TOutput>): SubscriptionDescriptor<TInput, TOutput>;

package/dist/subscription/define-subscription.d.ts

@@ -61,7 +61,10 @@ export interface DefineSubscriptionOptions<TInput, TOutput> {
  * @public
  */
 export declare function defineSubscription<TInput, TOutput>(opts: DefineSubscriptionOptions<TInput, TOutput>): SubscriptionDescriptor<TInput, TOutput>;
-/** SE36 — `Subscription.create` replaces `defineSubscription` (ADR 0015). @public */
+/** SE36 — `Subscription.create` replaces `defineSubscription` (ADR 0015). @public  *
+ * `Subscription.create` returns a **`SubscriptionDescriptor<TInput, TOutput>`**, not a
+ * `Subscription`. The class is the namespace; the descriptor is the product.
+ */
 export declare class Subscription {
     private constructor();
     static create<TInput, TOutput>(opts: DefineSubscriptionOptions<TInput, TOutput>): SubscriptionDescriptor<TInput, TOutput>;