@theokit/sdk 5.1.0 → 5.2.1

package/dist/index.d.cts

@@ -2125,6 +2125,71 @@ declare class NoopMemoryProvider {
     static create(): MemoryProvider;
 }
 
+/**
+ * #583 — what tool names an agent built from these options will actually offer the model.
+ *
+ * ## The gap this closes
+ *
+ * `Agent.describe()` was the only reflection surface, and it builds its catalog as
+ * `(agent.options.tools ?? [])` — literally the array the caller passed. The SDK's own builtins were
+ * never in it. So the two states that matter most were indistinguishable:
+ *
+ *     Agent.create({ tools: [] })                       describe().tools = []   (holds a shell)
+ *     the same, withheldBuiltinTools: ["shell"]         describe().tools = []   (holds nothing)
+ *
+ * A consumer trying to confirm that a role declared read-only really is one had no instrument. What
+ * they had to do instead — measured, in a real session — was ask the agent to enumerate its own
+ * catalog: needs a credential, needs the network, and returns the list the MODEL decided to write
+ * rather than the one the runtime holds. The same session recorded a subagent answering *"I can't
+ * run shell commands in this environment"* while its catalog listed `shell`. An attempt measures the
+ * model's disposition; the catalog measures its authority.
+ *
+ * ## Why it takes options rather than an agent id
+ *
+ * The asked-for shape, and it is the right one: synchronous, credential-free, and answerable BEFORE
+ * the agent runs — so a test can compare what it declared against what the runtime will declare.
+ * `describe()` needs a registered agent and answers too late for that.
+ *
+ * ## Why it does not return a bare array
+ *
+ * Because a bare array reads as complete, and completeness is exactly what this cannot promise: MCP
+ * tools need a live connection, plugin tools and the reasoning `think` tool are assembled per run.
+ * Returning `string[]` would rebuild the defect one function over. `unresolved` names the sources
+ * that were configured and could not be enumerated — and is EMPTY when none were, which is when the
+ * list is genuinely the whole catalog.
+ *
+ * @public
+ */
+
+/** A tool source that is configured but cannot be enumerated without running the agent. */
+type UnresolvedToolSource = "mcp" | "plugins" | "reasoning";
+/** The result of {@link effectiveToolNames}. */
+interface EffectiveToolCatalog {
+    /**
+     * Every tool name resolvable from the options alone: the builtins still registered after
+     * withholding, plus the names of the custom tools declared.
+     */
+    readonly names: readonly string[];
+    /**
+     * Sources that ARE configured and could not be enumerated here. Empty means `names` is the
+     * complete catalog — which is the only condition under which it may be read as one.
+     */
+    readonly unresolved: readonly UnresolvedToolSource[];
+}
+/**
+ * The tool names an agent created with `options` will offer the model, as far as the options can say.
+ *
+ * Pure and synchronous: no credential, no network, no registration. Intended for a test that asserts
+ * a role is as narrow as it claims.
+ *
+ * ```ts
+ * const { names, unresolved } = effectiveToolNames({ tools: [], withheldBuiltinTools: ["shell"] });
+ * expect(names).toEqual([]);          // and `shell` is genuinely gone
+ * expect(unresolved).toEqual([]);     // nothing else could contribute, so [] is the whole catalog
+ * ```
+ */
+declare function effectiveToolNames(options: AgentOptions): EffectiveToolCatalog;
+
 /**
  * Task-id grammar (D368) — runtime, deliberately NOT in `types/`.
  *
@@ -4163,4 +4228,4 @@ interface WiringRecordInput<K extends string> {
  */
 declare function recordWiring<K extends string>(input: WiringRecordInput<K>): Readonly<Record<K, WiredEntity>>;
 
-export { Agent, AgentBuilder, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, decideApproval, describeAction, describeCredential, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isValidTaskId, loadProjectEnv, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, planReaping, preflightCheck, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius, withCwdMutex };
+export { Agent, AgentBuilder, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isValidTaskId, loadProjectEnv, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, planReaping, preflightCheck, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius, withCwdMutex };

package/dist/index.d.ts

@@ -2125,6 +2125,71 @@ declare class NoopMemoryProvider {
     static create(): MemoryProvider;
 }
 
+/**
+ * #583 — what tool names an agent built from these options will actually offer the model.
+ *
+ * ## The gap this closes
+ *
+ * `Agent.describe()` was the only reflection surface, and it builds its catalog as
+ * `(agent.options.tools ?? [])` — literally the array the caller passed. The SDK's own builtins were
+ * never in it. So the two states that matter most were indistinguishable:
+ *
+ *     Agent.create({ tools: [] })                       describe().tools = []   (holds a shell)
+ *     the same, withheldBuiltinTools: ["shell"]         describe().tools = []   (holds nothing)
+ *
+ * A consumer trying to confirm that a role declared read-only really is one had no instrument. What
+ * they had to do instead — measured, in a real session — was ask the agent to enumerate its own
+ * catalog: needs a credential, needs the network, and returns the list the MODEL decided to write
+ * rather than the one the runtime holds. The same session recorded a subagent answering *"I can't
+ * run shell commands in this environment"* while its catalog listed `shell`. An attempt measures the
+ * model's disposition; the catalog measures its authority.
+ *
+ * ## Why it takes options rather than an agent id
+ *
+ * The asked-for shape, and it is the right one: synchronous, credential-free, and answerable BEFORE
+ * the agent runs — so a test can compare what it declared against what the runtime will declare.
+ * `describe()` needs a registered agent and answers too late for that.
+ *
+ * ## Why it does not return a bare array
+ *
+ * Because a bare array reads as complete, and completeness is exactly what this cannot promise: MCP
+ * tools need a live connection, plugin tools and the reasoning `think` tool are assembled per run.
+ * Returning `string[]` would rebuild the defect one function over. `unresolved` names the sources
+ * that were configured and could not be enumerated — and is EMPTY when none were, which is when the
+ * list is genuinely the whole catalog.
+ *
+ * @public
+ */
+
+/** A tool source that is configured but cannot be enumerated without running the agent. */
+type UnresolvedToolSource = "mcp" | "plugins" | "reasoning";
+/** The result of {@link effectiveToolNames}. */
+interface EffectiveToolCatalog {
+    /**
+     * Every tool name resolvable from the options alone: the builtins still registered after
+     * withholding, plus the names of the custom tools declared.
+     */
+    readonly names: readonly string[];
+    /**
+     * Sources that ARE configured and could not be enumerated here. Empty means `names` is the
+     * complete catalog — which is the only condition under which it may be read as one.
+     */
+    readonly unresolved: readonly UnresolvedToolSource[];
+}
+/**
+ * The tool names an agent created with `options` will offer the model, as far as the options can say.
+ *
+ * Pure and synchronous: no credential, no network, no registration. Intended for a test that asserts
+ * a role is as narrow as it claims.
+ *
+ * ```ts
+ * const { names, unresolved } = effectiveToolNames({ tools: [], withheldBuiltinTools: ["shell"] });
+ * expect(names).toEqual([]);          // and `shell` is genuinely gone
+ * expect(unresolved).toEqual([]);     // nothing else could contribute, so [] is the whole catalog
+ * ```
+ */
+declare function effectiveToolNames(options: AgentOptions): EffectiveToolCatalog;
+
 /**
  * Task-id grammar (D368) — runtime, deliberately NOT in `types/`.
  *
@@ -4163,4 +4228,4 @@ interface WiringRecordInput<K extends string> {
  */
 declare function recordWiring<K extends string>(input: WiringRecordInput<K>): Readonly<Record<K, WiredEntity>>;
 
-export { Agent, AgentBuilder, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, decideApproval, describeAction, describeCredential, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isValidTaskId, loadProjectEnv, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, planReaping, preflightCheck, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius, withCwdMutex };
+export { Agent, AgentBuilder, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isValidTaskId, loadProjectEnv, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, planReaping, preflightCheck, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius, withCwdMutex };

package/dist/index.js

@@ -8,15 +8,15 @@ import { Workflow, agentStep } from './chunk-HFEJE7AC.js';
 export { Workflow, agentStep, fn } from './chunk-HFEJE7AC.js';
 import './chunk-GBCVPKHE.js';
 import './chunk-HY66GLM6.js';
-export { Cron } from './chunk-XU6MLSC6.js';
-import { MEMORY_EMBEDDING_ADAPTERS, resolveSessionDir, DEFAULT_AGENTIC_MODEL_ID, Agent } from './chunk-OYD3U3LY.js';
-export { Agent, AgentBuilder, Tool, ToolError, UsageAccumulator, computeCost, getPricingEntry } from './chunk-OYD3U3LY.js';
+export { Cron } from './chunk-WHTMFN4Q.js';
+import { MEMORY_EMBEDDING_ADAPTERS, resolveSessionDir, DEFAULT_AGENTIC_MODEL_ID, Agent } from './chunk-43H4EBS2.js';
+export { Agent, AgentBuilder, Tool, ToolError, UsageAccumulator, computeCost, getPricingEntry } from './chunk-43H4EBS2.js';
 import { configure, submit, list, get, cancel, subscribe } from './chunk-K2VMFZQ5.js';
 export { emitRunEvent } from './chunk-K2VMFZQ5.js';
 import './chunk-AWINL3ZC.js';
 import './chunk-K2BQQ445.js';
 import './chunk-7SZAV6QG.js';
-import './chunk-AW6F6HZR.js';
+import './chunk-AI4MXACC.js';
 import './chunk-2SFBB54R.js';
 import './chunk-55GB6JYQ.js';
 import './chunk-H73MEMQB.js';
@@ -55,8 +55,8 @@ import { withCwdMutex } from './chunk-Q5EWJPRY.js';
 export { withCwdMutex } from './chunk-Q5EWJPRY.js';
 export { TASK_RESERVED_PREFIXES, isValidTaskId } from './chunk-EIQFAOFD.js';
 import { replaceFileAtomic } from './chunk-3JHIFQ4I.js';
-import './chunk-OQRGVTQF.js';
-import './chunk-WMWEI3NS.js';
+import './chunk-DLFWMJE3.js';
+import './chunk-RP3VXJMA.js';
 import './chunk-JNAA4G4H.js';
 import { estimateTokens, CHARS_PER_TOKEN } from './chunk-6M2OIS4Y.js';
 export { estimateTokens } from './chunk-6M2OIS4Y.js';
@@ -67,7 +67,7 @@ import './chunk-AGACYRJ2.js';
 import './chunk-JMDDYA22.js';
 import './chunk-V22DZIXO.js';
 import './chunk-NJWYQWDL.js';
-import { BudgetExceededError, TheokitAgentError, MemoryAdapterError, ConfigurationError, AuthenticationError } from './chunk-ALUN2B4W.js';
+import { BudgetExceededError, ConfigurationError, TheokitAgentError, MemoryAdapterError, AuthenticationError } from './chunk-ALUN2B4W.js';
 export { AgentDisposedError, AgentRunError, AuthenticationError, BudgetExceededError, ConfigurationError, IntegrationNotConnectedError, InvalidTaskIdError, MemoryAdapterError, NetworkError, RateLimitError, TaskNotFoundError, TheokitAgentError, UnknownAgentError, UnsupportedBudgetOperationError, UnsupportedRunOperationError, UnsupportedTaskOperationError, isTransientError } from './chunk-ALUN2B4W.js';
 import { diag, redactSecrets, addPattern, resolveApiKey } from './chunk-CZJ6Q7CW.js';
 export { setDiagnosticsSink } from './chunk-CZJ6Q7CW.js';
@@ -919,6 +919,48 @@ var NoopMemoryProvider = class {
     return createNoopMemoryProvider();
   }
 };
+
+// src/internal/runtime/validation/effective-tools.ts
+var ALWAYS_REGISTERED = ["shell"];
+var MEMORY_BUILTINS = ["memory_search", "memory_get"];
+function effectiveToolNames(options) {
+  refuseCreatedTool(options);
+  return { names: resolvableNames(options), unresolved: unresolvableSources(options) };
+}
+function refuseCreatedTool(options) {
+  const candidate = options;
+  if (candidate.handler === void 0 || candidate.inputSchema === void 0) return;
+  throw new ConfigurationError(
+    `effectiveToolNames received a created tool${typeof candidate.name === "string" ? ` ("${candidate.name}")` : ""}, not AgentOptions. \`SubAgent.create()\` returns a CustomTool and closes its spec inside the handler, so the spec cannot be recovered from it. Pass the spec you built it from \u2014 keep it in a variable, or extract it into a function the test can call.`,
+    { code: "effective_tools_expected_options" }
+  );
+}
+function resolvableNames(options) {
+  const withheld = new Set(options.withheldBuiltinTools ?? []);
+  const builtins = [
+    ...ALWAYS_REGISTERED,
+    ...options.memory?.enabled === true ? MEMORY_BUILTINS : []
+  ];
+  return [
+    ...builtins.filter((builtin) => !withheld.has(builtin)),
+    ...(options.tools ?? []).map((tool) => tool.name)
+  ];
+}
+function unresolvableSources(options) {
+  const unresolved = [];
+  if (options.mcpServers !== void 0 && Object.keys(options.mcpServers).length > 0) {
+    unresolved.push("mcp");
+  }
+  if (hasPlugins(options.plugins)) unresolved.push("plugins");
+  if (options.reasoning === true) unresolved.push("reasoning");
+  return unresolved;
+}
+function hasPlugins(plugins) {
+  if (plugins === void 0) return false;
+  if (Array.isArray(plugins)) return plugins.length > 0;
+  const enabled = plugins.enabled;
+  return enabled === void 0 || enabled.length > 0;
+}
 var JobQueue = class {
   jobs = /* @__PURE__ */ new Map();
   controllers = /* @__PURE__ */ new Map();
@@ -1750,7 +1792,7 @@ function isBuiltAgent(m) {
   return typeof m.send === "function";
 }
 async function materialize(def, index) {
-  const { Agent: Agent2 } = await import('./agent-N6WJ54ML.js');
+  const { Agent: Agent2 } = await import('./agent-VUNM33WJ.js');
   return Agent2.create({
     // `AgentDefinition.model` admits the sentinel `'inherit'`, which is not a model id. Inheriting
     // here means "declare nothing and let the default apply" — forwarding the literal would create
@@ -2284,6 +2326,6 @@ function recordWiring(input) {
   return record;
 }
 
-export { AgentFactory, Budget, EventBus, JobQueue, LayerOrderError, LiveSessionError, Memory, NoopMemoryProvider, PermissionEngine, PermissionPlugin, Plugin, Provider, RetentionPolicyError, SOVEREIGN_ENV_KEYS, Security, Skill, SkillReadTool, Squad, Task, Theokit, TokenLimiter, UngatedCapabilityError, UnicodeNormalizer, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, createCounterBudgetTracker, decideApproval, describeAction, describeCredential, evaluateBlastRadius, extractRawId, foldLayers, guardSessionDestruction, inferApiMode, loadProjectEnv, migrateSqliteToLance2 as migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, planReaping, preflightCheck, readSessionMessages2 as readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };
+export { AgentFactory, Budget, EventBus, JobQueue, LayerOrderError, LiveSessionError, Memory, NoopMemoryProvider, PermissionEngine, PermissionPlugin, Plugin, Provider, RetentionPolicyError, SOVEREIGN_ENV_KEYS, Security, Skill, SkillReadTool, Squad, Task, Theokit, TokenLimiter, UngatedCapabilityError, UnicodeNormalizer, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, createCounterBudgetTracker, decideApproval, describeAction, describeCredential, effectiveToolNames, evaluateBlastRadius, extractRawId, foldLayers, guardSessionDestruction, inferApiMode, loadProjectEnv, migrateSqliteToLance2 as migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, planReaping, preflightCheck, readSessionMessages2 as readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map