@theokit/sdk 5.12.1 → 5.13.0

package/dist/{chunk-Q6WT5535.cjs → chunk-KL7ZUMK3.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkL7JPXZ2C_cjs = require('./chunk-L7JPXZ2C.cjs');
-var chunkYOVZMN4P_cjs = require('./chunk-YOVZMN4P.cjs');
+var chunkDVP3YMDA_cjs = require('./chunk-DVP3YMDA.cjs');
 var chunkCWQPQTUZ_cjs = require('./chunk-CWQPQTUZ.cjs');
 var chunk7YUPSBDV_cjs = require('./chunk-7YUPSBDV.cjs');
 var chunkBV2MWEMV_cjs = require('./chunk-BV2MWEMV.cjs');
@@ -9,7 +9,7 @@ var chunkCGH4BCIY_cjs = require('./chunk-CGH4BCIY.cjs');
 var chunkRS7YQR4X_cjs = require('./chunk-RS7YQR4X.cjs');
 var chunkSDZ4XDWS_cjs = require('./chunk-SDZ4XDWS.cjs');
 var chunk6OCJWGVD_cjs = require('./chunk-6OCJWGVD.cjs');
-var chunkLSWHDOCL_cjs = require('./chunk-LSWHDOCL.cjs');
+var chunk4UYHP6NF_cjs = require('./chunk-4UYHP6NF.cjs');
 var chunk2ZPEDVLM_cjs = require('./chunk-2ZPEDVLM.cjs');
 var chunkQG4SXZ2A_cjs = require('./chunk-QG4SXZ2A.cjs');
 var chunkUDAKAE4Z_cjs = require('./chunk-UDAKAE4Z.cjs');
@@ -45,6 +45,7 @@ var path = require('path');
 var fs = require('fs');
 var process$1 = require('process');
 var child_process = require('child_process');
+var url = require('url');
 var zod = require('zod');
 var module$1 = require('module');
 var os = require('os');
@@ -164,7 +165,7 @@ async function agentGenerate(agent, agentModel, agentApiKey, agentLocal, input,
   const { output, maxRetries, errorStrategy, ...sendOptions } = options;
   const run = await agent.send(input, sendOptions);
   const result = await run.wait();
-  const { generateObjectImpl, GenerateObjectError } = await import('./generate-object-XBWD2PU7.cjs');
+  const { generateObjectImpl, GenerateObjectError } = await import('./generate-object-A5F576IT.cjs');
   const answer = structurableAnswerOrThrow(result, GenerateObjectError);
   const { getAgentFacade } = await import('./agent-factory-registry-UU46BUMU.cjs');
   const facade = getAgentFacade();
@@ -1623,7 +1624,7 @@ function createRealCloudRun(options) {
     conversation: []
   };
   const apiKey = chunkRNXXYF22_cjs.resolveApiKey(options.agentOptions.apiKey);
-  const baseUrl = chunkLSWHDOCL_cjs.getConfiguredBaseUrl();
+  const baseUrl = chunk4UYHP6NF_cjs.getConfiguredBaseUrl();
   const handle = new RealCloudRun(
     {
       id,
@@ -1706,7 +1707,7 @@ var RealCloudRun = class extends FixtureRunBase {
   async consumeStream(response) {
     let finalStatus = "finished";
     let finalText = "";
-    for await (const record of chunkLSWHDOCL_cjs.parseSseStream(response.body, this.controller.signal)) {
+    for await (const record of chunk4UYHP6NF_cjs.parseSseStream(response.body, this.controller.signal)) {
       const parsed = safeParse(record.data);
       if (parsed === void 0) continue;
       const update = this.applyRecord(record.event, parsed);
@@ -1873,7 +1874,7 @@ var CloudAgent = class _CloudAgent {
    */
   isFixtureMode() {
     const apiKey = chunkRNXXYF22_cjs.resolveApiKey(this.options.apiKey);
-    return chunkLSWHDOCL_cjs.isFixtureApiKey(apiKey) && chunkLSWHDOCL_cjs.getConfiguredBaseUrl() === void 0;
+    return chunk4UYHP6NF_cjs.isFixtureApiKey(apiKey) && chunk4UYHP6NF_cjs.getConfiguredBaseUrl() === void 0;
   }
   // SE9 — integrated structured output; delegates to the shared helper.
   generate(message, options) {
@@ -1928,7 +1929,7 @@ var CloudAgent = class _CloudAgent {
     const userText = typeof message === "string" ? message : message.text;
     const systemPrompt = await this.resolveSystemPromptForSend(userText, options);
     const apiKey = chunkRNXXYF22_cjs.resolveApiKey(this.options.apiKey);
-    const useRealRuntime = apiKey !== void 0 && !chunkLSWHDOCL_cjs.isFixtureApiKey(apiKey) && chunkLSWHDOCL_cjs.getConfiguredBaseUrl() !== void 0;
+    const useRealRuntime = apiKey !== void 0 && !chunk4UYHP6NF_cjs.isFixtureApiKey(apiKey) && chunk4UYHP6NF_cjs.getConfiguredBaseUrl() !== void 0;
     return useRealRuntime ? createRealCloudRun({
       agentId: this.agentId,
       model: this.model ?? { id: DEFAULT_AGENTIC_MODEL_ID },
@@ -2993,7 +2994,7 @@ async function runPostRunLifecycle(inputs) {
     try {
       const partial = await safeConversation(run);
       if (partial !== void 0) {
-        chunkYOVZMN4P_cjs.persistTurnToTranscript(sessionStore, { cwd: workspaceCwd, agentId, model }, agentId, {
+        chunkDVP3YMDA_cjs.persistTurnToTranscript(sessionStore, { cwd: workspaceCwd, agentId, model }, agentId, {
           userText,
           conversation: partial
         });
@@ -3003,11 +3004,11 @@ async function runPostRunLifecycle(inputs) {
       chunkRNXXYF22_cjs.diag(`[theokit-sdk] partial transcript write failed (${agentId}): ${msg}
 `);
     }
-    await chunkYOVZMN4P_cjs.flushSessionWrites();
+    await chunkDVP3YMDA_cjs.flushSessionWrites();
     return;
   }
   if (result.result !== void 0) {
-    chunkYOVZMN4P_cjs.appendSessionMessage(agentId, { role: "assistant", text: result.result });
+    chunkDVP3YMDA_cjs.appendSessionMessage(agentId, { role: "assistant", text: result.result });
   }
   const conversation = await safeConversation(run);
   const resolvedWindow = resolveWindowForRun(model, contextWindow);
@@ -3018,7 +3019,7 @@ async function runPostRunLifecycle(inputs) {
   }
   const lastRequestUsage = result.usage?.requests?.at(-1)?.totalTokens;
   const usageForTrigger = lastRequestUsage ?? result.usage?.totalTokens;
-  chunkYOVZMN4P_cjs.persistTurnToTranscript(
+  chunkDVP3YMDA_cjs.persistTurnToTranscript(
     sessionStore,
     { cwd: workspaceCwd, agentId, model },
     agentId,
@@ -3030,7 +3031,7 @@ async function runPostRunLifecycle(inputs) {
         // The EFFECTIVE window (after override, clamp and margin) — not the declared one. Swapping for
         // `contextWindow` here would budget against a number the clamp already rejected.
         contextWindow: effectiveWindow,
-        summarize: chunkLSWHDOCL_cjs.buildDefaultSummarizer({
+        summarize: chunk4UYHP6NF_cjs.buildDefaultSummarizer({
           agentModel: model,
           ...inputs.apiKey !== void 0 ? { apiKey: inputs.apiKey } : {}
         })
@@ -3072,7 +3073,7 @@ async function runPostRunLifecycle(inputs) {
     agentId,
     runId: result.id
   });
-  await chunkYOVZMN4P_cjs.flushSessionWrites();
+  await chunkDVP3YMDA_cjs.flushSessionWrites();
 }
 async function safeConversation(run) {
   try {
@@ -3084,6 +3085,87 @@ async function safeConversation(run) {
     return [];
   }
 }
+var WORKSPACE_TRUST = {
+  subject: "workspace plugins",
+  entries: "absolute folder realpaths"
+};
+function workspaceTrustRecordPath() {
+  return path.join(path.dirname(chunk4UYHP6NF_cjs.trustFilePath()), "trusted-workspace-plugins.json");
+}
+function readTrustedWorkspaceFolders() {
+  const path$1 = workspaceTrustRecordPath();
+  const trusted = /* @__PURE__ */ new Set();
+  for (const entry of chunk4UYHP6NF_cjs.readTrustArray(path$1, WORKSPACE_TRUST)) {
+    if (path.isAbsolute(entry)) {
+      trusted.add(entry);
+      continue;
+    }
+    chunkRNXXYF22_cjs.diag(
+      `[theokit-sdk] WARN: ${path$1} entry "${entry}" is not an absolute path \u2014 discarded (entries must be ${WORKSPACE_TRUST.entries})
+`
+    );
+  }
+  return trusted;
+}
+
+// src/internal/runtime/plugin-loader/manifest-entry-import.ts
+var warnedFolders = chunkNVXXWAU7_cjs.globalSingleton(
+  "theokit-sdk.plugins.manifest-untrusted-warned",
+  () => /* @__PURE__ */ new Set()
+);
+async function importTrustedManifestPlugins(candidates, trustedFolders) {
+  const plugins = [];
+  for (const candidate of candidates) {
+    const realFolder = realpathOrUndefined(candidate.folderPath);
+    if (realFolder === void 0 || !trustedFolders.has(realFolder)) {
+      warnUntrustedOnce(candidate, realFolder ?? candidate.folderPath);
+      continue;
+    }
+    plugins.push(await importEntry(candidate));
+  }
+  return plugins;
+}
+function realpathOrUndefined(path) {
+  try {
+    return fs.realpathSync(path);
+  } catch {
+    return void 0;
+  }
+}
+function warnUntrustedOnce(candidate, realFolder) {
+  if (warnedFolders.has(candidate.entryPath)) return;
+  warnedFolders.add(candidate.entryPath);
+  const { folder, metadata } = candidate;
+  const declared = metadata.name === folder ? "" : ` (declares name "${metadata.name}")`;
+  chunkRNXXYF22_cjs.diag(
+    `[theokit-sdk] workspace plugin folder "${folder}"${declared} is not trusted \u2014 its entry was not imported. To trust it, add "${realFolder}" to ${workspaceTrustRecordPath()} (JSON array of folder realpaths).
+`
+  );
+}
+async function importEntry(candidate) {
+  const { metadata } = candidate;
+  const entry = metadata.entry ?? "";
+  let mod;
+  try {
+    mod = await import(url.pathToFileURL(candidate.entryPath).href);
+  } catch (cause) {
+    throw new chunkCEGU5AVD_cjs.ConfigurationError(`Plugin ${metadata.name} entry failed to import: ${entry}`, {
+      code: "plugin_entry_import_failed",
+      cause
+    });
+  }
+  const plugin = mod.default;
+  if (!isGeneralPlugin(plugin)) {
+    throw new chunkCEGU5AVD_cjs.ConfigurationError(
+      `Plugin ${metadata.name} entry must default-export a general plugin (kind "general", name, register): ${entry}`,
+      { code: "plugin_entry_shape" }
+    );
+  }
+  return plugin;
+}
+function isGeneralPlugin(value) {
+  return chunkBV2MWEMV_cjs.isCodePlugin(value) && value.kind === "general" && typeof value.name === "string";
+}
 var SkillsManager = class {
   constructor(cwd, _enabled, settingSourcesIncludeProject, skillsDir, inline, compatSources = []) {
     this.cwd = cwd;
@@ -3703,7 +3785,7 @@ var HISTOGRAM_NAMES = {
 };
 function safeRequire(moduleName) {
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-Q6WT5535.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-KL7ZUMK3.cjs', document.baseURI).href)));
     return r(moduleName);
   } catch {
     return void 0;
@@ -3946,7 +4028,7 @@ var cachedOtel;
 function loadOtel() {
   if (cachedOtel === void 0) {
     try {
-      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-Q6WT5535.cjs', document.baseURI).href)));
+      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-KL7ZUMK3.cjs', document.baseURI).href)));
       const mod = r("@opentelemetry/api");
       cachedOtel = mod;
     } catch {
@@ -4579,6 +4661,12 @@ var PluginsManager = class {
   localPaths;
   compatSources;
   plugins = [];
+  /**
+   * B-686 — where each listed object was discovered. Keyed by the object, not by name: two plugins
+   * may share a declared name across roots or folders, and a field would leak a host path through
+   * `plugins.list()`. `refresh()` replaces the objects, so stale origins are collected with them.
+   */
+  #origin = /* @__PURE__ */ new WeakMap();
   async initialize() {
     this.assertCloudRules();
     if (!this.settingSourcesIncludePlugins) {
@@ -4604,6 +4692,7 @@ var PluginsManager = class {
         const cliMetadata = await loadPluginManifestFromJson(this.cwd, cliPath, folderName);
         if (this.enabled === void 0 || this.enabled.includes(cliMetadata.name)) {
           this.plugins.push(cliMetadata);
+          this.#origin.set(cliMetadata, { root: pluginsRoot, folder: folderName });
         }
         continue;
       }
@@ -4626,12 +4715,26 @@ var PluginsManager = class {
       if (this.enabled === void 0 || this.enabled.includes(metadata.name)) {
         await this.assertEntryFileExists(metadata, folderName, pluginsRoot);
         this.plugins.push(metadata);
+        this.#origin.set(metadata, { root: pluginsRoot, folder: folderName });
       }
     }
   }
   list() {
     return Promise.resolve(this.plugins);
   }
+  /** Listed native-root plugins that declare an `entry`, in list order. Reads no file. */
+  nativeEntryCandidates() {
+    const nativeRoot = path.join(chunkYQ3XC6C2_cjs.theokitConfigRoot(this.cwd), "plugins");
+    return this.plugins.flatMap((metadata) => {
+      const origin = this.#origin.get(metadata);
+      if (origin === void 0 || origin.root !== nativeRoot || metadata.entry === void 0) {
+        return [];
+      }
+      const folderPath = path.join(origin.root, origin.folder);
+      const entryPath = chunk3KIUY67P_cjs.safePathJoin(folderPath, metadata.entry);
+      return [{ metadata, folder: origin.folder, folderPath, entryPath }];
+    });
+  }
   async assertEntryFileExists(metadata, folderName, pluginsRoot) {
     const entry = metadata.entry;
     if (entry === void 0) return;
@@ -6743,7 +6846,7 @@ function applyToolResultGuard(parts, opts) {
     (p) => (
       // SE7 — guard the TEXT of a tool result (string or the text blocks of a
       // structured content); image blocks pass through untouched.
-      p.type === "tool_result" ? { ...p, content: chunkLSWHDOCL_cjs.renderToolResultContentText(p.content, (t) => guardText(t, opts)) } : p
+      p.type === "tool_result" ? { ...p, content: chunk4UYHP6NF_cjs.renderToolResultContentText(p.content, (t) => guardText(t, opts)) } : p
     )
   );
 }
@@ -7061,13 +7164,13 @@ var FallbackLlmClient = class {
   async *stream(request, signal) {
     let lastError;
     for (const client of this.clients) {
-      if (signal.aborted) throw chunkLSWHDOCL_cjs.abortError(signal);
-      const attempt = await chunkLSWHDOCL_cjs.tryFirstEvent(client, request, signal, true);
+      if (signal.aborted) throw chunk4UYHP6NF_cjs.abortError(signal);
+      const attempt = await chunk4UYHP6NF_cjs.tryFirstEvent(client, request, signal, true);
       if (attempt.kind === "handshake_error") {
         lastError = attempt.error;
         continue;
       }
-      return yield* chunkLSWHDOCL_cjs.relayStream(attempt.generator, attempt.firstResult);
+      return yield* chunk4UYHP6NF_cjs.relayStream(attempt.generator, attempt.firstResult);
     }
     if (lastError !== void 0) throw lastError;
     throw new chunkCEGU5AVD_cjs.NetworkError("FallbackLlmClient has no providers configured", {
@@ -7703,9 +7806,9 @@ function buildLoopInputs(options, runId, userText, userImages) {
       { code: "invalid_max_iterations" }
     );
   }
-  const { primary, effectiveModelId } = chunkLSWHDOCL_cjs.resolveRunProvider(options);
+  const { primary, effectiveModelId } = chunk4UYHP6NF_cjs.resolveRunProvider(options);
   const fallback = options.agentOptions.providers?.fallback;
-  const apiKeys = chunkLSWHDOCL_cjs.mergeExplicitApiKey(
+  const apiKeys = chunk4UYHP6NF_cjs.mergeExplicitApiKey(
     options.agentOptions.providers?.apiKeys,
     primary,
     options.agentOptions.apiKey
@@ -7714,7 +7817,7 @@ function buildLoopInputs(options, runId, userText, userImages) {
   const extractToolCallsFromContent = options.agentOptions.providers?.routes?.[0]?.extractToolCallsFromContent;
   const rateLimitSink = options.sendOptions.onRunEvent;
   const modelBaseUrl = options.model?.url;
-  const chain = chunkLSWHDOCL_cjs.resolveProviderChain({
+  const chain = chunk4UYHP6NF_cjs.resolveProviderChain({
     primary,
     ...modelBaseUrl !== void 0 ? { baseUrl: modelBaseUrl } : {},
     ...fallback !== void 0 ? { fallback } : {},
@@ -7849,6 +7952,7 @@ var RealLocalRun = class extends FixtureRunBase {
   }
   async initializeMcp(inputs) {
     for (const [name, client] of inputs.mcp.entries()) {
+      if (this.terminated) break;
       try {
         await client.initialize();
       } catch (cause) {
@@ -7999,7 +8103,7 @@ function buildRealRunOptions(args) {
   };
 }
 async function createFixtureRunHelper(args) {
-  const sessionMessages = chunkYOVZMN4P_cjs.getSessionMessages(args.inputs.agentId);
+  const sessionMessages = chunkDVP3YMDA_cjs.getSessionMessages(args.inputs.agentId);
   const projectMcpServers = args.inputs.settingSourcesIncludeProject ? await readProjectMcpServers(args.inputs.workspaceCwd) : {};
   return createLocalRun({
     agentId: args.inputs.agentId,
@@ -8018,7 +8122,7 @@ async function createFixtureRunHelper(args) {
 }
 async function dispatchLocalRun(args) {
   const apiKey = chunkRNXXYF22_cjs.resolveApiKey(args.inputs.options.apiKey);
-  if (chunkLSWHDOCL_cjs.shouldUseRealLocalRuntime(apiKey)) {
+  if (chunk4UYHP6NF_cjs.shouldUseRealLocalRuntime(apiKey)) {
     return createRealLocalRun(
       buildRealRunOptions({
         inputs: args.inputs,
@@ -8274,10 +8378,10 @@ async function disposeLocalAgentSession(agent) {
   agent.lifecycleAbortController.abort();
   await chunkZF2LDKQQ_cjs.withCwdMutex(`agent-send:${agent.agentId}`, () => Promise.resolve());
   disposeSessionMcpClients(agent.agentId);
-  await chunkYOVZMN4P_cjs.flushSessionWrites();
+  await chunkDVP3YMDA_cjs.flushSessionWrites();
   await flushRegistrySaves(agent.workspaceCwd);
   await disposeSessionStore(agent.sessionStore);
-  chunkYOVZMN4P_cjs.discardSession(agent.workspaceCwd, agent.agentId);
+  chunkDVP3YMDA_cjs.discardSession(agent.workspaceCwd, agent.agentId);
 }
 async function reloadLocalAgent(agent) {
   if (agent.context !== void 0) await agent.context.refresh();
@@ -9141,7 +9245,7 @@ var LocalAgentMemory = class {
   async runActiveMemoryIfEnabled(userText, priorMessages, telemetry) {
     const cfg = this.options.memory?.activeRecall;
     if (cfg?.enabled !== true || this.index === void 0) return void 0;
-    if (this.breaker === void 0) this.breaker = new chunkLSWHDOCL_cjs.CircuitBreaker();
+    if (this.breaker === void 0) this.breaker = new chunk4UYHP6NF_cjs.CircuitBreaker();
     if (this.cache === void 0) this.cache = new ActiveMemoryCache();
     const result = await runActiveMemory({
       userText,
@@ -9456,8 +9560,8 @@ async function localAgentUsePersonality(agent, name, opts) {
       registry,
       store: agent.personalityStore,
       invalidateCache: (reason) => agent.invalidateCache(reason),
-      appendSessionMessage: (msg) => chunkYOVZMN4P_cjs.appendSessionMessage(agent.agentId, msg),
-      clearSession: () => chunkYOVZMN4P_cjs.clearSession(agent.agentId),
+      appendSessionMessage: (msg) => chunkDVP3YMDA_cjs.appendSessionMessage(agent.agentId, msg),
+      clearSession: () => chunkDVP3YMDA_cjs.clearSession(agent.agentId),
       opts: opts ?? {}
     })
   );
@@ -9985,7 +10089,7 @@ async function executeSendLocked(inputs, message, options) {
   if (inputs.options.onBeforeSend !== void 0) {
     await inputs.options.onBeforeSend({
       conversationId: inputs.agentId,
-      previousMessageCount: chunkYOVZMN4P_cjs.getSessionMessages(inputs.agentId).length
+      previousMessageCount: chunkDVP3YMDA_cjs.getSessionMessages(inputs.agentId).length
     });
   }
   await inputs.runPreHook(userText);
@@ -9997,8 +10101,8 @@ async function executeSendLocked(inputs, message, options) {
     userText,
     sendOptions: options
   });
-  const priorMessages = [...chunkYOVZMN4P_cjs.getSessionMessages(inputs.agentId)];
-  chunkYOVZMN4P_cjs.appendSessionMessage(inputs.agentId, { role: "user", text: userText });
+  const priorMessages = [...chunkDVP3YMDA_cjs.getSessionMessages(inputs.agentId)];
+  chunkDVP3YMDA_cjs.appendSessionMessage(inputs.agentId, { role: "user", text: userText });
   await persistMemoryFactIfWritePrompt(inputs.workspaceCwd, inputs.options.memory, userText);
   const memoryFacts = await readMemoryForSend(inputs.workspaceCwd, inputs.options.memory, userText);
   const memoryTools = void 0;
@@ -10289,13 +10393,20 @@ var LocalAgent = class {
       workspaceCwd: this.workspaceCwd
     });
   }
+  /** B-686 — the workspace trust record is read only when a native manifest declares an entry. */
+  async importManifestPlugins() {
+    const candidates = this.pluginsManager?.nativeEntryCandidates() ?? [];
+    if (candidates.length === 0) return [];
+    return importTrustedManifestPlugins(candidates, readTrustedWorkspaceFolders());
+  }
   async initialize() {
     await this.hooksExecutor.initialize(this.settingSourcesIncludeProject);
     if (this.context !== void 0) await this.context.initialize();
     if (this.skillsManager !== void 0) await this.skillsManager.initialize();
     if (this.pluginsManager !== void 0) await this.pluginsManager.initialize();
     const codePlugins = chunkBV2MWEMV_cjs.extractCodePlugins(this.options.plugins);
-    await this.pluginManagerCode.initialize(codePlugins);
+    const manifestPlugins = await this.importManifestPlugins();
+    await this.pluginManagerCode.initialize([...codePlugins, ...manifestPlugins]);
     this.resolvedSubagents = await chunkWDVG5R2Q_cjs.loadSubagents(
       this.workspaceCwd,
       this.settingSourcesIncludeProject,
@@ -10304,7 +10415,7 @@ var LocalAgent = class {
     );
     await acquireLeaseIfPossible(this.sessionStore, this.agentId);
     try {
-      await chunkYOVZMN4P_cjs.hydrateSession(this.agentId, { store: this.sessionStore, cwd: this.workspaceCwd });
+      await chunkDVP3YMDA_cjs.hydrateSession(this.agentId, { store: this.sessionStore, cwd: this.workspaceCwd });
       await this.personalityStore.hydrate(this.agentId);
     } catch (err) {
       await releaseLeaseIfPossible(this.sessionStore, this.agentId);
@@ -10648,15 +10759,15 @@ async function maybeInjectHandoffTools(options) {
   };
 }
 function keyWillFlowToProvider(apiKey, provider) {
-  if (chunkLSWHDOCL_cjs.isFixtureApiKey(apiKey)) return false;
-  if (chunkLSWHDOCL_cjs.getConfiguredBaseUrl() !== void 0) return false;
+  if (chunk4UYHP6NF_cjs.isFixtureApiKey(apiKey)) return false;
+  if (chunk4UYHP6NF_cjs.getConfiguredBaseUrl() !== void 0) return false;
   if (provider === void 0) return false;
   const profile = chunkLO6LIUZ6_cjs.getProviderProfile(provider);
   if (profile === void 0) return false;
   return profile.authType !== "none";
 }
 function missingApiKeyMessage() {
-  const present = chunkLSWHDOCL_cjs.presentProviderCredentialEnvVars();
+  const present = chunk4UYHP6NF_cjs.presentProviderCredentialEnvVars();
   const base = `Missing API key \u2014 set ${chunkRNXXYF22_cjs.API_KEY_ENV_VAR}, or pass \`apiKey\` to Agent.create()`;
   if (present.length === 0) return `${base}.`;
   return `${base}. ${present.join(" and ")} ${present.length === 1 ? "is" : "are"} set, but a provider credential is not read from the environment automatically \u2014 pass it explicitly, e.g. \`Agent.create({ apiKey: process.env.${present[0]}, ... })\`.`;
@@ -10676,7 +10787,7 @@ async function createLocalAgent(options) {
     }
   } else {
     const willFlowToProvider = keyWillFlowToProvider(apiKey, provider);
-    const shape = chunkLSWHDOCL_cjs.validateApiKeyShape(apiKey, {
+    const shape = chunk4UYHP6NF_cjs.validateApiKeyShape(apiKey, {
       strict: willFlowToProvider,
       ...willFlowToProvider ? { provider } : {}
     });
@@ -10695,15 +10806,15 @@ async function createCloudAgent(options) {
       code: "missing_api_key"
     });
   }
-  const shape = chunkLSWHDOCL_cjs.validateApiKeyShape(apiKey);
+  const shape = chunk4UYHP6NF_cjs.validateApiKeyShape(apiKey);
   if (shape.malformed) {
     throw new chunkCEGU5AVD_cjs.AuthenticationError(shape.message, { code: "malformed_api_key" });
   }
-  const baseUrl = chunkLSWHDOCL_cjs.getConfiguredBaseUrl();
+  const baseUrl = chunk4UYHP6NF_cjs.getConfiguredBaseUrl();
   if (baseUrl === void 0) {
     return new CloudAgent(options);
   }
-  const response = await chunkLSWHDOCL_cjs.httpRequest("/v1/agents", {
+  const response = await chunk4UYHP6NF_cjs.httpRequest("/v1/agents", {
     apiKey,
     method: "POST",
     body: {
@@ -10728,7 +10839,7 @@ function resolveAgentPersistenceCwd(options) {
   return process.cwd();
 }
 async function rehydrateExistingAgent(agentId, existing, options) {
-  await chunkLSWHDOCL_cjs.discoverProviderPlugins();
+  await chunk4UYHP6NF_cjs.discoverProviderPlugins();
   await validateRehydratedAgent(agentId, existing);
   const mergedLocal = options.local !== void 0 && existing.options.local !== void 0 ? { ...existing.options.local, ...options.local } : options.local ?? existing.options.local;
   const mergedMemory = mergeResumedMemory(existing.options.memory, options.memory);
@@ -10888,7 +10999,7 @@ var Agent = class _Agent {
       pluginCount: enabledPluginNames(options.plugins).length
     });
     try {
-      await chunkLSWHDOCL_cjs.discoverProviderPlugins();
+      await chunk4UYHP6NF_cjs.discoverProviderPlugins();
       const agent = await runCreateUnderSpan(options, span);
       return agent;
     } catch (err) {
@@ -10986,7 +11097,7 @@ var Agent = class _Agent {
    * @public
    */
   static async generateObject(options) {
-    const { generateObjectImpl } = await import('./generate-object-XBWD2PU7.cjs');
+    const { generateObjectImpl } = await import('./generate-object-A5F576IT.cjs');
     return generateObjectImpl(options, {
       create: (opts) => _Agent.create(opts),
       delete: (agentId) => _Agent.delete(agentId)
@@ -11010,7 +11121,7 @@ var Agent = class _Agent {
       delete: (agentId) => _Agent.delete(agentId)
     };
     async function* wrapper() {
-      streamObjectImport ??= import('./stream-object-TEEK3CAX.cjs');
+      streamObjectImport ??= import('./stream-object-AS4YYM4B.cjs');
       const { streamObjectImpl } = await streamObjectImport;
       yield* streamObjectImpl(options, deps);
     }
@@ -11186,9 +11297,9 @@ var Agent = class _Agent {
    */
   static async compact(agentId, options = {}) {
     const reg = await requireLocalAgent(agentId, "compact");
-    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-NM56BREJ.cjs');
+    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-B7P6EU3Z.cjs');
     const { cwd, model, store } = await openLocalStore(reg);
-    return chunkYOVZMN4P_cjs.enqueueSessionWrite(
+    return chunkDVP3YMDA_cjs.enqueueSessionWrite(
       cwd,
       agentId,
       () => compactSessionTranscript({
@@ -11216,7 +11327,7 @@ var Agent = class _Agent {
    */
   static async injectSessionTurn(agentId, turn) {
     const reg = await requireLocalAgent(agentId, "injectSessionTurn");
-    const { injectSessionTurn } = await import('./inject-session-JVTZNQF6.cjs');
+    const { injectSessionTurn } = await import('./inject-session-WOH7TPDX.cjs');
     const { cwd, model, store } = await openLocalStore(reg);
     await injectSessionTurn({
       store,
@@ -11387,5 +11498,5 @@ exports.managedSettingsPathFor = managedSettingsPathFor;
 exports.openRouterMemoryEmbeddingProviderAdapter = openRouterMemoryEmbeddingProviderAdapter;
 exports.readManagedSettings = readManagedSettings;
 exports.resolveSessionDir = resolveSessionDir;
-//# sourceMappingURL=chunk-Q6WT5535.cjs.map
-//# sourceMappingURL=chunk-Q6WT5535.cjs.map
+//# sourceMappingURL=chunk-KL7ZUMK3.cjs.map
+//# sourceMappingURL=chunk-KL7ZUMK3.cjs.map