@theokit/sdk 5.12.1 → 5.14.0

package/dist/{chunk-BO3PV3OP.js → chunk-TDED5XES.js}

@@ -142,6 +142,21 @@ var WorkflowResumeStepNotFoundError = class extends TheokitAgentError {
   workflowName;
   name = "WorkflowResumeStepNotFoundError";
 };
+var WorkflowResumeWorkflowMismatchError = class extends TheokitAgentError {
+  constructor(runId, snapshotWorkflowName, workflowName) {
+    super(
+      `Cannot resume run "${runId}" with workflow "${workflowName}": the run was suspended by workflow "${snapshotWorkflowName}".`,
+      { code: "workflow_resume_workflow_mismatch", isRetryable: false }
+    );
+    this.runId = runId;
+    this.snapshotWorkflowName = snapshotWorkflowName;
+    this.workflowName = workflowName;
+  }
+  runId;
+  snapshotWorkflowName;
+  workflowName;
+  name = "WorkflowResumeWorkflowMismatchError";
+};
 var WorkflowParallelError = class extends AggregateError {
   constructor(errors, stepId) {
     super(errors, `${errors.length} branch(es) failed in parallel step "${stepId}".`);
@@ -277,6 +292,6 @@ function __resetSnapshotStoresForTests() {
   memoryStore.map.clear();
 }
 
-export { WorkflowAlreadyRunningError, WorkflowCompensateNotImplementedError, WorkflowDuplicateStepIdError, WorkflowInputError, WorkflowMaxIterationsExceededError, WorkflowNestedError, WorkflowNotSerializableError, WorkflowOutputError, WorkflowParallelError, WorkflowResumeStepNotFoundError, WorkflowSnapshotNotFoundError, WorkflowStateError, __resetSnapshotStoresForTests, getSnapshotStoreFor };
-//# sourceMappingURL=chunk-BO3PV3OP.js.map
-//# sourceMappingURL=chunk-BO3PV3OP.js.map
+export { WorkflowAlreadyRunningError, WorkflowCompensateNotImplementedError, WorkflowDuplicateStepIdError, WorkflowInputError, WorkflowMaxIterationsExceededError, WorkflowNestedError, WorkflowNotSerializableError, WorkflowOutputError, WorkflowParallelError, WorkflowResumeStepNotFoundError, WorkflowResumeWorkflowMismatchError, WorkflowSnapshotNotFoundError, WorkflowStateError, __resetSnapshotStoresForTests, getSnapshotStoreFor };
+//# sourceMappingURL=chunk-TDED5XES.js.map
+//# sourceMappingURL=chunk-TDED5XES.js.map

package/dist/chunk-TDED5XES.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workflow-errors.ts","../src/internal/workflow/snapshot-store.ts"],"names":[],"mappings":";;;;;;AA2BO,IAAM,4BAAA,GAAN,cAA2C,iBAAA,CAAkB;AAAA,EAElE,YAA4B,MAAA,EAAgB;AAC1C,IAAA,KAAA,CAAM,CAAA,mBAAA,EAAsB,MAAM,CAAA,cAAA,CAAA,EAAkB;AAAA,MAClD,IAAA,EAAM,4BAAA;AAAA,MACN,WAAA,EAAa;AAAA,KACd,CAAA;AAJyB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAK5B;AAAA,EAL4B,MAAA;AAAA,EADV,IAAA,GAAO,8BAAA;AAO3B;AAMO,IAAM,kBAAA,GAAN,cAAiC,iBAAA,CAAkB;AAAA,EAExD,WAAA,CACkB,cACA,MAAA,EAChB;AACA,IAAA,KAAA,CAAM,CAAA,UAAA,EAAa,YAAY,CAAA,kCAAA,EAAqC,MAAM,CAAA,CAAA,EAAI;AAAA,MAC5E,IAAA,EAAM,wBAAA;AAAA,MACN,WAAA,EAAa;AAAA,KACd,CAAA;AANe,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAMlB;AAAA,EAPkB,YAAA;AAAA,EACA,MAAA;AAAA,EAHA,IAAA,GAAO,oBAAA;AAU3B;AAMO,IAAM,mBAAA,GAAN,cAAkC,iBAAA,CAAkB;AAAA,EAEzD,WAAA,CACkB,cACA,MAAA,EAChB;AACA,IAAA,KAAA,CAAM,CAAA,UAAA,EAAa,YAAY,CAAA,mCAAA,EAAsC,MAAM,CAAA,CAAA,EAAI;AAAA,MAC7E,IAAA,EAAM,yBAAA;AAAA,MACN,WAAA,EAAa;AAAA,KACd,CAAA;AANe,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAMlB;AAAA,EAPkB,YAAA;AAAA,EACA,MAAA;AAAA,EAHA,IAAA,GAAO,qBAAA;AAU3B;AAMO,IAAM,kBAAA,GAAN,cAAiC,iBAAA,CAAkB;AAAA,EAExD,WAAA,CACkB,cACA,MAAA,EAChB;AACA,IAAA,KAAA,CAAM,CAAA,UAAA,EAAa,YAAY,CAAA,kCAAA,EAAqC,MAAM,CAAA,CAAA,EAAI;AAAA,MAC5E,IAAA,EAAM,wBAAA;AAAA,MACN,WAAA,EAAa;AAAA,KACd,CAAA;AANe,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAMlB;AAAA,EAPkB,YAAA;AAAA,EACA,MAAA;AAAA,EAHA,IAAA,GAAO,oBAAA;AAU3B;AAQO,IAAM,mBAAA,GAAN,cAAkC,iBAAA,CAAkB;AAAA,EAEzD,WAAA,CACkB,MAAA,EACA,SAAA,EACA,WAAA,EACA,UAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,iBAAA,EAAoB,SAAS,CAAA,SAAA,EAAY,MAAM,yBAAyB,WAAW,CAAA,CAAA,EACjF,gBAAgB,WAAA,GACZ,gFAAA,GACA,EACN,CAAA,EAAG,UAAA,GAAa,KAAK,UAAA,CAAW,IAAI,KAAK,UAAA,CAAW,OAAO,KAAK,EAAE,CAAA,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAKlE;AAAA,QACE,IAAA,EAAM,wBAAA;AAAA,QACN,WAAA,EAAa,KAAA;AAAA,QACb,GAAI,UAAA,GACA,EAAE,OAAO,MAAA,CAAO,MAAA,CAAO,IAAI,KAAA,CAAM,UAAA,CAAW,OAAO,CAAA,EAAG,EAAE,IAAA,EAAM,UAAA,CAAW,MAAM,CAAA,KAC/E;AAAC;AACP,KACF;AAtBgB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AACA,IAAA,IAAA,CAAA,WAAA,GAAA,WAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EAoBlB;AAAA,EAvBkB,MAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EALA,IAAA,GAAO,qBAAA;AA0B3B;AAaO,IAAM,2BAAA,GAAN,cAA0C,iBAAA,CAAkB;AAAA,EAEjE,WAAA,CACkB,cACA,KAAA,EAChB;AACA,IAAA,KAAA,CAAM,CAAA,UAAA,EAAa,YAAY,CAAA,OAAA,EAAU,KAAK,CAAA,oBAAA,CAAA,EAAwB;AAAA,MACpE,IAAA,EAAM,0BAAA;AAAA,MACN,WAAA,EAAa;AAAA,KACd,CAAA;AANe,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AACA,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AAAA,EAMlB;AAAA,EAPkB,YAAA;AAAA,EACA,KAAA;AAAA,EAHA,IAAA,GAAO,6BAAA;AAU3B;AAUO,IAAM,6BAAA,GAAN,cAA4C,iBAAA,CAAkB;AAAA,EAEnE,YAA4B,KAAA,EAAe;AACzC,IAAA,KAAA,CAAM,CAAA,6BAAA,EAAgC,KAAK,CAAA,0CAAA,CAAA,EAA8C;AAAA,MACvF,IAAA,EAAM,6BAAA;AAAA,MACN,WAAA,EAAa;AAAA,KACd,CAAA;AAJyB,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AAAA,EAK5B;AAAA,EAL4B,KAAA;AAAA,EADV,IAAA,GAAO,+BAAA;AAO3B;AAWO,IAAM,kCAAA,GAAN,cAAiD,iBAAA,CAAkB;AAAA,EAExE,WAAA,CACkB,QACA,aAAA,EAChB;AACA,IAAA,KAAA,CAAM,CAAA,MAAA,EAAS,MAAM,CAAA,2BAAA,EAA8B,aAAa,CAAA,EAAA,CAAA,EAAM;AAAA,MACpE,IAAA,EAAM,kCAAA;AAAA,MACN,WAAA,EAAa;AAAA,KACd,CAAA;AANe,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,aAAA,GAAA,aAAA;AAAA,EAMlB;AAAA,EAPkB,MAAA;AAAA,EACA,aAAA;AAAA,EAHA,IAAA,GAAO,oCAAA;AAU3B;AAGO,IAAM,4BAAA,GAAN,cAA2C,iBAAA,CAAkB;AAAA,EAElE,WAAA,CACkB,QACA,UAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2BAAA,EAA8B,MAAM,CAAA,+BAAA,EAAkC,UAAA,CAAW,OAAO,CAAA,0HAAA,CAAA;AAAA,MAExF,EAAE,IAAA,EAAM,2BAAA,EAA6B,WAAA,EAAa,KAAA;AAAM,KAC1D;AAPgB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EAOlB;AAAA,EARkB,MAAA;AAAA,EACA,UAAA;AAAA,EAHA,IAAA,GAAO,8BAAA;AAW3B;AAGO,IAAM,+BAAA,GAAN,cAA8C,iBAAA,CAAkB;AAAA,EAErE,WAAA,CACkB,QACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,qBAAA,EAAwB,MAAM,CAAA,yBAAA,EAA4B,YAAY,CAAA,sDAAA,CAAA;AAAA,MAEtE,EAAE,IAAA,EAAM,gCAAA,EAAkC,WAAA,EAAa,KAAA;AAAM,KAC/D;AAPgB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAAA,EAOlB;AAAA,EARkB,MAAA;AAAA,EACA,YAAA;AAAA,EAHA,IAAA,GAAO,iCAAA;AAW3B;AAWO,IAAM,mCAAA,GAAN,cAAkD,iBAAA,CAAkB;AAAA,EAEzE,WAAA,CACkB,KAAA,EACA,oBAAA,EACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,mBAAA,EAAsB,KAAK,CAAA,iBAAA,EAAoB,YAAY,yCACnB,oBAAoB,CAAA,EAAA,CAAA;AAAA,MAC5D,EAAE,IAAA,EAAM,mCAAA,EAAqC,WAAA,EAAa,KAAA;AAAM,KAClE;AARgB,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AACA,IAAA,IAAA,CAAA,oBAAA,GAAA,oBAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAAA,EAOlB;AAAA,EATkB,KAAA;AAAA,EACA,oBAAA;AAAA,EACA,YAAA;AAAA,EAJA,IAAA,GAAO,qCAAA;AAY3B;AAgBO,IAAM,qBAAA,GAAN,cAAoC,cAAA,CAAe;AAAA,EAExD,WAAA,CACE,QACgB,MAAA,EAChB;AACA,IAAA,KAAA,CAAM,QAAQ,CAAA,EAAG,MAAA,CAAO,MAAM,CAAA,qCAAA,EAAwC,MAAM,CAAA,EAAA,CAAI,CAAA;AAFhE,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAGlB;AAAA,EAHkB,MAAA;AAAA,EAHA,IAAA,GAAO,uBAAA;AAO3B;AAGO,IAAM,qCAAA,GAAN,cAAoD,iBAAA,CAAkB;AAAA,EAE3E,YAA4B,MAAA,EAAgB;AAC1C,IAAA,KAAA;AAAA,MACE,SAAS,MAAM,CAAA,4GAAA,CAAA;AAAA,MAEf,EAAE,IAAA,EAAM,qCAAA,EAAuC,WAAA,EAAa,KAAA;AAAM,KACpE;AAL0B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAM5B;AAAA,EAN4B,MAAA;AAAA,EADV,IAAA,GAAO,uCAAA;AAQ3B;ACxPA,IAAM,gCAAN,MAAqE;AAAA,EAClD,GAAA,uBAAU,GAAA,EAA8B;AAAA,EAEzD,MAAM,KAAK,QAAA,EAA2C;AAEpD,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,UAAU,QAAQ,CAAA;AAAA,IACzB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,4BAAA;AAAA,QACR,QAAA,CAAS,aAAA;AAAA,QACT,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC;AAAA,OACpD;AAAA,IACF;AACA,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,QAAA,CAAS,KAAA,EAAO,QAAQ,CAAA;AAAA,EACvC;AAAA,EACA,MAAM,KAAK,KAAA,EAAsD;AAC/D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA;AAAA,EAC3B;AAAA,EACA,MAAM,OAAO,KAAA,EAA8B;AACzC,IAAA,IAAA,CAAK,GAAA,CAAI,OAAO,KAAK,CAAA;AAAA,EACvB;AAAA,EACA,MAAM,KACJ,YAAA,EACsF;AACtF,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,IAAI,MAAA,EAAQ,EACzB,MAAA,CAAO,CAAC,CAAA,KAAM,YAAA,KAAiB,UAAa,CAAA,CAAE,YAAA,KAAiB,YAAY,CAAA,CAC3E,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACX,OAAO,CAAA,CAAE,KAAA;AAAA,MACT,cAAc,CAAA,CAAE,YAAA;AAAA,MAChB,aAAa,CAAA,CAAE;AAAA,KACjB,CAAE,CAAA;AAAA,EACN;AACF,CAAA;AAIA,IAAM,gCAAN,MAAqE;AAAA,EACnE,YAA6B,GAAA,EAAa;AAAb,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAc;AAAA,EAAd,GAAA;AAAA,EAErB,SAAS,KAAA,EAAuB;AACtC,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,EAAK,CAAA,EAAG,KAAK,CAAA,KAAA,CAAO,CAAA;AAAA,EACvC;AAAA,EAEA,MAAM,KAAK,QAAA,EAA2C;AACpD,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI;AACF,MAAA,UAAA,GAAa,IAAA,CAAK,UAAU,QAAQ,CAAA;AAAA,IACtC,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,4BAAA;AAAA,QACR,QAAA,CAAS,aAAA;AAAA,QACT,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC;AAAA,OACpD;AAAA,IACF;AACA,IAAA,MAAM,MAAM,IAAA,CAAK,GAAA,EAAK,EAAE,SAAA,EAAW,MAAM,CAAA;AACzC,IAAA,MAAM,gBAAgB,IAAA,CAAK,QAAA,CAAS,QAAA,CAAS,KAAK,GAAG,UAAU,CAAA;AAAA,EACjE;AAAA,EAEA,MAAM,KAAK,KAAA,EAAsD;AAC/D,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,QAAA,CAAS,KAAK,QAAA,CAAS,KAAK,GAAG,MAAM,CAAA;AACvD,MAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,IACvB,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAA8B,IAAA,KAAS,QAAA,EAAU,OAAO,MAAA;AAC7D,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,KAAA,EAA8B;AACzC,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,MAAM,OAAO,aAAkB,CAAA,EAAG,OAAO,IAAA,CAAK,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,IACtE,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAA8B,IAAA,KAAS,QAAA,EAAU,MAAM,GAAA;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAc,kBAAA,GAAwC;AACpD,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAA;AAAA,IAC/B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAA8B,IAAA,KAAS,QAAA,EAAU,OAAO,EAAC;AAC9D,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,iBAAiB,IAAA,EAAqD;AAClF,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,QAAA,CAAS,IAAA,CAAK,KAAK,GAAA,EAAK,IAAI,GAAG,MAAM,CAAA;AACvD,MAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,IACvB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,YAAA,EACsF;AACtF,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,kBAAA,EAAmB;AAC9C,IAAA,MAAM,UAA+E,EAAC;AACtF,IAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,MAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,OAAO,CAAA,EAAG;AAC7B,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,gBAAA,CAAiB,IAAI,CAAA;AAC7C,MAAA,IAAI,SAAS,MAAA,EAAW;AACxB,MAAA,IAAI,YAAA,KAAiB,MAAA,IAAa,IAAA,CAAK,YAAA,KAAiB,YAAA,EAAc;AACtE,MAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,QACX,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,cAAc,IAAA,CAAK,YAAA;AAAA,QACnB,aAAa,IAAA,CAAK;AAAA,OACnB,CAAA;AAAA,IACH;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AACF,CAAA;AAIA,IAAM,WAAA,GAAc,IAAI,6BAAA,EAA8B;AACtD,IAAM,UAAA,uBAAiB,GAAA,EAA2C;AAE3D,SAAS,oBAAoB,OAAA,EAAiD;AACnF,EAAA,IAAI,OAAA,CAAQ,WAAA,EAAa,OAAA,KAAY,MAAA,EAAQ;AAC3C,IAAA,MAAM,GAAA,GAAM,QAAQ,WAAA,CAAY,GAAA;AAChC,IAAA,IAAI,KAAA,GAAQ,UAAA,CAAW,GAAA,CAAI,GAAG,CAAA;AAC9B,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA,KAAA,GAAQ,IAAI,8BAA8B,GAAG,CAAA;AAC7C,MAAA,UAAA,CAAW,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IAC3B;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,WAAA;AACT;AAGO,SAAS,6BAAA,GAAsC;AACpD,EAAA,UAAA,CAAW,KAAA,EAAM;AAGjB,EAAC,WAAA,CAAoB,IAAI,KAAA,EAAM;AACjC","file":"chunk-TDED5XES.js","sourcesContent":["/**\n * The workflow error hierarchy — runtime classes, deliberately NOT in `types/`.\n *\n * `types/index.ts` calls itself \"the canonical public contract\" and re-exports every sibling with\n * `export type *`, which cannot carry a value; `.dependency-cruiser.cjs` restates the same rule as\n * \"src/types/* are pure type definitions\". These twelve classes lived in `types/workflow.ts` anyway\n * and reached consumers only because the DTS rollup hoists a declaration the runtime bundle never\n * emitted — the shape that shipped #279 for `isValidTaskId`. `tests/lint/types-are-types-only.test.ts`\n * is what stops it recurring.\n *\n * The home mirrors `task-errors.ts`: errors for one public surface, next to it, at the src root.\n * Re-exported by name from `workflow.ts`, so `@theokit/sdk/workflow` is unchanged.\n *\n * @public\n */\n\nimport { TheokitAgentError } from \"./errors-base.js\";\nimport type { WorkflowRun } from \"./types/workflow.js\";\n\n/**\n * Thrown by `.commit()` when one step id appears twice anywhere in the workflow — including inside a\n * parallel branch, a branch predicate, the fallback, and the inner step of a `foreach` or `dowhile`.\n *\n * Ids address steps in snapshots and on resume, so this is refused at build time rather than\n * discovered mid-run. Workflows nested with `workflowStep()` are exempt: the child runs in its own\n * executor with its own id-space, so its ids cannot collide with the parent's.\n */\nexport class WorkflowDuplicateStepIdError extends TheokitAgentError {\n  override readonly name = \"WorkflowDuplicateStepIdError\";\n  constructor(public readonly stepId: string) {\n    super(`Duplicate step id \"${stepId}\" in workflow.`, {\n      code: \"workflow_duplicate_step_id\",\n      isRetryable: false,\n    });\n  }\n}\n\n/**\n * SE27 — the whole-workflow `inputSchema` rejected `run(input)` (before step 1).\n * `detail` is a pre-formatted issues summary (a string, NOT Zod's `ZodIssue[]`).\n */\nexport class WorkflowInputError extends TheokitAgentError {\n  override readonly name = \"WorkflowInputError\";\n  constructor(\n    public readonly workflowName: string,\n    public readonly detail: string,\n  ) {\n    super(`Workflow \"${workflowName}\" input failed schema validation: ${detail}`, {\n      code: \"workflow_input_invalid\",\n      isRetryable: false,\n    });\n  }\n}\n\n/**\n * SE27 — the whole-workflow `outputSchema` rejected the final output (on `completed`).\n * `detail` is a pre-formatted issues summary (a string, NOT Zod's `ZodIssue[]`).\n */\nexport class WorkflowOutputError extends TheokitAgentError {\n  override readonly name = \"WorkflowOutputError\";\n  constructor(\n    public readonly workflowName: string,\n    public readonly detail: string,\n  ) {\n    super(`Workflow \"${workflowName}\" output failed schema validation: ${detail}`, {\n      code: \"workflow_output_invalid\",\n      isRetryable: false,\n    });\n  }\n}\n\n/**\n * SE29 — `WorkflowOptions.stateSchema` rejected an `initialState` or a\n * `setState(next)` call. `detail` is a pre-formatted issues summary.\n */\nexport class WorkflowStateError extends TheokitAgentError {\n  override readonly name = \"WorkflowStateError\";\n  constructor(\n    public readonly workflowName: string,\n    public readonly detail: string,\n  ) {\n    super(`Workflow \"${workflowName}\" state failed schema validation: ${detail}`, {\n      code: \"workflow_state_invalid\",\n      isRetryable: false,\n    });\n  }\n}\n\n/**\n * SE30 — a nested workflow (via `workflowStep`) did not `complete`. A nested\n * `suspended` is NOT resumable in v1 (resume continues AFTER the step, so the\n * child would be skipped) — restructure with a top-level suspend. A nested\n * `failed`/`cancelled` fails the parent step with the child's error attached.\n */\nexport class WorkflowNestedError extends TheokitAgentError {\n  override readonly name = \"WorkflowNestedError\";\n  constructor(\n    public readonly stepId: string,\n    public readonly childName: string,\n    public readonly childStatus: Exclude<WorkflowRun[\"status\"], \"completed\">,\n    public readonly childError?: { name: string; message: string },\n  ) {\n    super(\n      `Nested workflow \"${childName}\" (step \"${stepId}\") ended with status \"${childStatus}\"${\n        childStatus === \"suspended\"\n          ? \" — nested suspend/resume is not supported in v1 (use a top-level suspend)\"\n          : \"\"\n      }${childError ? `: ${childError.name}: ${childError.message}` : \"\"}`,\n      // Reconstruct a synthetic Error from the serialized child-error shape so\n      // debuggers surface the nested cause chain — the original Error instance is\n      // lost at the WorkflowRun serialization boundary, so this is the best\n      // achievable without changing the run protocol.\n      {\n        code: \"workflow_nested_failed\",\n        isRetryable: false,\n        ...(childError\n          ? { cause: Object.assign(new Error(childError.message), { name: childError.name }) }\n          : {}),\n      },\n    );\n  }\n}\n\n/**\n * Thrown out of `Workflow.run()` — one of the few workflow failures that rejects instead of arriving\n * as `run.status === \"failed\"` — when the committed workflow already has a run in flight under the\n * same run id.\n *\n * The lock key pairs the id minted at `.commit()` with the run id, not `WorkflowOptions.name`, so\n * two workflows sharing a name are independent and concurrent runs with distinct minted ids never\n * collide. In practice this only fires when a caller pins `WorkflowRunOptions.runId`, or resumes a\n * run id that is still executing. The registry is an in-process map: a crash releases every lock, and\n * it says nothing about runs in other processes.\n */\nexport class WorkflowAlreadyRunningError extends TheokitAgentError {\n  override readonly name = \"WorkflowAlreadyRunningError\";\n  constructor(\n    public readonly workflowName: string,\n    public readonly runId: string,\n  ) {\n    super(`Workflow \"${workflowName}\" run \"${runId}\" already in-flight.`, {\n      code: \"workflow_already_running\",\n      isRetryable: true,\n    });\n  }\n}\n\n/**\n * Thrown by `Workflow.resume()` when no snapshot exists for the given run id.\n *\n * The message suggests configuring persistence, which is the common cause but not the only one. The\n * run may never have suspended; it may have suspended under the default memory backend in a process\n * that has since exited; or the snapshot may already have been consumed, since resume deletes it\n * before re-entering the executor and a second resume of the same run id lands here.\n */\nexport class WorkflowSnapshotNotFoundError extends TheokitAgentError {\n  override readonly name = \"WorkflowSnapshotNotFoundError\";\n  constructor(public readonly runId: string) {\n    super(`No snapshot found for runId \"${runId}\". Configure persistence to enable resume.`, {\n      code: \"workflow_snapshot_not_found\",\n      isRetryable: false,\n    });\n  }\n}\n\n/**\n * Raised when a `dowhile` step's condition kept returning true past `maxIterations` (default 100).\n *\n * It does not escape `run()`: the step fails, the run ends `status: \"failed\"`, and the error reaches\n * the caller flattened as `run.error` with `name: \"WorkflowMaxIterationsExceededError\"` — match on\n * the name, the instance does not survive. The guard is evaluated before each iteration, so the inner\n * step runs at most `maxIterations` times; raising the ceiling is a `maxIterations` on the step, and\n * there is no global default to change.\n */\nexport class WorkflowMaxIterationsExceededError extends TheokitAgentError {\n  override readonly name = \"WorkflowMaxIterationsExceededError\";\n  constructor(\n    public readonly stepId: string,\n    public readonly maxIterations: number,\n  ) {\n    super(`Step \"${stepId}\" exceeded max iterations (${maxIterations}).`, {\n      code: \"workflow_max_iterations_exceeded\",\n      isRetryable: false,\n    });\n  }\n}\n\n/** EC-4 absorbed — JSON.stringify failed on snapshot payload. */\nexport class WorkflowNotSerializableError extends TheokitAgentError {\n  override readonly name = \"WorkflowNotSerializableError\";\n  constructor(\n    public readonly stepId: string,\n    public readonly underlying: Error,\n  ) {\n    super(\n      `Workflow snapshot at step \"${stepId}\" failed to serialize as JSON: ${underlying.message}. ` +\n        `Persisted snapshots support only JSON-serializable values (no BigInt, no circular refs, no class instances with cycles).`,\n      { code: \"workflow_not_serializable\", isRetryable: false },\n    );\n  }\n}\n\n/** EC-8 absorbed — `currentStepId` from snapshot not found in resumed workflow. */\nexport class WorkflowResumeStepNotFoundError extends TheokitAgentError {\n  override readonly name = \"WorkflowResumeStepNotFoundError\";\n  constructor(\n    public readonly stepId: string,\n    public readonly workflowName: string,\n  ) {\n    super(\n      `Cannot resume: step \"${stepId}\" not found in workflow \"${workflowName}\". ` +\n        `The Workflow definition diverged from the snapshot.`,\n      { code: \"workflow_resume_step_not_found\", isRetryable: false },\n    );\n  }\n}\n\n/**\n * Thrown by `Workflow.resume()` (and so by a `workflowResumeTool` tool) when the snapshot for the run\n * id was written by a workflow of another name. The snapshot is left in the store, so the workflow\n * that suspended the run can still resume it.\n *\n * Without this check the default store, one process-global memory store, would let workflow B run\n * its own tail on workflow A's accumulated input whenever both declare a step with the suspended id.\n * `name` is a label, not an identity: two workflows that share a name are not told apart here.\n */\nexport class WorkflowResumeWorkflowMismatchError extends TheokitAgentError {\n  override readonly name = \"WorkflowResumeWorkflowMismatchError\";\n  constructor(\n    public readonly runId: string,\n    public readonly snapshotWorkflowName: string,\n    public readonly workflowName: string,\n  ) {\n    super(\n      `Cannot resume run \"${runId}\" with workflow \"${workflowName}\": ` +\n        `the run was suspended by workflow \"${snapshotWorkflowName}\".`,\n      { code: \"workflow_resume_workflow_mismatch\", isRetryable: false },\n    );\n  }\n}\n\n/**\n * Aggregate failure from parallel branches.\n *\n * THE ONE PUBLIC WORKFLOW ERROR STILL OUTSIDE THE SDK HIERARCHY, deliberately. Its ten siblings were\n * reparented onto `TheokitAgentError` so `isTransientError` — and therefore `Retry.create`'s default\n * predicate — can see them at all. This one cannot follow without ceasing to be an `AggregateError`,\n * and `instanceof AggregateError` plus the standard `errors` array is the whole reason a caller\n * catches it: they want the branch failures, not a single message.\n *\n * The cost is stated rather than hidden: `isTransientError(err)` is `false` for this class, so a\n * parallel step whose branches failed transiently is not retried by the SDK's own helper. Inspect\n * `err.errors` and decide per branch — which is what an aggregate asks of a caller anyway, since\n * \"should this be retried\" has no single answer when the branches failed for different reasons.\n */\nexport class WorkflowParallelError extends AggregateError {\n  override readonly name = \"WorkflowParallelError\";\n  constructor(\n    errors: ReadonlyArray<Error>,\n    public readonly stepId: string,\n  ) {\n    super(errors, `${errors.length} branch(es) failed in parallel step \"${stepId}\".`);\n  }\n}\n\n/** D238 — saga engine not yet implemented. */\nexport class WorkflowCompensateNotImplementedError extends TheokitAgentError {\n  override readonly name = \"WorkflowCompensateNotImplementedError\";\n  constructor(public readonly stepId: string) {\n    super(\n      `Step \"${stepId}\" defines compensate, but saga engine is deferred to v1.2. ` +\n        `Remove compensate or implement rollback manually.`,\n      { code: \"workflow_compensate_not_implemented\", isRetryable: false },\n    );\n  }\n}\n","/**\n * Snapshot store interface + InMemory and JsonFile backends (ADR D235).\n *\n * EC-4 absorbed: serialization happens here. `JSON.stringify` failure raises\n * `WorkflowNotSerializableError` instead of letting the underlying `TypeError`\n * leak.\n *\n * @internal\n */\n\nimport { mkdir, readdir, readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { WorkflowOptions, WorkflowSnapshot } from \"../../types/workflow.js\";\nimport { WorkflowNotSerializableError } from \"../../workflow-errors.js\";\nimport { atomicWriteText } from \"../persistence/atomic-write.js\";\n\nexport interface WorkflowSnapshotStore {\n  save(snapshot: WorkflowSnapshot): Promise<void>;\n  load(runId: string): Promise<WorkflowSnapshot | undefined>;\n  delete(runId: string): Promise<void>;\n  list(\n    workflowName?: string,\n  ): Promise<ReadonlyArray<{ runId: string; workflowName: string; suspendedAt: number }>>;\n}\n\n/* ─── InMemory backend (default) ─── */\n\nclass InMemoryWorkflowSnapshotStore implements WorkflowSnapshotStore {\n  private readonly map = new Map<string, WorkflowSnapshot>();\n\n  async save(snapshot: WorkflowSnapshot): Promise<void> {\n    // Verify serializability even in-memory so behavior is consistent with json backend.\n    try {\n      JSON.stringify(snapshot);\n    } catch (err) {\n      throw new WorkflowNotSerializableError(\n        snapshot.currentStepId,\n        err instanceof Error ? err : new Error(String(err)),\n      );\n    }\n    this.map.set(snapshot.runId, snapshot);\n  }\n  async load(runId: string): Promise<WorkflowSnapshot | undefined> {\n    return this.map.get(runId);\n  }\n  async delete(runId: string): Promise<void> {\n    this.map.delete(runId);\n  }\n  async list(\n    workflowName?: string,\n  ): Promise<ReadonlyArray<{ runId: string; workflowName: string; suspendedAt: number }>> {\n    return [...this.map.values()]\n      .filter((s) => workflowName === undefined || s.workflowName === workflowName)\n      .map((s) => ({\n        runId: s.runId,\n        workflowName: s.workflowName,\n        suspendedAt: s.suspendedAt,\n      }));\n  }\n}\n\n/* ─── Json file backend (opt-in) ─── */\n\nclass JsonFileWorkflowSnapshotStore implements WorkflowSnapshotStore {\n  constructor(private readonly dir: string) {}\n\n  private filePath(runId: string): string {\n    return join(this.dir, `${runId}.json`);\n  }\n\n  async save(snapshot: WorkflowSnapshot): Promise<void> {\n    let serialized: string;\n    try {\n      serialized = JSON.stringify(snapshot);\n    } catch (err) {\n      throw new WorkflowNotSerializableError(\n        snapshot.currentStepId,\n        err instanceof Error ? err : new Error(String(err)),\n      );\n    }\n    await mkdir(this.dir, { recursive: true });\n    await atomicWriteText(this.filePath(snapshot.runId), serialized);\n  }\n\n  async load(runId: string): Promise<WorkflowSnapshot | undefined> {\n    try {\n      const raw = await readFile(this.filePath(runId), \"utf8\");\n      return JSON.parse(raw) as WorkflowSnapshot;\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n      throw err;\n    }\n  }\n\n  async delete(runId: string): Promise<void> {\n    try {\n      await (await import(\"node:fs/promises\")).unlink(this.filePath(runId));\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n    }\n  }\n\n  private async readEntriesOrEmpty(): Promise<string[]> {\n    try {\n      return await readdir(this.dir);\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return [];\n      throw err;\n    }\n  }\n\n  private async readSnapshotSafe(file: string): Promise<WorkflowSnapshot | undefined> {\n    try {\n      const raw = await readFile(join(this.dir, file), \"utf8\");\n      return JSON.parse(raw) as WorkflowSnapshot;\n    } catch {\n      return undefined;\n    }\n  }\n\n  async list(\n    workflowName?: string,\n  ): Promise<ReadonlyArray<{ runId: string; workflowName: string; suspendedAt: number }>> {\n    const entries = await this.readEntriesOrEmpty();\n    const results: Array<{ runId: string; workflowName: string; suspendedAt: number }> = [];\n    for (const file of entries) {\n      if (!file.endsWith(\".json\")) continue;\n      const snap = await this.readSnapshotSafe(file);\n      if (snap === undefined) continue;\n      if (workflowName !== undefined && snap.workflowName !== workflowName) continue;\n      results.push({\n        runId: snap.runId,\n        workflowName: snap.workflowName,\n        suspendedAt: snap.suspendedAt,\n      });\n    }\n    return results;\n  }\n}\n\n/* ─── Resolver: per-Workflow store cache ─── */\n\nconst memoryStore = new InMemoryWorkflowSnapshotStore();\nconst jsonStores = new Map<string, JsonFileWorkflowSnapshotStore>();\n\nexport function getSnapshotStoreFor(options: WorkflowOptions): WorkflowSnapshotStore {\n  if (options.persistence?.backend === \"json\") {\n    const dir = options.persistence.dir as string; // schema enforces dir is set\n    let store = jsonStores.get(dir);\n    if (store === undefined) {\n      store = new JsonFileWorkflowSnapshotStore(dir);\n      jsonStores.set(dir, store);\n    }\n    return store;\n  }\n  return memoryStore;\n}\n\n/** Test seam — clear in-memory store between tests. */\nexport function __resetSnapshotStoresForTests(): void {\n  jsonStores.clear();\n  // memoryStore has private map; reset via assignment.\n  // biome-ignore lint/suspicious/noExplicitAny: test-only seam\n  (memoryStore as any).map.clear();\n}\n"]}

package/dist/{chunk-NKQVLWDF.js → chunk-ULEK4OM4.js}

@@ -1,4 +1,4 @@
-import { registerBuiltins, listProviders, getProviderProfile } from './chunk-5HSMH2ZZ.js';
+import { registerBuiltins, listProviders, getProviderProfile } from './chunk-CJN5CEI3.js';
 
 // src/providers.ts
 function listProviders2() {
@@ -11,5 +11,5 @@ function getProviderProfile2(name) {
 }
 
 export { getProviderProfile2 as getProviderProfile, listProviders2 as listProviders };
-//# sourceMappingURL=chunk-NKQVLWDF.js.map
-//# sourceMappingURL=chunk-NKQVLWDF.js.map
+//# sourceMappingURL=chunk-ULEK4OM4.js.map
+//# sourceMappingURL=chunk-ULEK4OM4.js.map

package/dist/{chunk-NKQVLWDF.js.map → chunk-ULEK4OM4.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","getProviderProfile"],"mappings":";;;AA8BO,SAASA,cAAAA,GAA4C;AAC1D,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,aAAA,EAAa;AACtB;AAQO,SAASC,oBAAmB,IAAA,EAA2C;AAC5E,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,mBAAW,IAAI,CAAA;AACxB","file":"chunk-NKQVLWDF.js","sourcesContent":["/**\n * Published as `@theokit/sdk/providers`.\n *\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}
+{"version":3,"sources":["../src/providers.ts"],"names":["listProviders","getProviderProfile"],"mappings":";;;AA8BO,SAASA,cAAAA,GAA4C;AAC1D,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,aAAA,EAAa;AACtB;AAQO,SAASC,oBAAmB,IAAA,EAA2C;AAC5E,EAAA,gBAAA,EAAiB;AACjB,EAAA,OAAO,mBAAW,IAAI,CAAA;AACxB","file":"chunk-ULEK4OM4.js","sourcesContent":["/**\n * Published as `@theokit/sdk/providers`.\n *\n * The provider registry, as public API.\n *\n * It was `@internal`, which meant the SDK was the only thing that could answer \"which providers\n * exist, and what does each one need?\". `theokit` consequently kept a hand-written list of three —\n * against the 46 registered here — so an agent declaring `ollama/qwen2.5:3b` routed to whatever\n * key happened to be set instead of to Ollama (usetheokit/theokit#326).\n *\n * A second table that nothing forces to agree with the first is not a cache, it is a future bug.\n * These two functions exist so there is one table.\n *\n * Both ensure the builtins are registered before answering: registration is lazy (it happens when\n * an agent is created, a run is routed, or a provider is defined), so a caller asking early would\n * otherwise get an empty registry and reasonably conclude the SDK knows nothing.\n */\n\nimport { registerBuiltins } from \"./internal/providers/builtin/index.js\";\nimport {\n  getProviderProfile as getProfile,\n  listProviders as listProfiles,\n} from \"./internal/providers/registry.js\";\nimport type { ProviderProfile } from \"./internal/providers/types.js\";\n\n/**\n * Every registered provider — builtins, the JSON catalog, and anything a plugin registered.\n *\n * @public\n */\nexport function listProviders(): readonly ProviderProfile[] {\n  registerBuiltins();\n  return listProfiles();\n}\n\n/**\n * One provider by name or alias (`lm-studio` resolves to `lmstudio`), or `undefined` when nothing\n * has registered it.\n *\n * @public\n */\nexport function getProviderProfile(name: string): ProviderProfile | undefined {\n  registerBuiltins();\n  return getProfile(name);\n}\n"]}

package/dist/{chunk-XJ4C4NFX.js → chunk-ZOL3L4EH.js}

@@ -7,9 +7,9 @@ import { providerFromApiKeyPrefix } from './chunk-NAF4L3T6.js';
 import { reconstructMessages, SessionTranscript } from './chunk-XESYJ4JC.js';
 import { estimateTokens, resolveCompressionModel } from './chunk-SZQFCHU6.js';
 import { parseModelId } from './chunk-R7WIIPUR.js';
-import { registerProvider, registerBuiltins, getProviderProfile, listProviders, inferModelDialect, inferRegionFromModelId, stripBedrockPrefix, resolveBedrockBaseUrl, resolveVertexBaseUrl, stripVertexPrefix } from './chunk-5HSMH2ZZ.js';
+import { registerProvider, registerBuiltins, getProviderProfile, listProviders, inferModelDialect, inferRegionFromModelId, stripBedrockPrefix, resolveBedrockBaseUrl, resolveVertexBaseUrl, stripVertexPrefix } from './chunk-CJN5CEI3.js';
 import { globalSingleton } from './chunk-AGACYRJ2.js';
-import { readStoredOAuth } from './chunk-MS3TQSXU.js';
+import { readStoredOAuth } from './chunk-QD6B6W6I.js';
 import { boundFetch } from './chunk-Q7GYMXVC.js';
 import { NetworkError, ConfigurationError, IntegrationNotConnectedError, AuthenticationError, RateLimitError, UnknownAgentError, CompressionFailedError, CredentialPoolExhaustedError, isTransientError, TheokitAgentError } from './chunk-TNFOU6SB.js';
 import { diag } from './chunk-3OY6H3I7.js';
@@ -20,55 +20,62 @@ import { join } from 'path';
 import { pathToFileURL } from 'url';
 import { createRequire } from 'module';
 
-var discoveryState = globalSingleton("theokit-sdk.providers.discovered", () => ({
-  done: false
-}));
-function pluginsRoot() {
-  return join(homedir(), ".theokit", "plugins", "model-providers");
-}
 function trustFilePath() {
   return join(homedir(), ".theokit", "plugins", "trusted-providers.json");
 }
-function loadTrustedNames() {
-  const trusted = /* @__PURE__ */ new Set();
-  const path = trustFilePath();
-  if (existsSync(path)) {
-    try {
-      const parsed = JSON.parse(readFileSync(path, "utf-8"));
-      if (Array.isArray(parsed)) {
-        let discarded = 0;
-        for (const name of parsed) {
-          if (typeof name === "string" && name.length > 0) trusted.add(name);
-          else discarded += 1;
-        }
-        if (discarded > 0) {
-          diag(
-            `[theokit-sdk] WARN: ${path} contains ${discarded} non-string entr${discarded === 1 ? "y" : "ies"} \u2014 discarded (entries must be plugin-name strings)
-`
-          );
-        }
-      } else {
-        diag(
-          `[theokit-sdk] WARN: ${path} is not a JSON array \u2014 trusting NO provider plugins (fail-closed)
-`
-        );
-      }
-    } catch {
-      diag(
-        `[theokit-sdk] WARN: ${path} is not valid JSON \u2014 trusting NO provider plugins (fail-closed)
-`
-      );
-    }
-  }
+function readTrustedNames() {
+  const trusted = new Set(readTrustArray(trustFilePath(), PROVIDER_TRUST));
   for (const name of (process.env.THEOKIT_TRUSTED_PROVIDERS ?? "").split(",")) {
     const trimmed = name.trim();
     if (trimmed.length > 0) trusted.add(trimmed);
   }
   return trusted;
 }
+var PROVIDER_TRUST = {
+  subject: "provider plugins",
+  entries: "plugin-name strings"
+};
+function readTrustArray(path, shape) {
+  if (!existsSync(path)) return [];
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(path, "utf-8"));
+  } catch {
+    diag(
+      `[theokit-sdk] WARN: ${path} is not valid JSON \u2014 trusting NO ${shape.subject} (fail-closed)
+`
+    );
+    return [];
+  }
+  if (!Array.isArray(parsed)) {
+    diag(
+      `[theokit-sdk] WARN: ${path} is not a JSON array \u2014 trusting NO ${shape.subject} (fail-closed)
+`
+    );
+    return [];
+  }
+  const names = parsed.filter(
+    (name) => typeof name === "string" && name.length > 0
+  );
+  const discarded = parsed.length - names.length;
+  if (discarded > 0) {
+    diag(
+      `[theokit-sdk] WARN: ${path} contains ${discarded} non-string entr${discarded === 1 ? "y" : "ies"} \u2014 discarded (entries must be ${shape.entries})
+`
+    );
+  }
+  return names;
+}
+
+// src/internal/providers/discovery.ts
+var discoveryState = globalSingleton("theokit-sdk.providers.discovered", () => ({
+  loaded: /* @__PURE__ */ new Set(),
+  warned: /* @__PURE__ */ new Set()
+}));
+function pluginsRoot() {
+  return join(homedir(), ".theokit", "plugins", "model-providers");
+}
 async function discoverProviderPlugins() {
-  if (discoveryState.done) return;
-  discoveryState.done = true;
   const root = pluginsRoot();
   if (!existsSync(root)) return;
   let entries;
@@ -77,18 +84,25 @@ async function discoverProviderPlugins() {
   } catch {
     return;
   }
-  const trusted = loadTrustedNames();
+  const trusted = readTrustedNames();
   for (const entry of entries) {
+    if (discoveryState.loaded.has(entry)) continue;
     if (!trusted.has(entry)) {
-      diag(
-        `[theokit-sdk] WARN: provider plugin "${entry}" is present but NOT trusted \u2014 skipped. To trust it, add "${entry}" to ${trustFilePath()} (JSON array of names) or THEOKIT_TRUSTED_PROVIDERS (comma-separated), then restart the process.
-`
-      );
+      warnUntrusted(entry);
       continue;
     }
+    discoveryState.loaded.add(entry);
     await loadOne(join(root, entry), entry);
   }
 }
+function warnUntrusted(entry) {
+  if (discoveryState.warned.has(entry)) return;
+  discoveryState.warned.add(entry);
+  diag(
+    `[theokit-sdk] WARN: provider plugin "${entry}" is present but NOT trusted \u2014 skipped. To trust it, add "${entry}" to ${trustFilePath()} (JSON array of names) or THEOKIT_TRUSTED_PROVIDERS (comma-separated).
+`
+  );
+}
 async function loadOne(dir, entryName) {
   for (const ext of ["index.mjs", "index.js"]) {
     const indexPath = join(dir, ext);
@@ -3481,6 +3495,6 @@ async function autoCompactIfNeeded(opts) {
   }
 }
 
-export { COMPACT_SUMMARY_MARKER, COMPACT_USER_MESSAGE_MAX_TOKENS, CircuitBreaker, DEFAULT_PRE_COMPACT_TIMEOUT_MS, abortError, autoCompactIfNeeded, buildDefaultSummarizer, compactSessionTranscript, discoverProviderPlugins, getConfiguredBaseUrl, httpRequest, inferApiMode, isCompactSummary, isFixtureApiKey, mapOllamaHttpError, mapOllamaTransportError, mergeExplicitApiKey, normalizeUsage, parseSseStream, presentProviderCredentialEnvVars, readErrorResponseBody, relayStream, renderToolResultContentText, resolveProviderChain, resolveRunProvider, resolveSummarizerRoute, shouldAutoCompact, shouldUseFixtureMode, shouldUseRealLocalRuntime, tryFirstEvent, validateApiKeyShape };
-//# sourceMappingURL=chunk-XJ4C4NFX.js.map
-//# sourceMappingURL=chunk-XJ4C4NFX.js.map
+export { COMPACT_SUMMARY_MARKER, COMPACT_USER_MESSAGE_MAX_TOKENS, CircuitBreaker, DEFAULT_PRE_COMPACT_TIMEOUT_MS, abortError, autoCompactIfNeeded, buildDefaultSummarizer, compactSessionTranscript, discoverProviderPlugins, getConfiguredBaseUrl, httpRequest, inferApiMode, isCompactSummary, isFixtureApiKey, mapOllamaHttpError, mapOllamaTransportError, mergeExplicitApiKey, normalizeUsage, parseSseStream, presentProviderCredentialEnvVars, readErrorResponseBody, readTrustArray, relayStream, renderToolResultContentText, resolveProviderChain, resolveRunProvider, resolveSummarizerRoute, shouldAutoCompact, shouldUseFixtureMode, shouldUseRealLocalRuntime, trustFilePath, tryFirstEvent, validateApiKeyShape };
+//# sourceMappingURL=chunk-ZOL3L4EH.js.map
+//# sourceMappingURL=chunk-ZOL3L4EH.js.map