@theokit/sdk 5.12.1 → 5.14.0

package/dist/{chunk-Q6WT5535.cjs → chunk-2WY2OFSC.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkL7JPXZ2C_cjs = require('./chunk-L7JPXZ2C.cjs');
-var chunkYOVZMN4P_cjs = require('./chunk-YOVZMN4P.cjs');
+var chunkLXG6VL6R_cjs = require('./chunk-LXG6VL6R.cjs');
 var chunkCWQPQTUZ_cjs = require('./chunk-CWQPQTUZ.cjs');
 var chunk7YUPSBDV_cjs = require('./chunk-7YUPSBDV.cjs');
 var chunkBV2MWEMV_cjs = require('./chunk-BV2MWEMV.cjs');
@@ -9,7 +9,7 @@ var chunkCGH4BCIY_cjs = require('./chunk-CGH4BCIY.cjs');
 var chunkRS7YQR4X_cjs = require('./chunk-RS7YQR4X.cjs');
 var chunkSDZ4XDWS_cjs = require('./chunk-SDZ4XDWS.cjs');
 var chunk6OCJWGVD_cjs = require('./chunk-6OCJWGVD.cjs');
-var chunkLSWHDOCL_cjs = require('./chunk-LSWHDOCL.cjs');
+var chunkSNVYOX46_cjs = require('./chunk-SNVYOX46.cjs');
 var chunk2ZPEDVLM_cjs = require('./chunk-2ZPEDVLM.cjs');
 var chunkQG4SXZ2A_cjs = require('./chunk-QG4SXZ2A.cjs');
 var chunkUDAKAE4Z_cjs = require('./chunk-UDAKAE4Z.cjs');
@@ -18,7 +18,7 @@ var chunkAA27GEYS_cjs = require('./chunk-AA27GEYS.cjs');
 var chunkYSTXFWQE_cjs = require('./chunk-YSTXFWQE.cjs');
 var chunkH7HD6RXO_cjs = require('./chunk-H7HD6RXO.cjs');
 var chunkNINIJCHU_cjs = require('./chunk-NINIJCHU.cjs');
-var chunk7WARNHWW_cjs = require('./chunk-7WARNHWW.cjs');
+var chunk3UMPP553_cjs = require('./chunk-3UMPP553.cjs');
 var chunkIJ7M6GOG_cjs = require('./chunk-IJ7M6GOG.cjs');
 var chunk3KIUY67P_cjs = require('./chunk-3KIUY67P.cjs');
 var chunkSA6K24NB_cjs = require('./chunk-SA6K24NB.cjs');
@@ -31,10 +31,10 @@ var chunkWDVG5R2Q_cjs = require('./chunk-WDVG5R2Q.cjs');
 var chunkYQ3XC6C2_cjs = require('./chunk-YQ3XC6C2.cjs');
 var chunk6XQLTQB6_cjs = require('./chunk-6XQLTQB6.cjs');
 var chunkKX5QXLBS_cjs = require('./chunk-KX5QXLBS.cjs');
-var chunkNWWTYBD3_cjs = require('./chunk-NWWTYBD3.cjs');
+var chunk4KBI37F3_cjs = require('./chunk-4KBI37F3.cjs');
 var chunk3EE6LVWT_cjs = require('./chunk-3EE6LVWT.cjs');
-var chunkLO6LIUZ6_cjs = require('./chunk-LO6LIUZ6.cjs');
-var chunkS46WJTDL_cjs = require('./chunk-S46WJTDL.cjs');
+var chunkR5UQL2R5_cjs = require('./chunk-R5UQL2R5.cjs');
+var chunk4TEGFMSP_cjs = require('./chunk-4TEGFMSP.cjs');
 var chunkNVXXWAU7_cjs = require('./chunk-NVXXWAU7.cjs');
 var chunkEHD25JBZ_cjs = require('./chunk-EHD25JBZ.cjs');
 var chunkCEGU5AVD_cjs = require('./chunk-CEGU5AVD.cjs');
@@ -45,6 +45,7 @@ var path = require('path');
 var fs = require('fs');
 var process$1 = require('process');
 var child_process = require('child_process');
+var url = require('url');
 var zod = require('zod');
 var module$1 = require('module');
 var os = require('os');
@@ -164,7 +165,7 @@ async function agentGenerate(agent, agentModel, agentApiKey, agentLocal, input,
   const { output, maxRetries, errorStrategy, ...sendOptions } = options;
   const run = await agent.send(input, sendOptions);
   const result = await run.wait();
-  const { generateObjectImpl, GenerateObjectError } = await import('./generate-object-XBWD2PU7.cjs');
+  const { generateObjectImpl, GenerateObjectError } = await import('./generate-object-A5F576IT.cjs');
   const answer = structurableAnswerOrThrow(result, GenerateObjectError);
   const { getAgentFacade } = await import('./agent-factory-registry-UU46BUMU.cjs');
   const facade = getAgentFacade();
@@ -1623,7 +1624,7 @@ function createRealCloudRun(options) {
     conversation: []
   };
   const apiKey = chunkRNXXYF22_cjs.resolveApiKey(options.agentOptions.apiKey);
-  const baseUrl = chunkLSWHDOCL_cjs.getConfiguredBaseUrl();
+  const baseUrl = chunkSNVYOX46_cjs.getConfiguredBaseUrl();
   const handle = new RealCloudRun(
     {
       id,
@@ -1706,7 +1707,7 @@ var RealCloudRun = class extends FixtureRunBase {
   async consumeStream(response) {
     let finalStatus = "finished";
     let finalText = "";
-    for await (const record of chunkLSWHDOCL_cjs.parseSseStream(response.body, this.controller.signal)) {
+    for await (const record of chunkSNVYOX46_cjs.parseSseStream(response.body, this.controller.signal)) {
       const parsed = safeParse(record.data);
       if (parsed === void 0) continue;
       const update = this.applyRecord(record.event, parsed);
@@ -1873,7 +1874,7 @@ var CloudAgent = class _CloudAgent {
    */
   isFixtureMode() {
     const apiKey = chunkRNXXYF22_cjs.resolveApiKey(this.options.apiKey);
-    return chunkLSWHDOCL_cjs.isFixtureApiKey(apiKey) && chunkLSWHDOCL_cjs.getConfiguredBaseUrl() === void 0;
+    return chunkSNVYOX46_cjs.isFixtureApiKey(apiKey) && chunkSNVYOX46_cjs.getConfiguredBaseUrl() === void 0;
   }
   // SE9 — integrated structured output; delegates to the shared helper.
   generate(message, options) {
@@ -1928,7 +1929,7 @@ var CloudAgent = class _CloudAgent {
     const userText = typeof message === "string" ? message : message.text;
     const systemPrompt = await this.resolveSystemPromptForSend(userText, options);
     const apiKey = chunkRNXXYF22_cjs.resolveApiKey(this.options.apiKey);
-    const useRealRuntime = apiKey !== void 0 && !chunkLSWHDOCL_cjs.isFixtureApiKey(apiKey) && chunkLSWHDOCL_cjs.getConfiguredBaseUrl() !== void 0;
+    const useRealRuntime = apiKey !== void 0 && !chunkSNVYOX46_cjs.isFixtureApiKey(apiKey) && chunkSNVYOX46_cjs.getConfiguredBaseUrl() !== void 0;
     return useRealRuntime ? createRealCloudRun({
       agentId: this.agentId,
       model: this.model ?? { id: DEFAULT_AGENTIC_MODEL_ID },
@@ -2968,7 +2969,7 @@ function resolveWindowForRun(model, contextWindow) {
   const override = contextWindow !== void 0 && contextWindow > 0 ? contextWindow : void 0;
   return chunkKX5QXLBS_cjs.resolveEffectiveContextWindow({
     ...override !== void 0 ? { override } : {},
-    catalog: chunkS46WJTDL_cjs.getCatalogModelInfo(model)?.limit?.context,
+    catalog: chunk4TEGFMSP_cjs.getCatalogModelInfo(model)?.limit?.context,
     margin: chunkKX5QXLBS_cjs.CONTEXT_WINDOW_MARGIN,
     floor: chunkKX5QXLBS_cjs.CONTEXT_WINDOW_FLOOR
   });
@@ -2993,7 +2994,7 @@ async function runPostRunLifecycle(inputs) {
     try {
       const partial = await safeConversation(run);
       if (partial !== void 0) {
-        chunkYOVZMN4P_cjs.persistTurnToTranscript(sessionStore, { cwd: workspaceCwd, agentId, model }, agentId, {
+        chunkLXG6VL6R_cjs.persistTurnToTranscript(sessionStore, { cwd: workspaceCwd, agentId, model }, agentId, {
           userText,
           conversation: partial
         });
@@ -3003,11 +3004,11 @@ async function runPostRunLifecycle(inputs) {
       chunkRNXXYF22_cjs.diag(`[theokit-sdk] partial transcript write failed (${agentId}): ${msg}
 `);
     }
-    await chunkYOVZMN4P_cjs.flushSessionWrites();
+    await chunkLXG6VL6R_cjs.flushSessionWrites();
     return;
   }
   if (result.result !== void 0) {
-    chunkYOVZMN4P_cjs.appendSessionMessage(agentId, { role: "assistant", text: result.result });
+    chunkLXG6VL6R_cjs.appendSessionMessage(agentId, { role: "assistant", text: result.result });
   }
   const conversation = await safeConversation(run);
   const resolvedWindow = resolveWindowForRun(model, contextWindow);
@@ -3018,7 +3019,7 @@ async function runPostRunLifecycle(inputs) {
   }
   const lastRequestUsage = result.usage?.requests?.at(-1)?.totalTokens;
   const usageForTrigger = lastRequestUsage ?? result.usage?.totalTokens;
-  chunkYOVZMN4P_cjs.persistTurnToTranscript(
+  chunkLXG6VL6R_cjs.persistTurnToTranscript(
     sessionStore,
     { cwd: workspaceCwd, agentId, model },
     agentId,
@@ -3030,7 +3031,7 @@ async function runPostRunLifecycle(inputs) {
         // The EFFECTIVE window (after override, clamp and margin) — not the declared one. Swapping for
         // `contextWindow` here would budget against a number the clamp already rejected.
         contextWindow: effectiveWindow,
-        summarize: chunkLSWHDOCL_cjs.buildDefaultSummarizer({
+        summarize: chunkSNVYOX46_cjs.buildDefaultSummarizer({
           agentModel: model,
           ...inputs.apiKey !== void 0 ? { apiKey: inputs.apiKey } : {}
         })
@@ -3072,7 +3073,7 @@ async function runPostRunLifecycle(inputs) {
     agentId,
     runId: result.id
   });
-  await chunkYOVZMN4P_cjs.flushSessionWrites();
+  await chunkLXG6VL6R_cjs.flushSessionWrites();
 }
 async function safeConversation(run) {
   try {
@@ -3084,38 +3085,142 @@ async function safeConversation(run) {
     return [];
   }
 }
+var WORKSPACE_TRUST = {
+  subject: "workspace plugins",
+  entries: "absolute folder realpaths"
+};
+function workspaceTrustRecordPath() {
+  return path.join(path.dirname(chunkSNVYOX46_cjs.trustFilePath()), "trusted-workspace-plugins.json");
+}
+function readTrustedWorkspaceFolders() {
+  const path$1 = workspaceTrustRecordPath();
+  const trusted = /* @__PURE__ */ new Set();
+  for (const entry of chunkSNVYOX46_cjs.readTrustArray(path$1, WORKSPACE_TRUST)) {
+    if (path.isAbsolute(entry)) {
+      trusted.add(entry);
+      continue;
+    }
+    chunkRNXXYF22_cjs.diag(
+      `[theokit-sdk] WARN: ${path$1} entry "${entry}" is not an absolute path \u2014 discarded (entries must be ${WORKSPACE_TRUST.entries})
+`
+    );
+  }
+  return trusted;
+}
+
+// src/internal/runtime/plugin-loader/manifest-entry-import.ts
+var warnedFolders = chunkNVXXWAU7_cjs.globalSingleton(
+  "theokit-sdk.plugins.manifest-untrusted-warned",
+  () => /* @__PURE__ */ new Set()
+);
+async function importTrustedManifestPlugins(candidates, trustedFolders) {
+  const plugins = [];
+  for (const candidate of candidates) {
+    const realFolder = realpathOrUndefined(candidate.folderPath);
+    if (realFolder === void 0 || !trustedFolders.has(realFolder)) {
+      warnUntrustedOnce(candidate, realFolder ?? candidate.folderPath);
+      continue;
+    }
+    plugins.push(await importEntry(candidate));
+  }
+  return plugins;
+}
+function realpathOrUndefined(path) {
+  try {
+    return fs.realpathSync(path);
+  } catch {
+    return void 0;
+  }
+}
+function warnUntrustedOnce(candidate, realFolder) {
+  if (warnedFolders.has(candidate.entryPath)) return;
+  warnedFolders.add(candidate.entryPath);
+  const { folder, metadata } = candidate;
+  const declared = metadata.name === folder ? "" : ` (declares name "${metadata.name}")`;
+  chunkRNXXYF22_cjs.diag(
+    `[theokit-sdk] workspace plugin folder "${folder}"${declared} is not trusted \u2014 its entry was not imported. To trust it, add "${realFolder}" to ${workspaceTrustRecordPath()} (JSON array of folder realpaths).
+`
+  );
+}
+async function importEntry(candidate) {
+  const { metadata } = candidate;
+  const entry = metadata.entry ?? "";
+  let mod;
+  try {
+    mod = await import(url.pathToFileURL(candidate.entryPath).href);
+  } catch (cause) {
+    throw new chunkCEGU5AVD_cjs.ConfigurationError(`Plugin ${metadata.name} entry failed to import: ${entry}`, {
+      code: "plugin_entry_import_failed",
+      cause
+    });
+  }
+  const plugin = mod.default;
+  if (!isGeneralPlugin(plugin)) {
+    throw new chunkCEGU5AVD_cjs.ConfigurationError(
+      `Plugin ${metadata.name} entry must default-export a general plugin (kind "general", name, register): ${entry}`,
+      { code: "plugin_entry_shape" }
+    );
+  }
+  return plugin;
+}
+function isGeneralPlugin(value) {
+  return chunkBV2MWEMV_cjs.isCodePlugin(value) && value.kind === "general" && typeof value.name === "string";
+}
+function executableExtensions() {
+  return process.platform === "win32" ? ["", ...(process.env.PATHEXT ?? ".EXE;.CMD").split(";")] : [""];
+}
+function isExecutable(file) {
+  try {
+    fs.accessSync(file, fs.constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function binaryOnPath(bin) {
+  if (bin.length === 0 || /[\\/]/.test(bin)) return false;
+  const dirs = (process.env.PATH ?? "").split(path.delimiter).filter((dir) => dir.length > 0);
+  return dirs.some(
+    (dir) => executableExtensions().some((ext) => isExecutable(path.join(dir, bin + ext)))
+  );
+}
 var SkillsManager = class {
-  constructor(cwd, _enabled, settingSourcesIncludeProject, skillsDir, inline, compatSources = []) {
+  constructor(cwd, _enabled, settingSourcesIncludeProject, skillsDir, inline, compatSources = [], bundledDirs = []) {
     this.cwd = cwd;
     this.settingSourcesIncludeProject = settingSourcesIncludeProject;
     this.skillsDir = skillsDir;
     this.inline = inline;
     this.compatSources = compatSources;
+    this.bundledDirs = bundledDirs;
   }
   cwd;
   settingSourcesIncludeProject;
   skillsDir;
   inline;
   compatSources;
+  bundledDirs;
   skills = [];
   async initialize() {
     if (!this.settingSourcesIncludeProject) {
-      this.skills = this.mergeInline([]);
+      this.skills = this.mergeInline(await this.discoverFrom(this.bundledDirs));
       return;
     }
     await this.refresh();
   }
   async refresh() {
-    const roots = this.skillsDir === void 0 ? [
+    const ownRoots = this.skillsDir === void 0 ? [
       ...chunkYQ3XC6C2_cjs.projectConfigRoots(this.cwd, this.compatSources, "skills").map(
         (root) => path.join(root, "skills")
       ),
       ...(await chunkWDVG5R2Q_cjs.pluginBundleDirs(this.cwd, this.compatSources)).map((b) => path.join(b, "skills"))
     ] : [this.skillsDir];
+    this.skills = this.mergeInline(await this.discoverFrom([...ownRoots, ...this.bundledDirs]));
+  }
+  async discoverFrom(roots) {
     const discovered = [];
     const seen = /* @__PURE__ */ new Set();
     for (const root of roots) {
-      for (const skill of await chunk7WARNHWW_cjs.discoverSkills(root, {
+      for (const skill of await chunk3UMPP553_cjs.discoverSkills(root, {
         onInvalidSkill: (info) => {
           chunkRNXXYF22_cjs.diag(`[theokit-sdk] skill ${info.name} skipped (${info.code}): ${info.message}
 `);
@@ -3126,7 +3231,7 @@ var SkillsManager = class {
         discovered.push(skill);
       }
     }
-    this.skills = this.mergeInline(discovered);
+    return discovered;
   }
   /** M22 — merge inline skills over discovered ones; inline wins on a name conflict. */
   mergeInline(discovered) {
@@ -3146,7 +3251,7 @@ var SkillsManager = class {
   async get(name) {
     const skill = this.skills.find((s) => s.name === name);
     if (skill === void 0) return void 0;
-    const instructions = typeof skill.instructions === "string" ? skill.instructions : chunk7WARNHWW_cjs.stripSkillFrontmatter(await promises.readFile(skill.source, "utf8"));
+    const instructions = typeof skill.instructions === "string" ? skill.instructions : chunk3UMPP553_cjs.stripSkillFrontmatter(await promises.readFile(skill.source, "utf8"));
     const references = skill.references;
     return {
       name: skill.name,
@@ -3254,7 +3359,8 @@ async function resolveSendSkills(inputs, userText, memoryFacts) {
     inputs.settingSourcesIncludeProject,
     settings.skillsDir,
     settings.inline,
-    resolveCompatSources(inputs.options, inputs.workspaceCwd)
+    resolveCompatSources(inputs.options, inputs.workspaceCwd),
+    settings.bundledDirs
   );
   await manager.initialize();
   return { manager, autoInject: settings.autoInject ?? true };
@@ -3273,7 +3379,9 @@ async function buildSystemPromptContext(inputs, userText, memoryFacts, manager =
     // because a caller naming one has already made the decision this field keeps away from the
     // model. Widening it to execution would break the case the field is FOR — a side-effecting
     // skill a human may run and the model may not propose.
-    skills: skills.filter((skill) => skill.disableModelInvocation !== true).map((skill) => ({ name: skill.name, description: skill.description })),
+    skills: skills.filter((skill) => skill.disableModelInvocation !== true).filter(
+      (skill) => skill.requiresBins === void 0 || skill.requiresBins.every((bin) => binaryOnPath(bin))
+    ).map((skill) => ({ name: skill.name, description: skill.description })),
     userMessage: userText,
     memory: memoryFacts.map((fact) => ({ text: fact.text }))
   };
@@ -3333,7 +3441,7 @@ var ActiveMemoryPromptProvider = class {
     if (ctx.activeMemorySummary === void 0 || ctx.activeMemorySummary.length === 0) {
       return Promise.resolve(void 0);
     }
-    const body = chunk7WARNHWW_cjs.escapeBlockBody(ctx.activeMemorySummary);
+    const body = chunk3UMPP553_cjs.escapeBlockBody(ctx.activeMemorySummary);
     return Promise.resolve(`<active-memory>
 ${body}
 </active-memory>`);
@@ -3386,7 +3494,7 @@ function formatSource(name, tokens) {
   if (tokens.length === 0) {
     return `  <source name="${escapeAttribute(name)}" />`;
   }
-  const body = chunk7WARNHWW_cjs.escapeBlockBody(tokens.join(" "));
+  const body = chunk3UMPP553_cjs.escapeBlockBody(tokens.join(" "));
   return `  <source name="${escapeAttribute(name)}">
     ${body}
   </source>`;
@@ -3410,7 +3518,7 @@ var MemoryPromptProvider = class {
     if (ctx.memory.length === 0) return Promise.resolve(void 0);
     const lines = ctx.memory.map((fact) => {
       const tag = fact.observations === 1 ? "[unconfirmed] " : "";
-      return `  - ${tag}${chunk7WARNHWW_cjs.escapeBlockBody(fact.text)}`;
+      return `  - ${tag}${chunk3UMPP553_cjs.escapeBlockBody(fact.text)}`;
     });
     return Promise.resolve(`${MEMORY_GUIDANCE}
 <memory>
@@ -3434,7 +3542,7 @@ var SkillsPromptProvider = class {
   priority = 20;
   contribute(ctx) {
     if (ctx.skillsAutoInject === false) return Promise.resolve(void 0);
-    return Promise.resolve(chunk7WARNHWW_cjs.buildSkillsBlock(ctx.skills));
+    return Promise.resolve(chunk3UMPP553_cjs.buildSkillsBlock(ctx.skills));
   }
 };
 
@@ -3703,7 +3811,7 @@ var HISTOGRAM_NAMES = {
 };
 function safeRequire(moduleName) {
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-Q6WT5535.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-2WY2OFSC.cjs', document.baseURI).href)));
     return r(moduleName);
   } catch {
     return void 0;
@@ -3946,7 +4054,7 @@ var cachedOtel;
 function loadOtel() {
   if (cachedOtel === void 0) {
     try {
-      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-Q6WT5535.cjs', document.baseURI).href)));
+      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-2WY2OFSC.cjs', document.baseURI).href)));
       const mod = r("@opentelemetry/api");
       cachedOtel = mod;
     } catch {
@@ -4579,6 +4687,12 @@ var PluginsManager = class {
   localPaths;
   compatSources;
   plugins = [];
+  /**
+   * B-686 — where each listed object was discovered. Keyed by the object, not by name: two plugins
+   * may share a declared name across roots or folders, and a field would leak a host path through
+   * `plugins.list()`. `refresh()` replaces the objects, so stale origins are collected with them.
+   */
+  #origin = /* @__PURE__ */ new WeakMap();
   async initialize() {
     this.assertCloudRules();
     if (!this.settingSourcesIncludePlugins) {
@@ -4604,6 +4718,7 @@ var PluginsManager = class {
         const cliMetadata = await loadPluginManifestFromJson(this.cwd, cliPath, folderName);
         if (this.enabled === void 0 || this.enabled.includes(cliMetadata.name)) {
           this.plugins.push(cliMetadata);
+          this.#origin.set(cliMetadata, { root: pluginsRoot, folder: folderName });
         }
         continue;
       }
@@ -4626,12 +4741,26 @@ var PluginsManager = class {
       if (this.enabled === void 0 || this.enabled.includes(metadata.name)) {
         await this.assertEntryFileExists(metadata, folderName, pluginsRoot);
         this.plugins.push(metadata);
+        this.#origin.set(metadata, { root: pluginsRoot, folder: folderName });
       }
     }
   }
   list() {
     return Promise.resolve(this.plugins);
   }
+  /** Listed native-root plugins that declare an `entry`, in list order. Reads no file. */
+  nativeEntryCandidates() {
+    const nativeRoot = path.join(chunkYQ3XC6C2_cjs.theokitConfigRoot(this.cwd), "plugins");
+    return this.plugins.flatMap((metadata) => {
+      const origin = this.#origin.get(metadata);
+      if (origin === void 0 || origin.root !== nativeRoot || metadata.entry === void 0) {
+        return [];
+      }
+      const folderPath = path.join(origin.root, origin.folder);
+      const entryPath = chunk3KIUY67P_cjs.safePathJoin(folderPath, metadata.entry);
+      return [{ metadata, folder: origin.folder, folderPath, entryPath }];
+    });
+  }
   async assertEntryFileExists(metadata, folderName, pluginsRoot) {
     const entry = metadata.entry;
     if (entry === void 0) return;
@@ -4797,7 +4926,8 @@ function buildSkills(args, out) {
     staticSkills?.inline,
     // #524 — the same declaration the per-send manager reads. Omitting it here would make
     // `agent.skills` disagree with the system prompt about which skills exist.
-    resolveCompatSources(args.options, args.workspaceCwd)
+    resolveCompatSources(args.options, args.workspaceCwd),
+    staticSkills?.bundledDirs
   );
   const localSkills = out.skillsManager;
   out.skills = {
@@ -5649,7 +5779,7 @@ function catalogCostFallback(provider, cleanedModel) {
   const candidates = [`${provider}/${cleanedModel}`, cleanedModel];
   if (stripped !== cleanedModel) candidates.push(`${provider}/${stripped}`, stripped);
   for (const key of candidates) {
-    const info = chunkS46WJTDL_cjs.getCatalogModelInfo(key);
+    const info = chunk4TEGFMSP_cjs.getCatalogModelInfo(key);
     const cost = info?.cost;
     if (cost === void 0) continue;
     const [prov, ...modelParts] = key.split("/");
@@ -5661,7 +5791,7 @@ function catalogCostFallback(provider, cleanedModel) {
       ...cost.cache_read !== void 0 ? { cacheReadCostPerMillion: cost.cache_read } : {},
       ...cost.cache_write !== void 0 ? { cacheWriteCostPerMillion: cost.cache_write } : {},
       // M44 M5 fix — honest provenance: a key patched by the LIVE models-dev source is not "vendored".
-      pricingVersion: chunkS46WJTDL_cjs.isPatchedModelKey(key) ? "catalog-models-dev" : "catalog-vendored"
+      pricingVersion: chunk4TEGFMSP_cjs.isPatchedModelKey(key) ? "catalog-models-dev" : "catalog-vendored"
     };
   }
   return void 0;
@@ -5864,6 +5994,42 @@ function stripThinkBlocks(content) {
   return { visible, thinking };
 }
 
+// src/internal/agent-loop/prune-tool-results.ts
+function stubFor(olderThanRounds) {
+  return `[tool result pruned: older than ${olderThanRounds} rounds]`;
+}
+function carriesToolResult(message) {
+  return message.content.some((part) => part.type === "tool_result");
+}
+function stubbed(message, stub) {
+  const content = message.content.map(
+    (part) => part.type === "tool_result" ? { ...part, content: stub } : part
+  );
+  return { ...message, content };
+}
+function pruneToolResultsForRequest(messages, options) {
+  if (options === void 0) return messages;
+  const stub = stubFor(options.olderThanRounds);
+  const out = [...messages];
+  let rounds = 0;
+  for (let index = messages.length - 1; index >= 0; index -= 1) {
+    const message = messages[index];
+    if (!carriesToolResult(message)) continue;
+    rounds += 1;
+    if (rounds > options.olderThanRounds) out[index] = stubbed(message, stub);
+  }
+  return out;
+}
+function validatePruneToolResults(options) {
+  if (options === void 0) return;
+  const value = options.olderThanRounds;
+  if (typeof value === "number" && Number.isInteger(value) && value >= 1) return;
+  throw new chunkCEGU5AVD_cjs.ConfigurationError(
+    `SendOptions.pruneToolResults.olderThanRounds must be an integer of at least 1, got ${String(value)}`,
+    { code: "invalid_prune_tool_results" }
+  );
+}
+
 // src/internal/agent-loop/loop-llm-stream.ts
 function resolveSystemPromptWithMemoryAdditions(systemPrompt, additions) {
   if (additions === void 0 || additions.length === 0) return systemPrompt;
@@ -5875,11 +6041,11 @@ ${systemPrompt}`;
 }
 function activeMemoryBlock(additions) {
   return `<active-memory>
-${chunk7WARNHWW_cjs.escapeBlockBody(additions)}
+${chunk3UMPP553_cjs.escapeBlockBody(additions)}
 </active-memory>`;
 }
 function buildLoopSystem(systemPrompt, additions, modelId) {
-  if (!chunkNWWTYBD3_cjs.isAnthropicFamilyModel(modelId) || systemPrompt === void 0 || systemPrompt.length === 0) {
+  if (!chunk4KBI37F3_cjs.isAnthropicFamilyModel(modelId) || systemPrompt === void 0 || systemPrompt.length === 0) {
     return resolveSystemPromptWithMemoryAdditions(systemPrompt, additions);
   }
   const blocks = [{ text: systemPrompt, cacheable: true }];
@@ -5952,7 +6118,8 @@ async function streamLlmTurn(inputs, ctx) {
         const key = derivePromptCacheKey(inputs.agentId);
         return key !== void 0 ? { promptCacheKey: key } : {};
       })(),
-      messages: ctx.messages,
+      // B-564: the request gets a pruned copy; ctx.messages stays whole (the transcript is resent from it).
+      messages: pruneToolResultsForRequest(ctx.messages, inputs.pruneToolResults),
       tools: ctx.tools.map(toLlmTool)
     },
     signal
@@ -6743,7 +6910,7 @@ function applyToolResultGuard(parts, opts) {
     (p) => (
       // SE7 — guard the TEXT of a tool result (string or the text blocks of a
       // structured content); image blocks pass through untouched.
-      p.type === "tool_result" ? { ...p, content: chunkLSWHDOCL_cjs.renderToolResultContentText(p.content, (t) => guardText(t, opts)) } : p
+      p.type === "tool_result" ? { ...p, content: chunkSNVYOX46_cjs.renderToolResultContentText(p.content, (t) => guardText(t, opts)) } : p
     )
   );
 }
@@ -7061,13 +7228,13 @@ var FallbackLlmClient = class {
   async *stream(request, signal) {
     let lastError;
     for (const client of this.clients) {
-      if (signal.aborted) throw chunkLSWHDOCL_cjs.abortError(signal);
-      const attempt = await chunkLSWHDOCL_cjs.tryFirstEvent(client, request, signal, true);
+      if (signal.aborted) throw chunkSNVYOX46_cjs.abortError(signal);
+      const attempt = await chunkSNVYOX46_cjs.tryFirstEvent(client, request, signal, true);
       if (attempt.kind === "handshake_error") {
         lastError = attempt.error;
         continue;
       }
-      return yield* chunkLSWHDOCL_cjs.relayStream(attempt.generator, attempt.firstResult);
+      return yield* chunkSNVYOX46_cjs.relayStream(attempt.generator, attempt.firstResult);
     }
     if (lastError !== void 0) throw lastError;
     throw new chunkCEGU5AVD_cjs.NetworkError("FallbackLlmClient has no providers configured", {
@@ -7695,6 +7862,13 @@ function createRealLocalRun(options) {
   registerRun(handle);
   return handle;
 }
+function toolResultPolicyInputs(sendOptions) {
+  return {
+    ...sendOptions.perToolTimeoutMs !== void 0 ? { perToolTimeoutMs: sendOptions.perToolTimeoutMs } : {},
+    ...sendOptions.toolResultGuard !== void 0 ? { toolResultGuard: sendOptions.toolResultGuard } : {},
+    ...sendOptions.pruneToolResults !== void 0 ? { pruneToolResults: sendOptions.pruneToolResults } : {}
+  };
+}
 function buildLoopInputs(options, runId, userText, userImages) {
   const maxIterations = options.sendOptions.maxIterations;
   if (maxIterations !== void 0 && (!Number.isInteger(maxIterations) || maxIterations < 1)) {
@@ -7703,9 +7877,10 @@ function buildLoopInputs(options, runId, userText, userImages) {
       { code: "invalid_max_iterations" }
     );
   }
-  const { primary, effectiveModelId } = chunkLSWHDOCL_cjs.resolveRunProvider(options);
+  validatePruneToolResults(options.sendOptions.pruneToolResults);
+  const { primary, effectiveModelId } = chunkSNVYOX46_cjs.resolveRunProvider(options);
   const fallback = options.agentOptions.providers?.fallback;
-  const apiKeys = chunkLSWHDOCL_cjs.mergeExplicitApiKey(
+  const apiKeys = chunkSNVYOX46_cjs.mergeExplicitApiKey(
     options.agentOptions.providers?.apiKeys,
     primary,
     options.agentOptions.apiKey
@@ -7714,7 +7889,7 @@ function buildLoopInputs(options, runId, userText, userImages) {
   const extractToolCallsFromContent = options.agentOptions.providers?.routes?.[0]?.extractToolCallsFromContent;
   const rateLimitSink = options.sendOptions.onRunEvent;
   const modelBaseUrl = options.model?.url;
-  const chain = chunkLSWHDOCL_cjs.resolveProviderChain({
+  const chain = chunkSNVYOX46_cjs.resolveProviderChain({
     primary,
     ...modelBaseUrl !== void 0 ? { baseUrl: modelBaseUrl } : {},
     ...fallback !== void 0 ? { fallback } : {},
@@ -7772,10 +7947,7 @@ function buildLoopInputs(options, runId, userText, userImages) {
     ...options.sendOptions.context !== void 0 ? { context: options.sendOptions.context } : {},
     // SE2 — forward the opt-in typed runtime-event sink to the loop.
     ...options.sendOptions.onRunEvent !== void 0 ? { runEventSink: options.sendOptions.onRunEvent } : {},
-    // #58 / #57 — forward the per-tool timeout + tool-result guard so a consumer
-    // can enable them via SendOptions (not only internal AgentLoopInputs).
-    ...options.sendOptions.perToolTimeoutMs !== void 0 ? { perToolTimeoutMs: options.sendOptions.perToolTimeoutMs } : {},
-    ...options.sendOptions.toolResultGuard !== void 0 ? { toolResultGuard: options.sendOptions.toolResultGuard } : {},
+    ...toolResultPolicyInputs(options.sendOptions),
     // M1-2: per-send iteration ceiling (validated above). The loop reads
     // inputs.maxIterations (default 8 when unset).
     ...maxIterations !== void 0 ? { maxIterations } : {},
@@ -7849,6 +8021,7 @@ var RealLocalRun = class extends FixtureRunBase {
   }
   async initializeMcp(inputs) {
     for (const [name, client] of inputs.mcp.entries()) {
+      if (this.terminated) break;
       try {
         await client.initialize();
       } catch (cause) {
@@ -7999,7 +8172,7 @@ function buildRealRunOptions(args) {
   };
 }
 async function createFixtureRunHelper(args) {
-  const sessionMessages = chunkYOVZMN4P_cjs.getSessionMessages(args.inputs.agentId);
+  const sessionMessages = chunkLXG6VL6R_cjs.getSessionMessages(args.inputs.agentId);
   const projectMcpServers = args.inputs.settingSourcesIncludeProject ? await readProjectMcpServers(args.inputs.workspaceCwd) : {};
   return createLocalRun({
     agentId: args.inputs.agentId,
@@ -8018,7 +8191,7 @@ async function createFixtureRunHelper(args) {
 }
 async function dispatchLocalRun(args) {
   const apiKey = chunkRNXXYF22_cjs.resolveApiKey(args.inputs.options.apiKey);
-  if (chunkLSWHDOCL_cjs.shouldUseRealLocalRuntime(apiKey)) {
+  if (chunkSNVYOX46_cjs.shouldUseRealLocalRuntime(apiKey)) {
     return createRealLocalRun(
       buildRealRunOptions({
         inputs: args.inputs,
@@ -8274,10 +8447,10 @@ async function disposeLocalAgentSession(agent) {
   agent.lifecycleAbortController.abort();
   await chunkZF2LDKQQ_cjs.withCwdMutex(`agent-send:${agent.agentId}`, () => Promise.resolve());
   disposeSessionMcpClients(agent.agentId);
-  await chunkYOVZMN4P_cjs.flushSessionWrites();
+  await chunkLXG6VL6R_cjs.flushSessionWrites();
   await flushRegistrySaves(agent.workspaceCwd);
   await disposeSessionStore(agent.sessionStore);
-  chunkYOVZMN4P_cjs.discardSession(agent.workspaceCwd, agent.agentId);
+  chunkLXG6VL6R_cjs.discardSession(agent.workspaceCwd, agent.agentId);
 }
 async function reloadLocalAgent(agent) {
   if (agent.context !== void 0) await agent.context.refresh();
@@ -9141,7 +9314,7 @@ var LocalAgentMemory = class {
   async runActiveMemoryIfEnabled(userText, priorMessages, telemetry) {
     const cfg = this.options.memory?.activeRecall;
     if (cfg?.enabled !== true || this.index === void 0) return void 0;
-    if (this.breaker === void 0) this.breaker = new chunkLSWHDOCL_cjs.CircuitBreaker();
+    if (this.breaker === void 0) this.breaker = new chunkSNVYOX46_cjs.CircuitBreaker();
     if (this.cache === void 0) this.cache = new ActiveMemoryCache();
     const result = await runActiveMemory({
       userText,
@@ -9456,8 +9629,8 @@ async function localAgentUsePersonality(agent, name, opts) {
       registry,
       store: agent.personalityStore,
       invalidateCache: (reason) => agent.invalidateCache(reason),
-      appendSessionMessage: (msg) => chunkYOVZMN4P_cjs.appendSessionMessage(agent.agentId, msg),
-      clearSession: () => chunkYOVZMN4P_cjs.clearSession(agent.agentId),
+      appendSessionMessage: (msg) => chunkLXG6VL6R_cjs.appendSessionMessage(agent.agentId, msg),
+      clearSession: () => chunkLXG6VL6R_cjs.clearSession(agent.agentId),
       opts: opts ?? {}
     })
   );
@@ -9985,7 +10158,7 @@ async function executeSendLocked(inputs, message, options) {
   if (inputs.options.onBeforeSend !== void 0) {
     await inputs.options.onBeforeSend({
       conversationId: inputs.agentId,
-      previousMessageCount: chunkYOVZMN4P_cjs.getSessionMessages(inputs.agentId).length
+      previousMessageCount: chunkLXG6VL6R_cjs.getSessionMessages(inputs.agentId).length
     });
   }
   await inputs.runPreHook(userText);
@@ -9997,8 +10170,8 @@ async function executeSendLocked(inputs, message, options) {
     userText,
     sendOptions: options
   });
-  const priorMessages = [...chunkYOVZMN4P_cjs.getSessionMessages(inputs.agentId)];
-  chunkYOVZMN4P_cjs.appendSessionMessage(inputs.agentId, { role: "user", text: userText });
+  const priorMessages = [...chunkLXG6VL6R_cjs.getSessionMessages(inputs.agentId)];
+  chunkLXG6VL6R_cjs.appendSessionMessage(inputs.agentId, { role: "user", text: userText });
   await persistMemoryFactIfWritePrompt(inputs.workspaceCwd, inputs.options.memory, userText);
   const memoryFacts = await readMemoryForSend(inputs.workspaceCwd, inputs.options.memory, userText);
   const memoryTools = void 0;
@@ -10289,13 +10462,20 @@ var LocalAgent = class {
       workspaceCwd: this.workspaceCwd
     });
   }
+  /** B-686 — the workspace trust record is read only when a native manifest declares an entry. */
+  async importManifestPlugins() {
+    const candidates = this.pluginsManager?.nativeEntryCandidates() ?? [];
+    if (candidates.length === 0) return [];
+    return importTrustedManifestPlugins(candidates, readTrustedWorkspaceFolders());
+  }
   async initialize() {
     await this.hooksExecutor.initialize(this.settingSourcesIncludeProject);
     if (this.context !== void 0) await this.context.initialize();
     if (this.skillsManager !== void 0) await this.skillsManager.initialize();
     if (this.pluginsManager !== void 0) await this.pluginsManager.initialize();
     const codePlugins = chunkBV2MWEMV_cjs.extractCodePlugins(this.options.plugins);
-    await this.pluginManagerCode.initialize(codePlugins);
+    const manifestPlugins = await this.importManifestPlugins();
+    await this.pluginManagerCode.initialize([...codePlugins, ...manifestPlugins]);
     this.resolvedSubagents = await chunkWDVG5R2Q_cjs.loadSubagents(
       this.workspaceCwd,
       this.settingSourcesIncludeProject,
@@ -10304,7 +10484,7 @@ var LocalAgent = class {
     );
     await acquireLeaseIfPossible(this.sessionStore, this.agentId);
     try {
-      await chunkYOVZMN4P_cjs.hydrateSession(this.agentId, { store: this.sessionStore, cwd: this.workspaceCwd });
+      await chunkLXG6VL6R_cjs.hydrateSession(this.agentId, { store: this.sessionStore, cwd: this.workspaceCwd });
       await this.personalityStore.hydrate(this.agentId);
     } catch (err) {
       await releaseLeaseIfPossible(this.sessionStore, this.agentId);
@@ -10648,22 +10828,22 @@ async function maybeInjectHandoffTools(options) {
   };
 }
 function keyWillFlowToProvider(apiKey, provider) {
-  if (chunkLSWHDOCL_cjs.isFixtureApiKey(apiKey)) return false;
-  if (chunkLSWHDOCL_cjs.getConfiguredBaseUrl() !== void 0) return false;
+  if (chunkSNVYOX46_cjs.isFixtureApiKey(apiKey)) return false;
+  if (chunkSNVYOX46_cjs.getConfiguredBaseUrl() !== void 0) return false;
   if (provider === void 0) return false;
-  const profile = chunkLO6LIUZ6_cjs.getProviderProfile(provider);
+  const profile = chunkR5UQL2R5_cjs.getProviderProfile(provider);
   if (profile === void 0) return false;
   return profile.authType !== "none";
 }
 function missingApiKeyMessage() {
-  const present = chunkLSWHDOCL_cjs.presentProviderCredentialEnvVars();
+  const present = chunkSNVYOX46_cjs.presentProviderCredentialEnvVars();
   const base = `Missing API key \u2014 set ${chunkRNXXYF22_cjs.API_KEY_ENV_VAR}, or pass \`apiKey\` to Agent.create()`;
   if (present.length === 0) return `${base}.`;
   return `${base}. ${present.join(" and ")} ${present.length === 1 ? "is" : "are"} set, but a provider credential is not read from the environment automatically \u2014 pass it explicitly, e.g. \`Agent.create({ apiKey: process.env.${present[0]}, ... })\`.`;
 }
 function providerNeedsCallerKey(provider) {
   if (provider === void 0) return true;
-  const profile = chunkLO6LIUZ6_cjs.getProviderProfile(provider);
+  const profile = chunkR5UQL2R5_cjs.getProviderProfile(provider);
   if (profile === void 0) return true;
   return profile.authType === "api_key";
 }
@@ -10676,7 +10856,7 @@ async function createLocalAgent(options) {
     }
   } else {
     const willFlowToProvider = keyWillFlowToProvider(apiKey, provider);
-    const shape = chunkLSWHDOCL_cjs.validateApiKeyShape(apiKey, {
+    const shape = chunkSNVYOX46_cjs.validateApiKeyShape(apiKey, {
       strict: willFlowToProvider,
       ...willFlowToProvider ? { provider } : {}
     });
@@ -10695,15 +10875,15 @@ async function createCloudAgent(options) {
       code: "missing_api_key"
     });
   }
-  const shape = chunkLSWHDOCL_cjs.validateApiKeyShape(apiKey);
+  const shape = chunkSNVYOX46_cjs.validateApiKeyShape(apiKey);
   if (shape.malformed) {
     throw new chunkCEGU5AVD_cjs.AuthenticationError(shape.message, { code: "malformed_api_key" });
   }
-  const baseUrl = chunkLSWHDOCL_cjs.getConfiguredBaseUrl();
+  const baseUrl = chunkSNVYOX46_cjs.getConfiguredBaseUrl();
   if (baseUrl === void 0) {
     return new CloudAgent(options);
   }
-  const response = await chunkLSWHDOCL_cjs.httpRequest("/v1/agents", {
+  const response = await chunkSNVYOX46_cjs.httpRequest("/v1/agents", {
     apiKey,
     method: "POST",
     body: {
@@ -10728,7 +10908,7 @@ function resolveAgentPersistenceCwd(options) {
   return process.cwd();
 }
 async function rehydrateExistingAgent(agentId, existing, options) {
-  await chunkLSWHDOCL_cjs.discoverProviderPlugins();
+  await chunkSNVYOX46_cjs.discoverProviderPlugins();
   await validateRehydratedAgent(agentId, existing);
   const mergedLocal = options.local !== void 0 && existing.options.local !== void 0 ? { ...existing.options.local, ...options.local } : options.local ?? existing.options.local;
   const mergedMemory = mergeResumedMemory(existing.options.memory, options.memory);
@@ -10888,7 +11068,7 @@ var Agent = class _Agent {
       pluginCount: enabledPluginNames(options.plugins).length
     });
     try {
-      await chunkLSWHDOCL_cjs.discoverProviderPlugins();
+      await chunkSNVYOX46_cjs.discoverProviderPlugins();
       const agent = await runCreateUnderSpan(options, span);
       return agent;
     } catch (err) {
@@ -10986,7 +11166,7 @@ var Agent = class _Agent {
    * @public
    */
   static async generateObject(options) {
-    const { generateObjectImpl } = await import('./generate-object-XBWD2PU7.cjs');
+    const { generateObjectImpl } = await import('./generate-object-A5F576IT.cjs');
     return generateObjectImpl(options, {
       create: (opts) => _Agent.create(opts),
       delete: (agentId) => _Agent.delete(agentId)
@@ -11010,7 +11190,7 @@ var Agent = class _Agent {
       delete: (agentId) => _Agent.delete(agentId)
     };
     async function* wrapper() {
-      streamObjectImport ??= import('./stream-object-TEEK3CAX.cjs');
+      streamObjectImport ??= import('./stream-object-AS4YYM4B.cjs');
       const { streamObjectImpl } = await streamObjectImport;
       yield* streamObjectImpl(options, deps);
     }
@@ -11186,9 +11366,9 @@ var Agent = class _Agent {
    */
   static async compact(agentId, options = {}) {
     const reg = await requireLocalAgent(agentId, "compact");
-    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-NM56BREJ.cjs');
+    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-D2MQDB6G.cjs');
     const { cwd, model, store } = await openLocalStore(reg);
-    return chunkYOVZMN4P_cjs.enqueueSessionWrite(
+    return chunkLXG6VL6R_cjs.enqueueSessionWrite(
       cwd,
       agentId,
       () => compactSessionTranscript({
@@ -11216,7 +11396,7 @@ var Agent = class _Agent {
    */
   static async injectSessionTurn(agentId, turn) {
     const reg = await requireLocalAgent(agentId, "injectSessionTurn");
-    const { injectSessionTurn } = await import('./inject-session-JVTZNQF6.cjs');
+    const { injectSessionTurn } = await import('./inject-session-3ICZIJ2N.cjs');
     const { cwd, model, store } = await openLocalStore(reg);
     await injectSessionTurn({
       store,
@@ -11387,5 +11567,5 @@ exports.managedSettingsPathFor = managedSettingsPathFor;
 exports.openRouterMemoryEmbeddingProviderAdapter = openRouterMemoryEmbeddingProviderAdapter;
 exports.readManagedSettings = readManagedSettings;
 exports.resolveSessionDir = resolveSessionDir;
-//# sourceMappingURL=chunk-Q6WT5535.cjs.map
-//# sourceMappingURL=chunk-Q6WT5535.cjs.map
+//# sourceMappingURL=chunk-2WY2OFSC.cjs.map
+//# sourceMappingURL=chunk-2WY2OFSC.cjs.map