@theokit/sdk 5.13.0 → 5.14.0

package/dist/{inject-session-WOH7TPDX.cjs → inject-session-3ICZIJ2N.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkDVP3YMDA_cjs = require('./chunk-DVP3YMDA.cjs');
+var chunkLXG6VL6R_cjs = require('./chunk-LXG6VL6R.cjs');
 var chunkYJNYDJ2T_cjs = require('./chunk-YJNYDJ2T.cjs');
 require('./chunk-MSW7LB2V.cjs');
 var chunk3WKWBYPO_cjs = require('./chunk-3WKWBYPO.cjs');
@@ -10,7 +10,7 @@ require('./chunk-RNXXYF22.cjs');
 
 // src/internal/session/inject-session.ts
 async function injectSessionTurn(opts) {
-  await chunkDVP3YMDA_cjs.enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {
+  await chunkLXG6VL6R_cjs.enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {
     const prior = await opts.store.readRecords(opts.loc.agentId);
     const transcript = chunk3WKWBYPO_cjs.SessionTranscript.fromRecords(prior, {
       cwd: opts.loc.cwd,
@@ -25,5 +25,5 @@ async function injectSessionTurn(opts) {
 }
 
 exports.injectSessionTurn = injectSessionTurn;
-//# sourceMappingURL=inject-session-WOH7TPDX.cjs.map
-//# sourceMappingURL=inject-session-WOH7TPDX.cjs.map
+//# sourceMappingURL=inject-session-3ICZIJ2N.cjs.map
+//# sourceMappingURL=inject-session-3ICZIJ2N.cjs.map

package/dist/{inject-session-WOH7TPDX.cjs.map → inject-session-3ICZIJ2N.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":["enqueueSessionWrite","SessionTranscript","invalidateSessionCache"],"mappings":";;;;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAMA,sCAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAaC,mCAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAAC,wCAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-WOH7TPDX.cjs","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}
+{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":["enqueueSessionWrite","SessionTranscript","invalidateSessionCache"],"mappings":";;;;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAMA,sCAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAaC,mCAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAAC,wCAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-3ICZIJ2N.cjs","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}

package/dist/{inject-session-75L3NCNL.js → inject-session-J26SHHIO.js}

@@ -1,4 +1,4 @@
-import { enqueueSessionWrite } from './chunk-XOYNB3YN.js';
+import { enqueueSessionWrite } from './chunk-3ONIVO2I.js';
 import { invalidateSessionCache } from './chunk-2XC6KDJM.js';
 import './chunk-AGO5S5WD.js';
 import { SessionTranscript } from './chunk-XESYJ4JC.js';
@@ -23,5 +23,5 @@ async function injectSessionTurn(opts) {
 }
 
 export { injectSessionTurn };
-//# sourceMappingURL=inject-session-75L3NCNL.js.map
-//# sourceMappingURL=inject-session-75L3NCNL.js.map
+//# sourceMappingURL=inject-session-J26SHHIO.js.map
+//# sourceMappingURL=inject-session-J26SHHIO.js.map

package/dist/{inject-session-75L3NCNL.js.map → inject-session-J26SHHIO.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":[],"mappings":";;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAM,oBAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAa,iBAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAA,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-75L3NCNL.js","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}
+{"version":3,"sources":["../src/internal/session/inject-session.ts"],"names":[],"mappings":";;;;;;;;;AAWA,eAAsB,kBAAkB,IAAA,EAMtB;AAChB,EAAA,MAAM,oBAAoB,IAAA,CAAK,GAAA,CAAI,KAAK,IAAA,CAAK,GAAA,CAAI,SAAS,YAAY;AACpE,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,MAAM,WAAA,CAAY,IAAA,CAAK,IAAI,OAAO,CAAA;AAC3D,IAAA,MAAM,UAAA,GAAa,iBAAA,CAAkB,WAAA,CAAY,KAAA,EAAO;AAAA,MACtD,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,KAAA,EAAO,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS;AAAA,KAC1B,CAAA;AACD,IAAA,UAAA,CAAW,cAAA,CAAe,KAAK,QAAQ,CAAA;AACvC,IAAA,UAAA,CAAW,mBAAA,CAAoB,EAAE,IAAA,EAAM,IAAA,CAAK,eAAe,CAAA;AAC3D,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,OAAA,EAAQ,CAAE,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACzF,IAAA,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,IAAA,CAAK,IAAI,OAAO,CAAA;AAAA,EACvD,CAAC,CAAA;AACH","file":"inject-session-J26SHHIO.js","sourcesContent":["/**\n * M51 (agent-builder) — inject a SYNTHETIC user+assistant pair into a session's persisted transcript\n * WITHOUT running an LLM turn. This is the Codex review-exit mechanism (`exit_success.xml` appended to\n * the parent thread history so follow-ups like \"fix finding 2\" work): the pair chains onto the DAG\n * leaf (M50 pattern) and the in-memory cache is invalidated so the NEXT send re-hydrates with it.\n */\nimport type { SessionStore } from \"../../types/session-store.js\";\nimport { SessionTranscript } from \"../persistence/session-transcript.js\";\nimport { enqueueSessionWrite, invalidateSessionCache } from \"./agent-session.js\";\nimport type { CompactLocation } from \"./compact-session.js\";\n\nexport async function injectSessionTurn(opts: {\n  store: SessionStore;\n  loc: CompactLocation;\n  sessionId: string;\n  userText: string;\n  assistantText: string;\n}): Promise<void> {\n  await enqueueSessionWrite(opts.loc.cwd, opts.loc.agentId, async () => {\n    const prior = await opts.store.readRecords(opts.loc.agentId);\n    const transcript = SessionTranscript.fromRecords(prior, {\n      cwd: opts.loc.cwd,\n      sessionId: opts.sessionId,\n      model: opts.loc.model ?? \"unknown\",\n    });\n    transcript.appendUserTurn(opts.userText);\n    transcript.appendAssistantTurn({ text: opts.assistantText });\n    await opts.store.appendRecords(opts.loc.agentId, transcript.records().slice(prior.length));\n    invalidateSessionCache(opts.loc.cwd, opts.loc.agentId);\n  });\n}\n"]}

package/dist/internal/agent-loop/prune-tool-results.d.ts

@@ -0,0 +1,37 @@
+/**
+ * B-564 — opt-in pruning of aged tool results from the next LLM request.
+ *
+ * The loop resends every tool result of a run on every later call; with
+ * `SendOptions.pruneToolResults` set, results older than `olderThanRounds` tool rounds are
+ * replaced by a short stub in the REQUEST copy only. The transcript the loop keeps, persists and
+ * resumes from is never touched, so a pruned result can always be recovered (plan D1).
+ *
+ * Position among tool-result messages is the round distance: at call n the newest tool-result
+ * message is round n - 1. So no round counter is threaded through the loop. Text-only feedback
+ * messages the loop pushes between rounds carry no `tool_result` part and do not count.
+ *
+ * A pruned part keeps its `toolUseId` and `isError`: every `tool_use` must still have a paired
+ * `tool_result` on both wires, so the result is shortened, never removed.
+ */
+import type { PruneToolResultsOptions } from "../../types/run.js";
+import type { LlmMessage } from "../llm/types.js";
+export type { PruneToolResultsOptions } from "../../types/run.js";
+/**
+ * Build the messages for one LLM request with aged tool results replaced by a stub.
+ *
+ * Each new round stubs one more previously sent result, so on providers that cache message
+ * prefixes the cached prefix ends earlier; that cost was not measured.
+ *
+ * @param messages - The loop transcript. Never mutated.
+ * @param options - Absent means no pruning: the input array itself is returned, so the
+ *   option-off request is byte-identical to the transcript.
+ * @returns A new array when `options` is set; untouched messages are the same objects.
+ */
+export declare function pruneToolResultsForRequest(messages: LlmMessage[], options: PruneToolResultsOptions | undefined): LlmMessage[];
+/**
+ * Fail fast on an option that cannot describe an age in rounds.
+ *
+ * @throws ConfigurationError with code `invalid_prune_tool_results` when `olderThanRounds` is
+ *   not an integer of at least 1.
+ */
+export declare function validatePruneToolResults(options: PruneToolResultsOptions | undefined): void;

package/dist/internal/auth/credential-store.d.ts

@@ -69,7 +69,7 @@ export declare function readStoredOAuth(config: CredentialStoreConfig, env?: Rec
  * file in the same directory with `wx` (O_EXCL), fsync, close, chmod, then `rename` (atomic on POSIX) —
  * so a crash mid-write leaves whatever was there untouched, and a pre-planted symlink cannot capture the
  * key. The api variant persists the unchanged `{provider, api_key}` (back-compat, no `type` key); the
- * oauth variant persists `{type:'oauth', provider, access, refresh, expires, account_id?}`.
+ * oauth variant persists `{type:'oauth', provider, access, refresh, expires, account_id?, id_token?}`.
  */
 export declare function writeCredential(cred: {
     provider: string;

package/dist/internal/auth/types.d.ts

@@ -109,6 +109,8 @@ export interface StoredOAuthCredential {
     /** Epoch ms the access token expires. */
     expires: number;
     account_id?: string;
+    /** The provider's OpenID ID token, when its token endpoint returned one (#821). */
+    id_token?: string;
 }
 /**
  * Whatever the credential file turned out to hold — the two variants are discriminated by `type`.
@@ -137,6 +139,8 @@ export interface OAuthTokens {
     /** Epoch ms the access token expires. */
     expires: number;
     accountId?: string;
+    /** The OpenID ID token, when the token endpoint returned one (#821). */
+    idToken?: string;
 }
 /** Injected HTTP + clock effects — deterministic in tests, real in production. */
 export interface HttpDeps {

package/dist/internal/runtime/skills/binary-on-path.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/internal/runtime/skills/discover-skills.d.ts

@@ -13,6 +13,8 @@ export interface Skill {
     source: string;
     category?: string;
     dependencies?: string[];
+    /** `requires-bins` — executables that must be on PATH for the model to be offered this skill. */
+    requiresBins?: string[];
     /** `disable-model-invocation: true` — the model is never told this skill exists. */
     disableModelInvocation?: boolean;
     /** `user-invocable: false` — carried for a host that has a picker; this SDK has no such surface. */

package/dist/mcp-auth.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkZOFRNNZD_cjs = require('./chunk-ZOFRNNZD.cjs');
-var chunkQISSETTG_cjs = require('./chunk-QISSETTG.cjs');
+var chunk5645PMVU_cjs = require('./chunk-5645PMVU.cjs');
 var chunkCEGU5AVD_cjs = require('./chunk-CEGU5AVD.cjs');
 var chunkRNXXYF22_cjs = require('./chunk-RNXXYF22.cjs');
 var crypto = require('crypto');
@@ -92,7 +92,7 @@ async function getTokens(serverName) {
   }
   const filePath = storeFilePath();
   if (!fs.existsSync(filePath)) return void 0;
-  chunkQISSETTG_cjs.assertSecureModes(path.dirname(filePath), filePath);
+  chunk5645PMVU_cjs.assertSecureModes(path.dirname(filePath), filePath);
   try {
     const all = JSON.parse(fs.readFileSync(filePath, "utf8"));
     return all[serverName];

package/dist/mcp-auth.js

@@ -1,5 +1,5 @@
 import { atomicWriteJson } from './chunk-M4U24U6G.js';
-import { assertSecureModes } from './chunk-MS3TQSXU.js';
+import { assertSecureModes } from './chunk-QD6B6W6I.js';
 import { ConfigurationError } from './chunk-TNFOU6SB.js';
 import { diag } from './chunk-3OY6H3I7.js';
 import { randomBytes, createHash } from 'crypto';

package/dist/models.cjs

@@ -1,12 +1,12 @@
 'use strict';
 
 var chunk7INPXUJI_cjs = require('./chunk-7INPXUJI.cjs');
-var chunkNWWTYBD3_cjs = require('./chunk-NWWTYBD3.cjs');
+var chunk4KBI37F3_cjs = require('./chunk-4KBI37F3.cjs');
 var chunk3EE6LVWT_cjs = require('./chunk-3EE6LVWT.cjs');
-var chunkS46WJTDL_cjs = require('./chunk-S46WJTDL.cjs');
+var chunk4TEGFMSP_cjs = require('./chunk-4TEGFMSP.cjs');
 require('./chunk-NVXXWAU7.cjs');
-require('./chunk-5A4UFBHW.cjs');
-require('./chunk-QISSETTG.cjs');
+require('./chunk-A77UMVMD.cjs');
+require('./chunk-5645PMVU.cjs');
 require('./chunk-IOFMRS6T.cjs');
 var chunkEHD25JBZ_cjs = require('./chunk-EHD25JBZ.cjs');
 require('./chunk-CEGU5AVD.cjs');
@@ -85,7 +85,7 @@ function catalogTargets() {
   if (_catalogTargets !== void 0) return _catalogTargets;
   _catalogTargets = /* @__PURE__ */ new Map();
   try {
-    for (const entry of Object.values(chunkS46WJTDL_cjs.loadProviderCatalog())) {
+    for (const entry of Object.values(chunk4TEGFMSP_cjs.loadProviderCatalog())) {
       const keys = [entry.id, ...entry.aliases ?? []];
       for (const k of keys) {
         if (!_catalogTargets.has(k)) _catalogTargets.set(k, { keys });
@@ -99,7 +99,7 @@ function resolvePatchKeys(externalId) {
   const mapped = MODELS_DEV_ID_MAP[externalId] ?? externalId;
   const fromCatalog = catalogTargets().get(mapped);
   if (fromCatalog !== void 0) return fromCatalog.keys;
-  const profile = chunkS46WJTDL_cjs.getProviderProfile(mapped);
+  const profile = chunk4TEGFMSP_cjs.getProviderProfile(mapped);
   if (profile !== void 0) return [profile.name, ...profile.aliases ?? []];
   return void 0;
 }
@@ -116,9 +116,9 @@ function patchIndexFromApiJson(raw) {
       continue;
     }
     for (const [modelId, rawModel] of Object.entries(models)) {
-      const parsed = chunkS46WJTDL_cjs.catalogModelSchema.safeParse(rawModel);
+      const parsed = chunk4TEGFMSP_cjs.catalogModelSchema.safeParse(rawModel);
       if (!parsed.success) continue;
-      for (const key of keys) chunkS46WJTDL_cjs.patchModelInfo(`${key}/${modelId}`, parsed.data);
+      for (const key of keys) chunk4TEGFMSP_cjs.patchModelInfo(`${key}/${modelId}`, parsed.data);
       patched++;
     }
   }
@@ -218,7 +218,7 @@ function persistAndPatch(path, body) {
   }
 }
 async function refreshModelCatalog(opts = {}) {
-  chunkS46WJTDL_cjs.registerBuiltins();
+  chunk4TEGFMSP_cjs.registerBuiltins();
   if (fetchDisabledByEnv()) return { source: "skipped", models: 0 };
   const url = opts.url ?? process.env.THEOKIT_MODELS_URL ?? DEFAULT_URL;
   const path = cachePathFor(url);
@@ -232,12 +232,12 @@ async function refreshModelCatalog(opts = {}) {
   return persistAndPatch(path, body);
 }
 function getModelInfo(modelId) {
-  return chunkS46WJTDL_cjs.getCatalogModelInfo(modelId);
+  return chunk4TEGFMSP_cjs.getCatalogModelInfo(modelId);
 }
 
 Object.defineProperty(exports, "resolveModelCapabilities", {
   enumerable: true,
-  get: function () { return chunkNWWTYBD3_cjs.resolveModelCapabilities; }
+  get: function () { return chunk4KBI37F3_cjs.resolveModelCapabilities; }
 });
 Object.defineProperty(exports, "parseModelId", {
   enumerable: true,

package/dist/models.js

@@ -1,11 +1,11 @@
 import { Retry } from './chunk-2S4HQCDF.js';
-export { resolveModelCapabilities } from './chunk-2SFLLOMN.js';
+export { resolveModelCapabilities } from './chunk-NVQSBRG6.js';
 import { parseModelId } from './chunk-R7WIIPUR.js';
 export { parseModelId } from './chunk-R7WIIPUR.js';
-import { registerBuiltins, getCatalogModelInfo, catalogModelSchema, patchModelInfo, getProviderProfile, loadProviderCatalog } from './chunk-5HSMH2ZZ.js';
+import { registerBuiltins, getCatalogModelInfo, catalogModelSchema, patchModelInfo, getProviderProfile, loadProviderCatalog } from './chunk-CJN5CEI3.js';
 import './chunk-AGACYRJ2.js';
-import './chunk-3FSBE4PS.js';
-import './chunk-MS3TQSXU.js';
+import './chunk-3GTN4HOO.js';
+import './chunk-QD6B6W6I.js';
 import './chunk-5IUDICRK.js';
 import { boundFetch } from './chunk-Q7GYMXVC.js';
 import './chunk-TNFOU6SB.js';

package/dist/providers.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunkLO6LIUZ6_cjs = require('./chunk-LO6LIUZ6.cjs');
-require('./chunk-S46WJTDL.cjs');
+var chunkR5UQL2R5_cjs = require('./chunk-R5UQL2R5.cjs');
+require('./chunk-4TEGFMSP.cjs');
 require('./chunk-NVXXWAU7.cjs');
-require('./chunk-5A4UFBHW.cjs');
-require('./chunk-QISSETTG.cjs');
+require('./chunk-A77UMVMD.cjs');
+require('./chunk-5645PMVU.cjs');
 require('./chunk-IOFMRS6T.cjs');
 require('./chunk-EHD25JBZ.cjs');
 require('./chunk-CEGU5AVD.cjs');
@@ -14,11 +14,11 @@ require('./chunk-RNXXYF22.cjs');
 
 Object.defineProperty(exports, "getProviderProfile", {
   enumerable: true,
-  get: function () { return chunkLO6LIUZ6_cjs.getProviderProfile; }
+  get: function () { return chunkR5UQL2R5_cjs.getProviderProfile; }
 });
 Object.defineProperty(exports, "listProviders", {
   enumerable: true,
-  get: function () { return chunkLO6LIUZ6_cjs.listProviders; }
+  get: function () { return chunkR5UQL2R5_cjs.listProviders; }
 });
 //# sourceMappingURL=providers.cjs.map
 //# sourceMappingURL=providers.cjs.map

package/dist/providers.js

@@ -1,8 +1,8 @@
-export { getProviderProfile, listProviders } from './chunk-NKQVLWDF.js';
-import './chunk-5HSMH2ZZ.js';
+export { getProviderProfile, listProviders } from './chunk-ULEK4OM4.js';
+import './chunk-CJN5CEI3.js';
 import './chunk-AGACYRJ2.js';
-import './chunk-3FSBE4PS.js';
-import './chunk-MS3TQSXU.js';
+import './chunk-3GTN4HOO.js';
+import './chunk-QD6B6W6I.js';
 import './chunk-5IUDICRK.js';
 import './chunk-Q7GYMXVC.js';
 import './chunk-TNFOU6SB.js';

package/dist/{sdk-agent-4-dXI2GS.d.cts → sdk-agent-DwzHcuxy.d.cts}

@@ -1577,6 +1577,17 @@ interface ToolResultGuardOptions {
     /** Redact common PII patterns (email, phone) in tool-result content. */
     redactPii?: boolean;
 }
+/**
+ * B-564 — how old a tool result may get, in tool rounds, before its content is pruned from the
+ * next LLM request (`SendOptions.pruneToolResults`). Contract type owned by `types/`; the
+ * implementation lives in `internal/agent-loop/prune-tool-results.ts`, which re-exports this.
+ *
+ * @public
+ */
+interface PruneToolResultsOptions {
+    /** Keep the newest `olderThanRounds` tool rounds whole; an integer of at least 1. */
+    olderThanRounds: number;
+}
 /**
  * Lifecycle status of a {@link Run}.
  *
@@ -1868,7 +1879,7 @@ interface SDKUserMessage {
  *
  * ## Which options do I need?
  *
- * Twenty-one optional fields with genuinely different audiences, so most callers read all of them to
+ * Twenty-two optional fields with genuinely different audiences, so most callers read all of them to
  * find their two. This table is the fix that was chosen; the alternative — nesting the groups under
  * `observe?` and `toolPolicy?` and carrying the flat keys as deprecated aliases for one major — would
  * have added surface to remove surface, and the harm here is the READING cost, not a representable
@@ -1878,7 +1889,7 @@ interface SDKUserMessage {
  * | If you are… | you want |
  * |---|---|
  * | rendering a live UI | `onDelta`, `onStep`, `onRunEvent` |
- * | applying a policy | `permissionMode`, `activeTools`, `toolChoice`, `toolResultGuard`, `perToolTimeoutMs` |
+ * | applying a policy | `permissionMode`, `activeTools`, `toolChoice`, `toolResultGuard`, `pruneToolResults`, `perToolTimeoutMs` |
  * | running an eval or a harness | `maxIterations`, `completionCheck`, `doomLoop`, `signal` |
  * | orchestrating agents | `origin`, `task`, `context` |
  * | overriding this one send | `model`, `systemPrompt`, `tools`, `mcpServers`, `contextPaths`, `local` |
@@ -2023,6 +2034,20 @@ interface SendOptions {
      * @public
      */
     toolResultGuard?: ToolResultGuardOptions;
+    /**
+     * B-564 — opt-in pruning of aged tool results. With `{ olderThanRounds: n }`, the content of
+     * every tool result older than `n` tool rounds is replaced by a short stub in each request the
+     * run's agent loop sends (its `toolUseId` and `isError` kept; session compaction is not pruned); the transcript the run keeps, persists and resumes
+     * from stays whole. `olderThanRounds` must be an integer of at least 1, else the send fails
+     * with `ConfigurationError` code `invalid_prune_tool_results` before any provider call.
+     * Undefined = no pruning (the request is unchanged). Pruning trades request size against
+     * prefix-cache reuse: each new round turns one more previously sent result into a stub, so the
+     * request prefix changes from that message onward on providers that cache message prefixes.
+     * The cache-hit cost was not measured.
+     *
+     * @public
+     */
+    pruneToolResults?: PruneToolResultsOptions;
     /**
      * Opt-in task wrapping (ADRs D363, D374). When truthy, the entire
      * run is registered as a `Task` in the SDK's observable registry —
@@ -2557,4 +2582,4 @@ interface InvalidateCacheOptions {
     applyNow?: boolean;
 }
 
-export type { OutputProcessorContext as $, AgentConversationTurn as A, GenerateRunResult as B, ContextSettings as C, DoomLoopThresholds as D, EnvPolicy as E, ForkOptions as F, GoalOptions as G, InteractionUpdate as H, InputProcessorContext as I, JudgeResult as J, InvalidateCacheOptions as K, McpAuthConfig as L, McpServerConfig as M, McpHttpServerConfig as N, McpOAuthConfig as O, ProviderRoutingSettings as P, McpStdioServerConfig as Q, RunResult as R, SDKAgent as S, MemoryAdapter as T, MemoryAdapterCapabilities as U, MemoryContext as V, MemoryFact as W, MemoryRevision as X, MemoryToolSchema as Y, MemoryTurnMessage as Z, MessageOrigin as _, PluginsSettings as a, ToolCall as a$, PartialToolCallUpdate as a0, PersonalityPreset as a1, ProcessorControls as a2, ProcessorTripwire as a3, ProcessorViolation as a4, ProviderCapability as a5, ProviderRoute as a6, ResolvedProviderRoute as a7, RunCompactBoundaryEvent as a8, RunCompletionCheckEvent as a9, SDKProvidersManager as aA, SDKRequestMessage as aB, SDKStatusMessage as aC, SDKSystemMessage as aD, SDKTaskMessage as aE, SDKThinkingMessage as aF, SDKToolUseMessage as aG, SDKUserMessage as aH, SDKUserMessageEvent as aI, SendOptions as aJ, ShellCommand as aK, ShellConversationTurn as aL, ShellOutput as aM, ShellOutputDeltaUpdate as aN, StepCompletedUpdate as aO, StepStartedUpdate as aP, StreamToCompletionResult as aQ, SummaryCompletedUpdate as aR, SummaryStartedUpdate as aS, SummaryUpdate as aT, SystemPromptSkillRef as aU, TextDeltaUpdate as aV, ThinkingCompletedUpdate as aW, ThinkingDeltaUpdate as aX, ThinkingMessage as aY, TokenDeltaUpdate as aZ, TokenUsage as a_, RunErrorDetail as aa, RunEvent as ab, RunGitInfo as ac, RunMemoryDegradedEvent as ad, RunPermissionDeniedEvent as ae, RunRateLimitEvent as af, RunStatus as ag, RunTaskCompletedEvent as ah, RunTaskStartedEvent as ai, RunTaskUpdatedEvent as aj, RunTimelineEvent as ak, RunToCompletionOptions as al, RunToCompletionResult as am, RunToolProgressEvent as an, RunTripwireEvent as ao, RunUntilIterator as ap, SDKAgentPlugins as aq, SDKAgentSkillDetail as ar, SDKAgentSkills as as, SDKArtifact as at, SDKAssistantMessage as au, SDKContextManager as av, SDKImage as aw, SDKImageDimension as ax, SDKObjectDelta as ay, SDKPluginMetadata as az, Run as b, ToolCallCompletedUpdate as b0, ToolCallStartedUpdate as b1, ToolResult as b2, ToolResultGuardOptions as b3, ToolUseBlock as b4, TurnEndedUpdate as b5, UserMessage as b6, UserMessageAppendedUpdate as b7, Verdict as b8, Processor as c, GoalEvent as d, GoalResult as e, MemoryId as f, RunEventSink as g, SDKProvider as h, SDKMessage as i, AgentMemory as j, AgentOperation as k, AssistantMessage as l, CompletionCheck as m, CompletionCheckResult as n, ContextBudget as o, ContextManagerKind as p, ContextSnapshot as q, ContextSource as r, ContextSourceStatus as s, ConversationStep as t, ConversationTurn as u, CostBreakdown as v, CostSource as w, CostStatus as x, ForkResult as y, GenerateOptions as z };
+export type { OutputProcessorContext as $, AgentConversationTurn as A, GenerateRunResult as B, ContextSettings as C, DoomLoopThresholds as D, EnvPolicy as E, ForkOptions as F, GoalOptions as G, InteractionUpdate as H, InputProcessorContext as I, JudgeResult as J, InvalidateCacheOptions as K, McpAuthConfig as L, McpServerConfig as M, McpHttpServerConfig as N, McpOAuthConfig as O, ProviderRoutingSettings as P, McpStdioServerConfig as Q, RunResult as R, SDKAgent as S, MemoryAdapter as T, MemoryAdapterCapabilities as U, MemoryContext as V, MemoryFact as W, MemoryRevision as X, MemoryToolSchema as Y, MemoryTurnMessage as Z, MessageOrigin as _, PluginsSettings as a, TokenUsage as a$, PartialToolCallUpdate as a0, PersonalityPreset as a1, ProcessorControls as a2, ProcessorTripwire as a3, ProcessorViolation as a4, ProviderCapability as a5, ProviderRoute as a6, PruneToolResultsOptions as a7, ResolvedProviderRoute as a8, RunCompactBoundaryEvent as a9, SDKPluginMetadata as aA, SDKProvidersManager as aB, SDKRequestMessage as aC, SDKStatusMessage as aD, SDKSystemMessage as aE, SDKTaskMessage as aF, SDKThinkingMessage as aG, SDKToolUseMessage as aH, SDKUserMessage as aI, SDKUserMessageEvent as aJ, SendOptions as aK, ShellCommand as aL, ShellConversationTurn as aM, ShellOutput as aN, ShellOutputDeltaUpdate as aO, StepCompletedUpdate as aP, StepStartedUpdate as aQ, StreamToCompletionResult as aR, SummaryCompletedUpdate as aS, SummaryStartedUpdate as aT, SummaryUpdate as aU, SystemPromptSkillRef as aV, TextDeltaUpdate as aW, ThinkingCompletedUpdate as aX, ThinkingDeltaUpdate as aY, ThinkingMessage as aZ, TokenDeltaUpdate as a_, RunCompletionCheckEvent as aa, RunErrorDetail as ab, RunEvent as ac, RunGitInfo as ad, RunMemoryDegradedEvent as ae, RunPermissionDeniedEvent as af, RunRateLimitEvent as ag, RunStatus as ah, RunTaskCompletedEvent as ai, RunTaskStartedEvent as aj, RunTaskUpdatedEvent as ak, RunTimelineEvent as al, RunToCompletionOptions as am, RunToCompletionResult as an, RunToolProgressEvent as ao, RunTripwireEvent as ap, RunUntilIterator as aq, SDKAgentPlugins as ar, SDKAgentSkillDetail as as, SDKAgentSkills as at, SDKArtifact as au, SDKAssistantMessage as av, SDKContextManager as aw, SDKImage as ax, SDKImageDimension as ay, SDKObjectDelta as az, Run as b, ToolCall as b0, ToolCallCompletedUpdate as b1, ToolCallStartedUpdate as b2, ToolResult as b3, ToolResultGuardOptions as b4, ToolUseBlock as b5, TurnEndedUpdate as b6, UserMessage as b7, UserMessageAppendedUpdate as b8, Verdict as b9, Processor as c, GoalEvent as d, GoalResult as e, MemoryId as f, RunEventSink as g, SDKProvider as h, SDKMessage as i, AgentMemory as j, AgentOperation as k, AssistantMessage as l, CompletionCheck as m, CompletionCheckResult as n, ContextBudget as o, ContextManagerKind as p, ContextSnapshot as q, ContextSource as r, ContextSourceStatus as s, ConversationStep as t, ConversationTurn as u, CostBreakdown as v, CostSource as w, CostStatus as x, ForkResult as y, GenerateOptions as z };

package/dist/{sdk-agent-CTOJlWA_.d.ts → sdk-agent-a3fW1xUK.d.ts}

@@ -1577,6 +1577,17 @@ interface ToolResultGuardOptions {
     /** Redact common PII patterns (email, phone) in tool-result content. */
     redactPii?: boolean;
 }
+/**
+ * B-564 — how old a tool result may get, in tool rounds, before its content is pruned from the
+ * next LLM request (`SendOptions.pruneToolResults`). Contract type owned by `types/`; the
+ * implementation lives in `internal/agent-loop/prune-tool-results.ts`, which re-exports this.
+ *
+ * @public
+ */
+interface PruneToolResultsOptions {
+    /** Keep the newest `olderThanRounds` tool rounds whole; an integer of at least 1. */
+    olderThanRounds: number;
+}
 /**
  * Lifecycle status of a {@link Run}.
  *
@@ -1868,7 +1879,7 @@ interface SDKUserMessage {
  *
  * ## Which options do I need?
  *
- * Twenty-one optional fields with genuinely different audiences, so most callers read all of them to
+ * Twenty-two optional fields with genuinely different audiences, so most callers read all of them to
  * find their two. This table is the fix that was chosen; the alternative — nesting the groups under
  * `observe?` and `toolPolicy?` and carrying the flat keys as deprecated aliases for one major — would
  * have added surface to remove surface, and the harm here is the READING cost, not a representable
@@ -1878,7 +1889,7 @@ interface SDKUserMessage {
  * | If you are… | you want |
  * |---|---|
  * | rendering a live UI | `onDelta`, `onStep`, `onRunEvent` |
- * | applying a policy | `permissionMode`, `activeTools`, `toolChoice`, `toolResultGuard`, `perToolTimeoutMs` |
+ * | applying a policy | `permissionMode`, `activeTools`, `toolChoice`, `toolResultGuard`, `pruneToolResults`, `perToolTimeoutMs` |
  * | running an eval or a harness | `maxIterations`, `completionCheck`, `doomLoop`, `signal` |
  * | orchestrating agents | `origin`, `task`, `context` |
  * | overriding this one send | `model`, `systemPrompt`, `tools`, `mcpServers`, `contextPaths`, `local` |
@@ -2023,6 +2034,20 @@ interface SendOptions {
      * @public
      */
     toolResultGuard?: ToolResultGuardOptions;
+    /**
+     * B-564 — opt-in pruning of aged tool results. With `{ olderThanRounds: n }`, the content of
+     * every tool result older than `n` tool rounds is replaced by a short stub in each request the
+     * run's agent loop sends (its `toolUseId` and `isError` kept; session compaction is not pruned); the transcript the run keeps, persists and resumes
+     * from stays whole. `olderThanRounds` must be an integer of at least 1, else the send fails
+     * with `ConfigurationError` code `invalid_prune_tool_results` before any provider call.
+     * Undefined = no pruning (the request is unchanged). Pruning trades request size against
+     * prefix-cache reuse: each new round turns one more previously sent result into a stub, so the
+     * request prefix changes from that message onward on providers that cache message prefixes.
+     * The cache-hit cost was not measured.
+     *
+     * @public
+     */
+    pruneToolResults?: PruneToolResultsOptions;
     /**
      * Opt-in task wrapping (ADRs D363, D374). When truthy, the entire
      * run is registered as a `Task` in the SDK's observable registry —
@@ -2557,4 +2582,4 @@ interface InvalidateCacheOptions {
     applyNow?: boolean;
 }
 
-export type { OutputProcessorContext as $, AgentConversationTurn as A, GenerateRunResult as B, ContextSettings as C, DoomLoopThresholds as D, EnvPolicy as E, ForkOptions as F, GoalOptions as G, InteractionUpdate as H, InputProcessorContext as I, JudgeResult as J, InvalidateCacheOptions as K, McpAuthConfig as L, McpServerConfig as M, McpHttpServerConfig as N, McpOAuthConfig as O, ProviderRoutingSettings as P, McpStdioServerConfig as Q, RunResult as R, SDKAgent as S, MemoryAdapter as T, MemoryAdapterCapabilities as U, MemoryContext as V, MemoryFact as W, MemoryRevision as X, MemoryToolSchema as Y, MemoryTurnMessage as Z, MessageOrigin as _, PluginsSettings as a, ToolCall as a$, PartialToolCallUpdate as a0, PersonalityPreset as a1, ProcessorControls as a2, ProcessorTripwire as a3, ProcessorViolation as a4, ProviderCapability as a5, ProviderRoute as a6, ResolvedProviderRoute as a7, RunCompactBoundaryEvent as a8, RunCompletionCheckEvent as a9, SDKProvidersManager as aA, SDKRequestMessage as aB, SDKStatusMessage as aC, SDKSystemMessage as aD, SDKTaskMessage as aE, SDKThinkingMessage as aF, SDKToolUseMessage as aG, SDKUserMessage as aH, SDKUserMessageEvent as aI, SendOptions as aJ, ShellCommand as aK, ShellConversationTurn as aL, ShellOutput as aM, ShellOutputDeltaUpdate as aN, StepCompletedUpdate as aO, StepStartedUpdate as aP, StreamToCompletionResult as aQ, SummaryCompletedUpdate as aR, SummaryStartedUpdate as aS, SummaryUpdate as aT, SystemPromptSkillRef as aU, TextDeltaUpdate as aV, ThinkingCompletedUpdate as aW, ThinkingDeltaUpdate as aX, ThinkingMessage as aY, TokenDeltaUpdate as aZ, TokenUsage as a_, RunErrorDetail as aa, RunEvent as ab, RunGitInfo as ac, RunMemoryDegradedEvent as ad, RunPermissionDeniedEvent as ae, RunRateLimitEvent as af, RunStatus as ag, RunTaskCompletedEvent as ah, RunTaskStartedEvent as ai, RunTaskUpdatedEvent as aj, RunTimelineEvent as ak, RunToCompletionOptions as al, RunToCompletionResult as am, RunToolProgressEvent as an, RunTripwireEvent as ao, RunUntilIterator as ap, SDKAgentPlugins as aq, SDKAgentSkillDetail as ar, SDKAgentSkills as as, SDKArtifact as at, SDKAssistantMessage as au, SDKContextManager as av, SDKImage as aw, SDKImageDimension as ax, SDKObjectDelta as ay, SDKPluginMetadata as az, Run as b, ToolCallCompletedUpdate as b0, ToolCallStartedUpdate as b1, ToolResult as b2, ToolResultGuardOptions as b3, ToolUseBlock as b4, TurnEndedUpdate as b5, UserMessage as b6, UserMessageAppendedUpdate as b7, Verdict as b8, Processor as c, GoalEvent as d, GoalResult as e, MemoryId as f, RunEventSink as g, SDKProvider as h, SDKMessage as i, AgentMemory as j, AgentOperation as k, AssistantMessage as l, CompletionCheck as m, CompletionCheckResult as n, ContextBudget as o, ContextManagerKind as p, ContextSnapshot as q, ContextSource as r, ContextSourceStatus as s, ConversationStep as t, ConversationTurn as u, CostBreakdown as v, CostSource as w, CostStatus as x, ForkResult as y, GenerateOptions as z };
+export type { OutputProcessorContext as $, AgentConversationTurn as A, GenerateRunResult as B, ContextSettings as C, DoomLoopThresholds as D, EnvPolicy as E, ForkOptions as F, GoalOptions as G, InteractionUpdate as H, InputProcessorContext as I, JudgeResult as J, InvalidateCacheOptions as K, McpAuthConfig as L, McpServerConfig as M, McpHttpServerConfig as N, McpOAuthConfig as O, ProviderRoutingSettings as P, McpStdioServerConfig as Q, RunResult as R, SDKAgent as S, MemoryAdapter as T, MemoryAdapterCapabilities as U, MemoryContext as V, MemoryFact as W, MemoryRevision as X, MemoryToolSchema as Y, MemoryTurnMessage as Z, MessageOrigin as _, PluginsSettings as a, TokenUsage as a$, PartialToolCallUpdate as a0, PersonalityPreset as a1, ProcessorControls as a2, ProcessorTripwire as a3, ProcessorViolation as a4, ProviderCapability as a5, ProviderRoute as a6, PruneToolResultsOptions as a7, ResolvedProviderRoute as a8, RunCompactBoundaryEvent as a9, SDKPluginMetadata as aA, SDKProvidersManager as aB, SDKRequestMessage as aC, SDKStatusMessage as aD, SDKSystemMessage as aE, SDKTaskMessage as aF, SDKThinkingMessage as aG, SDKToolUseMessage as aH, SDKUserMessage as aI, SDKUserMessageEvent as aJ, SendOptions as aK, ShellCommand as aL, ShellConversationTurn as aM, ShellOutput as aN, ShellOutputDeltaUpdate as aO, StepCompletedUpdate as aP, StepStartedUpdate as aQ, StreamToCompletionResult as aR, SummaryCompletedUpdate as aS, SummaryStartedUpdate as aT, SummaryUpdate as aU, SystemPromptSkillRef as aV, TextDeltaUpdate as aW, ThinkingCompletedUpdate as aX, ThinkingDeltaUpdate as aY, ThinkingMessage as aZ, TokenDeltaUpdate as a_, RunCompletionCheckEvent as aa, RunErrorDetail as ab, RunEvent as ac, RunGitInfo as ad, RunMemoryDegradedEvent as ae, RunPermissionDeniedEvent as af, RunRateLimitEvent as ag, RunStatus as ah, RunTaskCompletedEvent as ai, RunTaskStartedEvent as aj, RunTaskUpdatedEvent as ak, RunTimelineEvent as al, RunToCompletionOptions as am, RunToCompletionResult as an, RunToolProgressEvent as ao, RunTripwireEvent as ap, RunUntilIterator as aq, SDKAgentPlugins as ar, SDKAgentSkillDetail as as, SDKAgentSkills as at, SDKArtifact as au, SDKAssistantMessage as av, SDKContextManager as aw, SDKImage as ax, SDKImageDimension as ay, SDKObjectDelta as az, Run as b, ToolCall as b0, ToolCallCompletedUpdate as b1, ToolCallStartedUpdate as b2, ToolResult as b3, ToolResultGuardOptions as b4, ToolUseBlock as b5, TurnEndedUpdate as b6, UserMessage as b7, UserMessageAppendedUpdate as b8, Verdict as b9, Processor as c, GoalEvent as d, GoalResult as e, MemoryId as f, RunEventSink as g, SDKProvider as h, SDKMessage as i, AgentMemory as j, AgentOperation as k, AssistantMessage as l, CompletionCheck as m, CompletionCheckResult as n, ContextBudget as o, ContextManagerKind as p, ContextSnapshot as q, ContextSource as r, ContextSourceStatus as s, ConversationStep as t, ConversationTurn as u, CostBreakdown as v, CostSource as w, CostStatus as x, ForkResult as y, GenerateOptions as z };

package/dist/skills.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk7WARNHWW_cjs = require('./chunk-7WARNHWW.cjs');
+var chunk3UMPP553_cjs = require('./chunk-3UMPP553.cjs');
 require('./chunk-3KIUY67P.cjs');
 require('./chunk-SA6K24NB.cjs');
 require('./chunk-6XQLTQB6.cjs');
@@ -11,15 +11,15 @@ require('./chunk-RNXXYF22.cjs');
 
 Object.defineProperty(exports, "buildSkillsBlock", {
   enumerable: true,
-  get: function () { return chunk7WARNHWW_cjs.buildSkillsBlock; }
+  get: function () { return chunk3UMPP553_cjs.buildSkillsBlock; }
 });
 Object.defineProperty(exports, "discoverSkills", {
   enumerable: true,
-  get: function () { return chunk7WARNHWW_cjs.discoverSkills; }
+  get: function () { return chunk3UMPP553_cjs.discoverSkills; }
 });
 Object.defineProperty(exports, "loadSkillInstructions", {
   enumerable: true,
-  get: function () { return chunk7WARNHWW_cjs.loadSkillInstructions; }
+  get: function () { return chunk3UMPP553_cjs.loadSkillInstructions; }
 });
 //# sourceMappingURL=skills.cjs.map
 //# sourceMappingURL=skills.cjs.map

package/dist/skills.js

@@ -1,4 +1,4 @@
-export { buildSkillsBlock, discoverSkills, loadSkillInstructions } from './chunk-NHOEXFZT.js';
+export { buildSkillsBlock, discoverSkills, loadSkillInstructions } from './chunk-2HXTNVLM.js';
 import './chunk-PKRPV3R7.js';
 import './chunk-UKMBRMGT.js';
 import './chunk-Q7UG242V.js';

package/dist/subagents-loader.d.cts

@@ -1,5 +1,5 @@
-import { a as AgentDefinition } from './agent-iW5kPpfT.cjs';
-import './sdk-agent-4-dXI2GS.cjs';
+import { a as AgentDefinition } from './agent-DExqjqYy.cjs';
+import './sdk-agent-DwzHcuxy.cjs';
 import './agent-prims-CZyxfCmS.cjs';
 import 'zod';
 import './errors-base-B5g01neU.cjs';

package/dist/subagents-loader.d.ts

@@ -1,5 +1,5 @@
-import { a as AgentDefinition } from './agent-DSMuwADp.js';
-import './sdk-agent-CTOJlWA_.js';
+import { a as AgentDefinition } from './agent-Dfw3VsIX.js';
+import './sdk-agent-a3fW1xUK.js';
 import './agent-prims-CZyxfCmS.js';
 import 'zod';
 import './errors-base-B5g01neU.js';

package/dist/types/agent.d.ts

@@ -344,6 +344,12 @@ export interface SkillsSettings {
      * default `<cwd>/.theokit/skills`. Absent ⇒ the default root.
      */
     skillsDir?: string;
+    /**
+     * B-546 — directories (each containing `<name>/SKILL.md`) an application ships inside its own
+     * package. They are read AFTER the project roots and plugin bundles, so a workspace skill of the
+     * same name always wins, and they are kept even when `skillsDir` replaces the default roots.
+     */
+    bundledDirs?: string[];
     /**
      * M22 — code-defined skills (from `createSkill`) merged with the discovered ones. An inline skill
      * overrides a discovered file skill of the same name.

package/dist/types/run.d.ts

@@ -24,6 +24,17 @@ export interface ToolResultGuardOptions {
     /** Redact common PII patterns (email, phone) in tool-result content. */
     redactPii?: boolean;
 }
+/**
+ * B-564 — how old a tool result may get, in tool rounds, before its content is pruned from the
+ * next LLM request (`SendOptions.pruneToolResults`). Contract type owned by `types/`; the
+ * implementation lives in `internal/agent-loop/prune-tool-results.ts`, which re-exports this.
+ *
+ * @public
+ */
+export interface PruneToolResultsOptions {
+    /** Keep the newest `olderThanRounds` tool rounds whole; an integer of at least 1. */
+    olderThanRounds: number;
+}
 /**
  * Lifecycle status of a {@link Run}.
  *
@@ -315,7 +326,7 @@ export interface SDKUserMessage {
  *
  * ## Which options do I need?
  *
- * Twenty-one optional fields with genuinely different audiences, so most callers read all of them to
+ * Twenty-two optional fields with genuinely different audiences, so most callers read all of them to
  * find their two. This table is the fix that was chosen; the alternative — nesting the groups under
  * `observe?` and `toolPolicy?` and carrying the flat keys as deprecated aliases for one major — would
  * have added surface to remove surface, and the harm here is the READING cost, not a representable
@@ -325,7 +336,7 @@ export interface SDKUserMessage {
  * | If you are… | you want |
  * |---|---|
  * | rendering a live UI | `onDelta`, `onStep`, `onRunEvent` |
- * | applying a policy | `permissionMode`, `activeTools`, `toolChoice`, `toolResultGuard`, `perToolTimeoutMs` |
+ * | applying a policy | `permissionMode`, `activeTools`, `toolChoice`, `toolResultGuard`, `pruneToolResults`, `perToolTimeoutMs` |
  * | running an eval or a harness | `maxIterations`, `completionCheck`, `doomLoop`, `signal` |
  * | orchestrating agents | `origin`, `task`, `context` |
  * | overriding this one send | `model`, `systemPrompt`, `tools`, `mcpServers`, `contextPaths`, `local` |
@@ -470,6 +481,20 @@ export interface SendOptions {
      * @public
      */
     toolResultGuard?: ToolResultGuardOptions;
+    /**
+     * B-564 — opt-in pruning of aged tool results. With `{ olderThanRounds: n }`, the content of
+     * every tool result older than `n` tool rounds is replaced by a short stub in each request the
+     * run's agent loop sends (its `toolUseId` and `isError` kept; session compaction is not pruned); the transcript the run keeps, persists and resumes
+     * from stays whole. `olderThanRounds` must be an integer of at least 1, else the send fails
+     * with `ConfigurationError` code `invalid_prune_tool_results` before any provider call.
+     * Undefined = no pruning (the request is unchanged). Pruning trades request size against
+     * prefix-cache reuse: each new round turns one more previously sent result into a stub, so the
+     * request prefix changes from that message onward on providers that cache message prefixes.
+     * The cache-hit cost was not measured.
+     *
+     * @public
+     */
+    pruneToolResults?: PruneToolResultsOptions;
     /**
      * Opt-in task wrapping (ADRs D363, D374). When truthy, the entire
      * run is registered as a `Task` in the SDK's observable registry —

package/dist/workflow.d.cts

@@ -1,5 +1,5 @@
 import { ZodType, z } from 'zod';
-import { S as SDKAgent, _ as MessageOrigin } from './sdk-agent-4-dXI2GS.cjs';
+import { S as SDKAgent, _ as MessageOrigin } from './sdk-agent-DwzHcuxy.cjs';
 import { T as TheokitAgentError } from './errors-base-B5g01neU.cjs';
 import { C as CustomTool } from './agent-prims-CZyxfCmS.cjs';
 

package/dist/workflow.d.ts

@@ -1,5 +1,5 @@
 import { ZodType, z } from 'zod';
-import { S as SDKAgent, _ as MessageOrigin } from './sdk-agent-CTOJlWA_.js';
+import { S as SDKAgent, _ as MessageOrigin } from './sdk-agent-a3fW1xUK.js';
 import { T as TheokitAgentError } from './errors-base-B5g01neU.js';
 import { C as CustomTool } from './agent-prims-CZyxfCmS.js';