@theokit/sdk 5.13.0 → 5.15.0

package/dist/index.d.cts

@@ -1,18 +1,20 @@
 import { T as TheokitAgentError, E as ErrorMetadata } from './errors-base-B5g01neU.cjs';
 export { a as ErrorCode } from './errors-base-B5g01neU.cjs';
-import { A as AgentOptions, L as LocalOptions, B as BuiltinToolName, M as MemorySettings, S as SystemPromptResolver, C as CloudOptions, a as AgentDefinition, b as SkillsSettings, c as ListAgentsOptions, d as ListResult, e as SDKAgentInfo, G as GetAgentOptions, f as ListRunsOptions, g as GetRunOptions, h as AgentOperationOptions, i as AgentDescription, P as Plugin$1, j as ProviderProfile, I as InlineSkill, k as Skill, l as BudgetTracker, m as MemoryProvider, n as PreToolCallDecision } from './agent-iW5kPpfT.cjs';
-export { o as ActiveMemoryPassArgs, p as ActiveMemoryPassResult, q as AgentSubagentDescription, r as AgentToolDescription, s as BudgetCheck, t as BudgetTotal, u as BudgetUsageEvent, v as CloudEnv, w as CloudRepo, x as CompatSource, y as CompatSourceAdapter, z as CompatSurface, D as CreateSkillSpec, H as HookApprovalGate, E as HookApprovalRequest, F as HookName, J as LlmCallContext, K as MemoryProviderAgentRef, N as MemoryProviderFactory, O as MemoryProviderHandle, Q as MemoryProviderInitOptions, R as PluginContext, T as PluginHookDisposer, U as PostAssistantReplyContext, V as PostToolCallContext, W as PreToolCallContext, X as PreUserSendContext, Y as PreUserSendResult, Z as ProviderTransform, _ as ProviderTransformContext, $ as RecordSessionSummaryArgs, a0 as SessionLifecycleContext, a1 as SessionRecord, a2 as SessionStore, a3 as SettingSource, a4 as Skill, a5 as SkillsResolver, a6 as SkillsResolverContext, a7 as SystemPromptContext, a8 as SystemPromptMemoryFact, a9 as TelemetrySettings, aa as ToolCallSummary, ab as ToolContext, ac as ToolResultTransformContext, ad as TransformContext } from './agent-iW5kPpfT.cjs';
-import { ab as RunEvent, v as CostBreakdown, a_ as TokenUsage, R as RunResult, P as ProviderRoutingSettings, S as SDKAgent, M as McpServerConfig, C as ContextSettings, a as PluginsSettings, b as Run, c as Processor, J as JudgeResult, G as GoalOptions, d as GoalEvent, e as GoalResult, f as MemoryId, g as RunEventSink$1, h as SDKProvider, i as SDKMessage } from './sdk-agent-4-dXI2GS.cjs';
-export { A as AgentConversationTurn, j as AgentMemory, k as AgentOperation, l as AssistantMessage, m as CompletionCheck, n as CompletionCheckResult, o as ContextBudget, p as ContextManagerKind, q as ContextSnapshot, r as ContextSource, s as ContextSourceStatus, t as ConversationStep, u as ConversationTurn, v as CostBreakdown, w as CostSource, x as CostStatus, D as DoomLoopThresholds, E as EnvPolicy, F as ForkOptions, y as ForkResult, z as GenerateOptions, B as GenerateRunResult, I as InputProcessorContext, H as InteractionUpdate, K as InvalidateCacheOptions, L as McpAuthConfig, N as McpHttpServerConfig, O as McpOAuthConfig, Q as McpStdioServerConfig, T as MemoryAdapter, U as MemoryAdapterCapabilities, V as MemoryContext, W as MemoryFact, X as MemoryRevision, Y as MemoryToolSchema, Z as MemoryTurnMessage, _ as MessageOrigin, $ as OutputProcessorContext, a0 as PartialToolCallUpdate, a1 as PersonalityPreset, a2 as ProcessorControls, a3 as ProcessorTripwire, a4 as ProcessorViolation, a5 as ProviderCapability, a6 as ProviderRoute, a7 as ResolvedProviderRoute, a8 as RunCompactBoundaryEvent, a9 as RunCompletionCheckEvent, aa as RunErrorDetail, ab as RunEvent, ac as RunGitInfo, ad as RunMemoryDegradedEvent, ae as RunPermissionDeniedEvent, af as RunRateLimitEvent, ag as RunStatus, ah as RunTaskCompletedEvent, ai as RunTaskStartedEvent, aj as RunTaskUpdatedEvent, ak as RunTimelineEvent, al as RunToCompletionOptions, am as RunToCompletionResult, an as RunToolProgressEvent, ao as RunTripwireEvent, ap as RunUntilIterator, aq as SDKAgentPlugins, ar as SDKAgentSkillDetail, as as SDKAgentSkills, at as SDKArtifact, au as SDKAssistantMessage, av as SDKContextManager, aw as SDKImage, ax as SDKImageDimension, ay as SDKObjectDelta, az as SDKPluginMetadata, aA as SDKProvidersManager, aB as SDKRequestMessage, aC as SDKStatusMessage, aD as SDKSystemMessage, aE as SDKTaskMessage, aF as SDKThinkingMessage, aG as SDKToolUseMessage, aH as SDKUserMessage, aI as SDKUserMessageEvent, aJ as SendOptions, aK as ShellCommand, aL as ShellConversationTurn, aM as ShellOutput, aN as ShellOutputDeltaUpdate, aO as StepCompletedUpdate, aP as StepStartedUpdate, aQ as StreamToCompletionResult, aR as SummaryCompletedUpdate, aS as SummaryStartedUpdate, aT as SummaryUpdate, aU as SystemPromptSkillRef, aV as TextDeltaUpdate, aW as ThinkingCompletedUpdate, aX as ThinkingDeltaUpdate, aY as ThinkingMessage, aZ as TokenDeltaUpdate, a_ as TokenUsage, a$ as ToolCall, b0 as ToolCallCompletedUpdate, b1 as ToolCallStartedUpdate, b2 as ToolResult, b3 as ToolResultGuardOptions, b4 as ToolUseBlock, b5 as TurnEndedUpdate, b6 as UserMessage, b7 as UserMessageAppendedUpdate, b8 as Verdict } from './sdk-agent-4-dXI2GS.cjs';
+import { A as AgentOptions, L as LocalOptions, B as BuiltinToolName, M as MemorySettings, S as SystemPromptResolver, C as CloudOptions, a as AgentDefinition, b as SkillsSettings, c as ListAgentsOptions, d as ListResult, e as SDKAgentInfo, G as GetAgentOptions, f as ListRunsOptions, g as GetRunOptions, h as AgentOperationOptions, i as AgentDescription, P as Plugin$1, j as ProviderProfile, I as InlineSkill, k as Skill, l as BudgetTracker, m as MemoryProvider, n as PreToolCallDecision } from './agent-B6FQad6P.cjs';
+export { o as ActiveMemoryPassArgs, p as ActiveMemoryPassResult, q as AgentSubagentDescription, r as AgentToolDescription, s as BudgetCheck, t as BudgetTotal, u as BudgetUsageEvent, v as CloudEnv, w as CloudRepo, x as CompatSource, y as CompatSourceAdapter, z as CompatSurface, D as CreateSkillSpec, H as HookApprovalGate, E as HookApprovalRequest, F as HookName, J as LlmCallContext, K as MemoryProviderAgentRef, N as MemoryProviderFactory, O as MemoryProviderHandle, Q as MemoryProviderInitOptions, R as PluginContext, T as PluginHookDisposer, U as PostAssistantReplyContext, V as PostToolCallContext, W as PreToolCallContext, X as PreUserSendContext, Y as PreUserSendResult, Z as ProviderTransform, _ as ProviderTransformContext, $ as RecordSessionSummaryArgs, a0 as SessionLifecycleContext, a1 as SettingSource, a2 as Skill, a3 as SkillsResolver, a4 as SkillsResolverContext, a5 as SystemPromptContext, a6 as SystemPromptMemoryFact, a7 as TelemetrySettings, a8 as ToolCallSummary, a9 as ToolContext, aa as ToolResultTransformContext, ab as TransformContext } from './agent-B6FQad6P.cjs';
+import { ad as RunEvent, v as CostBreakdown, b0 as TokenUsage, R as RunResult, P as ProviderRoutingSettings, S as SDKAgent, M as McpServerConfig, C as ContextSettings, a as PluginsSettings, b as Run, c as Processor, J as JudgeResult, G as GoalOptions, d as GoalEvent, e as GoalResult, f as MemoryId, g as RunEventSink$1, h as SDKProvider, i as SDKMessage } from './sdk-agent-BA_6_wtc.cjs';
+export { A as AgentConversationTurn, j as AgentMemory, k as AgentOperation, l as AssistantMessage, m as CompletionCheck, n as CompletionCheckResult, o as ContextBudget, p as ContextManagerKind, q as ContextSnapshot, r as ContextSource, s as ContextSourceStatus, t as ConversationStep, u as ConversationTurn, v as CostBreakdown, w as CostSource, x as CostStatus, D as DoomLoopThresholds, E as EnvPolicy, F as ForkOptions, y as ForkResult, z as GenerateOptions, B as GenerateRunResult, I as InputProcessorContext, H as InteractionUpdate, K as InvalidateCacheOptions, L as McpAuthConfig, N as McpHttpServerConfig, O as McpOAuthConfig, Q as McpStdioServerConfig, T as MemoryAdapter, U as MemoryAdapterCapabilities, V as MemoryContext, W as MemoryFact, X as MemoryRevision, Y as MemoryToolSchema, Z as MemoryTurnMessage, _ as MessageOrigin, $ as OutputProcessorContext, a0 as PartialToolCallUpdate, a1 as PersonalityPreset, a2 as ProcessorControls, a3 as ProcessorTripwire, a4 as ProcessorViolation, a5 as ProviderCapability, a6 as ProviderRoute, a7 as PruneToolResultsOptions, a8 as QueueMode, a9 as ResolvedProviderRoute, aa as RunCompactBoundaryEvent, ab as RunCompletionCheckEvent, ac as RunErrorDetail, ad as RunEvent, ae as RunGitInfo, af as RunMemoryDegradedEvent, ag as RunPermissionDeniedEvent, ah as RunRateLimitEvent, ai as RunStatus, aj as RunTaskCompletedEvent, ak as RunTaskStartedEvent, al as RunTaskUpdatedEvent, am as RunTimelineEvent, an as RunToCompletionOptions, ao as RunToCompletionResult, ap as RunToolProgressEvent, aq as RunTripwireEvent, ar as RunUntilIterator, as as SDKAgentPlugins, at as SDKAgentSkillDetail, au as SDKAgentSkills, av as SDKArtifact, aw as SDKAssistantMessage, ax as SDKContextManager, ay as SDKImage, az as SDKImageDimension, aA as SDKObjectDelta, aB as SDKPluginMetadata, aC as SDKProvidersManager, aD as SDKRequestMessage, aE as SDKStatusMessage, aF as SDKSystemMessage, aG as SDKTaskMessage, aH as SDKThinkingMessage, aI as SDKToolUseMessage, aJ as SDKUserMessage, aK as SDKUserMessageEvent, aL as SendOptions, aM as ShellCommand, aN as ShellConversationTurn, aO as ShellOutput, aP as ShellOutputDeltaUpdate, aQ as StepCompletedUpdate, aR as StepStartedUpdate, aS as StreamToCompletionResult, aT as SummaryCompletedUpdate, aU as SummaryStartedUpdate, aV as SummaryUpdate, aW as SystemPromptSkillRef, aX as TextDeltaUpdate, aY as ThinkingCompletedUpdate, aZ as ThinkingDeltaUpdate, a_ as ThinkingMessage, a$ as TokenDeltaUpdate, b0 as TokenUsage, b1 as ToolCall, b2 as ToolCallCompletedUpdate, b3 as ToolCallStartedUpdate, b4 as ToolResult, b5 as ToolResultGuardOptions, b6 as ToolUseBlock, b7 as TurnEndedUpdate, b8 as UserMessage, b9 as UserMessageAppendedUpdate, ba as Verdict } from './sdk-agent-BA_6_wtc.cjs';
 import * as zod from 'zod';
 import { ZodType, z } from 'zod';
 import { S as StructuredOutputError, B as BudgetOptions, a as BudgetHandle, b as BudgetSnapshot } from './errors-BiDQFWTG.cjs';
 export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, f as BudgetExceedEvent, g as BudgetExceededError, h as BudgetLimit, i as BudgetMode, j as BudgetScope, k as BudgetThresholdEvent, l as BudgetWindow, C as ConfigurationError, I as IntegrationNotConnectedError, m as InvalidTaskIdError, M as MemoryAdapterError, n as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, T as TaskNotFoundError, U as UnknownAgentError, o as UnsupportedBudgetOperationError, p as UnsupportedRunOperationError, q as UnsupportedTaskOperationError, r as isTransientError } from './errors-BiDQFWTG.cjs';
 import { M as ModelSelection, C as CustomTool, T as ToolResultContentBlock, P as PermissionMode } from './agent-prims-CZyxfCmS.cjs';
 export { I as ImageBlock, a as ModelParameterValue, R as RunOperation, b as TextBlock, c as ToolContextMessage } from './agent-prims-CZyxfCmS.cjs';
-export { C as Cron, a as CronCreateOptions, b as CronGetOptions, c as CronJob, d as CronJobStatus, e as CronListOptions, f as CronOperationOptions, g as CronRunOptions, h as CronRuntime, i as CronSchedulerStatus, j as CronStartOptions } from './cron-BvxrLW5J.cjs';
+export { C as Cron, a as CronCreateOptions, b as CronGetOptions, c as CronJob, d as CronJobStatus, e as CronListOptions, f as CronOperationOptions, g as CronRunOptions, h as CronRuntime, i as CronSchedulerStatus, j as CronStartOptions } from './cron-Bh3aWgQ2.cjs';
+export { S as SqliteSessionStore, a as SqliteSessionStoreOptions, w as withCwdMutex } from './sqlite-session-store-TKXtT4ON.cjs';
 import { StepResult } from './workflow.cjs';
 export { Workflow, agentStep, fn } from './workflow.cjs';
+export { S as SessionRecord, a as SessionStore } from './session-store-Dh07jr9N.cjs';
 
 /**
  * Public compaction / context-management helpers (M2-1, extended V3-3).
@@ -799,9 +801,8 @@ declare class Agent {
      *   The agent-builder's M85 interrupt rotates the session id to work around a
      *   constraint that does not exist.
      *
-     * - `close()` marks the handle disposed WITHOUT evicting the cache entry. It is
-     *   internal and unused today; if it becomes reachable, this bullet stops being true
-     *   for that path.
+     * - `close()` marks the handle disposed AND drops its cache entry, so the next call
+     *   builds a fresh handle.
      *
      * @public
      */
@@ -1678,13 +1679,15 @@ declare class Provider {
  * listed by name and description, with the instructions under the frontmatter unable to arrive.
  */
 type ReadableSkill = InlineSkill | Skill;
+/** A fixed list, or a function re-evaluated on every call so later-discovered skills are readable. */
+type SkillReadSource = ReadonlyArray<ReadableSkill> | (() => ReadonlyArray<ReadableSkill> | Promise<ReadonlyArray<ReadableSkill>>);
 /** SE36 — `SkillReadTool.create` replaces `defineSkillReadTool` (ADR 0015). @public  *
  * `SkillReadTool.create` returns a **`CustomTool`** — a skill-reading tool, not a
  * `SkillReadTool` instance.
  */
 declare class SkillReadTool {
     private constructor();
-    static create(skills: ReadonlyArray<ReadableSkill>): CustomTool;
+    static create(skills: SkillReadSource): CustomTool;
 }
 
 /**
@@ -2160,42 +2163,6 @@ declare function setDiagnosticsSink(next: DiagnosticsSink | undefined): void;
  */
 declare function emitRunEvent(sink: RunEventSink$1 | undefined, event: RunEvent): void;
 
-/**
- * Run `fn` after every earlier `withCwdMutex` call for the same `key` has settled, and return
- * what `fn` returns.
- *
- * Calls with the same key run strictly in the order they were made — FIFO, never concurrent.
- * Calls with different keys never wait on each other. The key is an opaque string: two callers
- * serialize against each other exactly when they pass equal keys, so a shared key IS the
- * contract, and a mismatched one silently buys no protection at all.
- *
- * A rejection does not poison the queue. The next waiter runs whether the previous `fn` fulfilled
- * or rejected, and the rejection is delivered only to the caller whose `fn` threw. This function
- * neither retries nor swallows: the returned promise rejects with whatever `fn` rejected with.
- *
- * There is no timeout and no cancellation. An `fn` that never settles blocks that key for the
- * lifetime of the process.
- *
- * **Scope — this is an in-process lock only.** State is a module-scoped Map, so it serializes
- * callers that share one module instance and nothing else. Two processes, two worker threads, or
- * two copies of the SDK resolved into the same tree do not see each other's queue. When the
- * resource is a file that other processes can also write, use `withFileLock` from
- * `./file-lock.ts` instead — it takes an OS-level lock and layers this mutex underneath, so it
- * gives both guarantees. Reach for `withCwdMutex` directly when the shared state is in memory, or
- * when the file is one only this process touches.
- *
- * Extracted packages (`@theokit/sdk-budget`, `@theokit/sdk-memory`) import this from
- * `@theokit/sdk` rather than reimplementing it, precisely so the Map is the same one: a per-package
- * copy would give each package its own queue and let their writes race.
- *
- * The Map is module-scoped, so nothing survives a process restart or a fresh module instance, and
- * its entries are never removed — pass keys from a bounded set rather than from arbitrary input.
- * Signature and semantics will not change before sdk-core v3.0.
- *
- * @public
- */
-declare function withCwdMutex<T>(key: string, fn: () => Promise<T>): Promise<T>;
-
 /**
  * What an operator may impose. One key today, and the shape is the point: each addition is a control
  * that already exists somewhere below and is being lifted into a tier the project cannot reach.
@@ -4518,4 +4485,4 @@ interface WiringRecordInput<K extends string> {
  */
 declare function recordWiring<K extends string>(input: WiringRecordInput<K>): Readonly<Record<K, WiredEntity>>;
 
-export { Agent, AgentBuilder, type AgentBuilderDeps, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, BuiltinToolName, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, type ManagedSettings, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionFloorContext, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, type PermissionRuleSet, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isInside, isValidTaskId, loadProjectEnv, managedSettingsPathFor, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readManagedSettings, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius, withCwdMutex };
+export { Agent, AgentBuilder, type AgentBuilderDeps, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, BuiltinToolName, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, type ManagedSettings, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionFloorContext, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, type PermissionRuleSet, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isInside, isValidTaskId, loadProjectEnv, managedSettingsPathFor, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readManagedSettings, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };

package/dist/index.d.ts

@@ -1,18 +1,20 @@
 import { T as TheokitAgentError, E as ErrorMetadata } from './errors-base-B5g01neU.js';
 export { a as ErrorCode } from './errors-base-B5g01neU.js';
-import { A as AgentOptions, L as LocalOptions, B as BuiltinToolName, M as MemorySettings, S as SystemPromptResolver, C as CloudOptions, a as AgentDefinition, b as SkillsSettings, c as ListAgentsOptions, d as ListResult, e as SDKAgentInfo, G as GetAgentOptions, f as ListRunsOptions, g as GetRunOptions, h as AgentOperationOptions, i as AgentDescription, P as Plugin$1, j as ProviderProfile, I as InlineSkill, k as Skill, l as BudgetTracker, m as MemoryProvider, n as PreToolCallDecision } from './agent-DSMuwADp.js';
-export { o as ActiveMemoryPassArgs, p as ActiveMemoryPassResult, q as AgentSubagentDescription, r as AgentToolDescription, s as BudgetCheck, t as BudgetTotal, u as BudgetUsageEvent, v as CloudEnv, w as CloudRepo, x as CompatSource, y as CompatSourceAdapter, z as CompatSurface, D as CreateSkillSpec, H as HookApprovalGate, E as HookApprovalRequest, F as HookName, J as LlmCallContext, K as MemoryProviderAgentRef, N as MemoryProviderFactory, O as MemoryProviderHandle, Q as MemoryProviderInitOptions, R as PluginContext, T as PluginHookDisposer, U as PostAssistantReplyContext, V as PostToolCallContext, W as PreToolCallContext, X as PreUserSendContext, Y as PreUserSendResult, Z as ProviderTransform, _ as ProviderTransformContext, $ as RecordSessionSummaryArgs, a0 as SessionLifecycleContext, a1 as SessionRecord, a2 as SessionStore, a3 as SettingSource, a4 as Skill, a5 as SkillsResolver, a6 as SkillsResolverContext, a7 as SystemPromptContext, a8 as SystemPromptMemoryFact, a9 as TelemetrySettings, aa as ToolCallSummary, ab as ToolContext, ac as ToolResultTransformContext, ad as TransformContext } from './agent-DSMuwADp.js';
-import { ab as RunEvent, v as CostBreakdown, a_ as TokenUsage, R as RunResult, P as ProviderRoutingSettings, S as SDKAgent, M as McpServerConfig, C as ContextSettings, a as PluginsSettings, b as Run, c as Processor, J as JudgeResult, G as GoalOptions, d as GoalEvent, e as GoalResult, f as MemoryId, g as RunEventSink$1, h as SDKProvider, i as SDKMessage } from './sdk-agent-CTOJlWA_.js';
-export { A as AgentConversationTurn, j as AgentMemory, k as AgentOperation, l as AssistantMessage, m as CompletionCheck, n as CompletionCheckResult, o as ContextBudget, p as ContextManagerKind, q as ContextSnapshot, r as ContextSource, s as ContextSourceStatus, t as ConversationStep, u as ConversationTurn, v as CostBreakdown, w as CostSource, x as CostStatus, D as DoomLoopThresholds, E as EnvPolicy, F as ForkOptions, y as ForkResult, z as GenerateOptions, B as GenerateRunResult, I as InputProcessorContext, H as InteractionUpdate, K as InvalidateCacheOptions, L as McpAuthConfig, N as McpHttpServerConfig, O as McpOAuthConfig, Q as McpStdioServerConfig, T as MemoryAdapter, U as MemoryAdapterCapabilities, V as MemoryContext, W as MemoryFact, X as MemoryRevision, Y as MemoryToolSchema, Z as MemoryTurnMessage, _ as MessageOrigin, $ as OutputProcessorContext, a0 as PartialToolCallUpdate, a1 as PersonalityPreset, a2 as ProcessorControls, a3 as ProcessorTripwire, a4 as ProcessorViolation, a5 as ProviderCapability, a6 as ProviderRoute, a7 as ResolvedProviderRoute, a8 as RunCompactBoundaryEvent, a9 as RunCompletionCheckEvent, aa as RunErrorDetail, ab as RunEvent, ac as RunGitInfo, ad as RunMemoryDegradedEvent, ae as RunPermissionDeniedEvent, af as RunRateLimitEvent, ag as RunStatus, ah as RunTaskCompletedEvent, ai as RunTaskStartedEvent, aj as RunTaskUpdatedEvent, ak as RunTimelineEvent, al as RunToCompletionOptions, am as RunToCompletionResult, an as RunToolProgressEvent, ao as RunTripwireEvent, ap as RunUntilIterator, aq as SDKAgentPlugins, ar as SDKAgentSkillDetail, as as SDKAgentSkills, at as SDKArtifact, au as SDKAssistantMessage, av as SDKContextManager, aw as SDKImage, ax as SDKImageDimension, ay as SDKObjectDelta, az as SDKPluginMetadata, aA as SDKProvidersManager, aB as SDKRequestMessage, aC as SDKStatusMessage, aD as SDKSystemMessage, aE as SDKTaskMessage, aF as SDKThinkingMessage, aG as SDKToolUseMessage, aH as SDKUserMessage, aI as SDKUserMessageEvent, aJ as SendOptions, aK as ShellCommand, aL as ShellConversationTurn, aM as ShellOutput, aN as ShellOutputDeltaUpdate, aO as StepCompletedUpdate, aP as StepStartedUpdate, aQ as StreamToCompletionResult, aR as SummaryCompletedUpdate, aS as SummaryStartedUpdate, aT as SummaryUpdate, aU as SystemPromptSkillRef, aV as TextDeltaUpdate, aW as ThinkingCompletedUpdate, aX as ThinkingDeltaUpdate, aY as ThinkingMessage, aZ as TokenDeltaUpdate, a_ as TokenUsage, a$ as ToolCall, b0 as ToolCallCompletedUpdate, b1 as ToolCallStartedUpdate, b2 as ToolResult, b3 as ToolResultGuardOptions, b4 as ToolUseBlock, b5 as TurnEndedUpdate, b6 as UserMessage, b7 as UserMessageAppendedUpdate, b8 as Verdict } from './sdk-agent-CTOJlWA_.js';
+import { A as AgentOptions, L as LocalOptions, B as BuiltinToolName, M as MemorySettings, S as SystemPromptResolver, C as CloudOptions, a as AgentDefinition, b as SkillsSettings, c as ListAgentsOptions, d as ListResult, e as SDKAgentInfo, G as GetAgentOptions, f as ListRunsOptions, g as GetRunOptions, h as AgentOperationOptions, i as AgentDescription, P as Plugin$1, j as ProviderProfile, I as InlineSkill, k as Skill, l as BudgetTracker, m as MemoryProvider, n as PreToolCallDecision } from './agent-B6C9i_qu.js';
+export { o as ActiveMemoryPassArgs, p as ActiveMemoryPassResult, q as AgentSubagentDescription, r as AgentToolDescription, s as BudgetCheck, t as BudgetTotal, u as BudgetUsageEvent, v as CloudEnv, w as CloudRepo, x as CompatSource, y as CompatSourceAdapter, z as CompatSurface, D as CreateSkillSpec, H as HookApprovalGate, E as HookApprovalRequest, F as HookName, J as LlmCallContext, K as MemoryProviderAgentRef, N as MemoryProviderFactory, O as MemoryProviderHandle, Q as MemoryProviderInitOptions, R as PluginContext, T as PluginHookDisposer, U as PostAssistantReplyContext, V as PostToolCallContext, W as PreToolCallContext, X as PreUserSendContext, Y as PreUserSendResult, Z as ProviderTransform, _ as ProviderTransformContext, $ as RecordSessionSummaryArgs, a0 as SessionLifecycleContext, a1 as SettingSource, a2 as Skill, a3 as SkillsResolver, a4 as SkillsResolverContext, a5 as SystemPromptContext, a6 as SystemPromptMemoryFact, a7 as TelemetrySettings, a8 as ToolCallSummary, a9 as ToolContext, aa as ToolResultTransformContext, ab as TransformContext } from './agent-B6C9i_qu.js';
+import { ad as RunEvent, v as CostBreakdown, b0 as TokenUsage, R as RunResult, P as ProviderRoutingSettings, S as SDKAgent, M as McpServerConfig, C as ContextSettings, a as PluginsSettings, b as Run, c as Processor, J as JudgeResult, G as GoalOptions, d as GoalEvent, e as GoalResult, f as MemoryId, g as RunEventSink$1, h as SDKProvider, i as SDKMessage } from './sdk-agent-CnwPODYH.js';
+export { A as AgentConversationTurn, j as AgentMemory, k as AgentOperation, l as AssistantMessage, m as CompletionCheck, n as CompletionCheckResult, o as ContextBudget, p as ContextManagerKind, q as ContextSnapshot, r as ContextSource, s as ContextSourceStatus, t as ConversationStep, u as ConversationTurn, v as CostBreakdown, w as CostSource, x as CostStatus, D as DoomLoopThresholds, E as EnvPolicy, F as ForkOptions, y as ForkResult, z as GenerateOptions, B as GenerateRunResult, I as InputProcessorContext, H as InteractionUpdate, K as InvalidateCacheOptions, L as McpAuthConfig, N as McpHttpServerConfig, O as McpOAuthConfig, Q as McpStdioServerConfig, T as MemoryAdapter, U as MemoryAdapterCapabilities, V as MemoryContext, W as MemoryFact, X as MemoryRevision, Y as MemoryToolSchema, Z as MemoryTurnMessage, _ as MessageOrigin, $ as OutputProcessorContext, a0 as PartialToolCallUpdate, a1 as PersonalityPreset, a2 as ProcessorControls, a3 as ProcessorTripwire, a4 as ProcessorViolation, a5 as ProviderCapability, a6 as ProviderRoute, a7 as PruneToolResultsOptions, a8 as QueueMode, a9 as ResolvedProviderRoute, aa as RunCompactBoundaryEvent, ab as RunCompletionCheckEvent, ac as RunErrorDetail, ad as RunEvent, ae as RunGitInfo, af as RunMemoryDegradedEvent, ag as RunPermissionDeniedEvent, ah as RunRateLimitEvent, ai as RunStatus, aj as RunTaskCompletedEvent, ak as RunTaskStartedEvent, al as RunTaskUpdatedEvent, am as RunTimelineEvent, an as RunToCompletionOptions, ao as RunToCompletionResult, ap as RunToolProgressEvent, aq as RunTripwireEvent, ar as RunUntilIterator, as as SDKAgentPlugins, at as SDKAgentSkillDetail, au as SDKAgentSkills, av as SDKArtifact, aw as SDKAssistantMessage, ax as SDKContextManager, ay as SDKImage, az as SDKImageDimension, aA as SDKObjectDelta, aB as SDKPluginMetadata, aC as SDKProvidersManager, aD as SDKRequestMessage, aE as SDKStatusMessage, aF as SDKSystemMessage, aG as SDKTaskMessage, aH as SDKThinkingMessage, aI as SDKToolUseMessage, aJ as SDKUserMessage, aK as SDKUserMessageEvent, aL as SendOptions, aM as ShellCommand, aN as ShellConversationTurn, aO as ShellOutput, aP as ShellOutputDeltaUpdate, aQ as StepCompletedUpdate, aR as StepStartedUpdate, aS as StreamToCompletionResult, aT as SummaryCompletedUpdate, aU as SummaryStartedUpdate, aV as SummaryUpdate, aW as SystemPromptSkillRef, aX as TextDeltaUpdate, aY as ThinkingCompletedUpdate, aZ as ThinkingDeltaUpdate, a_ as ThinkingMessage, a$ as TokenDeltaUpdate, b0 as TokenUsage, b1 as ToolCall, b2 as ToolCallCompletedUpdate, b3 as ToolCallStartedUpdate, b4 as ToolResult, b5 as ToolResultGuardOptions, b6 as ToolUseBlock, b7 as TurnEndedUpdate, b8 as UserMessage, b9 as UserMessageAppendedUpdate, ba as Verdict } from './sdk-agent-CnwPODYH.js';
 import * as zod from 'zod';
 import { ZodType, z } from 'zod';
 import { S as StructuredOutputError, B as BudgetOptions, a as BudgetHandle, b as BudgetSnapshot } from './errors-Pf22PJJ-.js';
 export { A as AgentDisposedError, c as AgentRunError, d as AgentRunErrorCode, e as AuthenticationError, f as BudgetExceedEvent, g as BudgetExceededError, h as BudgetLimit, i as BudgetMode, j as BudgetScope, k as BudgetThresholdEvent, l as BudgetWindow, C as ConfigurationError, I as IntegrationNotConnectedError, m as InvalidTaskIdError, M as MemoryAdapterError, n as MemoryAdapterErrorCode, N as NetworkError, R as RateLimitError, T as TaskNotFoundError, U as UnknownAgentError, o as UnsupportedBudgetOperationError, p as UnsupportedRunOperationError, q as UnsupportedTaskOperationError, r as isTransientError } from './errors-Pf22PJJ-.js';
 import { M as ModelSelection, C as CustomTool, T as ToolResultContentBlock, P as PermissionMode } from './agent-prims-CZyxfCmS.js';
 export { I as ImageBlock, a as ModelParameterValue, R as RunOperation, b as TextBlock, c as ToolContextMessage } from './agent-prims-CZyxfCmS.js';
-export { C as Cron, a as CronCreateOptions, b as CronGetOptions, c as CronJob, d as CronJobStatus, e as CronListOptions, f as CronOperationOptions, g as CronRunOptions, h as CronRuntime, i as CronSchedulerStatus, j as CronStartOptions } from './cron-DdKzwJqK.js';
+export { C as Cron, a as CronCreateOptions, b as CronGetOptions, c as CronJob, d as CronJobStatus, e as CronListOptions, f as CronOperationOptions, g as CronRunOptions, h as CronRuntime, i as CronSchedulerStatus, j as CronStartOptions } from './cron-CCDxeeFZ.js';
+export { S as SqliteSessionStore, a as SqliteSessionStoreOptions, w as withCwdMutex } from './sqlite-session-store-BbcpKY1L.js';
 import { StepResult } from './workflow.js';
 export { Workflow, agentStep, fn } from './workflow.js';
+export { S as SessionRecord, a as SessionStore } from './session-store-Dh07jr9N.js';
 
 /**
  * Public compaction / context-management helpers (M2-1, extended V3-3).
@@ -799,9 +801,8 @@ declare class Agent {
      *   The agent-builder's M85 interrupt rotates the session id to work around a
      *   constraint that does not exist.
      *
-     * - `close()` marks the handle disposed WITHOUT evicting the cache entry. It is
-     *   internal and unused today; if it becomes reachable, this bullet stops being true
-     *   for that path.
+     * - `close()` marks the handle disposed AND drops its cache entry, so the next call
+     *   builds a fresh handle.
      *
      * @public
      */
@@ -1678,13 +1679,15 @@ declare class Provider {
  * listed by name and description, with the instructions under the frontmatter unable to arrive.
  */
 type ReadableSkill = InlineSkill | Skill;
+/** A fixed list, or a function re-evaluated on every call so later-discovered skills are readable. */
+type SkillReadSource = ReadonlyArray<ReadableSkill> | (() => ReadonlyArray<ReadableSkill> | Promise<ReadonlyArray<ReadableSkill>>);
 /** SE36 — `SkillReadTool.create` replaces `defineSkillReadTool` (ADR 0015). @public  *
  * `SkillReadTool.create` returns a **`CustomTool`** — a skill-reading tool, not a
  * `SkillReadTool` instance.
  */
 declare class SkillReadTool {
     private constructor();
-    static create(skills: ReadonlyArray<ReadableSkill>): CustomTool;
+    static create(skills: SkillReadSource): CustomTool;
 }
 
 /**
@@ -2160,42 +2163,6 @@ declare function setDiagnosticsSink(next: DiagnosticsSink | undefined): void;
  */
 declare function emitRunEvent(sink: RunEventSink$1 | undefined, event: RunEvent): void;
 
-/**
- * Run `fn` after every earlier `withCwdMutex` call for the same `key` has settled, and return
- * what `fn` returns.
- *
- * Calls with the same key run strictly in the order they were made — FIFO, never concurrent.
- * Calls with different keys never wait on each other. The key is an opaque string: two callers
- * serialize against each other exactly when they pass equal keys, so a shared key IS the
- * contract, and a mismatched one silently buys no protection at all.
- *
- * A rejection does not poison the queue. The next waiter runs whether the previous `fn` fulfilled
- * or rejected, and the rejection is delivered only to the caller whose `fn` threw. This function
- * neither retries nor swallows: the returned promise rejects with whatever `fn` rejected with.
- *
- * There is no timeout and no cancellation. An `fn` that never settles blocks that key for the
- * lifetime of the process.
- *
- * **Scope — this is an in-process lock only.** State is a module-scoped Map, so it serializes
- * callers that share one module instance and nothing else. Two processes, two worker threads, or
- * two copies of the SDK resolved into the same tree do not see each other's queue. When the
- * resource is a file that other processes can also write, use `withFileLock` from
- * `./file-lock.ts` instead — it takes an OS-level lock and layers this mutex underneath, so it
- * gives both guarantees. Reach for `withCwdMutex` directly when the shared state is in memory, or
- * when the file is one only this process touches.
- *
- * Extracted packages (`@theokit/sdk-budget`, `@theokit/sdk-memory`) import this from
- * `@theokit/sdk` rather than reimplementing it, precisely so the Map is the same one: a per-package
- * copy would give each package its own queue and let their writes race.
- *
- * The Map is module-scoped, so nothing survives a process restart or a fresh module instance, and
- * its entries are never removed — pass keys from a bounded set rather than from arbitrary input.
- * Signature and semantics will not change before sdk-core v3.0.
- *
- * @public
- */
-declare function withCwdMutex<T>(key: string, fn: () => Promise<T>): Promise<T>;
-
 /**
  * What an operator may impose. One key today, and the shape is the point: each addition is a control
  * that already exists somewhere below and is being lifted into a tier the project cannot reach.
@@ -4518,4 +4485,4 @@ interface WiringRecordInput<K extends string> {
  */
 declare function recordWiring<K extends string>(input: WiringRecordInput<K>): Readonly<Record<K, WiredEntity>>;
 
-export { Agent, AgentBuilder, type AgentBuilderDeps, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, BuiltinToolName, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, type ManagedSettings, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionFloorContext, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, type PermissionRuleSet, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isInside, isValidTaskId, loadProjectEnv, managedSettingsPathFor, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readManagedSettings, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius, withCwdMutex };
+export { Agent, AgentBuilder, type AgentBuilderDeps, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, BuiltinToolName, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, type ManagedSettings, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionFloorContext, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, type PermissionRuleSet, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isInside, isValidTaskId, loadProjectEnv, managedSettingsPathFor, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readManagedSettings, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };