@theokit/sdk 5.15.2 → 5.16.0

package/dist/index.d.cts

@@ -1582,6 +1582,67 @@ interface CredentialReport {
  */
 declare function describeCredential(input: CredentialInput): CredentialReport;
 
+/**
+ * `decide` — a typed decision (one label from a declared enum) answered by a pinned, checksum-verified
+ * local ONNX classifier. It makes no provider request. The model file is hashed (SHA-256) before it is
+ * loaded; a mismatch is refused. The ONNX runtime (`onnxruntime-node`) is an optional peer, loaded on use.
+ */
+
+/** Token ids for one input, as the classifier expects them. @public */
+interface DecisionTokens {
+    inputIds: number[];
+    attentionMask?: number[];
+}
+/** A loaded ONNX session, reduced to what `decide` uses. @public */
+interface DecisionSession {
+    /** Runs the model and returns one logit per label, in label order. */
+    run(tokens: DecisionTokens): Promise<number[]>;
+}
+/** Options for {@link decide}. @public */
+interface DecideOptions<L extends string> {
+    /** The text to classify. */
+    text: string;
+    /** The allowed labels, in the order of the model's output logits. */
+    labels: readonly L[];
+    /** Path to the `.onnx` model file. */
+    modelPath: string;
+    /** Pinned lowercase hex SHA-256 of the model file. A different file is refused. */
+    sha256: string;
+    /** Turns text into token ids (the tokenizer that belongs to the pinned model). */
+    tokenize: (text: string) => DecisionTokens | Promise<DecisionTokens>;
+    /** Overrides the session loader (default: `onnxruntime-node`). Receives the verified model bytes. */
+    loadSession?: (model: Uint8Array) => Promise<DecisionSession>;
+}
+/** Result of {@link decide}. @public */
+interface Decision<L extends string> {
+    /** The chosen label. */
+    label: L;
+    /** Softmax probability per label. */
+    scores: Record<L, number>;
+    /** Always `"local-onnx"`: the answer came from the pinned local model, not a provider request. */
+    source: "local-onnx";
+    /** SHA-256 of the verified model that answered. */
+    modelSha256: string;
+}
+/** Thrown when the model file's checksum differs from the pinned one. @public */
+declare class DecisionChecksumError extends TheokitAgentError {
+    readonly modelPath: string;
+    readonly expected: string;
+    readonly actual: string;
+    readonly name: string;
+    constructor(modelPath: string, expected: string, actual: string);
+}
+/**
+ * No model or tokenizer is bundled: pass the pinned model file, its SHA-256 and its tokenizer. The model
+ * must take int64 `input_ids` and `attention_mask` and output one logit per label.
+ *
+ * Classify `text` into one of `labels` with a local ONNX model. Rejects with
+ * {@link DecisionChecksumError} when the file does not match `sha256`.
+ *
+ * @public
+ */
+declare function decide<L extends string>(opts: DecideOptions<L>): Promise<Decision<L>>;
+
 /**
  * Plugin contract — RUNTIME value + type re-exports (T1.1, ADRs D97-D101).
  *
@@ -1938,6 +1999,50 @@ declare class EventBus<Events extends Record<string, unknown>> {
     once<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): () => void;
 }
 
+/**
+ * `generateImage` — one image from an OpenAI-compatible `/images/generations` endpoint.
+ *
+ * A provider primitive: it holds no state, writes no file and returns the decoded bytes. The
+ * `route: "chatgpt"` goes through the ChatGPT subscription login instead of an API key.
+ */
+/** Options for {@link generateImage}. @public */
+interface GenerateImageOptions {
+    /** What to draw. */
+    prompt: string;
+    /**
+     * `"api"` (default): OpenAI-compatible `/images/generations` with an API key.
+     * `"chatgpt"`: the ChatGPT-subscription (Codex) route, using the stored OpenAI device login and the
+     * Responses API `image_generation` tool; `model` then names the chat model (default `gpt-5.4`).
+     */
+    route?: "api" | "chatgpt";
+    /** API key (`"api"` route). Falls back to `OPENAI_API_KEY`. */
+    apiKey?: string;
+    /** Model id. Default `gpt-image-1`. */
+    model?: string;
+    /** Endpoint base. Default `https://api.openai.com/v1`. */
+    baseUrl?: string;
+    /** Size such as `1024x1024`. Omitted ⇒ provider default. */
+    size?: string;
+    /** Abort signal. */
+    signal?: AbortSignal;
+    /** Fetch implementation. Default global `fetch`. */
+    fetch?: typeof fetch;
+}
+/** Result of {@link generateImage}. @public */
+interface GeneratedImage {
+    /** Encoded image bytes. */
+    image: Uint8Array;
+    /** Mime type sniffed from the bytes (`application/octet-stream` when not png/jpeg/webp). */
+    mimeType: string;
+}
+/**
+ * Generate one image. Rejects with an `Error` on a missing key, a non-2xx status or a response
+ * without `data[0].b64_json`.
+ *
+ * @public
+ */
+declare function generateImage(opts: GenerateImageOptions): Promise<GeneratedImage>;
+
 /** Inputs to the judge — pure data. */
 interface JudgeContext {
     goal: string;
@@ -4485,4 +4590,4 @@ interface WiringRecordInput<K extends string> {
  */
 declare function recordWiring<K extends string>(input: WiringRecordInput<K>): Readonly<Record<K, WiredEntity>>;
 
-export { Agent, AgentBuilder, type AgentBuilderDeps, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, BuiltinToolName, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, type ManagedSettings, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionFloorContext, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, type PermissionRuleSet, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isInside, isValidTaskId, loadProjectEnv, managedSettingsPathFor, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readManagedSettings, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };
+export { Agent, AgentBuilder, type AgentBuilderDeps, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, BuiltinToolName, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DecideOptions, type Decision, DecisionChecksumError, type DecisionSession, type DecisionTokens, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, type GenerateImageOptions, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, type GeneratedImage, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, type ManagedSettings, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionFloorContext, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, type PermissionRuleSet, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decide, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, generateImage, getPricingEntry, guardSessionDestruction, inferApiMode, isInside, isValidTaskId, loadProjectEnv, managedSettingsPathFor, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readManagedSettings, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };

package/dist/index.d.ts

@@ -1582,6 +1582,67 @@ interface CredentialReport {
  */
 declare function describeCredential(input: CredentialInput): CredentialReport;
 
+/**
+ * `decide` — a typed decision (one label from a declared enum) answered by a pinned, checksum-verified
+ * local ONNX classifier. It makes no provider request. The model file is hashed (SHA-256) before it is
+ * loaded; a mismatch is refused. The ONNX runtime (`onnxruntime-node`) is an optional peer, loaded on use.
+ */
+
+/** Token ids for one input, as the classifier expects them. @public */
+interface DecisionTokens {
+    inputIds: number[];
+    attentionMask?: number[];
+}
+/** A loaded ONNX session, reduced to what `decide` uses. @public */
+interface DecisionSession {
+    /** Runs the model and returns one logit per label, in label order. */
+    run(tokens: DecisionTokens): Promise<number[]>;
+}
+/** Options for {@link decide}. @public */
+interface DecideOptions<L extends string> {
+    /** The text to classify. */
+    text: string;
+    /** The allowed labels, in the order of the model's output logits. */
+    labels: readonly L[];
+    /** Path to the `.onnx` model file. */
+    modelPath: string;
+    /** Pinned lowercase hex SHA-256 of the model file. A different file is refused. */
+    sha256: string;
+    /** Turns text into token ids (the tokenizer that belongs to the pinned model). */
+    tokenize: (text: string) => DecisionTokens | Promise<DecisionTokens>;
+    /** Overrides the session loader (default: `onnxruntime-node`). Receives the verified model bytes. */
+    loadSession?: (model: Uint8Array) => Promise<DecisionSession>;
+}
+/** Result of {@link decide}. @public */
+interface Decision<L extends string> {
+    /** The chosen label. */
+    label: L;
+    /** Softmax probability per label. */
+    scores: Record<L, number>;
+    /** Always `"local-onnx"`: the answer came from the pinned local model, not a provider request. */
+    source: "local-onnx";
+    /** SHA-256 of the verified model that answered. */
+    modelSha256: string;
+}
+/** Thrown when the model file's checksum differs from the pinned one. @public */
+declare class DecisionChecksumError extends TheokitAgentError {
+    readonly modelPath: string;
+    readonly expected: string;
+    readonly actual: string;
+    readonly name: string;
+    constructor(modelPath: string, expected: string, actual: string);
+}
+/**
+ * No model or tokenizer is bundled: pass the pinned model file, its SHA-256 and its tokenizer. The model
+ * must take int64 `input_ids` and `attention_mask` and output one logit per label.
+ *
+ * Classify `text` into one of `labels` with a local ONNX model. Rejects with
+ * {@link DecisionChecksumError} when the file does not match `sha256`.
+ *
+ * @public
+ */
+declare function decide<L extends string>(opts: DecideOptions<L>): Promise<Decision<L>>;
+
 /**
  * Plugin contract — RUNTIME value + type re-exports (T1.1, ADRs D97-D101).
  *
@@ -1938,6 +1999,50 @@ declare class EventBus<Events extends Record<string, unknown>> {
     once<K extends keyof Events>(event: K, handler: EventHandler<Events[K]>): () => void;
 }
 
+/**
+ * `generateImage` — one image from an OpenAI-compatible `/images/generations` endpoint.
+ *
+ * A provider primitive: it holds no state, writes no file and returns the decoded bytes. The
+ * `route: "chatgpt"` goes through the ChatGPT subscription login instead of an API key.
+ */
+/** Options for {@link generateImage}. @public */
+interface GenerateImageOptions {
+    /** What to draw. */
+    prompt: string;
+    /**
+     * `"api"` (default): OpenAI-compatible `/images/generations` with an API key.
+     * `"chatgpt"`: the ChatGPT-subscription (Codex) route, using the stored OpenAI device login and the
+     * Responses API `image_generation` tool; `model` then names the chat model (default `gpt-5.4`).
+     */
+    route?: "api" | "chatgpt";
+    /** API key (`"api"` route). Falls back to `OPENAI_API_KEY`. */
+    apiKey?: string;
+    /** Model id. Default `gpt-image-1`. */
+    model?: string;
+    /** Endpoint base. Default `https://api.openai.com/v1`. */
+    baseUrl?: string;
+    /** Size such as `1024x1024`. Omitted ⇒ provider default. */
+    size?: string;
+    /** Abort signal. */
+    signal?: AbortSignal;
+    /** Fetch implementation. Default global `fetch`. */
+    fetch?: typeof fetch;
+}
+/** Result of {@link generateImage}. @public */
+interface GeneratedImage {
+    /** Encoded image bytes. */
+    image: Uint8Array;
+    /** Mime type sniffed from the bytes (`application/octet-stream` when not png/jpeg/webp). */
+    mimeType: string;
+}
+/**
+ * Generate one image. Rejects with an `Error` on a missing key, a non-2xx status or a response
+ * without `data[0].b64_json`.
+ *
+ * @public
+ */
+declare function generateImage(opts: GenerateImageOptions): Promise<GeneratedImage>;
+
 /** Inputs to the judge — pure data. */
 interface JudgeContext {
     goal: string;
@@ -4485,4 +4590,4 @@ interface WiringRecordInput<K extends string> {
  */
 declare function recordWiring<K extends string>(input: WiringRecordInput<K>): Readonly<Record<K, WiredEntity>>;
 
-export { Agent, AgentBuilder, type AgentBuilderDeps, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, BuiltinToolName, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, type ManagedSettings, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionFloorContext, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, type PermissionRuleSet, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, getPricingEntry, guardSessionDestruction, inferApiMode, isInside, isValidTaskId, loadProjectEnv, managedSettingsPathFor, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readManagedSettings, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };
+export { Agent, AgentBuilder, type AgentBuilderDeps, AgentDefinition, type AgentDescription, AgentFactory, AgentOperationOptions, AgentOptions, type AgentPromptResult, type AgentRegistryOptions, type ApprovalDecision, type ApprovalInput, type ApprovalMode, type ApprovalOutcome, type ApprovalReason, type BatchItem, type BatchOptions, type BatchProgress, type BatchResult, type BlastRadiusDecision, type BlastRadiusInput, type BlastRadiusOutcome, type BlastRadiusReason, Budget, BudgetHandle, BudgetOptions, BudgetSnapshot, type BudgetTracker, BuiltinToolName, CloudOptions, ContextSettings, type CounterBudgetTrackerOptions, type CredentialInput, type CredentialReport, type CustomTool, type DecideOptions, type Decision, DecisionChecksumError, type DecisionSession, type DecisionTokens, type DeclaredAction, type DeclaredLayer, type DeepPartial, type DefineProviderOptions, type DefineToolSpec, type DiagnosticsSink, type DreamingSweepOptions, type DreamingSweepResult, type EffectiveToolCatalog, type EnvOptOut, type EnvReachabilityAudit, type EnvReachabilityInput, ErrorMetadata, EventBus, type EvictReason, GOAL_CONTINUATION_MARKER, type GenerateImageOptions, GenerateObjectError, type GenerateObjectOptions, type GenerateObjectResult, type GeneratedImage, GetAgentOptions, GetRunOptions, GoalEvent, type GoalLoopAgent, GoalOptions, GoalResult, InlineSkill, JobQueue, type JobQueueOptions, JudgeCredentialError, type JudgeResult, type KeepReason, type KeptArtifact, LayerOrderError, type LayerValues, ListAgentsOptions, ListResult, ListRunsOptions, type LiveAgentRegistry, LiveSessionError, type LiveSessionReason, LocalOptions, type ManagedSettings, McpServerConfig, Memory, MemoryId, type MemoryProvider, MemorySettings, type MigrateOptions, type MigrateResult, type ModelListItem, type ModelParameterDefinition, ModelSelection, type ModelVariant, NoopMemoryProvider, type NormalizedJsonSchema, type OTelSpan, type PermissionAction, PermissionEngine, type PermissionEngineOptions, type PermissionFloorContext, type PermissionGate, type PermissionGateContext, type PermissionGateDecision, PermissionMode, PermissionPlugin, type PermissionPluginOptions, type PermissionRule, type PermissionRuleSet, Plugin, PluginsSettings, PreToolCallDecision, type Processor, Provider, type ProviderProfile, ProviderRoutingSettings, type ReadSessionMessagesOptions, type ReapPlan, type ReapPlanInput, type ReapableArtifact, type RetentionPolicy, RetentionPolicyError, Run, RunEventSink$1 as RunEventSink, RunResult, type SDKAgent, SDKAgentInfo, SDKMessage, type SDKModel, SDKProvider, type SDKRepository, type SDKUser, SOVEREIGN_ENV_KEYS, Security, type SecurityFloorInput, type SessionMessage, type SessionMessagePart, type SessionScope, type ShareGptMessage, type ShareGptTrajectory, SkillReadTool, SkillsSettings, type SovereignEnvKey, Squad, type SquadOptions, type SquadRun, StreamObjectError, type StreamObjectEvent, type StreamObjectOptions, SystemPromptResolver, TASK_RESERVED_PREFIXES, Task, type TaskCancelResult, type TaskConfigureOptions, type TaskEvent, type TaskFilter, type TaskHandle, type TaskKind, type TaskState, type TaskStoreOptions, type TaskSubmitOptions, type TaskWorkContext, type TaskWorkFn, type TelemetryHandle, Theokit, TheokitAgentError, type TheokitRequestOptions, TokenLimiter, type TokenLimiterOptions, Tool, ToolError, type ToolResultContentBlock, type TrustLevel, type TrustPosture, type TrustPostureInput, type TrustSource, UngatedCapabilityError, UnicodeNormalizer, type UnicodeNormalizerOptions, type UnresolvedToolSource, UsageAccumulator, type WiredEntity, type WiringRecordInput, type WithBlastRadius, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, computeCost, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decide, decideApproval, describeAction, describeCredential, effectiveToolNames, emitRunEvent, estimateTokens, evaluateBlastRadius, extractRawId, foldLayers, generateImage, getPricingEntry, guardSessionDestruction, inferApiMode, isInside, isValidTaskId, loadProjectEnv, managedSettingsPathFor, migrateSqliteToLance, mkMemoryId, normalizeSchema, normalizeUsage, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readManagedSettings, readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, setDiagnosticsSink, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };

package/dist/index.js

@@ -9,28 +9,28 @@ export { Workflow, agentStep, fn } from './chunk-4C37ELQL.js';
 import './chunk-PCPYTBVV.js';
 export { SqliteSessionStore } from './chunk-VFT63FJF.js';
 import './chunk-HY66GLM6.js';
-export { Cron } from './chunk-ATGSV4GS.js';
-import { MEMORY_EMBEDDING_ADAPTERS, resolveSessionDir, DEFAULT_AGENTIC_MODEL_ID, Agent } from './chunk-CG64VPPU.js';
-export { Agent, AgentBuilder, Tool, ToolError, UsageAccumulator, computeCost, getPricingEntry, managedSettingsPathFor, readManagedSettings } from './chunk-CG64VPPU.js';
+export { Cron } from './chunk-DLCYS5RI.js';
+import { MEMORY_EMBEDDING_ADAPTERS, resolveSessionDir, DEFAULT_AGENTIC_MODEL_ID, Agent } from './chunk-NHD5IN3E.js';
+export { Agent, AgentBuilder, Tool, ToolError, UsageAccumulator, computeCost, getPricingEntry, managedSettingsPathFor, readManagedSettings } from './chunk-NHD5IN3E.js';
+import './chunk-2SFBB54R.js';
 import { configure, submit, list, get, cancel, subscribe } from './chunk-GEQLHBJM.js';
 export { emitRunEvent } from './chunk-GEQLHBJM.js';
-import './chunk-PSMWZYW6.js';
+import './chunk-6WPNFZH3.js';
 import './chunk-3GQYMKVJ.js';
+import { readSessionMessages } from './chunk-4E4D6H77.js';
 import './chunk-L5B7EWWH.js';
 import './chunk-ZUWVO442.js';
-import './chunk-2SFBB54R.js';
 import './chunk-TTXRNCXY.js';
 import './chunk-H73MEMQB.js';
 import './chunk-BH6M2DGV.js';
 import { resolveMemoryRoot } from './chunk-DB5RYCXX.js';
 import { FsSessionStore } from './chunk-P7B64NFK.js';
-import { discoverProviderPlugins, shouldUseFixtureMode, isFixtureApiKey, httpRequest, mapOllamaTransportError, readErrorResponseBody, mapOllamaHttpError } from './chunk-JRQJMZKY.js';
-export { inferApiMode, normalizeUsage } from './chunk-JRQJMZKY.js';
+import { discoverProviderPlugins, shouldUseFixtureMode, isFixtureApiKey, httpRequest, mapOllamaTransportError, readErrorResponseBody, mapOllamaHttpError } from './chunk-MNE4633K.js';
+export { inferApiMode, normalizeUsage } from './chunk-MNE4633K.js';
 import './chunk-OIOSY5G6.js';
 import './chunk-2XC6KDJM.js';
 import './chunk-7ACS6P5Z.js';
 import './chunk-24MGQDK3.js';
-import { readSessionMessages } from './chunk-4E4D6H77.js';
 import './chunk-HKCKOAIO.js';
 import './chunk-YUQNHLKN.js';
 import './chunk-S7IZEVXX.js';
@@ -65,15 +65,17 @@ import { CLAUDE_DIR_NAME, THEOKIT_DIR_LITERAL } from './chunk-PISZRLES.js';
 import './chunk-TIYQDJFK.js';
 import { estimateTokens, CHARS_PER_TOKEN } from './chunk-SZQFCHU6.js';
 export { estimateTokens } from './chunk-SZQFCHU6.js';
-import './chunk-CMDM4VF6.js';
+import { trimTrailingSlashes } from './chunk-ICBNSAO4.js';
+import './chunk-4XYCF5PA.js';
 import { parseModelId } from './chunk-R7WIIPUR.js';
-import './chunk-AQ23NII7.js';
-import { registerBuiltins, listProviders, getCatalogCapabilities, getProviderProfile } from './chunk-5L7S2VOL.js';
+import './chunk-UNUGF36D.js';
+import { registerBuiltins, listProviders, getCatalogCapabilities, getProviderProfile } from './chunk-A3T2A2WU.js';
 import './chunk-AGACYRJ2.js';
+import './chunk-Z2UVCAYS.js';
 import './chunk-UNP4NCMZ.js';
 import './chunk-L2KC2G7H.js';
 import './chunk-5IUDICRK.js';
-import './chunk-Q7GYMXVC.js';
+import { boundFetch } from './chunk-Q7GYMXVC.js';
 import { BudgetExceededError, ConfigurationError, TheokitAgentError, MemoryAdapterError, AuthenticationError } from './chunk-TNFOU6SB.js';
 export { AgentDisposedError, AgentRunError, AuthenticationError, BudgetExceededError, ConfigurationError, IntegrationNotConnectedError, InvalidTaskIdError, MemoryAdapterError, NetworkError, RateLimitError, TaskNotFoundError, TheokitAgentError, UnknownAgentError, UnsupportedBudgetOperationError, UnsupportedRunOperationError, UnsupportedTaskOperationError, isTransientError } from './chunk-TNFOU6SB.js';
 import { diag, redactSecrets, addPattern, resolveApiKey } from './chunk-3OY6H3I7.js';
@@ -554,6 +556,94 @@ function describeCredential(input) {
     fingerprint: createHash("sha256").update(secret).digest("hex").slice(0, 8)
   };
 }
+var DecisionChecksumError = class extends TheokitAgentError {
+  constructor(modelPath, expected, actual) {
+    super(`decide: checksum mismatch for ${modelPath} (expected ${expected}, got ${actual})`, {
+      code: "decision_checksum_mismatch",
+      isRetryable: false
+    });
+    this.modelPath = modelPath;
+    this.expected = expected;
+    this.actual = actual;
+  }
+  modelPath;
+  expected;
+  actual;
+  name = "DecisionChecksumError";
+};
+var sessionCache = /* @__PURE__ */ new Map();
+async function defaultLoadSession(model) {
+  const name = "onnxruntime-node";
+  let ort;
+  try {
+    ort = await import(
+      /* @vite-ignore */
+      name
+    );
+  } catch {
+    throw new Error("decide: install `onnxruntime-node` to run a local classifier");
+  }
+  const session = await ort.InferenceSession.create(model);
+  const tensor = (a) => new ort.Tensor("int64", BigInt64Array.from(a, BigInt), [1, a.length]);
+  return {
+    async run(t) {
+      const feeds = {
+        input_ids: tensor(t.inputIds),
+        attention_mask: tensor(t.attentionMask ?? t.inputIds.map(() => 1))
+      };
+      const out = await session.run(feeds);
+      const first = Object.values(out)[0];
+      if (!first) throw new Error("decide: model returned no output");
+      return Array.from(first.data, Number);
+    }
+  };
+}
+function softmax(logits) {
+  const max = Math.max(...logits);
+  const exps = logits.map((x) => Math.exp(x - max));
+  const sum = exps.reduce((a, b) => a + b, 0);
+  return exps.map((e) => e / sum);
+}
+async function decide(opts) {
+  if (opts.labels.length === 0) throw new Error("decide: labels must not be empty");
+  if (new Set(opts.labels).size !== opts.labels.length) {
+    throw new Error("decide: labels must be unique");
+  }
+  if (!/^[0-9a-f]{64}$/i.test(opts.sha256)) {
+    throw new Error("decide: sha256 must be 64 hex characters");
+  }
+  const bytes = await readFile(opts.modelPath);
+  const actual = createHash("sha256").update(bytes).digest("hex");
+  const expected = opts.sha256.toLowerCase();
+  if (actual !== expected) throw new DecisionChecksumError(opts.modelPath, expected, actual);
+  const load = () => (opts.loadSession ?? defaultLoadSession)(new Uint8Array(bytes));
+  let session;
+  if (opts.loadSession) {
+    session = await load();
+  } else {
+    let cached = sessionCache.get(actual);
+    if (!cached) {
+      cached = load();
+      sessionCache.set(actual, cached);
+      cached.catch(() => sessionCache.delete(actual));
+    }
+    session = await cached;
+  }
+  const logits = await session.run(await opts.tokenize(opts.text));
+  if (logits.length !== opts.labels.length) {
+    throw new Error(
+      `decide: model returned ${logits.length} scores for ${opts.labels.length} labels`
+    );
+  }
+  const probs = softmax(logits);
+  const scores = {};
+  let best = 0;
+  opts.labels.forEach((l, i) => {
+    scores[l] = probs[i];
+    if (probs[i] > probs[best]) best = i;
+  });
+  return { label: opts.labels[best], scores, source: "local-onnx", modelSha256: actual };
+}
 
 // src/define-provider.ts
 function defineProvider(profile, opts) {
@@ -766,6 +856,87 @@ var EventBus = class {
   }
 };
 
+// src/generate-image.ts
+function sniffMime(b) {
+  const at = (i, ...v) => v.every((x, k) => b[i + k] === x);
+  if (at(0, 137, 80, 78, 71, 13, 10, 26, 10)) return "image/png";
+  if (at(0, 255, 216, 255)) return "image/jpeg";
+  if (at(0, 82, 73, 70, 70) && at(8, 87, 69, 66, 80)) return "image/webp";
+  return "application/octet-stream";
+}
+function parseSseLine(line) {
+  if (!line.startsWith("data:")) return void 0;
+  try {
+    return JSON.parse(line.slice(5));
+  } catch {
+    return void 0;
+  }
+}
+function imageFromSse(sse) {
+  for (const line of sse.split("\n")) {
+    const ev = parseSseLine(line);
+    const done = ev?.type === "response.output_item.done" && ev.item?.type === "image_generation_call";
+    if (done && ev?.item?.result) return ev.item.result;
+  }
+  return void 0;
+}
+async function assertOk(res) {
+  if (res.ok) return;
+  const text = await res.text().catch(() => "");
+  throw new Error(`generateImage: provider returned ${res.status} ${text.slice(0, 300)}`);
+}
+async function generateViaChatGpt(opts) {
+  const { codexFetch } = await import('./openai-chatgpt-ZFNZWT2L.js');
+  const base = trimTrailingSlashes(opts.baseUrl ?? "https://chatgpt.com/backend-api/codex");
+  const res = await (opts.fetch ?? codexFetch())(`${base}/responses`, {
+    method: "POST",
+    headers: { "content-type": "application/json", accept: "text/event-stream" },
+    body: JSON.stringify({
+      model: opts.model ?? "gpt-5.4",
+      instructions: "Generate the requested image with the image_generation tool.",
+      input: [{ role: "user", content: [{ type: "input_text", text: opts.prompt }] }],
+      tools: [{ type: "image_generation" }],
+      tool_choice: { type: "image_generation" },
+      store: false,
+      stream: true
+    }),
+    signal: opts.signal
+  });
+  await assertOk(res);
+  const b64 = imageFromSse(await res.text());
+  if (b64 === void 0) throw new Error("generateImage: provider returned no image data");
+  return b64;
+}
+async function generateImage(opts) {
+  if (opts.route === "chatgpt") {
+    const image2 = new Uint8Array(Buffer.from(await generateViaChatGpt(opts), "base64"));
+    return { image: image2, mimeType: sniffMime(image2) };
+  }
+  const apiKey = opts.apiKey ?? process.env.OPENAI_API_KEY;
+  if (!apiKey) throw new Error("generateImage: no API key (pass apiKey or set OPENAI_API_KEY)");
+  const base = trimTrailingSlashes(opts.baseUrl ?? "https://api.openai.com/v1");
+  const body = {
+    model: opts.model ?? "gpt-image-1",
+    prompt: opts.prompt,
+    n: 1
+  };
+  if (opts.size !== void 0) body.size = opts.size;
+  const res = await boundFetch(opts.fetch)(`${base}/images/generations`, {
+    method: "POST",
+    headers: { "content-type": "application/json", authorization: `Bearer ${apiKey}` },
+    body: JSON.stringify(body),
+    signal: opts.signal
+  });
+  await assertOk(res);
+  const json = await res.json();
+  const b64 = json.data?.[0]?.b64_json;
+  if (typeof b64 !== "string" || b64.length === 0) {
+    throw new Error("generateImage: provider returned no image data");
+  }
+  const image = new Uint8Array(Buffer.from(b64, "base64"));
+  return { image, mimeType: sniffMime(image) };
+}
+
 // src/goal-loop.ts
 function runGoalLoop(agent, goal, options, depsOverride) {
   async function* wrap() {
@@ -1745,7 +1916,7 @@ function isBuiltAgent(m) {
   return typeof m.send === "function";
 }
 async function materialize(def, index) {
-  const { Agent: Agent2 } = await import('./agent-QRIFX2SY.js');
+  const { Agent: Agent2 } = await import('./agent-FB56RAXD.js');
   return Agent2.create({
     // `AgentDefinition.model` admits the sentinel `'inherit'`, which is not a model id. Inheriting
     // here means "declare nothing and let the default apply" — forwarding the literal would create
@@ -2279,6 +2450,6 @@ function recordWiring(input) {
   return record;
 }
 
-export { AgentFactory, Budget, EventBus, JobQueue, LayerOrderError, LiveSessionError, Memory, NoopMemoryProvider, PermissionEngine, PermissionPlugin, Plugin, Provider, RetentionPolicyError, SOVEREIGN_ENV_KEYS, Security, Skill, SkillReadTool, Squad, Task, Theokit, TokenLimiter, UngatedCapabilityError, UnicodeNormalizer, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decideApproval, describeAction, describeCredential, effectiveToolNames, evaluateBlastRadius, extractRawId, foldLayers, guardSessionDestruction, isInside, loadProjectEnv, migrateSqliteToLance2 as migrateSqliteToLance, mkMemoryId, normalizeSchema, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readSessionMessages2 as readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };
+export { AgentFactory, Budget, DecisionChecksumError, EventBus, JobQueue, LayerOrderError, LiveSessionError, Memory, NoopMemoryProvider, PermissionEngine, PermissionPlugin, Plugin, Provider, RetentionPolicyError, SOVEREIGN_ENV_KEYS, Security, Skill, SkillReadTool, Squad, Task, Theokit, TokenLimiter, UngatedCapabilityError, UnicodeNormalizer, applyMode, applySecurityFloor, auditEnvReachability, chargeAndCheckThresholds, createCounterBudgetTracker, createTokenLimiter, createUnicodeNormalizer, decide, decideApproval, describeAction, describeCredential, effectiveToolNames, evaluateBlastRadius, extractRawId, foldLayers, generateImage, guardSessionDestruction, isInside, loadProjectEnv, migrateSqliteToLance2 as migrateSqliteToLance, mkMemoryId, normalizeSchema, parsePermissionRules, permissionFloorReason, planReaping, preflightCheck, readSessionMessages2 as readSessionMessages, recordWiring, resolveTrustPosture, runGoalLoop, scopedConversationId, sessionScopePrefix, toShareGptTrajectory, verifyLayerOrdering, withBlastRadius };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map