@theokit/sdk 5.3.3 → 5.5.0

package/CHANGELOG.md

@@ -1,5 +1,106 @@
 # Changelog
 
+## 5.5.0
+
+### Minor Changes
+
+- [#639](https://github.com/usetheokit/theokit-sdk/pull/639) [`4f2e86c`](https://github.com/usetheokit/theokit-sdk/commit/4f2e86cc8bfa0e7947d9e2d11c8f20e0e35910a1) Thanks [@usetheodev](https://github.com/usetheodev)! - A hook approval request carries the identity a consumer stored ([#637](https://github.com/usetheokit/theokit-sdk/issues/637))
+  
+  `local.hooks.approve` let a consumer refuse a hook. It did not let one **approve** a particular
+  hook, because the two sides could not compute the same fingerprint — so the only workable policy
+  was to refuse everything, and a hook a user deliberately wrote could not be run.
+  
+  `HookApprovalRequest` now carries two more fields:
+  
+  ```ts
+  local: {
+    hooks: {
+      approve: ({ command, sourceEvent, matcher, timeoutMs }) =>
+        myStore.has(hash({ command, event: sourceEvent, matcher, timeoutMs })),
+    },
+  }
+  ```
+  
+  - **`timeoutMs`** — the timeout the runtime **will apply**, default already resolved. A config
+    that omits `timeout` still runs under one (30s); reporting `undefined` there would make every
+    consumer reimplement this package's default to reproduce a stored hash, and a default duplicated
+    across a boundary is a default that drifts.
+  - **`sourceEvent`** — the event key exactly as the config file spelled it (`PreToolUse`), which is
+    not `event` (`preToolUse`). An approval is taken against the file shown to the user, so the
+    stored fingerprint is over the file's vocabulary. The literal key rather than a published
+    mapping table, because a mapping is a second thing to keep in step with the first.
+  
+  Both are **required**, not optional: `parseClaudeCodeCommand` is this package's only producer of a
+  hook command, so every hook reaching the gate has both. An optional field would hand every
+  consumer a fallback branch for a case that cannot occur, and in a security gate each extra branch
+  is a second answer to one question.
+  
+  Matching on the subset that survived was the tempting fix and is the wrong one — it would be a
+  second identity answering the same question, which is how one ends up approving what the other
+  refuses.
+  
+  Reading a request is unaffected; nothing that compiled before stops compiling.
+
+## 5.4.0
+
+### Minor Changes
+
+- [#633](https://github.com/usetheokit/theokit-sdk/pull/633) [`ee1e174`](https://github.com/usetheokit/theokit-sdk/commit/ee1e1748f4d0c5f2d4efdacd68a49d2a0b5e09cb) Thanks [@usetheodev](https://github.com/usetheodev)! - The native config root can decline a surface, and a consumer can refuse a hook before it is spawned ([#631](https://github.com/usetheokit/theokit-sdk/issues/631))
+  
+  Two additions, both absent-means-today's-behaviour.
+  
+  ## `{ kind: "theokit", import: [...] }` in `compatSources`
+  
+  `projectConfigRoots` prepended `.theokit/` unconditionally. A **foreign** dialect could already declare which surfaces it contributes; the SDK's own root could declare nothing and contributed all four, always.
+  
+  That asymmetry had a measured cost. `hookConfigCandidates` reads `settings.json` from every root, so a consumer keeping its own configuration in `.theokit/settings.json` had that file's `hooks` key executed by this package — with no gate, and twice when the consumer also ran them. Measured by `usetheoai-lab/TheoCode`: unapproved fired once, approved fired twice.
+  
+  The consumer could not opt out: `settingSources` grants a dialect per SOURCE, not per surface, so dropping `claude-code` to avoid its hooks would also drop its skills, agents and rules — the reason an adopter can use this SDK without migrating anything.
+  
+  ```ts
+  local: { compatSources: [{ kind: "theokit", import: ["skills", "subagents"] }] }
+  //                        hooks omitted on purpose — this package will not read them from .theokit/
+  ```
+  
+  Declaring nothing keeps every surface, exactly as before. A bare `"theokit"` admits everything, matching the rule foreign kinds already follow. It rides on `compatSources`, which already reaches all four surfaces, so no new parameter is threaded anywhere.
+  
+  **Deliberately not included: renaming the directory.** `theokitConfigRoot` is also the DATA root — `agent-registry-store.ts` builds `registry.json`'s path from it directly — so a `dirName` override would move persisted state. Different change, different blast radius, its own migration question.
+  
+  ## `local.hooks.approve`
+  
+  ```ts
+  local: { hooks: { approve: (req) => myFingerprintStore.has(req.command) } }
+  ```
+  
+  Consulted at the single point a hook is spawned, for every root — including a foreign dialect's, which the declaration above cannot reach. The request carries the command text, the event, and the file it was declared in, because a consumer's fingerprint is over the command and the source is what separates its own configuration from a dialect it merely imported.
+  
+  Absent means run: a gate defaulting to refusal would disable every hook in the ecosystem on an upgrade.
+  
+  **A refused hook resolves as if it were not configured — it does not deny the operation.** `preRun` and `preToolUse` decisions can block what they attach to, so treating "not approved" as a denial would make an unapproved hook worse than an absent one. The consumer asked for the command not to run, not for the work to stop.
+
+### Patch Changes
+
+- [#633](https://github.com/usetheokit/theokit-sdk/pull/633) [`ee1e174`](https://github.com/usetheokit/theokit-sdk/commit/ee1e1748f4d0c5f2d4efdacd68a49d2a0b5e09cb) Thanks [@usetheodev](https://github.com/usetheodev)! - The image-in-tool-results refusal names the tool call whose result carried the image ([#629](https://github.com/usetheokit/theokit-sdk/issues/629))
+  
+  Before:
+  
+  ```
+  provider "openai-responses" does not support image content in tool results
+  ```
+  
+  After:
+  
+  ```
+  provider "openai-responses" does not support image content in tool results —
+  the result of tool call call_42 carried an image, and this wire carries tool results as text only
+  ```
+  
+  Accurate before, and unhelpful. The person who hit it had attached an image and asked a question about it; they never asked for a tool, so a message naming *tool results* pointed at a surface they had not used. Measured downstream (`usetheoai-lab/TheoCode#133`): the turn that failed made two tool calls and the five that succeeded made none — asking for *dimensions and colours* provoked a tool call, asking for *one word* did not, which is why it looked intermittent and was not.
+  
+  The **id** rather than the tool's name, and stated rather than quietly settled for: `LlmToolResultPart` carries `toolUseId` only — the name lives on the matching `LlmToolCallPart` in an earlier message, and the four sites that construct a tool result do not have it either. The id is the correlation key that exists at the call site, it is what a reader can find in a transcript, and it does not pretend to be a name.
+  
+  The parameter is optional, so nothing that calls this helper with two arguments changes.
+
 ## 5.3.3
 
 ### Patch Changes

package/dist/{agent-CTbU0O1R.d.ts → agent-CjMVbhhY.d.ts}

@@ -348,6 +348,77 @@ interface BudgetTracker {
     nextIteration?(): void;
 }
 
+/**
+ * Hook contract types.
+ *
+ * Owner: `internal/runtime/hooks/` (2 of 3 importers). Derived from the import graph, not declared —
+ * `hooks-executor.ts` re-exports every name here, and `types/agent.ts` reads only the gate.
+ *
+ * A LEAF: it imports nothing, so anything may depend on it without closing a cycle. That is the
+ * whole reason it exists as its own file. The first version of #631 put
+ * `import("../internal/runtime/hooks/hooks-executor.js").HookApprovalGate` inline in
+ * `types/agent.ts`, which made the public contract depend on an internal module and produced
+ * thirteen failing cycle assertions — the exact defect `types/plugin.ts` documents at its own head
+ * ("the public contract sits above the DIP boundary").
+ *
+ * `HookEvent` is DECLARED here and re-exported by `internal/runtime/hooks/hooks-executor.ts`, so
+ * that pair has one definition. `internal/runtime/hooks/hooks-source.ts` still carries its own copy;
+ * consolidating that third one is the same class of problem as #586 and is deliberately not folded
+ * into this change.
+ *
+ * @public
+ */
+/** The five lifecycle events the runtime actually fires. */
+type HookEvent = "preRun" | "postRun" | "preToolUse" | "postToolUse" | "stop";
+/**
+ * #631 — what the consumer is shown when asked to approve a hook.
+ *
+ * The command TEXT and the file it was declared in, because neither alone answers the question. A
+ * consumer's fingerprint is over the command; which file it came from is what separates its own
+ * configuration from a foreign dialect it merely imported, and those deserve different answers.
+ *
+ * @public
+ */
+interface HookApprovalRequest {
+    readonly command: string;
+    readonly event: HookEvent;
+    readonly sourcePath?: string;
+    readonly matcher?: string;
+    /**
+     * #637 — the timeout the runtime WILL apply, in milliseconds, default already resolved.
+     *
+     * A config that omits `timeout` still runs under one (30s). Reporting `undefined` there would
+     * make a consumer reimplement this package's default in order to compute the same fingerprint,
+     * and a default duplicated across a boundary is a default that drifts.
+     */
+    readonly timeoutMs: number;
+    /**
+     * #637 — the event key exactly as the config file spelled it (`PreToolUse`), which is NOT
+     * `event` (`preToolUse`).
+     *
+     * A consumer's approval is taken against the file it showed the user, so its stored fingerprint
+     * is over the file's vocabulary. Without this the two sides hash different strings and no hook
+     * can ever be approved — only refused. The literal key rather than a published mapping table,
+     * because a mapping is a second thing to keep in step with the first.
+     *
+     * `string` and not a union of the keys this SDK currently recognises: the vocabulary belongs to
+     * whichever dialect declared the hook, so narrowing it would make adding a dialect a breaking
+     * change to this public type. A consumer hashes it; it does not need to switch on it.
+     */
+    readonly sourceEvent: string;
+}
+/**
+ * #631 — a consumer's decision point before this package spawns a hook.
+ *
+ * Absent means run, which is what every consumer gets today: a gate that defaulted to refusing
+ * would disable every hook in the ecosystem on an upgrade.
+ *
+ * @public
+ */
+interface HookApprovalGate {
+    readonly approve?: (request: HookApprovalRequest) => boolean | Promise<boolean>;
+}
+
 /**
  * Owner: `internal/memory/storage/` (1 of 2 importers). Derived from the import graph, not
  * declared — `tests/lint/types-name-their-owner.test.ts` re-derives it.
@@ -971,7 +1042,7 @@ type SettingSource = "project" | "user" | "team" | "mdm" | "plugins" | "all";
  *
  * @public
  */
-type CompatSource = "claude-code" | CompatSourceAdapter;
+type CompatSource = "claude-code" | "theokit" | CompatSourceAdapter;
 /**
  * A surface a foreign configuration source may be admitted to.
  *
@@ -1001,7 +1072,17 @@ type CompatSurface = "hooks" | "plugins" | "skills" | "subagents";
  * @public
  */
 interface CompatSourceAdapter {
-    readonly kind: "claude-code";
+    /**
+     * `"theokit"` names THIS package's own root (#631), in the same vocabulary a foreign dialect
+     * uses. Until it was accepted here, `.theokit/` contributed every surface unconditionally while a
+     * foreign one could declare which surfaces it wanted — an asymmetry with a measured cost: a
+     * consumer keeping its own configuration in `.theokit/settings.json` had that file's `hooks` key
+     * executed by this package, and `settingSources` gave it no way to decline, because it grants per
+     * SOURCE and not per surface.
+     *
+     * Declaring nothing keeps today's behaviour exactly: the native root contributes everything.
+     */
+    readonly kind: "claude-code" | "theokit";
     readonly import?: readonly CompatSurface[];
 }
 /**
@@ -1069,6 +1150,18 @@ interface LocalOptions {
      * wrote for this runtime.
      */
     compatSources?: CompatSource[];
+    /**
+     * #631 — the consumer's chance to refuse a hook command before this package spawns it.
+     *
+     * Absent means run, which is what every consumer gets today. It is consulted at the single point
+     * a hook is executed, for every root — including a foreign dialect's, which is the case
+     * {@link CompatSourceAdapter} cannot reach: a consumer that wants `.claude/`'s skills, agents and
+     * rules cannot decline only its hooks, because `settingSources` grants per source.
+     *
+     * A refused hook resolves as if it were not configured. It does NOT deny the operation the hook
+     * attached to — the consumer asked for the command not to run, not for the work to stop.
+     */
+    hooks?: HookApprovalGate;
     sandboxOptions?: {
         enabled: boolean;
     };

package/dist/{agent-QLwxhXY3.d.cts → agent-DyB_lzrx.d.cts}

@@ -348,6 +348,77 @@ interface BudgetTracker {
     nextIteration?(): void;
 }
 
+/**
+ * Hook contract types.
+ *
+ * Owner: `internal/runtime/hooks/` (2 of 3 importers). Derived from the import graph, not declared —
+ * `hooks-executor.ts` re-exports every name here, and `types/agent.ts` reads only the gate.
+ *
+ * A LEAF: it imports nothing, so anything may depend on it without closing a cycle. That is the
+ * whole reason it exists as its own file. The first version of #631 put
+ * `import("../internal/runtime/hooks/hooks-executor.js").HookApprovalGate` inline in
+ * `types/agent.ts`, which made the public contract depend on an internal module and produced
+ * thirteen failing cycle assertions — the exact defect `types/plugin.ts` documents at its own head
+ * ("the public contract sits above the DIP boundary").
+ *
+ * `HookEvent` is DECLARED here and re-exported by `internal/runtime/hooks/hooks-executor.ts`, so
+ * that pair has one definition. `internal/runtime/hooks/hooks-source.ts` still carries its own copy;
+ * consolidating that third one is the same class of problem as #586 and is deliberately not folded
+ * into this change.
+ *
+ * @public
+ */
+/** The five lifecycle events the runtime actually fires. */
+type HookEvent = "preRun" | "postRun" | "preToolUse" | "postToolUse" | "stop";
+/**
+ * #631 — what the consumer is shown when asked to approve a hook.
+ *
+ * The command TEXT and the file it was declared in, because neither alone answers the question. A
+ * consumer's fingerprint is over the command; which file it came from is what separates its own
+ * configuration from a foreign dialect it merely imported, and those deserve different answers.
+ *
+ * @public
+ */
+interface HookApprovalRequest {
+    readonly command: string;
+    readonly event: HookEvent;
+    readonly sourcePath?: string;
+    readonly matcher?: string;
+    /**
+     * #637 — the timeout the runtime WILL apply, in milliseconds, default already resolved.
+     *
+     * A config that omits `timeout` still runs under one (30s). Reporting `undefined` there would
+     * make a consumer reimplement this package's default in order to compute the same fingerprint,
+     * and a default duplicated across a boundary is a default that drifts.
+     */
+    readonly timeoutMs: number;
+    /**
+     * #637 — the event key exactly as the config file spelled it (`PreToolUse`), which is NOT
+     * `event` (`preToolUse`).
+     *
+     * A consumer's approval is taken against the file it showed the user, so its stored fingerprint
+     * is over the file's vocabulary. Without this the two sides hash different strings and no hook
+     * can ever be approved — only refused. The literal key rather than a published mapping table,
+     * because a mapping is a second thing to keep in step with the first.
+     *
+     * `string` and not a union of the keys this SDK currently recognises: the vocabulary belongs to
+     * whichever dialect declared the hook, so narrowing it would make adding a dialect a breaking
+     * change to this public type. A consumer hashes it; it does not need to switch on it.
+     */
+    readonly sourceEvent: string;
+}
+/**
+ * #631 — a consumer's decision point before this package spawns a hook.
+ *
+ * Absent means run, which is what every consumer gets today: a gate that defaulted to refusing
+ * would disable every hook in the ecosystem on an upgrade.
+ *
+ * @public
+ */
+interface HookApprovalGate {
+    readonly approve?: (request: HookApprovalRequest) => boolean | Promise<boolean>;
+}
+
 /**
  * Owner: `internal/memory/storage/` (1 of 2 importers). Derived from the import graph, not
  * declared — `tests/lint/types-name-their-owner.test.ts` re-derives it.
@@ -971,7 +1042,7 @@ type SettingSource = "project" | "user" | "team" | "mdm" | "plugins" | "all";
  *
  * @public
  */
-type CompatSource = "claude-code" | CompatSourceAdapter;
+type CompatSource = "claude-code" | "theokit" | CompatSourceAdapter;
 /**
  * A surface a foreign configuration source may be admitted to.
  *
@@ -1001,7 +1072,17 @@ type CompatSurface = "hooks" | "plugins" | "skills" | "subagents";
  * @public
  */
 interface CompatSourceAdapter {
-    readonly kind: "claude-code";
+    /**
+     * `"theokit"` names THIS package's own root (#631), in the same vocabulary a foreign dialect
+     * uses. Until it was accepted here, `.theokit/` contributed every surface unconditionally while a
+     * foreign one could declare which surfaces it wanted — an asymmetry with a measured cost: a
+     * consumer keeping its own configuration in `.theokit/settings.json` had that file's `hooks` key
+     * executed by this package, and `settingSources` gave it no way to decline, because it grants per
+     * SOURCE and not per surface.
+     *
+     * Declaring nothing keeps today's behaviour exactly: the native root contributes everything.
+     */
+    readonly kind: "claude-code" | "theokit";
     readonly import?: readonly CompatSurface[];
 }
 /**
@@ -1069,6 +1150,18 @@ interface LocalOptions {
      * wrote for this runtime.
      */
     compatSources?: CompatSource[];
+    /**
+     * #631 — the consumer's chance to refuse a hook command before this package spawns it.
+     *
+     * Absent means run, which is what every consumer gets today. It is consulted at the single point
+     * a hook is executed, for every root — including a foreign dialect's, which is the case
+     * {@link CompatSourceAdapter} cannot reach: a consumer that wants `.claude/`'s skills, agents and
+     * rules cannot decline only its hooks, because `settingSources` grants per source.
+     *
+     * A refused hook resolves as if it were not configured. It does NOT deny the operation the hook
+     * attached to — the consumer asked for the command not to run, not for the work to stop.
+     */
+    hooks?: HookApprovalGate;
     sandboxOptions?: {
         enabled: boolean;
     };

package/dist/{agent-PNYJ5S2Y.js → agent-G3T7Q3SQ.js}

@@ -1,16 +1,16 @@
-export { Agent } from './chunk-363RBGIR.js';
+export { Agent } from './chunk-ODBID5TG.js';
 import './chunk-K2VMFZQ5.js';
-import './chunk-AWINL3ZC.js';
+import './chunk-2QKV4CGK.js';
 import './chunk-K2BQQ445.js';
 import './chunk-7SZAV6QG.js';
-import './chunk-7L3MIW2F.js';
+import './chunk-S6B5XYC3.js';
 import './chunk-2SFBB54R.js';
 import './chunk-55GB6JYQ.js';
 import './chunk-H73MEMQB.js';
 import './chunk-OR6XIWLB.js';
 import './chunk-SADXXGWU.js';
 import './chunk-AAEZSPTC.js';
-import './chunk-K3NH62DG.js';
+import './chunk-KZSKIUXZ.js';
 import './chunk-UBR5PWD7.js';
 import './chunk-2XC6KDJM.js';
 import './chunk-XB4GI5RZ.js';
@@ -41,8 +41,8 @@ import './chunk-TA3K7SBK.js';
 import './chunk-Q5EWJPRY.js';
 import './chunk-EIQFAOFD.js';
 import './chunk-3JHIFQ4I.js';
-import './chunk-DLFWMJE3.js';
-import './chunk-RP3VXJMA.js';
+import './chunk-O7L7M42F.js';
+import './chunk-NSLHPAC7.js';
 import './chunk-JNAA4G4H.js';
 import './chunk-6M2OIS4Y.js';
 import './chunk-R7WIIPUR.js';
@@ -54,5 +54,5 @@ import './chunk-V22DZIXO.js';
 import './chunk-NJWYQWDL.js';
 import './chunk-ALUN2B4W.js';
 import './chunk-CZJ6Q7CW.js';
-//# sourceMappingURL=agent-PNYJ5S2Y.js.map
-//# sourceMappingURL=agent-PNYJ5S2Y.js.map
+//# sourceMappingURL=agent-G3T7Q3SQ.js.map
+//# sourceMappingURL=agent-G3T7Q3SQ.js.map

package/dist/{agent-PNYJ5S2Y.js.map → agent-G3T7Q3SQ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-PNYJ5S2Y.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-G3T7Q3SQ.js"}

package/dist/{agent-KJLAWKZB.cjs → agent-YWSIHHFM.cjs}

@@ -1,18 +1,18 @@
 'use strict';
 
-var chunkY46VI73J_cjs = require('./chunk-Y46VI73J.cjs');
+var chunkUKJJRU7C_cjs = require('./chunk-UKJJRU7C.cjs');
 require('./chunk-KVSAY6NZ.cjs');
-require('./chunk-Y2KYR2ED.cjs');
+require('./chunk-DZG77WU7.cjs');
 require('./chunk-BUUUWQMB.cjs');
 require('./chunk-Z2JFX372.cjs');
-require('./chunk-65UMH5V3.cjs');
+require('./chunk-VY6NKMOA.cjs');
 require('./chunk-BV2MWEMV.cjs');
 require('./chunk-D6POWE7E.cjs');
 require('./chunk-GHX4P3V2.cjs');
 require('./chunk-TMKTSYDS.cjs');
 require('./chunk-NQTNSHSB.cjs');
 require('./chunk-7FDKWDA2.cjs');
-require('./chunk-2HPNT6HH.cjs');
+require('./chunk-C4ZQPWXJ.cjs');
 require('./chunk-FUSDYC2B.cjs');
 require('./chunk-YJNYDJ2T.cjs');
 require('./chunk-24SYBZPL.cjs');
@@ -43,8 +43,8 @@ require('./chunk-BJUJT5ED.cjs');
 require('./chunk-ZF2LDKQQ.cjs');
 require('./chunk-HCT4HPCL.cjs');
 require('./chunk-JLRLCBJ4.cjs');
-require('./chunk-IQBDR5YZ.cjs');
-require('./chunk-DWB3CN46.cjs');
+require('./chunk-AYA65JA5.cjs');
+require('./chunk-43YXGD3P.cjs');
 require('./chunk-HW7SEELD.cjs');
 require('./chunk-ATT276RD.cjs');
 require('./chunk-3EE6LVWT.cjs');
@@ -61,7 +61,7 @@ require('./chunk-6LHQPOMI.cjs');
 
 Object.defineProperty(exports, "Agent", {
   enumerable: true,
-  get: function () { return chunkY46VI73J_cjs.Agent; }
+  get: function () { return chunkUKJJRU7C_cjs.Agent; }
 });
-//# sourceMappingURL=agent-KJLAWKZB.cjs.map
-//# sourceMappingURL=agent-KJLAWKZB.cjs.map
+//# sourceMappingURL=agent-YWSIHHFM.cjs.map
+//# sourceMappingURL=agent-YWSIHHFM.cjs.map

package/dist/{agent-KJLAWKZB.cjs.map → agent-YWSIHHFM.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-KJLAWKZB.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-YWSIHHFM.cjs"}

package/dist/{chunk-AWINL3ZC.js → chunk-2QKV4CGK.js}

@@ -46,7 +46,7 @@ function persistTurnToTranscript(store, loc, sessionId, turn, onCompact) {
       const count = (recordCounts.get(key) ?? 0) + 1;
       recordCounts.set(key, count);
       if (turn.autoCompact !== void 0) {
-        const { autoCompactIfNeeded } = await import('./compact-session-W4WLJTHA.js');
+        const { autoCompactIfNeeded } = await import('./compact-session-YSEK7NQF.js');
         const fired = await autoCompactIfNeeded({
           store,
           loc,
@@ -105,5 +105,5 @@ function enqueueSessionWrite(cwd, agentId, fn) {
 }
 
 export { appendSessionMessage, clearSession, discardSession, enqueueSessionWrite, flushSessionWrites, getSessionMessages, hydrateSession, persistTurnToTranscript };
-//# sourceMappingURL=chunk-AWINL3ZC.js.map
-//# sourceMappingURL=chunk-AWINL3ZC.js.map
+//# sourceMappingURL=chunk-2QKV4CGK.js.map
+//# sourceMappingURL=chunk-2QKV4CGK.js.map

package/dist/{chunk-AWINL3ZC.js.map → chunk-2QKV4CGK.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal/session/agent-session.ts"],"names":[],"mappings":";;;;;AAyCA,IAAM,aAAA,uBAAoB,GAAA,EAA2B;AACrD,IAAM,YAAA,uBAAmB,GAAA,EAAoB;AAStC,SAAS,oBAAA,CAAqB,SAAiB,OAAA,EAA+B;AACnF,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,OAAO,KAAK,EAAC;AAC3C,EAAA,QAAA,CAAS,KAAK,OAAO,CAAA;AAIrB,EAAA,QAAA,CAAS,OAAO,OAAO,CAAA;AACvB,EAAA,QAAA,CAAS,GAAA,CAAI,SAAS,QAAQ,CAAA;AAC9B,EAAA,cAAA,EAAe;AACjB;AAWO,IAAM,mBAAA,GAAsB,EAAA;AAEnC,SAAS,cAAA,GAAuB;AAC9B,EAAA,OAAO,QAAA,CAAS,OAAO,mBAAA,EAAqB;AAC1C,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AACtC,IAAA,IAAI,WAAW,MAAA,EAAW;AAC1B,IAAA,QAAA,CAAS,OAAO,MAAM,CAAA;AACtB,IAAA,iBAAA,CAAkB,MAAM,CAAA;AAAA,EAC1B;AACF;AAeA,SAAS,kBAAkB,OAAA,EAAuB;AAChD,EAAA,MAAM,MAAA,GAAS,cAAc,EAAA,EAAI,OAAO,EAAE,KAAA,CAAM,CAAA,GAAI,OAAA,CAAQ,MAAA,GAAS,CAAC,CAAA;AACtE,EAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAG,YAAY,CAAA,EAAG,IAAI,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG,YAAA,CAAa,MAAA,CAAO,CAAC,CAAA;AAChF,EAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAG,aAAA,CAAc,MAAM,CAAA,EAAG,IAAI,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG,aAAA,CAAc,OAAO,CAAC,CAAA;AACzF,EAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAG,YAAA,CAAa,MAAM,CAAA,EAAG,IAAI,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG,YAAA,CAAa,OAAO,CAAC,CAAA;AACzF;AAaO,SAAS,cAAA,CAAe,KAAa,OAAA,EAAyB;AACnE,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,EAAK,OAAO,CAAA;AACtC,EAAA,IAAI,OAAA,GAAU,CAAA;AAUd,EAAA,IAAI,YAAA,CAAa,MAAA,CAAO,GAAG,CAAA,EAAG,OAAA,EAAA;AAC9B,EAAA,IAAI,aAAA,CAAc,MAAA,CAAO,GAAG,CAAA,EAAG,OAAA,EAAA;AAC/B,EAAA,IAAI,YAAA,CAAa,MAAA,CAAO,GAAG,CAAA,EAAG,OAAA,EAAA;AAC9B,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,mBAAmB,OAAA,EAAmC;AACpE,EAAA,OAAO,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA,IAAK,EAAC;AACnC;AAWO,SAAS,uBAAA,CACd,KAAA,EACA,GAAA,EACA,SAAA,EACA,MACA,SAAA,EACM;AACN,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,CAAI,GAAA,EAAK,IAAI,OAAO,CAAA;AAM9C,EAAA,MAAM,OAAA,GAAA,CAAW,cAAc,GAAA,CAAI,GAAG,KAAK,OAAA,CAAQ,OAAA,EAAQ,EAAG,IAAA,CAAK,YAAY;AAC7E,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,CAAY,KAAA,EAAO,GAAA,EAAK,SAAA,EAAW,IAAI,CAAA;AAC7C,MAAA,MAAM,KAAA,GAAA,CAAS,YAAA,CAAa,GAAA,CAAI,GAAG,KAAK,CAAA,IAAK,CAAA;AAC7C,MAAA,YAAA,CAAa,GAAA,CAAI,KAAK,KAAK,CAAA;AAI3B,MAAA,IAAI,IAAA,CAAK,gBAAgB,KAAA,CAAA,EAAW;AAClC,QAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,MAAM,OAAO,+BAAsB,CAAA;AACnE,QAAA,MAAM,KAAA,GAAQ,MAAM,mBAAA,CAAoB;AAAA,UACtC,KAAA;AAAA,UACA,GAAA;AAAA,UACA,SAAA;AAAA,UACA,UAAA,EAAY,KAAK,WAAA,CAAY,UAAA;AAAA,UAC7B,aAAA,EAAe,KAAK,WAAA,CAAY,aAAA;AAAA,UAChC,SAAA,EAAW,KAAA;AAAA,UACX,SAAA,EAAW,KAAK,WAAA,CAAY;AAAA,SAC7B,CAAA;AACD,QAAA,IAAI,OAAO,SAAA,IAAY;AAAA,MACzB;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,MAAM,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AACjE,MAAA,IAAA,CAAK,CAAA,+CAAA,EAAkD,GAAA,CAAI,OAAO,CAAA,GAAA,EAAM,GAAG;AAAA,CAAI,CAAA;AAAA,IACjF;AAAA,EACF,CAAC,CAAA;AACD,EAAA,aAAA,CAAc,GAAA;AAAA,IACZ,GAAA;AAAA,IACA,OAAA,CAAQ,IAAA;AAAA,MACN,MAAM,MAAA;AAAA,MACN,MAAM;AAAA;AACR,GACF;AACF;AAQA,eAAsB,cAAA,CACpB,SACA,GAAA,EACe;AACf,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA;AAC1C,EAAA,IAAI,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA,EAAG;AAC3B,EAAA,YAAA,CAAa,IAAI,GAAG,CAAA;AAEpB,EAAA,MAAM,SAAA,GAAY,MAAM,mBAAA,CAAoB,GAAA,CAAI,OAAO,OAAO,CAAA;AAC9D,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAM5B,EAAA,QAAA,CAAS,GAAA,CAAI,SAAS,SAAS,CAAA;AACjC;AAQA,eAAsB,kBAAA,GAAoC;AACxD,EAAA,OAAO,aAAA,CAAc,OAAO,CAAA,EAAG;AAC7B,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,IAAA,CAAK,aAAA,CAAc,QAAQ,CAAA;AAC7C,IAAA,aAAA,CAAc,KAAA,EAAM;AACpB,IAAA,MAAM,OAAA,CAAQ,IAAI,GAAG,CAAA;AAAA,EACvB;AACF;AAkBO,SAAS,aAAa,OAAA,EAAuB;AAClD,EAAA,QAAA,CAAS,OAAO,OAAO,CAAA;AACzB;AAOO,SAAS,mBAAA,CACd,GAAA,EACA,OAAA,EACA,EAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,EAAK,OAAO,CAAA;AACtC,EAAA,MAAM,QAAQ,aAAA,CAAc,GAAA,CAAI,GAAG,CAAA,IAAK,QAAQ,OAAA,EAAQ;AACxD,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,IAAA,CAAK,EAAE,CAAA;AAC5B,EAAA,aAAA,CAAc,GAAA;AAAA,IACZ,GAAA;AAAA,IACA,MAAA,CAAO,IAAA;AAAA,MACL,MAAM,MAAA;AAAA,MACN,MAAM;AAAA;AACR,GACF;AACA,EAAA,OAAO,MAAA;AACT","file":"chunk-AWINL3ZC.js","sourcesContent":["import type { SessionStore } from \"../../types/session-store.js\";\nimport {\n  type PersistTurnInput,\n  persistTurn,\n  readSessionMessages,\n  type TranscriptLocation,\n} from \"./agent-session-store.js\";\n\n/**\n * Per-agent conversation history kept across runs (and across `Agent.resume()`\n * within the same process). Lets the fixture responder recall prior facts when\n * the user asks a follow-up question.\n *\n * SE40 — disk persistence IS the native Claude-shaped `.jsonl` transcript. The\n * in-memory cache holds the narrowed `SessionMessage[]` (user/assistant text) so\n * a send can read `priorMessages` synchronously; the whole rich turn (user +\n * assistant + tool blocks) lands on disk once per send via {@link persistTurnToTranscript}\n * (fed by `run.conversation()`). Hydration on resume reconstructs the session by\n * walking the transcript DAG (`readSessionMessages`).\n *\n * @internal\n */\n\n// `SessionMessage` lives in `./session-types.ts` (leaf types file). Re-exported\n// for back-compat with downstream importers that pulled it from here.\nexport type { SessionMessage } from \"./types.js\";\n\nimport type { SessionMessage } from \"./types.js\";\n\n// M75 — the cache lives in a leaf; see session-cache.ts for the reason (cycle broken by extraction).\nexport {\n  hydratedKeys,\n  invalidateSessionCache,\n  sessions,\n  transcriptKey,\n} from \"./session-cache.js\";\n\nimport { diag } from \"../diagnostics.js\";\nimport { globalSingleton } from \"../global-singleton.js\";\nimport { hydratedKeys, sessions, transcriptKey } from \"./session-cache.js\";\n\nconst pendingWrites = new Map<string, Promise<void>>();\nconst recordCounts = new Map<string, number>();\n\n/**\n * Append a session message to the in-memory cache only. Disk persistence for the\n * whole turn happens once per send via {@link persistTurnToTranscript}; the cache\n * feeds `priorMessages` / `onBeforeSend.previousMessageCount` synchronously.\n *\n * @internal\n */\nexport function appendSessionMessage(agentId: string, message: SessionMessage): void {\n  const existing = sessions.get(agentId) ?? [];\n  existing.push(message);\n  // `delete` + `set` reinserts at the END: a JS `Map` preserves insertion order, so the first key\n  // is always the least recently touched. That is the entire LRU, with no new structure (parsimony\n  // rungs 2/5 — the ordering we need is already a language guarantee).\n  sessions.delete(agentId);\n  sessions.set(agentId, existing);\n  enforceCeiling();\n}\n\n/**\n * Ceiling on sessions kept in memory.\n *\n * The runtime only reads the **active** session; the rest is pure cache, rebuildable from the\n * on-disk transcript. 32 is deliberately generous — the primary removal path is the explicit\n * `discardSession()` at the end of the agent's life, and this ceiling is a safety net against a\n * long-lived process running hundreds of sessions (plan risk #2: a tight ceiling could evict a\n * session still referenced by an in-flight async path).\n */\nexport const MAX_CACHED_SESSIONS = 32;\n\nfunction enforceCeiling(): void {\n  while (sessions.size > MAX_CACHED_SESSIONS) {\n    const oldest = sessions.keys().next().value;\n    if (oldest === undefined) return;\n    sessions.delete(oldest);\n    forgetBookkeeping(oldest);\n  }\n}\n\n/**\n * Erases the bookkeeping for an `agentId` across EVERY `cwd` it appears in.\n *\n * The three maps are keyed by `transcriptKey(cwd, agentId)`; `sessions` is the only one keyed by the\n * raw `agentId`. The ceiling's first version deleted from all three using `sessions`' key — that is,\n * deleted nothing — and left `hydratedKeys` **orphaned**. Since `hydrateSession` returns early when\n * the marker is present, an evicted session came back **empty** instead of rehydrating from disk:\n * silent amnesia, and a regression new to M95, because before it nothing evicted.\n *\n * The ceiling only knows the `agentId`, not the `cwd`, so it scans by suffix — which is the format\n * `transcriptKey` produces. A scan rather than an index because these maps hold tens of entries, not\n * thousands: a reverse index here would be new structure for a problem that does not exist.\n */\nfunction forgetBookkeeping(agentId: string): void {\n  const suffix = transcriptKey(\"\", agentId).slice(0 - agentId.length - 2);\n  for (const k of [...hydratedKeys]) if (k.endsWith(suffix)) hydratedKeys.delete(k);\n  for (const k of [...pendingWrites.keys()]) if (k.endsWith(suffix)) pendingWrites.delete(k);\n  for (const k of [...recordCounts.keys()]) if (k.endsWith(suffix)) recordCounts.delete(k);\n}\n\n/**\n * Erases the agent's module bookkeeping and returns how many entries were removed.\n *\n * M95 — `invalidateSessionCache` used to clear **two** of the four maps (`sessions`, `hydratedKeys`);\n * `pendingWrites` and `recordCounts` were never touched by id, so they grew for the life of the\n * process. Neither is large per entry — the leak is in count, not volume — but a cache with no owner\n * for removal is a cache that only grows.\n *\n * Returns the count so the caller can prove the removal; a second discard returns 0, which is what\n * makes the idempotency test possible without exposing the maps.\n */\nexport function discardSession(cwd: string, agentId: string): number {\n  const key = transcriptKey(cwd, agentId);\n  let removed = 0;\n  // `sessions` is NOT erased here — and the distinction is measured, not aesthetic. It holds the\n  // readable conversation, and there is a legitimate reader AFTER dispose: the golden\n  // `two-concurrent-sends-serialize` calls `getSessionMessages(agentId)` after `agent.dispose()`.\n  // Erasing it here returned an empty list and broke two goldens. What bounds it is the LRU ceiling\n  // above; the three below are pure bookkeeping, with no post-dispose reader.\n  //\n  // The key is `transcriptKey(cwd, agentId)` in ALL THREE — not the raw `agentId`. The first version\n  // erased two of them by `agentId` and therefore **never erased anything**; the test did not catch\n  // it because it only asserted that the SECOND call returns 0, which is true either way.\n  if (hydratedKeys.delete(key)) removed++;\n  if (pendingWrites.delete(key)) removed++;\n  if (recordCounts.delete(key)) removed++;\n  return removed;\n}\n\nexport function getSessionMessages(agentId: string): SessionMessage[] {\n  return sessions.get(agentId) ?? [];\n}\n\n/**\n * Persist a full conversation turn (user + assistant + tool blocks) to the native\n * transcript. Chained per-(agent, transcript) so on-disk order matches send order,\n * and fire-and-forget so `send()` is not blocked by disk I/O. Every\n * M50 — when the caller supplies `turn.autoCompact`, size-driven auto-compaction (usage real vs\n * the model's context window) runs in this same chain, surfaced via the optional `onCompact` observer.\n *\n * @internal\n */\nexport function persistTurnToTranscript(\n  store: SessionStore,\n  loc: TranscriptLocation,\n  sessionId: string,\n  turn: PersistTurnInput,\n  onCompact?: () => void,\n): void {\n  const key = transcriptKey(loc.cwd, loc.agentId);\n  // PRE-EXISTING debt, exposed when M75 fixed the Biome config that used to abort before\n  // sweeping these files (a nested root under refactor/). It is not new code and was not touched\n  // by M75; refactoring SDK internals without review would trade a visible problem for a diff\n  // risky. Tracked in usetheodev/theokit-sdk#151.\n  // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: see the reason just above\n  const chained = (pendingWrites.get(key) ?? Promise.resolve()).then(async () => {\n    try {\n      await persistTurn(store, loc, sessionId, turn);\n      const count = (recordCounts.get(key) ?? 0) + 1;\n      recordCounts.set(key, count);\n      // M50 — the 50-turn no-summary boundary stub is GONE (it silently amnesia'd the session).\n      // Auto-compaction is now size-driven with a real summary: see `maybeAutoCompact` below,\n      // invoked in this same write chain by the post-run lifecycle when usage is known.\n      if (turn.autoCompact !== undefined) {\n        const { autoCompactIfNeeded } = await import(\"./compact-session.js\");\n        const fired = await autoCompactIfNeeded({\n          store,\n          loc,\n          sessionId,\n          usageTotal: turn.autoCompact.usageTotal,\n          contextWindow: turn.autoCompact.contextWindow,\n          turnCount: count,\n          summarize: turn.autoCompact.summarize,\n        });\n        if (fired) onCompact?.();\n      }\n    } catch (cause) {\n      const msg = cause instanceof Error ? cause.message : String(cause);\n      diag(`[theokit-sdk] session transcript write failed (${loc.agentId}): ${msg}\\n`);\n    }\n  });\n  pendingWrites.set(\n    key,\n    chained.then(\n      () => undefined,\n      () => undefined,\n    ),\n  );\n}\n\n/**\n * Load the persisted transcript into the in-memory cache. Idempotent per\n * (baseDir, cwd, agentId). Call once per agent lifecycle before the first read.\n *\n * @internal\n */\nexport async function hydrateSession(\n  agentId: string,\n  loc: { store: SessionStore; cwd: string },\n): Promise<void> {\n  const key = transcriptKey(loc.cwd, agentId);\n  if (hydratedKeys.has(key)) return;\n  hydratedKeys.add(key);\n\n  const persisted = await readSessionMessages(loc.store, agentId);\n  if (persisted.length === 0) return;\n  // M51 review F4 — the DISK is the source of truth at hydration time: after an invalidation\n  // (compact/inject), an in-flight turn may have repopulated the cache with a SINGLE message before\n  // this hydrate ran; the old \"skip when non-empty\" guard then pinned the parent to a 1-message\n  // context (history + injected pair lost until restart). The persist chain serializes writes, so\n  // the disk already contains that in-flight turn — replacing is always correct.\n  sessions.set(agentId, persisted);\n}\n\n/**\n * Wait for all pending transcript writes to settle. Used by tests and by the\n * agent dispose path so on-disk state matches in-memory before the caller proceeds.\n *\n * @internal\n */\nexport async function flushSessionWrites(): Promise<void> {\n  while (pendingWrites.size > 0) {\n    const all = Array.from(pendingWrites.values());\n    pendingWrites.clear();\n    await Promise.all(all);\n  }\n}\n\n/**\n * Drop the in-memory message cache for `agentId` and NOTHING else — the hydration marker in\n * `hydratedKeys` deliberately stays.\n *\n * That asymmetry is the feature, not an oversight, and it is what separates this from\n * `invalidateSessionCache`, which drops both. The single caller is the personality switch's\n * `reset: true` path (`internal/personality/switch.ts`): leaving the marker set makes\n * `hydrateSession` return early, so the next send starts from an EMPTY context instead of\n * replaying the pre-reset transcript off disk. Clearing the marker here would re-hydrate the\n * conversation the reset was asked to discard.\n *\n * The same shape read as a bug one function up: `forgetBookkeeping` documents an evicted session\n * coming back empty as \"silent amnesia\". The difference is intent — eviction wants the transcript\n * back, a reset does not. Anyone reaching for this to invalidate a cache wants\n * `invalidateSessionCache(cwd, agentId)` instead.\n */\nexport function clearSession(agentId: string): void {\n  sessions.delete(agentId);\n}\n\n/**\n * M50 review F5 — run `fn` serialized on the SAME per-(cwd,agentId) write chain the per-turn\n * persistence uses, so a manual `Agent.compact` can never interleave with an in-flight turn's\n * writes (boundary landing mid-turn would orphan the turn from the replay).\n */\nexport function enqueueSessionWrite<T>(\n  cwd: string,\n  agentId: string,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const key = transcriptKey(cwd, agentId);\n  const prior = pendingWrites.get(key) ?? Promise.resolve();\n  const result = prior.then(fn);\n  pendingWrites.set(\n    key,\n    result.then(\n      () => undefined,\n      () => undefined,\n    ),\n  );\n  return result;\n}\n\n/** Test-only: drop every cached session and hydration marker. @internal */\nexport function clearAllSessions(): void {\n  sessions.clear();\n  hydratedKeys.clear();\n  recordCounts.clear();\n  // M50 review F11 — the auto-compact attempt marks live on globalThis; tests reset them here.\n  // Through the helper, with the SAME key compact-session.ts uses: two files hand-rolling one slot is\n  // how two copies of a mechanism drift apart.\n  globalSingleton(\n    \"theokit-sdk.session.auto-compact-attempts\",\n    () => new Map<string, number>(),\n  ).clear();\n}\n"]}
+{"version":3,"sources":["../src/internal/session/agent-session.ts"],"names":[],"mappings":";;;;;AAyCA,IAAM,aAAA,uBAAoB,GAAA,EAA2B;AACrD,IAAM,YAAA,uBAAmB,GAAA,EAAoB;AAStC,SAAS,oBAAA,CAAqB,SAAiB,OAAA,EAA+B;AACnF,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,OAAO,KAAK,EAAC;AAC3C,EAAA,QAAA,CAAS,KAAK,OAAO,CAAA;AAIrB,EAAA,QAAA,CAAS,OAAO,OAAO,CAAA;AACvB,EAAA,QAAA,CAAS,GAAA,CAAI,SAAS,QAAQ,CAAA;AAC9B,EAAA,cAAA,EAAe;AACjB;AAWO,IAAM,mBAAA,GAAsB,EAAA;AAEnC,SAAS,cAAA,GAAuB;AAC9B,EAAA,OAAO,QAAA,CAAS,OAAO,mBAAA,EAAqB;AAC1C,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AACtC,IAAA,IAAI,WAAW,MAAA,EAAW;AAC1B,IAAA,QAAA,CAAS,OAAO,MAAM,CAAA;AACtB,IAAA,iBAAA,CAAkB,MAAM,CAAA;AAAA,EAC1B;AACF;AAeA,SAAS,kBAAkB,OAAA,EAAuB;AAChD,EAAA,MAAM,MAAA,GAAS,cAAc,EAAA,EAAI,OAAO,EAAE,KAAA,CAAM,CAAA,GAAI,OAAA,CAAQ,MAAA,GAAS,CAAC,CAAA;AACtE,EAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAG,YAAY,CAAA,EAAG,IAAI,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG,YAAA,CAAa,MAAA,CAAO,CAAC,CAAA;AAChF,EAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAG,aAAA,CAAc,MAAM,CAAA,EAAG,IAAI,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG,aAAA,CAAc,OAAO,CAAC,CAAA;AACzF,EAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAG,YAAA,CAAa,MAAM,CAAA,EAAG,IAAI,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG,YAAA,CAAa,OAAO,CAAC,CAAA;AACzF;AAaO,SAAS,cAAA,CAAe,KAAa,OAAA,EAAyB;AACnE,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,EAAK,OAAO,CAAA;AACtC,EAAA,IAAI,OAAA,GAAU,CAAA;AAUd,EAAA,IAAI,YAAA,CAAa,MAAA,CAAO,GAAG,CAAA,EAAG,OAAA,EAAA;AAC9B,EAAA,IAAI,aAAA,CAAc,MAAA,CAAO,GAAG,CAAA,EAAG,OAAA,EAAA;AAC/B,EAAA,IAAI,YAAA,CAAa,MAAA,CAAO,GAAG,CAAA,EAAG,OAAA,EAAA;AAC9B,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,mBAAmB,OAAA,EAAmC;AACpE,EAAA,OAAO,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA,IAAK,EAAC;AACnC;AAWO,SAAS,uBAAA,CACd,KAAA,EACA,GAAA,EACA,SAAA,EACA,MACA,SAAA,EACM;AACN,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,CAAI,GAAA,EAAK,IAAI,OAAO,CAAA;AAM9C,EAAA,MAAM,OAAA,GAAA,CAAW,cAAc,GAAA,CAAI,GAAG,KAAK,OAAA,CAAQ,OAAA,EAAQ,EAAG,IAAA,CAAK,YAAY;AAC7E,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,CAAY,KAAA,EAAO,GAAA,EAAK,SAAA,EAAW,IAAI,CAAA;AAC7C,MAAA,MAAM,KAAA,GAAA,CAAS,YAAA,CAAa,GAAA,CAAI,GAAG,KAAK,CAAA,IAAK,CAAA;AAC7C,MAAA,YAAA,CAAa,GAAA,CAAI,KAAK,KAAK,CAAA;AAI3B,MAAA,IAAI,IAAA,CAAK,gBAAgB,KAAA,CAAA,EAAW;AAClC,QAAA,MAAM,EAAE,mBAAA,EAAoB,GAAI,MAAM,OAAO,+BAAsB,CAAA;AACnE,QAAA,MAAM,KAAA,GAAQ,MAAM,mBAAA,CAAoB;AAAA,UACtC,KAAA;AAAA,UACA,GAAA;AAAA,UACA,SAAA;AAAA,UACA,UAAA,EAAY,KAAK,WAAA,CAAY,UAAA;AAAA,UAC7B,aAAA,EAAe,KAAK,WAAA,CAAY,aAAA;AAAA,UAChC,SAAA,EAAW,KAAA;AAAA,UACX,SAAA,EAAW,KAAK,WAAA,CAAY;AAAA,SAC7B,CAAA;AACD,QAAA,IAAI,OAAO,SAAA,IAAY;AAAA,MACzB;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,MAAM,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AACjE,MAAA,IAAA,CAAK,CAAA,+CAAA,EAAkD,GAAA,CAAI,OAAO,CAAA,GAAA,EAAM,GAAG;AAAA,CAAI,CAAA;AAAA,IACjF;AAAA,EACF,CAAC,CAAA;AACD,EAAA,aAAA,CAAc,GAAA;AAAA,IACZ,GAAA;AAAA,IACA,OAAA,CAAQ,IAAA;AAAA,MACN,MAAM,MAAA;AAAA,MACN,MAAM;AAAA;AACR,GACF;AACF;AAQA,eAAsB,cAAA,CACpB,SACA,GAAA,EACe;AACf,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA;AAC1C,EAAA,IAAI,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA,EAAG;AAC3B,EAAA,YAAA,CAAa,IAAI,GAAG,CAAA;AAEpB,EAAA,MAAM,SAAA,GAAY,MAAM,mBAAA,CAAoB,GAAA,CAAI,OAAO,OAAO,CAAA;AAC9D,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAM5B,EAAA,QAAA,CAAS,GAAA,CAAI,SAAS,SAAS,CAAA;AACjC;AAQA,eAAsB,kBAAA,GAAoC;AACxD,EAAA,OAAO,aAAA,CAAc,OAAO,CAAA,EAAG;AAC7B,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,IAAA,CAAK,aAAA,CAAc,QAAQ,CAAA;AAC7C,IAAA,aAAA,CAAc,KAAA,EAAM;AACpB,IAAA,MAAM,OAAA,CAAQ,IAAI,GAAG,CAAA;AAAA,EACvB;AACF;AAkBO,SAAS,aAAa,OAAA,EAAuB;AAClD,EAAA,QAAA,CAAS,OAAO,OAAO,CAAA;AACzB;AAOO,SAAS,mBAAA,CACd,GAAA,EACA,OAAA,EACA,EAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,GAAA,EAAK,OAAO,CAAA;AACtC,EAAA,MAAM,QAAQ,aAAA,CAAc,GAAA,CAAI,GAAG,CAAA,IAAK,QAAQ,OAAA,EAAQ;AACxD,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,IAAA,CAAK,EAAE,CAAA;AAC5B,EAAA,aAAA,CAAc,GAAA;AAAA,IACZ,GAAA;AAAA,IACA,MAAA,CAAO,IAAA;AAAA,MACL,MAAM,MAAA;AAAA,MACN,MAAM;AAAA;AACR,GACF;AACA,EAAA,OAAO,MAAA;AACT","file":"chunk-2QKV4CGK.js","sourcesContent":["import type { SessionStore } from \"../../types/session-store.js\";\nimport {\n  type PersistTurnInput,\n  persistTurn,\n  readSessionMessages,\n  type TranscriptLocation,\n} from \"./agent-session-store.js\";\n\n/**\n * Per-agent conversation history kept across runs (and across `Agent.resume()`\n * within the same process). Lets the fixture responder recall prior facts when\n * the user asks a follow-up question.\n *\n * SE40 — disk persistence IS the native Claude-shaped `.jsonl` transcript. The\n * in-memory cache holds the narrowed `SessionMessage[]` (user/assistant text) so\n * a send can read `priorMessages` synchronously; the whole rich turn (user +\n * assistant + tool blocks) lands on disk once per send via {@link persistTurnToTranscript}\n * (fed by `run.conversation()`). Hydration on resume reconstructs the session by\n * walking the transcript DAG (`readSessionMessages`).\n *\n * @internal\n */\n\n// `SessionMessage` lives in `./session-types.ts` (leaf types file). Re-exported\n// for back-compat with downstream importers that pulled it from here.\nexport type { SessionMessage } from \"./types.js\";\n\nimport type { SessionMessage } from \"./types.js\";\n\n// M75 — the cache lives in a leaf; see session-cache.ts for the reason (cycle broken by extraction).\nexport {\n  hydratedKeys,\n  invalidateSessionCache,\n  sessions,\n  transcriptKey,\n} from \"./session-cache.js\";\n\nimport { diag } from \"../diagnostics.js\";\nimport { globalSingleton } from \"../global-singleton.js\";\nimport { hydratedKeys, sessions, transcriptKey } from \"./session-cache.js\";\n\nconst pendingWrites = new Map<string, Promise<void>>();\nconst recordCounts = new Map<string, number>();\n\n/**\n * Append a session message to the in-memory cache only. Disk persistence for the\n * whole turn happens once per send via {@link persistTurnToTranscript}; the cache\n * feeds `priorMessages` / `onBeforeSend.previousMessageCount` synchronously.\n *\n * @internal\n */\nexport function appendSessionMessage(agentId: string, message: SessionMessage): void {\n  const existing = sessions.get(agentId) ?? [];\n  existing.push(message);\n  // `delete` + `set` reinserts at the END: a JS `Map` preserves insertion order, so the first key\n  // is always the least recently touched. That is the entire LRU, with no new structure (parsimony\n  // rungs 2/5 — the ordering we need is already a language guarantee).\n  sessions.delete(agentId);\n  sessions.set(agentId, existing);\n  enforceCeiling();\n}\n\n/**\n * Ceiling on sessions kept in memory.\n *\n * The runtime only reads the **active** session; the rest is pure cache, rebuildable from the\n * on-disk transcript. 32 is deliberately generous — the primary removal path is the explicit\n * `discardSession()` at the end of the agent's life, and this ceiling is a safety net against a\n * long-lived process running hundreds of sessions (plan risk #2: a tight ceiling could evict a\n * session still referenced by an in-flight async path).\n */\nexport const MAX_CACHED_SESSIONS = 32;\n\nfunction enforceCeiling(): void {\n  while (sessions.size > MAX_CACHED_SESSIONS) {\n    const oldest = sessions.keys().next().value;\n    if (oldest === undefined) return;\n    sessions.delete(oldest);\n    forgetBookkeeping(oldest);\n  }\n}\n\n/**\n * Erases the bookkeeping for an `agentId` across EVERY `cwd` it appears in.\n *\n * The three maps are keyed by `transcriptKey(cwd, agentId)`; `sessions` is the only one keyed by the\n * raw `agentId`. The ceiling's first version deleted from all three using `sessions`' key — that is,\n * deleted nothing — and left `hydratedKeys` **orphaned**. Since `hydrateSession` returns early when\n * the marker is present, an evicted session came back **empty** instead of rehydrating from disk:\n * silent amnesia, and a regression new to M95, because before it nothing evicted.\n *\n * The ceiling only knows the `agentId`, not the `cwd`, so it scans by suffix — which is the format\n * `transcriptKey` produces. A scan rather than an index because these maps hold tens of entries, not\n * thousands: a reverse index here would be new structure for a problem that does not exist.\n */\nfunction forgetBookkeeping(agentId: string): void {\n  const suffix = transcriptKey(\"\", agentId).slice(0 - agentId.length - 2);\n  for (const k of [...hydratedKeys]) if (k.endsWith(suffix)) hydratedKeys.delete(k);\n  for (const k of [...pendingWrites.keys()]) if (k.endsWith(suffix)) pendingWrites.delete(k);\n  for (const k of [...recordCounts.keys()]) if (k.endsWith(suffix)) recordCounts.delete(k);\n}\n\n/**\n * Erases the agent's module bookkeeping and returns how many entries were removed.\n *\n * M95 — `invalidateSessionCache` used to clear **two** of the four maps (`sessions`, `hydratedKeys`);\n * `pendingWrites` and `recordCounts` were never touched by id, so they grew for the life of the\n * process. Neither is large per entry — the leak is in count, not volume — but a cache with no owner\n * for removal is a cache that only grows.\n *\n * Returns the count so the caller can prove the removal; a second discard returns 0, which is what\n * makes the idempotency test possible without exposing the maps.\n */\nexport function discardSession(cwd: string, agentId: string): number {\n  const key = transcriptKey(cwd, agentId);\n  let removed = 0;\n  // `sessions` is NOT erased here — and the distinction is measured, not aesthetic. It holds the\n  // readable conversation, and there is a legitimate reader AFTER dispose: the golden\n  // `two-concurrent-sends-serialize` calls `getSessionMessages(agentId)` after `agent.dispose()`.\n  // Erasing it here returned an empty list and broke two goldens. What bounds it is the LRU ceiling\n  // above; the three below are pure bookkeeping, with no post-dispose reader.\n  //\n  // The key is `transcriptKey(cwd, agentId)` in ALL THREE — not the raw `agentId`. The first version\n  // erased two of them by `agentId` and therefore **never erased anything**; the test did not catch\n  // it because it only asserted that the SECOND call returns 0, which is true either way.\n  if (hydratedKeys.delete(key)) removed++;\n  if (pendingWrites.delete(key)) removed++;\n  if (recordCounts.delete(key)) removed++;\n  return removed;\n}\n\nexport function getSessionMessages(agentId: string): SessionMessage[] {\n  return sessions.get(agentId) ?? [];\n}\n\n/**\n * Persist a full conversation turn (user + assistant + tool blocks) to the native\n * transcript. Chained per-(agent, transcript) so on-disk order matches send order,\n * and fire-and-forget so `send()` is not blocked by disk I/O. Every\n * M50 — when the caller supplies `turn.autoCompact`, size-driven auto-compaction (usage real vs\n * the model's context window) runs in this same chain, surfaced via the optional `onCompact` observer.\n *\n * @internal\n */\nexport function persistTurnToTranscript(\n  store: SessionStore,\n  loc: TranscriptLocation,\n  sessionId: string,\n  turn: PersistTurnInput,\n  onCompact?: () => void,\n): void {\n  const key = transcriptKey(loc.cwd, loc.agentId);\n  // PRE-EXISTING debt, exposed when M75 fixed the Biome config that used to abort before\n  // sweeping these files (a nested root under refactor/). It is not new code and was not touched\n  // by M75; refactoring SDK internals without review would trade a visible problem for a diff\n  // risky. Tracked in usetheodev/theokit-sdk#151.\n  // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: see the reason just above\n  const chained = (pendingWrites.get(key) ?? Promise.resolve()).then(async () => {\n    try {\n      await persistTurn(store, loc, sessionId, turn);\n      const count = (recordCounts.get(key) ?? 0) + 1;\n      recordCounts.set(key, count);\n      // M50 — the 50-turn no-summary boundary stub is GONE (it silently amnesia'd the session).\n      // Auto-compaction is now size-driven with a real summary: see `maybeAutoCompact` below,\n      // invoked in this same write chain by the post-run lifecycle when usage is known.\n      if (turn.autoCompact !== undefined) {\n        const { autoCompactIfNeeded } = await import(\"./compact-session.js\");\n        const fired = await autoCompactIfNeeded({\n          store,\n          loc,\n          sessionId,\n          usageTotal: turn.autoCompact.usageTotal,\n          contextWindow: turn.autoCompact.contextWindow,\n          turnCount: count,\n          summarize: turn.autoCompact.summarize,\n        });\n        if (fired) onCompact?.();\n      }\n    } catch (cause) {\n      const msg = cause instanceof Error ? cause.message : String(cause);\n      diag(`[theokit-sdk] session transcript write failed (${loc.agentId}): ${msg}\\n`);\n    }\n  });\n  pendingWrites.set(\n    key,\n    chained.then(\n      () => undefined,\n      () => undefined,\n    ),\n  );\n}\n\n/**\n * Load the persisted transcript into the in-memory cache. Idempotent per\n * (baseDir, cwd, agentId). Call once per agent lifecycle before the first read.\n *\n * @internal\n */\nexport async function hydrateSession(\n  agentId: string,\n  loc: { store: SessionStore; cwd: string },\n): Promise<void> {\n  const key = transcriptKey(loc.cwd, agentId);\n  if (hydratedKeys.has(key)) return;\n  hydratedKeys.add(key);\n\n  const persisted = await readSessionMessages(loc.store, agentId);\n  if (persisted.length === 0) return;\n  // M51 review F4 — the DISK is the source of truth at hydration time: after an invalidation\n  // (compact/inject), an in-flight turn may have repopulated the cache with a SINGLE message before\n  // this hydrate ran; the old \"skip when non-empty\" guard then pinned the parent to a 1-message\n  // context (history + injected pair lost until restart). The persist chain serializes writes, so\n  // the disk already contains that in-flight turn — replacing is always correct.\n  sessions.set(agentId, persisted);\n}\n\n/**\n * Wait for all pending transcript writes to settle. Used by tests and by the\n * agent dispose path so on-disk state matches in-memory before the caller proceeds.\n *\n * @internal\n */\nexport async function flushSessionWrites(): Promise<void> {\n  while (pendingWrites.size > 0) {\n    const all = Array.from(pendingWrites.values());\n    pendingWrites.clear();\n    await Promise.all(all);\n  }\n}\n\n/**\n * Drop the in-memory message cache for `agentId` and NOTHING else — the hydration marker in\n * `hydratedKeys` deliberately stays.\n *\n * That asymmetry is the feature, not an oversight, and it is what separates this from\n * `invalidateSessionCache`, which drops both. The single caller is the personality switch's\n * `reset: true` path (`internal/personality/switch.ts`): leaving the marker set makes\n * `hydrateSession` return early, so the next send starts from an EMPTY context instead of\n * replaying the pre-reset transcript off disk. Clearing the marker here would re-hydrate the\n * conversation the reset was asked to discard.\n *\n * The same shape read as a bug one function up: `forgetBookkeeping` documents an evicted session\n * coming back empty as \"silent amnesia\". The difference is intent — eviction wants the transcript\n * back, a reset does not. Anyone reaching for this to invalidate a cache wants\n * `invalidateSessionCache(cwd, agentId)` instead.\n */\nexport function clearSession(agentId: string): void {\n  sessions.delete(agentId);\n}\n\n/**\n * M50 review F5 — run `fn` serialized on the SAME per-(cwd,agentId) write chain the per-turn\n * persistence uses, so a manual `Agent.compact` can never interleave with an in-flight turn's\n * writes (boundary landing mid-turn would orphan the turn from the replay).\n */\nexport function enqueueSessionWrite<T>(\n  cwd: string,\n  agentId: string,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const key = transcriptKey(cwd, agentId);\n  const prior = pendingWrites.get(key) ?? Promise.resolve();\n  const result = prior.then(fn);\n  pendingWrites.set(\n    key,\n    result.then(\n      () => undefined,\n      () => undefined,\n    ),\n  );\n  return result;\n}\n\n/** Test-only: drop every cached session and hydration marker. @internal */\nexport function clearAllSessions(): void {\n  sessions.clear();\n  hydratedKeys.clear();\n  recordCounts.clear();\n  // M50 review F11 — the auto-compact attempt marks live on globalThis; tests reset them here.\n  // Through the helper, with the SAME key compact-session.ts uses: two files hand-rolling one slot is\n  // how two copies of a mechanism drift apart.\n  globalSingleton(\n    \"theokit-sdk.session.auto-compact-attempts\",\n    () => new Map<string, number>(),\n  ).clear();\n}\n"]}

package/dist/{chunk-L4XENLQO.cjs → chunk-2ZLQZHZC.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkY46VI73J_cjs = require('./chunk-Y46VI73J.cjs');
+var chunkUKJJRU7C_cjs = require('./chunk-UKJJRU7C.cjs');
 var chunkKVSAY6NZ_cjs = require('./chunk-KVSAY6NZ.cjs');
 var chunkNINIJCHU_cjs = require('./chunk-NINIJCHU.cjs');
 var chunkJ7J7J2GN_cjs = require('./chunk-J7J7J2GN.cjs');
@@ -376,7 +376,7 @@ async function createCronJob(options) {
   const now = Date.now();
   const nextFireAt = nextRunAt(options.cron, timezone);
   const job = {
-    id: chunkY46VI73J_cjs.generateCronId(),
+    id: chunkUKJJRU7C_cjs.generateCronId(),
     cron: options.cron,
     timezone,
     enabled: options.enabled ?? true,
@@ -453,5 +453,5 @@ async function updateJobStatus(jobId, enabled) {
 }
 
 exports.Cron = Cron2;
-//# sourceMappingURL=chunk-L4XENLQO.cjs.map
-//# sourceMappingURL=chunk-L4XENLQO.cjs.map
+//# sourceMappingURL=chunk-2ZLQZHZC.cjs.map
+//# sourceMappingURL=chunk-2ZLQZHZC.cjs.map