@theokit/sdk 5.5.0 → 5.7.0

package/dist/{chunk-UKJJRU7C.cjs → chunk-A575WPBL.cjs}

@@ -1,23 +1,24 @@
 'use strict';
 
 var chunkKVSAY6NZ_cjs = require('./chunk-KVSAY6NZ.cjs');
-var chunkDZG77WU7_cjs = require('./chunk-DZG77WU7.cjs');
-var chunkZ2JFX372_cjs = require('./chunk-Z2JFX372.cjs');
-var chunkVY6NKMOA_cjs = require('./chunk-VY6NKMOA.cjs');
+var chunk3XSWF5AP_cjs = require('./chunk-3XSWF5AP.cjs');
+var chunk33A27NFX_cjs = require('./chunk-33A27NFX.cjs');
+var chunkYYN6BB7R_cjs = require('./chunk-YYN6BB7R.cjs');
 var chunkBV2MWEMV_cjs = require('./chunk-BV2MWEMV.cjs');
 var chunkD6POWE7E_cjs = require('./chunk-D6POWE7E.cjs');
 var chunkTMKTSYDS_cjs = require('./chunk-TMKTSYDS.cjs');
-var chunkNQTNSHSB_cjs = require('./chunk-NQTNSHSB.cjs');
+var chunkHNAYCTX4_cjs = require('./chunk-HNAYCTX4.cjs');
 var chunk7FDKWDA2_cjs = require('./chunk-7FDKWDA2.cjs');
-var chunkC4ZQPWXJ_cjs = require('./chunk-C4ZQPWXJ.cjs');
+var chunkZLMU5EU3_cjs = require('./chunk-ZLMU5EU3.cjs');
 var chunk2ZPEDVLM_cjs = require('./chunk-2ZPEDVLM.cjs');
-var chunkIU5N5224_cjs = require('./chunk-IU5N5224.cjs');
+var chunkEFETPSJZ_cjs = require('./chunk-EFETPSJZ.cjs');
+var chunkGK3UG7YQ_cjs = require('./chunk-GK3UG7YQ.cjs');
 var chunkRQMCOFAI_cjs = require('./chunk-RQMCOFAI.cjs');
 var chunkAA27GEYS_cjs = require('./chunk-AA27GEYS.cjs');
 var chunkYSTXFWQE_cjs = require('./chunk-YSTXFWQE.cjs');
 var chunkNQTD6QOW_cjs = require('./chunk-NQTD6QOW.cjs');
 var chunkNINIJCHU_cjs = require('./chunk-NINIJCHU.cjs');
-var chunkQATRS7JD_cjs = require('./chunk-QATRS7JD.cjs');
+var chunkMYJGWS2J_cjs = require('./chunk-MYJGWS2J.cjs');
 var chunkIJ7M6GOG_cjs = require('./chunk-IJ7M6GOG.cjs');
 var chunk7A6535RA_cjs = require('./chunk-7A6535RA.cjs');
 var chunkSA6K24NB_cjs = require('./chunk-SA6K24NB.cjs');
@@ -26,9 +27,9 @@ var chunkGZV6AVRL_cjs = require('./chunk-GZV6AVRL.cjs');
 var chunkBJUJT5ED_cjs = require('./chunk-BJUJT5ED.cjs');
 var chunkZF2LDKQQ_cjs = require('./chunk-ZF2LDKQQ.cjs');
 var chunkJLRLCBJ4_cjs = require('./chunk-JLRLCBJ4.cjs');
-var chunkAYA65JA5_cjs = require('./chunk-AYA65JA5.cjs');
-var chunk43YXGD3P_cjs = require('./chunk-43YXGD3P.cjs');
-var chunkHW7SEELD_cjs = require('./chunk-HW7SEELD.cjs');
+var chunkRWPLWMCZ_cjs = require('./chunk-RWPLWMCZ.cjs');
+var chunkTY56BKSK_cjs = require('./chunk-TY56BKSK.cjs');
+var chunkQRVS2PRE_cjs = require('./chunk-QRVS2PRE.cjs');
 var chunkATT276RD_cjs = require('./chunk-ATT276RD.cjs');
 var chunk3EE6LVWT_cjs = require('./chunk-3EE6LVWT.cjs');
 var chunkANMJJD6D_cjs = require('./chunk-ANMJJD6D.cjs');
@@ -40,6 +41,7 @@ var promises = require('fs/promises');
 var crypto = require('crypto');
 var path = require('path');
 var fs = require('fs');
+var process$1 = require('process');
 var child_process = require('child_process');
 var zod = require('zod');
 var module$1 = require('module');
@@ -383,7 +385,7 @@ function serializeAgents(agents2) {
   return out;
 }
 function registryPath(cwd) {
-  return path.join(chunk43YXGD3P_cjs.theokitConfigRoot(cwd), REGISTRY_RELATIVE_SUFFIX);
+  return path.join(chunkTY56BKSK_cjs.theokitConfigRoot(cwd), REGISTRY_RELATIVE_SUFFIX);
 }
 async function loadRegistry(cwd) {
   void chunkJLRLCBJ4_cjs.sweepStaleAtomicTemps(registryPath(cwd)).catch(() => void 0);
@@ -818,7 +820,7 @@ async function readLegacyFacts(jsonPath) {
 }
 async function writeMigratedFacts(cwd, jsonPath, facts) {
   try {
-    for (const fact of facts) await chunkNQTNSHSB_cjs.appendFactToMarkdown(cwd, fact);
+    for (const fact of facts) await chunkHNAYCTX4_cjs.appendFactToMarkdown(cwd, fact);
     await promises.unlink(jsonPath).catch(() => void 0);
     chunk6LHQPOMI_cjs.diag(`[theokit-sdk] migrated ${facts.length} fact(s) from ${jsonPath} to MEMORY.md
 `);
@@ -835,11 +837,11 @@ async function migrateLegacyJson(cwd, config) {
   const key = `${cwd}::${config.namespace ?? "default"}::${config.scope ?? "agent"}::${config.userId ?? "default"}`;
   if (migrationRun.has(key)) return { migrated: false, factCount: 0, reason: "already-migrated" };
   migrationRun.add(key);
-  const jsonPath = chunkNQTNSHSB_cjs.legacyMemoryJsonPath(cwd, config);
+  const jsonPath = chunkHNAYCTX4_cjs.legacyMemoryJsonPath(cwd, config);
   if (!await fileExists(jsonPath)) {
     return { migrated: false, factCount: 0, reason: "no-legacy-json" };
   }
-  if (await fileExists(chunkNQTNSHSB_cjs.memoryMdPath(chunkNQTNSHSB_cjs.resolveMemoryRoot(cwd, config)))) {
+  if (await fileExists(chunkHNAYCTX4_cjs.memoryMdPath(chunkHNAYCTX4_cjs.resolveMemoryRoot(cwd, config)))) {
     chunk6LHQPOMI_cjs.diag(
       `[theokit-sdk] memory migration skipped: both MEMORY.md and legacy JSON exist at ${jsonPath}; leaving both intact
 `
@@ -868,19 +870,19 @@ function unstoredRememberWarning(message) {
   if (isMemoryWritePrompt(message) && extractMemoryFact(message).length > 0) return void 0;
   const trimmed = message.trim();
   const quoted = trimmed.length > QUOTED_MESSAGE_MAX ? `${trimmed.slice(0, QUOTED_MESSAGE_MAX)}\u2026` : trimmed;
-  return `[theokit-sdk] NOTHING WAS STORED \u2014 this message does not match the memory capture pattern: ${JSON.stringify(quoted)}. Supported: "Remember: <fact>" or "Remember (${chunkNQTNSHSB_cjs.MEMORY_KINDS.join("|")}): <fact>". It still reaches the session transcript, so a follow-up may answer from it \u2014 that is search over transcripts, not a durable memory.`;
+  return `[theokit-sdk] NOTHING WAS STORED \u2014 this message does not match the memory capture pattern: ${JSON.stringify(quoted)}. Supported: "Remember: <fact>" or "Remember (${chunkHNAYCTX4_cjs.MEMORY_KINDS.join("|")}): <fact>". It still reaches the session transcript, so a follow-up may answer from it \u2014 that is search over transcripts, not a durable memory.`;
 }
 function extractMemoryKind(message) {
   const match = REMEMBER_PATTERN.exec(message);
   const declared = match?.[1];
   if (declared === void 0) return void 0;
   const lowered = declared.toLowerCase();
-  return chunkNQTNSHSB_cjs.MEMORY_KINDS.includes(lowered) ? lowered : void 0;
+  return chunkHNAYCTX4_cjs.MEMORY_KINDS.includes(lowered) ? lowered : void 0;
 }
 async function readMemoryFacts(cwd, config) {
   if (!config.enabled) return [];
   await migrateLegacyJson(cwd, config);
-  return chunkNQTNSHSB_cjs.readFacts(cwd, config);
+  return chunkHNAYCTX4_cjs.readFacts(cwd, config);
 }
 async function appendMemoryFact(cwd, config, fact) {
   if (!config.enabled) return;
@@ -889,7 +891,7 @@ async function appendMemoryFact(cwd, config, fact) {
     text: chunk6LHQPOMI_cjs.redactSecrets(fact.text),
     ...fact.kind === void 0 ? {} : { kind: fact.kind }
   };
-  await chunkNQTNSHSB_cjs.appendFact(cwd, config, sanitized);
+  await chunkHNAYCTX4_cjs.appendFact(cwd, config, sanitized);
 }
 
 // src/internal/runtime/fixtures/fixture-scripts.ts
@@ -1560,7 +1562,7 @@ function createRealCloudRun(options) {
     conversation: []
   };
   const apiKey = chunk6LHQPOMI_cjs.resolveApiKey(options.agentOptions.apiKey);
-  const baseUrl = chunkC4ZQPWXJ_cjs.getConfiguredBaseUrl();
+  const baseUrl = chunkZLMU5EU3_cjs.getConfiguredBaseUrl();
   const handle = new RealCloudRun(
     {
       id,
@@ -1643,7 +1645,7 @@ var RealCloudRun = class extends FixtureRunBase {
   async consumeStream(response) {
     let finalStatus = "finished";
     let finalText = "";
-    for await (const record of chunkC4ZQPWXJ_cjs.parseSseStream(response.body, this.controller.signal)) {
+    for await (const record of chunkZLMU5EU3_cjs.parseSseStream(response.body, this.controller.signal)) {
       const parsed = safeParse(record.data);
       if (parsed === void 0) continue;
       const update = this.applyRecord(record.event, parsed);
@@ -1810,7 +1812,7 @@ var CloudAgent = class _CloudAgent {
    */
   isFixtureMode() {
     const apiKey = chunk6LHQPOMI_cjs.resolveApiKey(this.options.apiKey);
-    return chunkC4ZQPWXJ_cjs.isFixtureApiKey(apiKey) && chunkC4ZQPWXJ_cjs.getConfiguredBaseUrl() === void 0;
+    return chunkZLMU5EU3_cjs.isFixtureApiKey(apiKey) && chunkZLMU5EU3_cjs.getConfiguredBaseUrl() === void 0;
   }
   // SE9 — integrated structured output; delegates to the shared helper.
   generate(message, options) {
@@ -1862,7 +1864,7 @@ var CloudAgent = class _CloudAgent {
     const userText = typeof message === "string" ? message : message.text;
     const systemPrompt = await this.resolveSystemPromptForSend(userText, options);
     const apiKey = chunk6LHQPOMI_cjs.resolveApiKey(this.options.apiKey);
-    const useRealRuntime = apiKey !== void 0 && !chunkC4ZQPWXJ_cjs.isFixtureApiKey(apiKey) && chunkC4ZQPWXJ_cjs.getConfiguredBaseUrl() !== void 0;
+    const useRealRuntime = apiKey !== void 0 && !chunkZLMU5EU3_cjs.isFixtureApiKey(apiKey) && chunkZLMU5EU3_cjs.getConfiguredBaseUrl() !== void 0;
     return useRealRuntime ? createRealCloudRun({
       agentId: this.agentId,
       model: this.model ?? { id: DEFAULT_AGENTIC_MODEL_ID },
@@ -2122,14 +2124,14 @@ async function readState(filePath) {
   try {
     parsed = JSON.parse(raw);
   } catch {
-    chunkVY6NKMOA_cjs.warnOnce(
+    chunkGK3UG7YQ_cjs.warnOnce(
       "personality-store-json-parse",
       "[theokit-sdk] personality.json is malformed; treating as empty"
     );
     return emptyState();
   }
   if (!isStateV1(parsed)) {
-    chunkVY6NKMOA_cjs.warnOnce(
+    chunkGK3UG7YQ_cjs.warnOnce(
       "personality-store-bad-version",
       `[theokit-sdk] personality.json has unknown version; treating as empty (file kept untouched)`
     );
@@ -2160,7 +2162,7 @@ var PersonalityStore = class {
       try {
         await this.#persist(agentId, slug);
       } catch (err) {
-        chunkVY6NKMOA_cjs.warnOnce(
+        chunkGK3UG7YQ_cjs.warnOnce(
           `personality-store-persist-failure-${agentId}`,
           `[theokit-sdk] personality persist failed for ${chunk6LHQPOMI_cjs.redactSecrets(agentId)}: ${chunk6LHQPOMI_cjs.redactSecrets(
             err.message
@@ -2177,7 +2179,7 @@ var PersonalityStore = class {
     try {
       state = await readState(filePath);
     } catch (err) {
-      chunkVY6NKMOA_cjs.warnOnce(
+      chunkGK3UG7YQ_cjs.warnOnce(
         `personality-store-hydrate-failure-${agentId}`,
         `[theokit-sdk] personality hydrate failed for ${chunk6LHQPOMI_cjs.redactSecrets(agentId)}: ${chunk6LHQPOMI_cjs.redactSecrets(
           err.message
@@ -2206,7 +2208,7 @@ var PersonalityStore = class {
     });
   }
   #filePath() {
-    return path.join(chunk43YXGD3P_cjs.getTheokitHome(this.#cwd), FILE_NAME);
+    return path.join(chunkTY56BKSK_cjs.getTheokitHome(this.#cwd), FILE_NAME);
   }
 };
 
@@ -2523,7 +2525,7 @@ function removeAll(arr, toRemove) {
   }
 }
 function readCompatConfigFile(cwd) {
-  const path$1 = path.join(chunk43YXGD3P_cjs.theokitConfigRoot(cwd), "config.json");
+  const path$1 = path.join(chunkTY56BKSK_cjs.theokitConfigRoot(cwd), "config.json");
   if (!fs.existsSync(path$1)) return [];
   let raw;
   try {
@@ -2553,6 +2555,116 @@ function readCompatConfigFile(cwd) {
 function resolveCompatSources(options, cwd) {
   return options.local?.compatSources ?? readCompatConfigFile(cwd);
 }
+var KNOWN_KEYS = /* @__PURE__ */ new Set([
+  "disableAllHooks",
+  "disableSkillShellExecution",
+  "permissions",
+  "permissionMode"
+]);
+function managedSettingsPathFor(root) {
+  if (root !== void 0) return path.join(root, "claude-code", "managed-settings.json");
+  if (process$1.platform === "darwin") {
+    return "/Library/Application Support/ClaudeCode/managed-settings.json";
+  }
+  if (process$1.platform === "win32") {
+    const programData = process.env.PROGRAMDATA ?? "C:\\ProgramData";
+    return path.join(programData, "ClaudeCode", "managed-settings.json");
+  }
+  return "/etc/claude-code/managed-settings.json";
+}
+function readManagedSettings(root) {
+  const path = managedSettingsPathFor(root);
+  const parsed = readPolicyDocument(path);
+  if (parsed === void 0) return {};
+  const out = {};
+  for (const [key, value] of Object.entries(parsed)) {
+    applyPolicyKey(out, key, value, path);
+  }
+  return out;
+}
+function readPolicyDocument(path) {
+  if (!fs.existsSync(path)) return void 0;
+  let raw;
+  try {
+    raw = fs.readFileSync(path, "utf8");
+  } catch (cause) {
+    chunk6LHQPOMI_cjs.diagFailure(
+      `[theokit-sdk] ${path} exists and could not be read (${cause.message}) \u2014 NO operator policy is being applied. Fix the permissions or remove the file.
+`
+    );
+    return void 0;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (cause) {
+    chunk6LHQPOMI_cjs.diagFailure(
+      `[theokit-sdk] ${path} is not valid JSON (${cause.message}) \u2014 NO operator policy is being applied.
+`
+    );
+    return void 0;
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    chunk6LHQPOMI_cjs.diagFailure(
+      `[theokit-sdk] ${path} is not a JSON object \u2014 NO operator policy is being applied.
+`
+    );
+    return void 0;
+  }
+  return parsed;
+}
+var PERMISSION_MODES = ["default", "plan", "acceptEdits", "bypass"];
+function applyPolicyKey(out, key, value, path) {
+  if (!KNOWN_KEYS.has(key)) {
+    decline(path, key, "this runtime does not enforce it");
+    return;
+  }
+  if (key === "permissionMode") {
+    const mode = readMode(value, path);
+    if (mode !== void 0) out.permissionMode = mode;
+    return;
+  }
+  if (key === "permissions") {
+    const rules = readRuleLists(value, path);
+    if (rules !== void 0) out.permissions = rules;
+    return;
+  }
+  const flag = readBoolean(value, key, path);
+  if (flag === void 0) return;
+  if (key === "disableAllHooks") out.disableAllHooks = flag;
+  if (key === "disableSkillShellExecution") out.disableSkillShellExecution = flag;
+}
+function decline(path, key, reason) {
+  chunk6LHQPOMI_cjs.diagFailure(`[theokit-sdk] ${path} declares "${key}" \u2014 ${reason}. It is NOT being applied.
+`);
+}
+function readMode(value, path) {
+  if (typeof value === "string" && PERMISSION_MODES.includes(value)) {
+    return value;
+  }
+  decline(
+    path,
+    "permissionMode",
+    `${JSON.stringify(value)} is not one of ${PERMISSION_MODES.join(", ")}`
+  );
+  return void 0;
+}
+function readRuleLists(value, path) {
+  if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+    return value;
+  }
+  decline(
+    path,
+    "permissions",
+    `it is ${Array.isArray(value) ? "an array" : typeof value}, not an object of rule lists`
+  );
+  return void 0;
+}
+function readBoolean(value, key, path) {
+  if (typeof value === "boolean") return value;
+  decline(path, key, `it is ${typeof value}, not a boolean`);
+  return void 0;
+}
 function spawnAndCollect(options) {
   return new Promise((resolve) => {
     const timeoutMs = options.timeoutMs ?? 3e4;
@@ -2603,21 +2715,31 @@ function spawnAndCollect(options) {
 
 // src/internal/runtime/hooks/hooks-executor.ts
 var HooksExecutor = class {
-  constructor(cwd, compatSources = [], gate = void 0) {
+  constructor(cwd, compatSources = [], gate = void 0, policy = {}) {
     this.cwd = cwd;
     this.compatSources = compatSources;
     this.gate = gate;
+    this.policy = policy;
   }
   cwd;
   compatSources;
   gate;
+  policy;
   config = {};
   async initialize(settingSourcesIncludeProject) {
+    if (readManagedSettings(this.policy.managedSettingsRoot).disableAllHooks === true) {
+      chunkGK3UG7YQ_cjs.warnFailureOnce(
+        "hooks-disabled-by-policy",
+        "[theokit-sdk] hooks: an operator policy (managed-settings.json) declares disableAllHooks \u2014 NO hook will run, including any this project declared."
+      );
+      this.config = {};
+      return;
+    }
     if (!settingSourcesIncludeProject) {
       this.config = {};
       return;
     }
-    this.config = await chunkVY6NKMOA_cjs.loadHookConfig(this.cwd, this.compatSources);
+    this.config = await chunkGK3UG7YQ_cjs.loadHookConfig(this.cwd, this.compatSources);
   }
   /** Fire every hook registered for `event` and aggregate the decisions. */
   async run(payload) {
@@ -2684,7 +2806,7 @@ var HooksExecutor = class {
       cwd: this.cwd,
       ...Object.keys(env).length > 0 ? { env } : {},
       timeoutMs,
-      stdin: JSON.stringify(payload)
+      stdin: JSON.stringify(stdinPayloadFor(payload, command, this.cwd))
     });
     const failure = this.decisionFromFailure(result, command, env, timeoutMs);
     return failure ?? parseDecisionFromStdout(result.stdout);
@@ -2698,14 +2820,21 @@ var HooksExecutor = class {
    * spawned.
    */
   decisionFromFailure(result, command, env, timeoutMs) {
-    if (result.timedOut) return { decision: "deny", reason: `Hook timed out after ${timeoutMs}ms` };
+    if (result.timedOut)
+      return {
+        decision: "deny",
+        reason: `Hook timed out after ${timeoutMs}ms`
+      };
     if (result.spawnError !== void 0) {
-      return { decision: "deny", reason: `Hook spawn failed: ${result.spawnError.message}` };
+      return {
+        decision: "deny",
+        reason: `Hook spawn failed: ${result.spawnError.message}`
+      };
     }
     if (result.exitCode === 0) return void 0;
     const stderr = result.stderr.trim();
     const base = stderr.length > 0 ? stderr : `Hook exited with code ${result.exitCode}`;
-    const missing = chunk43YXGD3P_cjs.undefinedVariablesIn(command.command, env);
+    const missing = chunkTY56BKSK_cjs.undefinedVariablesIn(command.command, env);
     if (missing.length === 0) return { decision: "deny", reason: base };
     return {
       decision: "deny",
@@ -2713,26 +2842,52 @@ var HooksExecutor = class {
     };
   }
 };
+function stdinPayloadFor(payload, command, cwd) {
+  return {
+    ...payload,
+    cwd,
+    ...command.sourceEvent === void 0 ? {} : { hook_event_name: command.sourceEvent },
+    ...payload.tool === void 0 ? {} : { tool_name: payload.tool },
+    ...payload.input === void 0 ? {} : { tool_input: payload.input },
+    ...payload.output === void 0 ? {} : { tool_response: payload.output }
+  };
+}
 function runtimeEnvFor(sourcePath, cwd) {
   if (sourcePath === void 0) return {};
-  return chunk43YXGD3P_cjs.adapterForConfigPath(sourcePath)?.runtimeEnv(cwd) ?? {};
+  return chunkTY56BKSK_cjs.adapterForConfigPath(sourcePath)?.runtimeEnv(cwd) ?? {};
 }
 function parseDecisionFromStdout(stdout) {
   const trimmed = stdout.trim();
   if (trimmed.length === 0) return { decision: "allow" };
+  let parsed;
   try {
-    const parsed = JSON.parse(trimmed);
-    if (parsed.decision === "deny" || parsed.decision === "feedback") {
-      const result = { decision: parsed.decision };
-      if (parsed.reason !== void 0) result.reason = parsed.reason;
-      if (parsed.feedback !== void 0) result.feedback = parsed.feedback;
-      return result;
-    }
-    if (parsed.decision === "allow") return { decision: "allow" };
+    parsed = JSON.parse(trimmed);
   } catch {
     return { decision: "feedback", feedback: trimmed };
   }
-  return { decision: "allow" };
+  return nestedDecision(parsed) ?? flatDecision(parsed) ?? { decision: "allow" };
+}
+function nestedDecision(parsed) {
+  const nested = parsed.hookSpecificOutput;
+  if (nested?.permissionDecision === "allow") return { decision: "allow" };
+  if (nested?.permissionDecision !== "deny" && nested?.permissionDecision !== "ask") {
+    return void 0;
+  }
+  const result = { decision: "deny" };
+  if (nested.permissionDecisionReason !== void 0) {
+    result.reason = nested.permissionDecisionReason;
+  }
+  return result;
+}
+function flatDecision(parsed) {
+  if (parsed.decision === "allow") return { decision: "allow" };
+  if (parsed.decision !== "deny" && parsed.decision !== "block" && parsed.decision !== "feedback") {
+    return void 0;
+  }
+  const result = parsed.decision === "feedback" ? { decision: "feedback" } : { decision: "deny" };
+  if (parsed.reason !== void 0) result.reason = parsed.reason;
+  if (parsed.feedback !== void 0) result.feedback = parsed.feedback;
+  return result;
 }
 
 // src/internal/runtime/lifecycle/context-budget-event.ts
@@ -2774,7 +2929,7 @@ async function runPostRunLifecycle(inputs) {
     try {
       const partial = await safeConversation(run);
       if (partial !== void 0) {
-        chunkDZG77WU7_cjs.persistTurnToTranscript(sessionStore, { cwd: workspaceCwd, agentId, model }, agentId, {
+        chunk3XSWF5AP_cjs.persistTurnToTranscript(sessionStore, { cwd: workspaceCwd, agentId, model }, agentId, {
           userText,
           conversation: partial
         });
@@ -2784,11 +2939,11 @@ async function runPostRunLifecycle(inputs) {
       chunk6LHQPOMI_cjs.diag(`[theokit-sdk] partial transcript write failed (${agentId}): ${msg}
 `);
     }
-    await chunkDZG77WU7_cjs.flushSessionWrites();
+    await chunk3XSWF5AP_cjs.flushSessionWrites();
     return;
   }
   if (result.result !== void 0) {
-    chunkDZG77WU7_cjs.appendSessionMessage(agentId, { role: "assistant", text: result.result });
+    chunk3XSWF5AP_cjs.appendSessionMessage(agentId, { role: "assistant", text: result.result });
   }
   const conversation = await safeConversation(run);
   const resolvedWindow = resolveWindowForRun(model, contextWindow);
@@ -2799,7 +2954,7 @@ async function runPostRunLifecycle(inputs) {
   }
   const lastRequestUsage = result.usage?.requests?.at(-1)?.totalTokens;
   const usageForTrigger = lastRequestUsage ?? result.usage?.totalTokens;
-  chunkDZG77WU7_cjs.persistTurnToTranscript(
+  chunk3XSWF5AP_cjs.persistTurnToTranscript(
     sessionStore,
     { cwd: workspaceCwd, agentId, model },
     agentId,
@@ -2811,7 +2966,7 @@ async function runPostRunLifecycle(inputs) {
         // The EFFECTIVE window (after override, clamp and margin) — not the declared one. Swapping for
         // `contextWindow` here would budget against a number the clamp already rejected.
         contextWindow: effectiveWindow,
-        summarize: chunkC4ZQPWXJ_cjs.buildDefaultSummarizer({
+        summarize: chunkZLMU5EU3_cjs.buildDefaultSummarizer({
           agentModel: model,
           ...inputs.apiKey !== void 0 ? { apiKey: inputs.apiKey } : {}
         })
@@ -2824,7 +2979,7 @@ async function runPostRunLifecycle(inputs) {
       cwd: workspaceCwd,
       // Resolved once, here, and handed to both writers. Recomputing it inside either one is how
       // the summary ended up in a directory the indexer never scanned (#463).
-      memoryRoot: chunkNQTNSHSB_cjs.resolveMemoryRoot(workspaceCwd, inputs.memory),
+      memoryRoot: chunkHNAYCTX4_cjs.resolveMemoryRoot(workspaceCwd, inputs.memory),
       runId: result.id,
       agentId,
       userText,
@@ -2836,7 +2991,7 @@ async function runPostRunLifecycle(inputs) {
       if (memoryProvider?.recordSessionSummary !== void 0) {
         await memoryProvider.recordSessionSummary(summaryArgs);
       } else {
-        await chunkNQTNSHSB_cjs.writeSessionSummary(summaryArgs);
+        await chunkHNAYCTX4_cjs.writeSessionSummary(summaryArgs);
       }
     } catch (cause) {
       const message = cause instanceof Error ? cause.message : String(cause);
@@ -2853,7 +3008,7 @@ async function runPostRunLifecycle(inputs) {
     agentId,
     runId: result.id
   });
-  await chunkDZG77WU7_cjs.flushSessionWrites();
+  await chunk3XSWF5AP_cjs.flushSessionWrites();
 }
 async function safeConversation(run) {
   try {
@@ -2888,15 +3043,15 @@ var SkillsManager = class {
   }
   async refresh() {
     const roots = this.skillsDir === void 0 ? [
-      ...chunk43YXGD3P_cjs.projectConfigRoots(this.cwd, this.compatSources, "skills").map(
+      ...chunkTY56BKSK_cjs.projectConfigRoots(this.cwd, this.compatSources, "skills").map(
         (root) => path.join(root, "skills")
       ),
-      ...(await chunkAYA65JA5_cjs.pluginBundleDirs(this.cwd, this.compatSources)).map((b) => path.join(b, "skills"))
+      ...(await chunkRWPLWMCZ_cjs.pluginBundleDirs(this.cwd, this.compatSources)).map((b) => path.join(b, "skills"))
     ] : [this.skillsDir];
     const discovered = [];
     const seen = /* @__PURE__ */ new Set();
     for (const root of roots) {
-      for (const skill of await chunkQATRS7JD_cjs.discoverSkills(root, {
+      for (const skill of await chunkMYJGWS2J_cjs.discoverSkills(root, {
         onInvalidSkill: (info) => {
           chunk6LHQPOMI_cjs.diag(`[theokit-sdk] skill ${info.name} skipped (${info.code}): ${info.message}
 `);
@@ -2927,7 +3082,7 @@ var SkillsManager = class {
   async get(name) {
     const skill = this.skills.find((s) => s.name === name);
     if (skill === void 0) return void 0;
-    const instructions = typeof skill.instructions === "string" ? skill.instructions : chunkQATRS7JD_cjs.stripSkillFrontmatter(await promises.readFile(skill.source, "utf8"));
+    const instructions = typeof skill.instructions === "string" ? skill.instructions : chunkMYJGWS2J_cjs.stripSkillFrontmatter(await promises.readFile(skill.source, "utf8"));
     const references = skill.references;
     return {
       name: skill.name,
@@ -3046,7 +3201,15 @@ async function buildSystemPromptContext(inputs, userText, memoryFacts, manager =
     agentId: inputs.agentId,
     cwd: inputs.workspaceCwd,
     model: inputs.model,
-    skills: skills.map((skill) => ({ name: skill.name, description: skill.description })),
+    // This is the ONLY place the model learns which skills exist, which is what makes
+    // `disable-model-invocation` enforceable rather than decorative. The scaffold had been writing
+    // authorization frontmatter that the parser discarded, so the default was disclose-all.
+    //
+    // A disclosure rule, not an execution rule: `skills.get(name)` still resolves a hidden skill,
+    // because a caller naming one has already made the decision this field keeps away from the
+    // model. Widening it to execution would break the case the field is FOR — a side-effecting
+    // skill a human may run and the model may not propose.
+    skills: skills.filter((skill) => skill.disableModelInvocation !== true).map((skill) => ({ name: skill.name, description: skill.description })),
     userMessage: userText,
     memory: memoryFacts.map((fact) => ({ text: fact.text }))
   };
@@ -3106,7 +3269,7 @@ var ActiveMemoryPromptProvider = class {
     if (ctx.activeMemorySummary === void 0 || ctx.activeMemorySummary.length === 0) {
       return Promise.resolve(void 0);
     }
-    const body = chunkQATRS7JD_cjs.escapeBlockBody(ctx.activeMemorySummary);
+    const body = chunkMYJGWS2J_cjs.escapeBlockBody(ctx.activeMemorySummary);
     return Promise.resolve(`<active-memory>
 ${body}
 </active-memory>`);
@@ -3159,7 +3322,7 @@ function formatSource(name, tokens) {
   if (tokens.length === 0) {
     return `  <source name="${escapeAttribute(name)}" />`;
   }
-  const body = chunkQATRS7JD_cjs.escapeBlockBody(tokens.join(" "));
+  const body = chunkMYJGWS2J_cjs.escapeBlockBody(tokens.join(" "));
   return `  <source name="${escapeAttribute(name)}">
     ${body}
   </source>`;
@@ -3183,7 +3346,7 @@ var MemoryPromptProvider = class {
     if (ctx.memory.length === 0) return Promise.resolve(void 0);
     const lines = ctx.memory.map((fact) => {
       const tag = fact.observations === 1 ? "[unconfirmed] " : "";
-      return `  - ${tag}${chunkQATRS7JD_cjs.escapeBlockBody(fact.text)}`;
+      return `  - ${tag}${chunkMYJGWS2J_cjs.escapeBlockBody(fact.text)}`;
     });
     return Promise.resolve(`${MEMORY_GUIDANCE}
 <memory>
@@ -3207,7 +3370,7 @@ var SkillsPromptProvider = class {
   priority = 20;
   contribute(ctx) {
     if (ctx.skillsAutoInject === false) return Promise.resolve(void 0);
-    return Promise.resolve(chunkQATRS7JD_cjs.buildSkillsBlock(ctx.skills));
+    return Promise.resolve(chunkMYJGWS2J_cjs.buildSkillsBlock(ctx.skills));
   }
 };
 
@@ -3475,7 +3638,7 @@ var HISTOGRAM_NAMES = {
 };
 function safeRequire(moduleName) {
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-UKJJRU7C.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-A575WPBL.cjs', document.baseURI).href)));
     return r(moduleName);
   } catch {
     return void 0;
@@ -3718,7 +3881,7 @@ var cachedOtel;
 function loadOtel() {
   if (cachedOtel === void 0) {
     try {
-      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-UKJJRU7C.cjs', document.baseURI).href)));
+      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-A575WPBL.cjs', document.baseURI).href)));
       const mod = r("@opentelemetry/api");
       cachedOtel = mod;
     } catch {
@@ -3955,7 +4118,7 @@ async function loadMarkdownEntities(opts) {
     const raw = await promises.readFile(resolved.source, "utf8").catch(() => null);
     if (raw === null) continue;
     const split = splitFrontmatter(raw, resolved.source, errorCodePrefix);
-    const fields = chunkHW7SEELD_cjs.parseSimpleYaml(split.frontmatter);
+    const fields = chunkQRVS2PRE_cjs.parseSimpleYaml(split.frontmatter);
     const parsed = schema.safeParse(fields);
     if (!parsed.success) {
       throw new chunkJ7J7J2GN_cjs.ConfigurationError(
@@ -4037,7 +4200,7 @@ function applyAggregateCap(sources, maxTotal) {
     }
     const remaining = maxTotal - totalBytes;
     if (remaining > 0) {
-      const { finalContent } = chunkIU5N5224_cjs.truncateWithMarker(s.content, remaining);
+      const { finalContent } = chunkEFETPSJZ_cjs.truncateWithMarker(s.content, remaining);
       kept.push({ ...s, content: finalContent, truncated: true });
       totalBytes = maxTotal;
     } else {
@@ -4070,14 +4233,24 @@ var ContextSourceFrontmatterSchema = zod.z.object({
 
 // src/internal/runtime/context/context-manager.ts
 var FileContextManager = class {
-  constructor(cwd, settings, settingSourcesIncludeProject) {
+  /**
+   * @param compatSources - What the consumer declared in `local.compatSources` (or
+   * `.theokit/config.json`), as `resolveCompatSources` resolved it. `undefined` means the caller
+   * did not thread the declaration through at all and every dialect runs — the pre-#652 behaviour,
+   * kept so an internal caller constructing this directly does not silently lose content. An empty
+   * ARRAY is different and is the fix: it means the consumer declared no foreign dialect, so
+   * `.claude/rules/*.md` does not reach the prompt.
+   */
+  constructor(cwd, settings, settingSourcesIncludeProject, compatSources) {
     this.cwd = cwd;
     this.settings = settings;
     this.settingSourcesIncludeProject = settingSourcesIncludeProject;
+    this.compatSources = compatSources;
   }
   cwd;
   settings;
   settingSourcesIncludeProject;
+  compatSources;
   state;
   /**
    * The in-scope file set used by the most recent `refresh`. Tracked so
@@ -4086,6 +4259,19 @@ var FileContextManager = class {
    * snapshot untouched, at zero per-send cost.
    */
   lastScope = [];
+  /**
+   * The dialect kinds granted the `context` surface, or `undefined` when nothing was declared to
+   * this instance.
+   *
+   * Routed through `adaptersForSurface` rather than reading `.kind` off the declarations, so the
+   * three fail-closed rules #524 established govern this surface identically to the other four: a
+   * bare string admits everything, an object with no `import` admits nothing, and an unrecognised
+   * surface name narrows rather than widens.
+   */
+  grantedContextDialects() {
+    if (this.compatSources === void 0) return void 0;
+    return chunkTY56BKSK_cjs.adaptersForSurface(this.compatSources, "context").map((a) => a.kind);
+  }
   async initialize() {
     if (!this.settingSourcesIncludeProject && this.settings.manager !== "file") {
       this.state = { config: { sources: [] }, loadedSources: [] };
@@ -4111,13 +4297,18 @@ var FileContextManager = class {
     this.lastScope = [...touchedFiles];
     const config = await loadContextConfig(this.cwd);
     const legacy = await loadSources(config, this.cwd);
-    const maxBytesPerFile = this.settings.maxBytesPerFile ?? chunkIU5N5224_cjs.DEFAULT_MAX_BYTES_PER_FILE;
+    const maxBytesPerFile = this.settings.maxBytesPerFile ?? chunkEFETPSJZ_cjs.DEFAULT_MAX_BYTES_PER_FILE;
     const maxBytesTotal = this.settings.maxBytesTotal ?? DEFAULT_MAX_BYTES_TOTAL;
-    const discovered = await chunkIU5N5224_cjs.runDiscovery({
+    const granted = this.grantedContextDialects();
+    const discovered = await chunkEFETPSJZ_cjs.runDiscovery({
       cwd: this.cwd,
       maxBytesPerFile,
       skipLegacyTheokitContext: true,
-      touchedFiles
+      touchedFiles,
+      // #652 — the grant this path never consulted. Without it, a consumer who enabled project
+      // scope for its OWN `.theokit/` also received a cloned repository's `.claude/rules/*.md`,
+      // through a door the hooks/skills/subagents/plugins gate does not cover.
+      ...granted === void 0 ? {} : { declaredCompatKinds: granted }
     });
     const legacyAsAggregator = legacy.filter((src) => src.status !== "excluded").map((src) => ({
       id: src.name,
@@ -4172,8 +4363,8 @@ var FileContextManager = class {
   }
 };
 async function loadContextConfig(cwd) {
-  const mdDir = path.join(chunk43YXGD3P_cjs.theokitConfigRoot(cwd), "context");
-  const jsonPath = path.join(chunk43YXGD3P_cjs.theokitConfigRoot(cwd), "context.json");
+  const mdDir = path.join(chunkTY56BKSK_cjs.theokitConfigRoot(cwd), "context");
+  const jsonPath = path.join(chunkTY56BKSK_cjs.theokitConfigRoot(cwd), "context.json");
   const mdEntities = await loadMarkdownEntities({
     dir: mdDir,
     schema: ContextSourceFrontmatterSchema,
@@ -4182,7 +4373,7 @@ async function loadContextConfig(cwd) {
   });
   if (mdEntities.length > 0) {
     if (fs.existsSync(jsonPath)) {
-      chunkVY6NKMOA_cjs.warnOnce(
+      chunkGK3UG7YQ_cjs.warnOnce(
         "context-both-present",
         "[theokit-sdk] both .theokit/context/ and .theokit/context.json detected \u2014 using markdown; remove context.json"
       );
@@ -4192,7 +4383,7 @@ async function loadContextConfig(cwd) {
     };
   }
   if (!fs.existsSync(jsonPath)) return { sources: [] };
-  chunkVY6NKMOA_cjs.warnOnce(
+  chunkGK3UG7YQ_cjs.warnOnce(
     "context-json-deprecated",
     // Names no command: `theokit-migrate-config` was unpublished with the `bin` entry, and a warning
     // that tells you to run something the package does not ship is worse than one that tells you
@@ -4333,13 +4524,13 @@ var PluginsManager = class {
   }
   async refresh() {
     this.plugins = [];
-    for (const pluginsRoot of chunk43YXGD3P_cjs.pluginBundleRoots(this.cwd, this.compatSources)) {
+    for (const pluginsRoot of chunkTY56BKSK_cjs.pluginBundleRoots(this.cwd, this.compatSources)) {
       await this.refreshRoot(pluginsRoot);
     }
   }
   // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: MD-first + JSON fallback + CLI location + both-present detection per plugin folder — branch table is clearer inlined.
   async refreshRoot(pluginsRoot) {
-    const entries = await chunkHW7SEELD_cjs.readWorkspaceDir(pluginsRoot, "plugins_read_error", "plugins directory");
+    const entries = await chunkQRVS2PRE_cjs.readWorkspaceDir(pluginsRoot, "plugins_read_error", "plugins directory");
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
       const folderName = entry.name;
@@ -4355,13 +4546,13 @@ var PluginsManager = class {
       const jsonPath = path.join(pluginsRoot, folderName, "plugin.json");
       const metadata = fs.existsSync(mdPath) ? await loadPluginManifestFromMarkdown(this.cwd, pluginsRoot, folderName) : await loadPluginManifestFromJson(this.cwd, jsonPath, folderName);
       if (fs.existsSync(mdPath) && fs.existsSync(jsonPath)) {
-        chunkVY6NKMOA_cjs.warnOnce(
+        chunkGK3UG7YQ_cjs.warnOnce(
           `plugin-${folderName}-both`,
           `[theokit-sdk] both ${folderName}/PLUGIN.md and ${folderName}/plugin.json detected \u2014 using markdown; remove plugin.json`
         );
       }
       if (!fs.existsSync(mdPath) && fs.existsSync(jsonPath)) {
-        chunkVY6NKMOA_cjs.warnOnce(
+        chunkGK3UG7YQ_cjs.warnOnce(
           "plugin-json-deprecated",
           // Same reason as the context.json warning: the CLI it used to name is no longer published.
           "[theokit-sdk] plugin.json manifests are deprecated; replace each with a PLUGIN.md"
@@ -4512,7 +4703,12 @@ function buildContext(args, out) {
   out.context = new FileContextManager(
     args.workspaceCwd,
     args.options.context,
-    args.settingSourcesIncludeProject
+    args.settingSourcesIncludeProject,
+    // #652 — the same declaration `buildSkills` and `buildPlugins` already pass. Omitting it here
+    // is what let a foreign root's instructions into the system prompt while its skills, subagents,
+    // hooks and plugins were correctly withheld: four surfaces failing closed and a fifth nobody
+    // had wired to the gate.
+    resolveCompatSources(args.options, args.workspaceCwd)
   );
 }
 function buildProviders(args, out) {
@@ -5607,7 +5803,7 @@ function stripThinkBlocks(content) {
 function resolveSystemPromptWithMemoryAdditions(systemPrompt, additions) {
   if (additions === void 0 || additions.length === 0) return systemPrompt;
   const block = `<active-memory>
-${chunkQATRS7JD_cjs.escapeBlockBody(additions)}
+${chunkMYJGWS2J_cjs.escapeBlockBody(additions)}
 </active-memory>`;
   if (systemPrompt === void 0 || systemPrompt.length === 0) return block;
   return `${block}
@@ -6453,7 +6649,7 @@ function applyToolResultGuard(parts, opts) {
     (p) => (
       // SE7 — guard the TEXT of a tool result (string or the text blocks of a
       // structured content); image blocks pass through untouched.
-      p.type === "tool_result" ? { ...p, content: chunkC4ZQPWXJ_cjs.renderToolResultContentText(p.content, (t) => guardText(t, opts)) } : p
+      p.type === "tool_result" ? { ...p, content: chunkZLMU5EU3_cjs.renderToolResultContentText(p.content, (t) => guardText(t, opts)) } : p
     )
   );
 }
@@ -6745,13 +6941,13 @@ var FallbackLlmClient = class {
   async *stream(request, signal) {
     let lastError;
     for (const client of this.clients) {
-      if (signal.aborted) throw chunkC4ZQPWXJ_cjs.abortError(signal);
-      const attempt = await chunkC4ZQPWXJ_cjs.tryFirstEvent(client, request, signal, true);
+      if (signal.aborted) throw chunkZLMU5EU3_cjs.abortError(signal);
+      const attempt = await chunkZLMU5EU3_cjs.tryFirstEvent(client, request, signal, true);
       if (attempt.kind === "handshake_error") {
         lastError = attempt.error;
         continue;
       }
-      return yield* chunkC4ZQPWXJ_cjs.relayStream(attempt.generator, attempt.firstResult);
+      return yield* chunkZLMU5EU3_cjs.relayStream(attempt.generator, attempt.firstResult);
     }
     if (lastError !== void 0) throw lastError;
     throw new chunkJ7J7J2GN_cjs.NetworkError("FallbackLlmClient has no providers configured", {
@@ -7251,7 +7447,7 @@ function applyPersonalityFilter(exposedTools, whitelist, opts) {
     if (exposedSet.has(name)) continue;
     const hint = suggestClosest(name, exposedSet);
     const message = hint !== void 0 ? `[theokit-sdk] personality "${opts?.personalityName ?? "?"}" references unknown tool "${name}"; did you mean "${hint}"?` : `[theokit-sdk] personality "${opts?.personalityName ?? "?"}" references unknown tool "${name}" (not exposed)`;
-    chunkVY6NKMOA_cjs.warnOnce(
+    chunkGK3UG7YQ_cjs.warnOnce(
       `personality-tool-missing|${opts?.agentId ?? "?"}|${opts?.personalityName ?? "?"}|${name}`,
       message
     );
@@ -7387,9 +7583,9 @@ function buildLoopInputs(options, runId, userText, userImages) {
       { code: "invalid_max_iterations" }
     );
   }
-  const { primary, effectiveModelId } = chunkC4ZQPWXJ_cjs.resolveRunProvider(options);
+  const { primary, effectiveModelId } = chunkZLMU5EU3_cjs.resolveRunProvider(options);
   const fallback = options.agentOptions.providers?.fallback;
-  const apiKeys = chunkC4ZQPWXJ_cjs.mergeExplicitApiKey(
+  const apiKeys = chunkZLMU5EU3_cjs.mergeExplicitApiKey(
     options.agentOptions.providers?.apiKeys,
     primary,
     options.agentOptions.apiKey
@@ -7398,7 +7594,7 @@ function buildLoopInputs(options, runId, userText, userImages) {
   const extractToolCallsFromContent = options.agentOptions.providers?.routes?.[0]?.extractToolCallsFromContent;
   const rateLimitSink = options.sendOptions.onRunEvent;
   const modelBaseUrl = options.model?.url;
-  const chain = chunkC4ZQPWXJ_cjs.resolveProviderChain({
+  const chain = chunkZLMU5EU3_cjs.resolveProviderChain({
     primary,
     ...modelBaseUrl !== void 0 ? { baseUrl: modelBaseUrl } : {},
     ...fallback !== void 0 ? { fallback } : {},
@@ -7658,7 +7854,7 @@ function buildRealRunOptions(args) {
   };
 }
 async function createFixtureRunHelper(args) {
-  const sessionMessages = chunkDZG77WU7_cjs.getSessionMessages(args.inputs.agentId);
+  const sessionMessages = chunk3XSWF5AP_cjs.getSessionMessages(args.inputs.agentId);
   const projectMcpServers = args.inputs.settingSourcesIncludeProject ? await readProjectMcpServers(args.inputs.workspaceCwd) : {};
   return createLocalRun({
     agentId: args.inputs.agentId,
@@ -7677,7 +7873,7 @@ async function createFixtureRunHelper(args) {
 }
 async function dispatchLocalRun(args) {
   const apiKey = chunk6LHQPOMI_cjs.resolveApiKey(args.inputs.options.apiKey);
-  if (chunkC4ZQPWXJ_cjs.shouldUseRealLocalRuntime(apiKey)) {
+  if (chunkZLMU5EU3_cjs.shouldUseRealLocalRuntime(apiKey)) {
     return createRealLocalRun(
       buildRealRunOptions({
         inputs: args.inputs,
@@ -7700,7 +7896,7 @@ async function dispatchLocalRun(args) {
   });
 }
 async function readProjectMcpServers(cwd) {
-  const path$1 = path.join(chunk43YXGD3P_cjs.theokitConfigRoot(cwd), "mcp.json");
+  const path$1 = path.join(chunkTY56BKSK_cjs.theokitConfigRoot(cwd), "mcp.json");
   try {
     const raw = await promises.readFile(path$1, "utf8");
     const parsed = JSON.parse(raw);
@@ -7933,16 +8129,16 @@ async function disposeLocalAgentSession(agent) {
   agent.lifecycleAbortController.abort();
   await chunkZF2LDKQQ_cjs.withCwdMutex(`agent-send:${agent.agentId}`, () => Promise.resolve());
   disposeSessionMcpClients(agent.agentId);
-  await chunkDZG77WU7_cjs.flushSessionWrites();
+  await chunk3XSWF5AP_cjs.flushSessionWrites();
   await flushRegistrySaves(agent.workspaceCwd);
   await disposeSessionStore(agent.sessionStore);
-  chunkDZG77WU7_cjs.discardSession(agent.workspaceCwd, agent.agentId);
+  chunk3XSWF5AP_cjs.discardSession(agent.workspaceCwd, agent.agentId);
 }
 async function reloadLocalAgent(agent) {
   if (agent.context !== void 0) await agent.context.refresh();
   if (agent.skillsManager !== void 0) await agent.skillsManager.refresh();
   if (agent.pluginsManager !== void 0) await agent.pluginsManager.refresh();
-  return await chunkAYA65JA5_cjs.loadSubagents(
+  return await chunkRWPLWMCZ_cjs.loadSubagents(
     agent.workspaceCwd,
     agent.settingSourcesIncludeProject,
     agent.options.agents
@@ -8188,7 +8384,7 @@ async function finalize(args, queryMode, result) {
   };
   args.cache?.set(args.userText, queryMode, result, tenantCtx);
   if (args.persistTranscripts === true && args.cwd !== void 0) {
-    await chunkTMKTSYDS_cjs.persistActiveMemoryTranscript(args.memoryRoot ?? chunkNQTNSHSB_cjs.resolveMemoryRoot(args.cwd), {
+    await chunkTMKTSYDS_cjs.persistActiveMemoryTranscript(args.memoryRoot ?? chunkHNAYCTX4_cjs.resolveMemoryRoot(args.cwd), {
       runId: args.runId ?? `run-${Date.now()}`,
       startedAtMs: Date.now() - result.durationMs,
       userText: args.userText,
@@ -8779,7 +8975,7 @@ var LocalAgentMemory = class {
       const openOpts = { cwd: this.workspaceCwd, memoryRoot };
       if (embedding !== void 0) openOpts.embedding = embedding;
       if (cfg?.backend !== void 0) openOpts.backend = cfg.backend;
-      this.index = await chunkZ2JFX372_cjs.IndexManager.open(openOpts);
+      this.index = await chunk33A27NFX_cjs.IndexManager.open(openOpts);
       await this.index.sync();
       this.toolsCache = [
         createMemorySearchTool({ index: this.index }),
@@ -8800,7 +8996,7 @@ var LocalAgentMemory = class {
   async runActiveMemoryIfEnabled(userText, priorMessages, telemetry) {
     const cfg = this.options.memory?.activeRecall;
     if (cfg?.enabled !== true || this.index === void 0) return void 0;
-    if (this.breaker === void 0) this.breaker = new chunkC4ZQPWXJ_cjs.CircuitBreaker();
+    if (this.breaker === void 0) this.breaker = new chunkZLMU5EU3_cjs.CircuitBreaker();
     if (this.cache === void 0) this.cache = new ActiveMemoryCache();
     const result = await runActiveMemory({
       userText,
@@ -8823,7 +9019,7 @@ var LocalAgentMemory = class {
    * and the active-memory transcript writer. Three separate resolutions is how they drifted (#463).
    */
   memoryRoot() {
-    this.memoryRootCache ??= chunkNQTNSHSB_cjs.resolveMemoryRoot(this.workspaceCwd, this.options.memory);
+    this.memoryRootCache ??= chunkHNAYCTX4_cjs.resolveMemoryRoot(this.workspaceCwd, this.options.memory);
     return this.memoryRootCache;
   }
   buildActiveMemoryOptions(cfg) {
@@ -8938,7 +9134,7 @@ function createLocalAgentMemoryProvider(opts) {
       return { facts: [], systemPromptAdditions: summary };
     },
     async recordSessionSummary(args) {
-      await chunkNQTNSHSB_cjs.writeSessionSummary(args);
+      await chunkHNAYCTX4_cjs.writeSessionSummary(args);
     },
     async sync(handle) {
       const state = handle[INTERNAL_LAM_KEY];
@@ -8976,7 +9172,7 @@ var PersonalityRegistry = class _PersonalityRegistry {
    * @internal
    */
   static async load(cwd) {
-    const projectDir = path.join(chunk43YXGD3P_cjs.theokitConfigRoot(cwd), PERSONALITIES_SUFFIX);
+    const projectDir = path.join(chunkTY56BKSK_cjs.theokitConfigRoot(cwd), PERSONALITIES_SUFFIX);
     const userDir = path.join(os.homedir(), USER_SUBDIR);
     const [userEntities, projectEntities] = await Promise.all([
       loadMarkdownEntities({
@@ -9028,7 +9224,7 @@ function addEntity(byName, entity, origin, collisionMap) {
     );
   }
   if (origin === "project" && collisionMap?.has(fm.name)) {
-    chunkVY6NKMOA_cjs.warnOnce(
+    chunkGK3UG7YQ_cjs.warnOnce(
       `personality-collision-${fm.name}`,
       `[theokit-sdk] personality "${fm.name}" overridden by project preset`
     );
@@ -9078,14 +9274,14 @@ async function performPersonalitySwitch(args) {
 
 // src/internal/local-agent/local-agent-personality-extensions.ts
 function resolveActivePersonalityPreset(args) {
-  const forkCtx = chunkVY6NKMOA_cjs.currentPersonalityContext();
+  const forkCtx = chunkYYN6BB7R_cjs.currentPersonalityContext();
   const slug = forkCtx !== void 0 ? forkCtx.slug : args.personalityStore.active(args.agentId);
   if (slug === void 0) return void 0;
   return args.personalityRegistry?.get(slug);
 }
 async function ensurePersonalityRegistryIfNeeded(args) {
   if (args.personalityRegistry !== void 0) return args.personalityRegistry;
-  const forkSlug = chunkVY6NKMOA_cjs.currentPersonalityContext()?.slug;
+  const forkSlug = chunkYYN6BB7R_cjs.currentPersonalityContext()?.slug;
   const ownSlug = args.personalityStore.active(args.agentId);
   if (forkSlug === void 0 && ownSlug === void 0) return void 0;
   return await PersonalityRegistry.load(args.workspaceCwd);
@@ -9098,8 +9294,8 @@ function applyPersonalityOverlay(preset, base) {
 ${preset.systemPrompt}`;
 }
 async function localAgentUsePersonality(agent, name, opts) {
-  if (chunkVY6NKMOA_cjs.currentPersonalityContext() !== void 0) {
-    chunkVY6NKMOA_cjs.warnPersonalitySwitchInsideFork(agent.agentId);
+  if (chunkYYN6BB7R_cjs.currentPersonalityContext() !== void 0) {
+    chunkYYN6BB7R_cjs.warnPersonalitySwitchInsideFork(agent.agentId);
     return null;
   }
   if (agent.personalityRegistry === void 0) {
@@ -9115,8 +9311,8 @@ async function localAgentUsePersonality(agent, name, opts) {
       registry,
       store: agent.personalityStore,
       invalidateCache: (reason) => agent.invalidateCache(reason),
-      appendSessionMessage: (msg) => chunkDZG77WU7_cjs.appendSessionMessage(agent.agentId, msg),
-      clearSession: () => chunkDZG77WU7_cjs.clearSession(agent.agentId),
+      appendSessionMessage: (msg) => chunk3XSWF5AP_cjs.appendSessionMessage(agent.agentId, msg),
+      clearSession: () => chunk3XSWF5AP_cjs.clearSession(agent.agentId),
       opts: opts ?? {}
     })
   );
@@ -9160,7 +9356,7 @@ async function* localAgentStreamToCompletion(agent, message, options) {
 async function localAgentFork(parent, options) {
   const { forkAgentImpl } = await import('./fork-agent-WAEQI2DL.cjs');
   const { getAgentFacade } = await import('./agent-factory-registry-UU46BUMU.cjs');
-  const { withPersonalityContext } = await import('./context-JTGSBJT6.cjs');
+  const { withPersonalityContext } = await import('./context-7RP5JXGM.cjs');
   const create = getAgentFacade().create;
   return withPersonalityContext(
     { slug: parent.personalitySlugSnapshot, isFork: true },
@@ -9670,7 +9866,7 @@ async function executeSendLocked(inputs, message, options) {
   if (inputs.options.onBeforeSend !== void 0) {
     await inputs.options.onBeforeSend({
       conversationId: inputs.agentId,
-      previousMessageCount: chunkDZG77WU7_cjs.getSessionMessages(inputs.agentId).length
+      previousMessageCount: chunk3XSWF5AP_cjs.getSessionMessages(inputs.agentId).length
     });
   }
   await inputs.runPreHook(userText);
@@ -9682,8 +9878,8 @@ async function executeSendLocked(inputs, message, options) {
     userText,
     sendOptions: options
   });
-  const priorMessages = [...chunkDZG77WU7_cjs.getSessionMessages(inputs.agentId)];
-  chunkDZG77WU7_cjs.appendSessionMessage(inputs.agentId, { role: "user", text: userText });
+  const priorMessages = [...chunk3XSWF5AP_cjs.getSessionMessages(inputs.agentId)];
+  chunk3XSWF5AP_cjs.appendSessionMessage(inputs.agentId, { role: "user", text: userText });
   await persistMemoryFactIfWritePrompt(inputs.workspaceCwd, inputs.options.memory, userText);
   const memoryFacts = await readMemoryForSend(inputs.workspaceCwd, inputs.options.memory, userText);
   const memoryTools = void 0;
@@ -9953,7 +10149,7 @@ var LocalAgent = class {
     if (sub.plugins !== void 0) this.plugins = sub.plugins;
     reportUnknownLocalOptions(options.local);
     const compatSources = resolveCompatSources(options, this.workspaceCwd);
-    chunk43YXGD3P_cjs.reportUndeclaredSources(this.workspaceCwd, compatSources);
+    chunkTY56BKSK_cjs.reportUndeclaredSources(this.workspaceCwd, compatSources);
     this.hooksExecutor = new HooksExecutor(this.workspaceCwd, compatSources, options.local?.hooks);
     this.defaultMemoryProviderForLoop = createLocalAgentMemoryProvider({
       agentOptions: options,
@@ -9981,7 +10177,7 @@ var LocalAgent = class {
     if (this.pluginsManager !== void 0) await this.pluginsManager.initialize();
     const codePlugins = chunkBV2MWEMV_cjs.extractCodePlugins(this.options.plugins);
     await this.pluginManagerCode.initialize(codePlugins);
-    this.resolvedSubagents = await chunkAYA65JA5_cjs.loadSubagents(
+    this.resolvedSubagents = await chunkRWPLWMCZ_cjs.loadSubagents(
       this.workspaceCwd,
       this.settingSourcesIncludeProject,
       this.options.agents,
@@ -9989,7 +10185,7 @@ var LocalAgent = class {
     );
     await acquireLeaseIfPossible(this.sessionStore, this.agentId);
     try {
-      await chunkDZG77WU7_cjs.hydrateSession(this.agentId, { store: this.sessionStore, cwd: this.workspaceCwd });
+      await chunk3XSWF5AP_cjs.hydrateSession(this.agentId, { store: this.sessionStore, cwd: this.workspaceCwd });
       await this.personalityStore.hydrate(this.agentId);
     } catch (err) {
       await releaseLeaseIfPossible(this.sessionStore, this.agentId);
@@ -10330,15 +10526,15 @@ async function maybeInjectHandoffTools(options) {
   };
 }
 function keyWillFlowToProvider(apiKey, provider) {
-  if (chunkC4ZQPWXJ_cjs.isFixtureApiKey(apiKey)) return false;
-  if (chunkC4ZQPWXJ_cjs.getConfiguredBaseUrl() !== void 0) return false;
+  if (chunkZLMU5EU3_cjs.isFixtureApiKey(apiKey)) return false;
+  if (chunkZLMU5EU3_cjs.getConfiguredBaseUrl() !== void 0) return false;
   if (provider === void 0) return false;
   const profile = chunkANMJJD6D_cjs.getProviderProfile(provider);
   if (profile === void 0) return false;
   return profile.authType !== "none";
 }
 function missingApiKeyMessage() {
-  const present = chunkC4ZQPWXJ_cjs.presentProviderCredentialEnvVars();
+  const present = chunkZLMU5EU3_cjs.presentProviderCredentialEnvVars();
   const base = `Missing API key \u2014 set ${chunk6LHQPOMI_cjs.API_KEY_ENV_VAR}, or pass \`apiKey\` to Agent.create()`;
   if (present.length === 0) return `${base}.`;
   return `${base}. ${present.join(" and ")} ${present.length === 1 ? "is" : "are"} set, but a provider credential is not read from the environment automatically \u2014 pass it explicitly, e.g. \`Agent.create({ apiKey: process.env.${present[0]}, ... })\`.`;
@@ -10358,7 +10554,7 @@ async function createLocalAgent(options) {
     }
   } else {
     const willFlowToProvider = keyWillFlowToProvider(apiKey, provider);
-    const shape = chunkC4ZQPWXJ_cjs.validateApiKeyShape(apiKey, {
+    const shape = chunkZLMU5EU3_cjs.validateApiKeyShape(apiKey, {
       strict: willFlowToProvider,
       ...willFlowToProvider ? { provider } : {}
     });
@@ -10377,15 +10573,15 @@ async function createCloudAgent(options) {
       code: "missing_api_key"
     });
   }
-  const shape = chunkC4ZQPWXJ_cjs.validateApiKeyShape(apiKey);
+  const shape = chunkZLMU5EU3_cjs.validateApiKeyShape(apiKey);
   if (shape.malformed) {
     throw new chunkJ7J7J2GN_cjs.AuthenticationError(shape.message, { code: "malformed_api_key" });
   }
-  const baseUrl = chunkC4ZQPWXJ_cjs.getConfiguredBaseUrl();
+  const baseUrl = chunkZLMU5EU3_cjs.getConfiguredBaseUrl();
   if (baseUrl === void 0) {
     return new CloudAgent(options);
   }
-  const response = await chunkC4ZQPWXJ_cjs.httpRequest("/v1/agents", {
+  const response = await chunkZLMU5EU3_cjs.httpRequest("/v1/agents", {
     apiKey,
     method: "POST",
     body: {
@@ -10410,7 +10606,7 @@ function resolveAgentPersistenceCwd(options) {
   return process.cwd();
 }
 async function rehydrateExistingAgent(agentId, existing, options) {
-  await chunkC4ZQPWXJ_cjs.discoverProviderPlugins();
+  await chunkZLMU5EU3_cjs.discoverProviderPlugins();
   await validateRehydratedAgent(agentId, existing);
   const mergedLocal = options.local !== void 0 && existing.options.local !== void 0 ? { ...existing.options.local, ...options.local } : options.local ?? existing.options.local;
   const mergedOptions = {
@@ -10561,7 +10757,7 @@ var Agent = class _Agent {
       pluginCount: enabledPluginNames(options.plugins).length
     });
     try {
-      await chunkC4ZQPWXJ_cjs.discoverProviderPlugins();
+      await chunkZLMU5EU3_cjs.discoverProviderPlugins();
       const agent = await runCreateUnderSpan(options, span);
       return agent;
     } catch (err) {
@@ -10859,9 +11055,9 @@ var Agent = class _Agent {
    */
   static async compact(agentId, options = {}) {
     const reg = await requireLocalAgent(agentId, "compact");
-    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-7FMYJXQ7.cjs');
+    const { compactSessionTranscript, buildDefaultSummarizer: buildDefaultSummarizer2 } = await import('./compact-session-75KD2FCM.cjs');
     const { cwd, model, store } = await openLocalStore(reg);
-    return chunkDZG77WU7_cjs.enqueueSessionWrite(
+    return chunk3XSWF5AP_cjs.enqueueSessionWrite(
       cwd,
       agentId,
       () => compactSessionTranscript({
@@ -10872,7 +11068,10 @@ var Agent = class _Agent {
         summarize: options.summarize ?? buildDefaultSummarizer2({
           agentModel: model,
           ...reg.options.apiKey !== void 0 ? { apiKey: reg.options.apiKey } : {}
-        })
+        }),
+        ...options.onPreCompact !== void 0 ? { onPreCompact: options.onPreCompact } : {},
+        ...options.onPreCompactError !== void 0 ? { onPreCompactError: options.onPreCompactError } : {},
+        ...options.preCompactTimeoutMs !== void 0 ? { preCompactTimeoutMs: options.preCompactTimeoutMs } : {}
       })
     );
   }
@@ -10886,7 +11085,7 @@ var Agent = class _Agent {
    */
   static async injectSessionTurn(agentId, turn) {
     const reg = await requireLocalAgent(agentId, "injectSessionTurn");
-    const { injectSessionTurn } = await import('./inject-session-PC73TMP2.cjs');
+    const { injectSessionTurn } = await import('./inject-session-L6MIIELT.cjs');
     const { cwd, model, store } = await openLocalStore(reg);
     await injectSessionTurn({
       store,
@@ -10937,7 +11136,7 @@ var Agent = class _Agent {
    */
   static async describe(agentId) {
     const agent = await getRegisteredAgentOrThrow(agentId);
-    const { loadSubagents: loadSubagents2 } = await import('./subagents-loader-DN4LETGL.cjs');
+    const { loadSubagents: loadSubagents2 } = await import('./subagents-loader-MOO7DC4E.cjs');
     const settingSources = agent.options.local?.settingSources;
     const subagents = await loadSubagents2(
       agent.cwd ?? process.cwd(),
@@ -11053,7 +11252,9 @@ exports.UsageAccumulator = UsageAccumulator;
 exports.computeCost = computeCost;
 exports.generateCronId = generateCronId;
 exports.getPricingEntry = getPricingEntry;
+exports.managedSettingsPathFor = managedSettingsPathFor;
 exports.openRouterMemoryEmbeddingProviderAdapter = openRouterMemoryEmbeddingProviderAdapter;
+exports.readManagedSettings = readManagedSettings;
 exports.resolveSessionDir = resolveSessionDir;
-//# sourceMappingURL=chunk-UKJJRU7C.cjs.map
-//# sourceMappingURL=chunk-UKJJRU7C.cjs.map
+//# sourceMappingURL=chunk-A575WPBL.cjs.map
+//# sourceMappingURL=chunk-A575WPBL.cjs.map