agent-afk 5.308.4 → 5.308.6

package/dist/agent/awareness/types.d.ts

@@ -1,6 +1,6 @@
 import type { CompactUsageEntry } from '../usage/usage-formatter.js';
 import type { SubagentOutcomeSummaryEntry } from '../../insights/aggregators/subagent-outcomes.js';
-export type Surface = 'cli' | 'repl' | 'daemon' | 'telegram' | 'subagent' | 'web' | 'unknown';
+export type Surface = 'cli' | 'repl' | 'daemon' | 'telegram' | 'subagent' | 'web' | 'sdk' | 'unknown';
 export type PhaseRole = 'read-only' | 'read-write';
 export type SubagentStatusLiteValue = 'idle' | 'running' | 'succeeded' | 'failed' | 'cancelled';
 export type BgJobStatus = 'running' | 'completed' | 'failed' | 'cancelled';

package/dist/agent/background-registry.d.ts

@@ -48,6 +48,5 @@ export declare class BackgroundAgentRegistry extends EventEmitter<BackgroundRegi
     getTouchedFiles(jobId: string): readonly string[] | undefined;
     private nextJobId;
     private markTerminal;
-    private statusFromResult;
     private snapshot;
 }

package/dist/agent/background-registry.mark-terminal.d.ts

@@ -0,0 +1,29 @@
+import type { BgJobLogWriter, BgJobMeta } from './bg-job-log.js';
+import type { SubagentResult, SubagentStatus } from './subagent.js';
+import type { TraceSink } from './trace/index.js';
+import type { BackgroundJobStatus } from './background-registry.types.js';
+export interface MarkTerminalJob {
+    jobId: string;
+    subagentId: string;
+    status: BackgroundJobStatus;
+    startedAt: number;
+    endedAt?: number;
+    result?: SubagentResult;
+    provenance: 'user' | 'model';
+    parentSessionId?: string;
+    cancelSource?: 'explicit' | 'cascade';
+    modelCancelReason?: string;
+    transcriptTail: string;
+    touchedFiles: string[];
+    handle: {
+        teardown(): Promise<void>;
+        cancel(): Promise<void>;
+    };
+    settle: (r: SubagentResult) => void;
+    onCleanup?: () => Promise<void>;
+    onSettled?: () => void;
+}
+export declare function statusFromResult(s: SubagentStatus): BackgroundJobStatus;
+export declare function appendTranscript(job: MarkTerminalJob, chunk: string): void;
+export declare function recordTouched(job: MarkTerminalJob, rawInput: unknown): void;
+export declare function markTerminalImpl(job: MarkTerminalJob, result: SubagentResult, emit: (job: MarkTerminalJob) => void, evict: (jobId: string) => void, traceWriter: TraceSink | undefined, writer?: BgJobLogWriter, openMeta?: BgJobMeta): Promise<void>;

package/dist/agent/daemon/gates.d.ts

@@ -1,5 +1,5 @@
 export declare const DEFAULT_SESSIONSTART_COOLDOWN_MS: number;
-export type SessionStartSkipReason = 'cooldown' | 'overlap' | 'budget-over' | 'telemetry-unwritable';
+export type SessionStartSkipReason = 'cooldown' | 'overlap' | 'budget-over' | 'telemetry-unwritable' | 'expired' | 'not-yet';
 export interface GateDecision {
     fire: boolean;
     skipReason?: SessionStartSkipReason;

package/dist/agent/daemon/schedule-store.d.ts

@@ -12,6 +12,8 @@ export interface ScheduledTaskConfig {
     notifyChat?: number | string;
     maxAttempts?: number;
     retryDelayMs?: number;
+    runAt?: string;
+    expiresAt?: string;
     createdAt: string;
     updatedAt: string;
 }
@@ -20,8 +22,10 @@ export declare function saveSchedules(configs: ScheduledTaskConfig[], path?: str
 export declare function addSchedule(config: Omit<ScheduledTaskConfig, 'id' | 'createdAt' | 'updatedAt'>, path?: string): ScheduledTaskConfig;
 export declare function removeSchedule(id: string, path?: string): boolean;
 export declare function getSchedule(id: string, path?: string): ScheduledTaskConfig | undefined;
-export type SchedulePatch = Partial<Omit<ScheduledTaskConfig, 'id' | 'createdAt' | 'updatedAt' | 'cwd'>> & {
+export type SchedulePatch = Partial<Omit<ScheduledTaskConfig, 'id' | 'createdAt' | 'updatedAt' | 'cwd' | 'runAt' | 'expiresAt'>> & {
     cwd?: string | null;
+    runAt?: string | null;
+    expiresAt?: string | null;
 };
 export declare function updateSchedule(id: string, patch: SchedulePatch, path?: string): ScheduledTaskConfig | undefined;
 export declare function toggleScheduleEnabled(id: string, enabled: boolean, path?: string): ScheduledTaskConfig | undefined;

package/dist/agent/daemon/scheduler.d.ts

@@ -28,7 +28,7 @@ export interface SchedulerOptions {
     retrySleep?: (ms: number, signal: AbortSignal) => Promise<void>;
 }
 export type TelemetryTrigger = 'cron' | 'sessionstart' | 'pull';
-type TelemetryStatus = 'success' | 'error' | 'skipped';
+type TelemetryStatus = 'success' | 'error' | 'skipped' | 'blocked';
 export interface TelemetryRecord {
     taskId: string;
     command: string;
@@ -43,6 +43,7 @@ export interface TelemetryRecord {
     name?: string;
     doneUnverified?: boolean;
     attempts?: number;
+    gateBlocks?: number;
 }
 export interface TaskCompletionDetails {
     responseText?: string;

package/dist/agent/daemon/scheduler.execute-agent-task.d.ts

@@ -29,7 +29,9 @@ export interface AgentTaskContext {
     queueDir: string;
     idleDetector: IdleDetector;
     now: () => number;
-    spawnSession: (task: ScheduledTask, trigger: TelemetryTrigger) => Promise<{
+    spawnSession: (task: ScheduledTask, trigger: TelemetryTrigger, gateBlockCounter?: {
+        count: number;
+    }) => Promise<{
         session: AgentSession;
         memoryStore: MemoryStore;
         stateStore: StateStore;

package/dist/agent/daemon/scheduler.overlap-guard.d.ts

@@ -6,6 +6,8 @@ export declare function makeOverlapSkipRecord(task: ScheduledTask, trigger: Tele
 export declare function makeBudgetSkipRecord(task: ScheduledTask, trigger: TelemetryTrigger, nowMs: number, skip: BudgetGateSkip): TelemetryRecord;
 export declare function makeTelemetryUnwritableSkipRecord(task: ScheduledTask, nowMs: number, errorDescription: string): TelemetryRecord;
 export declare function makeSessionStartSkipRecord(task: ScheduledTask, decision: GateDecision, nowMs: number): TelemetryRecord;
+export declare function makeExpiredSkipRecord(task: ScheduledTask, trigger: TelemetryTrigger, nowMs: number): TelemetryRecord;
+export declare function makeNotYetSkipRecord(task: ScheduledTask, trigger: TelemetryTrigger, nowMs: number): TelemetryRecord;
 export declare class OverlapAlertLatch {
     private readonly alerted;
     shouldAlert(taskId: string): boolean;

package/dist/agent/daemon/scheduler.runat-gate.d.ts

@@ -0,0 +1,13 @@
+import type { ScheduledTask } from './triggers.js';
+import type { TelemetryRecord, TelemetryTrigger } from './scheduler.js';
+export type RunAtGateResult = {
+    kind: 'pass';
+} | {
+    kind: 'not-yet';
+    record: TelemetryRecord;
+} | {
+    kind: 'expired';
+    record: TelemetryRecord;
+};
+export declare function evaluateRunAtGate(task: ScheduledTask, trigger: TelemetryTrigger, nowMs: number): RunAtGateResult;
+export declare function applyAutoDisable(taskId: string, unregister: (id: string) => void): void;

package/dist/agent/daemon/session-spawn.d.ts

@@ -9,6 +9,9 @@ export interface DaemonSpawnOptions {
     sessionFactory?: (config: AgentConfig, ownedTraceWriter?: TraceWriter) => AgentSession;
     trigger?: 'cron' | 'sessionstart' | 'pull';
     taskCwd?: string;
+    gateBlockCounter?: {
+        count: number;
+    };
 }
 export declare function daemonTraceLabel(taskId: string): string;
 export declare function _resetDaemonDefaultCwdCache(): void;

package/dist/agent/daemon/triggers.d.ts

@@ -6,6 +6,8 @@ export interface ScheduledTask {
     executor?: TaskExecutor;
     trigger: TriggerMode;
     cronExpression?: string;
+    runAt?: string;
+    expiresAt?: string;
     debounceMs?: number;
     notifyOn?: 'failure' | 'always' | 'never';
     notifyChat?: number | string;

package/dist/agent/mcp/index.d.ts

@@ -1,8 +1,3 @@
 export type { McpServerConfig, McpClientState, McpClientStatus, McpTransportType, } from './types.js';
-export { McpClient, type McpClientConnectResult } from './client.js';
 export { McpManager, type McpManagerInitOptions } from './manager.js';
-export { loadMcpConfig, loadMcpConfigFile, getMcpConfigPath, getProjectMcpConfigPath, discoverPluginMcpConfigs, type LoadedMcpConfig, type LoadMcpConfigOptions, type McpConfigFile, } from './config-loader.js';
-export { buildMcpToolName, isMcpToolName, buildMcpNameRegistry, sanitizeNameSegment, type McpNameRegistry, } from './naming.js';
-export { expandEnvString, expandEnvRecord, type EnvExpansionResult } from './env.js';
-export { createTransport, expandHeaders, type CreateTransportResult, } from './transport.js';
-export { KeychainOAuthProvider, readOauthPending, clearOauthPending, type KeychainBackend, type OauthPendingEntry, } from './oauth.js';
+export { loadMcpConfig, getMcpConfigPath, type LoadedMcpConfig, type LoadMcpConfigOptions, type McpConfigFile, } from './config-loader.js';

package/dist/agent/memory/memory-store.schema.d.ts

@@ -2,4 +2,3 @@ import type BetterSqlite3 from 'better-sqlite3';
 export declare const SCHEMA_VERSION = 5;
 export declare const SCHEMA_SQL = "\nCREATE TABLE IF NOT EXISTS sessions (\n  session_id TEXT PRIMARY KEY,\n  surface TEXT NOT NULL,\n  started_at TEXT NOT NULL,\n  ended_at TEXT,\n  summary TEXT,\n  tools_used TEXT NOT NULL DEFAULT '[]',\n  outcome TEXT,\n  token_count INTEGER,\n  cost_usd REAL,\n  -- v3: execution role 'main' | 'subagent'. Nullable (NULL on pre-v3 rows).\n  -- Listed last to match the position ALTER TABLE ADD COLUMN appends it on\n  -- migrated databases, so fresh and migrated DBs share one column order.\n  actor TEXT\n);\n\nCREATE TABLE IF NOT EXISTS facts (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  session_id TEXT,\n  created_at TEXT NOT NULL,\n  category TEXT NOT NULL CHECK(category IN ('preference', 'convention', 'decision', 'learning')),\n  content TEXT NOT NULL,\n  source_surface TEXT NOT NULL DEFAULT 'cli',\n  superseded_by INTEGER REFERENCES facts(id),\n  confidence REAL NOT NULL DEFAULT 1.0,\n  access_count INTEGER NOT NULL DEFAULT 0,\n  last_accessed TEXT,\n  -- v4: provenance citation backing a codebase fact (file:line, commit SHA,\n  -- trace-event id). Nullable (NULL on pre-v4 rows and uncited writes).\n  -- Listed last to match the position ALTER TABLE ADD COLUMN appends it on\n  -- migrated databases, so fresh and migrated DBs share one column order.\n  evidence TEXT\n);\n\nCREATE VIRTUAL TABLE IF NOT EXISTS facts_fts USING fts5(\n  content,\n  category,\n  content=facts,\n  content_rowid=id,\n  tokenize='porter'\n);\n\nCREATE TRIGGER IF NOT EXISTS facts_ai AFTER INSERT ON facts BEGIN\n  INSERT INTO facts_fts(rowid, content, category) VALUES (new.id, new.content, new.category);\nEND;\n\nCREATE TRIGGER IF NOT EXISTS facts_ad AFTER DELETE ON facts BEGIN\n  INSERT INTO facts_fts(facts_fts, rowid, content, category) VALUES ('delete', old.id, old.content, old.category);\nEND;\n\nCREATE TABLE IF NOT EXISTS memory_metadata (key TEXT PRIMARY KEY, value TEXT NOT NULL);\n\nCREATE TRIGGER IF NOT EXISTS facts_au AFTER UPDATE OF content, category ON facts BEGIN\n  INSERT INTO facts_fts(facts_fts, rowid, content, category) VALUES ('delete', old.id, old.content, old.category);\n  INSERT INTO facts_fts(rowid, content, category) VALUES (new.id, new.content, new.category);\nEND;\n\nCREATE INDEX IF NOT EXISTS idx_sessions_started_at ON sessions(started_at DESC);\nCREATE INDEX IF NOT EXISTS idx_facts_session_id ON facts(session_id);\n\n-- v2: Fingerprint uniqueness for WAL replay. The four-field key (content,\n-- created_at, session_id, category) is the stable identity used by supersede\n-- WAL entries to locate rows across crash+restart cycles. Without a UNIQUE\n-- constraint, same-ms duplicate inserts make .get() return an arbitrary row.\n-- NULL session_id is coerced to the empty string so it participates in the\n-- uniqueness check (SQLite treats NULLs as distinct in UNIQUE indexes).\nCREATE UNIQUE INDEX IF NOT EXISTS idx_facts_fingerprint\n  ON facts(content, created_at, COALESCE(session_id, ''), category);\n";
 export declare function runMigrations(db: BetterSqlite3.Database, existingVersion: number): void;
-export declare function enableWalMode(db: BetterSqlite3.Database): void;

package/dist/agent/outcomes/verification-patterns.d.ts

@@ -1,4 +1,5 @@
 export declare const RESULT_TAIL_CHARS = 240;
 export declare const VERIFICATION_PATTERNS: RegExp[];
 export declare function isVerificationCommand(input: string): boolean;
+export declare function buildVerificationResultTail(toolName: string, input: string, rawContent: string, tailPreview?: string[]): string | undefined;
 export declare function parseVerificationSummary(tail: string): 'pass' | 'fail' | null;

package/dist/agent/providers/anthropic-direct/query/prompt-assembly.d.ts

@@ -1,5 +1,6 @@
 import type { AgentConfig } from '../../../types/config-types.js';
 import type { RuntimeStateSource } from '../../../awareness/index.js';
+import type { SkillExecutor } from '../../../tools/skill-executor.js';
 import { type StableSystemParts } from './system-prompt.js';
 export interface PromptAssemblyArgs {
     config: AgentConfig;
@@ -8,7 +9,7 @@ export interface PromptAssemblyArgs {
     readOnlyMemory: boolean;
     readOnlyState?: boolean;
     workspaceEnabled: boolean;
-    hasSkillExecutor: boolean;
+    skillExecutor?: SkillExecutor;
     runtimeStateSource: RuntimeStateSource;
     userSystem: string | null;
 }

package/dist/agent/providers/index.d.ts

@@ -11,6 +11,7 @@ export declare function providerForModel(model: string | undefined, hints?: Prov
 export declare function resolveProvider(model: string | undefined, hints?: ProviderRouteHints, opts?: {
     customTools?: import('../tools/custom-tool.js').CustomToolDef[];
     canUseTool?: import('../types/sdk-types.js').CanUseTool;
+    executors?: import('../session/session-executors.js').ProviderExecutorOpts;
 }): ModelProvider;
 export { anthropicDirectProvider };
 export { AnthropicDirectProvider } from './anthropic-direct/index.js';

package/dist/agent/providers/openai-compatible/index.d.ts

@@ -1,35 +1,6 @@
 import type { ModelProvider, ProviderQuery, ProviderQueryArgs, ProviderCompleteArgs } from '../../provider.js';
-import type { HookRegistry } from '../../hooks.js';
-import type { SubagentExecutor } from '../../tools/subagent-executor.js';
-import type { SkillExecutor } from '../../tools/skill-executor.js';
-import type { ComposeExecutor } from '../../tools/compose-executor.js';
-import type { ToolPermissionConfig } from '../../tools/permissions.js';
-import type { CanUseTool } from '../../types/sdk-types.js';
-import type { ToolDispatcher } from '../anthropic-direct/tool-dispatcher.js';
-import { MemoryStore } from '../../memory/index.js';
-import { WorkspaceStore } from '../../workspace/index.js';
-import { StateStore } from '../../state/state-store.js';
-import { type ChildSessionOptions } from './index.child-session.js';
-export interface OpenAICompatibleProviderOptions extends ChildSessionOptions {
-    baseURL?: string;
-    defaultHeaders?: Record<string, string>;
-    hookRegistry?: HookRegistry;
-    permissions?: ToolPermissionConfig;
-    canUseTool?: CanUseTool;
-    subagentExecutor?: SubagentExecutor;
-    skillExecutor?: SkillExecutor;
-    composeExecutor?: ComposeExecutor;
-    memoryStore?: MemoryStore;
-    workspaceStore?: WorkspaceStore;
-    stateStore?: StateStore;
-    surface?: string;
-    readOnlyMemory?: boolean;
-    readOnlyBash?: boolean;
-    tools?: ToolDispatcher;
-    mcpManager?: import('../../mcp/index.js').McpManager;
-    customTools?: import('../../tools/custom-tool.js').CustomToolDef[];
-    fastModeController?: import('../../fast-mode.js').FastModeController;
-}
+import { type OpenAICompatibleProviderOptions } from './index.options.js';
+export type { OpenAICompatibleProviderOptions } from './index.options.js';
 export declare class OpenAICompatibleProvider implements ModelProvider {
     readonly name = "openai-compatible";
     private readonly providerOpts;

package/dist/agent/providers/openai-compatible/index.options.d.ts

@@ -0,0 +1,31 @@
+import type { HookRegistry } from '../../hooks.js';
+import type { SubagentExecutor } from '../../tools/subagent-executor.js';
+import type { SkillExecutor } from '../../tools/skill-executor.js';
+import type { ComposeExecutor } from '../../tools/compose-executor.js';
+import type { ToolPermissionConfig } from '../../tools/permissions.js';
+import type { CanUseTool } from '../../types/sdk-types.js';
+import type { ToolDispatcher } from '../anthropic-direct/tool-dispatcher.js';
+import { MemoryStore } from '../../memory/index.js';
+import { WorkspaceStore } from '../../workspace/index.js';
+import { StateStore } from '../../state/state-store.js';
+import type { ChildSessionOptions } from './index.child-session.js';
+export interface OpenAICompatibleProviderOptions extends ChildSessionOptions {
+    baseURL?: string;
+    defaultHeaders?: Record<string, string>;
+    hookRegistry?: HookRegistry;
+    permissions?: ToolPermissionConfig;
+    canUseTool?: CanUseTool;
+    subagentExecutor?: SubagentExecutor;
+    skillExecutor?: SkillExecutor;
+    composeExecutor?: ComposeExecutor;
+    memoryStore?: MemoryStore;
+    workspaceStore?: WorkspaceStore;
+    stateStore?: StateStore;
+    surface?: string;
+    readOnlyMemory?: boolean;
+    readOnlyBash?: boolean;
+    tools?: ToolDispatcher;
+    mcpManager?: import('../../mcp/index.js').McpManager;
+    customTools?: import('../../tools/custom-tool.js').CustomToolDef[];
+    fastModeController?: import('../../fast-mode.js').FastModeController;
+}

package/dist/agent/providers/openai-compatible/system-prompt-wiring.d.ts

@@ -1,8 +1,9 @@
 import type { AgentConfig } from '../../types/config-types.js';
 import type { RuntimeStateSource } from '../../awareness/index.js';
+import type { SkillExecutor } from '../../tools/skill-executor.js';
 export interface SystemPromptWiringArgs {
     config: AgentConfig;
-    hasSkillExecutor: boolean;
+    skillExecutor?: SkillExecutor;
     hasWorkspaceStore: boolean;
     readOnlyMemory: boolean | undefined;
     readOnlyState: boolean | undefined;

package/dist/agent/providers/shared/supported-commands.d.ts

@@ -1,2 +1,7 @@
 import type { ProviderCommandInfo } from '../../provider.js';
-export declare function collectSupportedCommands(): Promise<ProviderCommandInfo[]>;
+import type { SdkPluginConfig } from '../../types/sdk-types.js';
+export interface SupportedCommandsScope {
+    pluginConfigs?: SdkPluginConfig[];
+    skillAllowlist?: readonly string[];
+}
+export declare function collectSupportedCommands(scope?: SupportedCommandsScope): Promise<ProviderCommandInfo[]>;

package/dist/agent/providers/shared/transient-retry.d.ts

@@ -16,5 +16,6 @@ export interface TransientRetryOpts {
     onExhausted?: (info: RetryInfo) => void;
     sleep?: (ms: number, signal: AbortSignal) => Promise<void>;
 }
+export declare function isTransientOauthOrg403(err: unknown): boolean;
 export declare function isTransientError(err: unknown): boolean;
 export declare function withTransientRetry<T>(attempt: () => Promise<T>, opts?: TransientRetryOpts): Promise<T>;

package/dist/agent/providers/xai/oauth-http.d.ts

@@ -20,4 +20,5 @@ export declare function safeText(res: Response): Promise<string>;
 export declare function clearOidcCache(): void;
 export declare function discoverXaiOidc(deps?: OAuthHttpDeps): Promise<XaiOidcDiscovery>;
 export declare function discoverXaiOidcCached(deps?: OAuthHttpDeps): Promise<XaiOidcDiscovery>;
+export declare function postOAuthForm(url: string, params: Record<string, string>, errPrefix: string, fetchFn?: FetchFn): Promise<Record<string, unknown>>;
 export declare function tokenResponseToBundle(json: Record<string, unknown>, nowSeconds?: () => number, fallbackRefresh?: string): XaiTokenBundle | null;

package/dist/agent/session/agent-session.executors.d.ts

@@ -0,0 +1,12 @@
+import type { AgentConfig } from '../types.js';
+import type { SessionExecutorsBindTarget } from './session-executors.js';
+import type { AccountingAccumulator } from './accounting-accumulator.js';
+export declare function bindSessionExecutors(config: AgentConfig, session: SessionExecutorsBindTarget): void;
+type SubagentUsage = {
+    inputTokens?: number;
+    outputTokens?: number;
+    cacheReadTokens?: number;
+    cacheCreationTokens?: number;
+};
+export declare function recordSubagentCompletionInTree(accounting: AccountingAccumulator, config: AgentConfig, abortController: AbortController, usage: SubagentUsage | undefined, costUsd: number | undefined): void;
+export {};

package/dist/agent/session/create-wired-executors.d.ts

@@ -0,0 +1,20 @@
+import { type SessionExecutors } from './session-executors.js';
+import type { AgentConfig } from '../types.js';
+import type { HookRegistry } from '../hooks.js';
+import type { SdkPluginConfig } from '../types/sdk-types.js';
+import type { TraceSink } from '../trace/writer.js';
+export interface CreateWiredExecutorsOptions {
+    agent?: boolean;
+    skill?: boolean | readonly string[];
+    compose?: boolean;
+    pluginConfigs?: SdkPluginConfig[];
+    hookRegistry?: HookRegistry;
+    unattended?: boolean;
+    warn?: (msg: string) => void;
+    traceWriter?: TraceSink;
+}
+export interface CreatedWiredExecutors {
+    executors: SessionExecutors;
+    dispose(): Promise<void>;
+}
+export declare function createWiredExecutors(config: AgentConfig, opts?: CreateWiredExecutorsOptions): CreatedWiredExecutors;

package/dist/agent/session/default-subagent-model.d.ts

@@ -0,0 +1,2 @@
+import type { AgentModelInput } from '../types.js';
+export declare function getDefaultSubagentModel(parentModel?: AgentModelInput): AgentModelInput;

package/dist/agent/session/deferred-parent-proxy.d.ts

@@ -0,0 +1,7 @@
+import type { AgentSession } from './agent-session.js';
+import type { SubagentExecutorContext } from '../tools/subagent-executor.js';
+export interface DeferredParentProxy {
+    proxy: SubagentExecutorContext['parentSession'];
+    bind: (session: AgentSession) => void;
+}
+export declare function makeDeferredParentProxy(): DeferredParentProxy;

package/dist/agent/session/sdk-surface-warning.d.ts

@@ -1,3 +1,10 @@
+import type { AgentConfig } from '../types.js';
 import type { SessionMetadata } from '../types/session-types.js';
+export declare function resolveSurfaceInputs(config: Pick<AgentConfig, 'executors' | 'provider' | 'providerFactory' | 'isSubagentFork' | 'parentSessionId'>, metadata: Pick<SessionMetadata, 'skills' | 'tools'>): {
+    skills: string[];
+    tools: string[];
+};
+export declare function warnReducedSurfaceOnTurn(config: Parameters<typeof resolveSurfaceInputs>[0]): void;
+export declare function resetReducedSurfaceWarningForTests(): void;
 export declare function isReducedToolSurface(metadata: Pick<SessionMetadata, 'skills' | 'tools'>): boolean;
 export declare function emitReducedSurfaceWarning(metadata: Pick<SessionMetadata, 'skills' | 'tools'>): void;

package/dist/agent/session/session-executors.d.ts

@@ -0,0 +1,32 @@
+import type { SubagentExecutor } from '../tools/subagent-executor.js';
+import type { SkillExecutor } from '../tools/skill-executor.js';
+import type { ComposeExecutor } from '../tools/compose-executor.js';
+import type { HookRegistry } from '../hooks.js';
+import type { MessageJournal } from '../journal/index.js';
+import type { InputStreamRef } from '../types/permission-types.js';
+export interface SessionExecutorsBindTarget {
+    readonly sessionId: string | undefined;
+    readonly abortSignal: AbortSignal;
+    readonly hookRegistry: HookRegistry | undefined;
+    readonly messageJournal: MessageJournal | undefined;
+    getInputStreamRef(): Pick<InputStreamRef, 'pushUserMessage' | 'queueFrameworkContext'>;
+    recordSubagentCompletion(usage?: {
+        inputTokens?: number;
+        outputTokens?: number;
+        cacheReadTokens?: number;
+        cacheCreationTokens?: number;
+    }, costUsd?: number): void;
+}
+export interface SessionExecutors {
+    readonly subagentExecutor?: SubagentExecutor;
+    readonly skillExecutor?: SkillExecutor;
+    readonly composeExecutor?: ComposeExecutor;
+    bind(session: SessionExecutorsBindTarget): void;
+    drain(reason: string): Promise<unknown>;
+}
+export type ProviderExecutorOpts = Pick<SessionExecutors, 'subagentExecutor' | 'skillExecutor' | 'composeExecutor'>;
+export declare function providerExecutorOpts(executors: ProviderExecutorOpts | undefined): ProviderExecutorOpts;
+export declare function createSessionBindSlot(): {
+    bind(session: SessionExecutorsBindTarget): void;
+    get(): SessionExecutorsBindTarget | undefined;
+};

package/dist/agent/session/wire-executors.d.ts

@@ -8,6 +8,8 @@ import type { TraceSink } from '../trace/writer.js';
 import type { Surface } from '../awareness/types.js';
 import type { AgentModelInput } from '../types.js';
 import type { WorkspaceStore } from '../workspace/index.js';
+import type { SdkPluginConfig } from '../types/sdk-types.js';
+import type { HookRegistry } from '../hooks.js';
 export interface WireExecutorsOptions {
     surface: Surface;
     parentSession: SubagentExecutorContext['parentSession'];
@@ -31,6 +33,9 @@ export interface WireExecutorsOptions {
     agentRegistryWarn?: (message: string) => void;
     workspaceStore?: WorkspaceStore;
     sessionLabel?: string;
+    pluginConfigs?: SdkPluginConfig[];
+    skillAllowlist?: readonly string[];
+    hookRegistry?: HookRegistry;
 }
 export interface WiredExecutors {
     rootManager: SubagentManager;

package/dist/agent/session/wire-executors.scope.d.ts

@@ -0,0 +1,10 @@
+import type { HookRegistry } from '../hooks.js';
+import type { SdkPluginConfig } from '../types/sdk-types.js';
+interface ScopeOptions {
+    pluginConfigs?: SdkPluginConfig[];
+    skillAllowlist?: readonly string[];
+    hookRegistry?: HookRegistry;
+}
+export declare function hookRegistryOpt(opts: Pick<ScopeOptions, 'hookRegistry'>): Pick<ScopeOptions, 'hookRegistry'>;
+export declare function skillScopeOpts(opts: ScopeOptions): ScopeOptions;
+export {};

package/dist/agent/subagent.abort-wiring.d.ts

@@ -0,0 +1 @@
+export declare function wireParentAbortSignal(parentSignal: AbortSignal, rootController: AbortController): void;

package/dist/agent/subagent.drain.d.ts

@@ -0,0 +1,11 @@
+import type { AbortOrigin } from './trace/index.js';
+import type { AbortGraph } from './abort-graph.js';
+import { SUBAGENT_DRAIN_TIMEOUT_MS } from './subagent/constants.js';
+export interface DrainHandle {
+    cancel(): Promise<void>;
+}
+export declare function abortAllAndDrainImpl(active: ReadonlyMap<string, DrainHandle>, abortGraph: AbortGraph, rootId: string, reason: unknown, origin: AbortOrigin, timeoutMs: number, rearm: boolean, doRearm: () => void): Promise<{
+    drained: number;
+    timedOut: boolean;
+}>;
+export { SUBAGENT_DRAIN_TIMEOUT_MS };

package/dist/agent/tools/compose-executor.context.d.ts

@@ -0,0 +1,29 @@
+import type { AgentModelInput, IAgentSession } from '../types.js';
+import type { Surface } from '../awareness/types.js';
+import type { WorkspaceStore } from '../workspace/index.js';
+import type { TraceSink } from '../trace/index.js';
+import type { ReadScopeInputs } from '../subagent-read-scope.js';
+import type { AgentRegistry } from '../agents/index.js';
+import type { InboundAttachmentReader } from '../content/attachment-registry.js';
+export interface ComposeExecutorContext {
+    parentSession: Pick<IAgentSession, 'sessionId' | 'abortSignal'> & import('../subagent/fork-types.js').JournalParent;
+    defaultModel?: AgentModelInput;
+    defaultSubagentModel: AgentModelInput;
+    apiKey?: string;
+    resolveApiKeyForModel?: (model: string) => string | undefined;
+    baseUrl?: string;
+    openaiBaseUrl?: string;
+    systemPrompt: string;
+    cwd?: string;
+    traceWriter?: TraceSink;
+    surface?: Surface;
+    depth?: number;
+    maxDepth?: number;
+    getReadScopeInputs?: () => ReadScopeInputs;
+    workspaceStore?: WorkspaceStore;
+    agentRegistry?: AgentRegistry;
+    delegationBudget?: import('./delegation-budget.js').DelegationBudget;
+    inboundAttachmentRegistry?: InboundAttachmentReader;
+    onSubagentSucceeded?: (usage: import('../subagent/result.js').SubagentTrace['usage'], costUsd: number | undefined) => void;
+    credentialModel?: AgentModelInput;
+}

package/dist/agent/tools/compose-executor.d.ts

@@ -1,36 +1,10 @@
-import { type ReadScopeInputs } from '../subagent-read-scope.js';
-import type { AgentModelInput, IAgentSession } from '../types.js';
-import type { Surface } from '../awareness/types.js';
-import type { WorkspaceStore } from '../workspace/index.js';
 import type { TraceSink } from '../trace/index.js';
 import type { ToolCall, ToolResult } from './types.js';
+import { type ComposeExecutorContext } from './compose-executor.context.js';
+export type { ComposeExecutorContext } from './compose-executor.context.js';
 import { cleanupComposeSpills } from './compose-executor.format.js';
 export { cleanupComposeSpills };
-import type { InboundAttachmentReader } from '../content/attachment-registry.js';
-import type { AgentRegistry } from '../agents/index.js';
 import type { DetachableToolRegistry } from './detach-registry.js';
-export interface ComposeExecutorContext {
-    parentSession: Pick<IAgentSession, 'sessionId' | 'abortSignal'> & import('../subagent/fork-types.js').JournalParent;
-    defaultModel?: AgentModelInput;
-    defaultSubagentModel: AgentModelInput;
-    apiKey?: string;
-    resolveApiKeyForModel?: (model: string) => string | undefined;
-    baseUrl?: string;
-    openaiBaseUrl?: string;
-    systemPrompt: string;
-    cwd?: string;
-    traceWriter?: TraceSink;
-    surface?: Surface;
-    depth?: number;
-    maxDepth?: number;
-    getReadScopeInputs?: () => ReadScopeInputs;
-    workspaceStore?: WorkspaceStore;
-    agentRegistry?: AgentRegistry;
-    delegationBudget?: import('./delegation-budget.js').DelegationBudget;
-    inboundAttachmentRegistry?: InboundAttachmentReader;
-    onSubagentSucceeded?: (usage: import('../subagent/result.js').SubagentTrace['usage'], costUsd: number | undefined) => void;
-    credentialModel?: AgentModelInput;
-}
 export declare class ComposeExecutor {
     private readonly ctx;
     private currentCwd;

package/dist/agent/tools/compose-executor.wave-manifest.d.ts

@@ -0,0 +1,14 @@
+import type { ComposeInput } from './compose-input-parse.js';
+import type { AgentModelInput } from '../types.js';
+import type { AgentRegistry } from '../agents/index.js';
+export interface BuildComposeWaveManifestArgs {
+    parsed: ComposeInput;
+    dagNodeCount: number;
+    depth: number | undefined;
+    currentCwd: string | undefined;
+    defaultModel: AgentModelInput | undefined;
+    defaultSubagentModel: AgentModelInput;
+    parentSessionId: string | undefined;
+    agentRegistry: AgentRegistry | undefined;
+}
+export declare function buildComposeWaveManifest(args: BuildComposeWaveManifestArgs): string | undefined;

package/dist/agent/tools/nesting.d.ts

@@ -10,6 +10,8 @@ import type { SubagentExecutor } from './subagent-executor.js';
 import type { TraceSink } from '../trace/index.js';
 import type { BackgroundAgentRegistry } from '../background-registry.js';
 import type { AgentRegistry } from '../agents/types.js';
+import type { SdkPluginConfig } from '../types/sdk-types.js';
+import type { HookRegistry } from '../hooks.js';
 export declare const DEFAULT_MAX_NESTING_DEPTH = 3;
 export declare const MAX_NESTING_DEPTH_CEILING = 6;
 export declare function resolveMaxNestingDepth(): number;
@@ -39,7 +41,7 @@ export interface BuildComposeNodeProviderOpts {
     canUseTool?: CanUseTool;
 }
 export declare function buildComposeNodeProvider(model: AgentModelInput | undefined, workspaceStore: WorkspaceStore | undefined, opts?: BuildComposeNodeProviderOpts): ModelProvider;
-export declare function createChildSkillExecutorFactory(defaultModel: AgentModelInput, apiKey: string | undefined, childProviderFactory: (args: ChildProviderFactoryArgs) => ModelProvider, baseUrl?: string, traceWriter?: TraceSink, backgroundRegistry?: BackgroundAgentRegistry, cwd?: string, resolveApiKeyForModel?: (model: string) => string | undefined, surface?: Surface, defaultSubagentModel?: AgentModelInput, agentRegistry?: AgentRegistry, openaiBaseUrl?: string, xaiBaseUrl?: string, workspaceStore?: WorkspaceStore, delegationBudget?: import('./delegation-budget.js').DelegationBudget): (depth: number, maxDepth: number, signal: AbortSignal, inheritedCwd?: string, inheritedReadScope?: ReadScopeInputs, skillDispatchName?: string, journalParent?: JournalParent, rootSessionId?: string) => SkillExecutor;
+export declare function createChildSkillExecutorFactory(defaultModel: AgentModelInput, apiKey: string | undefined, childProviderFactory: (args: ChildProviderFactoryArgs) => ModelProvider, baseUrl?: string, traceWriter?: TraceSink, backgroundRegistry?: BackgroundAgentRegistry, cwd?: string, resolveApiKeyForModel?: (model: string) => string | undefined, surface?: Surface, defaultSubagentModel?: AgentModelInput, agentRegistry?: AgentRegistry, openaiBaseUrl?: string, xaiBaseUrl?: string, workspaceStore?: WorkspaceStore, delegationBudget?: import('./delegation-budget.js').DelegationBudget, pluginConfigs?: SdkPluginConfig[], skillAllowlist?: readonly string[], hookRegistry?: HookRegistry): (depth: number, maxDepth: number, signal: AbortSignal, inheritedCwd?: string, inheritedReadScope?: ReadScopeInputs, skillDispatchName?: string, journalParent?: JournalParent, rootSessionId?: string) => SkillExecutor;
 export type PhaseRole = 'read-only' | 'read-write';
 export declare function buildSkillRestrictedProvider(allowedTools: string[], model: AgentModelInput | undefined, readOnlyBash?: boolean, openaiBaseUrl?: string, workspaceStore?: WorkspaceStore): ModelProvider;
 export declare function buildPhaseRestrictedProvider(_role: 'read-only', model: AgentModelInput | undefined): ModelProvider;

package/dist/agent/tools/skill-bridge.d.ts

@@ -17,6 +17,8 @@ export interface CollectSkillEntriesOptions {
 }
 export interface BuildSkillManifestOptions extends CollectSkillEntriesOptions {
     excludeName?: string;
+    pluginConfigs?: SdkPluginConfig[];
+    skillAllowlist?: readonly string[];
 }
 export declare function collectSkillEntries(pluginConfigs?: SdkPluginConfig[], opts?: CollectSkillEntriesOptions): SkillManifestEntry[];
 export interface PluginSkillBody {

package/dist/agent/tools/skill-executor/allowlist.d.ts

@@ -0,0 +1,2 @@
+import type { ToolResult } from '../types.js';
+export declare function skillAllowlistRefusal(allowlist: readonly string[] | undefined, name: string): ToolResult | undefined;

package/dist/agent/tools/skill-executor/types.d.ts

@@ -3,6 +3,7 @@ import type { ModelProvider } from '../../provider.js';
 import type { TraceSink } from '../../trace/index.js';
 import type { BackgroundAgentRegistry } from '../../background-registry.js';
 import type { SdkPluginConfig } from '../../types/sdk-types.js';
+import type { HookRegistry } from '../../hooks.js';
 import type { ChildProviderFactoryArgs } from '../nesting.js';
 import type { Surface } from '../../awareness/types.js';
 import type { ReadScopeInputs } from '../../subagent-read-scope.js';
@@ -19,6 +20,8 @@ export interface SkillExecutorContext {
     openaiBaseUrl?: string;
     xaiBaseUrl?: string;
     pluginConfigs?: SdkPluginConfig[];
+    skillAllowlist?: readonly string[];
+    hookRegistry?: HookRegistry;
     depth?: number;
     maxDepth?: number;
     childProviderFactory?: (args: ChildProviderFactoryArgs) => ModelProvider;

package/dist/agent/tools/skill-executor.d.ts

@@ -1,6 +1,7 @@
 import type { ToolCall, ToolResult } from './types.js';
 import type { TraceSink } from '../trace/index.js';
 import type { SkillExecutorContext } from './skill-executor/types.js';
+import type { SdkPluginConfig } from '../types/sdk-types.js';
 export type { SkillExecutorContext } from './skill-executor/types.js';
 export declare class SkillExecutor {
     private readonly ctx;
@@ -8,6 +9,10 @@ export declare class SkillExecutor {
     private currentCwd;
     constructor(ctx: SkillExecutorContext);
     setCwd(cwd: string): void;
+    getManifestScope(): {
+        pluginConfigs?: SdkPluginConfig[];
+        skillAllowlist?: readonly string[];
+    };
     setTraceWriter(writer: TraceSink | undefined): void;
     private internals;
     execute(call: ToolCall): Promise<ToolResult>;