noumen 0.6.0 → 0.8.0

package/dist/index.d.ts

@@ -1,25 +1,15 @@
-import { a as AutoTitleConfig, A as Agent, S as SkillDefinition, T as ThreadConfig, b as SessionStorage, C as ContextFile, P as ProjectContextConfig, c as ContextScope, R as RetryConfig, d as RetryContext, e as RetryEngineOptions, f as Span, g as SpanAttributeValue, h as SpanStatusCode, i as Tracer, j as SpanOptions, k as StoredCostState } from './agent-DWE4_P5X.js';
-export { l as AgentOptions, m as AutoCompactConfig, n as AutoCompactTrackingState, B as BudgetState, o as CLEARED_PLACEHOLDER, p as COMPACTABLE_TOOLS, q as ContentReplacementState, r as CostTracker, D as DEFAULT_AUTO_TITLE_MAX_INPUT_CHARS, s as DEFAULT_AUTO_TITLE_SYSTEM_PROMPT, t as DEFAULT_MODELS, u as DEFAULT_RETRY_CONFIG, v as DiagnoseCheckResult, w as DiagnoseResult, G as GenerateAutoTitleOptions, M as MicrocompactConfig, x as MicrocompactResult, y as ProviderName, z as ReactiveCompactConfig, E as ReactiveCompactResult, F as ResolveProviderOptions, H as RetryEvent, I as RunCallbacks, J as RunResult, K as SUPPORTED_PROVIDERS, L as SnipConfig, N as SnipResult, O as Thread, Q as ThreadOptions, U as ToolResultBudgetConfig, V as ToolResultBudgetResult, W as ToolResultReplacementRecord, X as ToolResultSpillResult, Y as ToolResultStorageConfig, Z as TracingConfig, _ as WebSearchConfig, $ as WebSearchResult, a0 as applyPersistedReplacements, a1 as applySnipRemovals, a2 as canAutoCompact, a3 as createAutoCompactConfig, a4 as createAutoCompactTracking, a5 as createBudgetState, a6 as createContentReplacementState, a7 as createWebSearchTool, a8 as detectProvider, a9 as enforceToolResultBudget, aa as enforceToolResultStorageBudget, ab as extractTitleFromResponse, ac as extractTitleSeedText, ad as generateAutoTitle, ae as microcompactMessages, af as normalizeTitle, ag as persistToolResult, ah as projectSnippedView, ai as reconstructContentReplacementState, aj as recordAutoCompactFailure, ak as recordAutoCompactSuccess, al as resolveProvider, am as shouldAutoCompact, an as snipMessagesByUuids, ao as tryReactiveCompact, ap as webSearchToolPlaceholder } from './agent-DWE4_P5X.js';
-import { A as AIProvider, T as ToolDefinition, o as ToolCallContent, S as StreamEvent, e as ContentPart, b as ChatMessage, k as ChatCompletionUsage, M as ModelPricing, h as UsageRecord, a as ChatStreamChunk, p as MemoryProvider, q as MemoryEntry, l as ThinkingConfig, r as AssistantMessage, s as ToolResultMessage, d as FileCheckpointSnapshot, t as ToolResultOverflowEntry, f as ContentReplacementRecord, J as JsonSchemaOutputFormat } from './types-kiGBF35b.js';
-export { u as AiTitleEntry, C as ChatParams, v as ChatStreamChoice, w as ChatStreamDelta, x as ChatStreamError, c as CheckpointConfig, y as CompactBoundaryEntry, z as ContentReplacementEntry, i as CostSummary, B as CustomTitleEntry, D as DiffStats, E as Entry, G as FileCheckpointBackup, H as FileCheckpointEntry, F as FileCheckpointState, I as ImageContent, K as ImageUrlContent, L as JsonObjectOutputFormat, m as MemoryConfig, N as MemoryType, P as MessageEntry, Q as MetadataEntry, j as ModelUsageSummary, O as OutputFormat, R as RunOptions, V as SerializedMessage, g as SessionInfo, W as SnipBoundaryEntry, X as SummaryEntry, Y as SystemMessage, Z as TextContent, _ as ToolDefParameterProperty, n as ToolResult, $ as UserMessage, a0 as createCheckpointState } from './types-kiGBF35b.js';
-import { S as Sandbox } from './sandbox-9qeMTNrD.js';
-export { L as LocalSandbox, a as LocalSandboxOptions, b as SandboxConfig, c as SandboxedLocalComputer, d as SandboxedLocalComputerOptions, U as UnsandboxedLocal, e as UnsandboxedLocalOptions } from './sandbox-9qeMTNrD.js';
-import { H as HookDefinition, T as Tool, h as ToolContext, g as ToolResult, l as HookEvent, m as HookInput, P as PostToolUseFailureHookInput, n as PostToolUseFailureHookOutput, o as PostToolUseHookInput, p as PostToolUseHookOutput, q as PreToolUseHookInput, r as PreToolUseHookOutput } from './types-DhXwOQwD.js';
-export { F as FileCheckpointManager, s as FileState, t as FileStateCache, k as FileStateCacheConfig, u as FileWriteHookInput, v as HookOutput, J as JsonSchemaType, b as LspDiagnostic, c as LspLocation, d as LspOperation, L as LspServerConfig, a as LspServerState, f as LspSymbol, M as MemoryUpdateHookInput, w as ModelSwitchHookInput, N as NotificationHookInput, x as PermissionDeniedHookInput, y as PermissionRequestHookInput, R as RetryAttemptHookInput, z as SafeParseResult, A as SessionEndHookInput, B as SessionStartHookInput, S as SubagentConfig, i as SubagentRun, C as SubagentStartHookInput, E as SubagentStopHookInput, G as Task, I as TaskCreateInput, K as TaskStatus, j as TaskStore, O as TaskUpdateInput, Q as ToolParameters, Z as ZodLikeSchema, U as formatZodValidationError, V as registerZodToJsonSchema, W as zodToJsonSchema } from './types-DhXwOQwD.js';
+import { b as AutoTitleConfig, a as Agent, C as CacheControlConfig, S as SkillDefinition, T as ThreadConfig, c as SessionStorage, d as ContextFile, P as ProjectContextConfig, e as ContextScope, R as RetryConfig, f as RetryContext, g as RetryEngineOptions, h as Span, i as SpanAttributeValue, j as SpanStatusCode, k as Tracer, l as SpanOptions, m as StoredCostState } from './agent-D0gl-qYi.js';
+export { A as AgentOptions, n as AutoCompactConfig, o as AutoCompactTrackingState, B as BudgetState, p as CLEARED_PLACEHOLDER, q as COMPACTABLE_TOOLS, r as CacheScope, s as ContentReplacementState, t as CostTracker, D as DEFAULT_AUTO_TITLE_MAX_INPUT_CHARS, u as DEFAULT_AUTO_TITLE_SYSTEM_PROMPT, v as DEFAULT_MODELS, w as DEFAULT_RETRY_CONFIG, x as DiagnoseCheckResult, y as DiagnoseResult, G as GenerateAutoTitleOptions, M as MicrocompactConfig, z as MicrocompactResult, E as ProviderName, F as ReactiveCompactConfig, H as ReactiveCompactResult, I as ResolveProviderOptions, J as RetryEvent, K as RunCallbacks, L as RunResult, N as SUPPORTED_PROVIDERS, O as SnipConfig, Q as SnipResult, U as Thread, V as ThreadOptions, W as ToolResultBudgetConfig, X as ToolResultBudgetResult, Y as ToolResultReplacementRecord, Z as ToolResultSpillResult, _ as ToolResultStorageConfig, $ as TracingConfig, a0 as WebSearchConfig, a1 as WebSearchResult, a2 as applyPersistedReplacements, a3 as applySnipRemovals, a4 as canAutoCompact, a5 as createAutoCompactConfig, a6 as createAutoCompactTracking, a7 as createBudgetState, a8 as createContentReplacementState, a9 as createWebSearchTool, aa as detectProvider, ab as enforceToolResultBudget, ac as enforceToolResultStorageBudget, ad as extractTitleFromResponse, ae as extractTitleSeedText, af as generateAutoTitle, ag as getMessageCacheBreakpointIndex, ah as microcompactMessages, ai as normalizeTitle, aj as persistToolResult, ak as projectSnippedView, al as reconstructContentReplacementState, am as recordAutoCompactFailure, an as recordAutoCompactSuccess, ao as resolveProvider, ap as shouldAutoCompact, aq as snipMessagesByUuids, ar as sortToolDefinitionsForCache, as as tryReactiveCompact, at as webSearchToolPlaceholder } from './agent-D0gl-qYi.js';
+import { A as AIProvider, q as ChatParams, r as ChatStreamChunk, T as ToolDefinition, s as ToolCallContent, S as StreamEvent, l as PermissionHandler, d as ContentPart, e as ChatMessage, k as ChatCompletionUsage, t as PermissionContext, u as PermissionBehavior, v as PermissionRule, w as AutoModeConfig, x as PermissionDecision, y as PermissionUpdate, M as ModelPricing, h as UsageRecord, z as MemoryProvider, B as MemoryEntry, n as ThinkingConfig, G as AssistantMessage, H as ToolResultMessage, a as FileCheckpointSnapshot, I as ToolResultOverflowEntry, f as ContentReplacementRecord, J as JsonSchemaOutputFormat } from './types-DLZNyF5t.js';
+export { K as AiTitleEntry, L as ChatStreamChoice, N as ChatStreamDelta, Q as ChatStreamError, C as CheckpointConfig, V as CompactBoundaryEntry, W as ContentReplacementEntry, i as CostSummary, X as CustomTitleEntry, Y as DenialTrackingConfig, D as DiffStats, E as Entry, Z as FileCheckpointBackup, _ as FileCheckpointEntry, F as FileCheckpointState, $ as ImageContent, a0 as ImageUrlContent, a1 as JsonObjectOutputFormat, o as MemoryConfig, a2 as MemoryType, a3 as MessageEntry, a4 as MetadataEntry, j as ModelUsageSummary, O as OutputFormat, a5 as PermissionAllowResult, a6 as PermissionAskResult, m as PermissionConfig, a7 as PermissionDenyResult, b as PermissionMode, a8 as PermissionPassthroughResult, a9 as PermissionRequest, P as PermissionResponse, c as PermissionResult, aa as PermissionRuleSource, ab as RULE_SOURCE_PRECEDENCE, R as RunOptions, ac as SerializedMessage, g as SessionInfo, ad as SnipBoundaryEntry, ae as SummaryEntry, af as SystemMessage, ag as TextContent, ah as ToolDefParameterProperty, p as ToolResult, ai as UserMessage, aj as createCheckpointState } from './types-DLZNyF5t.js';
+import { S as Sandbox } from './sandbox-DAqQo0Tj.js';
+import { H as HookDefinition, T as Tool, h as ToolContext, g as ToolResult, n as HookEvent, o as HookInput, P as PostToolUseFailureHookInput, p as PostToolUseFailureHookOutput, q as PostToolUseHookInput, r as PostToolUseHookOutput, s as PreToolUseHookInput, t as PreToolUseHookOutput } from './types-BX4ALqoN.js';
+export { u as DEFAULT_DOT_DIRS, j as DotDirConfig, i as DotDirResolver, F as FileCheckpointManager, v as FileState, w as FileStateCache, m as FileStateCacheConfig, x as FileWriteHookInput, y as HookOutput, J as JsonSchemaType, b as LspDiagnostic, c as LspLocation, d as LspOperation, L as LspServerConfig, a as LspServerState, f as LspSymbol, M as MemoryUpdateHookInput, z as ModelSwitchHookInput, N as NotificationHookInput, A as PermissionDeniedHookInput, B as PermissionRequestHookInput, R as RetryAttemptHookInput, C as SafeParseResult, E as SessionEndHookInput, G as SessionStartHookInput, S as SubagentConfig, k as SubagentRun, I as SubagentStartHookInput, K as SubagentStopHookInput, O as Task, Q as TaskCreateInput, U as TaskStatus, l as TaskStore, V as TaskUpdateInput, W as ToolParameters, Z as ZodLikeSchema, X as createDotDirResolver, Y as formatZodValidationError, _ as readAllDotDirs, $ as readFirstDotDir, a0 as registerZodToJsonSchema, a1 as zodToJsonSchema } from './types-BX4ALqoN.js';
 import { M as McpServerConfig } from './types-2kTLUCnD.js';
 export { b as McpConfig, c as McpConnection, d as McpHttpServerConfig, e as McpOAuthConfig, f as McpSseServerConfig, g as McpStdioServerConfig, h as McpToolInfo, i as McpWebSocketServerConfig, a as OAuthProviderOptions, O as OAuthTokenData, T as TokenStorage } from './types-2kTLUCnD.js';
-export { OpenAIProviderOptions } from './providers/openai.js';
-export { AnthropicProviderOptions } from './providers/anthropic.js';
-export { GeminiProviderOptions } from './providers/gemini.js';
-export { OpenRouterProviderOptions } from './providers/openrouter.js';
-export { BedrockAnthropicProviderOptions } from './providers/bedrock.js';
-export { VertexAnthropicProviderOptions } from './providers/vertex.js';
-export { OllamaProviderOptions } from './providers/ollama.js';
-import { a as VirtualFs, R as ReadOptions, F as FileEntry, b as FileStat, V as VirtualComputer, E as ExecOptions, C as CommandResult } from './computer-BPdxSo6X.js';
-import { c as PermissionHandler, e as PermissionContext, f as PermissionBehavior, g as PermissionRule, A as AutoModeConfig, h as PermissionDecision, i as PermissionUpdate } from './types-CD0rUKKT.js';
-export { D as DenialTrackingConfig, j as PermissionAllowResult, k as PermissionAskResult, d as PermissionConfig, l as PermissionDenyResult, a as PermissionMode, m as PermissionPassthroughResult, n as PermissionRequest, P as PermissionResponse, b as PermissionResult, o as PermissionRuleSource, R as RULE_SOURCE_PRECEDENCE } from './types-CD0rUKKT.js';
-export { a as McpClientManagerOptions, b as McpServerOptions, c as buildMcpToolName, g as getMcpPrefix, n as normalizeNameForMCP, p as parseMcpToolName } from './server-BzNGKTP6.js';
-export { C as CacheControlConfig, a as CacheScope, g as getMessageCacheBreakpointIndex, s as sortToolDefinitionsForCache } from './cache-BlBwXXPS.js';
+import { a as VirtualComputer, V as VirtualFs } from './computer-DzMR92tK.js';
+export { C as CommandResult, E as ExecOptions, F as FileEntry, b as FileStat, R as ReadOptions } from './computer-DzMR92tK.js';
+export { a as McpClientManagerOptions, b as McpServerOptions, c as buildMcpToolName, g as getMcpPrefix, n as normalizeNameForMCP, p as parseMcpToolName } from './server-DFXdlqyX.js';
 export { JsonRpcErrorObject, JsonRpcMessage, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse } from './jsonrpc/index.js';
 export { b as AcpCapabilities, c as AcpInitializeParams, d as AcpInitializeResult, A as AcpTransport } from './types-QwfylltH.js';
 export { e as A2AArtifact, M as A2AMessage, P as A2APart, b as A2ATask, g as A2ATaskStatus, a as AgentCard, A as AgentSkill } from './types-NIyVwQ4h.js';
@@ -28,14 +18,28 @@ export { OAuthClientProvider, OAuthDiscoveryState } from '@modelcontextprotocol/
 import '@modelcontextprotocol/sdk/client/index.js';
 
 interface PresetOptions {
-    /** The AI provider instance (e.g. `new OpenAIProvider({ apiKey })`) */
+    /** The AI provider instance (e.g. `new AiSdkProvider({ model })`) */
     provider: AIProvider;
-    /** Working directory for the sandbox. Defaults to `process.cwd()`. */
+    /** Working directory for path resolution. Defaults to `process.cwd()`. */
     cwd?: string;
     /** Model name override. Each preset has a sensible default. */
     model?: string;
-    /** Custom sandbox. Defaults to `UnsandboxedLocal({ cwd })`. */
-    sandbox?: Sandbox;
+    /**
+     * Sandbox providing filesystem + shell execution. Required — the root
+     * barrel deliberately doesn't pull in a default implementation, so
+     * callers must pick a backend explicitly:
+     *
+     * - `import { UnsandboxedLocal } from "noumen/unsandboxed"` — raw host access.
+     * - `import { LocalSandbox }     from "noumen/local"`       — OS-level sandboxing.
+     * - `import { DockerSandbox }    from "noumen/docker"`
+     * - `import { E2BSandbox }       from "noumen/e2b"`
+     * - `import { FreestyleSandbox } from "noumen/freestyle"`
+     * - `import { SshSandbox }       from "noumen/ssh"`
+     * - `import { SpritesSandbox }   from "noumen/sprites"`
+     *
+     * You can also pass any `{ fs, computer }` pair for custom sandboxes.
+     */
+    sandbox: Sandbox;
     /** Extra hooks to attach. */
     hooks?: HookDefinition[];
     /** MCP servers to connect to during `init()`. */
@@ -66,56 +70,326 @@ declare function planningAgent(opts: PresetOptions): Agent;
  */
 declare function reviewAgent(opts: PresetOptions): Agent;
 
-interface LocalFsOptions {
-    basePath?: string;
-}
 /**
- * Unsandboxed VirtualFs backed by `node:fs/promises` on the host machine.
- * Paths resolve relative to `basePath`. Suitable for local development and
- * trusted environments. For production or untrusted agents, use a sandboxed
- * implementation like `SpritesFs` (remote container) or a custom
- * Docker/E2B adapter instead.
- */
-declare class LocalFs implements VirtualFs {
-    private basePath;
-    private resolvedBasePath;
-    private realBasePathPromise;
-    constructor(opts?: LocalFsOptions);
-    private getRealBasePath;
-    private resolve;
-    readFile(filePath: string, opts?: ReadOptions): Promise<string>;
-    readFileBytes(filePath: string, maxBytes?: number): Promise<Buffer>;
-    writeFile(filePath: string, content: string): Promise<void>;
-    appendFile(filePath: string, content: string): Promise<void>;
-    deleteFile(filePath: string, opts?: {
-        recursive?: boolean;
-    }): Promise<void>;
-    mkdir(dirPath: string, opts?: {
-        recursive?: boolean;
-    }): Promise<void>;
-    readdir(dirPath: string, opts?: {
-        recursive?: boolean;
-    }): Promise<FileEntry[]>;
-    exists(filePath: string): Promise<boolean>;
-    stat(filePath: string): Promise<FileStat>;
+ * Classification of an AI SDK `LanguageModelV3` by its vendor / wire format.
+ *
+ * We derive the family from the model's `provider` string. Providers
+ * downstream plug additional provider-specific knobs onto
+ * `providerOptions` in different shapes; the request translator uses the
+ * family to decide whether `thinking` becomes Anthropic's
+ * `thinking: { type: "enabled" }`, OpenAI's `reasoningEffort`, or
+ * Gemini-native `thinkingConfig`.
+ */
+type ProviderFamily = 
+/** Anthropic messages API — native or via Bedrock / Vertex / OpenRouter passthrough. */
+"anthropic"
+/** OpenAI chat/completions or Responses; also `google` when routed through a chat/completions proxy. */
+ | "openai"
+/** Google Generative AI native (`@ai-sdk/google`). */
+ | "google"
+/** Unknown vendor — provider-specific options are dropped. */
+ | "unknown";
+
+/**
+ * `ChatParams` -> `LanguageModelV3CallOptions` translation.
+ *
+ * Handles:
+ * - OpenAI-shaped `ChatMessage`s -> AI SDK `LanguageModelV3Prompt`
+ * - Anthropic thinking signature / redacted thinking round-tripping via
+ *   `providerOptions.anthropic` on reasoning parts
+ * - Anthropic cache breakpoints on tools + messages (honors `skipCacheWrite`)
+ * - `thinking` / `reasoningEffort` mapped to the right
+ *   `providerOptions.{anthropic,openai,google}` shape per provider family
+ * - Tool definitions with `fixTypelessProperties` to satisfy OpenAI's
+ *   strict JSON Schema validator
+ */
+
+/**
+ * Minimal subset of `LanguageModelV3CallOptions` that we produce. We avoid
+ * importing `@ai-sdk/provider` types at the module level so mock language
+ * models in tests don't need to ship the full generic type surface; the
+ * returned object is structurally compatible.
+ */
+interface TranslatedCallOptions {
+    prompt: AiSdkMessage[];
+    maxOutputTokens?: number;
+    temperature?: number;
+    abortSignal?: AbortSignal;
+    tools?: AiSdkTool[];
+    toolChoice?: {
+        type: "auto";
+    };
+    responseFormat?: {
+        type: "text";
+    } | {
+        type: "json";
+        schema?: Record<string, unknown>;
+        name?: string;
+    };
+    providerOptions?: Record<string, Record<string, unknown>>;
+}
+type AiSdkMessage = {
+    role: "system";
+    content: string;
+    providerOptions?: Record<string, Record<string, unknown>>;
+} | {
+    role: "user";
+    content: Array<AiSdkTextPart | AiSdkFilePart>;
+    providerOptions?: Record<string, Record<string, unknown>>;
+} | {
+    role: "assistant";
+    content: Array<AiSdkTextPart | AiSdkReasoningPart | AiSdkToolCallPart>;
+    providerOptions?: Record<string, Record<string, unknown>>;
+} | {
+    role: "tool";
+    content: AiSdkToolResultPart[];
+    providerOptions?: Record<string, Record<string, unknown>>;
+};
+interface AiSdkTextPart {
+    type: "text";
+    text: string;
+    providerOptions?: Record<string, Record<string, unknown>>;
+}
+interface AiSdkFilePart {
+    type: "file";
+    data: string | Uint8Array | URL;
+    mediaType: string;
+    filename?: string;
+    providerOptions?: Record<string, Record<string, unknown>>;
+}
+interface AiSdkReasoningPart {
+    type: "reasoning";
+    text: string;
+    providerOptions?: Record<string, Record<string, unknown>>;
+}
+interface AiSdkToolCallPart {
+    type: "tool-call";
+    toolCallId: string;
+    toolName: string;
+    input: unknown;
+    providerOptions?: Record<string, Record<string, unknown>>;
+}
+interface AiSdkToolResultPart {
+    type: "tool-result";
+    toolCallId: string;
+    toolName: string;
+    output: {
+        type: "text";
+        value: string;
+    } | {
+        type: "json";
+        value: unknown;
+    } | {
+        type: "error-text";
+        value: string;
+    } | {
+        type: "content";
+        value: Array<{
+            type: "text";
+            text: string;
+        } | {
+            type: "image-data";
+            data: string;
+            mediaType: string;
+        } | {
+            type: "image-url";
+            url: string;
+        }>;
+    };
+    providerOptions?: Record<string, Record<string, unknown>>;
+}
+interface AiSdkTool {
+    type: "function";
+    name: string;
+    description?: string;
+    inputSchema: Record<string, unknown>;
+    providerOptions?: Record<string, Record<string, unknown>>;
 }
 
-interface LocalComputerOptions {
-    defaultCwd?: string;
-    defaultTimeout?: number;
+/**
+ * AI SDK v3 stream -> noumen `ChatStreamChunk` translation.
+ *
+ * Consumes a `ReadableStream<LanguageModelV3StreamPart>` produced by any
+ * Vercel AI SDK provider and yields OpenAI-shaped chunks compatible with
+ * the existing noumen pipeline:
+ *
+ *   text-delta       -> choices[0].delta.content
+ *   reasoning-delta  -> choices[0].delta.thinking_content
+ *   reasoning-end    -> choices[0].delta.{thinking_signature,redacted_thinking_data}
+ *                       (reads Anthropic providerMetadata)
+ *   tool-input-*     -> choices[0].delta.tool_calls[].function.arguments (streamed)
+ *   tool-call        -> finalizes the tool-call (applies sanitize + repair)
+ *   finish           -> terminal chunk with finish_reason + usage
+ *   error            -> throws ChatStreamError via mapApiCallError
+ */
+
+type Json = unknown;
+interface StreamPartBase {
+    type: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+    id?: string;
 }
+type AiSdkStreamPart = {
+    type: "stream-start";
+    warnings?: unknown;
+} | {
+    type: "response-metadata";
+    id?: string;
+    modelId?: string;
+    timestamp?: Date;
+} | {
+    type: "text-start";
+    id: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "text-delta";
+    id: string;
+    delta: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "text-end";
+    id: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "reasoning-start";
+    id: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "reasoning-delta";
+    id: string;
+    delta: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "reasoning-end";
+    id: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "tool-input-start";
+    id: string;
+    toolName: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+    providerExecuted?: boolean;
+    dynamic?: boolean;
+} | {
+    type: "tool-input-delta";
+    id: string;
+    delta: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "tool-input-end";
+    id: string;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "tool-call";
+    toolCallId: string;
+    toolName: string;
+    input: string;
+    providerExecuted?: boolean;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "tool-result";
+    toolCallId: string;
+    toolName: string;
+    result: Json;
+    isError?: boolean;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "finish";
+    finishReason: string | {
+        unified: string;
+        raw?: string;
+    };
+    usage: AiSdkUsage;
+    providerMetadata?: Record<string, Record<string, Json>>;
+} | {
+    type: "error";
+    error: unknown;
+} | (StreamPartBase & {
+    [k: string]: unknown;
+});
+/** Unified usage shape covering both V2 (flat) and V3 (nested). */
+type AiSdkUsage = {
+    inputTokens?: number;
+    outputTokens?: number;
+    totalTokens?: number;
+    reasoningTokens?: number;
+    cachedInputTokens?: number;
+} | {
+    inputTokens: {
+        total?: number;
+        noCache?: number;
+        cacheRead?: number;
+        cacheWrite?: number;
+    };
+    outputTokens: {
+        total?: number;
+        text?: number;
+        reasoning?: number;
+    };
+    raw?: Record<string, Json>;
+};
+
+/**
+ * `AiSdkProvider` — single noumen `AIProvider` implementation that wraps
+ * any Vercel AI SDK `LanguageModelV3` (`@ai-sdk/openai`, `@ai-sdk/anthropic`,
+ * `@ai-sdk/google`, `@openrouter/ai-sdk-provider`, `@ai-sdk/amazon-bedrock`,
+ * `@ai-sdk/google-vertex`, `ollama-ai-provider-v2`, ...).
+ *
+ * Callers construct the vendor SDK model (often via pocketuniverse's metered
+ * `createProvider(...)` factory so traffic flows through `/api/ai/*` with
+ * JWT auth + credit metering) and hand it to `new AiSdkProvider({ model })`.
+ * The noumen pipeline then keeps talking to one uniform `chat()` surface.
+ *
+ * See `/Users/a/mastra/packages/core/src/llm/model/aisdk/v5/model.ts` for
+ * the reference wrapper; we intentionally strip out mastra-specific event
+ * plumbing and keep the surface area to just `AIProvider.chat`.
+ */
+
 /**
- * Unsandboxed VirtualComputer that runs commands directly on the host via
- * `node:child_process`. Suitable for local development and trusted
- * environments. For production or untrusted agents, use a sandboxed
- * implementation like `SpritesComputer` (remote container) or a custom
- * Docker/E2B adapter instead.
- */
-declare class LocalComputer implements VirtualComputer {
-    private defaultCwd;
-    private defaultTimeout;
-    constructor(opts?: LocalComputerOptions);
-    executeCommand(command: string, opts?: ExecOptions): Promise<CommandResult>;
+ * Minimal subset of `LanguageModelV3` we require. Using a structural type
+ * means tests can pass lightweight mocks and we don't have a hard import
+ * dependency on `@ai-sdk/provider` types (peer-only).
+ */
+interface AiSdkLanguageModel {
+    readonly specificationVersion: "v2" | "v3";
+    readonly provider: string;
+    readonly modelId: string;
+    doStream(options: TranslatedCallOptions): Promise<{
+        stream: ReadableStream<AiSdkStreamPart>;
+    }>;
+}
+interface AiSdkProviderOptions {
+    /** The AI SDK language model instance (any v2 or v3 provider). */
+    model: AiSdkLanguageModel;
+    /**
+     * Fallback model id reported by `AIProvider.defaultModel`. When omitted
+     * we use `model.modelId`. `ChatParams.model`, when provided, always
+     * wins at call time because the AI SDK model is already bound to its
+     * id — this field is purely informational for consumers that ask for
+     * a default without wiring in a resolver.
+     */
+    defaultModel?: string;
+    /**
+     * Override the provider family classifier. Use this if you know the
+     * model's vendor more precisely than the string-based heuristic (e.g.
+     * a custom base URL forwards Anthropic traffic but reports
+     * `provider: "openai.chat"`).
+     */
+    providerFamily?: ProviderFamily;
+    /**
+     * Anthropic prompt-cache configuration. No-op when `providerFamily` is
+     * not Anthropic. When enabled, noumen inserts a single cache breakpoint
+     * on the appropriate message position (respects `ChatParams.skipCacheWrite`).
+     */
+    cacheConfig?: CacheControlConfig;
+}
+declare class AiSdkProvider implements AIProvider {
+    readonly defaultModel: string;
+    readonly providerFamily: ProviderFamily;
+    private readonly model;
+    private readonly cacheConfig?;
+    constructor(opts: AiSdkProviderOptions);
+    chat(params: ChatParams): AsyncIterable<ChatStreamChunk>;
 }
 
 /**
@@ -793,9 +1067,14 @@ declare function buildSystemPrompt(opts: {
 }): string;
 
 /**
- * Load project context files from the hierarchical NOUMEN.md / CLAUDE.md
- * convention. Returns files ordered lowest-to-highest priority:
+ * Load project context files from the hierarchical `<NAME>.md` convention.
+ * Returns files ordered lowest-to-highest priority:
  * managed -> user -> project (root first, cwd last) -> local.
+ *
+ * Within each layer, dot-dirs are iterated in config order — so with the
+ * default `['.noumen', '.claude']`, `.noumen` content is loaded first
+ * (lower precedence within the layer) and `.claude` last (higher
+ * precedence within the layer). That matches the historical behavior.
  */
 declare function loadProjectContext(fs: VirtualFs, config: ProjectContextConfig): Promise<ContextFile[]>;
 /**
@@ -1400,4 +1679,4 @@ declare const IMAGE_EXTENSIONS: Set<string>;
  */
 declare function createImageMetadataText(dims: ImageDimensions): string;
 
-export { AIProvider, API_IMAGE_MAX_BASE64_SIZE, Agent, AssistantMessage, AutoModeConfig, AutoTitleConfig, type CacheSafeParams, CannotRetryError, ChatCompletionUsage, ChatMessage, ChatStreamChunk, type ClassifiedError, type ClassifierResult, type CommandClassification, CommandResult, type CompactOptions, type CompressedImageResult, ContentPart, ContentReplacementRecord, ContextFile, ContextScope, DEFAULT_PRICING, type DenialLimits, type DenialState, DenialTracker, ExecOptions, type ExtractMemoriesResult, FileCheckpointSnapshot, FileEntry, FileMemoryProvider, FileStat, type FrontmatterData, type GitOperationEvent, type GitOperationType, HookDefinition, HookEvent, HookInput, IMAGE_EXTENSIONS, IMAGE_MAX_HEIGHT, IMAGE_MAX_WIDTH, type ImageDimensions, InProcessBackend, type IndexTruncation, InvariantViolation, JsonSchemaOutputFormat, LocalComputer, type LocalComputerOptions, LocalFs, type LocalFsOptions, Mailbox, McpServerConfig, MemoryEntry, MemoryProvider, ModelPricing, NoopSpan, NoopTracer, OTelTracer, type ParsedFrontmatter, PermissionBehavior, PermissionContext, PermissionDecision, PermissionHandler, PermissionRule, PermissionUpdate, PostToolUseFailureHookInput, PostToolUseFailureHookOutput, PostToolUseHookInput, PostToolUseHookOutput, PreToolUseHookInput, PreToolUseHookOutput, type PresetOptions, ProjectContextConfig, ReadOptions, type ResizedImage, type ResolvePermissionOptions, type ResumePayload, RetryConfig, RetryContext, RetryEngineOptions, STRUCTURED_OUTPUT_TOOL_NAME, Sandbox, type SanitizeResult, SessionStorage, type ShellSafetyConfig, SkillDefinition, Span, SpanAttributeValue, SpanOptions, SpanStatusCode, StoredCostState, StreamEvent, type StreamingExecResult, StreamingToolExecutor, type StreamingToolExecutorFn, type SwarmBackend, type SwarmConfig, type SwarmEvents, SwarmManager, type SwarmMember, type SwarmMemberConfig, type SwarmMemberStatus, type SwarmMessage, type SwarmStatus, TOOL_SEARCH_NAME, ThinkingConfig, ThreadConfig, Tool, ToolCallContent, type ToolCallExecResult, type ToolCallExecutor, ToolResult as ToolCallResult, ToolContext, ToolDefinition, ToolRegistry, ToolResultMessage, ToolResultOverflowEntry, type ToolWithDeferral, Tracer, type TurnInterruption, UsageRecord, type UserInputHandler, VirtualComputer, VirtualFs, type WorktreeInfo, activateContextForPaths, activateSkillsForPaths, agentTool, all, applyPermissionUpdate, applyPermissionUpdates, askUserTool, assertValidMessageSequence, bashTool, buildExtractionPrompt, buildMemorySystemPromptSection, buildProjectContextSection, buildSystemPrompt, calculateCost, classifyCommand, classifyError, classifyPermission, codingAgent, commandWritesGitInternals, compactConversation, compressImageBufferWithTokenLimit, contentMatchesRule, contentToString, countOccurrences, createCacheSafeParams, createImageMetadataText, createSkillTool, createStructuredOutputTool, createToolSearchTool, createWorktree, detectGitOperations, detectTurnInterruption, editFileTool, enterPlanModeTool, enterWorktreeTool, estimateCompactionSavings, estimateMessagesTokens, estimateTokens, exitPlanModeTool, exitWorktreeTool, extractCommandName, extractMemories, filterActiveContextFiles, filterOrphanedThinkingMessages, filterUnresolvedToolUses, filterWhitespaceOnlyAssistantMessages, findActualString, findGitRoot, findModelPricing, formatDeferredToolLine, generateMissingToolResults, getActiveSkills, getAutoCompactThreshold, getContextWindowForModel, getEffectiveContextWindow, getLastCacheSafeParams, getMatchingRules, getRetryDelay, getWorktreeChanges, globTool, grepTool, groupMessagesByTurn, hasGitIndexLockError, hasImageContent, isDeferredTool, isGitInternalPath, isPathInWorkingDirectories, isRetryable, listWorktrees, loadProjectContext, loadSkills, looksLikeBareRepo, matchSimpleGlob, maybeResizeAndDownsampleImageBlock, maybeResizeAndDownsampleImageBuffer, normalizeContent, normalizeMessagesForAPI, normalizeQuotes, notebookEditTool, parseAllowedTools, parseFrontmatter, parsePaths, partitionToolCalls, planningAgent, preserveQuoteStyle, readFileTool, registerContextWindows, removeWorktree, resolvePermission, resolveToolFlag, restoreSession, reviewAgent, runNotificationHooks, runPostToolUseFailureHooks, runPostToolUseHooks, runPreToolUseHooks, runToolsBatched, sanitizeForResume, sanitizeWorktreeSlug, saveCacheSafeParams, searchToolsWithKeywords, stripImageContent, stripTrailingWhitespace, taskCreateTool, taskGetTool, taskListTool, taskUpdateTool, tokenCountWithEstimation, toolMatchesRule, truncateHeadForPTLRetry, truncateIndex, webFetchTool, withRetry, writeFileTool };
+export { AIProvider, API_IMAGE_MAX_BASE64_SIZE, Agent, type AiSdkLanguageModel, AiSdkProvider, type AiSdkProviderOptions, AssistantMessage, AutoModeConfig, AutoTitleConfig, CacheControlConfig, type CacheSafeParams, CannotRetryError, ChatCompletionUsage, ChatMessage, ChatParams, ChatStreamChunk, type ClassifiedError, type ClassifierResult, type CommandClassification, type CompactOptions, type CompressedImageResult, ContentPart, ContentReplacementRecord, ContextFile, ContextScope, DEFAULT_PRICING, type DenialLimits, type DenialState, DenialTracker, type ExtractMemoriesResult, FileCheckpointSnapshot, FileMemoryProvider, type FrontmatterData, type GitOperationEvent, type GitOperationType, HookDefinition, HookEvent, HookInput, IMAGE_EXTENSIONS, IMAGE_MAX_HEIGHT, IMAGE_MAX_WIDTH, type ImageDimensions, InProcessBackend, type IndexTruncation, InvariantViolation, JsonSchemaOutputFormat, Mailbox, McpServerConfig, MemoryEntry, MemoryProvider, ModelPricing, NoopSpan, NoopTracer, OTelTracer, type ParsedFrontmatter, PermissionBehavior, PermissionContext, PermissionDecision, PermissionHandler, PermissionRule, PermissionUpdate, PostToolUseFailureHookInput, PostToolUseFailureHookOutput, PostToolUseHookInput, PostToolUseHookOutput, PreToolUseHookInput, PreToolUseHookOutput, type PresetOptions, ProjectContextConfig, type ResizedImage, type ResolvePermissionOptions, type ResumePayload, RetryConfig, RetryContext, RetryEngineOptions, STRUCTURED_OUTPUT_TOOL_NAME, Sandbox, type SanitizeResult, SessionStorage, type ShellSafetyConfig, SkillDefinition, Span, SpanAttributeValue, SpanOptions, SpanStatusCode, StoredCostState, StreamEvent, type StreamingExecResult, StreamingToolExecutor, type StreamingToolExecutorFn, type SwarmBackend, type SwarmConfig, type SwarmEvents, SwarmManager, type SwarmMember, type SwarmMemberConfig, type SwarmMemberStatus, type SwarmMessage, type SwarmStatus, TOOL_SEARCH_NAME, ThinkingConfig, ThreadConfig, Tool, ToolCallContent, type ToolCallExecResult, type ToolCallExecutor, ToolResult as ToolCallResult, ToolContext, ToolDefinition, ToolRegistry, ToolResultMessage, ToolResultOverflowEntry, type ToolWithDeferral, Tracer, type TurnInterruption, UsageRecord, type UserInputHandler, VirtualComputer, VirtualFs, type WorktreeInfo, activateContextForPaths, activateSkillsForPaths, agentTool, all, applyPermissionUpdate, applyPermissionUpdates, askUserTool, assertValidMessageSequence, bashTool, buildExtractionPrompt, buildMemorySystemPromptSection, buildProjectContextSection, buildSystemPrompt, calculateCost, classifyCommand, classifyError, classifyPermission, codingAgent, commandWritesGitInternals, compactConversation, compressImageBufferWithTokenLimit, contentMatchesRule, contentToString, countOccurrences, createCacheSafeParams, createImageMetadataText, createSkillTool, createStructuredOutputTool, createToolSearchTool, createWorktree, detectGitOperations, detectTurnInterruption, editFileTool, enterPlanModeTool, enterWorktreeTool, estimateCompactionSavings, estimateMessagesTokens, estimateTokens, exitPlanModeTool, exitWorktreeTool, extractCommandName, extractMemories, filterActiveContextFiles, filterOrphanedThinkingMessages, filterUnresolvedToolUses, filterWhitespaceOnlyAssistantMessages, findActualString, findGitRoot, findModelPricing, formatDeferredToolLine, generateMissingToolResults, getActiveSkills, getAutoCompactThreshold, getContextWindowForModel, getEffectiveContextWindow, getLastCacheSafeParams, getMatchingRules, getRetryDelay, getWorktreeChanges, globTool, grepTool, groupMessagesByTurn, hasGitIndexLockError, hasImageContent, isDeferredTool, isGitInternalPath, isPathInWorkingDirectories, isRetryable, listWorktrees, loadProjectContext, loadSkills, looksLikeBareRepo, matchSimpleGlob, maybeResizeAndDownsampleImageBlock, maybeResizeAndDownsampleImageBuffer, normalizeContent, normalizeMessagesForAPI, normalizeQuotes, notebookEditTool, parseAllowedTools, parseFrontmatter, parsePaths, partitionToolCalls, planningAgent, preserveQuoteStyle, readFileTool, registerContextWindows, removeWorktree, resolvePermission, resolveToolFlag, restoreSession, reviewAgent, runNotificationHooks, runPostToolUseFailureHooks, runPostToolUseHooks, runPreToolUseHooks, runToolsBatched, sanitizeForResume, sanitizeWorktreeSlug, saveCacheSafeParams, searchToolsWithKeywords, stripImageContent, stripTrailingWhitespace, taskCreateTool, taskGetTool, taskListTool, taskUpdateTool, tokenCountWithEstimation, toolMatchesRule, truncateHeadForPTLRetry, truncateIndex, webFetchTool, withRetry, writeFileTool };