stitchkit 0.93.0 → 0.94.1

package/CHANGELOG.md

@@ -15,6 +15,204 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.94.1] — 2026-09-23
+
+### Added
+
+- `stitchkit/files` — **`writeFileAtomic` and `writeFileAtomicSync`**, the
+  framework's own atomic replace made public, in an asynchronous form that keeps
+  the event loop running (a synchronous rename was measured holding a daemon's
+  main thread for ~15 s). A random staging name created exclusively, the mode
+  set on the descriptor before the file is visible (default `0o600`, not masked
+  by the umask), `fsync`, rename. A consuming project kept its own copy for want
+  of it.
+- `stitchkit/files` — **`withExclusiveLock(path, run, options)`**, the
+  diagnostic journal's owner-recording lock as one public primitive: waits up to
+  `timeoutMs` (default 10 s) and stops the moment `signal` aborts; a refusal
+  (`ExclusiveLockError`, `LOCK_TIMEOUT` / `LOCK_ABORTED`) names the resource and
+  its holder. A dead owner on this machine is taken over; a live, slow or
+  foreign one never is, by age or otherwise; a lock with no owner at all only
+  after `ownerlessGraceMs`. The journal's lock now sits on it.
+- `stitchkit/tools` — **`durability.effect(name, { run, reconcile })`**: an
+  effect in another system at most once. The intent is recorded before `run`;
+  an intent found without an outcome is settled by `reconcile` and never run
+  again — `accepted` with the recipient's proof, or a recorded, final
+  `uncertain`. `EffectUnresolvedError` when this call could not settle it;
+  `reconcile` is bounded by `reconcileTimeoutMs`, a proof by 64 KiB. New ledger
+  event kind `durability/effect`. → ADR 0200
+- `stitchkit`, `stitchkit/contract` — **a tool view may declare only
+  `defaults`.** `withToolView(endpoint, { defaults: { include: [] } })` changes
+  what a tool call is given and keeps the full `output` as the tool answer, its
+  validation and its advertised schema — the most common view, which had to
+  repeat the endpoint's own `output` to be accepted. A view with no `defaults`,
+  `output` or `project` is still refused; defaults are still checked against
+  the input.
+- `stitchkit/cli` — **`applyCliUpdate({ verify, verifyTimeoutMs })`** runs the
+  new build before it replaces anything: the digest-checked bytes are written
+  beside the target as an executable candidate, and a `verify` that throws or
+  overruns leaves the target and any backup untouched and removes the candidate.
+
+### Changed
+
+- `stitchkit/cli` — **a leading dash is data unless it is an option.** A token
+  is an option only as a long form or `-` plus a letter, so `note a "- item"`
+  fills a positional instead of failing as an unknown option, and the token
+  after an option that expects a value is that value — `--grep -foo` — unless it
+  is itself an option (`--grep --json` still requires a value). A value that
+  cannot be read as its field's type is refused as a usage error naming the flag
+  and the text typed, `--tail expects a whole number, got "abc"`, where it was a
+  validation error saying only "expected number, received string".
+- `stitchkit/application` — **a repeated health report is not a new revision.**
+  `reportHealth` with the value a resource already reported publishes nothing:
+  no revision, no `changedAt`, no subscriber call. A resource confirming its
+  health every second produced a snapshot per confirmation, and a subscriber
+  that logs snapshots wrote ~1.7 GB a day of identical lines.
+
+### Fixed
+
+- `stitchkit/files` — the atomic write the CLI updater and checkpoint use wrote
+  its bytes with one `writeSync`, which may write fewer bytes than asked, and
+  left its staging file beside the target when the write or the rename failed.
+- `stitchkit/application` — the diagnostic journal's `reclaim-stale` lock could
+  be reclaimed twice at once: two processes that saw the same dead owner both
+  unlinked, and the second removed the lock the first had just created.
+  Reclaiming is now serialised, and releasing never removes a lock that is no
+  longer this holder's.
+
+## [0.94.0] — 2026-09-23
+
+### ⚠️ Breaking changes
+
+**Who must act:** every project that names a tool on an endpoint (`toolName`,
+`ui`, `annotations`, `mcp`) — run the codemod once, and `defineContract` names
+any endpoint it missed at startup; every project that imports one of the moved
+names below — change the import path, nothing else. A project that does
+neither only raises its version range.
+
+- `stitchkit`, `stitchkit/contract` — **an endpoint's tool options are one
+  `tool` group.** `toolName`, `ui`, `annotations` and `mcp` move into `tool: {
+  name, ui, annotations, mcp }`, next to the new `tool.view`. Everything in the
+  group is read by a tool surface and never by HTTP, so an endpoint that can
+  never be a tool refuses all of it with one key, and `mcp` is no longer
+  accepted on HTTP-only endpoint kinds where it meant nothing. `expose` stays
+  where it is: it chooses transports, HTTP included. The old top-level keys are
+  refused at definition time by name — the types cannot catch them, because
+  `defineContract` infers its endpoints and inference admits extra properties,
+  and an ignored `toolName` would rename a tool silently. A key inside the group
+  that is not a tool option (a half-migrated `tool: { toolName }`) is refused the
+  same way. `MethodDef` stays flat.
+  A codemod moves the keys: `bun packages/core/scripts/codemod-tool-group.ts
+  <dir>` from a checkout of this repository.
+  `// before: { method: 'GET', path: '/', desc: 'List', toolName: 'user_list', annotations: { readOnlyHint: true } }` →
+  `// after:  { method: 'GET', path: '/', desc: 'List', tool: { name: 'user_list', annotations: { readOnlyHint: true } } }`
+  → ADR 0196
+- `stitchkit`, `stitchkit/contract`, `stitchkit/tools`, `stitchkit/tools/invoker`,
+  `stitchkit/tools/connections` — **one name for a tool transport.**
+  `ToolTransport` and `TOOL_TRANSPORTS` (`['MCP', 'AGENT', 'CLI']`) are exported
+  from `stitchkit/contract` beside `Transport` and `ALL_TRANSPORTS`;
+  `RuntimeToolTransport`, `ToolSurfaceTransport` and `ToolInvokerTransport` are
+  gone. The type is the same union.
+  `// before: import type { RuntimeToolTransport } from 'stitchkit/tools'` →
+  `// after:  import type { ToolTransport } from 'stitchkit/contract'` → ADR 0199
+- `stitchkit/tools` — **the CLI is exported from `stitchkit/cli` only.**
+  `createCli`, `defineCliCommand`, `CliConfig`, `CliSurfaceSource`,
+  `CliPresentationPolicyConfig`, `CliWaitConfig`, `ExitCodeMap` and the
+  `CliCommand*` types left `stitchkit/tools`, which also spared a CLI binary the
+  MCP and AI peers that barrel pulls in.
+  `// before: import { createCli } from 'stitchkit/tools'` →
+  `// after:  import { createCli } from 'stitchkit/cli'` → ADR 0199
+- `stitchkit/server` — **`parseSSE` is exported from `stitchkit` only.** It is a
+  client parser and lived in both; `ParseSSEOptions` moved with it.
+  `// before: import { parseSSE } from 'stitchkit/server'` →
+  `// after:  import { parseSSE } from 'stitchkit'` → ADR 0199
+- `stitchkit/testing` — **agent testing tools moved to
+  `stitchkit/agent-runtime/testing`.** `runAgentStoreConformance`, its config
+  and context types, and the race driver (`createAgentRaceBarrier`,
+  `createAgentRaceDriver`, `createAgentRaceTrace` and their types) are exported
+  there only; `stitchkit/testing` no longer imports the agent runtime.
+  `// before: import { runAgentStoreConformance } from 'stitchkit/testing'` →
+  `// after:  import { runAgentStoreConformance } from 'stitchkit/agent-runtime/testing'`
+  → ADR 0197, ADR 0199
+- `stitchkit/agent-runtime` — **the durability engine is exported from
+  `stitchkit/tools` only.** `createLocalStepDurability`, `LocalStepDurability`,
+  `LocalStepDurabilityOptions` and `StepDurabilityLedger` left
+  `stitchkit/agent-runtime`; the engine and the event-log vocabulary it speaks
+  now live in a neutral part of the source both products import.
+  `// before: import { createLocalStepDurability } from 'stitchkit/agent-runtime'` →
+  `// after:  import { createLocalStepDurability } from 'stitchkit/tools'`
+
+### Added
+
+- **An endpoint can answer tools with a declared view of its HTTP answer —
+  `withToolView`.** A UI wants the full record and a model wants a card; a
+  consuming project measured one list tool at 140 KB full and 14 KB as a card,
+  and expressed the difference with seven pairs of endpoints on the same path.
+  `withToolView(endpoint, { defaults, output, project })` declares it once, in
+  `tool.view`: `defaults` join a tool call's arguments before the contract's one
+  parse, so the single handler receives `include: []` from a model and loads
+  less; the full result is validated, then projected (or sliced by `output`) and
+  validated against the view's schema. MCP, the agent mount and the CLI answer
+  with the view, and `outputSchema`, the advertised input `default`, the catalog
+  stamp and the surface snapshot follow it; HTTP, OpenAPI, the typed client and
+  `createToolInvoker` keep the full answer byte for byte. `project` is typed
+  against the endpoint's own schemas, a slice whose schema does not accept the
+  full result is refused at compile time, and `defineContract` refuses a view
+  that cannot mean anything, or one not declared through `withToolView`. A
+  surface-snapshot operation row gains `toolView` only where one is declared,
+  so an application without views sees no snapshot change. `createToolInvoker`
+  keeps the full answer unless given `toolSurface: true`, for an invoker that
+  backs a transport a model reads. → ADR 0196
+  `// before: list: {…, expose: ['HTTP']}, listAgent: {…, expose: ['MCP', 'AGENT'], toolName: 'user_list'}` →
+  `// after:  list: withToolView({…, tool: { name: 'user_list' }}, { defaults: { include: [] }, output: UserCardList, project })`
+- **`EndpointToolOptions`, `DeclaredToolView` and `WithToolView` types** on
+  `stitchkit` and `stitchkit/contract` — the `tool` group, the view
+  `withToolView` produces and the endpoint it returns.
+- **`SqliteAgentChildManagerConfig` type** on `stitchkit/agent-runtime` — the
+  options `createSqliteAgentChildManager` takes, which could not be named.
+- **Documentation for agents in slices.** The package ships `llms/`, one slice
+  per entrypoint (each under 50 KB) plus the upgrade guide by version range;
+  `llms.txt` indexes them with their sizes. `llms-full.txt` still ships, but no
+  instruction asks an agent to read it whole.
+- **`docs/PRINCIPLES.md`** — what stitchkit is and is not: fifteen invariants
+  every ADR now names in the index, and the list of what new work does not add.
+- **A breaking budget.** `release:check` prints how many minors broke a stable
+  entrypoint in the last 30 and 7 days and refuses a second one within 7 days,
+  a stable break without an ADR, and a breaking entry that does not lead with
+  the entrypoints it breaks. Counted from 0.94.0. → ADR 0198
+
+### Changed
+
+- **The agent runtime is behind a one-way boundary.** Nothing outside
+  `agent-runtime/` imports it except entrypoint files, and a test holds every
+  direction between the parts of the source. No public change beyond the moves
+  above. → ADR 0197
+- **One implementation per job inside the package:** one canonical JSON
+  serialisation behind every digest, one MCP tool registration for contract
+  endpoints and runtime tools, and one tool executor signature. → ADR 0199
+- **Canonical key order is the agent store's, for every digest.** Keys are
+  sorted by UTF-16 code unit at every depth, now pinned by a test. Agent-store
+  hashes and archives do not move. Surface snapshots, the MCP catalog stamp, CLI
+  manifest signatures and argument digests (watched reads, MCP rounds, CLI checkpoints) used to list
+  integer-like keys (`"9"`, `"10"`) first, in numeric order — an engine does that
+  to any object — and now sort them like every other key, so only a value with
+  such keys changes: a committed snapshot that has one reports drift once.
+- **A runtime tool's failure outside its handler is a tool error.** An exception
+  from a runtime tool's elicitation round or presenter on MCP now answers
+  `isError` with the framework's error code and hint, as a contract endpoint
+  always did; before, it reached the MCP SDK as a raw exception.
+
+### Fixed
+
+- **`implementRemote` never mounts a proxied stream as a tool.** Its `MethodDef`
+  was a hand-written copy of `implement`'s and had drifted: a streaming endpoint
+  without `expose` kept the default tool exposure, so a gateway listed a tool
+  that answered every call with `INTERNAL_SERVER_ERROR` (its handler returned a
+  stream the tool had no output for). Both now come from one builder, and such an endpoint is
+  HTTP-only on the proxy as it is on the origin — its name leaves a gateway's
+  tool list. A proxied endpoint still declares no elicitation rounds, now
+  deliberately: the forwarded call carries only `params` and `input`, so answers
+  asked for on the proxy would never reach the origin.
+
 ## [0.93.0] — 2026-09-22
 
 ### ⚠️ Breaking changes

package/README.md

@@ -515,8 +515,9 @@ The full guide and API reference, in [`docs/`](./docs/README.md):
   project. It reads the version you have from `node_modules` and the changelog
   from inside the package, and prints every breaking change between the two —
   oldest first, each with who must act. Nothing to clone, nobody to ask.
-- **Coding agent?** The package ships **`llms.txt`** (a curated index) and
-  **`llms-full.txt`** (the whole guide inlined) — your agent reads them from
+- **Coding agent?** The package ships **`llms.txt`** (an index) and
+  **`llms/`** — the guide and reference cut into slices of at most 50 KB, one per
+  entrypoint, so your agent loads the one it imports from
   `node_modules/stitchkit/`. For Claude Code, the repo also provides a
   [stitchkit skill](./skills/stitchkit) you can drop into `.claude/skills/`.
 
@@ -525,6 +526,8 @@ The full guide and API reference, in [`docs/`](./docs/README.md):
 - **[AGENTS.md](./AGENTS.md)** — the development guide (setup, rules, hooks,
   local-dev, breaking changes, release flow). One place for human and agent
   contributors; [CONTRIBUTING.md](./CONTRIBUTING.md) points here.
+- **[Principles](./docs/PRINCIPLES.md)** — what stitchkit is, the invariants every
+  change answers to, and what it says no to — one page.
 - **[Architecture decisions](./docs/decisions/)** — the *why* behind the design.
 - **[Roadmap](./ROADMAP.md)** · **[Changelog](./CHANGELOG.md)** ·
   security via **[SECURITY.md](./SECURITY.md)**.

package/dist/agent-runtime/children-control.d.ts

@@ -0,0 +1,6 @@
+import { type ChildManagerState } from './children-state.js';
+/** Stop every live child of a parent, recording `stopped` or `lost` for each. */
+export declare function stopChildren(state: ChildManagerState, retireChildBlocking: (childConversationId: string) => void, parentConversationId: string): Promise<void>;
+export declare function sendMessage(state: ChildManagerState, parentConversationId: string, childConversationId: string, message: unknown): Promise<void>;
+export declare function interruptChild(state: ChildManagerState, retireChildBlocking: (childConversationId: string) => void, parentConversationId: string, childConversationId: string): Promise<void>;
+//# sourceMappingURL=children-control.d.ts.map

package/dist/agent-runtime/children-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"children-control.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/children-control.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,iBAAiB,EAIvB,MAAM,kBAAkB,CAAC;AAE1B,iFAAiF;AACjF,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,EACxB,mBAAmB,EAAE,CAAC,mBAAmB,EAAE,MAAM,KAAK,IAAI,EAC1D,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAAC,IAAI,CAAC,CAKf;AAwCD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,iBAAiB,EACxB,oBAAoB,EAAE,MAAM,EAC5B,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,iBAAiB,EACxB,mBAAmB,EAAE,CAAC,mBAAmB,EAAE,MAAM,KAAK,IAAI,EAC1D,oBAAoB,EAAE,MAAM,EAC5B,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/agent-runtime/children-spawn.d.ts

@@ -0,0 +1,6 @@
+import { type AgentChildManager, type AgentChildRecord } from './children-contract.js';
+import { type ChildManagerState } from './children-state.js';
+type SpawnRequest = Parameters<AgentChildManager['spawnChild']>[0];
+export declare function spawnChild(state: ChildManagerState, retireChildBlocking: (childConversationId: string) => void, request: SpawnRequest): Promise<AgentChildRecord>;
+export {};
+//# sourceMappingURL=children-spawn.d.ts.map

package/dist/agent-runtime/children-spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"children-spawn.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/children-spawn.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,iBAAiB,EAAmC,MAAM,kBAAkB,CAAC;AAG3F,KAAK,YAAY,GAAG,UAAU,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAyInE,wBAAsB,UAAU,CAC9B,KAAK,EAAE,iBAAiB,EACxB,mBAAmB,EAAE,CAAC,mBAAmB,EAAE,MAAM,KAAK,IAAI,EAC1D,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAsC3B"}

package/dist/agent-runtime/children-state.d.ts

@@ -0,0 +1,46 @@
+import type { SqliteDatabase } from '../internal/sqlite.js';
+import { type AgentChildBudget, type AgentChildHandle, type AgentChildRecord, type AgentChildState } from './children-contract.js';
+import type { SqliteAgentRuntimeStore } from './sqlite.js';
+export interface SqliteAgentChildManagerConfig {
+    sqlite: SqliteAgentRuntimeStore;
+    spawn(request: {
+        parentConversationId: string;
+        childConversationId: string;
+        seedArchive: Uint8Array;
+        childInput: unknown;
+        budget: AgentChildBudget;
+    }): AgentChildHandle | Promise<AgentChildHandle>;
+    remainingBudget?(parentConversationId: string): AgentChildBudget | Promise<AgentChildBudget>;
+    now?: () => Date;
+}
+/**
+ * What one child manager holds across its operations.
+ *
+ * `handles` and `settlements` are this process's own view — a child spawned
+ * by another manager, or before a restart, has a row but no handle — so every
+ * operation that decides whether it can reach a child reads the same maps.
+ */
+export interface ChildManagerState {
+    readonly config: SqliteAgentChildManagerConfig;
+    readonly database: SqliteDatabase;
+    readonly store: SqliteAgentRuntimeStore['store'];
+    readonly now: () => Date;
+    readonly handles: Map<string, AgentChildHandle>;
+    readonly settlements: Map<string, Promise<void>>;
+}
+export declare function createChildManagerState(config: SqliteAgentChildManagerConfig): ChildManagerState;
+export declare function isLive(state: ChildManagerState, childConversationId: string): boolean;
+/**
+ * Whether a settlement may still be recorded: a live row, or no row at all —
+ * the parent's purge takes the child rows with it, and the child's own
+ * conversation still deserves to learn how it ended.
+ */
+export declare function settleable(state: ChildManagerState, childConversationId: string): boolean;
+export declare function bounded<VALUE>(work: Promise<VALUE> | VALUE, fallback: VALUE): Promise<VALUE>;
+export declare function listChildren(state: ChildManagerState, parentConversationId: string): readonly AgentChildRecord[];
+export declare function updateState(state: ChildManagerState, record: AgentChildRecord, next: AgentChildState, resultReference?: string, details?: Record<string, string | number | boolean>): Promise<void>;
+export declare function activeChild(state: ChildManagerState, parentConversationId: string, childConversationId: string): {
+    child: AgentChildRecord;
+    handle: AgentChildHandle;
+};
+//# sourceMappingURL=children-state.d.ts.map

package/dist/agent-runtime/children-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"children-state.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/children-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EAGrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAExD,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,uBAAuB,CAAC;IAChC,KAAK,CAAC,OAAO,EAAE;QACb,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,WAAW,EAAE,UAAU,CAAC;QACxB,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,gBAAgB,CAAC;KAC1B,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjD,eAAe,CAAC,CAAC,oBAAoB,EAAE,MAAM,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7F,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjD,QAAQ,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;CAClD;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,6BAA6B,GACpC,iBAAiB,CASnB;AAgBD,wBAAgB,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAGrF;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAGzF;AAKD,wBAAsB,OAAO,CAAC,KAAK,EACjC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,EAC5B,QAAQ,EAAE,KAAK,GACd,OAAO,CAAC,KAAK,CAAC,CAYhB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,iBAAiB,EACxB,oBAAoB,EAAE,MAAM,GAC3B,SAAS,gBAAgB,EAAE,CAU7B;AAED,wBAAsB,WAAW,CAC/B,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,eAAe,EACrB,eAAe,CAAC,EAAE,MAAM,EACxB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAM,GACtD,OAAO,CAAC,IAAI,CAAC,CAsDf;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,iBAAiB,EACxB,oBAAoB,EAAE,MAAM,EAC5B,mBAAmB,EAAE,MAAM,GAC1B;IAAE,KAAK,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAWvD"}

package/dist/agent-runtime/children-usage.d.ts

@@ -0,0 +1,8 @@
+import { type AgentChildManager } from './children-contract.js';
+import { type ChildManagerState } from './children-state.js';
+/**
+ * Add one step's usage to the child's total and decide whether its budget
+ * now stops it.
+ */
+export declare function recordStepUsage(state: ChildManagerState, request: Parameters<AgentChildManager['recordStepUsage']>[0]): ReturnType<AgentChildManager['recordStepUsage']>;
+//# sourceMappingURL=children-usage.d.ts.map

package/dist/agent-runtime/children-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"children-usage.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/children-usage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAA4B,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAW,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEnE;;;GAGG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,UAAU,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,GAC3D,UAAU,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAiFlD"}

package/dist/agent-runtime/children.d.ts

@@ -1,18 +1,15 @@
-import { type AgentChildBudget, type AgentChildHandle, type AgentChildManager } from './children-contract.js';
-import type { SqliteAgentRuntimeStore } from './sqlite.js';
+import type { AgentChildManager } from './children-contract.js';
+import { type SqliteAgentChildManagerConfig } from './children-state.js';
 export type { AgentChildBlockingDecision, AgentChildBlockingEvent, AgentChildBlockingKind, AgentChildBlockingSource, AgentChildBudget, AgentChildHandle, AgentChildManager, AgentChildRecord, AgentChildState, } from './children-contract.js';
 export { AgentChildBlockingEventSchema, AgentChildBlockingKindSchema, AgentChildBlockingSourceSchema, AgentChildBudgetSchema, AgentChildRecordSchema, AgentChildStateSchema, } from './children-contract.js';
-export declare function createSqliteAgentChildManager(input: {
-    sqlite: SqliteAgentRuntimeStore;
-    spawn(request: {
-        parentConversationId: string;
-        childConversationId: string;
-        seedArchive: Uint8Array;
-        childInput: unknown;
-        budget: AgentChildBudget;
-    }): AgentChildHandle | Promise<AgentChildHandle>;
-    remainingBudget?(parentConversationId: string): AgentChildBudget | Promise<AgentChildBudget>;
-    now?: () => Date;
-}): AgentChildManager;
+/**
+ * Child conversations over the SQLite store.
+ *
+ * Only the assembly lives here: the shared state and row access in
+ * `children-state`, spawning in `children-spawn`, usage accounting in
+ * `children-usage`, stop, interrupt and messages in `children-control`, and
+ * the parent-owned blocking relay in `child-blocking`.
+ */
+export declare function createSqliteAgentChildManager(input: SqliteAgentChildManagerConfig): AgentChildManager;
 export { agentChildBudgetStopPolicy } from './child-budget-policy.js';
 //# sourceMappingURL=children.d.ts.map

package/dist/agent-runtime/children.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"children.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/children.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAOvB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAGxD,YAAY,EACV,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,8BAA8B,EAC9B,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,MAAM,EAAE,uBAAuB,CAAC;IAChC,KAAK,CAAC,OAAO,EAAE;QACb,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,WAAW,EAAE,UAAU,CAAC;QACxB,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,gBAAgB,CAAC;KAC1B,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjD,eAAe,CAAC,CAAC,oBAAoB,EAAE,MAAM,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7F,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,iBAAiB,CA4bpB;AAED,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"children.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/children.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAG7D,OAAO,EAKL,KAAK,6BAA6B,EACnC,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,8BAA8B,EAC9B,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,6BAA6B,GACnC,iBAAiB,CA8BnB;AAED,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/agent-runtime/coding-shell-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAwMA"}
+{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAuCrD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAsKA"}

package/dist/agent-runtime/coding-tool-contract.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import type { ToolTransport } from '../contract/define.js';
 import type { AgentProcessSandbox, AgentSandboxRestriction } from './sandbox.js';
 export declare const AgentCodingToolLimitsSchema: z.ZodObject<{
     maxPathBytes: z.ZodInt;
@@ -156,7 +157,7 @@ export interface AgentCodingToolDefinition {
     };
     input: z.ZodObject;
     output: z.ZodType;
-    transports?: readonly ('MCP' | 'AGENT' | 'CLI')[];
+    transports?: readonly ToolTransport[];
     handler(context: {
         params: undefined;
         input: unknown;

package/dist/agent-runtime/coding-tool-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-tool-contract.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAE9E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;kBAgB7B,CAAC;AAEZ,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA8D7C,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,eAAO,MAAM,sCAAsC;;kBAExC,CAAC;AAEZ,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACpD,OAAO,sCAAsC,CAC9C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;kBAKzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E;;;;;OAKG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,OAAO,EAAE,mBAAmB,CAAC;QAC7B,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;KAC9C,CAAC;IACF,MAAM,CAAC,EAAE;QACP,wEAAwE;QACxE,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACxC,CAAC;IACF,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,aAAa,CAAC,CACZ,SAAS,EAAE,MAAM,GAEf,4BAA4B,GAC5B,SAAS,GACT,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACtD,KAAK,CAAC,KAAK,EAAE;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,UAAU,CAAC;QACjB,aAAa,CAAC,EAAE,4BAA4B,CAAC;KAC9C,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAC/D;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,4BAA4B,CAAA;KAAE,GACvF,OAAO,CAAC;QACN,IAAI,EAAE,UAAU,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,4BAA4B,CAAC;KAC9C,CAAC,CAAC;IACP,MAAM,CAAC,CAAC,KAAK,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;KACpB,GACG,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,GACzC,OAAO,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;KAC9D,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC;IACnB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;IAClD,OAAO,CAAC,OAAO,EAAE;QACf,MAAM,EAAE,SAAS,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChC;AAED,eAAO,MAAM,mBAAmB;;;;kBAMrB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;kBAStB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;kBAMtB,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;kBAcvB,CAAC;AAEZ,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE;;;;;;mBAWxE;AAED,eAAO,MAAM,gBAAgB;;;;kBAMlB,CAAC;AAEZ,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;kBAoBnB,CAAC;AAkBZ,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAChD,qBAAqB,CAEvB"}
+{"version":3,"file":"coding-tool-contract.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAE9E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;kBAgB7B,CAAC;AAEZ,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA8D7C,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,eAAO,MAAM,sCAAsC;;kBAExC,CAAC;AAEZ,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACpD,OAAO,sCAAsC,CAC9C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;kBAKzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E;;;;;OAKG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,OAAO,EAAE,mBAAmB,CAAC;QAC7B,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;KAC9C,CAAC;IACF,MAAM,CAAC,EAAE;QACP,wEAAwE;QACxE,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACxC,CAAC;IACF,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,aAAa,CAAC,CACZ,SAAS,EAAE,MAAM,GAEf,4BAA4B,GAC5B,SAAS,GACT,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACtD,KAAK,CAAC,KAAK,EAAE;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,UAAU,CAAC;QACjB,aAAa,CAAC,EAAE,4BAA4B,CAAC;KAC9C,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAC/D;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,4BAA4B,CAAA;KAAE,GACvF,OAAO,CAAC;QACN,IAAI,EAAE,UAAU,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,4BAA4B,CAAC;KAC9C,CAAC,CAAC;IACP,MAAM,CAAC,CAAC,KAAK,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;KACpB,GACG,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,GACzC,OAAO,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;KAC9D,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC;IACnB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACtC,OAAO,CAAC,OAAO,EAAE;QACf,MAAM,EAAE,SAAS,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChC;AAED,eAAO,MAAM,mBAAmB;;;;kBAMrB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;kBAStB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;kBAMtB,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;kBAcvB,CAAC;AAEZ,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE;;;;;;mBAWxE;AAED,eAAO,MAAM,gBAAgB;;;;kBAMlB,CAAC;AAEZ,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;kBAoBnB,CAAC;AAkBZ,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAChD,qBAAqB,CAEvB"}

package/dist/agent-runtime/coding-tool-listing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-tool-listing.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-listing.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAehC,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,UAQxC,CAAC;AA6CF;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA2B5D;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CAkItC"}
+{"version":3,"file":"coding-tool-listing.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-listing.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAgBhC,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,UAQxC,CAAC;AA6CF;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA2B5D;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CAkItC"}

package/dist/agent-runtime/coding-tool-search-patch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-tool-search-patch.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-search-patch.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AA6IhC,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CA6NtC"}
+{"version":3,"file":"coding-tool-search-patch.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-search-patch.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AA+VhC,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CAsBtC"}

package/dist/agent-runtime/contained-darwin.d.ts

@@ -0,0 +1,38 @@
+/**
+ * The Darwin half of contained file access: the optional native binding for
+ * `openat`-style calls, and a file handle over its numeric descriptor. Loaded
+ * lazily and only on darwin, where Node offers no directory-relative open.
+ */
+import { type Stats } from 'node:fs';
+import type { ContainedFileHandle } from './contained-files.js';
+export interface DarwinEntry {
+    name: string;
+    mode: number;
+    size: number;
+}
+export interface DarwinBinding {
+    openDirectoryAt(directory: number, name: string): number;
+    openFileAt(directory: number, name: string): number;
+    createFileAt(directory: number, name: string, mode: number): number;
+    createDirectoryAt(directory: number, name: string, mode: number): boolean;
+    statAt(directory: number, name: string): Omit<DarwinEntry, 'name'> | null;
+    listAt(directory: number): readonly DarwinEntry[];
+    renameAt(directory: number, source: string, target: string): void;
+    unlinkAt(directory: number, name: string): void;
+}
+export declare const FILE_TYPE_DIRECTORY = 16384;
+export declare const FILE_TYPE_REGULAR = 32768;
+export declare const FILE_TYPE_SYMLINK = 40960;
+export declare function modeIs(mode: number, type: number): boolean;
+export declare function hasFunctions(value: unknown, names: readonly string[]): boolean;
+export declare function loadDarwinBinding(): DarwinBinding;
+export declare class NumericFileHandle implements ContainedFileHandle {
+    readonly fd: number;
+    constructor(fd: number);
+    close(): Promise<void>;
+    read(buffer: Buffer, offset: number, length: number, position: number): Promise<{
+        bytesRead: number;
+    }>;
+    stat(): Promise<Stats>;
+}
+//# sourceMappingURL=contained-darwin.d.ts.map

package/dist/agent-runtime/contained-darwin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contained-darwin.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-darwin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAKL,KAAK,KAAK,EACX,MAAM,SAAS,CAAC;AAKjB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACzD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpD,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD;AAGD,eAAO,MAAM,mBAAmB,QAAW,CAAC;AAC5C,eAAO,MAAM,iBAAiB,QAAW,CAAC;AAC1C,eAAO,MAAM,iBAAiB,QAAW,CAAC;AAE1C,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM9E;AAID,wBAAgB,iBAAiB,IAAI,aAAa,CA+BjD;AAED,qBAAa,iBAAkB,YAAW,mBAAmB;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM;IAA/B,YAAqB,EAAE,EAAE,MAAM,EAAI;IAEnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAIrB;IAED,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAMhC;IAED,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAIrB;CACF"}

package/dist/agent-runtime/contained-files.d.ts

@@ -35,6 +35,10 @@ export interface ContainedFileHandle {
     }>;
     stat(): Promise<Stats>;
 }
+export declare function descriptorPath(handle: ContainedFileHandle): string;
+export declare function openPinnedDirectory(absolute: string): Promise<ContainedFileHandle>;
+export declare function openDirectoryAt(directory: ContainedFileHandle, name: string): Promise<ContainedFileHandle>;
+export declare function openFileAt(directory: ContainedFileHandle, name: string): Promise<ContainedFileHandle>;
 interface ContainedEntryMetadata {
     mode: number;
     /** Byte length for a regular file; absent where the platform did not report one. */
@@ -43,6 +47,13 @@ interface ContainedEntryMetadata {
     isFile(): boolean;
     isSymbolicLink(): boolean;
 }
+interface ContainedDirectoryEntry {
+    name: string;
+    isDirectory(): boolean;
+    isFile(): boolean;
+    isSymbolicLink(): boolean;
+}
+export declare function listAt(directory: ContainedFileHandle): Promise<readonly ContainedDirectoryEntry[]>;
 /** One directory's direct children, read through pinned descriptors. */
 export declare function listContainedDirectory(root: string, relative: string, maxEntries: number, authorizePath?: (relative: string) => boolean | Promise<boolean>): Promise<{
     entries: {
@@ -76,13 +87,6 @@ export declare function openContainedParent(root: string, relative: string, opti
 export declare function openContainedFile(root: string, relative: string): Promise<ContainedFileHandle>;
 export declare function assertContainedFileCurrent(root: string, relative: string, expected: ContainedFileHandle): Promise<void>;
 export declare function assertContainedParentCurrent(root: string, relative: string, expected: ContainedFileHandle): Promise<void>;
-/** Create or atomically replace one direct child through the pinned parent descriptor. */
-export declare function writeContainedFile(input: {
-    parent: ContainedParent;
-    content: string;
-    replace: boolean;
-    mode?: number;
-}): Promise<void>;
 export declare function containedEntryMetadata(parent: ContainedParent): Promise<ContainedEntryMetadata | null>;
 export declare function openContainedParentFile(parent: ContainedParent): Promise<ContainedFileHandle>;
 export declare function readContainedUtf8Handle(handle: ContainedFileHandle, maxBytes: number): Promise<{
@@ -96,24 +100,5 @@ export declare function readContainedUtf8File(root: string, relative: string, ma
     bytes: number;
     mode: number;
 }>;
-/** One deterministic descriptor-anchored walker for harness resources and workspace search. */
-export declare function walkContainedFiles(input: {
-    root: string;
-    maxDepth: number;
-    maxFiles: number;
-    readMaxBytes?: number;
-}): Promise<readonly ContainedFile[]>;
-/** Bounded workspace scan whose recursion stays attached to opened directory identities. */
-export declare function scanContainedFiles(input: {
-    root: string;
-    maxDepth: number;
-    maxFiles: number;
-    symlinks: 'refuse' | 'skip';
-    readMaxBytes?: number;
-    skipUnreadable?: boolean;
-    excludeDirectory?: (relative: string) => boolean;
-    includeFile?: (relative: string) => boolean;
-    authorizePath?: (relative: string, kind: 'file' | 'directory' | 'symlink' | 'other') => boolean | Promise<boolean>;
-}): Promise<ContainedFileScan>;
 export {};
 //# sourceMappingURL=contained-files.d.ts.map

package/dist/agent-runtime/contained-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contained-files.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,KAAK,EAEX,MAAM,SAAS,CAAC;AAejB,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,MAAM,EAAE,SAAS;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IAClE,yEAAyE;IACzE,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AAgB5E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;CACxB;AAwKD,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AA8CD,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC/D,OAAO,CAAC;IACT,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,CAAC;IACJ,SAAS,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IACrD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC,CA2DD;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAoBD;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CAgCnB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,+FAA+F;AAC/F,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAa9B;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAsDD,0FAA0F;AAC1F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAsChB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAExC;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAO9B;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED,yFAAyF;AACzF,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAOxD;AAED,+FAA+F;AAC/F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAIpC;AAED,4FAA4F;AAC5F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,KAC7C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8F7B"}
+{"version":3,"file":"contained-files.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAahD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,MAAM,EAAE,SAAS;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IAClE,yEAAyE;IACzE,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AAgB5E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAGlE;AAMD,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAmBxF;AAcD,wBAAsB,eAAe,CACnC,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CAQ9B;AAED,wBAAsB,UAAU,CAC9B,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CAQ9B;AAED,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AAED,UAAU,uBAAuB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AA4BD,wBAAsB,MAAM,CAC1B,SAAS,EAAE,mBAAmB,GAC7B,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAO7C;AAED,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC/D,OAAO,CAAC;IACT,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,CAAC;IACJ,SAAS,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IACrD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC,CA2DD;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAoBD;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CAgCnB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,+FAA+F;AAC/F,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAa9B;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAExC;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAO9B;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED,yFAAyF;AACzF,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAOxD"}

package/dist/agent-runtime/contained-scan.d.ts

@@ -0,0 +1,21 @@
+import { type ContainedFile, type ContainedFileScan } from './contained-files.js';
+/** One deterministic descriptor-anchored walker for harness resources and workspace search. */
+export declare function walkContainedFiles(input: {
+    root: string;
+    maxDepth: number;
+    maxFiles: number;
+    readMaxBytes?: number;
+}): Promise<readonly ContainedFile[]>;
+/** Bounded workspace scan whose recursion stays attached to opened directory identities. */
+export declare function scanContainedFiles(input: {
+    root: string;
+    maxDepth: number;
+    maxFiles: number;
+    symlinks: 'refuse' | 'skip';
+    readMaxBytes?: number;
+    skipUnreadable?: boolean;
+    excludeDirectory?: (relative: string) => boolean;
+    includeFile?: (relative: string) => boolean;
+    authorizePath?: (relative: string, kind: 'file' | 'directory' | 'symlink' | 'other') => boolean | Promise<boolean>;
+}): Promise<ContainedFileScan>;
+//# sourceMappingURL=contained-scan.d.ts.map

package/dist/agent-runtime/contained-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contained-scan.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-scan.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,aAAa,EAElB,KAAK,iBAAiB,EAMvB,MAAM,mBAAmB,CAAC;AAE3B,+FAA+F;AAC/F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAIpC;AAED,4FAA4F;AAC5F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,KAC7C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8F7B"}

package/dist/agent-runtime/contained-write.d.ts

@@ -0,0 +1,9 @@
+import { type ContainedParent } from './contained-files.js';
+/** Create or atomically replace one direct child through the pinned parent descriptor. */
+export declare function writeContainedFile(input: {
+    parent: ContainedParent;
+    content: string;
+    replace: boolean;
+    mode?: number;
+}): Promise<void>;
+//# sourceMappingURL=contained-write.d.ts.map

package/dist/agent-runtime/contained-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contained-write.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-write.ts"],"names":[],"mappings":"AAUA,OAAO,EAEL,KAAK,eAAe,EAErB,MAAM,mBAAmB,CAAC;AAsD3B,0FAA0F;AAC1F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAsChB"}

package/dist/agent-runtime/deferred-tool-types.d.ts

@@ -1,8 +1,9 @@
 import type { ToolSet } from 'ai';
 import { type ZodObject, type ZodType, z } from 'zod';
-import type { EndpointToolAnnotations, EndpointUiMeta, HttpMethod } from '../contract/index.js';
+import type { HttpMethod, ToolTransport } from '../contract/define.js';
+import type { EndpointToolAnnotations, EndpointUiMeta } from '../contract/tool-options.js';
 import type { ServiceDef } from '../server/types.js';
-import type { ErrorHintFn, ToolCallHooks, ToolLifecycle } from '../tools/execute.js';
+import type { ErrorHintFn, ToolCallHooks, ToolLifecycle } from '../tools/execute-hooks.js';
 import type { ToolExtend } from '../tools/mount.js';
 import type { AgentRuntimePrepareStep, AgentRuntimeRunContext } from './runtime.js';
 export declare const DeferredAgentToolSearchInputSchema: ZodObject<{
@@ -46,7 +47,7 @@ export interface DeferredAgentRuntimeToolDefinition {
     };
     input: ZodObject;
     output?: ZodType;
-    transports?: readonly ('MCP' | 'AGENT' | 'CLI')[];
+    transports?: readonly ToolTransport[];
     annotations?: EndpointToolAnnotations;
     ui?: EndpointUiMeta;
     handler: unknown;