zidane 3.1.2 → 3.3.0

package/dist/contexts.js

@@ -2,7 +2,7 @@ import {
   createDockerContext,
   createProcessContext,
   createSandboxContext
-} from "./chunk-IUBBVF53.js";
+} from "./chunk-UD25QF3H.js";
 export {
   createDockerContext,
   createProcessContext,

package/dist/index.d.ts

@@ -1,12 +1,12 @@
-import { d as AgentHooks } from './agent-C9q5VMGa.js';
-export { ac as ActivationVia, ad as ActiveSkill, A as Agent, a as AgentAbortedError, b as AgentBehavior, c as AgentContextExceededError, e as AgentOptions, f as AgentProviderError, g as AgentRunOptions, h as AgentStats, i as AgentToolNotAllowedError, j as AnthropicParams, C as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, k as CerebrasParams, m as ClassifiedError, n as ClassifiedErrorKind, o as CreateSessionOptions, ae as DeactivationReason, af as FileMapAdapter, ag as FileMapStoreOptions, I as ImageContent, M as McpConnection, p as McpServerConfig, q as McpToolHookContext, O as OAuthRefreshHookContext, ah as OpenAICompatAuthHeader, ai as OpenAICompatHttpError, aj as OpenAICompatParams, r as OpenAIParams, s as OpenRouterParams, P as PromptDocumentPart, t as PromptImagePart, u as PromptPart, v as PromptTextPart, w as Provider, x as ProviderCapabilities, R as RemoteStoreOptions, y as RunHookMap, S as Session, z as SessionContentBlock, B as SessionData, D as SessionEndStatus, E as SessionHookContext, F as SessionMessage, G as SessionRun, H as SessionStore, J as SessionTurn, ak as SkillActivationState, al as SkillActivationStateOptions, K as SkillConfig, am as SkillDiagnostic, L as SkillResource, an as SkillSource, N as SkillsConfig, Q as SpawnHookContext, T as StreamCallbacks, U as StreamHookContext, V as StreamOptions, W as ThinkingLevel, X as ToolCall, Y as ToolContext, Z as ToolDef, _ as ToolExecutionMode, $ as ToolHookContext, a0 as ToolMap, a1 as ToolResult, a2 as ToolResultContent, a3 as ToolResultImageContent, a4 as ToolResultTextContent, a5 as ToolSpec, a6 as TurnFinishReason, a7 as TurnResult, a8 as TurnUsage, ao as anthropic, ap as autoDetectAndConvert, aq as cerebras, ar as classifyOpenAICompatError, as as connectMcpServers, at as createAgent, au as createFileMapStore, av as createMemoryStore, aw as createRemoteStore, ax as createSession, ay as createSkillActivationState, az as fromAnthropic, aA as fromOpenAI, aB as loadSession, aC as mapOAIFinishReason, a9 as matchesContextExceeded, aD as normalizeMcpBlocks, aE as normalizeMcpServers, aF as openai, aG as openaiCompat, aH as openrouter, aI as resultToString, aJ as toAnthropic, aK as toOpenAI, aL as toTypedError, aa as toolOutputByteLength, ab as toolResultToText } from './agent-C9q5VMGa.js';
+import { d as AgentHooks } from './agent-BBzkPRAu.js';
+export { ab as ActivationVia, ac as ActiveSkill, A as Agent, a as AgentAbortedError, b as AgentBehavior, c as AgentContextExceededError, e as AgentOptions, f as AgentProviderError, g as AgentRunOptions, h as AgentStats, i as AgentToolNotAllowedError, j as AnthropicParams, C as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, k as CerebrasParams, m as ClassifiedError, n as ClassifiedErrorKind, o as CreateSessionOptions, ad as DeactivationReason, ae as FileMapAdapter, af as FileMapStoreOptions, M as McpConnection, p as McpServerConfig, q as McpToolHookContext, O as OAuthRefreshHookContext, ag as OpenAICompatAuthHeader, ah as OpenAICompatHttpError, ai as OpenAICompatParams, r as OpenAIParams, s as OpenRouterParams, P as PromptDocumentPart, t as PromptImagePart, u as PromptPart, v as PromptTextPart, w as Provider, x as ProviderCapabilities, R as RemoteStoreOptions, y as RunHookMap, S as Session, z as SessionContentBlock, B as SessionData, D as SessionEndStatus, E as SessionHookContext, F as SessionMessage, G as SessionRun, H as SessionStore, I as SessionTurn, aj as SkillActivationState, ak as SkillActivationStateOptions, J as SkillConfig, al as SkillDiagnostic, K as SkillResource, am as SkillSource, L as SkillsConfig, N as SpawnHookContext, Q as StreamCallbacks, T as StreamHookContext, U as StreamOptions, V as ThinkingLevel, W as ToolCall, X as ToolContext, Y as ToolDef, Z as ToolExecutionMode, _ as ToolHookContext, $ as ToolMap, a0 as ToolResult, a1 as ToolResultContent, a2 as ToolResultImageContent, a3 as ToolResultTextContent, a4 as ToolSpec, a5 as TurnFinishReason, a6 as TurnResult, a7 as TurnUsage, an as anthropic, ao as autoDetectAndConvert, ap as cerebras, aq as classifyOpenAICompatError, ar as connectMcpServers, as as createAgent, at as createFileMapStore, au as createMemoryStore, av as createRemoteStore, aw as createSession, ax as createSkillActivationState, ay as fromAnthropic, az as fromOpenAI, aA as loadSession, aB as mapOAIFinishReason, a8 as matchesContextExceeded, aC as normalizeMcpBlocks, aD as normalizeMcpServers, aE as openai, aF as openaiCompat, aG as openrouter, aH as resultToString, aI as toAnthropic, aJ as toOpenAI, aK as toTypedError, a9 as toolOutputByteLength, aa as toolResultToText } from './agent-BBzkPRAu.js';
 export { createDockerContext, createProcessContext } from './contexts.js';
 export { S as SandboxProvider, c as createSandboxContext } from './sandbox-CLghrTLi.js';
 export { C as ContextCapabilities, a as ContextType, E as ExecResult, b as ExecutionContext, c as ExecutionHandle, S as SpawnConfig } from './types-vA1a_ZX7.js';
 export { Preset, basic, basicTools, definePreset } from './presets.js';
 export { IMPLICITLY_ALLOWED_SKILL_TOOLS, SkillValidationIssue, SkillValidationResult, SourcedScanPath, buildCatalog, defineSkill, discoverSkills, installAllowedToolsGate, interpolateShellCommands, isToolAllowedByUnion, matchesAllowedTool, parseAllowedToolPattern, parseSkillFile, resolveSkills, validateResourcePath, validateSkillForWrite, validateSkillName, writeSkillToDisk, writeSkillsToDisk } from './skills.js';
-export { S as SkillsReadToolOptions, a as SkillsRunScriptToolOptions, b as SkillsUseToolOptions, c as createSkillsReadTool, d as createSkillsRunScriptTool, e as createSkillsUseTool, f as edit, g as glob, h as grep, m as multiEdit } from './skills-use-DU0unNP4.js';
-export { C as ChildAgent, I as InteractionToolOptions, S as SpawnToolOptions, a as SpawnToolState, V as ValidationResult, c as createInteractionTool, b as createSpawnTool, s as spawn, v as validateToolArgs } from './validation-BKA33eqb.js';
+export { S as SkillsReadToolOptions, a as SkillsRunScriptToolOptions, b as SkillsUseToolOptions, c as createSkillsReadTool, d as createSkillsRunScriptTool, e as createSkillsUseTool, f as edit, g as glob, h as grep, m as multiEdit } from './skills-use-JMcA5NrF.js';
+export { C as ChildAgent, I as InteractionToolOptions, S as SpawnToolOptions, a as SpawnToolState, V as ValidationResult, c as createInteractionTool, b as createSpawnTool, v as validateToolArgs } from './validation-c3MQlCza.js';
 import { Hookable } from 'hookable';
 import '@modelcontextprotocol/sdk/client/index.js';
 

package/dist/index.js

@@ -1,17 +1,17 @@
 import {
   defineSkill
-} from "./chunk-BW3WTFIR.js";
+} from "./chunk-LIVB5W4B.js";
 import {
   anthropic,
   cerebras,
   openai,
   openrouter
-} from "./chunk-BRMURQA2.js";
+} from "./chunk-VGFQEOHF.js";
 import {
   basicTools,
   basic_default,
   definePreset
-} from "./chunk-BXO7CZHJ.js";
+} from "./chunk-3D5Q527Y.js";
 import {
   createAgent,
   createInteractionTool,
@@ -23,9 +23,8 @@ import {
   glob,
   grep,
   multiEdit,
-  spawn,
   validateToolArgs
-} from "./chunk-2AE3VM5O.js";
+} from "./chunk-Z2E5QN5X.js";
 import {
   IMPLICITLY_ALLOWED_SKILL_TOOLS,
   buildCatalog,
@@ -43,12 +42,12 @@ import {
   validateSkillName,
   writeSkillToDisk,
   writeSkillsToDisk
-} from "./chunk-TPXPVEH6.js";
+} from "./chunk-X3VOTPVM.js";
 import {
   createDockerContext,
   createProcessContext,
   createSandboxContext
-} from "./chunk-IUBBVF53.js";
+} from "./chunk-UD25QF3H.js";
 import {
   connectMcpServers,
   normalizeMcpBlocks,
@@ -76,7 +75,7 @@ import {
   openaiCompat,
   toAnthropic,
   toOpenAI
-} from "./chunk-YQ7LY6CL.js";
+} from "./chunk-X244RS5H.js";
 import {
   AgentAbortedError,
   AgentContextExceededError,
@@ -255,7 +254,6 @@ export {
   parseSkillFile,
   resolveSkills,
   resultToString,
-  spawn,
   toAnthropic,
   toOpenAI,
   toTypedError,

package/dist/mcp.d.ts

@@ -1,4 +1,4 @@
 import 'hookable';
-export { M as McpConnection, p as McpServerConfig, as as connectMcpServers, aD as normalizeMcpBlocks, aE as normalizeMcpServers, aI as resultToString } from './agent-C9q5VMGa.js';
+export { M as McpConnection, p as McpServerConfig, ar as connectMcpServers, aC as normalizeMcpBlocks, aD as normalizeMcpServers, aH as resultToString } from './agent-BBzkPRAu.js';
 import '@modelcontextprotocol/sdk/client/index.js';
 import './types-vA1a_ZX7.js';

package/dist/presets.d.ts

@@ -1,4 +1,4 @@
-import { Z as ToolDef, e as AgentOptions } from './agent-C9q5VMGa.js';
+import { Y as ToolDef, e as AgentOptions } from './agent-BBzkPRAu.js';
 import 'hookable';
 import './types-vA1a_ZX7.js';
 import '@modelcontextprotocol/sdk/client/index.js';

package/dist/presets.js

@@ -2,10 +2,10 @@ import {
   basicTools,
   basic_default,
   definePreset
-} from "./chunk-BXO7CZHJ.js";
-import "./chunk-2AE3VM5O.js";
-import "./chunk-TPXPVEH6.js";
-import "./chunk-IUBBVF53.js";
+} from "./chunk-3D5Q527Y.js";
+import "./chunk-Z2E5QN5X.js";
+import "./chunk-X3VOTPVM.js";
+import "./chunk-UD25QF3H.js";
 import "./chunk-7H34OFDA.js";
 import "./chunk-JH6IAAFA.js";
 import "./chunk-LNN5UTS2.js";

package/dist/providers.d.ts

@@ -1,4 +1,4 @@
-export { j as AnthropicParams, k as CerebrasParams, ah as OpenAICompatAuthHeader, ai as OpenAICompatHttpError, aj as OpenAICompatParams, r as OpenAIParams, s as OpenRouterParams, w as Provider, x as ProviderCapabilities, T as StreamCallbacks, V as StreamOptions, X as ToolCall, a1 as ToolResult, a5 as ToolSpec, a7 as TurnResult, ao as anthropic, aq as cerebras, ar as classifyOpenAICompatError, aC as mapOAIFinishReason, aF as openai, aG as openaiCompat, aH as openrouter } from './agent-C9q5VMGa.js';
+export { j as AnthropicParams, k as CerebrasParams, ag as OpenAICompatAuthHeader, ah as OpenAICompatHttpError, ai as OpenAICompatParams, r as OpenAIParams, s as OpenRouterParams, w as Provider, x as ProviderCapabilities, Q as StreamCallbacks, U as StreamOptions, W as ToolCall, a0 as ToolResult, a4 as ToolSpec, a6 as TurnResult, an as anthropic, ap as cerebras, aq as classifyOpenAICompatError, aB as mapOAIFinishReason, aE as openai, aF as openaiCompat, aG as openrouter } from './agent-BBzkPRAu.js';
 import 'hookable';
 import './types-vA1a_ZX7.js';
 import '@modelcontextprotocol/sdk/client/index.js';

package/dist/providers.js

@@ -3,13 +3,13 @@ import {
   cerebras,
   openai,
   openrouter
-} from "./chunk-BRMURQA2.js";
+} from "./chunk-VGFQEOHF.js";
 import {
   OpenAICompatHttpError,
   classifyOpenAICompatError,
   mapOAIFinishReason,
   openaiCompat
-} from "./chunk-YQ7LY6CL.js";
+} from "./chunk-X244RS5H.js";
 import "./chunk-LNN5UTS2.js";
 export {
   OpenAICompatHttpError,

package/dist/session/sqlite.d.ts

@@ -1,4 +1,4 @@
-import { H as SessionStore } from '../agent-C9q5VMGa.js';
+import { H as SessionStore } from '../agent-BBzkPRAu.js';
 import 'hookable';
 import '../types-vA1a_ZX7.js';
 import '@modelcontextprotocol/sdk/client/index.js';

package/dist/session/sqlite.js

@@ -24,7 +24,9 @@ function createSqliteStore(options) {
   `);
   const stmtDelete = db.prepare("DELETE FROM sessions WHERE id = ?");
   const stmtList = db.prepare("SELECT id FROM sessions ORDER BY updated_at DESC");
+  const stmtListLimited = db.prepare("SELECT id FROM sessions ORDER BY updated_at DESC LIMIT ?");
   const stmtListByAgent = db.prepare("SELECT id FROM sessions WHERE agent_id = ? ORDER BY updated_at DESC");
+  const stmtListByAgentLimited = db.prepare("SELECT id FROM sessions WHERE agent_id = ? ORDER BY updated_at DESC LIMIT ?");
   const store = {
     async load(sessionId) {
       const row = stmtLoad.get(sessionId);
@@ -45,17 +47,14 @@ function createSqliteStore(options) {
       stmtDelete.run(sessionId);
     },
     async list(filter) {
+      const limit = typeof filter?.limit === "number" && filter.limit > 0 ? filter.limit : void 0;
       let rows;
       if (filter?.agentId) {
-        rows = stmtListByAgent.all(filter.agentId);
+        rows = limit ? stmtListByAgentLimited.all(filter.agentId, limit) : stmtListByAgent.all(filter.agentId);
       } else {
-        rows = stmtList.all();
+        rows = limit ? stmtListLimited.all(limit) : stmtList.all();
       }
-      const ids = rows.map((r) => r.id);
-      if (filter?.limit) {
-        return ids.slice(0, filter.limit);
-      }
-      return ids;
+      return rows.map((r) => r.id);
     },
     async appendTurns(sessionId, turns) {
       const data = await store.load(sessionId);

package/dist/session.d.ts

@@ -1,4 +1,4 @@
-export { o as CreateSessionOptions, af as FileMapAdapter, ag as FileMapStoreOptions, R as RemoteStoreOptions, S as Session, z as SessionContentBlock, B as SessionData, F as SessionMessage, G as SessionRun, H as SessionStore, J as SessionTurn, ap as autoDetectAndConvert, au as createFileMapStore, av as createMemoryStore, aw as createRemoteStore, ax as createSession, az as fromAnthropic, aA as fromOpenAI, aB as loadSession, aJ as toAnthropic, aK as toOpenAI } from './agent-C9q5VMGa.js';
+export { o as CreateSessionOptions, ae as FileMapAdapter, af as FileMapStoreOptions, R as RemoteStoreOptions, S as Session, z as SessionContentBlock, B as SessionData, F as SessionMessage, G as SessionRun, H as SessionStore, I as SessionTurn, ao as autoDetectAndConvert, at as createFileMapStore, au as createMemoryStore, av as createRemoteStore, aw as createSession, ay as fromAnthropic, az as fromOpenAI, aA as loadSession, aI as toAnthropic, aJ as toOpenAI } from './agent-BBzkPRAu.js';
 import 'hookable';
 import './types-vA1a_ZX7.js';
 import '@modelcontextprotocol/sdk/client/index.js';

package/dist/session.js

@@ -11,7 +11,7 @@ import {
   fromOpenAI,
   toAnthropic,
   toOpenAI
-} from "./chunk-YQ7LY6CL.js";
+} from "./chunk-X244RS5H.js";
 import "./chunk-LNN5UTS2.js";
 export {
   autoDetectAndConvert,

package/dist/{skills-use-DU0unNP4.d.ts → skills-use-JMcA5NrF.d.ts}

@@ -1,4 +1,4 @@
-import { Z as ToolDef, K as SkillConfig, ak as SkillActivationState, d as AgentHooks } from './agent-C9q5VMGa.js';
+import { Y as ToolDef, J as SkillConfig, aj as SkillActivationState, d as AgentHooks } from './agent-BBzkPRAu.js';
 import { Hookable } from 'hookable';
 
 /**

package/dist/skills.d.ts

@@ -1,5 +1,5 @@
-import { d as AgentHooks, ak as SkillActivationState, K as SkillConfig, an as SkillSource, am as SkillDiagnostic, N as SkillsConfig } from './agent-C9q5VMGa.js';
-export { ac as ActivationVia, ad as ActiveSkill, ae as DeactivationReason, al as SkillActivationStateOptions, L as SkillResource, ay as createSkillActivationState } from './agent-C9q5VMGa.js';
+import { d as AgentHooks, aj as SkillActivationState, J as SkillConfig, am as SkillSource, al as SkillDiagnostic, L as SkillsConfig } from './agent-BBzkPRAu.js';
+export { ab as ActivationVia, ac as ActiveSkill, ad as DeactivationReason, ak as SkillActivationStateOptions, K as SkillResource, ax as createSkillActivationState } from './agent-BBzkPRAu.js';
 import { Hookable } from 'hookable';
 import { b as ExecutionContext, c as ExecutionHandle } from './types-vA1a_ZX7.js';
 import '@modelcontextprotocol/sdk/client/index.js';
@@ -66,99 +66,7 @@ interface BuildCatalogOptions {
 /**
  * Build the skill catalog XML and behavioral instructions for the system prompt.
  */
-declare function buildCatalog(skills: SkillConfig[], optionsOrReadToolName?: BuildCatalogOptions | string): string;
-
-/**
- * Strict validators for Agent Skills.
- *
- * Applied on the authoring path (`defineSkill`, `writeSkillToDisk`). Parser-time
- * validation is intentionally lenient — see `parseSkillFile` for diagnostic collection.
- */
-
-/**
- * A single issue surfaced by skill-authoring validation.
- * Distinct from `ValidationResult` in `tools/validation.ts` (tool-input JSON
- * schema validation) — different domain, different module.
- */
-interface SkillValidationIssue {
-    /** Stable machine-readable code for consumer matching. */
-    code: string;
-    /** Human-readable description. */
-    message: string;
-    /** Frontmatter field name the issue relates to, when applicable. */
-    field?: string;
-}
-interface SkillValidationResult {
-    valid: boolean;
-    errors: SkillValidationIssue[];
-}
-/**
- * Validate a skill name per the spec:
- * - 1–64 characters
- * - Lowercase alphanumeric + hyphens only
- * - Must not start or end with a hyphen
- * - Must not contain consecutive hyphens
- *
- * The parent-directory match is validated separately (it requires knowing the
- * skill's `location`, which this function does not).
- */
-declare function validateSkillName(name: string): boolean;
-/**
- * Strict validation for a skill that is about to be authored / written to disk.
- * Rejects anything that would violate the spec. Use the lenient parser path
- * (`parseSkillFile`) for loading third-party skills.
- */
-declare function validateSkillForWrite(skill: SkillConfig): SkillValidationResult;
-/**
- * Validate that `relPath` stays inside `baseDir` when resolved.
- *
- * Rejects:
- * - Absolute paths (`/etc/passwd`, `C:\…`)
- * - Parent traversal (`..` segments that escape baseDir)
- * - Null-byte tricks
- *
- * Returns `{ valid: true, absolutePath }` on success or `{ valid: false, error }`
- * with a human-readable reason.
- */
-declare function validateResourcePath(relPath: string, baseDir: string): {
-    valid: true;
-    absolutePath: string;
-} | {
-    valid: false;
-    error: string;
-};
-/**
- * Parse a single `allowed-tools` entry into its tool name + optional argument pattern.
- *
- * Examples:
- * - `Read` → `{ tool: 'Read' }`
- * - `Bash(git:*)` → `{ tool: 'Bash', argPrefix: 'git' }`
- */
-declare function parseAllowedToolPattern(entry: string): {
-    tool: string;
-    argPrefix?: string;
-} | null;
-/**
- * Check whether a tool call (identified by its wire/displayName and argument input)
- * matches a skill's allow-list entry.
- *
- * Matching rules (Zidane's interpretation of the spec's unspecified syntax):
- * - Exact match: displayName === pattern (no parens).
- * - Prefix match: for `Tool(arg:*)`, displayName === 'Tool' AND **any** string
- *   value in the input object starts with `arg`. This is intentionally
- *   permissive: it doesn't depend on a convention about which property carries
- *   the "command" (schemas vary across tools), and for the common
- *   `shell({ command: 'git …' })` shape it behaves identically to a "primary
- *   string" rule.
- * - For tools whose inputs carry no string values, the arg-match returns false.
- */
-declare function matchesAllowedTool(displayName: string, input: Record<string, unknown>, pattern: string): boolean;
-/**
- * Test whether a tool call is allowed by the union of `allowedTools` across a set
- * of active skills. Returns `true` when the union is empty (permissive default)
- * OR when any entry matches.
- */
-declare function isToolAllowedByUnion(displayName: string, input: Record<string, unknown>, union: readonly string[]): boolean;
+declare function buildCatalog(skills: SkillConfig[], options?: BuildCatalogOptions): string;
 
 /**
  * Skill discovery and parsing.
@@ -258,6 +166,19 @@ declare function interpolateShellCommands(instructions: string, execution: Execu
  * merges everything, and applies filtering.
  */
 
+/**
+ * Resolved-skills bundle: the materialized list plus a `cleanup` fn that
+ * removes any temporary directory created for `config.write` skills.
+ *
+ * Inline skills must live on disk for the lifetime of the agent (the
+ * `skills_read` / `skills_run_script` tools resolve relative paths against
+ * `baseDir`), so cleanup is deferred to `agent.destroy()`. When no temp
+ * directory was created, `cleanup` is a no-op.
+ */
+interface ResolvedSkillsBundle {
+    skills: SkillConfig[];
+    cleanup: () => void;
+}
 /**
  * Resolve all skills from a SkillsConfig:
  *
@@ -265,8 +186,105 @@ declare function interpolateShellCommands(instructions: string, execution: Execu
  * 2. Combine with default + user-provided scan paths (project-first, user-next)
  * 3. Run lenient discovery
  * 4. Apply filters: `exclude`, `enabled` allowlist, optional project-skill trust gate
+ *
+ * Returns `{ skills, cleanup }` — call `cleanup()` on agent destroy to remove
+ * the temp directory created for inline `config.write` skills. The agent
+ * factory wires this automatically; standalone callers must invoke it
+ * themselves to avoid leaking OS temp.
+ */
+declare function resolveSkills(config: SkillsConfig): Promise<ResolvedSkillsBundle>;
+
+/**
+ * Strict validators for Agent Skills.
+ *
+ * Applied on the authoring path (`defineSkill`, `writeSkillToDisk`). Parser-time
+ * validation is intentionally lenient — see `parseSkillFile` for diagnostic collection.
+ */
+
+/**
+ * A single issue surfaced by skill-authoring validation.
+ * Distinct from `ValidationResult` in `tools/validation.ts` (tool-input JSON
+ * schema validation) — different domain, different module.
+ */
+interface SkillValidationIssue {
+    /** Stable machine-readable code for consumer matching. */
+    code: string;
+    /** Human-readable description. */
+    message: string;
+    /** Frontmatter field name the issue relates to, when applicable. */
+    field?: string;
+}
+interface SkillValidationResult {
+    valid: boolean;
+    errors: SkillValidationIssue[];
+}
+/**
+ * Validate a skill name per the spec:
+ * - 1–64 characters
+ * - Lowercase alphanumeric + hyphens only
+ * - Must not start or end with a hyphen
+ * - Must not contain consecutive hyphens
+ *
+ * The parent-directory match is validated separately (it requires knowing the
+ * skill's `location`, which this function does not).
+ */
+declare function validateSkillName(name: string): boolean;
+/**
+ * Strict validation for a skill that is about to be authored / written to disk.
+ * Rejects anything that would violate the spec. Use the lenient parser path
+ * (`parseSkillFile`) for loading third-party skills.
+ */
+declare function validateSkillForWrite(skill: SkillConfig): SkillValidationResult;
+/**
+ * Validate that `relPath` stays inside `baseDir` when resolved.
+ *
+ * Rejects:
+ * - Absolute paths (`/etc/passwd`, `C:\…`)
+ * - Parent traversal (`..` segments that escape baseDir)
+ * - Null-byte tricks
+ *
+ * Returns `{ valid: true, absolutePath }` on success or `{ valid: false, error }`
+ * with a human-readable reason.
+ */
+declare function validateResourcePath(relPath: string, baseDir: string): {
+    valid: true;
+    absolutePath: string;
+} | {
+    valid: false;
+    error: string;
+};
+/**
+ * Parse a single `allowed-tools` entry into its tool name + optional argument pattern.
+ *
+ * Examples:
+ * - `Read` → `{ tool: 'Read' }`
+ * - `Bash(git:*)` → `{ tool: 'Bash', argPrefix: 'git' }`
  */
-declare function resolveSkills(config: SkillsConfig): Promise<SkillConfig[]>;
+declare function parseAllowedToolPattern(entry: string): {
+    tool: string;
+    argPrefix?: string;
+} | null;
+/**
+ * Check whether a tool call (identified by its wire/displayName and argument input)
+ * matches a skill's allow-list entry.
+ *
+ * Matching rules (Zidane's interpretation of the spec's unspecified syntax):
+ * - Exact match: displayName === pattern (no parens).
+ * - Prefix match: for `Tool(arg:*)`, displayName === 'Tool' AND **any** string
+ *   value in the input object starts with `arg`. This is intentionally
+ *   permissive: it doesn't depend on a convention about which property carries
+ *   the "command" (schemas vary across tools), and for the common
+ *   `shell({ command: 'git …' })` shape it behaves identically to a "primary
+ *   string" rule.
+ * - For tools whose inputs carry no string values, the arg-match returns false.
+ */
+declare function matchesAllowedTool(displayName: string, input: Record<string, unknown>, pattern: string): boolean;
+/**
+ * Test whether a tool call is allowed by the union of `allowedTools` across a set
+ * of active skills. Returns `true` when the union is empty (permissive default)
+ * OR when any entry matches.
+ */
+declare function isToolAllowedByUnion(displayName: string, input: Record<string, unknown>, union: readonly string[]): boolean;
 
 /**
  * Skill writer — materializes inline SkillConfig objects to disk as proper

package/dist/skills.js

@@ -1,6 +1,6 @@
 import {
   defineSkill
-} from "./chunk-BW3WTFIR.js";
+} from "./chunk-LIVB5W4B.js";
 import {
   IMPLICITLY_ALLOWED_SKILL_TOOLS,
   buildCatalog,
@@ -21,7 +21,7 @@ import {
   validateSkillName,
   writeSkillToDisk,
   writeSkillsToDisk
-} from "./chunk-TPXPVEH6.js";
+} from "./chunk-X3VOTPVM.js";
 import "./chunk-LNN5UTS2.js";
 export {
   IMPLICITLY_ALLOWED_SKILL_TOOLS,

package/dist/tools.d.ts

@@ -1,7 +1,7 @@
-export { S as SkillsReadToolOptions, a as SkillsRunScriptToolOptions, b as SkillsUseToolOptions, c as createSkillsReadTool, d as createSkillsRunScriptTool, e as createSkillsUseTool, f as edit, g as glob, h as grep, m as multiEdit } from './skills-use-DU0unNP4.js';
-export { C as ChildAgent, I as InteractionToolOptions, S as SpawnToolOptions, a as SpawnToolState, V as ValidationResult, c as createInteractionTool, b as createSpawnTool, s as spawn, v as validateToolArgs } from './validation-BKA33eqb.js';
-import { Z as ToolDef } from './agent-C9q5VMGa.js';
-export { Y as ToolContext, a0 as ToolMap } from './agent-C9q5VMGa.js';
+export { S as SkillsReadToolOptions, a as SkillsRunScriptToolOptions, b as SkillsUseToolOptions, c as createSkillsReadTool, d as createSkillsRunScriptTool, e as createSkillsUseTool, f as edit, g as glob, h as grep, m as multiEdit } from './skills-use-JMcA5NrF.js';
+export { C as ChildAgent, I as InteractionToolOptions, S as SpawnToolOptions, a as SpawnToolState, V as ValidationResult, c as createInteractionTool, b as createSpawnTool, v as validateToolArgs } from './validation-c3MQlCza.js';
+import { Y as ToolDef } from './agent-BBzkPRAu.js';
+export { X as ToolContext, $ as ToolMap } from './agent-BBzkPRAu.js';
 import 'hookable';
 import './presets.js';
 import './types-vA1a_ZX7.js';

package/dist/tools.js

@@ -11,12 +11,11 @@ import {
   multiEdit,
   readFile,
   shell,
-  spawn,
   validateToolArgs,
   writeFile
-} from "./chunk-2AE3VM5O.js";
-import "./chunk-TPXPVEH6.js";
-import "./chunk-IUBBVF53.js";
+} from "./chunk-Z2E5QN5X.js";
+import "./chunk-X3VOTPVM.js";
+import "./chunk-UD25QF3H.js";
 import "./chunk-7H34OFDA.js";
 import "./chunk-JH6IAAFA.js";
 import "./chunk-LNN5UTS2.js";
@@ -33,7 +32,6 @@ export {
   multiEdit,
   readFile,
   shell,
-  spawn,
   validateToolArgs,
   writeFile
 };

package/dist/types.d.ts

@@ -1,7 +1,7 @@
-export { A as Agent, a as AgentAbortedError, b as AgentBehavior, c as AgentContextExceededError, d as AgentHooks, e as AgentOptions, f as AgentProviderError, g as AgentRunOptions, h as AgentStats, i as AgentToolNotAllowedError, j as AnthropicParams, C as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, k as CerebrasParams, l as ChildRunStats, m as ClassifiedError, n as ClassifiedErrorKind, o as CreateSessionOptions, I as ImageContent, M as McpConnection, p as McpServerConfig, q as McpToolHookContext, O as OAuthRefreshHookContext, r as OpenAIParams, s as OpenRouterParams, P as PromptDocumentPart, t as PromptImagePart, u as PromptPart, v as PromptTextPart, w as Provider, x as ProviderCapabilities, R as RemoteStoreOptions, y as RunHookMap, S as Session, z as SessionContentBlock, B as SessionData, D as SessionEndStatus, E as SessionHookContext, F as SessionMessage, G as SessionRun, H as SessionStore, J as SessionTurn, K as SkillConfig, L as SkillResource, N as SkillsConfig, Q as SpawnHookContext, T as StreamCallbacks, U as StreamHookContext, V as StreamOptions, W as ThinkingLevel, X as ToolCall, Y as ToolContext, Z as ToolDef, _ as ToolExecutionMode, $ as ToolHookContext, a0 as ToolMap, a1 as ToolResult, a2 as ToolResultContent, a3 as ToolResultImageContent, a4 as ToolResultTextContent, a5 as ToolSpec, a6 as TurnFinishReason, a7 as TurnResult, a8 as TurnUsage, a9 as matchesContextExceeded, aa as toolOutputByteLength, ab as toolResultToText } from './agent-C9q5VMGa.js';
+export { A as Agent, a as AgentAbortedError, b as AgentBehavior, c as AgentContextExceededError, d as AgentHooks, e as AgentOptions, f as AgentProviderError, g as AgentRunOptions, h as AgentStats, i as AgentToolNotAllowedError, j as AnthropicParams, C as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, k as CerebrasParams, l as ChildRunStats, m as ClassifiedError, n as ClassifiedErrorKind, o as CreateSessionOptions, M as McpConnection, p as McpServerConfig, q as McpToolHookContext, O as OAuthRefreshHookContext, r as OpenAIParams, s as OpenRouterParams, P as PromptDocumentPart, t as PromptImagePart, u as PromptPart, v as PromptTextPart, w as Provider, x as ProviderCapabilities, R as RemoteStoreOptions, y as RunHookMap, S as Session, z as SessionContentBlock, B as SessionData, D as SessionEndStatus, E as SessionHookContext, F as SessionMessage, G as SessionRun, H as SessionStore, I as SessionTurn, J as SkillConfig, K as SkillResource, L as SkillsConfig, N as SpawnHookContext, Q as StreamCallbacks, T as StreamHookContext, U as StreamOptions, V as ThinkingLevel, W as ToolCall, X as ToolContext, Y as ToolDef, Z as ToolExecutionMode, _ as ToolHookContext, $ as ToolMap, a0 as ToolResult, a1 as ToolResultContent, a2 as ToolResultImageContent, a3 as ToolResultTextContent, a4 as ToolSpec, a5 as TurnFinishReason, a6 as TurnResult, a7 as TurnUsage, a8 as matchesContextExceeded, a9 as toolOutputByteLength, aa as toolResultToText } from './agent-BBzkPRAu.js';
 export { C as ContextCapabilities, a as ContextType, E as ExecResult, b as ExecutionContext, c as ExecutionHandle, S as SpawnConfig } from './types-vA1a_ZX7.js';
 export { S as SandboxProvider } from './sandbox-CLghrTLi.js';
 export { Preset } from './presets.js';
-export { C as ChildAgent, I as InteractionToolOptions, S as SpawnToolOptions, a as SpawnToolState, V as ValidationResult } from './validation-BKA33eqb.js';
+export { C as ChildAgent, I as InteractionToolOptions, S as SpawnToolOptions, a as SpawnToolState, V as ValidationResult } from './validation-c3MQlCza.js';
 import 'hookable';
 import '@modelcontextprotocol/sdk/client/index.js';

package/dist/{validation-BKA33eqb.d.ts → validation-c3MQlCza.d.ts}

@@ -1,4 +1,4 @@
-import { Y as ToolContext, Z as ToolDef, h as AgentStats, l as ChildRunStats } from './agent-C9q5VMGa.js';
+import { X as ToolContext, Y as ToolDef, h as AgentStats, l as ChildRunStats } from './agent-BBzkPRAu.js';
 import { Preset } from './presets.js';
 
 /**
@@ -43,18 +43,21 @@ declare function createInteractionTool(options: InteractionToolOptions): ToolDef
  *
  * A configurable factory that reads the parent's preset-y fields from ToolContext.
  *
- * Usage — default (stateless, safe across parent agents):
+ * Usage:
  * ```ts
- * import { spawn } from 'zidane'
+ * import { createSpawnTool } from 'zidane'
  * import { definePreset, basicTools } from 'zidane/presets'
- * const preset = definePreset({ name: 'orchestrator', tools: { ...basicTools, spawn } })
- * ```
  *
- * Usage — with shared state (telemetry, lifecycle callbacks):
- * ```ts
- * const tool = createSpawnTool({ maxConcurrent: 5, onComplete })
+ * const preset = definePreset({
+ *   name: 'orchestrator',
+ *   tools: { ...basicTools, spawn: createSpawnTool({ maxConcurrent: 5 }) },
+ * })
  * ```
  *
+ * Each `createSpawnTool()` call returns a fresh instance with its own
+ * concurrency counter, depth cap, and child-stats accumulator — never
+ * share an instance across unrelated parent agents.
+ *
  * Key guarantees:
  * - **Depth-capped** to `maxDepth` (default 3) to prevent infinite recursion.
  * - **Concurrency slot is reserved synchronously** before any `await`, so a
@@ -135,19 +138,6 @@ interface SpawnToolOptions {
  * agent (or use the stateless default `spawn`) to keep them isolated.
  */
 declare function createSpawnTool(options?: SpawnToolOptions): ToolDef & SpawnToolState;
-/**
- * Default spawn tool.
- *
- * Historically this was a module-scoped `createSpawnTool()` instance shared
- * across every agent using `basic` — which meant `maxConcurrent`, `children`,
- * and `totalChildStats` leaked between unrelated runs. The shared-state
- * surface is preserved for backward compat: the spec + execute still work
- * standalone.
- *
- * Prefer calling `createSpawnTool()` explicitly when you care about
- * telemetry isolation between agents.
- */
-declare const spawn: ToolDef & SpawnToolState;
 
 /**
  * Tool argument validation against JSON Schema-style inputSchema.
@@ -182,4 +172,4 @@ interface ValidationResult {
 }
 declare function validateToolArgs(input: Record<string, unknown>, schema: Record<string, unknown>): ValidationResult;
 
-export { type ChildAgent as C, type InteractionToolOptions as I, type SpawnToolOptions as S, type ValidationResult as V, type SpawnToolState as a, createSpawnTool as b, createInteractionTool as c, spawn as s, validateToolArgs as v };
+export { type ChildAgent as C, type InteractionToolOptions as I, type SpawnToolOptions as S, type ValidationResult as V, type SpawnToolState as a, createSpawnTool as b, createInteractionTool as c, validateToolArgs as v };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zidane",
-  "version": "3.1.2",
+  "version": "3.3.0",
   "description": "an agent that goes straight to the goal",
   "type": "module",
   "private": false,