zidane 5.10.13 → 5.11.0

package/dist/{turn-operations-CCl7rpbT.d.ts → turn-operations-DD1D5VFx.d.ts}

@@ -1,5 +1,5 @@
-import { Nn as TurnUsage, O as SkillConfig, On as ToolResultContent, xn as SessionTurn } from "./agent-BHkvYIH9.js";
-import { D as Owner, E as EditPayload, G as ProviderKey, L as CompletionProvider, M as StreamEvent, R as CompletionReference, W as ProviderAuth, Y as ModelInfo, l as ApprovalDecision, w as EditOutcome } from "./tool-formatters-D_fX6FGl.js";
+import { An as ToolResultContent, Cn as SessionTurn, Fn as TurnUsage, k as SkillConfig } from "./agent-B7ilLoh8.js";
+import { D as Owner, E as EditPayload, G as ProviderKey, L as CompletionProvider, M as StreamEvent, R as CompletionReference, W as ProviderAuth, Y as ModelInfo, l as ApprovalDecision, w as EditOutcome } from "./tool-formatters-DXO8rGut.js";
 
 //#region src/chat/color-gradient.d.ts
 /**
@@ -660,4 +660,4 @@ declare function countNeighbors(turnIds: readonly string[], turnId: string): {
 } | null;
 //#endregion
 export { uniqueFilesFromReferences as $, buildUnifiedDiff as A, buildEditOutcomesAnnotation as B, EditSummary as C, PreviewResult as D, InlineSegment as E, previewEditPayload as F, rewriteMultiEditHeader as G, mergeApprovalAndBodyOutcomes as H, splitLines as I, SKILLS_TRIGGER as J, stripEditOutcomesAnnotation as K, summarizeEditPayload as L, computeLineDiff as M, extractEditPayload as N, applyEditPayload as O, filetypeFromPath as P, createFilesCompletionProvider as Q, tokenize as R, EditHunkSummary as S, InlineDiff as T, parseEditOutcomesFromResult as U, maskToOutcomeKinds as V, resolveApprovalForPayload as W, uniqueSkillNamesFromReferences as X, createSkillsCompletionProvider as Y, FILES_TRIGGER as Z, formatTaskSummary as _, finalizeStreamingMarkdown as a, DiffLine as b, CatalogEntry as c, indexOfEntry as d, FileEntry as et, ageString as f, formatTaskStatus as g, formatDuration as h, turnAsText as i, buildLinearRamp as it, computeInlineDiff as j, buildContextualDiff as k, buildModelCatalog as l, fmtTokens as m, deleteTurnSafely as n, listProjectFiles as nt, finalizeStreamingMarkdownForOwner as o, compactPath as p, summarizeOutcomes as q, truncateTurnsAt as r, blendHsl as rt, turnContextSize as s, countNeighbors as t, ListProjectFilesOptions as tt, filterModelCatalog as u, previewLine as v, HunkResolution as w, DiffOp as x, shortId as y, ResolvedApproval as z };
-//# sourceMappingURL=turn-operations-CCl7rpbT.d.ts.map
+//# sourceMappingURL=turn-operations-DD1D5VFx.d.ts.map

package/dist/{turn-operations-CCl7rpbT.d.ts.map → turn-operations-DD1D5VFx.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"turn-operations-CCl7rpbT.d.ts","names":[],"sources":["../src/chat/color-gradient.ts","../src/chat/files-discovery.ts","../src/chat/completion-files.ts","../src/chat/completion-skills.ts","../src/chat/edit-approval.ts","../src/tools/edit-utils.ts","../src/chat/edit-diff.ts","../src/chat/format.ts","../src/chat/model-catalog.ts","../src/chat/streaming-pure.ts","../src/chat/turn-operations.ts"],"mappings":";;;;;;;;iBAmFgB,QAAA,CAAS,IAAA,UAAc,EAAA,UAAY,CAAA;AAAnD;;;;;AAAA,iBAuBgB,eAAA,CAAgB,IAAA,UAAc,EAAA,UAAY,CAAA;;;;;;;;AAvB1D;;;;;;;;AAA4D;AAAA,UC9D3C,SAAA;EDqFc;ECnF7B,IAAA;EDmF6B;ECjF7B,IAAA;EDiF4C;EC/E5C,MAAA;AAAA;AD+EiE;AAAA,UClClD,uBAAA;;EAEf,GAAA;EArDe;EAuDf,QAAA;;EAEA,MAAA,GAAS,WAAW;AAAA;;;;AAnDd;AA6CR;;;;;iBAkBsB,gBAAA,CAAiB,IAAA,GAAM,uBAAA,GAA+B,OAAA,CAAQ,SAAA;;;;cCrEvE,aAAA;AFqFb;;;;;;;;AAAmE;;;;ACrFnE;;;ADqFA,iBE8BgB,6BAAA,CAA8B,IAAA;EDjH5C,qFCmHA,UAAA,iBAA2B,SAAA;ED/G3B;;AAAM;AA6CR;;;;;;;;;EC+EE,aAAA,SAAsB,OAAA,UAAiB,SAAA,KD7DnB;EC+DpB,KAAA;;;;;;;;;;;;EAYA,UAAA,IAAc,KAAA,EAAO,SAAA;AAAA,IACnB,kBAAA,CAAmB,SAAA;;;AAjJvB;;;iBA0OgB,yBAAA,CACd,UAAA,WAAqB,mBAAA,cACpB,SAAS;;;AF9KgD;AAAA,cG7D/C,cAAA;;;;;;;;AHoFsD;iBGVnD,8BAAA,CAA+B,IAAA;gFAE7C,UAAA,iBAA2B,WAAA,IF7EZ;EE+Ef,UAAA;;;;;;;AFzEM;AA6CR;;;EEuCE,aAAA,SAAsB,OAAA,UAAiB,WAAA;AAAA,IACrC,kBAAA,CAAmB,WAAA;;;;;AFlCD;iBEiGN,8BAAA,CACd,UAAmD,WAA9B,mBAAmB;;;;;AH7FkB;AAuB5D;;;;;iBIrFgB,kBAAA,CACd,IAAA,sBACA,cAAA,UACA,YAAA,YACC,WAAW;;;AJiFqD;;;;ACrFnE;;;;;UGyBiB,gBAAA;EHnBf;EGqBA,QAAA,EAAU,WAAA;EHrBJ;EGuBN,WAAA;EHsBsC;;;;;;;EGdtC,cAAA,EAAgB,WAAW;AAAA;AAAA,iBAGb,yBAAA,CACd,QAAA,EAAU,gBAAA,EACV,OAAA,EAAS,WAAA,GACR,gBAAA;;;;;;;iBAqEa,2BAAA,CAA4B,QAAgC,WAAb,WAAW;;;;;;AH3CmB;;;iBGgE7E,2BAAA,CACd,MAAA,oBAA0B,iBAAA,KACzB,WAAW;AFvId;;;;AAA0B;AAmH1B;;;;;;;;;;AAnHA,iBE2MgB,2BAAA,CAA4B,IAAY;;;;;;;;;;;;;;AF1DxB;AAyFhC;;;;;;;;iBEkBgB,4BAAA,CACd,QAAA,WAAmB,WAAA,IACnB,IAAA,WAAe,WAAA,YACd,WAAA;;;;AD9PH;;;;AAA2B;AA0E3B;;;;;;;;;iBCsNgB,sBAAA,CACd,IAAA,UACA,MAAA,WAAiB,WAAW,IAC5B,IAAA;;;;;;iBA8Cc,iBAAA,CAAkB,QAAA,WAAmB,WAAW;EAC9D,OAAA;EACA,MAAA;EACA,OAAA;EACA,MAAA;EACA,OAAA;EACA,KAAA;AAAA;;;AHxVF;;;;;;;;AAMQ;AA6CR;;;;;;;;;AAMsB;AAYtB;;;;;;;;AArEA,UIwHiB,aAAA;EACf,MAAA;EACA,WAAA;EJrDkF;EIuDlF,GAAA;AAAA;;;iBClHc,kBAAA,CACd,IAAA,UACA,KAAA,EAAO,MAAA,mBACP,YAAA,YACC,WAAW;AAAA,KA0EF,MAAA;AAAA,UAEK,QAAA;EACf,EAAA,EAAI,MAAM;EACV,IAAA;AAAA;AAAA,iBAGc,eAAA,CAAgB,SAAA,UAAmB,SAAA,WAAoB,QAAQ;;;;;ANjCnB;iBMkF5C,UAAA,CAAW,CAAS;AAAA,UAwBnB,aAAA;EACf,IAAA;EACA,OAAO;AAAA;AAAA,UAGQ,UAAA;EACf,WAAA,EAAa,aAAA;EACb,WAAA,EAAa,aAAa;AAAA;AAAA,iBAGZ,iBAAA,CAAkB,OAAA,UAAiB,OAAA,WAAkB,UAAU;;;ALlL/E;;;;;;iBKoPgB,QAAA,CAAS,CAAS;;AL9O1B;AA6CR;;;;;;;iBKwOgB,gBAAA,CAAiB,OAAA,EAAS,WAAW,EAAE,YAAA;;ALlOjC;AAYtB;;;;;;;;;;;;;AAA6F;;;;ACrE7F;;iBI0TgB,mBAAA,CACd,OAAA,EAAS,WAAW,EACpB,YAAA,UACA,YAAA;AAAA,UAmFe,eAAA;EJhZS;EIkZxB,IAAA;EJ/R2C;EIiS3C,KAAA;EJ/R2B;EIiS3B,OAAA;EJpRsB;EIsRtB,QAAA;EJvQqB;EIyQrB,QAAA;AAAA;AAAA,UAGe,WAAA;EACf,UAAA;EACA,YAAA;EACA,KAAA,EAAO,eAAe;AAAA;;;;;;;;;;AJ/QQ;AAyFhC;;;iBIsMgB,oBAAA,CAAqB,OAAA,EAAS,WAAA,GAAc,WAAW;AAAA,UA+GtD,cAAA;EJpTf;;;AACU;;EIyTV,QAAA;;EAEA,GAAA,GAAM,aAAa;EHtiBM;EGwiBzB,WAAA;EHxiByB;EG0iBzB,SAAA;AAAA;AAAA,UAGe,aAAA;;EAEf,QAAA;EHtduC;EGwdvC,UAAA,EAAY,cAAA;EHvdS;;;;;;EG8drB,WAAA;EH/dA;;;;;;EGseA,eAAA,EAAiB,WAAW;AAAA;AAAA,iBAGd,kBAAA,CACd,OAAA,EAAS,WAAA,EACT,YAAA,UACA,YAAA,YACC,aAAa;AAAA,iBA8EA,gBAAA,CAAiB,OAAoB,EAAX,WAAW;AAAA,iBA4DrC,gBAAA,CAAiB,IAAY;;;;iBCztB7B,SAAA,CAAU,CAAS;;iBASnB,SAAA,CAAU,EAAA,UAAY,GAAwB;;iBAa9C,OAAA,CAAQ,EAAU;;;;;;;;APgD0B;AAuB5D;;;;;;;;AAAmE;;iBOjDnD,WAAA,CAAY,CAAA,UAAW,GAAW;;ANpClD;;;;;;;;AAMQ;AA6CR;;;;;;;iBMSgB,cAAA,CAAe,EAAU;;ANHnB;AAYtB;;;;;;;iBMgBgB,gBAAA,CAAiB,IAAA;EAC/B,MAAA;EACA,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAO;AAAA;;ANnBoE;;;;ACrE7F;;;;AAA0B;AAmH1B;iBKTgB,iBAAA,CAAkB,IAAA;EAChC,OAAA;EACA,MAAA;EACA,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAO;EACvB,UAAA;AAAA,GACC,eAAA;;;;;;;;;;;;;;;iBAkBa,WAAA,CAAY,IAAA,UAAc,QAAA,WAAmB,IAAA;;;APpED;AAAA,UQnE3C,YAAA;EACf,WAAA,EAAa,WAAA;EACb,aAAA;EACA,KAAA,EAAO,SAAS;ERuFc;;;;AAAmC;;;EQ/EjE,YAAA;AAAA;;;;;;;;APAM;AA6CR;;;;;iBO7BgB,iBAAA,CAAkB,IAAA;EAChC,SAAA,WAAoB,YAAA;EACpB,SAAA,GAAY,GAAA,EAAK,WAAA,cAAyB,SAAA,IPiCtB;EO/BpB,OAAA;IAAY,WAAA,EAAa,WAAA;IAAa,OAAA;EAAA;AAAA,IACpC,YAAA;;;;;;;;;;AP0CyF;iBOD7E,kBAAA,CACd,OAAA,WAAkB,YAAA,IAClB,KAAA,WACC,YAAY;;;ANvEf;;;iBMoFgB,YAAA,CACd,OAAA,WAAkB,YAAA,IAClB,MAAA;EAAU,WAAA,EAAa,WAAW;EAAE,OAAA;AAAA;;;;iBCvFtB,yBAAA,CAA0B,MAAA,EAAQ,WAAA,KAAgB,WAAW;AT+DjB;AAAA,iBSlD5C,iCAAA,CAAkC,MAAA,EAAQ,WAAA,IAAe,KAAA,EAAO,KAAA,GAAQ,WAAA;;;;;;;;ATyErB;;;;ACrFnE;iBQwCgB,eAAA,CAAgB,KAA4B,EAArB,SAAS;;;AT6ChD;;;;;;;;AAAmE;;;;ACrFnE;;;;;ADqFA,iBUzEgB,eAAA,CAAgB,KAAA,WAAgB,WAAA,IAAe,MAAA,WAAiB,WAAW;;;ATNnF;AA6CR;;;;;;;;;AAMsB;AAYtB;;;;iBShCgB,gBAAA,CAAiB,KAAA,WAAgB,WAAA,IAAe,MAAA,WAAiB,WAAW;;;;;;;;;iBAwD5E,UAAA,CAAW,IAAiB,EAAX,WAAW;;;;AR7F5C;;iBQ4HgB,cAAA,CACd,OAAA,qBACA,MAAA;EACG,MAAA;EAAgB,KAAA;AAAA"}
+{"version":3,"file":"turn-operations-DD1D5VFx.d.ts","names":[],"sources":["../src/chat/color-gradient.ts","../src/chat/files-discovery.ts","../src/chat/completion-files.ts","../src/chat/completion-skills.ts","../src/chat/edit-approval.ts","../src/tools/edit-utils.ts","../src/chat/edit-diff.ts","../src/chat/format.ts","../src/chat/model-catalog.ts","../src/chat/streaming-pure.ts","../src/chat/turn-operations.ts"],"mappings":";;;;;;;;iBAmFgB,QAAA,CAAS,IAAA,UAAc,EAAA,UAAY,CAAA;AAAnD;;;;;AAAA,iBAuBgB,eAAA,CAAgB,IAAA,UAAc,EAAA,UAAY,CAAA;;;;;;;;AAvB1D;;;;;;;;AAA4D;AAAA,UC9D3C,SAAA;EDqFc;ECnF7B,IAAA;EDmF6B;ECjF7B,IAAA;EDiF4C;EC/E5C,MAAA;AAAA;AD+EiE;AAAA,UClClD,uBAAA;;EAEf,GAAA;EArDe;EAuDf,QAAA;;EAEA,MAAA,GAAS,WAAW;AAAA;;;;AAnDd;AA6CR;;;;;iBAkBsB,gBAAA,CAAiB,IAAA,GAAM,uBAAA,GAA+B,OAAA,CAAQ,SAAA;;;;cCrEvE,aAAA;AFqFb;;;;;;;;AAAmE;;;;ACrFnE;;;ADqFA,iBE8BgB,6BAAA,CAA8B,IAAA;EDjH5C,qFCmHA,UAAA,iBAA2B,SAAA;ED/G3B;;AAAM;AA6CR;;;;;;;;;EC+EE,aAAA,SAAsB,OAAA,UAAiB,SAAA,KD7DnB;EC+DpB,KAAA;;;;;;;;;;;;EAYA,UAAA,IAAc,KAAA,EAAO,SAAA;AAAA,IACnB,kBAAA,CAAmB,SAAA;;;AAjJvB;;;iBA0OgB,yBAAA,CACd,UAAA,WAAqB,mBAAA,cACpB,SAAS;;;AF9KgD;AAAA,cG7D/C,cAAA;;;;;;;;AHoFsD;iBGVnD,8BAAA,CAA+B,IAAA;gFAE7C,UAAA,iBAA2B,WAAA,IF7EZ;EE+Ef,UAAA;;;;;;;AFzEM;AA6CR;;;EEuCE,aAAA,SAAsB,OAAA,UAAiB,WAAA;AAAA,IACrC,kBAAA,CAAmB,WAAA;;;;;AFlCD;iBEiGN,8BAAA,CACd,UAAmD,WAA9B,mBAAmB;;;;;AH7FkB;AAuB5D;;;;;iBIrFgB,kBAAA,CACd,IAAA,sBACA,cAAA,UACA,YAAA,YACC,WAAW;;;AJiFqD;;;;ACrFnE;;;;;UGyBiB,gBAAA;EHnBf;EGqBA,QAAA,EAAU,WAAA;EHrBJ;EGuBN,WAAA;EHsBsC;;;;;;;EGdtC,cAAA,EAAgB,WAAW;AAAA;AAAA,iBAGb,yBAAA,CACd,QAAA,EAAU,gBAAA,EACV,OAAA,EAAS,WAAA,GACR,gBAAA;;;;;;;iBAqEa,2BAAA,CAA4B,QAAgC,WAAb,WAAW;;;;;;AH3CmB;;;iBGgE7E,2BAAA,CACd,MAAA,oBAA0B,iBAAA,KACzB,WAAW;AFvId;;;;AAA0B;AAmH1B;;;;;;;;;;AAnHA,iBE2MgB,2BAAA,CAA4B,IAAY;;;;;;;;;;;;;;AF1DxB;AAyFhC;;;;;;;;iBEkBgB,4BAAA,CACd,QAAA,WAAmB,WAAA,IACnB,IAAA,WAAe,WAAA,YACd,WAAA;;;;AD9PH;;;;AAA2B;AA0E3B;;;;;;;;;iBCsNgB,sBAAA,CACd,IAAA,UACA,MAAA,WAAiB,WAAW,IAC5B,IAAA;;;;;;iBA8Cc,iBAAA,CAAkB,QAAA,WAAmB,WAAW;EAC9D,OAAA;EACA,MAAA;EACA,OAAA;EACA,MAAA;EACA,OAAA;EACA,KAAA;AAAA;;;AHxVF;;;;;;;;AAMQ;AA6CR;;;;;;;;;AAMsB;AAYtB;;;;;;;;AArEA,UIwHiB,aAAA;EACf,MAAA;EACA,WAAA;EJrDkF;EIuDlF,GAAA;AAAA;;;iBClHc,kBAAA,CACd,IAAA,UACA,KAAA,EAAO,MAAA,mBACP,YAAA,YACC,WAAW;AAAA,KA0EF,MAAA;AAAA,UAEK,QAAA;EACf,EAAA,EAAI,MAAM;EACV,IAAA;AAAA;AAAA,iBAGc,eAAA,CAAgB,SAAA,UAAmB,SAAA,WAAoB,QAAQ;;;;;ANjCnB;iBMkF5C,UAAA,CAAW,CAAS;AAAA,UAwBnB,aAAA;EACf,IAAA;EACA,OAAO;AAAA;AAAA,UAGQ,UAAA;EACf,WAAA,EAAa,aAAA;EACb,WAAA,EAAa,aAAa;AAAA;AAAA,iBAGZ,iBAAA,CAAkB,OAAA,UAAiB,OAAA,WAAkB,UAAU;;;ALlL/E;;;;;;iBKoPgB,QAAA,CAAS,CAAS;;AL9O1B;AA6CR;;;;;;;iBKwOgB,gBAAA,CAAiB,OAAA,EAAS,WAAW,EAAE,YAAA;;ALlOjC;AAYtB;;;;;;;;;;;;;AAA6F;;;;ACrE7F;;iBI0TgB,mBAAA,CACd,OAAA,EAAS,WAAW,EACpB,YAAA,UACA,YAAA;AAAA,UAmFe,eAAA;EJhZS;EIkZxB,IAAA;EJ/R2C;EIiS3C,KAAA;EJ/R2B;EIiS3B,OAAA;EJpRsB;EIsRtB,QAAA;EJvQqB;EIyQrB,QAAA;AAAA;AAAA,UAGe,WAAA;EACf,UAAA;EACA,YAAA;EACA,KAAA,EAAO,eAAe;AAAA;;;;;;;;;;AJ/QQ;AAyFhC;;;iBIsMgB,oBAAA,CAAqB,OAAA,EAAS,WAAA,GAAc,WAAW;AAAA,UA+GtD,cAAA;EJpTf;;;AACU;;EIyTV,QAAA;;EAEA,GAAA,GAAM,aAAa;EHtiBM;EGwiBzB,WAAA;EHxiByB;EG0iBzB,SAAA;AAAA;AAAA,UAGe,aAAA;;EAEf,QAAA;EHtduC;EGwdvC,UAAA,EAAY,cAAA;EHvdS;;;;;;EG8drB,WAAA;EH/dA;;;;;;EGseA,eAAA,EAAiB,WAAW;AAAA;AAAA,iBAGd,kBAAA,CACd,OAAA,EAAS,WAAA,EACT,YAAA,UACA,YAAA,YACC,aAAa;AAAA,iBA8EA,gBAAA,CAAiB,OAAoB,EAAX,WAAW;AAAA,iBA4DrC,gBAAA,CAAiB,IAAY;;;;iBCztB7B,SAAA,CAAU,CAAS;;iBASnB,SAAA,CAAU,EAAA,UAAY,GAAwB;;iBAa9C,OAAA,CAAQ,EAAU;;;;;;;;APgD0B;AAuB5D;;;;;;;;AAAmE;;iBOjDnD,WAAA,CAAY,CAAA,UAAW,GAAW;;ANpClD;;;;;;;;AAMQ;AA6CR;;;;;;;iBMSgB,cAAA,CAAe,EAAU;;ANHnB;AAYtB;;;;;;;iBMgBgB,gBAAA,CAAiB,IAAA;EAC/B,MAAA;EACA,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAO;AAAA;;ANnBoE;;;;ACrE7F;;;;AAA0B;AAmH1B;iBKTgB,iBAAA,CAAkB,IAAA;EAChC,OAAA;EACA,MAAA;EACA,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAO;EACvB,UAAA;AAAA,GACC,eAAA;;;;;;;;;;;;;;;iBAkBa,WAAA,CAAY,IAAA,UAAc,QAAA,WAAmB,IAAA;;;APpED;AAAA,UQnE3C,YAAA;EACf,WAAA,EAAa,WAAA;EACb,aAAA;EACA,KAAA,EAAO,SAAS;ERuFc;;;;AAAmC;;;EQ/EjE,YAAA;AAAA;;;;;;;;APAM;AA6CR;;;;;iBO7BgB,iBAAA,CAAkB,IAAA;EAChC,SAAA,WAAoB,YAAA;EACpB,SAAA,GAAY,GAAA,EAAK,WAAA,cAAyB,SAAA,IPiCtB;EO/BpB,OAAA;IAAY,WAAA,EAAa,WAAA;IAAa,OAAA;EAAA;AAAA,IACpC,YAAA;;;;;;;;;;AP0CyF;iBOD7E,kBAAA,CACd,OAAA,WAAkB,YAAA,IAClB,KAAA,WACC,YAAY;;;ANvEf;;;iBMoFgB,YAAA,CACd,OAAA,WAAkB,YAAA,IAClB,MAAA;EAAU,WAAA,EAAa,WAAW;EAAE,OAAA;AAAA;;;;iBCvFtB,yBAAA,CAA0B,MAAA,EAAQ,WAAA,KAAgB,WAAW;AT+DjB;AAAA,iBSlD5C,iCAAA,CAAkC,MAAA,EAAQ,WAAA,IAAe,KAAA,EAAO,KAAA,GAAQ,WAAA;;;;;;;;ATyErB;;;;ACrFnE;iBQwCgB,eAAA,CAAgB,KAA4B,EAArB,SAAS;;;AT6ChD;;;;;;;;AAAmE;;;;ACrFnE;;;;;ADqFA,iBUzEgB,eAAA,CAAgB,KAAA,WAAgB,WAAA,IAAe,MAAA,WAAiB,WAAW;;;ATNnF;AA6CR;;;;;;;;;AAMsB;AAYtB;;;;iBShCgB,gBAAA,CAAiB,KAAA,WAAgB,WAAA,IAAe,MAAA,WAAiB,WAAW;;;;;;;;;iBAwD5E,UAAA,CAAW,IAAiB,EAAX,WAAW;;;;AR7F5C;;iBQ4HgB,cAAA,CACd,OAAA,qBACA,MAAA;EACG,MAAA;EAAgB,KAAA;AAAA"}

package/dist/{types-BibzMDjX.d.ts → types-B39tBba1.d.ts}

@@ -60,8 +60,31 @@ interface ExecResult {
 interface SpawnConfig {
   /** Working directory (created if it doesn't exist) */
   cwd?: string;
+  /**
+   * Optional workspace-containment root for the file methods (`readFile`,
+   * `writeFile`, `listFiles`) of the process context.
+   *
+   * When set, a resolved path that escapes this root (via absolute path,
+   * `..`, or a symlink pointing outside) is rejected before any I/O. Default
+   * unset = no containment (back-compat; the agent can read/write anywhere
+   * the host process can). Set this for untrusted workloads to confine file
+   * tools to a directory. Shell commands are not covered — use a sandbox /
+   * docker context for full isolation.
+   */
+  workspaceRoot?: string;
   /** Environment variables */
   env?: Record<string, string>;
+  /**
+   * Whether spawned shells inherit the parent `process.env` (process context).
+   *
+   * Default `true` (preserves existing behavior — children see the parent
+   * environment including anything Bun auto-loaded from `.env`). Set `false`
+   * for untrusted workloads so secrets in the parent environment aren't
+   * readable by tool commands; only `env` / per-call env plus a minimal base
+   * (`PATH`, `HOME`, `SHELL`, `LANG`, `LC_ALL`, `USER`, `TERM`, `TMPDIR`) are
+   * passed through.
+   */
+  inheritEnv?: boolean;
   /** Docker image (only for 'docker' context) */
   image?: string;
   /** Docker container name prefix (only for 'docker' context) */
@@ -78,6 +101,12 @@ interface SpawnConfig {
   sandbox?: {
     provider: string;
     apiKey?: string;
+    /**
+     * Attach to a pre-existing sandbox by id rather than creating one
+     * (provider-specific; E2B maps it to `Sandbox.connect`). The provider
+     * leaves a connected sandbox running on teardown.
+     */
+    sandboxId?: string;
     [key: string]: unknown;
   };
   /**
@@ -128,6 +157,44 @@ interface SpawnConfig {
    * a label they own: `docker ps -aq --filter label=my-app=true`.
    */
   labels?: Record<string, string>;
+  /**
+   * Container hardening options (docker context only).
+   *
+   * All fields are opt-in and OFF by default to preserve existing behavior
+   * (containers run with the image's default user/capabilities). Enable them
+   * for untrusted workloads. `dropAllCapabilities` and a non-root `user`
+   * (see {@link SpawnConfig.user}) can break images that expect root or
+   * specific capabilities, so they are not applied unless requested.
+   */
+  hardening?: ContextHardening;
+}
+/**
+ * Opt-in container hardening for the docker context. Every field defaults to
+ * "unset" so an omitted `hardening` (or omitted field) reproduces the prior,
+ * unrestricted behavior — this keeps the option purely additive.
+ */
+interface ContextHardening {
+  /**
+   * Drop all Linux capabilities (`CapDrop: ['ALL']`). Strong isolation, but
+   * breaks images needing capabilities (e.g. binding low ports, `ping`).
+   * Default: `false`.
+   */
+  dropAllCapabilities?: boolean;
+  /**
+   * Set `no-new-privileges` so processes can't gain privileges via setuid
+   * binaries. Low blast radius; safe for most workloads. Default: `false`.
+   */
+  noNewPrivileges?: boolean;
+  /**
+   * Mount the container root filesystem read-only. Pair with writable mounts
+   * for scratch space. Default: `false`.
+   */
+  readonlyRootfs?: boolean;
+  /**
+   * Max number of processes (`PidsLimit`) — caps fork-bombs. Default: unset
+   * (no limit). A few hundred is usually plenty for an agent sandbox.
+   */
+  pidsLimit?: number;
 }
 interface ContextMount {
   /** Absolute host path to mount. */
@@ -420,5 +487,5 @@ interface TaskStallInfo {
   bytesWritten: number;
 }
 //#endregion
-export { DetachedTasksCapability as a, ExecutionHandle as c, TaskExitInfo as d, TaskHandle as f, ContextType as i, SpawnConfig as l, resolveDetachedTasksCapability as m, ContextCapabilities as n, ExecResult as o, TaskStallInfo as p, ContextMount as r, ExecutionContext as s, BackgroundTaskStatus as t, TaskEntry as u };
-//# sourceMappingURL=types-BibzMDjX.d.ts.map
+export { ContextType as a, ExecutionContext as c, TaskEntry as d, TaskExitInfo as f, resolveDetachedTasksCapability as h, ContextMount as i, ExecutionHandle as l, TaskStallInfo as m, ContextCapabilities as n, DetachedTasksCapability as o, TaskHandle as p, ContextHardening as r, ExecResult as s, BackgroundTaskStatus as t, SpawnConfig as u };
+//# sourceMappingURL=types-B39tBba1.d.ts.map

package/dist/types-B39tBba1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-B39tBba1.d.ts","names":[],"sources":["../src/contexts/types.ts"],"mappings":";;AA4BA;;;;AAAmC;AAEnC;;;;;;;;;;;AAeyC;AAOzC;;;;;KAxBY,uBAAA;AAAA,UAEK,mBAAA;EAsBiF;EApBhG,KAAA;EA8Be;EA5Bf,UAAA;;EAEA,OAAA;EA2BA;EAzBA,GAAA;EA0BM;;;AAEH;AAOL;;EA5BE,aAAA,GAAgB,uBAAuB;AAAA;;;;;iBAOzB,8BAAA,CAA+B,OAAA,EAAS,gBAAA,GAAmB,uBAAuB;AA+BlG;AAAA,UArBiB,eAAA;EACf,EAAA;EACA,IAAA,EAAM,WAAW;EAoDR;EAlDT,GAAA;AAAA;AAAA,UAOe,UAAA;EACf,MAAA;EACA,MAAA;EACA,QAAA;AAAA;AAAA,UAOe,WAAA;EAgBT;EAdN,GAAA;EA2BA;;;;;;;;;;;EAfA,aAAA;EAuCG;EArCH,GAAA,GAAM,MAAA;EA0DN;;;;;;;;;;EA/CA,UAAA;EAuF4B;EArF5B,KAAA;EA6Fe;EA3Ff,IAAA;;EAEA,MAAA,GAAS,YAAA;EA+FT;EA7FA,MAAA;IAuGA,yBArGE,MAAA,WA0GO;IAxGP,GAAA,WA2Ga;IAzGb,OAAA;EAAA;EAyGyB;EAtG3B,OAAA;IACE,QAAA;IACA,MAAA;IAiHF;;AAAM;AAOR;;IAlHI,SAAA;IAAA,CACC,GAAA;EAAA;EAmHY;;;;;;;;EAxGf,cAAA;EAmIiF;;;;;;;;EAzHjF,KAAA,GAAQ,KAAA;IAAQ,SAAA;IAAmB,IAAA;IAAe,KAAA;EAAA;EAiNxC;;;;;;;;;EAtMV,IAAA;EA6PsB;;;;;;;EApPtB,OAAA;EAsQuE;;;;;;;EA7PvE,MAAA,GAAS,MAAA;EA8QoC;;;;;;;;;EAnQ7C,SAAA,GAAY,gBAAA;AAAA;;;;;;UAQG,gBAAA;EAyE0F;;;;;EAnEzG,mBAAA;EAkGA;;;;EA7FA,eAAA;EAkGI;;;;EA7FJ,cAAA;EAuGc;;;;EAlGd,SAAA;AAAA;AAAA,UAGe,YAAA;EAkHV;EAhHL,MAAA;EA4HA;EA1HA,MAAA;EA2HE;EAzHF,QAAA;EA2HK;;;;;;EApHL,MAAA;AAAA;AAAA,KAOU,WAAA;AAAA,UAEK,gBAAA;EAyIb;EAAA,SAvIO,IAAA,EAAM,WAAA;EAwImB;EAAA,SArIzB,YAAA,EAAc,mBAAA;EAqIrB;EAlIF,KAAA,GAAQ,MAAA,GAAS,WAAA,KAAgB,OAAA,CAAQ,eAAA;EAmI5B;;;;;;;;;;;;;;;;;EAhHb,IAAA,GAAO,MAAA,EAAQ,eAAA,EAAiB,OAAA,UAAiB,OAAA;IAAY,GAAA;IAAc,GAAA,GAAM,MAAA;IAAwB,OAAA;IAAkB,MAAA,GAAS,WAAA;EAAA,MAAkB,OAAA,CAAQ,UAAA;EAiK1I;;;;;;;;;;;;;;;;;;;;AAiByB;AAiB/C;;;;AAAgC;AAUhC;;;EA9KE,cAAA,IACE,MAAA,EAAQ,eAAA,EACR,OAAA,UACA,OAAA;IACE,GAAA;IACA,GAAA,GAAM,MAAA;IAoLV;;AAAU;AAaZ;;;;IAzLM,SAAA,UA6LK;IA3LL,MAAA,IAAU,IAAA,EAAM,YAAA;IA2LG;;;;;;IApLnB,cAAA;IAoLK;;;;;;AAKF;IAjLH,cAAA,WAyLoB;IAvLpB,OAAA,IAAW,IAAA,EAAM,aAAA;EAAA,MAEhB,OAAA,CAAQ,UAAA;EAsLb;;;;;;;;;;EA1KA,cAAA,IACE,MAAA,EAAQ,eAAA,EACR,MAAA,aACG,OAAA,CAAQ,YAAA;EAqLJ;;;;AAEG;EAhLZ,cAAA,IACE,MAAA,EAAQ,eAAA,KACL,OAAA,UAAiB,SAAA;EAuLM;;;;;;;;;AAOhB;;;;;;;;EA3KZ,cAAA,IACE,MAAA,EAAQ,eAAA,EACR,MAAA,UACA,OAAA;IAAY,SAAA;IAAoB,MAAA,GAAS,WAAA;EAAA,MACtC,OAAA,CAAQ,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;EA2Bb,uBAAA,IACE,UAAA,EAAY,eAAA,EACZ,QAAA,EAAU,eAAA,EACV,SAAA,IAAa,IAAA,EAAM,YAAA,cAChB,OAAA,UAAiB,SAAA;;EAGtB,QAAA,GAAW,MAAA,EAAQ,eAAA,EAAiB,IAAA,aAAiB,OAAA;;;;;;;;;;;EAYrD,cAAA,IAAkB,MAAA,EAAQ,eAAA,EAAiB,IAAA,aAAiB,OAAA,CAAQ,UAAA;;EAGpE,SAAA,GAAY,MAAA,EAAQ,eAAA,EAAiB,IAAA,UAAc,OAAA,aAAoB,OAAA;;EAGvE,SAAA,GAAY,MAAA,EAAQ,eAAA,EAAiB,IAAA,aAAiB,OAAA;;;;;;;;;;EAWtD,aAAA,IAAiB,MAAA,EAAQ,eAAA,EAAiB,aAAA,aAA0B,OAAA;;EAGpE,OAAA,GAAU,MAAA,EAAQ,eAAA,KAAoB,OAAA;AAAA;;;;;;;;;;;KAiB5B,oBAAA;;;;;;;;;UAUK,UAAA;;;;;;;EAOf,MAAA;;EAEA,GAAA;;EAEA,UAAA;AAAA;;;;;;;;;;;UAae,YAAA;EACf,MAAA;EACA,MAAA,EAAQ,OAAA,CAAQ,oBAAA;EAChB,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAA;EAChB,UAAA;;EAEA,UAAA;;EAEA,OAAA;AAAA;;;;;;UAQe,SAAA;EACf,MAAA;EACA,GAAA;EACA,OAAA;EACA,GAAA;EACA,SAAA;;;;;;EAMA,OAAA;EACA,UAAA;EACA,MAAA,EAAQ,oBAAA;EACR,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAO;;EAEvB,YAAA;AAAA;;;;;;;UASe,aAAA;EACf,MAAA;EACA,OAAA;EACA,UAAA;;EAEA,YAAA;;EAEA,YAAA;AAAA"}

package/dist/types.d.ts

@@ -1,5 +1,5 @@
-import { $t as AgentStats, A as SkillResource, An as ToolResultImageContent, B as RemoteStoreOptions, Bn as AgentProviderError, Bt as CerebrasParams, C as ReadStateMap, Cn as StreamHookContext, Dn as ToolOutcome, En as ToolHookContext, Et as OpenRouterParams, F as SessionData, Fn as toolOutputByteLength, Gn as ClassifiedErrorKind, I as SessionRun, In as toolResultToText, L as SessionStore, Ln as AgentAbortedError, M as SkillsConfig, Mn as TurnFinishReason, N as CreateSessionOptions, Nn as TurnUsage, O as SkillConfig, On as ToolResultContent, P as Session, Pn as toolOutputBudgetByteLength, Pt as OpenAIParams, Qt as AgentRunOptions, Rn as AgentBudgetExceededError, S as ReadStateEntry, Sn as SpawnHookContext, Un as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, Vn as AgentToolNotAllowedError, Wn as ClassifiedError, Xt as AgentBehavior, Zt as AgentClock, _n as SessionContentBlock, _t as ToolCall, an as McpServerConfig, b as ToolDef, bn as SessionMessage, bt as TurnResult, cn as OAuthRefreshHookContext, dn as PromptPart, en as ChildRunStats, fn as PromptTextPart, ft as Provider, gn as RunHookMap, hn as RetryConfig, ht as StreamOptions, i as AgentOptions, jn as ToolResultTextContent, kn as ToolResultDocumentContent, ln as PromptDocumentPart, mn as RepeatGuardToolMatcher, mt as StreamCallbacks, nn as DEFAULT_AGENT_CLOCK, on as McpToolHookContext, p as McpConnection, pn as RepeatGuardConfig, pt as ProviderCapabilities, qn as matchesContextExceeded, qt as AnthropicParams, r as AgentHooks, t as Agent, un as PromptImagePart, vn as SessionEndStatus, vt as ToolResult, wn as ThinkingLevel, x as ToolMap, xn as SessionTurn, y as ToolContext, yn as SessionHookContext, yt as ToolSpec, zn as AgentContextExceededError } from "./agent-BHkvYIH9.js";
-import { a as DetachedTasksCapability, c as ExecutionHandle, d as TaskExitInfo, f as TaskHandle, i as ContextType, l as SpawnConfig, n as ContextCapabilities, o as ExecResult, p as TaskStallInfo, s as ExecutionContext, t as BackgroundTaskStatus, u as TaskEntry } from "./types-BibzMDjX.js";
-import { t as SandboxProvider } from "./index-C_t8tW_X.js";
-import { C as ModelUsage, T as statsByModel, fr as ChildAgent, jr as InteractionToolOptions, mr as SpawnToolState, pr as SpawnToolOptions, sr as ValidationResult, t as Preset, w as flattenTurns } from "./index-C4aT2kO_.js";
-export { type Agent, AgentAbortedError, type AgentBehavior, AgentBudgetExceededError, type AgentClock, AgentContextExceededError, type AgentHooks, type AgentOptions, AgentProviderError, type AgentRunOptions, type AgentStats, AgentToolNotAllowedError, type AnthropicParams, type BackgroundTaskStatus, CONTEXT_EXCEEDED_MESSAGE_PATTERNS, type CerebrasParams, type ChildAgent, type ChildRunStats, type ClassifiedError, type ClassifiedErrorKind, type ContextCapabilities, type ContextType, type CreateSessionOptions, DEFAULT_AGENT_CLOCK, type DetachedTasksCapability, type ExecResult, type ExecutionContext, type ExecutionHandle, type InteractionToolOptions, type McpConnection, type McpServerConfig, type McpToolHookContext, type ModelUsage, type OAuthRefreshHookContext, type OpenAIParams, type OpenRouterParams, type Preset, type PromptDocumentPart, type PromptImagePart, type PromptPart, type PromptTextPart, type Provider, type ProviderCapabilities, type ReadStateEntry, type ReadStateMap, type RemoteStoreOptions, type RepeatGuardConfig, type RepeatGuardToolMatcher, type RetryConfig, type RunHookMap, type SandboxProvider, type Session, type SessionContentBlock, type SessionData, type SessionEndStatus, type SessionHookContext, type SessionMessage, type SessionRun, type SessionStore, type SessionTurn, type SkillConfig, type SkillResource, type SkillsConfig, type SpawnConfig, type SpawnHookContext, type SpawnToolOptions, type SpawnToolState, type StreamCallbacks, type StreamHookContext, type StreamOptions, type TaskEntry, type TaskExitInfo, type TaskHandle, type TaskStallInfo, type ThinkingLevel, type ToolCall, type ToolContext, type ToolDef, type ToolHookContext, type ToolMap, type ToolOutcome, type ToolResult, type ToolResultContent, type ToolResultDocumentContent, type ToolResultImageContent, type ToolResultTextContent, type ToolSpec, type TurnFinishReason, type TurnResult, type TurnUsage, type ValidationResult, flattenTurns, matchesContextExceeded, statsByModel, toolOutputBudgetByteLength, toolOutputByteLength, toolResultToText };
+import { $t as AgentClock, An as ToolResultContent, Bn as AgentBudgetExceededError, C as ReadStateMap, Cn as SessionTurn, En as ThinkingLevel, F as Session, Fn as TurnUsage, Gn as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, H as RemoteStoreOptions, Hn as AgentProviderError, Ht as CerebrasParams, I as SessionData, In as toolOutputBudgetByteLength, It as OpenAIParams, Kn as ClassifiedError, L as SessionRun, Ln as toolOutputByteLength, Mn as ToolResultImageContent, N as SkillsConfig, Nn as ToolResultTextContent, On as ToolHookContext, Ot as OpenRouterParams, P as CreateSessionOptions, Pn as TurnFinishReason, Qt as AgentBehavior, R as SessionStore, Rn as toolResultToText, S as ReadStateEntry, Sn as SessionMessage, St as TurnResult, Tn as StreamHookContext, Un as AgentToolNotAllowedError, Vn as AgentContextExceededError, Yn as matchesContextExceeded, Yt as AnthropicParams, _n as RetryConfig, _t as StreamOptions, b as ToolDef, bn as SessionEndStatus, bt as ToolResult, cn as McpToolHookContext, dn as PromptDocumentPart, en as AgentRunOptions, fn as PromptImagePart, gn as RepeatGuardToolMatcher, gt as StreamCallbacks, hn as RepeatGuardConfig, ht as ProviderCapabilities, i as AgentOptions, in as DEFAULT_AGENT_CLOCK, j as SkillResource, jn as ToolResultDocumentContent, k as SkillConfig, kn as ToolOutcome, mn as PromptTextPart, mt as Provider, n as AgentHookMap, nn as ChildRunStats, p as McpConnection, pn as PromptPart, qn as ClassifiedErrorKind, r as AgentHooks, sn as McpServerConfig, t as Agent, tn as AgentStats, un as OAuthRefreshHookContext, vn as RunHookMap, wn as SpawnHookContext, x as ToolMap, xn as SessionHookContext, xt as ToolSpec, y as ToolContext, yn as SessionContentBlock, yt as ToolCall, zn as AgentAbortedError } from "./agent-B7ilLoh8.js";
+import { a as ContextType, c as ExecutionContext, d as TaskEntry, f as TaskExitInfo, l as ExecutionHandle, m as TaskStallInfo, n as ContextCapabilities, o as DetachedTasksCapability, p as TaskHandle, r as ContextHardening, s as ExecResult, t as BackgroundTaskStatus, u as SpawnConfig } from "./types-B39tBba1.js";
+import { t as SandboxProvider } from "./index-CrMb8jCE.js";
+import { C as ModelUsage, T as statsByModel, Xn as ValidationResult, br as InteractionToolOptions, nr as SpawnToolOptions, rr as SpawnToolState, t as Preset, tr as ChildAgent, w as flattenTurns } from "./index-C-zEbeFI.js";
+export { type Agent, AgentAbortedError, type AgentBehavior, AgentBudgetExceededError, type AgentClock, AgentContextExceededError, type AgentHookMap, type AgentHooks, type AgentOptions, AgentProviderError, type AgentRunOptions, type AgentStats, AgentToolNotAllowedError, type AnthropicParams, type BackgroundTaskStatus, CONTEXT_EXCEEDED_MESSAGE_PATTERNS, type CerebrasParams, type ChildAgent, type ChildRunStats, type ClassifiedError, type ClassifiedErrorKind, type ContextCapabilities, type ContextHardening, type ContextType, type CreateSessionOptions, DEFAULT_AGENT_CLOCK, type DetachedTasksCapability, type ExecResult, type ExecutionContext, type ExecutionHandle, type InteractionToolOptions, type McpConnection, type McpServerConfig, type McpToolHookContext, type ModelUsage, type OAuthRefreshHookContext, type OpenAIParams, type OpenRouterParams, type Preset, type PromptDocumentPart, type PromptImagePart, type PromptPart, type PromptTextPart, type Provider, type ProviderCapabilities, type ReadStateEntry, type ReadStateMap, type RemoteStoreOptions, type RepeatGuardConfig, type RepeatGuardToolMatcher, type RetryConfig, type RunHookMap, type SandboxProvider, type Session, type SessionContentBlock, type SessionData, type SessionEndStatus, type SessionHookContext, type SessionMessage, type SessionRun, type SessionStore, type SessionTurn, type SkillConfig, type SkillResource, type SkillsConfig, type SpawnConfig, type SpawnHookContext, type SpawnToolOptions, type SpawnToolState, type StreamCallbacks, type StreamHookContext, type StreamOptions, type TaskEntry, type TaskExitInfo, type TaskHandle, type TaskStallInfo, type ThinkingLevel, type ToolCall, type ToolContext, type ToolDef, type ToolHookContext, type ToolMap, type ToolOutcome, type ToolResult, type ToolResultContent, type ToolResultDocumentContent, type ToolResultImageContent, type ToolResultTextContent, type ToolSpec, type TurnFinishReason, type TurnResult, type TurnUsage, type ValidationResult, flattenTurns, matchesContextExceeded, statsByModel, toolOutputBudgetByteLength, toolOutputByteLength, toolResultToText };

package/docs/EXECUTION_CONTEXT.md

@@ -0,0 +1,257 @@
+# Execution Contexts
+
+Zidane runs the agent's shell commands and file operations inside an **execution
+context**. You pick one with `--context`:
+
+| Context | Isolation | Use it when |
+|---------|-----------|-------------|
+| `process` (default) | None — runs on the host | You trust the prompt and want the fastest path with full host access. |
+| `docker` | Container | You want a disposable, isolated environment on your own machine. |
+| `e2b` | Remote micro-VM sandbox | You want isolation off-box, on E2B's hosted cloud or a self-hosted cluster. |
+
+```bash
+bun start --prompt "build a TODO API"                       # process (default)
+bun start --prompt "build a TODO API" --context docker      # docker
+bun start --prompt "build a TODO API" --context e2b         # e2b
+```
+
+The same flags work for the non-interactive CLI:
+
+```bash
+bun run headless "build a TODO API" --context e2b
+```
+
+Every context implements the same interface (spawn → exec / read / write / list
+files → destroy), so the agent behaves identically regardless of which one you
+choose. What changes is *where* the work runs, *how it's isolated*, and a few
+context-specific flags.
+
+## Flags at a glance
+
+| Flag | `process` | `docker` | `e2b` | Meaning |
+|------|:---------:|:--------:|:-----:|---------|
+| `--context <name>` | ✓ | ✓ | ✓ | Select the context (`process` \| `docker` \| `e2b`). |
+| `--cwd <dir>` | ✓ | ✓ | ✓ | Working directory for the agent's commands. |
+| `--env KEY=VALUE` | ✓ | ✓ | ✓ | Set an environment variable (repeatable). |
+| `--pass-env VARNAME` | ✓ | ✓ | ✓ | Forward a host env var into the context by name (repeatable). |
+| `--image <name>` | — | ✓ | — | Docker image to run. |
+| `--pregame <file>` | warns | warns | ✓ | Setup script to run before prompting. |
+| `--sandbox <id>` | warns | warns | ✓ | Attach to an existing E2B sandbox. |
+
+"warns" means the flag is accepted but ignored with a warning when it doesn't
+apply to the selected context.
+
+---
+
+## The `e2b` context
+
+E2B gives the agent a fresh, isolated micro-VM in the cloud (or on a self-hosted
+E2B cluster). The sandbox is created when the run starts and destroyed when it
+ends.
+
+### Prerequisites
+
+Install the E2B SDK — it's an optional dependency that the provider imports
+lazily:
+
+```bash
+bun add e2b
+```
+
+Configure which E2B you talk to via environment variables:
+
+| Variable | Required | Purpose |
+|----------|:--------:|---------|
+| `E2B_API_KEY` | yes | Authenticates with E2B. |
+| `E2B_DOMAIN` | no | Point at a self-hosted / on-prem cluster instead of E2B's hosted API. |
+| `E2B_TEMPLATE` | no | Sandbox template to launch (defaults to `base`). |
+
+```bash
+export E2B_API_KEY=e2b_xxxxxxxxxxxxxxxx
+bun start --prompt "run the test suite" --context e2b
+```
+
+> **Self-hosted clusters:** the default `base` template does **not** exist on
+> self-hosted clusters. Set `E2B_TEMPLATE` to a template that actually exists
+> there. An invalid template still returns a sandbox id, but the sandbox never
+> finishes booting and every command then hangs until it times out.
+
+### Choosing a working directory
+
+By default the provider discovers the sandbox's home directory by running `pwd`
+inside it (rather than assuming `/home/user`, which doesn't exist on every
+template). To pin a specific directory, pass `--cwd`; the provider creates it
+with `mkdir -p` before the agent runs:
+
+```bash
+bun start --prompt "..." --context e2b --cwd /home/user/project
+```
+
+### Running a setup script before the agent starts
+
+Use `--pregame` to provision the sandbox — install packages, clone a repo, seed
+data — *before* the agent's first turn:
+
+```bash
+bun start --prompt "fix the failing tests" --context e2b --pregame setup.sh
+```
+
+Write the script with a shebang; its interpreter selects how it runs:
+
+```bash
+#!/bin/bash
+set -e
+apt-get update && apt-get install -y ripgrep
+pip install -r requirements.txt
+```
+
+Pregame behavior:
+
+- **E2B only** — ignored (with a warning) for `process` and `docker`.
+- The script is uploaded to `/tmp/<filename>` and executed in the resolved
+  `--cwd` with your configured environment.
+- It gets a generous **30-minute** timeout, so long `apt`/`pip` installs aren't
+  killed mid-run.
+- A **non-zero exit aborts the whole run** — if setup fails, the sandbox is torn
+  down and the agent never starts.
+
+### Connecting to an existing sandbox
+
+Pass `--sandbox <id>` to attach to a sandbox you already created instead of
+spinning up a fresh one:
+
+```bash
+bun start --prompt "add a feature" --context e2b --sandbox sbx-abc123def456
+```
+
+The ownership difference matters:
+
+- **Sandboxes Zidane creates** are owned by the run — they're killed on exit, and
+  also killed if the readiness probe or pregame setup fails.
+- **Sandboxes you connect to** with `--sandbox` are never killed by Zidane, even
+  on failure. You manage their lifecycle yourself.
+
+### What happens on spawn
+
+1. Create the sandbox (`Sandbox.create`) — or connect to it (`Sandbox.connect`)
+   if `--sandbox` was given.
+2. **Readiness probe:** poll a trivial command until the sandbox responds (up to
+   60s). You'll see `waiting for E2B sandbox to initialize` followed by
+   `E2B sandbox ready` on stderr. On timeout, an owned sandbox is killed.
+3. Resolve the working directory (`mkdir -p` your `--cwd`, or discover via `pwd`).
+4. Run the pregame script, if any.
+5. Hand control to the agent.
+
+Your configured environment (`--env` / `--pass-env`) is re-sent on **every**
+command, so a warm or pre-provisioned sandbox never loses it.
+
+---
+
+## The `docker` context
+
+Docker runs the agent inside a container on your own machine — isolated, but
+local and offline-friendly.
+
+### Prerequisites
+
+- A running Docker daemon.
+- The `dockerode` library (an optional dependency, imported lazily):
+  ```bash
+  bun add dockerode
+  ```
+
+### Basic usage
+
+```bash
+bun start --prompt "build the project" --context docker
+```
+
+This launches the default image (`oven/bun:latest`) with the working directory
+defaulting to `/workspace`.
+
+### Choosing an image
+
+Use `--image` to run any Docker image. It's pulled automatically if it isn't
+already present locally:
+
+```bash
+bun start --prompt "run pytest" --context docker --image python:3.12
+bun start --prompt "build with Node" --context docker --image node:22 --cwd /app
+```
+
+### Environment variables
+
+`--env` and `--pass-env` work the same as the other contexts:
+
+```bash
+bun start --prompt "..." --context docker \
+  --env NODE_ENV=production \
+  --pass-env HOME
+```
+
+### Lifecycle
+
+The container runs `sleep infinity` and stays alive for the duration of the run;
+each agent command is executed inside it. When the run ends, the container is
+stopped and removed.
+
+> Advanced container options — bind mounts, port mappings, a specific run user,
+> a custom network, resource limits — are available through the programmatic
+> `SpawnConfig` API (`createDockerContext`), not through `bun start` flags. The
+> CLI exposes `--image`, `--cwd`, `--env`, and `--pass-env`.
+
+---
+
+## The `process` context (default)
+
+The default context runs commands directly on the host via child processes — no
+container, no VM, no isolation. It's the fastest path and gives the agent full
+access to your filesystem and network. Use it when you trust the prompt.
+
+```bash
+bun start --prompt "summarize the README"                 # uses process
+bun run headless "fix the lint errors" --cwd /tmp/project
+```
+
+Applicable flags: `--cwd` (defaults to the current directory), `--env`, and
+`--pass-env`. The `--image`, `--pregame`, and `--sandbox` flags don't apply.
+
+Because there's no isolation, the agent's commands can read and modify anything
+your own shell can. Prefer `docker` or `e2b` when you don't fully trust what the
+agent might run.
+
+---
+
+## Programmatic use
+
+The CLI flags map onto context factories you can call directly:
+
+```ts
+import { createProcessContext, createSandboxContext } from 'zidane/contexts'
+import { createDockerContext } from 'zidane/contexts/docker'
+import { createE2BProvider } from 'zidane/contexts/e2b'
+
+// process
+const proc = createProcessContext({ cwd: '/tmp/work', env: { CI: '1' } })
+
+// docker
+const docker = createDockerContext({ image: 'python:3.12', cwd: '/app' })
+
+// e2b
+const e2b = createSandboxContext(createE2BProvider({
+  cwd: '/home/user/project',
+  env: { NODE_ENV: 'development' },
+  pregame: { name: 'setup.sh', content: '#!/bin/bash\nnpm install\n' },
+}))
+```
+
+The Docker factory accepts the full advanced `SpawnConfig` (mounts, ports, user,
+network, labels, resource limits) that the CLI doesn't surface.
+
+---
+
+## See also
+
+- [HEADLESS.md](HEADLESS.md) — the non-interactive CLI contract.
+- [ARCHITECTURE.md](ARCHITECTURE.md) — agent lifecycle, context teardown
+  ordering, and background-task semantics.

package/docs/RUN_IN_BACKGROUND.md

@@ -230,6 +230,14 @@ The single biggest UX win over polling. When a background task exits, the framew
 - **Drain at run start**: `agent.run()`'s loop checks the queue early (before building the first turn's wire messages) and prepends `<task-notification>` blocks to the leading user-turn content.
 - **Latch via `task.notified`**: when the model already read the task's output file OR killed it via `shell_kill`, the latch flips and the notification is suppressed. Prevents the "task exited, model already killed it, framework still pushes a notification" double-signal that Claude Code's bug stream documents.
 
+### Auto-wake (host-driven delivery)
+
+The drain above is **passive** — it fires at the start of the next `run()`, which in interactive use means "whenever the user happens to type". Without help from the host, a task that exits while the agent is idle would never reach the model at all (the model ended its turn on the promise that "the notification IS the wake-up"). Two pieces close that gap:
+
+- **`agent.hasPendingTaskNotifications`** (framework): `true` while at least one un-suppressed exit is queued. The host's wake signal.
+- **Prompt-less wake runs** (framework): `agent.run({ prompt: '' })` is legal when notifications are pending, even though the session's trailing turn is a completed assistant message — the run-start drain seeds a user turn carrying ONLY the `<task-notification>` block(s). With nothing pending, the usual `cannot resume without prompt` guard still applies.
+- **TUI wiring** (host): the `background:exit` hook triggers a drain-only run when the agent is idle; the post-run follow-up drain (`drainFollowUps` in `app.tsx`) re-checks after every run so exits that landed *mid-run* are delivered as soon as the run ends. Wake runs skip the user-prompt echo (the live exit banner already painted) and are suppressed after an esc/abort until the user's next prompt — a run silently restarting itself after the user said "stop" would override their intent.
+
 ### Wire format
 
 A `<task-notification>` block prepended to the next user-turn content:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zidane",
-  "version": "5.10.13",
+  "version": "5.11.0",
   "description": "an agent that goes straight to the goal",
   "type": "module",
   "private": false,
@@ -17,92 +17,120 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
     },
     "./types": {
       "types": "./dist/types.d.ts",
-      "import": "./dist/types.js"
+      "import": "./dist/types.js",
+      "default": "./dist/types.js"
     },
     "./output": {
       "types": "./dist/output.d.ts",
-      "import": "./dist/output.js"
+      "import": "./dist/output.js",
+      "default": "./dist/output.js"
     },
     "./output/terminal": {
       "types": "./dist/output/terminal.d.ts",
-      "import": "./dist/output/terminal.js"
+      "import": "./dist/output/terminal.js",
+      "default": "./dist/output/terminal.js"
     },
     "./output/stream-json": {
       "types": "./dist/output/stream-json.d.ts",
-      "import": "./dist/output/stream-json.js"
+      "import": "./dist/output/stream-json.js",
+      "default": "./dist/output/stream-json.js"
     },
     "./providers": {
       "types": "./dist/providers.d.ts",
-      "import": "./dist/providers.js"
+      "import": "./dist/providers.js",
+      "default": "./dist/providers.js"
     },
     "./tools": {
       "types": "./dist/tools.d.ts",
-      "import": "./dist/tools.js"
+      "import": "./dist/tools.js",
+      "default": "./dist/tools.js"
     },
     "./tools/web-search": {
       "types": "./dist/tools/web-search.d.ts",
-      "import": "./dist/tools/web-search.js"
+      "import": "./dist/tools/web-search.js",
+      "default": "./dist/tools/web-search.js"
     },
     "./tools/fetch-url": {
       "types": "./dist/tools/fetch-url.d.ts",
-      "import": "./dist/tools/fetch-url.js"
+      "import": "./dist/tools/fetch-url.js",
+      "default": "./dist/tools/fetch-url.js"
     },
     "./presets": {
       "types": "./dist/presets.d.ts",
-      "import": "./dist/presets.js"
+      "import": "./dist/presets.js",
+      "default": "./dist/presets.js"
     },
     "./contexts": {
       "types": "./dist/contexts.d.ts",
-      "import": "./dist/contexts.js"
+      "import": "./dist/contexts.js",
+      "default": "./dist/contexts.js"
     },
     "./contexts/docker": {
       "types": "./dist/contexts/docker.d.ts",
-      "import": "./dist/contexts/docker.js"
+      "import": "./dist/contexts/docker.js",
+      "default": "./dist/contexts/docker.js"
+    },
+    "./contexts/e2b": {
+      "types": "./dist/contexts/e2b.d.ts",
+      "import": "./dist/contexts/e2b.js",
+      "default": "./dist/contexts/e2b.js"
     },
     "./mcp": {
       "types": "./dist/mcp.d.ts",
-      "import": "./dist/mcp.js"
+      "import": "./dist/mcp.js",
+      "default": "./dist/mcp.js"
     },
     "./session": {
       "types": "./dist/session.d.ts",
-      "import": "./dist/session.js"
+      "import": "./dist/session.js",
+      "default": "./dist/session.js"
     },
     "./session/sqlite": {
       "types": "./dist/session/sqlite.d.ts",
-      "import": "./dist/session/sqlite.js"
+      "import": "./dist/session/sqlite.js",
+      "default": "./dist/session/sqlite.js"
     },
     "./skills": {
       "types": "./dist/skills.d.ts",
-      "import": "./dist/skills.js"
+      "import": "./dist/skills.js",
+      "default": "./dist/skills.js"
     },
     "./restate": {
       "types": "./dist/restate.d.ts",
-      "import": "./dist/restate.js"
+      "import": "./dist/restate.js",
+      "default": "./dist/restate.js"
     },
     "./chat": {
       "types": "./dist/chat.d.ts",
-      "import": "./dist/chat.js"
+      "import": "./dist/chat.js",
+      "default": "./dist/chat.js"
     },
     "./chat/pure": {
       "types": "./dist/chat/pure.d.ts",
-      "import": "./dist/chat/pure.js"
+      "import": "./dist/chat/pure.js",
+      "default": "./dist/chat/pure.js"
     },
     "./tui": {
       "types": "./dist/tui.d.ts",
-      "import": "./dist/tui.js"
+      "import": "./dist/tui.js",
+      "default": "./dist/tui.js"
     },
     "./headless": {
       "types": "./dist/headless.d.ts",
-      "import": "./dist/headless.js"
+      "import": "./dist/headless.js",
+      "default": "./dist/headless.js"
     },
     "./eval": {
       "types": "./dist/eval.d.ts",
-      "import": "./dist/eval.js"
-    }
+      "import": "./dist/eval.js",
+      "default": "./dist/eval.js"
+    },
+    "./package.json": "./package.json"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -157,6 +185,7 @@
     "@opentui/react": "^0.2.15",
     "@restatedev/restate-sdk": "^1.11.0",
     "dockerode": "^5.0.0",
+    "e2b": ">=1.0.0",
     "react": "^19.0.0",
     "zod": ">=4.0.0"
   },
@@ -179,6 +208,9 @@
     "dockerode": {
       "optional": true
     },
+    "e2b": {
+      "optional": true
+    },
     "react": {
       "optional": true
     },
@@ -201,6 +233,7 @@
     "@types/react": "^19.2.0",
     "bumpp": "^11.0.1",
     "dockerode": "^5.0.0",
+    "e2b": "^2.27.1",
     "eslint": "^10.2.1",
     "jiti": "^2.6.1",
     "react": "^19.2.0",